From e82c1e68817ffad24164018d37b7b3822422b281 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Fri, 16 Jun 2023 13:47:25 +0200
Subject: [PATCH 001/116] wip integration integriaIMS pandora_enterprise#11471

---
 .../godmode/users/user_management.php         |  56 +++
 pandora_console/include/functions_html.php    |   8 +-
 pandora_console/include/functions_menu.php    |   8 +-
 pandora_console/include/lib/ITSM/ITSM.php     | 174 +++++++
 pandora_console/include/lib/ITSM/Manager.php  | 470 ++++++++++++++++++
 pandora_console/operation/ITSM/itsm.php       |  73 +++
 pandora_console/operation/menu.php            |  31 ++
 .../views/ITSM/ITSMDashboardView.php          |  65 +++
 .../views/ITSM/ITSMTicketEditView.php         | 294 +++++++++++
 .../views/ITSM/ITSMTicketListView.php         | 131 +++++
 10 files changed, 1304 insertions(+), 6 deletions(-)
 create mode 100644 pandora_console/include/lib/ITSM/ITSM.php
 create mode 100644 pandora_console/include/lib/ITSM/Manager.php
 create mode 100644 pandora_console/operation/ITSM/itsm.php
 create mode 100644 pandora_console/views/ITSM/ITSMDashboardView.php
 create mode 100644 pandora_console/views/ITSM/ITSMTicketEditView.php
 create mode 100644 pandora_console/views/ITSM/ITSMTicketListView.php

diff --git a/pandora_console/godmode/users/user_management.php b/pandora_console/godmode/users/user_management.php
index b03c79f374..21a05b6d02 100644
--- a/pandora_console/godmode/users/user_management.php
+++ b/pandora_console/godmode/users/user_management.php
@@ -762,6 +762,62 @@ $userManagementTable->data['fields_addSettings'][1] .= html_print_div(
     true
 );
 
+
+if ($config['integria_enabled'] && $config['integria_user_level_conf']) {
+    // Integria IMS user remote login.
+    $table_remote = new StdClass();
+    $table_remote->data = [];
+    $table_remote->width = '100%';
+    $table_remote->id = 'integria-remote-setup';
+    $table_remote->class = 'white_box';
+    $table_remote->size['name'] = '30%';
+    $table_remote->style['name'] = 'font-weight: bold';
+
+    // Integria IMS user level authentication.
+    // Title.
+    $row = [];
+    $row['control'] = '<p class="edit_user_labels">'.__('Integria user configuration').': </p>';
+    $table_remote->data['integria_user_level_conf'] = $row;
+
+    // Integria IMS user.
+    $row = [];
+    $row['name'] = __('User');
+    $row['control'] = html_print_input_text('integria_user_level_user', $user_info['integria_user_level_user'], '', 30, 100, true);
+    $table_remote->data['integria_user_level_user'] = $row;
+
+    // Integria IMS pass.
+    $row = [];
+    $row['name'] = __('Password');
+    $row['control'] = html_print_input_password('integria_user_level_pass', io_output_password($user_info['integria_user_level_pass']), '', 30, 100, true);
+    $table_remote->data['integria_user_level_pass'] = $row;
+
+    // Test.
+    $integria_host = db_get_value('value', 'tconfig', 'token', 'integria_hostname');
+    $integria_api_pass = db_get_value('value', 'tconfig', 'token', 'integria_api_pass');
+
+    $row = [];
+    $row['name'] = __('Test');
+    $row['control'] = html_print_button(
+        __('Start'),
+        'test-integria',
+        false,
+        'integria_connection_test(&quot;'.$integria_host.'&quot;,'.$integria_api_pass.')',
+        [ 'icon' => 'next' ],
+        true
+    );
+    $row['control'] .= '&nbsp;<span id="test-integria-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
+    $row['control'] .= '&nbsp;<span id="test-integria-success" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
+    $row['control'] .= '&nbsp;<span id="test-integria-failure" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
+    $row['control'] .= '<span id="test-integria-message" class="invisible"></span>';
+    $table_remote->data['integria_test'] = $row;
+
+    hd('Entra');
+    // echo '<div class="integria_user_conf">';
+    $userManagementTable->colspan['pandoraitsm'] = 2;
+    $userManagementTable->data['pandoraitsm'] = html_print_table($table_remote, true);
+    // echo '</div>';
+}
+
 if (isset($CodeQRTable) === true || isset($apiTokenContent) === true) {
     // QR Code and API Token advice.
     html_print_div(
diff --git a/pandora_console/include/functions_html.php b/pandora_console/include/functions_html.php
index f3a23ce1e8..547a77d64d 100644
--- a/pandora_console/include/functions_html.php
+++ b/pandora_console/include/functions_html.php
@@ -6125,8 +6125,6 @@ function html_print_autocomplete_users_from_integria(
         $attrs['class'] = $class;
     }
 
-    ui_print_help_tip(__('Type at least two characters to search the user.'), false);
-
     html_print_input_text_extended(
         $name,
         $default,
@@ -6138,7 +6136,7 @@ function html_print_autocomplete_users_from_integria(
         '',
         $attrs
     );
-    html_print_input_hidden($name.'_hidden', $id_agent_module);
+    html_print_input_hidden($name.'_hidden', $default);
 
     $javascript_ajax_page = ui_get_full_url('ajax.php', false, false, false, false);
     ?>
@@ -6158,9 +6156,9 @@ function html_print_autocomplete_users_from_integria(
                             var term = request.term; //Word to search
                             
                             data_params = {
-                                page: "include/ajax/integria_incidents.ajax",
+                                page: "operation/ITSM/itsm",
                                 search_term: term,
-                                get_users: 1,
+                                method: "getUserSelect",
                             };
                             
                             jQuery.ajax ({
diff --git a/pandora_console/include/functions_menu.php b/pandora_console/include/functions_menu.php
index 35ee78db39..7d3d229f7b 100644
--- a/pandora_console/include/functions_menu.php
+++ b/pandora_console/include/functions_menu.php
@@ -145,6 +145,12 @@ function menu_print_menu(&$menu)
         if (empty($new_msg) === false) {
             $sec2 = 'operation/messages/message_edit&new_msg='.$new_msg;
         }
+    } else if ($sec2 === 'operation/ITSM/itsm') {
+        $sec2 = (string) get_parameter('sec2');
+        $operation = (string) get_parameter('operation', '');
+        if (empty($operation) === false) {
+            $sec2 = $sec2.'&operation='.$operation;
+        }
     } else {
         $sec2 = (string) get_parameter('sec2');
     }
@@ -285,7 +291,7 @@ function menu_print_menu(&$menu)
                 }
             }
 
-            // Set class.
+            // Set class.;
             if (($sec2 == $subsec2 || $allsec2 == $subsec2
                 || $selected_submenu2) && isset($sub[$subsec2]['options'])
                 && (get_parameter_get($sub[$subsec2]['options']['name']) == $sub[$subsec2]['options']['value'])
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
new file mode 100644
index 0000000000..fddd63650c
--- /dev/null
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -0,0 +1,174 @@
+<?php
+
+namespace PandoraFMS\ITSM;
+
+/**
+ * Dashboard manager.
+ */
+class ITSM
+{
+
+    /**
+     * User level conf.
+     *
+     * @var boolean
+     */
+    private ?bool $userLevelConf;
+
+    /**
+     * User level conf.
+     *
+     * @var string
+     */
+    private string $url;
+
+    /**
+     * Bearer.
+     *
+     * @var string
+     */
+    private ?string $userBearer;
+
+
+    /**
+     * ITSM.
+     */
+    public function __construct()
+    {
+        global $config;
+        $user_info = \users_get_user_by_id($config['id_user']);
+
+        $this->userLevelConf = (bool) $config['integria_user_level_conf'];
+        $this->url = $config['integria_hostname'];
+
+        $this->userBearer = $config['integria_pass'];
+        if ($this->userLevelConf === true) {
+            $this->userBearer = $user_info['integria_user_level_pass'];
+        }
+
+    }
+
+
+    /**
+     * Call api ITSM.
+     *
+     * @param string      $action      Endpoint.
+     * @param array       $queryParams Params send get.
+     * @param array       $postFields  Params send post.
+     * @param mixed       $id          Specific id for path.
+     * @param string|null $method      Request method.
+     *
+     * @return array Array result.
+     * @throws \Exception On error.
+     */
+    public function callApi(
+        string $action,
+        ?array $queryParams=null,
+        ?array $postFields=null,
+        mixed $id=null,
+        ?string $method='POST'
+    ) {
+        $headers = [
+            'accept: application/json',
+            'Content-Type: application/json',
+            'Authorization: Bearer '.$this->userBearer,
+        ];
+
+        $path = $this->pathAction($action, $queryParams, $id);
+        $url = $this->url.$path;
+
+        $ch = curl_init();
+        curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
+        curl_setopt($ch, CURLOPT_URL, $url);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($postFields));
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_VERBOSE, true);
+        $result = curl_exec($ch);
+
+        $http_status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+
+        $result = json_decode($result, true);
+        if (json_last_error() !== JSON_ERROR_NONE) {
+            throw new \Exception(__('Invalid response'));
+        }
+
+        if ($http_status !== 200) {
+            throw new \Exception($result['error']);
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Convert path to endpoint ITSM.
+     *
+     * @param string     $action      EndPoint.
+     * @param array|null $queryParams Params to url.
+     * @param mixed      $id          Specific id for path.
+     *
+     * @return string Return path to Endpoint.
+     */
+    private function pathAction(string $action, ?array $queryParams=null, mixed $id=null): string
+    {
+        $path = '';
+        switch ($action) {
+            case 'listTickets':
+                $path = '/incidence/list';
+            break;
+
+            case 'listObjectTypes':
+                $path = '/incidencetype/list';
+            break;
+
+            case 'listGroups':
+                $path = '/group/list';
+            break;
+
+            case 'listResolutions':
+                $path = '/incidence/resolution/list';
+            break;
+
+            case 'listStatus':
+                $path = '/incidence/status/list';
+            break;
+
+            case 'listUsers':
+                $path = '/user/list';
+            break;
+
+            case 'createIncidence':
+                $path = '/incidence';
+            break;
+
+            case 'updateIncidence':
+                $path = '/incidence/'.$id;
+            break;
+
+            default:
+                // Not posible.
+            break;
+        }
+
+        if (empty($queryParams) === false) {
+            if (isset($queryParams['direction']) === true) {
+                $queryParams['sortDirection'] = $queryParams['direction'];
+                unset($queryParams['direction']);
+            }
+
+            if (isset($queryParams['field']) === true) {
+                $queryParams['sortField'] = $queryParams['field'];
+                unset($queryParams['field']);
+            }
+
+            $path .= '?';
+            $path .= http_build_query($queryParams);
+        }
+
+        return $path;
+    }
+
+
+}
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
new file mode 100644
index 0000000000..0fbe7bcd49
--- /dev/null
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -0,0 +1,470 @@
+<?php
+
+namespace PandoraFMS\ITSM;
+
+use PandoraFMS\View;
+use Throwable;
+
+/**
+ * Dashboard manager.
+ */
+class Manager
+{
+
+    /**
+     * Ajax controller.
+     *
+     * @var string
+     */
+    protected $ajaxController;
+
+    /**
+     * Allowed methods to be called using AJAX request.
+     *
+     * @var array
+     */
+    public $AJAXMethods = [
+        'getListTickets',
+        'getUserSelect',
+    ];
+
+    /**
+     * Url.
+     *
+     * @var string
+     */
+    protected $url;
+
+    /**
+     * Operation mode.
+     *
+     * @var string
+     */
+    protected $operation;
+
+
+    /**
+     * Constructor
+     *
+     * @param string $page For ajax controller.
+     */
+    public function __construct(string $page='operation/ITSM/itsm')
+    {
+        global $config;
+
+        check_login();
+        if (check_acl($config['id_user'], 0, 'RR') === 0) {
+            include 'general/noaccess.php';
+            return;
+        }
+
+        $this->operation = \get_parameter('operation', 0);
+
+        // Urls.
+        $this->url = \ui_get_full_url(
+            'index.php?sec=reporting&sec2=operation/dashboard/dashboard'
+        );
+
+        $this->ajaxController = $page;
+    }
+
+
+    /**
+     * Checks if target method is available to be called using AJAX.
+     *
+     * @param string $method Target method.
+     *
+     * @return boolean True allowed, false not.
+     */
+    public function ajaxMethod(string $method): bool
+    {
+        return in_array($method, $this->AJAXMethods);
+    }
+
+
+    /**
+     * Prints error.
+     *
+     * @param string $msg Message.
+     *
+     * @return void
+     */
+    public function error(string $msg)
+    {
+        if ((bool) \is_ajax() === true) {
+            echo json_encode(['error' => $msg]);
+        } else {
+            \ui_print_error_message($msg);
+        }
+    }
+
+
+    /**
+     * Init manager ITSM.
+     *
+     * @return void
+     */
+    public function run()
+    {
+        switch ($this->operation) {
+            case 'list':
+                $this->showList();
+            break;
+
+            case 'edit':
+                $this->showEdit();
+            break;
+
+            case 'dashboard':
+            default:
+                $this->showDashboard();
+            break;
+        }
+    }
+
+
+    /**
+     * Draw list tickets.
+     *
+     * @return void
+     */
+    private function showList()
+    {
+        View::render(
+            'ITSM/ITSMTicketListView',
+            [
+                'ajaxController' => $this->ajaxController,
+                'urlAjax'        => \ui_get_full_url('ajax.php'),
+            ]
+        );
+    }
+
+
+    /**
+     * Draw list tickets.
+     *
+     * @return void
+     */
+    private function showEdit()
+    {
+        $create_incidence = (bool) \get_parameter('create_incidence', 0);
+        $update_incidence = (bool) \get_parameter('update_incidence', 0);
+        $idIncidence      = \get_parameter('idIncidence', 0);
+        $incidence = [
+            'title'           => \get_parameter('title', ''),
+            'idIncidenceType' => \get_parameter('idIncidenceType', 0),
+            'idGroup'         => \get_parameter('idGroup', 0),
+            'priority'        => 'LOW',
+        // \get_parameter('priority', 'LOW'),
+            'status'          => \get_parameter('status', 'NEW'),
+            'idCreator'       => \get_parameter('idCreator', ''),
+            'owner'           => \get_parameter('owner_hidden', ''),
+            'resolution'      => \get_parameter('resolution', null),
+            'description'     => \get_parameter('description', ''),
+        ];
+
+        $error = '';
+        $ITSM = new ITSM();
+        try {
+            $objectTypes = $this->getObjectypes($ITSM);
+            $groups = $this->getGroups($ITSM);
+            // $priorities = $ITSM->callApi('listPriorities');
+            $resolutions = $this->getResolutions($ITSM);
+            $status = $this->getStatus($ITSM);
+        } catch (\Throwable $th) {
+            $error = $th->getMessage();
+        }
+
+        $successfullyMsg = '';
+        try {
+            if ($create_incidence === true) {
+                $incidence = $this->createIncidence($ITSM, $incidence);
+                $idIncidence = $incidence['idIncidence'];
+                $successfullyMsg = __('Successfully create ticket');
+            }
+
+            if ($update_incidence === true) {
+                $incidence = $this->updateIncidence($ITSM, $incidence, $idIncidence);
+                $successfullyMsg = __('Successfully update ticket');
+            }
+        } catch (\Throwable $th) {
+            $error = $th->getMessage();
+        }
+
+        View::render(
+            'ITSM/ITSMTicketEditView',
+            [
+                'ajaxController'  => $this->ajaxController,
+                'urlAjax'         => \ui_get_full_url('ajax.php'),
+                'objectTypes'     => $objectTypes,
+                'groups'          => $groups,
+                'priorities'      => [],
+                'resolutions'     => $resolutions,
+                'status'          => $status,
+                'error'           => $error,
+                'incidence'       => $incidence,
+                'idIncidence'     => $idIncidence,
+                'successfullyMsg' => $successfullyMsg,
+            ]
+        );
+    }
+
+
+    /**
+     * Get Incidences types.
+     *
+     * @param ITSM $ITSM Object for callApi.
+     *
+     * @return array Return mode select.
+     */
+    private function getObjectypes(ITSM $ITSM): array
+    {
+        $listObjectTypes = $ITSM->callApi('listObjectTypes');
+        $result = [];
+        foreach ($listObjectTypes['data'] as $objectType) {
+            $result[$objectType['idIncidenceType']] = $objectType['name'];
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Get Groups.
+     *
+     * @param ITSM $ITSM Object for callApi.
+     *
+     * @return array Return mode select.
+     */
+    private function getGroups(ITSM $ITSM): array
+    {
+        $listGroups = $ITSM->callApi('listGroups');
+        $result = [];
+        foreach ($listGroups['data'] as $group) {
+            if ($group['idGroup'] > 1) {
+                $result[$group['idGroup']] = $group['name'];
+            }
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Get Resolutions.
+     *
+     * @param ITSM $ITSM Object for callApi.
+     *
+     * @return array Return mode select.
+     */
+    private function getResolutions(ITSM $ITSM): array
+    {
+        $listResolutions = $ITSM->callApi('listResolutions');
+        $result = [];
+        foreach ($listResolutions['data'] as $resolution) {
+            $result[$resolution['idIncidenceResolution']] = $resolution['name'];
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Create incidence
+     *
+     * @param ITSM  $ITSM      Object for callApi.
+     * @param array $incidence Params insert.
+     *
+     * @return array
+     */
+    private function createIncidence(ITSM $ITSM, array $incidence): array
+    {
+        $incidence = $ITSM->callApi('createIncidence', null, $incidence);
+        return $incidence;
+    }
+
+
+    /**
+     * Update incidence
+     *
+     * @param ITSM    $ITSM        Object for callApi.
+     * @param array   $incidence   Params insert.
+     * @param integer $idIncidence Id incidence.
+     *
+     * @return array
+     */
+    private function updateIncidence(ITSM $ITSM, array $incidence, int $idIncidence): array
+    {
+        $incidence = $ITSM->callApi(
+            'updateIncidence',
+            null,
+            $incidence,
+            $idIncidence,
+            'PUT'
+        );
+        return $incidence;
+    }
+
+
+    /**
+     * Get Status.
+     *
+     * @param ITSM $ITSM Object for callApi.
+     *
+     * @return array Return mode select.
+     */
+    private function getStatus(ITSM $ITSM): array
+    {
+        $listStatus = $ITSM->callApi('listStatus');
+        $result = [];
+        foreach ($listStatus['data'] as $status) {
+            $result[$status['idIncidenceStatus']] = $status['name'];
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Draw list dashboards.
+     *
+     * @return void
+     */
+    private function showDashboard()
+    {
+        global $config;
+
+        View::render(
+            'ITSM/ITSMDashboardView',
+            [
+                'ajaxController' => $this->ajaxController,
+                'urlAjax'        => \ui_get_full_url('ajax.php'),
+            ]
+        );
+    }
+
+
+    /**
+     * Get list tickets and prepare data for datatable.
+     *
+     * @return void
+     */
+    public function getListTickets()
+    {
+        global $config;
+
+        // Init data.
+        $data = [];
+        // Catch post parameters.
+        $start = get_parameter('start', 0);
+        $length = get_parameter('length', $config['block_size']);
+        $order = get_datatable_order(true);
+        $filters = get_parameter('filter', []);
+
+        try {
+            ob_start();
+            $queryParams = array_merge(
+                [
+                    'page'     => $start,
+                    'sizePage' => $length,
+                ],
+                $order
+            );
+
+            $ITSM = new ITSM();
+            $result = $ITSM->callApi(
+                'listTickets',
+                $queryParams,
+                $filters
+            );
+
+            $data = array_reduce(
+                $result['data'],
+                function ($carry, $item) {
+                    global $config;
+                    // Transforms array of arrays $data into an array
+                    // of objects, making a post-process of certain fields.
+                    $tmp = (object) $item;
+                    $new = (object) [];
+                    $new->id = $tmp->idIncidence;
+                    $new->title = $tmp->title;
+                    $new->groupCompany = $tmp->idGroup.'/'.$tmp->idCompany;
+                    $new->statusResolution = $tmp->status.'/'.$tmp->resolution;
+                    $new->priority = $tmp->priority;
+                    $new->updated = $tmp->updateDate;
+                    $new->started = $tmp->startDate;
+                    $new->creator = $tmp->idCreator;
+                    $new->owner = $tmp->owner;
+
+                    $carry[] = $new;
+                    return $carry;
+                }
+            );
+
+            echo json_encode(
+                [
+                    'data'            => $data,
+                    'recordsTotal'    => $result['paginationData']['totalRegisters'],
+                    'recordsFiltered' => $result['paginationData']['totalRegisters'],
+                ]
+            );
+            // Capture output.
+            $response = ob_get_clean();
+        } catch (Throwable $e) {
+            echo json_encode(['error' => $e->getMessage()]);
+            exit;
+        }
+
+        // If not valid, show error with issue.
+        json_decode($response);
+        if (json_last_error() === JSON_ERROR_NONE) {
+            // If valid dump.
+            echo $response;
+        } else {
+            echo json_encode(
+                ['error' => $response]
+            );
+        }
+
+        exit;
+    }
+
+
+    /**
+     * Get list tickets and prepare data for datatable.
+     *
+     * @return void
+     */
+    public function getUserSelect()
+    {
+        global $config;
+
+        try {
+            $ITSM = new ITSM();
+            $result = $ITSM->callApi(
+                'listUsers',
+                [
+                    'page'     => 0,
+                    'sizePage' => 0,
+                ],
+                ['freeSearch' => \get_parameter('search_term', '')]
+            );
+
+            $response = array_reduce(
+                $result['data'],
+                function ($carry, $user) {
+                    $carry[$user['idUser']] = $user['fullName'];
+                    return $carry;
+                }
+            );
+        } catch (Throwable $e) {
+            echo json_encode(['error' => $e->getMessage()]);
+            exit;
+        }
+
+        echo json_encode($response);
+        exit;
+    }
+
+
+}
diff --git a/pandora_console/operation/ITSM/itsm.php b/pandora_console/operation/ITSM/itsm.php
new file mode 100644
index 0000000000..32aedf1781
--- /dev/null
+++ b/pandora_console/operation/ITSM/itsm.php
@@ -0,0 +1,73 @@
+<?php
+/**
+ * ITSM.
+ *
+ * @category   ITSM
+ * @package    Pandora FMS
+ * @subpackage Community
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ *   |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ *  |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Artica Soluciones Tecnologicas
+ * Please see http://pandorafms.org for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+// Begin.
+global $config;
+
+require $config['homedir'].'/vendor/autoload.php';
+
+use PandoraFMS\ITSM\Manager;
+
+if ((bool) is_metaconsole() === true) {
+    ui_require_css_file('meta_dashboards');
+}
+
+$ajaxPage = 'operation/ITSM/itsm';
+
+// Control call flow.
+try {
+    // User access and validation is being processed on class constructor.
+    $cs = new Manager($ajaxPage);
+} catch (Exception $e) {
+    if (is_ajax() === true) {
+        echo json_encode(['error' => '[ITSM]'.$e->getMessage() ]);
+    } else {
+        echo '[ITSM]'.$e->getMessage();
+    }
+
+    // Stop this execution, but continue 'globally'.
+    return;
+}
+
+// AJAX controller.
+if (is_ajax() === true) {
+    $method = get_parameter('method');
+
+    if (method_exists($cs, $method) === true) {
+        if ($cs->ajaxMethod($method) === true) {
+            $cs->{$method}();
+        } else {
+            $cs->error('Unavailable method.');
+        }
+    } else {
+        $cs->error('Method not found. ['.$method.']');
+    }
+} else {
+    // Run.
+    $cs->run();
+}
diff --git a/pandora_console/operation/menu.php b/pandora_console/operation/menu.php
index 96462b0eed..ad78de259b 100644
--- a/pandora_console/operation/menu.php
+++ b/pandora_console/operation/menu.php
@@ -687,6 +687,37 @@ if ($access_console_node === true) {
 
 $menu_operation['workspace']['sub'] = $sub;
 
+if ($access_console_node === true) {
+    // ITSM.
+    $menu_operation['ITSM']['text'] = __('ITSM');
+    $menu_operation['ITSM']['sec2'] = 'operation/ITSM/itsm';
+    $menu_operation['ITSM']['id'] = 'oper-itsm';
+
+    $sub = [];
+    // ITSM Tickets.
+    $sub['manageTickets']['text'] = __('Tickets');
+    $sub['manageTickets']['id'] = 'itsm-ticket';
+    $sub['manageTickets']['refr'] = 0;
+    $sub['manageTickets']['type'] = 'direct';
+    $sub['manageTickets']['subtype'] = 'nolink';
+
+    $sub2 = [];
+    $sub2['operation/ITSM/itsm&operation=list']['text'] = __('List');
+    $sub2['operation/ITSM/itsm&operation=list']['id'] = 'itsm-ticket-list';
+
+    $sub2['operation/ITSM/itsm&operation=edit']['text'] = __('Edit');
+    $sub2['operation/ITSM/itsm&operation=edit']['id'] = 'itsm-ticket-edit';
+
+    $sub['manageTickets']['sub2'] = $sub2;
+
+    // ITSM Dashboard.
+    $sub['operation/ITSM/itsm']['text'] = __('Dashboard');
+    $sub['operation/ITSM/itsm']['id'] = 'itsm-dashboard';
+    $sub['operation/ITSM/itsm']['refr'] = 0;
+
+    $menu_operation['ITSM']['sub'] = $sub;
+}
+
 if ($access_console_node === true) {
     // Rest of options, all with AR privilege (or should events be with incidents?)
     // ~ if (check_acl ($config['id_user'], 0, "AR")) {
diff --git a/pandora_console/views/ITSM/ITSMDashboardView.php b/pandora_console/views/ITSM/ITSMDashboardView.php
new file mode 100644
index 0000000000..229267496b
--- /dev/null
+++ b/pandora_console/views/ITSM/ITSMDashboardView.php
@@ -0,0 +1,65 @@
+<?php
+/**
+ * ITSM View dashboard
+ *
+ * @category   Console Class
+ * @package    Pandora FMS
+ * @subpackage ITSM
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ *   |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ *  |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Artica Soluciones Tecnologicas
+ * Please see http://pandorafms.org for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+// Includes.
+require_once $config['homedir'].'/include/class/HTML.class.php';
+
+global $config;
+
+ui_require_css_file('integriaims');
+
+// Header tabs.
+ui_print_standard_header(
+    __('ITSM Dashboard'),
+    '',
+    false,
+    'integria_tab',
+    false,
+    [],
+    [
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',
+            'label' => __('ITSM'),
+        ],
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',
+            'label' => __('ITSM Dashboard'),
+        ],
+    ]
+);
+
+if (empty($incidences) === true) {
+    ui_print_info_message(
+        [
+            'no_close' => true,
+            'message'  => __('Wip...........................'),
+        ]
+    );
+} else {
+    echo 'WIP...';
+}
diff --git a/pandora_console/views/ITSM/ITSMTicketEditView.php b/pandora_console/views/ITSM/ITSMTicketEditView.php
new file mode 100644
index 0000000000..b1f0330fe6
--- /dev/null
+++ b/pandora_console/views/ITSM/ITSMTicketEditView.php
@@ -0,0 +1,294 @@
+<?php
+/**
+ * ITSM View edition tickets
+ *
+ * @category   Console Class
+ * @package    Pandora FMS
+ * @subpackage ITSM
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ *   |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ *  |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Artica Soluciones Tecnologicas
+ * Please see http://pandorafms.org for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+// Includes.
+require_once $config['homedir'].'/include/class/HTML.class.php';
+
+global $config;
+
+// Header tabs.
+ui_print_standard_header(
+    __('ITSM Edit'),
+    '',
+    false,
+    'integria_tab',
+    false,
+    [],
+    [
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',
+            'label' => __('ITSM'),
+        ],
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm&operation=list',
+            'label' => __('ITSM Tickets'),
+        ],
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm&operation=edit',
+            'label' => __('Edit'),
+        ],
+    ]
+);
+
+
+if (empty($error) === false) {
+    ui_print_error_message($error);
+}
+
+if (empty($successfullyMsg) === false) {
+    ui_print_success_message($successfullyMsg);
+}
+
+// Main table.
+$table = new stdClass();
+$table->width = '100%';
+$table->id = 'edit-ticket-itms';
+$table->class = 'databox filter-table-adv';
+$table->head = [];
+$table->data = [];
+$table->size = [];
+$table->size = [];
+$table->colspan[0][0] = 2;
+$table->colspan[4][0] = 3;
+$table->colspan[6][0] = 3;
+
+$table->data[0][0] = html_print_label_input_block(
+    __('Title'),
+    html_print_input_text(
+        'title',
+        ($incidence['title'] ?? ''),
+        __('Name'),
+        30,
+        100,
+        true,
+        false,
+        true,
+        '',
+        'w100p'
+    )
+);
+
+$integria_logo = 'images/integria_logo_gray.png';
+if ($config['style'] === 'pandora_black' && !is_metaconsole()) {
+    $integria_logo = 'images/integria_logo.svg';
+}
+
+$table->data[0][2] = '<div style="max-width: 150px; float:right;">'.html_print_image(
+    $integria_logo,
+    true,
+    ['style' => 'width: -webkit-fill-available;'],
+    false
+).'</div>';
+$table->data[1][0] = html_print_label_input_block(
+    __('Type'),
+    html_print_select(
+        $objectTypes,
+        'idIncidenceType',
+        ($incidence['idIncidenceType'] ?? ''),
+        '',
+        __('Select'),
+        0,
+        true,
+        false,
+        true,
+        '',
+        false,
+        'width: 100%;'
+    )
+);
+
+$table->data[1][1] = html_print_label_input_block(
+    __('Group'),
+    html_print_select(
+        $groups,
+        'idGroup',
+        ($incidence['idGroup'] ?? ''),
+        '',
+        '',
+        0,
+        true,
+        false,
+        true,
+        '',
+        false,
+        'width: 100%;'
+    )
+);
+
+$table->data[1][2] = html_print_label_input_block(
+    __('Priority'),
+    html_print_select(
+        $priorities,
+        'priority',
+        ($incidence['priority'] ?? 0),
+        '',
+        '',
+        1,
+        true,
+        false,
+        true,
+        '',
+        false,
+        'width: 100%;'
+    )
+);
+
+$table->data[2][0] = html_print_label_input_block(
+    __('Status'),
+    html_print_select(
+        $status,
+        'status',
+        ($incidence['status'] ?? 0),
+        '',
+        '',
+        1,
+        true,
+        false,
+        true,
+        '',
+        false,
+        'width: 100%;'
+    )
+);
+
+$table->data[2][1] = html_print_label_input_block(
+    __('Creator').ui_print_help_tip(__('This field corresponds to the Integria IMS user specified in Integria IMS setup'), true),
+    html_print_input_text(
+        'idCreator',
+        $config['integria_user'],
+        '',
+        0,
+        100,
+        true,
+        true,
+        false,
+        '',
+        'w100p'
+    )
+);
+
+$table->data[2][2] = html_print_label_input_block(
+    __('Owner').ui_print_help_tip(__('Type at least two characters to search the user.'), true),
+    html_print_autocomplete_users_from_integria(
+        'owner',
+        ($incidence['owner'] ?? ''),
+        true,
+        0,
+        false,
+        false,
+        'w100p',
+    )
+);
+
+$table->data[3][0] = '<div id="incidence-resolution" class="invisible">'.html_print_label_input_block(
+    __('Resolution'),
+    html_print_select(
+        $resolutions,
+        'resolution',
+        ($incidence['resolution'] ?? 0),
+        '',
+        __('None'),
+        null,
+        true,
+        false,
+        true,
+        '',
+        false,
+        'width: 100%;'
+    ).'</div>'
+);
+
+$table->data[4][0] = html_print_label_input_block(
+    __('Description').$help_macros,
+    html_print_textarea(
+        'description',
+        3,
+        20,
+        ($incidence['description'] ?? ''),
+        '',
+        true
+    )
+);
+
+// $table->data[5][0] = html_print_label_input_block(
+// __('File name'),
+// html_print_input_file('userfile', true)
+// );
+//
+// $table->data[6][0] = html_print_label_input_block(
+// __('Attachment description'),
+// html_print_textarea(
+// 'file_description',
+// 3,
+// 20,
+// '',
+// '',
+// true
+// )
+// );
+// Print forms and stuff.
+echo '<form class="max_floating_element_size" id="create_integria_incident_form" name="create_integria_incident_form" method="POST" enctype="multipart/form-data">';
+html_print_table($table);
+$buttons = '';
+if (empty($idIncidence) === true) {
+    $buttons .= html_print_input_hidden('create_incidence', 1, true);
+    $buttons .= html_print_submit_button(
+        __('Create'),
+        'accion',
+        false,
+        [ 'icon' => 'next' ],
+        true
+    );
+} else {
+    $buttons .= html_print_input_hidden('update_incidence', 1, true);
+    $buttons .= html_print_input_hidden('idIncidence', $idIncidence, true);
+    $buttons .= html_print_submit_button(
+        __('Update'),
+        'accion',
+        false,
+        [ 'icon' => 'upd' ],
+        true
+    );
+}
+
+html_print_action_buttons($buttons);
+
+echo '</form>';
+?>
+
+<script type="text/javascript">
+    $(document).ready(function () {
+        $('#status').on('change', function() {
+            if ($(this).val() === 'CLOSED') {
+                $('#incidence-resolution').show();
+            } else {
+                $('#incidence-resolution').hide();
+            }
+        }).trigger('change');
+    });
+</script>
\ No newline at end of file
diff --git a/pandora_console/views/ITSM/ITSMTicketListView.php b/pandora_console/views/ITSM/ITSMTicketListView.php
new file mode 100644
index 0000000000..f7babace3b
--- /dev/null
+++ b/pandora_console/views/ITSM/ITSMTicketListView.php
@@ -0,0 +1,131 @@
+<?php
+/**
+ * ITSM View List Tickets
+ *
+ * @category   Console Class
+ * @package    Pandora FMS
+ * @subpackage ITSM
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ *   |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ *  |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Artica Soluciones Tecnologicas
+ * Please see http://pandorafms.org for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+// Includes.
+require_once $config['homedir'].'/include/class/HTML.class.php';
+
+global $config;
+
+ui_require_css_file('integriaims');
+
+// Header tabs.
+ui_print_standard_header(
+    __('ITSM Tickets'),
+    '',
+    false,
+    'integria_tab',
+    false,
+    [],
+    [
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',
+            'label' => __('ITSM'),
+        ],
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm&operation=list',
+            'label' => __('ITSM Tickets'),
+        ],
+    ]
+);
+
+/*
+    if (isset($resultDelete) === true) {
+    \ui_print_result_message(
+        $resultDelete,
+        __('Successfully deleted'),
+        __('Could not be deleted')
+    );
+    }
+
+    if (isset($resultCopy) === true) {
+    \ui_print_result_message(
+        $resultCopy,
+        __('Successfully duplicate'),
+        __('Could not be duplicate')
+    );
+    }
+*/
+
+
+try {
+    $columns = [
+        'id',
+        'title',
+        'groupCompany',
+        'statusResolution',
+        'priority',
+        'updated',
+        'started',
+        'creator',
+        'owner',
+    ];
+
+    $column_names = [
+        __('ID'),
+        __('Title'),
+        __('Group').'/'.__('Company'),
+        __('Status').'/'.__('Resolution'),
+        __('Priority'),
+        __('Updated'),
+        __('Started'),
+        __('Creator'),
+        __('Owner'),
+    ];
+
+    ui_print_datatable(
+        [
+            'id'                  => 'itms_list_tickets',
+            'class'               => 'info_table',
+            'style'               => 'width: 99%',
+            'columns'             => $columns,
+            'column_names'        => $column_names,
+            'ajax_url'            => $ajaxController,
+            'ajax_data'           => ['method' => 'getListTickets'],
+            'no_sortable_columns' => [
+                2,
+                3,
+            ],
+            'search_button_class' => 'sub filter float-right',
+            'filter_main_class'   => 'box-flat white_table_graph fixed_filter_bar',
+        ]
+    );
+} catch (Exception $e) {
+    echo $e->getMessage();
+}
+
+$input_button = '';
+$input_button = html_print_button(
+    __('Create'),
+    '',
+    false,
+    '',
+    ['icon' => 'next'],
+    true
+);
+
+html_print_action_buttons($input_button);

From d84299d3ab0c54b4e3cb3fd41c30a41550ea70e2 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Tue, 20 Jun 2023 08:43:10 +0200
Subject: [PATCH 002/116] wip api integration pandora #1355

---
 .../godmode/users/user_management.php         |   1 -
 pandora_console/include/javascript/ITSM.js    |  34 +++++
 pandora_console/include/lib/ITSM/ITSM.php     |  20 ++-
 pandora_console/include/lib/ITSM/Manager.php  | 144 ++++++++++++++++--
 .../include/styles/integriaims.css            |  20 +++
 .../views/ITSM/ITSMCustomFields.php           | 101 ++++++++++++
 .../views/ITSM/ITSMTicketEditView.php         |  34 +++--
 7 files changed, 324 insertions(+), 30 deletions(-)
 create mode 100644 pandora_console/include/javascript/ITSM.js
 create mode 100644 pandora_console/views/ITSM/ITSMCustomFields.php

diff --git a/pandora_console/godmode/users/user_management.php b/pandora_console/godmode/users/user_management.php
index 21a05b6d02..30f783f9f7 100644
--- a/pandora_console/godmode/users/user_management.php
+++ b/pandora_console/godmode/users/user_management.php
@@ -811,7 +811,6 @@ if ($config['integria_enabled'] && $config['integria_user_level_conf']) {
     $row['control'] .= '<span id="test-integria-message" class="invisible"></span>';
     $table_remote->data['integria_test'] = $row;
 
-    hd('Entra');
     // echo '<div class="integria_user_conf">';
     $userManagementTable->colspan['pandoraitsm'] = 2;
     $userManagementTable->data['pandoraitsm'] = html_print_table($table_remote, true);
diff --git a/pandora_console/include/javascript/ITSM.js b/pandora_console/include/javascript/ITSM.js
new file mode 100644
index 0000000000..974af45a37
--- /dev/null
+++ b/pandora_console/include/javascript/ITSM.js
@@ -0,0 +1,34 @@
+/* global $ jQuery */
+
+/* Function get custom fields incidences */
+// eslint-disable-next-line no-unused-vars
+function getInputFieldsIncidenceType(idIncidenceType, fieldsData, ajaxUrl) {
+  console.log(idIncidenceType);
+  console.log(fieldsData);
+  console.log(ajaxUrl);
+  // Failed request handler.
+  var handleFail = function(jqXHR, textStatus, errorThrown) {
+    console.log(jqXHR, textStatus, errorThrown);
+  };
+
+  // Function which handle success case.
+  var handleSuccess = function(data) {
+    $(".object-type-fields").empty();
+    $(".object-type-fields").append(data);
+  };
+
+  // Visual Console container request.
+  jQuery
+    .get(
+      ajaxUrl,
+      {
+        page: "operation/ITSM/itsm",
+        method: "getInputFieldsIncidenceType",
+        idIncidenceType: idIncidenceType,
+        fieldsData: fieldsData
+      },
+      "html"
+    )
+    .done(handleSuccess)
+    .fail(handleFail);
+}
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index fddd63650c..8c9756ab06 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -45,7 +45,6 @@ class ITSM
         if ($this->userLevelConf === true) {
             $this->userBearer = $user_info['integria_user_level_pass'];
         }
-
     }
 
 
@@ -77,6 +76,8 @@ class ITSM
         $path = $this->pathAction($action, $queryParams, $id);
         $url = $this->url.$path;
 
+        // Debugger.
+        // hd($url, true);
         $ch = curl_init();
         curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
         curl_setopt($ch, CURLOPT_URL, $url);
@@ -85,15 +86,14 @@ class ITSM
         curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($postFields));
         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
         curl_setopt($ch, CURLOPT_VERBOSE, true);
-        $result = curl_exec($ch);
+        $response = curl_exec($ch);
 
-        $http_status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-
-        $result = json_decode($result, true);
+        $result = json_decode($response, true);
         if (json_last_error() !== JSON_ERROR_NONE) {
-            throw new \Exception(__('Invalid response'));
+            throw new \Exception(__('Invalid response').', '.$response);
         }
 
+        $http_status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
         if ($http_status !== 200) {
             throw new \Exception($result['error']);
         }
@@ -147,6 +147,14 @@ class ITSM
                 $path = '/incidence/'.$id;
             break;
 
+            case 'incidenceTypeFields':
+                $path = '/incidencetype/'.$id.'/field/list';
+            break;
+
+            case 'incidence':
+                $path = '/incidence/'.$id;
+            break;
+
             default:
                 // Not posible.
             break;
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 0fbe7bcd49..2431547dd8 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -26,6 +26,7 @@ class Manager
     public $AJAXMethods = [
         'getListTickets',
         'getUserSelect',
+        'getInputFieldsIncidenceType',
     ];
 
     /**
@@ -106,12 +107,14 @@ class Manager
      */
     public function run()
     {
+        ui_require_css_file('integriaims');
         switch ($this->operation) {
             case 'list':
                 $this->showList();
             break;
 
             case 'edit':
+                \ui_require_javascript_file('ITSM');
                 $this->showEdit();
             break;
 
@@ -150,19 +153,9 @@ class Manager
         $create_incidence = (bool) \get_parameter('create_incidence', 0);
         $update_incidence = (bool) \get_parameter('update_incidence', 0);
         $idIncidence      = \get_parameter('idIncidence', 0);
-        $incidence = [
-            'title'           => \get_parameter('title', ''),
-            'idIncidenceType' => \get_parameter('idIncidenceType', 0),
-            'idGroup'         => \get_parameter('idGroup', 0),
-            'priority'        => 'LOW',
-        // \get_parameter('priority', 'LOW'),
-            'status'          => \get_parameter('status', 'NEW'),
-            'idCreator'       => \get_parameter('idCreator', ''),
-            'owner'           => \get_parameter('owner_hidden', ''),
-            'resolution'      => \get_parameter('resolution', null),
-            'description'     => \get_parameter('description', ''),
-        ];
 
+        // Debugger.
+        // hd($_POST);
         $error = '';
         $ITSM = new ITSM();
         try {
@@ -171,12 +164,47 @@ class Manager
             // $priorities = $ITSM->callApi('listPriorities');
             $resolutions = $this->getResolutions($ITSM);
             $status = $this->getStatus($ITSM);
+
+            if (empty($idIncidence) === false) {
+                $incidenceData = $this->getIncidence($ITSM, $idIncidence);
+            }
         } catch (\Throwable $th) {
             $error = $th->getMessage();
         }
 
+        // TODO: END POINT priorities.
+        // \get_parameter('priority', 'LOW').
+        $incidence = [
+            'title'           => \get_parameter('title', ($incidenceData['title'] ?? '')),
+            'idIncidenceType' => \get_parameter('idIncidenceType', ($incidenceData['idIncidenceType'] ?? 0)),
+            'idGroup'         => \get_parameter('idGroup', ($incidenceData['idGroup'] ?? 0)),
+            'priority'        => 'LOW',
+            'status'          => \get_parameter('status', ($incidenceData['status'] ?? 'NEW')),
+            'idCreator'       => \get_parameter('idCreator', ($incidenceData['idCreator'] ?? '')),
+            'owner'           => \get_parameter('owner_hidden', ''),
+            'resolution'      => \get_parameter('resolution', ($incidenceData['resolution'] ?? null)),
+            'description'     => \get_parameter('description', ($incidenceData['description'] ?? '')),
+        ];
+
         $successfullyMsg = '';
         try {
+            if (empty($incidence['idIncidenceType']) === false
+                && ($create_incidence === true || $update_incidence === true)
+            ) {
+                $customFields = \get_parameter('custom-fields', []);
+                if (empty($customFields) === false) {
+                    $typeFieldData = [];
+                    foreach ($customFields as $idField => $data) {
+                        $typeFieldData[] = [
+                            'idIncidenceTypeField' => $idField,
+                            'data'                 => $data,
+                        ];
+                    }
+                }
+
+                $incidence['typeFieldData'] = $typeFieldData;
+            }
+
             if ($create_incidence === true) {
                 $incidence = $this->createIncidence($ITSM, $incidence);
                 $idIncidence = $incidence['idIncidence'];
@@ -325,6 +353,52 @@ class Manager
     }
 
 
+    /**
+     * Get Incidence.
+     *
+     * @param ITSM    $ITSM        Object for callApi.
+     * @param integer $idIncidence Incidence ID.
+     *
+     * @return array Data incidence
+     */
+    private function getIncidence(ITSM $ITSM, int $idIncidence): array
+    {
+        $result = $ITSM->callApi(
+            'incidence',
+            [],
+            [],
+            $idIncidence,
+            'GET'
+        );
+
+        return $result;
+    }
+
+
+    /**
+     * Get fields incidence type.
+     *
+     * @param ITSM    $ITSM            Object for callApi.
+     * @param integer $idIncidenceType Incidence Type ID.
+     *
+     * @return array Fields array.
+     */
+    private function getFieldsIncidenceType(ITSM $ITSM, int $idIncidenceType): array
+    {
+        $result = $ITSM->callApi(
+            'incidenceTypeFields',
+            [
+                'page'     => 0,
+                'sizePage' => 0,
+            ],
+            [],
+            $idIncidenceType
+        );
+
+        return $result;
+    }
+
+
     /**
      * Draw list dashboards.
      *
@@ -332,8 +406,6 @@ class Manager
      */
     private function showDashboard()
     {
-        global $config;
-
         View::render(
             'ITSM/ITSMDashboardView',
             [
@@ -467,4 +539,48 @@ class Manager
     }
 
 
+    /**
+     * Get Input fields of type incidence.
+     *
+     * @return void
+     */
+    public function getInputFieldsIncidenceType()
+    {
+        $idIncidenceType = (int) get_parameter('idIncidenceType', true);
+        $fieldsData = json_decode(io_safe_output(get_parameter('fieldsData', [])), true);
+        if (empty($fieldsData) === false) {
+            $fieldsData = array_reduce(
+                $fieldsData,
+                function ($carry, $user) {
+                    $carry[$user['idIncidenceField']] = $user['data'];
+                    return $carry;
+                }
+            );
+        } else {
+            $fieldsData = [];
+        }
+
+        $error = '';
+        try {
+            $ITSM = new ITSM();
+            $result = $this->getFieldsIncidenceType($ITSM, $idIncidenceType);
+            $customFields = $result['data'];
+        } catch (Throwable $e) {
+            $error = $e->getMessage();
+        }
+
+        View::render(
+            'ITSM/ITSMCustomFields',
+            [
+                'ajaxController' => $this->ajaxController,
+                'urlAjax'        => \ui_get_full_url('ajax.php'),
+                'customFields'   => $customFields,
+                'fieldsData'     => $fieldsData,
+                'error'          => $error,
+            ]
+        );
+        exit;
+    }
+
+
 }
diff --git a/pandora_console/include/styles/integriaims.css b/pandora_console/include/styles/integriaims.css
index bca6df5038..e55c992bbe 100644
--- a/pandora_console/include/styles/integriaims.css
+++ b/pandora_console/include/styles/integriaims.css
@@ -123,3 +123,23 @@ div.integria_details_description textarea {
 .comment_body {
   padding: 15px 20px 15px 20px;
 }
+
+/*---*/
+div.incidence-type-custom-fields {
+  display: flex;
+  flex-direction: row;
+  justify-content: center;
+  align-items: baseline;
+  flex-wrap: wrap;
+}
+
+.incidence-type-custom-fields > div {
+  flex: 1 1 45%;
+  display: flex;
+  margin: 0px 20px;
+  flex-direction: column;
+}
+
+.incidence-type-custom-fields > div.incidence-type-custom-fields-textarea {
+  flex: 1 1 100%;
+}
diff --git a/pandora_console/views/ITSM/ITSMCustomFields.php b/pandora_console/views/ITSM/ITSMCustomFields.php
new file mode 100644
index 0000000000..6837ff43f4
--- /dev/null
+++ b/pandora_console/views/ITSM/ITSMCustomFields.php
@@ -0,0 +1,101 @@
+<?php
+/**
+ * ITSM View dashboard
+ *
+ * @category   Console Class
+ * @package    Pandora FMS
+ * @subpackage ITSM
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ *   |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ *  |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Artica Soluciones Tecnologicas
+ * Please see http://pandorafms.org for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+// Includes.
+require_once $config['homedir'].'/include/class/HTML.class.php';
+
+global $config;
+
+if (empty($error) === false) {
+    ui_print_error_message($error);
+}
+
+if (empty($customFields) === true) {
+    ui_print_info_message(
+        [
+            'no_close' => true,
+            'message'  => __('Incidence type not fields'),
+        ]
+    );
+} else {
+    $output = '<div class="incidence-type-custom-fields">';
+    foreach ($customFields as $field) {
+        $options = [
+            'name'     => 'custom-fields['.$field['idIncidenceTypeField'].']',
+            'required' => $field['isRequired'],
+            'return'   => true,
+            'value'    => ($fieldsData[$field['idIncidenceTypeField']] ?? null),
+        ];
+
+        $class = '';
+
+        switch ($field['type']) {
+            case 'COMBO':
+                $options['type'] = 'select';
+                $options['fields'] = explode(',', $field['comboValue']);
+            break;
+
+            case 'TEXT':
+                $options['type'] = 'text';
+            break;
+
+            case 'CHECKBOX':
+                $options['type'] = 'checkbox';
+            break;
+
+            case 'DATE':
+                $options['type'] = 'text';
+            break;
+
+            case 'NUMERIC':
+                $options['type'] = 'number';
+            break;
+
+            case 'TEXTAREA':
+                $options['type'] = 'textarea';
+                $options['rows'] = 4;
+                $options['columns'] = 0;
+                $class = 'incidence-type-custom-fields-textarea';
+            break;
+
+            default:
+                // Not posible.
+            break;
+        }
+
+        $output .= html_print_label_input_block(
+            $field['label'],
+            html_print_input($options),
+            ['div_class' => $class]
+        );
+    }
+
+    $output .= '</div>';
+
+    echo $output;
+}
diff --git a/pandora_console/views/ITSM/ITSMTicketEditView.php b/pandora_console/views/ITSM/ITSMTicketEditView.php
index b1f0330fe6..7ebfaa69ad 100644
--- a/pandora_console/views/ITSM/ITSMTicketEditView.php
+++ b/pandora_console/views/ITSM/ITSMTicketEditView.php
@@ -69,12 +69,10 @@ $table = new stdClass();
 $table->width = '100%';
 $table->id = 'edit-ticket-itms';
 $table->class = 'databox filter-table-adv';
-$table->head = [];
 $table->data = [];
-$table->size = [];
-$table->size = [];
 $table->colspan[0][0] = 2;
-$table->colspan[4][0] = 3;
+$table->colspan[2][0] = 3;
+$table->colspan[5][0] = 3;
 $table->colspan[6][0] = 3;
 
 $table->data[0][0] = html_print_label_input_block(
@@ -158,7 +156,9 @@ $table->data[1][2] = html_print_label_input_block(
     )
 );
 
-$table->data[2][0] = html_print_label_input_block(
+$table->data[2][0] = '<div class="object-type-fields">WIP...</div>';
+
+$table->data[3][0] = html_print_label_input_block(
     __('Status'),
     html_print_select(
         $status,
@@ -176,7 +176,7 @@ $table->data[2][0] = html_print_label_input_block(
     )
 );
 
-$table->data[2][1] = html_print_label_input_block(
+$table->data[3][1] = html_print_label_input_block(
     __('Creator').ui_print_help_tip(__('This field corresponds to the Integria IMS user specified in Integria IMS setup'), true),
     html_print_input_text(
         'idCreator',
@@ -192,7 +192,7 @@ $table->data[2][1] = html_print_label_input_block(
     )
 );
 
-$table->data[2][2] = html_print_label_input_block(
+$table->data[3][2] = html_print_label_input_block(
     __('Owner').ui_print_help_tip(__('Type at least two characters to search the user.'), true),
     html_print_autocomplete_users_from_integria(
         'owner',
@@ -205,7 +205,7 @@ $table->data[2][2] = html_print_label_input_block(
     )
 );
 
-$table->data[3][0] = '<div id="incidence-resolution" class="invisible">'.html_print_label_input_block(
+$table->data[4][0] = '<div id="incidence-resolution" class="invisible">'.html_print_label_input_block(
     __('Resolution'),
     html_print_select(
         $resolutions,
@@ -223,7 +223,7 @@ $table->data[3][0] = '<div id="incidence-resolution" class="invisible">'.html_pr
     ).'</div>'
 );
 
-$table->data[4][0] = html_print_label_input_block(
+$table->data[5][0] = html_print_label_input_block(
     __('Description').$help_macros,
     html_print_textarea(
         'description',
@@ -283,6 +283,9 @@ echo '</form>';
 
 <script type="text/javascript">
     $(document).ready(function () {
+        var ajax_url = '<?php echo ui_get_full_url('ajax.php'); ?>';
+        var fieldsData = '<?php echo json_encode($incidence['typeFieldData']); ?>';
+
         $('#status').on('change', function() {
             if ($(this).val() === 'CLOSED') {
                 $('#incidence-resolution').show();
@@ -290,5 +293,18 @@ echo '</form>';
                 $('#incidence-resolution').hide();
             }
         }).trigger('change');
+
+        $('#idIncidenceType').on('change', function() {
+            if ($(this).val() != 0) {
+                $('.object-type-fields').show();
+                var output = getInputFieldsIncidenceType(
+                    $(this).val(),
+                    fieldsData,
+                    ajax_url
+                );
+            } else {
+                $('.object-type-fields').hide();
+            }
+        }).trigger('change');
     });
 </script>
\ No newline at end of file

From 64c80868541b505da4adb6f8108a9006c74a0f3c Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Thu, 29 Jun 2023 09:45:44 +0200
Subject: [PATCH 003/116] wip integration integriaIMS pandora_enterprise#11471

---
 pandora_console/include/javascript/ITSM.js    |  38 +-
 pandora_console/include/lib/ITSM/ITSM.php     |  71 ++-
 pandora_console/include/lib/ITSM/Manager.php  | 504 ++++++++++++++++--
 .../include/styles/integriaims.css            |  18 +-
 .../views/ITSM/ITSMCustomFields.php           |   8 +-
 .../views/ITSM/ITSMTicketDetailView.php       | 386 ++++++++++++++
 .../views/ITSM/ITSMTicketEditView.php         |  36 +-
 .../views/ITSM/ITSMTicketListView.php         |  47 +-
 8 files changed, 1014 insertions(+), 94 deletions(-)
 create mode 100644 pandora_console/views/ITSM/ITSMTicketDetailView.php

diff --git a/pandora_console/include/javascript/ITSM.js b/pandora_console/include/javascript/ITSM.js
index 974af45a37..4ad40b329c 100644
--- a/pandora_console/include/javascript/ITSM.js
+++ b/pandora_console/include/javascript/ITSM.js
@@ -3,9 +3,6 @@
 /* Function get custom fields incidences */
 // eslint-disable-next-line no-unused-vars
 function getInputFieldsIncidenceType(idIncidenceType, fieldsData, ajaxUrl) {
-  console.log(idIncidenceType);
-  console.log(fieldsData);
-  console.log(ajaxUrl);
   // Failed request handler.
   var handleFail = function(jqXHR, textStatus, errorThrown) {
     console.log(jqXHR, textStatus, errorThrown);
@@ -32,3 +29,38 @@ function getInputFieldsIncidenceType(idIncidenceType, fieldsData, ajaxUrl) {
     .done(handleSuccess)
     .fail(handleFail);
 }
+
+/* Function get custom fields incidences */
+// eslint-disable-next-line no-unused-vars
+function downloadIncidenceAttachment(
+  idIncidence,
+  idAttachment,
+  ajaxUrl,
+  filename
+) {
+  $.ajax({
+    type: "POST",
+    url: ajaxUrl,
+    data: {
+      page: "operation/ITSM/itsm",
+      method: "getDownloadIncidenceAttachment",
+      idIncidence: idIncidence,
+      idAttachment: idAttachment
+    },
+    dataType: "binary",
+    xhrFields: {
+      responseType: "arraybuffer"
+    },
+    success: function(data) {
+      var blob = new Blob([data], { type: "application/octetstream" });
+      var link = document.createElement("a");
+      link.href = window.URL.createObjectURL(blob);
+      link.download = filename;
+      document.body.appendChild(link);
+      link.click();
+    },
+    error: function(jqXHR, textStatus, message) {
+      console.error(textStatus, message);
+    }
+  });
+}
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index 8c9756ab06..8e23161b67 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -56,6 +56,8 @@ class ITSM
      * @param array       $postFields  Params send post.
      * @param mixed       $id          Specific id for path.
      * @param string|null $method      Request method.
+     * @param array|null  $file        Upload file.
+     * @param boolean     $download    Download file.
      *
      * @return array Array result.
      * @throws \Exception On error.
@@ -65,7 +67,9 @@ class ITSM
         ?array $queryParams=null,
         ?array $postFields=null,
         mixed $id=null,
-        ?string $method='POST'
+        ?string $method='POST',
+        ?array $file=null,
+        ?bool $download=false
     ) {
         $headers = [
             'accept: application/json',
@@ -76,18 +80,49 @@ class ITSM
         $path = $this->pathAction($action, $queryParams, $id);
         $url = $this->url.$path;
 
-        // Debugger.
-        // hd($url, true);
+        $data = [];
+        // Clean safe_input forms.
+        if (empty($postFields) === false) {
+            foreach ($postFields as $key => $field) {
+                if ($field !== null) {
+                    $field = io_safe_output($field);
+                }
+
+                $data[$key] = $field;
+            }
+        }
+
+        if ($file !== null && file_exists($file['tmp_name']) === true) {
+            $data['attachment'] = curl_file_create(
+                $file['tmp_name'],
+                $file['type'],
+                $file['name']
+            );
+
+            $headers = [
+                'Content-Type: multipart/form-data',
+                'Authorization: Bearer '.$this->userBearer,
+            ];
+        } else {
+            $data = json_encode($data);
+        }
+
         $ch = curl_init();
         curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
         curl_setopt($ch, CURLOPT_URL, $url);
         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
         curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method);
-        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($postFields));
+        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
         curl_setopt($ch, CURLOPT_VERBOSE, true);
         $response = curl_exec($ch);
 
+        if ($download === true) {
+            return $response;
+        }
+
         $result = json_decode($response, true);
         if (json_last_error() !== JSON_ERROR_NONE) {
             throw new \Exception(__('Invalid response').', '.$response);
@@ -135,6 +170,10 @@ class ITSM
                 $path = '/incidence/status/list';
             break;
 
+            case 'listPriorities':
+                $path = '/incidence/priority/list';
+            break;
+
             case 'listUsers':
                 $path = '/user/list';
             break;
@@ -155,6 +194,30 @@ class ITSM
                 $path = '/incidence/'.$id;
             break;
 
+            case 'deleteIncidence':
+                $path = '/incidence/'.$id;
+            break;
+
+            case 'incidenceWus':
+                $path = '/incidence/'.$id.'/workunit/list';
+            break;
+
+            case 'incidenceFiles':
+                $path = '/incidence/'.$id.'/attachment/list';
+            break;
+
+            case 'createIncidenceAttachment':
+                $path = '/incidence/'.$id.'/attachment';
+            break;
+
+            case 'deleteIncidenceAttachment':
+                $path = '/incidence/'.$id['idIncidence'].'/attachment/'.$id['idAttachment'];
+            break;
+
+            case 'downloadIncidenceAttachment':
+                $path = '/incidence/'.$id['idIncidence'].'/attachment/'.$id['idAttachment'].'/download';
+            break;
+
             default:
                 // Not posible.
             break;
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 2431547dd8..7c702fc4a8 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -27,6 +27,7 @@ class Manager
         'getListTickets',
         'getUserSelect',
         'getInputFieldsIncidenceType',
+        'getDownloadIncidenceAttachment',
     ];
 
     /**
@@ -107,17 +108,21 @@ class Manager
      */
     public function run()
     {
-        ui_require_css_file('integriaims');
+        \ui_require_css_file('integriaims');
+        \ui_require_javascript_file('ITSM');
         switch ($this->operation) {
             case 'list':
                 $this->showList();
             break;
 
             case 'edit':
-                \ui_require_javascript_file('ITSM');
                 $this->showEdit();
             break;
 
+            case 'detail':
+                $this->showDetail();
+            break;
+
             case 'dashboard':
             default:
                 $this->showDashboard();
@@ -133,11 +138,26 @@ class Manager
      */
     private function showList()
     {
+        $idIncidence = \get_parameter('idIncidence', 0);
+        $error = '';
+        $successfullyMsg = '';
+        if (empty($idIncidence) === false) {
+            $ITSM = new ITSM();
+            try {
+                $this->deleteIncidence($ITSM, $idIncidence);
+                $successfullyMsg = __('Delete ticket successfully');
+            } catch (\Throwable $th) {
+                $error = $th->getMessage();
+            }
+        }
+
         View::render(
             'ITSM/ITSMTicketListView',
             [
-                'ajaxController' => $this->ajaxController,
-                'urlAjax'        => \ui_get_full_url('ajax.php'),
+                'ajaxController'  => $this->ajaxController,
+                'urlAjax'         => \ui_get_full_url('ajax.php'),
+                'error'           => $error,
+                'successfullyMsg' => $successfullyMsg,
             ]
         );
     }
@@ -154,14 +174,12 @@ class Manager
         $update_incidence = (bool) \get_parameter('update_incidence', 0);
         $idIncidence      = \get_parameter('idIncidence', 0);
 
-        // Debugger.
-        // hd($_POST);
         $error = '';
         $ITSM = new ITSM();
         try {
             $objectTypes = $this->getObjectypes($ITSM);
             $groups = $this->getGroups($ITSM);
-            // $priorities = $ITSM->callApi('listPriorities');
+            $priorities = $this->getPriorities($ITSM);
             $resolutions = $this->getResolutions($ITSM);
             $status = $this->getStatus($ITSM);
 
@@ -172,16 +190,14 @@ class Manager
             $error = $th->getMessage();
         }
 
-        // TODO: END POINT priorities.
-        // \get_parameter('priority', 'LOW').
         $incidence = [
             'title'           => \get_parameter('title', ($incidenceData['title'] ?? '')),
             'idIncidenceType' => \get_parameter('idIncidenceType', ($incidenceData['idIncidenceType'] ?? 0)),
             'idGroup'         => \get_parameter('idGroup', ($incidenceData['idGroup'] ?? 0)),
-            'priority'        => 'LOW',
+            'priority'        => \get_parameter('priority', ($incidenceData['priority'] ?? 'LOW')),
             'status'          => \get_parameter('status', ($incidenceData['status'] ?? 'NEW')),
             'idCreator'       => \get_parameter('idCreator', ($incidenceData['idCreator'] ?? '')),
-            'owner'           => \get_parameter('owner_hidden', ''),
+            'owner'           => \get_parameter('owner_hidden', ($incidenceData['owner'] ?? '')),
             'resolution'      => \get_parameter('resolution', ($incidenceData['resolution'] ?? null)),
             'description'     => \get_parameter('description', ($incidenceData['description'] ?? '')),
         ];
@@ -203,6 +219,8 @@ class Manager
                 }
 
                 $incidence['typeFieldData'] = $typeFieldData;
+            } else {
+                $incidence['typeFieldData'] = $incidenceData['typeFieldData'];
             }
 
             if ($create_incidence === true) {
@@ -229,6 +247,7 @@ class Manager
                 'priorities'      => [],
                 'resolutions'     => $resolutions,
                 'status'          => $status,
+                'priorities'      => $priorities,
                 'error'           => $error,
                 'incidence'       => $incidence,
                 'idIncidence'     => $idIncidence,
@@ -238,6 +257,107 @@ class Manager
     }
 
 
+    /**
+     * Draw list tickets.
+     *
+     * @return void
+     */
+    private function showDetail()
+    {
+        $idIncidence = (int) \get_parameter('idIncidence', 0);
+        $uploadFile = (bool) \get_parameter('upload_file', 0);
+        $idAttachment = (int) \get_parameter('idAttachment', 0);
+        $addComment = (bool) \get_parameter('addComment', 0);
+
+        $error = '';
+        $successfullyMsg = null;
+        $incidence = null;
+        $objectTypes = null;
+        $groups = null;
+        $resolutions = null;
+        $status = null;
+        $wus = null;
+        $files = null;
+        $users = null;
+        $priorities = null;
+        $priorityDiv = null;
+        $ITSM = new ITSM();
+        try {
+            if (empty($idIncidence) === false) {
+                if ($uploadFile === true) {
+                    $attachment = [
+                        'description' => get_parameter('file_description', ''),
+                    ];
+
+                    $incidenceAttachment = $this->createIncidenceAttachment(
+                        $ITSM,
+                        $idIncidence,
+                        $attachment,
+                        get_parameter('userfile')
+                    );
+
+                    if ($incidenceAttachment !== false) {
+                        $successfullyMsg = __('File added succesfully');
+                    }
+                }
+
+                if (empty($idAttachment) === false) {
+                    $this->deleteIncidenceAttachment($ITSM, $idIncidence, $idAttachment);
+                    $successfullyMsg = __('Delete File successfully');
+                }
+
+                $incidence = $this->getIncidence($ITSM, $idIncidence);
+                $objectTypes = $this->getObjectypes($ITSM);
+                $groups = $this->getGroups($ITSM);
+                $resolutions = $this->getResolutions($ITSM);
+                $status = $this->getStatus($ITSM);
+                $priorities = $this->getPriorities($ITSM);
+                $wus = $this->getIncidenceWus($ITSM, $idIncidence);
+                $files = $this->getIncidenceFiles($ITSM, $idIncidence);
+
+                $usersInvolved = [];
+                $usersInvolved[$incidence['idCreator']] = $incidence['idCreator'];
+                $usersInvolved[$incidence['owner']] = $incidence['owner'];
+                $usersInvolved[$incidence['closedBy']] = $incidence['closedBy'];
+
+                foreach ($wus['data'] as $wu) {
+                    $usersInvolved[$wu['idUser']] = $wu['idUser'];
+                }
+
+                foreach ($files['data'] as $file) {
+                    $usersInvolved[$file['idUser']] = $file['idUser'];
+                }
+
+                $users = $this->getUsers($ITSM, $usersInvolved);
+
+                $priorityDiv = $this->priorityDiv($incidence['priority'], $priorities[$incidence['priority']]);
+            }
+        } catch (\Throwable $th) {
+            $error = $th->getMessage();
+        }
+
+        View::render(
+            'ITSM/ITSMTicketDetailView',
+            [
+                'ajaxController'  => $this->ajaxController,
+                'urlAjax'         => \ui_get_full_url('ajax.php'),
+                'error'           => $error,
+                'successfullyMsg' => $successfullyMsg,
+                'incidence'       => $incidence,
+                'objectTypes'     => $objectTypes,
+                'groups'          => $groups,
+                'resolutions'     => $resolutions,
+                'status'          => $status,
+                'wus'             => $wus,
+                'files'           => $files,
+                'users'           => $users,
+                'priorities'      => $priorities,
+                'priorityDiv'     => $priorityDiv,
+            ]
+        );
+    }
+
+
     /**
      * Get Incidences types.
      *
@@ -353,6 +473,20 @@ class Manager
     }
 
 
+    /**
+     * Get Priorities.
+     *
+     * @param ITSM $ITSM Object for callApi.
+     *
+     * @return array Return mode select.
+     */
+    private function getPriorities(ITSM $ITSM): array
+    {
+        $listPriorities = $ITSM->callApi('listPriorities');
+        return $listPriorities;
+    }
+
+
     /**
      * Get Incidence.
      *
@@ -375,6 +509,26 @@ class Manager
     }
 
 
+    /**
+     * Delete Incidence.
+     *
+     * @param ITSM    $ITSM        Object for callApi.
+     * @param integer $idIncidence Incidence ID.
+     *
+     * @return void
+     */
+    private function deleteIncidence(ITSM $ITSM, int $idIncidence): void
+    {
+        $ITSM->callApi(
+            'deleteIncidence',
+            [],
+            [],
+            $idIncidence,
+            'DELETE'
+        );
+    }
+
+
     /**
      * Get fields incidence type.
      *
@@ -399,6 +553,167 @@ class Manager
     }
 
 
+    /**
+     * Get Incidence Work units.
+     *
+     * @param ITSM    $ITSM        Object for callApi.
+     * @param integer $idIncidence Incidence ID.
+     *
+     * @return array Data workUnits incidence.
+     */
+    private function getIncidenceWus(ITSM $ITSM, int $idIncidence): array
+    {
+        $result = $ITSM->callApi(
+            'incidenceWus',
+            [
+                'page'     => 0,
+                'sizePage' => 0,
+            ],
+            [],
+            $idIncidence
+        );
+
+        return $result;
+    }
+
+
+    /**
+     * Get Incidence Attachments.
+     *
+     * @param ITSM    $ITSM        Object for callApi.
+     * @param integer $idIncidence Incidence ID.
+     *
+     * @return array Data attachment incidence.
+     */
+    private function getIncidenceFiles(ITSM $ITSM, int $idIncidence): array
+    {
+        $result = $ITSM->callApi(
+            'incidenceFiles',
+            [
+                'page'     => 0,
+                'sizePage' => 0,
+            ],
+            [],
+            $idIncidence
+        );
+
+        return $result;
+    }
+
+
+    /**
+     * Get Users.
+     *
+     * @param ITSM  $ITSM  Object for callApi.
+     * @param array $users Users ID.
+     *
+     * @return array Users.
+     */
+    private function getUsers(ITSM $ITSM, array $users): array
+    {
+        $result = $ITSM->callApi(
+            'listUsers',
+            [
+                'page'     => 0,
+                'sizePage' => 0,
+            ],
+            [
+                'multipleSearchString' => [
+                    'field' => 'idUser',
+                    'data'  => $users,
+                ],
+            ]
+        );
+
+        $res = [];
+        if (empty($result['data']) === false) {
+            $res = array_reduce(
+                $result['data'],
+                function ($carry, $user) {
+                    $carry[$user['idUser']] = $user['fullName'];
+                    return $carry;
+                }
+            );
+        }
+
+        return $res;
+    }
+
+
+    /**
+     * Create incidence
+     *
+     * @param ITSM    $ITSM        Object for callApi.
+     * @param integer $idIncidence Id incidence.
+     * @param array   $attachment  Params insert.
+     * @param array   $file        Info file.
+     *
+     * @return array
+     */
+    private function createIncidenceAttachment(ITSM $ITSM, int $idIncidence, array $attachment, array $file): array
+    {
+        $incidenceAttachment = $ITSM->callApi(
+            'createIncidenceAttachment',
+            null,
+            $attachment,
+            $idIncidence,
+            'POST',
+            $file
+        );
+        return $incidenceAttachment;
+    }
+
+
+    /**
+     * Delete Attachment.
+     *
+     * @param ITSM    $ITSM         Object for callApi.
+     * @param integer $idIncidence  Incidence ID.
+     * @param integer $idAttachment Attachment ID.
+     *
+     * @return void
+     */
+    private function deleteIncidenceAttachment(ITSM $ITSM, int $idIncidence, int $idAttachment): void
+    {
+        $ITSM->callApi(
+            'deleteIncidenceAttachment',
+            [],
+            [],
+            [
+                'idIncidence'  => $idIncidence,
+                'idAttachment' => $idAttachment,
+            ],
+            'DELETE'
+        );
+    }
+
+
+    /**
+     * Download Attachment.
+     *
+     * @param ITSM    $ITSM         Object for callApi.
+     * @param integer $idIncidence  Incidence ID.
+     * @param integer $idAttachment Attachment ID.
+     *
+     * @return mixed
+     */
+    private function downloadIncidenceAttachment(ITSM $ITSM, int $idIncidence, int $idAttachment)
+    {
+        return $ITSM->callApi(
+            'downloadIncidenceAttachment',
+            [],
+            [],
+            [
+                'idIncidence'  => $idIncidence,
+                'idAttachment' => $idAttachment,
+            ],
+            'GET',
+            null,
+            true
+        );
+    }
+
+
     /**
      * Draw list dashboards.
      *
@@ -416,6 +731,51 @@ class Manager
     }
 
 
+    /**
+     * Draw priority div.
+     *
+     * @param string $priority Priority incidence.
+     * @param string $label    Name.
+     *
+     * @return string Html output.
+     */
+    private function priorityDiv(string $priority, string $label)
+    {
+        $output = '';
+        switch ($priority) {
+            case 'LOW':
+                $color = COL_NORMAL;
+            break;
+
+            case 'INFORMATIVE':
+                $color = COL_UNKNOWN;
+            break;
+
+            case 'MEDIUM':
+                $color = COL_WARNING;
+            break;
+
+            case 'SERIOUS':
+                $color = COL_ALERTFIRED;
+            break;
+
+            case 'VERY_SERIOUS':
+                $color = COL_CRITICAL;
+            break;
+
+            default:
+                $color = COL_NOTINIT;
+            break;
+        }
+
+        $output = '<div class="priority" style="background: '.$color.'">';
+        $output .= $label;
+        $output .= '</div>';
+
+        return $output;
+    }
+
+
     /**
      * Get list tickets and prepare data for datatable.
      *
@@ -428,20 +788,19 @@ class Manager
         // Init data.
         $data = [];
         // Catch post parameters.
-        $start = get_parameter('start', 0);
-        $length = get_parameter('length', $config['block_size']);
+        $start = (int) get_parameter('start', 1);
+        $length = (int) get_parameter('length', $config['block_size']);
         $order = get_datatable_order(true);
         $filters = get_parameter('filter', []);
 
         try {
             ob_start();
-            $queryParams = array_merge(
-                [
-                    'page'     => $start,
-                    'sizePage' => $length,
-                ],
-                $order
-            );
+            $queryParams = [
+                'page'          => ($start === 0) ? $start : ($start / $length),
+                'sizePage'      => $length,
+                'sortField'     => $order['field'],
+                'sortDirection' => $order['direction'],
+            ];
 
             $ITSM = new ITSM();
             $result = $ITSM->callApi(
@@ -450,23 +809,83 @@ class Manager
                 $filters
             );
 
+            $groups = $this->getGroups($ITSM);
+            $resolutions = $this->getResolutions($ITSM);
+            $resolutions['NOTRESOLVED'] = __('None');
+            $status = $this->getStatus($ITSM);
+            $priorities = $this->getPriorities($ITSM);
+
+            $usersInvolved = [];
+            foreach ($result['data'] as $incidence) {
+                $usersInvolved[$incidence['idCreator']] = $incidence['idCreator'];
+                $usersInvolved[$incidence['owner']] = $incidence['owner'];
+                $usersInvolved[$incidence['closedBy']] = $incidence['closedBy'];
+            }
+
+            $users = $this->getUsers($ITSM, $usersInvolved);
+            $url = \ui_get_full_url('index.php?sec=manageTickets&sec2=operation/ITSM/itsm');
+
             $data = array_reduce(
                 $result['data'],
-                function ($carry, $item) {
-                    global $config;
+                function ($carry, $item) use ($groups, $resolutions, $status, $priorities, $users, $url) {
                     // Transforms array of arrays $data into an array
                     // of objects, making a post-process of certain fields.
                     $tmp = (object) $item;
+
                     $new = (object) [];
-                    $new->id = $tmp->idIncidence;
-                    $new->title = $tmp->title;
-                    $new->groupCompany = $tmp->idGroup.'/'.$tmp->idCompany;
-                    $new->statusResolution = $tmp->status.'/'.$tmp->resolution;
-                    $new->priority = $tmp->priority;
-                    $new->updated = $tmp->updateDate;
-                    $new->started = $tmp->startDate;
-                    $new->creator = $tmp->idCreator;
-                    $new->owner = $tmp->owner;
+                    $new->idIncidence = $tmp->idIncidence;
+                    $new->title = '<a href="'.$url.'&operation=detail&idIncidence='.$tmp->idIncidence.'">';
+                    $new->title .= $tmp->title;
+                    $new->title .= '</a>';
+                    $new->groupCompany = $groups[$tmp->idGroup];
+                    if (empty($tmp->idCompany) === false) {
+                        $new->groupCompany .= '/'.$tmp->idCompany;
+                    }
+
+                    $new->statusResolution = $status[$tmp->status].'/'.$resolutions[$tmp->resolution];
+                    $new->priority = $this->priorityDiv($tmp->priority, $priorities[$tmp->priority]);
+                    $new->updateDate = $tmp->updateDate;
+                    $new->startDate = $tmp->startDate;
+                    $new->idCreator = $users[$tmp->idCreator];
+                    $new->owner = $users[$tmp->owner];
+
+                    $new->operation = '<div class="table_action_buttons">';
+                    $new->operation .= '<a href="'.$url.'&operation=edit&idIncidence='.$tmp->idIncidence.'">';
+                    $new->operation .= html_print_image(
+                        'images/edit.svg',
+                        true,
+                        [
+                            'title' => __('Edit'),
+                            'class' => 'main_menu_icon invert_filter',
+                        ]
+                    );
+                    $new->operation .= '</a>';
+
+                    $new->operation .= '<a href="'.$url.'&operation=detail&idIncidence='.$tmp->idIncidence.'">';
+                    $new->operation .= html_print_image(
+                        'images/enable.svg',
+                        true,
+                        [
+                            'title' => __('Detail'),
+                            'class' => 'main_menu_icon invert_filter',
+                        ]
+                    );
+                    $new->operation .= '</a>';
+
+                    $urlDelete = $url.'&operation=list&idIncidence='.$tmp->idIncidence;
+                    $urlOnClick = 'javascript:if (!confirm(\''.__('Are you sure?').'\')) return false;';
+                    $new->operation .= '<a href="'.$urlDelete.'" onClick="'.$urlOnClick.'">';
+                    $new->operation .= html_print_image(
+                        'images/delete.svg',
+                        true,
+                        [
+                            'title' => __('Delete'),
+                            'class' => 'main_menu_icon invert_filter',
+                        ]
+                    );
+                    $new->operation .= '</a>';
+
+                    $new->operation .= '</div>';
 
                     $carry[] = $new;
                     return $carry;
@@ -583,4 +1002,27 @@ class Manager
     }
 
 
+    /**
+     * Get Download.
+     *
+     * @return void
+     */
+    public function getDownloadIncidenceAttachment()
+    {
+        $idIncidence = (int) get_parameter('idIncidence', true);
+        $idAttachment = (int) get_parameter('idAttachment', true);
+
+        try {
+            $ITSM = new ITSM();
+            $result = $this->downloadIncidenceAttachment($ITSM, $idIncidence, $idAttachment);
+        } catch (Throwable $e) {
+            echo $e->getMessage();
+            exit;
+        }
+
+        echo $result;
+        exit;
+    }
+
+
 }
diff --git a/pandora_console/include/styles/integriaims.css b/pandora_console/include/styles/integriaims.css
index e55c992bbe..01383a8833 100644
--- a/pandora_console/include/styles/integriaims.css
+++ b/pandora_console/include/styles/integriaims.css
@@ -4,7 +4,7 @@ div.priority {
   color: #fff;
   text-align: center;
   border-radius: 5px;
-  padding: 5px;
+  padding: 0px;
   display: table-cell;
   vertical-align: middle;
 }
@@ -47,13 +47,8 @@ div.integria_details_row_three {
 
 div.integria_details_description {
   width: 100%;
-}
-
-div.integria_details_description textarea {
-  width: 100%;
-  background-color: #fbfbfb;
-  resize: vertical;
-  color: #000;
+  overflow: auto;
+  padding: 0px 10px;
 }
 
 .integriaims_details_box {
@@ -143,3 +138,10 @@ div.incidence-type-custom-fields {
 .incidence-type-custom-fields > div.incidence-type-custom-fields-textarea {
   flex: 1 1 100%;
 }
+
+.label_select,
+.label_select_simple {
+  display: flex;
+  flex-direction: column;
+  margin: 0;
+}
diff --git a/pandora_console/views/ITSM/ITSMCustomFields.php b/pandora_console/views/ITSM/ITSMCustomFields.php
index 6837ff43f4..378c7d3151 100644
--- a/pandora_console/views/ITSM/ITSMCustomFields.php
+++ b/pandora_console/views/ITSM/ITSMCustomFields.php
@@ -49,7 +49,6 @@ if (empty($customFields) === true) {
             'name'     => 'custom-fields['.$field['idIncidenceTypeField'].']',
             'required' => $field['isRequired'],
             'return'   => true,
-            'value'    => ($fieldsData[$field['idIncidenceTypeField']] ?? null),
         ];
 
         $class = '';
@@ -57,10 +56,13 @@ if (empty($customFields) === true) {
         switch ($field['type']) {
             case 'COMBO':
                 $options['type'] = 'select';
-                $options['fields'] = explode(',', $field['comboValue']);
+                $fieldsValues = explode(',', $field['comboValue']);
+                $options['fields'] = array_combine($fieldsValues, $fieldsValues);
+                $options['selected'] = ($fieldsData[$field['idIncidenceTypeField']] ?? null);
             break;
 
             case 'TEXT':
+                $options['value'] = ($fieldsData[$field['idIncidenceTypeField']] ?? null);
                 $options['type'] = 'text';
             break;
 
@@ -73,10 +75,12 @@ if (empty($customFields) === true) {
             break;
 
             case 'NUMERIC':
+                $options['value'] = ($fieldsData[$field['idIncidenceTypeField']] ?? null);
                 $options['type'] = 'number';
             break;
 
             case 'TEXTAREA':
+                $options['value'] = ($fieldsData[$field['idIncidenceTypeField']] ?? null);
                 $options['type'] = 'textarea';
                 $options['rows'] = 4;
                 $options['columns'] = 0;
diff --git a/pandora_console/views/ITSM/ITSMTicketDetailView.php b/pandora_console/views/ITSM/ITSMTicketDetailView.php
new file mode 100644
index 0000000000..592cd44b8f
--- /dev/null
+++ b/pandora_console/views/ITSM/ITSMTicketDetailView.php
@@ -0,0 +1,386 @@
+<?php
+/**
+ * ITSM View detailed ticket
+ *
+ * @category   Console Class
+ * @package    Pandora FMS
+ * @subpackage ITSM
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ *   |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ *  |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Artica Soluciones Tecnologicas
+ * Please see http://pandorafms.org for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+global $config;
+
+ui_require_css_file('integriaims');
+
+// Header tabs.
+ui_print_standard_header(
+    __('ITSM Detailed'),
+    '',
+    false,
+    'integria_tab',
+    false,
+    [],
+    [
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',
+            'label' => __('ITSM'),
+        ],
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm&operation=list',
+            'label' => __('ITSM Tickets'),
+        ],
+        [
+            'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',
+            'label' => __('ITSM Detailed'),
+        ],
+    ]
+);
+
+if (empty($error) === false) {
+    ui_print_error_message($error);
+}
+
+if (empty($successfullyMsg) === false) {
+    ui_print_success_message($successfullyMsg);
+}
+
+if (empty($incidence) === true) {
+    ui_print_info_message(__('Incidence not found'));
+} else {
+    $nameIncidence = '--';
+    if (empty($incidence['idIncidenceType']) === false) {
+        $nameIncidence = $objectTypes[$incidence['idIncidenceType']];
+    }
+
+    // Details box.
+    $details_box = '<div class="integriaims_details_box integriaims_details_box_five">';
+    $details_box .= '<div class="integriaims_details_titles">'.__('Status').'</div>';
+    $details_box .= '<div class="integriaims_details_titles">'.__('Resolution').'</div>';
+    $details_box .= '<div class="integriaims_details_titles">'.__('Group').'</div>';
+    $details_box .= '<div class="integriaims_details_titles">'.__('Priority').'</div>';
+    $details_box .= '<div class="integriaims_details_titles">'.__('Type').'</div>';
+    $details_box .= '<div>';
+    $details_box .= html_print_image('images/heart.png', true, ['class' => 'invert_filter']);
+    $details_box .= '</div>';
+    $details_box .= '<div>';
+    $details_box .= html_print_image('images/builder@svg.svg', true, ['class' => 'invert_filter']);
+    $details_box .= '</div>';
+    $details_box .= '<div>';
+    $details_box .= html_print_image('images/user_green.png', true, ['class' => 'invert_filter']);
+    $details_box .= '</div>';
+    $details_box .= '<div>';
+    $details_box .= $priorityDiv;
+    $details_box .= '</div>';
+    $details_box .= '<div>';
+    $details_box .= html_print_image('images/incidents.png', true, ['class' => 'invert_filter']);
+    $details_box .= '</div>';
+    $details_box .= '<div>'.$status[$incidence['status']].'</div>';
+    $details_box .= '<div>';
+    $details_box .= ($incidence['resolution'] !== 'NOTRESOLVED') ? $resolutions[$incidence['resolution']] : '--';
+    $details_box .= '</div>';
+    $details_box .= '<div>'.$groups[$incidence['idGroup']].'</div>';
+    $details_box .= '<div>'.$priorities[$incidence['priority']].'</div>';
+    $details_box .= '<div>';
+    $details_box .= $nameIncidence;
+    $details_box .= '</div>';
+    $details_box .= '</div>';
+
+    // People box.
+    $people_box = '<div class="integriaims_details_box integriaims_details_box_three">';
+    $people_box .= '<div>';
+    $people_box .= html_print_image('images/header_user_green.png', true, ['width' => '21']);
+    $people_box .= '</div>';
+    $people_box .= '<div>';
+    $people_box .= html_print_image('images/header_user_green.png', true, ['width' => '21']);
+    $people_box .= '</div>';
+    $people_box .= '<div>';
+    $people_box .= html_print_image('images/header_user_green.png', true, ['width' => '21']);
+    $people_box .= '</div>';
+
+    $people_box .= '<div class="integriaims_details_titles">'.__('Created by').':</div>';
+    $people_box .= '<div class="integriaims_details_titles">'.__('Owned by').':</div>';
+    $people_box .= '<div class="integriaims_details_titles">'.__('Closed by').':</div>';
+
+    $people_box .= '<div>';
+    $people_box .= (empty($incidence['idCreator']) === false) ? $users[$incidence['idCreator']] : '--';
+    $people_box .= '</div>';
+    $people_box .= '<div>';
+    $people_box .= (empty($incidence['owner']) === false) ? $users[$incidence['owner']] : '--';
+    $people_box .= '</div>';
+    $people_box .= '<div>';
+    $people_box .= (empty($incidence['closedBy']) === false) ? $users[$incidence['closedBy']] : '--';
+    $people_box .= '</div>';
+    $people_box .= '</div>';
+
+    // Dates box.
+    $dates_box = '<div class="integriaims_details_box integriaims_details_box_three">';
+    $dates_box .= '<div>';
+    $dates_box .= html_print_image('images/tick.png', true, ['class' => 'invert_filter']);
+    $dates_box .= '</div>';
+    $dates_box .= '<div>';
+    $dates_box .= html_print_image('images/update.png', true, ['width' => '21', 'class' => 'invert_filter']);
+    $dates_box .= '</div>';
+    $dates_box .= '<div>';
+    $dates_box .= html_print_image('images/mul.png', true, ['class' => 'invert_filter']);
+    $dates_box .= '</div>';
+
+    $dates_box .= '<div class="integriaims_details_titles">'.__('Created at').':</div>';
+    $dates_box .= '<div class="integriaims_details_titles">'.__('Updated at').':</div>';
+    $dates_box .= '<div class="integriaims_details_titles">'.__('Closed at').':</div>';
+
+    $dates_box .= '<div>'.$incidence['startDate'].'</div>';
+    $dates_box .= '<div>'.$incidence['updateDate'].'</div>';
+    $dates_box .= '<div>';
+    $dates_box .= (($incidence['closeDate'] === '0000-00-00 00:00:00') ? '--' : $incidence['closeDate']);
+    $dates_box .= '</div>';
+    $dates_box .= '</div>';
+
+    // Show details, people and dates.
+    echo '<div class="integria_details">';
+    ui_toggle(
+        $details_box,
+        __('Details'),
+        '',
+        'details_box',
+        false,
+        false,
+        '',
+        'integria_details_content white-box-content',
+        'integria_details_shadow box-flat white_table_graph'
+    );
+    ui_toggle(
+        $people_box,
+        __('People'),
+        '',
+        'people_box',
+        false,
+        false,
+        '',
+        'integria_details_content white-box-content',
+        'integria_details_shadow box-flat white_table_graph'
+    );
+    ui_toggle(
+        $dates_box,
+        __('Dates'),
+        '',
+        'dates_box',
+        false,
+        false,
+        '',
+        'integria_details_content white-box-content',
+        'integria_details_shadow box-flat white_table_graph'
+    );
+    echo '</div>';
+
+    // Show description.
+    $description_box = '<div class="integria_details_description">';
+    $description_box .= $incidence['description'];
+    $description_box .= '</div>';
+    ui_toggle($description_box, __('Description'), '', '', false);
+
+    // Files section table.
+    $table_files_section = new stdClass();
+    $table_files_section->width = '100%';
+    $table_files_section->id = 'files_section_table';
+    $table_files_section->class = 'databox filters';
+    $table_files_section->head = [];
+
+    $table_files_section->data = [];
+    $table_files_section->size = [];
+    $table_files_section->size[0] = '20%';
+    $table_files_section->size[1] = '60%';
+    $table_files_section->size[2] = '20%';
+
+    $table_files_section->data[0][0] = '<div class="label_select">';
+    $table_files_section->data[0][0] .= '<p class="input_label">'.__('File name').':</p>';
+    $table_files_section->data[0][0] .= html_print_input_file('userfile', true);
+    $table_files_section->data[0][1] = '<div class="label_select">';
+    $table_files_section->data[0][1] .= '<p class="input_label">';
+    $table_files_section->data[0][1] .= __('Attachment description');
+    $table_files_section->data[0][1] .= ':</p>';
+    $table_files_section->data[0][1] .= html_print_textarea(
+        'file_description',
+        3,
+        20,
+        '',
+        '',
+        true,
+        'w100p'
+    );
+
+    $table_files_section->data[0][2] = '<div class="w100p">';
+    $table_files_section->data[0][2] .= html_print_submit_button(
+        __('Upload'),
+        'accion',
+        false,
+        [
+            'icon'  => 'wand',
+            'mode'  => 'mini secondary',
+            'class' => 'right',
+        ],
+        true
+    );
+    $table_files_section->data[0][2] .= '</div>';
+
+    // Files list table.
+    $table_files = new stdClass();
+    $table_files->width = '100%';
+    $table_files->class = 'info_table';
+    $table_files->head = [];
+
+    $table_files->head[0] = __('Filename');
+    $table_files->head[1] = __('Timestamp');
+    $table_files->head[2] = __('Description');
+    $table_files->head[3] = __('User');
+    $table_files->head[4] = __('Size');
+    $table_files->head[5] = __('Delete');
+
+    $table_files->data = [];
+
+    $url = \ui_get_full_url('index.php?sec=manageTickets&sec2=operation/ITSM/itsm');
+    foreach ($files['data'] as $key => $file) {
+        $onClick = 'downloadIncidenceAttachment('.$file['idIncidence'].','.$file['idAttachment'];
+        $onClick .= ',\''.ui_get_full_url('ajax.php').'\',\''.$file['filename'].'\')';
+
+        $table_files->data[$key][0] = '<a href="#" onclick="'.$onClick.'">'.$file['filename'].'</a>';
+        $table_files->data[$key][1] = $file['timestamp'];
+        $table_files->data[$key][2] = $file['description'];
+        $table_files->data[$key][3] = $file['idUser'];
+        $table_files->data[$key][4] = $file['size'];
+        $urlDelete = $url.'&operation=detail&idIncidence='.$file['idIncidence'].'&idAttachment='.$file['idAttachment'];
+        $onclickDelete = 'javascript:if (!confirm(\''.__('Are you sure?').'\')) return false;';
+        $table_files->data[$key][5] .= '<a href="'.$urlDelete.'" onClick="'.$onclickDelete.'">';
+        $table_files->data[$key][5] .= html_print_image(
+            'images/delete.svg',
+            true,
+            [
+                'title' => __('Delete'),
+                'class' => 'invert_filter main_menu_icon',
+            ]
+        );
+        $table_files->data[$key][5] .= '</a>';
+    }
+
+    $upload_file_form = '<div class="w100p">';
+    $upload_file_form .= '<form method="post" id="file_control" enctype="multipart/form-data">';
+    $upload_file_form .= '<h4>'.__('Add attachment').'</h4>';
+    $upload_file_form .= html_print_table($table_files_section, true);
+    $upload_file_form .= html_print_input_hidden('upload_file', true, true);
+    $upload_file_form .= '<h4>'.__('Attached files').'</h4>';
+    $upload_file_form .= html_print_table($table_files, true);
+    $upload_file_form .= '</form>';
+    $upload_file_form .= '</div>';
+
+    echo '<div class="ui_toggle">';
+    ui_toggle(
+        $upload_file_form,
+        __('Attached files'),
+        '',
+        '',
+        true,
+        false,
+        'white-box-content',
+        'w98p'
+    );
+    echo '</div>';
+
+    // Comments section table.
+    $table_comments_section = new stdClass();
+    $table_comments_section->width = '100%';
+    $table_comments_section->id = 'files_section_table';
+    $table_comments_section->class = 'databox filters';
+    $table_comments_section->head = [];
+    $table_comments_section->size = [];
+    $table_comments_section->size[0] = '80%';
+    $table_comments_section->size[1] = '20%';
+
+    $table_comments_section->data = [];
+    $table_comments_section->data[0][0] = '<div class="label_select">';
+    $table_comments_section->data[0][0] .= '<p class="input_label">';
+    $table_comments_section->data[0][0] .= __('Description');
+    $table_comments_section->data[0][0] .= ':</p>';
+    $table_comments_section->data[0][0] .= html_print_textarea(
+        'comment_description',
+        3,
+        20,
+        '',
+        '',
+        true,
+        'w100p'
+    );
+
+    $table_comments_section->data[0][1] = '<div class="w100p">';
+    $table_comments_section->data[0][1] .= html_print_submit_button(
+        __('Add'),
+        'accion',
+        false,
+        [
+            'icon'  => 'wand',
+            'mode'  => 'mini secondary',
+            'class' => 'right',
+        ],
+        true
+    );
+    $table_comments_section->data[0][1] .= '</div>';
+
+    // Comments list table.
+    $comment_table = '';
+    if (empty($wus) === false) {
+        foreach ($wus['data'] as $wu) {
+            $comment_table .= '<div class="comment_title">';
+            $comment_table .= $wu['idUser'];
+            $comment_table .= '<span>&nbspsaid&nbsp</span>';
+            $comment_table .= $wu['timestamp'];
+            $comment_table .= '<span class="float-right">';
+            $comment_table .= $wu['duration'];
+            $comment_table .= '&nbspHours</span>';
+            $comment_table .= '</div>';
+            $comment_table .= '<div class="comment_body">';
+            $comment_table .= $wu['description'];
+            $comment_table .= '</div>';
+        }
+    } else {
+        $comment_table = __('No comments found');
+    }
+
+    $upload_comment_form = '<div class="w100p">';
+    $upload_comment_form .= '<form method="post" id="comment_form" enctype="multipart/form-data">';
+    $upload_comment_form .= '<h4>'.__('Add comment').'</h4>';
+    $upload_comment_form .= html_print_table($table_comments_section, true);
+    $upload_comment_form .= html_print_input_hidden('addComment', 1, true);
+    $upload_comment_form .= '</form>';
+    $upload_comment_form .= '<h4>'.__('Comments').'</h4>';
+    $upload_comment_form .= $comment_table;
+    $upload_comment_form .= '</div>';
+
+    echo '<div class="ui_toggle">';
+    ui_toggle(
+        $upload_comment_form,
+        __('Comments'),
+        '',
+        '',
+        true,
+        false,
+        'white-box-content',
+        'w98p'
+    );
+    echo '</div>';
+}
diff --git a/pandora_console/views/ITSM/ITSMTicketEditView.php b/pandora_console/views/ITSM/ITSMTicketEditView.php
index 7ebfaa69ad..8c55f32845 100644
--- a/pandora_console/views/ITSM/ITSMTicketEditView.php
+++ b/pandora_console/views/ITSM/ITSMTicketEditView.php
@@ -55,7 +55,6 @@ ui_print_standard_header(
     ]
 );
 
-
 if (empty($error) === false) {
     ui_print_error_message($error);
 }
@@ -92,7 +91,7 @@ $table->data[0][0] = html_print_label_input_block(
 );
 
 $integria_logo = 'images/integria_logo_gray.png';
-if ($config['style'] === 'pandora_black' && !is_metaconsole()) {
+if ($config['style'] === 'pandora_black' && is_metaconsole() === false) {
     $integria_logo = 'images/integria_logo.svg';
 }
 
@@ -177,7 +176,10 @@ $table->data[3][0] = html_print_label_input_block(
 );
 
 $table->data[3][1] = html_print_label_input_block(
-    __('Creator').ui_print_help_tip(__('This field corresponds to the Integria IMS user specified in Integria IMS setup'), true),
+    __('Creator').ui_print_help_tip(
+        __('This field corresponds to the Integria IMS user specified in Integria IMS setup'),
+        true
+    ),
     html_print_input_text(
         'idCreator',
         $config['integria_user'],
@@ -200,7 +202,7 @@ $table->data[3][2] = html_print_label_input_block(
         true,
         0,
         false,
-        false,
+        true,
         'w100p',
     )
 );
@@ -235,24 +237,10 @@ $table->data[5][0] = html_print_label_input_block(
     )
 );
 
-// $table->data[5][0] = html_print_label_input_block(
-// __('File name'),
-// html_print_input_file('userfile', true)
-// );
-//
-// $table->data[6][0] = html_print_label_input_block(
-// __('Attachment description'),
-// html_print_textarea(
-// 'file_description',
-// 3,
-// 20,
-// '',
-// '',
-// true
-// )
-// );
-// Print forms and stuff.
-echo '<form class="max_floating_element_size" id="create_integria_incident_form" name="create_integria_incident_form" method="POST" enctype="multipart/form-data">';
+$formName = 'create_integria_incident_form';
+$classForm = 'max_floating_element_size';
+$enctype = 'multipart/form-data';
+echo '<form class="'.$classForm.'" id="'.$formName.'" name="'.$formName.'" method="POST" enctype="'.$enctype.'">';
 html_print_table($table);
 $buttons = '';
 if (empty($idIncidence) === true) {
@@ -279,6 +267,8 @@ if (empty($idIncidence) === true) {
 html_print_action_buttons($buttons);
 
 echo '</form>';
+
+ui_require_javascript_file('tinymce', 'vendor/tinymce/tinymce/');
 ?>
 
 <script type="text/javascript">
@@ -286,6 +276,8 @@ echo '</form>';
         var ajax_url = '<?php echo ui_get_full_url('ajax.php'); ?>';
         var fieldsData = '<?php echo json_encode($incidence['typeFieldData']); ?>';
 
+        defineTinyMCE('#textarea_description');
+
         $('#status').on('change', function() {
             if ($(this).val() === 'CLOSED') {
                 $('#incidence-resolution').show();
diff --git a/pandora_console/views/ITSM/ITSMTicketListView.php b/pandora_console/views/ITSM/ITSMTicketListView.php
index f7babace3b..a26dfb5f6c 100644
--- a/pandora_console/views/ITSM/ITSMTicketListView.php
+++ b/pandora_console/views/ITSM/ITSMTicketListView.php
@@ -53,36 +53,26 @@ ui_print_standard_header(
     ]
 );
 
-/*
-    if (isset($resultDelete) === true) {
-    \ui_print_result_message(
-        $resultDelete,
-        __('Successfully deleted'),
-        __('Could not be deleted')
-    );
-    }
-
-    if (isset($resultCopy) === true) {
-    \ui_print_result_message(
-        $resultCopy,
-        __('Successfully duplicate'),
-        __('Could not be duplicate')
-    );
-    }
-*/
+if (empty($error) === false) {
+    ui_print_error_message($error);
+}
 
+if (empty($successfullyMsg) === false) {
+    ui_print_success_message($successfullyMsg);
+}
 
 try {
     $columns = [
-        'id',
+        'idIncidence',
         'title',
         'groupCompany',
         'statusResolution',
         'priority',
-        'updated',
-        'started',
-        'creator',
+        'updateDate',
+        'startDate',
+        'idCreator',
         'owner',
+        'operation',
     ];
 
     $column_names = [
@@ -95,6 +85,10 @@ try {
         __('Started'),
         __('Creator'),
         __('Owner'),
+        [
+            'text'  => __('Op.'),
+            'class' => 'table_action_buttons w90px',
+        ],
     ];
 
     ui_print_datatable(
@@ -109,6 +103,11 @@ try {
             'no_sortable_columns' => [
                 2,
                 3,
+                -1,
+            ],
+            'order'               => [
+                'field'     => 'updateDate',
+                'direction' => 'desc',
             ],
             'search_button_class' => 'sub filter float-right',
             'filter_main_class'   => 'box-flat white_table_graph fixed_filter_bar',
@@ -118,14 +117,14 @@ try {
     echo $e->getMessage();
 }
 
-$input_button = '';
-$input_button = html_print_button(
+$input_button = '<form method="post" action="index.php?sec=manageTickets&sec2=operation/ITSM/itsm&operation=edit">';
+$input_button .= html_print_submit_button(
     __('Create'),
     '',
     false,
-    '',
     ['icon' => 'next'],
     true
 );
+$input_button .= '</form>';
 
 html_print_action_buttons($input_button);

From 5333dbb6e30e669c45ea4869419bd2f3802ce0d3 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Thu, 29 Jun 2023 17:06:59 +0200
Subject: [PATCH 004/116] WIP:Automonitorization Upgrades

---
 pandora_server/bin/pandora_server             |   1 +
 pandora_server/lib/PandoraFMS/Core.pm         | 212 +++++++++++++++++-
 pandora_server/lib/PandoraFMS/DB.pm           |  15 ++
 .../lib/PandoraFMS/ProducerConsumerServer.pm  |   6 +-
 pandora_server/lib/PandoraFMS/Tools.pm        |  80 +++++++
 5 files changed, 308 insertions(+), 6 deletions(-)

diff --git a/pandora_server/bin/pandora_server b/pandora_server/bin/pandora_server
index 8530b998c4..0de5d7e66a 100755
--- a/pandora_server/bin/pandora_server
+++ b/pandora_server/bin/pandora_server
@@ -551,6 +551,7 @@ sub pandora_server_tasks ($) {
 				&& !is_metaconsole($pa_config)
 				&& $counter % $pa_config->{'self_monitoring_interval'} == 0) {
 				pandora_self_monitoring ($pa_config, $dbh);
+				pandora_installation_monitoring($pa_config, $dbh);
 			}
 		};
 
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 4fa53ee296..3a5ca2f513 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -102,6 +102,8 @@ Exported Functions:
 
 =item * C<pandora_thread_monitoring>
 
+=item * C<pandora_installation_monitoring>
+
 =back
 
 =head1 METHODS
@@ -129,7 +131,7 @@ use Text::ParseWords;
 use Math::Trig;			# Math functions
 
 # Debugging
-#use Data::Dumper;
+use Data::Dumper;
 
 # Force XML::Simple to use XML::Parser instead SAX to manage XML
 # due a bug processing some XML with blank spaces.
@@ -262,6 +264,7 @@ our @EXPORT = qw(
 	pandora_server_statistics
 	pandora_self_monitoring
 	pandora_thread_monitoring
+	pandora_installation_monitoring
 	pandora_process_policy_queue
 	pandora_sync_agents_integria
 	pandora_get_integria_ticket_types
@@ -6094,6 +6097,13 @@ sub pandora_self_monitoring ($$) {
 	my $free_disk_spool = disk_free ($pa_config->{"incomingdir"});
 	$free_disk_spool = '' unless defined ($free_disk_spool);
 	my $my_data_server = get_db_value ($dbh, "SELECT id_server FROM tserver WHERE server_type = ? AND name = '".$pa_config->{"servername"}."'", DATASERVER);
+	my $total_mem = total_mem();
+	my $free_mem_percentage;
+	if(defined($total_mem) && $free_mem ne '') {
+		$free_mem_percentage = ($free_mem / $total_mem ) * 100;
+	} else {
+		$free_mem_percentage = '';
+	}
 
 	# Number of unknown agents
 	my $agents_unknown = 0;
@@ -6124,6 +6134,37 @@ sub pandora_self_monitoring ($$) {
 	}
 
 	my $elasticsearch_perfomance = enterprise_hook("elasticsearch_performance", [$pa_config, $dbh]);
+	my $num_threads = 0;
+	$num_threads = get_db_value ($dbh, "SELECT SUM(threads) FROM tserver WHERE name = '".$pa_config->{"servername"}."'");
+	my $cpu_load = 0;
+	$cpu_load = cpu_load();
+
+
+	## Modules Networks average.
+	my $totalNetworkModules = get_db_value(
+		$dbh,
+		'SELECT count(*)
+		FROM tagente_modulo
+		WHERE id_tipo_modulo
+		BETWEEN 6 AND 18'
+	);
+
+	my $totalModuleIntervalTime = get_db_value(
+		$dbh,
+		'SELECT SUM(module_interval)
+			FROM tagente_modulo
+			WHERE id_tipo_modulo
+			BETWEEN 6 AND 18'
+	);
+
+	my $data_in_files = count_files_ext($pa_config->{"incomingdir"}, 'data');
+	my $data_in_files_badxml = count_files_ext($pa_config->{"incomingdir"}, 'data_BADXML');
+	my $averageTime = 0;
+
+	if (defined($totalModuleIntervalTime) && defined($totalNetworkModules)) {
+			$averageTime = $totalNetworkModules / $totalModuleIntervalTime;
+	}
+
 
 	$xml_output .= $elasticsearch_perfomance if defined($elasticsearch_perfomance);
 	
@@ -6160,7 +6201,14 @@ sub pandora_self_monitoring ($$) {
 		$xml_output .=" <data>$free_mem</data>";
 		$xml_output .=" </module>";
 	}
-	
+
+	$xml_output .=" <module>";
+	$xml_output .=" <name>Free_RAM_perccentage</name>";
+	$xml_output .=" <type>generic_data</type>";
+	$xml_output .=" <data>$free_mem_percentage</data>";
+	$xml_output .=" <unit>%</unit>";
+	$xml_output .=" </module>";
+
 	if (defined($free_disk_spool)) {
 		$xml_output .=" <module>";
 		$xml_output .=" <name>FreeDisk_SpoolDir</name>";
@@ -6169,6 +6217,43 @@ sub pandora_self_monitoring ($$) {
 		$xml_output .=" </module>";
 	}
 
+	$xml_output .=" <module>";
+	$xml_output .=" <name>Total Threads</name>";
+	$xml_output .=" <type>generic_data</type>";
+	$xml_output .=" <data>$num_threads</data>";
+	$xml_output .=" </module>";
+
+	$xml_output .=" <module>";
+	$xml_output .=" <name>CPU Load</name>";
+	$xml_output .=" <type>generic_data</type>";
+	$xml_output .=" <data>$cpu_load</data>";
+	$xml_output .=" <unit>%</unit>";
+	$xml_output .=" </module>";
+
+	$xml_output .=" <module>";
+	$xml_output .=" <name>Network Modules Int AVG</name>";
+	$xml_output .=" <type>generic_data</type>";
+	$xml_output .=" <data>$averageTime</data>";
+	$xml_output .=" <unit>seconds</unit>";
+	$xml_output .=" </module>";
+
+	if(defined($data_in_files)) {
+		$xml_output .=" <module>";
+		$xml_output .=" <name>Data_in_files</name>";
+		$xml_output .=" <type>generic_data</type>";
+		$xml_output .=" <data>$data_in_files</data>";
+		$xml_output .=" </module>";
+	}
+
+	if(defined($data_in_files_badxml)) {
+		$xml_output .=" <module>";
+		$xml_output .=" <name>Data_in_BADXML_files</name>";
+		$xml_output .=" <type>generic_data</type>";
+		$xml_output .=" <data>$data_in_files_badxml</data>";
+		$xml_output .=" </module>";
+	}
+
+
 	$xml_output .= "</agent_data>";
 
 	my $filename = $pa_config->{"incomingdir"}."/".$pa_config->{'servername'}.".self.".$utimestamp.".data";
@@ -6192,15 +6277,21 @@ sub pandora_thread_monitoring ($$$) {
 	my $timestamp = strftime ("%Y-%m-%d %H:%M:%S", localtime());
 
 	my $xml_output = "";
-	
+	my $module_parent = "";
+
+	# All trhead modules are "Status" module sons.
+	$module_parent = 'Status';
+
 	$xml_output = "<agent_data os_name='$OS' os_version='$OS_VERSION' version='" . $pa_config->{'version'} . "' description='" . $pa_config->{'rb_product_name'} . " Server version " . $pa_config->{'version'} . "' agent_name='".$pa_config->{'servername'} . "' agent_alias='".$pa_config->{'servername'} . "' interval='".$pa_config->{"self_monitoring_interval"}."' timestamp='".$timestamp."' >";
 	foreach my $server (@{$servers}) {
-		while (my ($tid, $stats) = each(%{$server->getProducerStats()})) {
+		my $producer_stats = $server->getProducerStats();
+		while (my ($tid, $stats) = each(%{$producer_stats})) {
 			$xml_output .=" <module>";
 			$xml_output .=" <name>" . uc($ServerTypes[$server->{'_server_type'}]) . " Producer Status</name>";
 			$xml_output .=" <type>generic_proc</type>";
 			$xml_output .=" <module_group>System</module_group>";
 			$xml_output .=" <data>" . (time() - $stats->{'tstamp'} < 2 * $pa_config->{"self_monitoring_interval"} ? 1 : 0) . "</data>";
+			$xml_output .=" <module_parent>" . $module_parent . "</module_parent>";
 			$xml_output .=" </module>";
 	
 			$xml_output .=" <module>";
@@ -6209,6 +6300,16 @@ sub pandora_thread_monitoring ($$$) {
 			$xml_output .=" <module_group>Performance</module_group>";
 			$xml_output .=" <data>" . $stats->{'rate'} . "</data>";
 			$xml_output .=" <unit>tasks/second</unit>";
+			$xml_output .=" <module_parent>" . $module_parent . "</module_parent>";
+			$xml_output .=" </module>";
+
+			$xml_output .=" <module>";
+			$xml_output .=" <name>" . uc($ServerTypes[$server->{'_server_type'}]) . " Producer Queued Elements</name>";
+			$xml_output .=" <type>generic_data</type>";
+			$xml_output .=" <module_group>Performance</module_group>";
+			$xml_output .=" <data>" . ($#{$stats->{'task_queue'}} + 1) . "</data>";
+			$xml_output .=" <unit>tasks</unit>";
+			$xml_output .=" <module_parent>" . $module_parent . "</module_parent>";
 			$xml_output .=" </module>";
 		}
 
@@ -6223,6 +6324,7 @@ sub pandora_thread_monitoring ($$$) {
 			$xml_output .=" <type>generic_proc</type>";
 			$xml_output .=" <module_group>System</module_group>";
 			$xml_output .=" <data>" . (time() - $stats->{'tstamp'} < 2 * $pa_config->{"self_monitoring_interval"} ? 1 : 0) . "</data>";
+			$xml_output .=" <module_parent>" . $module_parent . "</module_parent>";
 			$xml_output .=" </module>";
 	
 			$xml_output .=" <module>";
@@ -6230,8 +6332,18 @@ sub pandora_thread_monitoring ($$$) {
 			$xml_output .=" <type>generic_data</type>";
 			$xml_output .=" <module_group>Performance</module_group>";
 			$xml_output .=" <data>" . $stats->{'rate'} . "</data>";
+			$xml_output .=" <module_parent>" . $module_parent . "</module_parent>";
 			$xml_output .=" <unit>tasks/second</unit>";
 			$xml_output .=" </module>";
+
+			$xml_output .=" <module>";
+			$xml_output .=" <name>" . uc($ServerTypes[$server->{'_server_type'}]) . " Producer Queued Elements</name>";
+			$xml_output .=" <type>generic_data</type>";
+			$xml_output .=" <module_group>Performance</module_group>";
+			$xml_output .=" <data>" . ($#{$stats->{'task_queue'}} + 1) . "</data>";
+			$xml_output .=" <unit>tasks</unit>";	
+			$xml_output .=" <module_parent>" . $module_parent . "</module_parent>";
+			$xml_output .=" </module>";
 		}
 	}
 	$xml_output .= "</agent_data>";
@@ -6242,6 +6354,98 @@ sub pandora_thread_monitoring ($$$) {
 	close (XMLFILE);
 }
 
+##########################################################################
+=head2 C<< pandora_installation_monitoring (I<$pa_config>, I<$dbh>, I<$servers>) >>
+
+Generate stats for Pandora FMS threads.
+
+=cut
+##########################################################################
+sub pandora_installation_monitoring($$) {
+	my ($pa_config, $dbh) = @_;
+
+	my $utimestamp = time ();
+	my $timestamp = strftime ("%Y-%m-%d %H:%M:%S", localtime());
+	my @modules;
+
+	my $xml_output = "";
+	$xml_output = "<agent_data os_name='$OS' os_version='$OS_VERSION' version='" . $pa_config->{'version'} . "' description='" . $pa_config->{'rb_product_name'} . " Server version " . $pa_config->{'version'} . "' agent_name='pandora.internals' agent_alias='pandora.internals' interval='".$pa_config->{"self_monitoring_interval"}."' timestamp='".$timestamp."' >";
+
+	# Total amount of agents
+	my $module;
+	$module->{'name'} = "total_agents";
+	$module->{'description'} = 'Total amount of agents';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_agente)) FROM tagente');
+	push(@modules, $module);
+	undef $module;
+	# Total amount of modules
+	$module->{'name'} = "total_modules";
+	$module->{'description'} = 'Total modules';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_agente_modulo)) FROM tagente_modulo');
+	push(@modules, $module);
+	undef $module;
+	# Total groups
+	$module->{'name'} = "total_groups";
+	$module->{'description'} = 'Total groups';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_grupo)) FROM tgrupo');
+	push(@modules, $module);
+	undef $module;
+	# Total module data records
+	$module->{'name'} = "total_data";
+	$module->{'description'} = 'Total module data records';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(*) FROM tagente_datos');
+	$module->{'interval'} = '86400';
+	push(@modules, $module);
+	undef $module;
+	# Total module strimg data records
+	$module->{'name'} = "total_string_data";
+	$module->{'description'} = 'Total module string data records';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(*) FROM tagente_datos_string');
+	$module->{'interval'} = '86400';
+	push(@modules, $module);
+	undef $module;
+	# Total agent access record
+	$module->{'name'} = "total_access_data";
+	$module->{'description'} = 'Total agent access records';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(*) FROM tagent_access');
+	push(@modules, $module);
+	undef $module;
+
+	print Dumper(@modules);
+	foreach my $module_data (@modules) {
+		$xml_output .=" <module>";
+		$xml_output .=" <name>" .$module_data->{'name'}. "</name>";
+		$xml_output .=" <data>" . $module_data->{'data'} . "</data>";
+
+		if(defined($module->{'description'})) {
+			$xml_output .=" <description>" .$module_data->{'decription'}. "</description>";
+		}
+		if(defined($module->{'type'})) {
+			$xml_output .=" <type>" .$module_data->{'type'}. "</type>";
+		} else {
+			$xml_output .=" <type>generic_data</type>";
+		}
+		if(defined($module->{'unit'})) {
+			$xml_output .=" <unit>" .$module_data->{'unit'}. "</unit>";
+		}
+		if(defined($module->{'module_parent'})) {
+			$xml_output .=" <module_parent>" .$module_data->{'module_parent'}. "</module_parent>";
+		}
+		if(defined($module->{'interval'})) {
+			$xml_output .=" <moduintervalle_parent>" .$module_data->{'interval'}. "</interval>";
+		}
+
+		$xml_output .=" </module>";
+	}
+
+	$xml_output .= "</agent_data>";
+
+	my $filename = $pa_config->{"incomingdir"}."/pandora.internals.".$utimestamp.".data";
+	open (XMLFILE, ">", $filename) or die "[FATAL] Could not write to the thread monitoring XML file '$filename'";
+	print XMLFILE $xml_output;
+	close (XMLFILE);
+}
+
 ##########################################################################
 =head2 C<< set_master (I<$pa_config>, I<$dbh>) >> 
 
diff --git a/pandora_server/lib/PandoraFMS/DB.pm b/pandora_server/lib/PandoraFMS/DB.pm
index c7544de2f7..0ece8d0c74 100644
--- a/pandora_server/lib/PandoraFMS/DB.pm
+++ b/pandora_server/lib/PandoraFMS/DB.pm
@@ -71,6 +71,7 @@ our @EXPORT = qw(
 		get_agent_group
 		get_agent_name
 		get_agent_module_id
+		get_agent_module_id_by_name
 		get_alert_template_module_id
 		get_alert_template_name
 		get_command_id
@@ -698,6 +699,20 @@ sub get_agent_module_id ($$$) {
 	return defined ($rc) ? $rc : -1;
 }
 
+########################################################################
+## Return module id given the module name and agent name.
+########################################################################
+sub get_agent_module_id_by_name ($$$) {
+	my ($dbh, $module_name, $agent_name) = @_;
+	
+	my $rc = get_db_value (
+		$dbh,
+		'SELECT id_agente_modulo 
+		FROM tagente_modulo tam LEFT JOIN tagente ta ON tam.id_agente = ta.id_agente 
+		WHERE tam.nombre = ? AND ta.nombre = ?', safe_input($module_name), $agent_name);
+	return defined ($rc) ? $rc : -1;
+}
+
 ##########################################################################
 ## Return template id given the template name.
 ##########################################################################
diff --git a/pandora_server/lib/PandoraFMS/ProducerConsumerServer.pm b/pandora_server/lib/PandoraFMS/ProducerConsumerServer.pm
index 770bc06522..51b0c3f35e 100644
--- a/pandora_server/lib/PandoraFMS/ProducerConsumerServer.pm
+++ b/pandora_server/lib/PandoraFMS/ProducerConsumerServer.pm
@@ -95,7 +95,8 @@ sub run ($$$$$) {
 			'tstamp'      => time(),
 			'rate'        => 0,
 			'rate_count'  => 0,
-			'rate_tstamp' => time()
+			'rate_tstamp' => time(),
+			'task_queue'  => $task_queue,
 		});
 
 		my $thr = threads->create ({'exit' => 'thread_only'},
@@ -127,7 +128,8 @@ sub run ($$$$$) {
 		'tstamp'      => time(),
 		'rate'        => 0,
 		'rate_count'  => 0,
-		'rate_tstamp' => time()
+		'rate_tstamp' => time(),
+		'task_queue'  => $task_queue,
 	});
 
 	# Launch producer thread
diff --git a/pandora_server/lib/PandoraFMS/Tools.pm b/pandora_server/lib/PandoraFMS/Tools.pm
index fb4b551a3a..8ffdba454b 100755
--- a/pandora_server/lib/PandoraFMS/Tools.pm
+++ b/pandora_server/lib/PandoraFMS/Tools.pm
@@ -140,6 +140,9 @@ our @EXPORT = qw(
 	disk_free
 	load_average
 	free_mem
+	total_mem
+	cpu_load
+	count_files_ext
 	md5
 	md5_init
 	pandora_ping
@@ -1405,6 +1408,83 @@ sub free_mem {
 	return $free_mem;
 }
 
+sub total_mem {
+	my $total_mem;
+
+	my $OSNAME = $^O;
+
+	if ($OSNAME eq "freebsd"){
+		$total_mem = `/sbin/sysctl sysctl -b hw.physmem`;
+		# in kilobytes
+		$total_mem = $total_mem / 1024;
+
+	}
+	elsif ($OSNAME eq "netbsd"){
+		$total_mem = `cat /proc/meminfo | grep MemTotal | awk '{ print \$2 }'`;
+	}
+	elsif ($OSNAME eq "MSWin32"){
+		$total_mem = `wmic ComputerSystem get TotalPhysicalMemory /Value`;
+		if ($total_mem =~ m/=(.*)$/gm) {
+			$total_mem = $1;
+		} else {
+			$total_mem = undef;
+		}
+	}
+	# by default LINUX calls
+	else {
+		$total_mem = `free | grep Mem | awk '{ print \$2 }'`;
+	}
+	return $total_mem;
+}
+
+
+################################################################################
+## SUB CPU load
+	# Get CPU load (%)
+################################################################################
+sub cpu_load {
+	my $cpu_load;
+
+	my $OSNAME = $^O;
+	
+	if ($OSNAME eq "MSWin32"){
+		$cpu_load = `wmic cpu get loadpercentage|find /I /V "Loadpercentage" | findstr /r "[0-9]" `;
+	}
+	# by default LINUX calls
+	else {
+		$cpu_load = `top -bn 2 -d 0.01 | grep 'Cpu' | tail -n 1 | awk '{ print \$2+\$4+\$6 }'`;
+	}
+
+	return $cpu_load;
+}
+
+################################################################################
+## SUB count_files
+	# Count files in an specific folder by extension
+################################################################################
+sub count_files_ext($$) {
+	my($path, $ext) = @_;
+
+	my $count=0;
+	my $OSNAME = $^O;
+	
+	if ($OSNAME eq "MSWin32"){
+		$path =~ '/^([a-zA-Z]:)?(\\\\[^\\/:*?\"<>|]+)*\\\\?/';
+		my $drive = $1;
+		my $folder = $2;
+
+		$count = `wmic datafile where "drive=\'$drive\' and path=\'$folder\' and extension=\'$ext\'" get /value | find /c "="`;
+		if ($count =~ m/=(.*)$/gm) {
+			$count = $1;
+		}
+			$count = undef;
+			
+	} else {
+		$count = `find $path -type f -name "*.$ext" | wc -l`
+	}
+
+	return $count;
+}
 ################################################################################
 ## SUB ticks_totime
 	# Transform a snmp timeticks count in a date

From 538a2b90b7ccfc364a47080db46307c84654712d Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Mon, 3 Jul 2023 17:48:47 +0200
Subject: [PATCH 005/116] WIP:Automonitorization Upgrades

---
 pandora_server/lib/PandoraFMS/Core.pm | 96 ++++++++++++++++++++++++---
 1 file changed, 88 insertions(+), 8 deletions(-)

diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 3a5ca2f513..452b4d4825 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -6378,18 +6378,21 @@ sub pandora_installation_monitoring($$) {
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_agente)) FROM tagente');
 	push(@modules, $module);
 	undef $module;
+
 	# Total amount of modules
 	$module->{'name'} = "total_modules";
 	$module->{'description'} = 'Total modules';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_agente_modulo)) FROM tagente_modulo');
 	push(@modules, $module);
 	undef $module;
+
 	# Total groups
 	$module->{'name'} = "total_groups";
 	$module->{'description'} = 'Total groups';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_grupo)) FROM tgrupo');
 	push(@modules, $module);
 	undef $module;
+
 	# Total module data records
 	$module->{'name'} = "total_data";
 	$module->{'description'} = 'Total module data records';
@@ -6404,6 +6407,7 @@ sub pandora_installation_monitoring($$) {
 	$module->{'interval'} = '86400';
 	push(@modules, $module);
 	undef $module;
+
 	# Total agent access record
 	$module->{'name'} = "total_access_data";
 	$module->{'description'} = 'Total agent access records';
@@ -6411,28 +6415,104 @@ sub pandora_installation_monitoring($$) {
 	push(@modules, $module);
 	undef $module;
 
-	print Dumper(@modules);
+	# Tables fragmentation
+	$module->{'name'} = "tables_fragmentation";
+	$module->{'description'} = 'Tables fragmentation';
+	$module->{'data'} = get_db_value(
+		$dbh,
+		"SELECT
+				MAX( (data_free / data_length) / 100) AS frag_percent_max
+		FROM
+				information_schema.tables
+		WHERE
+				table_schema not in ('information_schema', 'mysql')
+				AND table_name NOT IN ('tagent_access, tevento')"
+	);
+	$module->{'unit'} = '%';
+	push(@modules, $module); 
+	undef $module;
+
+	# License Usage
+	$module->{'name'} = "license_usage";
+	$module->{'description'} = 'License Usage';
+	$module->{'unit'} = '%';
+	my $license_usage = enterprise_hook('get_license_usage',[$dbh]);
+	if(! defined($license_usage)) {
+		$module->{'data'} = 0;
+	} else {
+		$module->{'data'} = $license_usage;
+	}
+	push(@modules, $module); 
+	undef $module;
+
+	# General info about queries
+	my $select = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_select');
+	my $insert = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_insert');
+	my $update = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_update');
+	my $replace = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_replace');
+	my $delete = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_delete');
+	my $data_size = get_db_value($dbh, 'SELECT SUM(data_length)/(1024*1024) FROM information_schema.TABLES');
+	my $index_size = get_db_value($dbh, 'SELECT SUM(index_length)/(1024*1024) FROM information_schema.TABLES');
+	my $writes = $insert + $update + $replace + $delete;
+
+	# Mysql Questions - Reads
+	$module->{'name'} = "mysql_questions_reads";
+	$module->{'description'} = 'MySQL: Questions - Reads (#): Number of read questions';
+	$module->{'data'} = $select;
+	$module->{'unit'} = 'qu';
+	push(@modules, $module); 
+	undef $module;
+
+	# Mysql Questions - Writes
+	my $question_writes = 0;
+	if(($writes + $select) > 0) {
+		$question_writes = (($writes * 10000) / ($select + $writes)) / 100;
+	}
+	$module->{'name'} = "mysql_questions_writes";
+	$module->{'description'} = 'MySQL: Questions - Writes (#): Number of writed questions';
+	$module->{'data'} = $question_writes;
+	$module->{'unit'} = 'qu';
+	push(@modules, $module); 
+	undef $module;
+
+	# Mysql Size of data
+	$module->{'name'} = "mysql_size_of_data";
+	$module->{'description'} = 'MySQL: Size of data (MB): Size of stored data in megabytes';
+	$module->{'data'} = $data_size;
+	$module->{'unit'} = 'MB';
+	push(@modules, $module); 
+	undef $module;
+
+	# Mysql Size of indexed
+	$module->{'name'} = "mysql_size_of_indexes";
+	$module->{'description'} = 'Size of indexes (MB): Size of stored indexes in megabytes';
+	$module->{'data'} = $index_size;
+	$module->{'unit'} = 'MB';
+	push(@modules, $module); 
+	undef $module;
+
+	# Build xml modules.
 	foreach my $module_data (@modules) {
 		$xml_output .=" <module>";
 		$xml_output .=" <name>" .$module_data->{'name'}. "</name>";
 		$xml_output .=" <data>" . $module_data->{'data'} . "</data>";
 
-		if(defined($module->{'description'})) {
-			$xml_output .=" <description>" .$module_data->{'decription'}. "</description>";
+		if(defined($module_data->{'description'})) {
+			$xml_output .=" <description>" .$module_data->{'description'}. "</description>";
 		}
-		if(defined($module->{'type'})) {
+		if(defined($module_data->{'type'})) {
 			$xml_output .=" <type>" .$module_data->{'type'}. "</type>";
 		} else {
 			$xml_output .=" <type>generic_data</type>";
 		}
-		if(defined($module->{'unit'})) {
+		if(defined($module_data->{'unit'})) {
 			$xml_output .=" <unit>" .$module_data->{'unit'}. "</unit>";
 		}
-		if(defined($module->{'module_parent'})) {
+		if(defined($module_data->{'module_parent'})) {
 			$xml_output .=" <module_parent>" .$module_data->{'module_parent'}. "</module_parent>";
 		}
-		if(defined($module->{'interval'})) {
-			$xml_output .=" <moduintervalle_parent>" .$module_data->{'interval'}. "</interval>";
+		if(defined($module_data->{'interval'})) {
+			$xml_output .=" <interval>" .$module_data->{'interval'}. "</interval>";
 		}
 
 		$xml_output .=" </module>";

From 5f7efb92b8b71209b791c310b68642b8ef92900c Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Wed, 5 Jul 2023 10:09:48 +0200
Subject: [PATCH 006/116] WIP: Automonitoring. Installation monitor

---
 pandora_server/lib/PandoraFMS/Core.pm | 25 ++++++++++++++++++-------
 1 file changed, 18 insertions(+), 7 deletions(-)

diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 452b4d4825..a8bb2a9e87 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -6446,19 +6446,19 @@ sub pandora_installation_monitoring($$) {
 	undef $module;
 
 	# General info about queries
-	my $select = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_select');
-	my $insert = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_insert');
-	my $update = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_update');
-	my $replace = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_replace');
-	my $delete = get_db_value($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_delete');
+	my $select = get_db_single_row($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_select');
+	my $insert = get_db_single_row($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_insert');
+	my $update = get_db_single_row($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_update');
+	my $replace = get_db_single_row($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_replace');
+	my $delete = get_db_single_row($dbh, 'SHOW /*!50000 GLOBAL */ STATUS WHERE Variable_name= ?', 'Com_delete');
 	my $data_size = get_db_value($dbh, 'SELECT SUM(data_length)/(1024*1024) FROM information_schema.TABLES');
 	my $index_size = get_db_value($dbh, 'SELECT SUM(index_length)/(1024*1024) FROM information_schema.TABLES');
-	my $writes = $insert + $update + $replace + $delete;
+	my $writes = $insert->{'Value'} + $update->{'Value'} + $replace->{'Value'} + $delete->{'Value'} ;
 
 	# Mysql Questions - Reads
 	$module->{'name'} = "mysql_questions_reads";
 	$module->{'description'} = 'MySQL: Questions - Reads (#): Number of read questions';
-	$module->{'data'} = $select;
+	$module->{'data'} = $select->{'Value'};
 	$module->{'unit'} = 'qu';
 	push(@modules, $module); 
 	undef $module;
@@ -6491,6 +6491,17 @@ sub pandora_installation_monitoring($$) {
 	push(@modules, $module); 
 	undef $module;
 
+	# Mysql process list
+	my $command = 'mysql -u '.$pa_config->{'dbuser'}.' -p"'.$pa_config->{'dbpass'}.'" -e "show processlist"';
+	print Dumper($command);
+	my $process_list = `$command 2>$DEVNULL`;		
+	$module->{'name'} = 'mysql_transactions_list';
+	$module->{'description'} = 'MySQL: Transactions list';
+	$module->{'data'} = '<![CDATA['.$process_list.']]>';
+	$module->{'type'} = 'generic_data_string';
+	push(@modules, $module); 
+	undef $module;
+
 	# Build xml modules.
 	foreach my $module_data (@modules) {
 		$xml_output .=" <module>";

From c2297052c1d50078fd83b2c1ab60b6e5834a6784 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Tue, 11 Jul 2023 15:55:10 +0200
Subject: [PATCH 007/116] ITSM dashboard pandora_enterprise#11471

---
 pandora_console/include/lib/ITSM/ITSM.php     |  16 +++
 pandora_console/include/lib/ITSM/Manager.php  | 112 ++++++++++++++++--
 .../include/styles/integriaims.css            |  12 ++
 .../views/ITSM/ITSMDashboardView.php          |  61 +++++++++-
 4 files changed, 188 insertions(+), 13 deletions(-)

diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index 8e23161b67..e1046a2b34 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -218,6 +218,22 @@ class ITSM
                 $path = '/incidence/'.$id['idIncidence'].'/attachment/'.$id['idAttachment'].'/download';
             break;
 
+            case 'getIncidencesGroupedByStatus':
+                $path = '/incidence/statistic/groupedByStatus';
+            break;
+
+            case 'getIncidencesGroupedByPriorities':
+                $path = '/incidence/statistic/groupedByPriorities';
+            break;
+
+            case 'getIncidencesGroupedByGroups':
+                $path = '/incidence/statistic/groupedByGroups';
+            break;
+
+            case 'getIncidencesGroupedByOwners':
+                $path = '/incidence/statistic/groupedByOwners';
+            break;
+
             default:
                 // Not posible.
             break;
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 7c702fc4a8..b4e4da8a12 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -358,6 +358,41 @@ class Manager
     }
 
 
+    /**
+     * Draw list dashboards.
+     *
+     * @return void
+     */
+    private function showDashboard()
+    {
+        $error = '';
+        try {
+            $ITSM = new ITSM();
+            $status = $this->getStatus($ITSM);
+            $incidencesByStatus = $this->getIncidencesGroupedByStatus($ITSM, $status);
+            $priorities = $this->getPriorities($ITSM);
+            $incidencesByPriorities = $this->getIncidencesGroupedByPriorities($ITSM, $priorities);
+            $incidencesByGroups = $this->getIncidencesGroupedByGroups($ITSM);
+            $incidencesByOwners = $this->getIncidencesGroupedByOwners($ITSM);
+        } catch (\Throwable $th) {
+            $error = $th->getMessage();
+        }
+
+        View::render(
+            'ITSM/ITSMDashboardView',
+            [
+                'ajaxController'         => $this->ajaxController,
+                'urlAjax'                => \ui_get_full_url('ajax.php'),
+                'incidencesByStatus'     => $incidencesByStatus,
+                'incidencesByPriorities' => $incidencesByPriorities,
+                'incidencesByGroups'     => $incidencesByGroups,
+                'incidencesByOwners'     => $incidencesByOwners,
+                'error'                  => $error,
+            ]
+        );
+    }
+
+
     /**
      * Get Incidences types.
      *
@@ -715,19 +750,76 @@ class Manager
 
 
     /**
-     * Draw list dashboards.
+     * Get Incidences group by for status.
      *
-     * @return void
+     * @param ITSM  $ITSM   Object for callApi.
+     * @param array $status Status.
+     *
+     * @return array
      */
-    private function showDashboard()
+    private function getIncidencesGroupedByStatus(ITSM $ITSM, array $status): array
     {
-        View::render(
-            'ITSM/ITSMDashboardView',
-            [
-                'ajaxController' => $this->ajaxController,
-                'urlAjax'        => \ui_get_full_url('ajax.php'),
-            ]
-        );
+        $listStatus = $ITSM->callApi('getIncidencesGroupedByStatus');
+        $result = [];
+        foreach ($status as $key => $value) {
+            if (isset($listStatus[$key]) === false) {
+                $listStatus[$key] = 0;
+            }
+
+            $result[$value] = $listStatus[$key];
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Get Incidences group by for priorities.
+     *
+     * @param ITSM  $ITSM       Object for callApi.
+     * @param array $priorities Priorities.
+     *
+     * @return array
+     */
+    private function getIncidencesGroupedByPriorities(ITSM $ITSM, array $priorities): array
+    {
+        $listPriorities = $ITSM->callApi('getIncidencesGroupedByPriorities');
+        $result = [];
+        foreach ($priorities as $key => $value) {
+            if (isset($listPriorities[$key]) === false) {
+                $listPriorities[$key] = 0;
+            }
+
+            $result[$value] = $listPriorities[$key];
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Get Incidences group by for groups.
+     *
+     * @param ITSM $ITSM Object for callApi.
+     *
+     * @return array
+     */
+    private function getIncidencesGroupedByGroups(ITSM $ITSM): array
+    {
+        return $ITSM->callApi('getIncidencesGroupedByGroups');
+    }
+
+
+    /**
+     * Get Incidences group by for owner.
+     *
+     * @param ITSM $ITSM Object for callApi.
+     *
+     * @return array
+     */
+    private function getIncidencesGroupedByOwners(ITSM $ITSM): array
+    {
+        return $ITSM->callApi('getIncidencesGroupedByOwners');
     }
 
 
diff --git a/pandora_console/include/styles/integriaims.css b/pandora_console/include/styles/integriaims.css
index 01383a8833..95ae267aa2 100644
--- a/pandora_console/include/styles/integriaims.css
+++ b/pandora_console/include/styles/integriaims.css
@@ -145,3 +145,15 @@ div.incidence-type-custom-fields {
   flex-direction: column;
   margin: 0;
 }
+
+div.container-statistics {
+  display: flex;
+  flex-direction: row;
+  flex-wrap: wrap;
+}
+
+div.container-statistics > div {
+  flex: 1 1 45%;
+  max-width: 46%;
+  margin: 1%;
+}
diff --git a/pandora_console/views/ITSM/ITSMDashboardView.php b/pandora_console/views/ITSM/ITSMDashboardView.php
index 229267496b..c6949c64cf 100644
--- a/pandora_console/views/ITSM/ITSMDashboardView.php
+++ b/pandora_console/views/ITSM/ITSMDashboardView.php
@@ -33,6 +33,51 @@ global $config;
 
 ui_require_css_file('integriaims');
 
+
+/**
+ * Draw chart.
+ *
+ * @param string $title Title.
+ * @param array  $data  Data for chart.
+ *
+ * @return string Output.
+ */
+function draw_graph(string $title, ?array $data): string
+{
+    global $config;
+    if (is_array($data) === false) {
+        return 'N/A';
+    }
+
+    $water_mark = [];
+
+    $output = '<div class="white_box pdd_15px">';
+    $output .= '<span class="breadcrumbs-title">'.$title.'</span>';
+    $labels = array_keys($data);
+    $options = [
+        'width'     => 320,
+        'height'    => 200,
+        'waterMark' => $water_mark,
+        'legend'    => [
+            'display'  => true,
+            'position' => 'right',
+            'align'    => 'center',
+        ],
+        'labels'    => $labels,
+    ];
+
+    $output .= '<div style="width:inherit;margin: 0 auto;">';
+    $output .= pie_graph(
+        array_values($data),
+        $options
+    );
+    $output .= '</div>';
+    $output .= '</div>';
+
+    return $output;
+}
+
+
 // Header tabs.
 ui_print_standard_header(
     __('ITSM Dashboard'),
@@ -53,13 +98,23 @@ ui_print_standard_header(
     ]
 );
 
-if (empty($incidences) === true) {
+if (empty($error) === false) {
+    ui_print_error_message($error);
+}
+
+if (empty($incidencesByStatus) === true) {
     ui_print_info_message(
         [
             'no_close' => true,
-            'message'  => __('Wip...........................'),
+            'message'  => __('Not found incidences'),
         ]
     );
 } else {
-    echo 'WIP...';
+    $output = '<div class="container-statistics">';
+    $output .= draw_graph(__('Incidents by status'), $incidencesByStatus);
+    $output .= draw_graph(__('Incidents by priority'), $incidencesByPriorities);
+    $output .= draw_graph(__('Incidents by group'), $incidencesByGroups);
+    $output .= draw_graph(__('Incidents by user'), $incidencesByOwners);
+    $output .= '</div>';
+    echo $output;
 }

From 0722cfca1a326927e33769d55ba14ff68595fc05 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Fri, 14 Jul 2023 15:42:35 +0200
Subject: [PATCH 008/116] ITSM fixed pandora_enterprise#11471

---
 pandora_console/include/functions_ui.php      |   6 +-
 pandora_console/include/lib/ITSM/ITSM.php     |   8 +
 pandora_console/include/lib/ITSM/Manager.php  | 279 +++++++++++++-----
 .../views/ITSM/ITSMTicketDetailView.php       |   8 +-
 .../views/ITSM/ITSMTicketListView.php         |  36 ++-
 5 files changed, 259 insertions(+), 78 deletions(-)

diff --git a/pandora_console/include/functions_ui.php b/pandora_console/include/functions_ui.php
index a49beb0113..7e1e4c0d15 100755
--- a/pandora_console/include/functions_ui.php
+++ b/pandora_console/include/functions_ui.php
@@ -4070,13 +4070,13 @@ function ui_print_datatable(array $parameters)
 
     foreach ($names as $column) {
         if (is_array($column)) {
-            $table .= '<th id="'.$column['id'].'" class="'.$column['class'].'" ';
+            $table .= '<th id="'.($column['id'] ?? '').'" class="'.($column['class'] ?? '').'" ';
             if (isset($column['title']) === true) {
                 $table .= 'title="'.__($column['title']).'" ';
             }
 
-            $table .= ' style="'.$column['style'].'">'.__($column['text']);
-            $table .= $column['extra'];
+            $table .= ' style="'.($column['style'] ?? '').'">'.__($column['text']);
+            $table .= ($column['extra'] ?? '');
             $table .= '</th>';
         } else {
             $table .= '<th>'.__($column).'</th>';
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index e1046a2b34..935be574b7 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -178,6 +178,10 @@ class ITSM
                 $path = '/user/list';
             break;
 
+            case 'listCompanies':
+                $path = '/company/list';
+            break;
+
             case 'createIncidence':
                 $path = '/incidence';
             break;
@@ -210,6 +214,10 @@ class ITSM
                 $path = '/incidence/'.$id.'/attachment';
             break;
 
+            case 'createIncidenceWu':
+                $path = '/incidence/'.$id.'/workunit';
+            break;
+
             case 'deleteIncidenceAttachment':
                 $path = '/incidence/'.$id['idIncidence'].'/attachment/'.$id['idAttachment'];
             break;
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index b4e4da8a12..0b993ad929 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -141,14 +141,18 @@ class Manager
         $idIncidence = \get_parameter('idIncidence', 0);
         $error = '';
         $successfullyMsg = '';
-        if (empty($idIncidence) === false) {
+        $groups = [];
+        $status = [];
+        try {
             $ITSM = new ITSM();
-            try {
+            $groups = $this->getGroups($ITSM);
+            $status = $this->getStatus($ITSM);
+            if (empty($idIncidence) === false) {
                 $this->deleteIncidence($ITSM, $idIncidence);
                 $successfullyMsg = __('Delete ticket successfully');
-            } catch (\Throwable $th) {
-                $error = $th->getMessage();
             }
+        } catch (\Throwable $th) {
+            $error = $th->getMessage();
         }
 
         View::render(
@@ -158,6 +162,8 @@ class Manager
                 'urlAjax'         => \ui_get_full_url('ajax.php'),
                 'error'           => $error,
                 'successfullyMsg' => $successfullyMsg,
+                'groups'          => $groups,
+                'status'          => $status,
             ]
         );
     }
@@ -301,6 +307,22 @@ class Manager
                     }
                 }
 
+                if ($addComment === true) {
+                    $wu = [
+                        'description' => get_parameter('comment_description', ''),
+                    ];
+
+                    $incidenceAttachment = $this->createIncidenceWu(
+                        $ITSM,
+                        $idIncidence,
+                        $wu
+                    );
+
+                    if ($incidenceAttachment !== false) {
+                        $successfullyMsg = __('Comment added succesfully');
+                    }
+                }
+
                 if (empty($idAttachment) === false) {
                     $this->deleteIncidenceAttachment($ITSM, $idIncidence, $idAttachment);
                     $successfullyMsg = __('Delete File successfully');
@@ -665,7 +687,10 @@ class Manager
             $res = array_reduce(
                 $result['data'],
                 function ($carry, $user) {
-                    $carry[$user['idUser']] = $user['fullName'];
+                    $carry[$user['idUser']] = [
+                        'fullName'  => $user['fullName'],
+                        'idCompany' => $user['idCompany'],
+                    ];
                     return $carry;
                 }
             );
@@ -676,7 +701,46 @@ class Manager
 
 
     /**
-     * Create incidence
+     * Get Companies.
+     *
+     * @param ITSM  $ITSM      Object for callApi.
+     * @param array $companies Companies ID.
+     *
+     * @return array Companies.
+     */
+    private function getCompanies(ITSM $ITSM, array $companies): array
+    {
+        $result = $ITSM->callApi(
+            'listCompanies',
+            [
+                'page'     => 0,
+                'sizePage' => 0,
+            ],
+            [
+                'multipleSearchString' => [
+                    'field' => 'idCompany',
+                    'data'  => $companies,
+                ],
+            ]
+        );
+
+        $res = [];
+        if (empty($result['data']) === false) {
+            $res = array_reduce(
+                $result['data'],
+                function ($carry, $company) {
+                    $carry[$company['idCompany']] = $company['name'];
+                    return $carry;
+                }
+            );
+        }
+
+        return $res;
+    }
+
+
+    /**
+     * Create incidence Attachment.
      *
      * @param ITSM    $ITSM        Object for callApi.
      * @param integer $idIncidence Id incidence.
@@ -699,6 +763,28 @@ class Manager
     }
 
 
+    /**
+     * Create incidence Wu.
+     *
+     * @param ITSM    $ITSM        Object for callApi.
+     * @param integer $idIncidence Id incidence.
+     * @param array   $wu          Params insert.
+     *
+     * @return array
+     */
+    private function createIncidenceWu(ITSM $ITSM, int $idIncidence, array $wu): array
+    {
+        $incidenceWu = $ITSM->callApi(
+            'createIncidenceWu',
+            null,
+            $wu,
+            $idIncidence,
+            'POST'
+        );
+        return $incidenceWu;
+    }
+
+
     /**
      * Delete Attachment.
      *
@@ -879,12 +965,41 @@ class Manager
 
         // Init data.
         $data = [];
+
         // Catch post parameters.
         $start = (int) get_parameter('start', 1);
         $length = (int) get_parameter('length', $config['block_size']);
         $order = get_datatable_order(true);
         $filters = get_parameter('filter', []);
 
+        if (isset($filters['status']) === true && empty($filters['status']) === true) {
+            unset($filters['status']);
+        }
+
+        if (isset($filters['idGroup']) === true && empty($filters['idGroup']) === true) {
+            unset($filters['idGroup']);
+        }
+
+        if (isset($filters['fromDate']) === true && empty($filters['fromDate']) === false) {
+            $filters['fromDate'] = ($filters['fromDate'] / SECONDS_1DAY);
+        }
+
+        if (isset($filters['form_itms_list_tickets_search_bt']) === true) {
+            unset($filters['form_itms_list_tickets_search_bt']);
+        }
+
+        if (isset($filters['fromDate_select']) === true) {
+            unset($filters['fromDate_select']);
+        }
+
+        if (isset($filters['fromDate_text']) === true) {
+            unset($filters['fromDate_text']);
+        }
+
+        if (isset($filters['fromDate_units']) === true) {
+            unset($filters['fromDate_units']);
+        }
+
         try {
             ob_start();
             $queryParams = [
@@ -908,81 +1023,105 @@ class Manager
             $priorities = $this->getPriorities($ITSM);
 
             $usersInvolved = [];
+            $usersCreators = [];
             foreach ($result['data'] as $incidence) {
+                $usersCreators[$incidence['idCreator']] = $incidence['idCreator'];
                 $usersInvolved[$incidence['idCreator']] = $incidence['idCreator'];
                 $usersInvolved[$incidence['owner']] = $incidence['owner'];
                 $usersInvolved[$incidence['closedBy']] = $incidence['closedBy'];
             }
 
             $users = $this->getUsers($ITSM, $usersInvolved);
+            $companiesCreator = [];
+            foreach ($usersCreators as $userInfo) {
+                $companiesCreator[$userInfo] = $users[$userInfo]['idCompany'];
+            }
+
+            if (empty($companiesCreator) === false) {
+                $companies = $this->getCompanies($ITSM, $companiesCreator);
+            }
+
             $url = \ui_get_full_url('index.php?sec=manageTickets&sec2=operation/ITSM/itsm');
 
-            $data = array_reduce(
-                $result['data'],
-                function ($carry, $item) use ($groups, $resolutions, $status, $priorities, $users, $url) {
-                    // Transforms array of arrays $data into an array
-                    // of objects, making a post-process of certain fields.
-                    $tmp = (object) $item;
+            if (empty($result['data']) === false) {
+                $data = array_reduce(
+                    $result['data'],
+                    function (
+                        $carry,
+                        $item
+                    ) use (
+                        $groups,
+                        $resolutions,
+                        $status,
+                        $priorities,
+                        $users,
+                        $companies,
+                        $url
+                    ) {
+                        // Transforms array of arrays $data into an array
+                        // of objects, making a post-process of certain fields.
+                        $tmp = (object) $item;
 
-                    $new = (object) [];
-                    $new->idIncidence = $tmp->idIncidence;
-                    $new->title = '<a href="'.$url.'&operation=detail&idIncidence='.$tmp->idIncidence.'">';
-                    $new->title .= $tmp->title;
-                    $new->title .= '</a>';
-                    $new->groupCompany = $groups[$tmp->idGroup];
-                    if (empty($tmp->idCompany) === false) {
-                        $new->groupCompany .= '/'.$tmp->idCompany;
+                        $new = (object) [];
+                        $new->idIncidence = $tmp->idIncidence;
+                        $new->title = '<a href="'.$url.'&operation=detail&idIncidence='.$tmp->idIncidence.'">';
+                        $new->title .= $tmp->title;
+                        $new->title .= '</a>';
+                        $new->groupCompany = $groups[$tmp->idGroup];
+                        if (empty($users[$tmp->idCreator]['idCompany']) === false) {
+                            $new->groupCompany .= ' / '.$companies[$users[$tmp->idCreator]['idCompany']];
+                        }
+
+                        $new->statusResolution = $status[$tmp->status].'/'.$resolutions[$tmp->resolution];
+                        $new->priority = $this->priorityDiv($tmp->priority, $priorities[$tmp->priority]);
+                        $new->updateDate = $tmp->updateDate;
+                        $new->startDate = $tmp->startDate;
+                        $new->idCreator = $users[$tmp->idCreator]['fullName'];
+                        $new->owner = $users[$tmp->owner]['fullName'];
+
+                        $new->operation = '<div class="table_action_buttons">';
+                        $new->operation .= '<a href="'.$url.'&operation=edit&idIncidence='.$tmp->idIncidence.'">';
+                        $new->operation .= html_print_image(
+                            'images/edit.svg',
+                            true,
+                            [
+                                'title' => __('Edit'),
+                                'class' => 'main_menu_icon invert_filter',
+                            ]
+                        );
+                        $new->operation .= '</a>';
+
+                        $new->operation .= '<a href="'.$url.'&operation=detail&idIncidence='.$tmp->idIncidence.'">';
+                        $new->operation .= html_print_image(
+                            'images/enable.svg',
+                            true,
+                            [
+                                'title' => __('Detail'),
+                                'class' => 'main_menu_icon invert_filter',
+                            ]
+                        );
+                        $new->operation .= '</a>';
+
+                        $urlDelete = $url.'&operation=list&idIncidence='.$tmp->idIncidence;
+                        $urlOnClick = 'javascript:if (!confirm(\''.__('Are you sure?').'\')) return false;';
+                        $new->operation .= '<a href="'.$urlDelete.'" onClick="'.$urlOnClick.'">';
+                        $new->operation .= html_print_image(
+                            'images/delete.svg',
+                            true,
+                            [
+                                'title' => __('Delete'),
+                                'class' => 'main_menu_icon invert_filter',
+                            ]
+                        );
+                        $new->operation .= '</a>';
+
+                        $new->operation .= '</div>';
+
+                        $carry[] = $new;
+                        return $carry;
                     }
-
-                    $new->statusResolution = $status[$tmp->status].'/'.$resolutions[$tmp->resolution];
-                    $new->priority = $this->priorityDiv($tmp->priority, $priorities[$tmp->priority]);
-                    $new->updateDate = $tmp->updateDate;
-                    $new->startDate = $tmp->startDate;
-                    $new->idCreator = $users[$tmp->idCreator];
-                    $new->owner = $users[$tmp->owner];
-
-                    $new->operation = '<div class="table_action_buttons">';
-                    $new->operation .= '<a href="'.$url.'&operation=edit&idIncidence='.$tmp->idIncidence.'">';
-                    $new->operation .= html_print_image(
-                        'images/edit.svg',
-                        true,
-                        [
-                            'title' => __('Edit'),
-                            'class' => 'main_menu_icon invert_filter',
-                        ]
-                    );
-                    $new->operation .= '</a>';
-
-                    $new->operation .= '<a href="'.$url.'&operation=detail&idIncidence='.$tmp->idIncidence.'">';
-                    $new->operation .= html_print_image(
-                        'images/enable.svg',
-                        true,
-                        [
-                            'title' => __('Detail'),
-                            'class' => 'main_menu_icon invert_filter',
-                        ]
-                    );
-                    $new->operation .= '</a>';
-
-                    $urlDelete = $url.'&operation=list&idIncidence='.$tmp->idIncidence;
-                    $urlOnClick = 'javascript:if (!confirm(\''.__('Are you sure?').'\')) return false;';
-                    $new->operation .= '<a href="'.$urlDelete.'" onClick="'.$urlOnClick.'">';
-                    $new->operation .= html_print_image(
-                        'images/delete.svg',
-                        true,
-                        [
-                            'title' => __('Delete'),
-                            'class' => 'main_menu_icon invert_filter',
-                        ]
-                    );
-                    $new->operation .= '</a>';
-
-                    $new->operation .= '</div>';
-
-                    $carry[] = $new;
-                    return $carry;
-                }
-            );
+                );
+            }
 
             echo json_encode(
                 [
diff --git a/pandora_console/views/ITSM/ITSMTicketDetailView.php b/pandora_console/views/ITSM/ITSMTicketDetailView.php
index 592cd44b8f..7a1a15c25e 100644
--- a/pandora_console/views/ITSM/ITSMTicketDetailView.php
+++ b/pandora_console/views/ITSM/ITSMTicketDetailView.php
@@ -120,13 +120,13 @@ if (empty($incidence) === true) {
     $people_box .= '<div class="integriaims_details_titles">'.__('Closed by').':</div>';
 
     $people_box .= '<div>';
-    $people_box .= (empty($incidence['idCreator']) === false) ? $users[$incidence['idCreator']] : '--';
+    $people_box .= (empty($incidence['idCreator']) === false) ? $users[$incidence['idCreator']]['fullName'] : '--';
     $people_box .= '</div>';
     $people_box .= '<div>';
-    $people_box .= (empty($incidence['owner']) === false) ? $users[$incidence['owner']] : '--';
+    $people_box .= (empty($incidence['owner']) === false) ? $users[$incidence['owner']]['fullName'] : '--';
     $people_box .= '</div>';
     $people_box .= '<div>';
-    $people_box .= (empty($incidence['closedBy']) === false) ? $users[$incidence['closedBy']] : '--';
+    $people_box .= (empty($incidence['closedBy']) === false) ? $users[$incidence['closedBy']]['fullName'] : '--';
     $people_box .= '</div>';
     $people_box .= '</div>';
 
@@ -211,7 +211,7 @@ if (empty($incidence) === true) {
 
     $table_files_section->data[0][0] = '<div class="label_select">';
     $table_files_section->data[0][0] .= '<p class="input_label">'.__('File name').':</p>';
-    $table_files_section->data[0][0] .= html_print_input_file('userfile', true);
+    $table_files_section->data[0][0] .= html_print_input_file('userfile', true, ['required' => true]);
     $table_files_section->data[0][1] = '<div class="label_select">';
     $table_files_section->data[0][1] .= '<p class="input_label">';
     $table_files_section->data[0][1] .= __('Attachment description');
diff --git a/pandora_console/views/ITSM/ITSMTicketListView.php b/pandora_console/views/ITSM/ITSMTicketListView.php
index a26dfb5f6c..ea3ca378ec 100644
--- a/pandora_console/views/ITSM/ITSMTicketListView.php
+++ b/pandora_console/views/ITSM/ITSMTicketListView.php
@@ -110,7 +110,41 @@ try {
                 'direction' => 'desc',
             ],
             'search_button_class' => 'sub filter float-right',
-            'filter_main_class'   => 'box-flat white_table_graph fixed_filter_bar',
+            'form'                => [
+                'inputs' => [
+                    [
+                        'label' => __('Free search'),
+                        'type'  => 'text',
+                        'id'    => 'string',
+                        'name'  => 'string',
+                    ],
+                    [
+                        'label'         => __('Status'),
+                        'type'          => 'select',
+                        'name'          => 'status',
+                        'fields'        => $status,
+                        'nothing'       => 'None',
+                        'nothing_value' => null,
+                    ],
+                    [
+                        'label'         => __('Group'),
+                        'type'          => 'select',
+                        'name'          => 'idGroup',
+                        'fields'        => $groups,
+                        'nothing'       => 'None',
+                        'nothing_value' => null,
+                    ],
+                    [
+                        'label'         => __('Creation date'),
+                        'type'          => 'interval',
+                        'name'          => 'fromDate',
+                        'value'         => 0,
+                        'nothing'       => __('None'),
+                        'nothing_value' => 0,
+                    ],
+                ],
+            ],
+            'filter_main_class'   => 'box-flat white_table_graph fixed_filter_bar ',
         ]
     );
 } catch (Exception $e) {

From 9a72d0740c9a5a89e2250d5bf134d54d7d8683c8 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Tue, 18 Jul 2023 15:13:08 +0200
Subject: [PATCH 009/116] ITSM fixed pandora_enterprise#11471

---
 .../extras/delete_files/delete_files.txt      |  10 +-
 .../godmode/agentes/agent_incidents.php       |   9 +-
 .../godmode/agentes/configurar_agente.php     |   5 +-
 .../godmode/alerts/alert_commands.php         |  26 +-
 .../godmode/alerts/configure_alert_action.php |  33 +-
 pandora_console/godmode/menu.php              |   2 +-
 .../godmode/setup/setup_integria.php          | 316 +++-----
 .../include/ajax/integria_incidents.ajax.php  |  60 --
 pandora_console/include/functions_graph.php   | 217 ------
 .../include/functions_incidents.php           | 477 ------------
 .../include/functions_integriaims.php         | 304 --------
 pandora_console/include/javascript/ITSM.js    |  63 ++
 pandora_console/include/lib/ITSM/ITSM.php     | 120 +++-
 pandora_console/include/lib/ITSM/Manager.php  | 129 ++--
 .../agentes/estado_generalagente.php          |  53 --
 .../operation/agentes/ver_agente.php          |   3 +-
 .../configure_integriaims_incident.php        | 454 ------------
 .../dashboard_detail_integriaims_incident.php | 451 ------------
 .../incidents/incident_statistics.php         |  60 --
 .../incidents/integriaims_export_csv.php      | 124 ----
 .../incidents/list_integriaims_incidents.php  | 678 ------------------
 pandora_console/operation/menu.php            |  72 +-
 .../views/ITSM/ITSMTicketEditView.php         |   2 +-
 23 files changed, 409 insertions(+), 3259 deletions(-)
 delete mode 100644 pandora_console/include/ajax/integria_incidents.ajax.php
 delete mode 100644 pandora_console/include/functions_incidents.php
 delete mode 100644 pandora_console/operation/incidents/configure_integriaims_incident.php
 delete mode 100644 pandora_console/operation/incidents/dashboard_detail_integriaims_incident.php
 delete mode 100755 pandora_console/operation/incidents/incident_statistics.php
 delete mode 100644 pandora_console/operation/incidents/integriaims_export_csv.php
 delete mode 100644 pandora_console/operation/incidents/list_integriaims_incidents.php

diff --git a/pandora_console/extras/delete_files/delete_files.txt b/pandora_console/extras/delete_files/delete_files.txt
index 5d603ac1f9..79627ab7ab 100644
--- a/pandora_console/extras/delete_files/delete_files.txt
+++ b/pandora_console/extras/delete_files/delete_files.txt
@@ -1702,4 +1702,12 @@ enterprise/meta/monitoring/wizard/wizard.module.network.php
 enterprise/meta/monitoring/wizard/wizard.module.web.php
 enterprise/meta/monitoring/wizard/wizard.php
 enterprise/meta/monitoring/wizard/wizard.update_agent.php
-enterprise/meta/monitoring/wizard/wizard.update_module.php
\ No newline at end of file
+enterprise/meta/monitoring/wizard/wizard.update_module.php
+operation/incidents/configure_integriaims_incident.php
+operation/incidents/dashboard_detail_integriaims_incident.php
+operation/incidents/incident_statistics.php
+operation/incidents/integriaims_export_csv.php
+operation/incidents/list_integriaims_incidents.php
+include/functions_incidents.php
+include/functions_integriaims.php
+include/ajax/integria_incidents.ajax.php
\ No newline at end of file
diff --git a/pandora_console/godmode/agentes/agent_incidents.php b/pandora_console/godmode/agentes/agent_incidents.php
index ba43f1799c..5e7331744b 100644
--- a/pandora_console/godmode/agentes/agent_incidents.php
+++ b/pandora_console/godmode/agentes/agent_incidents.php
@@ -19,7 +19,7 @@ require_once 'include/functions_incidents.php';
 check_login();
 
 if (!$config['integria_enabled']) {
-    ui_print_error_message(__('In order to access ticket management system, integration with Integria IMS must be enabled and properly configured'));
+    ui_print_error_message(__('In order to access ticket management system, integration with ITSM must be enabled and properly configured'));
     return;
 }
 
@@ -113,15 +113,14 @@ foreach ($result as $row) {
     $data = [];
 
     $data[0] = '<a href="index.php?sec=incident&sec2=operation/incidents/dashboard_detail_integriaims_incident&incident_id='.$row['id_incidencia'].'">'.$row['id_incidencia'].'</a>';
-    $attach = incidents_get_attach($row['id_incidencia']);
-
+    // $attach = incidents_get_attach($row['id_incidencia']);
     if (!empty($attach)) {
         $data[0] .= '&nbsp;&nbsp;'.html_print_image('images/attachment.png', true, ['style' => 'align:middle;']);
     }
 
-    $data[1] = incidents_print_status_img($row['estado'], true);
+    // $data[1] = incidents_print_status_img($row['estado'], true);
     $data[2] = '<a href="index.php?sec=incident&sec2=operation/incidents/dashboard_detail_integriaims_incident&incident_id='.$row['id_incidencia'].'">'.substr(io_safe_output($row['titulo']), 0, 45).'</a>';
-    $data[3] = incidents_print_priority_img($row['prioridad'], true);
+    // $data[3] = incidents_print_priority_img($row['prioridad'], true);
     $data[4] = $row['id_grupo'];
     $data[5] = ui_print_timestamp($row['actualizacion'], true);
 
diff --git a/pandora_console/godmode/agentes/configurar_agente.php b/pandora_console/godmode/agentes/configurar_agente.php
index b07fb5ca4f..a6f47d6535 100644
--- a/pandora_console/godmode/agentes/configurar_agente.php
+++ b/pandora_console/godmode/agentes/configurar_agente.php
@@ -605,11 +605,8 @@ if ($id_agente) {
         $agent_wizard['active'] = false;
     }
 
-
-    $total_incidents = agents_get_count_incidents($id_agente);
-
     // Incident tab.
-    if ($total_incidents > 0) {
+    if ((bool) $config['integria_enabled'] === true) {
         $incidenttab['text'] = html_print_menu_button(
             [
                 'href'  => 'index.php?sec=gagente&amp;sec2=godmode/agentes/configurar_agente&amp;tab=incident&amp;id_agente='.$id_agente,
diff --git a/pandora_console/godmode/alerts/alert_commands.php b/pandora_console/godmode/alerts/alert_commands.php
index 771a842cc3..b44a6f8521 100644
--- a/pandora_console/godmode/alerts/alert_commands.php
+++ b/pandora_console/godmode/alerts/alert_commands.php
@@ -308,7 +308,16 @@ if (is_ajax()) {
                             false,
                             'fields',
                             $is_management_allowed,
-                            'width: 100%;'
+                            'width: 100%;',
+                            false,
+                            false,
+                            false,
+                            '',
+                            false,
+                            false,
+                            false,
+                            false,
+                            false
                         );
 
                         $rfield .= html_print_select(
@@ -323,7 +332,16 @@ if (is_ajax()) {
                             false,
                             'fields',
                             $is_management_allowed,
-                            'width: 100%;'
+                            'width: 100%;',
+                            false,
+                            false,
+                            false,
+                            '',
+                            false,
+                            false,
+                            false,
+                            false,
+                            false
                         );
 
                         $ffield .= html_print_input_text('field'.$i.'_value[]', '', '', 10, 10, true, false, false, '', 'datepicker');
@@ -684,9 +702,7 @@ if ($delete_command) {
 
     $result = alerts_delete_alert_command($id);
 
-    $auditMessage = ((bool) $result === true)
-    ? sprintf('Delete alert command #%s', $id)
-    : sprintf('Fail try to delete alert command #%s', $id);
+    $auditMessage = ((bool) $result === true) ? sprintf('Delete alert command #%s', $id) : sprintf('Fail try to delete alert command #%s', $id);
 
     db_pandora_audit(
         AUDIT_LOG_ALERT_MANAGEMENT,
diff --git a/pandora_console/godmode/alerts/configure_alert_action.php b/pandora_console/godmode/alerts/configure_alert_action.php
index 033171953b..f72b17bcf3 100644
--- a/pandora_console/godmode/alerts/configure_alert_action.php
+++ b/pandora_console/godmode/alerts/configure_alert_action.php
@@ -11,7 +11,8 @@
 // but WITHOUT ANY WARRANTY; without even the implied warranty of
 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 // GNU General Public License for more details.
-// Load global vars
+use PandoraFMS\ITSM\ITSM;
+// Load global vars.
 global $config;
 
 require_once $config['homedir'].'/include/functions_alerts.php';
@@ -39,11 +40,19 @@ if (is_ajax()) {
     $get_integria_ticket_custom_types = (bool) get_parameter('get_integria_ticket_custom_types');
 
     if ($get_integria_ticket_custom_types) {
-        $ticket_type_id = get_parameter('ticket_type_id');
+        $ticket_type_id = (int) get_parameter('ticket_type_id', 0);
+        if (empty($ticket_type_id) === false) {
+            $error = '';
+            try {
+                $ITSM = new ITSM();
+                $fields = $ITSM->getObjecTypesFields($ticket_type_id);
+            } catch (\Throwable $th) {
+                $error = $th->getMessage();
+            }
 
-        $api_call = integria_api_call(null, null, null, null, 'get_incident_fields', $ticket_type_id, false, 'json');
+            echo json_encode($fields);
+        }
 
-        echo $api_call;
         return;
     }
 }
@@ -504,7 +513,6 @@ $(document).ready (function () {
           },
           function(data) {
             var max_macro_fields = <?php echo $config['max_macro_fields']; ?>;
-
             data.forEach(function(custom_field, key) {
                 var custom_field_key = key+8; // Custom fields start from field 8.
 
@@ -523,7 +531,7 @@ $(document).ready (function () {
                 custom_field_row.html(new_html_content);
 
                 switch (custom_field.type) {
-                    case 'checkbox':
+                    case 'CHECKBOX':
                         var checkbox_selector = $('input:not(.datepicker)[name=field'+custom_field_key+'_value\\[\\]]');
                         var checkbox_recovery_selector = $('input:not(.datepicker)[name=field'+custom_field_key+'_recovery_value\\[\\]]');
 
@@ -568,14 +576,14 @@ $(document).ready (function () {
                         $('input:not(.datepicker)[name=field'+custom_field_key+'_value\\[\\]]').show();
                         $('input:not(.datepicker)[name=field'+custom_field_key+'_recovery_value\\[\\]]').show();
                     break;
-                    case 'combo':
+                    case 'COMBO':
                         var combo_input = $('select[name=field'+custom_field_key+'_value\\[\\]]');
                         var combo_input_recovery = $('select[name=field'+custom_field_key+'_recovery_value\\[\\]]');
 
                         combo_input.find('option').remove();
                         combo_input_recovery.find('option').remove();
 
-                        var combo_values_array = custom_field.combo_value.split(',');
+                        var combo_values_array = custom_field.comboValue.split(',');
                         
                         combo_values_array.forEach(function(value) {
                             combo_input.append($('<option>', {
@@ -600,7 +608,7 @@ $(document).ready (function () {
                         combo_input.show();
                         combo_input_recovery.show();
                     break;
-                    case 'date':
+                    case 'DATE':
                         $('input.datepicker[type="text"][name=field'+custom_field_key+'_value\\[\\]]').removeClass("hasDatepicker");
                         $('input.datepicker[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').removeClass("hasDatepicker");
                         $('input.datepicker[type="text"][name=field'+custom_field_key+'_value\\[\\]]').datepicker("destroy");
@@ -620,9 +628,10 @@ $(document).ready (function () {
                             $('input.datepicker[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').val(recovery_values[key]);
                         }
                     break;
-                    case 'text':
-                    case 'textarea':
-                    case 'numeric':
+                    case 'TEXT':
+                    case 'TEXTAREA':
+                    case 'NUMERIC':
+                    default:
                         if (typeof values[key] !== "undefined") {
                             $('textarea[name=field'+custom_field_key+'_value\\[\\]]').val(values[key]);
                         }
diff --git a/pandora_console/godmode/menu.php b/pandora_console/godmode/menu.php
index 3d04b230b0..4ffdfc88f4 100644
--- a/pandora_console/godmode/menu.php
+++ b/pandora_console/godmode/menu.php
@@ -392,7 +392,7 @@ if ($access_console_node === true) {
         $sub2['godmode/setup/setup&section=ehorus']['text'] = __('eHorus');
         $sub2['godmode/setup/setup&section=ehorus']['refr'] = 0;
 
-        $sub2['godmode/setup/setup&section=integria']['text'] = __('Integria IMS');
+        $sub2['godmode/setup/setup&section=integria']['text'] = __('ITSM');
         $sub2['godmode/setup/setup&section=integria']['refr'] = 0;
 
         enterprise_hook('module_library_submenu');
diff --git a/pandora_console/godmode/setup/setup_integria.php b/pandora_console/godmode/setup/setup_integria.php
index a01927c017..8aee891452 100644
--- a/pandora_console/godmode/setup/setup_integria.php
+++ b/pandora_console/godmode/setup/setup_integria.php
@@ -26,6 +26,8 @@
  * ============================================================================
  */
 
+use PandoraFMS\ITSM\ITSM;
+
  // Load globals.
 global $config;
 
@@ -42,35 +44,39 @@ if (! check_acl($config['id_user'], 0, 'PM') && ! is_user_admin($config['id_user
 
 require_once $config['homedir'].'/include/functions_integriaims.php';
 
-if (is_ajax() === true) {
-    $operation = (string) get_parameter('operation', '');
-
-    $integria_user = get_parameter('integria_user', '');
-    $integria_pass = get_parameter('integria_pass', '');
-    $integria_api_hostname = get_parameter('api_hostname', '');
-    $integria_api_pass = get_parameter('api_pass', '');
-    $user_level_conf = get_parameter('user_level_conf', 0);
-    $user_level_conf_bool = ((bool) $user_level_conf === true);
-
-    $login_result = integria_api_call($integria_api_hostname, $integria_user, $integria_pass, $integria_api_pass, 'get_login', [], false, '', '', $user_level_conf_bool);
-
-    echo json_encode(['login' => ($login_result !== false) ? 1 : 0]);
-
-    return;
+$error = '';
+$group_values = [];
+$priority_values = [];
+$object_types_values = [];
+$status_values = [];
+try {
+    $ITSM = new ITSM();
+    $has_connection = $ITSM->ping();
+    $group_values = $ITSM->getGroups();
+    $priority_values = $ITSM->getPriorities();
+    $status_values = $ITSM->getStatus();
+    $object_types_values = $ITSM->getObjectypes();
+} catch (\Throwable $th) {
+    $error = $th->getMessage();
+    $has_connection = false;
 }
 
-$has_connection = integria_api_call(null, null, null, null, 'get_login', []);
-
 if ($has_connection === false && $config['integria_enabled']) {
-    ui_print_error_message(__('Integria IMS API is not reachable'));
+    ui_print_error_message(__('ITSM API is not reachable, %s', $error));
 }
 
 if (get_parameter('update_config', 0) == 1) {
     // Try to retrieve event response 'Create incident in IntegriaIMS from event' to check if it exists.
-    $event_response_exists = db_get_row_filter('tevent_response', ['name' => io_safe_input('Create ticket in IntegriaIMS from event')]);
+    $event_response_exists = db_get_row_filter(
+        'tevent_response',
+        ['name' => io_safe_input('Create ticket in IntegriaIMS from event')]
+    );
 
     // Try to retrieve command 'Integia IMS Ticket' to check if it exists.
-    $command_exists = db_get_row_filter('talert_commands', ['name' => io_safe_input('Integria IMS Ticket')]);
+    $command_exists = db_get_row_filter(
+        'talert_commands',
+        ['name' => io_safe_input('Integria IMS Ticket')]
+    );
 
     if ($config['integria_enabled'] == 1) {
         if ($event_response_exists === false) {
@@ -92,13 +98,10 @@ if (get_parameter('update_config', 0) == 1) {
             );
         }
 
-        $ticket_types = integria_api_call(null, null, null, null, 'get_types', '', false, 'json');
-
         $types_string = '';
-
-        if ($ticket_types !== '') {
-            foreach (json_decode($ticket_types, true) as $key => $value) {
-                $types_string .= $value['id'].','.$value['name'].';';
+        if (empty($object_types_values) === false) {
+            foreach ($object_types_values as $id => $name) {
+                $types_string .= $id.','.$name.';';
             }
         }
 
@@ -118,20 +121,20 @@ if (get_parameter('update_config', 0) == 1) {
 
             // Create 'Create Integria IMS Ticket' action only when user enables IntegriaIMS integration and command exists in database.
             $action_values = [
-                'field1'           => io_safe_input($config['incident_title']),
-                'field1_recovery'  => io_safe_input($config['incident_title']),
-                'field2'           => io_safe_input($config['default_group']),
-                'field2_recovery'  => io_safe_input($config['default_group']),
-                'field3'           => io_safe_input($config['default_criticity']),
-                'field3_recovery'  => io_safe_input($config['default_criticity']),
-                'field4'           => io_safe_input($config['default_owner']),
-                'field4_recovery'  => io_safe_input($config['default_owner']),
-                'field5'           => io_safe_input($config['incident_type']),
-                'field5_recovery'  => io_safe_input($config['incident_type']),
-                'field6'           => io_safe_input($config['incident_status']),
-                'field6_recovery'  => io_safe_input($config['incident_status']),
-                'field7'           => io_safe_input($config['incident_content']),
-                'field7_recovery'  => io_safe_input($config['incident_content']),
+                'field1'           => $config['incident_title'],
+                'field1_recovery'  => $config['incident_title'],
+                'field2'           => $config['default_group'],
+                'field2_recovery'  => $config['default_group'],
+                'field3'           => $config['default_criticity'],
+                'field3_recovery'  => $config['default_criticity'],
+                'field4'           => $config['default_owner'],
+                'field4_recovery'  => $config['default_owner'],
+                'field5'           => $config['incident_type'],
+                'field5_recovery'  => $config['incident_type'],
+                'field6'           => $config['incident_status'],
+                'field6_recovery'  => $config['incident_status'],
+                'field7'           => $config['incident_content'],
+                'field7_recovery'  => $config['incident_content'],
                 'id_group'         => 0,
                 'action_threshold' => 0,
             ];
@@ -215,40 +218,6 @@ if (get_parameter('update_config', 0) == 1) {
     }
 }
 
-// Get parameters from Integria IMS API.
-$integria_group_values = [];
-$integria_criticity_values = [];
-$integria_users_values = [];
-$integria_types_values = [];
-$integria_status_values = [];
-
-$integria_groups_csv = integria_api_call(null, null, null, null, 'get_groups', []);
-
-get_array_from_csv_data_pair($integria_groups_csv, $integria_group_values);
-
-$integria_status_csv = integria_api_call(null, null, null, null, 'get_incidents_status', []);
-
-get_array_from_csv_data_pair($integria_status_csv, $integria_status_values);
-
-$integria_criticity_levels_csv = integria_api_call(null, null, null, null, 'get_incident_priorities', []);
-
-get_array_from_csv_data_pair($integria_criticity_levels_csv, $integria_criticity_values);
-
-$integria_users_csv = integria_api_call(null, null, null, null, 'get_users', []);
-
-$csv_array = explode("\n", $integria_users_csv);
-
-foreach ($csv_array as $csv_line) {
-    if (empty($csv_line) === false) {
-        $integria_users_values[$csv_line] = $csv_line;
-    }
-}
-
-$integria_types_csv = integria_api_call(null, null, null, null, 'get_types', []);
-
-get_array_from_csv_data_pair($integria_types_csv, $integria_types_values);
-
-// Enable table.
 $table_enable = new StdClass();
 $table_enable->data = [];
 $table_enable->width = '100%';
@@ -287,8 +256,9 @@ $row['user_level'] = html_print_label_input_block(
 $table_remote->data['integria_user_level_conf'] = $row;
 
 // Integria user.
-$row = [];
-$row['user'] = html_print_label_input_block(
+/*
+    $row = [];
+    $row['user'] = html_print_label_input_block(
     __('User'),
     html_print_input_text(
         'integria_user',
@@ -299,22 +269,8 @@ $row['user'] = html_print_label_input_block(
         true
     ),
     ['div_class' => 'integria-remote-setup-integria_user']
-);
-
-// Integria password.
-$row['password'] = html_print_label_input_block(
-    __('Password'),
-    html_print_input_password(
-        'integria_pass',
-        io_output_password($config['integria_pass']),
-        '',
-        30,
-        100,
-        true
-    ),
-    ['div_class' => 'integria-remote-setup-integria_pass']
-);
-$table_remote->data['integria_pass'] = $row;
+    );
+*/
 
 // Integria hostname.
 $row = [];
@@ -331,8 +287,24 @@ $row['hostname'] = html_print_label_input_block(
     ['div_class' => 'integria-remote-setup-integria_hostname']
 );
 
-// API password.
-$row['api_pass'] = html_print_label_input_block(
+// Integria token.
+$row['password'] = html_print_label_input_block(
+    __('Password'),
+    html_print_input_password(
+        'integria_pass',
+        io_output_password($config['integria_pass']),
+        '',
+        30,
+        100,
+        true
+    ),
+    ['div_class' => 'integria-remote-setup-integria_pass']
+);
+$table_remote->data['integria_pass'] = $row;
+
+/*
+    // API password.
+    $row['api_pass'] = html_print_label_input_block(
     __('API Password'),
     html_print_input_password(
         'integria_api_pass',
@@ -343,12 +315,12 @@ $row['api_pass'] = html_print_label_input_block(
         true
     ),
     ['div_class' => 'integria-remote-setup-integria_api_pass']
-);
-$table_remote->data['integria_api_pass'] = $row;
+    );
+    $table_remote->data['integria_api_pass'] = $row;
 
-// Request timeout.
-$row = [];
-$row['req_timeout'] = html_print_label_input_block(
+    // Request timeout.
+    $row = [];
+    $row['req_timeout'] = html_print_label_input_block(
     __('Request timeout'),
     html_print_input_text(
         'integria_req_timeout',
@@ -359,9 +331,9 @@ $row['req_timeout'] = html_print_label_input_block(
         true
     ),
     ['div_class' => 'integria-remote-setup-integria_req_timeout']
-);
-$table_remote->data['integria_req_timeout'] = $row;
-
+    );
+    $table_remote->data['integria_req_timeout'] = $row;
+*/
 $row = [];
 $row['control'] = __('Inventory');
 $row['control'] .= html_print_button(
@@ -375,9 +347,9 @@ $row['control'] .= html_print_button(
     ],
     true
 );
-$row['control'] .= '<span id="test-integria-spinner-sync" style="display:none;">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
-$row['control'] .= '<span id="test-integria-success-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
-$row['control'] .= '<span id="test-integria-failure-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
+$row['control'] .= '<span id="ITSM-spinner-sync" style="display:none;">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
+$row['control'] .= '<span id="ITSM-success-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
+$row['control'] .= '<span id="ITSM-failure-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
 $table_remote->data['integria_sync_inventory'] = $row;
 
 // Alert settings.
@@ -425,7 +397,7 @@ $row = [];
 $row[0] = html_print_label_input_block(
     __('Group'),
     html_print_select(
-        $integria_group_values,
+        $group_values,
         'default_group',
         $config['default_group'],
         '',
@@ -443,7 +415,7 @@ $row[0] = html_print_label_input_block(
 $row[1] = html_print_label_input_block(
     __('Priority'),
     html_print_select(
-        $integria_criticity_values,
+        $priority_values,
         'default_criticity',
         $config['default_criticity'],
         '',
@@ -478,7 +450,7 @@ $row[0] = html_print_label_input_block(
 $row[1] = html_print_label_input_block(
     __('Type'),
     html_print_select(
-        $integria_types_values,
+        $object_types_values,
         'incident_type',
         $config['incident_type'],
         '',
@@ -498,7 +470,7 @@ $row = [];
 $row[0] = html_print_label_input_block(
     __('Status'),
     html_print_select(
-        $integria_status_values,
+        $status_values,
         'incident_status',
         $config['incident_status'],
         '',
@@ -559,7 +531,7 @@ $row = [];
 $row[0] = html_print_label_input_block(
     __('Group'),
     html_print_select(
-        $integria_group_values,
+        $group_values,
         'cr_default_group',
         $config['cr_default_group'],
         '',
@@ -577,7 +549,7 @@ $row[0] = html_print_label_input_block(
 $row[1] = html_print_label_input_block(
     __('Priority'),
     html_print_select(
-        $integria_criticity_values,
+        $priority_values,
         'cr_default_criticity',
         $config['cr_default_criticity'],
         '',
@@ -612,7 +584,7 @@ $row[0] = html_print_label_input_block(
 $row[1] = html_print_label_input_block(
     __('Type'),
     html_print_select(
-        $integria_types_values,
+        $object_types_values,
         'cr_incident_type',
         $config['cr_incident_type'],
         '',
@@ -632,7 +604,7 @@ $row = [];
 $row[0] = html_print_label_input_block(
     __('Status'),
     html_print_select(
-        $integria_status_values,
+        $status_values,
         'cr_incident_status',
         $config['cr_incident_status'],
         '',
@@ -652,7 +624,7 @@ $row = [];
 $row['control'] = __('Test connection');
 $row['control'] .= html_print_button(
     __('Test'),
-    'test-integria',
+    'ITSM',
     false,
     '',
     [
@@ -661,10 +633,10 @@ $row['control'] .= html_print_button(
     ],
     true
 );
-$row['control'] .= '<span id="test-integria-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
-$row['control'] .= '<span id="test-integria-success" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'&nbsp;'.__('Connection its OK').'</span>';
-$row['control'] .= '<span id="test-integria-failure" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'&nbsp;'.__('Connection failed').'</span>';
-$row['control'] .= '&nbsp;<span id="test-integria-message" class="invisible"></span>';
+$row['control'] .= '<span id="ITSM-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
+$row['control'] .= '<span id="ITSM-success" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'&nbsp;'.__('Connection its OK').'</span>';
+$row['control'] .= '<span id="ITSM-failure" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'&nbsp;'.__('Connection failed').'</span>';
+$row['control'] .= '&nbsp;<span id="ITSM-message" class="invisible"></span>';
 $table_remote->data['integria_test'] = $row;
 
 // Print.
@@ -745,6 +717,8 @@ html_print_action_buttons($update_button);
 
 echo '</form>';
 
+ui_require_javascript_file('ITSM');
+
 ?>
 
 <script type="text/javascript">
@@ -815,92 +789,6 @@ echo '</form>';
 
     $('input:checkbox[name="integria_enabled"]').change(handleEnable);
 
-    var handleTest = function (event) {
-        var user = $('input#text-integria_user').val();
-        var pass = $('input#password-integria_pass').val();
-        var host = $('input#text-integria_hostname').val();
-        var timeout = Number.parseInt($('input#text-integria_req_timeout').val(), 10);
-    
-        var timeoutMessage = '<?php echo __('Connection timeout'); ?>';
-        var badRequestMessage = '<?php echo __('Empty user or password'); ?>';
-        var notFoundMessage = '<?php echo __('User not found'); ?>';
-        var invalidPassMessage = '<?php echo __('Invalid password'); ?>';
-        
-        var hideLoadingImage = function () {
-            $('span#test-integria-spinner').hide();
-        }
-        var showLoadingImage = function () {
-            $('span#test-integria-spinner').show();
-        }
-        var hideSuccessImage = function () {
-            $('span#test-integria-success').hide();
-        }
-        var showSuccessImage = function () {
-            $('span#test-integria-success').show();
-        }
-        var hideFailureImage = function () {
-            $('span#test-integria-failure').hide();
-        }
-        var showFailureImage = function () {
-            $('span#test-integria-failure').show();
-        }
-        var hideMessage = function () {
-            $('span#test-integria-message').hide();
-        }
-        var showMessage = function () {
-            $('span#test-integria-message').show();
-        }
-        var changeTestMessage = function (message) {
-            $('span#test-integria-message').text(message);
-        }
-        
-        hideSuccessImage();
-        hideFailureImage();
-        hideMessage();
-        showLoadingImage();
-
-        var integria_user = $('input[name=integria_user]').val();
-        var integria_pass = $('input[name=integria_pass]').val();
-        var api_hostname = $('input[name=integria_hostname]').val();
-        var api_pass = $('input[name=integria_api_pass]').val();
-        var user_level_conf = $('input:checkbox[name="integria_user_level_conf"]').is(':checked');
-
-        var data = {
-            page: 'godmode/setup/setup_integria',
-            operation: 'check_api_access',
-            integria_user: integria_user,
-            integria_pass: integria_pass,
-            api_hostname: api_hostname,
-            api_pass: api_pass,
-            user_level_conf: user_level_conf,
-        }
-
-        // AJAX call to check API connection.
-        $.ajax({
-            type: "POST",
-            url: "ajax.php",
-            dataType: "json",
-            timeout: timeout ? timeout * 1000 : 0,
-            data: data
-        })
-        .done(function(data, textStatus, xhr) {
-            if (data.login == '1') {
-                showSuccessImage();
-            } else {
-                showFailureImage();
-                showMessage();
-            }
-
-        })
-        .fail(function(xhr, textStatus, errorThrown) {
-            showFailureImage();
-            showMessage();
-        })
-        .always(function(xhr, textStatus) {
-            hideLoadingImage();
-        });
-    }
-
     var handleInventorySync = function (event) {
 
         var badRequestMessage = '<?php echo __('Empty user or password'); ?>';
@@ -908,22 +796,22 @@ echo '</form>';
         var invalidPassMessage = '<?php echo __('Invalid password'); ?>';
 
         var hideLoadingImage = function () {
-            $('span#test-integria-spinner-sync').hide();
+            $('span#ITSM-spinner-sync').hide();
         }
         var showLoadingImage = function () {
-            $('span#test-integria-spinner-sync').show();
+            $('span#ITSM-spinner-sync').show();
         }
         var hideSuccessImage = function () {
-            $('span#test-integria-success-sync').hide();
+            $('span#ITSM-success-sync').hide();
         }
         var showSuccessImage = function () {
-            $('span#test-integria-success-sync').show();
+            $('span#ITSM-success-sync').show();
         }
         var hideFailureImage = function () {
-            $('span#test-integria-failure-sync').hide();
+            $('span#ITSM-failure-sync').hide();
         }
         var showFailureImage = function () {
-            $('span#test-integria-failure-sync').show();
+            $('span#ITSM-failure-sync').show();
         }
 
         hideSuccessImage();
@@ -991,7 +879,11 @@ echo '</form>';
         });
     }
 
-    $('#button-test-integria').click(handleTest);
-    $('#button-sync-inventory').click(handleInventorySync);
+    $('#button-ITSM').click(function() {
+        var pass = $('input#password-integria_pass').val();
+        var host = $('input#text-integria_hostname').val();
+        testConectionApi(pass, host);
+    });
+    //$('#button-sync-inventory').click(handleInventorySync);
 
 </script>
diff --git a/pandora_console/include/ajax/integria_incidents.ajax.php b/pandora_console/include/ajax/integria_incidents.ajax.php
deleted file mode 100644
index 4193dded44..0000000000
--- a/pandora_console/include/ajax/integria_incidents.ajax.php
+++ /dev/null
@@ -1,60 +0,0 @@
-<?php
-/**
- * Integria incidents management.
- *
- * @category   Ajax library.
- * @package    Pandora FMS
- * @subpackage Modules.
- * @version    1.0.0
- * @license    See below
- *
- *    ______                 ___                    _______ _______ ________
- * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
- * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
- * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
- *
- * ============================================================================
- * Copyright (c) 2005-2023 Pandora FMS
- * Please see https://pandorafms.com/community/ for full contribution list
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation for version 2.
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- * ============================================================================
- */
-
-if (check_login()) {
-    global $config;
-
-    include_once $config['homedir'].'/include/functions_integriaims.php';
-
-    $get_users = get_parameter('get_users');
-    $search_term = get_parameter('search_term', '');
-
-    if ($get_users) {
-        $integria_users_csv = integria_api_call(null, null, null, null, 'get_users', []);
-
-        $csv_array = explode("\n", $integria_users_csv);
-
-        foreach ($csv_array as $csv_line) {
-            if (!empty($csv_line)) {
-                $integria_users_values[$csv_line] = $csv_line;
-            }
-        }
-
-        $integria_users_filtered_values = array_filter(
-            $integria_users_values,
-            function ($item) use ($search_term) {
-                if (strpos($item, $search_term) !== false) {
-                    return true;
-                }
-            }
-        );
-
-        echo json_encode($integria_users_filtered_values);
-        return;
-    }
-}
diff --git a/pandora_console/include/functions_graph.php b/pandora_console/include/functions_graph.php
index 116deea959..de0f45f053 100644
--- a/pandora_console/include/functions_graph.php
+++ b/pandora_console/include/functions_graph.php
@@ -2907,223 +2907,6 @@ function graph_sla_slicebar(
 }
 
 
-/**
- * Print a pie graph with priodity incident
- */
-function grafico_incidente_prioridad()
-{
-    global $config;
-
-    $integria_ticket_count_by_priority_json = integria_api_call(null, null, null, null, 'get_tickets_count', ['prioridad', 30], false, '', '|;|');
-
-    $integria_priorities_map_json = integria_api_call(null, null, null, null, 'get_incident_priorities', '', false, 'json');
-
-    $integria_ticket_count_by_priority = json_decode($integria_ticket_count_by_priority_json, true);
-    $integria_priorities_map = json_decode($integria_priorities_map_json, true);
-
-    $integria_priorities_map_ids = array_column($integria_priorities_map, 'id');
-    $integria_priorities_map_names = array_column($integria_priorities_map, 'name');
-    $integria_priorities_map_indexed_by_id = array_combine($integria_priorities_map_ids, $integria_priorities_map_names);
-
-    $data = [];
-    $labels = [];
-    foreach ($integria_ticket_count_by_priority as $item) {
-        $priority_name = $integria_priorities_map_indexed_by_id[$item['prioridad']];
-        $labels[] = io_safe_output($priority_name);
-        $data[] = $item['n_incidents'];
-    }
-
-    if ($config['fixed_graph'] == false) {
-        $water_mark = [
-            'file' => $config['homedir'].'/images/logo_vertical_water.png',
-            'url'  => ui_get_full_url('images/logo_vertical_water.png', false, false, false),
-        ];
-    }
-
-    $options = [
-        'width'     => 320,
-        'height'    => 200,
-        'waterMark' => $water_mark,
-        'legend'    => [
-            'display'  => true,
-            'position' => 'right',
-            'align'    => 'center',
-        ],
-        'labels'    => $labels,
-    ];
-
-    $output = '<div style="width:inherit;margin: 0 auto;">';
-    $output .= pie_graph(
-        $data,
-        $options
-    );
-    $output .= '</div>';
-
-    return $output;
-}
-
-
-/**
- * Print a pie graph with incidents data
- */
-function graph_incidents_status()
-{
-    global $config;
-
-    $integria_ticket_count_by_status_json = integria_api_call(null, null, null, null, 'get_tickets_count', ['estado', 30], false, '', '|;|');
-
-    $integria_status_map_json = integria_api_call(null, null, null, null, 'get_incidents_status', '', false, 'json');
-
-    $integria_ticket_count_by_status = json_decode($integria_ticket_count_by_status_json, true);
-    $integria_status_map = json_decode($integria_status_map_json, true);
-
-    $integria_status_map_ids = array_column($integria_status_map, 'id');
-    $integria_status_map_names = array_column($integria_status_map, 'name');
-    $integria_status_map_indexed_by_id = array_combine($integria_status_map_ids, $integria_status_map_names);
-
-    $data = [];
-    $labels = [];
-    foreach ($integria_ticket_count_by_status as $item) {
-        $status_name = $integria_status_map_indexed_by_id[$item['estado']];
-        $labels[] = io_safe_output($status_name);
-        $data[] = $item['n_incidents'];
-    }
-
-    if ($config['fixed_graph'] == false) {
-        $water_mark = [
-            'file' => $config['homedir'].'/images/logo_vertical_water.png',
-            'url'  => ui_get_full_url('images/logo_vertical_water.png', false, false, false),
-        ];
-    }
-
-    $options = [
-        'width'     => 320,
-        'height'    => 200,
-        'waterMark' => $water_mark,
-        'legend'    => [
-            'display'  => true,
-            'position' => 'right',
-            'align'    => 'center',
-        ],
-        'labels'    => $labels,
-    ];
-
-    $output = '<div style="width:inherit;margin: 0 auto;">';
-    $output .= pie_graph(
-        $data,
-        $options
-    );
-    $output .= '</div>';
-
-    return $output;
-}
-
-
-/**
- * Print a pie graph with incident data by group
- */
-function graphic_incident_group()
-{
-    global $config;
-
-    $integria_ticket_count_by_group_json = integria_api_call(null, null, null, null, 'get_tickets_count', ['id_grupo', 30], false, '', '|;|');
-
-    $integria_group_map_json = integria_api_call(null, null, null, null, 'get_groups', '', false, 'json');
-
-    $integria_ticket_count_by_group = json_decode($integria_ticket_count_by_group_json, true);
-    $integria_group_map = json_decode($integria_group_map_json, true);
-
-    $data = [];
-    $labels = [];
-    foreach ($integria_ticket_count_by_group as $item) {
-        $group_name = $integria_group_map[$item['id_grupo']];
-        $labels[] = io_safe_output($group_name);
-        $data[] = $item['n_incidents'];
-    }
-
-    if ($config['fixed_graph'] == false) {
-        $water_mark = [
-            'file' => $config['homedir'].'/images/logo_vertical_water.png',
-            'url'  => ui_get_full_url('images/logo_vertical_water.png', false, false, false),
-        ];
-    }
-
-    $options = [
-        'width'     => 320,
-        'height'    => 200,
-        'waterMark' => $water_mark,
-        'legend'    => [
-            'display'  => true,
-            'position' => 'right',
-            'align'    => 'center',
-        ],
-        'labels'    => $labels,
-    ];
-
-    $output = '<div style="width:inherit;margin: 0 auto;">';
-    $output .= pie_graph(
-        $data,
-        $options
-    );
-    $output .= '</div>';
-
-    return $output;
-}
-
-
-/**
- * Print a graph with access data of agents
- *
- * @param integer id_agent Agent ID
- * @param integer width pie graph width
- * @param integer height pie graph height
- * @param integer period time period
- */
-function graphic_incident_user()
-{
-    global $config;
-
-    $integria_ticket_count_by_user_json = integria_api_call(null, null, null, null, 'get_tickets_count', ['id_usuario', 30], false, '', '|;|');
-
-    $integria_ticket_count_by_user = json_decode($integria_ticket_count_by_user_json, true);
-
-    $data = [];
-    $labels = [];
-    foreach ($integria_ticket_count_by_user as $item) {
-        $labels[] = (empty($item['id_usuario']) === false) ? io_safe_output($item['id_usuario']) : '--';
-        $data[] = $item['n_incidents'];
-    }
-
-    if ($config['fixed_graph'] == false) {
-        $water_mark = [
-            'file' => $config['homedir'].'/images/logo_vertical_water.png',
-            'url'  => ui_get_full_url('images/logo_vertical_water.png', false, false, false),
-        ];
-    }
-
-    $options = [
-        'width'     => 320,
-        'height'    => 200,
-        'waterMark' => $water_mark,
-        'legend'    => [
-            'display'  => true,
-            'position' => 'right',
-            'align'    => 'center',
-        ],
-        'labels'    => $labels,
-    ];
-
-    $output = '<div style="width:inherit;margin: 0 auto;">';
-    $output .= pie_graph(
-        $data,
-        $options
-    );
-    $output .= '</div>';
-
-    return $output;
-}
-
-
 function series_suffix_leyend($series_name, $series_suffix, $id_agent, $data_module_graph, $array_data)
 {
         global $config;
diff --git a/pandora_console/include/functions_incidents.php b/pandora_console/include/functions_incidents.php
deleted file mode 100644
index 5065acc155..0000000000
--- a/pandora_console/include/functions_incidents.php
+++ /dev/null
@@ -1,477 +0,0 @@
-<?php
-
-// Pandora FMS - https://pandorafms.com
-// ==================================================
-// Copyright (c) 2005-2023 Pandora FMS
-// Please see https://pandorafms.com/community/ for full contribution list
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the  GNU Lesser General Public License
-// as published by the Free Software Foundation; version 2
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-
-/**
- * @package    Include
- * @subpackage Incidents
- */
-
-
-/**
- * Gets all the possible priorities for incidents in an array
- *
- * @return array The several priorities with their values
- */
-function incidents_get_priorities($priority=false)
-{
-    $fields = [];
-    $fields[0] = __('Informative');
-    $fields[1] = __('Low');
-    $fields[2] = __('Medium');
-    $fields[3] = __('Serious');
-    $fields[4] = __('Very serious');
-    $fields[10] = __('Maintenance');
-
-    if ($priority === false) {
-        return $fields;
-    } else {
-        return $fields[$priority];
-    }
-}
-
-
-/**
- * Prints the image tag for passed status
- *
- * @param integer $id_status Which status to return the image to
- *
- * @return string The string with the image tag
- */
-function incidents_print_priority_img($id_priority, $return=false)
-{
-    switch ($id_priority) {
-        case 0:
-            $img = html_print_image('images/dot_green.png', true, ['title' => __('Informative')]).html_print_image('images/dot_green.png', true, ['title' => __('Informative')]).html_print_image('images/dot_yellow.png', true, ['title' => __('Informative')]);
-        break;
-
-        case 1:
-            $img = html_print_image('images/dot_green.png', true, ['title' => __('Low')]).html_print_image('images/dot_yellow.png', true, ['title' => __('Low')]).html_print_image('images/dot_yellow.png', true, ['title' => __('Low')]);
-        break;
-
-        case 2:
-            $img = html_print_image('images/dot_yellow.png', true, ['title' => __('Medium')]).html_print_image('images/dot_yellow.png', true, ['title' => __('Medium')]).html_print_image('images/dot_red.png', true, ['title' => __('Medium')]);
-        break;
-
-        case 3:
-            $img = html_print_image('images/dot_yellow.png', true, ['title' => __('Serious')]).html_print_image('images/dot_red.png', true, ['title' => __('Serious')]).html_print_image('images/dot_red.png', true, ['title' => __('Serious')]);
-        break;
-
-        case 4:
-            $img = html_print_image('images/dot_red.png', true, ['title' => __('Very serious')]).html_print_image('images/dot_red.png', true, ['title' => __('Very serious')]).html_print_image('images/dot_red.png', true, ['title' => __('Very serious')]);
-        break;
-
-        case 10:
-            $img = html_print_image('images/dot_green.png', true, ['title' => __('Maintenance')]).html_print_image('images/dot_green.png', true, ['title' => __('Maintenance')]).html_print_image('images/dot_green.png', true, ['title' => __('Maintenance')]);
-        break;
-    }
-
-    if ($return === false) {
-        echo $img;
-    }
-
-    return $img;
-}
-
-
-/**
- * Gets all the possible status for incidents in an array
- *
- * @return array The several status with their values
- */
-function incidents_get_status()
-{
-    $fields = [];
-    $fields[0] = __('Active incidents');
-    $fields[1] = __('Active incidents, with comments');
-    $fields[2] = __('Rejected incidents');
-    $fields[3] = __('Expired incidents');
-    $fields[13] = __('Closed incidents');
-
-    return $fields;
-}
-
-
-/**
- * Prints the image tag for passed status
- *
- * @param integer $id_status: Which status to return the image to
- *
- * @return string The string with the image tag
- */
-function incidents_print_status_img($id_status, $return=false)
-{
-    switch ($id_status) {
-        case 0:
-            $img = html_print_image('images/dot_red.png', true, ['title' => __('Active incidents')]);
-        break;
-
-        case 1:
-            $img = html_print_image('images/dot_yellow.png', true, ['title' => __('Active incidents, with comments')]);
-        break;
-
-        case 2:
-            $img = html_print_image('images/dot_blue.png', true, ['title' => __('Rejected incidents')]);
-        break;
-
-        case 3:
-            $img = html_print_image('images/dot_green.png', true, ['title' => __('Expired incidents')]);
-        break;
-
-        case 13:
-            $img = html_print_image('images/dot_white.png', true, ['title' => __('Closed incidents')]);
-        break;
-    }
-
-    if ($return === false) {
-        echo $img;
-    }
-
-    return $img;
-}
-
-
-/**
- * Updates the last user (either by adding an attachment, note or the incident itself)
- * Named after the UNIX touch utility
- *
- * @param integer $id_incident: A single incident or an array of incidents
- *
- * @return boolean True if it was done, false if it wasn't
- */
-function incidents_process_touch($id_incident)
-{
-    global $config;
-
-    $id_incident = (array) safe_int($id_incident, 1);
-    // Make sure we have all positive int's
-    if (empty($id_incident)) {
-        return false;
-    }
-
-    if (empty($id_incident)) {
-        return false;
-    }
-
-    return db_process_sql_update('tincidencia', ['id_lastupdate' => $config['id_user']], ['id_incidencia' => $id_incident]);
-}
-
-
-/**
- * Updates the owner (named after the UNIX utility chown)
- *
- * @param integer $id_incident: A single incident or an array of incidents
- *
- * @return boolean True if it was done, false if it wasn't
- */
-function incidents_process_chown($id_incident, $owner=false)
-{
-    if ($owner === false) {
-        global $config;
-        $owner = $config['id_user'];
-    }
-
-    $id_incident = (array) safe_int($id_incident, 1);
-    // Make sure we have all positive int's
-    if (empty($id_incident)) {
-        return false;
-    }
-
-    $id_incident = implode(',', $id_incident);
-    $sql = sprintf("UPDATE tincidencia SET id_usuario = '%s' WHERE id_incidencia IN (%s)", $owner, $id_incident);
-
-    return db_process_sql($sql);
-}
-
-
-/**
- * Get the author of an incident.
- *
- * @param integer $id_incident Incident id.
- *
- * @return string The author of an incident
- */
-function incidents_get_author($id_incident)
-{
-    if ($id_incident < 1) {
-        return '';
-    }
-
-    return (string) db_get_value('id_creator', 'tincidencia', 'id_incidencia', (int) $id_incident);
-}
-
-
-/**
- * Get the owner of an incident.
- *
- * @param integer $id_incident Incident id.
- *
- * @return string The last updater of an incident
- */
-function incidents_get_owner($id_incident)
-{
-    if ($id_incident < 1) {
-        return '';
-    }
-
-    return (string) db_get_value('id_usuario', 'tincidencia', 'id_incidencia', (int) $id_incident);
-}
-
-
-/**
- * Get the last updater of an incident.
- *
- * @param integer $id_incident Incident id.
- *
- * @return string The last updater of an incident
- */
-function incidents_get_lastupdate($id_incident)
-{
-    if ($id_incident < 1) {
-        return '';
-    }
-
-    return (string) db_get_value('id_lastupdate', 'tincidencia', 'id_incidencia', (int) $id_incident);
-}
-
-
-/**
- * Get the group id of an incident.
- *
- * @param integer $id_incident Incident id.
- *
- * @return integer The group id of an incident
- */
-function incidents_get_group($id_incident)
-{
-    if ($id_incident < 1) {
-        return 0;
-    }
-
-    return (int) db_get_value('id_grupo', 'tincidencia', 'id_incidencia', (int) $id_incident);
-}
-
-
-/**
- * Delete an incident out the database.
- *
- * @param mixed $id_inc An int or an array of ints to be deleted
- *
- * @return boolean True if incident was succesfully deleted, false if not
- */
-function incidents_delete_incident($id_incident)
-{
-    global $config;
-    $ids = (array) safe_int($id_incident, 1);
-    // Make the input an array
-    $notes = [];
-    $attachments = [];
-    $errors = 0;
-
-    foreach ($ids as $id_inc) {
-        // Delete incident
-        $ret = db_process_sql_delete('tincidencia', ['id_incidencia' => $id_inc]);
-        if ($ret === false) {
-            $errors++;
-        }
-
-        // We only need the ID's
-        $notes = array_merge($notes, array_keys(incidents_get_notes($id_inc)));
-        $attachments = array_merge($attachments, array_keys(incidents_get_attach($id_inc)));
-
-        db_pandora_audit(
-            AUDIT_LOG_INCIDENT_MANAGEMENT,
-            $config['id_user'].' deleted incident #'.$id_inc
-        );
-    }
-
-    // Delete notes
-    $note_err = incidents_delete_note($notes, false);
-    $attach_err = incidents_delete_attach($attachments, false);
-
-    if ($note_err === false || $attach_err === false) {
-        $errors++;
-    }
-
-    if ($errors > 0) {
-        return false;
-    }
-
-    return true;
-}
-
-
-/**
- * Delete notes out the database.
- *
- * @param mixed   $id_note  An int or an array of ints to be deleted
- * @param boolean $transact true if a transaction should be started, false if not
- *
- * @return boolean True if note was succesfully deleted, false if not
- */
-function incidents_delete_note($id_note, $transact=true)
-{
-    $id_note = (array) safe_int($id_note, 1);
-    // cast as array
-    $errors = 0;
-
-    // Delete notes
-    foreach ($id_note as $id) {
-        $ret = db_process_sql_delete('tnota', ['id_nota' => $id]);
-        if ($ret === false) {
-            $errors++;
-        }
-    }
-
-    if ($errors > 0) {
-        return false;
-    } else {
-        return true;
-    }
-}
-
-
-/**
- * Delete attachments out the database and from the machine.
- *
- * @param mixed   $id_attach An int or an array of ints to be deleted
- * @param boolean $transact  true if a transaction should be started, false if not
- *
- * @return boolean True if attachment was succesfully deleted, false if not
- */
-function incidents_delete_attach($id_attach, $transact=true)
-{
-    global $config;
-
-    $id_attach = (array) safe_int($id_attach, 1);
-    // cast as array
-    $errors = 0;
-
-    // Delete attachment
-    foreach ($id_attach as $id) {
-        $filename = db_get_value('filename', 'tattachment', 'id_attachment', $id);
-
-        $ret = db_process_sql_delete('tattachment', ['id_attachment' => $id]);
-        if ($ret === false) {
-            $errors++;
-        }
-
-        unlink($config['attachment_store'].'/pand'.$id.'_'.$filename);
-    }
-
-    if ($errors > 0) {
-        return false;
-    } else {
-        return true;
-    }
-}
-
-
-/**
- * Get notes based on the incident id.
- *
- * @param integer $id_incident An int with the incident id
- *
- * @return array An array of all the notes for that incident
- */
-function incidents_get_notes($id_incident)
-{
-    $return = db_get_all_rows_field_filter('tnota', 'id_incident', (int) $id_incident);
-
-    if ($return === false) {
-        $return = [];
-    }
-
-    $notes = [];
-    foreach ($return as $row) {
-        $notes[$row['id_nota']] = $row;
-    }
-
-    return $notes;
-}
-
-
-/**
- * Get attachments based on the incident id.
- *
- * @param integer $id_incident An int with the incident id
- *
- * @return array An array of all the notes for that incident
- */
-function incidents_get_attach($id_incident)
-{
-    $return = db_get_all_rows_field_filter('tattachment', 'id_incidencia', (int) $id_incident);
-
-    if ($return === false) {
-        $return = [];
-    }
-
-    $attach = [];
-    foreach ($return as $row) {
-        $attach[$row['id_attachment']] = $row;
-    }
-
-    return $attach;
-}
-
-
-/**
- * Get user id of a note.
- *
- * @param integer $id_note Note id.
- *
- * @return string User id of the given note.
- */
-function incidents_get_notes_author($id_note)
-{
-    return (string) db_get_value('id_usuario', 'tnota', 'id_nota', (int) $id_note);
-}
-
-
-/**
- * Interface to Integria API functionality.
- *
- * @param string $url            Url to Integria API with user, password and option (function to use).
- * @param string $postparameters Additional parameters to pass.
- *
- * @return variant The function result called in the API.
- */
-function incidents_call_api($url, $postparameters=false)
-{
-    $curlObj = curl_init();
-    curl_setopt($curlObj, CURLOPT_URL, $url);
-    curl_setopt($curlObj, CURLOPT_RETURNTRANSFER, 1);
-    if ($postparameters !== false) {
-        curl_setopt($curlObj, CURLOPT_POSTFIELDS, $postparameters);
-    }
-
-    $result = curl_exec($curlObj);
-    curl_close($curlObj);
-
-    return $result;
-}
-
-
-/**
- * Converts Xml format file to an array datatype.
- *
- * @param string $xml Xml file to convert.
- *
- * @return array A Json encoded array with xml content.
- */
-function incidents_xml_to_array($xml)
-{
-    $xmlObj = simplexml_load_string($xml, 'SimpleXMLElement', LIBXML_NOCDATA);
-
-    return json_decode(json_encode($xmlObj), true);
-}
diff --git a/pandora_console/include/functions_integriaims.php b/pandora_console/include/functions_integriaims.php
index 8fec23e210..817667272f 100644
--- a/pandora_console/include/functions_integriaims.php
+++ b/pandora_console/include/functions_integriaims.php
@@ -88,60 +88,6 @@ function integriaims_tabs($active_tab, $view=false)
 }
 
 
-/**
- * Gets all the details of Integria IMS API
- *
- * @param string $details      Type of API call.
- * @param number $detail_index Send index if you want return the text.
- *
- * @return string or array with result of API call.
- */
-function integriaims_get_details($details, $detail_index=false)
-{
-    global $config;
-
-    switch ($details) {
-        case 'status':
-            $operation = 'get_incidents_status';
-        break;
-
-        case 'group':
-            $operation = 'get_groups';
-        break;
-
-        case 'priority':
-            $operation = 'get_incident_priorities';
-        break;
-
-        case 'resolution':
-            $operation = 'get_incidents_resolutions';
-        break;
-
-        case 'type':
-            $operation = 'get_types';
-        break;
-
-        default:
-            // code...
-        break;
-    }
-
-    $api_call = integria_api_call(null, null, null, null, $operation);
-    $result = [];
-    get_array_from_csv_data_pair($api_call, $result);
-
-    if ($detail_index !== false) {
-        if ($result[$detail_index] == '' || $result[$detail_index] === null) {
-            return __('None');
-        } else {
-            return $result[$detail_index];
-        }
-    } else {
-        return $result;
-    }
-}
-
-
 /**
  * Perform an API call to Integria IMS.
  *
@@ -312,253 +258,3 @@ function integria_api_call(
         return $result;
     }
 }
-
-
-// Parse CSV consisting of one or more lines of the form key-value pair into an array.
-function get_array_from_csv_data_pair($csv_data, &$array_values)
-{
-    $csv_array = explode("\n", $csv_data);
-
-    foreach ($csv_array as $csv_value) {
-        if (empty($csv_value)) {
-            continue;
-        }
-
-        $new_csv_value = str_getcsv($csv_value);
-
-        $array_values[$new_csv_value[0]] = $new_csv_value[1];
-    }
-}
-
-
-/**
- * Parse CSV consisting of all lines into an array.
- *
- * @param string $csv_data     Data returned of csv api call.
- * @param string $array_values Returned array.
- * @param array  $index        Array to create an associative index (opcional).
- */
-function get_array_from_csv_data_all($csv_data, &$array_values, $index=false)
-{
-    $csv_array = explode("\n", $csv_data);
-
-    foreach ($csv_array as $csv_value) {
-        if (empty($csv_value)) {
-            continue;
-        }
-
-        $new_csv_value = str_getcsv($csv_value);
-
-        if ($index !== false) {
-            foreach ($new_csv_value as $key => $value) {
-                $new_csv_value_index[$index[$key]] = str_replace(':::', ',', $value);
-                ;
-            }
-
-            $array_values[$new_csv_value[0]] = $new_csv_value_index;
-        } else {
-            $new_csv_value_comma = array_map(
-                function ($item) {
-                    return str_replace(':::', ',', $item);
-                },
-                $new_csv_value
-            );
-            $array_values[$new_csv_value[0]] = $new_csv_value_comma;
-        }
-    }
-}
-
-
-/**
- * Print priority for Integria IMS with colors.
- *
- * @param string $priority       value of priority in Integria IMS.
- * @param string $priority_label text shown in color box.
- *
- * @return string HTML code.  code to print the color box.
- */
-function ui_print_integria_incident_priority($priority, $priority_label)
-{
-    global $config;
-
-    $output = '';
-    switch ($priority) {
-        case 0:
-            $color = COL_UNKNOWN;
-        break;
-
-        case 1:
-            $color = COL_NORMAL;
-        break;
-
-        case 10:
-            $color = COL_NOTINIT;
-        break;
-
-        case 2:
-            $color = COL_WARNING;
-        break;
-
-        case 3:
-            $color = COL_ALERTFIRED;
-        break;
-
-        case 4:
-            $color = COL_CRITICAL;
-        break;
-    }
-
-    $output = '<div class="priority" style="background: '.$color.'">';
-    $output .= $priority_label;
-    $output .= '</div>';
-
-    return $output;
-}
-
-
-/**
- * Get tickets from Integria IMS.
- *
- * @param array $tickets_filters Filters to send to API.
- *
- * @return array  Tickets returned by API call.
- */
-function get_tickets_integriaims($tickets_filters)
-{
-    global $config;
-
-    // Filters.
-    $incident_text = $tickets_filters['incident_text'];
-    $incident_status = $tickets_filters['incident_status'];
-    $incident_group = $tickets_filters['incident_group'];
-    $incident_owner = $tickets_filters['incident_owner'];
-    $incident_creator = $tickets_filters['incident_creator'];
-    $incident_priority = $tickets_filters['incident_priority'];
-    $incident_resolution = $tickets_filters['incident_resolution'];
-    $created_from = $tickets_filters['created_from'];
-    $created_to = $tickets_filters['created_to'];
-
-    // API call.
-    $result_api_call_list = integria_api_call(
-        null,
-        null,
-        null,
-        null,
-        'get_incidents',
-        [
-            $incident_text,
-            $incident_status,
-            $incident_group,
-            $incident_priority,
-            '0',
-            $incident_owner,
-            $incident_creator,
-        ],
-        false,
-        '',
-        ','
-    );
-
-    // Return array of api call 'get_incidents'.
-    $array_get_incidents = [];
-    get_array_from_csv_data_all($result_api_call_list, $array_get_incidents);
-
-    // Modify $array_get_incidents if filter for resolution exists.
-    $filter_resolution = [];
-    foreach ($array_get_incidents as $key => $value) {
-        if ($incident_resolution !== '' && ($array_get_incidents[$key][12] == $incident_resolution)) {
-            $filter_resolution[$key] = $array_get_incidents[$key];
-            continue;
-        }
-    }
-
-    if ($incident_resolution !== '') {
-        $array_get_incidents = $filter_resolution;
-    }
-
-    // Modify $array_get_incidents if filter for date is selected.
-    if ($created_from !== '' && $created_to !== '') {
-        $date = [];
-        $date_utimestamp = [];
-        foreach ($array_get_incidents as $key => $value) {
-            // Change format date / to -.
-            $date[$key] = date('Y-m-d', strtotime($array_get_incidents[$key][9]));
-            // Covert date to utimestamp.
-            $date_utimestamp[$key] = strtotime($date[$key]);
-        }
-
-        // Change format date / to -.
-        $created_from_date = date('Y-m-d', strtotime($created_from));
-        $created_to_date = date('Y-m-d', strtotime($created_to));
-
-        // Covert date to utimestamp.
-        $created_from_timestamp = strtotime($created_from_date);
-        $created_to_timestamp = strtotime($created_to_date);
-
-        // Dates within the selected period.
-        $selected_period = array_filter(
-            $date_utimestamp,
-            function ($value) use ($created_from_timestamp, $created_to_timestamp) {
-                return ($value >= $created_from_timestamp && $value <= $created_to_timestamp);
-            }
-        );
-
-        // Return incidents with the correct dates.
-        $filter_date = [];
-        foreach ($array_get_incidents as $key => $value) {
-            foreach ($selected_period as $index => $value) {
-                if ($array_get_incidents[$key][0] == $index) {
-                    $filter_date[$key] = $array_get_incidents[$key];
-                    continue;
-                }
-            }
-        }
-
-        $array_get_incidents = $filter_date;
-    }
-
-    return $array_get_incidents;
-}
-
-
-function integriaims_upload_file($filename, $incident_id, $file_description)
-{
-    if ($_FILES[$filename]['name'] != '') {
-        $filename = io_safe_input($_FILES[$filename]['name']);
-        $filesize = io_safe_input($_FILES[$filename]['size']);
-
-        $extension = pathinfo($filename, PATHINFO_EXTENSION);
-        $invalid_extensions = '/^(bat|exe|cmd|sh|php|php1|php2|php3|php4|php5|pl|cgi|386|dll|com|torrent|js|app|jar|iso|
-            pif|vb|vbscript|wsf|asp|cer|csr|jsp|drv|sys|ade|adp|bas|chm|cpl|crt|csh|fxp|hlp|hta|inf|ins|isp|jse|htaccess|
-            htpasswd|ksh|lnk|mdb|mde|mdt|mdw|msc|msi|msp|mst|ops|pcd|prg|reg|scr|sct|shb|shs|url|vbe|vbs|wsc|wsf|wsh)$/i';
-
-        if (!preg_match($invalid_extensions, $extension)) {
-            // The following is if you have clamavlib installed.
-            // (php5-clamavlib) and enabled in php.ini
-            // http://www.howtoforge.com/scan_viruses_with_php_clamavlib
-            if (extension_loaded('clamav')) {
-                cl_setlimits(5, 1000, 200, 0, 10485760);
-                $malware = cl_scanfile($_FILES['file']['tmp_name']);
-                if ($malware) {
-                    $error = 'Malware detected: '.$malware.'<br>ClamAV version: '.clam_get_version();
-                    die($error);
-                }
-            }
-
-            $filecontent = base64_encode(file_get_contents($_FILES[$filename]['tmp_name']));
-
-            $result_api_call = integria_api_call(null, null, null, null, 'attach_file', [$incident_id, $filename, $filesize, $file_description, $filecontent], false, '', '|;|');
-
-            // API method returns '0' string if success.
-            $file_added = ($result_api_call === '0') ? true : false;
-
-            ui_print_result_message(
-                $file_added,
-                __('File successfully added'),
-                __('File could not be added')
-            );
-        } else {
-            ui_print_error_message(__('File has an invalid extension'));
-        }
-    }
-}
diff --git a/pandora_console/include/javascript/ITSM.js b/pandora_console/include/javascript/ITSM.js
index 4ad40b329c..43684fce31 100644
--- a/pandora_console/include/javascript/ITSM.js
+++ b/pandora_console/include/javascript/ITSM.js
@@ -64,3 +64,66 @@ function downloadIncidenceAttachment(
     }
   });
 }
+
+/* Function check API */
+// eslint-disable-next-line no-unused-vars
+function testConectionApi(pass, host) {
+  var hideLoadingImage = function() {
+    $("span#ITSM-spinner").hide();
+  };
+  var showLoadingImage = function() {
+    $("span#ITSM-spinner").show();
+  };
+  var hideSuccessImage = function() {
+    $("span#ITSM-success").hide();
+  };
+  var showSuccessImage = function() {
+    $("span#ITSM-success").show();
+  };
+  var hideFailureImage = function() {
+    $("span#ITSM-failure").hide();
+  };
+  var showFailureImage = function() {
+    $("span#ITSM-failure").show();
+  };
+  var hideMessage = function() {
+    $("span#ITSM-message").hide();
+  };
+  var showMessage = function() {
+    $("span#ITSM-message").show();
+  };
+
+  hideSuccessImage();
+  hideFailureImage();
+  hideMessage();
+  showLoadingImage();
+
+  var data = {
+    page: "operation/ITSM/itsm",
+    method: "checkConncetionApi",
+    pass: pass,
+    host: host
+  };
+
+  $.ajax({
+    type: "POST",
+    url: "ajax.php",
+    dataType: "json",
+    data: data
+  })
+    .done(function(data) {
+      if (data.valid == 1) {
+        showSuccessImage();
+      } else {
+        showFailureImage();
+        showMessage();
+      }
+    })
+    .fail(function() {
+      showFailureImage();
+      showMessage();
+    })
+    .always(function() {
+      hideLoadingImage();
+    });
+}
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index 935be574b7..bca6e13469 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -32,16 +32,19 @@ class ITSM
 
     /**
      * ITSM.
+     *
+     * @param string|null $host Host url.
+     * @param string|null $pass Token.
      */
-    public function __construct()
+    public function __construct(?string $host=null, ?string $pass=null)
     {
         global $config;
         $user_info = \users_get_user_by_id($config['id_user']);
 
         $this->userLevelConf = (bool) $config['integria_user_level_conf'];
-        $this->url = $config['integria_hostname'];
+        $this->url = ($host ?? $config['integria_hostname']);
 
-        $this->userBearer = $config['integria_pass'];
+        $this->userBearer = ($pass ?? $config['integria_pass']);
         if ($this->userLevelConf === true) {
             $this->userBearer = $user_info['integria_user_level_pass'];
         }
@@ -150,6 +153,10 @@ class ITSM
     {
         $path = '';
         switch ($action) {
+            case 'ping':
+                $path = '/ping';
+            break;
+
             case 'listTickets':
                 $path = '/incidence/list';
             break;
@@ -266,4 +273,111 @@ class ITSM
     }
 
 
+    /**
+     * Ping API.
+     *
+     * @return boolean Data incidence
+     */
+    public function ping(): bool
+    {
+        $result = $this->callApi(
+            'ping',
+            [],
+            [],
+            null,
+            'GET'
+        );
+
+        return $result['valid'];
+    }
+
+
+    /**
+     * Get Groups.
+     *
+     * @return array Return mode select.
+     */
+    public function getGroups(): array
+    {
+        $listGroups = $this->callApi('listGroups');
+        $result = [];
+        foreach ($listGroups['data'] as $group) {
+            if ($group['idGroup'] > 1) {
+                $result[$group['idGroup']] = $group['name'];
+            }
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Get Priorities.
+     *
+     * @return array Return mode select.
+     */
+    public function getPriorities(): array
+    {
+        $listPriorities = $this->callApi('listPriorities');
+        return $listPriorities;
+    }
+
+
+    /**
+     * Get Status.
+     *
+     * @return array Return mode select.
+     */
+    public function getStatus(): array
+    {
+        $listStatus = $this->callApi('listStatus');
+        $result = [];
+        foreach ($listStatus['data'] as $status) {
+            $result[$status['idIncidenceStatus']] = $status['name'];
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Get Incidences types.
+     *
+     * @return array Return mode select.
+     */
+    public function getObjectypes(): array
+    {
+        $listObjectTypes = $this->callApi('listObjectTypes');
+        $result = [];
+        foreach ($listObjectTypes['data'] as $objectType) {
+            $result[$objectType['idIncidenceType']] = $objectType['name'];
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Get fields incidence type.
+     *
+     * @param integer $idIncidenceType Incidence Type ID.
+     *
+     * @return array Fields array.
+     */
+    public function getObjecTypesFields(int $idIncidenceType): array
+    {
+        $result = $this->callApi(
+            'incidenceTypeFields',
+            [
+                'page'     => 0,
+                'sizePage' => 0,
+            ],
+            [],
+            $idIncidenceType
+        );
+
+        return $result['data'];
+    }
+
+
 }
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 0b993ad929..c5b199e174 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -28,6 +28,7 @@ class Manager
         'getUserSelect',
         'getInputFieldsIncidenceType',
         'getDownloadIncidenceAttachment',
+        'checkConncetionApi',
     ];
 
     /**
@@ -145,8 +146,8 @@ class Manager
         $status = [];
         try {
             $ITSM = new ITSM();
-            $groups = $this->getGroups($ITSM);
-            $status = $this->getStatus($ITSM);
+            $groups = $ITSM->getGroups();
+            $status = $ITSM->getStatus();
             if (empty($idIncidence) === false) {
                 $this->deleteIncidence($ITSM, $idIncidence);
                 $successfullyMsg = __('Delete ticket successfully');
@@ -181,13 +182,13 @@ class Manager
         $idIncidence      = \get_parameter('idIncidence', 0);
 
         $error = '';
-        $ITSM = new ITSM();
         try {
-            $objectTypes = $this->getObjectypes($ITSM);
-            $groups = $this->getGroups($ITSM);
-            $priorities = $this->getPriorities($ITSM);
+            $ITSM = new ITSM();
+            $objectTypes = $ITSM->getObjectypes();
+            $groups = $ITSM->getGroups();
+            $priorities = $ITSM->getPriorities();
             $resolutions = $this->getResolutions($ITSM);
-            $status = $this->getStatus($ITSM);
+            $status = $ITSM->getStatus();
 
             if (empty($idIncidence) === false) {
                 $incidenceData = $this->getIncidence($ITSM, $idIncidence);
@@ -329,11 +330,11 @@ class Manager
                 }
 
                 $incidence = $this->getIncidence($ITSM, $idIncidence);
-                $objectTypes = $this->getObjectypes($ITSM);
-                $groups = $this->getGroups($ITSM);
+                $objectTypes = $ITSM->getObjectypes();
+                $groups = $ITSM->getGroups();
                 $resolutions = $this->getResolutions($ITSM);
-                $status = $this->getStatus($ITSM);
-                $priorities = $this->getPriorities($ITSM);
+                $status = $ITSM->getStatus();
+                $priorities = $ITSM->getPriorities();
                 $wus = $this->getIncidenceWus($ITSM, $idIncidence);
                 $files = $this->getIncidenceFiles($ITSM, $idIncidence);
 
@@ -390,9 +391,9 @@ class Manager
         $error = '';
         try {
             $ITSM = new ITSM();
-            $status = $this->getStatus($ITSM);
+            $status = $ITSM->getStatus();
             $incidencesByStatus = $this->getIncidencesGroupedByStatus($ITSM, $status);
-            $priorities = $this->getPriorities($ITSM);
+            $priorities = $ITSM->getPriorities();
             $incidencesByPriorities = $this->getIncidencesGroupedByPriorities($ITSM, $priorities);
             $incidencesByGroups = $this->getIncidencesGroupedByGroups($ITSM);
             $incidencesByOwners = $this->getIncidencesGroupedByOwners($ITSM);
@@ -415,46 +416,6 @@ class Manager
     }
 
 
-    /**
-     * Get Incidences types.
-     *
-     * @param ITSM $ITSM Object for callApi.
-     *
-     * @return array Return mode select.
-     */
-    private function getObjectypes(ITSM $ITSM): array
-    {
-        $listObjectTypes = $ITSM->callApi('listObjectTypes');
-        $result = [];
-        foreach ($listObjectTypes['data'] as $objectType) {
-            $result[$objectType['idIncidenceType']] = $objectType['name'];
-        }
-
-        return $result;
-    }
-
-
-    /**
-     * Get Groups.
-     *
-     * @param ITSM $ITSM Object for callApi.
-     *
-     * @return array Return mode select.
-     */
-    private function getGroups(ITSM $ITSM): array
-    {
-        $listGroups = $ITSM->callApi('listGroups');
-        $result = [];
-        foreach ($listGroups['data'] as $group) {
-            if ($group['idGroup'] > 1) {
-                $result[$group['idGroup']] = $group['name'];
-            }
-        }
-
-        return $result;
-    }
-
-
     /**
      * Get Resolutions.
      *
@@ -511,39 +472,6 @@ class Manager
     }
 
 
-    /**
-     * Get Status.
-     *
-     * @param ITSM $ITSM Object for callApi.
-     *
-     * @return array Return mode select.
-     */
-    private function getStatus(ITSM $ITSM): array
-    {
-        $listStatus = $ITSM->callApi('listStatus');
-        $result = [];
-        foreach ($listStatus['data'] as $status) {
-            $result[$status['idIncidenceStatus']] = $status['name'];
-        }
-
-        return $result;
-    }
-
-
-    /**
-     * Get Priorities.
-     *
-     * @param ITSM $ITSM Object for callApi.
-     *
-     * @return array Return mode select.
-     */
-    private function getPriorities(ITSM $ITSM): array
-    {
-        $listPriorities = $ITSM->callApi('listPriorities');
-        return $listPriorities;
-    }
-
-
     /**
      * Get Incidence.
      *
@@ -1016,11 +944,11 @@ class Manager
                 $filters
             );
 
-            $groups = $this->getGroups($ITSM);
+            $groups = $ITSM->getGroups();
             $resolutions = $this->getResolutions($ITSM);
             $resolutions['NOTRESOLVED'] = __('None');
-            $status = $this->getStatus($ITSM);
-            $priorities = $this->getPriorities($ITSM);
+            $status = $ITSM->getStatus();
+            $priorities = $ITSM->getPriorities();
 
             $usersInvolved = [];
             $usersCreators = [];
@@ -1256,4 +1184,27 @@ class Manager
     }
 
 
+    /**
+     * Ping API, check connection.
+     *
+     * @return void
+     */
+    public function checkConncetionApi()
+    {
+        $pass = (string) get_parameter('pass', '');
+        $host = (string) get_parameter('host', '');
+        try {
+            $ITSM = new ITSM($host, $pass);
+            $result = $ITSM->ping();
+        } catch (Throwable $e) {
+            echo $e->getMessage();
+            $result = false;
+            exit;
+        }
+
+        echo json_encode(['valid' => ($result !== false) ? 1 : 0]);
+        exit;
+    }
+
+
 }
diff --git a/pandora_console/operation/agentes/estado_generalagente.php b/pandora_console/operation/agentes/estado_generalagente.php
index 641f58c714..c0c1fc8582 100755
--- a/pandora_console/operation/agentes/estado_generalagente.php
+++ b/pandora_console/operation/agentes/estado_generalagente.php
@@ -30,11 +30,9 @@
 global $config;
 
 require_once 'include/functions_agents.php';
-
 require_once $config['homedir'].'/include/functions_graph.php';
 require_once $config['homedir'].'/include/functions_groups.php';
 require_once $config['homedir'].'/include/functions_ui.php';
-require_once $config['homedir'].'/include/functions_incidents.php';
 require_once $config['homedir'].'/include/functions_reporting_html.php';
 
 require_once $config['homedir'].'/include/functions_clippy.php';
@@ -688,44 +686,6 @@ if ((bool) $config['agentaccess'] === true && $access_agent > 0) {
  * END: ACCESS RATE GRAPH
  */
 
-/*
- * START: TABLE INCIDENTS
- */
-
-$last_incident = db_get_row_sql(
-    sprintf(
-        'SELECT * FROM tincidencia
-	     WHERE estado IN (0,1)
-		 AND id_agent = %d
-        ORDER BY actualizacion DESC',
-        $id_agente
-    )
-);
-
-if ($last_incident != false) {
-    $table_incident = new stdClass();
-    $table_incident->id = 'agent_incident_main';
-    $table_incident->width = '100%';
-    $table_incident->cellspacing = 0;
-    $table_incident->cellpadding = 0;
-    $table_incident->class = 'info_table tactical_table';
-
-    $table_incident->head[0] = '<span>'.__('Author').'</span>';
-    $table_incident->head[1] = '<span>'.__('Title').'</span>';
-    $table_incident->head[2] = '<span>'.__('Timestamp').'</span>';
-    $table_incident->head[3] = '<span>'.__('Priority').'</span>';
-
-    $data = [];
-    $data[0] = $last_incident['id_creator'];
-    $data[1] = '<a href="index.php?sec=incidencias&amp;sec2=operation/incidents/incident_detail&amp;id='.$last_incident['id_incidencia'].'">'.$last_incident['titulo'].'</a>';
-    $data[2] = $last_incident['inicio'];
-    $data[3] = incidents_print_priority_img($last_incident['prioridad'], true);
-    $table_incident->data[] = $data;
-}
-
-/*
- * END: TABLE INCIDENTS
- */
 
 /*
  * START: TABLE INTERFACES
@@ -1003,19 +963,6 @@ if (empty($agentIncidents) === false) {
     );
 }
 
-
-
-/*
-    // Show both graphs, events and access rate.
-    if ($table_access_rate) {
-    echo '<div class="agent_access_rate_events agent_details_line">'.$table_access_rate.$table_events.'</div>';
-    } else {
-    echo '<div class="w100p">'.$table_events.'</div>';
-    }
-
-    echo $agent_incidents;
-*/
-
 if (isset($table_interface) === true) {
     ui_toggle(
         html_print_table($table_interface, true),
diff --git a/pandora_console/operation/agentes/ver_agente.php b/pandora_console/operation/agentes/ver_agente.php
index 9bda55e947..bf110bd24f 100644
--- a/pandora_console/operation/agentes/ver_agente.php
+++ b/pandora_console/operation/agentes/ver_agente.php
@@ -1556,8 +1556,7 @@ if ((bool) $config['activate_gis'] === true) {
 }
 
 // Incident tab.
-$total_incidents = agents_get_count_incidents($id_agente);
-if ($total_incidents > 0) {
+if ((bool) $config['integria_enabled'] === true) {
     $incidenttab['text'] = html_print_menu_button(
         [
             'href'  => 'index.php?sec=gagente&amp;sec2=operation/agentes/ver_agente&tab=incident&id_agente='.$id_agente,
diff --git a/pandora_console/operation/incidents/configure_integriaims_incident.php b/pandora_console/operation/incidents/configure_integriaims_incident.php
deleted file mode 100644
index d8aed83388..0000000000
--- a/pandora_console/operation/incidents/configure_integriaims_incident.php
+++ /dev/null
@@ -1,454 +0,0 @@
-<?php
-
-// Pandora FMS - https://pandorafms.com
-// ==================================================
-// Copyright (c) 2005-2023 Pandora FMS
-// Please see https://pandorafms.com/community/ for full contribution list
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the GNU General Public License
-// as published by the Free Software Foundation for version 2.
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-// Load global vars
-global $config;
-
-check_login();
-
-require_once $config['homedir'].'/include/functions_integriaims.php';
-
-$update = (isset($_GET['incident_id']) === true);
-
-// Header tabs.
-$onheader = integriaims_tabs('create_tab', $_GET['incident_id']);
-if ($update) {
-    $title_header = __('Update Integria IMS Ticket');
-} else {
-    $title_header = __('Create Integria IMS Ticket');
-}
-
-ui_print_standard_header(
-    $title_header,
-    '',
-    false,
-    '',
-    false,
-    $onheader,
-    [
-        [
-            'link'  => '',
-            'label' => __('Issues'),
-        ],
-        [
-            'link'  => '',
-            'label' => $title_header,
-        ],
-    ]
-);
-
-// Check if Integria integration enabled.
-if ($config['integria_enabled'] == 0) {
-    ui_print_error_message(__('In order to access ticket management system, integration with Integria IMS must be enabled and properly configured'));
-    return;
-}
-
-// Check connection to Integria IMS API.
-$has_connection = integria_api_call(null, null, null, null, 'get_login');
-
-if ($has_connection === false) {
-    ui_print_error_message(__('Integria IMS API is not reachable'));
-    return;
-}
-
-// Styles.
-ui_require_css_file('integriaims');
-
-// If everything OK, get parameters from Integria IMS API in order to populate combos.
-$integria_group_values = [];
-$integria_criticity_values = [];
-$integria_users_values = [];
-$integria_types_values = [];
-$integria_status_values = [];
-
-$integria_groups_csv = integria_api_call(null, null, null, null, 'get_groups');
-
-get_array_from_csv_data_pair($integria_groups_csv, $integria_group_values);
-
-$integria_status_csv = integria_api_call(null, null, null, null, 'get_incidents_status');
-
-get_array_from_csv_data_pair($integria_status_csv, $integria_status_values);
-
-$integria_criticity_levels_csv = integria_api_call(null, null, null, null, 'get_incident_priorities');
-
-get_array_from_csv_data_pair($integria_criticity_levels_csv, $integria_criticity_values);
-
-$integria_users_csv = integria_api_call(null, null, null, null, 'get_users');
-
-$csv_array = explode("\n", $integria_users_csv);
-
-foreach ($csv_array as $csv_line) {
-    if (!empty($csv_line)) {
-        $integria_users_values[$csv_line] = $csv_line;
-    }
-}
-
-$integria_types_csv = integria_api_call(null, null, null, null, 'get_types');
-
-get_array_from_csv_data_pair($integria_types_csv, $integria_types_values);
-
-$integria_resolution_csv = integria_api_call(null, null, null, null, 'get_incidents_resolutions');
-
-get_array_from_csv_data_pair($integria_resolution_csv, $integria_resolution_values);
-
-$event_id = (int) get_parameter('from_event');
-$incident_id_edit = (int) get_parameter('incident_id');
-$create_incident = (bool) get_parameter('create_incident', 0);
-$update_incident = (bool) get_parameter('update_incident', 0);
-$incident_group_id = (int) get_parameter('group');
-$incident_criticity_id = (int) get_parameter('criticity');
-$incident_owner = get_parameter('owner');
-$incident_type = (int) get_parameter('type');
-$incident_creator = get_parameter('creator');
-$incident_status = (int) get_parameter('status');
-$incident_resolution = (int) get_parameter('resolution');
-$incident_title = events_get_field_value_by_event_id($event_id, get_parameter('incident_title'));
-$incident_content = events_get_field_value_by_event_id($event_id, get_parameter('incident_content'));
-$file_description = get_parameter('file_description');
-
-// Separator conversions.
-$incident_title = str_replace(',', ':::', $incident_title);
-$incident_content = str_replace(',', ':::', $incident_content);
-
-// Perform action.
-if ($create_incident === true) {
-    // Disregard incident resolution unless status is 'closed'.
-    if ($incident_status !== 7) {
-        $incident_resolution = 0;
-    }
-
-    // Call Integria IMS API method to create an incident.
-    $result_api_call = integria_api_call(null, null, null, null, 'create_incident', [$incident_title, $incident_group_id, $incident_criticity_id, $incident_content, '', $incident_type, '', $incident_owner, '0', $incident_status, '', $incident_resolution], false, '', ',');
-
-    if ($userfile !== '' && $result_api_call !== false) {
-        integriaims_upload_file('userfile', $result_api_call, $file_description);
-    }
-
-    // Necessary to explicitly set true if not false because function returns result of api call in case of success instead of true value.
-    $incident_created_ok = ($result_api_call != false) ? true : false;
-
-    ui_print_result_message(
-        $incident_created_ok,
-        __('Successfully created in Integria IMS'),
-        __('Could not be created in Integria IMS')
-    );
-} else if ($update_incident === true) {
-    // Disregard incident resolution unless status is 'closed'.
-    if ($incident_status !== 7) {
-        $incident_resolution = 0;
-    }
-
-    // Call Integria IMS API method to update an incident.
-    $result_api_call = integria_api_call(null, null, null, null, 'update_incident', [$incident_id_edit, $incident_title, $incident_content, '', $incident_group_id, $incident_criticity_id, $incident_resolution, $incident_status, $incident_owner, 0, $incident_type], false, '', ',');
-
-    if ($userfile !== '') {
-        integriaims_upload_file('userfile', $incident_id_edit, $file_description);
-    }
-
-    // Necessary to explicitly set true if not false because function returns api call result in case of success instead of true value.
-    $incident_updated_ok = ($result_api_call != false) ? true : false;
-
-    ui_print_result_message(
-        $incident_updated_ok,
-        __('Successfully updated in Integria IMS'),
-        __('Could not be updated in Integria IMS')
-    );
-}
-
-// If incident id is specified, retrieve incident values from api to populate combos with such values.
-if ($update) {
-    // Call Integria IMS API method to get details of an incident given its id.
-    $result_api_call = integria_api_call(null, null, null, null, 'get_incident_details', [$incident_id_edit], false, '', ',');
-
-    // API call does not return indexes, therefore future modifications of API function in Integria IMS may lead to inconsistencies when accessing resulting array in this file.
-    $incident_details_separator = explode(',', $result_api_call);
-
-    $incident_details = array_map(
-        function ($item) {
-            return str_replace(':::', ',', $item);
-        },
-        $incident_details_separator
-    );
-}
-
-// Main table.
-$table = new stdClass();
-$table->width = '100%';
-$table->id = 'add_alert_table';
-$table->class = 'databox filter-table-adv';
-$table->head = [];
-$table->data = [];
-$table->size = [];
-$table->size = [];
-$table->colspan[0][0] = 2;
-$table->colspan[4][0] = 3;
-$table->colspan[6][0] = 3;
-$help_macros = isset($_GET['from_event']) ? ui_print_help_icon('response_macros', true) : '';
-
-if ($update) {
-    $input_value_title = $incident_details[3];
-    $input_value_type = $incident_details[17];
-    $input_value_status = $incident_details[6];
-    $input_value_group = $incident_details[8];
-    $input_value_criticity = $incident_details[7];
-    $input_value_owner = $incident_details[5];
-    $input_value_content = $incident_details[4];
-    $input_value_resolution = $incident_details[12];
-} else if (isset($_GET['from_event'])) {
-    $input_value_title = $config['cr_incident_title'];
-    $input_value_type = $config['cr_incident_type'];
-    $input_value_status = $config['cr_incident_status'];
-    $input_value_group = $config['cr_default_group'];
-    $input_value_criticity = $config['cr_default_criticity'];
-    $input_value_owner = $config['cr_default_owner'];
-    $input_value_content = $config['cr_incident_content'];
-    $input_value_resolution = 0;
-} else {
-    $input_value_title = '';
-    $input_value_type = '';
-    $input_value_status = '';
-    $input_value_group = '';
-    $input_value_criticity = '';
-    $input_value_owner = '';
-    $input_value_content = '';
-    $input_value_resolution = 0;
-}
-
-$table->data[0][0] = html_print_label_input_block(
-    __('Title').$help_macros,
-    html_print_input_text(
-        'incident_title',
-        $input_value_title,
-        __('Name'),
-        50,
-        100,
-        true,
-        false,
-        true,
-        '',
-        'w100p'
-    )
-);
-
-$integria_logo = 'images/integria_logo_gray.png';
-if ($config['style'] === 'pandora_black' && !is_metaconsole()) {
-    $integria_logo = 'images/integria_logo.svg';
-}
-
-$table->data[0][2] = html_print_image($integria_logo, true, ['style' => 'width: 30%; float: right;'], false);
-
-$table->data[1][0] = html_print_label_input_block(
-    __('Type'),
-    html_print_select(
-        $integria_types_values,
-        'type',
-        $input_value_type,
-        '',
-        __('Select'),
-        0,
-        true,
-        false,
-        true,
-        '',
-        false,
-        'width: 100%;'
-    )
-);
-
-$table->data[1][1] = html_print_label_input_block(
-    __('Group'),
-    html_print_select(
-        $integria_group_values,
-        'group',
-        $input_value_group,
-        '',
-        '',
-        0,
-        true,
-        false,
-        true,
-        '',
-        false,
-        'width: 100%;'
-    )
-);
-
-$table->data[1][2] = html_print_label_input_block(
-    __('Priority'),
-    html_print_select(
-        $integria_criticity_values,
-        'criticity',
-        $input_value_criticity,
-        '',
-        __('Select'),
-        0,
-        true,
-        false,
-        true,
-        '',
-        false,
-        'width: 100%;'
-    )
-);
-
-$table->data[2][0] = html_print_label_input_block(
-    __('Status'),
-    html_print_select(
-        $integria_status_values,
-        'status',
-        $input_value_status,
-        '',
-        __('Select'),
-        1,
-        true,
-        false,
-        true,
-        '',
-        false,
-        'width: 100%;'
-    )
-);
-
-$table->data[2][1] = html_print_label_input_block(
-    __('Creator').ui_print_help_tip(__('This field corresponds to the Integria IMS user specified in Integria IMS setup'), true),
-    html_print_input_text(
-        'creator',
-        $config['integria_user'],
-        '',
-        '30',
-        100,
-        true,
-        true,
-        false,
-        '',
-        'w100p'
-    )
-);
-
-$table->data[2][2] = html_print_label_input_block(
-    __('Owner'),
-    html_print_autocomplete_users_from_integria(
-        'owner',
-        $input_value_owner,
-        true,
-        '30',
-        false,
-        false,
-        'w100p'
-    ),
-    ['div_class' => 'inline']
-);
-
-$table->data[3][0] = html_print_label_input_block(
-    __('Resolution'),
-    html_print_select(
-        $integria_resolution_values,
-        'resolution',
-        $input_value_resolution,
-        '',
-        '',
-        1,
-        true,
-        false,
-        true,
-        '',
-        false,
-        'width: 100%;'
-    )
-);
-
-$table->data[4][0] = html_print_label_input_block(
-    __('Description').$help_macros,
-    html_print_textarea(
-        'incident_content',
-        3,
-        20,
-        $input_value_content,
-        '',
-        true
-    )
-);
-
-$table->data[5][0] = html_print_label_input_block(
-    __('File name'),
-    html_print_input_file('userfile', true)
-);
-
-$table->data[6][0] = html_print_label_input_block(
-    __('Attachment description'),
-    html_print_textarea(
-        'file_description',
-        3,
-        20,
-        '',
-        '',
-        true
-    )
-);
-
-// Print forms and stuff.
-echo '<form class="max_floating_element_size" id="create_integria_incident_form" name="create_integria_incident_form" method="POST" enctype="multipart/form-data">';
-html_print_table($table);
-$buttons = '';
-if (!$update) {
-    $buttons .= html_print_input_hidden('create_incident', 1, true);
-    $buttons .= html_print_submit_button(
-        __('Create'),
-        'accion',
-        false,
-        [ 'icon' => 'next' ],
-        true
-    );
-} else {
-    $buttons .= html_print_input_hidden('update_incident', 1, true);
-    $buttons .= html_print_submit_button(
-        __('Update'),
-        'accion',
-        false,
-        [ 'icon' => 'upd' ],
-        true
-    );
-}
-
-html_print_action_buttons($buttons);
-
-echo '</form>';
-?>
-
-<script type="text/javascript">
-    $(document).ready(function () {
-        $('#add_alert_table-3').hide();
-
-        var input_value_status =
-        <?php
-        $status_value = ($input_value_status === '') ? 0 : $input_value_status;
-            echo $status_value;
-        ?>
-        ;
-
-        if (input_value_status === 7) {
-            $('#add_alert_table-3').show();
-        } else {
-            $('#add_alert_table-3').hide();
-        }
-
-        $('#status').on('change', function() {
-            if ($(this).val() === '7') {
-                $('#add_alert_table-3').show();
-            } else {
-                $('#add_alert_table-3').hide();
-            }
-        });
-        
-    });
-</script>
diff --git a/pandora_console/operation/incidents/dashboard_detail_integriaims_incident.php b/pandora_console/operation/incidents/dashboard_detail_integriaims_incident.php
deleted file mode 100644
index 97e3991b02..0000000000
--- a/pandora_console/operation/incidents/dashboard_detail_integriaims_incident.php
+++ /dev/null
@@ -1,451 +0,0 @@
-<?php
-
-// Pandora FMS - https://pandorafms.com
-// ==================================================
-// Copyright (c) 2005-2023 Pandora FMS
-// Please see https://pandorafms.com/community/ for full contribution list
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the GNU General Public License
-// as published by the Free Software Foundation for version 2.
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-// Load global vars
-global $config;
-
-require_once 'include/functions_integriaims.php';
-
-check_login();
-
-// Check if Integria integration enabled.
-if ($config['integria_enabled'] == 0) {
-    ui_print_error_message(__('In order to access ticket management system, integration with Integria IMS must be enabled and properly configured'));
-    return;
-}
-
-// Check connection to Integria IMS API.
-$has_connection = integria_api_call(null, null, null, null, 'get_login', []);
-
-if ($has_connection === false) {
-    ui_print_error_message(__('Integria IMS API is not reachable'));
-    return;
-}
-
-// Styles.
-ui_require_css_file('integriaims');
-
-// Get id incident.
-$incident_id = (int) get_parameter('incident_id');
-// API call.
-$result_api_call_list = integria_api_call(
-    null,
-    null,
-    null,
-    null,
-    'get_incident_details',
-    [$incident_id]
-);
-
-// Return array of api call 'get_incidents'.
-$array_get_incidents = [];
-get_array_from_csv_data_all($result_api_call_list, $array_get_incidents);
-
-// Remove index (id).
-$array_get_incidents = $array_get_incidents[$incident_id];
-
-// Header tabs.
-$onheader = integriaims_tabs(false, $incident_id);
-ui_print_standard_header(
-    $array_get_incidents[3],
-    '',
-    false,
-    '',
-    false,
-    $onheader,
-    [
-        [
-            'link'  => '',
-            'label' => __('Issues'),
-        ],
-        [
-            'link'  => '',
-            'label' => __('Details'),
-        ],
-    ]
-);
-
-// Data.
-$status = $array_get_incidents[6];
-$resolution = $array_get_incidents[12];
-$group = $array_get_incidents[8];
-$priority = $array_get_incidents[7];
-$type = $array_get_incidents[17];
-$description = $array_get_incidents[4];
-$creator = $array_get_incidents[10];
-$owner = $array_get_incidents[5];
-$closed_by = $array_get_incidents[23];
-$created_at = $array_get_incidents[1];
-$updated_at = $array_get_incidents[9];
-$closed_at = $array_get_incidents[2];
-
-if ($closed_at == '0000-00-00 00:00:00') {
-    $closed_at = __('Not yet');
-}
-
-if ($closed_by == '') {
-    $closed_by = __('Not closed yet');
-}
-
-
-// API calls.
-$status_text = integriaims_get_details('status', $status);
-$group_text = integriaims_get_details('group', $group);
-$priority_text = integriaims_get_details('priority', $priority);
-$resolution_text = integriaims_get_details('resolution', $resolution);
-$type_text = integriaims_get_details('type', $type);
-
-// Incident file management.
-$upload_file = (bool) get_parameter('upload_file');
-$delete_file_id = get_parameter('delete_file');
-$download_file_id = get_parameter('download_file');
-$download_file_name = get_parameter('download_file_name');
-
-// Files section table.
-$table_files_section = new stdClass();
-$table_files_section->width = '100%';
-$table_files_section->id = 'files_section_table';
-$table_files_section->class = 'databox filters';
-$table_files_section->head = [];
-
-$table_files_section->data = [];
-$table_files_section->size = [];
-$table_files_section->colspan[2][0] = 3;
-
-// Files list table.
-$table_files = new stdClass();
-$table_files->width = '100%';
-$table_files->class = 'info_table';
-$table_files->head = [];
-
-$table_files->head[0] = __('Filename');
-$table_files->head[1] = __('Timestamp');
-$table_files->head[2] = __('Description');
-$table_files->head[3] = __('User');
-$table_files->head[4] = __('Size');
-$table_files->head[5] = __('Delete');
-
-$table_files->data = [];
-
-$filedescription = get_parameter('file_description', __('No description available'));
-
-if ($upload_file === true) {
-    integriaims_upload_file('userfile', $incident_id, $filedescription);
-}
-
-// Delete file.
-if (isset($_GET['delete_file'])) {
-    $result_api_call = integria_api_call(null, null, null, null, 'delete_file', [$delete_file_id]);
-
-    $file_deleted = false;
-
-    if ($result_api_call === '0') {
-        $file_deleted = true;
-    }
-
-    ui_print_result_message(
-        $file_deleted,
-        __('File successfully deleted'),
-        __('File could not be deleted')
-    );
-}
-
-// Download file.
-if (isset($_GET['download_file'])) {
-    $file_base64 = integria_api_call(null, null, null, null, 'download_file', [$download_file_id]);
-    ob_end_clean();
-
-    $decoded = base64_decode($file_base64);
-
-    file_put_contents($download_file_name, $decoded);
-    ob_end_clean();
-
-    if (file_exists($download_file_name)) {
-        header('Content-Description: File Transfer');
-        header('Content-Type: application/octet-stream');
-        header('Content-Disposition: attachment; filename="'.basename($download_file_name).'"');
-        header('Expires: 0');
-        header('Cache-Control: must-revalidate');
-        header('Pragma: public');
-        header('Content-Length: '.filesize($download_file_name));
-        ob_end_clean();
-        readfile($download_file_name);
-        unlink($download_file_name);
-        exit;
-    }
-
-    header('Location: index.php?sec=incident&sec2=operation/incidents/dashboard_detail_integriaims_incident&incident_id='.$incident_id);
-}
-
-// Retrieve files belonging to incident and create list table.
-$result_api_call = integria_api_call(null, null, null, null, 'get_incident_files', [$incident_id]);
-
-if ($result_api_call != false && strlen($result_api_call) > 0) {
-    $files = [];
-    $csv_array = explode("\n", $result_api_call);
-
-    foreach ($csv_array as $csv_line) {
-        if (!empty($csv_line)) {
-            $files[] = explode(',', $csv_line);
-        }
-    }
-}
-
-$i = 0;
-
-foreach ($files as $key => $value) {
-    $table_files->data[$i][0] = '<a id="link_delete_file" href="'.ui_get_full_url('index.php?sec=incident&sec2=operation/incidents/dashboard_detail_integriaims_incident&incident_id='.$incident_id.'&download_file='.$value[0]).'&download_file_name='.$value[11].'">'.$value[11].'</a>';
-    $table_files->data[$i][1] = $value[14];
-    $table_files->data[$i][2] = $value[12];
-    $table_files->data[$i][3] = $value[8];
-    $table_files->data[$i][4] = $value[13];
-    $table_files->data[$i][5] .= '<a id="link_delete_file" href="'.ui_get_full_url('index.php?sec=incident&sec2=operation/incidents/dashboard_detail_integriaims_incident&incident_id='.$incident_id.'&delete_file='.$value[0]).'"
-                                onClick="javascript:if (!confirm(\''.__('Are you sure?').'\')) return false;">';
-    $table_files->data[$i][5] .= html_print_image('images/delete.svg', true, ['title' => __('Delete'), 'class' => 'invert_filter']);
-
-
-    $table_files->data[$i][5] .= '</a>';
-
-    $i++;
-}
-
-$table_files_section->data[0][0] = '<div class="label_select"><p class="input_label">'.__('File name').':</p>';
-$table_files_section->data[0][0] .= html_print_input_file('userfile', true);
-$table_files_section->data[1][0] = '<div class="label_select"><p class="input_label">'.__('Attachment description').':</p>';
-$table_files_section->data[1][0] .= html_print_textarea(
-    'file_description',
-    3,
-    20,
-    '',
-    '',
-    true
-);
-
-$table_files_section->data[2][0] .= '<div class="w100p right">'.html_print_submit_button(__('Upload'), 'accion', false, ['icon' => 'wand', 'mode' => 'mini secondary'], true).'</div>';
-
-$upload_file_form = '<div class="w100p">';
-
-$upload_file_form .= '<form method="post" id="file_control" enctype="multipart/form-data">'.'<h4>'.__('Add attachment').'</h4>'.html_print_table($table_files_section, true).html_print_input_hidden('upload_file', true, true);
-
-$upload_file_form .= '<h4>'.__('Attached files').'</h4>'.html_print_table($table_files, true).'</form></div>';
-
-// Incident comments management.
-$upload_comment = get_parameter('upload_comment');
-$comment_description = get_parameter('comment_description');
-
-// Comments section table.
-$table_comments_section = new stdClass();
-$table_comments_section->width = '100%';
-$table_comments_section->id = 'files_section_table';
-$table_comments_section->class = 'databox filters';
-$table_comments_section->head = [];
-
-$table_comments_section->data = [];
-$table_comments_section->size = [];
-
-// Comments list table.
-$table_comments = new stdClass();
-$table_comments->width = '100%';
-$table_comments->class = 'info_table';
-$table_comments->head = [];
-
-$table_comments->head[0] = __('Filename');
-$table_comments->head[1] = __('Timestamp');
-$table_comments->head[2] = __('Description');
-$table_comments->head[3] = __('User');
-$table_comments->head[4] = __('Size');
-$table_comments->head[5] = __('Delete');
-
-$table_comments->data = [];
-
-$comment_disabled = ($array_get_incidents[6] == 7);
-
-if ($comment_disabled === true) {
-    $attribute = 'disabled=disabled';
-}
-
-$table_comments_section->data[0][0] = '<div class="label_select"><p class="input_label">'.__('Description').':</p>';
-$table_comments_section->data[0][0] .= html_print_textarea(
-    'comment_description',
-    3,
-    20,
-    '',
-    $attribute,
-    true
-);
-
-$table_comments_section->data[1][1] .= '<div class="w100p right">'.html_print_submit_button(__('Add'), 'accion', $comment_disabled, ['icon' => 'wand', 'mode' => 'mini secondary'], true).'</div>';
-
-// Upload comment. If ticket is closed, this action cannot be performed.
-if ($upload_comment && $array_get_incidents[6] != 7) {
-    $result_api_call = integria_api_call(null, null, null, null, 'create_workunit', [$incident_id, $comment_description, '0.00', 0, 1, '0'], false, '', '|;|');
-
-    // API method returns id of new comment if success.
-    $comment_added = ($result_api_call >= '0') ? true : false;
-
-    ui_print_result_message(
-        $comment_added,
-        __('Comment successfully added'),
-        __('Comment could not be added')
-    );
-}
-
-// Retrieve comments belonging to incident and create comments table.
-$result_api_call = integria_api_call(null, null, null, null, 'get_incident_workunits', [$incident_id]);
-
-if ($result_api_call != false && strlen($result_api_call) > 0) {
-    $comments = [];
-    $csv_array = explode("\n", $result_api_call);
-
-    foreach ($csv_array as $csv_line) {
-        if (!empty($csv_line)) {
-            $comments[] = explode(',', $csv_line);
-        }
-    }
-}
-
-$comment_table = '';
-
-if (!empty($comments)) {
-    foreach ($comments as $key => $value) {
-        $comment_table .= '<div class="comment_title">'.$value[3].'<span>&nbspsaid&nbsp</span>'.$value[1].'<span class="float-right">'.$value[2].'&nbspHours</span></div>';
-        $comment_table .= '<div class="comment_body">'.$value[4].'</div>';
-    }
-} else {
-    $comment_table = __('No comments found');
-}
-
-$upload_comment_form = '<div class="w100p">';
-
-$upload_comment_form .= '<form method="post" id="comment_form" enctype="multipart/form-data"><h4>'.__('Add comment').'</h4>'.html_print_table($table_comments_section, true).html_print_input_hidden('upload_comment', 1, true).'</form>';
-
-
-$upload_comment_form .= '<h4>'.__('Comments').'</h4>'.$comment_table.'</div>';
-
-// Details box.
-$details_box = '<div class="integriaims_details_box integriaims_details_box_five">';
-$details_box .= '
-    <div class="integriaims_details_titles">'.__('Status').'</div>
-    <div class="integriaims_details_titles">'.__('Resolution').'</div>
-    <div class="integriaims_details_titles">'.__('Group').'</div>
-    <div class="integriaims_details_titles">'.__('Priority').'</div>
-    <div class="integriaims_details_titles">'.__('Type').'</div>';
-$details_box .= '
-    <div>'.html_print_image('images/heart.png', true, ['class' => 'invert_filter']).'</div>
-    <div>'.html_print_image('images/builder@svg.svg', true, ['class' => 'invert_filter']).'</div>
-    <div>'.html_print_image('images/user_green.png', true, ['class' => 'invert_filter']).'</div>
-    <div>'.ui_print_integria_incident_priority($priority, $priority_text).'</div>
-    <div>'.html_print_image('images/incidents.png', true, ['class' => 'invert_filter']).'</div>';
-$details_box .= '
-    <div>'.$status_text.'</div>
-    <div>'.$resolution_text.'</div>
-    <div>'.$group_text.'</div>
-    <div>'.$priority_text.'</div>
-    <div>'.$type_text.'</div>';
-$details_box .= '</div>';
-
-
-// People box.
-$people_box = '<div class="integriaims_details_box integriaims_details_box_three">';
-$people_box .= '
-    <div>'.html_print_image('images/header_user_green.png', true, ['width' => '21']).'</div>
-    <div>'.html_print_image('images/header_user_green.png', true, ['width' => '21']).'</div>
-    <div>'.html_print_image('images/header_user_green.png', true, ['width' => '21']).'</div>';
-$people_box .= '
-    <div class="integriaims_details_titles">'.__('Created by').':</div>
-    <div class="integriaims_details_titles">'.__('Owned by').':</div>
-    <div class="integriaims_details_titles">'.__('Closed by').':</div>';
-$people_box .= '
-    <div>'.$creator.'</div>
-    <div>'.$owner.'</div>
-    <div>'.$closed_by.'</div>';
-$people_box .= '</div>';
-
-
-// Dates box.
-$dates_box = '<div class="integriaims_details_box integriaims_details_box_three">';
-$dates_box .= '
-    <div>'.html_print_image('images/tick.png', true, ['class' => 'invert_filter']).'</div>
-    <div>'.html_print_image('images/update.png', true, ['width' => '21', 'class' => 'invert_filter']).'</div>
-    <div>'.html_print_image('images/mul.png', true, ['class' => 'invert_filter']).'</div>';
-$dates_box .= '
-    <div class="integriaims_details_titles">'.__('Created at').':</div>
-    <div class="integriaims_details_titles">'.__('Updated at').':</div>
-    <div class="integriaims_details_titles">'.__('Closed at').':</div>';
-$dates_box .= '
-    <div>'.$created_at.'</div>
-    <div>'.$updated_at.'</div>
-    <div>'.$closed_at.'</div>';
-$dates_box .= '</div>';
-
-
-// Show details, people and dates.
-echo '<div class="integria_details">';
-    ui_toggle($details_box, __('Details'), '', 'details_box', false, false, '', 'integria_details_content white-box-content', 'integria_details_shadow box-flat white_table_graph');
-    ui_toggle($people_box, __('People'), '', 'people_box', false, false, '', 'integria_details_content white-box-content', 'integria_details_shadow box-flat white_table_graph');
-    ui_toggle($dates_box, __('Dates'), '', 'dates_box', false, false, '', 'integria_details_content white-box-content', 'integria_details_shadow box-flat white_table_graph');
-echo '</div>';
-
- // Show description.
-$description_box = '<div class="integria_details_description">'.html_print_textarea(
-    'integria_details_description',
-    3,
-    0,
-    $description,
-    'disabled="disabled"',
-    true
-).'</div>';
-ui_toggle($description_box, __('Description'), '', '', false);
-
-echo '<div class="ui_toggle">';
-ui_toggle(
-    $upload_file_form,
-    __('Attached files'),
-    '',
-    '',
-    true,
-    false,
-    'white-box-content',
-    'w98p'
-);
-echo '</div>';
-
-echo '<div class="ui_toggle">';
-ui_toggle(
-    $upload_comment_form,
-    __('Comments'),
-    '',
-    '',
-    true,
-    false,
-    'white-box-content',
-    'w98p'
-);
-echo '</div>';
-
-?>
-<script type="text/javascript">
-$(document).ready (function () {
-    $('#details_box .white_table_graph_header').click(function(){
-        $('div#details_box').toggleClass('integria_details_shadow');
-    });
-
-    $('#people_box .white_table_graph_header').click(function(){
-        $('div#people_box').toggleClass('integria_details_shadow');
-    });
-
-    $('#dates_box .white_table_graph_header').click(function(){
-        $('div#dates_box').toggleClass('integria_details_shadow');
-    });
-});
-</script>
\ No newline at end of file
diff --git a/pandora_console/operation/incidents/incident_statistics.php b/pandora_console/operation/incidents/incident_statistics.php
deleted file mode 100755
index a2b3e3cf92..0000000000
--- a/pandora_console/operation/incidents/incident_statistics.php
+++ /dev/null
@@ -1,60 +0,0 @@
-<?php
-
-// Pandora FMS - https://pandorafms.com
-// ==================================================
-// Copyright (c) 2005-2023 Pandora FMS
-// Please see https://pandorafms.com/community/ for full contribution list
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the GNU General Public License
-// as published by the Free Software Foundation for version 2.
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-// Load global vars
-global $config;
-
-require_once $config['homedir'].'/include/functions_graph.php';
-
-check_login();
-
-ui_print_standard_header(
-    __('Statistics'),
-    'images/book_edit.png',
-    false,
-    '',
-    false,
-    [],
-    [
-        [
-            'link'  => '',
-            'label' => __('Issues'),
-        ],
-        [
-            'link'  => '',
-            'label' => __('Statistics'),
-        ],
-    ]
-);
-
-if (!$config['integria_enabled']) {
-    ui_print_error_message(__('In order to access ticket management system, integration with Integria IMS must be enabled and properly configured'));
-    exit;
-}
-
-echo '<div class="info_box">';
-echo '<table width="90%">
-	<tr><td valign="top" style="width:50%;"><h3>'.__('Incidents by status').'</h3>';
-echo graph_incidents_status();
-
-echo '<td valign="top" style="width:50%;"><h3>'.__('Incidents by priority').'</h3>';
-echo grafico_incidente_prioridad();
-
-echo '<tr><td style="width:50%;"><h3>'.__('Incidents by group').'</h3>';
-echo graphic_incident_group();
-
-echo '<td style="width:50%;"><h3>'.__('Incidents by user').'</h3>';
-echo graphic_incident_user();
-
-echo '</table>';
-echo '</div>';
diff --git a/pandora_console/operation/incidents/integriaims_export_csv.php b/pandora_console/operation/incidents/integriaims_export_csv.php
deleted file mode 100644
index 08665db8ad..0000000000
--- a/pandora_console/operation/incidents/integriaims_export_csv.php
+++ /dev/null
@@ -1,124 +0,0 @@
-<?php
-
-// Pandora FMS - https://pandorafms.com
-// ==================================================
-// Copyright (c) 2005-2023 Pandora FMS
-// Please see https://pandorafms.com/community/ for full contribution list
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the GNU General Public License
-// as published by the Free Software Foundation for version 2.
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-// Load global vars
-global $config;
-
-require_once '../../include/config.php';
-require_once '../../include/functions.php';
-require_once '../../include/functions_integriaims.php';
-
-check_login();
-
-// API calls.
-$status_incident = integriaims_get_details('status');
-$group_incident = integriaims_get_details('group');
-$priority_incident = integriaims_get_details('priority');
-$resolution_incident = integriaims_get_details('resolution');
-
-
-// Get data to export.
-$tickets_filters = json_decode(
-    base64_decode(
-        get_parameter('tickets_filters', '')
-    ),
-    true
-);
-
-$tickets_csv_array = get_tickets_integriaims($tickets_filters);
-
-
-// Build a new array to show only the fields in the table.
-$tickets_csv_array_filter = [];
-foreach ($tickets_csv_array as $key => $value) {
-    // Status.
-    if ($tickets_csv_array[$key][6] == 0) {
-        $tickets_csv_array[$key][6] = 'None';
-    } else {
-        $tickets_csv_array[$key][6] = $status_incident[$tickets_csv_array[$key][6]];
-    }
-
-    // Priority.
-    $tickets_csv_array[$key][7] = $priority_incident[$tickets_csv_array[$key][7]];
-
-    // Group.
-    $tickets_csv_array[$key][8] = $group_incident[$tickets_csv_array[$key][8]];
-
-    // Resolution.
-    if ($tickets_csv_array[$key][12] == 0) {
-        $tickets_csv_array[$key][12] = 'None';
-    } else {
-        $tickets_csv_array[$key][12] = $resolution_incident[$tickets_csv_array[$key][12]];
-    }
-
-    $tickets_csv_array_filter[$key] = [
-        'id_incidencia' => $tickets_csv_array[$key][0],
-        'titulo'        => $tickets_csv_array[$key][3],
-        'id_grupo'      => $tickets_csv_array[$key][8],
-        'estado'        => $tickets_csv_array[$key][6],
-        'resolution'    => $tickets_csv_array[$key][12],
-        'prioridad'     => $tickets_csv_array[$key][7],
-        'actualizacion' => $tickets_csv_array[$key][9],
-        'inicio'        => $tickets_csv_array[$key][1],
-        'id_creator'    => $tickets_csv_array[$key][10],
-        'owner'         => $tickets_csv_array[$key][5],
-    ];
-}
-
-// Header for CSV file.
-$header = [
-    __('ID Ticket'),
-    __('Title'),
-    __('Group/Company'),
-    __('Status'),
-    __('Resolution'),
-    __('Priority'),
-    __('Updated'),
-    __('Started'),
-    __('Creator'),
-    __('Owner'),
-];
-
-$header_csv = '';
-foreach ($header as $key => $value) {
-    $header_csv .= $value.',';
-}
-
-$header_csv = io_safe_output($header_csv).PHP_EOL;
-
-
-// Join header and content.
-$tickets_csv = '';
-foreach ($tickets_csv_array_filter as $key => $value) {
-    $tickets_csv .= implode(',', $tickets_csv_array_filter[$key]).PHP_EOL;
-}
-
-$tickets_csv = $header_csv.$tickets_csv;
-
-
-// Create csv file.
-$filename = 'tickets_export-'.date('Ymd').'-'.date('His').'.csv';
-
-ob_clean();
-
-// Set cookie for download control.
-setDownloadCookieToken();
-
-header('Content-Type: text/csv; charset=utf-8');
-header('Content-Disposition: attachment; filename='.$filename);
-
-// BOM.
-echo pack('C*', 0xEF, 0xBB, 0xBF);
-
-// CSV file.
-echo io_safe_output($tickets_csv);
diff --git a/pandora_console/operation/incidents/list_integriaims_incidents.php b/pandora_console/operation/incidents/list_integriaims_incidents.php
deleted file mode 100644
index cd3e6a2137..0000000000
--- a/pandora_console/operation/incidents/list_integriaims_incidents.php
+++ /dev/null
@@ -1,678 +0,0 @@
-<?php
-
-// Pandora FMS - https://pandorafms.com
-// ==================================================
-// Copyright (c) 2005-2023 Pandora FMS
-// Please see https://pandorafms.com/community/ for full contribution list
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the GNU General Public License
-// as published by the Free Software Foundation for version 2.
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-// Load global vars
-global $config;
-
-require_once 'include/functions_integriaims.php';
-
-check_login();
-
-// Header tabs.
-$onheader = integriaims_tabs('list_tab');
-ui_print_standard_header(
-    __('Integria IMS Tickets'),
-    '',
-    false,
-    'integria_tab',
-    false,
-    $onheader,
-    [
-        [
-            'link'  => '',
-            'label' => __('Issues'),
-        ],
-        [
-            'link'  => '',
-            'label' => __('Integria IMS Tickets'),
-        ],
-    ]
-);
-
-// Check if Integria integration enabled.
-if ($config['integria_enabled'] == 0) {
-    ui_print_error_message(__('In order to access ticket management system, integration with Integria IMS must be enabled and properly configured'));
-    return;
-}
-
-// Check connection to Integria IMS API.
-$has_connection = integria_api_call(null, null, null, null, 'get_login', []);
-
-if ($has_connection === false) {
-    ui_print_error_message(__('Integria IMS API is not reachable'));
-    return;
-}
-
-// Styles.
-ui_require_css_file('integriaims');
-
-// Get parameters for filters.
-$incident_text = (string) get_parameter('incident_text', '');
-$incident_status = (int) get_parameter('incident_status', 0);
-$incident_group = (int) get_parameter('incident_group', 1);
-$incident_owner = (string) get_parameter('incident_owner', '');
-$incident_creator = (string) get_parameter('incident_creator', '');
-$incident_priority = (int) get_parameter('incident_priority', -1);
-$incident_resolution = (string) get_parameter('incident_resolution', '');
-$created_from = (string) get_parameter('created_from', '');
-$created_to = (string) get_parameter('created_to', '');
-
-$offset = (int) get_parameter('offset');
-
-$delete_incident = get_parameter('delete_incident');
-
-// Sorting.
-$sort_field = get_parameter('sort_field');
-$sort = get_parameter('sort', 'none');
-
-$selected = true;
-$select_incident_id_up = false;
-$select_incident_id_down = false;
-$select_title_up = false;
-$select_title_down = false;
-$select_group_company_up = false;
-$select_group_company_down = false;
-$select_status_resolution_up = false;
-$select_status_resolution_down = false;
-$select_priority_up = false;
-$select_priority_down = false;
-$select_creator_up = false;
-$select_creator_down = false;
-$select_owner_up = false;
-$select_owner_down = false;
-
-$order[] = [
-    'field' => 'incident_id',
-    'order' => 'ASC',
-];
-
-switch ($sort_field) {
-    case 'incident_id':
-        switch ($sort) {
-            case 'up':
-                $select_incident_id_up = $selected;
-                $order = [
-                    'field' => 0,
-                    'order' => 'ASC',
-                ];
-            break;
-
-            case 'down':
-                $select_incident_id_down = $selected;
-                $order = [
-                    'field' => 0,
-                    'order' => 'DESC',
-                ];
-            break;
-
-            default:
-                // Nothing to do.
-            break;
-        }
-    break;
-
-    case 'title':
-        switch ($sort) {
-            case 'up':
-                $select_title_up = $selected;
-                $order = [
-                    'field' => 3,
-                    'order' => 'ASC',
-                ];
-            break;
-
-            case 'down':
-                $select_title_down = $selected;
-                $order = [
-                    'field' => 3,
-                    'order' => 'DESC',
-                ];
-            break;
-
-            default:
-                // Nothing to do.
-            break;
-        }
-    break;
-
-    case 'group_company':
-        switch ($sort) {
-            case 'up':
-                $select_group_company_up = $selected;
-                $order = [
-                    'field' => 'group_company',
-                    'order' => 'ASC',
-                ];
-            break;
-
-            case 'down':
-                $select_group_company_down = $selected;
-                $order = [
-                    'field' => 'group_company',
-                    'order' => 'DESC',
-                ];
-            break;
-
-            default:
-                // Nothing to do.
-            break;
-        }
-    break;
-
-    case 'status_resolution':
-        switch ($sort) {
-            case 'up':
-                $select_status_resolution_up = $selected;
-                $order = [
-                    'field' => 'status_resolution',
-                    'order' => 'ASC',
-                ];
-            break;
-
-            case 'down':
-                $select_status_resolution_down = $selected;
-                $order = [
-                    'field' => 'status_resolution',
-                    'order' => 'DESC',
-                ];
-            break;
-
-            default:
-                // Nothing to do.
-            break;
-        }
-    break;
-
-    case 'priority':
-        switch ($sort) {
-            case 'up':
-                $select_priority_up = $selected;
-                $order = [
-                    'field' => 7,
-                    'order' => 'ASC',
-                ];
-            break;
-
-            case 'down':
-                $select_priority_down = $selected;
-                $order = [
-                    'field' => 7,
-                    'order' => 'DESC',
-                ];
-            break;
-
-            default:
-                // Nothing to do.
-            break;
-        }
-    break;
-
-    case 'creator':
-        switch ($sort) {
-            case 'up':
-                $select_creator_up = $selected;
-                $order = [
-                    'field' => 10,
-                    'order' => 'ASC',
-                ];
-            break;
-
-            case 'down':
-                $select_creator_down = $selected;
-                $order = [
-                    'field' => 10,
-                    'order' => 'DESC',
-                ];
-            break;
-
-            default:
-                // Nothing to do.
-            break;
-        }
-    break;
-
-    case 'owner':
-        switch ($sort) {
-            case 'up':
-                $select_owner_up = $selected;
-                $order = [
-                    'field' => 5,
-                    'order' => 'ASC',
-                ];
-            break;
-
-            case 'down':
-                $select_owner_down = $selected;
-                $order = [
-                    'field' => 5,
-                    'order' => 'DESC',
-                ];
-            break;
-
-            default:
-                // Nothing to do.
-            break;
-        }
-    break;
-
-    default:
-        $select_incident_id_up = $selected;
-        $select_incident_id_down = false;
-        $select_title_up = false;
-        $select_title_down = false;
-        $select_group_company_up = false;
-        $select_group_company_down = false;
-        $select_status_resolution_up = false;
-        $select_status_resolution_down = false;
-        $select_priority_up = false;
-        $select_priority_down = false;
-        $select_creator_up = false;
-        $select_creator_down = false;
-        $select_owner_up = false;
-        $select_owner_down = false;
-        $order = [
-            'field' => 'id_user',
-            'order' => 'ASC',
-        ];
-    break;
-}
-
-if ($delete_incident) {
-    // Call Integria IMS API method to delete an incident.
-    $result_api_call_delete = integria_api_call(
-        null,
-        null,
-        null,
-        null,
-        'delete_incident',
-        [$delete_incident]
-    );
-
-    $incident_deleted_ok = ($result_api_call_delete !== false) ? true : false;
-
-    ui_print_result_message(
-        $incident_deleted_ok,
-        __('Successfully deleted'),
-        __('Could not be deleted')
-    );
-}
-
-// ---- FILTERS ----
-// API calls to fill the filters.
-$status_incident = integriaims_get_details('status');
-$group_incident = integriaims_get_details('group');
-$priority_incident = integriaims_get_details('priority');
-$resolution_incident = integriaims_get_details('resolution');
-
-
-// TABLE FILTERS.
-$table = new StdClass();
-$table->width = '100%';
-$table->size = [];
-$table->size[0] = '33%';
-$table->size[1] = '33%';
-$table->size[2] = '33%';
-$table->class = 'filter-table-adv';
-
-$table->data = [];
-$table->data[0][0] = html_print_label_input_block(
-    __('Text filter'),
-    html_print_input_text('incident_text', $incident_text, '', 30, 100, true)
-);
-
-$table->data[0][1] = html_print_label_input_block(
-    __('Status'),
-    html_print_select(
-        $status_incident,
-        'incident_status',
-        $incident_status,
-        '',
-        __('All'),
-        0,
-        true
-    )
-);
-
-$table->data[0][2] = html_print_label_input_block(
-    __('Group'),
-    html_print_select(
-        $group_incident,
-        'incident_group',
-        $incident_group,
-        '',
-        __('All'),
-        1,
-        true
-    )
-);
-
-$table->data[1][0] = html_print_label_input_block(
-    __('Owner'),
-    html_print_autocomplete_users_from_integria(
-        'incident_owner',
-        $incident_owner,
-        true,
-        '30',
-        false,
-        false,
-        'w100p'
-    ),
-    ['div_class' => 'inline']
-);
-
-$table->data[1][1] = html_print_label_input_block(
-    __('Creator'),
-    html_print_autocomplete_users_from_integria(
-        'incident_creator',
-        $incident_creator,
-        true,
-        '30',
-        false,
-        false,
-        'w100p'
-    ),
-    ['div_class' => 'inline']
-);
-
-$table->data[1][2] = html_print_label_input_block(
-    __('Priority'),
-    html_print_select(
-        $priority_incident,
-        'incident_priority',
-        $incident_priority,
-        '',
-        __('All'),
-        -1,
-        true
-    )
-);
-
-$table->data[2][0] = html_print_label_input_block(
-    __('Resolution'),
-    html_print_select(
-        $resolution_incident,
-        'incident_resolution',
-        $incident_resolution,
-        '',
-        __('All'),
-        '',
-        true
-    )
-);
-
-$input_date = '<div>';
-$input_date .= html_print_input_text_extended(
-    'created_from',
-    $created_from,
-    'created_from',
-    '',
-    12,
-    50,
-    false,
-    '',
-    'placeholder="'.__('Created from').'"',
-    true
-);
-$input_date .= html_print_input_text_extended(
-    'created_to',
-    $created_to,
-    'created_to',
-    '',
-    12,
-    50,
-    false,
-    '',
-    'class="mrgn_lft_5px" placeholder="'.__('Created to').'"',
-    true
-);
-$input_date .= '</div>';
-
-$table->data[2][2] = html_print_label_input_block(
-    __('Date'),
-    $input_date
-);
-
-// Send filters to get_tickets_integriaims().
-$tickets_filters = [
-    'incident_text'       => $incident_text,
-    'incident_status'     => $incident_status,
-    'incident_group'      => $incident_group,
-    'incident_owner'      => $incident_owner,
-    'incident_creator'    => $incident_creator,
-    'incident_priority'   => $incident_priority,
-    'incident_resolution' => $incident_resolution,
-    'created_from'        => $created_from,
-    'created_to'          => $created_to,
-];
-
-// Data to export to csv file.
-$decode_csv = base64_encode(json_encode($tickets_filters));
-
-// Full url with all filters.
-$url = ui_get_full_url(
-    'index.php?sec=incident&sec2=operation/incidents/list_integriaims_incidents&incident_text='.$incident_text.'&incident_status='.$incident_status.'&incident_group='.$incident_group.'&incident_owner='.$incident_owner.'&incident_creator='.$incident_creator.'&incident_priority='.$incident_priority.'&incident_resolution='.$incident_resolution.'&created_from='.$created_from.'&created_to='.$created_to.'&offset='.$offset.'&sort_field='.$sort_field.'&sort='.$sort
-);
-
-// ---- PRINT TABLE FILTERS ----
-$integria_incidents_form = '<form method="post" action="'.$url.'" class="pdd_0px">';
-$integria_incidents_form .= html_print_table($table, true);
-$buttons = html_print_submit_button(
-    __('Filter'),
-    'filter_button',
-    false,
-    [
-        'icon' => 'search',
-        'mode' => 'mini secondary',
-    ],
-    true
-);
-$buttons .= html_print_button(
-    __('Export to CSV'),
-    'csv_export',
-    false,
-    "blockResubmit($(this)); location.href='operation/incidents/integriaims_export_csv.php?tickets_filters=$decode_csv'",
-    [
-        'icon' => 'cog',
-        'mode' => 'mini secondary',
-    ],
-    true
-);
-
-$integria_incidents_form .= html_print_div(
-    [
-        'class'   => 'action-buttons',
-        'content' => $buttons,
-    ],
-    true
-);
-$integria_incidents_form .= '</form>';
-
-ui_toggle(
-    $integria_incidents_form,
-    '<span class="subsection_header_title">'.__('Filters').'</span>',
-    'filter_form',
-    '',
-    true,
-    false,
-    '',
-    'white-box-content',
-    'box-flat white_table_graph fixed_filter_bar'
-);
-
-/*
- * Order api call 'get_incidents'.
- *
- * resolution    = $array_get_incidents[$key][12]
- * id_incidencia = $array_get_incidents[$key][0]
- * titulo        = $array_get_incidents[$key][3]
- * id_grupo      = $array_get_incidents[$key][8]
- * estado        = $array_get_incidents[$key][6]
- * prioridad     = $array_get_incidents[$key][7]
- * actualizacion = $array_get_incidents[$key][9]
- * id_creator    = $array_get_incidents[$key][10]
- *
- */
-
-// ---- LIST OF INCIDENTS ----
-// Get list of incidents.
-$array_get_incidents = get_tickets_integriaims($tickets_filters);
-
-$props = [
-    'order'               => $order,
-    'group_incident'      => $group_incident,
-    'status_incident'     => $status_incident,
-    'resolution_incident' => $resolution_incident,
-];
-
-usort(
-    $array_get_incidents,
-    function ($a, $b) use ($props) {
-        $order_field = $props['order']['field'];
-
-        $item_a = $a[$order_field];
-        $item_b = $b[$order_field];
-
-        if ($order_field === 'group_company') {
-            $item_a = $props['group_incident'][$a[8]];
-            $item_b = $props['group_incident'][$b[8]];
-        } else if ($order_field === 'status_resolution') {
-            $item_a = $props['status_incident'][$a[6]].' / '.$props['resolution_incident'][$a[12]];
-            $item_b = $props['status_incident'][$b[6]].' / '.$props['resolution_incident'][$b[12]];
-        }
-
-        if ($props['order']['order'] === 'DESC') {
-            return $item_a < $item_b;
-        } else {
-            return $item_a > $item_b;
-        }
-    }
-);
-
-// Prepare pagination.
-$incidents_limit = $config['block_size'];
-$incidents_paginated = array_slice($array_get_incidents, $offset, $incidents_limit, true);
-
-// TABLE INCIDENTS.
-$table = new stdClass();
-$table->width = '100%';
-$table->class = 'info_table';
-$table->head = [];
-
-$url_incident_id_up = $url.'&sort_field=incident_id&sort=up';
-$url_incident_id_down = $url.'&sort_field=incident_id&sort=down';
-$url_title_up = $url.'&sort_field=title&sort=up';
-$url_title_down = $url.'&sort_field=title&sort=down';
-$url_group_company_up = $url.'&sort_field=group_company&sort=up';
-$url_group_company_down = $url.'&sort_field=group_company&sort=down';
-$url_status_resolution_up = $url.'&sort_field=status_resolution&sort=up';
-$url_status_resolution_down = $url.'&sort_field=status_resolution&sort=down';
-$url_priority_up = $url.'&sort_field=priority&sort=up';
-$url_priority_down = $url.'&sort_field=priority&sort=down';
-$url_creator_up = $url.'&sort_field=creator&sort=up';
-$url_creator_down = $url.'&sort_field=creator&sort=down';
-$url_owner_up = $url.'&sort_field=owner&sort=up';
-$url_owner_down = $url.'&sort_field=owner&sort=down';
-
-$table->head[0] = __('ID').ui_get_sorting_arrows($url_incident_id_up, $url_incident_id_down, $select_incident_id_up, $select_incident_id_down);
-$table->head[1] = __('Title').ui_get_sorting_arrows($url_title_up, $url_title_down, $select_title_up, $select_title_down);
-$table->head[2] = __('Group/Company').ui_get_sorting_arrows($url_group_company_up, $url_group_company_down, $select_group_company_up, $select_group_company_down);
-$table->head[3] = __('Status/Resolution').ui_get_sorting_arrows($url_status_resolution_up, $url_status_resolution_down, $select_status_resolution_up, $select_status_resolution_down);
-$table->head[4] = __('Priority').ui_get_sorting_arrows($url_priority_up, $url_priority_down, $select_priority_up, $select_priority_down);
-$table->head[5] = __('Updated/Started');
-$table->head[6] = __('Creator').ui_get_sorting_arrows($url_creator_up, $url_creator_down, $select_creator_up, $select_creator_down);
-$table->head[7] = __('Owner').ui_get_sorting_arrows($url_owner_up, $url_owner_down, $select_owner_up, $select_owner_down);
-$table->head[8] = '';
-
-$table->data = [];
-$i = 0;
-
-foreach ($incidents_paginated as $key => $value) {
-    if ($array_get_incidents[$key][6] == 0) {
-        $status_incident[$array_get_incidents[$key][6]] = __('None');
-    }
-
-    if ($array_get_incidents[$key][12] == 0) {
-        $resolution_incident[$array_get_incidents[$key][12]] = __('None');
-    }
-
-    $table->data[$i][0] = '#'.$array_get_incidents[$key][0];
-    $table->data[$i][1] = '<a href="'.ui_get_full_url('index.php?sec=incident&sec2=operation/incidents/dashboard_detail_integriaims_incident&incident_id='.$array_get_incidents[$key][0]).'">';
-    $table->data[$i][1] .= ui_print_truncate_text($array_get_incidents[$key][3], 160, false);
-    $table->data[$i][1] .= '</a>';
-    $table->data[$i][2] = $group_incident[$array_get_incidents[$key][8]];
-    $table->data[$i][3] = $status_incident[$array_get_incidents[$key][6]].' / '.$resolution_incident[$array_get_incidents[$key][12]];
-    $table->data[$i][4] = ui_print_integria_incident_priority($array_get_incidents[$key][7], $priority_incident[$array_get_incidents[$key][7]]);
-    $table->data[$i][5] = $array_get_incidents[$key][9].' / '.$array_get_incidents[$key][1];
-    $table->data[$i][6] = $array_get_incidents[$key][10];
-    $table->data[$i][7] = $array_get_incidents[$key][5];
-    $table->data[$i][8] = '';
-    $table->cellclass[$i][8] = 'table_action_buttons';
-    $table->data[$i][8] .= '<a href="'.ui_get_full_url('index.php?sec=incident&sec2=operation/incidents/configure_integriaims_incident&incident_id='.$array_get_incidents[$key][0]).'">';
-    $table->data[$i][8] .= html_print_image('images/edit.svg', true, ['title' => __('Edit')]);
-    $table->data[$i][8] .= '</a>';
-
-    $table->data[$i][8] .= '<a id="link_delete_incident" href="'.ui_get_full_url('index.php?sec=incident&sec2=operation/incidents/list_integriaims_incidents&delete_incident='.$array_get_incidents[$key][0]).'"        
-    onClick="javascript:if (!confirm(\''.__('Are you sure?').'\')) return false;">';
-    $table->data[$i][8] .= html_print_image('images/delete.svg', true, ['title' => __('Delete'), 'class' => 'invert_filter main_menu_icon']);
-    $table->data[$i][8] .= '</a>';
-
-    $i++;
-}
-
-$tablePagination = '';
-// Show table incidents.
-if (empty($table->data) === true) {
-    ui_print_info_message(['no_close' => true, 'message' => __('No tickets to show').'.' ]);
-} else {
-    html_print_table($table);
-    $tablePagination = ui_pagination(
-        count($array_get_incidents),
-        $url,
-        $offset,
-        0,
-        true,
-        'offset',
-        false,
-        ''
-    );
-}
-
-// Show button to create incident.
-echo '<form method="POST" action="'.ui_get_full_url('index.php?sec=incident&sec2=operation/incidents/configure_integriaims_incident').'">';
-html_print_action_buttons(
-    html_print_submit_button(
-        __('Create'),
-        'create_new_incident',
-        false,
-        [ 'icon' => 'next' ],
-        true
-    ),
-    [
-        'type'          => 'data_table',
-        'class'         => 'fixed_action_buttons',
-        'right_content' => $tablePagination,
-    ]
-);
-echo '</form>';
-
-// Datapicker library for show calendar.
-ui_require_jquery_file('ui.datepicker-'.get_user_language(), 'include/javascript/i18n/');
-?>
-
-<script language="javascript" type="text/javascript">
-    $(document).ready( function() {
-        $("#created_from, #created_to").datepicker({
-            dateFormat: "<?php echo DATE_FORMAT_JS; ?>"
-        });  
-    });
-</script>
diff --git a/pandora_console/operation/menu.php b/pandora_console/operation/menu.php
index 7ddd5d951d..d507a0b3cc 100644
--- a/pandora_console/operation/menu.php
+++ b/pandora_console/operation/menu.php
@@ -690,28 +690,6 @@ $sub['operation/users/user_edit_notifications']['id'] = 'Configure_user_notifica
 $sub['operation/users/user_edit_notifications']['refr'] = 0;
 
 if ($access_console_node === true) {
-    // Incidents.
-    $temp_sec2 = $sec2;
-    $sec2 = 'incident';
-    $sec2sub = 'operation/incidents/incident_statistics';
-    $sub[$sec2]['text'] = __('Incidents');
-    $sub[$sec2]['id'] = 'Incidents';
-    $sub[$sec2]['type'] = 'direct';
-    $sub[$sec2]['subtype'] = 'nolink';
-    $sub[$sec2]['refr'] = 0;
-    $sub[$sec2]['subsecs'] = [
-        'operation/incidents/incident_detail',
-        'operation/integria_incidents',
-    ];
-
-    $sub2 = [];
-    $sub2[$sec2sub]['text'] = __('Integria IMS statistics');
-    $sub2['operation/incidents/list_integriaims_incidents']['text'] = __('Integria IMS ticket list');
-
-    $sub[$sec2]['sub2'] = $sub2;
-    $sec2 = $temp_sec2;
-
-
     // Messages.
     $sub['message_list']['text'] = __('Messages');
     $sub['message_list']['id'] = 'Messages';
@@ -728,34 +706,36 @@ if ($access_console_node === true) {
 $menu_operation['workspace']['sub'] = $sub;
 
 if ($access_console_node === true) {
-    // ITSM.
-    $menu_operation['ITSM']['text'] = __('ITSM');
-    $menu_operation['ITSM']['sec2'] = 'operation/ITSM/itsm';
-    $menu_operation['ITSM']['id'] = 'oper-itsm';
+    if ((bool) $config['integria_enabled'] === true) {
+        // ITSM.
+        $menu_operation['ITSM']['text'] = __('ITSM');
+        $menu_operation['ITSM']['sec2'] = 'operation/ITSM/itsm';
+        $menu_operation['ITSM']['id'] = 'oper-itsm';
 
-    $sub = [];
-    // ITSM Tickets.
-    $sub['manageTickets']['text'] = __('Tickets');
-    $sub['manageTickets']['id'] = 'itsm-ticket';
-    $sub['manageTickets']['refr'] = 0;
-    $sub['manageTickets']['type'] = 'direct';
-    $sub['manageTickets']['subtype'] = 'nolink';
+        $sub = [];
+        // ITSM Tickets.
+        $sub['manageTickets']['text'] = __('Tickets');
+        $sub['manageTickets']['id'] = 'itsm-ticket';
+        $sub['manageTickets']['refr'] = 0;
+        $sub['manageTickets']['type'] = 'direct';
+        $sub['manageTickets']['subtype'] = 'nolink';
 
-    $sub2 = [];
-    $sub2['operation/ITSM/itsm&operation=list']['text'] = __('List');
-    $sub2['operation/ITSM/itsm&operation=list']['id'] = 'itsm-ticket-list';
+        $sub2 = [];
+        $sub2['operation/ITSM/itsm&operation=list']['text'] = __('List');
+        $sub2['operation/ITSM/itsm&operation=list']['id'] = 'itsm-ticket-list';
 
-    $sub2['operation/ITSM/itsm&operation=edit']['text'] = __('Edit');
-    $sub2['operation/ITSM/itsm&operation=edit']['id'] = 'itsm-ticket-edit';
+        $sub2['operation/ITSM/itsm&operation=edit']['text'] = __('Edit');
+        $sub2['operation/ITSM/itsm&operation=edit']['id'] = 'itsm-ticket-edit';
 
-    $sub['manageTickets']['sub2'] = $sub2;
+        $sub['manageTickets']['sub2'] = $sub2;
 
-    // ITSM Dashboard.
-    $sub['operation/ITSM/itsm']['text'] = __('Dashboard');
-    $sub['operation/ITSM/itsm']['id'] = 'itsm-dashboard';
-    $sub['operation/ITSM/itsm']['refr'] = 0;
+        // ITSM Dashboard.
+        $sub['operation/ITSM/itsm']['text'] = __('Dashboard');
+        $sub['operation/ITSM/itsm']['id'] = 'itsm-dashboard';
+        $sub['operation/ITSM/itsm']['refr'] = 0;
 
-    $menu_operation['ITSM']['sub'] = $sub;
+        $menu_operation['ITSM']['sub'] = $sub;
+    }
 }
 
 if ($access_console_node === true) {
@@ -790,9 +770,9 @@ if ($access_console_node === true) {
 
             $extension_menu = $extension['operation_menu'];
             if ($extension['operation_menu']['name'] == 'Matrix'
-                && ( !check_acl($config['id_user'], 0, 'ER')
+                && (!check_acl($config['id_user'], 0, 'ER')
                 || !check_acl($config['id_user'], 0, 'EW')
-                || !check_acl($config['id_user'], 0, 'EM') )
+                || !check_acl($config['id_user'], 0, 'EM'))
             ) {
                 continue;
             }
diff --git a/pandora_console/views/ITSM/ITSMTicketEditView.php b/pandora_console/views/ITSM/ITSMTicketEditView.php
index 8c55f32845..d51a1aa45a 100644
--- a/pandora_console/views/ITSM/ITSMTicketEditView.php
+++ b/pandora_console/views/ITSM/ITSMTicketEditView.php
@@ -177,7 +177,7 @@ $table->data[3][0] = html_print_label_input_block(
 
 $table->data[3][1] = html_print_label_input_block(
     __('Creator').ui_print_help_tip(
-        __('This field corresponds to the Integria IMS user specified in Integria IMS setup'),
+        __('This field corresponds to the ITSM user specified in ITSM setup'),
         true
     ),
     html_print_input_text(

From 5cf31fc77e2984075da1156a32ba0c42965d7490 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Wed, 19 Jul 2023 11:36:03 +0200
Subject: [PATCH 010/116] ITSM fixed pandora_enterprise#11471

---
 pandora_console/godmode/setup/setup.php      |  2 +-
 pandora_console/images/menu/itsm.svg         |  7 +++++++
 pandora_console/include/functions_agents.php | 22 --------------------
 pandora_console/include/styles/menu.css      |  6 ++++++
 4 files changed, 14 insertions(+), 23 deletions(-)
 create mode 100644 pandora_console/images/menu/itsm.svg

diff --git a/pandora_console/godmode/setup/setup.php b/pandora_console/godmode/setup/setup.php
index 7e17f9fe4c..65e0f1bb1c 100644
--- a/pandora_console/godmode/setup/setup.php
+++ b/pandora_console/godmode/setup/setup.php
@@ -176,7 +176,7 @@ $buttons['integria'] = [
         'images/integria.png',
         true,
         [
-            'title' => __('Integria IMS'),
+            'title' => __('ITSM'),
             'class' => 'invert_filter',
         ]
     ).'</a>',
diff --git a/pandora_console/images/menu/itsm.svg b/pandora_console/images/menu/itsm.svg
new file mode 100644
index 0000000000..a8bcc9d3b2
--- /dev/null
+++ b/pandora_console/images/menu/itsm.svg
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+    <title>ITSM icon</title>
+    <g id="ITSM-icon" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
+        <path d="M13,0 C13.5522847,-1.01453063e-16 14,0.44771525 14,1 L14,6 L9.73239368,5.99992752 C9.90258972,6.29411727 10,6.63568294 10,7 C10,8.1045695 9.1045695,9 8,9 C6.8954305,9 6,8.1045695 6,7 C6,6.63568294 6.09741028,6.29411727 6.26760632,5.99992752 L2,6 L2,3 L2.64668367,2.35331633 C2.7130102,2.2869898 2.78443878,2.21556122 2.86096939,2.13903061 L4.78954082,0.210459184 C4.85841837,0.141581633 4.92857143,0.0714285714 5,0 L13,0 Z M14,10 L14,14 C14,15.1045695 13.1045695,16 12,16 L4,16 C2.8954305,16 2,15.1045695 2,14 L2,10 L6.26790938,9.99940385 C6.09752593,10.2937119 6,10.6354668 6,11 C6,12.1045695 6.8954305,13 8,13 C9.1045695,13 10,12.1045695 10,11 C10,10.6354668 9.90247407,10.2937119 9.73209062,9.99940385 L14,10 Z" id="Path-30" fill="#95A3BF"></path>
+    </g>
+</svg>
\ No newline at end of file
diff --git a/pandora_console/include/functions_agents.php b/pandora_console/include/functions_agents.php
index 2c09fda820..7a189756ad 100644
--- a/pandora_console/include/functions_agents.php
+++ b/pandora_console/include/functions_agents.php
@@ -2827,28 +2827,6 @@ function agents_get_agent_group($id_agent, $force_meta=false)
 }
 
 
-/**
- * This function gets the count of incidents attached to the agent
- *
- * @param int The agent id
- *
- * @return mixed The incidents attached or false
- */
-function agents_get_count_incidents($id_agent)
-{
-    if (empty($id_agent)) {
-        return false;
-    }
-
-    return db_get_value(
-        'count(*)',
-        'tincidencia',
-        'id_agent',
-        $id_agent
-    );
-}
-
-
 /**
  * Get critical monitors by using the status code in modules.
  *
diff --git a/pandora_console/include/styles/menu.css b/pandora_console/include/styles/menu.css
index 537dd90cf2..052091ab1c 100644
--- a/pandora_console/include/styles/menu.css
+++ b/pandora_console/include/styles/menu.css
@@ -259,6 +259,12 @@
   background-size: 18px;
 }
 
+/* ITSM */
+.icon_oper-itsm {
+  background: url(../../images/menu/itsm.svg) no-repeat 50% 50%;
+  background-size: 18px;
+}
+
 /* trap console */
 .icon_oper-snmpc,
 .icon_god-snmpc {

From 1bf7f1e36e2f4e89e5dc2a3c479ffb11f0741caf Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Fri, 21 Jul 2023 14:23:42 +0200
Subject: [PATCH 011/116] ITSM pandora_enterprise#11471

---
 pandora_console/extras/mr/65.sql              |   2 +
 .../godmode/agentes/agent_incidents.php       |   5 +-
 .../godmode/agentes/configurar_agente.php     |   2 +-
 .../godmode/alerts/alert_commands.php         |  94 ++++++-
 .../godmode/alerts/alert_list.builder.php     |   2 +-
 .../godmode/alerts/configure_alert_action.php |  90 +++++-
 pandora_console/godmode/menu.php              |   4 +-
 pandora_console/godmode/setup/setup.php       |  16 +-
 .../{setup_integria.php => setup_ITSM.php}    | 259 ++++--------------
 pandora_console/godmode/setup/setup_auth.php  |   2 +-
 .../godmode/users/configure_user.php          |   2 +
 .../godmode/users/user_management.php         |  89 +++---
 pandora_console/include/auth/mysql.php        |   8 -
 pandora_console/include/functions.php         |   4 +-
 pandora_console/include/functions_config.php  | 146 +++-------
 pandora_console/include/functions_graph.php   |   1 -
 pandora_console/include/functions_html.php    |   4 +-
 .../include/functions_integriaims.php         | 172 ------------
 pandora_console/include/lib/ITSM/ITSM.php     |  14 +-
 pandora_console/include/lib/ITSM/Manager.php  |   2 +-
 pandora_console/include/styles/pandora.css    |   2 +-
 .../include/styles/pandora_black.css          |   4 +-
 .../{integriaims.css => pandoraitsm.css}      |  47 +---
 .../operation/agentes/ver_agente.php          |   2 +-
 pandora_console/operation/menu.php            |   2 +-
 pandora_console/operation/users/user_edit.php | 129 ---------
 pandora_console/pandoradb.sql                 |   2 +-
 pandora_console/pandoradb_data.sql            |   7 +-
 .../lib/UpdateManager/Client.php              |   2 +-
 .../views/ITSM/ITSMDashboardView.php          |   4 +-
 .../views/ITSM/ITSMTicketDetailView.php       |  48 ++--
 .../views/ITSM/ITSMTicketEditView.php         |  14 +-
 .../views/ITSM/ITSMTicketListView.php         |   4 +-
 33 files changed, 408 insertions(+), 777 deletions(-)
 rename pandora_console/godmode/setup/{setup_integria.php => setup_ITSM.php} (66%)
 rename pandora_console/include/styles/{integriaims.css => pandoraitsm.css} (68%)

diff --git a/pandora_console/extras/mr/65.sql b/pandora_console/extras/mr/65.sql
index 623c0a36f0..763ec200d1 100644
--- a/pandora_console/extras/mr/65.sql
+++ b/pandora_console/extras/mr/65.sql
@@ -38,4 +38,6 @@ INSERT INTO `tmodule_inventory` (`id_module_inventory`, `id_os`, `name`, `descri
 
 ALTER TABLE `treport_content`  ADD COLUMN `period_range` INT NULL DEFAULT 0 AFTER `period`;
 
+ALTER TABLE `tusuario` MODIFY COLUMN `integria_user_level_pass` TEXT;
+
 COMMIT;
diff --git a/pandora_console/godmode/agentes/agent_incidents.php b/pandora_console/godmode/agentes/agent_incidents.php
index 5e7331744b..b4b7a81e74 100644
--- a/pandora_console/godmode/agentes/agent_incidents.php
+++ b/pandora_console/godmode/agentes/agent_incidents.php
@@ -18,7 +18,7 @@ require_once 'include/functions_incidents.php';
 
 check_login();
 
-if (!$config['integria_enabled']) {
+if (!$config['ITSM_enabled']) {
     ui_print_error_message(__('In order to access ticket management system, integration with ITSM must be enabled and properly configured'));
     return;
 }
@@ -55,8 +55,7 @@ $params = [
     agents_get_name($id_agent),
 ];
 
-$result = integria_api_call(null, null, null, null, 'get_incidents', $params, false, 'json', ',');
-
+// $result = integria_api_call(null, null, null, null, 'get_incidents', $params, false, 'json', ',');
 $result = json_decode($result, true);
 
 if (empty($result) === true) {
diff --git a/pandora_console/godmode/agentes/configurar_agente.php b/pandora_console/godmode/agentes/configurar_agente.php
index a6f47d6535..73391d7ece 100644
--- a/pandora_console/godmode/agentes/configurar_agente.php
+++ b/pandora_console/godmode/agentes/configurar_agente.php
@@ -606,7 +606,7 @@ if ($id_agente) {
     }
 
     // Incident tab.
-    if ((bool) $config['integria_enabled'] === true) {
+    if ((bool) $config['ITSM_enabled'] === true) {
         $incidenttab['text'] = html_print_menu_button(
             [
                 'href'  => 'index.php?sec=gagente&amp;sec2=godmode/agentes/configurar_agente&amp;tab=incident&amp;id_agente='.$id_agente,
diff --git a/pandora_console/godmode/alerts/alert_commands.php b/pandora_console/godmode/alerts/alert_commands.php
index b44a6f8521..36f43a67f8 100644
--- a/pandora_console/godmode/alerts/alert_commands.php
+++ b/pandora_console/godmode/alerts/alert_commands.php
@@ -12,6 +12,8 @@
 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 // GNU General Public License for more details.
 // Load global vars.
+use PandoraFMS\ITSM\ITSM;
+
 global $config;
 
 require_once $config['homedir'].'/include/functions_alerts.php';
@@ -279,7 +281,7 @@ if (is_ajax()) {
                     $editor_type_chkbx .= '</small></b></div>';
                     $rfield = $editor_type_chkbx;
                     // Select type.
-                } else if (preg_match('/^_integria_type_custom_field_$/i', $field_value)) {
+                } else if (preg_match('/^_custom_field_ITSM_$/i', $field_value)) {
                         $ffield = '';
                         $rfield = '';
 
@@ -369,6 +371,96 @@ if (is_ajax()) {
                             '',
                             $is_management_allowed
                         );
+                } else if (str_starts_with($field_value, '_ITSM_')) {
+                    $nothing = '';
+                    $nothing_value = 0;
+                    $mode = 'select';
+                    switch ($field_value) {
+                        case '_ITSM_groups_':
+                            $fields_array = [];
+                            try {
+                                $ITSM = new ITSM();
+                                $fields_array = $ITSM->getGroups();
+                            } catch (\Throwable $th) {
+                                $error = $th->getMessage();
+                                $fields_array = [];
+                            }
+                        break;
+
+                        case '_ITSM_priorities_':
+                            $fields_array = [];
+                            try {
+                                $ITSM = new ITSM();
+                                $fields_array = $ITSM->getPriorities();
+                            } catch (\Throwable $th) {
+                                $error = $th->getMessage();
+                                $fields_array = [];
+                            }
+                        break;
+
+                        case '_ITSM_types_':
+                            $fields_array = [];
+                            try {
+                                $ITSM = new ITSM();
+                                $fields_array = $ITSM->getObjectypes();
+                            } catch (\Throwable $th) {
+                                $error = $th->getMessage();
+                                $fields_array = [];
+                            }
+
+                            $nothing = __('None');
+                            $nothing_value = 0;
+                        break;
+
+                        case '_ITSM_status_':
+                            $fields_array = [];
+                            try {
+                                $ITSM = new ITSM();
+                                $fields_array = $ITSM->getStatus();
+                            } catch (\Throwable $th) {
+                                $error = $th->getMessage();
+                                $fields_array = [];
+                            }
+                        break;
+
+                        default:
+                            // Nothing.
+                            $mode = '';
+                        break;
+                    }
+
+                    if ($mode === 'select') {
+                        $ffield = html_print_select(
+                            $fields_array,
+                            'field'.$i.'_value',
+                            '',
+                            '',
+                            $nothing,
+                            $nothing_value,
+                            true,
+                            false,
+                            false,
+                            'fields',
+                            $is_management_allowed
+                        );
+
+                        $rfield = html_print_select(
+                            $fields_array,
+                            'field'.$i.'_recovery_value',
+                            '',
+                            '',
+                            $nothing,
+                            $nothing_value,
+                            true,
+                            false,
+                            false,
+                            'fields_recovery',
+                            $is_management_allowed
+                        );
+                    } else {
+                        $ffield = 'TODO';
+                        $rfield = 'TODO';
+                    }
                 } else {
                     $fields_value_select = [];
                     $force_print_select = false;
diff --git a/pandora_console/godmode/alerts/alert_list.builder.php b/pandora_console/godmode/alerts/alert_list.builder.php
index de07bce961..db53e202ad 100644
--- a/pandora_console/godmode/alerts/alert_list.builder.php
+++ b/pandora_console/godmode/alerts/alert_list.builder.php
@@ -105,7 +105,7 @@ $groups_user = users_get_groups($config['id_user']);
 if (!empty($groups_user)) {
     $groups = implode(',', array_keys($groups_user));
 
-    if ($config['integria_enabled'] == 0) {
+    if ($config['ITSM_enabled'] == 0) {
         $integria_command = 'Integria&#x20;IMS&#x20;Ticket';
         $sql = sprintf('SELECT taa.id, taa.name FROM talert_actions taa INNER JOIN talert_commands tac ON taa.id_alert_command = tac.id WHERE tac.name <> "%s" AND taa.id_group IN (%s)', $integria_command, $groups);
     } else {
diff --git a/pandora_console/godmode/alerts/configure_alert_action.php b/pandora_console/godmode/alerts/configure_alert_action.php
index f72b17bcf3..94beff6a83 100644
--- a/pandora_console/godmode/alerts/configure_alert_action.php
+++ b/pandora_console/godmode/alerts/configure_alert_action.php
@@ -17,7 +17,6 @@ global $config;
 
 require_once $config['homedir'].'/include/functions_alerts.php';
 require_once $config['homedir'].'/include/functions_users.php';
-require_once $config['homedir'].'/include/functions_integriaims.php';
 enterprise_include_once('meta/include/functions_alerts_meta.php');
 
 check_login();
@@ -159,6 +158,21 @@ if ($id) {
     $action = alerts_get_alert_action($id);
     $name = $action['name'];
     $id_command = $action['id_alert_command'];
+    $command = alerts_get_alert_command($id_command);
+    if (empty($command) === false && $command['name'] === io_safe_input('Integria IMS Ticket')) {
+        $action['field2'] = ($action['field2'] ?? $config['default_group']);
+        $action['field3'] = ($action['field3'] ?? $config['default_criticity']);
+        $action['field4'] = ($action['field4'] ?? $config['default_owner']);
+        $action['field5'] = ($action['field5'] ?? $config['incident_type']);
+        $action['field6'] = ($action['field6'] ?? $config['incident_status']);
+        $action['field7'] = ($action['field7'] ?? $config['incident_content']);
+        $action['field2_recovery'] = ($action['field2'] ?? $config['default_group']);
+        $action['field3_recovery'] = ($action['field3'] ?? $config['default_criticity']);
+        $action['field4_recovery'] = ($action['field4'] ?? $config['default_owner']);
+        $action['field5_recovery'] = ($action['field5'] ?? $config['incident_type']);
+        $action['field6_recovery'] = ($action['field6'] ?? $config['incident_status']);
+        $action['field7_recovery'] = ($action['field7'] ?? $config['incident_content']);
+    }
 
     $group = $action['id_group'];
     $action_threshold = $action['action_threshold'];
@@ -248,7 +262,7 @@ $create_ticket_command_id = db_get_value('id', 'talert_commands', 'name', io_saf
 
 $sql_exclude_command_id = '';
 
-if (!is_metaconsole() && $config['integria_enabled'] == 0 && $create_ticket_command_id !== false) {
+if (!is_metaconsole() && $config['ITSM_enabled'] == 0 && $create_ticket_command_id !== false) {
     $sql_exclude_command_id = ' AND id <> '.$create_ticket_command_id;
 }
 
@@ -655,13 +669,20 @@ $(document).ready (function () {
         // No se envia el valor del commando.
         values.push({
             name: "page",
-            value: "godmode/alerts/alert_commands"});
+            value: "godmode/alerts/alert_commands"
+        });
         values.push({
             name: "get_alert_command",
-            value: "1"});
+            value: "1"
+        });
         values.push({
             name: "id",
-            value: this.value});
+            value: this.value
+        });
+        values.push({
+            name: "id_action",
+            value: "<?php echo (int) $id; ?>"
+        });
         
         jQuery.post (<?php echo "'".ui_get_full_url('ajax.php', false, false, false)."'"; ?>,
             values,
@@ -673,7 +694,6 @@ $(document).ready (function () {
                     render_command_description(command_description);
                 } else {
                     render_command_description('');
-
                 }
                 
                 // Allow create workunit if Integria IMS Ticket is selected.
@@ -708,12 +728,64 @@ $(document).ready (function () {
                     old_value = '';
                     old_recovery_value = '';
                     // Only keep the value if is provided from hidden (first time)
-                    if (($("[name=field" + i + "_value]").attr('id'))
-                        == ("hidden-field" + i + "_value")) {
-                        
+                    if (($("[name=field" + i + "_value]").attr('id')) == ("hidden-field" + i + "_value")) {
                         old_value = $("[name=field" + i + "_value]").val();
                         disabled = $("[name=field" + i + "_value]").attr('disabled');
                     }
+
+                    if ($("#id_command option:selected").text() === "Integria IMS Ticket" && (!old_value || !old_recovery_value) ) {
+                        if (i === 2) {
+                            if(!old_value) {
+                                old_value = '<?php echo $config['default_group']; ?>';
+                            }
+
+                            if(!old_recovery_value) {
+                                old_recovery_value = '<?php echo $config['default_group']; ?>';
+                            }
+                        } else if (i === 3) {
+                            if(!old_value) {
+                                old_value = '<?php echo $config['default_criticity']; ?>';
+                            }
+
+                            if(!old_recovery_value) {
+                                old_recovery_value = '<?php echo $config['default_criticity']; ?>';
+                            }
+                        } else if (i === 4) {
+                            if(!old_value) {
+                                old_value = '<?php echo $config['default_owner']; ?>';
+                            }
+
+                            if(!old_recovery_value) {
+                                old_recovery_value = '<?php echo $config['default_owner']; ?>';
+                            }
+                        } else if (i === 5) {
+                            if(!old_value) {
+                                old_value = '<?php echo $config['incident_type']; ?>';
+                            }
+
+                            if(!old_recovery_value) {
+                                old_recovery_value = '<?php echo $config['incident_type']; ?>';
+                            }
+                        } else if (i === 6) {
+                            if(!old_value) {
+                                old_value = '<?php echo $config['incident_status']; ?>';
+                            }
+
+                            if(!old_recovery_value) {
+                                old_recovery_value = '<?php echo $config['incident_status']; ?>';
+                            }
+                        } else if (i === 7) {
+                            if(!old_value) {
+                                old_value = '<?php echo $config['incident_content']; ?>';
+                            }
+
+                            if(!old_recovery_value) {
+                                old_recovery_value = '<?php echo $config['incident_content']; ?>';
+                            }
+                        }
+                    }
+
+                    
                     
                     if (($("[name=field" + i + "_recovery_value]").attr('id'))
                         == ("hidden-field" + i + "_recovery_value")) {
diff --git a/pandora_console/godmode/menu.php b/pandora_console/godmode/menu.php
index 4ffdfc88f4..6e812b72e0 100644
--- a/pandora_console/godmode/menu.php
+++ b/pandora_console/godmode/menu.php
@@ -392,8 +392,8 @@ if ($access_console_node === true) {
         $sub2['godmode/setup/setup&section=ehorus']['text'] = __('eHorus');
         $sub2['godmode/setup/setup&section=ehorus']['refr'] = 0;
 
-        $sub2['godmode/setup/setup&section=integria']['text'] = __('ITSM');
-        $sub2['godmode/setup/setup&section=integria']['refr'] = 0;
+        $sub2['godmode/setup/setup&section=ITSM']['text'] = __('ITSM');
+        $sub2['godmode/setup/setup&section=ITSM']['refr'] = 0;
 
         enterprise_hook('module_library_submenu');
 
diff --git a/pandora_console/godmode/setup/setup.php b/pandora_console/godmode/setup/setup.php
index 65e0f1bb1c..ee1600a0e2 100644
--- a/pandora_console/godmode/setup/setup.php
+++ b/pandora_console/godmode/setup/setup.php
@@ -170,9 +170,9 @@ if (check_acl($config['id_user'], 0, 'AW')) {
     }
 }
 
-$buttons['integria'] = [
+$buttons['ITSM'] = [
     'active' => false,
-    'text'   => '<a href="'.ui_get_full_url('index.php?sec=gsetup&sec2=godmode/setup/setup&section=integria').'">'.html_print_image(
+    'text'   => '<a href="'.ui_get_full_url('index.php?sec=gsetup&sec2=godmode/setup/setup&section=ITSM').'">'.html_print_image(
         'images/integria.png',
         true,
         [
@@ -303,10 +303,10 @@ switch ($section) {
         $help_header = 'setup_ehorus_tab';
     break;
 
-    case 'integria':
-        $buttons['integria']['active'] = true;
-        $subpage = __('Integria IMS');
-        $help_header = 'setup_integria_tab';
+    case 'ITSM':
+        $buttons['ITSM']['active'] = true;
+        $subpage = __('Pandora ITSM');
+        $help_header = 'setup_ITSM_tab';
     break;
 
     case 'module_library':
@@ -442,8 +442,8 @@ switch ($section) {
         include_once $config['homedir'].'/godmode/setup/setup_ehorus.php';
     break;
 
-    case 'integria':
-        include_once $config['homedir'].'/godmode/setup/setup_integria.php';
+    case 'ITSM':
+        include_once $config['homedir'].'/godmode/setup/setup_ITSM.php';
     break;
 
     case 'gis':
diff --git a/pandora_console/godmode/setup/setup_integria.php b/pandora_console/godmode/setup/setup_ITSM.php
similarity index 66%
rename from pandora_console/godmode/setup/setup_integria.php
rename to pandora_console/godmode/setup/setup_ITSM.php
index 8aee891452..d9f33b7699 100644
--- a/pandora_console/godmode/setup/setup_integria.php
+++ b/pandora_console/godmode/setup/setup_ITSM.php
@@ -1,6 +1,6 @@
 <?php
 /**
- * Integria setup.
+ * ITSM setup.
  *
  * @category   Setup
  * @package    Pandora FMS
@@ -42,8 +42,6 @@ if (! check_acl($config['id_user'], 0, 'PM') && ! is_user_admin($config['id_user
     return;
 }
 
-require_once $config['homedir'].'/include/functions_integriaims.php';
-
 $error = '';
 $group_values = [];
 $priority_values = [];
@@ -61,7 +59,7 @@ try {
     $has_connection = false;
 }
 
-if ($has_connection === false && $config['integria_enabled']) {
+if ($has_connection === false && $config['ITSM_enabled']) {
     ui_print_error_message(__('ITSM API is not reachable, %s', $error));
 }
 
@@ -78,7 +76,7 @@ if (get_parameter('update_config', 0) == 1) {
         ['name' => io_safe_input('Integria IMS Ticket')]
     );
 
-    if ($config['integria_enabled'] == 1) {
+    if ($config['ITSM_enabled'] == 1) {
         if ($event_response_exists === false) {
             // Create 'Create incident in IntegriaIMS from event' event response only when user enables IntegriaIMS integration and it does not exist in database.
             db_process_sql_insert(
@@ -98,13 +96,6 @@ if (get_parameter('update_config', 0) == 1) {
             );
         }
 
-        $types_string = '';
-        if (empty($object_types_values) === false) {
-            foreach ($object_types_values as $id => $name) {
-                $types_string .= $id.','.$name.';';
-            }
-        }
-
         if ($command_exists === false) {
             // Create 'Integria IMS Ticket' command only when user enables IntegriaIMS integration and it does not exist in database.
             $id_command_inserted = db_process_sql_insert(
@@ -114,8 +105,8 @@ if (get_parameter('update_config', 0) == 1) {
                     'command'             => io_safe_input('Internal type'),
                     'internal'            => 1,
                     'description'         => io_safe_input('Create a ticket in Integria IMS'),
-                    'fields_descriptions' => '["'.io_safe_input('Ticket title').'","'.io_safe_input('Ticket group ID').'","'.io_safe_input('Ticket priority').'","'.io_safe_input('Ticket owner').'","'.io_safe_input('Ticket type').'","'.io_safe_input('Ticket status').'","'.io_safe_input('Ticket description').'","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_"]',
-                    'fields_values'       => '["", "", "","","'.$types_string.'","","","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_"]',
+                    'fields_descriptions' => '["'.io_safe_input('Ticket title').'","'.io_safe_input('Ticket group ID').'","'.io_safe_input('Ticket priority').'","'.io_safe_input('Ticket owner').'","'.io_safe_input('Ticket type').'","'.io_safe_input('Ticket status').'","'.io_safe_input('Ticket description').'","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_"]',
+                    'fields_values'       => '["", "_ITSM_groups_", "_ITSM_priorities_","_ITSM_users_","_ITSM_types_","_ITSM_status_","_html_editor_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_"]',
                 ]
             );
 
@@ -140,80 +131,6 @@ if (get_parameter('update_config', 0) == 1) {
             ];
 
             alerts_create_alert_action(io_safe_input('Create Integria IMS ticket'), $id_command_inserted, $action_values);
-        } else {
-            // Update 'Integria IMS Ticket' command with ticket types retrieved from Integria IMS.
-            $sql_update_command_values = sprintf(
-                '
-                UPDATE talert_commands
-                SET fields_values = \'["","","","","%s","","","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_","_integria_type_custom_field_"]\'
-                WHERE name="%s"',
-                $types_string,
-                io_safe_input('Integria IMS Ticket')
-            );
-
-            db_process_sql($sql_update_command_values);
-
-            // Update those actions that make use of 'Integria IMS Ticket' command when setup default fields are updated. Empty fields in actions will be filled in with default values.
-            $update_action_values = [
-                $config['incident_title'],
-                $config['default_group'],
-                $config['default_criticity'],
-                $config['default_owner'],
-                $config['incident_type'],
-                $config['incident_status'],
-                $config['incident_content'],
-            ];
-
-            foreach ($update_action_values as $key => $value) {
-                $field_key = ($key + 1);
-
-                $sql_update_action_field = sprintf(
-                    '
-                    UPDATE talert_actions taa
-                    INNER JOIN talert_commands tac
-                    ON taa.id_alert_command=tac.id
-                    SET field%s= "%s"
-                    WHERE tac.name="Integria&#x20;IMS&#x20;Ticket"
-                    AND (
-                        taa.field%s IS NULL OR taa.field%s=""
-                    )',
-                    $field_key,
-                    $value,
-                    $field_key,
-                    $field_key,
-                    $field_key
-                );
-
-                db_process_sql($sql_update_action_field);
-            }
-
-            foreach ($update_action_values as $key => $value) {
-                $field_key = ($key + 1);
-
-                $sql_update_action_recovery_field = sprintf(
-                    '
-                    UPDATE talert_actions taa
-                    INNER JOIN talert_commands tac
-                    ON taa.id_alert_command=tac.id
-                    SET field%s_recovery = "%s"
-                    WHERE tac.name="Integria&#x20;IMS&#x20;Ticket"
-                    AND (
-                        taa.field%s_recovery IS NULL OR taa.field%s_recovery=""
-                    )',
-                    $field_key,
-                    $value,
-                    $field_key,
-                    $field_key,
-                    $field_key
-                );
-
-                db_process_sql($sql_update_action_recovery_field);
-            }
-        }
-    } else {
-        if ($event_response_exists !== false) {
-            // Delete 'Create incident in IntegriaIMS from event' event response if it does exist and IntegriaIMS integration is disabled.
-            db_process_sql_delete('tevent_response', ['name' => io_safe_input('Create ticket in IntegriaIMS from event')]);
         }
     }
 }
@@ -221,119 +138,70 @@ if (get_parameter('update_config', 0) == 1) {
 $table_enable = new StdClass();
 $table_enable->data = [];
 $table_enable->width = '100%';
-$table_enable->id = 'integria-enable-setup';
+$table_enable->id = 'itsm-enable-setup';
 $table_enable->class = 'databox filters';
 $table_enable->size['name'] = '30%';
 $table_enable->style['name'] = 'font-weight: bold';
 
-// Enable Integria.
+// Enable Pandora ITSM.
 $row = [];
-$row['name'] = __('Enable Integria IMS');
-$row['control'] = html_print_checkbox_switch('integria_enabled', 1, $config['integria_enabled'], true);
-$table_enable->data['integria_enabled'] = $row;
+$row['name'] = __('Enable Pandora ITSM');
+$row['control'] = html_print_checkbox_switch('ITSM_enabled', 1, $config['ITSM_enabled'], true);
+$table_enable->data['ITSM_enabled'] = $row;
 
 // Remote config table.
 $table_remote = new StdClass();
 $table_remote->data = [];
 $table_remote->width = '100%';
 $table_remote->styleTable = 'margin-bottom: 10px;';
-$table_remote->id = 'integria-remote-setup';
+$table_remote->id = 'ITSM-remote-setup';
 $table_remote->class = 'databox filters filter-table-adv';
 $table_remote->size['hostname'] = '50%';
 $table_remote->size['api_pass'] = '50%';
 
-// Enable Integria user configuration.
+// Enable ITSM user configuration.
 $row = [];
 $row['user_level'] = html_print_label_input_block(
-    __('Integria configuration at user level'),
+    __('Pandora ITSM configuration at user level'),
     html_print_checkbox_switch(
-        'integria_user_level_conf',
+        'ITSM_user_level_conf',
         1,
-        $config['integria_user_level_conf'],
+        $config['ITSM_user_level_conf'],
         true
     )
 );
-$table_remote->data['integria_user_level_conf'] = $row;
+$table_remote->data['ITSM_user_level_conf'] = $row;
 
-// Integria user.
-/*
-    $row = [];
-    $row['user'] = html_print_label_input_block(
-    __('User'),
-    html_print_input_text(
-        'integria_user',
-        $config['integria_user'],
-        '',
-        30,
-        100,
-        true
-    ),
-    ['div_class' => 'integria-remote-setup-integria_user']
-    );
-*/
-
-// Integria hostname.
+// ITSM hostname.
 $row = [];
 $row['hostname'] = html_print_label_input_block(
-    __('URL to Integria IMS setup').ui_print_help_tip(__('Full URL to your Integria IMS setup (e.g., http://192.168.1.20/integria, https://support.mycompany.com).'), true),
+    __('URL to Pandora ITSM setup').ui_print_help_tip(__('Full URL to your Pandora ITSM setup (e.g., http://192.168.1.20/integria/api/v1).'), true),
     html_print_input_text(
-        'integria_hostname',
-        $config['integria_hostname'],
+        'ITSM_hostname',
+        $config['ITSM_hostname'],
         '',
         30,
         100,
         true
     ),
-    ['div_class' => 'integria-remote-setup-integria_hostname']
+    ['div_class' => 'ITSM-remote-setup-ITSM_hostname']
 );
 
-// Integria token.
+// ITSM token.
 $row['password'] = html_print_label_input_block(
-    __('Password'),
+    __('Token'),
     html_print_input_password(
-        'integria_pass',
-        io_output_password($config['integria_pass']),
+        'ITSM_token',
+        io_output_password($config['ITSM_token']),
         '',
         30,
         100,
         true
     ),
-    ['div_class' => 'integria-remote-setup-integria_pass']
+    ['div_class' => 'ITSM-remote-setup-ITSM_token']
 );
-$table_remote->data['integria_pass'] = $row;
+$table_remote->data['ITSM_token'] = $row;
 
-/*
-    // API password.
-    $row['api_pass'] = html_print_label_input_block(
-    __('API Password'),
-    html_print_input_password(
-        'integria_api_pass',
-        io_output_password($config['integria_api_pass']),
-        '',
-        30,
-        100,
-        true
-    ),
-    ['div_class' => 'integria-remote-setup-integria_api_pass']
-    );
-    $table_remote->data['integria_api_pass'] = $row;
-
-    // Request timeout.
-    $row = [];
-    $row['req_timeout'] = html_print_label_input_block(
-    __('Request timeout'),
-    html_print_input_text(
-        'integria_req_timeout',
-        $config['integria_req_timeout'],
-        '',
-        3,
-        10,
-        true
-    ),
-    ['div_class' => 'integria-remote-setup-integria_req_timeout']
-    );
-    $table_remote->data['integria_req_timeout'] = $row;
-*/
 $row = [];
 $row['control'] = __('Inventory');
 $row['control'] .= html_print_button(
@@ -350,14 +218,14 @@ $row['control'] .= html_print_button(
 $row['control'] .= '<span id="ITSM-spinner-sync" style="display:none;">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
 $row['control'] .= '<span id="ITSM-success-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
 $row['control'] .= '<span id="ITSM-failure-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
-$table_remote->data['integria_sync_inventory'] = $row;
+$table_remote->data['ITSM_sync_inventory'] = $row;
 
 // Alert settings.
 $table_alert_settings = new StdClass();
 $table_alert_settings->data = [];
 $table_alert_settings->width = '100%';
 $table_alert_settings->styleTable = 'margin-bottom: 10px;';
-$table_alert_settings->id = 'integria-cr-settings-setup';
+$table_alert_settings->id = 'ITSM-settings-setup';
 $table_alert_settings->class = 'databox filters filter-table-adv';
 $table_alert_settings->size[0] = '50%';
 $table_alert_settings->size[1] = '50%';
@@ -434,7 +302,7 @@ $table_alert_settings->data[1] = $row;
 $row = [];
 $row[0] = html_print_label_input_block(
     __('Owner'),
-    html_print_autocomplete_users_from_integria(
+    html_print_autocomplete_users_from_pandora_itsm(
         'default_owner',
         $config['default_owner'],
         true,
@@ -490,7 +358,7 @@ $table_cr_settings = new StdClass();
 $table_cr_settings->data = [];
 $table_cr_settings->width = '100%';
 $table_cr_settings->styleTable = 'margin-bottom: 10px;';
-$table_cr_settings->id = 'integria-cr-settings-setup';
+$table_cr_settings->id = 'ITSM-cr-settings-setup';
 $table_cr_settings->class = 'databox filters filter-table-adv';
 $table_cr_settings->size[0] = '50%';
 $table_cr_settings->size[1] = '50%';
@@ -568,7 +436,7 @@ $table_cr_settings->data[1] = $row;
 $row = [];
 $row[0] = html_print_label_input_block(
     __('Owner'),
-    html_print_autocomplete_users_from_integria(
+    html_print_autocomplete_users_from_pandora_itsm(
         'cr_default_owner',
         $config['cr_default_owner'],
         true,
@@ -637,11 +505,11 @@ $row['control'] .= '<span id="ITSM-spinner" class="invisible">&nbsp;'.html_print
 $row['control'] .= '<span id="ITSM-success" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'&nbsp;'.__('Connection its OK').'</span>';
 $row['control'] .= '<span id="ITSM-failure" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'&nbsp;'.__('Connection failed').'</span>';
 $row['control'] .= '&nbsp;<span id="ITSM-message" class="invisible"></span>';
-$table_remote->data['integria_test'] = $row;
+$table_remote->data['ITSM_test'] = $row;
 
 // Print.
 echo '<div class="center pdd_b_10px mrgn_btn_20px white_box max_floating_element_size">';
-echo '<a target="_blank" rel="noopener noreferrer" href="http://integriaims.com">';
+echo '<a target="_blank" rel="noopener noreferrer" href="https://pandorafms.com/es/itsm/">';
 html_print_image(
     'images/integria_logo.svg',
     false,
@@ -649,11 +517,11 @@ html_print_image(
 );
 echo '</a>';
 echo '<br />';
-echo '<div clsas="integria_title">';
-echo __('Integria IMS');
+echo '<div class="ITSM_title">';
+echo __('Pandora ITSM');
 echo '</div>';
-echo '<a target="_blank" rel="noopener noreferrer" href="https://integriaims.com">';
-echo 'https://integriaims.com';
+echo '<a target="_blank" rel="noopener noreferrer" href="https://pandorafms.com/es/itsm/">';
+echo 'https://pandorafms.com/es/itsm/';
 echo '</a>';
 echo '</div>';
 
@@ -668,7 +536,7 @@ echo '</div>';
 // Form remote.
 echo '<div id="form_remote">';
 echo '<fieldset>';
-echo '<legend>'.__('Integria API settings').'</legend>';
+echo '<legend>'.__('Pandora ITSM API settings').'</legend>';
 
 html_print_table($table_remote);
 
@@ -723,30 +591,29 @@ ui_require_javascript_file('ITSM');
 
 <script type="text/javascript">
 
-    if($('input:checkbox[name="integria_user_level_conf"]').is(':checked'))
+    if($('input:checkbox[name="ITSM_user_level_conf"]').is(':checked'))
     {
-        $('.integria-remote-setup-integria_user').hide();
-        $('.integria-remote-setup-integria_pass').hide()
+        $('.ITSM-remote-setup-ITSM_token').hide()
     }
 
     var handleUserLevel = function(event) {
-        var is_checked = $('input:checkbox[name="integria_enabled"]').is(':checked');
-        var is_checked_userlevel = $('input:checkbox[name="integria_user_level_conf"]').is(':checked');
+        var is_checked = $('input:checkbox[name="ITSM_enabled"]').is(':checked');
+        var is_checked_userlevel = $('input:checkbox[name="ITSM_user_level_conf"]').is(':checked');
 
         if (event.target.value == '1' && is_checked && !is_checked_userlevel) {
             showUserPass();
-            $('input:checkbox[name="integria_user_level_conf"]').attr('checked', true);
+            $('input:checkbox[name="ITSM_user_level_conf"]').attr('checked', true);
         }
         else {
             hideUserPass();
-            $('input:checkbox[name="integria_user_level_conf"]').attr('checked', false);
+            $('input:checkbox[name="ITSM_user_level_conf"]').attr('checked', false);
         };
     }
 
-    $('input:checkbox[name="integria_enabled"]').change(handleEnable);
-    $('input:checkbox[name="integria_user_level_conf"]').change(handleUserLevel);
+    $('input:checkbox[name="ITSM_enabled"]').change(handleEnable);
+    $('input:checkbox[name="ITSM_user_level_conf"]').change(handleUserLevel);
 
-    if(!$('input:checkbox[name="integria_enabled"]').is(':checked')) {
+    if(!$('input:checkbox[name="ITSM_enabled"]').is(':checked')) {
         $('#form_remote').hide();
         $('#form_custom_response_settings').hide();
     } else {
@@ -765,29 +632,27 @@ ui_require_javascript_file('ITSM');
     }
 
     var hideUserPass = function () {
-        $('.integria-remote-setup-integria_user').hide();
-        $('.integria-remote-setup-integria_pass').hide();
+        $('.ITSM-remote-setup-ITSM_token').hide();
     }
 
     var showUserPass = function () {
-        $('.integria-remote-setup-integria_user').show();
-        $('.integria-remote-setup-integria_pass').show();
+        $('.ITSM-remote-setup-ITSM_token').show();
     }
 
     var handleEnable = function (event) {
-        var is_checked = $('input:checkbox[name="integria_enabled"]').is(':checked');
+        var is_checked = $('input:checkbox[name="ITSM_enabled"]').is(':checked');
 
         if (event.target.value == '1' && is_checked) {
             showFields();
-            $('input:checkbox[name="integria_enabled"]').attr('checked', true);
+            $('input:checkbox[name="ITSM_enabled"]').attr('checked', true);
         }
         else {
             hideFields();
-            $('input:checkbox[name="integria_enabled"]').attr('checked', false);
+            $('input:checkbox[name="ITSM_enabled"]').attr('checked', false);
         };
     }
 
-    $('input:checkbox[name="integria_enabled"]').change(handleEnable);
+    $('input:checkbox[name="ITSM_enabled"]').change(handleEnable);
 
     var handleInventorySync = function (event) {
 
@@ -818,17 +683,15 @@ ui_require_javascript_file('ITSM');
         hideFailureImage();
         showLoadingImage();
 
-        var integria_user = $('input[name=integria_user]').val();
-        var integria_pass = $('input[name=integria_pass]').val();
-        var api_hostname = $('input[name=integria_hostname]').val();
-        var api_pass = $('input[name=integria_api_pass]').val();
+        var ITSM_token = $('input[name=ITSM_token]').val();
+        var api_hostname = $('input[name=ITSM_hostname]').val();
 
         if (!api_hostname.match(/^[a-zA-Z]+:\/\//))
         {
             api_hostname = 'http://' + api_hostname;
         }
 
-        var url = api_hostname + '/integria/include/api.php';
+        var url = api_hostname + '//include/api.php';
 
         <?php
         // Retrieve all agents and codify string in the format that will be sent over in Ajax call.
@@ -854,9 +717,7 @@ ui_require_javascript_file('ITSM');
 
         var data = {
             op: 'sync_pandora_agents_inventory',
-            user: integria_user,
-            user_pass: integria_pass,
-            pass: api_pass,
+            user_pass: ITSM_token,
             params: agents_query_string_array,
             token: '|;|'
         }
@@ -880,8 +741,8 @@ ui_require_javascript_file('ITSM');
     }
 
     $('#button-ITSM').click(function() {
-        var pass = $('input#password-integria_pass').val();
-        var host = $('input#text-integria_hostname').val();
+        var pass = $('input#password-ITSM_token').val();
+        var host = $('input#text-ITSM_hostname').val();
         testConectionApi(pass, host);
     });
     //$('#button-sync-inventory').click(handleInventorySync);
diff --git a/pandora_console/godmode/setup/setup_auth.php b/pandora_console/godmode/setup/setup_auth.php
index 6616cd765c..40a816a6fa 100644
--- a/pandora_console/godmode/setup/setup_auth.php
+++ b/pandora_console/godmode/setup/setup_auth.php
@@ -371,7 +371,7 @@ if (is_ajax() === true) {
             case 'pandora':
             case 'ad':
             case 'saml':
-            case 'integria':
+            case 'ITSM':
                 // Add enterprise authentication options.
                 if (enterprise_installed() === true) {
                     add_enterprise_auth_options($table, $type_auth);
diff --git a/pandora_console/godmode/users/configure_user.php b/pandora_console/godmode/users/configure_user.php
index 7227aaa09e..f8b7e459a8 100644
--- a/pandora_console/godmode/users/configure_user.php
+++ b/pandora_console/godmode/users/configure_user.php
@@ -333,6 +333,7 @@ if ($create_user === true) {
     $values['default_custom_view'] = (int) get_parameter('default_custom_view');
     $values['time_autorefresh'] = (int) get_parameter('time_autorefresh', 0);
     $values['show_tips_startup'] = (int) get_parameter_switch('show_tips_startup');
+    $values['integria_user_level_pass'] = (string) get_parameter('integria_user_level_pass');
     $dashboard = get_parameter('dashboard', '');
     $visual_console = get_parameter('visual_console', '');
 
@@ -624,6 +625,7 @@ if ($update_user) {
     $values['ehorus_user_level_enabled'] = (bool) get_parameter('ehorus_user_level_enabled', false);
     $values['ehorus_user_level_user'] = (string) get_parameter('ehorus_user_level_user');
     $values['ehorus_user_level_pass'] = (string) get_parameter('ehorus_user_level_pass');
+    $values['integria_user_level_pass'] = (string) get_parameter('integria_user_level_pass');
 
     $values['middlename'] = get_parameter('middlename', 0);
 
diff --git a/pandora_console/godmode/users/user_management.php b/pandora_console/godmode/users/user_management.php
index adeedd5765..68ca70ff69 100644
--- a/pandora_console/godmode/users/user_management.php
+++ b/pandora_console/godmode/users/user_management.php
@@ -783,58 +783,59 @@ $userManagementTable->data['fields_addSettings'][1] .= html_print_div(
 );
 
 
-if ($config['integria_enabled'] && $config['integria_user_level_conf']) {
-    // Integria IMS user remote login.
-    $table_remote = new StdClass();
-    $table_remote->data = [];
-    $table_remote->width = '100%';
-    $table_remote->id = 'integria-remote-setup';
-    $table_remote->class = 'white_box';
-    $table_remote->size['name'] = '30%';
-    $table_remote->style['name'] = 'font-weight: bold';
+if ($config['ITSM_enabled'] && $config['ITSM_user_level_conf']) {
+    // Pandora ITSM user remote login.
+    $table_ITSM = new StdClass();
+    $table_ITSM->data = [];
+    $table_ITSM->width = '100%';
+    $table_ITSM->id = 'ITSM-remote-setup';
+    $table_ITSM->class = 'white_box';
+    $table_ITSM->size['name'] = '30%';
+    $table_ITSM->style['name'] = 'font-weight: bold';
 
-    // Integria IMS user level authentication.
+    // Pandora ITSM user level authentication.
     // Title.
     $row = [];
-    $row['control'] = '<p class="edit_user_labels">'.__('Integria user configuration').': </p>';
-    $table_remote->data['integria_user_level_conf'] = $row;
+    $row['control'] = '<p class="edit_user_labels">'.__('Pandora ITSM user configuration').': </p>';
+    $table_ITSM->data['ITSM_user_level_conf'] = $row;
 
-    // Integria IMS user.
+    // Pandora ITSM pass.
     $row = [];
-    $row['name'] = __('User');
-    $row['control'] = html_print_input_text('integria_user_level_user', $user_info['integria_user_level_user'], '', 30, 100, true);
-    $table_remote->data['integria_user_level_user'] = $row;
-
-    // Integria IMS pass.
-    $row = [];
-    $row['name'] = __('Password');
-    $row['control'] = html_print_input_password('integria_user_level_pass', io_output_password($user_info['integria_user_level_pass']), '', 30, 100, true);
-    $table_remote->data['integria_user_level_pass'] = $row;
+    $row['name'] = __('Token');
+    $row['control'] = html_print_input_password(
+        'integria_user_level_pass',
+        io_output_password($user_info['integria_user_level_pass']),
+        '',
+        100,
+        100,
+        true
+    );
+    $table_ITSM->data['integria_user_level_pass'] = $row;
 
     // Test.
-    $integria_host = db_get_value('value', 'tconfig', 'token', 'integria_hostname');
-    $integria_api_pass = db_get_value('value', 'tconfig', 'token', 'integria_api_pass');
+    $ITSM_host = db_get_value('value', 'tconfig', 'token', 'ITSM_hostname');
 
     $row = [];
     $row['name'] = __('Test');
     $row['control'] = html_print_button(
         __('Start'),
-        'test-integria',
+        'ITSM',
         false,
-        'integria_connection_test(&quot;'.$integria_host.'&quot;,'.$integria_api_pass.')',
-        [ 'icon' => 'next' ],
+        '',
+        [
+            'icon' => 'cog',
+            'mode' => 'secondary mini',
+        ],
         true
     );
-    $row['control'] .= '&nbsp;<span id="test-integria-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
-    $row['control'] .= '&nbsp;<span id="test-integria-success" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
-    $row['control'] .= '&nbsp;<span id="test-integria-failure" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
-    $row['control'] .= '<span id="test-integria-message" class="invisible"></span>';
-    $table_remote->data['integria_test'] = $row;
+    $row['control'] .= '&nbsp;<span id="ITSM-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
+    $row['control'] .= '&nbsp;<span id="ITSM-success" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
+    $row['control'] .= '&nbsp;<span id="ITSM-failure" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
+    $row['control'] .= '<span id="ITSM-message" class="invisible"></span>';
+    $table_ITSM->data['ITSM_test'] = $row;
 
-    // echo '<div class="integria_user_conf">';
     $userManagementTable->colspan['pandoraitsm'] = 2;
-    $userManagementTable->data['pandoraitsm'] = html_print_table($table_remote, true);
-    // echo '</div>';
+    $userManagementTable->data['pandoraitsm'] = html_print_table($table_ITSM, true);
 }
 
 if (isset($CodeQRTable) === true || isset($apiTokenContent) === true) {
@@ -860,15 +861,23 @@ $vcard_data['organization'] = io_safe_output(get_product_name());
 $vcard_data['url'] = ui_get_full_url('index.php');
 
 $vcard_json = json_encode($vcard_data);
+
+ui_require_javascript_file('ITSM');
 ?>
 
 <script type="text/javascript">
 $(document).ready(function () {
     paint_vcard(
-                <?php echo $vcard_json; ?>,
-                "#qr_code_agent_view",
-                128,
-                128
-            );
+        <?php echo $vcard_json; ?>,
+        "#qr_code_agent_view",
+        128,
+        128
+    );
+
+    $('#button-ITSM').click(function() {
+        var pass = $('input#password-integria_user_level_pass').val();
+        var host = '<?php echo $ITSM_host; ?>';
+        testConectionApi(pass, host);
+    });
 });
 </script>
\ No newline at end of file
diff --git a/pandora_console/include/auth/mysql.php b/pandora_console/include/auth/mysql.php
index a24769e528..76a6458f32 100644
--- a/pandora_console/include/auth/mysql.php
+++ b/pandora_console/include/auth/mysql.php
@@ -256,14 +256,6 @@ function process_user_login_remote($login, $pass, $api=false)
             }
         break;
 
-        // Remote Integria.
-        case 'integria':
-            if (enterprise_hook('remote_integria_process_user_login', [$login, $pass]) === false) {
-                $config['auth_error'] = 'User not found in database or incorrect password';
-                return false;
-            }
-        break;
-
         // Unknown authentication method.
         default:
             $config['auth_error'] = 'User not found in database or incorrect password';
diff --git a/pandora_console/include/functions.php b/pandora_console/include/functions.php
index ee4ee7d1ab..c481d0c1a8 100644
--- a/pandora_console/include/functions.php
+++ b/pandora_console/include/functions.php
@@ -5803,7 +5803,7 @@ function get_help_info($section_name)
             }
         break;
 
-        case 'setup_integria_tab':
+        case 'setup_ITSM_tab':
             if ($es) {
                 $result .= '04_using/14_incidence_management';
             } else {
@@ -5811,7 +5811,7 @@ function get_help_info($section_name)
             }
         break;
 
-        case 'integria_tab':
+        case 'ITSM_tab':
             if ($es) {
                 $result .= '04_using/14_incidence_management#visualizacion_de_tickets';
             } else {
diff --git a/pandora_console/include/functions_config.php b/pandora_console/include/functions_config.php
index d1de857ae9..045cdaafca 100644
--- a/pandora_console/include/functions_config.php
+++ b/pandora_console/include/functions_config.php
@@ -244,18 +244,6 @@ function config_update_config()
                         $error_update[] = __('Enable GIS features');
                     }
 
-                    if (config_update_value('integria_inventory', get_parameter('integria_inventory'), true) === false) {
-                        $error_update[] = __('Integria inventory');
-                    }
-
-                    if (config_update_value('integria_api_password', io_input_password(get_parameter('integria_api_password')), true) === false) {
-                        $error_update[] = __('Integria API password');
-                    }
-
-                    if (config_update_value('integria_url', get_parameter('integria_url'), true) === false) {
-                        $error_update[] = __('Integria URL');
-                    }
-
                     if (config_update_value('activate_netflow', (bool) get_parameter('activate_netflow'), true) === false) {
                         $error_update[] = __('Enable Netflow');
                     }
@@ -775,26 +763,6 @@ function config_update_config()
                         $error_update[] = __('Password');
                     }
 
-                    if (config_update_value('rintegria_server', get_parameter('rintegria_server'), true) === false) {
-                        $error_update[] = __('Integria host');
-                    }
-
-                    if (config_update_value('rintegria_port', get_parameter('rintegria_port'), true) === false) {
-                        $error_update[] = __('MySQL port');
-                    }
-
-                    if (config_update_value('rintegria_dbname', get_parameter('rintegria_dbname'), true) === false) {
-                        $error_update[] = __('Database name');
-                    }
-
-                    if (config_update_value('rintegria_user', get_parameter('rintegria_user'), true) === false) {
-                        $error_update[] = __('User');
-                    }
-
-                    if (config_update_value('rintegria_pass', io_input_password(get_parameter('rintegria_pass')), true) === false) {
-                        $error_update[] = __('Password');
-                    }
-
                     if (config_update_value('saml_path', get_parameter('saml_path'), true) === false) {
                         $error_update[] = __('Saml path');
                     }
@@ -1891,103 +1859,91 @@ function config_update_config()
                     }
                 break;
 
-                case 'integria':
-                    if (config_update_value('integria_user_level_conf', (int) get_parameter('integria_user_level_conf', 0), true) === false) {
-                        $error_update[] = __('Integria user login');
+                case 'ITSM':
+                    if (config_update_value('ITSM_user_level_conf', (int) get_parameter('ITSM_user_level_conf', 0), true) === false) {
+                        $error_update[] = __('Pandora ITSM user login');
                     }
 
-                    if (config_update_value('integria_enabled', (int) get_parameter('integria_enabled', 0), true) === false) {
-                        $error_update[] = __('Enable Integria IMS');
+                    if (config_update_value('ITSM_enabled', (int) get_parameter('ITSM_enabled', 0), true) === false) {
+                        $error_update[] = __('Enable Pandora ITSM');
                     }
 
-                    if (config_update_value('integria_user', (string) get_parameter('integria_user', $config['integria_user']), true) === false) {
-                        $error_update[] = __('Integria user');
+                    if (config_update_value('ITSM_token', io_input_password((string) get_parameter('ITSM_token', $config['ITSM_token'])), true) === false) {
+                        $error_update[] = __('Pandora ITSM token');
                     }
 
-                    if (config_update_value('integria_pass', io_input_password((string) get_parameter('integria_pass', $config['integria_pass'])), true) === false) {
-                        $error_update[] = __('Integria password');
-                    }
+                    $ITSM_hostname = (string) get_parameter('ITSM_hostname', $config['ITSM_hostname']);
 
-                    $integria_hostname = (string) get_parameter('integria_hostname', $config['integria_hostname']);
-
-                    if (parse_url($integria_hostname, PHP_URL_SCHEME) === null) {
+                    if (parse_url($ITSM_hostname, PHP_URL_SCHEME) === null) {
                         if (empty($_SERVER['HTTPS']) === false) {
-                            $integria_hostname = 'https://'.$integria_hostname;
+                            $ITSM_hostname = 'https://'.$ITSM_hostname;
                         } else {
-                            $integria_hostname = 'http://'.$integria_hostname;
+                            $ITSM_hostname = 'http://'.$ITSM_hostname;
                         }
                     }
 
-                    if (config_update_value('integria_hostname', $integria_hostname, true) === false) {
-                        $error_update[] = __('integria API hostname');
-                    }
-
-                    if (config_update_value('integria_api_pass', io_input_password((string) get_parameter('integria_api_pass', $config['integria_api_pass'])), true) === false) {
-                        $error_update[] = __('Integria API password');
-                    }
-
-                    if (config_update_value('integria_req_timeout', (int) get_parameter('integria_req_timeout', $config['integria_req_timeout']), true) === false) {
-                        $error_update[] = __('Integria request timeout');
+                    if (config_update_value('ITSM_hostname', $ITSM_hostname, true) === false) {
+                        $error_update[] = __('Pandora iTSM API hostname');
                     }
 
                     if (config_update_value('default_group', (int) get_parameter('default_group', $config['default_group']), true) === false) {
-                        $error_update[] = __('Integria default group');
+                        $error_update[] = __('Pandora ITSM default group');
                     }
 
                     if (config_update_value('cr_default_group', (int) get_parameter('cr_default_group', $config['cr_default_group']), true) === false) {
-                        $error_update[] = __('Integria custom response default group');
+                        $error_update[] = __('Pandora ITSM custom response default group');
                     }
 
-                    if (config_update_value('default_criticity', (int) get_parameter('default_criticity', $config['default_criticity']), true) === false) {
-                        $error_update[] = __('Integria default priority');
+                    if (config_update_value('default_criticity', (string) get_parameter('default_criticity', $config['default_criticity']), true) === false) {
+                        $error_update[] = __('Pandora ITSM default priority');
                     }
 
-                    if (config_update_value('cr_default_criticity', (int) get_parameter('cr_default_criticity', $config['cr_default_criticity']), true) === false) {
-                        $error_update[] = __('Integria custom response default priority');
+                    if (config_update_value('cr_default_criticity', (string) get_parameter('cr_default_criticity', $config['cr_default_criticity']), true) === false) {
+                        $error_update[] = __('Pandora ITSM custom response default priority');
                     }
 
                     if (config_update_value('default_creator', (string) get_parameter('default_creator', $config['default_creator']), true) === false) {
-                        $error_update[] = __('Integria default creator');
+                        $error_update[] = __('Pandora ITSM default creator');
                     }
 
                     if (config_update_value('default_owner', (string) get_parameter('default_owner', $config['default_owner']), true) === false) {
-                        $error_update[] = __('Integria default owner');
+                        $error_update[] = __('Pandora ITSM default owner');
                     }
 
                     if (config_update_value('cr_default_owner', (string) get_parameter('cr_default_owner', $config['cr_default_owner']), true) === false) {
-                        $error_update[] = __('Integria custom response default owner');
+                        $error_update[] = __('Pandora ITSM custom response default owner');
                     }
 
                     if (config_update_value('incident_type', (int) get_parameter('incident_type', $config['incident_type']), true) === false) {
-                        $error_update[] = __('Integria default ticket type');
+                        $error_update[] = __('Pandora ITSM default ticket type');
                     }
 
                     if (config_update_value('cr_incident_type', (int) get_parameter('cr_incident_type', $config['cr_incident_type']), true) === false) {
-                        $error_update[] = __('Integria custom response default ticket type');
+                        $error_update[] = __('Pandora ITSM custom response default ticket type');
                     }
 
-                    if (config_update_value('incident_status', (int) get_parameter('incident_status', $config['incident_status']), true) === false) {
-                        $error_update[] = __('Integria default ticket status');
+                    if (config_update_value('incident_status', (string) get_parameter('incident_status', $config['incident_status']), true) === false) {
+                        $error_update[] = __('Pandora ITSM default ticket status');
                     }
 
-                    if (config_update_value('cr_incident_status', (int) get_parameter('cr_incident_status', $config['cr_incident_status']), true) === false) {
-                        $error_update[] = __('Integria custom response default ticket status');
+                    if (config_update_value('cr_incident_status', (string) get_parameter('cr_incident_status', $config['cr_incident_status']), true) === false) {
+                        $error_update[] = __('Pandora ITSM custom response default ticket status');
                     }
 
                     if (config_update_value('incident_title', (string) get_parameter('incident_title', $config['incident_title']), true) === false) {
-                        $error_update[] = __('Integria default ticket title');
+                        $error_update[] = __('Pandora ITSM default ticket title');
                     }
 
                     if (config_update_value('cr_incident_title', (string) get_parameter('cr_incident_title', $config['cr_incident_title']), true) === false) {
-                        $error_update[] = __('Integria custom response default ticket title');
+                        $error_update[] = __('Pandora ITSM custom response default ticket title');
                     }
 
                     if (config_update_value('incident_content', (string) get_parameter('incident_content', $config['incident_content']), true) === false) {
-                        $error_update[] = __('Integria default ticket content');
+                        $error_update[] = __('Pandora ITSM default ticket content');
                     }
 
                     if (config_update_value('cr_incident_content', (string) get_parameter('cr_incident_content', $config['cr_incident_content']), true) === false) {
-                        $error_update[] = __('Integria custom response default ticket content');
+                        $error_update[] = __('Pandora ITSM custom response default ticket content');
                     }
                 break;
 
@@ -3336,26 +3292,6 @@ function config_process_config()
         config_update_value('rpandora_pass', '');
     }
 
-    if (!isset($config['rintegria_server'])) {
-        config_update_value('rintegria_server', 'localhost');
-    }
-
-    if (!isset($config['rintegria_port'])) {
-        config_update_value('rintegria_port', 3306);
-    }
-
-    if (!isset($config['rintegria_dbname'])) {
-        config_update_value('rintegria_dbname', 'integria');
-    }
-
-    if (!isset($config['rintegria_user'])) {
-        config_update_value('rintegria_user', 'integria');
-    }
-
-    if (!isset($config['rintegria_pass'])) {
-        config_update_value('rintegria_pass', '');
-    }
-
     if (!isset($config['saml_path'])) {
         config_update_value('saml_path', '/opt/');
     }
@@ -3801,21 +3737,17 @@ function config_process_config()
         config_update_value('ehorus_req_timeout', 5);
     }
 
-    // Integria.
-    if (!isset($config['integria_user_level_conf'])) {
-        config_update_value('integria_user_level_conf', 0);
+    // ITSM.
+    if (!isset($config['ITSM_user_level_conf'])) {
+        config_update_value('ITSM_user_level_conf', 0);
     }
 
-    if (!isset($config['integria_enabled'])) {
-        config_update_value('integria_enabled', 0);
+    if (!isset($config['ITSM_enabled'])) {
+        config_update_value('ITSM_enabled', 0);
     }
 
-    if (!isset($config['integria_req_timeout'])) {
-        config_update_value('integria_req_timeout', 5);
-    }
-
-    if (!isset($config['integria_hostname'])) {
-        config_update_value('integria_hostname', '');
+    if (!isset($config['ITSM_hostname'])) {
+        config_update_value('ITSM_hostname', '');
     }
 
     // Module Library.
diff --git a/pandora_console/include/functions_graph.php b/pandora_console/include/functions_graph.php
index 61f0d472be..c00a9827fe 100644
--- a/pandora_console/include/functions_graph.php
+++ b/pandora_console/include/functions_graph.php
@@ -32,7 +32,6 @@ require_once $config['homedir'].'/include/functions_reporting.php';
 require_once $config['homedir'].'/include/functions_agents.php';
 require_once $config['homedir'].'/include/functions_modules.php';
 require_once $config['homedir'].'/include/functions_users.php';
-require_once $config['homedir'].'/include/functions_integriaims.php';
 
 
 /**
diff --git a/pandora_console/include/functions_html.php b/pandora_console/include/functions_html.php
index 3a7a30b09e..dd66bc93d7 100644
--- a/pandora_console/include/functions_html.php
+++ b/pandora_console/include/functions_html.php
@@ -6247,7 +6247,7 @@ function html_print_input_multicheck(array $data):string
 
 
 /**
- * Print an autocomplete input filled out with Integria IMS users.
+ * Print an autocomplete input filled out with Pandora ITSM users.
  *
  * @param string  $name     The name of ajax control, by default is "users".
  * @param string  $default  The default value to show in the ajax control.
@@ -6259,7 +6259,7 @@ function html_print_input_multicheck(array $data):string
  *
  * @return mixed If the $return is true, return the output as string.
  */
-function html_print_autocomplete_users_from_integria(
+function html_print_autocomplete_users_from_pandora_itsm(
     $name='users',
     $default='',
     $return=false,
diff --git a/pandora_console/include/functions_integriaims.php b/pandora_console/include/functions_integriaims.php
index 817667272f..df5b85a709 100644
--- a/pandora_console/include/functions_integriaims.php
+++ b/pandora_console/include/functions_integriaims.php
@@ -86,175 +86,3 @@ function integriaims_tabs($active_tab, $view=false)
 
     return $onheader;
 }
-
-
-/**
- * Perform an API call to Integria IMS.
- *
- * @param string|null $api_hostname               API host URL.
- * @param string|null $user                       User name.
- * @param string|null $user_pass                  User password.
- * @param string|null $api_pass                   API password.
- * @param string|null $operation                  API Operation.
- * @param mixed       $params                     String or array with parameters required by the API function.
- * @param mixed       $show_credentials_error_msg Show_credentials_error_msg.
- * @param mixed       $return_type                Return_type.
- * @param mixed       $token                      Token.
- * @param mixed       $user_level_conf            User_level_conf.
- *
- * @return boolean True if API request succeeded, false if API request failed.
- */
-function integria_api_call(
-    $api_hostname=null,
-    $user=null,
-    $user_pass=null,
-    $api_pass=null,
-    $operation=null,
-    $params='',
-    $show_credentials_error_msg=false,
-    $return_type='',
-    $token='',
-    $user_level_conf=null
-) {
-    global $config;
-
-    if (is_metaconsole()) {
-        $servers = metaconsole_get_connection_names();
-        foreach ($servers as $key => $server) {
-            $connection = metaconsole_get_connection($server);
-            if (metaconsole_connect($connection) != NOERR) {
-                continue;
-            }
-
-            $integria_enabled = db_get_sql(
-                'SELECT `value` FROM tconfig WHERE `token` = "integria_enabled"'
-            );
-
-            if (!$integria_enabled) {
-                metaconsole_restore_db();
-                continue;
-            }
-
-            // integria_user_level_conf, integria_hostname, integria_api_pass, integria_user, integria_user_level_user, integria_pass, integria_user_level_pass
-            $config_aux = db_get_all_rows_sql('SELECT `token`, `value` FROM `tconfig` WHERE `token` IN ("integria_user_level_conf", "integria_hostname", "integria_api_pass", "integria_user", "integria_user_level_user", "integria_pass", "integria_user_level_pass")');
-            $user_info = users_get_user_by_id($config['id_user']);
-            foreach ($config_aux as $key => $conf) {
-                if ($conf['token'] === 'integria_user_level_conf') {
-                    $user_level_conf = $conf['value'];
-                }
-
-                if ($conf['token'] === 'integria_hostname') {
-                    $api_hostname = $conf['value'];
-                }
-
-                if ($conf['token'] === 'integria_api_pass') {
-                    $api_pass = $conf['value'];
-                }
-
-                if ($conf['token'] === 'integria_user') {
-                    $user = $conf['value'];
-                }
-
-                if ($conf['token'] === 'integria_pass') {
-                    $user_pass = $conf['value'];
-                }
-            }
-
-            if ($user_level_conf == true) {
-                $user = $user_info['integria_user_level_user'];
-                $user_pass = $user_info['integria_user_level_pass'];
-            }
-
-            metaconsole_restore_db();
-        }
-    } else {
-        if ($user_level_conf === null) {
-            $user_level_conf = (bool) $config['integria_user_level_conf'];
-        }
-
-        $user_info = users_get_user_by_id($config['id_user']);
-
-        // API access data.
-        if ($api_hostname === null) {
-            $api_hostname = $config['integria_hostname'];
-        }
-
-        if ($api_pass === null) {
-            $api_pass = $config['integria_api_pass'];
-        }
-
-        // Integria user and password.
-        if ($user === null || $user_level_conf === true) {
-            $user = $config['integria_user'];
-
-            if ($user_level_conf === true) {
-                $user = $user_info['integria_user_level_user'];
-            }
-        }
-
-        if ($user_pass === null || $user_level_conf === true) {
-            $user_pass = $config['integria_pass'];
-
-            if ($user_level_conf === true) {
-                $user_pass = $user_info['integria_user_level_pass'];
-            }
-        }
-    }
-
-    if (is_array($params)) {
-        $params = implode($token, $params);
-    }
-
-    $url_data = [
-        'user'      => $user,
-        'user_pass' => $user_pass,
-        'pass'      => $api_pass,
-        'op'        => $operation,
-        'params'    => io_safe_output($params),
-    ];
-
-    if ($return_type !== '') {
-        $url_data['return_type'] = $return_type;
-    }
-
-    if ($token !== '') {
-        $url_data['token'] = $token;
-    }
-
-    // Build URL for API request.
-    $url = $api_hostname.'/include/api.php';
-
-    // ob_start();
-    // $out = fopen('php://output', 'w');
-    $ch = curl_init();
-    curl_setopt($ch, CURLOPT_URL, $url);
-    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-    curl_setopt($ch, CURLOPT_POST, true);
-    curl_setopt($ch, CURLOPT_POSTFIELDS, $url_data);
-    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-    curl_setopt($ch, CURLOPT_VERBOSE, true);
-    curl_setopt($ch, CURLOPT_STDERR, $out);
-    $result = curl_exec($ch);
-
-    // fclose($out);
-    // $debug = ob_get_clean();
-    $http_status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-
-    $error = false;
-
-    if ($result === false) {
-        $error = curl_error($ch);
-    }
-
-    curl_close($ch);
-
-    if ($error === true || $http_status !== 200) {
-        if ($show_credentials_error_msg === true) {
-            ui_print_error_message(__('API request failed. Please check Integria IMS\' access credentials in Pandora setup.'));
-        }
-
-        return false;
-    } else {
-        return $result;
-    }
-}
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index bca6e13469..03f2f0b047 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -33,20 +33,20 @@ class ITSM
     /**
      * ITSM.
      *
-     * @param string|null $host Host url.
-     * @param string|null $pass Token.
+     * @param string|null $host  Host url.
+     * @param string|null $token Token.
      */
-    public function __construct(?string $host=null, ?string $pass=null)
+    public function __construct(?string $host=null, ?string $token=null)
     {
         global $config;
         $user_info = \users_get_user_by_id($config['id_user']);
 
-        $this->userLevelConf = (bool) $config['integria_user_level_conf'];
-        $this->url = ($host ?? $config['integria_hostname']);
+        $this->userLevelConf = (bool) $config['ITSM_user_level_conf'];
+        $this->url = ($host ?? $config['ITSM_hostname']);
 
-        $this->userBearer = ($pass ?? $config['integria_pass']);
+        $this->userBearer = ($token ?? $config['ITSM_token']);
         if ($this->userLevelConf === true) {
-            $this->userBearer = $user_info['integria_user_level_pass'];
+            $this->userBearer = ($token ?? $user_info['integria_user_level_pass']);
         }
     }
 
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index c5b199e174..8d7e8b414b 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -109,7 +109,7 @@ class Manager
      */
     public function run()
     {
-        \ui_require_css_file('integriaims');
+        \ui_require_css_file('pandoraitsm');
         \ui_require_javascript_file('ITSM');
         switch ($this->operation) {
             case 'list':
diff --git a/pandora_console/include/styles/pandora.css b/pandora_console/include/styles/pandora.css
index e0ca7fc68f..8527da8525 100644
--- a/pandora_console/include/styles/pandora.css
+++ b/pandora_console/include/styles/pandora.css
@@ -8511,7 +8511,7 @@ div.graph div.legend table {
   padding: 5px;
 }
 
-.integria_title .ehorus_title {
+.ITSM_title .ehorus_title {
   color: #515151;
 }
 
diff --git a/pandora_console/include/styles/pandora_black.css b/pandora_console/include/styles/pandora_black.css
index 652d777f72..ef56daab1d 100644
--- a/pandora_console/include/styles/pandora_black.css
+++ b/pandora_console/include/styles/pandora_black.css
@@ -1006,7 +1006,7 @@ div#dashboard-controls {
   color: #fff;
 }
 
-.integria_details_shadow {
+.ITSM_details_shadow {
   background-color: #222;
   border-bottom: 1px solid #e2e2e2;
   border-left: 1px solid #e2e2e2;
@@ -1015,7 +1015,7 @@ div#dashboard-controls {
   border-top-right-radius: 5px;
 }
 
-div.integria_details_description textarea {
+div.ITSM_details_description textarea {
   width: 100%;
   background-color: #111;
   color: #fff;
diff --git a/pandora_console/include/styles/integriaims.css b/pandora_console/include/styles/pandoraitsm.css
similarity index 68%
rename from pandora_console/include/styles/integriaims.css
rename to pandora_console/include/styles/pandoraitsm.css
index 95ae267aa2..d6375c1459 100644
--- a/pandora_console/include/styles/integriaims.css
+++ b/pandora_console/include/styles/pandoraitsm.css
@@ -1,4 +1,3 @@
-/* --- Integria IMS --- */
 div.priority {
   width: 80px;
   color: #fff;
@@ -10,22 +9,22 @@ div.priority {
 }
 
 /* Details view */
-div.integria_details {
+div.ITSM_details {
   display: grid;
   grid-column-gap: 10px;
   grid-template-columns: repeat(3, minmax(min-content, auto));
   grid-auto-rows: 1fr;
 }
 
-div.integria_details div.box-shadow.white_table_graph {
+div.ITSM_details div.box-shadow.white_table_graph {
   box-shadow: none;
 }
 
-div.integria_details div.priority {
+div.ITSM_details div.priority {
   display: inline-block;
 }
 
-div.integriaims_details_row {
+div.pandoraitsm_details_row {
   display: grid;
   grid-gap: 10px;
   text-align: center;
@@ -33,25 +32,25 @@ div.integriaims_details_row {
   margin-bottom: 8px;
 }
 
-div.integriaims_details_titles {
+div.pandoraitsm_details_titles {
   font-weight: bold;
 }
 
-div.integria_details_row_five {
+div.ITSM_details_row_five {
   grid-template-columns: repeat(5, 1fr);
 }
 
-div.integria_details_row_three {
+div.ITSM_details_row_three {
   grid-template-columns: repeat(3, 1fr);
 }
 
-div.integria_details_description {
+div.ITSM_details_description {
   width: 100%;
   overflow: auto;
   padding: 0px 10px;
 }
 
-.integriaims_details_box {
+.pandoraitsm_details_box {
   display: grid;
   grid-column-gap: 10px;
   grid-row-gap: 5px;
@@ -60,18 +59,18 @@ div.integria_details_description {
   text-align: center;
 }
 
-.integriaims_details_box_five {
+.pandoraitsm_details_box_five {
   grid-template-rows: repeat(3, 1fr);
   grid-template-columns: repeat(5, 1fr);
 }
 
-.integriaims_details_box_three {
+.pandoraitsm_details_box_three {
   grid-template-rows: repeat(3, 1fr);
   grid-template-columns: repeat(3, 1fr);
 }
 
 /* ui_toggles */
-.integria_details_shadow {
+.ITSM_details_shadow {
   background-color: #fff;
   border-bottom: 1px solid #e2e2e2;
   border-left: 1px solid #e2e2e2;
@@ -80,35 +79,17 @@ div.integria_details_description {
   border-top-right-radius: 5px;
 }
 
-.integria_details_shadow .white_table_graph_header {
+.ITSM_details_shadow .white_table_graph_header {
   border-left: none;
   border-right: none;
 }
 
-.integria_details_content {
+.ITSM_details_content {
   border-bottom: none;
   border-left: none;
   border-right: none;
 }
 
-/* Inputs type text shown as a black line */
-.integria_incidents_options input[type="text"] {
-  background-color: transparent;
-  border: none;
-  border-radius: 0;
-  border-bottom: 1px solid #ccc;
-  font-size: 10pt;
-  padding: 2px 5px;
-  box-sizing: border-box;
-  background-repeat: no-repeat;
-  background-position: left bottom 2px;
-  margin-bottom: 4px;
-}
-
-.integria_incident_options input[readonly] {
-  color: #848484;
-}
-
 .comment_title {
   padding: 5px 10px 5px 20px;
   background-color: rgba(130, 185, 46, 0.16);
diff --git a/pandora_console/operation/agentes/ver_agente.php b/pandora_console/operation/agentes/ver_agente.php
index bf110bd24f..546c3f3675 100644
--- a/pandora_console/operation/agentes/ver_agente.php
+++ b/pandora_console/operation/agentes/ver_agente.php
@@ -1556,7 +1556,7 @@ if ((bool) $config['activate_gis'] === true) {
 }
 
 // Incident tab.
-if ((bool) $config['integria_enabled'] === true) {
+if ((bool) $config['ITSM_enabled'] === true) {
     $incidenttab['text'] = html_print_menu_button(
         [
             'href'  => 'index.php?sec=gagente&amp;sec2=operation/agentes/ver_agente&tab=incident&id_agente='.$id_agente,
diff --git a/pandora_console/operation/menu.php b/pandora_console/operation/menu.php
index d507a0b3cc..b3b9643e99 100644
--- a/pandora_console/operation/menu.php
+++ b/pandora_console/operation/menu.php
@@ -706,7 +706,7 @@ if ($access_console_node === true) {
 $menu_operation['workspace']['sub'] = $sub;
 
 if ($access_console_node === true) {
-    if ((bool) $config['integria_enabled'] === true) {
+    if ((bool) $config['ITSM_enabled'] === true) {
         // ITSM.
         $menu_operation['ITSM']['text'] = __('ITSM');
         $menu_operation['ITSM']['sec2'] = 'operation/ITSM/itsm';
diff --git a/pandora_console/operation/users/user_edit.php b/pandora_console/operation/users/user_edit.php
index 900a63ebb3..49e3c31537 100644
--- a/pandora_console/operation/users/user_edit.php
+++ b/pandora_console/operation/users/user_edit.php
@@ -133,9 +133,6 @@ if (isset($_GET['modified']) && !$view_mode) {
     $upd_info['ehorus_user_level_pass'] = get_parameter('ehorus_user_level_pass');
     $upd_info['ehorus_user_level_enabled'] = get_parameter('ehorus_user_level_enabled', 0);
 
-    $upd_info['integria_user_level_user'] = get_parameter('integria_user_level_user');
-    $upd_info['integria_user_level_pass'] = get_parameter('integria_user_level_pass');
-
     $is_admin = db_get_value('is_admin', 'tusuario', 'id_user', $id);
 
     $section = io_safe_output($upd_info['section']);
@@ -886,60 +883,6 @@ $skin = '';
          echo '</div>';
     }
 
-    if ($config['integria_enabled'] && $config['integria_user_level_conf']) {
-        // Integria IMS user remote login.
-        $table_remote = new StdClass();
-        $table_remote->data = [];
-        $table_remote->width = '100%';
-        $table_remote->id = 'integria-remote-setup';
-        $table_remote->class = 'white_box';
-        $table_remote->size['name'] = '30%';
-        $table_remote->style['name'] = 'font-weight: bold';
-
-        // Integria IMS user level authentication.
-        // Title.
-        $row = [];
-        $row['control'] = '<p class="edit_user_labels">'.__('Integria user configuration').': </p>';
-        $table_remote->data['integria_user_level_conf'] = $row;
-
-        // Integria IMS user.
-        $row = [];
-        $row['name'] = __('User');
-        $row['control'] = html_print_input_text('integria_user_level_user', $user_info['integria_user_level_user'], '', 30, 100, true);
-        $table_remote->data['integria_user_level_user'] = $row;
-
-        // Integria IMS pass.
-        $row = [];
-        $row['name'] = __('Password');
-        $row['control'] = html_print_input_password('integria_user_level_pass', io_output_password($user_info['integria_user_level_pass']), '', 30, 100, true);
-        $table_remote->data['integria_user_level_pass'] = $row;
-
-        // Test.
-        $integria_host = db_get_value('value', 'tconfig', 'token', 'integria_hostname');
-        $integria_api_pass = db_get_value('value', 'tconfig', 'token', 'integria_api_pass');
-
-        $row = [];
-        $row['name'] = __('Test');
-        $row['control'] = html_print_button(
-            __('Start'),
-            'test-integria',
-            false,
-            'integria_connection_test(&quot;'.$integria_host.'&quot;,'.$integria_api_pass.')',
-            [ 'icon' => 'next' ],
-            true
-        );
-        $row['control'] .= '&nbsp;<span id="test-integria-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
-        $row['control'] .= '&nbsp;<span id="test-integria-success" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
-        $row['control'] .= '&nbsp;<span id="test-integria-failure" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
-        $row['control'] .= '<span id="test-integria-message" class="invisible"></span>';
-        $table_remote->data['integria_test'] = $row;
-
-        echo '<div class="integria_user_conf">';
-        html_print_table($table_remote);
-        echo '</div>';
-    }
-
-
     if ($is_management_allowed === true) {
         if ((bool) $config['user_can_update_info'] === false) {
             $outputButton = '<i>'.__('You can not change your user info under the current authentication scheme').'</i>';
@@ -1071,7 +1014,6 @@ $skin = '';
 <script language="javascript" type="text/javascript">
 
 $(document).ready (function () {
-
     $("#right_autorefreshlist").click (function () {
         jQuery.each($("select[name='autorefresh_list_out[]'] option:selected"), function (key, value) {
             imodule_name = $(value).html();
@@ -1487,75 +1429,4 @@ function ehorus_connection_test(host, port) {
             hideLoadingImage();
         });
     }
-
-function integria_connection_test(api_hostname, api_pass) {
-        var user = $('input#text-integria_user_level_user').val();
-        var pass = $('input#password-integria_user_level_pass').val();
-
-        var badRequestMessage = '<?php echo __('Empty user or password'); ?>';
-        var notFoundMessage = '<?php echo __('User not found'); ?>';
-        var invalidPassMessage = '<?php echo __('Invalid password'); ?>';
-        
-        var hideLoadingImage = function () {
-            $('#test-integria-spinner').hide();
-        }
-        var showLoadingImage = function () {
-            $('#test-integria-spinner').show();
-        }
-        var hideSuccessImage = function () {
-            $('#test-integria-success').hide();
-        }
-        var showSuccessImage = function () {
-            $('#test-integria-success').show();
-        }
-        var hideFailureImage = function () {
-            $('#test-integria-failure').hide();
-        }
-        var showFailureImage = function () {
-            $('#test-integria-failure').show();
-        }
-        var hideMessage = function () {
-            $('#test-integria-message').hide();
-        }
-        var showMessage = function () {
-            $('#test-integria-message').show();
-        }
-        var changeTestMessage = function (message) {
-            $('#test-integria-message').text(message);
-        }
-        
-        hideSuccessImage();
-        hideFailureImage();
-        hideMessage();
-        showLoadingImage();
-
-        $.ajax({
-            url: "ajax.php",
-            type: 'POST',
-            dataType: 'json',
-            data: {
-                page: 'godmode/setup/setup_integria',
-                operation: 'check_api_access',
-                integria_user: user,
-                integria_pass: pass,
-                api_hostname: api_hostname,
-                api_pass: api_pass,
-            }
-        })
-        .done(function(data, textStatus, xhr) {
-            if (data.login == '1') {
-                showSuccessImage();
-            } else {
-                showFailureImage();
-                showMessage();
-            }
-        })
-        .fail(function(xhr, textStatus, errorThrown) {
-            showFailureImage();
-            showMessage();
-        })
-        .always(function(xhr, textStatus) {
-            hideLoadingImage();
-        });
-    }
 </script>
diff --git a/pandora_console/pandoradb.sql b/pandora_console/pandoradb.sql
index 87f6283152..c54d3ddb7b 100644
--- a/pandora_console/pandoradb.sql
+++ b/pandora_console/pandoradb.sql
@@ -1322,7 +1322,7 @@ CREATE TABLE IF NOT EXISTS `tusuario` (
   `ehorus_user_level_pass` VARCHAR(45),
   `ehorus_user_level_enabled` TINYINT,
   `integria_user_level_user` VARCHAR(60),
-  `integria_user_level_pass` VARCHAR(45),
+  `integria_user_level_pass` TEXT,
   `api_token` VARCHAR(255) NOT NULL DEFAULT '',
   `allowed_ip_active` TINYINT UNSIGNED DEFAULT 0,
   `allowed_ip_list` TEXT,
diff --git a/pandora_console/pandoradb_data.sql b/pandora_console/pandoradb_data.sql
index ebf38a35f7..114a13898d 100644
--- a/pandora_console/pandoradb_data.sql
+++ b/pandora_console/pandoradb_data.sql
@@ -126,12 +126,9 @@ INSERT INTO `tconfig` (`token`, `value`) VALUES
 ('custom_docs_logo', 'default_docs.png'),
 ('custom_support_logo', 'default_support.png'),
 ('custom_logo_white_bg_preview', 'pandora_logo_head_white_bg.png'),
-('integria_enabled', 0),
-('integria_user', ''),
+('ITSM_enabled', 0),
 ('integria_pass', ''),
-('integria_hostname', ''),
-('integria_api_pass', ''),
-('integria_req_timeout', 5),
+('ITSM_hostname', ''),
 ('default_group', ''),
 ('default_criticity', ''),
 ('default_creator', ''),
diff --git a/pandora_console/update_manager_client/lib/UpdateManager/Client.php b/pandora_console/update_manager_client/lib/UpdateManager/Client.php
index ba1574d8f9..cf948f0701 100644
--- a/pandora_console/update_manager_client/lib/UpdateManager/Client.php
+++ b/pandora_console/update_manager_client/lib/UpdateManager/Client.php
@@ -1018,7 +1018,7 @@ class Client
             );
 
             if ($sth === false) {
-                // IntegriaIMS.
+                // Pandora ITSM.
                 $sth = $dbh->query(
                     'SELECT `value`
                      FROM `tconfig`
diff --git a/pandora_console/views/ITSM/ITSMDashboardView.php b/pandora_console/views/ITSM/ITSMDashboardView.php
index c6949c64cf..a0d162f45d 100644
--- a/pandora_console/views/ITSM/ITSMDashboardView.php
+++ b/pandora_console/views/ITSM/ITSMDashboardView.php
@@ -31,8 +31,6 @@ require_once $config['homedir'].'/include/class/HTML.class.php';
 
 global $config;
 
-ui_require_css_file('integriaims');
-
 
 /**
  * Draw chart.
@@ -83,7 +81,7 @@ ui_print_standard_header(
     __('ITSM Dashboard'),
     '',
     false,
-    'integria_tab',
+    'ITSM_tab',
     false,
     [],
     [
diff --git a/pandora_console/views/ITSM/ITSMTicketDetailView.php b/pandora_console/views/ITSM/ITSMTicketDetailView.php
index 7a1a15c25e..24c61ef792 100644
--- a/pandora_console/views/ITSM/ITSMTicketDetailView.php
+++ b/pandora_console/views/ITSM/ITSMTicketDetailView.php
@@ -28,14 +28,12 @@
 
 global $config;
 
-ui_require_css_file('integriaims');
-
 // Header tabs.
 ui_print_standard_header(
     __('ITSM Detailed'),
     '',
     false,
-    'integria_tab',
+    'ITSM_tab',
     false,
     [],
     [
@@ -71,12 +69,12 @@ if (empty($incidence) === true) {
     }
 
     // Details box.
-    $details_box = '<div class="integriaims_details_box integriaims_details_box_five">';
-    $details_box .= '<div class="integriaims_details_titles">'.__('Status').'</div>';
-    $details_box .= '<div class="integriaims_details_titles">'.__('Resolution').'</div>';
-    $details_box .= '<div class="integriaims_details_titles">'.__('Group').'</div>';
-    $details_box .= '<div class="integriaims_details_titles">'.__('Priority').'</div>';
-    $details_box .= '<div class="integriaims_details_titles">'.__('Type').'</div>';
+    $details_box = '<div class="pandoraitsm_details_box pandoraitsm_details_box_five">';
+    $details_box .= '<div class="pandoraitsm_details_titles">'.__('Status').'</div>';
+    $details_box .= '<div class="pandoraitsm_details_titles">'.__('Resolution').'</div>';
+    $details_box .= '<div class="pandoraitsm_details_titles">'.__('Group').'</div>';
+    $details_box .= '<div class="pandoraitsm_details_titles">'.__('Priority').'</div>';
+    $details_box .= '<div class="pandoraitsm_details_titles">'.__('Type').'</div>';
     $details_box .= '<div>';
     $details_box .= html_print_image('images/heart.png', true, ['class' => 'invert_filter']);
     $details_box .= '</div>';
@@ -104,7 +102,7 @@ if (empty($incidence) === true) {
     $details_box .= '</div>';
 
     // People box.
-    $people_box = '<div class="integriaims_details_box integriaims_details_box_three">';
+    $people_box = '<div class="pandoraitsm_details_box pandoraitsm_details_box_three">';
     $people_box .= '<div>';
     $people_box .= html_print_image('images/header_user_green.png', true, ['width' => '21']);
     $people_box .= '</div>';
@@ -115,9 +113,9 @@ if (empty($incidence) === true) {
     $people_box .= html_print_image('images/header_user_green.png', true, ['width' => '21']);
     $people_box .= '</div>';
 
-    $people_box .= '<div class="integriaims_details_titles">'.__('Created by').':</div>';
-    $people_box .= '<div class="integriaims_details_titles">'.__('Owned by').':</div>';
-    $people_box .= '<div class="integriaims_details_titles">'.__('Closed by').':</div>';
+    $people_box .= '<div class="pandoraitsm_details_titles">'.__('Created by').':</div>';
+    $people_box .= '<div class="pandoraitsm_details_titles">'.__('Owned by').':</div>';
+    $people_box .= '<div class="pandoraitsm_details_titles">'.__('Closed by').':</div>';
 
     $people_box .= '<div>';
     $people_box .= (empty($incidence['idCreator']) === false) ? $users[$incidence['idCreator']]['fullName'] : '--';
@@ -131,7 +129,7 @@ if (empty($incidence) === true) {
     $people_box .= '</div>';
 
     // Dates box.
-    $dates_box = '<div class="integriaims_details_box integriaims_details_box_three">';
+    $dates_box = '<div class="pandoraitsm_details_box pandoraitsm_details_box_three">';
     $dates_box .= '<div>';
     $dates_box .= html_print_image('images/tick.png', true, ['class' => 'invert_filter']);
     $dates_box .= '</div>';
@@ -142,9 +140,9 @@ if (empty($incidence) === true) {
     $dates_box .= html_print_image('images/mul.png', true, ['class' => 'invert_filter']);
     $dates_box .= '</div>';
 
-    $dates_box .= '<div class="integriaims_details_titles">'.__('Created at').':</div>';
-    $dates_box .= '<div class="integriaims_details_titles">'.__('Updated at').':</div>';
-    $dates_box .= '<div class="integriaims_details_titles">'.__('Closed at').':</div>';
+    $dates_box .= '<div class="pandoraitsm_details_titles">'.__('Created at').':</div>';
+    $dates_box .= '<div class="pandoraitsm_details_titles">'.__('Updated at').':</div>';
+    $dates_box .= '<div class="pandoraitsm_details_titles">'.__('Closed at').':</div>';
 
     $dates_box .= '<div>'.$incidence['startDate'].'</div>';
     $dates_box .= '<div>'.$incidence['updateDate'].'</div>';
@@ -154,7 +152,7 @@ if (empty($incidence) === true) {
     $dates_box .= '</div>';
 
     // Show details, people and dates.
-    echo '<div class="integria_details">';
+    echo '<div class="ITSM_details">';
     ui_toggle(
         $details_box,
         __('Details'),
@@ -163,8 +161,8 @@ if (empty($incidence) === true) {
         false,
         false,
         '',
-        'integria_details_content white-box-content',
-        'integria_details_shadow box-flat white_table_graph'
+        'ITSM_details_content white-box-content',
+        'ITSM_details_shadow box-flat white_table_graph'
     );
     ui_toggle(
         $people_box,
@@ -174,8 +172,8 @@ if (empty($incidence) === true) {
         false,
         false,
         '',
-        'integria_details_content white-box-content',
-        'integria_details_shadow box-flat white_table_graph'
+        'ITSM_details_content white-box-content',
+        'ITSM_details_shadow box-flat white_table_graph'
     );
     ui_toggle(
         $dates_box,
@@ -185,13 +183,13 @@ if (empty($incidence) === true) {
         false,
         false,
         '',
-        'integria_details_content white-box-content',
-        'integria_details_shadow box-flat white_table_graph'
+        'ITSM_details_content white-box-content',
+        'ITSM_details_shadow box-flat white_table_graph'
     );
     echo '</div>';
 
     // Show description.
-    $description_box = '<div class="integria_details_description">';
+    $description_box = '<div class="ITSM_details_description">';
     $description_box .= $incidence['description'];
     $description_box .= '</div>';
     ui_toggle($description_box, __('Description'), '', '', false);
diff --git a/pandora_console/views/ITSM/ITSMTicketEditView.php b/pandora_console/views/ITSM/ITSMTicketEditView.php
index d51a1aa45a..3e438c0eb2 100644
--- a/pandora_console/views/ITSM/ITSMTicketEditView.php
+++ b/pandora_console/views/ITSM/ITSMTicketEditView.php
@@ -36,7 +36,7 @@ ui_print_standard_header(
     __('ITSM Edit'),
     '',
     false,
-    'integria_tab',
+    'ITSM_tab',
     false,
     [],
     [
@@ -90,13 +90,13 @@ $table->data[0][0] = html_print_label_input_block(
     )
 );
 
-$integria_logo = 'images/integria_logo_gray.png';
+$ITSM_logo = 'images/integria_logo_gray.png';
 if ($config['style'] === 'pandora_black' && is_metaconsole() === false) {
-    $integria_logo = 'images/integria_logo.svg';
+    $ITSM_logo = 'images/integria_logo.svg';
 }
 
 $table->data[0][2] = '<div style="max-width: 150px; float:right;">'.html_print_image(
-    $integria_logo,
+    $ITSM_logo,
     true,
     ['style' => 'width: -webkit-fill-available;'],
     false
@@ -182,7 +182,7 @@ $table->data[3][1] = html_print_label_input_block(
     ),
     html_print_input_text(
         'idCreator',
-        $config['integria_user'],
+        '',
         '',
         0,
         100,
@@ -196,7 +196,7 @@ $table->data[3][1] = html_print_label_input_block(
 
 $table->data[3][2] = html_print_label_input_block(
     __('Owner').ui_print_help_tip(__('Type at least two characters to search the user.'), true),
-    html_print_autocomplete_users_from_integria(
+    html_print_autocomplete_users_from_pandora_itsm(
         'owner',
         ($incidence['owner'] ?? ''),
         true,
@@ -237,7 +237,7 @@ $table->data[5][0] = html_print_label_input_block(
     )
 );
 
-$formName = 'create_integria_incident_form';
+$formName = 'create_itsm_incident_form';
 $classForm = 'max_floating_element_size';
 $enctype = 'multipart/form-data';
 echo '<form class="'.$classForm.'" id="'.$formName.'" name="'.$formName.'" method="POST" enctype="'.$enctype.'">';
diff --git a/pandora_console/views/ITSM/ITSMTicketListView.php b/pandora_console/views/ITSM/ITSMTicketListView.php
index ea3ca378ec..b2e8d8eb8d 100644
--- a/pandora_console/views/ITSM/ITSMTicketListView.php
+++ b/pandora_console/views/ITSM/ITSMTicketListView.php
@@ -31,14 +31,12 @@ require_once $config['homedir'].'/include/class/HTML.class.php';
 
 global $config;
 
-ui_require_css_file('integriaims');
-
 // Header tabs.
 ui_print_standard_header(
     __('ITSM Tickets'),
     '',
     false,
-    'integria_tab',
+    'ITSM_tab',
     false,
     [],
     [

From dbf98689c22b850aa84b8c91dd66ad409b0b1196 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Fri, 11 Aug 2023 14:30:18 +0200
Subject: [PATCH 012/116] ITSM pandora_enterprise#11471

---
 pandora_console/extras/mr/65.sql              |   2 -
 .../godmode/alerts/alert_commands.php         | 376 ++++++++++++------
 .../godmode/alerts/configure_alert_action.php |  89 +++--
 pandora_console/include/functions_alerts.php  |  11 +-
 pandora_console/include/functions_events.php  |   3 -
 pandora_console/include/javascript/ITSM.js    |   2 +-
 pandora_console/include/lib/ITSM/ITSM.php     |  16 +-
 pandora_console/include/lib/ITSM/Manager.php  |   8 +-
 .../views/ITSM/ITSMCustomFields.php           |   2 +
 .../views/ITSM/ITSMTicketEditView.php         |   2 +-
 pandora_server/lib/PandoraFMS/Core.pm         | 340 +++++++++-------
 pandora_server/lib/PandoraFMS/Tools.pm        |  46 +++
 pandora_server/util/pandora_db.pl             |  17 +-
 13 files changed, 588 insertions(+), 326 deletions(-)

diff --git a/pandora_console/extras/mr/65.sql b/pandora_console/extras/mr/65.sql
index b610ac1671..563d00e82c 100644
--- a/pandora_console/extras/mr/65.sql
+++ b/pandora_console/extras/mr/65.sql
@@ -87,8 +87,6 @@ INSERT INTO `tmodule_inventory` (`id_module_inventory`, `id_os`, `name`, `descri
 
 ALTER TABLE `treport_content`  ADD COLUMN `period_range` INT NULL DEFAULT 0 AFTER `period`;
 
-ALTER TABLE `tusuario` MODIFY COLUMN `integria_user_level_pass` TEXT;
-
 CREATE TABLE IF NOT EXISTS `tevent_comment` (
   `id` serial PRIMARY KEY,
   `id_event` BIGINT UNSIGNED NOT NULL,
diff --git a/pandora_console/godmode/alerts/alert_commands.php b/pandora_console/godmode/alerts/alert_commands.php
index 0e48d223dd..435f161def 100644
--- a/pandora_console/godmode/alerts/alert_commands.php
+++ b/pandora_console/godmode/alerts/alert_commands.php
@@ -1,19 +1,34 @@
 <?php
+/**
+ * Alerts commands.
+ *
+ * @category   Alerts
+ * @package    Pandora FMS
+ * @subpackage Opensource
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
 
-// Pandora FMS - https://pandorafms.com
-// ==================================================
-// Copyright (c) 2005-2023 Pandora FMS
-// Please see https://pandorafms.com/community/ for full contribution list
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the GNU General Public License
-// as published by the Free Software Foundation for version 2.
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-// Load global vars.
 use PandoraFMS\ITSM\ITSM;
 
+// Load global vars.
 global $config;
 
 require_once $config['homedir'].'/include/functions_alerts.php';
@@ -53,9 +68,9 @@ if (is_ajax()) {
         $get_recovery_fields = (int) get_parameter('get_recovery_fields', 1);
 
         // Snmp alerts are not in the metaconsole so they cannot be centralized.
-        $is_management_allowed = false;
+        $management_is_not_allowed = false;
         if ($get_recovery_fields !== 0) {
-            $is_management_allowed = !is_management_allowed();
+            $management_is_not_allowed = !is_management_allowed();
         }
 
         // If command ID is not provided, check for action id.
@@ -137,6 +152,17 @@ if (is_ajax()) {
 
             $style = ((int) $field_hidden === 1) ? '-webkit-text-security: disc; font-family: text-security-disc;' : '';
 
+            $recovery_disabled = 0;
+            if (empty($command) === false && $command['name'] === io_safe_input('Integria IMS Ticket')) {
+                if ($management_is_not_allowed == 0) {
+                    if (preg_match('/^_html_editor_$/i', $field_value) || $field_description === 'Ticket status') {
+                        $recovery_disabled = 0;
+                    } else {
+                        $recovery_disabled = 1;
+                    }
+                }
+            }
+
             if (!empty($field_value)) {
                 $field_value = io_safe_output($field_value);
                 // HTML type.
@@ -152,7 +178,7 @@ if (is_ajax()) {
                         0,
                         '',
                         false,
-                        $is_management_allowed,
+                        $management_is_not_allowed,
                         "UndefineTinyMCE('#textarea_field".$i."_value')",
                         '',
                         true
@@ -164,7 +190,7 @@ if (is_ajax()) {
                         0,
                         '',
                         true,
-                        $is_management_allowed,
+                        $management_is_not_allowed,
                         "defineTinyMCE('#textarea_field".$i."_value')",
                         '',
                         true
@@ -179,7 +205,7 @@ if (is_ajax()) {
                         'class="fields w100p"',
                         true,
                         '',
-                        $is_management_allowed
+                        $management_is_not_allowed
                     );
 
                     $editor_type_chkbx = '<div id="command_div"><b><small>';
@@ -189,7 +215,7 @@ if (is_ajax()) {
                         0,
                         '',
                         false,
-                        $is_management_allowed,
+                        $management_is_not_allowed,
                         "UndefineTinyMCE('#textarea_field".$i."_recovery_value')",
                         '',
                         true
@@ -201,7 +227,7 @@ if (is_ajax()) {
                         0,
                         '',
                         true,
-                        $is_management_allowed,
+                        $management_is_not_allowed,
                         "defineTinyMCE('#textarea_field".$i."_recovery_value')",
                         '',
                         true
@@ -216,7 +242,7 @@ if (is_ajax()) {
                         'class="fields_recovery"',
                         true,
                         '',
-                        $is_management_allowed
+                        $management_is_not_allowed || $recovery_disabled
                     );
                 } else if (preg_match('/^_content_type_$/i', $field_value)) {
                     $editor_type_chkbx = '<div id="command_div"><b><small>';
@@ -230,7 +256,7 @@ if (is_ajax()) {
                         'text/plain',
                         '',
                         '',
-                        $is_management_allowed,
+                        $management_is_not_allowed,
                         '',
                         '',
                         true
@@ -242,7 +268,7 @@ if (is_ajax()) {
                         'text/html',
                         '',
                         'text/html',
-                        $is_management_allowed,
+                        $management_is_not_allowed,
                         '',
                         '',
                         true
@@ -261,7 +287,7 @@ if (is_ajax()) {
                         'text/plain',
                         '',
                         '',
-                        $is_management_allowed,
+                        $management_is_not_allowed,
                         '',
                         '',
                         true
@@ -273,7 +299,7 @@ if (is_ajax()) {
                         'text/html',
                         '',
                         'text/html',
-                        $is_management_allowed,
+                        $management_is_not_allowed,
                         '',
                         '',
                         true
@@ -282,95 +308,196 @@ if (is_ajax()) {
                     $rfield = $editor_type_chkbx;
                     // Select type.
                 } else if (preg_match('/^_custom_field_ITSM_$/i', $field_value)) {
-                        $ffield = '';
-                        $rfield = '';
+                    $ffield = '';
+                    $rfield = '';
 
-                        $ffield .= '<div name="field'.$i.'_value_container">'.html_print_switch(
-                            [
-                                'name'  => 'field'.$i.'_value[]',
-                                'value' => '',
-                            ]
-                        ).'</div>';
-                        $rfield .= '<div name="field'.$i.'_recovery_value_container">'.html_print_switch(
-                            [
-                                'name'  => 'field'.$i.'_recovery_value[]',
-                                'value' => '',
-                            ]
-                        ).'</div>';
+                    $ffield .= '<div name="field'.$i.'_value_container">'.html_print_switch(
+                        [
+                            'name'  => 'field'.$i.'_value[]',
+                            'value' => '',
+                        ]
+                    ).'</div>';
+                    $rfield .= '<div name="field'.$i.'_recovery_value_container">'.html_print_switch(
+                        [
+                            'name'     => 'field'.$i.'_recovery_value[]',
+                            'value'    => '',
+                            'disabled' => $management_is_not_allowed || $recovery_disabled,
+                        ]
+                    ).'</div>';
 
-                        $ffield .= html_print_select(
-                            '',
-                            'field'.$i.'_value[]',
-                            '',
-                            '',
-                            __('None'),
-                            '',
-                            true,
-                            false,
-                            false,
-                            'fields',
-                            $is_management_allowed,
-                            'width: 100%;',
-                            false,
-                            false,
-                            false,
-                            '',
-                            false,
-                            false,
-                            false,
-                            false,
-                            false
-                        );
+                    $ffield .= html_print_select(
+                        '',
+                        'field'.$i.'_value[]',
+                        '',
+                        '',
+                        __('None'),
+                        '',
+                        true,
+                        false,
+                        false,
+                        'fields',
+                        $management_is_not_allowed,
+                        'width: 100%;',
+                        false,
+                        false,
+                        false,
+                        '',
+                        false,
+                        false,
+                        false,
+                        false,
+                        false
+                    );
 
-                        $rfield .= html_print_select(
-                            '',
-                            'field'.$i.'_recovery_value[]',
-                            '',
-                            '',
-                            __('None'),
-                            '',
-                            true,
-                            false,
-                            false,
-                            'fields',
-                            $is_management_allowed,
-                            'width: 100%;',
-                            false,
-                            false,
-                            false,
-                            '',
-                            false,
-                            false,
-                            false,
-                            false,
-                            false
-                        );
+                    $rfield .= html_print_select(
+                        '',
+                        'field'.$i.'_recovery_value[]',
+                        '',
+                        '',
+                        __('None'),
+                        '',
+                        true,
+                        false,
+                        false,
+                        'fields',
+                        $management_is_not_allowed || $recovery_disabled,
+                        'width: 100%;',
+                        false,
+                        false,
+                        false,
+                        '',
+                        false,
+                        false,
+                        false,
+                        false,
+                        false
+                    );
 
-                        $ffield .= html_print_input_text('field'.$i.'_value[]', '', '', 10, 10, true, false, false, '', 'datepicker');
-                        $rfield .= html_print_input_text('field'.$i.'_recovery_value[]', '', '', 10, 10, true, false, false, '', 'datepicker');
+                    $ffield .= html_print_input_text(
+                        'field'.$i.'_value[]',
+                        '',
+                        '',
+                        10,
+                        10,
+                        true,
+                        false,
+                        false,
+                        '',
+                        'datepicker',
+                        '',
+                        'off',
+                        false,
+                        false,
+                        '',
+                        '',
+                        $management_is_not_allowed
+                    );
+                    $rfield .= html_print_input_text(
+                        'field'.$i.'_recovery_value[]',
+                        '',
+                        '',
+                        10,
+                        10,
+                        true,
+                        false,
+                        false,
+                        '',
+                        'datepicker',
+                        '',
+                        'off',
+                        false,
+                        false,
+                        '',
+                        '',
+                        $management_is_not_allowed || $recovery_disabled
+                    );
 
-                        $ffield .= html_print_textarea(
-                            'field'.$i.'_value[]',
-                            5,
-                            1,
-                            '',
-                            'style="min-height:40px; '.$style.'" class="fields"',
-                            true,
-                            '',
-                            $is_management_allowed
-                        );
+                    $ffield .= html_print_textarea(
+                        'field'.$i.'_value[]',
+                        5,
+                        1,
+                        '',
+                        'style="min-height:40px; '.$style.'" class="fields"',
+                        true,
+                        '',
+                        $management_is_not_allowed
+                    );
 
+                    $rfield .= html_print_textarea(
+                        'field'.$i.'_recovery_value[]',
+                        5,
+                        1,
+                        '',
+                        'style="min-height:40px; '.$style.'" class="fields_recovery',
+                        true,
+                        '',
+                        $management_is_not_allowed || $recovery_disabled
+                    );
 
-                        $rfield .= html_print_textarea(
-                            'field'.$i.'_recovery_value[]',
-                            5,
-                            1,
-                            '',
-                            'style="min-height:40px; '.$style.'" class="fields_recovery',
-                            true,
-                            '',
-                            $is_management_allowed
-                        );
+                    $values_input_number = [
+                        'name'   => 'field'.$i.'_value[]',
+                        'value'  => 0,
+                        'id'     => 'field'.$i.'_value',
+                        'return' => true,
+                    ];
+
+                    if ($management_is_not_allowed === true) {
+                        $values_input_number['disabled'] = true;
+                    }
+
+                    $ffield .= html_print_input_number($values_input_number);
+
+                    $values_input_number_recovery = [
+                        'name'   => 'field'.$i.'_recovery_value[]',
+                        'value'  => 0,
+                        'id'     => 'field'.$i.'_recovery_value',
+                        'return' => true,
+                    ];
+
+                    if ($management_is_not_allowed || $recovery_disabled) {
+                        $values_input_number_recovery['disabled'] = true;
+                    }
+
+                    $rfield .= html_print_input_number($values_input_number_recovery);
+
+                    $ffield .= html_print_input_text(
+                        'field'.$i.'_value[]',
+                        '',
+                        '',
+                        50,
+                        255,
+                        true,
+                        false,
+                        false,
+                        '',
+                        'normal w98p',
+                        '',
+                        'off',
+                        false,
+                        false,
+                        '',
+                        '',
+                        $management_is_not_allowed
+                    );
+                    $rfield .= html_print_input_text(
+                        'field'.$i.'_recovery_value[]',
+                        '',
+                        '',
+                        50,
+                        255,
+                        true,
+                        false,
+                        false,
+                        '',
+                        'normal w98p',
+                        '',
+                        'off',
+                        false,
+                        false,
+                        '',
+                        '',
+                        $management_is_not_allowed || $recovery_disabled
+                    );
                 } else if (str_starts_with($field_value, '_ITSM_')) {
                     $nothing = '';
                     $nothing_value = 0;
@@ -441,7 +568,7 @@ if (is_ajax()) {
                             false,
                             false,
                             'fields',
-                            $is_management_allowed
+                            $management_is_not_allowed
                         );
 
                         $rfield = html_print_select(
@@ -455,11 +582,28 @@ if (is_ajax()) {
                             false,
                             false,
                             'fields_recovery',
-                            $is_management_allowed
+                            $management_is_not_allowed || $recovery_disabled
                         );
                     } else {
-                        $ffield = 'TODO';
-                        $rfield = 'TODO';
+                        $ffield = html_print_autocomplete_users_from_pandora_itsm(
+                            'field'.$i.'_value',
+                            '',
+                            true,
+                            0,
+                            $management_is_not_allowed,
+                            false,
+                            ''
+                        );
+
+                        $rfield = html_print_autocomplete_users_from_pandora_itsm(
+                            'field'.$i.'_recovery_value',
+                            '',
+                            true,
+                            0,
+                            $management_is_not_allowed || $recovery_disabled,
+                            false,
+                            ''
+                        );
                     }
                 } else {
                     $fields_value_select = [];
@@ -578,7 +722,7 @@ if (is_ajax()) {
                             false,
                             false,
                             'fields',
-                            $is_management_allowed
+                            $management_is_not_allowed
                         );
                         $rfield = html_print_select(
                             $fields_value_select,
@@ -591,7 +735,7 @@ if (is_ajax()) {
                             false,
                             false,
                             'fields_recovery',
-                            $is_management_allowed
+                            $management_is_not_allowed || $recovery_disabled
                         );
                     } else {
                         $ffield = html_print_textarea(
@@ -602,7 +746,7 @@ if (is_ajax()) {
                             'style="'.$style.'" class="fields min-height-40px w100p"',
                             true,
                             '',
-                            $is_management_allowed
+                            $management_is_not_allowed
                         );
                         $rfield = html_print_textarea(
                             'field'.$i.'_recovery_value',
@@ -612,7 +756,7 @@ if (is_ajax()) {
                             'style="'.$style.'" class="fields_recovery min-height-40px w100p',
                             true,
                             '',
-                            $is_management_allowed
+                            $management_is_not_allowed || $recovery_disabled
                         );
                     }
                 }
@@ -625,7 +769,7 @@ if (is_ajax()) {
                     'style="'.$style.'" class="fields min-height-40px w100p"',
                     true,
                     '',
-                    $is_management_allowed
+                    $management_is_not_allowed
                 );
                 $rfield = html_print_textarea(
                     'field'.$i.'_recovery_value',
@@ -635,7 +779,7 @@ if (is_ajax()) {
                     'style="'.$style.'" class="fields_recovery min-height-40px w100p"',
                     true,
                     '',
-                    $is_management_allowed
+                    $management_is_not_allowed || $recovery_disabled
                 );
             }
 
diff --git a/pandora_console/godmode/alerts/configure_alert_action.php b/pandora_console/godmode/alerts/configure_alert_action.php
index 94beff6a83..c2b3d9cbcf 100644
--- a/pandora_console/godmode/alerts/configure_alert_action.php
+++ b/pandora_console/godmode/alerts/configure_alert_action.php
@@ -170,8 +170,8 @@ if ($id) {
         $action['field3_recovery'] = ($action['field3'] ?? $config['default_criticity']);
         $action['field4_recovery'] = ($action['field4'] ?? $config['default_owner']);
         $action['field5_recovery'] = ($action['field5'] ?? $config['incident_type']);
-        $action['field6_recovery'] = ($action['field6'] ?? $config['incident_status']);
-        $action['field7_recovery'] = ($action['field7'] ?? $config['incident_content']);
+        $action['field6_recovery'] = ($action['field6_recovery'] ?? $config['incident_status']);
+        $action['field7_recovery'] = ($action['field7_recovery'] ?? $config['incident_content']);
     }
 
     $group = $action['id_group'];
@@ -378,24 +378,26 @@ $table_macros->data[1][2] = html_print_label_input_block(
     )
 );
 
-// Selector will work only with Integria activated.
-$integriaIdName = 'integria_wu';
-$table_macros->colspan[$integriaIdName][0] = 3;
-$table_macros->data[$integriaIdName][0] = html_print_label_input_block(
-    __('Create workunit on recovery').ui_print_help_tip(
-        __('If closed status is set on recovery, a workunit will be added to the ticket in Integria IMS rather that closing the ticket.'),
-        true
-    ),
-    html_print_checkbox_switch_extended(
-        'create_wu_integria',
-        1,
-        $create_wu_integria,
-        false,
-        '',
-        $disabled_attr,
-        true
-    )
-);
+if (empty($command) === false && $command['name'] === io_safe_input('Integria IMS Ticket')) {
+    // Selector will work only with Integria activated.
+    $integriaIdName = 'integria_wu';
+    $table_macros->colspan[$integriaIdName][0] = 3;
+    $table_macros->data[$integriaIdName][0] = html_print_label_input_block(
+        __('Create workunit on recovery').ui_print_help_tip(
+            __('If closed status is set on recovery, a workunit will be added to the ticket in Integria IMS rather that closing the ticket.'),
+            true
+        ),
+        html_print_checkbox_switch_extended(
+            'create_wu_integria',
+            1,
+            $create_wu_integria,
+            false,
+            '',
+            $disabled_attr,
+            true
+        )
+    );
+}
 
 for ($i = 1; $i <= $config['max_macro_fields']; $i++) {
     $table_macros->data['field'.$i][0] = html_print_image(
@@ -546,8 +548,8 @@ $(document).ready (function () {
 
                 switch (custom_field.type) {
                     case 'CHECKBOX':
-                        var checkbox_selector = $('input:not(.datepicker)[name=field'+custom_field_key+'_value\\[\\]]');
-                        var checkbox_recovery_selector = $('input:not(.datepicker)[name=field'+custom_field_key+'_recovery_value\\[\\]]');
+                        var checkbox_selector = $('input[type="checkbox"][name=field'+custom_field_key+'_value\\[\\]]');
+                        var checkbox_recovery_selector = $('input[type="checkbox"][name=field'+custom_field_key+'_recovery_value\\[\\]]');
 
                         checkbox_selector.on('change', function() {
                             if (checkbox_selector.prop('checked')) {
@@ -587,8 +589,8 @@ $(document).ready (function () {
 
                         $('[name=field'+custom_field_key+'_value_container]').show();
                         $('[name=field'+custom_field_key+'_recovery_value_container]').show();
-                        $('input:not(.datepicker)[name=field'+custom_field_key+'_value\\[\\]]').show();
-                        $('input:not(.datepicker)[name=field'+custom_field_key+'_recovery_value\\[\\]]').show();
+                        $('input[type="checkbox"][name=field'+custom_field_key+'_value\\[\\]]').show();
+                        $('input[type="checkbox"][name=field'+custom_field_key+'_recovery_value\\[\\]]').show();
                     break;
                     case 'COMBO':
                         var combo_input = $('select[name=field'+custom_field_key+'_value\\[\\]]');
@@ -627,11 +629,10 @@ $(document).ready (function () {
                         $('input.datepicker[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').removeClass("hasDatepicker");
                         $('input.datepicker[type="text"][name=field'+custom_field_key+'_value\\[\\]]').datepicker("destroy");
                         $('input.datepicker[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').datepicker("destroy");
-
                         $('input.datepicker[type="text"][name=field'+custom_field_key+'_value\\[\\]]').show();
                         $('input.datepicker[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').show();
-                        $('input.datepicker[type="text"][name=field'+custom_field_key+'_value\\[\\]]').datepicker({dateFormat: "<?php echo DATE_FORMAT_JS; ?>"});
-                        $('input.datepicker[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').datepicker({dateFormat: "<?php echo DATE_FORMAT_JS; ?>"});
+                        $('input.datepicker[type="text"][name=field'+custom_field_key+'_value\\[\\]]').datepicker({dateFormat: "<?php echo 'yy-mm-dd 00:00:00'; ?>"});
+                        $('input.datepicker[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').datepicker({dateFormat: "<?php echo 'yy-mm-dd 00:00:00'; ?>"});
                         $.datepicker.setDefaults($.datepicker.regional[ "<?php echo get_user_language(); ?>"]);
 
                         if (typeof values[key] !== "undefined") {
@@ -642,9 +643,31 @@ $(document).ready (function () {
                             $('input.datepicker[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').val(recovery_values[key]);
                         }
                     break;
-                    case 'TEXT':
-                    case 'TEXTAREA':
                     case 'NUMERIC':
+                        if (typeof values[key] !== "undefined") {
+                            $('input[type="number"][name=field'+custom_field_key+'_value\\[\\]]').val(values[key]);
+                        }
+
+                        if (typeof recovery_values[key] !== "undefined") {
+                            $('input[type="number"][name=field'+custom_field_key+'_recovery_value\\[\\]]').val(recovery_values[key]);
+                        }
+
+                        $('input[type="number"][name=field'+custom_field_key+'_value\\[\\]]').show();
+                        $('input[type="number"][name=field'+custom_field_key+'_recovery_value\\[\\]]').show();
+                    break;
+                    case 'TEXT':
+                        if (typeof values[key] !== "undefined") {
+                            $('input.normal[type="text"][name=field'+custom_field_key+'_value\\[\\]]').val(values[key]);
+                        }
+
+                        if (typeof recovery_values[key] !== "undefined") {
+                            $('input.normal[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').val(recovery_values[key]);
+                        }
+
+                        $('input.normal[type="text"][name=field'+custom_field_key+'_value\\[\\]]').show();
+                        $('input.normal[type="text"][name=field'+custom_field_key+'_recovery_value\\[\\]]').show();
+                    break;
+                    case 'TEXTAREA':
                     default:
                         if (typeof values[key] !== "undefined") {
                             $('textarea[name=field'+custom_field_key+'_value\\[\\]]').val(values[key]);
@@ -695,13 +718,6 @@ $(document).ready (function () {
                 } else {
                     render_command_description('');
                 }
-                
-                // Allow create workunit if Integria IMS Ticket is selected.
-                if (data['id'] == '14') {
-                    $("#table_macros-"+integriaWorkUnitName).css('display', 'table-row');
-                } else {
-                    $("#table_macros-"+integriaWorkUnitName).css('display', 'none');
-                }
 
                 var max_fields = parseInt('<?php echo $config['max_macro_fields']; ?>');
                 
@@ -831,7 +847,6 @@ $(document).ready (function () {
 
                             
                             $("[name=field" + i + "_recovery_value]").val(old_recovery_value);
-
                             if (is_element_select === true) {
                                 $("[name=field" + i + "_recovery_value]").trigger('change');
                             }
diff --git a/pandora_console/include/functions_alerts.php b/pandora_console/include/functions_alerts.php
index 8d51a3b536..1493d269b6 100644
--- a/pandora_console/include/functions_alerts.php
+++ b/pandora_console/include/functions_alerts.php
@@ -2683,6 +2683,11 @@ function alerts_ui_update_or_create_actions($update=true)
     $values = [];
     for ($i = 1; $i <= $config['max_macro_fields']; $i++) {
         $field_value = get_parameter('field'.$i.'_value');
+        if (empty(get_parameter('field'.$i.'_value_hidden')) === false) {
+            $field_value = get_parameter('field'.$i.'_value_hidden');
+        } else {
+            $field_value = get_parameter('field'.$i.'_value');
+        }
 
         if (is_array($field_value)) {
             $field_value = reset(array_filter($field_value));
@@ -2695,7 +2700,11 @@ function alerts_ui_update_or_create_actions($update=true)
         $values['field'.$i] = (string) $field_value;
         $info_fields .= ' Field'.$i.': '.$values['field'.$i];
 
-        $field_recovery_value = get_parameter('field'.$i.'_recovery_value');
+        if (empty(get_parameter('field'.$i.'_recovery_value_hidden')) === false) {
+            $field_recovery_value = get_parameter('field'.$i.'_recovery_value_hidden');
+        } else {
+            $field_recovery_value = get_parameter('field'.$i.'_recovery_value');
+        }
 
         if (is_array($field_recovery_value)) {
             $field_recovery_value = reset(array_filter($field_recovery_value));
diff --git a/pandora_console/include/functions_events.php b/pandora_console/include/functions_events.php
index 49007aaca1..0bbb97a22b 100644
--- a/pandora_console/include/functions_events.php
+++ b/pandora_console/include/functions_events.php
@@ -4988,9 +4988,6 @@ function events_page_general($event)
         }
 
         $data[1] = $user_ack.'&nbsp;(&nbsp;';
-        // hd($config['date_format'], true);
-        // hd($event['ack_utimestamp_raw'], true);
-        // TODO: mirar en el manage y en la api que este ack de venir vacio lo herede del anterior que hubiera.
         if ($event['ack_utimestamp_raw'] !== false
             && $event['ack_utimestamp_raw'] !== 'false'
             && empty($event['ack_utimestamp_raw']) === false
diff --git a/pandora_console/include/javascript/ITSM.js b/pandora_console/include/javascript/ITSM.js
index 43684fce31..b07aba4c8f 100644
--- a/pandora_console/include/javascript/ITSM.js
+++ b/pandora_console/include/javascript/ITSM.js
@@ -16,7 +16,7 @@ function getInputFieldsIncidenceType(idIncidenceType, fieldsData, ajaxUrl) {
 
   // Visual Console container request.
   jQuery
-    .get(
+    .post(
       ajaxUrl,
       {
         page: "operation/ITSM/itsm",
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index 03f2f0b047..82e011d020 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -255,16 +255,16 @@ class ITSM
         }
 
         if (empty($queryParams) === false) {
-            if (isset($queryParams['direction']) === true) {
-                $queryParams['sortDirection'] = $queryParams['direction'];
-                unset($queryParams['direction']);
-            }
-
             if (isset($queryParams['field']) === true) {
                 $queryParams['sortField'] = $queryParams['field'];
                 unset($queryParams['field']);
             }
 
+            if (isset($queryParams['direction']) === true) {
+                $queryParams['sortDirection'] = $queryParams['direction'];
+                unset($queryParams['direction']);
+            }
+
             $path .= '?';
             $path .= http_build_query($queryParams);
         }
@@ -369,8 +369,10 @@ class ITSM
         $result = $this->callApi(
             'incidenceTypeFields',
             [
-                'page'     => 0,
-                'sizePage' => 0,
+                'page'      => 0,
+                'sizePage'  => 0,
+                'field'     => 'idIncidenceTypeField',
+                'direction' => 'ascending',
             ],
             [],
             $idIncidenceType
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 8d7e8b414b..2db51874c0 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -527,8 +527,10 @@ class Manager
         $result = $ITSM->callApi(
             'incidenceTypeFields',
             [
-                'page'     => 0,
-                'sizePage' => 0,
+                'page'      => 0,
+                'sizePage'  => 0,
+                'field'     => 'idIncidenceTypeField',
+                'direction' => 'ascending',
             ],
             [],
             $idIncidenceType
@@ -1125,7 +1127,7 @@ class Manager
     public function getInputFieldsIncidenceType()
     {
         $idIncidenceType = (int) get_parameter('idIncidenceType', true);
-        $fieldsData = json_decode(io_safe_output(get_parameter('fieldsData', [])), true);
+        $fieldsData = json_decode(base64_decode(get_parameter('fieldsData')), true);
         if (empty($fieldsData) === false) {
             $fieldsData = array_reduce(
                 $fieldsData,
diff --git a/pandora_console/views/ITSM/ITSMCustomFields.php b/pandora_console/views/ITSM/ITSMCustomFields.php
index 378c7d3151..efdb9c0ef3 100644
--- a/pandora_console/views/ITSM/ITSMCustomFields.php
+++ b/pandora_console/views/ITSM/ITSMCustomFields.php
@@ -67,10 +67,12 @@ if (empty($customFields) === true) {
             break;
 
             case 'CHECKBOX':
+                $options['checked'] = ($fieldsData[$field['idIncidenceTypeField']] ?? null);
                 $options['type'] = 'checkbox';
             break;
 
             case 'DATE':
+                $options['value'] = ($fieldsData[$field['idIncidenceTypeField']] ?? null);
                 $options['type'] = 'text';
             break;
 
diff --git a/pandora_console/views/ITSM/ITSMTicketEditView.php b/pandora_console/views/ITSM/ITSMTicketEditView.php
index 3e438c0eb2..f534ffa870 100644
--- a/pandora_console/views/ITSM/ITSMTicketEditView.php
+++ b/pandora_console/views/ITSM/ITSMTicketEditView.php
@@ -274,7 +274,7 @@ ui_require_javascript_file('tinymce', 'vendor/tinymce/tinymce/');
 <script type="text/javascript">
     $(document).ready(function () {
         var ajax_url = '<?php echo ui_get_full_url('ajax.php'); ?>';
-        var fieldsData = '<?php echo json_encode($incidence['typeFieldData']); ?>';
+        var fieldsData = '<?php echo base64_encode(json_encode($incidence['typeFieldData'])); ?>';
 
         defineTinyMCE('#textarea_description');
 
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 31774f61c5..6ef6130dd4 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -263,7 +263,6 @@ our @EXPORT = qw(
 	pandora_thread_monitoring
 	pandora_process_policy_queue
 	pandora_sync_agents_integria
-	pandora_get_integria_ticket_types
 	subst_alert_macros
 	subst_column_macros
 	locate_agent
@@ -1841,16 +1840,14 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 	
 	# Integria IMS Ticket
 	} elsif ($clean_name eq "Integria IMS Ticket") {
-		my $config_integria_enabled = pandora_get_tconfig_token ($dbh, 'integria_enabled', '');
-
-		if (!$config_integria_enabled) {
+		my $config_ITSM_enabled = pandora_get_tconfig_token ($dbh, 'ITSM_enabled', '');
+		if (!$config_ITSM_enabled) {
 			return;
 		}
 
-		my $config_api_path = pandora_get_tconfig_token ($dbh, 'integria_hostname', '');
-		my $config_api_pass = pandora_get_tconfig_token ($dbh, 'integria_api_pass', '');
-		my $config_integria_user = pandora_get_tconfig_token ($dbh, 'integria_user', '');
-		my $config_integria_user_pass = pandora_get_tconfig_token ($dbh, 'integria_pass', '');
+		my $ITSM_path = pandora_get_tconfig_token ($dbh, 'ITSM_hostname', '');
+		my $ITSM_token = pandora_get_tconfig_token ($dbh, 'ITSM_token', '');
+
 		$field1 = subst_alert_macros ($field1, \%macros, $pa_config, $dbh, $agent, $module, $alert);
 		$field2 = subst_alert_macros ($field2, \%macros, $pa_config, $dbh, $agent, $module, $alert);
 		$field3 = subst_alert_macros ($field3, \%macros, $pa_config, $dbh, $agent, $module, $alert);
@@ -1871,18 +1868,6 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		$field18 = subst_alert_macros ($field18, \%macros, $pa_config, $dbh, $agent, $module, $alert);
 		$field19 = subst_alert_macros ($field19, \%macros, $pa_config, $dbh, $agent, $module, $alert);
 		$field20 = subst_alert_macros ($field20, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-
-		# Field 1 (Integria IMS API path)
-		my $api_path = $config_api_path . "/include/api.php";
-		
-		# Field 2 (Integria IMS API pass)
-		my $api_pass = $config_api_pass;
-		
-		# Field 3 (Integria IMS user)
-		my $integria_user = $config_integria_user;
-		
-		# Field 4 (Integria IMS user password)
-		my $integria_user_pass = $config_integria_user_pass;
 		
 		# Field 1 (Ticket name)
 		my $ticket_name = safe_output($field1);
@@ -1893,7 +1878,7 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		# Field 2 (Ticket group ID)
 		my $ticket_group_id = $field2;
 		if ($ticket_group_id eq '') {
-			$ticket_group_id = 0;
+			$ticket_group_id = 1;
 		}
 		
 		# Field 3 (Ticket priority);
@@ -1921,31 +1906,192 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		}
 
 		# Field 7 (Ticket description);
-		my $ticket_description = safe_output($field7);
+		my $ticket_description = subst_alert_macros(safe_output($field7), \%macros, $pa_config, $dbh, $agent, $module, $alert);
 
-		my $create_wu_on_close_recovery = 0;
+		my $external_id = $agent->{'nombre'} . '-' . $module->{'id_agente'} . '-' . $module->{'id_agente_modulo'};
 
-		if ($alert_mode == RECOVERED_ALERT && $action->{'create_wu_integria'} == '1') {
-			$create_wu_on_close_recovery = 1;
+		# if recovered
+		if ($alert_mode == RECOVERED_ALERT) {
+			# Check exit incidence.
+			my %filter_incidence = ('externalId' => $external_id, 'blocked' => '0');
+			my $existIncidence = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/list', $ITSM_token, \%filter_incidence);
+			if (!defined($existIncidence)){
+				return;
+			}
+
+			my $id_incidence = 0;
+			my $incidence_data = p_decode_json($pa_config, $existIncidence);
+			# If exist update state and add new workunit if necessary.
+			if(!is_empty($incidence_data->{'data'})) {
+				my %data_incidence = (
+					'status' => $ticket_status
+				);
+
+				$id_incidence = $incidence_data->{'data'}[0]->{'idIncidence'};
+				my $updateIncidence = pandora_API_ITSM_call($pa_config, 'put', $ITSM_path . '/incidence/' . $id_incidence, $ITSM_token, \%data_incidence);
+				if (!defined($updateIncidence)){
+					return;
+				}
+				if ($action->{'create_wu_integria'} == '1') {
+					my %data_workunit = (
+						'description' => $ticket_description
+					);
+					my $createWorkunit = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/' . $id_incidence . '/workunit', $ITSM_token, \%data_workunit);
+					if (!defined($createWorkunit)){
+						return;
+					}
+				}
+			}
+			return;
 		}
 
 		# Ticket type custom fields
-		my $ticket_custom_field1 = $field8;
-		my $ticket_custom_field2 = $field9;
-		my $ticket_custom_field3 = $field10;
-		my $ticket_custom_field4 = $field11;
-		my $ticket_custom_field5 = $field12;
-		my $ticket_custom_field6 = $field13;
-		my $ticket_custom_field7 = $field14;
-		my $ticket_custom_field8 = $field15;
-		my $ticket_custom_field9 = $field16;
-		my $ticket_custom_field10 = $field17;
-		my $ticket_custom_field11 = $field18;
-		my $ticket_custom_field12 = $field19;
-		my $ticket_custom_field13 = $field20;
+		my %custom_fields = (
+			'field0' => subst_alert_macros(safe_output($field8), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field1' => subst_alert_macros(safe_output($field9), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field2' => subst_alert_macros(safe_output($field10), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field3' => subst_alert_macros(safe_output($field11), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field4' => subst_alert_macros(safe_output($field12), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field5' => subst_alert_macros(safe_output($field13), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field6' => subst_alert_macros(safe_output($field14), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field7' => subst_alert_macros(safe_output($field15), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field8' => subst_alert_macros(safe_output($field16), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field9' => subst_alert_macros(safe_output($field17), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field10' => subst_alert_macros(safe_output($field18), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field11' => subst_alert_macros(safe_output($field19), \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'field12' => subst_alert_macros(safe_output($field20), \%macros, $pa_config, $dbh, $agent, $module, $alert)
+		);
 
-		pandora_create_integria_ticket($pa_config, $api_path, $api_pass, $integria_user, $integria_user_pass, $agent->{'nombre'}, $agent->{'alias'}, $agent->{'id_os'}, $agent->{'direccion'}, $agent->{'id_agente'}, $agent->{'id_grupo'}, $ticket_name, $ticket_group_id, $ticket_priority, $ticket_owner, $ticket_type, $ticket_status, $ticket_description, $create_wu_on_close_recovery, $ticket_custom_field1, $ticket_custom_field2, $ticket_custom_field3, $ticket_custom_field4, $ticket_custom_field5, $ticket_custom_field6, $ticket_custom_field7, $ticket_custom_field8, $ticket_custom_field9, $ticket_custom_field10, $ticket_custom_field11, $ticket_custom_field12, $ticket_custom_field13);
+		# Check exit inventory object.
+		my %filter_inventory = ('idPandora' => $agent->{'nombre'});
+		my $existInventory = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/inventory/list', $ITSM_token, \%filter_inventory);
+		if (!defined($existInventory)){
+			return;
+		}
 
+		my $id_inventory = 0;
+		my $inventory_data = p_decode_json($pa_config, $existInventory);
+		my %data_inventory = (
+			"name" => $agent->{'alias'},
+			"isPublic" => \0,
+			"idObjectType" => 2,
+			"isShowInList" => \0,
+			"status" => "new",
+			"idPandora" => $agent->{'nombre'},
+			"typeFieldData" => [
+				{
+					"idInventoryField" => 12,
+					"data" => $agent->{'id_os'}
+				},
+				{
+					"idInventoryField" => 13,
+					"data" => $agent->{'direccion'}
+				},
+				{
+					"idInventoryField" => 15,
+					"data" => $agent->{'id_agente'}
+				},
+				{
+					"idInventoryField" => 46,
+					"data" => $agent->{'id_grupo'}
+				},
+			]
+		);
+
+		# If not exit inventory object create, if exist update.
+		if(is_empty($inventory_data->{'data'})) {
+			my $insertInventory = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/inventory', $ITSM_token, \%data_inventory);
+			if (!defined($insertInventory)){
+				return;
+			}
+			my $inventory = p_decode_json($pa_config, $insertInventory);
+			$id_inventory = $inventory->{'idInventory'};
+		} else {
+			$id_inventory = $inventory_data->{'data'}[0]->{'idInventory'};
+			my $updateInventory = pandora_API_ITSM_call($pa_config, 'put', $ITSM_path . '/inventory/' . $id_inventory, $ITSM_token, \%data_inventory);
+			if (!defined($updateInventory)){
+				return;
+			}
+		}
+		
+		# List field incidence type.
+		my @fields = ();
+		if($ticket_type ne '' && $ticket_type ne '0') {
+			my %filter_incidence_type = ();
+			my $path_list_fields = $ITSM_path . '/incidencetype/' . $ticket_type . '/field/list?sortField=idIncidenceTypeField&sortDirection=ascending';
+			my $listFields = pandora_API_ITSM_call($pa_config, 'post', $path_list_fields, $ITSM_token, \%filter_incidence_type);
+			if (!defined($listFields)){
+				return;
+			}
+
+			my $listFields_data = p_decode_json($pa_config, $listFields);
+			if(!is_empty($listFields_data->{'data'})) {
+				my $i = 0;
+				foreach my $field (@{$listFields_data->{'data'}}) {
+					$fields[$i] = {"idIncidenceTypeField" => $field->{'idIncidenceTypeField'}, "data" => $custom_fields{'field' . $i}};
+					$i++;
+				}
+			}
+		}
+
+		# Check exit incidence.
+		my %filter_incidence = ('externalId' => $external_id, 'blocked' => '0');
+		my $existIncidence = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/list', $ITSM_token, \%filter_incidence);
+		if (!defined($existIncidence)){
+			return;
+		}
+
+		my $id_incidence = 0;
+		my $incidence_data = p_decode_json($pa_config, $existIncidence);
+		my %data_incidence = (
+    	'title' => $ticket_name,
+		  'idGroup' => $ticket_group_id,
+		  'priority' => $ticket_priority,
+		  'owner' => $ticket_owner,
+		  'idIncidenceType' => $ticket_type,
+		  'status' => $ticket_status,
+		  'description' => $ticket_description,
+			'externalId' => $external_id,
+			'typeFieldData' => \@fields
+    );
+
+		# If not exit incidence create, if exist update and add new workunit.
+		if(is_empty($incidence_data->{'data'})) {
+			my $insertIncidence = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence', $ITSM_token, \%data_incidence);
+			if (!defined($insertIncidence)){
+				return;
+			}
+			my $incidence = p_decode_json($pa_config, $insertIncidence);
+			$id_incidence = $incidence->{'idIncidence'};
+		} else {
+			$id_incidence = $incidence_data->{'data'}[0]->{'idIncidence'};
+			my $updateIncidence = pandora_API_ITSM_call($pa_config, 'put', $ITSM_path . '/incidence/' . $id_incidence, $ITSM_token, \%data_incidence);
+			if (!defined($updateIncidence)){
+				return;
+			}
+			my %data_workunit = (
+				'description' => 'Incidence updated by ' . $pa_config->{'rb_product_name'}
+			);
+			my $createWorkunit = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/' . $id_incidence . '/workunit', $ITSM_token, \%data_workunit);
+			if (!defined($createWorkunit)){
+				return;
+			}
+		}
+
+		# Check exit relation incidence whit inventory, if not exist create.
+		my %filter_incidence_inventory = ('idInventory' => $id_inventory);
+		my $existIncidenceInventory = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/' . $id_incidence . '/inventory/list', $ITSM_token, \%filter_incidence_inventory);
+		if (!defined($existIncidenceInventory)){
+			return;
+		}
+		my $incidence_inventory_data = p_decode_json($pa_config, $existIncidenceInventory);	
+		if(is_empty($incidence_inventory_data->{'data'})) {
+			my %data_incidence_inventory = ();
+			my $result_incidence_inventory = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/' . $id_incidence . '/inventory/' . $id_inventory, $ITSM_token, \%data_incidence_inventory);
+			if (!defined($result_incidence_inventory)){
+				return;
+			}
+		}
 	# Generate notification
 	} elsif ($clean_name eq "Generate Notification") {
 
@@ -6955,89 +7101,33 @@ sub pandora_edit_custom_graph ($$$$$$$$$$$) {
 	return $res;
 }
 
-sub pandora_create_integria_ticket ($$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$) {
-	my ($pa_config,$api_path,$api_pass,$integria_user,$user_pass,$agent_name,$agent_alias,$agent_os,$agent_addr,$agent_id,$agent_group,$ticket_name,$ticket_group_id,$ticket_priority,$ticket_owner,$ticket_type,$ticket_status,$ticket_description, $create_wu_on_close_recovery, $ticket_custom_field1, $ticket_custom_field2, $ticket_custom_field3, $ticket_custom_field4, $ticket_custom_field5, $ticket_custom_field6, $ticket_custom_field7, $ticket_custom_field8, $ticket_custom_field9, $ticket_custom_field10, $ticket_custom_field11, $ticket_custom_field12, $ticket_custom_field13) = @_;
-
-	use URI::URL;
-	use URI::Escape;
-	use HTML::Entities;
-
-	my $data_ticket;
-	my $call_api;
-
-	my $uri = URI->new($api_path);
-
-	if ($uri->scheme eq "") {
-		$api_path = "http://" . $api_path;
-	}
-
-	my $ticket_create_wu = 0;
-
-	if ($create_wu_on_close_recovery == 1 && $ticket_status eq '7') {
-		$ticket_create_wu = 1;
-	}
-
-	$data_ticket = $agent_name .
-		"|;|" .	uri_escape(decode_entities($agent_alias)) .
-		"|;|" .	$agent_os .
-		"|;|" .	$agent_addr .
-		"|;|" .	$agent_id .
-		"|;|" .	$agent_group .
-		"|;|" .	$ticket_name .
-		"|;|" . $ticket_group_id .
-		"|;|" . $ticket_priority .
-		"|;|" . $ticket_description .
-		"|;|" . $ticket_type .
-		"|;|" . $ticket_owner .
-		"|;|" . $ticket_status .
-		"|;|" . $ticket_create_wu .
-		"|;|" . $ticket_custom_field1 .
-		"|;|" . $ticket_custom_field2 .
-		"|;|" . $ticket_custom_field3 .
-		"|;|" . $ticket_custom_field4 .
-		"|;|" . $ticket_custom_field5 .
-		"|;|" . $ticket_custom_field6 .
-		"|;|" . $ticket_custom_field7 .
-		"|;|" . $ticket_custom_field8 .
-		"|;|" . $ticket_custom_field9 .
-		"|;|" . $ticket_custom_field10 .
-		"|;|" . $ticket_custom_field11 .
-		"|;|" . $ticket_custom_field12 .
-		"|;|" . $ticket_custom_field13;
-
-	$call_api = $api_path . '?' .
-		'user=' . $integria_user . '&' .
-		'user_pass=' . $user_pass . '&' .
-		'pass=' . $api_pass . '&' .
-		'op=create_pandora_ticket&' .
-		'params=' . $data_ticket .'&' .
-		'token=|;|';
-
-	 my $content = get($call_api);
-
-	if (is_numeric($content) && $content ne "-1") {
-		return $content;
-	}
-	else {
-		return 0;
+sub pandora_API_ITSM_call ($$$$$) {
+	my ($pa_config, $method, $ITSM_path, $ITSM_token, $data) = @_;
+	my @headers = (
+    'accept' => 'application/json',
+    'Content-Type' => 'application/json; charset=utf-8',
+    'Authorization' => 'Bearer ' . $ITSM_token,
+	);
+	if($method =~/put/i) {
+		return api_call($pa_config, $method, $ITSM_path, encode_utf8(p_encode_json($pa_config, $data)), @headers);
+	} else {
+		return api_call($pa_config, $method, $ITSM_path, Content => encode_utf8(p_encode_json($pa_config, $data)), @headers);
 	}
 }
 
 sub pandora_sync_agents_integria ($) {
 	my ($dbh) = @_;
 
-	my $config_integria_enabled = pandora_get_tconfig_token ($dbh, 'integria_enabled', '');
+	my $config_ITSM_enabled = pandora_get_tconfig_token ($dbh, 'ITSM_enabled', '');
 
-	if (!$config_integria_enabled) {
+	if (!$config_ITSM_enabled) {
 		return;
 	}
 
-	my $config_api_path = pandora_get_tconfig_token ($dbh, 'integria_hostname', '');
-	my $config_api_pass = pandora_get_tconfig_token ($dbh, 'integria_api_pass', '');
-	my $config_integria_user = pandora_get_tconfig_token ($dbh, 'integria_user', '');
-	my $config_integria_user_pass = pandora_get_tconfig_token ($dbh, 'integria_pass', '');
+	my $config_api_path = pandora_get_tconfig_token ($dbh, 'ITSM_hostname', '');
+	my $config_integria_user_pass = pandora_get_tconfig_token ($dbh, 'ITSM_token', '');
 
-	my $api_path = $config_api_path . "/include/api.php";
+	my $api_path = $config_api_path;
 
 	my @agents_string = '';
 	my @agents = get_db_rows ($dbh, 'SELECT * FROM tagente');
@@ -7059,9 +7149,7 @@ sub pandora_sync_agents_integria ($) {
 
 	my $ua       = LWP::UserAgent->new();
 	my $response = $ua->post( $api_path, {
-			'user' 		=> $config_integria_user,
 			'user_pass' => $config_integria_user_pass,
-			'pass' 		=> $config_api_pass,
 			'op' 		=> 'sync_pandora_agents_inventory',
 			'params[]' 	=> [@agents_array],
 			'token' 	=> '|;|'
@@ -7077,32 +7165,6 @@ sub pandora_sync_agents_integria ($) {
 	}
 }
 
-sub pandora_get_integria_ticket_types($) {
-	my ($dbh) = @_;
-
-	my $config_api_path = pandora_get_tconfig_token ($dbh, 'integria_hostname', '');
-	my $config_api_pass = pandora_get_tconfig_token ($dbh, 'integria_api_pass', '');
-	my $config_integria_user = pandora_get_tconfig_token ($dbh, 'integria_user', '');
-	my $config_integria_user_pass = pandora_get_tconfig_token ($dbh, 'integria_pass', '');
-
-	my $api_path = $config_api_path . "/include/api.php";
-
-	my $call_api = $api_path . '?' .
-		'user=' . $config_integria_user . '&' .
-		'user_pass=' . $config_integria_user_pass . '&' .
-		'pass=' . $config_api_pass . '&' .
-		'op=get_types&' .
-		'return_type=json';
-
-	my $content = get($call_api);
-
-    my @decoded_json;
-    @decoded_json = @{decode_json($content)} if (defined $content && $content ne "");
-
-	return @decoded_json;
-
-}
-
 ##########################################################################
 =head2 C<< pandora_input_password (I<$pa_config>, I<$password>) >> 
 
diff --git a/pandora_server/lib/PandoraFMS/Tools.pm b/pandora_server/lib/PandoraFMS/Tools.pm
index 326e4692ad..254b304fe7 100755
--- a/pandora_server/lib/PandoraFMS/Tools.pm
+++ b/pandora_server/lib/PandoraFMS/Tools.pm
@@ -108,6 +108,7 @@ our @EXPORT = qw(
 	MODULE_UNKNOWN
 	MODULE_NOTINIT
 	$THRRUN
+	api_call
 	api_call_url
 	cron_get_closest_in_range
 	cron_next_execution
@@ -2323,6 +2324,51 @@ sub uri_encode_literal_percent {
   return $return_char;
 } ## end sub uri_encode_literal_percent
 
+sub api_call {
+	my ($pa_config, $method, $server_url, $api_params, @options) = @_;
+
+	my $ua = LWP::UserAgent->new();
+	$ua->timeout($pa_config->{'tcp_timeout'});
+	# Enable environmental proxy settings
+	$ua->env_proxy;
+	# Enable in-memory cookie management
+	$ua->cookie_jar( {} );
+	
+	# Disable verify host certificate (only needed for self-signed cert)
+	$ua->ssl_opts( 'verify_hostname' => 0 );
+	$ua->ssl_opts( 'SSL_verify_mode' => 0x00 );
+
+	my $response;
+
+	eval {
+		if ($method =~/get/i) {
+			$response = $ua->get($server_url, $api_params, @options);
+		} elsif ($method =~/put/i) {
+			my $req = HTTP::Request->new('PUT' => $server_url);
+			$req->header(@options);
+			$req->content($api_params);
+			$response = $ua->request($req);
+		} else {
+			$response = $ua->post($server_url, $api_params, @options);
+		}
+	};
+	if ((!$@) && $response->is_success) {
+		return $response->decoded_content;
+	}
+
+  # TODO: change to logger.
+	use Data::Dumper;
+	$Data::Dumper::SortKeys = 1;
+	print Dumper("------------------");
+	if ($@) { print Dumper($@); }
+	#print Dumper($response);
+	print Dumper($response->{'_rc'});
+	print Dumper($response->{'_content'});
+	print Dumper($response->{'_request'});
+	
+	return undef;
+}
+
 
 ################################################################################
 # Launch API call
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index 8926991aaa..8a36ddfaf3 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -1436,24 +1436,9 @@ if (defined($history_dbh)) {
 	
 }
 
-# Keep integrity between PandoraFMS agents and IntegriaIMS inventory objects.
+# Keep integrity between PandoraFMS agents and Pandora ITSM inventory objects.
 pandora_sync_agents_integria($dbh);
 
-# Get Integria IMS ticket types for alert commands.
-my @types = pandora_get_integria_ticket_types($dbh);
-
-if (scalar(@types) != 0) {
-	my $query_string = '';
-	foreach my $type (@types) {
-	        $query_string .= $type->{'id'} . ',' . $type->{'name'} . ';';
-	}
-
-	$query_string = substr $query_string, 0, -1;
-
-	db_do($dbh, "UPDATE talert_commands SET fields_descriptions='[\"Ticket&#x20;title\",\"Ticket&#x20;group&#x20;ID\",\"Ticket&#x20;priority\",\"Ticket&#x20;owner\",\"Ticket&#x20;type\",\"Ticket&#x20;status\",\"Ticket&#x20;description\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\"]' WHERE name=\"Integria&#x20;IMS&#x20;Ticket\"");
-	db_do($dbh, "UPDATE talert_commands SET fields_values='[\"\", \"\", \"\",\"\",\"" . $query_string . "\",\"\",\"\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\",\"_integria_type_custom_field_\"]' WHERE name=\"Integria&#x20;IMS&#x20;Ticket\"");
-}
-
 # Cleanup and exit
 db_disconnect ($history_dbh) if defined ($history_dbh);
 db_disconnect ($dbh);

From 554570fda0ddda89e68d014d0a3cd9f2ef8364e3 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Fri, 11 Aug 2023 14:31:20 +0200
Subject: [PATCH 013/116] ITSM pandora_enterprise#11471

---
 pandora_console/extras/mr/66.sql | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 pandora_console/extras/mr/66.sql

diff --git a/pandora_console/extras/mr/66.sql b/pandora_console/extras/mr/66.sql
new file mode 100644
index 0000000000..49b9b67148
--- /dev/null
+++ b/pandora_console/extras/mr/66.sql
@@ -0,0 +1,5 @@
+START TRANSACTION;
+
+ALTER TABLE `tusuario` MODIFY COLUMN `integria_user_level_pass` TEXT;
+
+COMMIT;
\ No newline at end of file

From 64c7f562350b0337350c938cdecd09ec9d75d1cc Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Mon, 14 Aug 2023 10:59:56 +0200
Subject: [PATCH 014/116] ITSM pandora_enterprise#11471

---
 pandora_console/extras/mr/66.sql              |   4 +
 pandora_console/godmode/setup/setup_ITSM.php  |   4 +-
 pandora_console/images/integria_logo.png      | Bin 4614 -> 0 bytes
 pandora_console/images/integria_logo.svg      |  39 -------
 pandora_console/images/integria_logo_gray.png | Bin 14755 -> 0 bytes
 pandora_console/images/pandoraITSM_logo.png   | Bin 0 -> 336778 bytes
 .../images/pandoraITSM_logo_gray.png          | Bin 0 -> 321916 bytes
 pandora_console/include/lib/ITSM/Manager.php  | 110 ++++++++++++++++++
 pandora_console/pandoradb.sql                 |  50 --------
 .../views/ITSM/ITSMTicketEditView.php         |   4 +-
 .../views/ITSM/ITSMTicketListView.php         |   2 +-
 11 files changed, 119 insertions(+), 94 deletions(-)
 delete mode 100644 pandora_console/images/integria_logo.png
 delete mode 100644 pandora_console/images/integria_logo.svg
 delete mode 100644 pandora_console/images/integria_logo_gray.png
 create mode 100644 pandora_console/images/pandoraITSM_logo.png
 create mode 100644 pandora_console/images/pandoraITSM_logo_gray.png

diff --git a/pandora_console/extras/mr/66.sql b/pandora_console/extras/mr/66.sql
index 49b9b67148..9e8f9b54ff 100644
--- a/pandora_console/extras/mr/66.sql
+++ b/pandora_console/extras/mr/66.sql
@@ -2,4 +2,8 @@ START TRANSACTION;
 
 ALTER TABLE `tusuario` MODIFY COLUMN `integria_user_level_pass` TEXT;
 
+DROP TABLE `tincidencia`;
+DROP TABLE `tnota`;
+DROP TABLE `tattachment`;
+
 COMMIT;
\ No newline at end of file
diff --git a/pandora_console/godmode/setup/setup_ITSM.php b/pandora_console/godmode/setup/setup_ITSM.php
index d9f33b7699..a2b0a69fa5 100644
--- a/pandora_console/godmode/setup/setup_ITSM.php
+++ b/pandora_console/godmode/setup/setup_ITSM.php
@@ -511,9 +511,9 @@ $table_remote->data['ITSM_test'] = $row;
 echo '<div class="center pdd_b_10px mrgn_btn_20px white_box max_floating_element_size">';
 echo '<a target="_blank" rel="noopener noreferrer" href="https://pandorafms.com/es/itsm/">';
 html_print_image(
-    'images/integria_logo.svg',
+    'images/pandoraITSM_logo.png',
     false,
-    ['class' => 'w400px mrgn_top_15px']
+    ['class' => 'w600px mrgn_top_15px']
 );
 echo '</a>';
 echo '<br />';
diff --git a/pandora_console/images/integria_logo.png b/pandora_console/images/integria_logo.png
deleted file mode 100644
index f56ecfdab5077afb48a96e2fbbd4aad790052e5f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 4614
zcmV+h68Y_kP)<h;3K|Lk000e1NJLTq00Arj003PG1^@s6A9P!#0000PbVXQnQ*UN;
zcVTj606}DLVr3vnZDD6+Qe|Oed2z{QJOBU@s7XXYRCwC#UC(bD#}yvYOpF#zLZ>GO
z3A{QahqSP%^b(&$opLE4vOt2~M4>%2CyD7FAo34LDV=gEL;*cD2T?!@H0VL=lY5Go
zpzR?&cnueIFR9riKocjHJ8%6)8jfanXMb^Lm+u1>{I$EBnVtFOdvD&%Fh(E{2m}Iw
zKp+qZgayS?(FyqagKG|dY2xt$zJ|f$$31>b;Qf_%A57>m5(q?Cc@k8MAM5zq$l$gv
zKaSv)2#i1=!b(e0KuT?XY#Au1v;YOR$B!{5FOMEEfk1>6M@{V@Sv3mC--sUvoVZ+i
z)C2+%RuoZnEy*VkR*%d@0)YriHT|~H^lMm{-w_hmlpZ~Su)u`H$*RR)_W9vho@XGd
zO-@>4di(^!0umM{t3H~5Wx^PVi_{i@un2^OCg34^8lF%_Opvt5w?!aSnXounHPHlY
zmb?r=VXYBq5eO9}EF`OAW~XC4DL`qBs7eqB6(X#Pk`<8_flxKVsyJB*bZ7*TKqxt3
zp@aQ|Vc5dbb1$>nwOjo47611qU;K@o{_75V^61O5mq}(mt<OID3<!QlA$X4;dpB;}
zAfFk5kRxFMS@{n3`cL0u^*4GKPvT_t-JL#r{P~AvFBc${l{6s_oUDMP?gpsQDJQI}
zRQ(7E>sA*#LPz=<I=}(1SCzI7YKCMrj3g_-v(K|<R)5PbId7G{T%aNxro2Zp#B^@(
zO4p*MM@T?cFfy+T(1!YU$bTO$G+|)``?mOe>D9L*Z)$Q*3DDws-=-!)u!yXHl)4e8
zZS(V-g(NKWTkX%-kk7pweb>v+SEYQ0IFXw`umSBD7Q#X*EY(i-o$HbK_RA`j(LS{k
zf+bk^X=Jq!b>+yWpuqQ^M4QMa=akGeY*SkySO61;x_9Ho4R;Y0mR4Cj_C99c{rOky
z$yfip@Ed&h=%aVosfh|JnQ2IEg-|p&5qbP&Gel{@_nj)2!BT*_YO$vQqM@k&<d=+H
zegVnqeigzQ!VoJ89!CMg%5bg9Js}}Kpi>=G|0;Vr5)DLkn;#=yrz&kW)&suZ2$f|&
z`Z0U<XMga+7-nwv#(Tc{imR}e_<i7>mtMNXYA?R-JMAxByOm3ZA3wO```AwZ^LO?*
zUa%|p^F|?+2r3SY;<WIq>k;?ch#A@dz3Vthg~b1H@VL&hcgo(zMl;EigrzbTAtNTc
zEU^$Z@+rQbpeZ$(1KEhQ%g=r_piFlIo_9kcEBUjFc`1TK#p0c-5oImPThy0W^?6C7
zuAnmC4ZFyXwR%k-x^T)(#z&mAOaSp(&%F9};c;8Onfs3q{nrR+r|n>mcf#_YvNS<u
zHZ`a`U3R`RQ4zkDBc9Gt28}={i58pB=$DIRG0uX(BsG-eS%6~N)ZFu7KwX1+v0Q}8
z!uYUm!j1#V`3TG0i%VF27O@x~sH<9l0y^ai2K-o23hnah`~Is<0A={??cancMA(U^
zqj^|ErWv5f2|fN$cS9P7O>5~x<r~B$E{pQvr$33Z%_<N4f0xSOYT)U5l3|B22+Bh(
zt~r?62Ib1^2S5Llbz~)o6w+3IEimx4jj?Ge=D8+VBcQ_cQRQ_lDpF{)`#f#OsForX
z6_Wp5OY-5TAIg=ds~w~9Zd;UxvcV_hpgL1i)KxQ2*$t-OWo}N|4oG8&53L;_YYPL)
z@f~LGDjK2^HX_Ww<2fqTxWsjc<s9`afN&RaRN2d+&YY-G`!$2cm>m(k*)L7$hY;(!
z=DVY!Dn<(5!Mq_>s0|}4+gGpchLIMkuq+AJW#z#^jvd8WM^`s!jG38&CewPrfAsjl
zU;LFH{Lf$A*T#IsGxc6)OBjB!bme7VJw>Gjeg{RUam2SZeufeD1j0F-2SCM*WPcDg
zkR)W~1@wsE{QR%x`&CUvN}|NuFiNIzX79u#t4T(xwwXYc0%?63;71&0NJ#!DVOiLU
zmq(wMi>|JuE%zpN0(~7}<<`U1ufG*ZRNn*yq^5-*%AlI3oU}kig%KB=qZ>JdI5l-Q
zX?S2tZ`)$|J4c6x<aB_IW0K_v5|XroB)x7}e>Rvj^ezpDN0Id&5_YDhhZ2rrnui^g
zOtABC4D&Ir;(BOm8!#w$QRZEPIx|aH7%ZBjjTJm08seb7`RJXwF8&83_P;;A&3^cc
zJE6)fg!K!R>ln}DL^O^;(1>D26;voSD2qN4*nWh{Y{qm$7=?1A$io!VFY?gBjv$P<
zU~r(VtUc8%G9M)*Hz)@vzcDY%Jr=%_u_KhZ?89mmm3UBBMXXc`YA&IoyJ?9}C=9uh
zRS<#kV~xdgz(%Q(-aH#Qs9t`o7<5R@2(wv5hsY|h%>C{5B2H_lCgJr(EUeS7@3TuL
zOXkFDWb;5&8j4(b@_=Quv2KCWmtd93lZ@^)$=a07!7OfLM=Z}Iun8cj+`46ruq<fV
zo<N%$NLhM)bRuT~E0q<RzgsNl=zuIyS0xvLK&Up*|2bqO+_AkDVv`d>Kr4|FN=jB;
zG<92LOn;poVPXJbc@|g9<ATeEU?*9XdIen~tm>jgML<x@z|t@GO@u`tEC%9?+Jfca
z^5Y)MZdO4QgkOyai$GX#btS?U!jRi+0>d<t!Xgj|XX+&kprSejhr$@CxLVu`2v4ET
zB_tSQLPcO521Up1na-`OQAHxm5fFVppklBNr4cJ+5+;LJf;9H#J(rL`$Q!c4x=qDV
zDZ;u=kBLxa!t$s%j8O)1r`@Uvr2)o?#Ud=1ip>}{`1_(d7za0|D0@ZjQgzE6Hq0Y#
zn$-6*!n*SA1NeeQ3d=)SCTZ9y0ck}M?=a4eHH1XiG1=89XKckHEX0_eU33FOaxWA(
z4D1<J#=Effl)3|nC5Te?(2!swf)mUGP14W4bAvL4I?|ta9l@>L_DvO*I!Xw>8Is`P
zu!+<mM8ITz7*xU`suho&Z$fb|;Cz4C;CZY&4)H%cO(TPPCl;0yQPCbFzpH5(PYuc#
zI))wW;5>FdH775;z|Pmwk0e|XCsx-q#(jFkp*XOpBEoJx8!X;LXNMWCroivrQPwTb
z3$VIpo5k~`80Uj<*14IMv16HV*%NPOOhRtzOvx;aGzV=9u<fw?d}=%M$N;W&zQ)Lh
znyZp6X&Jln)^;_U6-3d{Y*2AvVMP>;JrB}q&M_a5{$)m^)p?h3+)YA?!~{EJ7D!lJ
zL5$~~p>Mymvb4VY>+jUBMz;DWup$mh-k_$q>&_YxSAL|$k7cYYHmfa|rEy_fv|5zS
zsKeun4f*`H&p*_De+s)f2jKgA9~V|CLFs~h3t{^)nXF=t4o00j$)U0LQKbwr>U6w<
z8kLL01$pU}guEtmD#u9{&rGT-J&P3A6h*-@PoKZN+t(jlYx3jF@3y473QxGpLL79p
zYqwbKrCa#^P2YSv<&8XuumG@KeeJndSnb8v{f$-O8Xzm(?#lConl4a$k3JcygtZ(u
zoB@L#!4Kpp52YvD<#_>zsKw~oO?;jXGjmo$UOP7JP%Ld8D@@hZ9RIEnVG<AIosKb%
z>5yF<00E0-Gvgh%Gp|=zSHxCdqKpIE|JD1yXZ3IX&AwRvH9M_eNtzWG)BP!X>Z@`k
z4uU*xVLJS^x_JBRF9qF+UjW;O4;ewIt4%6~#em`N&kH-boO1(25_E;>#@j|Oqx(8|
z-z|kK{mv5xyaHEi;6Lv28*DKeI-a6zCRCfGgu>WhW`hlG0Yo9I9`SyHe&-^{im?m^
zX81itxwkcKZx2b)SEy0T%YdplUhuj+5QRl39SKF5b;49`#q5}K4XWi0xP@uE&J1>9
z=I6V-j;<Lh7--KcN$NDezRxbkXWdSiM+cQuSCcm&;3Ifd(-}%wu&O4%G05KS1+DYY
zd(oOw<s>SdKgl}9js9Xt=PEOg{8rHd^<@wvDEwYS6eDp}&`w&ViTBx3@;Q}A$_*n^
zlLh=lgzTc3hEQl7YW}4}H%GGC%tBqEQ+b`4F9RfYukqOIlo@|csbN5~_^&Si|DLJJ
zLN%nD0W&pODjZ3<&1MG*JS3^xaZK7s!h%fkKZJ&RvS5|IXTv0CLL%JE;hs<zIvJ7G
zFs9YgORMx1|Cb=Ik>TZs0Vb&lS@qeh6CM6@FX@btn#oCc^F<mZ11H~z+I?w}<)mFu
zArQi_oT1-J=U0RJw#Mt-5*%zc-pWn$XGm6u%Gaxg*M^Oj9)(;7X6jv3RSnD^ga&P<
zncil+raLrXo`9RI`u?m@R>QP}!jOeB_I)Zj$IDG6#o=jwlLbRkvTCC_rz#}J&}`k7
zOiz_;#{t*LBZ<CiC97SgVr@bJ4H@mxZbd6PJQO0U@?*@-gAPrJV}b{adbwE!dg@F(
zAdrYg+*F7n30XA)$SRVsP?Zg(G^{BqZLITw@#{{Mw6A43${u^y9FTN8QLKWbm3iS3
ziUE?%3I>3NDzPH=<BL*EioYq185*{njAKZ2LLp5t+(O_$b6r1AvPwi)6(ucy`UH_x
z<%r8IY0^W9AqLcChew8OR`{)^NID*p=$Rr77}?uW%)rdsQ!VL*I8~(zj(G4{b%?A8
z7C|_~y`;V$3`LMh29)GLIj5z$Zd)R?o}>m_N(Zk)LwemuADA74g`_oN<z0AfimHm{
z2okJ;6te`_%TQhIMTO}oeyf2pQodoJ`gRqS2&DCdABRAMib|WGNvMz(M8m@}6?sJ#
z=Ya{5)r6V|!7{WBluX?F2y-w<5ecF^maL9`fLaSweK;rwZ?`pRY2&^8{Q?*cZp3Ya
zwJb^)%qg79v{?eR1wF?KkrlyGtP8SA8n}$1436UV(6!5^LRJl?A1U85B~c6sx{6$|
z%g&dOkx8<RO74XJ_d^JSz%=Ktuv8O~|1o4}huIgeHD(mOPAHE#n8w+@u6#aHtc#{b
zS;<cJX^2|eGvI-#s_5{4#6)f}soP=a8(zS4ArDR0z^MME91Gt;;_4P$4_s7LE;R{)
z<%9)oWgpG1<rJj%Q2J`-Ui^0;r<V8)6;DGVtBG>ImSifzVgM^Sk+eL|5ZbDCAgq>G
z;e(Pvhjx}r_L|~ssZ}sliL3}^GY3=Lqph(lWXSE%Vds9VUVxj##Mz#PC#LA!Uy;%Z
zBzdSizn1qCK;r5n%Xg4S@*pokQozhtan2H%e}pocgK0(wH<ZsR$>`=;4npS6W;F<4
zVn)g%_ATA0Vtt+u1%u7T_<+RPKVl8(R?ORpt=bcfHV_DwLAXxb6wY?F9qE>x5k6*t
znGr#aiQ16NK`-ckvk(UuP47y1XcS6VO5()aEwz`4iq-H)IT0#|tqjbruJU<L*Y0>b
zo1jP-L@Zmg9%T-qj|&KJEu(U9!hWpV^u$mWx>R=w3uX?su%S*<E^DNkgQI|UwqlT`
zhGGu75k#9sIjG?n7p$flRTl!m8g(^F(b!weEcPmiTAPNrT-sR_0J@0wqtZ`=MIaQb
zt{j$4>{XPrJucP_)RjOpWf?&JMc}GWkSt)CCn78Yp;(-)IhAtYXvTa?6UrlPj3E%U
zGfo4EH#S+rJVQ3S1anaEs*gI=7XqO$b=78up$yUppo1pbuJl`%&5o!IQYNjXd=4W&
z7te<@^kd{(w+|r@b|-95jR=cCD2A+H>Y5y0Fb*K7Ri@cD5k~qX6(yT*yBP#Z&n!z5
zq5KXoeOoXsFX&wKQ3;Y#)tJ9-zR5-#L|6pEd<aV3e^A$GA7Z${l$pgOPNn;{C51A`
zAi1kSM5+Sk4~ylfkNNunJD;!EVCVZS>Q+AWP+1xe5D;Mz2>B9K9~F>^W7^btE&IE=
z5?ST3#J7p_9%8V>1nObLxgL_>K@y)G5f*`vA6a#oez)W>)g(5;5Nb=OYFy=-%^bF+
zga0tvKM*6-fwZ>K>~o}hFeyKiv_aoXRILbvT-DW%0WpZ_WiFK(DJ%k^D7YHJnkXbi
wdkK)jA`q-mS;FBwr3v~30)enV_`d)H00D<U;#cR5AOHXW07*qoM6N<$g7BSycK`qY

diff --git a/pandora_console/images/integria_logo.svg b/pandora_console/images/integria_logo.svg
deleted file mode 100644
index b894a2ada3..0000000000
--- a/pandora_console/images/integria_logo.svg
+++ /dev/null
@@ -1,39 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<svg width="748px" height="142px" viewBox="0 0 748 142" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-    <!-- Generator: Sketch 61.2 (89653) - https://sketch.com -->
-    <title>Integria IMS</title>
-    <desc>Created with Sketch.</desc>
-    <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
-        <g id="Integria-IMS" fill-rule="nonzero">
-            <path d="M71.81,-2.81979301e-15 C43.0949491,-0.325771451 17.0111429,16.6781107 5.72147618,43.0827259 C-5.56819051,69.4873411 0.159601761,100.092722 20.23398,120.627561 C40.3083582,141.1624 70.7759943,147.582689 97.4298109,136.894643 C124.083628,126.206596 141.674581,100.515055 142,71.8 C142.444347,32.5906412 111.019353,0.444829018 71.81,-2.81979301e-15 Z" id="Path" fill="#F65803"></path>
-            <circle id="Oval" fill="#FFFFFF" cx="43.51" cy="49.89" r="13.76"></circle>
-            <path d="M43.51,71.66 L43.26,71.66 C41.5736669,71.6393594 39.8955597,71.4212055 38.26,71.01 L38,98.36 C37.9839995,99.6878244 38.4968596,100.967474 39.4254669,101.916717 C40.3540742,102.86596 41.6221446,103.406817 42.95,103.42 L43,103.42 C44.3260824,103.42 45.597852,102.893216 46.5355339,101.955534 C47.4732158,101.017852 48,99.7460824 48,98.42 L48.31,71.06 C46.7379912,71.4417108 45.1275989,71.6430099 43.51,71.66 L43.51,71.66 Z" id="Path" fill="#FFFFFF"></path>
-            <path d="M94.41,48.12 C88.3631135,41.9016532 80.0832535,38.3557132 71.41,38.27 C68.4333361,38.2395201 65.4662912,38.6129237 62.59,39.38 C64.2200628,42.3331841 65.1313519,45.6288987 65.25,49 C67.208565,48.4885287 69.2257979,48.2363746 71.25,48.25 C77.2810939,48.3159047 83.0384799,50.7772152 87.2533639,55.0915157 C91.468248,59.4058163 93.7946914,65.2190086 93.72,71.25 L93.42,99 C93.4039912,100.326111 93.9154828,101.604257 94.841933,102.553212 C95.7683831,103.502167 97.0338871,104.044182 98.36,104.06 L98.42,104.06 C101.181424,104.06 103.42,101.821424 103.42,99.06 L103.74,71.33 C103.850133,62.6586006 100.491174,54.3026057 94.41,48.12 Z" id="Path" fill="#FFFFFF"></path>
-            <path d="M171.72,67.81 L171.84,21.08 C171.8139,20.1443474 172.175822,19.2395415 172.84,18.58 C173.507689,17.9157505 174.418525,17.5543075 175.36,17.58 L182.36,17.58 C183.315282,17.5557708 184.239991,17.9176872 184.925039,18.583915 C185.610086,19.2501428 185.997615,20.1644142 186,21.12 L185.88,67.77 C185.889979,68.7136623 185.501469,69.6177631 184.81,70.26 C184.132306,70.9151221 183.222463,71.2747439 182.28,71.26 L175.28,71.26 C174.343006,71.2771853 173.438469,70.9168123 172.77,70.26 C172.079224,69.6357031 171.69568,68.7407667 171.72,67.81 L171.72,67.81 Z" id="Path" fill="#282828"></path>
-            <path d="M196.6,67.79 L196.72,21.15 C196.703942,20.2132116 197.064148,19.3090953 197.72,18.64 C198.367817,17.9706027 199.269041,17.6072059 200.2,17.64 L211.2,17.64 C212.220464,17.6786713 213.201721,18.0431383 214,18.68 C214.954333,19.3581671 215.769164,20.2137401 216.4,21.2 L238.94,56.06 L239,21.18 C238.972558,20.2529263 239.335335,19.3568684 240,18.71 C240.660878,18.0478442 241.564774,17.6862858 242.5,17.71 L249,17.71 C249.930306,17.697074 250.827049,18.0572118 251.49,18.71 C252.168239,19.3808021 252.531442,20.3069699 252.49,21.26 L252.37,67.91 C252.393322,68.8422107 252.031614,69.7428638 251.37,70.4 C250.707806,71.0601595 249.804802,71.4213611 248.87,71.4 L236.43,71.4 C235.352189,71.3759533 234.306677,71.0274494 233.43,70.4 C232.448952,69.7519451 231.61994,68.8990519 231,67.9 L210.36,35.7 L210.28,67.85 C210.302135,68.7819962 209.940608,69.6821976 209.28,70.34 C208.624212,71.0036445 207.722642,71.3657208 206.79,71.34 L200.2,71.34 C199.262799,71.3583203 198.357839,70.9977785 197.69,70.34 C196.973178,69.6889199 196.575278,68.758054 196.6,67.79 Z" id="Path" fill="#282828"></path>
-            <path d="M258.64,24.83 L258.64,21.31 C258.611761,20.3566005 258.979489,19.4340518 259.655831,18.7614981 C260.332174,18.0889444 261.256774,17.7264056 262.21,17.76 L309.75,17.88 C310.703399,17.8517613 311.625948,18.2194887 312.298502,18.8958315 C312.971056,19.5721742 313.333594,20.4967742 313.3,21.45 L313.3,25 C313.332066,25.9455402 312.969867,26.8619037 312.3,27.53 C311.623087,28.1989008 310.701164,28.5604392 309.75,28.53 L293.04,28.53 L292.93,68.21 C292.958015,69.1313139 292.594703,70.0214284 291.93,70.66 C291.264603,71.3152777 290.363755,71.675617 289.43,71.6604873 L282.35,71.6604873 C281.420522,71.668505 280.52541,71.3090224 279.86,70.66 C279.197933,70.0155113 278.835379,69.1236302 278.86,68.2 L278.96,28.52 L262.25,28.52 C261.299851,28.544612 260.38013,28.1839373 259.7,27.52 C258.965201,26.8249172 258.576895,25.8394983 258.64,24.83 L258.64,24.83 Z" id="Path" fill="#282828"></path>
-            <path d="M319.3,68 L319.42,21.35 C319.400371,20.4122847 319.78681,19.5118088 320.48,18.88 C321.149716,18.2251023 322.053417,17.8650622 322.99,17.8795531 L366.19,17.99 C367.130438,17.9859488 368.031045,18.3693397 368.68,19.05 C369.337779,19.717839 369.69832,20.6227989 369.68,21.56 L369.68,25.09 C369.677352,26.0235632 369.303953,26.9178376 368.641949,27.5760911 C367.979945,28.2343446 367.083563,28.6026559 366.15,28.6 L333.52,28.51 L333.52,39.42 L361.62,39.49 C362.553563,39.4926484 363.447838,39.8660468 364.106091,40.528051 C364.764345,41.1900553 365.132656,42.0864368 365.13,43.02 L365.13,46.54 C365.156933,47.4728584 364.79467,48.3748937 364.13,49.03 C363.469788,49.6931635 362.565439,50.054903 361.63,50.03 L333.47,50 L333.47,61.06 L366.03,61.14 C366.94651,61.1221856 367.829599,61.4841076 368.47,62.14 C369.129526,62.7903112 369.491355,63.6840288 369.47,64.61 L369.47,68.21 C369.482675,69.150132 369.102026,70.0528141 368.42,70.7 C367.748458,71.3583482 366.840234,71.7187547 365.9,71.7 L322.9,71.59 C321.962384,71.6106136 321.056564,71.2497292 320.39,70.59 C319.672391,69.9226941 319.2755,68.9796223 319.3,68 L319.3,68 Z" id="Path" fill="#282828"></path>
-            <path d="M380.06,65.38 C375.64,60.9 373.44,54.0566667 373.459865,44.85 C373.48,35.6433333 375.813333,28.83 380.46,24.41 C385.126667,19.99 392.08,17.7933333 401.32,17.82 L409.68,17.82 C414.926078,17.759622 420.087688,19.1434315 424.6,21.82 C429.026667,24.4866667 431.233333,27.7833333 431.22,31.71 C431.335739,32.9177383 430.840442,34.1034513 429.9,34.87 C429.175254,35.4543658 428.280429,35.7877321 427.35,35.82 L422.9,35.82 C420.76,35.82 419.053333,34.59 417.78,32.13 C416.506667,29.67 413.363333,28.44 408.35,28.44 L401.68,28.44 C396.206667,28.44 392.493333,29.6033333 390.54,31.93 C388.54,34.28 387.6,38.59 387.54,44.93 C387.48,51.27 388.38,55.58 390.13,57.99 C391.88,60.4 394.99,61.62 399.48,61.63 L407.17,61.63 C411.17,61.63 414.043333,60.87 415.79,59.35 C417.596876,57.6376908 418.574219,55.2271554 418.47,52.74 L410,52.74 C409.064789,52.7427064 408.167392,52.3710205 407.507977,51.7078475 C406.848561,51.0446746 406.48198,50.1451807 406.49,49.21 L406.49,46.23 C406.472533,45.2988546 406.833351,44.400416 407.49,43.74 C408.146465,43.0773742 409.047574,42.7154829 409.98,42.74 L428.79,42.79 C429.722858,42.763067 430.624894,43.1253302 431.28,43.79 C431.943164,44.4502124 432.304903,45.354561 432.28,46.29 L432.28,50.44 C432.28,57.44 430.17,62.8133333 425.95,66.56 C421.73,70.3066667 415.566667,72.17 407.46,72.1501593 L399.03,72.1501593 C390.803333,72.1233333 384.48,69.8666667 380.06,65.38 Z" id="Path" fill="#282828"></path>
-            <path d="M495.8,70.48 C495.8,71.55 495.16,72.09 493.89,72.0801364 L484.89,72.0801364 C483.778533,72.0359158 482.700008,71.6902348 481.77,71.08 C480.713597,70.4696085 479.821334,69.6116631 479.17,68.58 L472.83,58.58 C470.223333,54.48 467.056667,52.4233333 463.33,52.41 L454.18,52.41 L454.18,68.52 C454.203322,69.4522107 453.841614,70.3528638 453.18,71.01 C452.517806,71.6701595 451.614802,72.0313611 450.68,72.01 L443.68,72.01 C442.743006,72.0271853 441.838469,71.6668123 441.17,71.01 C440.503774,70.351816 440.141481,69.446082 440.17,68.51 L440.29,21.86 C440.269803,20.9254087 440.630829,20.0228444 441.29,19.36 C441.927395,18.6758743 442.825092,18.2942622 443.76,18.3095318 L474.67,18.39 C480.39,18.39 485.076667,19.94 488.73,23.04 C492.383333,26.14 494.203333,30.29 494.19,35.49 C494.063333,42.7033333 489.3,47.2066667 479.9,49 C481.484067,49.6135252 482.904514,50.5855906 484.05,51.84 C485.674847,53.654962 487.137133,55.6091383 488.42,57.68 L495.21,68.52 C495.577221,69.1093518 495.780866,69.7858671 495.8,70.48 L495.8,70.48 Z M454.21,41.74 L470.21,41.74 C472.559199,41.8094724 474.88989,41.3048899 477,40.27 C478.881403,39.380915 480.044647,37.4487472 479.95,35.37 C480.055656,33.2834473 478.890265,31.3398116 477,30.45 C474.897868,29.3847581 472.566149,28.8524806 470.21,28.9 L454.21,28.9 L454.21,41.74 Z" id="Shape" fill="#282828"></path>
-            <path d="M502,68.66 L502.12,21.93 C502.106969,20.9868821 502.48745,20.0809738 503.17,19.43 C503.826139,18.7489431 504.734359,18.3690106 505.68,18.3797664 L512.68,18.3797664 C513.640691,18.3689866 514.564824,18.7478276 515.241347,19.4300041 C515.91787,20.1121806 516.289008,21.039434 516.27,22 L516.15,68.65 C516.159979,69.5936623 515.771469,70.4977631 515.08,71.14 C514.402306,71.7951221 513.492463,72.1547439 512.55,72.14 L505.55,72.14 C504.613006,72.1571853 503.708469,71.7968123 503.04,71.14 C502.344797,70.5069922 501.964251,69.5995358 502,68.66 Z" id="Path" fill="#282828"></path>
-            <path d="M522.48,68.71 L532,33.06 C534.566667,23.3466667 542.87,18.5 556.91,18.5199384 L577.11,18.57 C577.996001,18.5541891 578.841559,18.9402048 579.41,19.62 C580.006346,20.2917863 580.330809,21.1617749 580.320262,22.06 L580.2,68.86 C580.23056,69.7817714 579.866841,70.6728823 579.2,71.31 C578.525984,71.9645342 577.619419,72.3242822 576.68,72.31 L569.68,72.31 C568.735914,72.3337643 567.822711,71.9728143 567.15,71.31 C566.480133,70.6419037 566.117934,69.7255402 566.15,68.78 L566.15,59.33 L539.51,59.27 L536.98,68.7 C536.727496,69.7139708 536.129991,70.6084614 535.29,71.23 C534.499985,71.8626048 533.521963,72.214411 532.51,72.23 L525.13,72.23 C524.459988,72.2878818 523.794912,72.0733836 523.284971,71.6349475 C522.775031,71.1965113 522.463235,70.571116 522.42,69.9 C522.400467,69.5023251 522.420566,69.1036934 522.48,68.71 Z M542.24,48.64 L566.11,48.7 L566.11,29.14 L555.43,29.14 C550.779549,29.0158892 546.663838,32.130706 545.52,36.64 L542.24,48.64 Z" id="Shape" fill="#282828"></path>
-            <path d="M590.9,68.88 L591,22.16 C590.986969,21.2168821 591.36745,20.3109738 592.05,19.66 C592.709218,18.9774003 593.621131,18.5974368 594.57,18.6096981 L601.57,18.6096981 C602.520183,18.6019547 603.433929,18.9751711 604.106773,19.6461353 C604.779617,20.3170996 605.155387,21.2297986 605.150057,22.18 L605,68.85 C605.028154,69.7830757 604.665702,70.6855811 604,71.34 C603.323524,71.9970099 602.412865,72.3569544 601.47,72.34 L594.47,72.34 C593.533006,72.3571853 592.628469,71.9968123 591.96,71.34 C591.263951,70.7144482 590.876621,69.8155493 590.9,68.88 Z" id="Path" fill="#F65803"></path>
-            <path d="M615.78,68.8 L615.9,22.3 C615.875203,21.340928 616.235317,20.4118317 616.9,19.72 C617.547817,19.0506027 618.449041,18.6872059 619.38,18.72 L634.63,18.72 C635.64758,18.7359883 636.627509,19.1074416 637.4,19.77 C638.233003,20.4058524 638.845164,21.2873645 639.15,22.29 L650.15,54.29 L661.29,22.29 C661.608719,21.2943995 662.226826,20.4213666 663.06,19.79 C663.836411,19.140258 664.817595,18.7860398 665.83,18.79 L681.08,18.79 C682.009485,18.7723021 682.901791,19.1547191 683.53,19.84 C684.192419,20.5373141 684.551934,21.4684571 684.53,22.43 L684.38,69 C684.412024,69.9543928 684.050454,70.8800124 683.38,71.56 C682.723535,72.2226258 681.822426,72.5845171 680.89,72.56 L674.1,72.56 C673.168855,72.5774675 672.270416,72.2166488 671.61,71.56 C670.941001,70.8749956 670.579921,69.9470191 670.61,68.99 L670.7,32.39 L657.36,69.13 C656.988416,70.0838348 656.349536,70.9102123 655.52,71.51 C654.734577,72.1438986 653.759218,72.4960135 652.75,72.51 L647.39,72.51 C646.387527,72.4923334 645.419667,72.140384 644.64,71.51 C643.818452,70.8953887 643.179069,70.0693751 642.79,69.12 L629.7,32.23 L629.6,68.83 C629.634802,69.787823 629.273023,70.7175951 628.6,71.4 C627.944212,72.0636445 627.042642,72.4257208 626.11,72.4 L619.37,72.4 C618.432799,72.4183203 617.527839,72.0577785 616.86,71.4 C616.143427,70.7285743 615.750037,69.7815254 615.78,68.8 L615.78,68.8 Z" id="Path" fill="#F65803"></path>
-            <path d="M692.08,58.84 C691.973218,57.6336327 692.466829,56.4519567 693.4,55.68 C694.12014,55.0807712 695.014494,54.7300443 695.95,54.68 L700.41,54.68 C702.663333,54.68 704.373333,55.91 705.54,58.37 C706.7,60.82 709.34,62.05 713.43,62.06 L726.55,62.35 C730.943333,62.35 733.143333,60.92 733.15,58.06 C733.15,55.8933333 730.483333,54.1766667 725.15,52.91 C722.75,52.33 720.15,51.75 717.21,51.18 C714.27,50.61 711.44,49.9 708.58,49.05 C705.87988,48.2547647 703.245348,47.2517704 700.7,46.05 C698.399488,44.9682289 696.403219,43.3327311 694.89,41.29 C693.392835,39.2306421 692.616105,36.7352654 692.68,34.19 C692.68,29.17 694.473333,25.3066667 698.06,22.6 C701.646667,19.8933333 707.796667,18.56 716.51,18.6 L726.02,18.85 C730.924684,18.8052317 735.735418,20.1956173 739.86,22.85 C743.96,25.5166667 746.003333,28.8133333 745.99,32.74 C746.104216,33.9511338 745.614157,35.1407428 744.68,35.92 C743.972856,36.5214361 743.087125,36.8729163 742.16,36.92 L737.7,36.92 C735.46,36.92 733.75,35.68 732.58,33.22 C731.41,30.76 728.78,29.52 724.68,29.51 L713.41,29.25 C709.01,29.25 706.806667,30.68 706.8,33.54 C706.8,35.12 708.19,36.41 710.97,37.41 C714.24125,38.5440576 717.594334,39.426624 721,40.05 C725,40.8233333 729,41.7533333 733,42.84 C736.752403,43.796252 740.228609,45.6182636 743.15,48.16 C745.84998,50.4490644 747.377502,53.8309112 747.31,57.37 C747.31,62.39 745.506667,66.2533333 741.9,68.96 C738.293333,71.6666667 732.153333,73 723.48,72.96 L712.12,72.71 C707.211841,72.7573081 702.397191,71.3667955 698.27,68.71 C694.143333,66.0833333 692.08,62.7933333 692.08,58.84 Z" id="Path" fill="#F65803"></path>
-            <path d="M176,111.05 L176,123.81 L171.69,123.81 L171.69,92.61 L183.04,92.61 C188.81,92.61 192.68,96.61 192.68,101.85 C192.68,107.09 188.81,111.05 183.04,111.05 L176,111.05 Z M182.25,107.17 C185.99,107.17 188.25,105.1 188.25,101.89 C188.25,98.68 185.96,96.48 182.25,96.48 L176,96.48 L176,107.17 L182.25,107.17 Z" id="Shape" fill="#888888"></path>
-            <path d="M203.53,111.71 L209.25,110.87 C210.53,110.69 210.88,110.03 210.88,109.28 C210.88,107.22 209.51,105.5 206.3,105.5 C205.094424,105.418003 203.906525,105.824303 203.003696,106.627445 C202.100867,107.430587 201.558975,108.563079 201.5,109.77 L197.5,108.84 C197.94,104.84 201.6,101.98 206.17,101.98 C212.51,101.98 214.98,105.59 214.98,109.72 L214.98,120.33 C214.964645,121.495374 215.051646,122.659846 215.24,123.81 L211.19,123.81 C211.04052,122.881154 210.976918,121.940514 211,121 C209.510823,123.298723 206.916404,124.637778 204.18,124.52 C199.87,124.52 197.09,121.52 197.09,118.18 C197.1,114.35 199.88,112.23 203.53,111.71 Z M210.88,114.71 L210.88,113.71 L204.41,114.71 C202.65,114.98 201.33,115.99 201.33,117.88 C201.363095,118.748086 201.746619,119.565693 202.392987,120.146105 C203.039355,120.726517 203.893369,121.020169 204.76,120.96 C208.15,121 210.88,119.36 210.88,114.74 L210.88,114.71 Z" id="Shape" fill="#888888"></path>
-            <path d="M227.77,123.81 L223.64,123.81 L223.64,102.64 L227.64,102.64 L227.64,105.64 C228.983384,103.304982 231.507823,101.904226 234.2,102 C239.26,102 241.77,105.66 241.77,110.37 L241.77,123.79 L237.63,123.79 L237.63,111.09 C237.63,108.09 236.4,105.76 232.7,105.76 C229.44,105.76 227.77,108.36 227.77,111.57 L227.77,123.81 Z" id="Path" fill="#888888"></path>
-            <path d="M265.39,120.59 C264.123446,123.01383 261.57259,124.489821 258.84,124.38 C252.63,124.38 248.84,119.45 248.84,113.16 C248.84,107.16 252.84,102.07 258.84,102.07 C262.58,102.07 264.6,103.92 265.31,105.63 L265.31,92 L269.4,92 L269.4,119.94 C269.393999,121.249913 269.467467,122.558984 269.62,123.86 L265.62,123.86 C265.474248,122.913625 265.400702,121.957533 265.4,121 L265.39,120.59 Z M259.23,120.73 C263.02,120.73 265.35,117.43 265.35,113.07 C265.35,108.71 263.06,105.72 259.28,105.72 C255.5,105.72 253,108.8 253,113.16 C253,117.52 255.27,120.73 259.23,120.73 L259.23,120.73 Z" id="Shape" fill="#888888"></path>
-            <path d="M298.53,113.2 C298.53,119.67 294.04,124.47 287.7,124.47 C281.36,124.47 276.88,119.67 276.88,113.2 C276.88,106.73 281.36,102 287.7,102 C294.04,102 298.53,106.78 298.53,113.2 Z M294.3,113.2 C294.3,108.32 291.22,105.68 287.7,105.68 C284.18,105.68 281.1,108.32 281.1,113.2 C281.1,118.08 284.18,120.77 287.7,120.77 C291.22,120.77 294.3,118.13 294.3,113.2 L294.3,113.2 Z" id="Shape" fill="#888888"></path>
-            <path d="M317.75,106.82 C317.153912,106.733389 316.552347,106.689942 315.95,106.69 C312.47,106.69 310.14,108.54 310.14,113.2 L310.14,123.81 L306,123.81 L306,102.64 L310.05,102.64 L310.05,106.34 C311.132122,103.823292 313.652596,102.233087 316.39,102.34 C316.846155,102.34552 317.301059,102.389004 317.75,102.47 L317.75,106.82 Z" id="Path" fill="#888888"></path>
-            <path d="M329.46,111.71 L335.18,110.87 C336.45,110.69 336.81,110.03 336.81,109.28 C336.81,107.22 335.44,105.5 332.23,105.5 C331.023761,105.415203 329.834309,105.820526 328.930841,106.624236 C328.027373,107.427945 327.486272,108.562094 327.43,109.77 L323.43,108.84 C323.87,104.84 327.52,101.98 332.1,101.98 C338.44,101.98 340.9,105.59 340.9,109.72 L340.9,120.33 C340.886006,121.495732 340.976367,122.660377 341.17,123.81 L337.17,123.81 C337.007383,122.865645 336.933727,121.908116 336.95,120.95 C335.459417,123.247172 332.865953,124.585734 330.13,124.47 C325.81,124.47 323.04,121.47 323.04,118.13 C323,114.35 325.8,112.23 329.46,111.71 Z M336.81,114.71 L336.81,113.71 L330.34,114.71 C328.58,114.98 327.26,115.99 327.26,117.88 C327.293095,118.748086 327.676619,119.565693 328.322987,120.146105 C328.969355,120.726517 329.823369,121.020169 330.69,120.96 C334.08,121 336.81,119.36 336.81,114.74 L336.81,114.71 Z" id="Shape" fill="#888888"></path>
-            <polygon id="Path" fill="#888888" points="363.2 123.81 363.2 92.61 382.2 92.61 382.2 96.61 367.52 96.61 367.52 106.61 380.81 106.61 380.81 110.61 367.52 110.61 367.52 123.73"></polygon>
-            <polygon id="Path" fill="#888888" points="419.09 123.81 419.09 99.52 408.44 123.81 404.44 123.81 393.92 99.52 393.92 123.81 389.65 123.81 389.65 92.61 395.5 92.61 406.5 118 417.59 92.61 423.36 92.61 423.36 123.81"></polygon>
-            <path d="M449.49,101.06 C448.982092,97.8538566 446.131216,95.5515584 442.89,95.73 C439.37,95.73 436.89,98.02 436.89,100.92 C436.89,103.17 438.25,104.92 440.89,105.46 L445.56,106.46 C450.75,107.6 453.66,110.86 453.66,115.22 C453.66,120.06 449.52,124.46 442.87,124.46 C435.35,124.46 431.78,119.62 431.21,115.17 L435.35,113.85 C435.453196,115.729635 436.299659,117.49107 437.702796,118.746015 C439.105932,120.000959 440.950542,120.64638 442.83,120.54 C447.14,120.54 449.26,118.3 449.26,115.54 C449.26,113.29 447.71,111.36 444.59,110.7 L440.15,109.7 C435.7,108.7 432.53,105.83 432.53,101.16 C432.53,96.28 437.07,91.88 442.83,91.88 C449.83,91.88 452.69,96.23 453.39,99.62 L449.49,101.06 Z" id="Path" fill="#888888"></path>
-            <polygon id="Path" fill="#888888" points="475 123.81 475 92.61 479.4 92.61 479.4 123.81"></polygon>
-            <polygon id="Path" fill="#888888" points="500.7 96.61 500.7 123.81 496.39 123.81 496.39 96.61 486 96.61 486 92.61 511.17 92.61 511.17 96.61"></polygon>
-            <path d="M533.75,101.06 C533.242092,97.8538566 530.391216,95.5515584 527.15,95.73 C523.63,95.73 521.15,98.02 521.15,100.92 C521.15,103.17 522.51,104.92 525.15,105.46 L529.82,106.46 C535.01,107.6 537.91,110.86 537.91,115.22 C537.91,120.06 533.78,124.46 527.13,124.46 C519.61,124.46 516.04,119.62 515.47,115.17 L519.61,113.85 C519.713196,115.729635 520.559659,117.49107 521.962796,118.746015 C523.365932,120.000959 525.210542,120.64638 527.09,120.54 C531.4,120.54 533.51,118.3 533.51,115.54 C533.51,113.29 531.97,111.36 528.85,110.7 L524.4,109.7 C519.96,108.7 516.79,105.83 516.79,101.16 C516.79,96.28 521.32,91.88 527.09,91.88 C534.09,91.88 536.95,96.23 537.65,99.62 L533.75,101.06 Z" id="Path" fill="#888888"></path>
-            <polygon id="Path" fill="#888888" points="575.46 123.81 575.46 99.52 564.81 123.81 560.81 123.81 550.29 99.52 550.29 123.81 546 123.81 546 92.61 551.85 92.61 562.85 118 574 92.61 579.77 92.61 579.77 123.81"></polygon>
-        </g>
-    </g>
-</svg>
\ No newline at end of file
diff --git a/pandora_console/images/integria_logo_gray.png b/pandora_console/images/integria_logo_gray.png
deleted file mode 100644
index d901e72493ff8e3a8cd27e6465f7c77fd024c298..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 14755
zcmch8cUV);*6xOYp@$YaL<K}a1Vuy<2&i<CCcP;|nutgXH6TrC5l~Q6f)wdQkRk|#
z-Yj%bdQ&<i)Bqv5+jG8Ce&;^l_uPB`xckXuXJ?YxvnFfSdf#^@)F0F_AQFJk(*AjX
z2OapJXP~F2qoZenLXR=9FtM;OGchx>vT?GrvT?96Gqdxsb8vCP;cylhFCPy#A161Q
zn+5`Yo{pZ8o}Q7Lm6?_M|N5Xd0vrrLJ*@zQ<|IJNK?C8Sp|;Xw0RRm>&EF2-zYZE&
zuz$y(42(?7>;Nqd1VT#(`O{nQlObRoK*vGPdE&g<F)qWq(34)=7s8X?F^FC(Yl0i~
z5ya%|A3bJd;^F1v7Z5)sar%tpMfpn#m#-*ZzoD+7sim!BeA~p-%-q7#!O`iSvx}>n
zw~w!%KPn(FA~GsE=E>98<do+xQqx|(O3%v9$$g)fUr<>7v7)l7`cqA9b4zPmdq-zi
zcmKfP(D2BQpQAIgbMwD`FDx!C6F0ZEcXszk`v)`t<nQKy&wn@Q-|XQ4?V+WkgU~_$
z*h53>4;Baq9sP;($2iptp?AHwPF@IS;J%jhuB?esRL+P1w|~^f#3OcbMx6M^q`z78
ze`e6*|0j$7Y0y9Ip^gG95E}3YgKz*y;K(>D_B8OfQsk!iqBO->dSb2Buc|M;uDpud
zECJQA8^f^SG4ti_aiNf^rCTb6*de?muv_D#CF&~Xo51b(Q3z1}_NX?m4b8a3V(Q^G
zsflRuc!l2v)Pq|}QAK9Nv+a8Nh8cu~6E+m}gVWQYwB`AbB|*%nU<-Q{r?7_CijX9f
zqBNUD1)>uOBV^Jtes5WZa>edSpDN<k53)ZYVa#5)C{AfFW1@@-B>t{lL$p~Up8%Ba
zgKM6A@vE^0)*)v3<f1tp6Z?36ZByv+h{voz2wpw-;|w~!L5whPQn_z%4QejK=#6nc
zY}pbWt#4^U@@(r1aEDv}aFd|eoMZTc*cHqUjTsHQ>UKISjOqVpSy1wvD^X~ybsqJ!
z3*JbgFGOUR?rw|ZRgci-5!2#|$?$i2`4ex)Le1YnS*0>!kp-(X@|)<V!MY){-)ucJ
z4W4&hjA6pJ2<(~&hfx8gUiuAw)P@PMZSO7m(s84kre$w5*>{C|YJS&@t_KSff^3Ni
z>65J|%F56+@_nLTserGl*wHO|Ya+6-haKhDt=pN-dTUbFqODBDK74RZG-+F`7y8yv
zog4T^F)HG|)2(&q5ySGC)0wb)Bqw6Cm06rFQRuxn8;`VFjpN!=Wz9ny&EOpoLSp&J
z@()gTpEb^N*s+h`$h@Td1E*HSV<neX_!)F9#;HJoLmwk$X>DnHk!G8f+fbFB+f0H8
zn`NzTS-T+kv}AHKU_8e_>i$G{vhJN}wyPppVT#>SEhR`->#tcWYOOcoD-<l8gh^68
zzokZfR!F|O%<f<OraZj_z6d(-oAM*xWioRcsssPe#Y}#7>Pb4{an-3@AN7`mFP=;r
z&oI`02qUSCeidbu)$JN{$Dk6Wvc{lKVfw8_msH+|DGS89DR#zoH@%3y4tb`o_}_b!
zdu@CC*CrDUU9K>C#k#q<yx5+Yy5sk!L#hLlWLZRR+zBO6Zpe_C!jzn6^AfS`lVVA;
z-bb(9ZkiVSNZi=5m)mahdTywSa3EbZE*~Pxytj5;eLvE9!^9XX!$fm^{XC|*0_S;W
zpyX6-?Tb6rQMz5CZ|ETf@^e&xNrlJeRE%d~Lw&w$`wm@^XI>|}2hyi%`nr(!Kx_#S
z+jtO-otavbA!+%t>J0P49V_b}s?tr%jsl%xejCGJmrODQ-`?7E_t`9&e>HiLvYaXg
z>n`lmv;<C<eo-Z<&tllKzVN*9xbxsfwZ|`7<%gm6Dvv)iBY%E0@<q50d)!rSJ%16~
z;{l-7;OmBzZw!Ka87J>q`&cO<j`-Z{NcW074`8}fAgqN7#Ad=6vg)TO{Dotbh<++C
zElUMv3z8|{IM|i&?21^^3RWucF%}@yO8s2N-z%zsu8yv9W;9zp!gi(C==o1$V=J^q
z)$XOo>kbuT1E@fQ77Ln2Rpc|lxFcb<9{4e-jW_y0WASq9EV_Bhu$Ka@4^$40n%3vk
zoyPN8OkGCJCF)E5z91X?v4vJy(>gHR&L+F~NpUg1xufhAIs-@%*hyE+ekv7MTL52~
zc@v?tRoH39>B`hetFfQPU)kH6u9a%hr7Wwh{TO*dHYBC-w(76;oNHPQ?fAXm^KQ@c
z=j!<cd<pRI#m+_xW}m$RcCZ;o1=Qf1@F0okP^8tO2x4G+xG(2b$sO~XkEekjeBUn-
zRYmsIQPt#&CDliO6BTGoq5`e`xHTyk^9Q}}nKQI%=)$Q$a4)pN(Bj}&jr**g$cS;d
z{qP85jXw*=cLtT|$4I6IEg<<JJs=HlMa9fXM3I%&xa<V?2dCQ{8}1>eEtn5Rc!Lgg
z8jIE6M~Ovz)O*CW&4hjn1lho65QP3}<Tef1O<H{_z@-WHqvr^)2m6r%_M;d2xzCn^
z3b0CfQvp>zJVA^K5HF%zbiirfdrXGRh$QO)LG|$2RAfalOQWrek;c_JUK%QJEqi|?
zU<MQ0AV{=+%38AVbA5cqqqHM+{(!CZkk$o)`&-INUoXp+lQl6+Zk?vFHvLRYYp&(G
z=#d{%>$D=AypJXAF(33oJ=Ia)HrCEK2qMZ|{JAg|dFE8$ncJ7N-RJd}H!H6C>`Yx%
z*yg6$xNR0LvnG)rEm+}hR5Q<LF7TQnV7fpFJCB~$23^esGO>tbuRO{PzjMxq7U~zf
zf_$gHVskEuc-SHkCu#k<M81cvhiATLNc%`N6Q+|@uoT#qSbhK8#lud|6UYuoG~~zJ
zyWOJaU=%eO^wm`s87lQGwXdkQEx$Qqw$y`m11i-6-s6Z=pheNU+$yBV=x+O>=;*71
zGU(>9nlbFCrL0zUFMrIv)K!^9b}FC<?2bw`L)WCelit#vM6N7?Lo2@$%0jfMPPoV*
zuj}aYqRZ^*_nY@&qRL01kp|GOcsS>h%JCJf`^0a-#|G8pEecDJN86*yZHW#KPql&J
z?oleBp=WIPf>~4IrTzKim%E(i=NA&+2yBAEf|S=HU|Yg6GRbQ(%ckO28=%w>xGKuJ
zeUWBkigB(MGc)<5Iy|zOE9~f+rw5j_KDttn-`!c90~bAx(eeFP^fi+sLOOUTw7qTQ
zUiraft&_2EkIye32VB0)2Yq9f_P_ha3?USp?ml`m8%5#^+h>m4ZCiE|dh<>^s5o3P
zLO-SL%-(@+XTmJ9YN!Ak=}?tu$ozi!;kWZtAeBW2{N;kH7|BwZnY6K|Gie(fNNc5U
z?K-@zr0xka4ATo&J9s0$l~Dm2T%OeI8ro2?p(cNd>(ltS_9gVBJ-P%i038jos!vM=
zI+JEL4xv_5U@^BCnSkBA>5DydpaR+1B|ZOBZ6@r+$|5!b!Q$ala%#k8@Q%ff)C<l=
zF@E+FzqAmOqHlJ;E4wea9X=SQarfYsN+`=z3r~#TrjgK@lgGx3aQBJ3<O~k~cDj7V
zE!rC081v<zpX^YZ{$-}&qjX&f_iKl1Uz$eyvp$g3M2WcP`H)2`{3!B9LTB}W=X?Ic
zo-(<E^azT8t{xT0l%F~xTM`6LL#FUEITcd}5F08m)mGqvcV*?D;#%_Wli7QgO?d_1
z`o&GNWBQbs(wsg<XLG|s=N7H4%nK@j37H!HtTk_8Xv3!{OK)*YO(d(~1TF{d{JN$z
zm|0O*RO^GCw$R-~zjLkkVfV|B3Bc7kWXo$ic9%58ww#m7rr+g6FR%m<6U`M0AYvkQ
z4ohVOe;dWUu!{?R6Y?J}l_T~p+mZb}{CH)VU%TGD?~%kL6u-l_WGjCtzf8Yc`Gqso
zd_K`vWR(wbMDIeI*MXsP7sz|!;j5?89&&ABZJ5W(<!fSmE=KagL$wuK<&c~y*C3Uj
z&R(wgt4gF-3J#?gt}G)J4=wAEyDzE0D^JQKdiMo@3UO(gDY5;{ohmH3YyReenXbQN
z%OLxe;^l+AnGW(3OXyL6Iyii>z`h-YL)nuOHX1{r#gmNkB7J}INiNn#oWBfMcJ(aT
zIT@-7p_`9*=9)8T%Blv#s?yJk^%rqGX|f;3-i<#ndqUPDl?BZ)cNMSZg29u~B!P`(
z?yzSyNJhWCzIt|NH5I`oUt@pyUV?q6a)$c#gY&rOr-33rOJz!qoU4Pk4{|B~Ea-`5
zI5LEAF0I(yX2mk9!oR%DYZqnz%KzkDlQ@TW5)W4f;OkG~1nAV63T5FM05{DhiybUj
z|Fn28vVa90I5e^!n=TV=EBX4Wk6<5WL$i8+WaPF1v@<#QBJs9fbg$>r_E7UUv}B(5
zG@jk!v2*VZ-*YsVWdl;lzM&&4OyxwfLR7b6`Q_;%77o27JLeS@kpZRa5AF^Y->Hj_
zhso1OZ7XZe*qtHYAnf3yf}IPN{EEMMFc)9~x@eN@_%{-MkWWJfL!o57+QD-pEw#n%
zGu>RSSKr{fFBoKyY1MW``|Fb_2do#`gFe5aGbNlz)<iaEI;QW-%zUf}Rq17VgQ(KD
zye)C8er~R9>nB<1(+%;^0i}m!BCjT>KzT1Tj;uy{S3sKG)M~}J<`ji4_Xz@tZB(ER
ztu{7Dyu+yq5!=mb2tUHsN#vD=9gKevJBUoVAeLCO`NC^2gz?J4lB$Tb`}DWaeUp-H
zJq^bPiK(S#TkVolWGM_cx))+V1@NqPwje<{fo}dp)I0*@VTXjle|tT&v&KzBEZK;x
z{3fq!v$(grs92Z!y=Z?9o?`dV?EGv`j3RHmbdJ^M%d@q2Hzyk3IT^2DXAgvWq20CT
z>hn>4I}f(UYCI(DX5;5XdlMsr1P+{MJX@dC1-)1NT6C=FJ`~G&Gy=`Wm91Yz<l|oY
zdMN6Nn$&%G9-TVu9NxL8Q)WyqDkF)8?jkw1hm5XSpMBN|eQ1ybPGU)HbC^mp@f_ZB
zCWLA0b}bb!z8_T;@pvICe@`r&G}1MBj+mM|r)Rh!&-j#I<u;Rk8t1`jO1)kXdX3kQ
zK)UoDE_QaL=rc5*VF8f=o3T?g0BGz1x|BxRsx>9ptl&26SWLcFq~qnPkUV0$)PxE>
zO0l`6xoUKvF?rc6YV7+%#smnQso_=oE#;7+K^Mq8gs{~*tFBMd+!3n2CXGcrZKn@`
z5rUf28aN1##@rxZYBT&kxqQT)WzUouVaB$924nI9ZuB}u<E<Q}4!`S%6T?{@<sj!>
z2aqdYsDQKErVem;uZ5!IK?PRQseoig<_FMpLG;0Ie0Lt03$lw=(nBLWb`vyqnNJ5E
zd)2(I5;1tlG$SvAp}@=RKUDsrAY&(4VC3KuAW#oJ&q?W5)Dr#D?`iHo-iaR^K>k|*
z&18$2GmDf7wwiHCyA{{-x#G>ulXOlabh7*#oyaH@;@_Rdwi*OO;_pH9Bd|fCNQ3Cf
z(({O>lnQLj_Ck}8EqHE?+{EzwXUNa@TPdoh^1H7C-fRDwwCr(}*mI75M}C6y19@`t
z0D6(tp9-LPil!*NmLdgiyCWGQ>B|$8ZQ~0Uu#LUYC{58D%ZqKoT9Vxl)pp<;RDfRP
zjP(kbNbf9fzQVzot*omjU#R}F8Vvs)6y`mEWgY%qRx?!UG;ln5xNXYEKxga~&05B^
z(A*dt-RPficg}{%SIndSiIDH8IW6*}3uILhB*~I)1A-yvHcbw@m_LxY(@BL5BZJcl
zmLB7xSCV<v!ZR{sNq=Y4Dy;+=@>3BJD)7M<Pl>f`A^oHRVjUJ#pbB}Qs5t&V)&l#s
z4b!-om31ayhH?qrb$%GVhM^=THkjcGRsM4Q_bmUnOdo&r20yRW0NxP9ri=MS3yKGF
zyN{?q(#b<gvkVo;%F2Y@#$l27_8Exh3bD<@;h4e8AcD118wm^jR`vB@z0B+TkF`{}
zoqIi$ZWqYZ%75VdPi8Tc0mPOx6&UNG^k>3gI9#X@x-%*hJ@VY{fC2ZcXk{t}v3bG;
zvGa?U^7u3)`wx_e`K#feW%>X4PMEUPOkUfMV48ROd0p?7S9Bi@?8nL8bTaXZN32sS
zhe3d-GluRxW=Cd3ko8cGrkh_G6D6Lp<=#$5|2T(Un6x{b?uC8=k<`CF1v*;Q)HY2T
z2-7t|BW)48%-H?CGz#fr$m0b{$S;r%u>wIce`OJUe}FqUgH-v^1Ti#Geg^a&5M*Hk
z&>In&|J|JeWD<jQ8f1xj>!qo`haOzAKjqQpmxZ&2t^Y0$Z31b43Wz4Bj$uAnQ-Pj3
z{9aQgYY#X~DvOAnLtaXx)Hu>bf1f>@3gCWFfo)zKf@G2D#!I={FCb+R{5fFQ)$#PT
zESy-%*n4Pw5Oj@^3Y_Fd?;Ij1kGE;IoI>OYFpBmna)&6h1>chX_e*Y?#le4*0fPPK
zaQnjK>r~*bAm&J5sE80j(b0HH1#A#hK)uolwL;NEgE0Gt#vF)>E8WP)sX%g47J396
zzdjFDk%B`lbZ5zX^vDLKb7*TQg!!-6K!_dKpmqb;p!F2kfV`i4NARB}Ji#Uuz$OxG
z68;8?gLnRXaR6*6jq-hH{>2KqB8Hrx=zJ7_UR|@*Rz=+Zf$m7aA9>sTvNmh;e5yUI
zta#bu#l4}@@J+)S^O1Lch)#c`&f0zCT>BKI2DgcO8LBX)ywMt>Z4oD4+s1NdSCB@O
za&V8l2zfSC`FhQ7XMKmc;K90GadMS@Zy@Y$n{iS4x%AQRAMfTBJsDk}y$nfumizJ?
z+VUW;1<9gxb;iZO%9YsjF#C1U3r;QlQhjC;jVeMSH)k{7F<R5Ow=nt4)Ia^g?mj4z
zve4+NBDntLS%`nD29xH0U&F5C!3Fm{-I9Md!ZL#koUC~oe;fh5eclGy!54|<th_`=
zUSdWZZf75uou5JO3;1{*9K}$9>)bTEHh;9EV5ixTi;EP|p|e^YKi3`Oy%HhpuwSu<
zmm1tihnd1M?f3^Kt%{M?RD(PXD`OV(DD<i#uIk(d&>tD};Qd5frgquD7~Q99juu4D
zzg$7?c2EILO{@R0Ruv&NG7cvkg*2%OA=`WQPbu~sfuy3ZZ=`!?NAs_5Z2wb5GwZ{C
zOd~(#o!aF<AHm_l3w9cz-|aTV?9e|zxVe4%HqG*jdHlzWWRKwU`F7<qrR#oYc5VxW
z77wkM^pGGos6b>;Q>}WqO}Qp*MFgUKN-i{~7pi89IJ}Ae3fka_Jk+Ug{!gqM5=5Az
z+>nM)>OjS{S3Nk&&Xx?uy(DH;aHLP;w>eaWg~5Ro(rkb3s=~jbrY6B51XH`fWhZ4e
zn%<ChtU7n%hjr=VIeV8kY@bB=MRqn3aY|Al(`#-Xiu(*cR}xiKEQ~+OlpQG=KyyNS
zR3xhgd<EA;merq3dL&Q04zqd0v@rPi{I*KvHhr)PqY;A`N9W1UCD1wjSRXzk4pbTe
zH=#SY#XtqZX$5yOVFmd(?A@arUthb)rAxOa^S@{BoO+MhO~JFVq)UI4c=%CPg4mP^
z3(hJJmYTil$+O6lUXt$^>nq{lt3elSynTGQ@^AAD{u^JxA}tZ7aJn;b{gUT<KJ*2t
z{vwGsTSQEotw=+Ep2t&fkzUgGVW{L(IM54iuiVD0?&pt<qt2{xnkZb_V{^nHWmzAy
zDZ`Ww1@;f^dS&Y53ia}q*<YSJdAUhQcC|Yw;>V!ky`q3@o7|zO!KyUoel6>Q1Fx~s
zFqPq~2FC%4GO4@`?vy@!D7=20AGz0LIjBF1v}ICQs`XZQRCFAXI;V=b-e;$bZqaf_
zZ?g<g0SQof$Okk2Gcf8e^5;=Njit>1+FN1PV@K#0m^y-7qyk-3fK&(q5_$Z=F;^;(
z0_p&_X&V3M_+|aQtU%>sk?k^PVNRNN-D*KEk9{lbf%|)s8Wj*11%0a&1LnxlFlFQ2
zXP|dj-2}a3>L{sbq40qBKi>fk@H0?yN(dLF22Y81TXj$T(~8*CpH@6UhAi+|063im
z(x;WbeKYS*TQWy)i@Kyht6X8=B<?u?lfuu@y5umGpZ@}C4d$fQ1VroG`?5`wF@*C4
z@EzqCGHQ$pjL1_=W|0-J@O6PTC2d!ZWX{J@AF{<6W~>i6!q>uAR7I?&YqG0|iBV@u
z%i4s=EbARKs!7^nBR_TsM}7?gq?TDvmKGrnTj^iL4sK1T&&?QB)cqi5koMZZr<o76
z-NH52M0%?qiQPGap2?|{Ie=KAr`j`Np;>iMkW3r>A=7zBWH)fs|NF{s!$=n-`!c(d
z=`%~$rf8+k!Mcb=^SSLz7S9BQvPrV$(9N6t4x6)Lh}qi)Q%Rj<DJ&t_LnhAWhOGrI
z6SDGK+DTjVo2a%Zub=p<m-ESi$?m<O3@9Uypmx)}68=M;H^KX2q6whXmU*y%%}NIj
z{Qe-HPcjK2oGKCopZ;sFH|{fjiWAle-@?saImj>FjRi=dvD>hCTN+R3%9^h`zktaK
z@00LW&!Ozy9g(T)wrEw6EyC8EUtAvPUdOGWue;SeUQces@h1u2zN;@35zk_uPqrY{
zWRX&u`&|`vzj=wbyi3-I&nhf>u+en|QYF>)M`cMMEOboJ&goPOWa~QzKH)L^#cO)!
zilhcgWoPRJH_aN7r{Ua^2)HuiDsWx*;R9hy3mYcM!e>7glC>e5I3Cbd{<zDZA~o2+
z7Hn8XFsYw>TPRlKu9WdekA0%-0}WjuJ5+RFb8{3ps|qBe00Zdoq#)^aCaK!+kS)zi
zx~=j0iDOWMLd9gQj)zEr<)Uzs^0er54=i9ryZUxLt#<f|0H|t(@^|g23{4r(*g6rv
zGznnhD(V$OE+8t#Ev~Ldvhyc3&&TgH8FthMdVnli3BjUd=JoJHX%wosLoh?RP^B1!
zD^QZjsfw8SCU?sZCSFqEb(JmZahTWIo8jEQua}rg#MTMtl6v$HPvt!jV@?q&YE43z
zJeax_^Qoj3q%lW9yN?D-Ca_wAcRt7EC(iSY2RS+-`fH@{5e>2*CHxY^B8K@5xAx^j
ztki+vrxGpt@Ec=RY7G)cFXLeSNuh$M+#jcVWj1eJi3|sM{Br}SIH9^l!Iq2Q^df4V
ze$vu{T`2ObceP3j|K2y>ia*OMe=mHKrwGw0vxjP)g%-Ju)~hM&b<RhrLYTbklXX~|
zqt}VQLlCBd`V-MRis;4>D)1EN1#<tpbtI1275f{0&ur%E6d2^FKnT2em!v$$ZJ&1|
zMYP|%6U-__%gd)BzhI=>BC_C25yS6oA}NxXzh2g3XC>O*(U9frn=$$x*H(`QFs6OE
z(R18K?2Y$W{_h$X$<+#b0D!DL91Ma_GuaRnI5Zx)$S89}218Tq`z`{etxxpoV*kn0
z;;(Y!0cHJfHV?87HQl-1SxH~`-iw`mR*@5;2wSj5JgGy^!r;gBG>y|;w0oXKiiJ)|
zP9xgGWchW@8^=c^vS}{Zq&0Pp>OWOHZI~>gfm9RZvUUo>H6j7)pIQ`A{L^<+{E7Vv
zeD*L4<><>IH4^<{iaiM`91TSOD0|E;OiyjqCoTpxpmyzecm_FwBtXy#<wq3;+;GpF
zj8<}*8%4^6+ZirXr2BkW60YB_tni`&XXl@T!LcEb@}hkii>Q;f*BPsv%nZ2`<3b+C
zZDz9NHCl301PGyN?<e32?CMW1y$Neg6;&p_35EBX#n^@R=ZRS?s<QPc_iQsCxpU6#
z#uK?;aag#PL3&?KJfQ*|!~+9p-*dAV6!TnFK`|=1=hl#iM+S2ZovwKKh4S;$oEIL+
zjSS%2_5=XpRAK|o5Lr7YZ&}giqwSL{SzT_&2X-%?sVZwq<OcY?BILCxzFjp1;qcz2
z?p281!`B?pN7~!FzZ*W5Dzw>g`G9i?h1Ka>=l*E3b+PHgaifQk2lG4IprB#La*fX+
zUMSL_MrE)x?&O8?Xj48(4K;4iMY_p$1ZM5w+~fuAmrK0TT~E#}njf+ik-XMyoeIgU
z#0TkXzkaHt`9LW*b>K|T^bcfi$aQOpHqR$S60bJ<7(B#wNk55yUZb8RUK#3X42scP
z8t>lOEm^)CSYNYc?!O(tn(*^M1hKQkj$|fs8g#~E@2EhiKzWI1?a0n2(F=7W)oDx(
z4xAQmU-L_hoNDMZtW@o~%-59(1GC<YH7c7DCJ=K(0t5ZOULSyAbf1|5?}$Y%(&VG3
zqKm4q40U#>8DsTVa+A(ljpR-onyA@^VI|$J^PY_RTuBAe-1R3ft3+<wwZ?9_Q-OF}
zX<|IiV<zOJu1i<PYwmll(4i-z__R4y{#`U=L^H}$$)eQK^^!x1kbauy9ew_TW2Ga_
zcJN@{oQdn1t~?``hNB*<D>iDSUi0ew)ur@E^H=Qr{ZJ?>uXPW7pLi^*3X~KA-ai}H
z+lOGtf%W=LXy%JZx+M7uJ>QUc!O!t>7@O=YiqK&?u=<Zs`;{mWbDwOIJ?>gf+<1I<
zFl7G0*Ss?LCMF@6KV&-Lo~~fq*%)d1Mm~#_!Jvc0p<Px-6t;QPKW@9`to-R4WeSpW
zF$ws(ys}JKLVoF&jw$9HJKFF4im&U>zvh_Ks0$H7GakVltUdm<7VtMZW@I&{8=&-1
zjqBURNJ&kB)O#vnY!x)ZL7q)^Q8#U29PaEdm}5RxJ@Zx072St*^p^%-Ac>r{l{Rkm
zDo(+qOF^P<E62YDd6sitX&~(0k}5L@=V|^@u8WUzSgSwS(n#s%>)?`QneqA*J~$_;
z@(M2hAD#K@GBFC)P6YsWvq?!0%jV{gYooIljdvX{T)2?%N%BfNa0Pb-#NfQG_-z?C
zJc(ZBk9uGauEmO4k<Sxt2JT)I971mQD`O9Mq;mR^&VQ<FU*pS{%J#OLCa1z~M(oEP
zn8pHISOzj{Z?J-xKW|WFT-&^Sb2ul~06VMag%l=x6pf;uxK#Nkk6N5%`2I{dTI2qX
z=o<%!u+)?!^g~thw6%Plp5pfN%(F<53YyK0s8ARQ({{7`wL{*h!l~Z`c;~KNUFfHd
zdQa5cbRY`ZTrE((f^ZFb^m@+a(y{R-)K$zC`E8p3<Qlw~S)bW_sryIr=A4&EegqhG
zMI1BPbf*;_`%H0ODhdMA#Qa0PxhU~p{z9o@{)_lmIQN()TajwMxN8H(@xoO}@st-|
zgIRlDs}taL$>)B0=D26UZ1QN(#33jVr<TbyobLNR<5Oj2^bZHVXjyD`ai2PHj}*~r
zD#AM;h94~DnVh)XHD9(`cr|6o?lfty4MBKGD%`t$8};saVVmI2Z4<zGDxM-gLJlEb
z86sQOIvR0#<Q+H4Bse`Vr$AiDtPe*qG3R`~L3M^C1RVw~J;h-*WiJHroE@8cnXp0?
z5qDM`N<y<fsk(c2#^&Rja&j?RUcS%lE%{jOp=Qfx^DXSj0EdI%G5oIE#(HU1c~$Cc
z01w|uqYZG?+~9(CCJUYy^}eTR6yBbTnv!JE<U?L84Lp57iIAua&Yl&%ew(QGZ4w`d
z5qos=q^sAaD7#KOUfsB(y52wi?Qk}6q=VVr#db=)0x6}SHP>?vJ$C=0N<^7_E^(L{
z!9wzGp$HAkai}J4J%^@Lc(6?7q&^5q0KCz(6<o!rb>?X6rn`dHmox<%mNBKb(9`nU
zYoJPSG&8k|XZVue`SP{l^A8fZ)K?}){@7MCJ)%Mz7wUS`NNrR;!hPR9GU*uzTktd~
zBqjhihmW<?41d-pCHU<|e90S$-y%^M0%l~iZvC5*H!+@HtcKFui@-dCTk!q}SweF1
zl&P?xE{wDv{Q90-JR$xgeDAe|<Am6H!1(l=7l?ubfdgd@2XzyJ!fYDVM%u8;c5GxG
zLVMVgeo*3b9cL?_Bu``aRMwG@ozhu8(W<BR(eknKe7DsBnpJx3zs|Zp8#OMNC!;d1
z7&<02nQHR0zzj44H}QOAn*JSc@$YdmyCz)=U7|iLp>NFyox3<Q5SM5Xd0P;iD5sYb
zuE}2*z<?Wf_jd=zIuZK>{>5w@o>WNEyfOTvl9J-=dtycGSpoWRh5t{W!WFEmFp?B!
zs?m-wpRW8G*Mk1~42O|V<DnpqQ2`~k6tWBC*K(Odo{gLLle25@Kfl~gWcX4>rVlZ3
zAiQo?3_2Efz1o`!=zY;a5;xuRK9*Gt%y3wawRx~FKFd@`gk{3sD#;L-ZHD>92Y+6S
zGwy<Iebp>agwARxON}X=AZ*+q+_WRgR82h65Lx$3Hzfzb?uOgQ|7*9+KX%=KXPS0Y
z*|}WeRFu(o^XV6v^~Wr@P=-%FMs;?PgBCKP8S88cT~pIBqw!qY*;6gT^9B5d(nW<;
z1i8%*Y>W$tGdpux!*z1UDnlFsM|dw)`{|x+lK&WH96HfK$Br_PRTIjPjG{#Qc(S?i
z)P}rCub<5PDz0!LzWe*7w4_hXVNfPT0LWyn6)Ev5S`O^mM}Ay$=ILcux#w%$t-Y=w
zoP9K4W%6pKgcHf;VjAf4z;Tm{^~Cb}Eep)hQ)Gf`?_Z<xe@5y5y0%j$>&bwcTb!RI
z3rp}zCM!7^0u>M{*@0k4tU(Qxg>CPac+(>nIIM2;S2rB<B5mV@N%YxYidF=AVm&qX
zZAQhsCpE9;APX@hj!c;QV}`XmiG0t*4D)Xo_5!k?w{Zg|!rrDaYJD5N{5|U>S+3^J
zrN<sB_vp9d%#ta+6tP2SjI_^_Db6YF22~jO<4uv!VzbSQG&94dBcbPsN)Okk0`kYn
zJ(Phe3(SWu`4wyh&kMG+nI2ZFv3xCQi)r<BUVG32wPN(osg@~EqWEOV$=_EQsx-7f
zB!fvhIPLk>%>D3&g&>A*>{d3?xlY4jG1nY@p@IgwI_HgVwv4Bv0!8&Q+bm#OYfWz@
zrOjQ%J+T~A;UM&FO}m~~S`4)?_gy%Q8_Zb9Q^TI^lRt7B?w-@=UwCCdXk)5%oZnSn
zHFIa-a^s4fX7E{(7jL)^_QJz*w>?Rg%|t)821~5k)Zh_4aGxaFR29n5JNuzhaQ<-M
zyM}<-x_<SYt4#Zcv-h$U5-Aee&Mv`?<?peciJGjBLtn=sazhyBFzgs+l(ErZIbG6?
z8x|WUX3$1bEh@kw)SURd_Dy45V6fAk!j+`WB5X?lxYW1kA$2Q8Ye4$!9lq#M@uw=W
zvd9;=iJCFeN*3?Nm;B$=y=vS~*${<1YZ(_90_XDm;ZO)ETfKJ6ryXOIz-DAF#-XL$
zX)hZZIj|ONOq6Se+$XqkHP);DDtm?Ar~?zL2rdWQh{oKHcV(QtD^ikGaJNOdI0_u?
zuuJG|$&HIL@sscoolN{8-8T?;Z=`{1L>)DD!?j}*l3$FhZ7s$o*j{Fcqkl^!5EYs{
zS=|ZR^A@Eqd^Ee{Uyf!T=1qtapyLKmzkl1yb_@5aPHs-wc}6DIsSo$db$jvN=DKv(
z*?0Qn3e3P`wyO(COWU>J9<b%>QY??J#sa?oMZ5k%zy7x~yoqc}ta>-?!TEjTmbrjM
zsnYwc-Vg1=N_Q|i^JjzIiPw!jL~oAVs7N1m<kVQ<+kYM(fswmNv*u%#PL?6zkn!@&
z38E$yy2?iIb1bTbpNymFwZ&w6ww7W$i4yI?ZhLLUE}>il4)w`Umr-r@8b9M`Q92-#
zm;&;I58yT(U!rsS0T2Feo;weZY4WYU>QslW(>>K!*g{~xtkAqFXI4}gh~kyeZ&FKG
zQsb`j&z&8MtKAii2S?sIt40POt;-0Y%nnuQbboM{e3fc6gIp2m$R}&M&4=;_-yROO
z_Qh9sxY55Y$T-j96#5|W7lxZ=#mB5?5<z-R<Z6qaJ3KWxxzRcHn=b0ux1SxRhzaBi
zw<Rq94!Ezwz0Wm6cEF)pQ`9FvN|=VCl5^om`2gJZaX+hWU>4W*N=eY`*sI*eG{rZa
zV$#RYCKX(^g_>Tb*mzs7Oa$A-emPXDx_HO)(&N(#YaM%D*p@4qFpsRdo|%!hYGPta
zfu=XzL$_ViH5D!u>q6)x<O<(qI_FR1EBY*CeNxmMqJj!Ix{iiS{jA!@pVs^Qv3f&G
zZckrd2iOagYJJdf4ux;3Z7UWz(=VM}^*Z?kLS=l@B%(Z78Mb7bFt;IWMMAXTN2L*?
zPA?+;h>(O;jYs--{s?y~y--7S)O|Zn712poPIvajs-pMB9t!DqkJCZKqwU1*_-<H*
zvXb5vtxVDpPvIV=W^LTkaPiZ)hD}k5-}(jw*28BgLZk?yL|c_iK+aNN$V9D{z4N{?
z3m|qk2bvB0UOUC;X2)?(eg(C&cB*?!=S1C4d!MuTGh^{u`jZ`Qz_y~)!d1Ib(N?J-
z!5$C$-LWQA|0(E$0APJ3b_e^^_9_T*k<C&C7JTn(YJ7A(<;1O!=kK#{UWy<ksS3Y^
z&)G4Do^ubCC0e>xFS$sM@&>o?o6<Q5tzWbzn-jq;5Blg_l(A0bTWO1$H{{jAF<nj@
zRk~eJqx+(c%E%>ZcGxo2RHn41ix>X9`QvE#g4f_NvpZ~81$Nz~K5eW{*TkvZ?kj$p
z6!G{1@-3kEPh1bTG8mMuC^}QR{#!T5<@V>!1%L?vRm4%Q*7sl3D*KMxKad$$imeZ>
zRD!jEVtjD=dNBP=(~Lf&>!=rB>g7GX4bewa1s%OiL=5vcnKn$^obfBz4{2CNSv8?O
zX3w2eMu+jky;}sb$}7>_iw6LxLL}z7-<ujwHQ+nqEhx5;nC*y`|8`IM!WRQM>u#O)
zo97B!S*AJZ0pFd?w6+ZnD$uMwSG3PjZ8eH5Z(E97M)QoL1r8KC8cvG935mJ+(adMP
z;4ze1g>HNSlz@Aq!h^a(cAou$%DFatX<px_<DCJ@j>IvylmZH|8#AzI{petrlhD)h
z<&`7JJAuE-!bztMcfNU&vRj5JQoS-4i;|6`BFE}AbYzbg!QKJGc{-NBj0%D*HlV~T
zWy60fyMX<+b!YfBn7Z{F=bA402@rszFl)lI%4JKnLLOhZd}X24k`dtkJ7iet>*-TZ
zF5+oB{LHxQx(7G|*Pw0~vJaL7M`2n^EXdk(N2V@Y#}74s&KiEd794@Fb|&Hq>X5mm
zG4EUt0_S*o#Vmw74H&^4e){=S>bXmMW+_6~J-Kc!9KE2!_L|8PKDVZ+oF!zrncWu%
zcyOvayqR^u4Rc3U%DZ(KR!H(RDUUny_?GhlH}ou=yz&L_tn7=>8LY6d@@VA>dB^cd
z+#HxnvLgqEDJRCBVPs;I03K;)(&sN^Ty=3wcjY;qZS;NpVIkB=|E{(F(*_xmdyC}a
zNET%&(CX*xb*$fEHu1_X4o>uM{f3^k>0V0p+hENp*)+HOHL0(+z<=L&6?wMzm|21^
zf}|gM(pEQ5;??e#$j9Rjf&@4><#NxQotecL^HnYB!C&_3sv)X;I60CYA&$bKU}I%E
zcB=5plNsv^V-X`6Yh$9}J(fF?{}eU<!MOkPyr~avX;Al&qu|lI8pTK!@*_pw=<Orr
zU}djI!^11=&vm1MS)A9?x2XVv#5vV*;8Fj!Z7{WnW%8lRbIx1+=X-{$e1uP2Waa75
zi`7WIYHrHDG4$blimC_);b6+RVo*tQ?(^Zjk5R`zWhgJ+)|Gn`mbn8u!g$b#GGU-y
zVUn!|-%#D>I5b~Fi@eAqD64(<S>BayipjQr99bR_M@D+*eDM;m@Lrn`Q{~$HaNm3T
zJxZ?GZ<49ken8qWAc_BNZi?XBr}J+@Ap{Wi23yUp;P^=kTJ@g?Uf)bbp5kEU)TT8W
ztAQL&<@!tsi&`{DxOmmZXjFz<m^-pNryL*2K~>M_rNss7JD2DMC~=MzyV=Ln7Q^G%
z^lyF2L$%C!VB?jv9g6jXl<TVUpNJ-?nKJ!~vBjc#p{dIT)?`lNeDv{67sXgv=B}^K
z)rXz>v#>)GL?doL9la`qE(!8XP!e>SOMq7#_V>+1CVdTikPzdAz5iHwg}KR&@oXLM
zQSL80ec#<5!O@e2pUvJRC6argutWJCZUiA|KUpl`@REWoKNYY7X-$Pno@)UrLZ_l4
z>D;+HPb0HV@;z?#u)RvSrF^skF0Ms;3?LWJ`-6JZa4mw7%+;$T9RerHE%SP@_f>WY
z8pdca0ShZ{44|)23luRtyzYwl{$~HgSpf^7J9o9lL*F2}8=fXF^LeDtY8y%q`M<IV
zGx+q~djS5Gv@z43Hn)O``h6Ib|LA0Gj9?gLsmE|_-@lYS^m`;OnIiGYU9F$PGYm;2
zhd!tI5-jRlLv)T^KS|d(>d|M~evBnnbIAhF<kQ3Bh8)Eb;+8qgS2r8_em_%i4*lw+
ze^X(>c4J0AM!+ocqI(hZc~Rwlc*gQge#CLiP2j>qNkj~uwIo!e1YESio%*bBPr2O$
z@?hdeJ96?O&1|4={X#tDq?HTh(%=J57olcRCy2N6RT@4f!NW!&;xem8XzysYEh<j8
zucXPhG6tO*ArbV329t$buuYr8Mk)FyR5H8oeoE7Ci1d&f3r~Z*==rpYJ{S_RW0KZS
zI8Kxv&h`rM7il(9Hz;1=QymXcxZ|G*QyvPHbxRZBtLu-6604{TQmEv75PTzwX<^+D
z(OpCamFi^uIn2TDse`j4bt?jH?uzQWSkVfviAI84o(W5?wg`DdbY>%pCsc&cP?psZ
zqSUvnWAe+%z*wp}TvbG$&^*$SvdGIi6VxfaO?=d>{_KW!n!O{rTVJnog$lq*$WC-=
zc*2YEmPe5iKgpS45#KjHWsjBE5_lgUC-7h{VLiRY`?as$vNZu7o0tiqYo&5CVJX49
zGd(2ji!kn!r&i*u9Bbo7PIo*c-~K>$`;9HI3D&A5prhYfb$>j@dnd4THHD;+8G5W9
z-)P5tmP{WIq+CBgf_7Eo*M1HFSJsAKO;1GzIzQeyOfVV_cpm^yKAj8UICf=v?=oM{
zdl$%;29~iXQW>f&>c-P^ve{wBRsrOBt27ZvAK7X)L1(XNQY_@E$zxO3>Ct6)*M6)5
z-8t_8(Z%yNxJU}O1xdG!*K&||phs-w<i3$)*yooDhTFw&{ik^_h06nWV|F&KYjUpy
zE)%->-XzyI?q;%CwOMXpRD{%Bk3NRvt@z1ZxvlL0d;3Z0mkC}Zv|ehoLfAz98)u85
z)>my`+M67;rN5wvl7N!x)s39EPrvGhWIP>g%if%uS<1Mj@?yDam}qI$MtAyTv^c|)
zY?|9F0Fntv{<GwjzY<vA5S}x!tYFp9<H4V_%aRPeyJ1!s{W-g3mQ`R&@6*{6wNJC|
z*=CF8?+Lp=n&ok$G8VP>Y%aAAH_P?qd@YB~Bd^<r%)<EHZ6zQ2>S?%FLQh_}mW4IQ
z20~3%cBej?WT`xm|M~0YcI^0xj={3hj~XQL8D*g&`IKc&HcZe7G}-5_{x4O80x59I
zvZ7A(dg{T|Gyq;EQxo%!dHC}RnmO2TWM=H_!E*!Ig*Al+1Ek3Ww!a~|d|=Jz$Bj#=
zy`#;Fnsj%0H{teSDvqzGW#V4w?qBLJn~(a$-!m7xL=hx&4PV4@S}dnGMUM(<Zkck2
ztgotU+yZ)((Fc=D>OepTxK_fv(r`(@HYK;Y$WiE<xA)m_!&|c12-J>4qq4eB20cL!
z8}6fCR;hBo*uUpt3#-(@A<Yjz@;4u!e=4TX?^CQ4xVyitY~`SD5To>ckM{~J0}1an
zp^~&2UZ0^!1M=H?AXT@Oo7;#QZBLs$MO28GNS=AwC0%h7K7^T+gt5S`7#}P^e&%Pw
zu!8MK__}t~S(&UmvevF)&Qs!E`z983G$13<6nK+TEIqorc-Dae<jhg_aoH}JFnBN0
znL$+Q)W<@lj=D?k73e9CE^<^LHl|KI2W2$gmiwd4g`q_;{_~OfCR%ai|MQ=<{tx~b
IhNS-dU;I*Uy#N3J

diff --git a/pandora_console/images/pandoraITSM_logo.png b/pandora_console/images/pandoraITSM_logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..952c15759febe015709bb3279f65b1ec1bfabf2b
GIT binary patch
literal 336778
zcmYg&1ymeM*DXwNf?IHcySo$Ib#O~yaCg_>5IpD*+}#}#+}$Ar3p&Bw9{2m-y@b`h
zx|!~-s@~_+shYEQO@xY)Gzt;{5)>2^imZ%;8Wa?6JrvZNJp?!?C}=6B1EH4-Fy>;4
zVo*>uvB(b}VPF2Y0cp#cDJnwIznmjL!9Wv0{qrgG%PtH}_}{q{G%eJd|9uXCf(o;Q
zg8BdVD7_s2`HOqm|9R&Bj(}{yzjxr)XTSOP{LS7!x0-8BguWaQ9b|NzUm8gD&kilC
zMtK4SB?=`gA*SI0eFR3##O_;qZZmg>#u4m(!v|9pj_EFj9UX}Q!ZX42O$?Wf_RNbQ
za8AAE@|>e(+yH&2uu|Y;lQQ9~q9(W<piH;MQ+b>2@&1S&>GT61jw(iro4eVQas}tb
zxZAY`Pz$Ja{qXyI3H+zBboWMc>|$m@L#s^*w!@4&R=DODZs#60IHL0KNV(FTU&*my
zi{IZZ^FV;`@SAT<kV7{R9SZuttq(@O?+g=XVOHN=d5X?YHVVV;Pmm=_lz)jN_vaue
zgn)lH(;(5(;6wbehCWK~kIVUu8t3u}#4f@AUJek&Ma-w?&15s5T~f+9AtV&|B+>J6
z&b+1WoO>BALlg?;zikv<M$!T75~^Fz5I2QO6?#Vo1^EA49136_Zov|{I5;%;ur-R1
zP*)m0dE?z{D*{BX5VZ01&EFTJ5>OAC!K;2}`|nlI2XUdTgAU8#<_daX#oXvHj{a($
z8v-SXzLuN{gp?h|S8pr7QTWMZ5$+WSbQzJr-k?K#Cf5c2zD>}+H0?2T?c&+dB<5?w
zZ7Abp91J3s4vNR6<A^2UL4P%z1Rxb`ja0g{)hC?~AIm3i?Y7qOjI%}Ry^two0r;yP
z6~%6ChZq|!qlNcTV*`i{|G^^KEd`JYvWA)eWDpCb7ma82+WG({n0mMc#jytYs4vc`
zOyh+^U!XhguJ7kR-;(AJnJpsyiyssqSxHpyrTB)RoSjyCWowHy=|IZxzwC|9Dk>`P
z5Yw$|JMl3+TsJEY?)BML1X{F84DG{xdYDD8<`49*uoqKib2dvESJYa24Sxt&OGNzg
zpI-z7D8eMcE+CYTxiA21I5Kl!UjZ{kphc`?psE($$UX-nhUpUx-4--GZ>(P1xPWD#
zi9!&n`N(pRUaO%LC3ABC_jR|{<N!UjI2&f^k|Ut>=#&uNyaGrC^9goA2eI50W=6Fm
zk9^Y2;M%kHevnp(_OF}JS>;9fn+v<|B-vd*>p0I@auBP)>yYpaN?q}X(|-wk^;##G
zO_+s?lRlRY8-(KE@IJ&^3}bkVzQ4RmCNx090o=Gx)(AKE#4H^EDGIcG^*I?D=#5|e
zih-^KK~~SzEmnV~lsYFjM0z`7-g5KMYrwoV+!n@(JRu|fFbl8bn}z|dMiEoBS$SpV
zje^=>Hr^{{qN32yIin2_okLEzSutN)0ZEvpL$Y+<zwGoI!2y1O8-88~v9!Z31*KBQ
z8)lJ2vi&cA@dV5X(wo=Mjyo~x6K>b{6!DsbX7z0W4qnan0zrTqKtIizux`H5tZd5^
z47}v7T_~0Lfck2Xa12^P{S{p86>JR_k4wDqhZK7Z3cK9KLw&A_9NS1l;3V{``;b*9
zLM_zCf#(v}YTsAm4k^SgUYnYq6%)2)N7P3tw(RN4vZLz{z#&4v_8T%OGInQM`T4u%
zHxsT(d>5E(6WH^HCkM7kIZrw|5j#Q872som1tG!Cav~}m{U&E!aqAdN9dy87)pkpE
z-;KJq1SF5h56KBGnPJ@DX&nD-c;b%LmrZo%X27jDUIF)iLVm@#R*a0(*;agBm(l^a
zM7$GZgyWVxlk<c0U==4OaT!(RJu>@iw}gTj#;WFSD<KbHI`+FJP=&6t@=k51^<861
zT*;fm3L9>aV0iThC}?~@VA>&N-Mo2hOCO&{_bGd)Oj87s6A*r`KuT(#xq_i?y-4f$
zktO5gLN~3^;>|yALK661Jd|i@Y3Wvene>qOysNG9Uit2R`CzUr<u2BQ@SmpB#{>Y=
ztk(i<RCYsQn+k2Fz~6r^ciN)d5_@3a^osA+1ipc%KBdjQU#K*=_XPWuBq>JwiJldf
zCG8K9qyE@3etx`ucCXPEoJ~~yV<08XmsYT2s*bh9*>KU^#9|#hekv=rYrlUCKoaEf
zc3Zyln-qhG)Oeo%zLtaJb+=xqH2EGRZtWdQZZ1N2SMUWr9I8T)@!T$GRXhSN*x!_4
zM`B}K$`ZKy<5<RN7~DNX=lHdzUHB_BptR`!S>fy-S${OjZPxz~ySs$Ku^U68xi`wf
zf?*4(JZxUK&78g4aQehn-d@_`MuhS}^C^6BYSz{1d4bpRRLhNMvRbvWDo^7qI=J{s
z5X6yjScseX2}^k`n?EZikY<H<9G-5A&x}6x(gqQ^w8QDj@8suzfH^71jM$pQ`=K$y
z#v9BuE#+ze4vdPfsD)0AuFU2RhC|`+RG}5b)hIkq4PSS>Q;>)a?`r2(C2O-AOXs>j
z8>CKyEycSr7@QHdBSw;8E(+KVbKL2*RNgwB;UpoArU-6gx*TJh<(W8{-z^ysVD>Pj
zD?JzXg}YLrl-E^I)Ata0eu>#yD*Ze3%<#@FEQ)1D4=dTNvb~IAZi7TvLLwPgz}Ze#
zIMZux`a>K|W+(k*#R7g{4e08UH>ViW(8^`DGbYfrq@&f=XJgE4_qrk_xfIw~WzBl_
zE_D`9FxD1((I*~|aqn?ZT5R$LIScC>l7Qz$IBUVtZn2MWS9lXjl^;&$*>bOX?1CMM
z&dvelz5wjf3hm$@_3?hE9oajTac)h!T9GtiLXVR>MgsfK-~ovpR;9-FA3kR*3!LV&
zvV9*mFrL|FRs`LomhxL;H<#6|%B=343Xl|z4^ed=pY%D7wf8d+bj;EoJ8GXCyJSEs
z(nmb9X^aS)G@?tb-in#gsi;_9H$n?WiGF^DMQTwp#uaK+mO9k^NT5<Qc`w1~+0Q>m
zL*pr=uein*^E)Arx9N6Z>i!rzQhHTCb!UTZ9|qhDDq`(AzmIOksG_#}_II#5rgM!h
z$d%@e(dp&7Vo8FDfn3PZ0%v-;qZ{=1kRSGLuuDf%yQN0dp2dwqkh8{bsf!OT1yypw
z8>%PuO=_t))CvoWAD#Adr_(b~7pjc9;+K+6{}5NsNP}xRezHWgX}LrSnW1|~Exj9k
zDa-j_{LDt-z*kCs4W-m&CS^hpSS!f47IgTb#-U3q`+m)oti(k4{3SZ>Bh{vqKenl9
zv^Fo^yaysF#jx^Amk11%B^C4wovU?|2|Fjh1rA3Z>$oFwugtHh-3rYKC$wj1j3iy7
zG66BG?=lT&pO_u*Bm0g^w<~ltn||pwoUnSf0tU%^`2p5lS@6ruDOpyVDZ#eh2$L?M
zE1SB(SU;75dN;?x-irzEyZf<XMtVTYUbfS$)HB9;1L{`>$+48XMW#J{wQkv9Vi=3L
zIFhbqN|I)$T-hkF>K~P84_}QIo3ztk%NoXyPxB2@!G^fKWk}nKYzf4iI`+~t_{`y3
zd8LWwM1+ji-j$%M{AnVB6qZT-eFIRm@=U5iVg<YJ_vPxjAk&q*W#5sen6V_x?46rd
zrijdtfH@5<mC;LmeS?dRyN+h|pygwPN=29AlI(a;qW@W}sU5loo-qsRL6!DEacmd5
zyeKT!SE29fZZ$1Itd4E;BZ+!qAsYED(-{&5z@aS71-^_57>o;P&~DT+uI4vkX`7|W
z(avI06Q-V$T4fGo{4e<Ljmh2KI)4Ui#fBzR`L?g%Br2IGz|M=Li+o?2efpxLH9Twv
z?RI>ymN}yIWWLn8f%D<m5y4)qbK9`=lg(1g*>BS-INwFW+TCP=*gZu5EzL^(+k67c
zWQGt}&31WkNp^2p)Ytm<;ES5BO07(&IALkI`JPLgnp5zNPw?WC{w%lEz&vPRL^^<J
z<SNR%f404)GjGj(@j$U@_*P=8m%D(+cE@QvP5p4i@7VpJw8aFTH{=SVo^oiTQk`gn
zx39;NWEi1nk7&C}D`G{Fslm37B++R$julhiNT=$;6FMi$NXWi?CasBLqo%@HeStHc
z7Z0brqEx|ymJ=D-L;3fPLXq(wbg$A?`JIE1<R~~c#~?(r;OO<F4ev}q{MHYj>V4kJ
zJ}lGNuVqq+e!~}u>%s&yXj4x`4+9cSvi-iM(o06Uo6$qfeqIoetuaIpKi6k?PKzo<
z*uQCNSJ{mK-}^(FgM*@NzKD2z<Bg`So==LCkK738zFOnU_+u66+9iyNB{w_1w!plu
z8;^3vY^&b86$TpNhOFU5f*<;a2qO;0wi<N^=S3I1u!AA}p^e0Kta2lHS9I0F?4^QA
zX-Q(_NY_6hqD8|M7?$L~>pN+sdg|&c0hNgFHS5omO?2{i>;e&`{P728Axa)1wQEwq
z&Y}&<is1!TzS)Iunykzsq|`=zj>%i91&lbIB}rm|2O-ptc`eIE$qnC@=&-a$4#WjG
zU~&Q0_{a%J2_PGgEv@L+&g_J_p_xjCW;-jAOY5v*cGphF2U1WvVnfUIl0BauKQ}@H
zn+~5+05Q$E?X>iYYnmW*WcA)$nU+8QhGk36hhEe~R~qFkeURF>vDU@re7tLQn#az`
zkYTNd`+}8PJa&FzhFW%zFD)p?+h|@ywaudP>Wd{0xvk<7%_ppbei~5`u_HVqIb}pk
z<Z5p(l_!J|kCZAZqdbOYX8w@pBs`3t(-Owbb~6m)BlZKWJd~@@Aygc@(Q34chO^PX
zTf=trirT1zg!Mc~Xuzv2!U45n-Guh-r*^F+k$PRm--8Be5+dXk+>u+G`6C76(r(>T
ztR`IHKJtUgev?rs_jl!phmkPm$>+yJ8<3x=^6&vtl&riN_#jsnU(<%k6HdRjEKYJW
z^-36zwO-8+h*&G5No#*NKg)FI?!r**(NJ{^qEl?#*J-Y{R>~^YS@v@(-A>Fp>I=8n
zEhrF<fwf)lv;3$M;Wq7yU{hh$E-D%sprA5TCPSHxT~a14Ql*f1S?`mRfmFVw(8P+k
zG;>)uAPliZ>d4rnGsUKVnc~t?kvZ2$cJ;#uhid=cl$7eCg~BJ^j=E4B%Dtje@rSBX
z(z{Pu@SB|xC)<b8lQymhn^h{|PxI7Gs=_@hU~BTKZRmWNdS4l{wqY=ObB=b+Jj}0{
ztgcm!8mEzor#Ybng&(emAJRxj)EU3GCX#s2QswzJ@%&|bwd%vyK6cca#m45sN9szb
zdU$9S?OBYygSe8sfp>3+8;6HAvRZ^Kx(8ew4yidR0vmRFU1OuKxlip<q1xJv8syTV
z6RZdmzDnyWC)Pk8nHJ|LY9dVT{-)76h4t&DAtN00OxFq6fAk!fejrJaPUvJ9)6W<j
zEEK9X19voR`ECfC+tmGPtKPDRBLFZW#~AY&x?k?km{(QkH4$_T&26(FTu=`9TFgbc
zp2{pOEH~EJ*D6B}QM9)~bwZeys2W0~8to}gbQFo!V!>qi!|V&xfI~9)X|K0|PP*RA
zook#So6mhIpDJKBfGjr1atV}eKDTGr3A6Sec!Y*dZLz!*4km>{T}OC^kXmyQk9e}F
zF9KPonDXR1q8p!uT0@8nTwY=*suHUM^C6i*oD2)0p6}dhUcdYAt%_*ZS#%BtH!?CN
z0bG@wx6od>%Oy5DxIh*!q;2iiEh8DCM{GfzVzEei^+rY-EQD(A!TN&YypN^g>r{IC
zZTU@%NYU;(PD^&u%IT{LV!0SJ^1)N|JUm`<J)3<}NzU{+y^tF<0lo}s-3tD1EIw?N
zu-^nX;T<KDY`^t&-?d6BIWU8}eN{ETV$dhih|=_QC0F$s1p^LgZmqSX6mdBRVHT6c
z;0>2WMf+|vJmV_^hnhGCKg)>2EMkA51PuGsR1cCan%mMxAgJpGUk~%Hff@Mw?sx$T
z3h*snKNoqabywW12c)cRgFliPrw2p^4AhTtALL1!4k)EA?rD9s!5q?^af<qec?sTL
zCtrrUgpeDH8;=C39<!+Ow-Ef%=#+sX-cf(aOqAsfk0jUdEd&n(kr=+Ib+MMq?4OQ5
za2K4By@g32Cv#F$9G1fI0zKw`Tjp@j%RtIfWv5O3IcKDVKNtLPzt|WRuxB3pRnKRT
z8O=C`4#3#m_<qpri5lNjxy<M$lkRuv#kT&!ejLtM=VWGXObaR8qTn0i4*RL5$F{|J
z8BuBu0$1{U(G!xG--U)Q*ln!4w5+QF<!=Xq5sw-c4A-b1XHY~T-?<z)EdlJ`BJyoR
zpSBSfaZP!+77XJBaoCV0*q7;<Eu37~^(f3X!x|J7;D@}7$7DL|?E>HW)nibSVQHtR
zi+uyLB$ov{IRg0a<W?gu>a}Z4Wt)uC`*#@jYdYB(L1GOh-OEW?!+U&f?e$cHg;da$
zn24G{6>LNg#TDFbQbpvUN4{dRgGC-?57yFmATnbV=wW7~0Ar?>KXF1+>RoGDnREN|
z3T0D*adv36AAMb2FDo5`t?r2GO@rauRb;!7Yb60n$#+6J+%Pp+OpP5{0$hD<7M}*6
z!{2cmFMK4QD>%^nFt3aBmOv6S`?kn@@(umd9x#_NtBLMG39XISpjkByuJp|#?^7}x
z5Omr}dBlVfxV><z@eGLPE=C5(VrA3uRn7E`IRM=zcSSwEL(i?VmHGq{3Bf!-bN4A$
zO{emy#1<NtFm_+9pzDu3OqD&cd3|G0)}M7niyf2<pf@Tl0<X4y#?H7F{IJ!-vJp{@
z;lXZ%y}K<M*uXA)Q5`i&7%|x2&Mt|MC$ZG#+AF^(&y8xzvHoLt5()+zJ-gfNU4I22
z4*k7kK;fZVTUy$0DgT&h`K}~P>Pd^2+3Z9SSG}Kjc7z5H_vQ?47_4{3m?O?`Ky^Ot
zFP;0@D7Nd0Awtsv060LHG$|f2c&tlyJK3b{4l>1canM{>jS<Q>-x*F;hVaInqNKxR
zU%Z#*-uxs#GKKVxJH2p}ntPru$`=Jxqwc<y!j6ER#0#yf^aqta=n>+f+U-l|i&6Fn
ztk!N1$F@MLbmx6v{hfUg+XA^>MSZUI7r~6!tP5j)FNJ7qjv<LMKo=hU<~?y6<1dfB
z90=OJEaN@8Rchf&$E5ci#HdQ6uB+f?WEwb+LQrJ8CwRo924CiNK0JMgC-vE4sA?zY
zq#8ctNQ+XfV)`jY77Ycvil>Huf9SP#(c8SXzETYeZeqC?b~ar5RZ>)6nP6L$w>H|6
z*C`RmbzN#$TKJjOD9(3gDlab03Lr@HQ$rv%?zH#P34acO{hu(d58z}vLcKCT-@P}U
zDO9xYZ+HU{6Qv0}Cc59gXDl}L=K^-1eVqgDF;*toGE6H`LNRY6uLd@RqX@bdurGvs
zD#|m7u{N#nY<=tMg87Rto_sO!7`k68bbWg$u?&}S@TxYsClp1%VTHQ}-fZfkpyPvA
z@S0Ct^7fFjxDThBw%aQEn<bCkTSK<rZ?Sb0vsW`e#s5;9onoLCexz^M$XZ~eUq8E(
zV?oXD^f4d9H{r`WO1nO|^EaEI8xj10IH?_GgE=P==-LEd5Z<UP?u%5u6rs2$S(ow?
z*-F%;g?`UtmMtwRi`G*N#LhpM5*2KkCXBm#FV=5A^CV_;1~UvhKl(wlNIR1mr|s0M
zm?L1f;e9E|+C;Wbi|U!DMUv7Kdj&D&r?<89Q}upzDq|gh3kfC0KDD59Fy~e#uYB*v
zrnk_a)|wQOBN-|`|FXVw>3|N55HmUO&c*Bxj(8d_{ZjZ9zJ5K&+&Mt8EZ1lJsuO}#
z>CDG7H7YvwvCCNV_egId^P?#t;quc;m(kD)LTTcmuez9=6UmwNSCss_E67Ti5wek@
zj-E&Uy4PXF4`^smapTD#w~n;i(SfP;wEtdhFqHCFfiDFd>9M7$bVxwH>sj9Npk=qQ
zmMq=%JN1L&j9~gyUhX<jJtEhn>ITf>!)*1pDbK0FOfryizaaP2v~BE+{pW$xSxMr1
zgu!T<iKrAKKR%}*ZbEnVGabS?6U~0q-!x31rn22C#bfM?iTsH*4b=>nY7lpvP)x5?
zVX;vACFnj@OZZ?2quJ`u9z|tl^B!!={En`xuzICb!Va))_U*9!zIMfrP`b;CG5YNr
zkj&cT9$tX0CjcJx-N0P)bm3^RaE-H=6x9}tX|TvvD7|Jexk^q^7)kbGx!tA)Tp;}e
z#4Hn50DF)-!RW{L2Id)8xcOF_(A66l{`1?)FsRb3A2|XHB<s!tX-=CzxJ-+XRCP^d
z;1_sUZazDo-rUI7-o26Lmi*CG)n^j*Ig8^rcT{;G9Y2Bw5J=Y{`ynhwc38nAz*f9k
zW~8^`*M1YPkB|t6#jWE?&<$=bevXh*et=D<F<L&!-mzu>1cx0$O@{Nf?azu*%?<hE
zpHuR+s0NxxOlM6Z79jkMqYZ{-*@)dfA;J1eE+yf5aNs`QpwL@ZmtVDsq+8RR*5j)B
zmmc(xP2T&{S#hv2;KH;8@jKOqv{r>~1A99*6&aZl89gg<f|NSkCy<zS_3m?CiA)#m
zocK=H*}}(_0#}JEI*w=j_&daToGj^a8!BP#C%W%SbwJk!J=X-bmB_vh*#(aQI>UE7
z)!b&z5#$Deju8YUYsBAOF{SS6W}mW`yO?%>NCcOae+EFH9NNn@V%qy@Sz9$_BxG#O
zK=}P3Cp4|>m1P556x;?v(;5K2CMW0@XEO6t#LbTY(L2Fpep-%a>Ett)q1>mq$IEMz
zQk!W<lQQ}hGU@2<WRxfp9P5wLwygnOJ*e_WHJ_v%Y-43fb$<Yk%HfvU{cc%=Z4OBn
z-vH<lC#wJ*8p9*GjA`A=Tj)g<G(EH4={6t*QwYlNpBah;5tiYW)tHLhGZhgXfGj2d
zmX`wC*sUXoa>|hAQ2V=U=C9Z$CVR4UiGjhr(R2~^xAX-uN3u<7H#d*^%?=;K{7F~V
z5R2c*)0?_9$vqkp*l6ruo^15AF%@akV*gR6Bdwj56*ZqMN|%{#q^=N&HgEdnWl{CS
z$;6Yk0CbK;1&#uyt76({>IIo#$pg8L`{1jN8&O3K?-MJf&lR5I>QQtSj4T6j%>AW)
zKJ?R>NOMKuGh8}{^@MVpw%Dz;x<<Xn%Ap3qOgoG#1;@y`dN=*LYezh9N@t~{br{9t
zC)Yy4uOEmn$)YC5)LuWk!KZG8=7&L;6r6cRFSe^afJ+>9Im{(o>de-Y*4?fPh<R%D
zl`gCHZPV8ZVZ>o~xh?s@je$Rk7Jp~Bmc9SpP^ZOR2fVYLyNU{6^l0D;XqaREnKfhU
zf5h@9TQqH<CEIIfyM_!%se&^7@h-Kv<B*4m$Cmtpj+)iDJK$%eBwVDrZ(X|bkk5K!
zjbdv&#JxXBr#Sqpo#3d($;icI-)ML~Yjqeu6$a74tSpaPM+Ua?UW_!^LQ&Iv!`7De
z06>gqSNC+#-Yn`*w?<O3?G@|2H_QU}J00e3v(TdVgIQ`_DmNbj2Hbyl4KnNt;|Qiz
z;GB*buhGD`G%)GZ<{M;p)|9sUid|Bl5J*DjOiP!u6Yg_`Y5A)NwKi|)eF-B-tn>~x
zP34tpZDRND5YcTtU8lbA;@|sZmR7VPP<X#KgLiFNk_A@CY64#f7#v;kfMV%{qD!(X
zW7;39cg2G5Pv+-*NiyzEi(2NtTp!KZ#ug2D+n3w>2JCZIr0iFf49CQjtyEO<^_~~3
zwnfL1+e#dGHAdEdbbZs6WQt3<J2oB(6Wh+7c24djq|LuBX>)xvxf48?ePT0pDr~b@
z{kXES!h#&%5v`=q6q=;toch~vU9|tAnHB`6mVM!mUCt;stX*r1yN~Ll&sozUG0&WE
zzm?s{3H;5*zyH*g%?=zWRQ{HA-^b#2N@3_Z3y-EwDmbXOZWOC&bpyEN9QSAJztXG)
zp{!+Jv3$C4dCM2USx|yx(>nDhGO6l4Trl=fB(}K8Wq&r(EFPGXnHhzC#xt7tDZu3z
zzc6_C%yi-TW~5|nVBg~xCnv!-;$HS6fms%*kt=9;BG%fxJPHR8LhY^RnWU9$qmHxm
z-0pcuHx)%0@opyrO@mNLUk-W>_M0`CDOF>i*~Q7L_4i|#LaVd-_k{e&b9mrQ;o8u+
zi3!CD`-;5I=msU<q$hl|g_zNuwQf;wtH(_d$%Y*!Yb$(T{+7v#XC&aCGfNs4tDR&F
z%__^EsljU>p7O+YNbz0v*2f9>+8Ao)6<f4CrQ{)pN>dnj5ubTdu~Eok-)SHFR9<;a
z)Yl%n3ti%v_jyN+%+CM=Q^ZUBRGAAPJy*7f<vm9|j_6Q<E*RM$ED<TOpSycM0>KoK
zoDHV1k852{JHtiOJBa15|8QMGFo0m|LOD)vq3ZRI<FKS{BGbcZ&Qdco+{p2+KafB{
z^Lo#>_~vWyRiP0YZu<S)T}}ppTr+{cmX!%sUU{MH6sX6|+}{muTeY=8rf;mNQ(?1n
z#f~Hg9&<7jZE#S5JjjvD(_`rCU&gza$N1JSN`6qk(pCWhW`LYD>q0F~Zv*wYf!im#
z4fQ+?*o0ERidv&J53}pfr3Ze+`ckJWh<iAP@xn#{FbN`Z*>4a2U9do(h)0Q_b4W)2
zH|2JRKs%z(fhBOZF=ASVRGvmcefTe{=9b(6cSX2SEwaXv%=p8mfDp?MQ!{ky^<AI<
zUI-Fqm1%NQM_kreNjmd5DscOsxEF7{w$?(%tG+#zV$8%fa0lVby^>DZgwO?Phjs}l
z5D&37h*+a}5hCL~O7YUzXOg|Y+1x#)Y@6Tdz}SoqZhUP+o#$xvoq3mQ_U}T8o!)lj
z){yvafmc{ksk(9W*Sk!estOoVY_Yh;MyP2pjM?>s9&_CWD*Ru*s)K!UC@SBTTp^Sf
zROev4K1ut&n~UkQkYi}=f*f`__9ohaEBvyb0k!XE=D(>gZv+QWrI0hIFwDc&)>~wE
z&xjZPN<?$GJnXB2Gj5gIS&|an<Hwk|22_gRzW_204N!4d<J>Loi3%CV8%>2{B8NfO
zj+*>n@LKq!I2jFjW6jeNp5#GZB|g9<gi?_7XEbQ?FD5WqQk2#ik~1`Yfj&{h*+pRu
z{{1r;@}D7e$jNZ@IiL`#A@AT2${~C3+JBLk(E*e7=pwc0hI3(e*EP0TPyp-m(Hx9d
z&M+6@WfG*N;Bf_7a6DK2p;{O#I>*cvd?6cV`r68W*uUwS4}zdnlFfM5n?L_Y!4G6h
z75^;(_(g^;&}_z!ZtNVVsSP_LhW+C+?Q0n-GNQ5$V@F~E71dhg67Q?O1O$`6UX@7=
zsQs0G8wjOmZ%<x5KY}+c_MfzZj2XJ%I~NBWwA(5(qFrn^e=72qR|&@pPoJ-ajOYvy
zGk%BPvQ>F#2c^#EW&!)kq!uE+@c(IV7~kbDP|u8;DjF$Ptp>)RRCt?>vE2NRr~E%G
zb*Qp^bi+w!CrJ28j_<DAx$j~>X2e3(&iQ1j{Kc}`kY{r>UlH{Q+Qh=F3jnNzm5TqW
ztPx|9ohg4-7AC4d;=?tvG0rd??0=>rGZuoTNVAUp0gla_HJ7{>&};W?Kc)=G_M$<y
z`HQ{RMSO=+DI}9hy%~RVLLBJoPO|u_0tl?fl%Z_CG6s6Z#bhrNB6`68N5%)*ptG{?
z^1sDFX5Me0Ef*{saGnG9U}&2+xNqS7>-M5lSTdZ>5O^a*9h)GbCPy{Bj&*yRSC$<L
z!89y@>w7~OXNFj#_e#BNh0(Q7?_d2bK$IKtMXchTYR(;dC-<Fhbq7*(N~|t2y=YyH
z|LR%Wh}wku_Xcu$+=OBcUDwqpuNFxbC&T&P&?R7lQjei>?~V9Zgj7j`QNz=}Z!0M&
zxN7RlJ(qlDQ(tMxbpAbi*SMZB4KMTxCKTWbOUBiK_;U*24*+&m?$L?ZU3M#fJ{E4j
z=P#kdOI$fYphfv0l*8SL7bWRFzdH2{q{UWt&)nQF-Rit(T6P7SgLBWxnBv{TV%&PD
zU%m2WY(O8>Fs^WB=Kif-WFp!l_j*kxQq=0rVH#6I6JF%_t!!XfsgrURd(CBh{)ITp
zzgYjHMlgU;!_ht*l^KBGn$~Y&N_hWO1`qV%8|#eV{q9QlHUAe`ix6Y=TliPchk{|3
z?_TcacZGKCMi;{sfI>q3%S)sXwQ;o7Ss!6HeeCD8DZ0mXV}Fpo7QQFj9og+=CckEG
z0et}Pm7Y>TflysH_w5Ak)kY66m}up7tUEnuN#=ym+-Ov@(67$qf+53LUD+GZ>S96G
z%}f>K`&zaP3-neXmynwe)63p<L9TA?=~|WEQ<YimP@-G%xA^9tq~TOIfzH9nAIU5J
zOq9O{12PntXqb5&1BkdQJVmpnBKFzqK+#PE4GH9`o!tb#C}lG7bzcP@qSG&;p?QST
zoi@Dh4T1vouTqpiN(2k!atw`uV<nh{Q~VErS1Y8FXA4$$?iVOu_#Mvy^%VKyT!j!S
z>wfl}p#2L583Rlb+<e{ddBwrqC^U1}FHC-9&5Z>##_+Gje8w6K!HY;9wJ5pg3$kJ}
zYj0qy2u;C0_{%6xFi9};9C`=LPLX|43C<Mv=@|OvU9lVQ|1Cwd6|px9$?0;{1odFh
z-kWOe-LPJlbyY{E^T5xYw~MYGraNs}!V5a5e{u);9g*0WC{cy#|2GHuKlpuNKD|g}
zM)Lh^Zd%5BWA$^BZjkL8dAsa8G}07c7KT+mp#NLd3#&kZ&QLx6K?TyvXKvNe`PSJ|
zxx&Z3#(7uWh)#&HJ@%LGJA8syYy&g_(}Aw(!3P~~#G5|%pSvtzM=07$3ceKSS`fo5
z<XEWuCuxHM^dri^&Re3CzNpz^-Y^%Te|P2kK>JrLazRH&EuX>FxGve>)#u+}JM<P8
z?yeN}TFy7e(>;F4`M!EuG*<C=slWOB+ApHc_1@X$f!cki@2<NX+xaK3YF6FdDt~z%
zB6LmwBg)c&ee82x-2$_?dQewUn$!1&E#ppC<*&Sdjhobn4kBdzSJ`)o(h9EH^E_i>
zu9;to0v<YeAyc^jn*C*zAtQnQ)6Jhn&{3fy>N^`Z<dys`f!RA4RHMDx6BnWK*9bv|
zE*fA>A6~I!wM51l5X=>3S`_4gYAhEn4LE*{OU7SCm%5kxv+p7!l=<gcgw13fE%aWr
zKQA&P|9(|<qhz7$MNsVjl4y6FqU^8M3J^sPoUK6mr2duP&W*2Fe3Qi6zUM0nW!@32
zy1tMF+G_wMn*@uRLYb*I-VH}63jkXT*D92al_^s@xAQ%f)(yP{Nb9>GtGv(HCiAV8
z_xuI{Z+QyQBVW506ilXuX?fzf+BwY3{e{qC%U&})APgJ1G7U}82>^>gl23>qhR7}E
z`U*T$U@FW9j`>E@vP7iP_4TX5^F(Pv^3&l(Gx}!go|S#6{-5!v+30`aDvA$n%`vZj
zfXC0b(C&%Gl=hp^@UlpyTT8(w(k?S8R!fKV>Dcugyv}r2r9vEul<<uwZxAE=uL#76
zjxefC1FrZw1TzrQ;nm|jPOO}TMK9H$2)R`pZ#e&gJXe(4?Yf#lNYmga9l|*H_Z%{u
z+E|#1$X0nlf14ecgcqhb!TY>;pZVx6qTeD+U9B}|H{N1$?DWU$K%eO>Z8BHAJ@qHL
zwl&4u?_?@`FjwpT&vY)&{iCe0&Mm9gT2+R=w%UAO{uw4ksnGW@w0Rn4pBl9l`d#OA
zHk=GU!_I!=eURJT%lXE#An0~GDI_hx1#IIbzGbQbEioJa>JBtdh^bRtmMzPxpBZ|p
z2bO7$ag=CjF2ubT?{{-^`>6mK7#>Ej)&c@uNgSIQ$_0;jFA1-kpiiIr)48neP!bCc
zJdzYmd(>*hZmd#+`dzU(|5OZ1brID@40XCdmK(aRNSj<UZg2-1NxIAu(Bi4_kV34B
zAzaYO{DbZg^_kp$$pFP+RMqFF#QxROVHhi1iA)07zPH3y#oxT6Gn~9=f2S&nM}bKJ
zM!nalktpM6j2FZTcPVb)==3v6Nq%$Z6}Sn5ri8}}>J_LqGbw&fkzTN~=SF6vTd&h>
zJmwyJPHw3@H!~4m>8^GH4s1o|rI)TQGEg)7wGM=leVOF_vV^H|@5>5O*A6&tq8e{3
zMXN4Hkp-XpI4WTIg0(NvOjf?ydzznml65oKNfX|~i;vsRF9AX$;Iyzu`Z<4Ek5%)&
zr1Rtfy=Klj?{1Cq&D>LZJvgP!iq!M+?r^Ga^IhvZuYUj0-p24_@>8i<PX&oDh;Z%v
z1cbtRJFPQIA&d*wzcW?MC*6OMw$L*aWB2K6w3iC2SthQ-1FzW9BH-t-w|UhM@$MgI
zTA2uY4^V4Ckj=mXYqGOFGglkIQ_sezOqh1=+GB2qUza?U742RU+L6n>Cc(uD7~Y_R
zmt<_y#0X1QyJBI5LI&mI?mj8Ww}gwFOkY|3-j(j)BKsHVVuiDWAC=SEZ%dSlqOa^)
z_~^;Q+%*%<eoD*Itws#W*VdP*8{H$)4UdAO9=0Zz>Az<mi?wMD$)~AH?Z%CYmp!|V
zvLR1xByo}1=}Y4PBk=dC@osQu_mAV@w+HV+2KMBiltMO>qCU~QU!x(%;!g^Wpi|+Q
zN&T&}@(_$Byg0n5+IUI~mRe?|wyhSUF`>?2?|(M-JDBg;F8Wd=qcTRsh)Yw`B<D57
z85>i$RZG_C(xr)0XJU3<Y!8>5AzYXqF`S)Vvxlpl@tLFjnQgpD$zw45g+~<EQ7Px>
z7XBT;a<HMw__IRV!7cxQ|8_qi1MV#O$b0oEC%}fKzpAm(t*N<IZe?YjrEy7pSiY}Q
zi8Rdyd<MKh!{3By4I0Ru(P}T~#Dy(7;g}Pv5VlTC%#<+}a+y#aPl<ghz^JlRN^qXb
z%u7C;#xVZIzj;3l`7G)OpjTE(a`X``5cFeF;gE;<`H~Aq(}<xUNK`IKC`f0ki#oDa
zV_Km09F=Yr^TbQ$URwS}?^`aR(+FSHxI)8j=5kX@Q9b`&aIi(_?rlEkw;!=a{=++D
zzmc^e60MR0D7}TGxD3O)&kyRhn;+y<y>V#h6Hd`%+9vV`ZEXunf0c|iV<UbUiC=D-
zP8IAoOBw1caS1+nn_(MmO;~YP$5;8b%6FA*W9WOE0Ss*+g09X0GsO^rI-5!Amh2%~
zT@>*;hPE_NP3H=Xl>v-IPVNI3CbAUT_snz2X?!6n_M>0&uBu!v?QKRv&;9lJvIMES
z7m^FeT5YY>SN*zmu|KnP?PE)@I2j3VL)Wa(WqLn_CK>X!OVDOTJb;;%rD-7DLf!_|
zE{|zJ&x*5pJ~@U-(v-jW>SFyORy}!i=g9_wCKT_Xj1Qf8qBj4Ljzi1LXYB<;PoQ1x
z9LbL-js3V&)nq$$CyV8g4>|_3S9rCyb&E=uNEp=kH9J=icNU7r4Ntx{hg8{zKf1Mz
z!I#;~>yPvRZ}s*EHxq9f=(NN(g$yu3T?Z`p!JYf|VEihYUc?BPq?&V-R7To!qe{!b
zfT;nll}4m;EsIERosPjXsoZw<>cdi_j_p8@wQkG8-~mJFJ3kBOYp(KrF~0ku;UcQj
zdA76ye>=r0j0?V}SpD&ipm&ey2SSnzOkFHxMfKpyU-cTwlYR-U!AGZGTr1>@S9sOM
zaw7xg-(X#Xmp%>K8|qcr;tTDag-Vur9?}3~!P&q)rKKUyH@6){#p{-5@k^zp_L6)h
z<)jN?&AyF(k6w-A4G9x6Fey!g%KM2A!^sT$+mPmMYnl%CkzvU_PBrYN=Le~Nh<q1g
z76c;bSqe8Fe+p*bc2{TpwwO>6_yvY2zv!$_4m+}6j4=R(wdW?s$&EAXVU(Rc^6{}G
z(=qq$@KD+8nf9A_`1F!r(}mf~TbK*fb4QIh=VgK`^c!HXgsBoG2_b)k<MU?{bID+c
z8xs6n7T7}>587T|4OjM#*^a=T(ILiX2+nr}l89RRC>39R0R09|M(Bt3ykD2!+KQpk
z@Lv3d@)h}x`=}<qz*N5>U?<2*btJ7F10_sW1VKu}DB;r8P{IPG90(u!5sc0gfRb3Y
z**w-*a>9bb{wY(XS%frcDviE}Jk*x`0MniVUxCuD3H6QU%P3iC^E~4*Q~LuR_P(g>
z%5^A#iZpKYUSp&|Hp@mN{Upcz_$Pe4uMukwGXFNB{{3L{`?HF<2Eh^V7+6KEsG*HA
zeW9-SKK?`q4DHlBzlZs!`@OEhgc{78Kw2+i<pdwWb;%JWT^DF8VnQlo`z2AHZ*$21
zw7gVRVnT$zH2@k^t*+WBG1%V110B5=skYg1bEw5DsOoyUvt~b<>SqkR8n-oKD`V5o
zI8g9tF8qZVNm_6$hVa$ms`zVntNn3Dj0XmdG1sST<%sf%mo(2j4QvJ*q7R3eck-Bk
z29kUt<8Wj8ZIBE`5|{Nnf<K-#tZwfOuj;ic%#9zR>2@M1+6`#2ooVZvoxe@JY}15g
zva-9Ot}Aqsiv!bitfKQ5e*OGTnXegkSM53y++`WoRwS+^7I{vWEVno9PQXtoBXFfP
zI0NW$QW+-A)&}bQLl634s;baRslv4(-k>m6d`n^G9>%e!uXSL*yZm!{!<U(7vYfH*
z<K}wg-8i6^kQBcF@<f#NE4}DTu~E6O;>GWAdR$~M%i!KG%NgF1O98>l2iMXlrH!zs
zH;zq;3eah5cWcdN)bpKn)pI4|ml)F%sijE6=A-z|+x2%L6NvaK-;={oiSMRx7&HZq
zz9ZDPD1E;qb_qP?vPDv(P7OMgrxo`$!8FSlw$TIveHmYLMGT0fu7~-S47)1N`<gvW
z>l)vj2tP;aBG}llw97*`swX=ugVolT%XK3vyIV5BS}$U(gxi8U*EtFkDVN5>$M4!V
zy92Z|iZF8u&(l1Y=Dm3j(durOtB#K81NM4*7EvtuPLz`r;VkpNY&UtrimznPD4&3H
zZuvSSitx8JNca0eeaq71Rk{rah^nMvXrz@)6f{=y8oo%S$6x4U)kBRuHYdxX8*e|H
z9y11yJ<(!Zj|`u96{T?O&OS|ycbqUGl^VTeff%yaYdssZl5VW1<7$87(jDT<DW5B4
zZvx?1mdC-8a&Fehae^5|FhOyHJ^X@v*q=3fousn5RF4tf<?bc1AaA&P-hSOLsc}7=
zceibFo6Ht#mZ|SZR5LajcYRh5NptymmyT!Z4!b<&>aYHOq5f^Wjc3j;{i5a0bL!D`
zdJ6R=#HVUs>cPF2bu$4P2zc~m?@!E<QXy!E;iYP9AVzCq%sol=ckHHvix4#Ii1M%x
z=+*I1gy*pQWl^1!{yQ6L;xm!?q-o;?P|5Y^smqgIJg`5Wi*!Av=(2_ZHeLDz6pEZ9
z#_7-6^G$T24_OiWx^nFE)P(`2OvSjD=ErNOqj#xI(;|0gx8USZ9V?A0!wytju9(6V
zLAn>Qj~JOOfClWM#)VuAVy2XYkO+F5KuvLTR_s|!aTnXeL&r1P5=GH<+gzA8$iF$}
ztxdF&cLZ(=emuMNGF;ib5I>4;h{#UIllXe*yLBT%-xkO=lBsboMN=$7`_(i3lc#2c
z_f`y#VS%yuA~kOI-smqx!X%Y9UoG=lp4q79X2d@#tc%_u-O~6#7e+=z8hh+d7u1Ym
z;2*lw?XJ`$<v1Q7RA)0sh&D;=eyF85Mdrl7y;$?CMFCe(npCV{OdVC)d20+6;pk{Y
z1ZBREYVC3xgoOK_(}!E^$UP*3;JQ|a5^1z<uNfRO0M<L_Fe8rnVLu*9^@)>rwznGS
zcM2474F*lEP<@tfiu!)?;;Tyve>r7e<{%X^D<)5ih)A1K6Ie(((++HiuyNH4wwnLW
zp(mAbV7~VrK+g{Ji{q?1qka}{Y{NiDoyTR=o?KG=0Q*NnOG^ao+GIH-w2>@U`{Q%a
zLEZibseR0*0-LKvlh`%+*pDJ$7)FH3wr-q8JMUoFCH{p`%{g&wQG3KBpo<csAc+Gj
zv-^JcvV=;9-}xal^VUmBAOHeGYt6*fA$r*t3(0(0`w-PIY7QA1SX4)sZz=fr?J+@I
z?6QNrae8@Ck^E9;4K(uA7TY%X?h4ab%y3myIoW+>Vf2q1RzCfbs?+BO7XD9YND*p`
zI@HA4@&{N}ZX+f|$aB&lbOZ`x@os7XN%B#el~}FxF8aIRpz%}s?M24m-(p!7b-tyx
zd5o8KwclVraRD2I;!>0Vh5_I*r>?kqcq-?bMDC*Ur%6UPQTg=JM!H|slkZ>TQWA~)
zBkH1`y%3U3FpQxaY*dI{*(uXl`q;~z2#}SJ;~-UxWCh*J9%Pc&NcvW(YiMr|<t2#k
zpN##J3VvpWL#w3A0@P_5pT?1E4F-Ja>1cEud}pw>Mim8|4E_|!T_HTc)-GbNU&V}Q
z+|aaqe8lRK<*c00Z0P#<Bs+esly0A_XvrPw_aY{xCjxbciA%U@eCn17l#Gd9FISum
ziJ`s6p5y7Pq=r4W8Lz6zpx!@k(TcniAJic1FCX1y8kRk%D*lv2C6n!_cF5axM*>~Y
zrP6cdP1tBdR#OQ#B_yF_Z2_slb&r+%O7xO6G4kKVhZJh5HF`O>U83R4{9G?U+RS{1
zodsjZ+<<)V1fyMzQKY<6pNoT#O7knm83&r13UQv{L6`&W4M7YREjY@CeA0|x?vlV=
z@Iwyz8y<JV&$NHYH@egHYEAp(kV>gAa?+pyE}tI0Ky#^Jhy}pX(F2kYa7tKmZv!AD
z?&QI!#qZj%HLfSf2%1gfL{+*Ouq~XH<s4U>(m$|e*0s8DHMRbZ`(!>aA_y=AJiV-|
zJl>2qsQls@=*kzYN|G3GXcI&C{(Ni%*4a>#{+tY(e=v2}K^-HT)}@DE^#UsIXMxnz
znA5Y^jKGt&mte*Hj&N+Q-|287ewCjdtJ@=IwJmbsw6UIKwjy3&kHXD@$M6rWK|`$4
zPy2DLo@`(H!}|v{!+O&A%r!i6M2E84j%&Y(UPhM59U>?f^A@4-jS^12V;|t>!VVXz
z`a#>O^G7+?X%9|{0xf_{Xf+la_fpK&m)o!@cFD80b_;H|)@uqC#sjfhbme}_Hu0+$
zIUY&@9+9I@x!YPPM`U0737#WSfkj(lcky@gqt%E-HLis}0t3RgexK7LnLnY~YqvP<
zJVb^X=bYmt-4do@`wcsEiM2MYf0pp-Oi7BZ^`dLe8eATR8**V|12el7M(w4{QRTjI
zg-}e+s@>zYYF*URj%dII6nF_PkwaUSyj{B=mCAsaJna$?;tCZL!o)tvjcNLOZNDWE
zEY3@V8c~Q4ZWpVQO~dXIdP93exHj0J)T|mw5a*wgKe!sn33NM}?vs#YWYLZf{*W{C
zvRbDp8M!o#A4{wN&p4`?$3$sOOY*?H#g2Jo{5uait#p9h(=xf!4+-iLqN%f;H*jzF
zv^q7f2`-|>ey+uuTE{-z#}`YhZhh^)Op)B#Cs|=XV`<$ZFUyj^?-Pt{iau67Q~4?c
zs4w1tZ8zlNT0j&b4bW<|5o-EHLbk%a@5YXYsmiT~p{-@r$X{ym0P^?xdBZ{RaKO=`
z7&tJnB%AP3Jy#;C?$K-lmAr8EqTp8HK0>R7{yN1L0%*KxsGea#YJOmUrU-9%NJ*Zr
z=221CCIsw;MawT)#>|UfabR%&)QinE7g%l8R-g&{F|fL|h(+_y=J_tEH;a~kV})OM
z840~4rbiZFpMt{Lf;J!Oi3rK59;^a-gNss$6k&?TW!YdbI2AtZ_)v5YePcHsK1r$}
zk#=rqy6`wFVh)=;LPX(NHB?{M5OcIh)o7lmY(&4CGTLm+ot(&^r-TRNo(S0;Y?Kxd
zf>}&L&j5@v^oxXsIoTXrm2~Uwuv%KF)-8v~Whe|S`(INilpIW(%!IKHJA!E<XghX>
zQ3Z~w{Rp{jXtgTzTE??mGjd)2R7+bDdT)M138%IAWL-@{w1C@6ntjy4RtrtG#GMA~
zPA?qBE|xnW72>D-^}t=Hv9!7L3jS<bHUM_PCEj;v_O4Gvb3ZV`bCn(vLm@A%KZ~Qy
z@tr$B(EZ3@+&~#j7^Z5qOwze7!K}xo7>b-2FNdvRB8d}{PsiJm1&Eo2op%h9#JN#`
z&CL47e%Ibe{}2*w0l?OdiLDHr=0uN+>Dl|eNJ!_`raCLV;A)s35@49m_ol1_f|r@J
zHb6cipOmQZD8VuRls%Q9`{U>104P&VJcHxVP9`|58Uv;tGj8m`l8ava2k?XmB|(Qw
z8vlGiP$3u|Eh}zfm-Oli*ggVtPJa<O7zY~h2)&h_VGf<DN5<eF@;5@@lGur)7VSB5
z7@(Urde9ml@@446KF8eK+{7o=EwDG7#eeV;YeWsRjT<^#FK;oiVa4N?!9)=7l#3j(
z;Ybh5+Ap}!aLXJ`O|ZlQaexMKtA9=2m-W7U)tV_%{`RKBHvW1#3a5$*c5bA@wq1(^
zns^3NK_!#l@|21CBIzL8d0?$zK;r5}mG=dsWJ1qf+E@`TQjuh54qa`6H1&BPUhA^B
zkI?7J!s0eindE!d59yrAlF^KMKjUQRaJq1kvy;bE@=3wZP-EijJoyM=zAuY)2QMV1
zG|K(32Bb;pO)^IIK??ZTK%_v8iqDCrHe!yO{>!|yZZPwvzp`ZUJ+_~|z10{CI%FaB
z^)}YgMI+%dWl!0ELPo2EE6z`b0_|7MmuCM6DPqcIUo`+b-cDjkHbs+)2v3#x@1*u!
z)@1q^?9{r2fhr`AlIECR0?`;|wrE3SA#L~=JiGNL>Utm$xUlbJDs9Y^_bV#|Z<zCt
zEld)-#PZ+Y0^p|)C;I7M{-fYAe-t=RTc+ay3Lry(5q;tJae1eV6q|w*1nSHu##ac!
zm#k8t4sHRi?ivMrb5-5~^-K?OWG`~nx)<#(?e-O+%FKvcRl=yIw~f`y+VZX@rZZvC
zW}PkhrQ|_BQn``dbAEW`V5{nPF6+Ud>3X<A_+#J9ILMB+M9^E>qZRw6UO%`(I;msW
z)TCQ+d<5+1Ym8Kg#JKj}W{&(HrNh2Pn>y*yJ2dM=G%VBQsmy~n?QZq9J0_5Q0iv?^
zo?z3H$3tnBqw4n#C{AggYBHG`mzw?Dn!1-^in~})o+ZIF*{0twJAKg*53Ctt*}Nx&
z4|Z1@Pg#HAHg;^f$KEgCPH~qW%sl8YDC3qs1QRvDV8iLybnMM`q&_3zf4;MqQ!a+q
zFb+mhy^8ocbd_<Ggsuw)k*X4c4rWRzbTxgl1AGUD+4bF8{-m@VfXXqWMihF@1Q!=E
zeMfP<bhv<$E{qXpqrkQ;j~fryR@nKUV)5=%q9^-2f1<D_wuL&#UnDO^B7d$8@Qs7;
z=@|AuOucQR9m#*3$uYXx&hNq1Nu%~fpOXBR0&Ewag2lLY4}MYS-T?<G@Waxl`|@bY
zQDLRSIQ%=hs=ZpjczapeFisZaNicht=1oVzf4T|5B+hA5aJR?_3Q9dY-sK9svxbFj
zw?Cif(TPog29t)&uV>9qdc`V<NCZ{r1OE_#8)1gbu4=kU4+yqKLOfe7BO_<kArgzN
zU+yQ!p7Xx=@_t<%Q*~`;$Ixr%R#&$49bWnEd3;Lc40ML@>PBrMX7w8q$3v-6dTb}(
z5A0StWa*u2O=R}2dqS=V`P(kr#;199Z_((MzT!*BVZ$Tj@O@U_JNXGMsYJlOV$)&R
z8gY6-cE4}FYU}br)@J7=yB<0_U2DDzyCfATeOL-C`-4Q!;2y0hZb`PTgj_1^d$le$
z03^v{J9kYO=$N-6%8*Gp5yvI>0m&m&?yYw{lYV8?ITMo*I*e=-`KYlp@qE#;-{7$E
z19k0-+HZGu*vtXg{hW#Js(p@X-eQFXwmSt9xo<=EQbSdxrLBo}j1caHL}BNJ8S_f|
z{52uYe!S2mOA&>}F|w6ASh~n_Vv?%>ES_Cl!o&S-ixVzqr8UIutu!%u1Dflb+0eea
z;Nb*8Zfm=>&mVra6z*XU^w&{bUs@*OuH!08xg5SokiZz)6k7Te1l@2$EqC#%J?CJh
zSVFA*{Um>+QWh`9(I@>W-{av>$yjzzA%L};$^~7tuhku2iW2Q}*_W4m?~yUf6d6!z
zAS`|J8Lwe(hWC1%hyPjEFQuvMVy&=Sx5NbfWsSaZrl_qg#O`pu;vSRE?63<prwa#r
zR9G_b(0*~4q8}yb!#_+>b+l*$l6Rw<jmCRw6*%Oi|3}wV$3@v~Yd}yCX$5JJp;Jm6
zY7nHmYXqbu1|)_~MG>XDyStG_x<O)yA(Vz8q+zH#o_o*n`|jcUWBAPs@9cN&ReSAs
zJ!|c<__Jt@6a=;IE00myxy1XGS3rdw);izucN!^p2C(QNCau(>QVOm~!jRv&DLOxp
zfdQNeILNE7U!{*;=z#JlXqf5}bUda*9ArcK1k;eOheOL9d^<_AQ^MkjzK$F$4j9uf
zD#jB8WQHcPZ-g9Uolw5<^D3@QvG6aMTA&M=#D97spkcoyQH`vyn1$Kv(-iRAsSX8H
zfiwlb4%bgcK%UjLE*H;@u2rws2{oQBj663k%X)GZWRNeMpL+rHC7zN-)kXbDhW%hB
zOsueYB2@(|R?_`Z1Pp&L-eFsQJ}KdUA#fNvY4@aZa+XLE{ZDGonIWCSbY982Z}<)*
zE{-aw6@j&7b-!FRY1z|AyPa$R2EzI?IvRQo<`X`cV$|p2njpWiH8gm@&9$1pZB5$U
z+CSicwg>)|<Tm>9n>704YHyw%O)YwNlh;mtM|qFZF5Fj;-=izO1F1qH1)cvSsN0k=
z%=uu&*2%@k^CQW79KP$DDHM1R@0)1m<itYo11m%+Q;^?m6`Fs||4VA3=@<_wM&gx5
zJ>V6MMg>-7RX4jbZjJqm;%|K6^$ypp{i~nvOQ~|oKREtFB#7F-QbS@XKT$wtFA~~R
zdvy@BdwOtOFq4w{u->oEz0Lzwdnhy|?)bXSRB(Hx(DB7M)V7>l@J~(}6pQ`VvN&O!
zR}aDQt#XFUtO&A8J^i1y5vn+t0T?!SF~8M#cVI}=cza`f`A?dYEexbQVeXN+*qjMb
zHKIkwoJ3B)_)EU^)9(y5Y84+QRr710!1=oCNs%MT|3_$kerV`F3+Pg96>;`u0jHt1
zP{-|zzaU)Xab)ko6bauU)RWgvh%}Q-@s$2#f!ieMw2g-z(tTa~R$Pn!&bmf~9`8?b
zRFm)%wJsk6p<&U+eKB(E!gHYv(mywjXG#Z@TSzl}g)Ks{3y=9e-u<H-;f(1V<ra78
zzQ*o+JlG-BjI#`&_;c5A0D6wUfD?)x$XzMbl2lf}UyxGP82xu_Ea=|ZK<5L}^{EwP
z|AO91!K}uF4H~0>6ODKhP_K{Sf64Uc{>D`#+`%qgZ6uQTFU$qD_?Tg*EGbn(sm4Pq
zjZJ8Qq_T`Ecry#_`ahVW><B+ta1AYX<&+P_H#n*xN&OF&KeNsD_p4}2{04eUEe0Ue
z46KsC`P=`#w<V(2dwj$3gxdPtr0};rHDSQ8CW+3t^M{*9Bs?^_o?P^vJJlMh^YCSV
z*FXG1VR%STIF^%gt=E1b95quHf5l5}6UvH|pQviT@C)&qML_=2YvgxB9ui&8H&u^~
z8PZQY$o`Vw4+mqwuwXP>9GKJC`OOP|g+`gB`PKN>1p2JaHH?rQbX_!g!xxDZ;R}-G
z|G}A{VIC2di<O@=&i_WldIT@eT$>8o>gZ@uyRLS=ys7*~I{g>c(}h3q*TjP5e2Prw
zdN=57Wp7OTXWDE@pu#(dvC^ccdAmi*8E!J0`(H06o2~I%9oyS;99Gjs|1i=I<bq?y
zRz7U^Z0E>!ExBQj>`PbC=a<YCEeu@)j>?ma8cdu>xbi^xU$AU{)au_9?c)Gq&w}ke
zTmUExOe2hylzSjlW?t06sU9cf_{+Mh_-E0-aQ-h2^M4cb8**rJh*ZUB+Jxt2c5gGP
zzN**%c!2Fp?W%-=ZAp;7#p3#7_kZ!*|NA8ionLkh#;4RzdYoA*ePoAD&E8Et41O;=
zmiHxX{_(D|4CsIoM$eLh92db7cJEv>C;lja>Ua@yl$}ZBq7wD-53=sR=q*o1i-b{8
z2ds(;(J|^`@l}!p5KR6zSN`vt^mx?O=%A#v37;(8w{|!z?HLaVLBzsXDVQXGJmP;~
zjsN?GE&%l-%)5LAlF~BL_zXcQ5upK;|8$E-66vp_V0?)-Umkt$cv~rqK9%ycB;)wr
zJi+U~=+}Sz-~YX7BgJ?WQ!Sl28*5@2NL`9}h;n(3F1mNv|Nn)5A?>mMAahAXem7{H
z(a&7UO)i7xFRJu+(QGh;_hkzZPa^Lsn#=xQQM~!teeQppavK*$f}B2s8f2=i|Fb}8
zRAaHj*b<_0iQw|D@QuH}hvQ@etwfy`HcUPYUpm6+J6dcB+YabwHe}rXf_D8I-;AI6
zYciEQEt=hxh=C#upSeO!JC@k1c9}2#QQ{~BSvH$hh#8bv5)+t(ZF~ZKNFDuW?fm<^
z{rrT`5m7Lu!)_|W?QJ)`Ie}_4bSKR4Ccz$x#D8LKrBd5$Hgr6B*8U;xFy~A+!Cs{_
zS|6hLnC0>h?&a@#$fMNOkbN8++mI&Qwe&Jq0z`|Q5Aa*5kxvZ&CtFpO!z`B5A4xQL
zMxVwlW+?aTr_BitoqNia*vG)X@#x=njr!6W2asCb;@h|KN<oJUo(toY9al1TyQvtS
zF|~6joTHd8e6cEi=9M+xfc!S<m~=n9skY#mG44O8h2Ib+v6BACn^Ml%2YKoc;j1hq
z<@xk+jXfU?g%qe5ojU{^*GBhGRy%+Vh^&^b1fHvn=H;e2Z3gs2KI<&U5(HE_*-g%9
zP?FBuOhfbkS&W*5Jc-pU7Q^v(W^t*@^4=**2aBKry5uq{CrjxjHAMGXsA~!(&2zaD
zRdlO(C?^`O)<0=0+eg2OYyk@$1g%DCl2a~>d#sG*J;kiH_{!zxc|o_R6SXTC<-EK@
z*gyU&1pd3){@(=4qy0{@j|XGbqHw#~uVRsD)>ZiPmQ9BrzKbi>5C~GFbrL^`heDQR
z{gnPmJaUAiiPhcP)-_<{5DAU*-EE*^iK;9vBahAQ<2==k2b?<K9}RX2rjiK2q$B-5
zdxJ44kii%Q4&toiM{<_E6aKb1R|}o&r<ZL<gEoT=p_AY@5B>r(`-^_ig*#&Oqttx}
zTJ%NP;U?NiuJiH=>D^iX%e0E*J6_ID%<GdStzkZPAF@{xk~qXu6zMMj|DYWpHf$Cp
zeN&ejx3qCb!ljVWb{78{$~a)%4dPH5%4>e~GZ`*aP_pp#HOn8A;NPtR%^wqoMM0mz
zWN7h=tma|W{i1V;3;3`NBJC~A&Ty?s&Nm6Z=m0!`Cl9v^=D8l*4RZ;20vpE`7rY4^
zPZoAMTD{*i0;hx(&BB&_jXY`&k0?)%h3t@M7T_c%eD8l01F<SfGuwd;xUPuF#q(Xc
zFe#nFUt_*pH!*yBi{b@u@BiFoaG)N(%lJ<t%se4vx4P<(2_^qp;|))=rB_>4(kkt)
zcU<DL4ltMMFMclb{KIQ8hJ|?7J3;>stp7K!(k6nwiBhVySrsy>b%{eJcnOh$uh1~6
zCe7vG1HL&m^oO6r@N-kU<yhB_%dl}r`aOp!6^)mG((ws{@<)H7h`$XALUn~3^N=3M
zKTLW3(}nzlo~=e-&{l3NkP+;$JKdO^;Tfv^WPn>L#@i=B&Yr;`#hCyk{tr_2Q^shQ
zL*%Y~w<Jxuv`vxDkvQ3)PlJj<I|;^&3wbHiysl{S%x9n#D~vHeZn|2Bofl@$)H&b~
z>)_5BrDk-4zfty=#YvNxP#)#ogzZ|rd<OJm?q(}#tIJIRgszq+4N_!`uIr<><QTYI
zyJ_CmY8s@32-<>|=TJBoXdw?1Wsr?&e#XD{mA8!EMu(n(a<yx-nG*0~wVIpVKw;EI
zCr#jFgI~(xc}PV^%Zeg!n>WRRHLlqKZZI51TcX1?RSg1^Dv<<={gXGF$NU-vi-|8U
z4bYqP^>)audi!D8n)?R&x~j@E&A*{1m+0KrYxn+oy@0Pkra~MspcESM!SLUs`Kx1~
zT6#5nRb`pe^q8CQ;fniL|1@87dD^4DMoR!mKXxmy6%L}9xyWAsZDEzk07VATdc*T|
zPiE1jZS|@=)y8Vg*aQ>1FZM_DsLl=r5Lbh3xv@}Ge>Lruc{+(f@Kj2J#ZaQ2gt^cO
zz5nmdRp3^iE5ljJH~}V`snS(o>%f^(T9vO_qpA6<e06=A*LjmvV`tI>YM`^Kj7$&P
zqmQHO=Zr`ZU#SnpbmS9xl$&mg>6O9MNz%&&tfpeDu7TYh1accW{a8sPZmh?L$7>T^
zQvqi=%#z533nK45?=nlA&@-F|v|>#owGg=e=dLBUn|%&jM6fvu2lua_O0A1^T{}gz
z#^if*<pCS#;*$ZnmyQ2v8kry7#cpchG*69{cc!&~tewo-TfWC4bMhR%%~liW2&5f#
z{b`re6E&@Z=xj&z#PoIf+@-?wtynX!r+oV*gwfmI;<=vp)c87(eF3Zq#E;$%6W_pC
z&z5W{k<uP}F_zd=Is-ku)(Q6Ap3gpK%%LUoe7({WMr$PMd9vN4TjUH|@V&WeRsJ?m
zvRN%wJ2^6rwHQ&6bA|~x*Bf`=-*Qsx%jHroBp(f)X}0R#1~MvJO39-7H~7V{>$F4>
zx%M|mEJo~&xta-D0?wMIt~$b0Vn)|cRd;VyJv}ejUxctV@eWnfO7iWbl>i<bJr@lW
z%X8I<97!!Zn(<EZX`1eV>+F~Ewf<z(bK3zJ=!&E+mxOt2VShT&dOq~5`6y^%uerh6
zrrtx3%@w@<4b`5A&-Rzx`Z_Swx3EW#${=%gwtvK7ez^CyU-`~VntYk1Hk{L3tfC~o
zK86#PGamxFn1Xn8)gSMV+>PB7bKC60O%|KnOukHlbwc%92(`kRzrDZb%ZoyQ=+(^0
zN6L`--5bUF@wxg!k<6J3JpE{FH&FgUi|IL(@%76qt<9)>yHsRnP{_C5v(GZhy3{e(
z@Uc9T7JcVSi6y(PmwJXw6YJalTNhn1QT`_?YH3V9ad=|y_hlmc_d3sD`4N5&-&3;s
z#RMbbiRzj7OjKMGr{QvKS68T_70cZ@vc(rSF+5qA%hexYiIG{eu8_UJ!mY%o8p?Wa
zcEU<(4~s%6B=nSZEzf^`76gFHJilI0TccpS_farjqfZoeuxNL_UC0j>j1S&3pD^W~
zR6<G>a8NbHABS2JDnl&vTO`P2!CQreh0>_9?83?D-LD=ja?JselQKNdtEqLUX7l{e
z8sl}`(Tl#BLvU>HYF_|o{l~B50Ey>yeiqj$y;J<>`abZex^4>GZe+dgb;@fzeoDN)
z7vk!d2amgWd*Hofg8rzD+e2}N<)j@PG4izN8dlPxD=)UE&xksC7iTKMLk--$f9#df
z!68DViPg&Q_j%C>7B1Y@x3i)-jTlYe#R~emXY{$dtlo@2G59dr+U!=-aosevf6r&=
z`T6LcTcdVM)e3Z$c#3Zw=Iyi930u^|c_^Lp4($rNJe~`!(YEIJiBE4heW0_8OG{^P
z_LnBjw;v*`amoQ$jQDA}oj-MJB2f=E`bpCFQubS<^io^cC6_l3#*QY^bBtPK#bvLx
z!;ZG)j*(TlxohDl0FiNhXtYbkRG8;>MbGX)ET^f>vB3rK?8p1l`D&~2q(M+8FU*DH
z!5x2U%*sSs_|No@At{4%L;OYapKEdjzV<OjR+MuFiC5+9X1=&znsev<ww_bZPTYw7
z&v$9D@^>z%*9?DET#Ucws!Op_DD(&wy`H7Uzc_q#bG%P#dAe{iU(!!Jr2xC0cTeAO
z9MLRV#64f~HlvG#X`iZl1jBvyb<zVAWAL=2M7J}7@>JVr?>ZSvwqtHQxp^!o4Y_h)
zG!ap?4+X`<u~70DgIXCCVjp{d)hI~fH+2&A7DQ^aH&kO^P+@NTEa2Ag9V7m{Ylu`U
zPR+t8)Ri?xHM`iW@~Pgx1f_j98n-+WXElM)Kaa=6pi`AMwp^;I#=N-1{M_h41yPtg
zxFBq`&`{V(v(>wk>@JCeNb5P3Zw+Y67GNx%@o-IWTXmcqjt;UF^r?MirKBBr+^#|c
znO2)9^3Yj7h`OmU72gbrxT6A{HqwuWpRvC}b*8$iz+Q<|elXUsD*5KF+t$=v=p^nN
zDtWrieRAu^_t`?*kjIE;l~UxQ%s<|GD7UFcp|KF1faL?`LB33r7TRPE$-ONGJcqz}
z@E|hW-B|JfS>Az<=!x7s3(oaa{D#~nOs8eO(H*Ab{;pq2(|?ZR{1iG*UVU;*aAshh
z#q{A#9(+kIvD+n#d2;wofx^q$l)S1Lju{Td;xzF2MQNv%eq^4A_e0IRW~W1Zamc}>
z0Rq@-L3PK!n8cXO=g88l#3q*vwZMgyo?TZsycnSOVs8P+qWPa;zKK2jVyoC4*U9X^
znK^~$Rima5&~}nA)s0l|6r5OPHa<9fZ1!k;gcyce+_d*G-x?^skn}6v5hu$5D#<mo
zh!=CPljdo$8BtzZ@U@gsk<m*Z>pqyf`-#5Rk#<<$aeqB5?PpW7)$_U=y%M48AGj$|
z_{w6;CK^vf3(MG7VU!JoU!#PQDZ4Ptt#RTLE258H=IUGb$!g5#SZxx-hz%Si+9|VL
zjYEnav=-N7BpB{g4@%in`+Ntp&}Psc$8LsmvT3Y-Jwl|4xI0e1!@@1rC6NydJ9~ii
zG`Oh^72~iJKz^mlI9O%77?LWLT%#Ba0I$mFNQV$f;v>9ay)!#%3z_1X8~L13=S|W2
z;kDP9({Jyra-4D;cTD)qx<L(S%uprL9L!x#IF+%*EfxzE$}-(B(y&7b!(aUn{0q}E
zz(wMwvceJ&-@bZY4rE^5q``JWD(dzNAg{<juGsMEvgBwo8@HVKQ(py=Unmrh%-#9R
zO&98=0zH?jI}}&;_DJSBk70`oNy!$kis={YwU6?aNGrI>9GM7vzb(7<_+kO}l&Nnj
zZ?oyGGqDdU#kkXKJz03n<UEopDy-tspj4URv=nh<`(BU)c?HxJkK9|2*mFG(gSS8q
z_#St?>)z%&a(_&sCF7b9I`TStNYO~MK8W|TIaikM8W7x&Z?u=|BPtVjDIZbv#DOd>
zCP*q4&j+Y{wE14>F*uUv-*JP(1-G52zQa!o54P>P<$fZFxYKYxA8Kc(JUM8jMyr4r
zcU_~&=~3KCI!i7($uSs9B!=k}Y8$^;u(U375d;3>Cn*fx097`KSa4e<YaRgcf>8a#
zp-F64tj()3>Okva!+J+CJqjU>FfP)C43foHA4SRYG>p{A+-nV|5oQLgm33hm-UTXC
zTAxRLjXS)NK2-U1=K|O3`{^n#vgK0NIAiTSTa>xnnM6>TN%WbABp(ykzO%AdD4Ppo
zrB&^D9*g@8p^hY0jO<iO^+PqI6!AA~Jmd02N9Wu747kUOEUz1Sv%gLFas*vS&I5@C
zHkclq)1`;B5keyCa9yaMEeaLXcycM%jqx5>g=~H)xQ}WWG-O+F@jx_x58d8qN|>_%
zr5bxD%hg<9!9Mdo({b@7Rs0>%&+j4aZRQGL0wwkOD8L*eK~-e=^^9rSZsNBuGn1Eh
zf*H%2F$I0u1q7nx;|~pt=3-j8taD?~z?dhNecC57Wv+_n8Hm@4adSLew%zGH+{O5z
zd9iH<{HfC%N==~jFKFIIG;7`qGmTapY%Pl{KV4G$I)$GOJk_oR6f0Z=TZrBy%uF@9
z?n&gBH=Jx@T&$sDRDFl_C@xy1zMN}=ZEq&I^?OW5>NnsbgRsvd4WB~zuL%wu9$I~F
zK<&mp;*1{8lEP6g06SN(`r4mS3;gV~FWr&qi%Q#3vE^r4lBA#1fw0i*8Y^RmU<-&|
z`{;ExeOjDK+1EPuedMqOJ5%{Da)@3@cH~rT*f#_%c~zY`7|V&DIDMrZ&E<Qh+RJC(
z`6UZW;r{W$(ZSCda<O;U9{PiabQ2o7Qs6wAno4w*K=<@n^xkoqHid)H({EJX`V9)9
z!ZfTuPl|Slk9VGm9m#h^Cr=sqdWZBKE~4CV-6n%kLS(@WGGSX19Bp-;s1L5Zv$D_=
z|NYFDGyOpzY7>KrGZ?RNs`ZVjeUjBTyfDZ-1n<j@wTE;$kLD1bGtzg*wC8l()+f#_
z<a{BfVP`R-8df43bBQW9j7cyPFl~=4@%7!O&~jsYg}?0H6J^BP|81@Fc<ls#j>6uV
ze>!7u;wA0;Sfg%E58R$WgOyj6bXgMTT9YgA(FP%YEF<AFHC=6Vw(LYSZ(9C%<bqlH
z8~3n0bH4<Np6Z9aI!XuOCPc80GfHK?A7hF{><Yy-XOr*h@n0u8!{x*yjS3a+mDDX1
zD%2WrQ6i2`QRTkBOOa9SvBbymLzy$YY~*Qj4`ftAg5X%I1&l`TU*mGF=R%SMTgu?V
zAviXH-Ce5lCwXjELy_+#PpL|hf{4!Lh8_qm8Me!7+q*5CMbZm0my+z_=c{}I%@X4~
z@B8NAXj(15ekYf+VT{8hPb#Lxdfl$#fRWomyKyo|V{;K(6&q=r7gv;(natHcoRI?x
z_M$B+e<pkP3fn=1`bI~UJak6IuX~YyUVF?^RiQF&m~R$hX{+e1v$=b(_Z~VNdmG-0
zyn9FRcq~C`!b)7hP-8(-4?m(WtCa*gTP!blUb1rmUUxg2VPHPi>PpwdN3@Qa0#6!A
zeVJvo%g*C-0_YU9m(4$-nSxUgtA<b2tY1WxM;xsf<*8O9vjE#96n=gZ80%ZGmsNEx
zB8F0RT)lNsXpC&3CVe)Bzu+_Cg1TMZcPSYfAVk!G&dmL3&hX9^jrP-LOh+3qi7U6{
zkgI&SeeXJo$HUe8lMhReTiZD?DZ_WfiEZC)p)4gCv&HAAeJGl8xtO{vQC!W6?VN06
ziNIjomGDc13xIvkYb9HZeRi?A$KgxVhFfO`<2*tB_v2{z__ZPWBcHo{##bwQb?Ly$
z9*bdeXg3Oq)Nk5+yt8MEie3xBF$Mxp3k}T^p5;eh>1U1!AwfbD4s0)(m~3p;rPmt*
zRb&-?bJ%t{s$GW~1ou07qLG#%Bfr)*b>tUrXwPrbM4)QS2AG9KMFcr;O{1~RM?=>a
zY(t-sT2$2h7spugOx;A^CS$iRS#@4&$_Mxrn9(~a^P9wD6S61;`}I}C$48-mPFO?_
z)bPw#zj#_hT|57lL|jl+<ZY?7^2344E-4O4aSm^lnw{`_7<4}vegF+pGRJ#dr7kQ~
zpYZFX2>WcYehJ}lebn>qH$+>0XC#<`K?%}xx@A<AewBhhDQIuRq+vxx%3rEEBbsCK
z9o1C1zpsK<Zz$M8uDcjeJQHjLC?3Fj*}R%-@s;*z`KvMp;xSgg>q;p;{ysGS-&?_A
zI39&j+UKJ8W>hpf()A|{(!u$xI`>xlNTyTyJ;wtWIi9}oUHn}_F(%{3q}-GRw?=;7
z^L2NQmtBfz4H2o$F2O%PPPI!a@TGy3WT~$tJw`O>s&hCca?Pa9fn8?I)9XTh=g34c
za|Nn*GG!{`Ctg_obcl6+fXtffp6bfZsAa<-VH(_XHmuW#5ox80k+TqVf^!?J)@};l
zDOS`^ihop8Io@t|wfccvd$<X&>KUR(2~aAo<LM21+AdDW!boV7!qEWIx>kS|_}ltk
zd)?>xC69$JZ%Dv@#?Zlus^ZGdl+>^W3|Ua6!<`egvLN14YVf|rgiOeoYTD)OfL{v9
zgN@$m`-wSTMFo4Wk@U+iCVBc!1PaaX_Id8qOa))&Q)W~4fYKwe<CXh^DsyQ2?C|6*
zF2V$ACKedk$d1pk6>Z*33X*?z)UG?wBLdr84DM{m6X(cz2{x@t00y-d0qlL&(%n+;
zG`$JTjGiFkI6|tnPalg^r=VdejdWM5UAVK@)HU_2q<mh3`<n4o*7DqGk7RtzT=1BJ
z2X%f19Rud2ob_kMVE32eW^<(y2`A*ELNZnx0-rGbu`$31vbqVVP*>)OO$;_)_LmKt
zWA^CIYx!t2B$2(wO=9z1ADi||g3PUqVrKu+eF?swp0S<6FV-amzg%YuscQ~TpTH%G
zo{9fld{zTi8t=YIs{ECE^kJ({{>lC+Bo4@348b`j!RjL!P5F9#@V!phRoqG9AhiA6
zXJ!yt!0c3FCbY_z1$Wl>8yowbok}G?aCQ;}GyHg40XSuz#MX4je;0Ej^SEq2%$QpN
zbE8pdO7dO@&yEt-Mc^YQw<gfyo>t*;5~|C0E#>dJ{C<*O786_Y7_oIAdp!B@-ENu*
znd=X1nKkMsjn3+DgN#RPU;UQy_DDKxG#QMSm0YCxk_t)?fj>|W8Nv!qVq{(kJU_BZ
z{oJsX{On|EI9ya_lh|I9%R+~;i&`OJxbyhewW;aM$8Ngx@V37D=2)Lm<kys4P~^uS
z(pfM$ysP|5fsoX{IQ?>T=fWN@{+yJNt{NctU>g6?XPnWlUXIUEc`T&t06WxHwdM!}
z&JfIu@jTtV68J92TI9<&<LQ8^O|jaIVEd4x275^c))eqY9<5kf$+b&zFyP=1fj~s)
z-2U;CE6|6zoS}ynZ`I*oF^D?CUky_AN}9yJj8PEv@H-feYDGL{cBVd8Xx{9!#}_V@
zHkJtMijZTm0M2Z0aR7?zT<kg>>E!S-AA9UGNIr0TV=aoVPwQAQB%K(aAcezx!f(^W
z3o<_5nmnawdNY#nIE{QGcCaygVAX<o2f$dYG79N9SRI(!f<<I|ZS^cN7SJ|CF|_SI
zF<!?9<Jcs#M<NW~+(qT7$~&nqvZlBrNA2T=m)^#9p56!ym0U!F1-I&?jd<&X3@1Eb
zWSNk!TkF>Cc}q?>pLAGdZ05H~R07;=riRQdz$US0O}i#LQzT2_-!V|gz1KLS#S@54
z9T;#Pjm5YM_*5C8t-pU{KYyhvcYw!K+6b#J1=RkkVfIf<q(D^*3jb=mbBZW%UnfGQ
zQdc?=81Q1Eo`h60uiDtyxJFgrL5>KG*YBUmIJ7Yzzu{q?TyY;s))~db*kl4ladRIK
zPcwX^f(g$r<X5%CbBnF0ye^8etpiXH@RRFaDFASWEG&xZen<w5Z;^@RDF}wmS>OLS
zrRr$PqhkIDdTrS*o(#4=QKe^dAdfFdawF>$1g-PZSA@JrBMhf&v$%@)P(}wo2#w|W
zuF3mLhqpE(<O*{dOC;nlu6In**<e6S<sq}Ek|{MpZ1W=|<1#c9f2Xdw<z&_-BFKTl
zw@f|Rjy~lmK6+%GU<?BJ4N95^(upVfZLXAN=)uCIJVVq`jia)0k_8-HglB#rchb#F
zQ%`CDyjLE!izm$B;~`n)RE#d`m;LOJ3^%3o0M_pCu#~ewTN+2N26sT;R6#D!nVz*B
zz-lP=PG7sta&28Qt+;*~md=kmr~>o5*rV!n8XJJ;<Js)ajy`SKVrpRL{lsGd{g)AD
zg<{8h8H4mBa(9rn)E!6h%Ad>%JJh!x9ACw8@-*w!;h`QEw)H++a5D|E6P4@B^AUN*
zIzL(z24eJLjtXN&Fkttg*7yc&)y%RUNh8+tGnKKp-uK(i=d4er6pX79HsK^!Plig$
z6zYe;qO@9+p1ux_lX|<hCz7&16yjb{62k^f1jmu|_t&b$gP*eFAd1#$mYqqb!>ruQ
zKeUOzYMy+)pZ=wC3IDQJ$p81#zyOO7&cjBz#h=$;1~~uWkrVG{MF4pMIQOWR=hrOY
zyM5|zaZ^?Hhk_RAB_Mm&$3=n$n^nron&XM=<2jwt>2U_H#)*>?my>Xf9R+zS=#v*h
z-cza6YQaw$apn{k4;L$jq@vcT;a=P|_bL>BpN|CML6=9PA=7-p=iDljmW6oVU+HGM
z*>4VK>D!u)B-HAQKhI|HZ>l!eW1g9T2)0_*;d_HC!KVbNq1lT?lnAm#<<N!P@$iMo
z8QnF!0sjpu#=btEqt!G9s}!nh%{PKjhxR+~iD4p>)v$<^d499raPUUPYkkQ3U;PZm
zKnEr96C)|{*&pa4G0!F{w;eJGru%qx&q$NdJoDqAa){|y{|igAWd=nF+ovm?key{3
z&VSM5c~Z{Pb+6gX1{OJ0pX}+7q1vPeo#J_wQ#}2^R{l+q_9Uadz9ho320NBepYyx)
z*S^}}BkseG0X1*yvQTI<&|REfregB@^1AlJbi`lH(9s3CtP+yt_%&Ad8iwep>&6K5
z>blQ4Hfo6uekVLpD;WL}6aMHO0p?Qu8tYeMKJF&~$h{*}1g?1(U0##s)$n-2P|YH%
z(6CDXWL1R-3%N~JN|PX}ciR=~dA5kv&=Jb0pSf(YmZ-Sb+NSyM?67%qD}}O?aIp5u
zj_HpH+9cAOK$LXa2vO#OiPI@JhDX7_fvG|8Ns*99lUdf!Li|~j2M1ZCF|C<gO;G2<
zp;_^$DDuXaFKq^u#gUgWVv>0dvr&oGOvni1OCAA`x-HARm0%olJY!_&1HZPtN_&h+
z$H$#k2)q`cDargh6BR%l4=mVWVl(s2C__O-q*uRuc$x8tn4?#JDUs1TL8UN)6!=9Y
za<J6=g>$dviMG~GrmGSVheiL6F^*@k^}$$!Ov(l6&rtp%AR|^chrapHfjI40e?6au
zA0CswBAs&OtkV}_7;X~^E`&;P*)~zgYeGv>QU_K~GN6HruuT#(OH??%;4`vJ9<oU>
zZ<@GEcZM0pnLi$dc095w8aC@B)%9GYmy#mtMzW_2_jm8T?k!06g&^4H<%}{8Vp47O
ze-C{!z)`f)ZHl+WH6%-zQIs1!K7yq|nD<{SC58c)ql;X6)G(6D{EbUkNz%MD%7ad}
zXqigD>sqK27P7$xpC8Uu|IoDTh!tS1e4IP`;>U<WF8sB89QF8?0c8m<c6ativ>}Uz
z$VfJw9)Wl+u2wRgyR+~8u+d`&(-X2rP_8yuRyd*I==~s&V%dExC<u)gjnh{0s$gBd
z?S;`5)6>={Sxh8EwH{n>l^<ym%|XGw{mn#}hQ=bXE^lNaKF6uwawD1e1Lp7J#K?aa
zx_FX#Z@0E1NWsFQDmI$5eFlrU9{j>?ev7Fn58|XM;{#_$9bQJt_@iY{sB8YEK}=Dr
zcQ>@&x_z~l6L;zPDAXTyI@69Zczi(g<>4!2g;RgV&CZVgRp=_Hc$a3iTdBlXyIv6+
z)1RMYV?1w!Yaot$v2Zkynylu&`HP3xQpD-BhM^XZnmVP;R?j|YDTWoS$ay)@(+B%y
z>@R%^jUi%?p5OpCR5J|PY4xx^J+((}dr8GKWv@)nhRN;oWK2<x=T3WyB_MZm0*>#b
zD*r}{nZ@~ub2A}@A9<^IO)REbbmC_SeA3B@fIT8f^NHDpH9UOD8b|K5B|RP>%pS+X
zS`%aGJDUv?y<GOsQ&NZ8D(UjkJl9aYKA%m=)$AI39{}a>DzM#d(CXjrK2!Th{O$os
zdIGw}3>Nc+MnZY+m%a<UMhqz3Xoz2&?52zAc<82C2-7n*?c###tUZIDjVfy+X(O;2
z*mWlEt|Y6&RjkWPibwHVG9g^q`qg9#@y_p#pI?cVDKPi7NXOasqWTJz2l{PcG7NnJ
z7wB6MSBojWSvyjB!3H!^Y8OudLX_|B{SscEt2BkT<C)6Y;Ck<w5EF-rhMQftt;^&c
z&^OLqMSkX%v$I!KV?>uvEI#Dom=PW-PRdblQGuB)3JOZl5n(WqOa%#H=Tu<Zs<@Fi
z?xnTZ`vOeM3mg=K5Z;eT$SI@jOvmgrt|Is~^seCNZx^+>i+ZN)vb(SAJmwu~@7SUs
zjJmRPltGBDIBOXL4zW_O495MrWE&{2kG?m&j<~J8#8GB!R>~34H?{XuaM1ZBpje5d
zPI3{I`IAeae=Lb=iWL4DV{&qGdAcj>CM=Taf=zo|k_s%+0$ZlT_XEAaoIcB&dWusJ
zs6T-H0Og^0Vt<UquiQU!^L)Zx9=!hJY=1eVBxQJdv=}iX;=%|H+%~kT<X%289cxnD
zWLCbhOpMub03Fag?ZWjy1<RERevGB4`e~?(z9@f$TVC>tx78|%xvQx+B1LUgE;ga}
zPS5d(?vH^75IvU^KD+7X4iN1Hnm*}OSq=Jdn#lCQ;d`^&Nq!Q234t-sb$`D5v`US`
zFfAo$n|`mQWN6h9a)ms$0oU5jbO%6|)WnnX)RTd^+#i>x^=D%vIl{(+yO-s|Oi_?m
zWW^eJ<Zhv|^+wg>NG+mt!12wP>jpn6Rp6P_y`be~G=zHgD(?2{hsx^Vxp)#!a!b~*
zSsEGeUd{M=UL8)#6JXN_?+oi0hxYszu7-ST<k4n@nWny};7M}}@6U^qr=I*FGav3B
zrDTJov#}p7;ziu&Cq->EpLt(zH?~b}@JYS*<M)5@^I7!e6<&&lQKq4kbt<jN6BEuM
zenvb!$7#V(Nzda&M!d5I#*(7s!tn#;>oO}I!<Y~g9K^`PtL4j#or}T=P^dYkCR1^O
z&F{nwF9CI+mq-^dOWm3fe3YD~K2E|1U+J=Xt^C3P_4HjiJ)2bX{)0TTBb;cS`ta)(
zDswwxIqOzYwkY)??GhxecTXtbT;USvY=?R_i|RlWbNy*{r%tjOGKU<r2NbWe@VZ3*
zFnnRUiTxbsb&2c<pKWpY0<|mY7r70O@V&dJ!e&$_CX_yv!Z#m&nRhe;Hf8MPNh*-U
zA9Z%XQJsju`I2eDgX$M%X4tjo6~<Q+T6L@rI}OVFzuWreqQ9;qSc#VVaxMK{qiCK(
zt{7;-V)ItF9hpyW38bYy3o30bNuf+Z(1=NBW6kQxf{xE{DP?dP?R@U*wc|^AuM)}f
zTB*BNSFP`#V9N7>h4{@zggr&ZQj8UW<ls>Ld1|L`sPol)^-5FUJP%nU%MbZJQ{+SW
z9tmCaKHY)CV6}Zl+`}jS_h`N@#&R0Kx+5|wIftL`Ta5wGPE5a$@cS$&5JZn2lLviw
zZM-M1<;L?7a=*mycPB?_W7IKqN*H~!TxZU$qgdG&@8oxI<TqZa6SXw%8XR?eIxz<h
zRM^_SiMp1kOSYX{osWbmel=M2X+TBz+4^d(?%SkdNKV#oI+~gLQ8N6y<;5z{R%*GE
zd_iFf;|^<#N0H?&8w#!cTcLgq2~5UIucPgX4C1Uly&c9zmrqxG{aG<sj{#pINDEUD
zkQI+_(7k71-+YWdlUYo_Vp5{0Z79Kn<Sh-cvbOh_s~q|ChL!?pxH>*zkAl0f`M2Fz
z?kWGsW*P1d(;3-y#Chd+kB&lwF0!0%K?h{gw@FFzbghLUh{>JgnD&v2r0xXOnj48g
zqHs5WiNcAZ3itl!ZiXk@g+v5P-+l(&d$zrMbYo@K%dtJE{QKxq*PD~WnUP^d9Ual*
zlGK@mJexvrB3=^KUV50ny9IJ~wAS8`S^9pr+~ERa<APAm&>4mMP{}gxs|pl~s-!2{
zw$4zUZ<_Q{`LT~j-_^{IT#(7Ov-JA5+=CHMMN9DlTy!!lz|7+da%(d1C)PyJw3&3Z
z_B1;?#<zX5!}!YiSK8fAH<)YJq~U8$fQ^^o0kOwFM);?)ehGZ}#zoTGKGjZxO_y$9
zY@j}JSPBDkAMdb*S7UCKielf$CVLOF?zQqccLdT5&@=){-m}=!Elj(-;-GG+*zubD
zK6yCCxk?P{`qtvKy$$I@$PbY14L}+(-XrnnpK83a92jOQ&WSpx$^8zzkOyN25S2gW
zle5rUe9Xku|3oziRe3JY_*9Ka55s|3=>5sX>0X(Ap;P5qjWp${uJulEM-0Sw{wleI
za1|rBwP?j#p3%H8L~mhW<EyM$jY+vU26i-I_{c<BO#~VHcdxrNCu`=j&(@o{LnTrL
zN+5PrJKEzGwwA86?mj*O4l=W@J8SC`3?n1#^?R<Q%GyS$)#)oIse%ugOTo%!Cl5Vm
zY1wHg!QNNn@5u`8rCl|aZdFfJ?fqz&uhx<OfGxyCS5=%ROiKJSTZ&FLJ^1m{rSRe5
z;U0}K#s(8z5UiMn)keFFXHKzeQv7@+YDD2D#Hgw!!mUWCJmBG6s+5v!^(MB)pf8K)
zdB)JPz#I16ir7<LnOsxMO)QK}QWk*rdNu4u3HHQCroq!D&lO8UxTJnYete>Kae$Y;
zwTc|9KCi%3@*Y3ol?|ipL82^2EXCPPqbYnWCP%Oc&%j9gL#I>p*UzV{6B?CI1s@aT
zmuwbs0guHPpv)$UBVvyG(hMni>X>YV<@^2`#8T_pg!f+(e&Q%cwKHZmv$TZagw7GU
z@G}v*Ru+wgK3bv@w4JVZ{MJva*<b|gpM=3^*helrt6=t1NJ^?Q!3CLzNHCiNgyF6`
z_u<Y9s>_#X{$|*{g9umBCju$V?A1|)t*H&o1sUGzg-A_vOWPGgTzdIZ-l>O&P%PYv
zfGY!DD{4)%JKwdJfVS-wsx3l9)OYLLTJLEuq}yG)E?N8x+_c*^9}(TOsL{D0l3v;v
zwAYRs;%>%oh>&K`Oq}4eBx;z2ke!#GgA*Q|SJ)9aGS^`6X6^S^J1dJ-U+cCMdU@$1
zqiTJoQGS1j`{h;NKt=e*7s>&|+9O_?Z)J%>4zK4?WnZ<qZ@ivBbHYc%s+}rb?w>vy
zi@&J7f<8L~?iL8XV2$}IIA1HmJo0S*V;9nw1LEEL+LQkSXd9y|t&!2+I~MZ@KK<U2
z2TjEt5;8u!)SRC3o~w&~rnkNy2osNDEVx{9iE?h7DsmRA3-ug6oorzeKHfJi)nYiw
ze+HAHM+Yn2AycYXnOs9^YjlNruMa2DEpqhjeH{sTgW+v`FTX6=(X~2-eNLgLLc>Hu
z>k<2PkDk^`oOwMl=i->rdkNU$y0p$0Qzc58X@x+gVdY5QYWCHl>U-Ju6@jK>#igZo
zXP;5v3IspjqcQ{zK;sHuSdb~%aMM5+mt^%G0gcGU&p_H&_L+7%h(UQ`c&C%hRD7Zr
ze#6|}!sYK)ceKbB@vJ&WU@e(&0u@0JG^M(xF*F`r*pZ!({3DG;?)skd$<zwROtvpm
zhxAB<#h98(fQ5Czz9Wf+AP3kw_vD}^k+<$Rndv&U=h?dZ`f*}4zKZ~sE|vEF;L1`@
zQFDp#rfyV`2AN8I>uh<$&dm^9S=9i@cT8SjaMLkI-URpGa$>$@9OR1VXR=jnVdl;?
z`aJPHdIv!J_Ek86kR;SuAu^jxA@Ycq8fspEKTm7;SzI=EMlCPNtL-8i^-7TA2Jg#9
zmX`r=NCXfXI*T2_VVmpzN1Jbh)_?LmWz4sI^=c$(<@hoZvx~|z|KR3G?A+HwbK5`Q
z0jL{EN{*-toZ~!M3Z!!E-9=25`6}tq<r?uhcj;M)b_5cX#o05F%LN>nF_s0T5GU2z
z>-IinO>2x29w-@e7(2gFYqIzZ&xxs}&Pg7o3M}c=j`oqBk;zk<_nSX$*~k_)3L=)7
zJ&Bl`P+9RsFh|XDyT7u_FDMc{SnB%{S3iBP;<!_HU|W@Yy}8c88m?4(ab6PZ&<Ig4
zY*<Opvx~{m&7BSveWL=mkx`>%lh?O_GzBN`c0v(Zi<+lmR|sBC?K(NvrVnr4VY-C#
zudYMUHHJmchds9)p(7ftTUJq3VL3ZWkyWFZAJH(d>HN?z;Fv4#asvCu48LI=6>}_?
zr(D@r0;V76`FcF+K>hn)*I?6y`}lv3f}ww?Ep{i@Nx_kyuPPo0fULfY)YH{AJEO7J
zP7_*daGa2?y)vCK-!d98w9mGSiis>2EKr#Lzajn%hI;3K9U!lN51on80m5ej7I}Mx
zaM4*;d8K(7z7OXv_B8|_j_?K7Wi_IwFtcQKlTJAh3oI;M$?B5Xyro3PBm|-T{SO@{
zMn)72I2FVisH^m1JVt6I^(wGnB+Xf&-cElW)`BeC+6x=hq6R00)Uw-97kvCqmY*f#
zGx|n&QggTeDRB(}pg60)g7)9j{R^#rh~Gm?1p4f$l<C2cZ{GUf&k|Q7o^s`A)t_$>
z(S1GAoW^qHP)61l!m=5(^-cr_@eb3M=>JoQB6y62kktz8S6-pnJ6P~VYq*G$e+IFb
z4PdfV@&>uTQYyR306{V2p3|`HFybKOb65iZ!~Q??glqa2M#3cWAb`@v>KpjPrv0@?
zS+|_BDlcy1)X$QypvbWIjwt{WuyP>eHpW{K<pZs#LDRB^_jaNcwy)22`6itZG<ctL
zmhudZG`>rOq{!MtHpG7lfL7eCyLB2I>5Nv?Xk95^l|7dZLN1iGEGLXo*GwxiTS{im
zsvEY3$JyADKE6mjcx9Umt5u;uzM%atf&G?W{%-_2@Xet15|TP_L|rC0z9q}oN=0{X
z;|;;HF%gD~hORU<mD2jUz*m;b8HSJ{i7I9AfwQ280{3ln5xRjvHe<m2O84upbx80Q
zDP@~P`^gBwkor#1jdfOiXU%?Bl)=RA)rphfF0)aK4A}K%X1JTo(wO5Oah@22;SZDl
z^RAOMUDOJ^5nQ4-_2J~KNX9r#BCwFibE4?Z2}K$Hw9{p6wrhw^oyKa5heL<&L?WI_
zVH|9rY|iKGTsvmObyqXAQ4Ld8S4Pd0_P>=D&A%G^v4Z|R5GwpTXekS>jfnM6r^TK)
zDVteeii&Icgn5fPqG9NfmPe{uz@V`NPm!;J(5i~q)iNL4awUiq(@_v8_hR@XF9e`Q
z7k8+<bRN+e!C-L<CFmL$+7|j`_eP2lukq|G_594Bu`+2bx3MIexIDEQAH&M7#D3qq
zHFRK>?ccosGBj01LP3dGvf6p>&YP6CkyL|G0Vu(h;6pUfeOpw-cH0`u{dkg)u)&@p
z_5UpTUmxi*LB(>27lVK@T;fZmBGg>Rft5$Nf4BXAT?wl5BSBr6C;N&FaF#@h9yw`6
zE{F8L#ej?z+6uCvqgHx|*(ias!&<aA_s~f&07Xjq>dd#1Op2MTpih>?ci5o&9xg{n
zr<W3-_C)$N9>!rME9;Z}_!kL?LbN_>9hr|`Z`1rprtnYMQ1qA;sKmQgE^N2{3yJ0G
zTJEoexKDq3<o`0;a8iFM#uD5OCj*3U>giS3quoO?bX04R!rB5Qga5i3HG&?Atl3zD
zTX?)TxcD1H10!`EVr~0|(zwuP>*Z~HM)RM-B2KI3dSK=>aE9v@b7S#S%$I1CzOC4r
z`t!tXT=WC2Vid^flexMp+gyF=KMi~+-VMQIdz6pR@Z5MAMeCM1b`ULj>%GvuF$xs*
z$qviCWKkYQ0cWLYZcq<Tft#}?rRP?=2DOEPwxVEN!Mt}a9wqoUTkf0A4VQu-N<;f(
zDteBtE?67S|C?zjHteDb9j(BFzH*2FjmFE;^R6%l;VX<{wUq0pxq-Lwt&g<VcFbel
z#Kw*~?$rB3&oGZ%Yue$Opc2GJ(c{@CRN?S{i_^atJ3O27=~(dxFh=)zU^AA|_^h&n
zm?Fll8ja>pgC(nf+FOZuKg7A5`YQ(LHpMAIoCi`a7`ITexv@!pIx2YUWUx0#=&ZmW
z7^^CZ+P+j4t<O(RjJmvz2G88PjVg4^NP5ti{-KaS9qeY|^lCG)Xvh!>6{yeRPOLmK
zN<auvOW!6Px@8PN2`4og$|WuCUYsX!3dDV~5K%d=%B`JrOJ!y+`}O`71^unGEHB4q
zBeIO`Y_5Wv_HITa-W~<~EEuX!MD<)ndF|@d`vq9H6FSBP8Uy+>TwVm`ox0mjF0Zf0
z`1&7Qi9(>?G#0$&S6e29AblaVv)R<Qa33{fZ!D^o^kL}f)VdPY%%*D#<6c3B+0T&g
zk<&Cgp4KY$qP?e061*GK{W=Km5hLcPowT9zEw!0z-Qkg%Q`!mppK)QWo*MV{Hi&QM
zI{@UD4aK-yK)A$MvfMMUy|vf>frj}J&6nk};+I#x7u#UhZ!<DnyPvYWXa7OwNB6_4
zUEbOz8FZ&S;Y&C0UY!zp{Hi{Dcfo1mSD%s4Q7q@`{R+I>*@Hq*fW{i4gL8Vg6MP3-
zz~H2ttY~o*CRaNt0$P4EAyl&CTof|)_#cSZM%Bu$W;8lqe}6CBDA;ONuV<MUmGg4f
z-u8`ne}W%2=IwV)CZ@B3m<X+*wx}<;KAv&mDlwJ@8FHQO>S@GXKX>pa;ko^OkBLyf
z3(zWf&Us8Z*02&t&#TuBZ_F&n*g5Rp%6omg1mC_w5!p>|ZHGFe<@8FFUprx@P-Mi$
z&i0K>KL;AM%&m%=g;LZas<XA&eVuc*n;EtulT%&{@8-mxMpn9&4T?m9^tZWEKaf18
ztiH@+*#xDXzTz#f0PsxCef0WI%M_?rI9s8y&OeZ7h*E-2=#jW=K1y8qy^)XT2NfSt
z^SyRn<m*`|pVYjX_;R~l>|=*lm$o(6o6qSR6-YdKnDfcpKY88TMOzX+8Jm>z{Px@N
z08lc2u$>(15LvXwOpdWYo0waZ5)rH$M0~rv<Z;5QcO^cWK?zv;+~25;SD!>hk#I#k
zxt#|UD2sW57diRzabN4XrQEAl;q&?Qd$)N+Y%>LvY=Y|mMU5*eTn3V9Aq#7cTkrHV
z;M^n9_M42iYC#`auk%<#J#=oUrEDSf(j@y{GtN=p<c|B#iLSC^?a-ZD??gvf24aeW
z#c@9NRqcUYM(vM{dr)Cin#nSSoeLFPk=!<Me-?}cg&!4m(C7{T^g@KW4{@b2#SRR(
zO%|a0n7mQdspI;-VFy>H>O2<C5>cT4Y|FlDQcvEx`1<+X^;ZOxB!EkP%E~!B;vkP)
z`j%sJ+YEwGhmfGAZ9X^9qVCCPr-?n?08)a?cP8X<`Lua-@PE3EDm09FO!cH{3m0ge
z!<zC3jKPLd!q2a78y@>Hu`C!he$6#=%bxF8IN78H$gdN6_ih5$ZDJN;4=>CXs47Yk
z9VRA=&ugmfwt_5^kO`sR7Sz#&zxCGyl(hPeJZ)@6&gM=Li;)KGrK44qQd2#A@!}Q(
zl&t|RMZqemdNK6y&D0BJf`+@;cydjgcM=xxz!i5TmT#ScnH1f3IU5wxp;v87>RB_b
zfRc?cJV+HA<5uB5#03aiDYXN;WO6#druBq@_X0=%djUqrRHqOBntg2kMR~5sba^&T
zBSVFmm=&}HjOdUay^RbUqFzS8FvMgSQgXwKg8+o+0!__heStkOuWoZ1U+Kf+6JWoW
z>-`vD8=hb$2vqRR`-H}Mc;y44;+BoxZyLQZg5s^H2W=TmO6*4q<igq#OSsEyQlDLq
zdst_Y-fs2Sn8|5YL+THx@^J{ys*0Vib}>8UKHWA0Y$5I+&SQxIHHSR}=yqhkM2?M3
zB`<_Pw{eFMlnz9<jDi7*izszZYPo-~?scJb;bPi8f%MjROE%0eO3sEDw)woR5=Js|
zi0Yd^i!>`)JR-YIO6XvWVa5_UT?B>xR*+KLAux$zcI&lG+Q-|+E(Z<gOv~vu@>6sY
z>$RQQpw`4@DtBL(TUSoH4vb*{YHZ6h7DbaO@0^oJQ)I+Lmk_So#6)MT*%q`aA*)MC
zZHkDY6<KkEc78f7{C<&~De~y5sdtuhq^MTQR~<L)YrhArvj7X3<z=8@@;;<tD~sk<
zfsAnxdZL&N<t3;XUzjM~3QQq2_@&b9m4+O;lcoVa51oFUUu{w^WEy3dTv7i|0WaME
zMg>zzk^!O)*)oEKpc2Edu|XD&q`6g5OuOcHsI}0{){!ZzQ`WUCnI&Jv%$~lp+Tj)=
zr;@mJl0U*h5W|W=tCAaB9K_cng*tev9Rc)uMOdEft=oWm6zT4#(&O*;g`R2G$DtPv
zi__T?hs2V_%t1?n>E5@_l8xvSW02q}44HM9a@`z*DNBBcp&{d|NA3ATX6V^N4cx`1
z9n6{>CvU|PSNmEkeNT>&`dziR1h*=KE7ohd^omgE<-N`Xl9oJaf)pxWI#Px+cx!8J
zY;jZH>o20uUM@9QlF{6{5uqbQZ7!Kis2BZDgG@^`I!@i3ywHWl9KUc-I~olt1crZg
zSusYP7;}rBuVWT7p;QG<d&8YNm+7)smv;4$WHi$do4=N2HRxHZgZ{<DG)B6~ZNJ5&
zdQ=`;ZD&VbH=|QnmW5w%9})1(>qUy=2ARervqs9ySiQ3MVJ(T0mQn4(zfIqcqZTZv
zE_j>or88D(lOOZgZF1NfTAvI#X^0t$6?3}8vtINMG_N|;IsumIO>vN@ueMbP-?D;&
zwlIqUC3>Wt+YX1Ta<~(A-Y0@^*}K*^-!kh8be@&eE@%)>!TPKSZxKP83HtJH<6V<(
zt;iTMTqQ3#&%wJ<6K_H|7d6K*|75Rh5wN5#E*!rtVDu}(kVZN6m3HmLQ-tA;m-_M(
zJ&4bWEjL-^@4U$H@1(+^XcpG3Je(utiLGu~2@Se%g>03#!rs9bBC?A5CJVmg&C#MP
z`~kPIu)`29{m-6HqPNHobBx)T!)mCK&I6xxWS{^QXKoY(>%YLU-Eva`xBOU9z0fp>
z?}XO8+YY;B9SwK(PY%KlFNbAOaNK#(t{-L|t&g1AAu_KkJV}7-i)R(ypC-SBU1<IR
zxNp*|MC+iJM@?xr-tFMmcxeJfrmKrN4zV~h9|G>(Mk*l>Q@VGq01jfq^bw#)PFLns
zVIb8@gPxN?PW-m(GqK+&=||aq;l-5qUdc}jFAkNCn{8gJRV;6ecd=&NyiFFU<E^Zr
zSYCaXrYAdFv)M%riW60fyQUL)VOL-#q&#y6&WhI5PG#W9s%QI439DO0vW@#jL0_RA
z`TXK1bKT2Wbh+;7=JM<PX$%NzgNxb$Od%nkrh$?jw=OZ7EU4#vqIu9c$5ox_*WF)I
zye~tn)BFQ13^S0s;^zm=TlF;q6NiY{f;d5u0^p&6rpy#+!L-g5;zachay#c_qb`l2
z68_D4qfPC=HF_4jtAkuFYD$CyGsc#r`_IMrN<!MyS#QyQzi|xxSXyIF#6piyT#*)E
z9>;Do9b+v{@%%wk!|wG+z5r!vf0OKZwF~FS_@E@lZ9#50wtr!i382`M)-o1@^?%s<
z>Zqu?u-}&v1Vp41R3wA}lvI#zL11X4yK`t5Iu%hGhLTn~hwd0eq(h0JLqcL`7<!m{
zeDA&MTi;smAN<SObI#d&KhLiomx<)1(hmQt`}HNO^+yDJEt6#$F3`-eo49DN9OwV4
zh^&;ql&(t$ES;qrqWR=>e7&zG?x~v!ukQ_b_bK$7ZN(^UFcchJj6|O_wK)Gp8%w@!
zQz=ir`L_6<4|AHLn4O}B6Fv6+RhfB&)uZNc6Y0&xqDsw*xS%rEROC|vF|~!KG}Zx1
zeGAWG|KkG>ky^oL8U^+jDni~9<^@K4FT8cymYL2Ei`cTE)WEg%c2w;7ZX4`Y-|pEL
zYJ;c%^l@VgPb<c5vU%4cdVyZ`2VL{C)&7!AqOAWcS-#MO_VHDuS+|$%*s7i90dKC@
zSkP)Sfz6~v6MGu!QFnU&o~lwO?>2+3Tb8|XP0w-LlvUt~I7j#w#{YPS|A2_^e|j};
z0DosY=!YWSK{UtL235bwidd;-4KSq>d3CAy@SEOdbnm<d6~e}MWS7F3O!2>71Y^8d
zsKVccVV6P|^Ol0PN!S{%&qD7mv;_aaY^TU`m$md>-4js`{L@5Rim=_db91Dg=U|9U
z&0<hJ2~2ZZcnZ0Yh}gsb_MiV;U5*iGReVjbz1TKfEicT*X8c3ZV&1mHrEMYdL##>1
zGPu6P(&@KzK9Vi=GATU(aLeq{+7!hiRJPHL^t3iK8-oHWP%>;AtV0w3KP&uBuh5_U
zJU04B?$jUaQl-Z3mPb!FN~z=nMN-&I>#KVyJ^SU_V*u31i=#P>^gq8IupZ+?Ix2Nu
z<nR+>Bo^OWS8Y>YNl!QNK-_b)f4iJm^5-qnH(Xl=8?y}R1O%=Bc_l5^NfoD|^mD8O
z=cO66HSb;3jNdBdYjS{3B3Mt$wh~q69MDHeXQM!A$fjjTcJ-f+YdKx&2L!rwCJs4Y
zH%5n4_}K7sYGe=0IB=u9a#_99{55M!8N3Y2t98eGCT_IfHV*TaJ2`1)H2l}8=t!)U
zSvPXT3DvbFMN23kTG0O@=pPUQ5fb(aM*hOU2oB9T=R4wNJO8!ALqfiTzM|^9nizUs
zD_Oi2;Oy}L&LV~-Y=?TQuZik#dJA|$g8RX}9{#NesN_CQTA4%Qa1Ab5{r}oLsTO=-
zc(O^Y-LKqn@ljEgj<1gbFwSu=#FMb7zM$a#b@yQXdWXrJ^$rG`;DP^nruj-=a>J%F
zQ!Ysrt@l@4^cD0zs?7gsd(7{#eXGQmI&2pSrL&D7pOOpn`M<wfp|Z1BBkyz?aJ5&!
zjj|ug^ROfY_Byxjq7J&L)Ep!J7j9I=rfxpwXH;k-vLm{wj!9c}t`ofTvhL*gN+MUM
zW0tyfy^i$|V)RkuZYEC~?&gY+um03a;^+1)$5eLbq(}BkChdNhp6#-{@OPa%GqoO)
zm%rjh;H#UvN7Hj~cQFXB?O^Sw#9ZZ1vc%wZU$2^`dFSF7(oylVc_|r~VTFKD3Zmn3
z8&MpCnwZFB;!~xOU633K;w{`yeyOsZk>kH!U!{FH$5i>z`@@!?^&m-~+o6mww@nhy
zgMA&}-BvA=E1MqLH<*h3#-*SQ2v@4Esb;Q&9^2>w1EgD}E%leE^HCcnoQ&Z{;^Io6
z<YM>8`_m$I^dyR9AFn)s_Im6>o@{St_WCWq_@jB-ed!HllctVzkvmrd?&ZPoIh<zG
zsA(Vwelj~IRIxDNzowX%J@-~}@a$T+V}C@jNL)>vY02$!pxk~pxT1~$k(@DSfcxFH
zZ%V6V)I3j^QOJ!|;dFvJzB<SK5_7rMS-;XTiHed*wLAbaFizbT=s7yZ$9Ml+tS)YQ
zml*oZru6i((j5uI#)@mlr|angBjNete>%zj@`pRc%qoJwtv6wP9H;7-`WaB-{p=@1
z)2tDA*;x?2by*%o0UC-nKy9JoSEi!t1ZO-iKiMqx#3-Wf9<|M}g!1)kA-jiXBOEW5
z4Sw~*Gy^LNO|n!A={$Q3V$yyGGQbo6*-uXVC+?9m+pkGN2CX%mJ)Ea)Z}6B!LswNT
zv^m03Leh1)v)xJ#Ye1D;R5AkSp9B8}Zh%z+?_4tNTi<Z)Tlb`Ir|zL)+Q+`-&DPi2
z9Rq~>kc(<Y^<lj?#QQZD@-gs$?^N6@MKWi32%CWM=Sp3}K6e)sFru45Ch{=~2=P<m
z=F{oXygi1Eppl1ui~H7NI}QBN{@53ria!NzJNFO^mV9lcbIdEzn{C=gjIX_pQiIxG
zwE<OYh{RUfkl$d9(j<2DS~V&LqbLTm*Oc*Jv3;n$%1WH7YmHNf+Uks(fX)KnN_595
zn#~)?q^z##lpNfzNER_j8!{5rwW%;J5pDYn&!Fi$%qX7u$eO9lf>7x$y=vmqTWU#E
z6|t|Rbp|E}Ir_Y>)~_&#eP1zVmNh9yD#!|{Ol8^PpLXTb*3CKGFnbepBv~PSQ#4#w
z>^eZw4=Ko4mz6(IshYs`H4!ecikW)LtE>y=f@S`ya@1}3M6gcO3pd;oG}h%^-3#-)
zd)8^ct93sI!r$s3oV@fczmG*3M@>x}i#SMH_f+xlg;RM@V&NCPJ9CruTg}B-{+gVP
zKqP>BMu96D(Ic5Hdh257+NGFiC$(g`G~)$LadGjK6l)pf$C$Ok<Co(&A6Sn=F1N&i
zHiDgD1qWtWQL7Ayvr0{}%+vH!Puww)jWY3u^ZnVFao8F?u%q-kgX_EK4wN^JrrGgZ
zTROZeo)rmZ>#@}~guFdXU7HGpU;D8?Kh&YxSO%;Y;@1b?4LZ6^Ri23M(;lO@M}C8U
zchna!8+FBRY}@!EPGQek4XZbAkhZ+lED_1D8vGx7=0J`D6>DsHaz#l$|4?R)7CNFz
zxMKAWhiO(ii&Fos^|ji9dKa^l8W_eGEI?;5QKU7G5aY&~iuHdGzTj$Q9Mu-E=d!(_
zPvHyx*!s?%J+=;P?0?i8c%i)=yFPVN2f4Czp*wy6o9H96tDLg=08ufr6}BHH?ARP7
zUtqw`mCyB7yKoiMytx>eG=v^GBtBAPNP46=i_(s|YG!r0rcb8gwlrcOPE>8lsb#f<
z1!nq1sl_(ZuKQ#x8a9KSQ(?|==<V%GTT07H0ULc0Xc%W!ed(;9=kBP-i<bPosqdQ!
zpJy~xLxN0zza{0}{t|7IDBFJMAxjIBK-T=7<FxYTf*Wen3zx}B!EItTa+~sjNyp32
z>{AUKb5^GqbKa}V!=@EC-@BJ<+xOaBw^wXeYD)5rQ?XV*&I||DblJ>}`yYxLvMO}W
zD(Vpu;q*>PAJkn0d%qHbjv1Ok#6u|p2ud0|s_8<r2;Pwm+Fy2Z_HSED2P^0yCB}}-
z&!$A<d?&6FSydvjWeU8AJnLvSxm}sZr~g{6rY6aJ5#UoM(U!XdlgzzykG`QH2ZjhE
zcmn~=ZPLrc$uQUpovf@Z4&z6fzT&OVA-!?X>f5W&!p~Z%b?Xlmkb9(;a$T3O{#VE%
zW^?1+T9!pD%dfNY@qURYv5uTz&Z_gvwg^-zI_WxbyuYa8;+{DA`0?Y>KPWfBhouH;
z^+&rOjv!F+VIf1Mw^T{VAw9yDK7iz|k)?7q`YUDLTWeJYZ~YRL5s7RRe{Cj#n!ee$
zkIWZXySJ?@3<i~?m*imn#96|r)u8Lc-lf&o(Y!q+O6p;5yPKOoh41a(9rsEZbPkR=
zu@0{}Ml+{AF8V^IYZ?gqGquNk?#M8%C%%T^<Wqt@n1|sWe2@61w~Y{ty<BS_I%_y%
zY1aK1cZ*v#BXyV|SnJcu{Wo9oJ5Q}JK`bOzp6|hSru8{}XROvqhDwd=ps%)eC4FWr
zEQu)hDyNsz&O6#g{N{n^)un}$7qN6c{{Kj?h}id|1$R>;pczf>pU6Lof{+R;gh)o4
zi;F7J=&fkk=s|8ao7yRen5xs|&lF+2w6E81$6}E{DnYEG!O$N$*VOdJVKK?Icp2Vi
zodfR2#6gTgJ=Vf8!jRq9<jCuQmnDa6EPLFeS!cYEm&_x3AOLK%ol_g|ihD|Y24YV8
zc16Nb?RPPaB%L*s6t?lBVn?=HjTv~MHG`(soK>J*A`16##{iQg`~sq6!glzOVzol`
zo`f`uBIEOZ(um`)`Q7Qow-}#(iv?7SpToiwKR>@uWa7Wp_#K1j9~$N|Y;-o>^UHMW
zZ4AO*4)bQ?B1G@aR;o&+jN2u--R17c{LJ7RyU6{r$fD54;wSO_&`+Qv{j2Au>&VA$
zXG6QJd_IzjHK<+lR7=0SIf@Q?<K}!A<q8>{C1qklvL~;?9k$<WpZK0vv+n98JbDa+
z2;KhlD=>8VmR8kiNm+t3E<_MDdH!jzEu>t@Kkh=u4llF@RR0b7>tt&jI*<}+Z%LkU
zo$m#T#6t->;+8DFIF!~sQ%_8Co4<J?K9ftT@-#$B7O&s5JPB7qC^s)Y-kQ)96nGxI
z-+C6L5xaE*5fbuOR>W5u0OK<V^yITV<=8cS3-A1aB?gq@^FXhv|3sjXqAywsSPluz
z(%d7l=L~Y*u^CsF1VYp&8E-9pLf=GD!v?C)M-Tkd=iYC~c^dBI&NbH+p;tHk0=Q#X
zsu{@}L)JJE@oS3*O{)s-SJEq&wBFe-p7jS73!GY4#IbH?NKKyVZrq5oR*awLD_eG5
z9;WUo$gVWb<I#c<JZavt%}mwKqAp{*)eQ^{ZWkZpx1y3hU~&U|LxBNI!WfLV#9A^#
zC8u+;rG*{!l}b()mC#7?6r1jft8>_E{4jGO&W}+oBC&{`^#gUv$DnHB^P8Q_wVsg(
zu8{luZPwpg>Zj%<-J~L0k~R@w``ZC=5VS1%j6C2m6-u&s1G{}mD6u5tl6a=RxIdc`
zfCB)#KUN3CqCu=85en)N4_w#3Cv&)gy%@)7&q=m+AB!ucOU+kmx;5t19kSE#q^x_w
zYgKv<{Zez+o80YReIf{5BuF=O+1_ry&%*w|CrG6?Tye0ldVZaR^&Z3$seERinh!f}
zyY#er-8jg?`CIRo4`FR$j`7ug<N#~QPk6GRlak3s;8};ThVD2IB&j<xL?^UK((1=T
zhmJD)I5%T2A;Yt}vbW}1p-m>0D-MFCnv|#CUlHd`K%@83^<f2|Cu%8Q>~G_#fZ!g!
z+M3#0n&9~SM;&j>q0P;1(B3Em_R<>oGA+Kgjydei_#Ni>=Bz@_tg5<>wVV_#tbt)U
zW)*4N=?A(&beIZ@^iY;}cXe`7-d&J6emE)ZY5$9LSaLF%udgvoL(PG}9bs~pr+&q=
zygX!gEot|30GN<Vd%=)&jR*UEQ4Q4TE~*`1@t@qwC5H7=kPox?R{HVcb=q=o7Vv8_
zoAz!~jA!KszBdD&iL&!-1~#~8zMy@iiQ}$~p6wRf=6-kukLdV%937U#*5Wyhg2a-q
zck`~J3}d8}L=Fy;ge{$sr(9>Y4z5fWnHHo4efx1x^Gnk&?LHnPsiKjh4E+7ZIWOyO
z<L`*Wtw(#o>@D2;Y(W&d@^W$X;tFunz*UDFuZ0J84t6;!&YoMb<#Lm4?M7sf(v)#?
zLw-<dL$qjNI<~gSg*_3KBXTNO>ayFZ6=RE{M1A;nHPY3;4OH#adp(zDA>wS^vl21P
zz-9<=U9#Z24M~!8suiDAYzTRhqZ+WzJrgNgsbMBa+ph`<Z&$G#YAJ1L1_r?%c#Mi~
ze7LA6E2HJc<NWy`4B^*(&iePsih+)TR`L$($|r!y=nVph275s~P`39QP_DA^C%z)C
zW)@hMqTa_EKMN_FnR%)Wbz>3S<~O$nhJsyZ2)emqHRwqJW$LN@!@v$;;7&F72Q3(<
zzKR~ra?26j2w*qtVX?h4a{cCuAl}9DVo@V+OT%%pqcMD@L_SuH+ZmqqTUAy~g-z60
z@6_x{Dif*cewoFgi@1x`ZU#iQ<tcuu&k=*iZI!Jrrtj&ub|&;aTm!=~E-VTeX&sw-
zOl0>5r3Lxx0v88MW>PYSJw1Rfe=sP@W3TPfgO5~pLzC<0O#MYcKCG%iXt}LYLOVdx
zzLD&ad#(u3WUz7V)EwG~n;S<{>BYa|rhXoH1@~QDdg-w}mZ6ktMgsbUzjkZ7&^9Nq
zA-JwxW>@=^)VetRS>~fq#_IdvHr{b_k?ppS63e$HQI#qAKABikw$b_p6+%Xw3pZTg
zoheJow>P@2Dow=njTmMnWo12}ailcd{S|A1=i8x&(|K1XEak#e%oPIyx^N^b_Hq{J
zc?Xk@c$6&}R`(J&O5_1vh^!JE8?cCzW?7F;I&9mYIvpHtKVM_9Mv9*w6C_?%3^+YZ
zUuuCV#B7ir9xsxwdy`_;8;;he<^&Qfi@SwnO+Ky#9W*U*o!NqK;*$j$C%gqzp&s0b
z_yr>406<#waV=~T_SJi6^InOtl!H5L8!K;=R%#A5Z%4b{X00uhV61HAZ*{IaQHU4v
z4s>iex<C>WM$oGC%FaWo%(!}lkh2Cu&s+j7A1n#F%_Tf?qP3cjLGZ0BNUGd5FNZ1e
z?n^*C>FA*3uR2sZ|3EjSk7|MA)^q?m(T_MBgr4ieciK#BjmAc6VJKaDW8P!mGBKou
zevWQzk(0~Kir;P$?mO8h&D=%9nSgsKqTzo#+Ytl;flT4Bw4CdXph8pgn9Q5!RW!wp
zuXN1#bhP{&U6EkB@EWgcpkv!w+5EV*{&>x&%|t>TDH+?*Ja6N|hxCuct|rplrtvne
z#x@o)eWkzZ$zr=ZTVtMuDToeO?@gT`X31}^+Q%t6)B##N)VS)(n-GhPiZ8y?lRq@~
zri`u2G0oZcW2kKR+L$LUxvbSB9+UCVSdPv6Y}j=Q<3YRvIM0{$&yxiMaj|>~kj?<c
zkyDk1_BjBPXkD1G>zcJ<s4-~-AIAbYl+;(aq-zCU4A+OL{$&^LRMDRVBoMC~9or{x
zut7y_ha&op@~Wa9P4C0*mzF)zdJ>xhkm^4xdQHY@oq*i_M(29I+>r-c0FJG=gu*I&
zIs&g^-PbR+v+q$nT@IH5uy8;nOo7!^ZG##=rN78bL!^CS?W8oYok!ctThArbb>zdk
zN;Ehk{E>BBkEFX=&X~7b8`U&;Tmo9o-i0d;CCw~eGm@u<fJu99GsvyU^j8U4#N!WD
zs?>Aze`ZsjG)9>CzW0(dYYDhGq8UiG1o8<!UnEDn@d6U<1OLMKXMo6i$)s?OLl+4a
zg^eJlkw%8B4Fs{Q+c5?k0EBYv)(vL+Ve=*?4SU0(?qhOumf*Pn$4NK#{9^Xy;bX1}
zyxc0viT;b?Fm8e1ADd_87>pn~XA`>p6<JWe4gwO^0vpW7Y%wKq)I4vHSBaC@qOqC$
zSj*sk`cj}K?_NTcYL8Ibr=tN;HBFxKI2NRJuINOBlpWrM`jO+oZ&@3vY+65CZ*QS#
zFT2pMnMCKns9*cha^MFC*)$M1sKG;&yMy?B5QIp#Zm#~32$9+3)k_|cZDLJ%Bb(&z
zhw_d!6F;6Ocgv+M61+PstEf;}Z5c(yC3L=B95fnl6=4Aw;-rw6g2uJAw@leZ4S=>8
z*5Mvha;R{;+A$D3X@mPS!hn;`*xho3%8wb?7Bp-#nL8=XE_fj>HvA_!GIY8rzo2__
zI1d<>-heG0CF}^W*AiFOVZRyMkUBs*yTu(E7FPCLdS-DxJ(o(}9QTQ`&yFmyxsFFI
zC6?GOZ|!Lnt{?D&$M&Lf`WeD0`gI1kC%!4_AdH&(|2!Oke2f$BQ`c4yz?R-g%A$~x
zg4{Egd;8E4j5zk4jK3cT?oHbtK>LtACXog*@lC~=S*TxV#?*inJZCtl+cll0FWpb>
zjI|W)7ulaW8OTGRNXH<%gft=%<aWofv<<nJJ;7E1Z-z;GSeK0q$X)p&ytHsOjHEBR
zJ9s*XG=6Hh)TSBm0zB2>39*|iN|#}WRO^h7zS@UEd+IYi&zm9g!ot=V8RFiK{$Kgd
z_~b9Lnoh-n6?BpTYWtC)`*=!;ZldUdr(uM$!4#RK%I>0z<hTH88|V$iF@JqYzR23k
z$k(VB9@{JN{_0QgYC+%p!fgy+7_`>oAOU@RBC)F4+!5$e;Rod3gjme3>dkhhs{?aE
z<)+9WkBPwVd$w~djsfDysZ<oGn~w?>?lNjG5A-}k&3a%b?F&GEtEz7(DH$=U=`9zj
zKrYoufVZR>W%P+T_Mw%{Fri}|)E&Fi^IQpM)j~G6IB)EM>z1ux@tU2s8R!1H%8Iy4
zxbLYhN1tz6n{!BqbRO$2sN8m1^f|+kpP-^XG2&fz4c_DeT}CA_6jeTxD;l(b>F*!)
zZ9&&*<aF;2Rz5I=D6?+YCXxozIZX#}Z+{XT5m6P{0!xH-3;$CWBNdLXJksEtIrite
z@q2IdLnlmza|;>Q9NHEg8*Dgs`5{#_sI1jO6Vu!g>-sq;vFcu)w*HKeGF!Bdn)Nr0
zJ9tW<TZH%KzrWR-O;6B=dem#{bTFkvJ=;$lsNkf6513ERK5zcAt8c(DVKnpC?1=os
zuB5}pCP~%Wk>9;oY1KO&5@H_u7d-27r4lVg{tl-t=Pqf;Gj|5Y5U~=h<sUe)iqL1e
z3TRZ0h>Sk*|E`mTc`!9O|2Ej=5DQ*d^oYCBalbbQM|D)HDuGmikigUhKTpa&sz-Ud
z-560aTxqT9Qqysm^vG>_vmX3xpOuLE9(JBmJ&DXLP0z;C3|^>{jrIerrrM#E+0)?4
zu9f>r37wxPn9qANat|jK9ssM~_ngu%l@Nw_o0T{f&@a_k4{pDm^OP{r)buDFxwI%n
z-=^Ii5aO=;b<YVb&j?_E6LNJ!3XNZtX^B2l*a2jppl0oi0SiqL78?pK-+x70kD85%
z&ZrE?%TWVA56aT{kUP-fy3-E)kcf+e?85r@E)KZJ?VXyV-5<F!?1qAXPbt3QUh3v9
zDh7=-w4fp@GVMIqhhDgzVovzRzSj`}sj#eGtTF~YotU6$Mf`q9OOa8%UcEzdLYkJq
z700SiVa%!3lO>Bhy4io}CqQJP{19UWU#N%dB<xwg22%vRefuPTpC1xYFQf{I)P+$T
zthB7OWPQrVP%tl+jn#M^4ASQ4kV&4!HT8({?Oq0%h+iCuqb{!`T^j0Zq?@?=2}{+&
z=iZOmQ%pNGE}Yi>Obw-;{fP>z2uo@RDN$(sXE4l;t)S~ZabGmsD$RIxpS6`-(vNfd
zJAfwFhi9Cbgp4Wv8Qw+o&F}n?rhAlAut0a0;(KkU3Jb&s+ba>?`@$8N(Oz2VbCgr8
zDH9w8&}`4!a`XI+d~KO@EZnqsjP#}!g1wsPN}q{4<Gi)21zVZEn3`Q2t@CVFPAbP7
zJwVHvoD4?au1}|q@5ZQ)JE;e|6ZAws(%djOaUY_$W@gnVyY!^powk#q^pD7-u>Kw{
zFhtbnp9US8P_7_i1f=Vli?t22cWjJC?H_FnmZLcw>r2YAqF8wX*%b_KBeMsvl5SAV
z>{+9mDd_W^@mIT{KUyrR4dOP^E>MO0`<A&35EGu(>AZ&X*r>+wy4d>N`V`|QYI83M
z{@9CzJ6`>w2MOR?HGI2IyZbYI92A_e>6kT1s=Dc;3MDsk1d-5i?<9e%4^ORQFqXji
ztiSa!=PH^|_ErKuSmQzoavJ<<Y-A^i9S`sbrfI=GjWEVbho;{&Uyi64>#*JQL3@Sa
zZ4&anCbpU~86IpS{-Spu7ja=zl8A#eam=e8j;^^+pVRTzn=}M`@|!3O9p|eUPjUpC
zI~`Z;Euy;Eb~4+<eENtNX#dcIh=iEc4GsN2^L-;%hy&HU`u1Dg`NhE(FiY!QEu~~4
zElx&g`JCbR@^{5+7iU>_B3Vj5o!IAXg|N&VPykO}5=0Pc#4T9int=rDu%^p@4Hv~o
z)E(#vc9!vJi_<A=u!)U*KFZ=bMLf%E5%^egkNvKtV^2CXTNme+L8>#0x{7P68Ot3>
zy#j2zLJXGaw~S757!0=-31gcE6h&XX`v>%!z)Eg)_4k<tSq6yL@Q@;EcO9UdMvm~P
zza>sg9Q^)%1%7TqS3PjNFGh!H(&`25+ElOwg4CUr$Tv0!TFGDJx=WsQ9KD`pv3|gm
z3;cQN_>wk48p`Q!OZ(TyP3;S@LZZL=iQV|1G=mV5tjHRhOAirrR4pR&C^?Z2|K1~a
zi%jm>*&wrZ27sKmal&Y5yu!0-k@v9V!B-~fBb-Q8Zj{FMQ&jnemi$FHSmnbNobGU%
zv<bbeHFj(Pl;9U;X`d?(Scg$sZM+`s$dVQk%z)$iAW0((n|#Kr1e<&#PQ*xFD>Wj@
z^oPjHJ_y@F3XOzMqfiTrEadb=DcMe{p!elz9hC_};;@ngzd^0^L_xyD0mnFN&GZz4
z=8Gi{i<kKtfO>(E7<43QSM@<C)zI!e>nmb~*S|H>OSkJELtb^C@&7c*%lpfU$J62I
zH}nrcZl_fQggR^c@@Q7Jj%1+|6JKO_1w~)|eU)GA9p)&p^$rzo$Xxu>hILsW`Q|{N
zf=gYW6ZEaAXUz4J93WA%4S$9xDE5FF6g@W|-ZA0oEpAYBjPC915IA!At-zfn`E6FD
z`ZrVFE07ny)#=_-FN53%bRf9;c}c7vdx;DssSNvb`A7IGl<@_Ms?|SF6RBsv5aTP}
znO4+Gy~~J4Yek%cM@*DRPNDEYN+rg2HMmlsjC&Guwj%50p%l0=?<@bLtOAdHn|pcL
z@p|Q-#5xHtxA_8R(d0UbJd>-&dPU6K`KkbAevfEE*X@9%o%%)z&-^S*?f1JX5;?)p
z&qqmbI#W8O3F+!`DjMwA^g#lt#836%<(A)d>UdX|&Ofl<6Iu=t#GrBz2<}xrgSFT7
z`+Hom`Oc{`B}jg{)=WL2Nl#k)is0!g^IE5l+k=Ny+Kub^ki<HKOsS~Ew#+}F2Oz$p
zIxZq)s;K|@KxO}i=>A@IAAMs=eKjUJp?~IlDfrqcuq^iN@#XXfpS2ugPPW&XiUvrx
zr4oWTS=?V+HJixID?%RICox_wo6dx^6_SeUHQB$`o?TUwfeHx(To#AY9Sai@jdA;q
zA9x1C=55QkW+CAr;EGW}I(uM{fGxY-_j5;{W_2fj0yl7t!cs>d(ow`!xccDfxKn;b
z5JU^dsGu|09a#y4WDMybBpy|1cE(9uZiZ*kuW*Bi@}<7m8?>grbKco}S1$U}uBg5m
zD}207RV{HGt7^5}Q-;%D-yt~U&PD~fJds&e9urX+d?$9kGwc@4;>7ebFJ!;D(K#?K
z^oS938{bMN`A|Rdc2}VyMf?oPcII8Y_3PN0N$Op&j1*;a&s1FUR1q1Q40E%F1ZF~W
zRR7b>d+J$*04jHPSDpCcMTy$W`EGAJf5J7KJi~Zk!c=6=XXp2q6jElop)C^iANMZp
zBI*0DYFmbToaww}BK>UZIATcmOJ2@Obq^#~aeGZ8gb!hb`kD+xw2igvfI4jE>kNh7
z3pslcNKKw)f%Cb8S&0f@z?vlhR*K<xQnWB(gL`NFx`9n7T9CHR(nFtel`a==14s|3
zFFKZ{G-Cn5lJ7_6MYkdJv)=IZPX@Ug?ehdKthX15(Gz})6-d0k<leWIXwPGw2d-==
zh(;x7nYf?s+QbAoQirmOChZ?QdGrIKmgaD?3LK8f0UVq?#jEzS$2J>31{79Ja|GSi
zK4{WNTIL^pN{+RE$kl9F=JMQ2_Obt%pHxnJ(uS}v9AHWd1Qqmj+1~(4_`a5qp(a1I
zc?PpuiQAAZBv@Lfui8B%#%I0hIs!~6VV%eIZ}GrM)Hd^)Ry5regKN2FXttD(f9%qi
zK2K#8K^4RQ_5p~fiIp*NVR34n*Eu@Vi!br3XT|q7hYC58ToE&LY{T0Q?((LuthbPn
zkycn6*DU<qrG}aGeIJ8u(snVGD*6Ua9t$hwkrU?^{%%dY8oeE2eSoeqg_uV;gFetr
z+Wj5NTmJoOm%I?EQi8SjN%aK}a-{|c=Okrk;sR^f7$Iv34Srm`>ugT-Z$$r<b9mve
z;ra}f>%he5lK|ssd~z65JSAS5lM#<__fW9c*5<$x%~1E^slOq1I_a*<nsZ;v#%yIG
zx$wi8UlV@Q?kkOX=}n~zf~b60dWzjS7LKd%;+$T}?G#rthL+a{-llUXcV?IS@)qxc
z5i_SasG~8m6*bjQ&=juyOVA6ZU<T9}s1CR_RG9Lk5Ak0cjzWbLJe7d>b^(yZe?D>V
z9-R!MGzb8vMh@KTKe9cus{QJ9P6hz5jVPeF`s#=Z`fH&w-fCWRsvl(~8*iM3qcGpq
zNT`a&t$`15>vuK%{O>CPJ(tAW6rW_IMp{hB<y(^*E>6bPBn|EL2b#HF0CO>xuclBP
z@3{uUhFlH9HviQ|_)#hNb%|^)0YJgtUPX>0VD%6M;3ftiS(~YFlZJ1qo-gZHuCDIe
znD*Y6E*~D)_&ukL|8w1Ym`u~9>Ymr<BM3V!&?D4U4@2D9AE9~nuI&1q99<2UW7l<Q
ziCu>ziXN7vDpC|{N!di2XxPs<4D?Sq?SHC4cAv!nr;u6$0r<kqsiB^e>gc;8blm^%
zJv0L<q(WuRE1w=ppAcy=lY<fB$yWyauza_r-F`He{f=RYL_en$n~kiCDPgPD=LCjS
zzE@x28ws@RwU(R^^eZlsnw7}{YoD35n$F$9;WcphJ+ba}XDUMh{1Lad4BV(^fIG@R
zVoRWSspIc3RU*TR8s$%1_OsG}&i;hB4~OFdRv=v`pz5q>YJy^uQ30+s%`a}VV>6X(
zmEs*UGjt834QrUTOEu5n&;I5FR&PGme&5S$Z7bi9(Du$UN7rW8Nmz9IfA86J^i3gf
z^Rgql8#;7HA(yLx<EkZ$yS6jV^*O!8FJ>SMLXj`Eo10=0Xg6ZHt0O-CE82cS)wk|W
zIDo?i#eR4o{A6ozxlgo~8APN<VV8*#aGZlb&2IUj_#R>p-p9RCFkxevcUT$nUG$yY
zF?BE%7B=`b_76Z{sXo`1e@x$)T^H2*TgBd0b82xkB2VisI7^E04d_UFQYl}w!DMQx
z;8QFDtkBtWw*@3`YrE0@VGf9v06tMyo#p=J;O{_5l;bAw8U)-&S|qRd>yY9KCWHO8
z-bF2WPeo|}=ETrdwiFpDQTBCL^r?Owbt>PjMu!Slf9vMVGa$evykcC(-O|v=-hg^-
zE0yMBePP>skhdg;gfNc@jNe6~&~+K-E^xYX;4e2PBk^R9-dZif!#oK)O&Dr{cQJ6{
zAGx2=28dQ!VI_Zk=f#T47mWH`$h^{0mbH<i;NKfhy}t^9h^%DIP!k2g_ux}=Hm0`u
zqwTO-OX$X`hXI;luj0v^_k;LJI_@QmhG^VS`mD{mh<-b!$6)M|^nKhGS4y{|t$uv>
zUG2)yk>H)y_LQ&xfDk135dI5Dw|-#6F;}6ub@+QK+Yc&de1n)l-9nsQEe;qUL2CgZ
z>;GCao^c#h@AhwF2U2(&4=w+c2DRG=3)7;9#K*CDLHIR{>Ix=go0@{JNU&UU@=KCp
z!-F3tPD}hPXKv)@pXFo?a*MBYwM<d8>Kr<w;3$Ul^SsFS?#;^#3~fKx4?Y3DG+r<{
zxGasJ1syUt^*&38qYY{$maECApto6GX=Hp6aPz}`Zsy-W0W%#bc$1*Bnie5nS+IRW
z{W&x>vDTXE!J)hYJ`tmON#{i(4N^<N%pVrm0|bpc9xUK@3p`x=F}U)O2jZYxw+EY^
zUXw|gba{~+RoO5vXFNAn$Jr+{TGP>iSbgUQY|pk3&Pun$YY!3e>+H+Zc(S+d?ZnWF
zuAiZaePk*rYjp3Z?r+R)hCI>Df<LQ1>gbmXwgW0>a#y1-dBM0FLb1PDEu!>A2?str
zmSM??6rYU0941{cBr|#i#KXaR)Xht5r=6U)fo-oZQQ+=+c$w&<kJW*#)}69(#Qk)H
zK=~?$y}qmNa*|l|rs<sA=?m_D;0MhYpatd0#mvf3PAm~i)ZNGRWL4d}<R*qnMuwiO
z*8f}a6ySp+96g?YPTv|Yno5fN&`UwY!B|;PJv2Z}%eL<S;9RYe<r%r+7Xa7s???MH
z&`_a{7I&7uipZD)=hBzx5HRx<wT*e1(cXLO$U+BAkHIF}x06q|qQA*r<4&yji>$93
z{rtq7;$B)7cTpHOu79|r^!6^^6uvu&QPea0!|s=J)~h`+2;RW@$WA8Xw(7{!Y5rRv
z`1FCJxI7J)!Nl`?QJY??5W!mGC&KP)(-nq|>3g_JcDpY!0~6Znu}tDbeSRlw14k0#
zj=#?0jpTn%T{`3yN|_!18LsR@x7;yVGNwxCza@v_f>q>n14hwPf^<M}6;t>4+WE@<
zZ{GyS@XB2!Rf4T=PvHHfBRc`(q}QoT<<;WFu}ZhyiwpYaMm7ezeW&enMLK$L3w;_N
z>v6>*q5!poIxh!VI9+r=NM_;=J$axaLAh~)k<CnX2TYMHcf}dz>3Lms-Vre;^YI=Q
zd1t!<Tx~4PUl65WaaKNNnArY?GFtM*!u#~}bklTa<}wT+8+hFtrgNo+q>y5q`%7^I
znSB00cTG3`qD5z9O+21Dd1K1cQ9;S{4mRH9*Q2fROq3rq2X-gWZJh^#z9Y9XN3!%*
z`gtVdK})C1=*`0O$d;R1xE(Di{6wqJK3fl#=e)fAbZlOY1Z!3U8IEtBL8_iM%;sjD
z<6C8_@h<rJ`}<ciI9jEJr4_Emr}ZKE7vzjEgF>-_3#UMUOG<__^D1WF1wHqwT{w<T
zR6r9wa{A|+7e09vhijp?Olmp5ShY~Xf@w);_7P>q&m`;D)N|Ue=F*KuUA`nx2jC7?
z{NBS5QTxy~Y)wx~oz??RGRgqk*frRrkr+c$uG(Z3B2OASQ*7!US$DvGZsJ}5%O7$(
z2^J9i;kDNULgDS&R`FF011OmY-;}vAd75aJc(x48J;10Q)2XQ@j>&xDGO6{ggDC%X
z=ZC2UekkgIUt+2j{r|H7PPLw>c!EMth>Tu1%@H3sCkm!-&>hN2E?vZ*j9rN3a8kL;
z`pJEFQ1dg|XqhEi3+r2UK>utH9yy-a_tZ@<ylgtRNSCYK=r|A39i?TGxIB_W_&-dD
zU3fyxD7|s8Og?)L??TbUmB5Qb5-!y|r6}{a-zH+LQejju>Q(;s!^e{TpLF?u02caj
zk;K6#FatEw)@smy4eh_gmrYsH`sK?8b~0=YptPoxC(wRb^}v0xir~g!S#KHNj2Uk)
zKV|#u*rl+LAv*O4C?OUo55yLOTlkq|SJOk<`t{cgl)K+csewi%t{f$!ATfFVk)geC
z9>!jBbQeqT!(>h+{%<F59va(@`F8o9?#wioRd$FpxengAor?OzOwCjZUA>+Iio*~t
zpr2*xyV&i!;%|&b4(MKt&N?6iMCZ7l`AA>z_Rq`$F7I^CCG%x)8PfmD&-u5w_{tMq
zo}7!|^;~!7KS>P)g}3|<W-?R+&GT<u7QAv3{7UWv=bZvP1PoF`u$n-gv{j~KXJ|rS
zfNE|Zn3xafYN9OOwWYt95p3)1I%o|8?!AZQM2#P3#@sn^y^bWO(9|%P1GkQ~sml~K
zi+xtA)nOH*`4jIkz1S%;U!^ihAcTHdwm{qMG2rh{1jUS}1R-8fwHEe>{;)EfsL++7
zL|I}`=YCG^7OTvx+Z7F}9ME~OlX<Sm9{WIC1`f-Qb{hLD8DCBhi6tw93%Q=6?GV0H
zY8YUFRg)wdJ4oD(WT}LMLtlDG=8&k6Y|flaQjEa~sfPE^QBbqd-Yxyz;Gur>^5feo
z0=uH3qWY8rtU^vtLqhmN&6uE1Lo3AU7Y)9@Asx;V+-ra1O%<%k$~N@kR|KG3LaEKB
zZ_0lbc~A24G42q%)+|wV#JbA;>aW1KiSrAy`K~+e6IVOvTQw9)UAKRgL)|}`ughmB
zo|s6^kn)m$aqCAEjknh9rzfMBhS&{7OZWD9pb4LF0nWgl??wQH>JlTk;&W@x)MXAl
z<dz~sYV&ZodY*L{kf_MvBbtLP7LK7J4dL5}jX=GW@FwmFiP#6u4t5Op!>nw4qsFrS
z`h{xv`Duhx^#`Xu{hloFf8rF?_J-dgX|RMZ_l;E$4+n4odCRzvm?AL`+aJ6&w85tq
zJG?b@ncl`Hhak3jMNf%(M0b84W@san=~yNTzV8IdaFM4(O{Kg17^YqmLit;7KWu$Y
zj8=ImkkefFo{D44p4n8F`(r=UMVPJuSg2MgqdBdJIo+#2SI9f3S#u(Ly&7{~)=0BI
zFehAkpi#s}p`klKA#+1m%OzWxl@BBHqBH(uYjg6GldM2$c?5UeU1H+H?)_C0k3yLV
z-;=f68nxn0`OE&Da#l$B4`&Q0*S(x?PUN?ILb<+waSV4K@q;p@>99?z9Fo^&8g;E9
zZQkdNMw(xO&*X=fY7?4L)&nG5I@s!fx8z2GUt0zndNFdfttqk{F}L~`xO)h$T#aQe
z**)u@r29NEZ5){)SR@)F=K+185yF5!_LPxE?_5X3?=_Djkpk1YSQasw(I&0_oQ1Y}
z{5D9OcvB+V-y!ed^Aq&cedlArG*FGruB8A|Diym1H}z$H%=FsYV4%S4%bD;P@SoFj
zN!uC*NVy^6d6houg5E*&6wrA+&RXZ1`g7i~D*-^LMAI~%UbVI;e+E?SgbRtIpEgpr
zSThufjD%o^d@KUOm@4qpnJ4>~tarZR_F2b&_D+PnDf+@XMSFwzsj&HpL?^7|;4^SS
zSNZ1Rm+5TT(3ysJ4WBt{Ckuw^m@R1rKYU~-NSWHyNKUCJ%*+fBE(OFHb(PWmWVI7Z
zidXFD03?_=Hj0C*GH)JLVaPD1K?Vb;3@?K8jVa`~?EZR}FY={E<*<l#;2)Pc$GC=_
zI|}Yt{#LGVsFUGXi@k%PWz#}eYS4LeaM)7+5&ck2!`(e852|payy5-0_9k^hW38|d
zu23_%q~V$3hD)H!y^p_kevcdVgABw%VC8j~P~+AJCpd9-y)mGINL;|zrZMz3hbUII
zZ#=bhc$O}PnWy9msUb`2xJlW#wJzU%K@A=lt4zqcb}2*Al&yiTsahrf^`UeMYWG0|
zD1!QY0nWoJ67+5~vr|I4M&vVvb?FA2sAW)VVIoTEA)e|`*slSd8I3%--KVutIP0=0
zcTSY7lafuPLF;DZ);e|W<D@w?6kUVwyX^t@>ME5IArtTQhYu^}OaKP7s8#hZ+T}=`
zZ=DwJ7-Jydml2lVQlDQR!075Xk!HPnazOqBL}W)EAJ$vAEVFjHM8mJ8-*CrwL9)XU
zPk_lxLn;<0$|WGLNlYG(Kh-PfJiod9hQga7X{HRt?Vj4bPHnaDyU_UOU2#U7{3yQ`
zthBT~t0~3OEX`R80LrBoU~m5oo{}oWHyP1#;rB)vj2U>$r<Zw%enm9bYBd^5p==Zz
z->3!xnV$LH5AMtxD`+WoSxSAlQokEILELv3{B~R9%||8@d?jLqcWB!Lj!#v2nL@&1
zUC!0J@ceaZ_<gA3t;eR{X&nW)db@Noc7IU==dU^t9#p}hp=kRkZCGsjN4Bq`__l?S
zXs?!`kJO?<C7iGSJIPt?Nn<lCAf-jgl$5ARNE2!Aa8-Z1MKL*+qz`)G3(t(gzKcA<
zbthI%Jf5l%k5aPzs8F*xQC^N%_W9P%TUM6>KSb(YdU-y<CQkj4FLi2cXgK}(H%GCo
zqG$~Jej^H9S=*2^j_}tKX=oUTn35W_)UqveX_<u_y|ngqge7Q_fvSn{BhX;Z-YUM>
zHIaq^+tw_GKS5o<#a<r=c}?R5uDH6m*;G+{)b4%>P(&L3WDmDKlc-7b-tJZu>P7xu
z)tUX8;0f&f^P-oh`AUo6HrAK;x)@^}P0jHRpaX^yM-^jJDi>(6!Ib>mr!rF6N|gg1
z4r<^U7IJTkH{5<@)`iHn8_B1E)gnHjSy7OBARziA75_%A?BOeF$iMZv(_-62vVy4m
zG-T=}2Sx}N!~r5}1vZ@;DBDl&V!)?{-97@{+^8z_Vrj<u+R99IePqjCZ|vxEz)h2h
zL~v$u%FXmnZ)`q>V0>1vkE+jZP8WA9zP<ANjMj<Saeb)f9!E;-Q4#$ma#rMMXSS40
z)jsM&BtQ=BG^wSP2)EY{NLsHdB`8pCb^~NLpC;%iV39+??sI95-vW93%X=w(mmg?<
zJ!7G1Z`ZWs+>dW@M(LSWY7>k;y6D7&hy}Br8ce^&yI>uSf>+U7d@XTSiGIXas7iUh
zK)<TG4+09li8A-Q7!!3%VqrPwlvO}(pmpq_z%Qy>Qz=#nOcoa&0E!v?(3=hsMOHTn
zmxkmiC=cg@mCJH;GZ#iOISj+*_<1P3;e?%bw|g?2Q{^h?k+(M-m3=nc#M#x*%4|>P
z)%$F{^@vWx3&_f<yAwUFx!<3bGru|lRl`$6vCY118aBlrV`qeXX&svtytLMlvcY0f
z^@ERQ!g9bQ(e&beKU-jE2__)Wnh8nRG)uEkn^e$&oKyYhc7sKLY<yb^Rk%yi)RMKE
zkJ6P(s+UWO-in<Gmr+v{UrM;<PrCy#qF4q);{;2vkWMBpq5BdxLI?>VvXYWwb?Y$m
zqudyY{;*armR(s=lJ&x4;MT5aYQ$=X@=n{t*)h$!^|r9&)_p)hccu8&&xYTA_pxFL
z?9*uGfjGb4rj@osD-_F^?FwR$ywv^erC_$zezoHic&Y(PBbtd139uH`^O#iM)rykB
zfOyd^wP3Z<%1@66?tE5NZ$CAta)2L8`chHc`#TO7K*}tdmotqzj}n$InETO#EWUxE
z5jVR=MMLS>dhk=ps^e9GeYC`d8K0N#EZp+XE8(CU3y$n%{%6}w{k*ofz&eIs$L;};
zg(2hA<m8MExBZ^ei5MpLnjx@Xb1`Z_lc#?_3ZA&A8Pt0@u<unt2H5ZYUnyfG&TV4$
zizFWv%<wd72JSCy1+nhmCPpvI7arKw;OzHKT6;!Nv*NmHj+uPEPtn9sI(v2!W=3Lk
zZ&y;BUIWKU&`x-#KxlEq-E(pxX2xE9mCr}XDaLI+Zab!?Nnwi@(r;a__RlzC+Q;1C
z#W&htZ<?r3l(or~(Yg+a6YlQt)yf9TR4TC|IeX1mmqjJ{P~bbE<Wx6YjZt+yw|;#_
z*oXUdtDsXBqK?#d4(=PhGKC`<mW0iX3n?u#PU(yqGpYyZO7(06MGuG5jhy!IKkE6B
z0#p4AP!r7^Q{ttZ2U&A!B{jFjTT>MU?rn?K8Qzj!X+ad4Hug3p8igKyS5tF7kOjP%
zqWHJT=p6%wcj#i=nCn3>7|cc0X=77w2UMsQ{TU$%Ufv)f{?la&5#dRg%Sm)u+A%KW
zo{`WR2-FCAKQs3M|GWYD?c?^_tC=99@(YJ>R?oR!CtcmC>rY<?9sF&At^PD0Ms=j^
z;?*<9bB9J1)y;hNN#uS-+Ae(6_rpj_|Gi~__K*l{OOk^N{kqv10;R=sny%@Q<4c%3
zUuxXB?D*5Axv$+z-_6g<lqXV?x0iMdSonS9{ZQg}QMG$}-`YLzhyjKW!|@qDKWk01
zACV8pW`HuF<}aaobvbo<*IR$q?G!&7oYkvzR+;3oR6Zm8)VPUf&NSYADRJp#cnOoP
zi)jC2;h*@s&uAFhP&Q594sB}N73bh-8yxIhN&uE$#jLJ5o|Bm5Roqy=Qj$4|BcyIc
zS!&i}p{HAJx5!fN14e)DM-e|r3vBdLNzAv+H_D<4=XDW8b5E#+jzZ4t<D8W?Ztudj
zi(PfT`)6YRDa#9<_}vgPl;UAylR5WRb|dm1;^(?@OxkYq4S>n&gMc4+7oX;S`=p$q
zzM~AhjG^BGsdA>zEpe_f?zCfs1GMBECZ+PITGa{NBJVwpGobHp=^T1~R`W#5v*V|~
zfU2Pb7AL*Q$iL@$*so+Vp=Z2V+Vd(}bsk3Q4KeVqhkXp&^X;R{_OaLK6W_Uy8z}Kk
zbt)E^N`)Z??=-g_I=QszL0vUe1MEn@C|hR>W^k}29hxWV<E3$(any1>V}XQSsQ`3q
z8kG>6hj`)lLj3Gxs;5QirENui1?|tp#YZf)Ny?MgN)K`N+VW{X?>OeXFsifDur1K4
z$;M<Qr^FbjE)KTchnb!NjaMzG#u0J29y)Z&_^5uWIK7dLdF({i7k~y<5G3_VV=adh
zKL%CE`dt`=raY-w(0{W7lIKxHg*C*b-*~C`n_J+Rs&8C)3xn^PCPj0l8T~<USs`}+
z_QGCP0<f=pa{pzCC?Dvoulf~d?BcBIKRv(X=bR$9=o{vS%=|}Zc4|4PR)*l}M<#_=
zACeqj{{$+E6LzVU7Tw%ZlA+9owUkm0h#7$!ouPZptJ5eS`9}z2I7)*ZGA2<8L~>d-
zeY_{$+}o=p?gOB2lhLa<bqBsUQ6@7c^W7s(bY^PC7LmC5U#DgSCF53V@o#r-z2+~o
zY-<lixJNpL!ZBNxC8IS)Dl2Wl&AYc7V))hBw3&c#CxR74?!u&6!^W!J9`p6swVq2o
zdj$_>Ky}Y@E4bi~msbfQk3;X>=-wz?JD783S)VFM-QBQ+REChg%l&DA>l2@O*)Bhf
zfi0`u$uqGs^Q{7L=VfVpPNKfMg$F$O)GN8fK+0YGnPhNj9p^gvGa`IqRbXACBxkGF
zN;UN&fxe{Ek>;>)^D}xeAJ?U-D=p2A#wgx_df^Tu73>ZW617Fi*jySc_VR(|DB4$`
zB51FBYT9zl03O&gwSNvM2@HC#=Dyb|HRuoT%rFZ3{R!JoF3%u6C3sAm^4R{Q=q%u;
zLc3NZ5MvdM+mD}#PA%$=bQXHXXgVda@U4od-yDyIDpOkdX#CHMjIyuB&nxkCsEQG<
zr=!t8?(d>QZTlB4i1O&O$wH%y)wzO(EkC2|oB(588deOWnRE!aOk(XNv)pm8ju60+
zhodzs@>yM^Sqh9e$1TTZe@HoXYpJaGo&4+{YH4_>@SyJS@-7rRrCR*wyqIyPGzv&E
zG@MLU#{&V?p<@rp6S9N@O73L~O5Wf3C3lg9g*KlCdn3W7y@QaBgpzK-pC!M)e>_V#
z1d`?_r8Y~7$4)&Ul;e`oRI1rIw%s#-BRQpfLK)q5eFw;pZ2tH0!D@-39y_EcH7)Ad
z(W9k8d#56BJ+2@Tm96W?MXJ&cV4egj{1_9J0^(l9!DNS*3ZJtDpI5WJRD^N7j6-Hu
zp&0f6x#DJ}mPbs?`0QdqvtsGrkir`FPTkWQk)!srD{tv{PLrkDP(Pl>F2ut9ja^>6
zFBa+Lq2ezLfUAm$NA-S1uk#+u3}YFM{+?4BxnT0AJ9zjj_w5|*MkgmumUu=U!e>v>
zkl?ud;9vg?;M#Mj7uIcvL*Wo;8sa9K^2*Nt+`mz6QYUpJ@?AFuSdARQ9biKnhg;}H
zT(#Cjre6Z0?JyX5|AVN-M-q&uQj9VHTQb+mJF&p&g?W&el_Ka=nN}|8xB&02xlV2$
zU`m<^t<=$hzilB{dzeK77F<8$T!3XDcs?207}uT*tN!FQ4DvLq9se${kEosbjCShZ
zS-o=V6|x`8pIs4HZy$pFIBU-0#;Y8(47Y8QNsml?&sQ{mb=|Q3S`3rpBb@lF<vMY}
z!rk}5=xBS=-3a5nr0dBduRtvv^AY`l(j~NB*RnsqzMXui(evV6;%h<oAGzMeSJ@Y^
zO>Ct1XSZtxect?s-OEmi#ApZGCEA_S*wXdyb%#+!dv?*ZL??`l{dKGUK6+@G1|C#C
z|9O}$E1!U&ikI}FG8PytsIeU@oHl9M$9oUC<t7tGxQ@F`lU3fSLYc9DCzb$G%&(<B
zKf~k>%z51Wc<s6(Q}Pi+lE#J8%e=*Ed3Y=|=UweISJ?^-7)PhbCZ6#!yxM)MtGlrV
z(HO^ieZ5H|RT?%r>H9Fk!W^!Zb>G3kPIB6cSKyJ1fy6*(k(+@(@~EJ6F8$2Gxdah@
z<gYXq=zBrA=aR(_+d7+%tMLr81_D#$5Qk-KOH~sAW5JrevtuCZhC0rx!j_d0@1*A%
zGlh&_9e7I&^zUzRV#2@mKCH(Ao{5N%#8r-3^oxOy5_z?(;IsxqrhD)1;y>#Bkq#e9
z&j%yHan2sU4B#X#UeCFG+s9Aq6(L=`#|_=fk;i$`M~?m$eA-h{@oq~{e~TBUxmWf<
z=k>d*+ug?oJu6Z6J+ZTmyS=s(3t3Ap!1c~4`M@H{0Sc85d#0-Kkznn(^cOL?8%$hb
z2;R1bKyDQO#yY0GQZc?ZJ40a>6Z5a0`ayS0GVF`eXIml`43($FdCs<KAW(hgv)01a
zx*dYr98FU_oUFF7kM*iz0kqI5zDZ)E8>#bvOcbZfcyRr*n*n=<H{7VxjzS1H2I_lM
zXcZYsNt`@t2UQQL&J~OPd4-|@`zoJu#4uQ>oI$+drvHbsuYihj{q`1wBOyqaNJ>eA
zfOJWBcXxLTjg)kUv~<VNjf#SFcXuNoImGwkJ?Gy0{m;18)wPC&%*^}Lj%U|zf4g)Q
zHrls7k&Z)t#`&7|kVg1U8PeQ2)Ijw*Kx4vaG>Xi-eCCe8S#K8d>bAuIGJW{Lzx{A~
z_566jfnS1SHB9Gj2tT75SFJ-js%?j_9O%8AIC;r?w4}L5Thgz@HWq$Jd1zXm%+2f|
z$c<%B3d&Gg93n*O)1+o0ze;@f2^Y1^B)l#-pA>X(cwUa5X0vDBr@cDsX}DP&PCSfm
z)Wp^0tJ!ogVQpopevQdl-+SM0fnR8&Dp#CjDyviGsB2R^pu$^0yFv(u{!+r_wzbiq
zsri~=tuJ^FX{y-6(#d;VMCs0ihccr(>bt&E9ov%uE|>3PlymlNhd}Zv%J;2P#@(o~
zpU)i@j=$+-6^9e#g9wdp`}upPVwcK2_oY94z%x>+-eqSSxnN>Wbqs6KGkE$s`PM(h
zN6;xFwA>cR3Vu9QrV(GlmSonSqQL5TZfzzPhK-7YIV5<MG|jk?2kAz#d3jcO6Rk~l
zPu`st;kz}Zin)f~)#1cV2{CT5#V<VSeRErR=qmF8|GS;LWepwfh+c#L!S(v-kt%*4
z*TO-nRPRodvYq!sU{j^tH)T<Cp?KhQoY&EzcTM|!PuJ<}xkG8qGqB~iN)wEe5bH=8
zAla#~@`fPe0Q<&MMzb$GiHcG8+tQC6X#`y19a)~;D5r%a+=NoxJUUnBje6UA#oJNu
z`2<U`?zJGQnyBVD-H^d&1O<!KR11v_mo8EMwP(cmApxFNtUGfd|5a<jV59ei*?Zqo
zn#@_e%scM2kK?<2CE(SaWaJ~5e$F;iu(?(KT|RfbO@1=JT|6nfiK=%{W8SRmJ$i_%
ztLwMsMJHu9{5?{ZNvoVg;whgK!u`1VKA*?+qtnKmK}II7yKRX{azdO}9W^3+@dQ`C
zBV+f{1C^meQqLh2pPEwfHeA;5Knug?TytZM%9u-okU@(V4cb?h<Ac#+O<6#7(4eJx
z8m5UJ?!|{OMc+upJ2U66-^?baC_4D;R(r~?qVnWkLoy=@ug<*5iM)Ww`DAazoFKZ}
zQN5OScX=zjP25yL$s|lPt?T!XI<)tt{PQR*s~M|&KLKd{+2IezjMz1y#>VzA--`A$
zlEYZtZ+sVDt3^IPuW%G0vyoEFd9C=Qbb5z(t^MP-!;8sRmPKAuFCzoe7rb-_Z42%q
z?Kg5SJie14QitX%eF1>6ZJGp4DQ{W#eG-;b1o(b<tMWXXbCIfy<{{A=xL2vnSJV`U
z%OQ^OJr@hw$$aD1%QqE1x5@-j(K?S2MxF5nB8+BIa|R5r>SW_2rzC|ojxFb+J$>;@
z*Yc0d#0fPqWWL_UdQ6G0?wHMX;ONYYKWh++BIK;k&0Tv8wh(xhw&q36*nQ;z($S;x
zoeCXd1v(sguG3tFvKE!q(pPTjCAJT`R(Ck^cxmWDA{fogOOH<OHkddE1D<(3{!&Xb
z6q+Bm4lw~L^)*$2L`gLjxe}JU!i~l&T{{<XEy2~p$hO2eP)onFU3@%M$Mn^4*?jVS
z^ijOg$u!e#;+A7_<1Nq&NJ9s_-3uT8SNrI3uh~hvuRx0XhTc87%ve&YRw0Wvlc;1L
zo`=)c)KCoE>^2k1<%zH6;+LE22N3_D8OBnRUr36TIt>z0f_7net%4ZNc4(dlH4C)I
zi8D<)y-FQ16tWfKCqYsjE&4Z^&s)Y7+V!p=8l3aDd@kNZm%ZzrYO01Nx&8U4RD@KO
zGLWB>Nk<zE>&o{O531SA&cw$0;&!H~&-S(t5yao&mU3>~dbcoL<(xe9K9Qn)E3!p#
zV`A&`YrJ}E2DMUC*%1h6&iG{HZ7Y0D>HQVa+3NL1P|Jrq?qk25-2=OHlY!24W}_U;
zuV&fO<8m4QfY5Xf!p8MO;=GFP>UnfW%tA9RqU}4B;xx08->yxdpPS$Uap{L#4FRC1
zACmHoD62(Hx!z2zqE7Ypi*F%aT~CjNhJgTDiQR(g!P|F2Hs7!3n6ABC`u&OP37khU
zCSgz|tV%-=BL7CZ69|H3aq>-|!~J3Ufs;qpbw(|2&{I6e^FrUP={9xVN9K-?w&Pjv
zfvbc#zmCBK*8kv3_xJ(0G<!gNhlO=v-#U!<`k=7g-Z31<H4U)`zx!Sg<%RqEq(&)~
z(Yt-Ui7et;j<rT*!UAFrkiwv2^&F3G?^krwv~;FeigBJbTuBs6OcSW+g+;2_s{nSm
ze4MFPcWmHm&b?;$Y_&>n@!Ox7&v5t?w&%nmy*fPhQjm@IgbBODq6S&|G(*S$=lerw
z^8f$QNGZRkDbR5<)jc5=eGO7ExV?>SQaK=Y*&?~JAa~%kzTj}N+PbF5Qj6|z7aOlK
znmJkz7*e(4oZe>H!9JrcM%+tHH`^*nz@|||_;m#T`NJFbqp9YT0ZM~<m-)~h(v}x_
ze4d}P&LS0iQV;bU+L||F`-Bcn>M!{MP*u!`-EwC{g~soCPEW@pZMH(Dzm(_ngI%q7
z-v9NV&jpTKAPYc<+*`QbFK_3u5M0;&mQl+9XKOU+^09pJ&h}uo=x*BQqsRW&IZs;6
zvvZE8e4=e;^Bm)T&21$WeQ)9a1{7=yEuo+I(9&u#JBm!lCd&GsTl8zk)UgpVYR>^u
z-<(WqmKMWjTk+hvAy-jr|KjY9J;h&jq<@y*Ft6$W!bNHaTLfvgT!HEw_Gn)nx!FKo
z$Tt)ckWgWs@AFHaRnC10Vj};#+>00~{>g4BRAX{tyPEM|=K^>!|8DqTO^1$Ai%H>d
zV5xW#ZfBv=a<Ra%jl<83Q1*A114DBSyZFp49h#wVr?W{(8>sVdBuCp3iZCJ&ono-^
zt{uy;Z6yAFzpz+E-$Nbhe&M<08tAkoBj29o#@&OI3&1dtVtxIGr~dcGW6;KgV_X5)
zs^5~IAg&^DTX9)mQF~XqW|4feV@y}JVcXa9?*tGo?YM(S<EjQXu=do|m=3WXGRpq*
zapLs?c>occXzlH`17L8*$QNkdRjST0t-6gjy+rjVF{u8X4NNUMV%`kn%vP3=4Tdhk
zr%>0Hg7rSVmK|T&VPWd#G-9=d!p`ncTg@@8^f?aw{Rohuw#K-yV);Had{4|x?isHz
zKVn8%adEkvP<j_sq%46t*jR=x_4%U6aF)sS-Ep9nk<r#Qc}_x|z&JVE&10Ed>{j_j
z<5Vm+Z|{O6Tv8j8-a^&SR>?3*a74Ks`%8?FY-nt&Nbzt4Utu!~CokIxv~N-l=X9=6
z7gV@3mg?@W*XtV#2+t{808}g|7SXA9lAd6$ACv|MvkGE7&{j<eUy^C@0?y2+-ep+U
zNLcHKS#lN|P?(~&0Gefprn>e2`1qMBYg7l#&H@w0eTLlKTYC4KC!)Kq<%)5W6_E(X
z{~-u|{Wk?`IIcD+pOe6A$&MM{T>c{42U2v;3tD6t$TP5r(c!8adz_DP&W$Z~yI?o(
znm#+*#C&#3=NuFG&_V#(G&RtRJU}szBr!_LS>|RNXPO5X@$9}#{Dl;H^(DAnq|NU0
zg$~M?xOQ}#d&@NtUc)P%+mYlwLMmJ%fAcSrc@XkX5zIeW=)9+m0y2u7E0h2p?h-=y
zaP7GcbEIVFx%Rbq|FoH&vFK=lk1f%=v{tDfT%jE12yJQ>7{h6`0M@ti)tv#mA5xzQ
zmMO`c`Pc?~@X@j98G!rg#Mz~51nCC%jdx@Mu31M7YJtyO$hp$Q&`#F_V;IaM{&BS+
zxPGMGREyDfhr#7X3?`C{+1*je6p`{*#2a$a^pA@U?zv+O9lAWiw`KzivfX%6_L<2G
zF7}2ng%8yS|KgKmxZ1&524|o-iHGVJ47LUrp^qAO=VbQdJvHN6-P+Xo5l=n8PZIka
z5|;pQtHozpy00{XQSPzzlg@nU8-xBW@JV8LVaR8sJ{-4<UfizCtVz2@LncrZ$<NEw
zp4|AJAHwm4o%q~bvbG>{z$zwcZJ=Sv2q>4me;1cGNklY3Bw1SiWOCBi%2yRWZWNAZ
zPV-=8q(sG2Lu*b`OXl-O*i4d_XOA}IZ55g-WA+E{xoJM3Iqox0o%U0;+q;>WWo|*d
zhxUPgZkY${LT5+JLT8-o?unRojD?LxPhQqr9Z{Z*3?@SE%H@yjG_%>Q^*lOxczUG$
zFeg7WRbxRDlbo=b>9wxzHzoD#W-2if<M4ESnlFv&vhZA<oIrzYe_!usMpgboRaRTf
zbBzr06Rrp>I~3jo?M(Zz-q_DSNp`9&o4(MtjoU<HQUoR<TA>;T4T`!)pmPjp4-pi8
zG)O{;BS@kMdqQ?2l!rm70qtPnG|_)JyT=6k;8W%azSDw3#mVly*2gS>#+Gl@I+Nok
zQ5mT!a$90!L4C04Rkkz1W>CllE{A4$=Lboogi+Gj*|+GXXn}F~HwG`x=>2Y>Eie`H
z$3foN_~(-D1d|CiT(~i`_o)K5g~F(jnuF_5k>mwl!M11Ay1t{KDeIM?pxzYhG>7R+
z^*x;ir9}?Lu0xv=T915Z19SQF?(WOUNVY~|Hke@e&{+a1Jt*7a?+gdaX>kD86T0WD
zig}t!)`@7PH2D$)ZCBhWmiK_A#&3_-ITb#v)o%yb7<O-zc&Po8p2PZQ)VAN%CcAd8
zR!c32zhg&3Xn90c_N6`eJv0zu5;|CalxL%l<W(~phE;dFg1hI*^izQ^$Y|xRL+d`V
zoG+lCIEf;GjjIwJ2YF6F<P`2F0lV<z{6JrkZ~a$V*#Cd`0(ATotbbOmD@KCk_@d&8
z&YBCjHrg)>_Sn5!cM1g*d@w8Ld<~7%hIL7>02&r4ZY&^EfeeJgog;UZVHQfeZv@;%
zH$j^mFft8d;AUPOCcV*pLG54)%{nYIt*e8C;6zSLh=e;d0f`W(Nb-Z&&{{UXmPgJf
zEtVhdCuY^^@w-*TaMN8}PIRcyjA*F-@|m@+=9080R*5!SfdQe^Xy#g-V8d=KTn3+p
z1I`Z*X|Vqmba0v&2nP~YRQkn@cj~sNHZ<-9<Y+kl6$ggA?fgE+NmX6Kgit5B{R$1}
z%7SXCA+o4dUmi7qozggfi>LbL^_JmYXyDa{I8rE5;}Ps4a^PKFoiI}yS;tF@IsWs^
z03tMTIX~iOGQSZ9Xy#G^;qjBQ7;Z^hFWR+=pUq0X-$MT(1xN%RiLqx;1`$YrtL3y<
zs8Tdew`y78Ye0ab=tSJhUf+QRVBYEMpJI#X2$pYPGgWO(GMNCQq}IuPhj#5H(T1G`
zc<}O#1ztrY^{bIC!|EekT-Ca8$@cY7C=%aK01b8)AZ5JbTAq8K{QXh_xivmmU4$PZ
zp|~ZrP`}an304yz%+cxti)wHf73Pz|Z&+~i=*xk1+)=eqNf{6fvstya;&H_0)-lVI
z^e|Eyd*R_F*NqcI2hg||NJ^N4)r_)O(AJb?E4vx6J>)DPjj8BF=XIKM_{^olwh2vm
z3y^ri7`-Zgt|afWpdJ9(L1H2lZ#L|Q2F2{>=L!2wS(AfuCC|tR<*<-WUjuW-RdLb~
zYSSb*9&{$~XtSW@xBd~aml!P^uX#3c{FC6`Xe`7%9fKx2(SE3PZpTleBs|3(B>}n{
z!O)uOsA<ceg%<$*)1jThBiK&}Z&v}Dvzn_{QH{-d8vH@`3$=iY3*HnGGc=I(w>q6Y
z%m8A0agxc*85IrvnY7aoD?Jx1@7#;oM9j$%jV0qSC<A3D3mCsDPpiNQeroXwBdB|F
zNiwXY9V<xsJ33U((}5@R9BnoTayV%g{5-GKr|9Zn;9^|yipfnT4j&p>W5JR6j?QX)
zZ|KKoE3>sbm{U++QRs^`5Xh<j_8l5+3%J3^YI0}>jM1J@QQAO8MB^Jviyu*yvgtSk
zMnYKu8tCEkHHZl+QH`Url*HznG?YQwe(@8edV+z_y3zRwJcmuMwS_nT){hP!`WBp%
zsNw$VC2V>b>i00{Fzs+)tmQlxB)^8C=VNuITjw@3{k?R2$oAk_GyCTMG3fu7oa!_J
zCRK>2t(j?7*o08i!k~X!o>#OhRly+@097!Npfx_CDreP(XE{8>!oTqF2oA4N|Ld1R
zuwRHVvt&_E5P>EL0lO9x7^<ZzC-0hzbf8PyJd83Gp^NTpt~h8yjr~KvFjV=8#-!{Q
zKgj^#hO~kdS}3fN6cN+&i}TCQzKW=LgRO(VLM37W0byV)&)U&LJ*JYeC&W{SKZ`(X
zsdaQ#CJqJ@0&5uLq|iqbmjXt!a4_L>(f}>Kx`OY%`_Q1j7^f;NL(5QfR}K0Qiw=c$
zfWtO^)hV$jy#ZFQC^PIro0Dyi7s1qI0P3e)928vIlRja-hW@=vvQ7yry%epZb;fg%
zV+w4krI@DRI=({PAx-AJiq&@|duL&(=Fk^OA`UF_N%4~8(wUK=UCC`Jc!IOMA1AdC
zZ<qXa={xBCDuy+I6%tgmgL~1}5;9sp)lZmtKjo)M9CPcQ-J0jzhzQ#A-cPQ8euN}K
z06|6#_fk&S17w`(UKU})CrYFB?W$g`$~uvXe{zOgTcMsPGQTXa|2P;t?we?%(zm9D
zx`*$%vm1{yS>OJ0=zp+&p$pJ|an1@(_AuA{UdXl(!;ezVwPr8vmJKOI>RSq_nXE)~
zEq9sxra`(waV-tGE+?nV6ds?IxYxL5Kr;XTBJ+P)Apd^16B8y(h}R%rVFAAP)d{kV
ziLczuF5!X`GmX!T0lnIZQ?@XK(CPl`m#k?kMO)}MpMTB$e^_V*16YOjUVyn58g&|*
zWlUmGT59b<pVxL2gBMN=IvAH4n~|15`)9(C&e#j+wDQ~i!h0$3u}+XSUYQS_ns(^E
zy?op`e_u9BdV>g7QsdRRImESz<IeuZ>iLg9+Y(^cG=XV1Q{Web=w@4+-fbz5-j&;w
zk_!>j!R(Ui7i&o(l@@NJ(<%Jnq537mVrhC7OU+dvB&bF-N{a%Xa_|A68bKa9+$dHR
z-QLPa_-<`b_1Rmp0g(?cpbGeZpWr`-{2DuZSaS^9%y7CvC5k}aYHFa?#`AsXRcyQi
z?Dv!~Zzs!<Rk4V^h`>Lj5CH}A0a3K~oj*@nhvt&bIA}@+QC>dc66qudt_2;`3?<Ej
zxtkU^e>ht&V25X^wyE7%+fKTa;$0UAO-fM}TuCkvkkwT!Bn&2^$>;=j|A&zNFTa^n
z0R-V%N;eNPcV0XFvzKaXx}J-CJ{IEz>?g#YsD^KYk<kpCRthTi3d5{_NNlx~0v}zh
zxOk=tI)7?h6;2~UOlZnXwJepw@zKmRI>U;&!;wpTr%woZesg30?E-v|<O%l*>tVbT
zlcF0Xi`Q@e$`e9D2-NHZmu-b1mwpT35`PC(iT!i%|2of3eHf&26x}A<JoYx0d+zUf
zx5yl`IVeCew05WBWH_Khj9BdaDWHqj-#(S(1@P3dk+9CzF|&=VxUw3(P=S)X_kNSG
zEURag#$9_y<{7_1#Q#rI>AwXAnj!E^;a0~Rgn|0PuLWv1-jU_|i#|Wah=Ed$NC8<M
zpV@W9aNUyv7fq<WU4B1V4}jIg>@rGs5<&OL(k0yFDO@z<XoxT~)r|BEB}6!(#uC42
zd-kvG{CkjSIO^JS1a|9zq@=A%<zBv5)(+@^rQpt}|J5;ymcjkj=EyVW$?y3S+H?ES
z0WL^)0SQpD>f%jsSGTw>z+i%a?TW>HuTf2-1R#fEfDj%*`|9uiW-ja}w8!q}?BOB0
z@!kpZ`}!EySLreUQX}236{eq#p@ac}0oDU*tH$5&XDhIuA#MwKSTjGvV)bNZL-`9{
zv$8(ibm<Y)lQiYE)x8~&<yfKiL;0;}@b5vCH!oj#m8F|`ah0biXMx8>O77=}3Y&B$
z35bAVu0Y9%-|`LAH{2-z5ugTUXyEo%^;t5`X#2KdYJmz&z+463r@3(CQd>(G%1o%8
zp?<sgPJv%ks%Yb>Sypy(#MWEyBt%I0@c|(gZuMAwB>^#<mOPHZ;*Zq9TW#Q!&}<)>
zU|-Q%&+%~uenfw07Aem-tWZpDOI@;v@Z`@#Q~{E_`HMI<EzJ+U)snN(AukC(Kj=M0
zj4HY_zzR5Xpc&|whPr9L)v)G(hIQ$rEv@CL6csYZwa0UQFwTtW(P~zy<mk0)N%n%x
zf4gf?-|$C60A|@K2`KEA8P(mSN6iIN0Lyeb0lI`32Uq3AAxO;mx8efo8-5`VTJ`;0
ztp$FY=5FcLgRIOU*Vj;0a4=92ab}@Z`XioHdSG*RnMK7+j%L~7WZuKzO+Zlk%Oi__
zI^&^fBznF}g7`pC|MxqEzbG(4j?ea|wiY6HW4-l5E;Ta0imaV+tLRJsW53&ZDB$vs
zq;WqkAU8H#=-?;o6!kOK9BW=bSW<XYXwh5iavy$p)H#I4qWuZ^_@M)HY^fqJ>nHSn
zOIGa}fGjie&?*{@6Q&PLM8{CpOy(FG|C<J#(CJ5@2%frj(C{olbu(I70&+%|s{hL?
z?k@+onS`a1b^KlU5Spb7{b>&>11<eg&?NqJa$@vNTselEaTRs=uMgMK=(njUD!VwR
z)i6K)lT|;0B?6cx<1br{tM?Z5l6TaRA}QDpXG@|4BXvMcQ+AlTvq}fmNd0dW_MbE<
zzz*zWVYZrT>^<&WJ)@+7s_CzYnY~6QI6+5S{e@GLM(UsG^K2DB{%EZj!0oBpy91el
zXg`2wl`VV?QpxZ-Ogj7nQiOpcdj+sGE3J=*$zss=ylX2~IcCIPE7pghY1E~KpSp!b
z4LJNGVtfh^WAg}7rUJ9!+t0ELmajuw0C0(Ff$n+R5^q_viNPz}qn{lR$Gw}GlPvJY
zQai*Gvt>MU_MoJ|wq;hSLD<%<=q<SZ4s?gB2-D}0pI5az9wREI{ztMZ6<OY#p4R>!
zkB@mf10peu4Lsk(6*b#sRrPKU5!Lq&1x2(4l{sw!*ris_I?cNgFO{}Ki#pdm-{+K0
zd;WeA_P3t+D;_ydWX4|p2^k3l!jtKl>u6?PbdcJRx1z^z!P+9%4(;TeTzkphdFwue
zMH<pL%6PTt)o&Y98%_l4yoW@;IG%E35YqD5I<Dkw-5w+^{?R!~W52il=wczV2<cUQ
zEUi<$9^|J6yTE;}VuspW(Efh5l+XME)8EFEz39G`SEmiKGA~EzSgGQ_`WbmOiH&|{
zSDFW^v+(zH{Tw!ywwB?Sp|zh?xAJ)m;jN~=@zUu;;75M>7mm%Mv!wmsr^ap6e07~O
zH0!R;m_qQ?t&>a+0O_%dq5jDEH;y#u$DG|JV2o65m*MFVJ*zXvZqe~g{1Hqtoa5Sy
z@uu#?B2160J;m_Xn6-X3RO11a+BuVUo<MIKp|K7uZGLL_DYZaK5?E-F>feg(VNnu{
zpvn9VP(8a<pa8nPMz$0rbGH@KRz-}MYjz{aLiUM&@{;dc6$TTud-ag>#|4>Jvz9L=
z@tOZf?FR~XZVT=0Bwle)#GjY1WK$x+wPL@?*<;?lX`LH4$an&pLoc_Yx4#d^Es5k#
zvd9oF_|*4YR|fE>gh(fwasH9wF-OGHG9RFx9GQ*DO|S`>7apIIy{X%sI|!uCm#H8^
zxPg=_o?WMQfQB6#(`pSTgTBJ6$OUst=KPU-LeT7N6xsua-DuR?WMRLiyCq*v>VyY1
zl&-Y#t*JWI1_;!^UbMOUU)y(|m}arM7)mJAIUM;HRM4J4i--K~gx;xNcQyQj1%Sp>
z(6fIIGHRaOpKqr}czgY}liuH*PECh(lek2z+sBqof*T=^LOyM}+&0a{QnPQHr=}J0
zuAs5#`c;M#$)CAN?BF7(A1GhTl$NdMIhm$NC$~RQ#&xlkETko@dloc>NKYQ~v2)+;
zNcB{WFJWcWgZ|t0q(?bp&Yu`9H)zAn!?S=H)cYz^`VvNj7@?7r$#pr=a(?-!aRkeT
zWI4^RJkHYNtN7A2a!GCqc8i1M$}0D}-7KF!64#$8vTXp#0lK@DoKXu3k2gnqBfoqy
z5?$i6aPlm@haB!TPNUJe1t6RYzv0)u;L6o%u<3#xu7R$q1+d_1>1rA1hiY=G9D5WP
z{nORCT^8_%N(K)+cCp`#kj3~5XavpRqIIotUMW$w>Sn;8{Ffq!{=9#SBs{Wgm5(kO
zU*8YSx}GcrPsaztz^eINJ4}@BF+FA>g@+r(y@dGMDcY6!Qr^O|X?zBcKlvIo(e@fK
zndy)AN*iamU|3VM`cB=Ee|+P{0@c43j-kIp>4n={1I<1rR#-~po72eR5|4!rX<3Ct
zEETI$U5lS#B!9xDon|ofVcmH>v*$BGhiFB(mp>Jj<T0a~hya7#TqL`UtRvA31=I_s
zOu|yVU5v37|4qydy80l2_m{`j94hK(lze$$rqmOlfo3m4Le!^n&v6HuU|5_<JU55)
zr$+E<bZTn0yMx~>wA6T>KYfjGib?Ss-}G-7RE(rHXwqck>eR+0>zk!er<MO$RJ(Qt
z@4Bb1n=k|cj~*>lq5Pu!Q(VsOaJw5pTWl;)0sVhHagya40qXFtl6|MvSueI3gkY=H
zqnZtFwDIejl>)((DsZisjc#|K-P{b?wmp(S`Yl(k_2IPc!8yXu!wA1FI8e<IDEIhI
z3jbkjO(o-l(bW78kKvl#_DkEj&-tH7ufYJO4^@@^S=I!r-BPL!IRT@MM)eU83B61F
zMuW!n2aE9&poRTNQ=55r^Zhp7(^9n#gI10-CaLp>uE_4YR_;;F;1B3M$|M$3#n{9h
zd5gE^6`JQOJar})v(jlu)=dCEP4G38Mw~AyOi)~uG<OlHq?N_arFI%3d3Gn|>oPEu
z-8oOMz2y5NW$_bUNWq-9&9Unu?)$pVPRI}j0wJ~ip@Y&y=q&@6Jy|pm`_~_se5F!%
zPF&(~+d;!VILw3*uA!<UVW49B(vd>q4~7F=>i)Qz$tvr&WAzibWX7^349MwjpP#x2
z9St?jzZ&?!P~|ejb@urLGQL`O|C(3j<WwR%uZZi%g>sf+{_{T>2?N$2Cnzy#s~l&;
zCpLysLJdAF_*OoHWf?<lE|2*XZt>~|NTvEGY8_~b;53drR~|{;`bF=Ako^ChH~}0E
zSbuEIWB}f0rZ>tAiw#*sQGY+Xbi7e;N|ePd&Q_zd9<xL{tXNO$Y%9rZ6(7zEi<+U8
z#8zW0j?Yy>?GHu*Ocn$<MRR&`jX9!qq4>X$2$vv)E_a9x_$l}_CS**$8v&N*Ef>b%
zqRPI9E2u2d4{SE@5qybfcRT(?oADamS=Z_wt8ONI0Ood)a`N-A61Tr_VR)g&|Nqmr
z`9~5P(=K~{WD}X3sbD!xK8l%BSzz+Xyb6so2#58=<enhLkyW&+S8jMC7bExdZhXh`
zCg!L_S105O=i5B?Md?=3?QFx{Hnpe!xoYcCWKj5|$r1+r|5*||ObU*4+3H~ef@Ox@
z*Ee^K8YNOKayytzvCU*vEw14n+lir;V-+eDwOgX(NhZatf5|GEJ#E%ZJ$2#upm@pe
zeJEXLb(EB_X;PpMZ@h=EuC3h0GEKexM=o~~Oqiut2sGe9<Fk~Ge$MX2GTGgGY(Q*&
zxrO!hx}CGU5<9)%M?D!lZW~hAB2p`x{mT6WU-X-IM+eB?<7b_nNh=TXHTf_@lIOY%
zJn|PO3V(i!G2}lGBiU_!j6suF8de<{ji~}#=e!eVW`nMEG6cwlooUZARpeBc@Z9aq
zP?}^TIcN9Zt<RZ8s@8?_`fFhdoWdT=x$OI{U8+sKzNb_ABc=G6dKvVv`3BktpSpey
zj6@f=FPyyFN!Rs8Pq{r@u)OOH@!BbElI8Or=NJz(s<1mO?vaKJ&9RPup70HoZs($y
zRVZfQz*0FHr!h7BlPgjV-LeIs_dz}x<@@dl{<)c+4N+|qE=F0ATmjWr$&78nZP$0i
zUPD7O6$~%V{J3hz9xXv8^S?y9R>)rr^6MqrlVh3zUZH+49XAVNJoTUKb+w-vpx&^r
zw5;b23#w5*nvvR{S@<f2xZ$UZAkz_u`cJ9eOYlO@ZQ6rf*FWa|x@q@@y8NiqQ{tMd
zbBn*;aaxm+=zh-w1n_x1kJw<}zl5%_p(-l>7zB64eHG1E4yBph{g`!eJU+zQzMVW<
zo;`{zkKE_{aF)BSMOhNDwmOcL#0$lTFCZnfvbVXrDRT?ScRAysH4H~7yp)nOAzW%<
z<-%<q2!G<kD#EpI8}{%3-Hqpg`+h`5b#9Y0ssst!y_fwQY^K@%6ZLEt;`@W5@ATAG
zsr!PfJGp&(-4~YlK>OoihA$r>DO&b47aXlW+Mg^~6;7KTxJ2?hBq+KdYwkoBKE-JC
znYW&3(vb^b3A260?`@ktTjy3&_~=-@qWS!1p>hMNH_t)HHziE<+Vi8`9gf0$c2*}4
z;0fFV;&s;^V{gi#SZXU6czj;&$pdK|SwJes>ClykbcP&OMJ=6G!Hs9LSTxa4`_*RJ
z-OWq=Mpc>-s6q;eDkLM9pYDqniM;ua+N3jqvbH6n-Wf68FlDXG@7vyaYFzQ=Y^dad
zwA*9x*$ZO^djM#ATnuPLx%f!Rlm-nVAu(d;gFzxCg7dF58Gn5^(MW>C7Tbkpt9<)e
z&W?{xE477wiZN|(?-rU|4`xF)l8zL3CJG$>Kb4qm<IlaBK3__y;MQtF6+&UdHV!^8
zI5DtEp_{2Z$iGb!<`X_tt)Kl!cU8FmqTWeQ<19LV+b#sW;X~K-#nE=dLDAMIsZNIv
zWLs@CY06DBM=15J;pq;q{wWX%UM4fRSAD??fMXfJRsd=*Ny*q|y52#6tDA^f(3|GI
z5V$P)>%x|@cT^C84jknI4(ATw&IU$0E^40<T!;c!+NHE$i#i*Bbz5DDPoMAWdC8sL
zN@UAr@hwSG#&<+24z4%rWvd?YVupXco2avz>P}|RY4*NnofqsBhM75vh+R!_7!5i-
zdfK!kYkP&PE^rRNC9yKf{}`3L^w4CEOJ{Lx({w^y9485L7P+$hdRM7HCN1fygm~=J
zT(_geQ)6N_%BSDE*N%szKFyCAyr)RR^Elf*v(dOyo2mT-zC-8%x_MaNvu@lP6tv=O
z(rGsibGoiSgBgN1_H2>lYSO9iILvgz89`k?yKTR`TLOSH?+6s$b&e(-KsXG2Mf72Y
z9g5)A>$W3a|Mc@hg|y9Y<-C_Ke^C>#1N4P4zuM=KJr`ShskBueFoVArn?dNNM+yme
za`wLdiu#CdXs=bQ_zWz(H+w?}BVAV(-Auetxa1<7S&W!{ajUba%4sQJ1GWt+-@m*I
zofi~Pg5k6Ufg7uKg=D@AaqZ)?o_15kpL670UP_%1&2sMjWuf2UhlOohPrrAZKA+w~
z6|L83e2+QrpdzsA;zKfbD5q_s+zm7m*E=cwp*PIzjA`f^_1sNslDoH_oIgfLmWR*l
zBv8bTO{cN~OH(Sg&Izp__gKaS#r<X@)~(bC^|_e<<%qPw#AcA9_U%AtT=HWNmv5aC
zyAgu%u;KnuO1SDZCe<F7Dpxn3vW{RWL?$X)i6KO9UNke1h%m^m;LHW=fkoM=x7f;B
z<{IpLPd$&?sJ42qgtI{~G>#c0dgF<`HCeVks0F(uB$XEpla+e>+9B%C4HMoa4mcVP
zZyVBGeRlElT4`=3HM4EQoNiz&{aF!GrX?$BkglrN-@7*!H${VsV%)Y{XTCfH?zm3e
zue=Q9qE}U`672O^*#i4s`hF4>Jd%N5XY<N!4L&mG%IN-pyuPvFve@X5%R2kq7a@<f
zN|vF%Wi~MUU{ogkiWPI(?YP=W*VN0DzDijfZnDpeuN+A>Prp<<Y7a?xb;=O$MCBw4
zh~IWhu0AE=QP9l1uZTe4o(?Fm!0?wxP*>egS^fMKoRN0SVYInT9`}90?K}0L9veCN
zDfpkzpP{blqFGmVJ^gd7-s`HyqTL@!Tg&(yaEG9a^m8rMvi!+xc<C#jbDgG`os{6h
z8isY6@}3T@S2LAX<}q5VaJFx(GIwJzGm*6h<j<(WUFH_$pS631@@JTg^bLRME<TlO
zl-c;kZ90M!?m=olG(S{S-ZJGm^4g}JOrY9@_6@qbWPATzZu-x4I6=6{Iyst(c*a%6
zB*xV($T;x=932THrqr1D#0pWkl&r&Vrgq<FG*9BVD!PCU7sXr0o_GY~&1v>h0;6{H
zke5S}wTwVLjg2Tq!o`waALOX6d;>FhYu(!@vDNP9Ghw<eG$j9W$IqADj)FrvAKwR)
zc%jF5`%whx-N()iU5=7wG%}D>&OKRo@vPfJ5z7|jte+;ca194S(A$-rPQ0GybRMSz
z99J~1z6-)5X@q**dcC~VN2LeC=xBoOl*0h<sPN}I<Uo@eQ55i=WilvuS>ek=^4;0&
z@es%ZeZ1UBlu)IGqiHl3%N)ml7;*c2;WXkTcI&0essksw_(#R<`htE~u<}jLYL3W_
zr4p-`<H(S8({>2*acZ@NZJaHnX44U2u2#z|lc$PZp@zrWA&8BLri$p-<+4<0Z;n><
zyto?E>PzZNhkQm7mCGH*E)0L<@$mzBw|*i_cfy&!hM6zW*pAnqOrYzW>phLLiKol@
zC}3mQ&}=hVjL$G&h>t{<@VG0UMLX&1Yn&L&W5ynd%W8r`fo%eWp5z~%PEJm8+CY2p
zG=e~>_w)!qkCyH)XJ==VH!OUvE8ugfrIX$*mhp9a0vO8{@f*B0!O7l%O*S)Awz2OD
zi439?8m66Jfo+W;jjggBquUNehrN5w&)`WuYEl?H+sq%#;Ld6Q`dvjDJWIIL#N7rY
z*>-a?*Vdajeqs3aH^y?ZvV++ZrD~O|uSL{G<BY-sUt>AtGZP4AqriZ4bg8qRWm+4t
zXHJSQQ(u)97i&;=kA+xbv43o)L)#2rHdEfjrHDJPVJO_!a{BMPsr$%ExsxoRc1y!x
z3c61lQ;rNP{AbPdH@Q4V?wm||)Vl}$2~?$<aO>fbsp+nq-Ag=oE(Z(<mJC_ag^7t<
zD&OJZK_3{1CpOmAnC@sh-ub5?KYv7CY!;mI+>W2Rl+oOO=qaDI)K{Y>%acHO1LSab
zMYO-2UuH;7yWD*aZAjxmApQ{!m;rL%?TJv!gCxs=nqew0TAb&4+EtgF-ei=c*6<HH
znwFofSDa%;2<#;adlIx{wvOC!5`kk%Is^|u`^@`n4Q4oP^tHtE9z~!!W2#e$q<eqC
zt1S?zu2AZ|J9`H9Z5uxeCZEi<mSdFc&6;FBsM19v6`9=XgCKq7<FZv=37bi}ofiRT
zL9`k_lcj!xl_j0d<n_cWuVj||d3cndr};+P$HGAEr=lI75s0|;?cx*PrJEXQkxnQ7
zX4wobZ%d$PUyJuB6jd8NMlU{W!EMPKdvtoH;<Y$ACE|FmS-U*WU#apfD=G>_i0qVY
z?|Z(=`A<(!h=ddWsOjDW+@=})+7q*OuP+G4a%lBwXg@kSh2Un@>02mc{UeYTFcZDn
zdd5nP;28~3jM4}(O&U~L7;14Yqw}pQrUwT3hx1!pw(~2v17=eN)P(-Z;6D?sF44SD
z{!1#g`n}hO!gkK<i;^MI8<qw=tJi@013xkMW|!gQ)?Od4Tt=XMy+s3fQD|z!+la#_
z_2I$=2oq=-e~!!f%o(@e*z;042Ol}G`hAVvQad?DXje`|Jd6D&rV6Tz6c>j1<j?g&
zG}fh0(;5gp+ZnqvAAiQdJ;o!gYL!Z6_>xSorE2t+J(ZHQ^0=eV>V`+=3zc;={Ce9?
z_sQbxfi+v9g;qkXH@O8UNG>sOxD@^lC!m!pYKk)9iWA*y4iICTK!|!Mv${W%&tk{c
z#z=_uOtTgwoU`>hDk3LGUyt=CQMw;iApNi0lecg{@~l)`{p}jbb%7i&d>+=e34XPD
zpFf8pHe+c|hh`MVk(7(irj=~xtg52&M0t~0%4GASZsBrB-ifvBD^|7)v+I8J<d>Kd
zVP$Eb%}*|WFa%6Y6f$o|P?nbR_5Wk;6vps|tDtg?2Qcb63P85D77C({Tn1sr+?O*2
z`g;|C_#qg@N5Q-Hl=p(5Am0@JA<bV3snjveJ1+DaVh`T|-dY?PsSf;KY*@A5MP$-U
z0)?W^yw&3sQ&Jg&io?CP!x+$hXbUWk1$!)pn!b1gQK7NC&cR~i&DYotOl$LViok6a
zvI1o&8fV-#=Lc=V|8+23Z4|wKL6E7#;krK!Bgb<bc!R;@tBdp=lvt~GUsF8D$$E!o
zE<y4^`cAw)nV55^&#b+BopotSD|Kpl2TS95t0SBAK~wO>fIH8kp3kvuWH6^WvE!JY
z-*THWM1^1nuKr*iQ=HT!Z$yF!1_f?iX%&tC3tcJCu{yWLMbcOymIh>o%^RPDB(1+V
z5?Qdt`C$I^dQ5lLSimwXPk$x=i!oA;ho#w!SW%VJFziP0CL#hSdRs^_<mX4jj`XwH
zp`u~Uurl8)m!a3oEdm{fSGy-lL}zV!T>aY1nYdx&lf2Ja>`2I@?%J*?H*TyhxvhF!
zEc-{6EZuv`rC_Hbt_o*WS~PB*2j3)X=6x`Qx8@c@eOj6D_{-932oL6i9S%^PR6fy(
ziQbp)n-G)0Bs-6Jlf2aA)!k!7ZQeNvO<VFr?(bx1A~3*a7w#*m^|U8^&ZM?|v>qYg
z41e99!QD{t(NCIz>ncjy`J{9ki0pu}_`H3nju@Bh8&ovI<NUlf)2J(lLS+X}u3Lq4
zv!034_&SP^Si?Hn>eroS(%=fVlH&^6!<2T@79EQmd7l3$Js@%#<9V=_fs7X*O*Aw4
zx{Wojhl>n9zJM5(yZ-1#9jS7!g<#Uo91<SFUp*D=vqOFZ>&n8Zlan{h^;JdXAt^=s
z_M{lg%&cA&Zj_;xp}c2qa00vheejRsPazo<?Obt3EJBTzsVF;bGL<FWINCG&PSVmc
z`hYWwdQ0!i5`I91su}9F>lb0$8no?%xm+LTJwVr%?Zy#yn+neC<~ZtK`t<|B?NZ5y
z$R;16HiO=|4udyEzBtpNQkJMIIneXYC1TZ*T#ZqJbU3L~VCKoR!HvaAJ?s_;FrGS5
zU}%u;^7o(k?$lC<82iSMfu$DAIV5ceLF=(?R+g5NoSfli35rx|(SQ|jUEa#)yXVXb
z;N4u-T8vG1@~{_zfV9z=aFQqoK8`m-Qq1-(LCCn1^{*Mn#&EY6S}tsv4?960ejcd9
z{_;8l^$5m+<IjNC7yOrX6r=?$6jjCpqp8<9R(+|A9jHFdS_h+1?XZK}TfmJusU80k
z4>amC-@O=d_^MoJ4?porBs6c~t2uf=9QW>U{6ts$?ocd2LSj?#jpJgI<!J@mCMBM}
zDI;Bn9_Ky59o})XAld0$8dYn-;&rz6ZTW7<2aeBi<wyxC>qpcKWvjdmDijZSQN-|u
zD0=58&)MlNnzk}aPpj>0TH;3jvWxp1q*W*5*NHCBsRCohpBf*}YCMq2)~9Wg^6kN{
zkA%zX+`*V3)?E#xBj53n5goma7hQo6m0$(k>hurBlUXf63chS3&I5V}5#-I%>+(~T
z7e7Q^|6sPxGh@oAP&T8vQoY*H3PE_B>?QL}Gu-ui%(B)jOLSJj|FYY&0|bEdbRm!#
zufn3f3qmrU3`W%fv#fu4yrRPjyhGorp+UT=U2~IkWsk4Br9mRAKAtZ<LeE}MmYVG+
z%J}cq&Ny*oduC%FvOodo+haEFx9@APG@h(w$yUx;vA?1zD7zPnb>VWH8Q6<(U06Px
zub8`D+9!zE9_@aipxjXzYJQzrNKfU%Emw&LiracI0t5s|VhTFrD5NYm!e0$$)~!;)
zGvB*LP=jsZLkrQ~7YXR-EVO`q-MMmh;@N=@+xz(u(%z16n#LIw>OA53^q7KymhgFD
z4*@FN4bC)2Z{6vv*Z5KU4p72|iZu-wzBpUA%bmqMmQn)ede8QqN*TenRz8`3dkOr<
z;cP!}o{Y)HmJ+6?r_5sX2l=_dnqbROrXL(X#6~@)km*A-NG#@(7drHn3z@p{jIGCL
zMWvJO#!667S#)1q%YxooU40LsY9gSSFa24?5HOxMmig2z=B*l|Jm3;P>xK9VkiUd|
z*6z4-C(c#3_tA&RHi~Bxm-0Nf)<H~ENA(|9D*NX8jx&6m>nfW@a3r(Nn}>oQJ-Bmk
zgE|KQheqsj^y6O{J-8r7apr#Yt3turK%iI~1}S}SU)bdSyMwMDt$zi8oyP;~xIbR~
z@qL*$<lKAF_x|>5C3J8}eBIr#&i&_UgPO;KNjQT;)obOHW1`UkG&Q*G+T1dH1&eS=
zy4)()YjsQxq9@uE^KCvSl^v8b)awV~>r9b2{BmvwYGjx3bW||Jz7OFPH4HBh7#KX5
z%Ujk2qIOR0yzkOF9||TCYBeqf${=|e=_CEdlqRGx9uv(rSy>|dbh{q~An6QexxI?U
z2c%#rnI&dV>09w$ER7bpT|w5CbK4}B*M|4+r%D^>PO@=NQ*S;sZcPAD@U&!g1eQ33
zDPR0|Ob9Rl>zhj~+i&%?``lhf+FArtODDfek$Umu>iP2^uZN<Zd35{p=ib*p4Qk=t
z-dF&Qb)KRZ0k`D_yL<O$QkwjPU_v?7eeO&^`cg2Po+t_MZH@ab#;zsx-R>v1qX{ev
zz<}s|dO?*jPE1sUmrtX+jMI(CF>rJJ|90L-!qHi2<ci@hB#sz5-E)N1$;7&dzN1@D
z_N&QAO57?xDdoRLjP?U;Rz{wYKyr+&Gqfo2{xGt9p}o<t)&tXg8(H>2aWFrRRXZml
zeu{(+*wlB#R%QY9G3#sY{G~RJnY*)#sS@Ip4C|yBl%q3zwkCbSr1C0vz)j)rV>4#K
z^N@M^nNnU&?E;JyV*ON0+o!9hl4O&a|2pRx(CSnUQ2vJrw^X@EDGiq20UQc2R?O|1
z_SPG#;cUSWvl-<g+~m(yq>v~oWT6+-pGZkyPnx~Vm(F{|6|B(_;HXKq^h-AC@MiRU
z%_Wcale@aEJ}BP(?Rm@&^~*2wOqG`0GqAV{%{8u_ZnL28>VNoFV*YIg?AY8^<PL#8
zp7TM2pG`E)L&d_<LU3Kj4))cv5H|LOHOrde>k3ZtW?C(m5nhF{)hx{)9=Ft!1sf)c
ze5LG+WsJjZE<k}(KK73G;+_8HUCy2ut{3en4m|~NgX0WGU10oI=PRZkLO9_y58mhH
za6fH4$CT5JB*u)O?D$}XC&Fk*q(Cj{CM@_qoeq+qlUgWv3FuuvDp+o}!<)`=qkiuo
zgCloXv0MaqYLaexiL37Vy^qW?<T3C3S|i_X5lTA|fr&jxcK;e^VglN%q~i8iBzsz)
z4l!ZF)WC-!<KDj-d)oI(EJCRyN@0=(-ndBs-qO`}i87b)G=AT|0^XOqVb8LL=+n~D
z`?j3}Ge)0gqtSZCQy>F-z#?29vberkzqtashpXUT)0ik1w!7!bE3Ab#?eJ_!?Kt^Z
zn`{Kr2Di9Wo87)W8+x4wqo=y{G_6bxmPl+bqW(Uf(`e#w)`sW;>%(TZD5Vkx;Qc><
zPiJi6ay#_uI@#!pe6ce7UE!`)PwgcT=UD+<0Fq*6OJIX9e~G?-I%G+T0f&YV+u1Hu
z!U@jep?zy$f+cx>cN<+<UVdvQid-}71Eedu_60Po^E%tm;b`s6_rBhGJ8s+5A$B*>
zvxa)o7%=aeFp|>JXQTIF(QWC#9>kz_cbx3+_hvHs+XGLgxSy<0KNiLj>_qV|@(H#-
zN#f@~umD2tWMoXBo6i&`8=%J~L)BztH1U+MB|t=S?KGl6En;6OUb^2O9i|-K8WI9N
z%97Vs=9S#zLEtm-2NGl06ide$H{hS9J9M9CJl$Pe@vx~IzOL_8czjN2#k-$bpoHD%
z-lb!?y)x??9b?(7Ie5`ym0YTlrZ>gn`fgBG|5HhKBH){DG41CcFXST5&<O~pyY*e$
zD(RrR%hYU+9n!Zg8wH=-aD;`IM7jOl(ySH7UX+NCNx$>BRJGh=Y_I*sx&!dB-sTG!
zC1!b#;=&@lmFlFyi!rQbEYoT@)Entdw+1et{t0m3xFHf5$lMtUe)&Bf;*v9>)|51p
z-U>iNk|Y0n1g%~0BBi7>hlIkCgF!g`wtLq%`~?qiD}x;h7tXa9NeQgNt9l|XXY(n*
z>B7=1rOe@aB1$3!LsP3oBcrb9tVRJp1=3*eUPTC0&DNp2=t)DuF+JlIjm%JgJ`0EV
z)c-Y{v9E6q*3w|?>fEsf-M6w-q#jUOy9qWqA8qc{z1SEQ7)h)CtVug2726;Uxk1yM
zUS#s9VFs4f{S{Nm{ny=^ZrNkN)jTA-e29xQQO`?kJcS_joczJ>zU#E((!=DkQG8F^
z&Q96%6r;(#YiI(Q_E2evv4tZbUn8&DuiV-!kK&ieuz@>2T!4rIdL~Mv#&n=%7H&Z@
z`{e7!2SwvsZQ7b24<H81VSf8onQ`8ONceRwF|;V72*4lpQ##u}4?^;)P6;v;osd>8
z!NNet;3Da;Vku`$H*h&G<uTVi>UI3VaRXSl!(|u~J(c8Yi41irOes$+GHm!2)dU*S
z+mF+lKIn!qSQ@8J%cS#nKqA8eT;4L*Qs~uxr9RD8OU}5uEjW_s!U0<(Qp%qwG<t8v
z#T(xZ<gqEH^%BEwBJ`L|I^<)MGtkm#-*7vD$>NjXthul3Kn!c>w_27Q`(t()pp(wo
zw*xx{(MlJWnsl}8CYv<8dl;V1LvnMMEx+;~*yC{3&1(h^)18`Um0EPt+!4q1{88qT
zsGBs!zlRX8)#+DvWQ3G8JOo<Xno*Ua8Lxdw!=*dy0h3aXfu@X0rK2Zw+8Krhj`ieA
z@A9XBIjQO&%gxQrf+wV2Rb|~q>q{RTeN%S!#>;QI4qxEIH`ib(n%}aDD86P=n1tlo
zHsOuSDn_~7(cPO$$})cU(8V~PH`W<Ub^&SrN_2Ruua6Z*p+1ISOqM-XZ3Z-T^z8kL
zDc0vXG@_{OkuZ;%<V(KZ#;RvKXBNlbcOxfoL-`$YZK60mqwoaNEUQ8|-L{*0?mE?-
z=TO_LY3`u@%V?%`fSNenV8=B-4ctC?RzT8s_L8slGiYx04RLmQQ9581X&X?+;uEF5
zqO+z42N2}b6XK`w7h`M2+-W3ExIG84<&4+^W->k~y-oRJ8@QyKqD}+#sde;6b#lFg
z8=Rb+jODs**O97QsGs5;Z_ZO%gBei-sRRA|nvZ{84dUMN=ExcdDU|Oc-_wbF(~G=r
zb|$|EG|?8-0fLuTU74Gs@_xzppzut$FZBC1^IR7{iCjGEv#4;B(y2->kPV`z;xG5t
zzl<Ip@mQpZ3R96B*{}hoL@d|EE0M`Q;Rdp&PpJ#@(=kGMX|+6}b{3I(1hX4n411`;
zHVkr!Oi);YEdzpb$w{apc9APGBJAE+RqVz%i95&HCG0SVL@F)eLu#)#=7-o)dlzcq
ztv#J*`>KFThA~~0^$g1v%Kd=%{ivl_`+T#g>|x?}h`>-S&TD(qD;DR%ynGwxb}ty`
z#IkM(iZ&Zf;maTcHF5N_02;<lpx^^&;-W-Hs+aOC7M4xa)=4HY810ALgPlMuWjELX
z|Ka>qkciQ``ug0-k=2KKgI!0%QPO>phdxw&8en6I^5VVhrq=c8V+>B$8zZM75rb5$
zrt)|mZnpJTbK5qK_uqoM3zmX!*({nnLazX{_Tib3JGZ3{c3&YyzAth~7a{nRnt5^Y
z>-R<4k50~%Hz!PpIB{OZI7wkQckPL!J4PKtz`DMNB6EM&+Y1=M(12YTmYI(j3)&SF
z<zLKva<(PnwyP;qE*ze|avRRFkqb{$;k&8@N>!imS_}t*Pg;XcO8?4zDjBM*iDS;u
z#&gtMEHZIX%M;EyByMnJ=>$e}qol{toRb8QqPI6i+zxi+iiNpfSm+uC8#~XHjg%xQ
zETU+neads#+OIx)q38CEwL~j~?-LxlekCv0xmvs|B(3@AEArzAq5BFG<-IxJ)#D{t
zcuzncP=wTjpmZU5IN0&{ZXLOj?CSH;%wtN?Wq+@kOtkn$+hVR<c}k4XB5Vz+yrNTk
zn%()lxoa|AIBDz{1?Hv1+wBe${$7>vf(qjkp=@jz8ubiDIqrJ~3$8RmHBHCX6Db<L
zYuB-@oS$#Xf-(jf*TrL9Uiz>ohLzeS*qlXC+qe~PzB*ds_})6mPm%Q`D`D#3s+gg4
z&&$ADW_MR&eg{#Ud6ym>cxrc_g|#aibJ5#-i}|#j9Fh_mm&qJ731LtV(~hlctwfEv
zPzj@W>Qf#^0Ek>PQU8bP-hE@1h>s>%@&8pUJwn^tBhUvf;H15)iNvKZ@6lointJ?P
zZtS*wTrji96SXU=+0T01t#AGtkR?Y=43ZV1xXx$zl0Jjbm8zv4)|hE&%Qe=D-g9&c
zzY$?56I;j8K2z@j*_WG&7MG57sgI*uBC#Jr-Ws=4dhYhtPQLj|^HbI2jFXnXkZf7e
zs}6`w!FYXu-{cJ(;171Z%2}|yOioMVenS`wA`+2qpKhHz)zv-}2rJ`vZ2Dfs-cW9k
zmM}*cR`#Vi^*!w>>=u`Z6gmfqH()l9k>oy~RSa~p$-OwfUX%WCutHfwa6ddFCY#1y
zKI60?NYP=`jk*?IMkSMq<yOxhR;D!9yMDS1AEnkE^};j1KCs=%VLs=mnU&dbMr^?P
zMwjL&t06VTOjy=YA%vO#J3*peP>hYE-51Z@c3@-6p0k_V{z?qF!K^y)y`1{cz$<a9
z5<#}N9|3p?p8$4~)`4NuLX8!Twp8)}At$LeI(lR>EX!!k@lvsP?3r)t>%4=<@TvS)
z)^l0>_UuF;(iluTJw5%~ptZhM^Gx;{tjjB8__ME7o_nq)GZ^9I!>ygSEMO-Mk@jo%
zDbIl+{q6C)1+kLKh}U<YndPQ*Ellpj<+!tfSoaSZ0UuQl(3fQI3@#UzU1JfYxA?rf
z$ufmOR}NT6kBtNKsv-3qwg$SmT|f`PEQB`@$|n2#F)F3ThiVQ&I+CNKCF?ieoNYH4
zF}`wLEV${d>PPAqr1;RyRC!A{wERD!-a4-7_xm4~2})QXA>Ab<E#2KAUDDkl-Kd0g
zm(oaghlGp<=|&nx4j7CvxL^4Ge1G@<@^HI$#W~M9e7)K5=F)P57U<)FY5*W6^*fxs
zs#FXly?!D8xe@~`^)itdW(Fm*Sw@@X_~{`qR}He4g;D<Q8UVw*e$=rH@hs$AO+Vu0
zY5nK3D<Oz8L#OVfca99*9>3m@@8VekiXKM~#n`>{rG+YCp(FbA_Ms`5ji5V-WB!y)
zoFGX7MUJwConWC=a>JYRDW2Y%Iy+Qx+_&&Ccf-1e$N54P6}EWrTKnzx&Bol3FHgif
zesK=9^||v-ovu-bmAbLMi;Phl@JFkkc^`Rs5G1cPUR56vsHa8g0+9rq!FWts_6`?P
zYeu6zDvSn%ANJu%md`%XF`BkhuD=pIT4g-&YUC!IvCAnYodjl4exjlvs60$U?z^iH
zJ!D(GQx}c&dcs9wB_HA;P1nL!`VQAKg7Qh#tV@&Q$_tl9+N#A^y@!0{G8aKNSJ&T}
z8EqtWNtqeM-szMSC-I-tn~f9aj0(r>WLFisXwHZc0k2~R5CTit_JJw~?Kxlm6JiBd
zV}RE=)?Vr>7WKJZ%3*o&q0PB|f#vM*J)aZ|=uy$`ZtQZq4^eB`XT^uXi&J+E>DdoF
z<11j7FM$P{E8QBYc4FoqxB^(}xmZ&NU6<^scN{RQlx20}!`6>WIMnCVrKecS=RJIv
zOC}DcUe}=>lsy_x{FE+Feszx!sxAIhkRGl9d{oxd>(S=a_b>Rh=IDa)LCM(IW7dC5
zRh3exehY}>#VPy(%l&2_Bk)#M>rznq^9<0Z(NG|!7}W)TjkBR`sWhSQF;fhHTE@<T
zZV3@}31ayC3Ts6<`hjB$jwyh$!EpCTq`am|x2|Ya+bH#SHg1wxinzC7)@v=_4e{?{
z-3tSQNOEq$S)`VcZ|gnH&Fj{xQ2dQ9@WSkDrD0o9_-^`t)(TMykVP`}Z?r!(!`aF#
zI=61AnFTF$0O9^YMj!CQCk`$O);l!lW|~M4Su+nD5d4|Ydj<)OwQFEIb;!uNy&Ycx
z&JVK2pnOvJki8La?N>i>WA@anxL|JQgSrfYRUXS{Z*YTE7gh`!7S7N%UT!s++021S
zY@!#ubzUmhfHVzi?#_944lCbfN4or#lP;?+=QzoT#y6)#eKjH74Y#TDH@+bJFhUU?
z{6iRpTIvzGbzOV`*`BABegby6v7$frj^v}@YAo3^$pMNejNW4jKXi(T)*ypvuSz#R
zia-VZT#a$7P=-$_#!~xidR7p|S=VV&e)m1frN|m;)~2kM`*AR&Hqn3t&VBC-YnL%&
zJ3KY`_QDS@&fl=K{fQH-L4#jFR&<QGBVa-jNl%lt$qK*HMru$#{->XLjkXn8hfTL5
zrM!xcOTcm$ffuE8S>)lQAEP_lu?jN@fM|?Y>e(?Ww1L`ycFRgpR{*HA8$Db4T+i#H
zTGE4F0!9IVgRf8bPD?86-U>lGxZ$+2TEL8IV^P&;%I{3ORH-tCcuv)S4q^hJI`{#-
zTm74B&N9DZ+_X=tTucc`_>GANbBv>4z^V!8`}{E6zR=XDAtYh6z?!}8%@}TW+02Sk
ze)-bQFTIbpUn3FbAd${I#sU26;2;fqmVW=-ISNg2U=?3s%6{B^_c~Bcs$^Uk3Z{;Q
zB^m_aStREo;ghK(GI}Q+SF88{<`R340q&0vJor<n@N`OW>yt&M4PSh0ItWVCuEe2`
z7MG37Z2aAf%yku9pZlxba8-qHOK~73KJB4ZM8}{>gkjSa{4<?mc<;qYxcu56<U4YW
zouQol&92O1V1K|?%%wbajsRTe#%JxXQw6G%k?DkN(FaGab)CHQXq#8pt2Qa5LtZm@
zv}joOnHHQsbZ&#h?JSmJ!>Ha$guGd}y1h{=-_)w4Bur0?(CGFVIAq_Uk)->Ld04rk
z7bw=PaFX8P3uvA>JV_JYJTznxL4K5*Sz8<%QNjcH07&S+;_T8EL#vQ-=-M_)u@p71
zi7a$JxT7%p?gYFfGNO@)oCHvj#odK88_>A{0|E~#?`iQ`kP`*Vwzjrf*U7Pmp$)`?
z#Vi0++gjoMX_YwGVmM{y&EDFFNMRMIbhH+>vo-}iy-Zt3JU%L>ej3^0U~R6>>&0~r
zbj8NP$y$*v#!x9;)c@4x#%QMO4YPAEIu4j^L;~iruva>4b39+-{)_NP$g}0kE~tNF
z=%w>ll{G-X8PD<(tb3)){i?g?>q-Lzv^U$px;sLcN{zO;=20P*OO)VKO_kdUZO?p+
zRgr9aGk^X_@u-`T=yv(krl_dc!Kf?C%h7-GXCua|Pv&Tro#%D_OO^NoC4?2l<7B+F
z`P+Hzs=9D6n-pK5s|<xL2-+XbPX7oXPuY4K?+V`Uy!$$s#zX_iazvbg0$kc(jIhxm
z;?pbiAKerSsp*Jd%CPmYupk?dYw+yf8l906rj9}rh+OV$qFTNsq0Sa$%5vS2x2WPN
zVIhp$E8O}yiWBN=x$b!-FAHMzz@_slP3rShky6xP096vfj#Wa6CP_Bq(x0+)=3!t<
zKS+JASt!D5oo-f&wUG{Mnae<A&sB)_(bVxT5a8&jIev_YxJgaV%3F`BppPb;I9P9Z
zHIkHO;V+by!+FwBPZemhqwutCYq=xSHZ+C;x$40Tc48SuhR+lx=PO$~NarXhJ(yo+
zV@<Ocmq)f!MK4<eX9!9iSEVYx8t+_e#)#_nqhHR4FtytVu4~C$w&`s5EuxWx8?7w8
zbxAeCe$4`OJWLefY!(ZR*b&>?QFZ4%uVfP6@bGw-A4$MDoS=x4t}gW@RCE#m$;5Gv
ztk_O{{KRSo9SaylVU7mO((_8ExyRCYwAFm>SLGIOdhFGH+&d0aVmiK@8jI@m0S0}p
zMtO$X)&bCsWzPIF%%lKpYr}512baU$ao2r-S%8J&*zm11t4V&hLS{v*=)aP!NU<ct
zEUia}v9WPG^*H9HoovU${UN9*D`e;<PktCP$`|=%sR+*}!bTuXPv<hNwmh~6S0l4#
z9>(4@BIshDc^+;b@o>e7<Ev->1>{Ns4r2ui&k(>SGgPS2!e^?oL-ZbCl_NZc$Mf*;
zJ@hF)&dn0&+yibHM_wggbX2<2)uOp*(v_PXjA!<VI}tN%qwt4J6E1?do>ZJs4Rnj^
z2xOQ?g<rat9m5X{z}D*bx}>bkR~xhPep~;ud)On8G=}VtBaeg$g(4bSgoFy4Xrk#c
zWs%OH%NG3_L0Ur6j(0nt&Gg+4S$bzwk`Zsuk$$Trja3Ug*ydE#%!%P4I+oo*C_-Dv
z=`<{bE#$>d3X=WT{~bbrUvU<$5<r_nL{?gnUNgtG;{bMFqD57A(&4Y<7L0Zs+Wy=Q
zy!f$(ixW-DWJ?#`WNmB|kR^D(NyXg(j)$HhuJ=Gz;&!p((fD2%GePb#GpoTZQ?{ux
z?Q9m36VT`)uUZmQx|2e}-&*>Mr_c6`9Hw`x>_mTPvupC66@E_rsy>Lb^>Y7lmFnix
zK;Au7gQNRHv%B1k%dwTpMme(w%vTNs{k7%5$5((H431)LWw`5m{r5VZ^^9vro}4jy
zW0z9V=T~A>E=XDIZ!z+4;&Z3)ZnWblxIkET3JvrG6WqDUWkqf(Yb)cO{P_)Xu&fd3
zs4Z-DD|(k+JBHjjuNP@qhvmAu>>;2n+dy3nEj{b>N9<G?wlxkFAMZU0uK!QhvShtD
z9PWU!P~3&rn5GwLb+X!#spq5Iv~M=>Z8ZMeur*w%{lByNCCDRF9i~*I4&E)T%L;)+
z+!kD4ot1`1bq(#VKf!i#EY9iJ^S5b<<*k^q)d8{-zIEVyT_NtlQF-eE{&FP%$mLoK
zIGiTV4;S<|m-;asw|_=Cw8A;WrCLp6c0`~PYM1#s8s;nLw5VRG0q=_g>Ww4IC8{~l
zf4K#FGX=Ccx!aAmK`TP1zTFf#`KM1zUPRu?(QS#n0C>9ApsZ)DLYFPQ0=w<r=X7C|
z{P6t)wg}1>sivQX3O%i#1T$dzS=)-$YA`S&T9wrdO1FTjY5^my-Z;tsuW{{^wab20
z{dKgZ3V1J5WQuu9Hk=8v%b<ayOoM}^G#D;8f*Th_Y{X8<N%;I;jT8##ql|N2xD>tF
zB>qUKNzwl)9YEs&8X_3^P>}JS1ilIu;NU+@Eu7$3c(-wR?|7~~R`Q0O3bda{1**hU
zOg|lZ>N?qTV(2iv`Fjfi8!JqP|6o&oTLCscU=N3k>dQZO@0g6^dgHdikm>(tBCaoA
z>5T@Kk+!kOKBdD(jQn?3ih{e^Jzq7sR6*={wsm_19n#R{C;MY@?@qmhq0V3D%6kA4
zBTh?!#ugj)_WQHY_?OlBoCeb~{aeLl_kV3eQF!Q<BIKktQRM%4B%#6Z@H#(c1Rp{?
zhh)<%ingVMfu|OzP~<pP5JrCcf2o>$U8J`?+D5-GLV#N0^Y@#gwQ01i%TN9XZl8U|
zK9%HCH_Kvy+0Wx$J538P(Cuc+;Z-lZr)OpeIeR+%as<Vmx|#kL%<<g<P#&>}5QJMD
z=Hqy}P6qeSc{fg*+A~&+AbfC9!PvoyXy&M!U(;EM=UwFxzq)Ufe{AYo=DgQhfUz@<
z5M}6YEzczOOU*Dzyp9_Vo+i*+@@QD|Y%w&;gv<$b1>o8ZZy1=QX+f#03>}wCIzK{b
z@r6*cOd-jc(QoV}E`_(=3r+OCDs(uWG5NSo`vj;GltqQD(E@6UqfdP*ya;cWYNItT
z%>sQ3cu`02oI6QU=QMxV5X%1oYci57Sm+r&go*-y8bfRUDs0^t;(EAya8_*4XF62%
z)!wktUN<JtE+mHoFK%wr5cm>}+vZ7dyB_@4XB5uUYBHC=h`lStxHvafUk|VZpl#lJ
zW%ZUl5^h#HG9dWhNdw5t0_(HKL$!@ze7`A76V3V@-<Fcu=mi<xH&ZzwfUG7+$d@Q#
zZ1hY~z-{}?vV1Q0od1PgpU2l$f*vA$1sAzr$Z!@RtDXxIdJKhy)G*I7jCkn3+iE5;
zoZ+YS=h_a-{2TZ=+N3mvFDennZNRS&2le@E8dfji0r{mqtH_<bfoX}VJ+H~koJGlp
z<Udp@XKRWMo&(KDvw(%YAG2QD#WBS;*^hovzv4jgR{9_>o8ouoG`)`lSO1=$IMo^7
zCQ+pP9sq7kgURLW7mcTB5#51uWR)=>>Z9lAXZ#9$^?+`TG#xrJ@}@b+;F%U(u9;%<
zqYZ)(Z>RO|s6pMrD16cZKI1t;yBQ!V1ne$j3reoEVb7`9@+Lx!bxG3{_~8I$0x2q>
z|Mv-NIeq6I(Rh%cdEm(2*48q=Wm=v+)EMxm(rq_)_0!Gm(dcL|7pfx8m;Q<>n%A&g
zkD*c^)Q$zn0H*)UxTD_kMZyMll=LkewqJRE^Yi19me7>pJNfggeb4rr**y_SMhh0#
zj{g~F@oR8sKmnNT%}_7f?SZNiCgquf`E80kz$o(~<9FB&+SafkJlfL6Gi}C?RZ;3u
zuq=i<28TZ3%q9Lp;1j|SJAZ|me(y?dX^DTL0gX6jMAS-c*Pe6t>kJW~hOk&WLt|v{
zihS`e?L-ggZa$VC@+vaall`&Hvk~NTTyD++>fM4G$xl{>HKzTur_wU!fV{b*P0}cq
z4p;9y@rRN&YwTk{2`F%#XV88cE6RUWIrYH6@%qfQ3$P6DmNO~wu~F~tRC&pSYyC%`
zqJIW(S(%y!0f_iFFMcMA`w}2*k^HNTLJZyZr;V2>g=A@Zs@zqD>1p493?B`8O(E8$
zn{nD%BmO=}pY_sU=5_-=Ei*T-MKT-+U>BG;nVd56V!w>3Pn~o|iLi1sD`b!KAQnXt
zM4nY%O;_#uvj^qu<DmGX0_J}G6@hy}kI^?B<Jh^L7uyH@$uA*~$yEzD-^#p4^9+1h
z;@kS*B;vq{ds&{zp*K+&UT~jjX#4imvS5BAH~6X8BlI`S6x4|xNmN0EwQJ}zU!E)^
zD2NSesFyStU@|<lTEZU&qKDuhs8p}z!b{jYk*R48gI4!aSop4TQLT|xK?=KDxSZ(h
z5}CJ<Z6Nmi>EGVAhw?+9$6SGV5<6~l{Uyy(?{?aJbHVntQPfF*g$OK&@fw<b#;V~;
z2@u;4wppTwO9mhWJD@q)OYdUz$5Bl;1l4{&$(WaCZ#*aL)Osr(XjPVlP>3`#-qYpc
ziWW@)h~T}7rGBE?E;nHkJ>8<?p$&k10(d6)^cMpfsEdo(WxlWnfi-W9sP9Xc-Hw-h
zT6hFnrD=uz@Gq|vT8S4O>XZw?i-ziYoI2}(J$8m|CqN7GY@7@#RIz!*^a(z}y;{||
z_Y`=XoE1c+)mIL+^!FR7(Gq|A%_qLLlPSy;IR{GB8=y0Q<HF%b$NOxAH?&XW;=dC1
zB0lG2Ji?yP7yZT;{U%vbniZL%V7Ku$brGYU&^s`b$oi3cPJECbiU?yqnndFSV8W<;
zrYjp}Rvnb}w0Vf{*x{PKl+4kz_3YEFJt;KdYSV_lFI_$wU`DbsRnQ{6|E*a)Zd^vG
zr}~QT=agT>Z|XHJSm|B2i|DIz|1S%`O>+fQ{H38VQ2iZ$*+X34Ga3ro7*y8{QsF|i
z=F1-`AGU<B-A7vSN(796o?)>9qB!R^cCo8+oV%=%xDS<P^+GoD{d8-Sh#66uD-fPP
z`{uLWALaf$w;3B<(Pa3z;ov0}eW`-<3W3fu_ruU2sUHn5hunijtx+RhkS=;aw5S7C
z1ggu9vg1+2>%{A@3bZ24R>vzbQluXRYockD>-;_RV|k60n4RV7=JvG8sKdwmC)o%9
zL{8$w8BbiN9x~Od_^i3Chc3`j9ZBwBh1pl=toox6R=}{mh3>|XDgI7p>ih9(CjM5u
zT@s8N$o6PWWSaS61*QIi6YnxN9JUB(g~nzn#dJkP{!or-ni>FPrQ84iTI{`5RoC&z
z?+eKP)*slKVMW|Tg2*YvIbhbc8s(wQA0L{m@d!jLzu<HvxgW}~v@)dv>0&D8oE{8J
z4WE<CzeQx~@@y|{KzpwLRJf^}xBv;^!O!ruwAeTBmpq@$&hE02os`^TY;rZbC2;$W
zE1Cu5TgB+Qa2Kw7<hxC?xBREm^YwU^oraAb-W?fhtX{W@Z29BizNZm;)9M2kGJ8UH
zX`UJPQenXN&$}34>LLSLqr(!cSM^DXr7B0>C6f*7#?Ya9+`HlA2=NJUfm|ZLVkQp@
zDv)yYu!<XW3etVPAHMxk=3zVsB<~irv3`0`M7x}K{DYx#0&obeWMQp6rOHnVoSu(B
zJam;+1Fw<CiFX$S;NfA&?W7Dj9vJ49ev2@5Bb38-a!ZWKq1)A|Op3}2D3eHl>K-)J
z9=oGAjJ~npg5)@i^*#IVA$~)ps;=pfoE+QyOG{3=dDbtR|HG{OLZU6~IA_|Gz46jq
zkk@Kx>kKQ^I*0Y|Q-*g9B?tPoF*X|3N2-7nqEXIqi+kfF*H60Eoa-hNdBokex|J6r
zQ}hu3eW*8Sw@<Rb74eo+c-)fqeqpnyL=DM0_VYQur*=2t*DC@y5r|`ceT1kanvns#
znrIcm`BQuD<01ww$@yc<iUxf<RG@}6!UR8Mp$=Hpm%jC$Q7G106fR5Nt@oD4G+PDq
zaC`o~<)cJYs#9p@TyPEZf_8TGKKAiy0}=ZE*+vaTM;)UApq4pCe@~4#At#;Arn8|H
zMPb2&f-W$8=f;}&+l@c_vv|MCbt~Tyt6Su1aoLo1Fui0_EuPmNt9jr5Nbh#gyTZu^
z+j>dNac;2V$UW`9{DR;{w8$v@HAc4;U9B8#+NXu1FH@I2IY)j32a(hnsx~#jLUu4~
zSS)DGk!uV7Cb>31h<cH9s5?5lD9SF?^M!BqHzZ7G<557*Abm4P=WlzJ?F6KpSp*P;
z|EMAv){<yg%n(vdB>4Qa;*U8Gs4L^jyTNAer+tQr?gN=}nwi>JKEK8-_V-_;xM%^Y
z`E)^{t1I|RRw3A}8T)G-Du@UR{Ke&*)^E7alz^U|5U;9kt65?5gXA7i_;z;J{n<)g
zanh>7-xkkQA>`0I2)sz3U;GVn{cF+U*9ceKv{{yU1SH(iY=Z`ym34=`)2$SN7Zvt-
z&s?Sazs=Lk2<SwzPwMIW6S1}|lQJEqw64+YEd&O>^8(QVu%b|`nhL|SG>@~SkpBA@
zfpn64sX=&kto4bowc7)>rGPEY;V*xNZsTduK19_zFePsnf^XPb{gquY_cR7a>%C1m
zGA`MRXp?P)foCBluUE6iFH6Of0?<J3DQQpQI2#$?{!8H6W1=vY?I?7*_$9+it{!uJ
zNG*jIh;EdK{z~+_n917SxBwAZrYn<Fm_T7#^>mUS82AZm3F5HcDH8XKP~$F$<YY~T
zQ0mLF7Jc-Ou+J_a99!nveaNDHCrd#Vn_H+K-_XmpYZ2WnDmex)KNCBWZ~t2Wb7qQg
zPkO$7Pc21%flX<hiFYV%8dT|ii-f<L&qN5(kSM)4wAoy!kyt--k{0F)YGhCA=#J))
z=o=3rto#3sxbR!Q7HE@ukBY6zoJycsVjYrqDJk_)L*K3pugt-r%wfi;QLjQ>c1T35
z{lJiAdKPvvsi$W5QvbE`FMVtrDYaK>ptqPIagXFYckdNxZY9Qqc0R488{eAL)^VO7
z1lQ8Dvsb)#Na0yrld+x42fd70US%v(i(eN~R_5xzuY9?xP2Bx?LVo_8SZOjs0pzyY
zuB(Q6fI~M*G4Zu~vntsOTArgq%5xg!^F&$`_~JpaAoW8Ybzy7&u>n>gh`h3_(pCA{
z3!)UN%NSBYi)C}d(Hs5WXiDAaVFsd+BtFBP4)XJVl1zJW76JjXX<myNP7zlabhz8R
zr*c@Z?q`w`rpH1D;UsDDnUtUDGBHQ8oLBMs0O2}@fC*7#s%63r!0ygHzA~=7->T%R
zDiEkTJ|Dc|7=VybpZyoXwq7hc7<RA*5G+bkbMi;0bxt=N5~7_!*J8sxcDpD0Zr|S6
zNnc3rM+6;`N3>3U%XI*Iw*G?LHBJ``!&+aaE>$h)zCUrTv*aR3tkUq!#QrIu#-FO5
zO!HH-Dx_n@CQi!$+ZnSw*AUrNSuaHmT*)on!`v^2N1v%@j~6V|Q9sH0sVf=wkezzX
zM$zwBg;*=&6&k`Q9bBzn4k+vW{PKiO>fmEb_eCVE&KwYYqOwpR8ttAudo#hb_kQ`<
z7?vwkzz||8*!0onCCXzo^T6t{?&_s5L63uJoy@O<igBCJY7%YBIPSUwI^gPWXziB-
zTB-HyAcL)Qf#PmGVK;*fL$;hIzmi>{>#1MackU7Z82kW0rZK9j8?3A_Hm{bc#0pzl
zicSY$aM2MHG%|PQ@OWLg1Y9bK{6fd=gI-}4?Uwr<@m9FjTjeV$RBR=bQ)5|+y~f&E
zDHy6_DQj9T8yw|naDZGtX45S8gIO*9Cg|^;bu#>6DeUHnt3hvt3c^bhM#yq|hp>6I
zI@6A0KUVfEBqe&tu~NkQ-p$ek%#4A|E-vd$SlRH^_#_HXzQO>Z*W;H|R(isCwccDU
zDJ!e5yZi=**5A$WJCOl(8=$2kua=68j!}Ufx1D%m7S@r)OH02#Vv?%-Ef5#90D}75
z(xfY9WQR$Ln1kcUxVgEPqE*5kI$o0`zn3Prq_kVCe2`w~DkEf*ezn3;?;oN0pw&$!
zJHMq*h?&V!)3uo7C{+?DfU|dDTeHO3DhjcL&*dsNmh&pS{y?oa-fLEeR+&@%sScN5
zJZbz1L1u#7kg^a>&GBMt3*HrXa=r}x(X@5b;(0zP>-Ts8(zh18H^HRt<l4D6BtXbR
zRhSlX?fkY0&{bRXNTA;0$S%lTsvW)UY8`ILO-oL7Bj)<|Louvpxxdh_$-ynkI@xV~
z)%)v@@$$HE#{m;rtXtI6DrXx4lvK2=$(=2$AH$<hR<m$*?le|YwVsfnqW}y&1*rBV
zdO!PzSTZ3ZSCphgvC9_b@me5+i9%}j$93)Dyjkq_<<{>fV#Ggi;>NMP1aj#;?>IZb
zJ|k)DaOi4_${Vc&gDoiX-9NnP;RB%pe_EHH6<?Vhh{U?NO!?W*E!HQN8-YF#`!$+x
zsPNHoMFQ5R>PK(!rL*{B3eC^xHicOGs7m8~R;gL(7)zF1jgw_>l$heB&&M$X%u9=T
zzHu$T>Dkni$xq_#IGIoKg4(fvHe?#R)JSEBKLS9JfUAr2bk?5Re>+zgQ<icmG$tm-
zL)dd)0hpn+gz(?DwxT!H*|Z8Yf;9l{ac`qWl_lU9R0bWMC?~Mxesgd7z@kTt-xw8C
zuS$!K`s`I)R40s!VuV!!n0;Ev`BQ6FMBV(-WfrTB0>p|Dwte~DZkBmYMXOa(krVy;
zEyW3o#c2Nwly8H|Sm3Ie6V6J_<wcm-hPa(HW6k(aw@!fr5+Q3cv6FMT3>Xcc8*>_t
zG$j7ICC6cg(qdgT03G5b%I<+cBl9i^dAmW281JjRk3tRvzt7hXO?DmlrCj7DJMcjS
zjtbYJ+T7%iSiE4^e*~9mn;7)NH{>^FGr_yC?C)c&H%gE}!569~=P-{0Sa>no8x%v}
zI4A`Fp7u;8fULUW1pZTnqcXp<p7@SsUf=BtdeK{U9C-Ml_ozYO)9Jcdud{#yJuhRy
zd|L-eI-nx(!IF*dGyOV&Y4));Q6nJW?v&eZw!QF5kAnYS@AR$gg?kxG;!^x;KU}@c
zc8~;4oBijf;WT)EL;+1Cq_Fu$lyUj_3L1<>d#@T$v`){??lfgt9<0@N{!Swj_)n!y
zVG<%LXIiS!*IX9oa(A0}jz1H4OI~=0LD#1eeTP0jv^v1p?CFzuaGP0heU2IEQ$)~&
zR^EJRAz*VqeB{|-%Vtqr8Q)mEyV!|quaeYwv%UB&cbHh`%?Y83BA_xkEx&w3d<U1S
zW2}8K(bZ9T4~518=jvsI4IqMc-qo-|ofiNW3fR5%xNqJ&n`CR$<8M&e(dKim%y3v$
z-KUs-w*m-?Vp!7<y6SJkmBYm6D-<SSL7e>AxAq)V^Up%;t*vz!PYi$i5oU<ljsQa~
zj<EbHk%N;NZ^N~idgE#g))zRRc}sFXWvnN|n^_(tMgdsYI?;Z>8g`x`Q<1WUi0A+>
z>Z+)llV-S0)OH&2xGYgy{?|V%;=SQ@6f?7N`H;6=GDrKhZX+df#m-i_@2E1!kM&M!
zieWBU>hicz(JlZzDZ1*W$xqp5>EX@JZvl&>!V17QKMYc?d>1|mrku8^WFv;7bZ3bf
zmxQ%;DL7-4Ds=|kv3IU?zPHzcH_5EYfFcL`+T7Q=b9aQ!Kjq;T2I0l^98hm71QBG0
z#&u=hKifXJLn5wHUVrV}rV9_WLd>QQkbc#7if#K2c#2NNM5UXKnGkowfS$GP<qCYE
ze}61oTzT?KZuW!x7I^6pRcCisKaFDtNWGS$qVQS%uvL#xyDBFMroc^^e|&wE-)d7!
zh5k5r7NpMX{NQ)!?6O~|UBMK#9L<>VnN<}@85cI|ff{NX8Icjthx^#k^8H&W4M62@
zD{qP%8w+gf>GT}i%O^@KmDyrmnlO9~r{(~;j-;;{JZf{gzZGH?c6BK^A$nbe$8?$f
zl)Fkm1DbF%;7fCiRrgifRmrl>Ky?_5k;_XLYs@cDa_4c#tD<}GoN$I8SLE@PprrqO
zT2};BYBf!KJ@NF#f=mQ0DO8jq2?S}X)O_so{H28>&BNrfJ*s!W^AZ5uMlTfvH#5vI
zhX;#x{93P(ynMf!8=}0I1NfP(-sQRxN5Fvi)%Pfjjhz<Pr+>X1R$4uLoz*@~)dA#o
ze)}<Ycs#rvyWj)r1wq`VHl~0Dx7-f{b(r@}RW&PB(xrFni1-f=0_9d=7RU*Mp&2zR
zAlz1E8t6>in!ox6gC=j@!RTacGY*T5Fy(s4r>CdwvE*0_{xe4aO($K9@xe3OdSl3z
zW5CXQK!g6loi!7ptRi>Q<vp74{Ddk~fB8@C6QLX9faN;k-gJxR+5_W>s;h{b7=6V-
zdEs4ycjtwGma6`HS9_jwLelPU#lfksbp_2nfHVFE+b+kUR2#Vmh6ukP{glCfUJYqK
zj(~B#`gDoBFX_@&88X4J1kgYV)SXW6DE^Z#0-<{u!Vg5dDxitGoE$WV`a)44Pb*$0
zQbA@D0f8N3epU{|s)xh&&$xxq^+I8)Kj|heo6mw+(&CFrPwc`O{8j_)N`n@Ogxa3#
zMdd>EhR`R^-zJ768h>`|{}&MqV6%LzH#r3t$hbl&{)g&RA2hB&dCB5xfZ%N+idGkZ
zrmr(W7but+Pl$hyJBn41bf#j+=L9@_ENjd|=6a#Jj>F<{a!!tgiBFmBynJ518}#NN
z{ibQhxDbe@jf;n%d1*LnHhHXmbwhjJ-isEBjp8DjUEB+Wa>A9r8p;>SytE?pV?WT4
zK54jB#x*-0DvRg6&V<Llx$VcPgvbI)=PNg3?UTS-!5F@Dz!4LIuLGad5c@28&xZ+Q
zkEfZvX8tCs405gg_(AzOYJ2taA8upu`Cd4^aS5(Dv2tHjsen1KVC^q*FZM8WW1Bur
zbB#V&$^aeL-DComL{6N)R*hYZ?L-`|W|F*-_7FqBvXOr1r5HL;r%DHfwD8a<ic-8m
zfisVNIrud(W#<Eu8Fo1eg=Wu%)>b$s=0Seg%~h_%t>%r;dbW2iJo^tW6&1A$HjdFh
z#O3n1?l`QEoD`|8&`gispE8C>qE~VTr{U@^xe5kq$mJbGj#+NCn4rl=ma!&#SSbEz
z$p2uZTQA#KR<jT0Tl&a<zRwx!v4XaVZ$C#*=1(=)R@>ZaGw<gwKE#^vyrHa4Kd#V#
zATIkW#NiJGAnVtsu#oYgnXlCDB+XpA1dItm#h|A?i>(7O3c;BJLXu71#a|{)4lSk&
zh$Xme6W07L05D1zOO_o<Q1EH<)xKx?xS{W2c6$@dS=t|K!@ql~&zd9{9Se+xoBH{0
zGap&(+U{@Lq(paxzD;M|Ma<e5wS4JIy+-?mSwK{AG6JwZI%E-Z`CF%=I}3HFpgSyZ
z<D$f|2`rvujmLxa1chMG<#y#x##B0X<AR!#idO!=>m6t}&4L;G6;2YYvICFq6f+Io
zL$cMi2N~Lnn*<)eZU9hLxN(v;zL8Nv$v2zVxWV<<agzfqiI@o%ZTx>1;WE#1xsJD!
z9TIHV#cUZ);=T11C+}1UF*<D%U}{frzn|m}qb1R=+|Y=|H>gawhl=*0Y6V=l_i>Cd
z8!G6YbLfZs8y$Fp7V@?dFf3NeUj<zL0TQK~87L6La|L|EjEbH$x-1#4t_hR(V{!VG
z_X<%#=zyQI7D!_N@mh3LOJfaL7sR&Ve%o~EQgA?<9eId`p~}w12J&ySl7rgGip?9o
zTVf5ePxNMlOTGspN-3&-tqr>zpJb=|!VX*Jetsz9DQ+-vw`}F)FHK+sz^jM1Sn`9(
zP}tku#=m1-F9ItA53X0Ad*}yJ48#%)5_D1XXT{SC62$S(6;T-#r_G&@?NQhTe;T<F
z=dcio_joMKHm|zYEZ%zPoS6atla@nnZ{6IzTkU$FY(#yQMT8FT0iyl=&=AS1i=#6K
zIlJRmWdb*1kAlBoXlkTR?i1yzx0`<~<~)7KL<V9QRi$QK^UkY;i{-r@ZVNlmSf>We
zj9fPKv4NdtXv7vMEl}RbNiLw58~yXY#3yZ3bDF8A=4+l^OfhIn;MCBgoYe=BLLJ({
z!2!=8A~+!mE0B(WVAau+r$vU1`dB4ZJa3se5AFXp1qCWdJNxtkUv6_J`<{PfZ^!D}
zk#<wzu?(Zdy^iJ01<za3vC-Ep07OL>s~8Oy7|2K-DI`s~ls18e{fw*~%HvITAU{-k
zdEE5&tdd1Z^SNV{1!HZcgHvne6m;Wk(>+EhwK)T`Vw*?1YUt^jga=0C`w^V9rVXCU
zi>0eHJg!Nqpl(Od<)Ge&S8HZXHvB@Lkf96w;S$XMejQSD@NOh;;T{dR3_5;9!A18_
zK1rhkr>Rpt%Q@aphI8sm(9}!UG~Dm=VuoK51JXtSgYppuIAH(lJ6xr~nuGkKZGuZ1
z;AWPWbuqD+CRH3XHj1s2fcp5Y;JR%{0+TmdnooK7Ry&kd?J5&bq^Nu|Efz$ic&^+V
zU+?_Cl;g$M&9}`~yh9f@0{0EP3RCs93*l>x_7D!f9io-Lih`4c-4DgJMbQfx%HvuT
z%TrC!$P|D*Im_|fu-t4E+RKRSRmn7H-|Aw?OeTpYVxCl=#p)vJ+FD5AJN42J&JLeF
zKxyf|UTjp!<hB_8cKOq*N%i?{0TMF}ez;(Z#J8gH3jmDN<|x@w<w~Bk4<Wl0^1uK@
zzxw6Kj<+RQh3h6C-(bE7f#w6_A}3@-F*ySQp@Z~mbwH}f6aPF{dYs~Uei4zt>kMwY
zRo7xEJ>aW}pl-b>n~x1>Ki=GkV#|5&aiGcD<}FJkFfjTg)LJ3(F;juD^1CO&xl*}M
zAClaD(?u4l{QCfjw(lbtdrl~y7d0ZkA_g0qtNPdl*LCV4Mh2BBW~*h}0tp&h0txU%
zw7rj_(2kLN`8zV0=+u9w4QK}I(d6kh*O)+KU7mrJnL<S>p|)xE3ha&1=*yZf=Z~Wm
zHI*ryY+Sh4!mV3bE)F_m#w+w~AzaU^lyu~hZ(|jg8-xr6?!Wwfei>u7G*WUFmay?N
zpZkSM=0t{PdFc7gYHLwI{#p2JRp%AC$05qv%oE<jU;|F8X!*h{EdT3=-?aVp{A~4L
z+i!`9+N}9Bf)FlQz&$#GZ=HlKe;%qVro2OV8O&|Xb^~-(9ccK>Iul$!BQ(;=y$aH0
z<|Zbp)uA^{?OuL-=Y_h!1$B!bmsdL1qs~PuHOt70-0Del>mRrlw;Pa@ZXjdJ*Bf`4
z`rNoo5O;JW^3hvJ9_2v&Dm-s8k3@pdg`R$)>X3d3fB;TPtjp6^>J;e`&$rUF2Ymtk
zde`$6cI5Fwz>VzeWz$mT7}x)u*+(dWsQ+62i;Lmx`$cy>VXF)6qa^<(+>a+KJA>%T
z3{}h-`Uxfc+##iQxwX;I&WiHdJ<A0xwmISXY?L9GCfkxm@VRPac??mFr@1L$mDkP`
zC$-LEFTTS1%`#7BjmzqBH{^ToSxTF+FE8r(3Rl-Fyzd;iq9VJ^suVp7vnP0P>YScA
zIMM*U+aeZtu;;NmLv2c8DpSJ%mFUCX#6npZ7^<B0c^@U^VZ3$m4nH39P1z3^YW7g7
z{!-_<Y*9>|atT;Sy<0wNE*PD_9UCl}ty_Wp5b{FX5)V#mCsT22nlaH!oEwY!b)i@l
zfC=s=K9P?<+s)ow*a_rFfREosi+%3g0)0&)xgzpN5F+LsbaCVvt^p*%|L%3*{tN`s
zZl(%rWt1!q5DvC%cLBN1LtP9P`*Ol&xp^vFl7I9>8)uAlQaE<nco%Y@!&U@H%>za|
zz1_TXGba2@*KgcRrEbyu{j-|Z6&j)~eb8Si6M@?CSh04){8F>G5C2U7M)~a?V^=Fj
zZEnKZjLI9r_hJCmISF!gy-?qkEY0Hbr{9y@3N3SED*7lkAa?(7t!sm7tFqH_b48ZR
zV4?PNjEyPcV`O5#Mc06ms7BPxEMJZO3ICWRA9dvF?7}&p;MEFA%8aer0)1EB2T|0z
z%<gDHPI0$C!;GCPEPP~=(xQ=7PEM??$EzKPZZJ*dwDWGWwltiKXd{bJ9ph|>mivDj
z2fe8~sqYW59=_4ZOtB2Pg>HQFQS)>c3&zzVw?JEhWP_SV1&8VFk?X2YHRFLRrJuxL
zSm9h6PSp#Sog+-DqGNT&%Y4IF_~T$L&=PS|3Gr_BgzejxKx%<|@G;!iHnV5v2vQ#t
z(+$*UfZ_-Iv~qZ>;JSi;n>Am;KTkuj?_nV3C(3G|ziKKl9A=z2%|lWwC5eymGxEd9
z8Qar|%t<Z)wL=?Lm`xz{K(*INPPT7sfyrrL|H1fi!y9Xb&o9UXuN8oT&|h$ZVXr*~
zh}-ZMSDtQ2cian;me{1TPes$JGD3E8?HjzWFemO(Y&^>}JQi=;**Zo!k*_4)@=aD<
z`Dy5?N0#TG<hk@5<v)b>RZ{opILT6#r^1muoaWEm+?%Zz?`dC;3I47vD)Ku@9rMI6
z@EJKD^KLSPbhMjZ7&giyo#&oW-bj2illjb$ty+W=t6vPrb=y_x2%Obvzy1sfl6Y5%
zFigIeIKM&mH1928e42@{T1+1*FhJv(t|$WYYfGlch-w5^k?<=`fs<}}-F9t=Gx39U
zZ7cCzUZH}}!;AoUKX#rkq(Mt+HatAs7d@bAqUsUOgNnx!^F6{8jxmZ}H_D_HsT{z9
zM&vOX3kR0&7pClAXNhX;=A|~=dc!TpsJ13LgoS^X&VtZ1D>-fAU?913H_A#|Ry?8K
zYd|66wbkcT<3#GS93O4k9y?$-(H;z{&F$>x8%sVi(`Nr1Y*T<&+n$3EAmAi*pAhr^
zqt_jjPE(BiBuwth|BhK)M7P8+9e&aW+{Ljj;HKuiHZnf~BndLf+QJ$3-z2_qXRwYb
zQ2SY)$$l^Rv>%%x(+(?%63s+T-6q1xXePKPymu1^v`14<R*jDQSaU`-Dagi|hTI8v
zv~9J2Ts{=$FCT;3@w~z)pI5j7-3gV)oQCn_Te=Y7Cci>`vARohMda2}*m@(o98c%V
z&2(RTNMQL8nEYKK_`}#&<=xz9+bhddx2NxVZ!RHCs1q!P4;@M{0O1X(!cEU^MMF=&
zyYbol>1E_U`)-o~=)0exdUn3Jzi0hI$XvErUfXq14_+M9g$>j4@8mcr0*c+Wl%rba
z-O8Zlv%l|c&c=@$iLC8%!3@9s76|s<PPDmMA)GryAIQ&AuYwjCZEfu)IaV$|j;oXq
z2Qk;{_w(rgFAsMa#~Cv-b*{apw*t0oTijmDu-)gma>)LpMRk-VlVZ^Yvr^^-;UvqK
z&W?k+qK{LIMh!}B$LL`2@aL8(oQn4#sQ-TZ;HGh<G__l>Vfd_4oP0;T_iG=PvsL=4
zeZ088lkKO+j}NNY?)y%e(aBLz`EmBT22e<a@UAa>jc<(B+4smq_rv<D_WltTLAro2
z@@K#nI36y5RsMOO1Ud0TBK!Kypy+P0q&@HgqzB<%t^^L!ruGRzD7quEsm6bWKFuXF
zL3fV<G`HfPYC>5M!)-{NAFd=wZjqa_vX@r+Z#XR#JB^W(D*7mlM$9P!!h$O>Lbqb@
zt|BJ&h@pR{w2_8J-6-6M3O_35tidc-AQ9`i3KzU%uH|vaR(0yQz59c+=;690Lw_GW
zLdFHLO}s3PP})uoXVfMxtSLtwBjheyWo#a^{YXksJN=hGLQ1g>>(FDuM4D_Zn+77I
z-W*^%izVatYX!67==OT9cRjwAxHnFEo$vPQa{s3({CV&IAY%bYi|*KO_n*CDcITl2
z#KuE4;c;w^x)AXk%6%Y`Qw5}s3tb%Ru~ooSYh}@??*0<G9}y9eEQ~$*9Qb_S3%jRF
zH8jTV^h2;#Fe1!3;A||D7?{Cvn6hHK&l0gZ`1M$7W0#NGPQLB9nYEJ0h`b$`S&X?&
zR&aFH&h%+HwQy&3sJ8b6K{MK=A_;QAjy6K633CHSKGM>f{8$f0a*N$h+5tb^zj4mZ
zXI+_iuaKwP2?VgQd5M->wyE6w-)M;|H1oc_nd7DdrKrXV=3<81jBv9jK2wh?EU6~C
zz8jw??#y`@2^2PeQk_elqN-F7K^VhVM_ViVY3@eEDKrV>%;N(qqYhyfZu^W1;%659
zy&tr<4shVx<T`#eJ~pFkR40!ffj;8z%{VwYOtqbtve^-5vIcK6LP!ivDPI8Gr1Ez)
z>F~uaDVIxzDUP_;ar7DZoM#WG&IrH-1X=s(uY6{Nj{q&gCp2>!`O>4C=xMh_g3l}p
z3v4+@UdrnBq^<EDTRo|?u7`$yn=FzLiE~?8-b#0Z_D`TU*ShnrROI)l<_N--uE2ZM
zm7Mm5oc3emB;?V??39N;Gr`8Q_<2u(fpWX@z6XHpVdrFHfnC6N+2cRf>INO2LyAUO
z`Ng`xd3ckt11$4I5z%Hf(@#HwsWJJI@U@i^1SNP+qm3cT!rf;pir?lPgi(i6Clp-m
zIZyl7bVNi>-zdIVuPh!{E#ncia>eZX_6THyZs7T6nQI3cm=dwY(@=A4crU<HK446n
z5^(^li8y=B3TUpuXGk+wb&gpB9hR<h3r&W6uX<?zTB39XYRH4aN)SH|dF!=tcC8xQ
z_5%Pp(Z2@a>ImS?HbzUrjbznrvwwpY*o6Q1<dMgoL!rOnld-w};2N)<1*6+T&Pe~~
zL|oP<*<-$8EP=aq*8kQBEd>Z)JF!=Q*8RF)MeeJ?nq<;yyOOb7X0P+b|3|_BB{>3A
zn$%HZ?>QNMBr>cCjClB>&pyUiG>&(j#X;pJcuMi?nW(VBoHAqOj-wf0WgAcUEE0-{
zFm-PxjnQ{4_`0*<C4|Il_yNndrc;?kmy|W>`C@FHdF0_1JITZ20II`%idZav1`-n`
zM}Y^`8%qDYvy2L{9fs>iDvl-Xifg=~L_=Sjkja*PfOh~<TBV`B1ZAQyBvkg*gqo=I
zkl#nE;L9cc-@DR^uFDYIjTpE53j4)}@D>Vo!IaV3R<=!h0lJvRpKVsd*L@!PZ<BAT
zx9h8KS*kv(W;tOF-=Is7K}iQzp(_L4AHjwBBw5G`gV%*ehB)S2cAecP*4ym=`Qm_b
z9#3{5khzN4XJJiwzd{!Ptev&a*XZtZxB~X0=myC9=grvd>~YV>Xm=ANKU5i{SS_fa
zLG>iwOCVA|;5O#iFK@Qx3TPv@!UkfZ1i(RoR~Onq)PqMH<peK)OH)ixcg6Bs-a8>C
zG<FO%J6$Apu%w*7*1(a!W!^cc0}LQ`T;lZDXC!2+ZzEp~Egls1v?s2ue7K>OEL;Bw
zx|tt@TO-JlA4a-smg*iJbOKVYX~4B=rzIud^4)a@vVZh26tnrcdCY!CH{eWLWp!@}
zsg_;0qf39QYW1FUq;rseX2l;~w^88`Z$JmH&ua3n|G<}$P3e7Cz3q0J-4fJp-1Sx=
z2J_7BoNPfE--5Ll2i={O!fW40b#;?0;i}nu*DV84zU*O|X<&V)F?iY3YC)N=D^jMf
zsQY`0A~zee7Rb;9f@RDK5L^By`ns%RrvH@+0HSo2+*|m2bc_jnzg+d3#c0*?3Ed~E
zcSnQy5k-wB@0SvP+u#PXq5=*JpP%h{rxx&{^DnHH+cwzXSTEuyVFDlr>3YwM7~Pt(
zWgFpUE#b;Cj7qo1zBy+j=?D3X6E7^y)`=+19|l&KE{mTKjsMtAS}Dm1q{nS=<6|gj
z+G}>fBAUufYympyN5QtmvSN4s0%Wl#N4NtXFcoF>K%+aUMzEeThmlP;zY>$AZY-{D
zF>SvhAaRcgYEK0M2=F`i#-7Alyn3f&GGG1ialt2x22Px!b0;elJ&pK=Up9rLt!^aQ
zuo1Fxh5;WT!DFh4oo&EhCeT!;4SL=;G1l)`wn_gtmV+zYy(d7~C~-}}N_t0(f*1(!
zP(E5d`3!qY)iQDW!rM5ImzcaNCEj1#TG%X_gs-+(Te&{!e^=QZ7S}9q`!TLT>Nsm_
z_x)=A%x3*io<adwuWWPLelE!G^POhnaIHZ#h_-*mEF`8oZS|hr<~FJ<`m5Ht=u))x
zQJ(;9&BYV%$E`-^^KH*gzHZNzvPHMI4#V?=dq=D~i-ebl?A{(Mp}=J%L>-_0aLAh*
z*?G^9oouFiR#m`BeonDo9Hfl)JYYx37{DLpeyc9u1hF~Zu6gcZ1BJhA{2Fya6KAW3
zb(Bh8v(X?SicB|Qsn5<xx`p~7e@mgPgM-8HXSJIp#>OZ}O7%G(BM7lBk?A%vJS<RD
zRJ7y0G8@Wz_9c-MbZyw$w`oBF^&V*P9j`Hhi7laXVS#~gk$!OOpsy)I7iV&N1V2JI
zrqdUz|LCs;Lbu5TB{ZF@>)Z8%YMSDe3(9b-m}Btea5cj`BZ92dt8I76&y*k)pAG4+
z<BG)}Tk9>AuNjK8eJkmuxRkFwE;&(ok=xPTi9E-8pd@nru>gNUee+G(-|;_P&z4x~
zJzG=Rdf#q8Zl4rLB3MH*h0hw=D|7|I>>C0gL##U+Ho&zV8Z;&~%R5F+{KVAQl|c>&
z0%s$g1k?l+-_wJ#-ghVo=UU@`@cb(~iQ?q9Fj)g6otRTr*G*K3;UAp}d}q$Ezy=5|
zS(E7!H8f%#`}Y!^naBtdMAm{4FNeB^Zz46HQr2p+SsBtpNtmjCR_PXCe#Yh4O{Ugr
zjXLQdw6$IvHmhXYoFlm2q^Z0j-+G*Muh<4#Mc!hzB;*T&YDfJ)7&+x8&Mn#9NNzjQ
zDA#yg0ZA;CfOaymjiq=k<IO!Y^V%>NalU@RX{G#M^Vq|pno-g!kC`Z;VcmgPlpjr6
zw&YPsTr%mf7=Vs5XIH1SadPLopZWT1?`;wvO&8}2^M-Ab7!D_~i5xFDu#lfO>4FHz
zTbh5g*OnLv7bm6RwTMj0$2ahJ-JjE&o%rsb(q!Up;SCdiJM$gXUPUzV+pq7hDiF>0
zu8im83(wb5<%6@uN4<mt<W>+=UdUneZ|T_RI-<K&5Sg+n^(A6q3>|RXF$?!foGiwJ
z6Uo_7RG7y2z$YJtiy{2!)zg1vzi1y?K^%oKCUpQk;*SEAve*sft2hU^M9d%OPJNcR
zIjzoH&%5ngYN=Tz2iZ)%COp`at>yy`#>%!2SAyB5b_<Sn7TK_AA+4s3L<4dg*47lB
zBOPYX4L}tlEW{4cq9<ykhQRd`5dNb-q)t6<zqiwk+l}R}p<gpnEUiNR7?+&TR09cY
zu@-ALcHYK}=TnU>YzxIU_c==>c2-^6*MIlNa(4gY8By~XUe%S84>9z2Vfh|Im4@FX
z+m@v0H7jc*5B1sd)f*HtBS;ncXPFdc3e|rqlg;%f{cPB(Sq^WlWG_8{VwNxJ<ll~I
zcy#!d@iX3*L+V|Wa+z~AuF;Y;yI$p=u}CCQK~i2yTwZ}Gsav@#4pc4hI?N03f7Sy;
zl6GTlL)((!cROlJwfX&Dn9j;i+;7cvs|H!9UhIE*g3R?kOdiD5YpTm2)A9T26F5wK
zBsg_eup>T-1Ws927w>FG*|FcjFezI%C$R0qMbGWDqfGSB&U)HjmROvKOai!p01kta
z=832N-nSjIhY3Hgc!0QzPw$zfFkPWnx78KoP@uu%L^Z!Z@BP>tfoyGTggxe@qLW8m
z1RVb%9ZP``rD`~D1V1_d+USqUp1g^<j`u$$QzyBS!GMWVgFJa<nUdvMY}Gy;Eh|m6
zR6wr!Ewt5Y+YEiyGW?`l3}7<64Tp@(xw?8gNyls6-rh2E)6?y7$G0P&0fa_?&2fRD
zYM|5T65F}$o*I#>U~#_>IRj$SLLHO*y}L`>raI=c*Oe9OA3zPDg!+V9MDx>9_Uw#1
zL9Of5JlUU4-JUsl-t$L-h&}CqD70-~CV-a|n_I}yK4W^%uQfT>2X06|H|F)B54pd5
zgIrTSAV^HbmaDl91ezJU-No}-`bC(;_k!lPY|lb5+N>LD+{I^vSQ}+D1kkojGrt9H
z;bZ6X2h3(!8C81EXPNkaxp=t8KM?1PmK4J<xe=GkRi*1b@}_dq4(yyj<v|UMmQ|`!
z3-lRoPX&Z6YIws=V835qSU)mCzI`cDUIe~HkO9IbkmcDkbyW_QXWnrDJ(I?CI;-zg
z;T5SeG8zO1as&@Ru7VA-3$f{%<}2-EG{+}$x6&_d|70mt0=svW5aZ5>v9oarK`#{+
z3-00sk|!7U;ZX*gd)9D($HJ4nUrP$aJL=z6Ow3)0EElk4!ko&Uqmi0b)0x`YVhFEC
zn$sZ5M!vqUleM^?T3dK&(WvR@rVxLL*V6EP;15*zHi#_#723m!KLXug0JZwn9NSwe
z@owVa1j)<PcAIpqP@FH@x-w5^njDd}B3F(v?!tMO#YomvW9km9Ux*a)zzPFW_AUDp
z0gmsV3FdA;bX*@Bb4Fg&ChoZNcP+mKP><bct1)$QNB^=ZxHmA!x}D$+yGa(mReh%y
zv`l68r*F=E%GE2%1F_1UHZIBiI85Nv#5D$G3Hq@frE}-1DZ^5%$*BJR8)2Lk!oWzT
zPbWo$dn;w04aAy#eD&s?iD(tT&gdn&#c%$aqYW570r5?ZY$5lVzrxE2IV~A#phCCL
ziOt_|1hnGDh4kaqDv>X5M~?)FJ_12zE84`QKi*Z~q7x%KCkeC9js5^hU}7ij=VQLv
zqp1)#Xv<%=TH~<>LY9<Ne|&n{dY#v(|0wwHWkI;Rx(_Y0H^l1u6GLqrmu=>C`&~X>
z@yCl8ihK<R;Q*bpYjII2OJFdtDRg^JrPNmOt1YON1Y6wmUG90M@4a3Cw4&`6qBxb4
zrB<H%3E3K*rx4vNetFQSvN&wux||Ov9M|{`RBYIKqk(3+vYSoCTOL9MVG)=ugY1&+
zI{u+_V!^MY3m267^U$pFzeewWYD%aCL1fbox;<>bHITab`f~qaRKS%&;KR8p0;!Mi
zO|^*jT>!V0w*VY`_BWiR_>31shv9y*>JJFW=qhTgf4}XY^%%S38Cf_1v@Y4W;=cSF
zk+{0K1WzRRa+>M>+shAo#s~{6+r`co^b^)fz9>V1juKfOs(Mv5{zr0#{qC~JSS6*F
zEKTqZ{_-M<SrFSp*ZQd7Ex9l`x6pRD(<qlvc-F>Ry+ehM$r&wSLygl(=*%P{H+Pa_
zl=Ecn>Pyl8N7-8jRM}+>pf5*IN=ZRLBqfwi0f8e5NSAbXcQ;2wknZl3?oLHoLQ)z@
zX{4LGkMGQU_kMTgo8u4h5YK-0T6^_g@pd!vRm_HJneu^w7YGCULuL=$xtn(yR*sI#
z;${-Py!-4NH>2?E%&Ff>$Rx<dOe(VBa8McolOfM1nZbjbA)yCtPVoI>!hH}y-9vr-
zqsO~l%L6yHT9^j)mAp<uWmu%%z}J>hj(6grST|MnWKCn?;XvE1X~^YN&H@d7?)eOx
zMYwI!Xk|@UVX>b>n*QB&La^0#kNXD?=1P_k7l#z>P}<y|#3Z(Vhd$Fm5u2@JL~rfA
zF-E4v7vzKhA@<+cjVB{M;JB{7+O*1k+@U!0sY`R1t2jr|gt4PS+q^OxhG(T7&%&}X
z^U~_Im4Y)vuSa-6P-sew``YklW@)dA{L_OwUDy5a`FBXjQ|Q1me(1PTmp3Jl@hv)r
zj6Y|`>v)q`*g%BN_Nl;J@aqroaq%|FIvb<;tURjEMrW0LO&K2<Yd;Ep-V9;{4G_K{
z8K-PM!2|f7A7K<Z982so<I*}l9-NEQuoIinS4b2kSB8nKInw(DcGPoy*@x!`PVcP2
zy=0VcwKASN6d>b%+7l$^>d#uS2OKXm;R>Q=YM=jI6WL|}8&)WY<?+jB6WZ{nS$naC
z+AY!q0}1>Vch*!YBUue&UePYeup5$`7>DF3n#|${8m8>Zyq-JS?>WYLqj@E=%R5xH
zvbky`z}CW!TRkn9w$5)iK{r8lCwbB7pvoUgjRNA7*|`&nrB)XvDK|6sYYSRiF7=D`
zM>*<7m%l{TCw7Xc!0A5^!frfpXuv@OCcC8n0;MMv%)4#xdw>oN^TAJZh=aUKI{Xj-
z++@&CfNkohJ_ynYl2p&EP_{=$H7@g$o7G2^UPJh_<Ic`S#oqzPO%{aKbk<rx1=L-y
zar&A^Yz6^Oce94a)o&|o5j4yQFJd)HEx^0&0@R{rGm=wf-%Iylwq!CIl_Y;u*&-YH
zaZbIm47CfMJfJwT?B01htnpj!S^RxI(Ig$AN3W;AVAl@?7wtN>BX3!>%jTT!#wZh1
zr+n|gXAUe<cjmD@WNZv9xj1?_b#4kznk59|1+_-Ze{TBE&vhh!67)QX%KK<Mcdf7o
zd+-3}VPg2|>8%M8FsdH91Gz)$AWKHXnJ>D-h%zq(&k9_~B8R}Qm-vzBp>>(*>FL^T
z_Us_ti+mx}XXZ-(qrxc-p-1w%bkJ%I<vlW9f?KySe;Qg5yn2L-G(Aa>;!V-x&w>5@
z@q)#~zCx?HQ1`Wog@uRxLL2O4H8R$NcB$zYt2gJaW^7E580}A74BOvWA=jyZxBsYq
zWjYa`ko>efiJ83XVmjH<30#4rA5>EKT7agCisAisxr|iP=Tr0_aw;W*rbk^4*w8!-
z^j^)uZ-&`bMY>$c)Xwc42Y#wMV)l>4SAf1|kkf4iZFxbSAGXT+>qX^cX?wexGV={K
zZ>K6euS&Wuf#9}8xvYDTX<0fc)#D@>t!e#3O}wS&TB44P5<aPq+!F>m{YkA479S-a
zgR5O3c1ZO2Ffs_2mY_9V>@<=|=*JS)K5}M!O$?G)Sx_&<&}W%2Us7r<%W7(BKHcWJ
zUngEZbC2F7=t~a;GlMC+J}hQ`%E6FhCfMBwv<(1t*X|8Hzjmy1`ef(c%gu2Q#9a==
zOxP>!lI_nOd<ZLSA1PVZ8|F!Mf-e0{La$y!(a$Z!YS$~xK<aW=Z_P=d?0L3X090(T
zsLoJIiU^lU*Nq;#GE|oS!jQQUwZSr<j0D#KQ*J{rt1x7s-01O2$jE6#F$lA1TUulG
zJ0ovfm9{2$>otyyB%Io6hS&vCm8Lmc@K!eR4i3sBH=Ac~3d{;FnN4%N_gRNL{*WV8
ziiNjt^4iLLDl8tmu!J=hU)ft>;(GuF5Hfr6I>3aZYPOgktT7y=7NI=EO9q{N+Z16b
zR9AlI60em%nP4Iz596pTY^gh4XLa+EvL<xV-*))A{Jr9Nzi|9rSTM>ykSg0AmZ0^1
z`6G<@C*;$YG7ZkV0z;#xBLRGZNkO!tA;c>laX5jy><06l0*oPd{Xl0Zpzg4{MbbIs
z#wLhZzsvvnFv&2;hFZtSQkAY9mTMVFX<lm@Vp$4|JX|!dh;lRs9G4diX+fF|EOr;`
z!65Fz8z+8x(Dwwrb;XI?tJZm`sk{@P!N`ogaKo;;Sl2!`s5+swrMx6xRz7fZEE-K>
z`uXnBI|-S~8@^{VC&O5y8zIatvyZo_(sO*os8slTuo$lr-1M&?jEqufPg>VfXG&(H
zV}z3dFEv1)#JJ5KiTIk@R0b!$A(Wgr1i7ZDbyVaXp8DC(mZ(j^3@pZBVEDWOlOvQt
zGu_B_xxVQjkCpEgZ>Ait>4{9ML`0sFZV3xk5s@OfdJe=+7*p~RMbQIt{(V6wdG}~m
zBU#V9Ud1@LDJ<I&X9Xnld}fo6(FEeEVq47^ZdAb~5-8)5Z(7zh-5rrDc^bHEePM1@
zBcqP$@I)tnJLkj3qm+U6s0f1a#S6Tgfia>GK@GuJ&ZP~sAbaL}cjE%rCJi)9wqK1F
zo;>2OwaVvgG0|CN*H$1TI|*3p_Hx>@>!&h1yJN4pE#Fc#&&jr}m?uz(zR0g>DVWkZ
zAh^GyS;?q&<X)|_lG6C-;0{C=|9j;{%Z4$n5^-E2JF$Qu55}eb@b|pr>FNV`dBrPf
zoxO!md7vM<>@p*jzU_Tmx^ZeTAl0`9Q}O*|3De4A;Vs@_W|P)?D?WwUmLyS&-!*Gd
zVlp>F_CX7l8hch0SPev8qxn@$8r76QJ3ewIBl)i8z^|R@OdIHf$IF?=9g*{`j|Z8Z
zW9Pjtww+}?Jv|jN-WVSw>^*cQV%KHFp@Jh0`W;z3sBpk)ARk=(yBSWmT6lf6M%K6=
zpsF4BEs)F(KF6>a&XF#zD_K9DAvN1G_GqGbJ(#+mYpYjoq1OnKU20W(8>o^D9o3Ak
z#$(`9cpcE`^HjL3weuc%gG&Xj2DQ`k`Yx{fnyt;h&Pt4qw$94$XpV9a*R%KTuFwuD
z3<OMHl4BFVm`UZQsyvgF44N0S{2H0MQTrNDpJ3Hz?i9W_l4^yaGN5KF^9qAWTl5vF
zS*9jLeviBIPK>MmV!xmv-&`e{=M7R31&ONaIxf8!cf;ln_EHw{&hmdXWnnvDhjpcm
za)gW}b_%Q9#_0C?5jJq0(E+;id1|G}bAY-T?FJ`j<a=rM8GP2r%Z_g92VA%-l;*Z9
z*G``zZ~3wV32kbos6~56+}0|d`PDN`rUBPH_Rru-XM)##E_!XbdLN|NkJwxGbm)38
zFMTWE5g6w#mfPgtNHxMiRcfpGe(kGyYx|f<*hjg?)w=IY8M|-3bv7YB0D2q3djG=q
zfXmP#!tu$q&~1A5LJ3GLC#PYD-jaqH)1FcC#EXR&uQ+^?7uwmX&ZEEJ)`tlzajvOZ
za=i$q=G$P`mNmYwRT|PhuU)U!d_L!0{lOoK{aTcqpid#Hi&@%OiE#~0Z$9hsJB$}S
zDAcTHxX(Ol8Erq&e3g1uyUW2NIBDd~Ol!u>#dAk*LbUC0!k3D^^h4M(XL*=F!K-0;
zsPs=&J3XE;yF^p(z7IEz%kO@LIR;NJPn0QmWM}1vvW7fh%{*D{PinX0vy};OoJ}>j
z;Z{2K)p)beqZTHab+CMoT3e;b#rCBE8`raMFMMx@gyTr2yyZD)J>_!YN5(&21rv03
zTFu6uSW!&tp}bpuuzFyZ{7WyW>U4w(>CB>1KJn42+yRX1>Ad<3!@T-sW;40uwd6!{
z*s?P7nWH%%*ehho`2hoxi&6`H?NJ#e`Vn*P<)8#c5Y%+vFd<ou?|p)ClV#zU*ux`l
zV>CCFq{QQ<*DK9RT<%&pFcGlgsoRf+a&?awWVL6NlDf|%^z2U9d2JLb&@f#2cfCsG
z6!g4~j|e%sTk1Xz!@8SvovN%Qci2?CHFyDCaU&ckHyfbEm6}7U!gmxA<vOGNDI`jY
zAxxq$J=TvQEyqV}E~Qod<&hrD`k`$cam~rEPNUP^iEB~DeAm(Mr;ZpJCFzYH4L%Py
zItB%~G!cGx-FL4);ddQ=nU%cIcam*L9Fpy`POIj?<P)-dd+f!qyvZpaJx5cvZ=PdX
za^#hj#soR7bn*l3Dw7CXZMW5xl@R!3r}V<Y65AfuuQ&sY-Hsv5AM3zyy)omJ-k2$Z
z%szL^>hBK;qOq=ssmdfn&6#2`+*7$|^dQ^vZD(8bT~LV??Gq+rquV3MbDJPpgaQnd
znln&a@alS+hLYQ7t`j+b)i64*amK(hms4XxBZV|+1UmEDzfP<qVNbG<*iI$mx^gE{
zMGBL!$|I?yq$K|MFzQlXKw^VEQ2G64M%IMP`+gU;i|s+u=C$1Z>EPy}-owunGD-z9
zA&D9XctQD3^CUlBhseBfSc-t2ZBYprPxlx{TkfvN5ptM=;KNskw9y^UX&+g8^zx#`
z09J9%mS_bkBnAuBjibm{j&uSfV&&FZ_!nmGCB?I2=Bi<RDG;Gws$HW?_tsRZXR(I2
zOUmxiNT=DKQiSv@SKLeGGP2Vuf=UrvuR{L<@z}x|?w|Jeb{Cf($$|9w39DJ}Hy1UD
zzrL#4Sr{Gu<up}~D{BN<dVljO#byYLP5pIceUy`LBB&bc&t&6!cs8_G<6-iwdy64J
zKpAO7+MwI%;$!g4uWF40BQT!?9g~PHTU1|PU$f7Y27d7bN}7fS->H1~rGPZKmdfbe
z&(`y@rgE|(<*{VIWcCRMec(2ea5<l(%@}8A3d->juJ*F1<k;Ce_r7gW^!H4WZ!;2r
zqw9Q#yzII1!R7h2dHv9`-%mrC&VI;#s^$~#8<_)ruOtd`LZM42)4Nk&qHi07IZaqQ
z%)7pYM?pnP0R|~)6q}dYq=TQ>f!pgu)gf48ALk=`>EJYDHoR898bi^=$+vvKMu^Ml
z`(RIfC(_P>jUL6(=&FgbG(`wch^yFT?PFQfKYIZPqbtpYM-+)B>X58HFf`b#H83#G
z8c<v%T=sMtu8T`)l-<J<f|*tZNtan3r9bq&dr#LbLRu_z)+~nf!b<E{q<<FruW)|W
zmZtr?`nQYAqa9tvY{wXN)wFB)IhC}|Oyp0Jmyarh%s$*3=O2(<ibC?6kG{GvX4hm2
zKVvkH!mmGZJRhhZnljA>cSA_^YggRKty0%SP0AS!dj}^(F+v^tn`0Qe*TQ}AcTRXD
zHC+y`)H+v@L113|=)!m~_Otn<+Zh;h2^$fWQuN0X7-@fWY3??)^{vV1`NHZGPb}HH
zmhyp;7h)0Xw^Q2Ve9s=+EiR&_=u>kYpkVUmpJ?)Y+HYMA66L<dqk2tv_S`0Q6~f%@
z<W#lFT7zZ{oY!&?y)n6XtOz_6UC@HZwOVRHvRiDy=hnT`ugBZd6Jk^)9`n%(ECNhL
z7j)yKa@`l(clT#vNcjgH^ik%b^p9J`<mO(&)0@V>GoU_aLE;gJjEIT055{kZdIrld
znk;XMO^fxO4~I-US6aO7;Kd2YQKan-D2Pe<ihHV1aa|g-tK)Uwg&eso$p=5+IL^|z
zc#F1i`}iFX)@qOOR|P%{<xsqoK|30a*RDCspXqW_iY5EgqC9_v?7KAxt+5ztHwhhg
zbdnPGdzeZNVsUYpcugCd8=Bh25TS7KT4ytL(PVj)#K{Sq*w(8mCsn@j(2K_4(CpwS
zE8nlzf1lskc@wdHm~{I+SxPwLCa0n5M6|R@f$@tZ8gsp=nf4PIP8wx%T<Ij1<!2_b
z_-Cmjs~^Ip=t>`W#udv8j?x#qXkEwm<S}`v=EXM!<TO?6QPEFt?FvsbRjD#pYczW9
zIB$Q6)A&&%Rbs<_ZT17tUo%shICsoEul?v+cU#@8bHv#3v`Jb<!)xE8S`;?tdzrH(
za^$}@ph#w+nt?}J{(w$LmDO=l%)WYll|3T`es9=bT*#*S&UFMoy_;9+BkBN`#rHBK
zM@PrLm29bzF<T_O=XA7;4$QAG;{$e@vBN3Dw0q1Kh?%Dba;46Mez5YC<AxUIRUo0B
zvDs0o=HZZ9hhOa|>Qa!wb6)T-7~?$NKD?jzLaV*2*WATcMMJ9lB@-nH6JZ2Defd2$
ziaAWZnVBrnFdXaFtK&OF3|U7-`>7X<u7jNBhe*Z3l~~fpiqnRg3=sqb66J?|`_|<e
z5B38kjkA5WR8@yjkS3WJ>6x13z2bUWXQkQdhCD#0hl%5^{oS}=S<)>U@?BrrUMGH;
z%%LCSpYTI(H}V+FG*)^?>wWWIuC-sIPVrvWU%j}+jwY)`LMWld&ZgSA<hs^l-0<rm
zp=;4Y*@J!F^AGr%^Ek36jgC*Jzt2__YgSFa@+F&TS*)^3n$x<-9ktscbRgDqPs6wH
z<oo&Try%gnz1%bc(^}%^X6E`0RoRY<17+fqRoEsPwM=*<AtP&HL<trarwub(*BU)R
zI0v(8^=t)&_(V!mv2F(QEw0|Jr`;WQtvIFl#Ce1#oY<-*Lt9T!$El8!h8J@pNR#!~
zI?M)KsasD-YsI&R3_q1z=(xu<Rxm`PcHSoPdsx`QYxsHibEtrQgObTMwds_l39lL}
z;X}_-;^DlHS$Wk7Ozj`d@gy2x4~KRSHZG}lrJax4*3=uoWMl2V+}n@tApK;v+213}
z2L^4CcRG=X%2{W~#+maWX@WqzLsb%gETN!IZ@$FbHzpPcs09D}hU_1ODd1Z+5VdV$
z?ne8x+pCASl7>c=VHB@xRM{t%K)MLp)LvKOn=|%Wn6Ca^?fb9iQM1}W$?EB}OzGxi
zU30ndlltPk6zij}GOGNRYiY%9xzSVYp^x1=Eei9N=M|Wu*G<(2=JRt~4W}NlsZ|{$
zG`?W!vkw2fcDtTe`!=zh{HcX?%^M5*UZo_1P^pS78a^v;mGG~H^=_XR`*jbgX~DMJ
zn30q*ic`|t<t;or>Sz_iE}Jjau!v6d^&%WMsaw6jYLB+@i&m!=T`d`d5#0Tr2TI#Z
z)KF`bP`<s!jnTpPCwiHa)^pjZ>Yk;w0XWwDMjbRVVhkydY;O<$U6J}P=s-X-038$b
zlMSCaTTr2YC7^^J85ZF!iXoh8^$>TS>%%tB*;Ub{yY!;Fl1TdX>)K}@;C*v`yUqXK
zFHJaLV)przFzun`#|wij?jPsV8`-~@KQ_gCIlpMq|3)~LYiWMfu~$~x<igFlK1%p}
z>(fQ<{Dncn`DSEV!4xS;({Au155j=1{W0gz^C;q(HJ15{<Hq*-r&e-<O;^UPjUgJ|
z`>T9;ptMYA8JAY~-)`gIZ4F?Q9BBezbjGl1<z4WetZw*A|BP7b*k1co7RT?##xhO&
zbFE__hkD0?AS>-+OMte(9;>ze=R>vIty@>LqoAWfAxNoFmtM6FLD5sv@GSm$o71k%
zB_zv1unMH>rMej}N$hY-23evom@AlO7FbWy#{Yc-1^myyqg8OX`9FV3kMc3T|7GQV
zR^HT;BlDEVey&)M#!?g1(2|T_-Z+<AayL}))DE6E|BbULd9lF!RHa|rw$ZJA^;`0k
z?vEMdz}qPq(qu>G_baO!sZ6at7?vG^G#{nAJ=;VKpNi_y!JUlz@m!L*1w+{Xxsm_1
z&Al5)DuKJ0++H(V#nIW#d`i9dx~v6h4k*S`@AVU%&%1p>Z^6$~6{c+IqQrkP;JHy8
zmU_=J)ax<V$3Z&BUSnp(JI8#TrA*bk#_H`xM@eV2W@N?>Zh>J=!R9f^|NgZ8U)1?8
zS|cw48&TskF^mzG0p+U#m_DtEdy#?aXRz#jU_~eaO@i}!zQOT)JL~%6@veKemG0Ri
z84v?LI=^E-y1BXbv6lP!uKNwILp<4T$vqO6241%t>-^@EXR`j`RiQsVJr-1aDxmSv
zF<AFrDCH(gsixgO^Y;EboxxbpU9?QL(_<9zTbNo!-XrY=+F}5<6==!bU-icrosYfz
zIw2snzSTtKRrr3Fe>~czI>3H26l*L|N^#%%LqWtm*?3FN2FWHQgb}!szQ@nAO-J`B
z-0$a8u(_S3&I;n0Nb0UPQPfLma>spZ^3_TMW89i={{)Gn2&1rDqb*LzoR)!T^87CN
zxA67lsP%`m;H%n=Y5kAZFc2R;8;|QDP2t$`-}s^%7oQ9%r&>sCW0XlPsM$H~u0A%Q
za|hQDm9_ftEZ%>2M*r?-<gbzD(Th{4`<|jJPl?~fVAHKVzg}FUDP(;)Xj@o+Z#tv9
z;bo$9+JhnUx`xv_QQj1PTF}F<jcQD}U}CNmQ(aAD?PWyux5BW6-)&wIdNcVVqy-Sm
zxZ!<2=AKekT^q8N6SR#cs+~iI7}{9vLM@Mz7lTt_;_b19`Dvk7r5hujI&b7@22s&2
z55{m6t9R0HdcP;Xp|9XF*2MW|McRL6-v8m5p;Vt;zj0}7aG!TmX6Y#6j+DSv?0%iP
z(Q6x|fyHOa{c*iA%%NG6_|1lomuUV$*ySyJ)CW)Z)(Bg&#x2y$EH33xlPNdpiVW@k
zz61GpDE;3*1Kq=s<pK4@DiX|QSX|KRA~A`*sZSJlHH;|S{-)9e!4sV?61n%RdWp#8
zHp~ZQBdU6X`#?s%=grHuh#^m22uP>O`T}}`{0|)e<&)1f1a@DIk7HyN-;+P4iflBE
zz8RG^#QVicM?(&`J+1w0>nY{Y@%uHt1mC<S{L|HVqK)+HF1JY(ORAxqwk>XJ`N86r
z+P<^+7i3_3mDx&WlGgdFSJZ#7g})&6sK{z2+sIzq$yxWzUhlX(jiYu@JC^X5loQ2F
zh<ALQR9mW0%lw>ib47K?6A8U^mOH1T2GTb%C|4PKow<!C$tnbfP{e_;4LBmm65)UJ
zZc{X5!0)e2rxo;9V!~)f0>Aqt9B;6yTsdrcR|Hmpbn(I!m2N@U%R8yL1JAd3;UmLj
z(PdRgbH~gymDRui7)heveY*Y&qW?!!`^c-|t8teGR0Ik&p6#++#(tAx7hl2}OevhZ
zSUw7l)m>dcSuFQ(oWpT0xOG8F>cR3VJ>REz$9?^d*-<AUXGmCC#r=S;gFu=v?|R<p
z71euxAUdE>ZKPuKV$$4--p`i3O0!3g`xq)dWLe8o-3i{c%P8g(cvJg)^2kGz>kFnD
z>K8rNjhS|9<@R&3QsL*wKT6x8tY>owS~y2Q>Sn()Eb@!0ZC_&IezQI=;zSO1yC)27
z1OjYxzc<s}V!EY`5Q&U;J+(Ej!EPo~+C4Iv&oh;_ox<jO8*@JUJw^rAr_2x0gr5h&
zZ@KRfXcr00G(1_v{U*^`Rj1Z>GWfF?jqQJ#djF?TYr-3<kuCC=i=f(if4(x8v*X<t
z)!CZ9uQxm8a5*%bmd`!TY{H&`_6_HmS*!inI~?VYbunZq*>`&nw?hW=X|-CVJwaUK
zg&bZ1A!I*SRa0K0KZaFnVVLIsvJ3tfeSl208o%*=X&~5~4(4@F`RfLCH$G?W&c}$e
zDVF9A@|aENUqjQY+afMJHB;Cw<;NIHl{fQTwj$g7)s+kK=B|C+j+$>8Mk)K>$+cB1
zYSV)>IO7NQRB*HNf6JBsNFX2>K1Ha;M-iutUtAf(UuJo_Dh(EjSzuJu>S_D9S|ZF(
zIiEN2V&h}RTK>0}0|u|QlnS$1t6w(n&n*?0Z3~VjN)4EYk|9^%(J_{AEncxTZmEEF
z*obc-ogYaby(?ESG&R0L0joOhUH-_v9!i0nNY&~cBtaB6=V{Tq8}=XVM3k+s<H&Y@
z7^4!MjKxotj9aT_m~pjcDp|UST=VBe=D!b~)&;HsL0OR$xG!xXV($8b(*TFliSa<e
zWR^iwNzR1(rXMudhhwn`H=Mg$K_akl&GmOW{r_<BfBp26QAZ=Ax?L57Jek!e^ERa<
z9DWO?T(|*8a&~P}!2OS|DgTQy{=>Jt=wBQ#3ku^woqfx5_?1@4>Jms{hwqXNr;Ndo
zM0h+QfR*_VfX3EBS`yu2C}cR7ojjiVp($(tiVeZ-ls{A~^NEpa?6#=(;or?A{wuJ5
zE1dLJp9m_oS_4p~yp1>5M>b+d{CA@o@^Dz2oiV<7U=cgEzS1912RQ`N8D=tTN80mq
zoUHHXxO;VSC#d3sqsW1}40Hf_8x*E7GxY61^8e=z{a-{FPy+o3Oqns4?M%FLu2Ihl
z)`r69ufMI52HdjfBapH&R@;ymwuZQ&0*)c`DRzU<=Bgt6$g7ICmJ-PhNdDf1XnIv0
zZ`H16k?tSB4llkE(zZ|n1lianEb$xaPIQ&=Gk7{cNJtu(W{fbOgPZ32sGguT1COQC
zx3T<a&*IVwhu^22?&o8uIxUW?$X|{6o*Z$$1+Naq33!#^crZm*$e>ne;VuiJrGF2r
zRo8*v%JYmD8Pru$^ZgOX%*d1={R30w|HXx{J+v=N<zJS6Nf`Sxv$Or1c))+&^_~QI
zq~G{GtFtC5(eHPU`mWyQlKtM#E($}RTLHBk=lDhHPxxe8gmFo}1&Ls+veGJFi4i{e
zUgP=VpJ2z+>ZtYtd#&qhP;$T@osGl&01tr3K>9*DwTx)~CU`3{_<p`((}^YDuPw@_
zXV3hfHWLUPx&ks?l~r|a_JUg_zQ*pP85^h~1rKuIeTO%K``!I4(N7pOu>KFy=HLB-
z0w;Z_!S}wZl3aXro*wD*egin#U_Qu2O_x6&gQ()u^qqBrKf)y?1Yga$JTqruYDbSC
z^|ulSjfdvSq#5Z;QrBK8JN%LS@$tzV;sxcgHF=%APstob>VOIXTWm9ism$;?_nsEC
zp3N}M{+*YFAl$Dse1tYJxqbF~KSx_Cq^DAlRKjVT2;)o9shk3?gjTQ13j%~`=l9XI
zp&+3bSH5B>q$^PD-APzkWcba9LojHQ=yiGzEt6NNZ{9zqA|WVveSDY!BG<Y#wB$}p
zibsbYCh3AXV^H#a$V<?>txjj=?RJF!UkDM-KRE%40d}dWb{9~&z2&q(N6xCrZGg;x
zU?}Juuqzy)I!z5vSwNJ2;;EpvNqw6I9>+hUw%?ew^z{!v1W#i>LF$ud2Avke&=uvW
z;aB{KE(m`Vy_jDu<sWw&!&$4QaN1*$Zwu@iU?6HeWTo<@HTfqvh`<gSnai4Nw{I|&
z(z%T(9n+CDWMY8lLEp8Amm&^)#-l}UjJ{NKf3hS<&Vw@zDSjzU%plQ~B45IJBNza~
z1mFa5BEx)TaojOK-i}uch{Fvh-0Y{&495m}ra@&T)k9dtHWCxJ1U$PFx&WCiI$bEl
zl^93)-5Bss5E}0Lm)|(gLVdZ3Y6p&fw3$awNR0`+-z}<moBTK)NK?#1856vM7a1bH
z+l3mis8!JFkd~|A5A&L0fw-4=3~<6ZeKPbiUrU)lc>*MKrTh_3k}tq_DnM>L)sb=_
zvs0bnwG=BEr|$(0rVR@?p-l8*Z~70jn9u)=FUjcuLHS0?RL)mS3i}sEU)d#AvXcN<
z7e0WK@|VCJ!{awi7WpH|jy)s`#zEax78j+EO5#6X%YU;G8=7hi&&FTK^$FIv3Juoq
z^hvTDCinxKf&<7!l{K;KO*Ff24A3fQp`P;XZwU`eM$WEl(Eakx*F9OkUwm~G8;t7t
zlk?K41E_sp3Z?a+Z@3P^*GwaP`v%^-1A-mCxM2x;i6$*>{Iv%f+y4O<K-B?at2H?%
zQGhMuP%M8uHp$p8515|<b|Mi}ct?azTOMAW`3E|f3arS!$Y#E3ZbW#WR^b@WNLZ>0
z;55M}=UP4S<8`L-_6W<Lp_BqQeTetf)5^*>R@$~|wNi!SmeJoz+?}|{20^BI9kO2e
zcjY`umGdwgLt!q&832xb7iMTi^+~7Nv8<Nrq55=<cafnDGN_wX#Zc)zw|TX=0D~vN
zs&apR`)BKtr_)s#QOUAv6OY(mb#@-fyENZ<2&RCgLK$)gQrR-jaSkYH_5J{_;1CY)
zrw^&kJL0JrOnjv$j+2}^fMEE9;y}|CVDW}muHu;+Z>5bF|0He*KiO_EphlBVGt2kj
zg>>>YSB)kH60xX1fyrd1E0%dqeMLz{`DYvb43~i}6UD{}G5t&pvN>CVZsSN`G?6Qk
zxfAHINV$*s7s9&aH;Z7W1JXxY^v~H`w-3B0O|xyLo^Pew^Wi!6o<dtiQK1B`;>5)y
zt>>S~Dj(<?+{W2yuLND`fvcs^Thp2Z*ZI(Rl)1r89Olch4-x{H_L0lKtpJ3X6{KQ<
zMx8CU?|!)X$4$*L5t?&01qB`rga<<<wnCA?NvY>FCv0Wr!QDSYgpW@tSo@+^%9s%)
zm-)Fz+Vb(T#<Y@ub@ISGYCN3|{ZrG9tx}L)e--fI7apj5`J?5xn4lR)JCB|ZL(@U-
z9F5_0oH;f+1^G}!+oF}yWiVWKIda?@`7<#KZL<Ipp<l~8;=}cCbQDe7l@@P}P(^Wk
zxXrAix@k!3>Lr$0z;>z=@JEsc{P87z`p}e&<++_^Ta9HQFktf8AWr$4AtO2t$P7pG
zkf%41g|rM_+`M8S{qoOn;Xngu*qHaZan<h@A5G;>9dD+kH6MTY5-k0G!JaT&&n(7R
zQ`Jp;tYU^F>t8*^5QG4=5fHSlcKh-~M%&Rr*rSRpFZU1f$HJroU+`8@RmMkbC1PY!
zWfgU$hhF`OEeAjD26S1I;>|<~CPw63e%DdiMz1cvnqsCmHB&M{>6rxY3^~<$z1k|4
zP9*8IDp<_cqy8i?0cQeaDu5c6okL<F7|B!glkd76gJqT%7`@{6C2WsdC?wg}q8SVy
z$K<T`4&;3v=<{w`j*gq_u9qYJGo=qusX+kF*HAX`B{?B%bB&BYyS(L^Wx4`Op@#o+
z%_!3F98A8cx%D!1W!Oo&Pi@>y_1dyesW8T{I8tw2S>82&BhpqvyOJTH7wZpCpB%KW
zL@$0>BP2$f45<}#K1@}w;d-buoqtP#zS{b$yn9~s?0lqmO~tX*xn*H<_RsnxRQ%T~
z_S}Yr5W`87eabjfrL5vDQnq5Pz-;I4fZ-#yv;*rxd<X0B#r3e|-MhW9^Q`W^hFt=I
z9iwKA<TY;lAA;ti)_!;BLR{Gb6j43~hmozs-LpYyvvwKfZfSOT>cW>38Yx$ZVfbaE
zow_EX;Y-|$hr1HC&edOU0`FJGep%XB7h8%g8PIVBT|xguxr0Bh0xYN2Hzp*Ti=lBd
z`m1@<d^3>oscLe?7$J2UMebVk%gZA+y<>|$`TO8MJdl(A)XpSG_zz{qUr5@(OFs5X
zkpBF{W;^+tDCboE2dCb|kI|k`m4m}4%#%pl;gnmgPbK<!DN1(*yF%25ekyAJt4thW
zUN@iw=%Z2lN}>u&O5>@~-X3qju*d<-;`!Qu!b4)FK!NpQ@JWobjOnkwAkWR%&_6mH
zxDTEJ1a>7o`H=WR>{-@Hfn^!96#bC`eZgGg*vNCt*KHNij5k-D%#Ru!hfi~uZ{y#d
z{WCM(2l@)2DzrP0rau%VSCJrv{(h5St)-)0m;JBcT*z*h-nb?I$xqkml`j59sgVb0
z@LGUB;Y3WhkZp?*>8?kM21WN!5fP?x%Zs)dH9gZ=<ll^L)xY`eB2i2~?OdhyG~hp^
zF8s%Leg$sWRI;ORwkmow=u9Fyc^m?=z_nwg%Hr!G^q`Bkpx&NwUMjnpQggj2HqRe&
z@+l)Q@a7i}*Xr9i@B8`FFgp6;E2XWv8awDj`vkjOfzG+wu`~rc+)r$N_aXU@+x$1b
zm`4FLnv#648Jn)~foFu_WbIVVY<tkLDSI-6RpKfmso2ZQ(ALrN89VjUKf^h8w-T_*
zELK#QWMR|F$>ZBmikmy)^cSC@w=xcfP*q~xI%*D>=or0RZA~I6LCO4|94L0T8d$t&
zU1i7`Hl4=jHrStLaT67+<{3NhIimdqw0KT2RGnu?D06u6g^gD84;TMV56$3AdOHpZ
z*9wh6eVx!I6pg6~5?kF9*g+E;tj$K-Bo;~Zho@Kt6hT8ZYS=BpQ^Dh%ThB{2Bp>V%
z-6wQIn?2O?#p~&GKz+c%mY<y<MfEOP%85H^j_$Z3lEUwuK~$L_J;|_BC2aPPW>Uw0
z?vpfm{1C1idq=0#@XSr{ts*ogD$`!Z(#xN}Oje_J-3Q0MnyfY&M=pPjtvvVI@3(tB
zH+HCl3|&Bh<nT?2R5!0yWm(s4qbOg%{z8Hvqhgaoeg5l*?i7IV8Aeklyp8qEWFqI1
zodK)cl+2OP{5Oe$G-6s;AJ#F_=;i0^9wV^W-!Bx#ku}kbj*&J^O-tZgZ@ab|CX6%)
zihfVW03pFQF{Mv&>$JrXX#Dh^7@-~hy=VehG$kRYS0<g1hFy*DX!crA?6p>0T9JVe
z`8#>~=X1luPG8qYtTeiP|0~S@!b^7zoRmwob29}Ct@q1)GcKp=+#S_(A%qMtU9>6>
z-SNXDLDr%YUYvhD@?Sql5z3m(9zO2&{)^v}bY3jd#_pOuh5}ZN8ZC|$Y(-|jmlxWy
z+EP8U@dVK$B8QUaK+ua78dy}ZHV+Q&&3Fml6rk9iY*<#N2A!gfN~S+fe!f}fH(xmE
za+?z2V?y4b0hDW1)$!29NqcRxPi%il&xqL^GKN+aEk4haW&VkNta>~Uacr8r2iP?F
zxMnku+A_dQEw*3&Fqh^r#1SvRxy?D0q<Tz3hR5wXut7>s2XWAKQ~>Dy9l0a+kXg?Z
z!Fyu+=WAZaf=G~d96J74-Wto#>!Nde3pQ?>FaJBS|MT!hwSa2fma-RI^y>*87q+)*
z71+_?r$6Zt4~Ocb^fKm*`wsqWSU>NSHs?Zos|(gB_-Z%B0cjKTdq<mjRe}{R3o_+x
zZWE4NcDIlqoH!;=tEKsiH*@F53|M^sfc9S!$eQpQR4h8y?Zpyh5zN;945faT5){`Q
zjK-myUOmdYeOQvjWMzeKM2qn0ci;ggZQ?BDT^d6fKbiMZp84dKSHNfb+6StMtfsEs
zAf4uPklcW2CHn^m5C&(Z{c15V5GteHRV;>kob$p5+KW6T!JOjw^{u)*L5vMzQVARs
zbO#v(r>(?9V`ZJSyJo`Q>5Fm&&LN|YDx|-8aujAoR^3M%*0Ph~HlS~T@D^nako?Al
zwXQhr(q<=IU+{>{)psf~;gW~j!CdZKe_3_ks%pP;a^2q>?f>LC!mEb!fK?OJE2eJG
zj7<O9p?+sQ=JX~DhkQr}R%j%p?V{ql#zBg>M6L#Gq`|z~5XI-dvwU^?_8n_gXN+2G
z@^DU=yu>r(Ra*?fgzCBu354l=m<|M~LJH-(;#<6~qK`!%?Rr1o(Q7s(&12<2f=J<;
zSkjYvpW9-%B|UhXkA^5=LRSH~8+)M@%A_}z9&}NNX=!_6F`{927eVQZz8ge^)Smy;
zRc0KtxCcR;ET!;)^n7(GBE=8ZJX)bXv&~v%$3lXv;{-VG+Z#)3yJ)yk;-VprOt?(4
zC>kltygWZr;Bqtg)fOcdS%qc(R|+b2cNkQnZ`z2|`M`UHmLdUB!2g1sqtjKDlv<C7
z?5=M%u@I;XnyCFnLj%fwAvtAwjm1;k?(<08hk4A;a1d4;Fb6ccD(MNg;Ae?D5;V^5
zuRkS;J`YC%n=FP((0gnKm-y}WTfW7mLYTuju>ptQ`cj37<6PcC3(nhIZ4u`VKqUcP
zb@eXi!FQ4!N$2QH#24%bDtPwcN#ej1d)~oaF`l#e#Cv8e5ad8go3WyG46LW(75mf(
zZ*L5aL!~D<+YJ}IWOv2(BctEbGC+_kD2ImUSU2lPywYN9I>ZpB@eM|x%;r8j5_>!C
zW=Hj9T&D2ewN`;3qtnTv=b*6XF~`4Y8_khKcs(uZ^r3TM>h;#lyxM~ZYU=51L3tb?
zD1>41>K9t<Va-1V7&@7Z5S9_LPl1f6j<jfdHfzsI>u+bLe=C;_1qp&eNEahc*uSM_
zqxXp@TL#hnp#YVT649}{vl&kkX=5Ss`92L2<P4k6y4LX`{)E)#rMJLv1XvzHEAS&+
zAs#77nYv0_cXjr?RGEtIkrMa$3pNH}+)d)VTD5Nbr|$gkTq2BXLN8yT+UMvrpFM)F
zYHT_7MS?sGvQm0-=p+!{^>z6bqEI4_Kh_c5bnM|cJKt#;pcRU=__oX<36KOMM6If>
zk$!GDB~{z9ATIddH}wxhz#am!lb*~><#*oCxaI4soXf!Q13bOp3X`Y5bTgXxtjzE2
zhk+p4fMw<nx6G<O&Nh<@hWtnl&kTPj1h!X=9xY^QvwDbPY2N%T2JzMIz*nmXnDr!;
z5W?jW6MOa<t_c+(ImdE%Mvv^TG7E^!5yu`Ipy7s|AV+YfHGMB#>UwnJQ-L{0g-z$_
zG=7MZ7pn7@CgS3L1L$LJTQRqD-uXD{o---TPon^^k0DU{OGBlJ&zk1!@p6c3_XD6j
zxJ~aixbu~SDae=(ALarF1DGB(!6bs`Up^2P7xXRMM%?GP3)dUat=>1bcQ)l`dfdph
zEKK)CbAfP!z69osL|3wa<)^0il18|QvIMy-E#O$kx0=&s#)BzM^KA<YjOLB~jsWKF
zDBvA6m>5mG#XE?O(m)jGbQOq`qScU_^WgfHoWU%)#RxX}kOQpF{U&&4ZXhr5QNUk_
zF6Gn4g0f}8FIku2u(`f@su}r?%70i?9l*9MOul0=i|bq`y&oC&9MSdC9{|GJY#QKi
zP6?x?n9Lm*c>t%Bd;$}5(u2s6T+IuY0$==x2+I?dm+6KfeN5vj>5aAevJs9Ua(6|2
zpfo7AZ!16Nx>ywRH)L~pfrp?-fl>fiHT?|*^J?{%Rwx*X+lSr*Jp;`}5zknOV$YlR
zkj{<5evato@P&Y^3yC``nhTA)_kQn!7|Z+_9C4!Q_+IRV=0BbuM1@NtiZ~$G7+oa`
zRCyc+*FEAWH;vYl;{JktMWz06ABcn#BN{Cj?jM1fWw^V(eL6_}u6EqySv!zS<TsF<
z;kKd@l<hN_H}4S@CE>z=csW(7fhRUkE4DvOjA@7pfW(*9F`6JzlgMH3^OMl{jPPn^
zU^Oa@R22hH8HS2E$9L^NrGb<a!mudslGYcfJF!+GAbzor@N!S!%c+C{nJ)S=vdIAX
z<xik%kRXHT7UgH(`vqOPIc089AZ$sP0z-%YtK!d{O%>e8vL2SkO%eEN<~Synq>WeW
zBPFgbjNJ8zJF*;a(sME@R}3lu@)QG$>?`7j!7(U8e0}@KHtJn^Q}fZqSrCO)_BDX@
zrN(h;OQ>BW_4doHTpl=~zM&7tJe;>xn$H$f<eCTu+eK`_QDJZohON@*&ZigRNOw0Q
zC>Q=53nuJSw#SI7Jzv-(5oJw8iPr}z1!TJNrw4_F5;2sUPZG_5?gEY~?t_PtObPsX
zOCg-Z0|-M3)p-qZGM@Wu0`5~!pA+1*NKZ(DtCw^wNKWj@z(&KF`VsM59b$lj=X5L~
zPE}e-y~Gpr6<W92g#n5<UXs&$+rz^ZNvzd8i0ZENI`~3^Q_d$&)SLB_Qt%xNL1D2&
zZlgpa)(urKg+zp@1Dzp#$c;3pwA+o8rGy4ZAv_c{^=V$2G^eG{H1BoH5Ije0x&Yvq
zR5LipSg%2GBgd;}mVd{COe&xr3sd^5hknl7JeVU0i^u^KHM`XL@R3cx1SQ>W-4?uX
z#Op%DP@Pje*Ox7cxiUT=N*3wiaCGTUHeT?ip^8;>5G&V%sDKE{l$xl2xn+`{oF$3B
zT(Q3LjbMZ0($LiKqs1P4@BSzG8seXIhRKwUneRTm6Z`)DEeWNYR=b6SU?Z*Mvf4-0
zW4SjDhnG1WJu1Ix77_Lyf-}#cSr_Hzg?_|QXvi0CLL>+Y0kD{Lr=^b3`7CPYH+HwV
zQ?P61TxwZrnqAjkMMuH*_9BIUWIV3*cTcNhojE(bue;vc#hn~Xz)2X-Vs-fwk5;Ry
zVD%PBIHFvK&J6tLN09PvH#s2v^7ce;{RNT2{<y``yf*Id$6q5ry;U)Wq}wP}aZ{*5
z|E0zFSM`rDtiijj-g^@n-Zrjy20`pAUrV^FV#SSPgQChM5hh$5h#zy+&ObCf3C!{y
zM3~^a$tb}OL%t?nhpp2@*-57*jUWH)1rXB^pxt+ohKWITDy*{CHn<e}y_PT{-HK;0
zv88M;%-FG=lLbLZgZ@PJ=jW;&o)rF!<Yc*_>NqY~1KL)_%5@<|fp$%Mp^$pt&xZae
ze;ApTn|s}2iM5~lqmBNTy!~Hw6&Y%r$~f&&zDglx=fjfG@N0$|jCYnzdlnXwlZ*2l
zP&qVo));C1Upn#AOMXB8{(dl}3oY(Q5NDO)d~qYC^dMfF-~LIAxbxtaTA3*S8VeVK
zV4>oRric5Dr=>YB96wbm_9%PS$DjbI#*42SLHp6oe?ws*VB|k_*DTu+ea2?qFT?s9
z;peu6UdI~S_8YV>dYfcjdYjzW^PEhGJN7@&@JoiyKO2Z_T6zZEe&3Zt2wOyxoVh-=
z*%BaAQb~E6<Gr`8-i~E`4s|hFS)vc1X{Lx4XC#ZCbUbif50N!MRA7dqz&_tsg9|xT
zl?SZ2Cb4a~`Zae)y1d!88fR_$(LXgQqRu$ngtaqUpG`bbBd8QJSHFlJ0j_N4@4zpD
z@A>El%|I`9Kj)2mEXGztVADw+P76z^O@1itVk-09Zfn3*ypW~-a$`KzX36tLA>N}<
z$|0z~%j){m%M#ayspBccQOAjbu3$pyTyd>0>G3(Sr%^J!8-iEEPt(Ljpd4m3o!yOD
z-+P6HbwzV&@FUMYX5@8L0;i|0?xQskvm6j2Mhu`P*>r3a6I<HN-HwzZ88_VxFG|_x
zu(<8Lg1wCoH@H)3B81Fm5W~yw?9P7HT1U>h=}iSt)l&X3d3tL0MuM86E2RlUZM?r=
zju^`=Lk)S(`$>^3F5eo^W`xM+Aqq~ZI9jYfMrEH=uky)FHow+MZ=$@M&KYU1P?Tx;
zSwpEQhn^z}qF-f}5q7ap5rr&RgM0$edgJAul(InO@_Gb25e!;`d~bF;MR!VotVd}m
zvpA`(LNTa4j(Hp1cjdaFKjIj+<U7j^UUhn68m8cZ7z#mb@)1mf@Hg$PXAq!)0GZ_M
zCRuymiHo);Evs8D%8sgs<>~d&Zok7lDzuiIQMUymO>RxWNY+C{eLUDA>N1cLAT0PT
zoSK<_K)$!i1d<~!@ss%Gm(389^;5NtebS7!!D|~gmD4t6(P!dZjWR!p=biM{Ge22~
zFe9v)O|qd(7;yS-jiK&oBtbJ}f`s74R~!WI^?DAPj5@6L<hK=kGXA{AB*2h2Su9wr
zIzqU*Uv7P++8BeVMtT1vyiu=m@N0^L&W+C5RECg=40%69e~KGpS8&U_JvXaX%06DN
zFTL%C>C&a{D1(P6*yEHUPW(q0ptv3GOPoVQ18p!$)a8Qz5kG-tHg*i}+d`9MFn4)R
z?_}Vs1xA!HBvJ1D9OnCcrrc6aZ_jN$e9Cv!lQ3c}kf(Y8+!+MPZJ0T{P-t^!E|mIe
znUcCp7j{)6$kbH6gh68U5d}t!?s2^MQs`!3pExvrCqu0>cy1*)tE7>8RxU6U(N`os
z4o?!=R57^f3V4>G8ov5i76aC^G>5I#Jl{I1N2ibdAhu1$>t=n=|Bg3%QH$yphxz&E
zndkS6zG;6&kdj|lLYdINf*^+=IDO+0OhzuqCf+lT6K8+@<Lia<#JUh@JMtqnJN465
zMem8SvqT;_4{Qw{`}5DN{lTAR5PS=HxHRl5p;{WZ^#)B?sag|tN>e6fnHNlX$Js5O
zZRg7ox7|}14JviUL!%QZtIuCU(kk9O(PXJK|I|n<SV@Ga{Qzhx0oV^a+pmW)8Mq+c
zPqBk|+r{p9ux~Z2z`Wg~($KP{7v@W!Q9Qr?%AX%pIF1zZh|_6JhSam)v-;753&PN7
z!fLkOKN6DBUTdP3Gfr9IWRTy|pXSE8u{o9b+?iFwBtK=>U)Lu1=(=)mdRl;_<f0FY
zJ+<e&UAx}wthroxRYpL~JJt$eS&)HhQ1h{<(fNj+0#idU+MxRJ5GIV2+uPLT<da~4
zg7NW0F_FcpWI~%|*w?#+vzO)3!iv*2i`G9g6GjN7KW={%K{V_QD?&G@*{^J@ZC4ss
z<=;TZJ(-(sdfw!^KY<=u%n?Ms7e{M_I^VpbSub7v#*AOrXhKSG&@nO+;q?oU*;Gwt
zXD7}~UPs2giOCQ_CT3tU&BOa_PUFPwqBMeI65K`_rb*!CvUCUZD~&Qrn5<6EdGmxP
zAy4cY9yCLQd7x^@Y|19HBhzOfl)aXVBKr_I74MlzT<!aHJb|N`uxr|Ib=aA6Dj`$j
z0ZDy7vj9s;GLPqv_!$~HRs_{3_D6AY1;25^uSvYCbBaN6$}tH56zaVSQmy-1Cl!?>
z97(3A*)JEK#z|wz6uZ!oej23+l&AA_1W{75qQ65rh=B4JEEv_G04Rc5s-A#C77X&T
z2`<rhwUPp*e<g@Vv`wJ^-ktDzDP2NJ^4TdZzGW{WIh*P(qCh;zgid2ma~HchYp)Hy
z%p7Pi#n4$?LvfnQq-xqs-xa*6#6S*w0@pWpC$3jo?UKAMPv80L+a>T)(ANf0Ac`!G
z7vy*-2FCsTE{&f)tzdC}>WW5AC3NZOZ1nejc9}PLvjstdP%L{YZ_4M7as#$^Fh|gs
zMuK$Une+(tf<_Hx;%6bYm8{c#BVmm%A{@QqRE(&wzk7}RqWYO~T_P6g(BD#LpLZzw
zL<mvre5{6U{8o+Eh2vr*VNgy;G2`}+s4fj00S5zZ6Z&e!5n&RDAKo+D{nizMwSB0a
z_D)nZIf4oVwdpna7_e9Bw*nZWsGC-V<r?2YQ&6ON7m|KdnNIkBvrHOwrD@0Ou4!A<
zcj|V6D2mL_PM--Xa*ZJzK(V6?-w@ioHk4r=_)y8gMrreXXBQLb)OWKrymVAJ7*T)0
zI#H>upP%%;tTp?pVT5QD3dVt2l|vCw-GS|lbtQ?~Gi7B*3QNSWXk9<un|sMzbXIqp
zS{4}=B5HX*RW;`3KrdDG{Hwk#zk=smd7Myg9s~`@bU8>q!vl%PZ2X`i!C5-w1AOK5
zV#7D5qvgs^DwuXC$Pb87qoY0%2S;90L{di^oj9dNT)!56jgXK4+*ghLdL?w6-=1d0
z+k8~5D3w)&+GZa%f3MMk$MBW@Pe~srD)29#V7}y`=4YLp^b=FbL{LZ2l|eV0;I8Zz
zx>$uUY~t01Bf&F=TIcr(ni%-16O)sB9oTfVw>n-sgfM`>1DV#6C?UdXE)SCbv`RWM
zn>%lO*sP*0{#Z&McGM5IaZT;0b7{lLV1wFrE?$xOTv61MPRGduR0WnL2;ayXD5Nt=
z={lb{Uh-0#2EJx+#c|oZzIk-)A%=t@bWq{5|2hR4iTQp|!^7qQ!$}@fjR^7^Cfc|T
zSMiYezK00nhkWQEY!v^4=ZZ|}gR5oDlTwp=zN!aLSge9VZF*nK51PB}_l84pdw=`@
zfsMRaLG0KPHwFgHGnY#*hUW_PO=h+a9%>Nvmb<vJ5Cz<H?b=<2-b|@?zB?ZOmQn1u
zRT<ayj@2^hU3pdwCP}R|5m(@iatk*I%4jopZFbgJYjG#I6KIooo%@fpN8S$`wG1u7
zd`Jdug&Q`lgW^q#2-}+(XxT=ho3y*28UK*bL}J@HiU99Xq>4ww(K$(d3^W9pfce6{
zZmGPlJ?&95!%XvOVmS2*amY-aZfBJ>u}Bx?PVWSi;qnn(Ddv^$Qzb$lZl=JkulRyK
zKbplNn@Zn2Ib(Rg#gOzGLE@0DhCTt_svBRZm{5h>n4I}*9e#-a?sbXH*EupZ84PZm
z2Q6)BkFGS~@sjrKUpJrZZuaho>ki((k`P*%Rz8AMt~m%iP`Ca&xdE|QKKWBf4hQno
z?6fZT5C_AnPW=ZXEvlzqzQq|n$M}&aoDO0_a3AG!Kh`D3^Sx0<Q#6T(^!O&`mMJb%
zRY_J-x+X%1=5fJrP&qtBH$f=9^!=-pBh+!(2|5=2VZ!!zmU-pmEEX{Lv?h8D*AtXN
z=YmJa<h%s(IyyFG@*mOy@#4_y|B3`5OhmLUGzB?P>wyvXCU3FDi}%$*jxPur?wQVc
z+{k>6Inls=<h?rR_+U0%7!SnecGD)S7dD0a)LRgw{q9Prf-{f}+jXC`#$5%PHj<_b
zkCTXw$xd?5rS%SHP-kvNKeMbI+qXB%%tR+8Q%636QHu?PeFImygOLI65CH)E4HbdO
zROtAcmg~>&ITER=T#J~Pvd>`0<E%eMy0jGPnjSyrfWh{AhiZRf{CMxq{7_A_7!6Z_
ze8=p{x32I=tbMD51W`?vEtzi0r^c*#{*{Wp5?lH<a_HoR?~lFN`4re|zwekZ+PHZ#
zFR#9$y|s=BZhbd<0uA_Uj$ecO+J!FIA!4)*(pMCmss!Av)&y?(_GDhN^k&b2w&9jP
zM(ctcCGt(zZjbT_FJUPx>~tvmr`_l(xwv(-w?BNr4dKM6i?K=>tJcxGE6Rb7C{P??
z>GX<)zAMW$G%My)nCK5HrujbGUU)G0Mqt!yL9hfoCF=H8!wd@Q+%`j;?=IEy(`;Qu
zQnfRw@3d+qo;iCkYB)`BPfT})(BFR@dBxOZ*!dA2i+z%VgC2z786p?po1BJ@8=puC
zn2{4DYa4nb-q%=A=+Yt*skYLvL0MNuPSx=8W+=Iqb#duQlgFyK7{B9x%SnJ$^1IVi
zfZo;cZs=VJWdW{CRtKxM(EP*KGh=RzG+!;m5w?LcpzRpN-~uL+xYPP$GP*_M`rHps
z|7#iP$|$93h!~we8S|w9+-DziGIePL!E(QsPM)IAICh$}!lEEn-VR=;-=xUQT(oE&
zCbZEcSv4JrVl|rm>K6HygeVdc>4%1dHYe?An~R^TT)$w)<8nSnnHxRxE8BJI$`O>s
z8JAk<ytw8DLAafU5Wz^;Q@=5Vlglofy%OuNc8(1u4m9Kb1l-=9h1Wt8wJ;DyF+KZQ
zf<nS+Bd&mGbPgJVLag|>j@P15b;9Myj!T0<5;IS#QJ^Y%$}Tp+p#VpvVWZsU6DO@7
zZJeO2)WQ229+Qb$zpRt<yoN0m{^(asO=s=8->44W4+~GzpjXv~&K-=JPRx#d!InhW
z)}_KWQ4uzG-py{s%6R@(*0H~`ZAYE#;hew<iL11n)h2e``QZFrdxDh4Q1vAHqtK*Q
zjwZc%h4#>-<|-bfBK>hZT2CIh4%+kGT$;@<9mP0|Q)Uc&QIjVii-e#}=F_HzLR^zo
zJzF%fvD-@r*VcEJYU00SLLu;bkX?<FfxYfX!5o^+c4u$rXKuS#@8nIyq$D@d4a%CH
zB=euNInHjK<D*qoRqr@;mUCb62veZ>Axa8>AG(3X)=au9U4Z$zauMXk1f%CkH<mm@
z>*Ii5e*Ey~zE*f0xjIi3Y&A{Y<hEE;Ht#gTUdvYe%h?#DFzj`lDZs;w229tKD9M<y
zPmS?{pU4j&n(qzOLME<&1AkywH_8<DJ8aqzm!jE-6cTL)3%WU6v00fV<lyhL<eH>v
za?*4DZhH{N$senRvL}ckKyZD!H=}mfIGGo<DwwFbk4RM0*_!k{7d4_XX;dzKhfnSQ
zVeBoVqHM#iVI4t0Qo2i|q>)ZVIu)clrMt_K?hfgY?(Qz>9*~BS&LM~XF7Eqz*80}_
zzCUi(@C(*l*V)Ip_dfP9ew6Oyz!$%t{3E-D_J0G`x0VKBuE8MbySB$mU=|`}-1K01
zLh7$CQ{|Cu_wGJELDh9+yl->ciq68;>m|1W!)zYZWvH?HS6{`emA1ao<+-t~xZ?b;
zukuUl=~Wg-`InJIb8`g_8~4R5i`piqQ!2oqd%xixcePe-CJmU>3p4L^l|}1jS2rUj
z(G`ze9X&U(NM8?&KEL&MN#vPOw3_q<iQI*TYxpFOVB#Uur~fDl0~?~u)J@!!whs<q
z(E2%si8C(Np;+;oE}pEv*)Bb#o!k7h_7lK*-IF@_OG(}G8Hm0{RyD{yXwKVA!{mR8
zpvTb;>L&}CJ-+v+4kSQj%HZ-|hp@IUaQ(+qoHAM!+>HO!0cFE0^Nkowo1^P+lmc#-
zFEw0pYayFg0lpm@{z@#E@2$qRX)VmnQ7b%mH4HW`T^xMIew{vUv+%tyC04KB`pQxu
zs^3z!DA{)Wo#aLtD-`QLGncQx&3Kwu+JYwI##xV%jD{051E6ERza2dosfVdhw6Ii7
z6QunLZGIuNcr`9kfbdzRh+H_MAQrYwq`mu}qaiUb`i#P|$Y~$YT;QB#7NY&P)0i?E
z6I}0+7lU^Bn5}C>!b1Wwb6Uog$$m@H6<Tcp{^~dG&-z&Yu9Q?=(>YV~{gTae8vw=K
zNfIu$yE6w4-xE^s?QPhtY*t`|B`v4kYIDZv#~vj8R7d<r8u4GopbDcNLvMRDwRsR)
zg3nq6Kq@2OJ5@;zNgsBD^-L+hP+^E?rJ?!zh6$+icqIMB(d8C!Iygzm_Afpp2CcU4
z^`1<`id$+!4V4jP^7MLj%Jddz2;~5w$A4P^Ur}aEB=`I76_?a!4~RDv);e`oNFy`t
zERIeYJwC2B9i^|Y(AiiJ0-G-YJ`0`*WY?Lf^lXjne>xUA?><@HS3vQ#Z%B)LtAK5W
z{>$j?rw{+_$zb$XPY(uwXJbE3%V+^G&++4I<&|vYh>otf!p??>_f!1qN-Xijw_yYw
zy2$iwy_@>9+I%y*-c|6Z{wrQN)l#<Tyo$3KKP`3P8R9?ck^j=+C5RTf0H`*1T}C6l
zGTNXHqTsWznKwS??vvpk__Ok`b9a)PDm)X7CRt~VyW;sfsv8)Msp#ua!NEBe->+_l
zf4s$MrR0xl@&SMVYHJaTgZ$sR8o_~D>FgtGi^lff--I8DIa_QZ%Pf89(WyZ4mTxN^
z^v&Vjt#8Emh)QRp_esryMlaEih2bJ%MKjG~+%|=6odny8=)<Z)pKrktyfk1){Ut*I
zg=bHM*xoPp|M&vPfJmk+v1T+wVAp!H%YixQy=o|;M1wV{u=_{?L!{C-vDb}j3$FgR
z8QN^|EIk%2tCs@-JT6`a>fX-8O`QYzW0;w3@aPGVMz6nqL<aL9zZdsvePg*nLf<3*
z&#njf;e+P=asf09jK~VFff?G~V;F3j^Ig)_H__tFFGWt0X~*@vb2*8LiQ);5&?{?9
z!IMrS^yF3C|MQ!k8uv>jD<6RPM)~tfw1X;LmhSROT;G%fi^Zz4Q~v6a=I%6+b6<G>
z0lGq{Ten);JZ|)34*|dwODqe&E+gm)Ta;YpMrDX7HK3sVUut5hn9fLnBi<%$mJa^F
z^C7sm(w&X;XSc6G*r?TNeLoI{FlahLlYB4M{4gJ?_Qr_+UlB$$A2<b1)7NDzepD^t
zHghBmC|Jh?z*GhPMpq9f(YL$NEZ~F}vORofk;pK4aPv!U^Mbj6Ik~&J<}rhlbrkw~
z@(is*kA$s}l=iF=7bsE4|G9oAyuf5G^Xr@Jp>fcwMW|(z`0b~P0>hQnFabkfx+8yY
zqcb%zg#TCHg{x$l20(y3oQB@e(R&Hv=!ac=x7+8d$St<ccFlgc%P$fCH>%^Fx1mA5
zoWF@asb|om7{t1PXz2HK#@da&m7H<M@2ODKhnxp+d6Md`3flZ%Sow^Y{!*ho5;_Kk
z4>i6@M-e%6``d`^z{b9#A?(7MZ%CT)|NnNse~HGX{c*TV%XC4b-9*VtWD};zLt&2@
zx>|u9FGftqsxZXA6k}kDfH6gIxywSiLuDUt9L>!c+>acvZBb=qne%23hosHTWu-D?
zWb)`VV^55yG(8M!A|!=iPoy<JvwO%>R+$EFp$1sZ)mGBGp>H(DX3X&6_h-i*+T4ag
z4b?uG?MbsEv~4|DU^8voWFd2pWK=V6yiA#M`oLP<Yd3)6?`|mfv9x~4IWz(6uW_c%
z%<!%WfxXWNU>J13_U3$AF_YjiS)>U08lPqW$uOg#k7v#{jDpo$r`2oo{%Y0N^MgZ@
zX&~Z;Wa}~MaTskswEh$X)n!i@dh{H4yb53Cx=rQi`BaB-p9EBLrdxGg^$xQXva9J&
zWjB)8$5YdWH90ihRhjm&{c!gsKW=#B!xz6dK``3UGy<o)EbLCW34YC>lP`x&kdU&F
zW9luLWqJz>`99o%(YeQz{DvII-^wO>aW$*DWL?Y>g2C{454E(tF*l}FBG!rr8*A&f
zixtn~wi<S-<bciz#0|%uxjv&yPFTz7%i4-{RBfCVpS|oL@|)$8potn)5X>Lk21R+X
z8ai+hQ%5|_TZC6AxUxdpvE8>VbhdH4R#p_DqK}Y)H*ejrT(4JW@l{gL^eS}VXm8Fq
z<G$mxIh+S-;rnZZM9AZO@!@V;L`3~IJC$eSpnWWE1G?m1m1Q)Y|LHTM&;)ij(%6pX
zNnHL&M}~Cn=<P5SA00k}O?8H;4Rtg>7_L4sx3F@VJssKJHJE0pkzT`^-YV}do}B1^
zY7cujZk#t>(oAV8rdDDUBKqhc#<bMlSmt~lrI7BTvw6X&hmOzt1QvUk?pB{cVf?vW
z$~?}^ZhDvZRfpCT_fIh#WJXl(p|$g%eGn;L?0OjXH?k+Qqxu=a2FZ$9-*z!4l)Y(;
zcqgTmVFfr!ir`@ne?ZCj+<nuLz-20N0X5Z^9Q)B%Ee(s@b1S1c|8zyn7q@<O#*@ie
zyu4>kZTW1O?dsBTpRJmz<aK3<GnY)Ch2z#wv-&jOhwH1pQdfG_t?Dx5Ub>^OjVsoT
zzRbRy_TeI|Z~mPbo<~iG)h5G?tnU>feCOmN9@RpNyt(w&GT`}-N28cV#;>h_@&{@I
zuTM{_r0Dv&n!XuRdqjQG4<d7Mb8pRTcA_zwsXRW0!X`fVz*0D7W{Q*-ZCVcNZ=rt|
zx!*pE!w_F9f(zQ)9I)}=8;wWM{as>@A6vjCEEjD(Ugo;IH*9_MhT08G*!F;6SGTE$
zhliOr!+H;=y@6VmpWlIHU>l)$?-(n(=v7MbECL5YI)W5?Z<`;(=^)<B?X)%YJw?bu
zMxd61>fyu}FJ9=3x6>-STlbS#GpP5tWuB<Fvd(iqbc}rr!}V|K!ZIWq7;%$xwgu|L
zll0#HiAu9y8r8E|i?>W?Tu@P{_PEltb$Sa9NBQ5pf&fAAL5*X+l`z)LDv7JTFgrdX
zd2&^rtal^K{^XQ~!P^%|4(*7!(dQ&y3uqW2bY8q~5Fw3PW#&lvDBsPJ@Np`|UraHz
zz0$$3xq=q?{M^Nd1|?*p>I;0dv^=0fdl7r)*TjMi#4>ku+!<gX{?h#fnL1o;SaxHU
zKi&o!xA&Od1|}WDt_<$#2i_YC$IU3LX{mL*6@)ucJzf@*ZLmo$c+9A#K1@%Zy`z9a
z!$b=Y#t2=Nnz0eV9eBa4#&`VfJGa;B6BjKVZKLA|fz(*8l!8p;vUCH&wo#9^@8jDS
zxFz+^MtN4PCUeAPQ#fx=%pwpW2~lDm#_%`48n%IwtqmPd)e04C{jbBB$dwZa)G=kW
zTwv%M-q6(JpG$o7!nA2vu6?)W3vzv&OyGz4{Q(#sG(eKnz86Tx-^uARh{(YKn;~u-
zwIdDusCWz)QFR$QpLGM50JZoo>eZdB399%P2I7zz1!{boBb5pHkwCDji+s43t?AvT
zYQ0TLGKOEGlq*+qAy-1j;n{$Fx^3c*X#dLRU^nU+1sIMQW2Q=SQw4y2KB(8uCJuGV
z8i+IL6D@|%12wW1T>cdIC3Iwaz5bmb$`J3v?|AcLZkw^F4v_7*P7T^8?I}Yw*r0O`
zH6?q@Sc;!4q+>ItTUJi$zU+=Tv=t2B!fQMQba7t$W?Tsd#p*E`>u@;Ud>oGp`oY~@
z|Gx^dk=cT#@MvS_t8__guFLq`?Fx0r($@gBFLaevhV)WxzTI1XHci{cmJCPOyA(&f
zx;0I&<?icxh)DuEU&>h>Fv<aHhdi7r4_663;F@i6te3;OYTvqLbnsp4gsV}`QaDUN
zF!4*wK7v1~?O|d=>i#ttV7P?d=0S3lFnrCgZU5Vb1&9iN!W#EjZ7g^-GnjPOOSzB#
z>su^T>-wRoqrh=|v#&1IV~1+36c0MBm>DUH2+E1-UKzF2D@hRw8tUUgI8i~az0mdB
zalIHY>g3Fr4v~5RvA>&|pz!#jX{vR5yWM)XnFU)0l>-x&;@x35-NR)cZo{a3%1_y{
z(*`{+7T&{g--jBWR*OatV0DDTmo_SiG0Y2pAos2g+J=)0-H2T+IgX>QSTRf8Op)ev
z#xp1{7{xpkK<ynhTgQnwdyi5Iq$q{)kALRjWVN3bsD=BSmfv#Pi*VKKqnAZ6&D?gk
zGO%jY7e7wolIeb=Qc?!1Tit(SsvnzObpjHqR$hx}tu4`@XwBgc>vO#h77yYHy!>pN
z?mluM{Ms})XSpqI3?=&xM&<HO?hH=q;ju(mf6AXw!T;*~T;aw>&^^xqyRf1Txi->z
z6?Xo{*6o3-2^hqID3vCL2YX&~X2&MR9#Cq;9~Q42sVg-No$lKVO)Qp1TAeFDYv$aK
zb8tm}27%1vuaJ+uWXIE}F=h*~;ef{7M^HgaVS^||)Jx1W6CPMEA{x}6e}RhFe)DkE
z@z`UQv3md`sK(td7$R}ASDRJrD^<LDsrvvCKKhm!vW@C_SU0zmC!1utG1^K@`qs~0
zC#_fM#qSIB*RIv=oGa}EHw(Yk>)DO^56Dq%j-<tyNJ6Pn+8OGbzKI<!WhjE-w0*W4
zXa2q+S9)`soMIa2;!nkVtzmJTEa3y6j$DOELS;i2GYEWLMWQ$09IrK*s>^W&GZI4d
z5r4XXk6Z6HS$(4vW2J66xLDfZ&Dz7)+nJA(ywFm3n>o~!Tloz_^=Y$QAGKws#LDlh
z-_@qm!A6Uu*8mC7U18?J?DbWZvm}k_bVdjBP7*t|!GtTQyI+TKnLHNKFqYy2MGxRA
z<beHgycGGRP2N~Mv=v|t!R`(k14#RK0f>c;8x}q#FLckE_JUUnFN|yX&zb5L+=mC(
z(~*4WWU0cO(ZOdGUfym_yE>NIaqVGGT(p1E7zR#*h_H7To?wp2y`n$sSgNL7K!3sN
z!WaIBb143NLOtxf=qEdVORr+%sd$ztNH2o*&bQJumxz8A1bZ+_C0xUVUR4!gsMytE
zHNJhY>8QnjG3yvkEu3FhUw=gE%3!%7i8AZ>Ayv>tFvGMTt2vcaVs_eWJ>n_^htB2{
z4vk_h;%7hyq#<FzjYP3Gt}YF(;XmucJ)r*0!;9(tz4M)Y?=dEBFf&(CKMrl;z=Z&%
z@X=CAN)`w9@A8(T=ANO1cND*+8oNiLMZK83Wxbg0kI@2{W{6RG<05#%=t$Irm$&M;
zh^N>X@PeZ{qWTp%WbRq2s`O3Gy)r88Wr*hRAl_BqO}3qv)l2q)!e>LgkV4G}Gg6Q_
z{x@?=zPoTE+jfpo_HrUEAa3SpIi_1x)^5v}sb?J+7?q9uw(4**DLGE@+lBTbM7PZ3
zq8#=&#y5;E%B%5)TvPQ8R#evz%jlxobp4L?#{C~od)EtjMvONeRCWKV8owc>k&=DJ
zX~-mBnSfoBny93yWN5-f;X`>9zqPv)mZuekPkvPP&8Kq^c<R1rhqZ@wSJ<Sd&z*ny
zspiF|3owo!DaewCW{Z54VCY9H@NP4;dovEP=ZG&2VXOPVZ^f%*&vIo|?ezUk9a{$&
zdRrnK$=gD4EF{XD0{Go7=Ltz$A)GVmXcYDxG53&{eP<bP3*&_w2x6=(ysu=Wjm%dZ
zFm;(L=`PNa&j=lWA#K>-`Tf|+ysdRzvLA39GNF)7EeMG0OMfH{6X-}RNZb1<>qV-K
zH(*<_P1?`W+UYwGN4fIFEg<a$efiimsDiEy-q>RAwWL#@K`Y;8e%Y6flz<d#nL^yl
zMrTX1*nDU%xpKb4)?!<!HJ)~VB|r2+;mcxH{7ZLibw{MJ+AXdY+fyyW(LcVlgTF22
zrcyE+8O1~Lx+YRuJ+^8CIyPZyU?6{Fe}mokS=1ilf=rpR;(qh4>+IEpgEt69c&8!w
zGM&Cz_*X|$S)22D1_1val{XIGNVN}*jgh114c(A8FAj#5D%aD_2A)l?W~K~M@5}fo
zR=DwcT~w<Dx&=DJ53MuHxJ?fC=qn!^i40QZFH50lfe%_>b!ILA1wC`LN5It}Fe^)q
zHeXy@TVs7EZUMVpluurb=fV#bFWpvyaAMp_-PQX!M|jt;X$!vm(uOMiIjr>EfWpW<
z1b*wTj~|&^+DjPr{88v#l`w&sAjTIR6&(3@0{#ruJ~mx<9o*nisQumj&{@QgtDvcH
zWxYiCaE7QC25f&Qg|T{UWx<+$qcLC4`_dI6xoh+6-AaLcusp7YZRg<V8+<p%O;?VU
z;}zbG7&IWJZ>-O(D79Vcx+x+|>-L{1Q@Vc<8r9-D<D0lX9z6@Rz5m59(*BLKL1<}^
zulDXw9dO1<q|p@dJ#c$KWfZtcjO%&?>Ig%=7RzhfC!Io!+3xbISE^`#dnUwujk%bJ
zDgztaJs_UtFErZiII-?kc_^ERLs%XDOyJ#bek~C}clZ<lNf78om;ZZdg-j~4uKc7$
z7?r5Z@zSLX8J8MMsquy1`*rv{G&AWn9<hpO>)3feL4PGLl|4VYC5Dtl-ron^H}2IF
zLnN|*V1=)aXpmk5JJ|NLO+XeF$~6rt5WJOG9j$UR{gi1DXC8p|5-1hyX+yG_)z(n$
z1Kal|lKb$x4v+U&eb1~-tv$5=IyeQZeAy&Pr@l1ZqDnH<R{v29A92I`GR8bYAVoJC
zGT)n^0N#GZ3$<?(^yv^z{~T)J4YFVMxji`hec+9@a)a%-xPb7`R1JaMmRPn-I#c!D
zzPH^Iz#^u_di2TEzD^In>Ph0Z`hqhnu73xIrS?0wmQ`oi|4^JU!S*wi)(@(EnMz|8
zS$OmY(LF-u1KLN*XjbqSsb#v=Uc<$AkDB`Ft(<!E)kPAN!ji%!&Rx#Ozm8R>g`=!D
zq+h-|3v8;qx)7;yOV)AL5~K79?G(4X+c5<AwkcI}{sZc;3_h|<#i56+Qi#Clp{X1{
zkK8;Y(9K*ox2~`L1gz(udA}ZBw;Z3kuPIZu{`W-(S-&+q0}r1GLyQ9l7V33@F~i@H
zfs}wKyCFe`A?#q*iQApa_%i9w-60exzTS6IZUPngZe7q+H@ZH8^!B6;tN;iN7|uS^
z^B~ZkK{a4>SpZ8G%Fb{!HaVy*|EzkK5q9?HW8k*W$kby;)PSfY@r$uab7H<Q(&;`N
zS~*^yhr8<+;u2DxN3g55Q|Wl$q)XmDH8rqrNR;HVb2^ogpC{?a{EtnhB{=^`5_F%9
zVo*b~NrBEL+Ww>92WUZ)!WV}g?0Jv<GM={0M6E=O5=SzDKAn#uBtVUM6|#cD+lf3#
z;@o(ei{q&8vB#DRsoo#?x+9e2@1m~|r%qQKfxIKd4T+2jS*n=m6nd=8H;+JO;E%Wz
z!jC-#M?ex0d91$KmcdYxrdCuc-(h}J&w(!71_n<hi4sA~=@G=%6x)9n<ZYTuy>C!l
zP`b!~<f|CtJOufbVmH=tir&OpUC!GZ6^cTj?RmPVQ(n<J5cp=6l%&pT`iljs?H>_m
zx@HJR-%Nz_Ix}ZlRc7<oB2Q7_=C-3=TJ=;>ugUxGL#ZRMTS?27W#>_xV9V3|p@m*n
zamc7vpvrjbw1U84T>mpD`@T_JrcN?kpp`MgGCnUkUm?BO!}U8;U#mnZs}{664B?dC
z?f}3KAQZ>@FE^yQr_Yl06CFdv4UUThlfwDvtH(}1LTE32%ScgSP0;K*qA_{|<nT|F
z4{hh`L&wH<E>pKslq3^8E4JiX8t=p*=$&IbxM2jW!h(6(naNX)#h8|C?#dStK@%Jd
z&gj{7Kw{I3lK$nAv~9_Oe(CS#z(PJ^Mqx=G&rNvns@~9N&3#4jn2Q^4ZaYg3US6{o
z@=LA4&&478(|^{iH>cL5dl+jU0Go;h9^U4cMFjAHH$LS3)+;}6coE^gPaKjO0hvhi
z`PgGiHDwY@`~9lw_Cs!}h)Q($bj+46tGoNWLCyWtYq{q+>Q1YNp?j|?$G*@+bAWL&
zz0dAv8Ny2J)_ZwQF^WpX<(4G5@oX-F679TduJXk8Co3UEOXe*Ge>&`PF4eu@5d^xM
z1=+|;Kr!pkgdk8pGk6QRwx6fhN6Y;I`}pjkosTN{f)5PWcF;Cq1|m#bVb}CW6cvP*
zNJtgo9l66miQJvPK0ydzCuD7s<BG@lNTp9z`J$~AOAV*$#K$~`(G9fW!>riB<6!0M
zX1Q?7D+0vSx_2_!ECHzYFS=C9H6V$St-zht&VVDA>!`M)7~r|Ply1zm)WMjKb!#5J
z6b-ubVp%u6<GY9RjW-ZYVY-QFfnA(&oy$iy#8@_a^#Di|)6wG*Tfq$TTM&h?g~B{Q
zwJBpqumQ|8Aob}sV-^0DlHX+Gc>Cr|jX>LXyV-S%fBgO1s|+!p<a|2^GFidYxk%+E
zU4y~bQWc_JIJ*R}(O-1aBnCcj7M<sGT%#`SQC?OI*(P$7<cZ$#wvk!zWmN6G!CGDO
zvb|eg$rsMu_MLG{JC1*3B1v6`!=T==GDd@_Tw1N;w;p+H4EXdHxQwuP8j@w!u<^IY
z@<6h`RJQ0H8QB>SLRN$i40YtOwFde-0ay;kep_WAf>|u}tAnrZOSMoh{>1iESFKiG
zZKC6Mw(^pna->>BWo5(WO!gY2p!@I7SDcCGDiM%N#k0&5wiy~On2Cd<%D7Lo!=g$c
zbZmCsiU61@ll^d`*;F<UdiQZR)({nq^_C`HM5HytLx?UqUgj2kzb_BogkkG$gY{^p
zxR$HD9Uw1ho7&ciN(uuK1%&VJFl$~hoovh;dvD~=BF^b`oJLRyQ?@pOEiD*Nc8w~^
zcimoUHFW+-Qc#Vqu^|TxY?SoCqnXUn?podj>^F`eSVSv{YPq(%+MT<)Z;}vC<Rc1}
zR9WYnq6j(t037vZr=oN@)P}tXMc(!h4~fm|zW}xl&*&f5Z6(UR0OK9Qoj<{<lVElT
z8&#)WL+m(V0uAH}zTSW*L7AwabbdAT?rtH{qBa}((_{PmLyX(wPSdH<TJ67*>3yu=
z7WLJP_&D1NsHqyxe3t0l{2cSUfE)WO9g<EPrIKXyjjaGAJkGOqGa=iRnfmoB$eBBs
z#+>Ao<R&wn)8uR$$&ShqL?LoBRS7FB;~;ST{GuEeYk)3yeKIfMhD6U2$IW<`%)n*!
z?@5AeK~UFeaUGYv4m!eu)<B@zfu{w!1V?Wm!b`Py)+Hs91|ZWjD+2@@&7<h$NwERq
zOmPa&Ck$Lf3%AC1lKHP9<uM56djF$!n_dK9G49Glo3tNHH=7hT`NmgQwze0Ld$;%J
z`ePVZ+mX>UDDho|@qHyb`2R)%iJ(f3U^wx}XV_I0=_Bi`m)(nUWy%a(?)Fpdw?1SI
zV-hz1qiQS0FBDAL-Q6z~EU5DHnzbM<SEPi<wB-U)>+7jjX|2+V^u<sHyUSJvoY0@w
zC)Mp<vxammXi-PvZGqa~mi5TtV__2Z;<N|=34~{0)xv)*$E1pO+Erkyp(C1>;Fe0Z
zt^AJsmD#uuo0t8=XM@?bYSW;&;cLwK>rsQaN$%F7tBrmU(E^Ak1{CNIeKAl1K~DyA
zBvDIty$wZ*s8gGfzJ8~qI9i0fB}fC`&CCnOH<yWy(go-cG_|bLG&<oc_q`F$ane)E
ziJo-M<9k|#w8p`j00X2gA+_sSowXNL`j0=G#|=RsgyPrqeX9cwcPkAk{R`o8l>Dn$
zimzI%jdOSYM|~nlr^MhNk&4t$y}#C5wXJlg#|eI0GNjo1W1n@_O7z9%NBu0{HM1tE
zUmv7<(>GQZvWgr;Mx*uqMru`duv{_n$(;bYGBSV^i|rXX{W(=(b3b=dR<b;fZswd+
z=E320v?10*u+=6AP{RCaROcE|osyBw#zGCvMXI2&k<x@;_Q+U-MWRfR8u+W<`SpK6
zcPKtCP1;w;e3q-7j{}^1`hb9NgOx$GzZ#g+ou~-h0*`lRNKk3I?bbC-5nvVwvp!Bh
zqePC_O@2G@m&#IR=(l{{w2g<C+4<^7mD2$^&~O2F%hn2C-xmc;Gb#Wcyj?$@QTlhf
z?^WGt?9)O4d%QZ=cIbr5P+2`?S%T?L)}Op8q_Es{DWxynAF5IJ@px@lRQhuE@rV~9
z#29Pa^;c%t#YlAb-y^4SA2v^{Sa5c~FBRuv2ZnqG$OsfE&oAQMf33dq=mfue8x-WY
zMfO@1%?;B+NJXrD_ZYL~+i!0t!j#Ubhw7*!LgJqg;7t8Y**@v2!xVnK&94x1n++w&
zE9lF)5ZM&|jDk&B$pTJv6S0Fd+c*gU1Yam6mLmVPTVA7iMcd^<De^Uhf8d*|vzP9}
zre>6-AYd|}O%hc#J_)S1YY?pc;jyoStbOiI>J;xoYm~tCPqPenUOkP$z<*dXz+TO4
z?BSO7zQjxBlVei0XboLzUwT<w%@%p94mdV(&jZ2qN<r8`h^J*&1Kd}Vp|tk3C)YqK
z0CH94ak|fywy1=T#ruyGWVrC<h;eAlD<DA`OXSO2Caq2Xju_4IKfdCR|FB~I<2nxC
zfL{5V!qX%u2R`KfLw8VhLDh3mro{z<<tFHA$qQINC9czh)d|lM0Qf6iVl=71eIwP~
zH`q3wv2tWOXDFbP4PoQH)11?E<Qv()P5{yGzyN|IjF(AqFIyg4?8s5IW}}g|vBs}x
z<Oa$NA6Q@}M8^8oE_%1P{tJHVrg8RWP!eI%!Dr;J!1Zql{C|ixN-~fTf#M%d2F#_D
z$ZwxM(}16{768i&!73@fVdq1TwE0OlU}d_%g%}%6+Oajx5+$b(bb>T}hmrC0?y?kE
zxj+Z7oj8n0o6_#V1rQsu^-@0Nz&~0I76_{7OsIOvt}}aN<w!&Cig$BHJrGv7``mf<
z*NX<_0l8*j6m?<9uMfb!o*>FpFU*JEcUPzi#WP6T;UYXsQ}@^2l=|Koh{)1$=Ri?c
zV?fJ{j71;V`4i?ITeHqn2>}R+#pE5_{X^^uOsmeJ(Yn{c0}DQ|<o$}#ZxU3Z`ZNIf
z01F11ej(LA!Q-!P+$N|=-uL5Q*0eCaldp}8gzm+?>x|8(H?M*G5WefrS80)Ff%CFw
zX(+v;sE0P~V6M6scQ3yO+Mh)OW`*qSEb`d!^D4EVdZ0>Q%5p8hg>M`^B5&(m_h&mz
zx*&iO$jU`HuhyQ_9z<RA&8i5(+|J~|{I3LSoc^fo^R{LKk`p#<Fb*_TMTE>|JLf!=
z!$ih2kDhjG|F|rNsaX(3g-VGbJ}eXC1pKdS1CZutrR&~~8y3>Q`mtJU)V=_q^gQ}P
z@rHvI6g@#)Sl>J^ZGZmj0wO_gXLsk_>fmpLTkpBq&g2up!1TTMAC(Ir^WC5*mfe3}
zYk;D{s)X@4zdXm@aD$<_^*PJz=-1pPdxhqv3b{7yOf$kHt>cx-eg7kHXV#dgraBok
zDn~vn<K`diwzwbQvPDn2+kK~j%;n0?qI;P%F+E4r?tAa)kffE1z3^>D)nN57pUa}T
zdlW|x!N+wyHW5fn|A`fRrAP;4S=VsBw!-<bWLeQBvFiJHUy{OB#{d}1eHXoRdPX;G
zqMz;$7!p7c4B26RFq(KC9-IF2@!GR7fnz>iUby<r8$5#yL`KBWr&TcO80qjP`ZZV#
zdJJvg#I|JY4zJKkV7xLYLYBb#cXFG7s@l6fDfqOe<qG2bjeyM0@*yXT9~3`<q3-(q
z^0(_T4Gq$!Ku^D!nsc^uuSgAS{il5)D3f=qnyuM7F56|g9R-xx@^|8-Q@P>2fvIvi
zgWdSXzAAzC<3^&d#+gM@39g&+HbIG15z&(Z;jc7hyScN4*Yuve`%n>nQ!jOPL?Vk$
za}K@{k>4}$-K*ZXujHe)E*t<a{zRlo(~E?UGy8I%XI$^Urg)QoesznybysG^&Dji4
zUoSVx&s_XQw@yR&_1c=1P5##l08{`sPTRvj2aZFlkf^-PJxxpTe+4yY;!lQs4Y0QC
z%k1;XMA0_HSQ=7n*ZK^-WB2e(1+ZIYtv&x6OCJ@XBvQ8a>(75#e*jrOaY{paH`hZu
zMnE74WD;z?E7CTND`h#*;i_ax`eVXXlzRNQyXV}r`;ckO6_DR|Kk2p#EfEG>JL9aH
zbSX4*u_={Ez+oGbDN!Y(N`EL!HhM!+fu@^PXNI5wYr8?z3wHdrN@;`ZB4Yp!jLh%k
zPD`Vzi(^iFNBN$J0E3qPf#7{h{=zQga3#tk{tiL%q!kk4?A#*+2}Y%B<21L89-B90
zbmR903h4_j57*n6TYQpD|HxUvrYK&fN55W(#md=2?zY}m>Vj!Vxmqfqsr%N@{-sw=
zfO(IaO&p1|;eCmf1v_?!^LbhE1i#On*c|^&3qNpw;4fyidT&t@|LIM*GYXT=g*ww#
zdTn{CP9_Mfx8h(5$mYJNLmof9${CbECK<TRKv^V9jnL=BH({XB8&m(?{Z=$f9|U_d
zdd#doWGUZJZ8Qa(%k9QxJk7DdMq~LpH~?EjZ+NyGko}8JBI*){MI67Q{#cs6NR3~!
zqTIW*ndbAnr6=Dv;*&ZW7-;Eo-)|>3jTM(g>-(PlBES{nX)0Gzfgid~>qso1E}&6d
zdb)L?nr#ISElwjg*EodOlMC9>v_11UtS2)iykekzW1c=_TinJG2rG`ieS=0NY}Iln
z(Ue)iE#w`HUgqtFGalCvhb4HwDtx20Xq`lDv~aVsiQH0RyQyicLSwMcXi_r$J?d&J
zU}wXOwd$m&;S5dVt~L6iK%lCLu*ZbuYSUITru>hS)K8pXU!-H)V~Wfn?X@?^ygnR5
zh3bOa;g7Eg_cVRMa8Hf$M<&yMVm=sGG9HPAa_=J4d#0Fri`fi_)o|(G>iQPN%5Z`#
zadvk18=bA^S|UXk5Qh9VDZC6;;*)+cv%qFFD5V$n1jV)jMLdrlSjV*|h)^1fKkmap
zS4TvH1$G7x%YQ5U$+#CA?A*<m*JY3SMeerIkH<CV1EQ{gw3-33-vT{fue=&g@MoXh
zoelfy$a7i;(oZ<T;)R0d#T|h@ey>9LP{zjCo_%o`sF0E~Xn2H~PfwZ+<i9h6h592%
zT<z*V;xhxIK}=n#!9?R(OU0R|9}6F(4-m0uM;xZ~M@Nm{INpSk*yID|d>6RE6<y(x
z6=Ggx0B~e|umcMsbo7L5;IlplMc~i}C^coChyzw%2xGt{m;2~*0i`*iOY?h4{XfMI
z-K`ljr0Y&&{GJK}1Jgtrjyc4Hq>Yt)oZG$-bbL+U`x}M_Uin>nyE}iy0PlJ}#=J?C
zeLgU%?SmbBne6eniQ+!<1GuRnv!!{>V^?N;5YphK6~4@1)dnlyx7?^VK&J6~v5l6S
z$^y)+Z?&BaEywMi>%xX_+kal=BDZ<xR*eFVUOosfU%o6KQ{?6V66Hh>5e%vR$Qpj$
zKCB~QPk+-#dT5+JmiKyA69H(mDlGYaSJTD;4`>@6yg=x3-sr4f;pf<&jeU;Huo!tc
zGp8JCQA%b|9*uTdqI&NKN=wkNSmmS~1Yf>2VIjkl4Occx8^gjvxAE^vi%+)XsLz6a
z_QjhpBvXhL_lsG%fAofc>a>iDWL)&(HSgolT#$IwNXht`gmq(Qk`E8_-CV@u#EE;&
z`*k1@`HU$bH9|e^@5LWvm3Y7zOGp3ubQ2SAkP@G;m3_<8@L!{ai`T(dbaN0hV_^Fd
zrCbD66*?ZfQMkL;*QmRmSMeSsu@5jqmb;k|rs%Mu{@`TXYtegmg#?R&5fYiTRN*+z
zE(_)bVjHo()uO{JUqJ|g40iqJ0Ud;<YRkyRnt+q-y*Ula`N+@rT$ii*@_(eZCXz&j
z5H?oJTKWz5%RR!a<v`{H!0s}IVjjgl46}xRU`Hu1;p-CYZ@=P}42069r3}nCBuqc4
z!J=5&-l_3P)A|cgv^ZQGK@^!f2nP5On)`26BAq81Q-F=8i6FR-`Z4B~CR3iRUFl3j
zeDG@q5MQfNu4Iz(+AKA;?FocUK8kpnfylo)x5FIGXbrx;{!E1u_TwEFN={?;kJ#R}
zhq8IqmPY(V&3zk0Y-LcPbHl<99qYQXDa|C!R0KRcS1fE<ybph>DUp9?n3x_twjmSh
zb2yr9v23T^j-APII3Dw@Uiox59;df>ZIfbCKF3yydlnf(x4F6bwYaF=aaIaLfW)$l
zM~^0p^!dJKVP$1ykV7{^GQv5ve%5r)r?!tWtSRbDm#Q9I>M00P-=97p$+Z+KYHp}~
zBz-cvDC8pHS-Dn;H=gKr22Qeyj#JRK!doXo9%z&-y)20|15TN|L10~os-Ni1k#{2;
zQmJQw6|zDlS58K&xxlkWX55+U3BPdcUEMNqw$5Shg1+=o%L*#3hh4v(|GU@icz+_B
zNh1oPiGB_q9*86>xxaXUJ;Y<&8Tj?-ZL*X>li%K#yf)?M8o_(|w=6)dAm}5&|BE#5
z1HFKlsKb1Ri_ba|wo-Iw@z)Y=2Kv-kY0-BeDe|Hz#;o^0KEz&EzYndUM~QxhqA$0S
z_R)|Mob{TXwX9_D{Z<iIADxM2(uI^LJ}9mjH8VyW)!FSs=iN^N-CtJ*p&3(_D(d=E
zpZ1IQy8Un?<pp*<U4@jio$uln`tr0ylYe|nHq~yZBvb@}!c;rjt)2G2wQ_YW=(9E(
z;0iSIHzBSCpQ6$oPU1g3yit1XVoq<)<3>|(q~+D!r9&K*b=)%)gt%w?_H4T>$@1fc
z(%%uRutbC6Z$9Trh+E+%v?GtvHOR1jK?loHIpXu*ihv(GIv+_+9wpc9;MGd>=gh4g
z5m%e)mqx9&-P@k9M_c+U;*|*ah*}~-CG(uA`HxxPE30X~-?KpxikWn7RmnJY!hs%n
zwu&&pjuQPn7J*S_%jdger_0+u<@YGYqLhaI5~fPlW(kFCW`}p(m^4`|;EIxW=|h}U
z-}n7RqmcQE>VG$5_9ulQ#IB}shiASqni0QxZ=ED+^Q#5E%K&cCGbD(@-P|x$kt-r&
z3BV6MN$e!!lnmy?==e%1ux4mWCVNokIo3{Xn^_T(fAN^0p7&)6LrsRcFBa&F^iEy3
z37*QPCXM0A0K1rnZxbZRFrbqfCDyEHw2nI*Hiu@*-Lnk-ndZrzk`&&?ZzbsOI}x@A
zG1t7ROS(tbemc=~GX-(J3%N1Z)*7*2th!)h5fOR(bVq@zm$U`|o!-SZ6yg2fH9i{|
z8Kv)4DT$yI$~?O@2q|9RoQ?R&GC%l6*{xI(^qlVdq_-n`GeevnsGSUf%1ci0ehEHx
zZEH-tuZ-Hi<ug;s=FXy#->(scAV{n9RT-}8ZhntK-jXMfiL5e<tLV3HFWhvsTE>un
z%lgq4QChOLAMwWZ0z)ri=c9!BlE;FUMKF5d5M+mzRs*T_(AEDwGwKMt!v}gtrgu$&
zP|iE%f!|N?G;^Xwu~63dH<Zbs5}>~xWKcsnU>$sUt^PKFIFt&=t9d?%yyj(<Zyaki
zOvGU<MUY1KIO7taj~7n8)Z%%*V^7IXN(3PpoK@W(h3V30XcflHTXS=9wLSNpTeo)h
zTF8Hc9YXrU8REy^j*S)EXLyFgv_%bkEhb79&bTFc^Vuw(q0U~(Gk!W?bIB03p)W`}
z{lNANTS_78xpbaJ#K!GsXt!Bx%bF&(QqZ&hL?K<WI+YZm=VwTN7M13Im{-Sz5056j
zpIk6meQz7r=^uM#ooLK1f^7BeUhZyVGw#k#J~Q?;-0KYc^H*h>pNzhnXvenbpxz`L
z1ll>=`%D~{Z+=hPk{~q}BRxIgdJL=LlD@@)fn99_-Pn#lf)wQhLi8v2t>_E=lYcgn
zw9ehd@!{B{Si3_&xb(-|cFx6}2lo|Ol~6Vx(xdJ5-#Eoz`*t%E6P1J^b0SMIZe$oi
zik}EIU6_{Z+z))kHlV1NvNbfo0+~jb2-!9+upatmyVeQ5$J!Sqs{4!s{DB|AN0q}>
zNTMFYpjR)_s!XBgbCETuKNrvB;@+CzxHOAl?7#{yDeikH0_`lWP+^XZ#aMW!SlHM>
ztcHA@rF=PatMnm2Z>*Z<T(Ii$)mIQx?UZ5D-FP4sx;a@kFcDz3YZklV#vi|b{_f9$
zOy{<2a7|>g6dK0sPO?mgAh}7jr<vjQk&-yVg6l16e!j`Eq+&fOKQJGjfrq0%&8O4+
zyO(3*D8X9MLJE^8`Iw?HJzOmN@|TvDx)$RSqk531C=Tm&Zz>`pB5XfA))PiMS<8#G
zYIsbtp!U{#Lkxn*>XU|TzGVPCjPm?$?3;+VlcnW;H4SoO=+k&u;Z&M(bOm>0N3+3~
zM!C80<9|M@-z|%=S%1MewAXJ^au)e>fIO`X9YXhf7dd&WZpu7|at^svZwlUM+5eWC
zG%Bp+ZDK)0twIo*ZAkrT@6@(wh7!k|8KP5WcxSPESnoLxtDLI;K1i-prt|R#sL1Q*
zVab(jCc*4+8MC<&@c7k4B`Kku`g@QnM5@>;23RWJWe`3RCd{Tdc-G0};FybdL*1oz
zq-#TmpL(Mc55&7=<-cC}uHQWVsRi#Tzx!8XvJaiSF82Rnc_S+PcXvYA723R(h_PA+
z5B{~^@LEdo9ijHEV1O?;eZl(v=3*bqw_rS#N#f~gjgrqgI3c)yH0act3fKgOlex;U
z$Zi~~Yq}Sn=3(VKaEOU>T$S<ZOo~B4|ED`2;h@C?%npVRYv2se3qs$X5L;_!8Eenh
zi_ZmCMaBbIhP2oaJzVPZh2AN5$Ld*|l!R=(_A|rr#4^}XRq_sbRGkaY8wpoV8>a!c
z8#j_=_DUa2PTbW?qKD>Gh=Z6DCW_;t8Co|)3^{&)V@Hf{nmE~L(bbYKQe(M#mgv`w
zvK~qOBV2il;jxuN$~w`!bUrEhcM^jjL{>U$nnW*<!RPn&moKM|Wu54`y058nr?>1!
zS<x5YOf){cfZe*b8&$B$A|`fbZfn0C<GoY0KlmQ@Vz~3w-OdlxpWn!Kn7?=JD?H;N
zC;#}PN6|TaIwiKYtjroYzlJ>Azkw>)o_D3-bSvN<(tin~lDVqV6B~>D_Gq@LvQ@!Y
z;$0<jhkpB8%lqcsy{5fg_h#}g`dQDgwl5EfM}s1zKTY=_JYo}<{qkp(@iXK#9<yf>
zojTbc3&jG_cBg<JitX2aC!X$D@3kH~0$0Zk?<lf9qH$Ov^z_6yasA59HmDlmXSU|e
zm=moy;Lw>2^1dWKsEKMc)aJ;QqUrb@>#vY<rQgx<nZsT8H;NXS%H+zp`#MvhFm;R+
zRiq~c0)x-~3L3T*=75j0U}T;V)@_knjhNw&h-bHJA@fM9a)3RE`20)Wd)p1wJKT;s
zMg3K`8m$H!Tko6Qf_)r<I5URh;osBvDyMj0Sl*d#Uqfz(CU%-)a^AH9shG`Ip^eaL
zkH6Wco5;_V(~g44{zUkP54OGBlyAR`CeT`rwjfM^{1zgq?^w2rNgOTW3`)m}7#Qb~
zJ6miNm=q}+O2Lh^j(9}LPAih;MSFt?zSUzma=zcW*84@DKe|_(vQd;j_`Ij}+k^tA
zyZvzz-5cFnQ4j@$zEQ}*lTN)yoC8a}`BKN=?Zl}#$OZXsJGZ5GC<3*wNzB)#pt0VB
zMdZldMZqr1xd4Kj`M%xhfdnHt2SAITlRQP{kZ?oD?ZsFqCLx>t>gDC-vC;jNy;yZ)
zjl%~W4BFcwashG`T|cDe;-K~T2Z9s*M-Rbyz1o%!f+Ne`uRDPA-B|kBzyylXKxCVD
ze>hPUlYA9Fu#_<Ya|2x~q0*Yz@5;2GC}J+gQ`i7SRKL$7di>+dhj*)=M^XPuHCK;G
z|7s74sDB^*O=klU^QTvqSeM@plT*4}O6$~*vyIfXecIaFuy2o?t*7t&D71Mr$W-!H
z=uFl=q3^!lv9sO6n`zB8I()dl-CoZKcP_2s=kez+N8K<Zb$keDtn+M4&dl_6K@<CM
zS{Kndym&l36NmKAvHWy0dmx~RjS&5uzV)BXH52bBB}((rh7OE)qOxlpr<1*-RU^nC
zA?O$TnC#d7H~UIY8DalM`xqieww&*BMnR7k9{C0tR~pigm*0)8fF<Py?MmtIM1j`E
z2!rD=+hx%9gsAUBOV?4rigT@lG?t1|`<uo-P|l60V@*D{F7M4_$9Uu*-Wt7nt!Mcx
zsDH(VteUEXfl%}5_O%}^dh%?ghwaBtgEscqk##AiN|rS^=s69cU?B%G4eH$&llwmw
z1NDL}X5$&RR;%sf((%UWWthNjjlGlBdGM!($E7{d64)l4sMstarS!3!mi7wnTr0Q7
zycL3L-(PraG{E^=Nt{AvcX`<ub7r<Jc4`|Yc9Y*WGz=~HRFNS)JRlOLg&6Z%T5KO;
z!rt2Q1^r#WIrjMH^!i0pY1kJ^OX_ITC16G7*}Z;Z03S_Ds?NzrjQ-YE5t&UjxFAD`
zd4Rfj?uFp{y)FXk&3`n^HppM8_2LEahLq1;QRIr5Ar2`vVuYicdCu9VQ#VE(GSx0g
zd9NUJiL)YlpH*F>xv0I={l`C2^S^A_3PU)j{BD^$eI88Xj2oOlwxVq0Q2MFcf3JAK
zjKy{21^OS_3Ex!%!<lGHt0c1zwkS**xAkrSDADFDW4nN*4(s!R?emPy(Pqejnr?av
zIE(uE$&mHyLr?|0HYI^Kl18DFHl-pj)@!_fj+_xhxEU*R@d=;hr2L{c233L0VhV*N
z`D-^#{h~mrHR0mvAYqK7A9fByEW&%5??&HvXm;<_dnO36fvJxUy12MVg=twupe=Ru
zG;Pkp(^m|0J(NPFJUQ_Oj*oaFDX`-MJ6+sg)=$6i!>&l@jX`U`lPiruVmyeS%SNle
zzI6)rV=t7>s;Yt+-I<bG-<xhYGv&<xGNt)hB4HNvINVzA#fAFn)#;}4W&}0b-xEtq
zt$uE6^rOlJl8W<>pr->2%NP`BzEY}lM+FT%t!@@fBjE_)m4+(Nr(RKGPl~PE@VV1N
z5`Ps=l@wcqj(_2Q7OEK5nO@g}^y}+~$?iDIFyFF5r?)0_a<vkY37L#U5#2d0n+I=L
zgf63ANoF;i=UJ}eMU4{`xJHMMIfF87b*afSyzBRUjGZT1Zl8g}2sJi8{}TZ>N<72-
zM5~1<Q7^Jn;yfDD8;FEKI<IKxo-Wh#4FZ|z{opB7eg9zvo`pE(CM~K8;>8zYD&gLv
zevW;T@obE_0J_|B(<T8L8*ChVSn|YkaR2n>XZ-d&ua7S^0mIx(tx+o4y3Sz=QXjgJ
zZ`si3=wX=~Vf|)qT-UfYf$0ZqyO3v*(vFqKhbH&B-F-|+OHyX|>15<F3M%+Nawd0L
zG*r~;_Et*|@n7)WNzFbhOnnM2q(tRGyixS3%I=1<67&wn;?m2<I2D^ypAcx%I2wrF
zXuEb{&6&|^Ry<V0U1y@eujk)RkVgrdHIxo*+8vm3<OZQ9vrQ65oN!@sP2eFfy}#jd
zh>q{9c0LXf8E=yL;vAnx40hHc?)9rkD5hOxZ&M?^QX8;BoSjhKnzvIjGFzg_dhuLv
z=Up9n;+k_125deeyR7Wc)@69;3&z|h!p<&0=tbV(te<LCTQA?5M}{|L{jydO#DOD<
zO(n?|*90z%K=7jej*#|;w`0lo_ImR|c<^MIdF)TW`nF9w>Mmtgb@f#9@k&DvwT=kH
z=ytfTiAEAhcCvdoiB-?+u!KJU9=T=57%Ta8tMYpRHQA5PZdY~=I}*5Jr5uz4W674|
zo>fVFMH{lbpH<T%>#x5#%t9F91#YbW#A?hSgExZtt$*(^m#ZsUmQUF)9zS%~fj^(O
zPcW#CkUyZOZx}EQq9k`S$>@H(uft^K=VTkNGBGdn4}nw%qlQMFPBmxw7i*`zYfq+o
zIA2K^+RfK*Lb3XGEw^;FXYLT@B(2lY7G*c+U^n8Uear6YgHX^!RMd|Ujm7D6E7orI
z9>dY>o0J!y$u@zwFl7-tmbDQV61Gu$kae|aOn$Z;HZsj~QpsC=r{9h*hy?v;pJP{w
zKkL}URNqdDk@}0J@~z>kbnZu936^+<H1p~F(M0Je5=}b{b8E*1ky?iovgAWV7svGa
zcd0@LajWt2I2X~+eBKSSk$l2D@LNy_vZ-@0FfhO*(<HevIhv!wNM&CNUk%dTDa32g
z$mo0OqJKX8RNoKQc<AECJd5IHwbNdLL#LX(VF=O%KlL1^ku$})DA|hYza_ska3b!$
zc^eVs+8p~%o2pVW=OTVCa38Yx2hUD{sO|dw;c=5dz>uRr2{$vguh-R=@%t$QHe@Rs
zoi|76T#STWNBEnrk?u|nZ|_nto}<0yVo5(`k_FLF@;n#(d)pDGD9raG$V+QeHKncD
z4}*WF^PtSlVqH+N?fUNsF*C~IdZxF7Vgs<Lm}7PBM1zy}SkP&hWB||ys3;-UV@R|2
zmwJ6+?-O3~=fFv-J{h*8UFRQihG~!=pZXT<Fo@<q&(v(9xD0gmms%bE)~48I9vZcv
z;Z(G6jC^M5H~+)C67{I(Zji6UK|{06qYi(-?5<vqjzGh8W-YBuU~Kuwet^FWKp38G
z)8B<aUpa#!s?@$beAzT{rW>sILKc8$;#^=*o8eoWn=B)p^#a`J*4)E$C~O#iiCTv$
zbNc;Ksy4ErpCw7VhWiu<hQ@O&jajWXCK;lgwMc+#io4)ck-SN`iR>c3z3(&0df~z=
zdk*d(jubn;CUv4JT%e`;VV&VboQ7_{=g2UxGwOgH@*^`d^HBJw_{_`-XT$J16a!DK
z2qgEHlCoc%f^rTzv3C|5j_JVY8DJnn`X&AhWiA3<CMj&Sqh<b8rIAgd-Rtwq>j`%G
zmt;2Po$h}lq*Pj`nQuQ-h21;8S8p$NY$cq%u}g;<Sy|w8dM6)4dA`iikZ$6X0b3`b
z|A#Jatt%6|vHbfrR0|5`Lg0?~9pT4^&hP<62=x~+DSJIp)I_o$oxdRj`oB(^F~Z<6
z2)I=G7+*epTi`hM&1+O!NKmJ;1bNbErkbXOKs1cxt=G=QDsZlEar0SzV`t#Z&s;XS
z!7plru4IF{Xev?OXo<iz&DVZ(R0h9zk5E2I#0G><G9b6#uEG*kMCsL8IfxUV|1K6w
z4eVHUsEJ$B^2bcDV=gW}|2bnq1{|)dD5Tm-N^IS(c(_j}Alh@9USadMu(jE&@Ex>(
z4X?9sv=V+zbpG1(kXMV7nRevvnYo=HD>Noas=K^q>dy9)l=3Qe79rs7a5`$oTdE^z
zdEnXh)i%4nzJ9fcT#Vx$E~FE9R+BL}WJmTt@tvD=C)Nfo>wVK^iLb&j>QXhCQwt%(
z5-}PJxf4dXo)AdcA~3x?V{ayur!MtTN+<Mf8ZEH2xM<@A=gsMA8{UEat^_`$@$OXX
z5S*ssB53B4^xfCg3iiu%B~fGJ%uk&DblY)e$UvmU-|3!ugTZ9qWnm|`VaiwTdJUXi
z6EV*us(uE%PWUnRLbAHQ*IsoyW^P5|<G^GrRRMtY0ycS{awlD<=*M#Yxo<{1^Lf05
z3Z4}-Lp#4sVZw>tn3D5ODL&fVNPL+OnvZNh&X1y8kjPp75G+t^bkJD7pf}J+7zcQc
zkdUnQA49J_#PfXK^ZKL}`QWBYR1$U+`0?uu|AV>$UA~6&e0nD5?2k#VSsfhAN-x}k
zQst^-Xp)wW#nxMpUK-<KKN2qVwycrKe?4WlmZ|vm>(^_r=%rlkC8~+&-Q~fQq&A24
z{+~Aq)`N{icpYx;zp8H-w5>t=4cuXRZT1-pAAS`*09VQB(yk2wWI6XDcn(?SbtZ6-
zihu||7vW=Gmrt>BP({P3y~lI9{E#dKrZ{7b@Tp_O!btM@k0`=J5T>ZULw8$t<IOaH
z8G~Jkye4=C7_O&zrJJu&`Be=5<z4lVS8k_`?XH!lzG@k@i_CyFyllAJ-rT%jVqUD3
z1u4AlJcib&nqe0l4C<S8et&*Dl=TJ&Jy#+k)cA{H41bB;h{&hcW%1Jg21t~kd@LOh
zE{oV`bmyqaMe65^KWHU2DHsTH>>s+=;xl1p{~uFt9TnC4eUHO9DkFk0fPjR=(A_B=
zL#uQn-QA4{NOyNjhjdGKcMD1*9a8@8=<EIY{?@vSKV0Cw_la}%v-dvdx@^VjzN!23
zYe?zZ8c#p{8E>rFGR4GAwz$b@9~*ud{T#joT+3%qMqT5BQ#}emn*K^KTckkN1kYOP
zP<sFQ<zf{-lRds5nXr!$$i$LlXV=ISu?vtF9c;kXxzgnJSYQiU<!PGWQ%!bTY;ilY
zVJ)F?Vc=)C7Pb!?C3hNHK~j<gp<@Y=eXn}__^~J<r;G!zR**>$=(_+8o7CQZJAwZb
zrG2C8#7(f>vw8PwucTs@XLm%-vCb;@YnjbbnN>7Cc39sg4!)8B4)i$9*E(HlacL=@
z=!?Pk&VVb|He}b$aj}>Sztx5uT*R;g7YZ@5D4x@|(8b%&bc1_51YuY6MrU}5azNE@
zta)f$tAI3i>cZlsR?bgWrY?uQUDo}tC02=I`%DR(-c#1%2{M@--7#*vs`_XO2r|`e
zBS;=jg5%fAwAT}RRxYP3n|kr4$@KT##Kq+||E2eH>Ep;iU_SyMAOCb*6X&K!>Z@Qu
zPj&1{OHh<u&t@@p+6)Dj5fvaMI7Z8#Fuw$z@d$;To!xR|Y;5deG<Q406JPliWR=U6
zxacW*G?J&3kx{<=iwS<A%`d2qb@wPQ(u;{WXoFe8%*&j%(WRIb10R8HTbf6Z*{YM?
zet(b=QE71bv44OK5$CDIxccqvMtS5bmGW;efS)@;9qhve=(@ir#6c4M4Qt|O><m19
zQ7A=R)LCW%lsvOFKfb3FahE-VVrQta{t1Hi_iJ=A;yOtz<E7S$zk<Wpn-ndu7`H|K
zKxC5#qD${>9@Fl?*EeS>LiQqm?KQxc##D)~aIFjs^bnC?9Sme;f}Kx9izu9a2)geZ
zWyg+`kS@sU_R>pdZ3hn@7_C(B)@b@tgu}@F%K7(1D}KwJ%^;iW89VT3JRE6jgdmcW
z+A)H^i(ECM>D!mt_N!^q^k|_##9Om<6;CR6*-XNB#U86+j5f+Yv%P+v{vRM|A=P`8
z7Cb;OnbVRdKNPV={9SQ%q`Ug}9tA^cPRZ$d{ZrqG#-JiR)F-&i%G0gQTiVdFfDak1
z9?0Hf86E19vKSstJR}~XHS64fn!uypz4@;1aFPUKD6_uu(+BglcY)8-@Yd$bk(W68
zKw^yYodq99+3+y(tL$L^7|#~<7<~0YLZew+#VUEP^YX0w^yiS^NR7Zgz}LYQ)(K&n
z7Rl5!Z`_{2kkL@qwa(6LxjoCDWFKIDRM>XvB^JTf^_}3lr6K-ke@Y(RpFJ2X&yd7c
zRAAf<jlt;PIG2^mGo%w8AUJBMo3IvQwp6UxOxqu^B#68C54ZY)W3ZT?+v%S|wf14i
zX`5Pyd2b>u%P#sAFqWzN?Cs^ELzWJRm!OmJf2#UK25|8@#|s>K8G~mFXlk1A53cIs
z+Q;7MyZ#BiOA!78LE*od4amv&68*@bB?hv`xb|3)(;rDNvj1%NPJH3};?J5!_&(i~
zqDjR3QHjl+7?2p*kYVkF1&W>)bLIDSr6+oMwf5?@M#ZSP8(vgXO@Oii<W4{3LF)Xs
zz$Vy5Vdvz0Kz-5oK%QPn|M+{$=u}Z>)V!BfLX1(VcXL>d;~at}N4fn$wz5Hp5EoYT
z_4(bQJFBg?6z&oQvPz2a@5~jce+{MSf29sZFtC3wLt!K~_w)W7-jV{Ttd<&U-g52w
z0`-x(4fti+K?zcLS`ZoO&nMQOQ@6-@*^wiho)*27bW>lsFE;xndjt$dI?l%FFv=%U
zo{iH@;;~Xzi$>}7%-46ao^|h<Z)eI`bM1Uk?#wUU$X?l8^fgNANIqY0-Ismaw^4>`
z{65kNz%tY1zE2Nl!$U6iXpWSshM#(yNiO}0GmgQ*Lpy4Kl{5kjwh%c8@Ask0tAMVz
zz#s5a`hv6A-Z&Sf^TC`g&N}oYH}%-}rT7HS+UvoU3g%qJ7l4@Hv(F&zP7ZvM%JX!9
z>YzIbpSRE)&2BIX=FAOEgrN!JBetIq=o^XcS}N5!x<sD67*Ca9+xvk-UJ8$!*2l8^
zUTq<4b<~;UeEG)nyWaI)iw|fMG0sH6bO+0yAC3pVltcHG-Y;IWIK)ktHSb&{{1Lya
z|1G}KW$5_|v%z2sB|JxpaIkF!6<V=ADGwZfrmbJ~$ov0%2F&I}nI@N&M6HCvlA@92
zWM`*HzBNj|{^w}$VpQHA>tcH?1z_^g{DxRk%w4Q<K9B$pnt|0pPwU0+vR5rih->4#
zATD{vcl6ao>&x->SDe}M(DQ9aNO#DiIlnYB$-*Z_^uV9gp=3=>KG%G#{`tQh5AVPP
zrE*&9tbZnbRV9uzmMx3P+GbW#ITrAoRNzGYqw_B`QR+l&p2h;#mO(U3+$t*NDVxvZ
zTuM`EvPYu?9pP0@x(X^$`;+9hD@C=t%6euBD5cl>8P{Wy8KZ=IQd*8Vf`3E7J_!@P
zfZYDI7GxBA??T1lF*rO%h#7@mz52&jJ+VFAxDwThS#x)d<#pa}!IX2^znCSgplRYo
z`#F%Xv!43(_V#jc`?xAZnzn_3`g(L-F<%(taL=L&>f8wF&$qXpOX_++g$Rz_Ml#eI
zK7m`vj_Xt-cDCt20Q2ActHfr{=UIRVRnhCm<o^rpKT*!pc^&2<gGDN8w!jfz5#HeS
z_7a0KK__cv_?<V~3#SpDF&nhqo5<7?n%&vxq877|d&5ZsNg20Y&$3@EzhrATH*<#3
zkrJfj)(^<3LRy;$qnb!$T&4A7Zh24oT$nDVsnVl;6~Ta*{+Vi9dq0k6_uycutlcq%
z`tJ-FlKXZi&KXYS#S({AUSfrB1Owt8!yGknAi(12MGBz|K$I^-s<9DU^FS&K5Lf@u
z)LuU4+o#}GXy>vZhvEaT{u?>~slm3?oZ&_89~%>tEOf;Sods{16Q#F&TVbrIIgkI|
z78Wv9RQQ_O;@=jJ@-+nKRL!SewYrIL4H%j+6t>hn@M^V>#&GmUp=bkywVnD!QL#lQ
zjYF#POnHuVSZ~>C*j3=QlKAWZ`;lzT%K~n4b>Z@_l37`*+1yP+tyW7qj^>F?S3pF0
zDs<sTb$qg?+7nZIgI-`akDU8xtrz@vZw;V`kwx23X^uImV|5IFaBqnsbSNN>W(IZu
z@Y&a_ss8RNgTBD2vOeJRselOMk2Ff|-MaY|{m<FysYDae(}-3LInluGN|P01iQ7w*
ztTTU=F-zvbyEm6)CN$9FL?mxi)$0<Hq}3CTMVZ9@Xw&mY+WH>|5&s!*Ws&*G5pdbC
zj0{$seph-f!h+x)bI~ww8a=DS`KS^`d}IZ*-KjhMXWGBKlv0+9j=7?g{Xkn!L=e6F
zRcT4!{qD-|u8&W46N{PWsHiZ|e|{d4xZ`mnEx!mrLXT^^&R2xmrgUsN^k(aZWuzaD
z3QF&)^QKvwFOmbm%I^(IsajQzS!6&6BQ-TOw>;%8p8Db2<a5K4#{(>EUu(bJ0MEDw
zO?u;TDd9Au$OELuHLxx533)pQ_wMW9bd7M%Ls+U<T@)TC&xAeWS$qerZY$pop;TND
zk7+~!yh9EoTjLyS4O;Slg0`2US5+N4{%(tFFr?5H0qaQogrFU@>po7XEyY{A^V7*)
z5z`Ee$(uAxsk-=>8?Nf?5}n_%0K{h<D;^oai$2e^{eEVnvo)ANdCGD(!1|}e9+RNe
zs0fZa)l>`H1g|<NF#URWNj#U&s^bd5zud%2gpK%(Bu(t0N$>fz<Ugnv529W5Pl_BD
zE4VkBnjYsEcLOiTi}6_^w>*+Q37rbIz8o#@mOQi(xWmS}pUVk6<rPGYYx(B#utYg0
z?{<2}5AcwXBd00wPn<MwWJ)#^wd=Nf<2IPBSuDYy(_Jl6-BVEcMmt5y>3p;Ra<~>r
zWd$my87suEu8z}+_hy~Hm{IDBmiXVv7Xnp7T_sgMEbN5z>Z1a}t{I1eDkp!-7rwUA
zhjc)}NrMJ&w;U(-KlSv{Gs6=!Ueyeqbx3vq_Y$$yukcu`s=E&=S*W~y&d4{)$2;oE
z`sswpgnqy%Ab1wNw(lZW$G#sr!Y#F4b;XFKxx~e77E=fBZ~+zI<N9Pc<R9@aW7zgT
z9N<Nx&%ITO%U8@W0v@=A<Twuf-8y=x(o{GJ&AU`^GGKnyD(K?u!~?QgHRUmU_N6I6
z6_HeeqbzUJJDy~Eug?|gijThHmege|tkx^(q(0NAMK#9arJ83L+)*a+9i6{d9xsZO
zV4mB$VuuDF^Gg?o$5tV>y^s*fCz0OR#X$2ERfS?k_7WX|EoLi&IOa-#eXr0Q7$y6$
zGOP|i(6V*i{eXGR7>5yD7c<^3sLId~X(9MfCY^FZc&kdgTU+CdvsJG&Whr@7C$_)q
z5V$>0Gt3$cNn<;Ao?xq2*ofEKBk-$FyqBWay=t?0*i8a2!zvvQJ@hXMdaRp{doF)V
z%3btS6w7al#1$8(Hvt2|O78n3D2T0uMwLMeLpt7+0XO|%nqIr<JoJFRk`veoj9})$
zJ@fzeavR3=Fm44Sx0A!PS=wBLqi{77CFW3a8+XA}9N3oV+H_DP1RF3za8Z-Rv-->F
z=~Z@JQMg+@d7@dR-{a#&3NQRGAOPQqf*5Sg8NbsGE;ja9l8iNfRxj^;q2^qCR@p-<
zy*F6)$zq>~MT8uU)SLX%$+L$Fj6l<YEi{7J@dY1@>@<-fZvgqsF|rzW^FNO)7s_g}
z^v*XY*(h);(oczR)@f=i_5P|KW;GD5mOtzHf!L;m9raK+%cnx0g<dxm`S|j)!p!6S
zI?m6F0awMenN3n1Fa6AHyhY;@_c&0s=lWOc^i8sfz{9c5o*O>E4%Pz*xQ`WAhfAtK
zdhL`l7<lgv+4&C=#pP9aZAHzjRi3CNgF&)Lw`1FI=BeVRwKxhoI;+3&AZN))TnwUs
z^3orLBw;`wE|J@`>{toq%N)fJ*DEg5YCQGvgQ!#qooIS<@IJp2Vp&KZAX-^?#z=*%
zj<UYE4oZ_5B9rtWYB0w4#Vo7+Jk?Y_O@{GA_`i+S1Z5VVbCuaYmEsVes6<I;$#z_o
zX$qt@(At#QZb#OhO=TKE(PKYJq8YA~{_x@L#;?tY<YsZ_kywk6zCO9y@<dzhJgd&F
zy09xXe&?J6f{3u2$`7AqB>5?GYdS340Ve9vm@m>t;q~Z+ZFAfmft4FG+*k|b<eWl_
zI<q7Mlv$=AksH&5sqeF=gCv6-T$=Np!Xa7YLl3-xL7xJA_V92G08+*_6JRVwTW@t*
zPJ9h{RC#G$5OTjQB)~gzoqBa113~5w((5&$TvrPMv%-AW!k3?yRBJo|+m6_)KAFiY
z{b;pKNfYqyZ!!ip)I5prdEvU2OOi3nxYt-7v7^jG9zLYRPx61Qo=~C}0Zn2ui}qgS
zVa1D#7uO#8$h{K_nSoblkOf4si|KW|wW<iMyH{JEn~YB#F=JM#-T~Y-@d)5JP}|cK
z)PD`vqw=fOOb7*}mX+VyK`%^*ScHR^@gDtSLV3XvijwB``EYD61~*7K1u_&afg~j>
zC|jp9<CFyXP*uEG1ZWu@x*%>w`?zeF-1zLQvv|x*aaofV$2Z}r(EF46rfz=2{wT(#
z?oMuC3<*h(86->Ldf>03wvLRDML#I;kHE!BuJ>&7*RXl9HY!m*<CkJL-nuutH}bW)
z+3wKeAR+OAyY}l%9*2sg?wyuli?7CSA(k>V5`C};)AX&EwkH$q(7^dXrjZo-UzEre
zj=E_mjk_P~q=a}uKwyk_OsU3X&l?+9P%_c}o2LG95J0}_|BS>-Co2k7)Rc(-S<c>&
zm8JJ-8CnzpV1Ee^K+@l`?hT4fWeNM=7{6x{Pq!&ls~9$i1>P&*S0UrPLJz8#p*SB&
z<<iZQp$`)k1i87n)$d^7lv}9mV>~tZ9|D9PM+p5%^Rl@bO-;*)vT!Vkx4r+_d~NN?
z^+QQo8Ad{i+@(g5U7QzF(8ejdmn_e+@$g3KQIuUi<|Lh;6<6;PYd~~j)0*|rZw`px
z!!0_N|E(>?G3>LaI>*`OZ2(6TlP(NH4CLc^G)WRTl7u*Cl6(QjHNTCo%?A7^SK8{e
z`6Z|?-o2KqM;`)C#0OGH!8mWOw2B{MOxbTDZr(A2fI+E%0LWnjtHP`4XGLx8g?^#c
zrr&<F{L*<B@hG|G9pJ&-#WXcFolnt0E0VF8k`gu_#7@LSSS?j0a41SXt$j&^#m2ow
zFK?Hi)XH8LxyzWPMOZEW&Msn=4M~h`)P9$LH5+s-2e%KidA)lhwSdLy5<SWUTYm&_
z9qEVuOQl-98XF2GMjbx~8_Js}jBq1TE2z^eM#3zE*KOfjVoEXeT>;e%=ktP;G~blH
zF-%vFvt2D{mU>=Xp3^+_!`a^o9<j3cfwAcu(uIz9=o_z>l*D@0@W>yNCKraFS@eX1
z#_p1c{E82XhZOm!sJ2Z`zhpz9ZxcI~8y%Lib%xAXCmMeMT@L~Wfk*d*RW3-b$v3ri
zOBtjrq~xjdF9!OXU}f%O5E5f&6p0ds2@8T4N4(cjsR@~ME_>`!<n8zy$VX@=U-k_@
z;*z3^==`_5;T?>~UDt&xIl{C-4hf+-ng%6x6xyn|9CGC}!~}WQ_;iqYQsyehRYJa>
zhP3`(nu`&c3dsgttX0*ykLR-Y591UYpJSCxS+)YXq(I%jXN3}jD|e&b#%IWi3(({y
zu^Mb<%_c2s=xooUEDl~8@qEos!T|35Q5*@E#=;+`%41>!<eud*+gjV=`TNvq)jf|3
zI-b}8G{31$V)VRv*~xM=4_F*tta|Yv92ZeStRU{IQh1$Cyc72m;<6Bx3a1D{o>N?%
z+r0KLi0p6!B^{ub<iUIwUI@sk!=ph!XTa;&XYY;VE#Zl;jfuY~{9A1ZRN!j~b|;GK
zTQGUg9zrwhZO8Ty7w_15sI7Qj0XS96ST>bI#v4<>2N<qH@}$XwO0Dc#gC>-y03ZmL
zO*=4!1a)pN(iGa`Q)(1WxUapsjADNNllOTZW_F5r;WWCcBDZp^FDiJ|=DHbGrIoAE
zXN+`}PkGva-x`~iHoY2=`l&j^_J<b^OM`>ldPkY|eCD&fQNnz|KgckG#V%uIqS?#=
z#uAs$AXo)4W+GWdMY|7K-6`^E04Lg)uc)(C4OBOM9w?1m1l(lzCleKICkU5cEco>7
zZ0wuYM{D`T^Qqa5o>0yE^VdRa#z+Rn{r~d+D`*4Y&~ZbLwr)<@T9{C?{1(x@U!0QD
zE}yRMXxe0~mH~Do!PtHI&}45XmOD211%IwEao`JGa>0qgs?VDRccNLAiA7_&tt(pW
zpaY-ckxBY39KgOaV*=K#NScUT1?ybv#;+o?Hobx1ZN2kg`~d}ab2?<bGXwyQ?99YD
zt9!oqG_rbmQdauWAZqa_Bp^*z*Ur~x%wkHcwRvUEu`u=m#LzlAG9hX*cN~%x{Y$<#
z-}G^CtGsZ`Inpot5N=~^5rraT65mbUvFJC}+bu0EHtq+LaxN~-W@&Z*?ePv7(Dx|2
zz{Cf~vj7v<wUFN706u61)eQD%8tc~vv3hR&7Z4a3^Fy3l2^K@58@@!*YueN{0Nc4F
z$|=&mX)xhnQpP8m4Jv5iY{^9TYar_SN&aw9hq|Z`+Y$O&4kuM(E>AtQM@q;C<Wtf7
zE|jDUozZiFMDN+hYQJD{1bdtP_A}z0sjZ#k`Sc{7VU3K8OyyySV8XKSkq<Q2#_98j
zzNh&c?%%t3eg~iqAOHvpg&JzX9MLK<OUlT&6Q=>@J+cmDObWG4>c|lf<t`5Ik~L#=
z0C96gnCNJ>r8L-_CwUfMDt%geZzU1FyYSVdCj-+S@*k`9MM_UZO1m~?kV4riWXhn*
zbp$cjd!4n)Gd=ML4o=~HPn<YN9h3QacJ~FmkEBoqSDM3N#l&Lq&*ZzzXPFKTO&NtB
zM=d!5#Vq0=8Z^}M)XAwiU{wz}y~Bi``lF{*t<Ew&uq?3O3&GT)Poqj?kp#9<#bjD9
zKn0|E`ycuO0e`1$A`-D!ZR0*E-t4z`jjJ8sOz|b8K=zoQ#mJiE&l;o|CzV72VU`U!
z41U@$d^0)DNf};U6p|5B?E7rL>-({d(zsN(E@sCA;1ge)zQ>O2bJ{J<vL=7~n-c`D
zw(ff>N=3NR<kT!4;A*S8g@NO^IMLvGvZ2EFQ!Vg6#z%=%?^D>2@<efp{JG)U9QMgl
zZdJmV3rts`m_`HeLf=g_m!NuldHLcZrsEeFosQ=qWF>Ln;f*ogpD5YQIf|*+_oHRG
zYi4kDxIc*Wxu1936T60&o%0*FV*Ts%&gICX<HzJ*$3`kCOQHdSN7iRw<mV%z#l)}B
z1#_{fACYkkZ|TKAHy9oM7ppg7n+h<XhvvM_gRAo@U0u+^sAj%60Cb7KuU@@+`9W~X
ze(<aJ{ms3zWZE4-fC+(UP^h^=q;p)O#(x^>7rva^K=@xN^m~j>p&ib{_wQD>vRMOA
zo)hu1<4VoWhM{Q?j`8LE0Zha5Mb+dOSAtxPM<0p*7xy(mKPjAij%N)zT9db;3-EpP
zN-$ELVY;fyxc4shRudcuex%-a>ce#iW<!4xrlM?hM{9zoI{Vt$;ITlpX;sOi+@wD<
z*6K4u0iS5l72lxLpI<HA!tJh+<yU=NWXviLRxeH=-<~B+#0WhBt5|7$(wOzqZ~J$D
zM{?ij_9WAEqug@c_J;_1Ik+NGF2*V>9Pb$^vK)k+i|cinfoX%AtGJF1vE<cUl^s47
zgj*J=@7o`4%Sl`Z?qA_2JuK-lzW!i&f!{w0iP*Obi!i-;3y<`$I(Uv70o&JvJy_on
zTBefi6#c_H_Zjb@>GJ@Q#cq8norJ&Ub0`YBAADYqF*$N1Tv#!vcXNx0%WApB$mG;X
zZsJy%LwqwsgPC(q(#%l~L<9L0HvTCt07l20?>?W*3SV3#zAt>vJ2_!1bd+{fsHpR^
zI=cbmX%V4s>S6`I05jyuTHkT{@(h($Ow%zmm(wf^>_~Cke{klA7H)@Nn}xC<wqh2N
zDS!GR)S^33B$m7+LHKb(phYZTJLEb&ho-x5{s-Ji{Nzyx#|P{gDUpp(hLf^a``-?B
z<i9<HJb%Uhh0fS%A;e*Q+YyZu01Zna-OkNqyo!UC=H@q=gCg|*xE~?VGbo;5!7l^;
z$Z83fO&KU?M@ZoLk=bhwddrn$Pi<{AO=U&T1Q?XYA6$o-q{i!0Y)-9D#@OTb=JF)E
zxQf7Kc-eV|-K3byFiHPyLA+BrSDRtP=yw|YrM;2N&%eXRXp7Qwq&i-J5DsuVw!I*W
zKF`agTa-S_2@FIGG8OYB*RYsQdL95ESTxYiG&8ESQyP@_6Xrc-(Zn;Qf2!m<vtK;=
zQZ5f70!GDj0Gfyc%g0kHz-^#;GTu}YM@9s#MPLN<Wc#II9c#WUFT`&mF24gvT;eQI
zN-K_rZ7k9j_iKZc6I^GQ4zR74KVQXp=-{vR$+g$Wfr?PFas%}T>bF*l^zA*oW@Nga
zHXnAG-Acffc&!wTJxEEzgjrF~MVA2KGPE*!GsxmbRzz=+02ih{qzr7qV3fPdLmLW>
z(&6gP7Kiu=>1;$cUB^M@#~wZ#OpNemc8`~Db@eVXAYh?{M#Up=%$d<lLO5gCj;et3
z!MrUer&=NagfYO!2N6u69UXp;Zp}nC1XH@dF(bAH38~-5j~{cR^zM67I4m^Yt*?Iy
zVAsGy4{9$G;ojL<(0-iG$?-5`%<~e#t0Arch*-osHP7R`)SN=*o@)lH!xBE2?pSd#
z4J{h+bBO~wWH!gDiU&4Z0XO3l3VbDpa%uXTFo)ijDkYuwe;jQ12fkAnK8t-Z#akmD
zxxBgo2-$q}-zD);mQN;8@D1NSf>2AYe+>_fn_7N%oP8U)cO9SkFSEA6Y_Ww6#f2Jo
zi+MwxfgZsGYYV)<u^DO`-f^Y<^&s~<kcVu}C*EiSz>Qi6DR;c3+*eisR##h#<G#^v
zM3w#a%c2o3`w_99`<3hzE98ruUVjv+_V~9O7MNP<gz5C6>g78=vfDiZ0)otH-Np78
zJR!YmpVjn>u(iq5v|6~uKP&?ydF>ZceYL%j(XsYJQ9`^9lC+_e=CAA%@2Xv+_ui_?
zUaGQg(@2;GB`$H~wi#Pw5(6``$0t+5t}j$y@IGZzLYv(bg?uZ=jYiHu%%Y7K+VEkT
zj;Q_gD;S(n-mWZWFzfpWVVpM<Szq`gKb)6>?d0w>Wj`)NGyfipSm5AzB*yn+a}<}4
zQD0h4QoQUH1{Gs;e3|v>^bcSt-l;9Y>g%<JOZ?7WIi&}bEDU}Sw|omu%NH!kur*``
zXqkh({i+lpY2u(f(h|v%{G~*WfC5DC(+?~=#@p(6tyaK?_43ZxYfKT@p1WBa9luC9
z%d1>QTRI#nCntwG^Hw_kzmbR{@&o*1HmF_KWPEg`3~0zx{O`Lr6%ODn<;65wJdI7q
z8dIf)=-KSydBGT6rtj%vwA#<*y^G+Dn5HZZXD&cpOQJ3@j4!JFu0hb{x;GLqST~-K
zSLsohRK;a8d=b_LUC51<&}9r-VKy9%V7V{R_KW<x_acUnea|bakAOath36MdF8Ql0
z$*|ep$EcoU2pBtXB+}@c)hSYQ*yhC;Cpzr2S+r@Z<w7;ZLbaZk4~m|T=iKYDQTLt)
z*M_ez%@|O?&z?Pt5D~dJ#H)30j90U2-8{J_`0V9~v2jE%;fRtxy}%1eB!HR^ioNHL
zl`aLK!{1<64E;h~wxp_jIGvv6YZmgzPXA0#d1R{UaA3{?a5ev-c4Gke0s=5u_E*ce
znBvbfyB#ltjb-@{gVroPRpMrzTG#o*IXfJSQ|rgxMz=@4yy|x{e|eHx-&Ul||2z<U
zM|SMpwbnE7829F9hPO85c(swt>jt&`YJ!x%?%tn}b>Rm*eqUt)bUGxM>T;<#$@7n3
zY#6gaZx~(#m0;hASn|8g1AU3k!M&}mt^30S6CmLE31KGXiq>#DzYgG5F~lDdR-ZL-
zg7$~_G7`P66eNC*@!IGyxn8_M)x2Po+H#KF{CrDzE5@46&b0ph*utAxQ}!k+%-N$h
z+RC+W2WrY6kJj4%tY2O_EAu(cvj49azz@n9{AU3LFour*t(GiO<S<JjAXH3ll7<Ez
zZtB5XH_0AQV#;4vS>_}zQ%TGxG26+m#G>D16(M1K;kMEtsw2-Q<3Kw>0t^1AHPzbO
z@;GE8@ChUp7%FHhc1kvFZT(r!{fnu%F1xPD=j1eavA4Ga-eCb^x~q_05Zh0)Rh=N7
z`u*DvOH<TTkg9b232<7u14qrzNd}31;0IeC`*SkBKRWKJAP``AbNG6>QYICc*Gm+=
z*QH`HGLNPASzj&Hb=ajH_^+inV7@Nwsj8=`#D;(ak$6AQciAcYcC{nch_b@qR@pML
z@V}5EApogrJIy?uDv%rM{e<llo!9S0Gm_A8vK_@<Laj>3LR+|?@a<Y#(|^s>h*y+!
zKqK{*HHg@K2d2gKd*SX}?!RRP=#7m*ZYGDvI#wr_O#CkLL2Z~F_(0ol;|Daz*CmMx
z4zRKMvmna2$Yic5u6K^5=*Xfiw6b=^v>)xH_I|Tv(#&*?h6N|ley-bPN86Om2lK%=
ze?$@Gk1R9q8RcK>Q$JiN6o$_37!!#a$imhM{7kh*41Xfu5+4$<DHHaI0baFY_LojE
zLJ8m~!~0DDF})*tA-{iz0c!8N{+=iRgyeHr<qI8NiNLj#ZO5=s76i=j6-Rmz@RgXT
z7eZi(2JH_N0_-6#$@{;jk?-HL5JZ&90Gb3Im-RAoNDqq&OKbXII)}w<VpoZa#z(sU
zkfM+RNRTeMSzwZ(bdl$CM)-F{r2=Njq$)KAXvIizN~f!`lO07yyIV%up5nD*Dy3hV
zwZ|Xb6lG5)YpW@pkk14s?e4o{5M3M!r?a%m+?4PRDh=H2OeXgqtb%d{X!UREl!rC$
z=#pXYP$8zm>nDw>boi3r1jMEHF5lPSbKSV^Mj}At9l38_gvH(2uQZeH?=m^H4w%>0
zyA*3UZxL^))?oWxf^h7il>AwkMzb1V4g*fXNRah!y0gLQmC-UWz#3Y>>TtuBtQjRH
zX8<Q5Ndz#><ZlLi9BB{}9*F}K*T2Cd0u#??uw{m4<?7dAlJKkd3BDXR6*L?5sx#O<
z^%Od)xB@I*qsN3sk8*7LAj{6D2Tl<LP77JJa?J<&xMvM>U#7DJ0!ek2D14E;AdWds
z{V1UhK@a>wBV`g_T-qF4UWpXNfU(Id_0v;`LY}#^Oz_SW7^B3#34AZS;SL@Dgv40m
zxU0r8w@*1RHr76Ek!k%KHK>cL(J0j!nBPfqU$dt6L>)9E=@)>EhL;_t@eH6oNsw>B
zN%LlzI5IK5CE&E3>-A!xS5(N2ke21?X(hV)Zta<i{kfw!?Zhv)Xhh=HN~&+-5ljkV
z;Ml;WKL#EeTbp?d!c`ne^`6<C0EfP%Hp0Uu*J4IHmWTrsy@s<jLlfb(#aNS<x;Yw-
zZ`?26TF2QJ;yvY^xT#|~;_ZocCL}vfyz==GMUetPYq*%+uEs@#hir}fbWAg&sKPsK
zD3c3X*cvd4H5B8yl99<ePlL>gN?I;=6WRe~`?vK%0l<F(A3W59HTvz&#k5PXzw(mw
zj#q*s=4BUCPk&op$Mtdm7ji8F0Lj~-%++{G49!OSpS#Z_Y=b_gU`a~^E%{JteGB+E
zk1z~oP-1w-%=>pLk>BLP)jC8>8aPpsjPE$<zPrD7n%I(Jda=3V&Y85UVW@Am!abv3
zQq1Vyk2-Rqc6X(7Z8zD6M%7k3E9F7E@XRvjB3W{oQba;5ziv`z9|3q31bjqqx$#LL
z*HY`dH=6g3nbAkfwpU?$kBehSQE1+xjq3SJXW6W^WymZ3pxo{W#kH}W@+Mn?7t_FN
z(*Bn8k!XVOq^x-?TjI-z@b?X-c`n?|2T@{DfH5*8v(1v#znlCBo*TPAm1{>x!Q~U~
zhu6b@fVaDZkPK)H1f|YzE7ZKEkonIWj0E{2meo?qNcMcwht{k>g$a_hBJN@NP?xu#
z(n+J^UckhIvMvy3PxK)7;h~${y^;90UANr0B-IPU9H*;gosFc2HG9KHIhflhvL2hD
z?XU@;nnOqgl)403s-h-+q5X2huppGNiWwc4r#vuiZ28YYd5DsVin+szf3(BVF8kYZ
z0F54pBgGKa$i5O{?XJ4Ny?T8>pvDXM%Sn*8A+{O@%snSw@n@!H(cnqSj(Zj>!%_@K
zP{Xf|GQGAtm@h24@cvw3?Y{{mp+gwLv#--zG*rB%DImy-VfD~*Kx8PUcqfKWjL9sv
z^D<J4XUq5|?K@8dzKq_N;=2A4!(ZT4Hcj@b^N&KWw`--i;f23#2rtZed(>wifnKz!
z?D^p~0gqV;STAllg?A){igc`RzMF^vH?77>67agQs<x;pVdCPdU$$0H01)<Zf)EVK
zv#J@n>S|$Qqk9le<^K2Zcm-L{wo$!m?LR^$<j$$R8_8=G`4zdy#q!88Nyyu~t@_Fr
zQ0*C=@q%o&05XDdEo};@TmQT1fa+twSajpv*m@PCMfp=o2#Kgerk(J6)8_#?XiX3<
zbZ}^E?J(dql~<_-*1do1<z=N&%8OrBvZs#&-{B`}0bVpvqN&&JXThdtalKPiZ`aOS
z07I_&4URfcZA?NAQkYvydG|&oCdrp3u62NsMOm60xd>(5Z~ApUG%f&-U)E+g$Gt$A
z%2?xFox4mTqgC`@4?o0HDl0qtJCUbGF?nR0*R4Q>ffnFQg_F2~k4Ylu#&kJ7ERHoY
zF=gPu7L=K%j)PJ8A?)+4F29zYd1mrea3cFk-Y34#?FK$3lJF%vj`n~2+iQ>@@f!<8
zarHOEkMY~jB#~Qb#XHy|4LWPzGbF^T$&Tet-%~3lB^u(`h71<a#HCcB^j&ng@S-W@
zT=;nqk=<OqO3-K9G6xnl8DqwM1*aR6PEIZp6le{UP{+htJ`@rIWgcdXq0OZSmRb<v
zRj-Ixe>UU8>iNIdqFhfK{pd8VSeSSXENOQzbNrR??#$bQa~^ozsxE#l!s8AE|EM^m
z(a3oB%6N9Xa-{^MI?>g!_jMQ4%XA>usFgsA=Ky@eXQ}XP`mwE-c;IfuxmPQC^S>jQ
zGDOdDpU&ggOfKK3NnP=)M@}AaJ&#T&Wx0tr#P0cYkr2G>ajrMc$+gYR#+g3`sqd9*
z1L{o}MhzZum#^(t$?Psark%KXN_D5*^aQ0Ti_bU$g%{MT0BXZ94Yoe-VM=e3@Fllz
z3`_`=>hJ-<Et`jYa7JkWrXYh-;|0J1Bs%Qf*J3{l0Iey`uf5E2fmTW)y?DV`qx!z_
zeMy|6?6-fr3IbWL2iRB0fGsIvG4_ih_3aq}WaOX=T&VC_zJ!@f-Qz4d?+nW~a|rP8
z_d1YX55!tq4C!w9CBdy#z5mLa+^-vK`^z<#qtj_-IL85+xc)vKB1@nAr_}sriPOe?
z5N*U*OR4F@97k&4df1RJL6X@1kOcqMVx3r5GG<cik9x9~s?G&phd&xKK%+i&3`ZWt
ziUq&Hf71*!OJn|$FH6qczAbE}-%I2Qs^1X<7G?J8kgJBK=F#zFW@=kXO3K4Vf!87s
zS8M~3Vn`p5WeC!$C==rmT$u!;ID$k(%qO5|HYj-+PRn*0BW(E4w*W-c_=7!%;~$5a
zCT0q3QqJ_=zHkCAj{l!c0yYluJ7qaD1`YxS%$l22>Db@(q4NR0_-vUK#f)0bLn7W2
zAAM)CmGXsTKV)Rb=+xH)hDVh@dY&IZj}feX>&%4lxHV)7)YbV5(1o>Hs&^89@n$;#
zK~o+wY~k88<-}UPliZvcR{dkb@H3}d_gjFY1?c*y@w#y-58;{sSWJmO9+v^|a)6;H
zhO7o(uAN+pP_bfoXlQ@c4qxzJ;{F0mZ*AObQsp;$N`JA-B?`$v(^FmzLBoogyZnul
z275()7m3>HYSz_%NAkZ^0TeE$r!TeArP9fvv*_3@O~fH%DBXdruWRABKfuwWfd-GK
zd7-_RjA>VAUbU>uMn5JsqC6u$sC^_yo&4ux>~p1BoX=wW782EEMoU6Rp1ZCKuy-$j
z7w87NJATM<3fTgFJQLEA1JOc-$d;twrhH1`hf?f535G<f6r{cckxZ28Bg(+^#9(#^
zSda;Cs0<kLkUb5C5)iS7k^fty-cY@q+RXD^kEh7;E{*=+Kd~K&;D=iKpVE({W;NL#
zO^OD&+J;|6quVh*LCh;~MfnN2nXR;{bUMwWM6x{h^VDdAXE}iE*u3ZRQgWQ9N}r2G
z7;MAN)fDYCRzNdkW^9{(9N)7^45*kp`e>mt*s*%YTbcP_++0q)C|MTJF!wQ8*d%*p
zF~iFFL>xqmsn#r>j?d$6E4GiFnlRvR{!9dT#bV436dqDo^@xg`3vDZ$w}nd?pK1<K
zO8h1E(zDJfckE#o(Sbk?1dqCYT--fbS|D<Q!Tac5>v8t<Utj}4v4u$s2?xnjYEaE{
zH}pGz7&1KaM4?epNW>cTj)#l21Tm#!@o#lhVgk{L7TM??L6v*oFhsP_yz_Yb>>q$5
z22&zRs9I_Suzw}QnxIt4M}ENzpaaXYy;nYSw3NQ6WYexv$jyLuJP1rF2C4Ik>Ysn6
zmpdpG0Dx>-x~|f1jDhdo^{r(!@-@GLG2aHA^Qgy<url*nyj&$pQp2Z)^vkZN8!7bD
z+u&Ns)~r76%g~kmhFNx%*GU1(V)p}xiQS|mDukZvn}{|A$m~Ih56kB>%gcA!sh4I5
z5uON8tPPo5=x;4>(*0<ABZvqtRUfzh)$(q@rG|Cq7Q3pC2y5=VCM)u5B27y!F<FJ6
zaABl@X5GFE?|PtZrTOpM8t21B8X64huT51|(Nk1(QyTxp?W|XRkiuarMy8S@FNAmJ
z1Ip;HB8^AxU$`js|70j>bN7iRI{pOtd0p;aqTvoVncMFTe~{$;t~Zmi^E$0^Ge7)v
zYK#7SGIO{M7=pHk=|m&r*KjMBR!<R<P2+JG3Ax`D!5`Ax(oZS&orI<|q)9}mX#T;o
zd}_yn5K|!p%3F-6=5qO^RZ$o?Ys5}%RS!XPRu2>cNkI@seR0;M^Sl6TZ61%ygYXdP
zLQ5bP=wa#UQ!TzG*Eo88FycEgB;-r<+R*f|`Ehi|2;R5F4tnmf-(S8t&0V+t4&ImF
z`6pEaKZOWDxIifuPX2|7a@-6-c2vVS^QR&?+vnX<psr}kaK#bnG6&*xFlB0)MWm03
zzh%n%-Qb?hu{>G>lQ$B5ZQb%b>VxatcQ)!Z{aK<*{-b~yDc+BX!;u8RX^3k&$^=o|
z0ZVh83eeB@3U6yXgU~LF$KZ4w^r)N9zH-Q5mC6GO4YD7pXy8FO%woR)(^z)$^r9%?
zof`%=6yw)<2bwmJHX6i`$fvarW6X3%HsqbThLy66EZaWjI{<rC6|z2`zwA%Q<-2}&
zio|s=NeRi5@_m6i3GUs{z-SnduI#-fX2_8u`t<Uu;kfzt+;n#JUxp2ljetN&nK1n)
z7g+6%uHQarA8YatNiEgnKlLk4DKu~y=D*Z?lLOJiCOx5x&*^>BBU(M<F?SFfm-?Z+
zgobgD(>i_6BH46>Vp5TC=EyRAQ7TjoAyU4yV@3fU?FjNo1oJ4J_6Lh$h|{xyd?jF}
zz+ixhZIw&qEK{hIP8Cl=zk0&tFMO(-j9BFHiHWMa|7D^~p}BJH+s30Fj~5M%*A_>u
zljMjEYABEN!i0dWqD(=Ku)TR73yu6;JW^d3rE;wz7x3a8-EX4L>Z#P$QjN8ZLUFON
z4bwl9$Q%O>4@&i#xBsiw2Zwivi<;ELC(ee~Ni?DdiRSP0^r&Bctiyx_*T0#)8OYn)
zcnzcJRE`0-ucALyd6T^H98OykR4z@Ey&<y<1erDOWQ)nT5@&1@q@%|4Yh-KMe%5e#
z_DWwhV>R5yM>jKVxBvqHL18cZBLu=JqCiBtu;(XkAy6RD!ANNQg#Dj5iN{<3pT3ZN
z9~?2z>DVyFYdoBh&3Awk+dhr3DEw5FLL9yZPypweBgJfcTxnSG{&<y9?LR9HfFhIT
z@mn}ex=*2ceNWw%0tX4nkI{LxoJBu6^#^&7MLdo!%2uN<81YKRp;M_efEN&e5Va3~
z=iMJn8J4W8siV?fAMa>|mu*4FE~hAs^;rQ($~T3Rq;FfG;GC2BwXaa~5Vo(yM@~jv
z4PzFG)wffO6E|U9Hu33h>*rqMcT5wLqw+?67Oqc90jW~8D0(0BSwQ^yZYJCy+^20f
z83@;kAh>Mm%;aP>&V`4exoEt5!{*FJtqN@7`PpJ2!9$02GJ&&MED+W_K=4Yu%~sW`
zHyf@?Psxum_uHu45%~xZBbck$JOXQkfT}FuT?^rp5r$ySPhH;~>LYc$_<6P5y#>Wy
z63_RwlZGZ(I<7BgbEMt?RLsBp2MFE(h5I{F4Kk-osU7-s<wT^U7=t;$&0E>&Lm91m
z(U}ZrhuJRuJ-zIiuk3}qn^lAT*9?`o*_9--mZsS$+6i9hFR}<C+p2P_d`qn{PiA5D
zLu`3a6V~+(8wa#($v}meOg9~qd4wCQjL*O8CyWFi*#c|<Q}g-!uJoj3fM1!_t$g5{
zXwi^1TY2LLORBUCl`~Fb*KcILG=-s#Vcf)#f`$Li20(!ucfGkIN%0tAr7#u@!xfOa
z`-AUUjtL<EPHou!u+q|I>S2E&04SAzPIYl`xW$nUHGjo1EdG<=fZ?(Y0&@4g6JJcZ
zDCs6=7e)bJhN-eK$n=~AZ{Y?lndALZIe7eoNTWOysLO9}v%tP=>(R&|bXp;%Es`;d
zH@*KlwU+S88KdWZFZ}Ey9wz{uj8IBfs<j|xRuc@;JLfWn)P%p6nbyvM0oIE|iYf8&
z{jrzC@sT5j54~PhCi8s~*;R#(gnzVht<*uU|KdSG_9>L#3s`!2u<`M6y%CE>W+UOp
zsOv7)RUfNqfHl%V>6a}Uw6#c2>%>9@<+CHSiQ$EZOl2T>J6z3?!nFt-bSJY({Rz5I
z@fvTK=^C3F8yoo^#!whT-jD-jTd!NU-*Y6A*gX()#4B?A2eZMkK;c*uAJEdN8d@O^
z_w?~7Y|!gO(VGTFp&PJeTs^{T>LewQrg-#Srxy$V8|TO-Yw@;b{y6uVmdpV+Syf$4
zUOMk}Q0Gnj4;f;F4u@sI=}_R{rtwJ{E~E{zV#yyZ<9}-PiY3DIkjIG^<~I$F((>Yv
zUI{`iw{|To&$0=o&<P5RR;KbeoMP~q-P!)f${_ookYH}w%3U3P13V|>QL+!^f`+^C
zz$nOp_GioZdgX3)7JA*>X46IVa*^GG-13vX;XsNoz@k^Q#*9%a^9p8yzWs;<b=+D9
zJRL*>@xHM_hV(C+$-n7S;C_G5A)K?3HZL?q;5gty;q?oNxe@g9yLcI^!}y9eXUiXN
z|K>c)Vd9PVay@>a;r?1e;;eR&M=5VN?#pac1F}mSW&LlLGvwN3%C(ZOKlJAAs+`q&
ziZ9$rdf|{1IasmAD&SlGtU9K^@{=@nV7EwK^w)q38G#O2EH1^{c*$*d%!0}fEQt~U
zMB*xnL{9C}=bvcj>SIYUrf$>X9qz(qgWbPRK}BVf_hRqn_j)WN;#}Loi41$0ZqZyR
z@;G;5hws01agJgdZMxFza&&Xvx%!nIdic=1{r)21IX-J%sC#jdD<4AZsS-4=VzMil
zjuGOExOk!e@{`}}=b0tRGJyoCS+m+&{oLAo90Jt;7&<^WgJ*5jG(85AzCmepc^TK}
zMR}iT2E(&JkpWJW_1_0L${bxuHOBt&YvPn~BOVionvIHLh9>$lUgLv>n!#J0`T6x`
zu+(GISW^a?wT{7?s~|-X0Ux3niET#5tn)(zRjzw93wgr7V;{F9l49md(xMv;n37=l
z)gqD944$wX8{=Z(cdyS5tLK$9`aRDS3jK-soGsN}*oS=taES>h$@@kZzB+EN0=?s8
zUC`JLPpo>JfHdk*3$M|s)DzaM3;(?7GCQ!iU~Zf90JPqzfzLX93^3=cM2mPU=Rnqq
zXd8mXu+0hu3hU9mue?L9TwvoOkpDvBUvicaBMB%mM26|Oe2pn@-g4dz+Am#eTo0u5
zg6WYpUf@;`4i!mxT0Xih4=**z`g%0v7h`vl>R9?EK@fvQ<REWc>X9U``e+X<iUnD*
zyJs0k!AL6;2bjzjipsWp^@AzpUw(oN;Rv0tUkVBLNg`Rc^u;@#X8&@Ik;n_qnCRZ=
z!T}YB6>G4q!Cp`^gZ=&fenq>$Hzz8`zt4w`VQOvt%fM;gt|QKpQsVq*&4-zH(UUBd
zc@Kzo{b@*}w>-7KoIQ68i^Ov{79FugQqq5`d`t1h6k1B(OSHM6@FT(OXybgmy{~9%
zvx%J6tou4|{%bJKBP`FS2h}X!n*QHttkd{uO0=7d5PSW+tWUZbJnqW1nivpCT02%k
zN#~Kz$}gLdW|z7-n6oQnPvS(@a!3!b_#8P^zN7e9F{$q9eTtSQJ1ep3{*9^UZi}jy
z2wm&aXXdc60JF<z9h%3qqU*R!nR#I<2znVK$F1v6o<hy)xW4w%F;Gtcz=786A@?(J
zkOyF7={NJBcXUH$?Cm@A%NU9>1CBf$ETE*EQ!4oUZN9-13YO{BRqJq}Zv^u(HBXJA
zd_}>hgw?q%_-UKopJA*&H-(T)*2ACndD6f;_F%(6+Z10(ux;dbUYM3{ki*qkYDx-r
z>gfVGyt(OnTz&KDI@f=Zf&{q-CG7Q^D{^?7ZO}n+ivF;%#cIe|C!I6>rjHYfY%!yT
z(mRzt{9p>}Y9OD6QYzz0m)a_r0nQFCAcU+mZ>MM{lJwoYZf1<WCCK<XmZ+KCz9(Ya
z-mME6b+w7Ka_Yq>GZfdG*sch!+es+3tYihAtsYz|X0f1~s!^M!tnGX-4T!mbv;cMG
z)_jya-4|ZYm^^Lpmu@)rM}l$?_lB2n3VJplVhvD_H6Qw4{tX>3K-|_P9M9#bqHI@(
zCs=tuboC%+HVQEP!Ug;zIQOAto7EL4>sLk{s%zH(1^2%Lz%-Q}g&$e==^#+C(dB-{
z%iV54ZMYoRKU@4-8-t8FNNMI}<TH^x+CEdfjWyccKBuuab>}Ht$aRBK@2R;8OZM23
zo26MleGf=z+WSVnnYt)&)sM9TBR{Uc@`<tJK#)FgxZX+v4zxH2_HUSHAf;N3lV@06
zfGc6O*df;&z&GodJ1fmsIw=xf@_;+X<n2_A9sb`|p$M!72))rr#06I(K_YBG|H^Zc
z-b~u9!9i&YU#9=OKZw^6vH;BypX%@b&3TTkYY{&zqOlky`VMwo>n(^{a=s;>T+@X}
zzX&@hFKB?*>y-fg3JNu3>m$4ig*ira_G%ej1urJEHQP9AStk}5>YNV+E?145L#qja
zIT8bN*4tsA2dDVI|9dY~P($>OA?zPjY6s{HNUQ+X2jo^YASw|=q+adgu}j=*mi@&u
zA0?0m3?HX--_=ptF^3^xb(l6u?qCRvdI3f3PYqBQk(Ygvg6~fP)}e61-?@<j?lK!3
zTL0+7zY)M4>#syA(c1RvXqjkW4wIb!nSbWP<LJJN2%Yd9U<I}n1WxJ|w;)O*%%cHS
zNkOih$NKQkV9WCl{6%4EnV$l~qE7r2+K8N*tK!Fg5k5{Ss46?u{rq!(RpIN)P#`Jv
z3+c)5VU-z~J~jWFG1E~1vsB_O<_n308^71yy8txx1y@t}Zf>D1EJoD|K;II_D-$>Y
zQ#()Y>rfhc7$4V+4dpW#EF1T50-De*EO}I%Cs80XTuKtE>I}v_Dv1T^(JP5E118Ga
zkF`IGfjYVqZ-t?xS=j%#@u2fkdWg6&G_=Pgyy0|R@?(D-F8b-=)2H6~(T{iQIDWBq
zZ6V7pZ7|AX-|ofBDC3lqrAxK>56E@(#6)e<e@=Yw$=2d^^2R`-+`bmkrX!eT_bV~K
z+<q$gJRau*Xxd(23d=?s80l^lkY0ok+^Y&dMr@H|96z9Y?8QHqE8;+?4f<}|5V=xK
z8{ak3U2=MQ+EkL4tO4vYXA0l@>kvTl`i<77-Uom*h6h0onuB6@KnPAeX!^8fNCo(1
z`2e~<_r-0L!EG*)54|Xe5jy{LV3si3mQRl`*LC%1qgP_;|AOuw7M?EepYYS_-)l@v
zC7}oKHuRt{wof1UE4&>~B?0$fUe7(@Zz+=kjN9&u<eBq|1T&RDsN3IMJYk=l7|v&G
z-8_6_IR29N$N4u@LyVZRK%fgtHOIFbeCQVocgC)iQVAfuKJsI*BAn0&bnaL4r>WUt
zj<>rj1rFsTfXRq{ZE^a?*uV#2Vc~2gX6nDT#!1-t{CvX`<(igk;>bR(ykP$x;Qe7_
zzIjEW6fv<?adZ_elT|eO-^4;;@6y_JQ(4}soQHOhv=j2}a&d888U1bado9}`R9(CK
z^~u_bLjrg$)fe=CQ3soXIXkbsDW~RF3sLYKP&G)3$y(mQaqEMFCS|-3Bv`9wSw0LZ
zl4AhHTKxH4A{HX2_=RJt@Pn*0_S3{eX%a^OTh#57akQ5$URR}ba=g7?_8H>%{E;+D
z$QGi<i(2Gw6K)-&k-4_P+$h(&_G$;{oB>QA1`uRiDu^;$A6|#{{5l5e-GDWW=xmDk
zSX9OoCq)%*@0Z#57}M<Mz=rmPekm<=Ja~d)Y&StR@d~mT^wiNoZ(aaPt<F;Y>lkz=
z158MTac*ca9K+mW_l5m00rziekzu}Ii?2C(zpmg70_KvZwI4pAbBOKC1v1z4pPYSF
z$K~|A3(0)g<>Ns<XT7#Nh1!?(wAR`|aFUH--|eMvbH4T+#z@CXt8{)J%71UFIBX(Y
zQztdJ07w>eT;}axkxavZoah9SnQPr{deK7!`2KnbqE4lRa6t_x4r?DDqb}ZsJjJax
z`TaB1`)`7f0>M|OSa;EKHP#TGvC7y|Q=kn*hZkrE#xm^1wC9E>WA~X>l<O%5dR}cu
z7xxL>!?O7Ne5o{bb3JZZ1^(YoJq{Ie+r1P2X>{hJq@#jc6;m-J!-Ntf(yNeF_>D=f
z_=Y3EEvI<VKg&aZ;qDW;*bw3EYaRTV+T1qa&_TfGop{g2XFG30nqR#g8&F&8<yAeS
zwGBexC&?1-u1r)@vluWx1yBy^y2qq#A~V;LY8|f^ANeWCl&JKjNezsI0vV=W&%wn-
z=QKf00S^HRkw}m+OwG+T<|}mDc^ye;Ceiv4E&Ip{el_*<xFWD5_e(Pt3zSjSdfo+j
z;4^#H;;iYhlwM!sfp&%>1_qm&ZICR3B_Kp8bPAX?^P}!bA}tAV)cG-ahS7u3ZaaN!
zS|WWDtOd-YXE{cHYT8B`CO$o!49REyf1^TzOaZ~`ty6C%4s_jbJ><x*yFPGTE)^m>
z`Ajr)Ey&_myqJSJD6^L#-;yA6PpOAeh3O)Ad8!$t{Ri!E|KU?L?jd!g#ZM1sPnGZO
z_^fS(ALa4c%>jJ<XgJFZsCd}P3K$0ZxygVUKQtZ%If(85NY(B!JKKv%1bPhvVcRyd
zqrq;o=>x6v6_L{hvJ|6<b9G24V(x{2xgVyUwPWX}!+#n~wF!Jsfr20~M~cK3T)CF8
zi@~{Zor-SPfGJA<G8NQZ*!UrpGo8Zs@S0#$<Gk+`)JgEP@9T{Y;FcaiLqmIy-sCG!
z5TwDDq{r8)<~6w>j`T#^mhsOn;7WWkIvT@U%krrAyQz;8Sdr$xb10C%P2qYX19!L>
z2^XuE#VP8ZZJ&FNggf`vfsygy0~$;{%S>XU*?)qGu1lg{rJ?@wupD*H*T6-$VDc&?
z=C{u~sftVuQNW68;{@?+a|@oI+}iGd>{aL5L!-ilB7OwVmT)r0py2~;!w~m$B=HUU
zQAjqhI9F&kp49^nC8|9A|Css;peXw<Tv?Vj=#Xxal<p4c21!x6yK_}Ux<R@_8kTOP
zySuwty5qk1{qLPSv$F%k4*UM%)N{^x&Ohi3nQAP#gc5PVDLMClV1vywx)6$ln6w!-
zSIrxi`-Kn(jaTHwHptic?`!KGi5HaXz9B<S@nm%~WlKt~(YmMtnvQ^$E#3$fZY=wJ
z)+|S+ohb7EXUx3@?oIpp_X5-aG!^M6ejI*${9c**!N#I9fB6g7;kb(nxUYL4DIo;`
zX1RQF`_b}}_QRjtk+&nl3GrWk4aZ>6Lq>>!PFZRoR6)hKz98JD&yG_8&M^vO2Xi;_
zKbPuxox*wGh?RS8lI-RwbGUGg6^MSMRLRai{moD5XA~R1S_JUnknsM^pDGk^lF|e;
z69H!HPE3u-C-r&@pvKRJKiyrWUYPEq4rqq7s*apAQ2e)9@nPJpy1~cl=4qK)Nl#dS
zCsKclHdel(VL8l402yPwIfS!2pR5wk5NI*_=PUsHHW2&nfkoEx$|F|#-TKCJ5ETJo
zIAZwU5)8!zEg-#z=@T9J0@F_@Mq2Sb<Dm}Mz>G#0_PT0pthx8QWXCu;52NV{#?d+S
zuA~aI96@*F#-@W0|7Ed+r@)sm9x6*h_J6(*75Ya|Pr1#b4H>2B$g`qd!GNR6+i>6L
zQ|0>DvGaX*bNFO}E(Or(+45v0;f_vyR1+*`tyt0;^i`-?C2{oB+<sqA=5Gk~{@R$C
zt(-g8v*(6#k1Sc*!wd|DQw16_uVo0;E8l-x9y3LJiC<=I#8wP4Wch#A8u+0PlO?3j
zO+sstn|_y<=x9n4zpJ|sG1~w5Q^-|QMeDZ5<VS^%#b5)~WPq@k50T#`C0zA2O|syX
zcb*kO+fX%PSH!h8z!Ua&nxOxCS(8<8xy!0IBrp~dC5(<tG;^k8-fk6c9jig;|7@9r
zBTx+33pBK%o><=Rsf*a4bpcp;x)9*7IMszIcYQ72c786(@-qRyBwlN)vkWG*w@Pzw
zeKqbgle`h2dRwX3x|eO#!VXmNc>N=gU6k4hFg%Ss{o|;qtfMop?J96>Nu1>pexeEY
zFMIM&e1OYkBxCURx2s^`yJEfpnfflW;+BDlu*{2}^aXtA6}E%|zJDwr8k2$#%(3k2
zw_epU9>yc}jHA30RsDplzj`%*>2uDri3ShYU=mMQ1vYgpFik<21B7(o{Hrob=zbtH
z!8_*_m-QF!lN(!rI}K<{2f8K6{6_POBJ;D|$X5+2utnbiAOO&UPBAhuagLOHWj+g!
zL7C6wf<ib5NSl%Li@Q9|H`8{_`SJ`}ob-kCGB2RQ$+`LG;uS)&l@a~l#9mxs35x%%
znvC4`UlC^n^9Ghqap>O<DNJ&3cKzQDcHlroD1cm;YjLa{F>A>DcWf@h*u++-O5wa-
zGTqREcjUlwdj`{Xf03f3HHPd&hw8G<hd=d7lHTU#+5kuJXv=h2<z88tH)zzY@KbXb
zW!F4yR}@t`A_U%}FUjmd#4-J-Ca<aOx9EUO119}Hsf`0y3!x8=1!YaXv72}s`p*IR
z0hSCSs+$Hvf09@w?dm8*0JaZljX8yxSpIq@(;=d@3th+cW}PY4sqtKN2n}Pgj4-H9
z)46P_491X#Np7bmHJwX;21*)nfBDYQ)A`a3Osw`hC7|IljC}p!bE7lUEV`h>jkFCB
z11LHv?y4pj1DAsY0VyX9+?p;Vl=!;&>u{#Svi2Vn__LQLj0AXILET-0*J8hNN@Y(v
z{8@Z}q1;>xx*9FB)THc5h>*Y>=cyvi=m@Fnmyf;zp#^<7DffHj55>vSn?I1m?Vc8v
zmbFK#HTp%&jLiN54PJVb-(SbFTM>?GQ@8b2GHKl@0Cqo~8iJ(1dGJ|_!pIpY&=)SX
zxl!4x5cjU%Vl=PnC1bF{e~J`A;sACI9N=dqJq3`D%>kB-o3ZsHurJ?a44z9UsLtd^
zKlo5hADe`Qz3TrRL*w^jK2ip$Ea{qBHm;WE+Yx+2o$93}KS_(U*2yi}vQ8E{=_O?x
z0Jwf_1T_PkAww>~HOr<W<zlNOwUH5C#8Lg5O$03gUzz^XaKJk<D@3|VLj7YUN2JjM
zHg|2Tku|yGQsND~k%~>ly?g;(^MrO!{1cd^{^I6Y>$m$-AJMVs%nv&b^D>&su2hUd
zwJQKhia?YV_i-3z>FSsfxKgH4zu88=;!_<H8i-IwGqCuOu%fKB;6Ht%fW=J(i_p%q
z9wT|SX@K(`T&yu0Rm7M=>U)3EA?{HZ@+=@uRDPqdBE!@;X;FaC%DAE`jF8b#CGG{L
zjVT?ykK$^%03J_`5v=LTXN1S{QRgj-L2KJ%Vfwc)@W{z(YS^;+Q;70-O+E?y1)t)J
zD?$gmWpebao{Z=(-_O7g&|hcQu)FP))Mq#1-)n))AoSRhnm@R9clZpC?J)qT*1Vob
zpsf5Y&=<;iI<^JS^4I{}q#R-+`}(&ReerYyj!mZ$LJ1fwqH93UbA<*g2ut=6282Y8
zdS5|6)cH#6A;38|kbwHy!M|0kG-WkN@9n<|L;&9Um!mS)PvUs~{#H(iV#LDqq>K3*
zGzt{6#(<-pf7JV4v?EZ{Vg2S{JE_)R&uyJ9-R#f&mf2zkcg^?;d0_*_Vi_YwTo;VG
zwRTxamrd1+OG}R>(}KIqJaD>a3%?tGs95S9UZ-QD1TB7lam4phxZ<MFvuMOlq{ZhU
zZWj}GPOe|e)ybR`sKEd4Y<4m83z&Qumd5J&7d;f>x#Yiy8#1N=ZBF$b@~}#qltc2_
zTWql(Hls|E;|!xrG=re`%zvhB8=})gUuH!~R})mW4~binf3t_DgqMVrjscYNP8#b1
zBdxZ`;B;z;-8-qdTEY8}?;Nu8+}J?;hK>(%Gq^MjVc-y7^V@tNkH&wS11OGsS%Z_c
zPC`4Y$HICHrxK!G?_j>q{T#qE>I0x(?Fjv6{cE1x?C1ji<1G1#D)YoUbqx&{H<J}O
zf%=`87f~PjdG-FRpgMUOh~|Df+{!Vc(h2`tXA>GP_;BoRc=#ej!?&EYIps3&(`ibz
zwC8_o2i_mig;g9Gf0jR{3N2xIc24+UvD9BCcUaa<Sb~740QTCyV^IIjd6pCgseL(v
za>o0T<N%D6XJuAP%I8m$lM;p$@|4Xm2!c=@14Q~*J+%bvC}2n{&<GO6IlvWnub^%H
zylOx>1CHEE`$>dqL6QY=ouS9v1E0^f>9gN~j0#7TRQ0j%<AgqUwNRQFPdu<6ZenBr
zJmlmyX2Nb6JO?n0HsTAcnJ!gEaOvj)`PN}V#q+437nnftzlq~cMu5lY2|12NNj!j}
zI`>Cd38*?GX!W<7T`1-+l}k83XmL@zde+#$%TE%RT!H&JBzx;a)K7LI=@sWF3$)~-
zK<bMt<aRe&I|!S>XP}Vm9R4$c*_PM5Pmz|KzCV<0bdH_k>9X%nl8<&)(gHgv_x#16
zR~JF8q-iUJLg}|_N#zNr?X{A&briB?gg5|X0**4k?#!<9A*gB;Fni4d86w-n|D$rj
zw2OYu2fuL`Zw{{>Zrkzk_BvObrb0IZm4A|}>8P%0GE++Cd+I|IBDsBcK7yy`Eczl#
z>kZ5(wj$VcFcC*xgWum%=0)!mb?w&YjX$cS$?|D}-obBdh#gTLYIsaSe*P!n!23P5
zpMt?7>c=Bu=@owf+f<}s?yS<s0Gc59mgqm9i-B-~Ldu&KYLozE{LD^rSqM9@*7{7N
zBP3q*PZd+qciX(_6*%osQn^a?Fn{15PEgtHJmwY9B^UT(u$rL%V_e{tfANNub`4^p
znRi(K<xN(D-s(@ixqn_I4l+Y08gEr2+_%vOjlvN`ptPkPLs-Q$)aJvNpK-Q(xY3#?
z20tO4`Zt+rK;2kV*8KTQ8ckS?tTfpNxP>HcY|Ba#EtETVJSWy7IXU6L9526oaW-XO
zh{?a>q@rc{le-h&E8A0!yRCpH4>+k50dEU{)|zE%1kB?Yzb{^^e}v>y{N?NcZew@M
zDL_^g8{JnneCew^X;$E>I+#qnPd~2V{D;#qVVUWEhE*V43{sBX!uF)vkbxB&k^6!7
z8GpYQ#CyY<*OM8@``_k9VYMO`&{8pH9BGFX-1*h-{YeJc*+yD?pW56E{w%i342)DP
z6i&6?oC`IbZbqiH{X^3zKRZDQ;helijv&t5M2|x@Ury<t+tJS!n^bUB8ei}dEQPIG
z<KeWo)_un$zEC%k9sHlHuF%1aH+HG|YH<g5uE`<ye@ly2|4?wTt}vIyh<WXMc?2(4
zu;+DuUB?FX4@++y6PFN)MCfE9Lq6y-d$h>xqIw(JA}-ISZ1{cg6`YP7`v*xw+04Mi
zZy!2wgT5hPz|HDOi0l$)yH*d}FUtz|#U;$v0YkX9eXiUu6B0a!1-89~TyGn%7K}iV
z;v0XBtUsmcrf1ilc5W1#jYjx6`%jUUdKYKtYNh73>Y$M*I-(^~`uRzN1|7~Hnyl7n
z-~1LQ_*g{U-nWcmWPm8~0&X9?fdu=aVzBsisz_@xmx@+m^+7%`mK#I(1;h%q$Fa7!
zbE?~DJhT}@c*Ov+w`W0U%AD$B7dP89S?|1GSi$%0smXS}+WPxb7HcLwS!b|sg*-t1
zi8F51ALw<D5dp=jJT}c<k&N7)KWqzKs*D6?28~vm>r~)?kjeaB0B;cqt-nwF_u2L#
z#R6D%$!~{mGbzDQ$T8T%K5Wuh8nhS@ffTsZ=70C7Ku9>+Xghh*bCxZ<B-`!_!71mW
zo5lK0Vx-7q>E*2n0wq(N^~QvzmV|^5a^QbgBlm>Iw#3Y45Z$!h0i9q`1ZhVf7){oI
zWrHio$%a>9eXcyR6{B3<6n?_oV56-CJx-JNFlXiqwo>=AE$a(M{<N+jm%WMI2Eouy
z7EgqZh3W5LuWz3>$GKk`X80wi7zFU=Jqe+y^0DNYZ4agRx~zZ}OEuNi7mGbZIs%?o
z2RueE!cp?4>)4IrO3TrsBWc={bUiilmp#%{xj$H}RbDH#Dl16%wI>NVF>LdnMI&>5
z|BhOW_5K6Xj2*rn9)zc`dmj_kp3D#EDH#&nd#adVTcmj2xE%&E1oswKw4%-KJ{_kp
zX!(rM&l+a->QraoTZMmvH;TXle`A>IDE$0fK`J9WpO-W@-KVnz1$sRfjp4-4Q~;U*
z&mO4_!8IdK^xLO@wK3tbmU**V7{Q&*HaZF$>!p7Dc`fgjjT>RG{KqgFq?q_u1gunB
zuzYz^`L#_TIyft*{%?(Q$W&_upOOs5kh62ET@>C9nkO>Cb)&2`#9JAQwICvMe{gPw
z`(i=(b+?Xf+ng|&973#SMy!rOk6LWGrlHWWHm|qW>&kp(&44HhoX%?;H{YAH0H(D|
za*#td2^$>o*T3>$^pDa8l{yBD2=2=Ye>g(Xg@I3oU_@v=UX$4lEKw+d&(R|iit=Qr
zx_2-_x0M&R-NWgep66>AqYj2xQb3E2SeVSj;7k7ex#<`gA$;Wt%&|~?YuzdXRzZ(|
zu_9)V4D8T2xcsn|q!m8?-|aL=^;=Ii*B^Nbc00&^#7lVFz+q3T2H~iS_=N$YZhx<V
zkC7iH!n>zV+|J6F3!I!3PHcQqoUr%Fkd{D3b0>qW2wBFO#bjK#s+lwv7@b9HWrh;b
zobd759db`nP%QNTp?*|)a)^6AQ)jS+QSXfnr0Sl~`RyEU!hzlhP*{idR=e8)j4n)8
z1Y+%9UZ%P#{xX=>h#^cS0GH5vtD2B=U36Z}npf2bYhwImhR3YmNcYPgDv-ONd78uW
zbYc~bb@|xo78r`iigsc}ct(+D00z2Nr|5o1J`hX_^#34Q$b2w=2js(-x=Ar4MSx8O
zb{1lV)^iu$4h4o#-6~FWJtY)3?{cX_z%Vq`oXiwc(5b+8oM>cE#Hg=QgP40`*hynW
z7!Y9jgyyCb1w4gMmTHZ>2zL#Ch|Y7yAIWfmWQW}&it+3o@4Anrg{$d8z#(x*raQLw
zd~<Z~8^}w94Y94XOI*$Eo=tiJm%PcXs;a6hGaU4`X8}q??qTq?W=HX7K^GP_grnP9
zpj*9|;O+<!jlOClWZffc58ZqTUt>DsAD7f04qJ|dCkaj2m6M%-{}$D~`S5k&!B1jJ
zH}>yL#uSwp1q6*jyV5L_f4BwRjZEt$0BZ;(bRG%p))y26!HoGMvw>53zFAJ_c8UAw
z5~_yye9gy0xi<YS320O?dvWf}=YGN-Ab?5HRl-AOWDch`r`CZFGXZUauF{2wdf4CO
ziSg5R>P=LO6T-r5(X?%i!&-<Fomsfw1*rIx*DPT@DwM4<M7AdV2w%`J!{!6V8xS&>
znM{cDvGBQuZ4qQiSKaXb`d0;RTcFl{LKvWm;l3kmIFpe-QNB`ui~uJe3}O{CVNU4P
zw&20K(ITQbF3B1-`w}72LxAW*vT;32r1RR%D^Igjzqo=&68|o)drR0|cge`|2n~;E
z!OGHR11H4KYxyMBK=RU7&AllVwrnQ<c2`z@F6ck00`^%5j`quWLPB<}^~6T6*w@=O
z%t$)WsW-2LL+(LQlfC|wsc!5S@_qE9QfK79Kk@glwF`foxe{Vh2Am`Ka9ymObA3ev
zuDilYE#=TC=hl<gwW_rtB@3{(!eS8Zz}>v*&%WMHw)PjDXIq2w1z(bX{CL)vE75+~
zskPAly3#lI&pJE}?PJ>%AFJ5b!Z6;9Cv`c{T8<-<M=LbO_=fkVRcH&Krx}4}rINcO
z(Q3rX#?N#WM@->^HCFPfCT=a0Qwu%xpWxh64>7F3TBHxZZ5He8BiyGF2>!d|aA2dk
zpP{+*jp|hybLT{IA)igKgr+-c_XB6=hBq!YECwm0{xlRxcLj*|1<~7{fBCKSQu(Tf
zMCw6gtMbv}T?K6~JQ$NT>0%Au#t{b&Y=u)>`2;_gTWxN-(h^`{31wz+AFuUXc4h+3
z%n8JCYPco_Fg~@owtYjeyfS9?e|=Y??Ms(8(X3$N38hf1;a&<7e<}MnrFXn60tF9J
ziIAQDrwZHJ{%vjL=FAJAg)IBm*;{wP>n87n$+SrRr&k5Op)InT54V1Y^EIU>u4+$`
zp68=dmYV|Z;(|%X&F|qaNd!Ec=Bg~Gqh8jJ_^2kVKH$wEN&88n_O$uSZa^13G4IVK
zX(B{NCMPFJKe8P*b46U?N}MiH_`f{29RmXTxY*ca!FiZK=M}3@FdNCU!4_{-CYAO6
z)IwEU`B}iltEDQZ6UQTUOvke+7vWu=22rWib<>djl2zgh9RxZhZCx!^6R*{LGDCv{
zJJg8;@65{luisu_pH173Nb}xB&K8Z2W-@|I(8QDLyJvPHM%P{)xvt;mkR9h?&y9fL
zzyo;sv48zdHzu~X>k;ZapBy*3JCa^ARB!^!%WSo5hm63^fYFf?{IEF=Bc>xpur+>K
zT}3egd=MWoCgK+;;#hFB8dy&6xj3lP8Mx-|d=|srS0WZ|yy&_1gM)W?`)P2E3IwFF
zgtUW-G^x!^Zujuy75%O+a3f&S3e$Xl2eP8K=kQozo%19c!h}~Zc{T2pjjTIus8IeX
z$^irulO>5`0V=h%Umvhgiv=S%+%_LD76jadZRskepgTsszv=Y)LpPfeRm9%zzB9OR
zwbh68%b_e^6foZ^7bs*@F}{N_J_IxVxsH$$EuL@g39!cp!GXWwzB}^P86juqemukB
z;;Ie9xkK3SzvH^IwSNT%mcxyp;J%8nV(#C3m*5RMfJZG@{JZxXTm5q#;D7bfZ0|T9
zoPJ+g)xRQ8@+C!NXKDwWoR8oQj*WS8=~#BaoqGXC*Hdq33%T%p{fQ{3@YLs4GzBxX
z^Q-ADwj$@($l>?utn`lIR_E4^X%1u^66)&eXjVg`gYtsok3#c~R6>m4pJo^mao-|f
z!c0fwd5ZlE&db?0)Va|~l^H&S)}zc+6wkICUAWa3Vn%fu_LOB}-tl8k(8X)DgyBM=
z1_^mWP2Jb4RX(e9iPP!UAqxxH{ul$Nj;3QbFWEy{xigE7EBA{E#3P)=K1P*Z>RvqB
zrr7>F!hYrNR&m3OhYW$+A<fI>mA4?|PmFfjSEZIo%R?5;^K!=9A@57FxtVd^&0W*6
zNTK>KUpNY<bVV(=_J_+I;c*>p+Rz=(kh39`#BN${+*;6;eS!iUG?NZV;})j1>l@vj
z3qUWX=}a(5Qor10%{~T-GMS&>;4?#83ScFh#<qxhffI;{${f@`6+D-?5z=@Rlcj)a
zS*q(c0}5(a<=p1sF+wW=uh;u{er-4bTV-b6fu$pD<7_RKj-8`E(ChJGVh4=8gbzoz
z<13bGsVUn!CAivmMV3U>;sNAcO{C26^Sw;F&AT`jnE$63TUvWop?RSMpLd>GwcaW>
z<Mc**VMcyD7>L4v1zgtjGn^dlYIs=-@u_m&?97WnqSj9HHXpBJ0`#<JV#P4xx;?9w
z-fW{t31ndId4zXo^2s9z&YL`d-zN59;esAfv0a*5m*K|ot-Dx<L?aOK<S|BMgnfj)
z<xK|fBQ-?KaYOLUaU&B}t!BzHCI));B^jYlO}eghvd`Ai79kEGN|r%YTwtSoc~NcZ
zA@%~2j!^Hk>yV3WDM;Zz`LM~lV+SG?0&>|Mt>5!$U)&Jc`5$DN?r9lMQq;W>q$}m3
z%vm|XFT_0KCZMZWqPq(43U8RK;NzL;PnCJa=#R1|4Cj7C7qLy26wV&h2gg{`1IO6H
z%>pAUktLd*Ic*l>_a*#6ZurkP298SzbmBHx`2p*;_;7}4>Y`rNME#Df;2|r7c-b~b
zZq8y*B<!^5)zzzUSaldwVb+n;X!uH!y@2VoaXi8m{}1!iCxwHy+qk4^hSdBIj7H1r
z-d1ze&EdU%$Ykgtt^Tx2I0LP8A-BunF!>A|`HjIx3hZaMsSNd_G6*Uh;Jh8p1wv-m
z5=K=VvOevy`t<@dhfL(Y5h*2&F$-H1WxZ;tuD&F$>CsMl0sm55kQSy5>{jv%vA6a%
zRR5O?z|78!hwNe&QFE?l&Frd~uCoLFK$a02(y^ITBL69<X!FBOVDhB7riq1BDBzMf
zv_L)9-qG1KGYdo>RK{_iKS0R&=*H>)bJ3B1GemrJ`UGvRw-~tgNn7Hx7bc8WMd7{t
z9Kvk1I)u$6F@+$~y|#NDwzk5jDDnVfzzw_?dXnNW?NDx~UkG%&K2u6x65Wp!GabCJ
z3u&!Stn$(|Fic`So-0o79FFmpNJciI7%87DPq0dzw6<JpfX=n(rSNGGAsbH%k`sc_
zkCoGxpeNVd&6;9O8|qT$-vNW4O@SUNsVI{}Yz;UDZy-lN%~E9M04v=my)|6Z`X|6E
z)qgjtmnHSXL&ClTLyD+GQyfW(a=6WuxUu6%M@5c*ya_g!Vr((%40Pfo@C8>@`tVjU
z9+*)h;h$GfVpXt63m>_LOP4#xN`J^BENmnlS;aoA9?;L<gwx(#qBRTu7o_=Vf=&hZ
zK9t^$LDR&C3*0VfYLwgteu%y%l69o*WtdXk{C-%?&c&ALuFs$u4F5K?b&S0yvfWg1
zoV~KOJ?hL_6OrVHKirH;krJ%L-L}_pZ^Gttp(`<3tcTZJj`@cUin=~~ih}w$6uPl*
zSsy@ek##+{&fbbE`yvkyG*&<2Fcedc6!w?5s1`I1Ip97!z13($&J)VSu18Lm*aJ_|
zs`JY>KDb7}A84Mr7Bh8Gn*<}*YS!g~l0IRSsS5`&drkoWS3D`}BEcV|e#0}Xx_d9y
zkb;7z$-rI*9Tfh4*_TgRT3U6B(AUtBNPZ;6=(SqyUEW0hqpAayqlU#rc(Bpay=)LE
z^Au|j0}}O(FIo5*7L-54WwBo{EniOwjQth@^!HS0xA-&-vUxb|E!3UO(rcC^zwJ;U
z2FUxZj&$j_c2peDv6uV7_OxH+{<+cC2-=laf)4XjhtuYS>G2TiiH~%(B)cxV@A5<i
zYagqxei=TwC9n-WEDSB{LmFsObUzW6x+_zwxh8bZX~*jX41Kb;cK9MQU~iHyzBa*<
zlPptGS2sAM2;7)4EVHr^?PlyG#?L`-1@=dO63dQ{BWvw*=m<&EuUiheX*gTCC*R)e
zn-&x#5}RAg8Uk*D!phF2DI%8}Dkby0_^KVMoM)o$lxgxL8#H@Qm=E|snjf~-vZ3r$
zed^p2?&niLrf&g1o_aB}=61RQ8_p5D(I9ix3aO>R;KNib@d`*>*O!q?!;|I0O~d|t
zq{TSTJ{96jhuq^hAFpbL>lXcy%0Z2v<jo@9qyuS-8O(CHA0U!%COamM+<b9~OFk6$
zMO4$EDO`gjTH>z6G0<-r<hV8PCu%!6z-WQ=R-pRxdaq^gJZqes+}2YX@Mx<~`LhJd
zufMIy8O~<pX#U$}F$5c4%Q-|kK~DDD+yF*|j)!dSv%os6EdhI_M?k$<1Pj?EcZ~gT
zh~q{vO=^Un&q(fgEyc7spL|%LQ6lx#)25r))RRi;@Yj(B-)la(!`h=5tx5Ut_rDoo
z9*)8yUap56Yae6;`?(5>AC_G;+r-z$^TSf0PIuXPlPsejALA`7T~*k9d-Ut9cg{Bh
z7}j!;K(BDM`_Vd6PS;M}yy;3udxendb#+>q<q%x7*fKwql6&O&U{%%7)dv;JKKzS_
zyu)-H3KwocxR$L*GQ!Du2y#qD_sSeqNbv(S11ZFI7YjA=SujjcKV~fZt0bS;vSra)
zfFEhegf1(`2fuyWZN2O<hlD0?wX)vru+lvyQ6^nTJF4m=ronJ^`$bUFdM!tV>Fi`}
zFW(H}P}Mk6)tspO_?_pTuk}jtrBCuC+zt^08@!PoM!508+&ZI5mh7g9#{IP{q<x&`
z6rXujAUrSI>F0m?LLU_7A-2~(G)kZEmnlv4IzBSs5q9n7Dribq>=GWk>{-rSAnx^~
zcx9tk!AE_Wcp*cqR@qcq-W`9sG{CsEME>EB?%qXB6t!)$+TqbvC+-P$ncDx}d|G#|
zCZfOH_~wIyd*#N(O+t-@>sw92)bjjwahtwcEZz}OgNfr^%X_y4^GK^8ksim6S|Ijj
zkcS|eYSR%bpNJ-Uo6k0SZMIZ~(C?&cSl@6Lqf4IG-=tsGr1Gg(Sx;@I8!rF``vHvT
z)S%Xq{`!~M+*;n7+RjNy1k9mQLcL*`e>VyX>|-e!(E*q(m*@TV-9W2;<zgbG0a!m8
zICrKbY6%lIxjwD6SBDJUcbC!FJH$Zxn{Sx0KJEz*Xri0-SmqsP;sd(Q<sICn2PM9y
zQPla@_h`Rd1EQtxxrb6~RjTP)P?MB{frGQ6q1bJ*n(OXqA@@|r;iWI_%l({GBCr2L
zVB8o-81okK8jqqMD`?4JgA35Ys>rXqpg%8Qbfj`<IV|@twOmRDWFDxs9@Xm}8E>9^
zC{k;cnM$Ld=#6ghHcn^YgNvYeIZFcZVefoJVaS0@#Be-^!;ZU^HBHu~Ox=24Ji|mb
zrwuZkmEhb3jtI|4PwHjY@9wsdYVuOr38Z|WL!3fH=Rtc@)xIg448Y!bgPYyF0tMTM
zFnhZ#X^1O+B!!}Eu-m%38t!X7gMKsbm4I1dt#J#9T(%`JG$>=w2IK`O6!jy9+MOg}
z87ANpvj_{P_A7iK8{j4Hvl^P7(86Crz_S8yRH#lq1MF(sd3S8nYmts>h@NVR!)CzY
z=dT=0*lvCIfu`5Z%}ry=F<O#+6zV@9gFP|1GNbL)2G0(gP<#BgnI*|O4-e1olkgrb
zr{Qx54IEiSYt2uES)7rPm%)B8ki&~7mt`d5)*{rG1J<tU8b~ZfXZ^P!g{%xlhJWQ%
z%nk>*Xrd88ixvG33jQtd2!gs7dl0T@eW41y_7*)|@44~4iKBSh!|#Ydyx!94I&`1(
z^gZ{(8W5%AjV9*0zVz^<M12M!KO!8JQ^Wkx@NBB7@c>N<=ZLToyg`~oC=f~MCp?4j
zwfuK^r@n&;M5xb^MM$62fi`ZoGAufw<g)|X@2khsi2jNay@pHv>_4_##s{K-tJ|k7
z=C*Q}CTqi(!br>CSd7T(6vIC^x}DI7{iPm=K<?234^;`M^IW&rz+|$^<`Yqbfi{NA
zjKix}r(*wNk@P>H$WI#w&u|X%Zz^=<NHqDN_)pPj03l-zjeB84<u7j6pH$<*V<8-z
z7UDdvUFvIpy5`D;7$97D{E05Dny=j&N3EMj?p{x3Et*^C-pGem8v-EcHSGvRY17_B
zL5(kbF3;GO9{u>jx2=Cy_zO<Nx1SiC8%zkud{#Z*iGYB}3oZfWQiSg9oxf3(p%3S?
zStrNBZvtY6S2WuU!)=2LfAyjrkI65GSi6QTEG&FzG>~4`NGz!;#yz3lgeVb&O40*T
zR%g~1bM7M-ZGCFQd1z?#)1IfwAyWy_PH~o7tz;WUDA%>*8rx3=a!A|4UY8E}L>%JB
zubKQle4n5#B=td=x@LaUH+v)DVj7!Zd+xxr1NncTCwirDZ`rA9SBR?+#YuqQA}A}!
zq{YPb=jy;vVE$-e?OWoZgDX=#&df}wC&m(Y#*v+nDeBHmMNa_(^oPMum+@pjCmja3
zaPOIlYbhdsJ0zQpS$nwR=lXE(#AY9w0jqsPUT_-Pe|$O7p-ker9Yte9Fg8fE4T&&O
zm;;`{j{|htZj`{$8-WZ$#%CS@h%Vx~XhoiHGAHDX(a*88*@#MPWZ&MO{GgtUs>Zx#
zB@+$C=>F{-{M+a{$88N*l0EOFEM0|*DNY*Y!@b09o!H}W^wV%~5qwYo3^||EPU{_t
z;Z^Dbq#u|iMBU%XY5E?j?TFZM?sD9|%aO<NpUb?8^^1E{wLPALAV6+qn!KNjeK#&F
zzjDp9UC!lqR`Q%&wdwo@C=^$lc6lKL*LFa$w00(>Xe``eXzwYvX>?lAhicP$j&na#
zCdedjA@wJKoe)E0@0Qb2!UXo5O)qGw8cZ6bn*6hp!VbR@Ipc=u$;Tm++5Hj*atXye
z-tqT6{UU4u2cK<#(B1Aow_ubMl?fy%3Ebr|%=}0SOUv9zZD3}AEGztOw>ioPKHMO9
zLy*6qq9Tg<nth)6hhv#vqYIJqG3LHa)$UkMKf>%l0WiGD8#>#P=DoeW9e>S3@;@zM
zkm)yZ*VAS(go|ZJYXVlmct>B-_#xJ%@`GBdy{LB(EA5`H@lGlm&4C(f@iHq-5}+cq
zn(81NtJ?RXo7U#EUTO{F<8xig80y+;8Hw8@aZ@hrz?0g7wYOc>n)qH`<w6-QPWQQj
zD<+^#i~6p8MZ}jTQYO!uq8-EvU08fo%3&Ewns>$_`@;-C%*^2E`0L1b@bO6jjrmbR
zIJMM4#oSbdkOvtCj$WhI0KdkL80Mtk5VRUJt%7%4ulIhYT_?OWt`f?co14SCT0VVD
zOcq!nfqA~l?S3ZsK{YXwe9ry=BFF#<J2VVP!uc>t5s~P(o}Z^`DNV16K=J-mUe)l5
z;wWl$bJ%0_jW;_(MCAxCX5ix7@zz$+Y`teOPn!w(*rd*O?xN+F?cB7^(=BpUwdHTj
zxdJqVz*0;=LT~xWp|2|%F93&BP5$tRA^fZ6)#*>)COv}4SHR7RsP_YaZxugQp^GB(
zKtMrX(~|kqN?mikrF_=cyJ(eGv#df7#RD^$0NgNz6Olx&7?XhdG17Tj?#{pye2@7F
zU{!Ktjhlp)0(DITeVN-gS_ktrC7UlIQ<`6O3I8X?_)KJ2e(F+0+j&3pM6Qu1Fy1j1
zG}aG^;(nqggPuNh7W^2K?y~=@ho2Otj%Xc?s~sQW_O$r&cG_fIQ?On&>C-pljVqu=
z@$d^XKQR6!_;x9)gnRR(vfCIQjBb|L`UbISq4JgY!d~Pbyj$)>YB6fH+dRrLD(5jk
z(}S%rB1q3|YW~yv4dCo!qZFg;CnS`HnO;OVu*&oFi^J{VG~2_`In`XbKfS%ZyGayC
zgXn;RGm<Xyfe}QG3?4&|xU)`TPb8dHd#xg*6;vF~&SXalkDJ9x8esVDpPvE_!Fxwn
zfS(o9P7oiu98FcGNQS9gbI>r9a{($W9xh7-8*|#yzm6)V<tWCbW~`igKlk$6%?6Z<
zb!P5B-c`+3?L^#KTY94_F>kUtqf4raPcM{6Fe_t{LFxruIC$v5K9;vAVJW(oVV+&5
z7cY^-m?+goCYaurG}WpX8@Nd`%p-qP^I(T9#+MukCx@garo!jQWCqaIy~#r6G9DoZ
z!0xaiI5;|nYXR60B3qWCz#c%o<NdCf?olQsB(4qhoPf(l*F%UMOvs!?StixmwA=?b
z;yOP-zTCik$t!fDzr|mA_p;#mhsX3T6W#yTEr$b$r`Z>agO1SF3=lQtdtdh*R-5_v
z=xCcTV%DT9Ii0I~1@{~cvqSDTJJ{^y*|f(!^Si@jo)>=<bGSZI7H383KFjHA%Mw=%
zGfKKLRJdXU?TsqU_V5Pjef-6hR1cWNp&^y<zpwKKZ%B;{D3oR@z8C)n+*mVafcrdb
zTJR%C`~_qLd1HH<w909B%>Rq@r`K)-^mUIM3^!4E37}K`RnfXqA0v}<@lZb%6*E2=
zqM}p;ag!>afqrks<^F|rV_%U=>bg%&u<w<|R{y@M0fD02>`en3RRaq!fpn19pIp)5
zK22Eb<PQ4RWcA&4O4%lnS~DGv_M1MQgX(n9xx+#Yp5UsntK@kskpFYluvOrj3M=-=
zX_Bva<->AptUj?%+nZQU0_aTa+TG;o@rA!nTaFq}(@!Fd_@nj{XSmrS|NNC`un}i&
zdtzmV31M%zdo(**pxra3!wY&2bLr9O_lpeR0Qp^k`VAN@+LYhl@LR34OT+C?Z+Nfk
zK#)XVAWu+|NlbC|c=|t0K!YTZ@u|s>PAl2oudsiQg(;U1vls{~Bqnjp=-%#6ugE|(
z7+C0aGyhXaK!_9d1sdP84GBIE{Phw2qhf1u4L*n0ZQ^-#X4Nj}3q60B<k@4|?%hDl
zwd(sy5?&{nP&yP2-0c{IH(b?oea?ysPabpbDb5o$V@ouXuM~t%Wt{ixZ1d)lU7kVv
z^vZmGX*2<i7A5n}6W(S+$+N8GGjAnCaX?tv(RTnA*i^(XZa9Ar^_|6qo^>)OLUzw^
zoM@00>nH$a87Zd&*Y<`r`l5^Bb%yga>-?SpU3F@na|9TV7p_k6Q8K8A6jg7H$|}c?
zs2eJc3B65+b8oaMci1+L10VsTt?sFRdWjtG9f9(rEp4U`h6CalmnxaQwwn8&gbXZa
zn&(B5@Z2|DB)FAZ?}30LhV2g7=jJXIr!sEtSPH=Re^o22sf||2x#BvQA<e51Ni075
zTC8TS?7ug&SIb_L%>zOvdUw3;NYf|3-72B2|1>^eSsBv*BVF=!>O%sGJtpPz`Bk-E
z9?tvjIj4zS&?2y9@JXmEO@#!%041RHyyT!{h53^_ANx5tJHoMs=wNjqO~}{PLuYPU
zdx`HduIT+?e@KWNcElCJRloPC6it`H05UrjSt%DDXXVh(%~L)zpFD+>l0NqMp%gw}
zzHvdPS^Y~M)6fZHQ*@+f$HK21ltcO6RvqKwS2+s0+dBlA;O2wbS$$CyGrO@b@A<>t
zZNEW;y<ZnqtQ+A?{HSZI>v93+ceQpKT6nn4dox8ja-Hci*ub&W+FmuC%A=s?J*P@?
z`B4-3ht$exG^xsSmND(PB(d0{7jdsYu_7z`hmV$OwIKk(3AZA`-F!LLAUq{Qdj5?a
zE&&c0#%)w(ZjZ$bLjFw;TwiE*1l#h$%f|2pfp)*zAKS84FqGX<csRO>W|1Yl`;PA=
zJ0Q42@CMH%`0(2)XL=s%p+a+f9k9?DK*XNWVDJIvJ3{3f?*#CXeM1EWp$@`VnUq!T
zto7<GDg9mqim)@aQ;n?}e08T2*MZ@`$uCuyDoNCJZ!&nyIf!;!1mBsv<rrJ$GRZup
z`}Zq87MG$f&ZSnGy6kffqIwa>w>@XkgS*33x=93QeqsCY%!Y7RbvRLI5UphAFp7}-
z`JsT6vA)USX5G8p8C7r=0jeDAgcSi25=`H(R{ezpCyS6Bai&36A=o)~&MG6TE7{}O
zD`Y%@LP$9x4p#^BmH_Uu#oCtDPrpmhDbZc|!m!Yo;K)l*j8?JGpn)T`|CE$bMU&)w
zbFMPOk7s=d9O?<kxD#huI+DP&>4T5rT#8>-a*`yjra}#$Y=tZhi$zE0Q+!eAt9_pI
z*5#((4jC7zWkjYaEvxQA+RldxFuuvM?i|7-&hH15wx9Dk4|P{PCAnVSmfp_wzPS@*
zf~PP@e6DcOfUnmx5uag;e^76Z*d%MqJt`W@Jk?CBXPkfb9ca*;fPQ~y?+Gb>!#xYn
zY3sc1^Wx<&BK}5O{#V!2DhB~>e@&F=(C6O-O+w1D<SXhbAtXVh{`VNhF=~MO=-Rk&
zrT;O9(Hhui;iGMDxiBIB8BZ4=^C8Xi8lR;#QMIUlJ8@pMEEDB<<-qc@$(2-eZwP7M
z5=VB?uuHUZ!MQ(OiJIGYmU<CJKq_&N#o!z|0vB=*Uzf3$RiYMW1@>@R+vV$CWWF+I
zPi#*!<@7eW4p_R))P^2LOWqB4^`!>9Szv2$4sN`h-ANV1V9`&vZNr;9UbkVV3D*>A
z?*9Gh0&QY8<FlOjbK3ZtQb|?Sa1ia+0P0<WkVVMzk+{(VPL*O${MahD%AyYMb4G#+
zbh>c*vr)=nYajv2D6Ogy?1!E8Br@RP2k|2XHF;hQMcysw3Uz&b31t5x;L(^S$iu8U
zmDJTIv)OR^O(Dv&LA@{^>i7ho@Lsq7R{ldI-Rb&3+IpVd66>dK?<f&mw{mF=uDVxe
z@~=Slc~F>&hT<=E6*ZsF)vtD+3?RVbrErFQE>;Ey8!yI^(-H{Wf|RE_TnpVYIXkB=
zxIFJuWGACS+q|Ca#(7E$`xS5HA0Xw}kO<V|g^T{Z%;v3$6oLE8c+vX2MroZe{<~@}
zfl)Nz7=S{R0g!cPTZ#(0sxh!*l)$;%At1gcny~<4wCB5#fc8;D$Cl3RZIrv>>Ym6z
zT#v8z@_K;mFDo{jh+(GvMR>AYxdfGH^Uqe{K*^YcL7VT!W6Nmv@A1$oV78HN{d~u|
zePJ-h*hRX)|IU4a*{+>nye0-mvu~cx)bWAwQ;?r8$U!Js3DD`yzLcy{D4?9q*ez_W
z9JIZBy<Hp8y8(o;$8Q>`$<?NUR%HScU4`FYk@aUieYxf0Cs<WvdsH0MyGx|?&YABm
zmr8~LG9OkPChw{`M`@7KYQES~G9<K`*R^r6ThBEKxYwb9n%%;(K_*WU-L=0^p0y7d
zBjkg5RqhAi3DXmv8@Mbs`O-Z((1HO|4qSbqdWmF}5zgU(<L}|xso_{98TU=ZUcj`g
zgjVM4h$p*#2MS`a3U0)mZ$k_r;f&I2la}nVvNDOpjP2}M{r;`f#2ZgWc*_4dpA1+L
z1V85c_KzOoawK?ZP`HQS9fTM->5RT!sJHe7mK&XR^?R!ul?i}$@wBBTo@NcWEN7Rk
zKV~fvO<6ruE^W$dahKfFTs)p`Csq8Roqx^>?A^hCKF?<66=@ZRv~}y226--<sO|WA
zKLtp37V4FSwI7Jg9b$uk)M^X3-sR9E@w1_^Cs6`Q+**ef<+u=Fsr7)Q(@}&7rWWZh
zIAGBlkYYgIhoeEOmR9m3u*MB{_lOXl4wyZ`umZ$nFwr@xd%O4_wwKLBW~ytqe5QR@
z10ek|rV0F8zYTe3K%<TBjwV~x#->sK*{@5G%EoQ9iH!4vpc1GO@VIXzwUj#tFR3LZ
z^-;Lr?+sd2=_70?3sF<{Jsm1*Iz|5!p7WogZl`~YlYE-v^maa4oa>5{HYoMJEtKOd
zb)AnFdRs^{&``SM?89I+-FTNeTdWB1YlW}k!^2sFnf9OPorgXwPtv5Sfo=deKX)vI
zGZdBE<nUb5@yl}sT12X_ynHA}o}Gi~H+g1H?dQwyf%*~h_lt+5q}p?JpfCk3ZC)O>
zU3Ds(X;>_@3vA9@V%yWg*KiR=wr*er08`Cpfu5v5WzgtbM<|&CxDhLYjj0w%X8xW)
zP+LjK&hY(LK9_@9`dAm5O06=3Hf^jmD#`z>ofXD&36Qmxea`y3?a$R4;v^nu9f=Zr
zF`@5#6=3fInam(#YqM>GOi4K#o1Q5WT6>8$(a70)W`~#C@2WVYTjomR#*NKM4OKy2
zrlYFzvkbeO<MI53sR_>3V=l8+cJ|AjlRX%0>I#)woB<iO;7at`$0FZ+ed3`>ia53J
zZkDTt1qDBsuT?HA^7XWoZ=zon8v>pX89E3Ks(=4>hWr%H)g8X@QwX3I@oCHKRz+PA
z8|}Lg6k37L#I)k&__0+0B<~0!2<UP4#xDD~tZ4fjUwY&Dn=m5o26`QqcQ@s2&%gNz
zfQWgW%nTJdo!KIn#YyuUDvvPDuMX>F2X!cx`|Z->-5WxGJ(nwi8GvB3q_)=Era>d>
zb!m6pf$HK|L}F*Cjq+1Z8&qhVk#lWSqqSh!I*X^A*@E8M-9Y|*rAC-z;47vhxk1hc
z#-(F@jd86?pL&n$L$nHB$%>&Yg|K?>nTEYS)zptuF&D`A^mhAos*@Ouo^Nq{<-Ot)
zS)VYnzD}`zlCmCWWdg=9VZhz2epRI`)bba8hp=IP@?D8WVXPUs=gsnD^UDr0WFj&$
ziRgG@yXZnhR3PGxBCUD3U`yjq6e>CFY}yn1q$wXXfBwlBcS@-KD60GYxFh-F0cwwF
z4A<ga(1NLnsVkL$Cn-=}qdVL)7W|$h{EQfAyrZirDJoiE3XhgjU21LpnZoOgIxeDA
zLr@!xJc|z39N)VX7G-|QX;SLyQKCq;`mWiu=*>@K0yHn*ofvBs<fLuxQ8c!rkk{zk
z!endQT=BS?)qDmRn%>yIBn;`jh=!mUnWHl|sm{3~Qj`HhiG?Egy8#h)A&pO7srl<g
zRw^0J=E|KvhWS2R_ucg$CK5j;XiXb?+gi<(%Pn5rYH5+u&b|<sOUd2v$w%e$rPETK
zqBIB*W{-ky`=sDmn#&E`ftpOmcJE3Y5+Ht9%JC*;JV_Mjzx=$)buoHcUs|L*V^a<D
zQ8C!e_w#YOJz_#|bVlp$nk|c%LBD``R&UTGGUI4?Y?t`ghZRhBOFr;2(tRw9n$FR;
zIoS%rp{F5C30ZCH7u+EV?nHg1`2844sg#nGG_PP%E=bF_I9`|rI@NMaNL%-}W^hmT
zn)bGaa>KIj&Ud5dm3)BO?Ldyop~}q)W?yUVfey<sKYm5EJ^bSJck7DVj8bpn_RTEa
z<w!rJlI|ifC~33b2^|fzpAs2s+H16yWDx1oJiceVb*RkFr^sQe`Z3lMkewv4F4=4o
z^7gSg4z`?F(Z7Lm@tA9s*U1_ABl0TE+vQaMqMhbB4rx_JyK*)<-2{w|JTUEdW^vXC
z3&oelct#JZx5!iev~7swzWEmm7V~$)VUnSH4_c2PJuoAPLNt16#^G=+mnM1U^1C}v
zneZUiZ1=eD$zu}lfovsSSV7_SXP;YtAW_507SAY!Wn1l~8L8h2QW4Lw%-~=%NAz0m
zxjY6ste2=huPK*B5GBs0M-h(xwF9y+ZkxCJrQtFds;StYe80N!PW@;BAmld-nXWet
zy@}Z$sVE^IsZ^-00vCWXQdT}A$tWu#8aO(W;ToRhSA?96i%LEY22003rwFPSuD`0b
zH;Unv$nj_HU#*fRHnU-(Tr}_U{Kjp;8XUdwlpKE-$Q3ATuDqFJ6ItYt93I7P%mGxa
zepN6s0F?iiFvISIpgk(Hk#B?naki}Q7QTzd!uo^WXdCRjN{G3n{rQtg3W3)IxAPD|
zF~4Jg22Z=2LYY1n^Km@HQm*NV82c*C)Mq<=ezuvMlwxuQ<w4C_H{kmn@kMloZ2{?P
z4~eDtI@7+5H*ioekk69V^PLhJMD?((1Qcb~l+`Aex~)qpbSBAXr;`fKeeo75eKLht
zcyD0Y+2(q&*~RLMuyHanzKj87)9#OBEKW$^;}eBk)$<-Bv%VA#(sMPQk<j3b7bP)l
zS%}<D3)B)RFH@x}XjE==dQjHFJK=Le`N55T{E3VSs_8q)xDmVk?My0stD7<0TVP+|
za=7#oS666TE6>R&#;=k2F2R#D;+yi)I#Jp7hCs+`Arm5W3{7Y3h&yS~p$(OELo59b
zs+Pl)IVGW}2At*o9)?GajnNUG3WJ-5+-)*gmEhEefFD8lLhYvWS$yGBqf=YIWrkCD
zhOh76EpV9N)k{>UFw9E@fhkX$+poWig+REtm1r^RrcyAxjg)WHzK?TrJ9U46vh1ud
zgfvnQ3t+`$0o0w0>Pk`)K5-U0#PhMC`PU6$_Bn4=yIpv)l61`k9ImbC!`SEQ@1SZ;
zl{PhAsw~ijWr1C_Dw{hBMyr1ywq#6UY0AA0;~D_XsbJK)_ZT^MMQY}ZsWouwxRfem
zZ9RxK)XKej7e~l9JTVj4unS_;uDli*uX*hwdqdH&^M<kw4YQ3Ll=8aHdTr4EY<qb5
z>(`Ypfm%TdHk|y^#r0jx{`_6Ij=gVArg!%W40TVlPNgyNpjTXFj@f1M^Qu?9jw|D@
zehhvEzs15o#I@@4RWm8&yzM{kimJ3v;s5O0zUX>-RTO#?sj3HoM=g??*6YV~XZS5R
ze@8kK{D|DsR$RC#C+hzgvi0;%ir87L`&KfR;=m(*dRk-MSm!sk=z0@nMlZyZYmfNL
z*iL22ho++Z`#;&EmP;!?4L>gyyZ`!;mmw_2Gi`y7OU^+-2J6RCIi7J<Y^!qkt=@!D
zI8x$3v22f4Br6po^d(6oHR!hv;Y$9r+%jnnW%I({86u**+{#+7%JLH(^lRt5fdU(c
zjH;xTtYlxUmGmXOua_`69Qr4$9h>XLiQtI?oLeHN@v~zQnWdON83Kde-l$FithLM_
z#?v`iT^i@G^>)A8EdE9tS5U>Mwb>mJkJHq`2o334#}%&8)NdKG&mlT@S<!#)I*w~Y
z1@$5<nf)2M@tfZiy;<J)YT&xvb9Q8q;u_^8U9wrE&^rKBaAkInw)cW2&6@a^t70Fl
zyCe5W>VtZD-!z;x7D9&w@1FQ!F|Vz0uIsROB^N04Zn!*hv2|RPc-?!O8~-lGpI#a9
z&W}zJ!OhlC9|^`?)n^R`&OLqX-2U<;bzvhu+ua!E*_}|Cx7i=>8xbGx>NNHfk#nZX
zQnN`YwbwE5WVv70_u(RdpjK8Cr-G=~^gLwBL20~`7sm2uk>%2{o*#+8GnYLDhV`cd
z*PbFiXG~$5Q)AGnklrC~Evg$REUnFK(NUt$D|wQS`<bC52HtoqQ<X@LUcCEG#BX$X
zg;#?!sK3iCGY?<$wxQviWVEoh{DP*)(R3>Q$`LOCeLv&F>pq^M*^GX<#>4!b9GWi1
zQdPr+S~dV~`|bHVp_jCxn`VgZPLB8KrtCZ-<i6!*EO~VA2DOPMfY9yS^%A?{lJPq8
zi7e!oFeM1@oS@i-cl$z8d#7dZNIGwaG+P9t4=F&15SuB(gMkdH?Rrux+fqNzB*g2z
zH*FAN*y4xnci*?cki=nW(jKxv1N#<Z7(cD23bUNwMCv__!FrXR!5^lGY%mk@GbUm0
z)_6kX7gyZFqR3bp*4J;me`+kJ751;3*8xJS*zH!$eee(n9HUKn6<S*BpXm8y8$U1k
zxYIsl^+`Cjre*!;^Nq;v{;Qg=p(3EF3TCAGJGIM0J;Y98v;41@?ZWV8w=2Gux4Blc
zYH(M614~Vw+w9Jsp*4Kv%`+PYKYXWa7GjJ~mo|TlW=VC+2XYPAzrEK@9(k}IE8M9C
zsls$v0~4!F16U{7Cu?Pc`nq%GG#XqYd$=lt1N{=Ilr+>%C~I0d*TfZL>4aR_|6p;l
zst7N&3pAQu?qvpT8B@MDAxscY6zO*O+MQD;y)u}??X_h*R6ExSe?sOLg|Yb*cenWI
zP5o(c@F%EQK!#WzKA-zCL@B2enkIByO*g&iyq9NFM1Z3`UxB6fi&&j-0d4)!V(m6r
zWP6<>dct<;_M6L3yo)AN#kPw;gl%&?LO6d}GR(j~QJJ%Q*-YA`$Ei+v`~vGb1)TaR
zmBg=9@FKVzHFK5{<El{@0Ai}*#ssb-wV_in8~XW6gc~#RGMV6aV=qNX+P~ugdXHvs
z(2OL)kKea0?<H4>TM@wFAAlepH&u4(c5R|f2%dLKBw|-1utGKoXX@0W?F--V4BO!1
ziyp{|zk6(YE&=Lm%saRw8-@^trs{oF^;o6}Uz|sJ^%i?x=hLF}5h3$$On!S48Zrb?
zU;C?uWV)=R^GX)z(#)JKoO_ddo>;(ZMq|=0qt6N#o?heKSkPse*SX#<!TpcT3r?P@
z>uIdUGNE_LbiQnIgBhu{u2WE}VT#_fho4jC&G)SC%!V5TaqO;xGHyqX<qOm2HxRx~
z2AyiFS<cQ}2*<qYi%sq;1YBV(q#^UAxrOm3&JU)GoR+Ccjz4TZPzOr|Jx;{~(GQar
z-&7JcSrs;0e-OQPt$z*c;Dwlpgkt3%)Sf%P7FVk@sHsptg!3ZRntHNX&dRlW<Z3&(
z4IKTInXw?|JK4ca^qpP;e=on8sAL!xkIlx)Y*%Vkw&1!(9R{TjYyqz!I(q)@Z2zu=
z{lekkhtD)MW}sA3eG}7sRUe<|!*#NB{f}q|BE=@xSnX=*Qt82scWfLMKbn_2@3T&E
zFGel0^r0%vLL*9_A^(TAw~niFTmFD`3rdKhq=bM0(jwhkkWNWyq$Q<0whAa9-Hmjk
zbR(@uccXN7*Sj|7=(+cI-+RyIeUE<}Kbym5J+mghGqcvrJPF*c@gquo5~ooQSMdxF
z0`<kE_%rvWF;w}+!u6~sf)r41hzB8aST7VnS$N965bu>FVC!0i(btFVv)$u&e=^Y}
zM*qHQyH7=sI3Ox0s9SgNlP)#?C+{o~S)Mu$FqO0Mo7FTf-xuS)7Ky=&8<8_@C8>um
zgo?#JKM|7^xAxl%*Y=&yb3U}`_6n`g$qqgYV#o)*)kJgCzG&te-P2d1J*T;k7%g6m
zd=?}dGpkA-0~g(94U_A<dn}}vlJArHsTAWc-=Vy7WTs5mRr2_vef5G1?n?sW_)fIq
zX2rype8i%l+ZEl&(2$A-TB5w7D8(A=$;IR2kn0~6<@lp3S&Y3~lAlv<a+-X!f66i9
zWTVoD!Ot~)+)j*V7o*2+*Y&nC4FR{&)Y@P-k48;M4N{}z67Rhmep1(H+?cM|pqqD(
zyqUR-?i15-y7J_Xi|1#`H{4rx_2w?1kYfK?RoIZLB0gurOSL-*L#rAeW(&vE9H-Sl
z>D>;N50k)Z+q+}>;MKa5-e8mCft2M=wGA`29r?*?(&7zzOG&l#_Y6aJ^v8qC!U=VM
zeA8HM`4YrRqTPr`u$|zjvEixy^#-~pUDrvGlXMqLBVqE(%4F=k#e-d^2B{uUqq9J8
z+g$06e_Xfn=%X!K>Q52*2h|JiUx%}r1yb+b>1@WiU)S<Js`VKKf0R}LeV9g&Q(G@P
zMYq?nRnfho1CTtfaVu@UJT}@^qSCl*63ll+Po+~oEQ$Etk?@!}n3HhA^d^O8Rg~<I
zdn0jd`Nb-}E6Xz)cVwY`M!6Effa8;brCl=*N+Wx2J9+i%K2i6F>R(6IT2+6&r&uZ_
z8R!b8vd<>vDIfNiid*OoFM-;@(j&K+i7QJ>Ybo7Es<&Hs1Ny@?lJjqv$m01Q9$YTX
zHRARTTyjkpnz#_rvzx(7J6*NuHezeKrO&h~B%)A3uP@61uP?s8DzsB1WN*Ag#P(7%
z(|mG?&AqgkLvM@4VQa1#%*M+&rkv9abgz2!rPfm~ZN<-GX|Gm4*==(1Fl^3N!Yk`g
zIAB}oKmd2_?Mm#+E_UX3LzEoo&6}q->5I=dkYa3QLbZclL#pmxK@R@%P%WPedzAHQ
zO^ku0uaPqsE5&Ksu!kh89wdT1C8|?TyJ?qND(y{?yDP0qp@B=cQa1tDT}i<&MxWN}
zf;<aGq${6$V^=!L@GlA|KT32JcwsK!N`KH*dVTczhF4m1FTB8n#9;1A%#*RS_7MFq
z>Q`)xe{5GF&t`&~X%q3ekW6*C)06loi+1h23F0v$+tkWUZ1X`H=`XzFx;O-1G0ILD
zQSfFt+%~PhI4J__H$9Z&-f6opGTce(e9^Z=a{Sv4?NpOb=5&(}uVMJC%|0v_hj;Bo
zi9XF$5to7rewTut{rCIH8+B8gxLux)?o+PV>ffX9ptZNJVy+6;xZQGT>LZsdg^Kxc
zNJZ>ulB{@9!;h0^Cj;7k&NPQ7Y{M3uOeCee&ax{~t~^$yBE{3@2USa%LE>H!&!$tU
znv|#xO#;8Atw*Yo(C05^HzC7}QJTg3i(9_&tQ=ZMxd=52`mk(M`pr`9pT-j1TX&4w
z=wipSC+^uM{dj$vQC}lw`K<)yKFy2T2&Zd9@*6~!xfQMw4iDdRu~d<*GF$N!PVY`J
zY?Qwaob>nzv2Z<nvSQY>5bDOIZu8a10=+c&5enn!3XyBqL`jA-fAw4pak2njiy21Z
zD5LmVYD5hQ#q}>53Wd+h-z1L?+D)(Ty~0*nRCD?;cyg7W%~o>GR+lRwX^o?k@#_9U
zcp?|ecqm>=lc<pD5mEc{{A$9-$;0tL>Gi{|@kfp-%{*#k?ZpWk;m?=qU9R8z@tH)L
zu;@~!%jU{_HmliSsYoiH?QQ_hI|0Ywt5KCx9YPTl8vbLOeKmC%w#I`m4Q9#5SY9X?
z#pvhryd1aXT)JlsF13kEgj*KLv2%=2g`};KBo{0`mc_TvakNON<z?!5A2ck!7RS)o
zEQ$F7u4$Cp)w9^+d%u6d`*!^+-ZxgHm?S6vA<F#p9Tjj%pZd6|cJKSm0nXtyf-hwu
z*CJZ9KXWs8qwGKK@|BgJbIW*owbEhRun_c~?cbE~jIRqk91^6A=Il%Pz)sn9P=)>C
zm_=B{+*#mu_3V{f{P<0wyNuP~Ki*FdcRiEyCa)At6&ACdTpCoQ7zhmdZch_Bo3(r2
zQ)#7oDQtK8WGCV~`;97Oh=ue^UiJrjE+V?&$nyq4ueiqI!cL=-{f*LD9)ng$%5Z13
zuG<7w3l<vBLP0P+0$w0)i%g6@nMy|*XDiq|OT4SO)R%5H?J8F4>a4_rb<Efsup4_(
z*S%mhe1S#DRFQi8srtRRkis|<&X#KmHsh&MaU<YZpai*J$k2bn2Gkqa*_)`RJf?|#
z^Ky2tmN4nV{$nYQmUt}t+e5d#r*Ov@oEmGdmOYn^Lu&NlwRcN2Ol=X*d>ZFrY#d&!
z^CRQ)duB~y$RW~6YzY&Xe{YW`(m6K$=<%`uRlwV2l_p(1h>YfgaYX@j@u_=_Au%cp
z6d-&#kiN)nFyXiU<i`Sk*rC0O-d&CH54zryI=G7%F20%F&uk@^c3<0Zt^3C@l&(lJ
zal}{Es`E~wSY(xxM>A!yJmq|>g|Y?B6=t#!__DU4Pxxsqsbgr_>DwNkw%-gF=4@@1
zZAR@Y`ZIMYT&J?$O_DA2$*zjm>g2L+%G+H~Ngn+Ks(UiVrA|G(nv4p(-@9$$8U&4t
zj6Srh7<-&Ttj6~~M)UX<WtYOb;cMSzON(4iU4=r$<4(Uy$j0mO^o?oL1gFjsp-)>&
z$12WR8@jW4w^Hwb*Ht-v3B2#UU{v=A=?K^V!(uEmGxLgZROK|!P@CWSw0WLt<AJo~
z^@B0sidhdB$hGIlCUDivM$5LhD%(rBKM{wFv@5juZICo?9yxB@9V;{T!?QXy4G5i5
zd0=0jYs5b2C3FzCS{18iJ8CVP{8r9IYKq<f26`Te?;<-m>z?k09C!1~*>&NMA6G5j
zrCdn!ztsM1PwVdcscR-fVB$+f45w}E@(P7g|76GZNDeh=J9Do^Tuxxi=!WWw`fWSs
z#1WggVP2!o4-I8tUZn+byNET0l2(cvHtw~s!(G}94IRD9pP$gS<DL5V2Ork1Mc(vz
zsh4;S^o+BZjaB69@RqL1`+dnOo>FOH%hZWR<FO?#ew6I)NOAz)f89247~3C{z?wNe
z$vkssH~YN>iOPdG^HUDpufaYpYk{*zrd{JN9>qG^Ox`6R?9a4bndB$p4c?Vz!~@}Y
zU#82vkn2U;4dl}57_w96Dc;5QhC81W#+qC)y&Lqt?0(PO!uv{7%a9w_Bh}kHYmqF8
zJznw6!N|$Tp2*DqR5T=N)8z|0V-}^V8J7`f{}|)`RBRzL^YP7fVU6kfVLe7MN?(a5
zciLVF-`RNFeuI0w>f0^FsMhs4PA7=A25)j0RxZ0h?4>KsONBx$<%LBSE3fKq9?~&K
z95t<SPd;ekZgvf2tH864-nE!qzg3K_xN-a2D)C3#3P*}-bLxpVV?w<2x8sE<z8iaU
zwtcnv*w<3UYxT9rt*h5&pqwJ6uZsNXF#AG}O<;fO%ouXyv$(hQ3fmmJa}5=3z4DcZ
ztwFwN=}%)~BA?(<^0kkxz7_3F6SfKwtyl0N;2DiMqMeV^Cs}LqS#{0ksv!~M_;3+J
zJiPZ{{?@pR7;9P3aQOBvIA}}LV^?xsUA`p@&eI(n8kr5J^{&-#T<z`h-O!@#eLpKM
z!``Xar)%)_+rCF_6DY|b_Jyzp`{kXT`JdhV|M?FT4+d{M&B(|oQ+CO+IUVJz=r|R5
z-g&rjDhK*~<6?PTPeMChUw~g8pWPt;@lX5-o4xQ!W5sA|rfpMHf8UB>>|4%O-IcwW
zcW=5!MD8g+C>6hF7?t_9TUEq7^&5mN%!2!7*mj0HQA@wL-a<~mopnRXgG|YLcY0AN
zp3<7wKDlF<uWA|?5x~m+wD5~aJxlt?oY&LW?Hb?N#D!}|uY()I<|j4zd`7G&Dtd({
z>+D$anH4qd_@i?!%%ywgPjaJrZV9RP8n~2YM}J(RU#KP-&s2F<kCg}BI48?Xu%*%a
zs67mo$f><=YWCLn$H<48OgBq4d){t@MdeXO{magNZgdEgn5+a)#M=GfiU`<(pzb(P
z)~uvBcSxW}d!_RRw5o>=KGc9$bS_HFy^{D>mV#TApUl<1Xoj9mvE``Z8_BLR=_HHR
z8WXa!^L#a>hvlsxNtT1s@#5=%$5)pJ!%d>BpTdjR^^f;^JAD`4FI?}=l_s>M*)<Yw
z?35;D?NdG0oDj<p$Pv*mm%JW$XK||{vP)Sne`kxigpwf-Uak0(@;^UezHw7|a}4Y?
z7QF1s(F0pEj<Vsa{#V^yQZ13^-}Y~gGrcoYW+I3oZ|Iq(H0J-ang0K7B=1R0_nq8o
z3cB}gF%NSaFGme~RNmE>0#|MZd-}2$liJ$8*c@j~yDH{7St)+f%PJO*mv_0ceVl)q
zIP#jo_#}UxU9kTc+q@^}zCg%$Co|8FKUz)yViNddb;BQ`pQ_&;E3`CLS)TaKcl4>L
zZSVj`Ntn!q82bLrX@^+VcFWur*Vqxs=H*cf=VH~-!rcS9(n{Hr{$`V1*KBOb-1PKx
zrF@I&uhyTUd4CGv-=2aAjrVm+b?-A>m5DEws4D5n2k*f+z@Rq>=vN=L@{QHs&(B8L
zIKmR`{h~(y!cHGQPw!|XE^{}OM<1H>W&j(8h2AEMw_90E8AVY1-lUzrY~_MpexG$a
zCf<K?|NjW%uOIU?NQ+K0g!;AEFUeW=s`@#gXGJZS_k*$mK>?!GcaKCC8rXFsjB}=o
z=v|o<Bs4aB4ps(FyB<}^y`oxij<Pt-G_uX84jWIy&4~;Bs#nmdI`OBYd~rKj@%#NL
zXvB%SwIJ_%lxAa*IF?V5^8cY3e-ZPapCVE0coGYv`oW|ZREdq22R=Kr4r!|~$E!XE
zYYy7O`cakOG`W|nIHuniwpCoN7iHnyJezf5Mmou8(2eA9n?c&S@bvW%u})`!vCQz-
z%G|NtgTZv>6!}KTvgL5$!AS?@@S~Nt*Z!}b!S5pf>;L;i<)6&Ac+yXW<4ThmaM)uH
z>d2(--Y3y(Sz%rPhpK_BOcf23qtzL0i`-pnGz%WQ_9y%c%kENrYM%pZkd<c&6~ng5
zHLQ&sWhOrE5!W0Ld-sCkow?n-1mgCmk|r<A-PKb?QI^L@&Hp<Q|3O{6IV=lXxtxFK
zQKofq(Q$8YD)(r~2Pq?x2!{maYG?4CFl0_~rocqOYjL-XF_nl$W2T2_E5=H+?Qw+?
z78{Y^NF9dmn&WVrC-0-4Lhj*KK5LJL{<x;KZ`pmkckHQQS2OLTic3Hl)Oo1Nf$pHe
zF-Q9TO$E8N`A3=C;ErZt<#9`xYS(Jm!k+J4ns%A=d9m21W;AwBmU9M8opT<O52Rb0
zS${_5l}FB&0yizRjV_Mgv1FD`RcN(PWifRdLX;dwF@o-bAvOQ*2>#cPE+{&M6D^@i
z+33n7xmC`M8pi`97{2SBk*EtKIK@mQV>39O%&Qsj%FifSt_Q`Ddvwg!og_Uz$*xa1
zGmD7|d<o}K*(9ID^iCQw?}abQ(*%Z%HR2Y#==BvEb{@>*>Zh3)Y6S5uYHElVB$L5M
zR{Sq5`q$q=d0|<&%6`P-s|{~NRpT{==7r>Bm{i!Q0#7_{o0#|42g!3iU3_Y$XS12z
z9jl-=yu-@4cQsMHP}kQ%3N4rS*><2fc3g8Ft0Su|dZrY}VK`>PS2IHGg$AMwE=L?6
zZ8OTtxB6an(Ckh@dl+RcJ3Vmi98yFPB+UdsC0g{&aFo0{sO<ULp5{)V4~Gq3bxmX6
ziwRIvn7(@5NhH-D;;s9oF=7E6luo&R7%Fm9(=<n7e>uxSk#TX9PX3rv16v1Q(5Dg@
zYT4>`{`<GRjih%ab>u{z?vJv}2uhv<8{D!XO7sOln!KR6?r`9O-C>?BD0GNeP4|hj
zjdL*jl3(SQx#^}Dy%EllF?x%`6aSepb+J=P>IKKKp)ZEVI}Nag@6$CVkvM7E*MaY|
zB_cmOwxTb;CZG|Q<0yN)eN5tUM^P<Ehs8*3_p13H4N?C~z5b#d16`-GgChW+_!j4P
z_aP7dhx!ugS;=MFBk5IFz8Uvz2Nk!irnxZL@f}ku4Y@)2vcc>0l#9|;PpGF3t{86S
z^kNijn|&;&FE65%QyborRh#-Gwulun`Q#YA=0`wm?%tPJrFL4$&Nn?SwC;VZk(dt{
z&SM8COL)x=35A?J1MBXVSfblQyji9Frd;}gh7q=J%utuI#<E=4?eokgBiK6bAFn7j
z*%Fy*%?Z}4s+G$wXAOR^={J^@XCCeag`yUvviIdw@84YKW-sX{#u;Rsbd+S$nEv{0
zb!BOF|D!^NfVv}&wS`Y}ZxQKg1PJTiDGr8)n(sf1Dl{+mar=+(@4wp%j2lvgt$fOD
z{=#bIjXg6<xX@j8!>P51s^pESat+zcBB!ZgyOe9#-cu_PCR|iuM`V~bF!#mrr|oSA
zrUSPMn#Z5E@q>9ItOhr(KK{S4$^R5<(tS*kOlvGcjTxUz`L7Y<^{s_NSuE<=xF+E%
zD&p8mse;RGLypDY#txktTGLIS)JQZqb{nHDV1|dmxQtGAXB#Q@IiP@4;-Usx_GtL!
z>Dx9=ksn_SA4Np;AKV;X$hLI8)s*s>N1ajReN2ZG?dV>W#ESrQhzK$e$f)JGM&a~i
zlF5q+Ket5h5;waG7oZnJo;;SjQ@yEw@8@(T#B9FV!!78&B;kT3$bE|;dA9tE63Q+^
z0prpQm8PwR&DHjc=!TnZ@=C;YGi{re%9$!2Rg{zm4y?ry!6QsK;d@``d&|8~vtC$z
z$H>eo38aWyTXA^=FDLz1$on5Zq9Zv)bq*C$(PprHhU9ZoRuoSSW~K54SnJi7XB0PI
ztv>GM<t^dP_Z=X(D1mIFU^d3+%`DJ&uuR%y-nf8=bK^Y5ijs79!YH8-JNEvRt0>3C
zg^?XwS^96vcHS%%QH51?ee0f?>Z7tg9F~LQwV@pQ$~0^JgS>Lp(Od&RuC_`_T%)04
z<h=CZ9J>Sa3<^7jrbB<^Clux74p%)}&Ke62v5L(txleuUQQ8fvR2{+95|DS@H|UB7
zde(52LHqGucl#I<7gkiApQ^s4&D0<5#EAL6Hv%=gd`5T*pn0MZcj8J)bX16(jl9_x
z(Q2!V9<1)Fj1}i)D|xkYtZPU<H|>^Ua?{2oDx1^7>+p@0%=agse~XGfhoN2^MuJen
zaXGgD`B7||e7<7E#0w6R9GBkilew%MsP!@(Wf2d5se9%TS$uhoQQV1PJ58Taace(!
zPe;@2lV1A-p$q>*IsQY5KuUm0<@fWP@D;)MqIt62NIu<atd&>Bdqu}S65{)K4-A|u
z4t8$2N{spAqU=4$v#WDlXlJaRoP2vVBmr8HRq`nEIf=0^VhsH==X?j%1Wxe;Tqck+
znK!ff)J59L^WyJWG#-}_gUgKeAeXs&&afO4^xk60L(2ogPsotlXiGVR87py*f-li=
zF>NPi8stZ}C0=e<o^E>P1A2Y`@*#is$=?|!yyIzL_ePk;!lursRXN|h$)eC^7|g1T
z{kT=?a~S_R1)XMGt~9mdSc)<Cg#(50JLqMIU)83r_4wi?%1>=I58p}<Hz_?1u*Tf*
zfp?Q3ii$c?q#d`iM+<Zm7Dp`tqAIbEmrD!M?j&A}Xyv%e)6NQR2j&;NF8Vo+(G%Z!
znN~B|P50EO$i-n!%arhrwDQ(;+N6&!;Z3^d=W<#}q?n*v)YK{4;x4i5+wO33dbu$}
z@hqfBRZS3kIqH?TthL?&eUU~R7zQwCBm_*ub96%%=zCE+-!o#ap46<IO3X)t@FqcF
zJ}U&)Zm^s}Cg8D3ar0eJg$U)IIvBmC)^KP4#g&c5S3*5e=(oijIa$^~CF{F%BS}X=
zoC2P)>c_Xfh+fpoE7C6x#Zfd|S2px}5P>Lf;ooyWF_0x<(Q|svcRlc1;!7f-5T6H9
z<#%lrR8GF#*prFt%y13!Zbc0jzJxcRR4KyEvMf_*-9J>LO?IIjsfyga&viSCmE-><
zul?`v+aXArA$G4WXQ6~UKw6-zKIjF}u#IbqFXxZwf--x{&xtPzQ_b@raZW4(dZey$
zVAhm$Oh;#AxoKWns4vfI{+9&+nlh_2E~4_i#>Gr6Ysu4KpqEz`J-Wt>4!n94(fz;S
zheqAXRx^##E40}xogOKccgYHIWS$={7mHQEn&tKf7wTI$Zv`!SrYX3Sd`(?bsvh5r
z$c5y#RjRbA9<XXO={!6|Ql1vPR&H*vPkt(>bMHR@<9|ivyvPMq1y%YMr?-3M*9BZ4
zI*y=C!YkOL#8S&O#GkTqKc7F|w(0pom&>l$BW3RTrJ7zYZw$`R41ImIT+n=xV4w6R
z>>X$ejYt*<N!9DRGJGy2pQDXe!%6#Qc>K|SyDy4%d(Od@O;K&=R8fQ#T!CtIu`oT9
zBK`5C*WGzlhQfxUy<*}Wn=TCG>Xp*=<p*}H^})pn34@@aBxI=4C6ZPYbQJ#2*ydk<
z>*fMc#`O~USST;cdAb+<E<;}3^YZS=5)OS@*vwJZ=k2UKep32AJ~dUlT#lW!&o=j-
z;4Z{8xJu_bZ;;+3!+I&V)dk9x+dXMay8dWQLkz|FDB^V!wqqs_HE<NyQ;mlRlLc@v
zQY^vox|~Tx8T_$Q@dBot)*{u1^1F4CMfB_~jFF{FW`;)<hjLu%+V&|)iq&rUiCHBd
z1dbP<d7VSsNHv4pLf!l5)<7g&uA{ujrIN>4z@eaKt9OhQ?+YM2l<7+%Dg>S*Y)U<l
zZz|v|M^(ueDMB{H>Rs5DB9U9AJFzVC{NQ>C>GE_@%PkHoH2Iy&OVoVu-njp6ZU3%-
zk8s}V4m~a^GPAS_V~N7e83@TfIbN|{?vv^TH_#cAoW5)ZbAEl|Y;!EEwG?^wvsBw7
zS*yz;Bj!ZRQ{k(bFd<hJQzJ*BH`|<FoK>qBPM?F)JFP{_`=5J|iE#Fb1^Ut*JK?h<
z{{6B4{l|xD&_z+ni241_CwI(a=9{lH@*39D;F$097oYx_NM4G1NepX89x7&&!QfmG
z>|K1D5Jx}hwF}7)JyokLTtfwbq`b<RDrAHN1|Sx?v=&^BeDdF)_@9(XAQjLP5HeOh
zOn4VU@w|i)H_Ye3X$3tc`RNgdBBn6;OFQpGoub9nG;ohgVf6LjGLj8w$;}UaFS|-}
za`y^5lV<&oGRQ}RlkayutBb2v2txl=)&EvS2B_kl6Si~7cg@NRsj50th&#a026zRz
zG<u(ue0%FbtVDW%cRR!v>#2JTy>zNgxhhV<%H-zU!S!Op79#nojqwbNX>V-##p-e<
z-;RADCG&>+1XqL&&S8%iAWE1WRUJdE_VCMfUFF4GeX`S<vWkO()Si-!sGgk+3|K==
z%?_Fs?~+b$YByfbN1>|<CL8EW5>{q<Ak_s&a#7@0=qnOKO`XOMoJ2Y_V4r@7-c_eQ
zmVeHKxH>><TrO&Z7f|@n2P+$af%BwT7i}*uz3OYqq%%3lXfu%vZsF^#+7F1Znr|tJ
zvdNJKv7DlJUv(y~D8qKyvbXcCu*aCqmLJqisUs_IqMqZy7hr3s_2MF>x|z7k#U`Uw
zW5IUsur3lK-+Wi1Tx#DId)oNJ68)3PthID@6i&0xK#bhtk?+Q;`d3$V3Z=fM(~Zh$
zZ?Qs7r=;%o7IOB2Q*1+_ki+U1tJ}_DguN*-)V=yL!j;y$`tRKvIFOuhU!FV;C~Tj)
z`g8s=BC;~Lr}@pNFJ~}({n#}@?ude5{{|Y|+qt<zd=qa1A8-R*_U`?2?HL={hw2VB
zHC=Usd2|frj3DD5e;s+RBU3E*h}@)E5D~(Dse2y^zP!P5Mi{O<Q?X#&lQSbM0P`u@
zZ0Q#nb41H)P*Bc+4bU3Ji<4;CYQz*7ZJYA%KA$aDdnd0fDeXsR-aWC{bJ2!@&W4fO
z<=6^N1bKw--K1C`zTbJ4yM==~Kh+mYiyuVV>dyn{;iQ^VK7Dk?FP;i$V7a}!0pD2-
zCQMi|fh^!AIpSdm5a4x4Bd&5e%YLanG7mlj(wR_~A-;@N#`Rg(jirK)&I4yiGI$Tm
zIu8007!^2uH=ixccl`m#uri3Q0FFjldGP&nG444oSZ-+49JtE<76JKi+dHN3)+H1s
zwRr8rXk3Z$NZRwHY+wNGLx41+3?Oi@FIpkpI13(|W1;s5N`HU}h|A4mC|l<V<483#
z+;D(nb&)h(dM0ZNF+ZaYiFATZR?H)em$0V!>UlB_QcW=0#l6q=s<UgAMKr_ZaI8CU
zc|dC*zLRocIPzDovR(B!R|?+otfrH#h}@k89AUb@d-5ZV+~nIIc9nn$<|7oWY|~?N
z`rbPa6G@P>B03%7lt3R%Cww5=nUet{79?p>XA@dV-v6!B`DL<TYvAwtaFokYZH(iB
z91T8<zz4SgRel-}7jiAC5WIuuT-q0i%JzjIyzHcHodUx*bBI;^eO$@e*0^wA_SAm*
z@Ku{@C1mAXOVZ%v6#<RW(5ArV2@_7sRVrH*Mu*c#iUIdBnHrm2@$r=Bu{bCiBmjE|
ze>kZiZDY}Q(wK$iBIHb_Yfs=xtt!Rw;lEr8{%80AXAc-J@eH)etu%lDz9?ZZ>fRZU
zNDGms^xW!?d6Ze!hITeE5pl!oc<Z(eGX9m<7Q@p_S~XN>LJ$LO>6V+#Kfca~rU)q`
zz8El9C2SOdgzb(5S;IT~_M`c8!u@A|UIyAhTkZ?sT%W_m1trVp(3@~FOfNnoTgBjL
zM(v2nCvB|S#h7P<_MzmUp}6I%7ZqJ|()FVAMCX_&#ZUuq9yzM2EO+816QJSY7#0L?
z<JBy6o9qe3RkXmp)MCpxf1V?^L0o?k-nv~@8@}%aPxxYPRDJt`4^$^lBOaW?1m~LU
ztSUV^PXv90gVO8McW5ByP1PPuRq_7N^bhOP^n?y4mQM`_pemh<jYzbZU%`P{WkJa&
zwT?ZXvr(TDF>Y8b^Y(Qgb60k9gdEP5U8Cef4bZbkW7HK?DX~;G&*BTsGHCrfRRs>?
zK1lZ_smr<S*%^rsuGk(U!jdY^HdoH38=@ppPp~a~4*alTK5r`Ic&_z8SB$2herM@o
z>qX>3&P+v?%OD<tqrov!Qu6^lh+;JQ=^x$Un>fw4rO>nq-A<?(-~ASdj6z1$d?%hS
z&p`hsME7YhSwuu_p|xXewsissPM1TJ^QayMc}E~+NM~3*HFZp`?8|tZEpN2?EeXkA
zfazYuvtXnLccRj0E`DnJX1|JOz~Et=A8lE+8a=)iJsZ8>wtEsb&KdEAtG$I62?diB
z>UQBG<bQv7PzJ37?=r7~g;kvR3Te@_(jDk!#DPD1e;@M-@h8(P;(pq{TjS5?WKe2;
z*uFO8eJB-<SKIuRn9g1V{(N@qW^$$6Z`YLKg6q11pZq;Ze=KKxXCi)El5nutY2_6Y
z2S-V_Zrn}q8>l*xmTGmH(OgMIaN@PU+1xJ%q)EYKoQs%Gavboo)YT2Ws+mtv6wa1Q
zM$&rg$EKr3sb-Ff5W`5JnnD+^WZU-awfA$QdsJbItskjXOy7hvsYjT!u_U3`aW0P_
zIV|*VdH*MQ1mZQ17e|fl%w{_@>M=uCW=z81q{K%;7>wta2_ltRgDr0S+RFd_0M$m<
z(SPT>Boc2He{3czx;og+J$4u90qiSkJ*H5;NMCD63+W>SC5nP+m*DogkDkf?bIAQm
zCa$uQ-*?s5Jka4PC9MR*7s9p1D3oJ)2j*)d$h!%5NHU(fg|0p<Hm9(fM61Mjc9Dky
zPM;`Ry~H&o#V$o-M1?vK<o2%5v1@R?vg-5B^(2cjhtw9H`|!0yaNja;^$i#9Gz1YT
zupzo0X<j?zn(``RuO%zpirHcIQZHU($+u<r-tzn)gV$58IF$F_F7+!ee~+kWQRJQg
z*_!9ksqv&*S`~0T^i2+hbE+m5N$cqIhnxh()p^`iM1^|+W{47;5s)-yq54U)Rg;n>
zM$XK6-V+eRj9b!5wn(t*wuPu9)+zw=+GTx?8+2QS_5FNOthF^>Aj9=y=>ewpo`PBb
z&}q>mb1tGr;RdBe7B7f(J83}o=#zRU;VDJ>CK(W8U<bn&J?$r3^f-NV0RcRMt2b-}
zmCb<rGwr@`|AMEA7%d|Oexn7Tj41``<Ly}9A3Yr2x)_P53^r&mH&s<T4OK?QL%kI8
z9l(yHsbNc3I*!Ix3j6!1sw)uX8B|jWt{@`%M627|#oVzmMLY&XVzgucmFiH$O=2wO
zJUOd&gFIe5OGI=@X*Pf*)Ootj$IHd3{w~>&1owMjx$nph<zqwGlgZPytRE0I)-)sd
zVg;4nhr=ga=*OSY-0|QbgpB<*3fKDjvSLkbh&ZC~i}7G0-Wr+JS;TeNOy{mjwfbjl
zJ}dxAm=FdJk{z3D?kda%sz5|#fT9Drj~0S8H?My9UdFP!^G^)gpvTlcistXzAE&^9
zqcI}O)zG7d8yvUX#@Szr4B1q^?QCqPBJc`b6sQdmdNAL-twUM=k+ZLu909_78%PEq
zSFV%(t)by~nUGJIkqS#q4(QvISbTEf{(v`!!e~%#h8#aa^uhPABLS@5*)p=A{NVCX
zSaL9~q%sr+V8oyGPt2UkrrAaiF~Pn*q69Zu<U3N(bqq6GNy^G{S^fxk0@wvT0nV$K
zLno%%`RNTrck828^JMX3l*CsrU0XWi%EiytDirs_NrA#P!=RLnw!2ms&U9CjAHWb1
z#@TnopMl+?VoB0K$DxOQGNM8fG+w=6y|ip-%hs)YI*#KR3PTn5B}8oks=0wgR1nM6
zVlJdSGVWrJGM_kkO_L04(C{9n_6T4CQ@-GQG92j<+cXZ=%Z@Uw0&VmW+v9gl$=^+E
z-<yP#!*PHUw&cH!m(Sm4maB&R2<SIrO9E%gW}wDCY%ZYA)xkp~V|cq?%Ny<!@55va
z9QdVn7oswPB?*8EAtq#LYhbvUl2yBJ#14i}rP!0kM-O9G;1VuG{*fXu%6}-&ndyY+
zYS8#0NU|YCu-Phvdz62blDX;bj!P;hoIU{<KJRybYn;mDJBV&I5-r?7P4=XcLStln
zr*0`nars!%7Hlit0z%uZ|E+9pD=IEc^>P5>j-m=kx2@l0=~HACth73!YmRqyLjn&j
zj>j<kAGVI=o{~A5XbFffNQVp-oGz-!OAD4!ebiCK?*4GveYK1an9dhG15-nn;|6pE
zXHduQEsU6afm&_Q1N=MLoeQH{S~RQXaNmMyl+9rQiHc`HoeZDucEExNWF8_e;fFAp
z&kH7d7GQU6ak#Z)7}qZX^1M*$@$uMo)NUw0Ms&OJnh<hjJmWeW8e4PM!!Ukfv*Go~
zexMupe$bsd&BaA!{pIma^SWlcJ{80fYXOc}uU6+msAnqex{JQY;Z$HuW06Yp!(=Fr
zM5JbisEwYz>OoioNo|3noHZ3|RFocv4v!~ew-JvUW`bzo2@HR-F}98QicWj_jl+IM
z#0(fb7X*8+L9j<T;HWt2uu$;6-FV1f#*p&a{MY-?_ydTUMo;CAcdr!nU4&PB-~m=_
z7)WK1A7t$~8C%NR)^99mZUte+8>r9s!%8)yVS*1z5{UYx3ouj^5Vc&asGwKl>aZ~r
z{*GgxE9;DeA}2(8=yB==f{k5yiYOX{c^E$cc!=kCx})qoUK6b?OO-pm_}&y4o(r<p
zQ9Xzq{d&w^bHHPJ#I_s+G<tg~YUa_8z>}R=3t{I{8p)@CyeFiMb{b~={^>h7ojAb=
zE{3$A1{B6&{CmuS3Rj1VzVQ5B4BcTc7~qNZfSHwel+ktj*t##&20;J>NY@KcA&0=)
z<)&Jx)|fXdh96fTafxZ0lspv~RPzy%7Uj`nv)LgjDM1<r#23Ab&So%LQ(kRl@7OeF
zP*w#)Es%^iMbf&eF}JLIIBebRFNpYJ?*Yu@tY4lYI}U{H2uug_gnBCXfLMM2>66)y
z-5r};Zaw475eY=)0U~X<(N&@{cN~I<t(u6>LFH0mmOP{Z=k5212*wm*mlMijUilGn
zIZ1@q+@J=q<+7Wi7qX2}Fd8bumaK;?EbdlgimdfE@nh-M*Vz5c)$wJCF+^P*&@FNr
zpg3<(7a5_VVWFW{PrA7&lf(M;J<IM$bHPGWx^mSDG+TGQ6idAj#V|MMI*>NqSgd^E
zk3XW21Z!JQY~L(HtuG+wR3|+Y<gPAuT;6WiSbK%2MuLE&1Xwf<MUEd*e^zw=#+>%u
zMSfwSej%YUQh!(2%z#y6gIcE9H`in;5Mv{_>^22p=<)Ik0Z!$QKYV7)%p8As4#F0-
zsUn46LNI8gsT#T+IXq2GH6huEhYyiJE!8$@ADCYBzA_Z*i9Lf?d?^I0831^zosp%{
zrV-u3GixcA3>j3!OdDW|fhq_g2yIs>vNwNb>g2TXP$UAe2@1yR(KaLdsUs(H+J)IF
z2>UF5GqB`lC9iu%j+tf~NwVCDPJ)*L4U7P_9zS<=-bqZ~CoI%R?o|Q8kmgo%8_0d^
zl5cS%Mc&>)>9V=q)(&=U@VY>r7xWlS=SmjdwhhL1ubJmLaBZ6mNXU6fo38ws&1`L-
z_4S-`TF#fwe01n?*f2xXdbTcALypZK$eC4Y*})r#1!QOHfd#@w2Q3$c)x?^>&+H^L
zVJ)sz@Z=w=hN9D*dBt}z+Ife4y{xm$Ko|>Q7R18<2TbEz+xRo%o|$)v6<;;0<W732
zb9>?GC738maHQz!l2YExX2@Gwa)gCXDoqRzASY>B=#UOT1j*)Z)k`;K@eY`o)=`)u
zG0$Q4Y{fyDNdvWd1HzQL)wIF0U78=88R)9cyGpVwBfD$;vZ8A8Qgmd%+3Ac!<9u6_
zHC7|4XZldzd_>rFfJ_5^s>D7LEJ*jl{1kPQkLcJzcs@_iro*ucS(HJ2pqp8Tz_F@W
z#2R5@HTeLoQg7RTh@x%L#%<2X(YcZ(JuD2guO|m*H*u;UI`G?FS1(5Rs0F0Wcpz(-
zARKrwO+O!JX^J*&B!ePLkgV@K^O*ExwOi%-L7lHJq2Pw}djf=g$OYH}JagbSiXaCk
zba}_w=|njgWUb*z{<Uz}YuwZ4jxjp9=h)V^eRvLpCXfe?L~wMUWBzbs+ES8$GSx^%
z)N(QDzKNU)sRwPcTv=YKW2=TDXCdNAgd5Za9#*f8r5XD``g7Q{7hVs?R#3Tb95$8o
zEMt&kYCnsR**wIx&Miy)tlUqBxUvF)0KK{!JnTi02OP6dX*5rO4BJP$-b}kk$XY&x
z`9e}svyoDgda57K!Po;FATF0(1$|D`EsTO{*7BYx84jn^Vkc#N$YA{fw#-q>@wIT5
zdF0g59lMyqRAPj25E_pL2v)qP<mH4$qr@{yJl$y_r7)Vgp_Gu(NSa66*cDeOIlj8#
zSFsYB+LYIpjj+~&3_uNy&7e{Y7mx6%=6p>wI~Xy=`}Ov03ii=p^Df?JljM}W^jKtm
zjjy&58Hk5^NM2ME4_`dBl^m77F-I7F7)AO1#58nCLSE#-7jzJ<$Qbd{IPcWllFi{h
z4IYkj_>4h!4qQZ{A_a(xEbX3U2D^XScVhH{DLP1^N*!N@?Ne2GwxR8?mX8K{x|Nz#
ze^eC#IK#@&3-dwH-NIRy_ZpxBr>32V<{ik{Wy0j#;NbT~jrMEL<5&WoSy!@noW4!(
zA<;T=ZL+?-Nk3b^D7aXr(RvQscE<+F;y;`+_W@P4>L^LkC$zYdg|O2}`RaTjrMm{L
z^7TVyv#aX?nBBBw4Jz7}CDVb7<Da^$7My!6Nf6g`e>}Jc{e-muPC?J&oI{G!^~lc7
z&Z4D<J4TQE!#sn1$4;X8*wQ?p!=L86dB1LqhdI|Z$4*}7r*d^wHfkBVZauQTNziwn
z8S$q=<F(-W>Z70uSMdiKHO$nrg-6D9&7T>VNMt1It~7Oak&$`u%Lrf5=WhLWd-!zL
zGh*=cDg$G~a(lb_uuEkyH^I8LiqH3V-@bpro(#HG6SO|qKUnC0+b?0OJNT;~3v+{z
zkl6RsZtcxPyx5N$AMx|coz9~{h}$)M+t_?H&_zDupgZvRQqv65vZ6ZRuzHu5<4%Z>
zy27>TyZmnlEgh7KR&*JX?#k}$?_BJ0^qxE(K@HY^>!&Brjj45D{&pQE-KOr@b?Ia2
z(d0naQB6bYX=5UTx^kP^G#a9ZA?J|6AMs^RfE%pOx*$Rsen!lVqS`rLG~PF`MXf~N
zlp@VTo@6JEG9PXnzD_NR=GnvV=a3c)Wx49e)L`Yh<0Q3HXl3RzAB!!z%M|j}mYC6X
zrxLE}nTqel&w()Kq8auB4c|a*q*9h0{23bA%hs><-L6H?r<l`;)QM&6tkLH8j7!$m
z2mKfB=3ne}xrU>KN0`%W!qB*_)X&>|IsKG0IBLb%koNdcK>w)m0H2<gHQK`i;k4i!
zAaNF<MYuiwP<0iqOq!|?5)Jc>8+F4h?HCMgt(Rr>+sPayh2B$#3jj34oD>!x>{!HC
z@RU|2mR04Rtm$K(jk7qE6)+JQ{cX%tL&Z0!q{it71a{OwTDode%CD@R^kR2W-m3dD
z9W42dfhY_kdxtR*R!vvH!vI^l-rk2@oAJzR{L2Z~=xwcePVP;`ao&$<3J9kb=aM$~
zat4Ja+l%ciU0?xFI;7AMyRMenwY9~T#QAN8Bvu`M8^0ET=U#xnDsR^v8S10>(w$@%
zdoG#oH!qsn6QG~>afsSI>2=6u<=N+WAiV~+dDtb!_J>QI7IP?rc?+077G*^}rL^o4
zK*ARQ{YKuQf9lNJU?(dMM*2r8E2vgXl>7Cj5xw|LS_iv~^{}JtGmC0D045F1!5DOv
zRTrIOqn7D`TYROA$uIf(<kR<J<^kdFQ0pbgQV6xZUMKrsrU!Q)t61Lp=K*p=lhiW}
zp1=b<JFTsy28cN&IFX?u6;otCIm0L<>!3Ywg7W?C2zDwauxbiS?VXr=?(z)5RS|si
zgq3QxSzZh&wag#R+{HPfPDF(nuLlV0_fgk^AQ7mMM$r+5sq@YzF%cA9&vMb;*&h*P
z?c}`(>BVb4c~rvursPijUh4pM^&tERsW+ET5b-$eT<juUg{zpeXO9s4x-CbE-Rz(}
z7N3VYd9BF*)8}3?BI&&pCSVn>QR+$D@vD>#y);UvzV#M2;OCn?=RtJu=OPKHj372p
zt{b*$?eK%SGZ_||Po}V%kf;*ND*H<~$H)Xcc?FIn;~OCi^>Ob0RSHxMxfOfyGmGPn
zKZxs?=|miU6TjkX0lyUSpV>i>7NjN?%G)D1dYrGv#qb?08yjpB@}tQv=86%67z{u$
z?>h!3N|pxKr3l`wQFDR3x90_R1R=RO8MxQd5nO>Ar2crY`<E=GXi__E>oHFqS!xbC
zDteOP1tQoYq=)FU8JLs2jVWsl#vR-I0vT%OiP6skay6EKONXNHs~hr{%U+BrJWLhe
zX{Y6Q=-)8$mdioTPUOK+&&kaLE0!q-CE2(A>LZ0Sp<i`xM*Jowg<rjRDVu`-=~ZC+
z_g@OQ4u4kBcG5@tUJ=}7geG611#nWj320L%b~ltVI48z=@8hXcTW0RCLesJ#;*}2P
z3jeT0;Srrl7<f2-W=&Vr3~?ljUj>Ex7VoEvee{Hj4!dxV2VF+~^tivc5ueA>uH|um
zOuu<u=#XL(<o9TJhaC_d>sah!ICK<E)p{{KpM|G#egwPjkWVy!vFPc0pxg1Ekw1O!
zqf9R03a!;w?|16x=j1TOfAR9>^6&A`FfVivkC|(s0$=y0rq?!(S+~yb_Q|q;?f#%#
zH+x7k+1Vixwh*ZYTjcTU%Nq2_T@;RGisN$8U**A-_<2+p(Jy<EX~tVK?1+RQ5vXgf
zYaWg~^Cb~aI8wPKXjJ$50^EPVD$(lkZ(}exIT*4#9Y~e+pIGIhkDNtp2paZzywH*Y
z(52BXyVn<B%BZTxF+uvq19{WjgP2{{lY-UNGdZTtYJv{1-ZG5&bMx4LdBy5_w^6KR
zyFbDA_rN$*7wKw2j!$M95{l2`_|*d}KkvFa5<1VVHe;nl{Lr$HGgga(VzD&?;qS7v
z$)VLJ2D8M3<k;VUkNh1p0Rsmvczwq3Jyabz^jeW^nCzZ`=)6xwUm6|!i3Z}ZCHf|n
ze6s#H>X08ec=Y(n<Kbv!<iAH|^uWm-xRd8#l0JL~`Qxa5GI7>Jy6QpFnwQ8`TI@5m
zP4k6bJyj5u@IKS$m^Yu!g)j(z8FmDs^q6Yyr#E1H=rrY)&lk&>TACDo&I0i4ivuqJ
zVk6Xa)=7wZ%5_HBKnV0ID@(|aCOV~u1zL(`<$}M*(iWZq&2|`(=f08l;mr7_(@*WD
zxTgW5#2laC$chP^J=cN^Q@esaSd?T@EziN84owE>cbGjuAUEJ`aiBPXP;PV@G4!Yv
zf{H^mh9ogrQK4STT!%l7rzWx9Qi~?1csp_^I_o<vX8)$tdLIPg9IlQZ?m$Yho^d?1
zJu!Hoaa)Fi(zb!}k6>d;C7ww8$Z3ah%XQl(w~~H5Il~uGggc)FE~&%uXV}gYT8E}u
z<g~JWcX}hxcyC690Qd3anKj4Xftbs(OdQA_7Qc}?GH;5cpbq4d{!NyC5qNuQH>!Iu
zaI^(KZkWO6C6d{bMtR}Txu8gYrWp@1pe!R`c4nOrp7k|aYQyUbzs1mDjhG;qW!O;)
zLsBQrv)Yet+c4Pwip@8SK4$f2by3<o=+$+xL0&rZr)IlDhlVn4NxudEpqi`z09P+J
z>O!{3&tjk`?W1Sn-*;t&CARzGT+Sp89Yw9*+myLV;%Kt@IBtHf<ayG{K{w`aF{Zx)
zARh@(s#{5&yp?X;o7q^@_2+Q}bPUvXX`qv-bqrVTR8{n*-2N^4lI9B3Wzp5odH@Rf
zqp*UI)rBp2t<%4@=dz(%<{$c-fTZQK>xoY{w@h?k$j_Xk^m}ND0Qkb37#3bLg`!%d
zHI^w@^j?*iZy`GR?T0_%T;OK2hst&RZFT1fpLFkb-szoGFS&B%-;(ObvjLUC)6bO?
zov?>h!PxavgHNakwVby$@hX4DCtTE+SF|lR4;^R6&FMjMeLmzs%tt*`0(3})Cb1z=
zJ@D^JPENk0;i$o$)RIru$4C_}YVgNX<KY#>k10KNcdV|Bs!Ey6yZ;un%b*9r-*&4m
zc=<0xajST_m_3*dgTeV>Qcs1H_sGxU{(%^%4=-)V4`goiJ|`F3;u6FQ7|z8(8w$<%
z?G+tW3h7I*OjB;_zDDqNL#pJhHiD$EKWkGBFhRx9jDPKYZZ)%gIdEZ3m}Fvta81v7
zY`+ExM18RrVv~```6s+iie4Aj?}ZIwF1iQZkOH~a*~V&~A$`(7DQc9du-bVws2Giv
zOGw<Jy!%_|fli{}8;r6!W_J^z(p0_}OGu3J<c$g0N+AkK#{Nl9k&KU+#-q&rjonzg
zriTdkQ~cC_#58zK18DGR*c*Ka4(?vPSCD#{uHB+OKbpQgTgcj<HUoQyUe6YI{ORTX
zqVhH65qJSx{Uxv86MqWe0>9K;p1L!F4$t$tL7unYF7u$8cejDc|4*~Y<AmYIq9$y?
z1k{X9On;jSZ_@&Ma$e0{F(mbu@e&Iw)_6wenXGisM-WVU|4;3U4}@HAl$lqnj4?7z
z)42)WV|zaKBg8~fxQu3vc;#d@VW6F&IK|>1D$897*_40&r-VMDjNDLB9`AIV`D(4L
zG^PGq;O;>zZ~_g(j5xEx6Mx=ix2FdCwmwx71$QWC!s+3gh>MC!sha(PJno!@`(+yO
zYMyfdH0&$<Dnv=6b5VLi>dGuJd$b2{n2en>aZ&31pVspRRFYBF?|r%C$FuZd)9<)H
z8w*X3;XI&$Fi1}cf+%yu*qv{KW^Fx6!?C95J>lsi_l@#R)zqP%pjmqJ?Q^lK$=A1S
zviCDpdz0~hi-_>^frzxp^W&c)$%vZIPmFkfnr)y=N)en_iTkN5ps;nXJG^TcbZe+<
z1nj|&EdTi&2`YdL^6Uq>69V9dV1Hy%=<BpA8f7b;*0JHwfObj^B-ztSwE1m^b-skL
zUmUX+&T)<YldpfTHn3R${yQOH(!;Y*T$XG?)zkIhE_dj!1v2jXA3xf#@>w5=%}H?0
zkQ7w<^{apKgJuP=Vn4;UvNFt)tm@^d0L-drX3HmPOi8GJssi*e@+S@PP$?r5`$JET
zl|B2%D$<~9`0sak-tR0Z1BERcQ*T`sofyK=7k7TS_pVx!GNw3lSM8Sw(qf=H=wJKf
zyj=6rEa&nIGx_v>11X?-SP2jlBjBW73=s=!p9iH}8p4znX{J#<_&-6`7sT7+CMGcl
zMSfNzCz`~C$vD4*6l@tl37=`yhh6!Jh1F;-?K%%y*El|h&8i&pUzG*WDx^=J`w~9}
z^9*&D?tFEUPeHtw;2d_w<O>Y>eSSYi?|dMP9la&tXwbj*1f#b^@288|ro)`Pu4UPx
z;@GZQnlq--`-?<`feQg=wQ&zP!B`u9TCAHtOZZNW(dLP<&~$!*Df9$ciwKph%Jpe~
zWOb|S$8(f$BCgxebpR-IC%0Lgu7uI^&g0xoRH+W(W6Sx@aN*}R2&6%kR>LI?mx0x2
z*QIJxlbW4Egqx}mr{n@G14M6XIC>&fWF4#nCw>04yh*_+@^`Aje=X8*v-z^hIB{fT
z`$CLsQ)NSjYT>Wn{evHxtAUp6kKe^vA<d(qH7+ySFU#a-Kl*$vtnx3%yM_+KF9O|H
zqugpnIfo4bx&I`p{qh{3APA&FPuhnv{)lL&TkFQf$)cqTlWzVh{=o)ibat)gG5M!!
z(RQN--=jMJNmc!|EyD*uXED~3$I5HErY$*ygt|d12IG!PF}%;_Pa9lPCM7hkBxiAF
z-T6l1V9;+{@_UZt9dADDaFF5{%X|kFrKG!MuqsBTDiZ{`_p3uHO$D}u7oRGYT(TC}
zmT*#LBBT8eD#*|6{yHGEa5_6n$kLA;+bcBQo}cvA#QEhuKsQ@G@A9&;rMVBoVX@rr
zDH{U)wO0$qf_!%~?&M812C0V@nI0AgcYOo}aDSCl!-$bS!TL0u)LI^|E`ZY>9nTi^
z-x8<PTmx#m>h@jN8ktUoXLql&b7KR$E1|cQhVU=8sG-(>=2!1Int^9xDQcCAi1#o4
z62RYoAb>kU!Leh4?O2RYJl097CknzZ^xlj5|JAJy?-jU8y*un$y@D=TzPvs<Hihv!
zJRws!z!i+5?}f(2puBvLGPwGtOt^9j$JEc*4O9Y3K^Su4x*l1d2yvLYzKmP3#rnmt
zfAGV?Gr$y%v5|^`BD=ih(T_yDQGAA9#UvK~;wNYgXW${y?tV4aCeJ%E%WV1=^qs@u
z{z8WT_Ycq*a227ZPZ*hM6MD7CIZgGN;#4|$;a^|IFNXR^g=%#xamQp<F|Od_{tk7G
zj|bX{XEnK@Y6JQ?LnxEcH&qjVr5NB!3tm#p5IhF@>t|FZeV@Y{GylT8zli;ddH)|c
zghmeF^)m}i?lc{^Y3Reqsb(S6InMccU-ie@L6n&MMDH1*`@5O9O27C}<NgjxHsC;i
z+cp`>ta~YI5;Ow1n)zG9SR~SaZ90fnnvOYSY&2i9b(VrN&+gYR{=pB;-oRMw2j4;Z
zI$1khbXl4YY9XOHI)8CK1akm{(be`Mv(m2jUwNNR-uMTf4`(<`8J-b~9lx4Ue>AX@
zV8O2Xv|}UWuYRZa50F86C8?&Fl6d`-4qIw?hs-}r0$jjy@LMq|Ej;etAD@eCo3Kyl
zk|!2Z=AzPFem)KM6&+-s10x#;V~mP9nNE*x{p0!x7L-=H`1&37q6%K;;pLfVV!i`q
z(ez|Gg08=A-(XbW9(>hX;`>(YKL2%jhHSatzz)oCIe2|XNPg8T+FM-TgDnVdU8P*o
z(1@A$_!am-w?X?Ce{1*kxstPXT^E~MKO_8qlA?zUa7tzr!!i#qOYMb7->zhE-wG@<
zmX<wxO1vP1q48nizT3lWUA^!zj?L29rR{>H?X4wy(M^|xLP|#_snh9xP=QP@{vz_W
zmT|_@?e=71iMr>DYu(RVni-!jHcPgj+B=KcICmE{)iJ7&pc57!b2*;a4{#mHNi2p&
zLvxU{O3Y7>cR3edb(;=HXO>|j-UExclEAn@a9(*OTF`NEl3J2SYq5xS{2CeYs6pjo
z*csE8BsC3NE`F~`_w<P9zSa_Z-EqZ!DB*cyFn{fdta>1~I+5r{d)pQ@lGinBb2Dr8
zGgs=cqHZ_GlA!pRxw`CZzkXgfBgDu4-j^&=1$9b;l+fa|calRt&Qh|X4bS$ZSj_#O
zl-nQpOaQ;f^f<kV@_oasdL=%fRcbU`W>22z582&D)}qm^OVc3Gli;PQFsM$9b!<~_
z|Eg|AB1g=hetX!|KUT)hxZAHTQEEJdyHDTGx}Ar&aJuvIyhhYEsXs<hRZ6kZobz^v
z_ie=aj4+<3X~3_sY|VDl^Q%sFT!qOhwc|`}{s<PD18R22dg&uwbl9fcCQmjQ4hLs1
zr4U6YQiTLkz&e?TZjY_4es7Y>LgRI@khfd=l8~pnH_sK47J3=)0l@V^IIa^$KR*2D
zS&lL#2Y4QBDxTc3KxoWMAJVN)9V6s)hGP#EV3$&f39iMMJF!F`lwR!hT;k>Y7HzZl
ztga-krUWT=<ftRRE{9}*XN$w}$Z68A5vS=6WD=*@<+0<3^up-^Z_bqxqY8$sUxzLK
zzZ~+v3k`Z7Ug7e_&{vyo+00Rby)jBw^vX<$crrW<gT|m4lPEaX!<N6ljTj~|`JQ~G
zf+|?cGR7t|`v6P$`)3TJx>4Tp`N5_{sodOZT<c&G7{1xK>*+i(UbM~d%n^3-&7V+?
zum=47=FURj%Y(<%2g5rp<ljfb3psNiEBBohQ1w7HXA0`-I`bv33K3h$uu(bkyj)0N
zPU8~=b*cE2W~jT|HjdBYFv_cDXUDHenb;Q`2sA&7gD|KUf>Bhp2gZ_$zd<{&MSynP
zS?*&q0v+Wicx1_^>}}JbXPGW+7FqNoC6Ud9Q7yHGlQP?kK(6zSHOdLcI+s5llFd!w
z7fd6Y1GLYV>&BZs)W-1z1&dd#Jf%>V)Ig<}GF1bsT36|e#=obl|4`@#ca66$Vm+Xq
zjPy<uyF4^5BRSuq#E`6torD4x>jR$}u^m@kwv`FrwT##8S3TS8te-C^Jb-;b;VRuv
z$lD1pd$Y=W)Vj8pa>Yxgh{K2mpohynNfYkUS&Z>b0oln)|JYxy?VtJpy$cU+Jj=)W
z$9FccCvEveuk=56REC$Yz(j5uP!+yWte6Wnez|@0aztzlGo`pKGO4*1R50C!nIsa{
zWn8JgS><>-3r_QRZ%LsT5eSlAiyd?57$hcU^<ffkA^4Sx|GlFAyQ%&64aU!aK)v4y
zojlhK-dv=%+i`Fb+;!_Tu96oPlt_owbSky|O~>NOP2uK?sQQr4M5?dsFx`<9Z#;h7
z-@C2cU^G~rnfVq~57o2DA?rl(;`+hD0@??<GSQpZ!Lp=NZYZz|sO%zqd@I^|WiC=e
zbkmU$-#VMhgB;{-t$SxTxmFj_Gk6x#eU0SB;L0yO58+;LOy%FTmnUGHni`$-C{quK
z4ctTR@u}&;uuT~bJtC!5x3yHwyq6nMaes&d#;35i)bnMN?#1ZH%<rfZs)<E?U{I;=
zqMN_vp5J)tD92tAZw$GK0tXeVQfRKn#TQ!>BJ*oxsY$Od6UU(`IfpgH^Fxq06g3xf
zw&&Y)c|~lw54sB~Uue(Tq-=ZrKeWAPSd-hfHoT0W6cLc7Qf>6I5a}(Vh=4TdT}7lf
z>D{OlK|rNSN2K=-p#-G_X+e6A(tGGFB>84sd!PNiKh8PpeJ|G!yu2*QeC8a_J;u1l
zJ;tO76?c<fU0KnPB+S)2<%hl?{RhHqXd4B$wP{(wh7b&u;6M1&d)iN_QyWd8p?FB#
z<vtY{UN+>j@GEnspaKo`vupl3{Fa{6DpD1+xl%Aw0pkG&)qr=7=Ep6S1>VL(^IREX
zWKYLZd|4&dbQjr<CsG^?It%{+tfH~5dO?v;l+BB{B$O<QU*tidxDg$9e<=c3uas(}
zo%UoZVxtQxI9L_WzLq$6<`hI%u+#;a?}j^Vt{!M6Ti+=XJ55R6%G?l`C}#P^(`?Cm
z;GYOm`^-*}7ESPtM0EAk2F!fR%knZ!-G)1!yF;9z!qImd(sG8SuHJd?r&g^G#tiGJ
zS&(=Inm$ar-Ed>7ZY^h-n%bXl-FjSSm8B{+Fph0~s?T|si>t>_-}p_}e@K-7{;mBl
zGV|~K2G&cj*#{SKm#$qekv}|ckBBO)l|&5)vrbkn5P>3{l4O5bgg1hDKl`G(D(>=G
z&)ZROfHBP?knoYI7(50g(x1&5B`fm1F`u!ce2sE|6D41gA05N;8(k}LA;iZq<xEd^
zkJrK&Dv3PPIE0$<o0VA=8T^{m23JUbH<b12Ov<}<>Ok$wjhN3m`b*y#rdD2o|5wCl
zP>zq>EeJ|e)vz}oTe0jm_z2kwc5*e13ZCsvyS0e#?1ujR=`(+CXNk`r6aM1m@O(L^
z8AqflUcv<(w=Uqi9kU+@Gkic~p<s@TqXi?SyW8(E59mVDK3-n&ad*812lEP{6C@jE
z_=;P0-{T)@cSTkUSZ{<~=qTT<u!&|$*44UA`A?Wa`2}DKg?dQyvmzGzwL%MRyH0_!
zL)VB-b;%LdvhS}Z^?0y;;FK@>)Ktb2afl}?XP?RB$KrZS|1HlpA*n(&s@QmFTzOo~
z_P2p-{zHFnMb3Ysvc!8EdVBSziK@smc6TpcF#?Z9p82I<uIpf>gE7!61*#SY(xQ#q
z>C~V7k68?~>r~_ZfQ>U4)LXh7kDX{_yBo9TnZD-jm7y?33;#%eTq1YShu$chxs~+~
z2yLNfDY>nuzNGt(PrfyrE%~-{(k<(N-2Mdya<F4~`>n@^Nds>(r{j+gCQJMyz-<`-
zx~@APY!?i4V-X37;r034e0eb>Gd(}#)so78NZ<PR>+m~aw(l~4E#u5V(jAkVu9IC!
z6>AGIi+iShDT2gr`=JbLig?xErPL(CT0xk27zLLz`Ss_dB-P>$59G}^^L969YY@#W
zoch_&YA?;GMy>$2{s?1UkpQiKpmm{77eZm=8M_<4D`GKRi&^ycISB8b;rV5$9Iy-=
zwFcK)P_cM|_{O6eblz511Z-8V01V4kFK1fsY&1U9P*i=PWX8Ti$8)%n$2Cx|jYs7l
zXhng^0&w-AK6UVPD;)2<hChl-+1ZKNpN{t6S0#c7N=Vau>AjiQF4gj(79nAO*|l#6
z^^}*09F@k8^t*<4cSskr&W_;ArW_1PlS#^%v(@Bg=lGM%_;Yew!Thn`jj>Q~GGMG~
ztB>0Yx6*odPIjgS8y$g{)QpAr9<aTSWIrmt6)?J-mr<;*yTDD{@0fz-v^YF>Pr#2Z
z9@LP6;E4NRVr@CU9q-@}J7H|3r><UfCy6*h^miI75jw|d0a%5P?9F?!PWkrCs(CK*
zL~P6yyDNde%cr|2xtXw=|4Q!Nc@{6fp?S_L;QMv*o9{%SKNP1PfSZ6Vm9nxqHfTb>
z4##UG$q?@R`A@u5n=t_XHI&`H9DW+3Qx{?kN36XpcDwy+g&pMzQhpuZmSfN2wJ-Oh
zL{H^AlB$Lh*KV-iI=PE>mHS-kexqcJ-&lX7B4E<WT-HkWM$Q$F-@TFGWTfr^IE{4i
z`>wYwgZh-P=PsOj@=3(!m%=fXF}K8y=$zi039mHf1)^}NsT=2s$Eg$7+*lA89pH^R
z;)x96<8%HlC!onqFDJJb<8AKi^HTaZpE&V52S0-iO=%bxYQpEbw8bq*fARz4?me@-
ziR-C^W@x5yp7YiA8T!Jmf@2QRaT9#`YxXaKp<^HlgTL=%JyjHleT`(e`Yy}<XDFL5
z`_8no_(tx#cR~L|r2Q}CM>%eMHJnAf-#)QGr7p-3pW{T4qpSSZv(43hyYol)$7@hu
z42brZeujk2=Ok`-R+2pr_Mkw#4X$(GnU-?%pk^p3qx&DQP_HWh_08`;qs|VrS*ZOY
zU0%t78h9sb-TsLPm{KsU(@|>C=Z_37myNv6?^07B9%-KxEJ9i@ivT~W9DHbRI|W(b
zm4@+KB2vXH@ivxB2`~PEbuQ_EbxJ23fPF-N+&&3moh&3qr<(5}*gfVHb*Z_`<vxFN
z?e|-hzk)$2rAJ-G?#ruzGP+u;y+7AK=*>pVEd(pHykAVYx%gdhS(ED@Fiy96V4SSA
z6wkUZ2dbqmT6sK*P9*ldE0V8G`QG)}yUng5#JnFIlck{8CTIYxfM&@Erkk{(sy~h2
zFJ9MiVinTtm=65HvxAt}qOyDc4}j)#IslrdhdTl%op<FXJVgnT8b?j6eaW1}%@l_C
z`<#2g#de5y>&9E<z!jpx-WaD7H%gNYQX_a|c06_3oG<Fp-S3Y7b>8ca%`g9ft<-r9
zw$isYQ7}>V=kAlT!!B9-_8IU!xffyIUvXt=-wV9DK4nJ;dt><5`kEl|Q$F{M>gRuM
zQ)xaeVlXh*A6X4WrJm#<jp|<<{R0*WX5^C=9X#^yNf6z@dZ$h|o>em-PN=dJ>dSG_
zlv@4~m7RGn`BK@qLky0Bjsv{(ybpe$qIw>TbQ5%f6a^-kE^t2$s>o4K_1vSBb&?{Y
z!oRYd-}ReVzVw?m(!*2wj<Oje!vYhG3*G^bq#0|7{6weOqwXIg+0jbBHuCNmk{3!`
zK(0M3J8pe>2O-^59!-NYC#Qe7Kb5DwfFP7``us}4e%Ipu`W$E*F*t75_1fxoQDUrE
z+u(jS)z_}r1N8i`a)zY=32rs1ISZSaO_8hj>VwNowIG0PhQ?C(ty6R5^hl5B*?3fa
z)Qii)-lJxh{kc}AkI7d%W%&C8&Rn@ux~dbU>Q>;@R;Mp-Dx?ZeAa+?=@;M*AiyrtE
zg0mYh7}+e3(0W9CFilE`H+=Va_MxlR)NH=-gyH!2K21V7>H*x><zK<bZ$4{LZjc%C
z=^uj>BOrNk8DlJ2KSo@L2gINGY?gA!iEHAYCq1-DJ%M9I9H#)qn|_ZJkT`_?HAVB{
z?`w9~*ZF-%NTU}Cx%bLr|1So^{Y{&I<uho0-@T!?{+BKG7-PO^OC8>Lws(tYi|UUK
z&1U<VBNO6+cV!FLp3wc(6IFZko^ODPI^gtODl+<VxB0<ulyaJ<^HhF6FhYj_Cx*LP
z;L%=49<t!QHJy-!4DVj}72n1-(_+=swcGuq_SVZZ4BKw}C3@bB`9(SwEcnX+w&rB;
z`s`&u-=$IB(_r%-92*-F5Pern|NHqRofH6!LZvD~iIN+YPgF*lng=+6xu@HcPy`*j
zopg9+kFcEl)G=Q&6mube{mX;M7(e>Cvf3XJPT(s-?=Mww)tg&Dw$8ZSDPf}u@qgZ*
z>@FGycl!sH+5nb{s-OT%4X_oS7fD^@i6)vPBSe<@IBSH>$5G0s)sQwy&D*e${x*m!
z@*o1<+CERPot2i0;}?gsit5?WveV^urf=Cbj4h0o@x!Lf4^xqr%K2+?mWH;utFf17
zzLM4>-BE9SW3rK&mq(DhR`QPAC-ZeVsZOJfCMX?!>$l+?yP-!G$)am)BW<(rTJ-S5
zes+Y-&c<H3*zotT-O+`!{VP2OZHHe52g@6adOjk=NM@oc@wJrMld?Ht{jvY<lK6ee
z7How^lXTB%c$UZqbnZ0hTp1?jo|ZRCJu$S)dltPKXECl%{$**EiX0kkQ$cwnPR5DD
zPQJH_(3kJnutcSemhm!#_c++}g4+dj%AtB*81VM`BR*);NdI<M0y6@{(DAn_{}w8)
zA#{UXOM}e3h21hKhdy|DjUTm|%?>a})^bp7_}=$E%PR%us2g#hjQimZs{Jc!2RTSF
zA(aAgf@Ool2%YHqRS>J28FBDEHBa&AJPGt)mh1ru(eGX})Dt)sR=XeajuJj;>uNpW
zJ2LEjQ+#&`0G=<_qw{P!6Ew2qWY2s7#3Hl?T<Cr5Y_#9naB(4fUW5PsYK?%JOZVWq
z3pwyZE3_Tu_QRFmc5-wy?%n)%lgRJGZ_N~lsCl1HJ0|K<in#a`bL^$n0#}BvFmPoF
z%|(&Js%0vr2da&}=L%mtx7`QMkIa6eN={%xLSA6vPfyP;E5ry=pe>vCoBCy73LgOd
z7L>`wE{0!QTZvN%GyVt2cw6Q4Y)T_kg6z-F4F(MvaeB2T<TTvuuvZ6?!YN`NJ}V;<
zwSF%z041dEjnV>3JEL-Z?{430O|}vnLRPlP-9~qw>k^m^rOMIOZz1b*AiX<K(qQT8
zZpq2~`=g+tE1DIgMMBB48|>P`xO6GKOnwmO(8J!Jj#75I?E9GLw^hgulL3`c*Brdw
zm1(f&pjCNX&28qdH2(ebdHatgH-FM{Y+i*J#yOxa`@T&*PLz&s?66P$EhQxf3wq&y
z&jR=>Ci?fgkj_kETb{nBD1y`w$o9J@?zQ^i57=e;i%lc7ZpZJLvTipj4L{m{$O%oq
z_KSq0F2-3HRqhAx_Q8#{wY&Bst@W6}CvvO8_*K1AN7#M8#MCdwSiX4qTh{%5tW`4;
zBB~EexZ6d4j>kX!-bhU)InB~l816ViJqNKibE_7UVLF)U2sZu<G2;pUG=$KgF08vE
zTYdD!_P+9Y@M+dHP(6JKi}7ze0b?6y`2YSS{l6VHLqjMAb#AX-s%STlT|6>m<;@ia
z<|e~a>V$sPzpP{y6THvfMf90MyqinGlFQRWBUxCsq?GFQ@y$;=KIIl9D-=|K0l8uW
zMP<|@8-3SOd_>n`eZ<e*mtDbrR?tgZdD1b9?p+Y54?zM1vHMhdxE(?HuxxZv7-k*x
z2TTlv(?4akbGos&lNfLQ{n_+?zoeUTRa1m$?4o#h%%ZlGq87L)X0Wh%x>0FO@JS=V
zjLvQtIzvL%P})3RM4c4`N>D%Z(b;<wagCdAQ*A0h$r5jaz=!03gHwKmWlKDBAbo3n
zV6j=p+}hsNxXAQT%l^F00xnI1y0|f~Dm)?T57>E{4vMk50riiBi1XGee}7Q%-^ctl
z7*vhEGF901M8Lb#yzHzxBPez^4?w8gWd~w}7qi~9puBt%0o^oM-3)v?I5&jyLE*8Q
z(N^or@%GV{wTeO-(tK*=Yx{}sf~md6HZpW_;ggQiiQ-wS8(6=>9RgoXU+bN8Uea=f
z$19cE3#KNq-;{|o{QqI(e>2qm@BbGxh)l=*_Nq*pS*`UxYH{A%$1tdn`tb!0&31@V
zgqIzCIbJ7U=vJIdjKVc&dIc#Py83#L`4+<FOQ(4jNOn9tJatC`P{9E<ghtNn_rC0O
zEm}6#gliAuhIHLhlRS%+5w(jVHp|ELyi(L(=(v4h{MZ=~6$HZ9X6ZTp`*r<4J}8Wr
zA$R=ca6H=GttAnew9%z4RjV?RQVD1c2<+!+v$$TCgP=<NlAor1NuY?pEe^Y}in+g|
zcXD$IvEWH$VC#bP<F@E2_G}CYWy|TekvXT&vZdWy6BT4AKQ4b;CGrxu<jLJ|K!F3o
z$@AXM_;n~pmtgp(VfHisM945gsbhJ2^`Y=8a#&nI-CHVsRe29M+$_pn8<v=9zd1#%
zw|fk+sbPoYG}f=0udNbd7WnI>1dM#|@G>S%ls;YW8P7pByKTyG;j^sW>5DfeEYimB
zSSz;I2pk0*<6fC-v^8WgxF!K47^e7lVvVTUNs9V^Jc0k=NMVt*x$u|6Sx<)ThQ;L*
z7LPh2uk=%#f>d#6cC7p&9ew6uS>vI)H8zDoy4*?-hYLj7d8(}d<7@9>E4X1hP+oP@
z72rWVC6>J$!#8l{mHLCm%+M-hEQ#2LK`da=w<>K1{MYT89|90nN`IHdm!odB30stT
z4EY}x_W$}<DV&<Ry2h$)h3vi!N3fV}trX7e#~_AK`Nd-lL^k}nSBTNq^;Qo417<}s
z?BIWWYHKMlhm<ccCDEu_e&@AsUU46&1{`kR^4a|Cw$xOj4vN{@%THnTaX5{{x+T>-
z1N)7+)LR<qj3niJf(bVX$wnPIk-rxLhzH$yJKdJT2<_aWyeBSNWFE8arYYGR2KxiH
z&2VwhO2?<GRw(-l?q0mpyQ=^OOd&mOtXj3l`pX)s1nF1`!+M-zx;g60a;d+Dip3}A
zy<8YFOF=IxJBbt=%f|qz1M_~1q*)_=M`8^Lu*_XKYN><_5AjF0e>0pBpT$T(lYz7d
zoQl(Q6&^2>^~yM<4oH7<d0+||aw*S8x%yqsHe_aR$MM5#nGDKYZqt|Gwct)Y7~m95
z)|Z=}2He52r$&xCJ*O`YFugqLJEz*~6ueDyINK7RB`@b@*tsK-=nl4_2V%(UXEz?>
z&2F>vlJW05#J_!f>1q%L^FAq54wGOaE*zWr$Bzt$&dF}zR9-iio>I!L;PMmQvtu!#
zJ5u=o6{V!#S-2HAU$q>k)D$gdZ*10+*Ywo!&M_-vP(jY;Yrzj9zYd*km^*ovdkz+x
zw4o-S;_EnGzO&Uy25#8wyw9OJCZ4VKG0^c+(Di?hO8AW!pv$GXMOp;7Do?A_9E*I%
zp8KG#<Uu*eaJfIvLM|opvWs5*L@CE9$dpiNg|{nw_Iq0ECfa7Am<ukS?il*W8GQ#B
z)*JwXvwLhqRJ2Rw(j*>L_G<D;1gGT;_Zl~)gX8O(br3_3pG5ak{G5)4IM4TQ2V#Hg
zQDNJRxl1pHnR;2|`La%8wmBJDfdJ%2DPfv!08~?wk9RK)>YA>EfCz+swAMlw?(pqk
zV3GlGzehk?x^#ZqDZi{q0|>?3mo4w06F?czgv8`~i1j?R*=<_9%`)}C+S#TL+YJV{
zwJ2ku2juh=K~WmAmeV6}A&BfhKp>jI!iwS~EQSx$01NA}SA6*+El1yFV*P(NxFsjc
zrA6JYXKeu}f!>mct^4s$?e@*vOm`C0+Mc*xQXH<!IES_~xhxI}#i6+D&(l=Co{m;V
zC6|Ad59FJ$E#UB|bfcs1lDWk}uP{uDxOX<NyXj%af4?kHvjD<i*e4ZcXwKMHh{_v^
z<#d9OJd|?o>l!d__ZQx?9i=>b3c_%;G}BufzV{xJCC!FYwzVBIyP{Pi-wju|a~b5c
zHeWZzbAVWfhDvwtu|D<`{}>NswMI5Ez-{Dge>-b|be4a_g<M7$e}T0B_*~tHo~qpT
z?|<nv&qEmW4Y$62oE1{zkuPD{Yz1V%2*s_zJ(Zk@l+^YOPumfXLU9Pm_zfU)dB5Se
z8`xi@+7w^C?(@miL8nt8V$Xlz{T=f(&hzrusMh7HAAV)DBBit+s}sZhNnu<vaeSZD
z>WUjAg-_F5pRlr{(S*(JT~}QF&2I{L^=y^WKT#N&-|{^{hP9nAS5^2tRe1qb{_)P=
z>|^i6gQLNUCU!7BsMF*}6S7zX5x8k*gR8c*WV6AxtWH^!+`2-cufY=V?D8n~#lHAc
zWe6(=I6l{7j3m1XpZN5|sUn+~&>?bqW}m?*eD~*iCVkUq7k+;l*+&Io&<1Jb-Yhzy
zW)87(=9=jR4)BMDdiS;O5sanwUwFFR!N9LW)2krNo`nw(zCYv#z7CC4dAtuxENSYy
z7BPhxbn8Clq}p=KZm3m8SzS#6oPQ31_=1cD*Hy*V+LJfLK;x=+J1*Z#_UufK5E3m|
z{QcA?jh727jN96uSk<Wh?1l=@nK1;h%I$QJJT9-(A>Ie?GMiE@g9{PCrUFl5bu_db
zMQs{KG_3sXu5y0XTT8Fq*6>amAsg70j-spQqw{T9?>|G4R*TEN4{%=e9T*p&#&}y8
zacGJ{#y$u~Q%lbQzQ@aW`JYfQ`I2@vJ)HfkW|){5mnE}j@AM%Kc;yq)d(?6~DO=^J
z93aM>XD=ipA53UY6rj#t-5~fG!STiUoeerrLhb44_mP*k;sy=SCHc>z&%wB=OYWl)
zJF+%Ak)l9(aTwmL#`M5Y6K(|iPsi%-^C;`|+^hddRN@zS*vETM`0u@dUZSKghr6x(
zT+GT;N;YlRqKJSxP;{GnI~-5FGFLVBlrt0k<1CewT#DBZ>;MR~bk)=^T-kgGDG-~A
z5AYh1&r0brHnY`3(dGKU_!;o%N}io*)4ew;{~q%5Kc$T6swCMOX=aDtGy?jq7JF0t
z6O)p#3*OT?x9%?1V~~eq2iW%6X~Q_tR++sZ5KXnaYfPhM1*f7GSD!TXyJ}1c$vQ?N
z1-49FC!OA4d$O>?Yfa`pc*6tZnXTT7)pC;dZx%h!Q7+3NPmNWhfU3B9aAd@3s>vT4
z$H1p&A7$e$v-p2wEMCg6azShVpM_hVpJn9tZ&dtw8o>OGKhsD0cK6>92!P|c!oX1T
zh+L<lIdY+AIruE%{Q^Hi%A>I@OhdGH=l*O+YMhzN58r|2>1%v)?Bq0~+OQBd#0?y3
z(p9_6Kq~E91azI^t`?XU_i1>*P9M7PzvCoqoK9l-bMy+k*AH06`y;$ot@qtB0~Ref
zdrK(ydD*Mk>+G|*8J9e-N@G5ful806MWI{U3I5)b=8TH)v?g?g6>6SZ{$w-J%PeC}
z&nxlo4>bcs>lh;-CG1XOw=&xg^e<!^kP~0~mXPG+>63ERhyEE`ZC1PdAZEE*YCG_C
zHwi1KOvKU~IQM5<?m@wS$^OnZ$x|&EN-efV`~h2}t9`sB-rqxQe&na|@m~5fl5&Op
zIGdbqf_Kk#ey#sKzyjQG428CkQRPw}_Xj_N&u#|EPMVk5kLO0C&hpvG*4(XCwJ?>t
zxQc;s2jie`+3oG^O)9TD#>R$O|7{F}I*`YJEcsFelHh9AjW9DVP^c!!*G|{W)d=)F
z9K7XncxmWkdLfxkLNm^;SYu@B;Hc7jahxLjq@*Q+?&8C|`*`ILKYpqe*_D#CT@aTt
zF>nKGQF857Rvkg_ecJK<0Ii~E6}(>Jlq<g`61`z&QY6_K{=bKen#z!tU@B>jnG^$l
zMkEq*n(OZ4S@NyJW|hv{g(-r4EV7gAB~jj6#|irS`r<+xDAOjtqhoc9;o1Mm%xuAs
z^piq3gSgzNlU+uJd6}g?;rK~LU@8-qDLg2^J7W~_t{k72a3Ju^yCkMOm8Z*>G0YGp
zlhuB4#^oGO)Rok(om3acz$h6@cf-_?EPlQ@o_24&P;ES6`|#Ux7Sg*rA<N#XvW&0R
zGfO6zUsSPPI<u%Bmy?6^4APJ#>{cRV2y?rjUHqYo6>r>lhX;dd7e1@ev_4)yP3UQT
zc^ntgMP5{VJ?y?Gbx^jwzUiIE`cY<k^~VmFs#RI86#6bTq2Z1$XySjK(&&b!2OtR(
zCAWs!2Dd}>6rDIhXrT9~#H^(s&A!)Dslkr8Av6(tz4S6|$AD>9u?h$n<Og~eiWpLM
zn*6C%xY+mKxOK>t6fVh-Xr!Bvq>eUS^*@O8%qo&*7m9z^dON*~WG1N)d6q@O@31Ze
z?_m}1o)2Wi`44{-R`llAA1x$lycH@zBFQVTvBCG<?#l>9%yxN!Kr2;)1FttDem(C7
zUN3Rhak+IT2ZOAP^J?(*nRE)nW{FoA&)_#)=!HigCNf5)u^}s|A|fJIefHPt9KU~3
zOq%ru9|E{03)u2N4pVW%c4y<&R+#WPTSrH>ixYddT@X%heOqgV_o-!74pe8s=bjAC
zaxHrIR&vGj2pF?>)zVsrL)l6S_O`|i8D^*Mu$aqC);OUJ!<mGp2jhafjoBbtf7m^^
zyWMFJb%!$Ot2SmxW%krO?PEnnEh#;7I@%JyVRXmW=|*2PeIUD>aY3#w&**d7(Le$&
zq-_hedNmbiaq&W+@g0@fiz>)FK^J+K^~OUSLtn6m%dqi9Sk%{l%E<T`oTVBs_fYvw
z=w1n_3UW=~#HEc~xJu`K`L5yO2F|7s(~p}Dl&w)B8Rw!YDSFb7t&&Ds-HOYRyXJSi
zRgpS@8~Yi(6T1-~dAnNHj@#eya1Dv7WACzGA1OhfNn;I;A$nQ3@}t&J+S3-kgfOoX
zd>Gl!){Bu5$R>^T>^-gZsrDwqmY4q&BSypV&6a@H;c+pyPh;cwP8>TdlIEhE-(mV;
zy`<#$<x8_UXzKP^|5>Mkez}?@vI`D0OE+PMNp_Klifk@q7P{wF+iX8}zQ0sp!zt1t
zuSa-V2hKhqhLp*|YP8BZsrmckEVk-qE%v=lt2^C5KL<>VveiRcdb9cT+17o(N7~v0
z8|dy<j|R7sA^CRMC&wG;&X^5k<<vo1;{M=lPWyLno78qI6myg+BA%x{@svYwIaHq_
zrfHQAC%CYTKHZ8_nytEJx3@B6SAUbn-~DZ~E+uNE%z9`>U+M9evhPp)&ay6wx4xU-
zYII`^BH=q^l)P)$Qh6l+hBx4yi)w3kRHKKQq*yIS+Hj%xOm_=+C){d0$kqa;_|11a
zV;Icha%O&b?a0?A<oIXiebKsK9w?nyNfg=G8m8}JgG94%Iy&`JvXKyY_!;WL`mJP(
zg_wY@ANSH*NSp9KR+($~O(n~-Zm`oL{aR-B#APCrgOOzen-b74toLLT+D{Vssb#&Z
z^vme(Q|Xz$+TF&bL<0ifte2y%jY+8M^)MduOGqES9R*yzT%%9n$%y{s0(Ri0$s2{0
z02s5QL>|66E&|z(?!KLuCBa=?gl)y5{69Gp(np)(dR<)kTw#ZW9QYi8G9eSDi8kcy
z6N)Y74`1PMwjf^=u{Gi*wYeA2X#7BckHQ?Au10lH+T7LSPdS|&Umfvk22)sRYR_H&
zf^?S!HZ{>EGm&g{1Rv!rRt@?JAH7!`G21Sk)8vQ`TjcMHB;WGkPMf$9m|W|$vmZB4
z`<~VFsF3kJjdgT$2TUoaM(xnYwh%LsJ>UJ{1r$kMIj6Rq9a3_?MsB;&%gH1kr~9#{
zACnq2MsTp{zrtRjme;Mzy+T3j^=Lg}Ip3Q-3UkHeT)BeY$3La-b2PoKb03d6%8I@|
z1&E10UYN@)xJ9VOaSG8E)gpfhkh(((&#pq#3rS~?U0DV7{Ne0qq3~#|%52D!6X*kT
zw~i|zGS6ot#N*T{+=!|pHOd%@F@Nj?nvHRyLo4gbpB~gGcp&t_PMa%7t!@pJg?;Vq
z&v2JQ=RAc!<|~RVjAImGu{CYjO4V!mTJv;<>xvfw*+-C@L9u-LX6C+QT?x&Ul&xYb
z5ds1N@vSUEzCY`1XFe)DVRrc<xtP2&E77zYr1P<8yUYT)KUMnp&ax{?<F2*b0e{8b
zwd8VIZU!>n{B&ezErK^v(KBk+$x4@=%2@JI^9x-{CP9AF*C?W>K$J%lPP185Gwox~
zLQs!fpPL(1Z<66K@havtr($^TW|QV`;WsSK*IqHR^H!08wu*z?trTkFw%WlRfMqZ1
zN$vllW)}&#NhSk2q<#3c?x3tI8$xfx2L-@S5ig-n5ftiR#kAc1O#Xeh&r(fS*^R(l
z0(Ewe^$|(l+b$L(cQctFQ@omQ4^Z*Q#UE+@yWf>mnc(hxbTFYF7I6vQAyb;R<zB7i
z&5yAckk!VS&@TOhm609QMK(gt!!I5+R^%qnafdBNVK(>Z*`)ZwUd8LCe6$K$CSC}b
zZ_d&6EW2T&g6Tn>ulgPrU&}B>%yfv^2{!Y5hw*lqp`OfD6_>~e+#YQiT23bN=(wty
zb%%C|3^s)v;=xItzlaf_+Pd6Oqr^LjUH;~(?{OD9&Y>v?F|XTu4KuE>Z{!GL3%p+4
z(i_1S&oJQbLT};gshgqcxooA;<a>L>y?_fc4|Z6yvt3EAiR%;A&7O{$AH}UW^bu5x
zH{STqZ~^w!{8-I2$<cD>wneIjkjX6&I5dV%RN}iI0M(9)qLq2zq1DyY^0C60hzKZ|
zTTpXxT#?QGC!w4=z5q6~JQ8`E!H=1!1E{<v^gwpizu4$Yfz}cO_hy%`T=a(FUJ}Jy
zlMa$`p?6tdYXGTu@P5DMkuumD(;qKRpO?tZ%UfP_c`MsA?ive*s}(VFH!cTo2iI*`
z&QJE&TA@;1*}do9BaNnB5=S=lsX?-428sUW@ps&zMAJu_S#k}w#dGV~@7z?=pODT-
z{77tXZ}${5EPtxh#;KJ7i@GeD53(0&1nWeJr=B%M)rI{TI2;~TVo)|SQuU!!hCGHu
zWg?f`-r0~|++X}X6JscD$;m?gIC3;fZtJV7ceV)Wr_tj>uM{%|>_9*EG;rYXd+9f-
z1G{E18$ZEtaZ@>#1NOIDUk{V~oO_ccV}09>i?;^A)limKHKig$*GG&~S!PIV#UX(9
z9JfNVw1{ezt}eQ`)HCSDXS}vGdNf-47!!5yig1Zc&{}7pgyb6?z?=3_q3KJileDwa
zPY7PxYwRO6d88slB~=pXjI2E)`sdp)j5B9zwY>rhb!>aqLCv*#$y-x&xe~C$i8{&1
zv(qdHQm=-YmnAP>SeeLg%{64rhrI6$(0!-Ql=V&^Pvd9;l~(>k!*uZRm^-nXiaO`X
zvF*tp(?J(I9oNZ-Gvw<@Rf6b+QhhobP;C-oBaTCyn|l-H(}7*trgX*+w-UJ3{oMwi
z@<vd*xV*779;iyvh|7}5xrx0KXBEgTHW!#6W;31UfU-T<(<J|Beo~(qWou&tmzrNr
zR|(aBYsyc<#AajNA-DTcc_+@z1qHv>Cjj}?Hs`1RT$!GKGRGLwXER3el*dllaK9}t
zryFN)7rEY<y}br>NyU-k#!dpphA^OfU;&M^@%W9<JfaRWZ6}!=bhkD^fx>{;TB+tK
zfVEll9PW{Ay{$$RvM;}AjEel3d&~AmS)NAJ?J1Vn4RW2d=7kiy{@5CXti#x{r{YkJ
zhvlvU#PEtQ8kAcDF+r)~DWIc+K9sHu70F&m;E;Q<ZkPlq2ik_yBr2rV3$4@#PLW$`
zTTT0n@;@+t=&I3hY&JkFkdf>40k~uR_UNtCNF81sQ>o>RcNgP(4qniPGsE)fL;X)o
z%MkKI0ZlvlPV`2X=r98+`g78yJH7*Vlqg!!--0jV1@P)k%obcGZr6*eJMR%gA|WS7
zN4z4*oWd0cW4@#(`v~(!pDMoM>Yk!0S0sLSpiI8;`ep9QdRj`rPFX@+)+$A$>g9uj
zgeRF>rnd02f*5&)uOOdOXW%xyh$-(9^wqTwQIS6{Cn9IZ@;#5$HW^fcThXlzWP6GI
zrM5%)Sl;XQk1yQMoPn4~d#oMa)=Z8db}goG^j&a>YZ6LgKt_xdo76pz#6YBO8%Be2
zTM2Yof~zS_QcmtbPOSR2hUujLgKm?92Fe6buvDUu>CaS(ie?8`+fT|eC8hN%hf%Cx
zKSYi8`d8A`=S5^!tbGNUWs(^svLN0ha56n^rZ=r^b>Z{4L0vhRJq2|qduj;JY0B8-
zB&FxG@^5bvOLA#>eXTt1WQYf4#`+$?n@v@ceD1DF`VQ&L=WHsMXWGfehP79O7zv)^
zF{Dv$0VO^hn<lXEXOYr13H|!Bmk??Gf>Asup-n{N!{Z+aHE;{@QJPpR)RLk*L2|1|
ztKhIa_o%?j+_Ly<ag>zp(?O=o8uElWX|qxeQ^VvAIg9<nz~1nqk$SWHQJ}V^l&*h=
z0GJ2#{cHQYLv7B0j^ZOt443Z5u$}n8cfPYDgVd6D2r>TXcK`kiY?IG{b6@kU_8rrP
z8^E2XPeEMuPh@aDKfyiV-jo+|Z^44u_Cf-l^-qQK2{>+nlih-7bsSRx=R9(+tLfc}
zmzlr?j!k~pq44g$mzTxc5<V)e*9$N!*>$2P!mIpvcjvs#TZPkHt>j+OGa_G<x8}Mm
zCTB~YZ374C$PkJ<68aRXme&z&e3o(zLBO{pCMGW2t-!iF4<xRhfgKtfGAjy9vmp@(
zOz?)gG6)V;+V*E_*Qzh>uWYv4<$f6zTMPT?uC<o!ro~;OPBZF+z{xT7sAFDdiz>eW
zjaxBcAvnqEEYH@%-iv7O(Z?YIwOj4XNnO`uw1Dce7vl1uUV{aNzteh{dJ(JTELp-|
z7Fz&SUGueSN23m~`|G~zGi~9jOrM>vX^KJagq&}bGD~w3NP0n{0D>R#R=MZK*G<MX
z@I<G9Fe`uhEiw`E4)7bk{LcN#Tti6V{qLyb#%?}~q<-Hh=3!vKtel$1GE#EpQZ4|u
z)mVpfgHst30AoUJQGd{z!&N(Q1+oRleFf4w)atwT&cgRy7%BMAvOTp5?Nl@EXBp(b
z`o_jNXo89`%zcQFEn-Zd=3vlWm~vec-rO-WM$Lv!p3ljCf<HEpS5o{KU!FTMtjuE<
z2aP9hEjwz|I)_hG;Ki?1XfsYuShB9>W|KVYPThoYX9p;%-4GZ%&k*XMtDS0zsrwP*
zEx*whEP5}UlC&uR+l7@cv%yx$iL5B>+OF|Z7*k&|kY7%=NX7a?YY?~LUc;}+1-xAx
zMd4j<pjG5+69+$bBQp`P$KvPnst4!pfT+?atiGQLXl|#Pb_t5KtF_b7#s#DlhNhQA
zH*0TsEafe4ekoCn*uxn$7G5GBghPd$)a4Uh)rq93QO>(S2QvONv7_$yhGJ8Z)ndan
z{Nyr99AS6&(Qx<G^{rQ^mb9JE0ElUpd|<KP=S8;^7l#&;U3&!va-{DqAM2(oK}>~c
zNEh}a5Ll5<iy|`#bGpJC1AAIa@Be_w(uN{_vTEfX9C8mz2WpI$t%*R&98T0_e9$7=
zlLa?n1!t()PMSz58SRV88$N5F{)Mz<0BO-}E)#rq98<*)Tz<Ydbz0q^()#;C@mggf
zHVguxn|1ebJxAfEvlAA_3>zkoQFm+P3GP?icML_bE*?*oxjQdh)l`FMn7x}n?P9OV
z`%<Jf@p&{Q>?S>TiZc#(e0+=%FmLknztqn4nU^UPrAH8ac%pkwaLH_b)yRj0SLcy?
zgE&t4oPMj~#zsjW%WJh4(6i)k*<|79Y_+6m`kuxc!Tmwgrgtk}*^Ax*C%L_}N>!j=
zf_GrrHykoGy=8ZD$-A>ei@S_Y-!;yI{^3+XwtA|uD3^L~g6u|%%kh!8w3gZcktyjL
zf&iyT$%!Jk>3bR%;QVo4M#LSB%2x&(64GKH;<F_>bQ3=7nV;JhJPor~*6S!ycb9Dv
zS+DXG;C=PtwI&Q=-tco2=W%O2kuC@xto!ItK~NjUJ?gVn$wQePXXEwtD)6hSCGz{}
z3vnqGGo$-I7G-Q8Fb|5mYDmx4#e8}1{h2AFzT^BLt389tC*L~{q5gdpub!uYSp0&7
z8(KfBCX(=+C>PRy^y!Lb8^oJ8JBc0daXfn`9vO6OlrJ%`p<D#|G^Om(BcEMbrW4Lj
zFSgc_d_voKq7wV;Zjcp@?=J4*q^DC7Gi#feVYZAN5BCRbK(9w*qAQUgKneZnw$zt7
zdv?>ay<+NEa%@M*irAW(N*hXd#1{Hf8Za;NUUTo2*nAf*9RO+Hbr=_=e%d7@`_>(#
z+rxA2vGfQcCu#%Zw#DsB9N}|>WOF3V?sEuA4PIno_4%_p7K`YU$<~i;{=g>d)3EVf
ziQT_8zx>04Aqp11%`dMkn5!f%xP4VwES%2{4i0XK7ckz}T)bs2UDWOyMR|21uq5TJ
zrOJ!uRI=8^Nb2@&MC5@8LTb0~juV^+d<UOpy8w*iAhYces};|B5(D2NFs`$>y@ZXZ
z`y?d51JACFj^M56Yw>E6LJZjF*ZO!ME~j2OF^0EMd#cP5N2)*<$qV0PBSrvE+!fba
zv;+Ts6I9J_(4bEpL}B!&b&eY!uuyBfDWlV^x3gS|hjNj(qW6yq^orn>(TOD=pMe@Y
zVPN!Ls;LOMr|YL6e(WTeM<TSg@aKLl7U&TD<yWd209f_|umt+k6ex?ul!U|fiLxb=
zLD1P-77MkfcNF%UxaYQ0?_1st%DLtT5xqj=&Y{<K>4*Na2-zmtJyB1=f;XRUj5)$C
zjYLU{s<_u}>eZ7996p3>d4CO=-Fe+*W-EuHTM~o`P5M1Sm>SniGBWirPnZfX)xb$9
zc(5CTJUeKDPTZ7HE|(k&4sqzbi%F$uPxxhLwyht5{5Yo9X?0jl(K{nF7|KOCS${0P
zEFRb-v2H)z|4r5g??gIt8VBM%7f{s|>Hqo4Jbr~j7Vp6rMLt;BEQFDipQ>0P*p5TD
zhlJi)21ThQ$zTxq^4gbxJB@+TyL+omBDV67?clWoUf4^h{%SDh-l=A%_9MRnK7oL(
z3%So=TABCOt6Ud*Yh=BjD=#P9`MF|i_Vf9*O>szBpqz+$Kei41V84_B0>Yk+8k>Ra
zkSEwWC%$Lmstn*jdd9g|Zh5zbG3?}X3*_m1Y!0QpcHRNRc&?vy%`Nj{jitOzO{cV~
z&#s#bxX>a>+5uvZ;2HTrODHUd)M!Rxz4~GRL)vY#tlZH7!3`R2X_$nbY;jiB{D8|j
zXCIQqijH#QJCLg&B4xH<$EE-r6GAHb>&anQI4@XdLL1mm9<NbOkF~dT|LSX^55>*x
z3Hu2PUYD-tKTQvABSZ1gU^IN&umd%%!r#WW#APJgDfHz_V%`8|oddriPm72@QgMGa
za%5;KVK*7UqmhNa40q3fChMJ~4R8wOj$-tLk|pt0Jo8S=3O7xE4aw4{1Y=p49;61E
z000xfnVujsL#o%Tj}2I?{JEcBHW2Xs25z*Y>F93>(y48*x-;b|FKN>&#Yv(9Vd_bB
z_Axm*h`&YV28YHK*;#i);<`V3t4cKru>$QI)UVykg$0|64p!_|0SYCpNdgx9G-d_W
z7pXXyTq)np97EOcou&j5hdc-u>-KkIEB0ufzjZQEoE0Z4EFMeICRa9v`JSf5ljeKv
zEL$|OwcKsADGLp8o5;{UdJ+0L`<DRH)EkS=G3}YK9lyP;E2wFG(en$B>qg!-e-^k`
zmFz8x<a2BKk0!L9taILqAk5K)xF|Hc3;Ri`FV#2YUjU`Xn~c9IL`(ukZa#jPy)v?$
z&o|HOT7w)W1<GbhW!UJmH(tD2F69&Ul5gjUuT+y%`Flla(&1ZTVr&Sv<$k5{x`s9~
zw?wFYW?Y+??cE&r^q*Fg_ADaLy5+>Dy)1SrxZs3-$d(jt#49D>C~NT+kUx;@-%r<B
zIzAqqKJjXPaS9QNQWV2z*)f8IrU%jzLM<<+-i$RlVND%h2oeA=V@T23<ZgAM7AQ?&
z5*To_J)ecX38?63U^~f|OENAw7<B+C5=|}#Y*fGZjdRYu_uZ?!-1Zq4a&2J}`yDg5
z<!@W~%3a@&;_aHbE3a>Wy|E*W3`ciOj*WlpIbeca65%=ljU<6{-(^ACCG9y5noPgT
zHr60UE>&=zsHQR@hX1m7P}95i&eHtNr{T2R1h0DGzDpw-GLk}!@*lVTRK$Zb>_B>c
zn?u!5wR4+&NPN&7q?evT8^JVgV?B^~kO+q^#Ki?ou>^0}J>Y0Uz#omz9W~{Yl<k>C
zE(hTD;}6iaHrUhNslhQ8eoyk%i6feJ0VFn!3Xu8=riwmRP&G?7PN^)vs`(KTR4AAt
zwvQgDeVn8F4DyLn^D%_ET1exU$hD1*l9&Ja&wcx)c+PY3*H}H9(K)ANLrz`MjE0C{
z2ns;c#6I$L<3lkyY<_?<P4Z?}Hj~{|W919Ek6{w;F^Px5xR0U_INXWSi65y78P2!q
zYdtKN#|;;6u0Ms*Uc1LK(%=73>Jny6BGr0rZsV553uq8UEB@eY8Npv8C>Sm97>TW<
zZuQs;b6hsbvE-tWU&GEe!%k}$);j+zE~iw7it?m$>(mtP3$=dRSaerKF^n%Seb2-?
zOxA8~ks&e^v}wS-2n>QWNaxjSK^P=9qf5WgU<>*S<t=Z}kbYGUg*+aZ_1~E*r+Dxu
zu-8QBn!YM&af!XPb?wu!a!WqxqH9$8LC`g>Gi{#wc2_ScUN3kOq4E;QOUYWB%5_GM
z%`=<#{EI%KWk|@@>YyO+_hQKmxMjr4V6tAbC}0aThqm<G{v+(z#St9~$CTKC8x@?%
zqsdH88-@E-*nWtXv!xX(<_vBkhSb>HXJb2ImaitY&#o)3XjMD)s@tzxOD-vlEhzY}
z#%iOEDgj9|AKYt;B%|$c?M@AwuICFkpy|h?_=i8FaJ9wn1f>XbM*&D3T!D<KgzE`E
z_SI#B@0K5*c=V8h$fJt?4xNq~*_z;zIe%|dIDByA?$;0e%&`8&{8wj1&#i609Nr4D
z^!Q%5r3%Jq2r*N^Xux>_>A~_Exw#ss)Mo@Ud{$4lBO&I2P8;<SJ?1VBBW}6zf^-+f
zesuhrv!irQ@&?0A<eur7l1xX2(aN2&-SvrH^$8Ez??o<4$xth@R_1vp4KQfsRm%5j
zG0@mT4SU=Y%*w#!hvJE{zDu0mP|Oe-O{yaABQLLhu{O`ncbFO0NiVTlSh3<*Hy?M<
zdSILu{>9Tcw(hc`TKWVDu{?F~;fAW;i{VaD8ZKzb8;A9#qU0%i(W^9VG^p^IP4nFM
zZdr!ykg^CP=80VYPKj3Aa{}xl&mKfEJ2jNmU5;LTn>^!+a%x{pW#4#PT}5<FvNQ$^
zNH_iVZFJ-;+|su%Qjr`CzgbpbND^~6esCSPC2?N&-RJD#rl;gG2&f;jMkbZVUwwPF
zmOW>-me%WDGxm!W|0GC-#Ymr^YsG?h<PX142Y4RuF1L;Ayc2~*GKFI9^@i#Rg&kxm
zx%sUc0o_d^>5RzF%vs#()KId8(t?=9!lChY4C2$Zi9x*y(iyMqE-?Oy@N^=6E%gTI
z-NrXO5k^${`i$@q;~TdSXdDF^4Bwhof@fl$uk7qpM6s3fIW_&+#B*fLa%U)3+x`hq
zz^##nY0VvT<$-yol_S$txoepWkCI3P@l)TGs&0wrG52wbig=bbCsStgOJu*A7-WIP
z(<iv#TBCR3;>Ls|GcS?3eSqrSH(vqfBJwN(!Qa#@lN0^CALOb<^u(TGT#FW3<<4=0
z<NSqZ;Q1RNJNjlx0lw%PK$Pz5n^bBNL>?o^_^0Ej4Oj<zfBJMLFTc;v3)V@^g^K1X
zfkwxf)dEi)Aq*VvEZuX!^pFu<Zr(?x<nN)rBr|uL4iq29V=Ao-yNClF5=mx|BNJEC
z!m+!{JM(SfOqjy#$vK5b8YD9YkDvR+yDOhl!YE6}5o68d^n-kf+a+$o<Tdd$7bTz1
z^`%IA7W=&!lQGSNxJ({H&(Y0d^4v~V?xlB;?t^)jkJZ%F_}~o|tl5BZCFj#COo;mA
z4$(51i}Yf5wO?HjV*=X_*Wid;UqEgi(P_wRt<+YznP2ze)HEY{p+E<}kfYeqv?!sH
zj=OhWKtEEPXsl_V!ox=e1qKdZ4+TNC0yg7D1Gxi+gBIYwY9&T9((saY=P%pyT`8^F
z!v!kN^PHvV04ysrG9e4ym2Bcz_6A5YJ1>Mfe3Ng-4zcU$4NfsR3{H<SPE4CkF~L$j
zDW5KTGCeTU6vj4lzs6^B&m2(?vk~oMFs4~e>-yG^XzW(>H?!xs)@zC30_X?cK57CB
zLRMf*i4w72%$qk^d_AU4KJ=hWkb6?H+jMv(r~;Xm5_Y6fUwDU=){6}`8fU`B)OFmq
zBV&01rcQg<-|h0s^Xb_3p?z6~wp1TC5g!-xO^yB|HM3Q-Cu%QUN%l8nuQskG@D033
zy(67-y66H&sqv%r;gEh&7vbqDV>V8OM>Wm2Uqxz^NG-hrROis`?GL$fFsh08EGP7S
zb!COO-QEqZ%tVGzYRVdF`%&LbC9bL3tY@^>)ziaBfpwI$ovk1|{MWdlb%sNCQ2z{>
zc`X+-KF()d7e*fn2~rXh7dNLzp3TvJ3V8`427A((ogmj4l19ExvF4i;{L?vVZ`L>6
zE$KgKc4~5jX(ZDs76lpxXOQQ0lG<m&ok)>QyQXDA?v_J(#V@^z9HVeHD7{`sF=C1l
z-JDOhz<2u0xmrJBy}XO(&oY{&2e45mt1^OMO6%^?#beKB=HuX7;iNN-18K9a(Sc!<
zkSV>XkDVJqB%cnSE?>;Y{A*x=tpP_AZf+ijJs`v!B#EBzzB{I*X!Y%XzcuaV)4f@I
zamCE}o(AzXScjM!fI!RJ!Mt!ku6FKtD@3$rF5FgVXS+*6b!;4Doz#Mej#T+i+}5%}
z6h`$DGdnv8;4%v$hYNWOrXCsoS;`yjoBCO>5kLAW(a0k%K-}Z&j*P<vU^r4n=?M=#
zEHP|*X}G!1lB-g1mv#3hs0shdz?Pxa@`1P`30yz@T_fQo;F@cEU-kJGk(o%?oqUQ}
z3>i{s+U7Tg4egmS80olRDjILpy;RhPt%fwC$<_v}1~(Lj{h1GNNmeod{W5>43DMJ@
z%87{W@krZ;(z@3-!Pu*u{>?!L(1`P?dGBoh(w7o{+YiF9Fox0k5&W`tNuwyv_9v;$
zbQqy%RE9+T#~5S_=3cT_FJ{6zU`AM5-k{^qWQA;r%cV=*d{0Vz9+MvtT7#b6$(ts&
zha(`%W;cPm+2kd>1(f!M|MD^#aq6An8CKfb+JALZb}DhGzw->*(JPKD9p|h5R+Kzp
zU&X7*&lpI{HEd4T=72UTIJ3RM2IHm}?(6UGmrWV*Dk%%xlr-ZrKMlZuoxWrsmFSc}
zoC$h$GHCna#T+LOv$*7wCh4&+gjzSNYSX_}Kd01_A=$tCV<|JrF?3`v=Tn5u7CzfW
zW4s)|D@p2wP}ERl=)vilxc$sBg309pdHS@pTCYiMsIFY9oWIXcK!<C0!#hVRc7L_}
zF=D?_w_$sz+XBiZ_oD|;pz^6|F>$F)d6H}}ySemn%QSN!llhx32NhLE7l2a|qz%RB
z*B1sT#$O+NlR{rnsm~==vRqB3GYStiH#`z-6j&Vr9nmzo5SY>Ee&Aj(xvzswCxQ-R
zh<f{EShsZeGXPpr(1+J4U+bVha2BLZ#k(o14g9JEnZ1}JaedA6Rjjsg)GF#qdFvz4
zx~Jyd2-jsQx&Q*Pj1r@Ie<oKQ#yuBk$s*48%rvE-roVi=q^pT$G}Tf*f_I~lPwjpK
z39sp+`-ql)>8QG^dyb>^{o1thV46iOrfh6^oO=ddFm|MES^uH)&r;nad~$K(!B);S
zW}v)vn}K0eXM<DXC=BCSKgmuZq)DU{epHq*WzXJg67fF(bEkXSOj*Bw79(>jfSTmt
z2g9GKA9jHJy=klnwv_yfL;%#4EW~ND&ULYqi?YLH3W!$%jT*eRvNy;TOGx%j9<7a*
z$%@&J{wYfFIMs7NO`PY?`o+&ie~GK7uF}ZY`lzyG7B5ZJAJ7t&aqW)e3OQgy|M~|h
z0)6t4SV2K54aS8N*JN%FGx}3_T`SK*e@My|P2MMsPujvRec$J@Fd4bzZygO*q(R<_
zcYQiZSdYf`Rh3cWplf#s2YHJTzXWGcD#}4*!1kwFvSvjWmydg8QGQNq*Gh^WQ|FC@
zLP1@(mSYAvb8s{MUZ?*PlWQMUiJ$miiy`4v{6U<ng$i$DcbwK;)8`Qmj|TnPjG?GO
z&N*+mji<|MOi|~<fZjnK$`i*txPJW_nOg$XRoiUbtf8>w@*oWiK?@>>L-7THBP`)r
zc?bzyEnPMLh8aKy>CA*ZX1IVVD_!nw*yGcY4+ze?mU&i<C_7u{J=Ho&l4?<h`@~@`
zpu0Iza7m4+ila1OB6C@vG6%z^a<uQj5(9GDjbEd5K!jQa<v{Y%UhF?8-TfGic|dFk
z@p-h)o`0RsX0RMeUxhygvIwueqmtD6>NwW9e_d!g*wAcfTx~DOr@j<!r~iySobI^E
zc<1ULyb8psW}_<C=k`sZD0#eB#?_aM*Z<lZ&{gnwqT0dts(MqPDg7&~za8VB)c@W#
z=sZQMm9$c;^LjKBn(xN;0I23h37Nv(bmyPl*fydGMRB2NgT6NH5z0KdHnj#9*^z-2
zNw2Xq^e~dQp^6clQ2I7XO|t57BWfAjAw9dIqMAK!eV$WauzIC>#zn&w)#C`2mn<*E
zxo_t}X*C^5uG2i<*f>GZX`PaMz9x*cGB5GIF_v<KOI?&rs$0CYUQ>Bqp=mDk56A{x
z-?6Ja6=A&kd<ru~Q16g;6X`~HOehWXk5eQx_lsW)N3GvF@tu&`miGx=KzWBgd%k$8
z@rGV{AOUX^&M0u)*t8fpxM!wDH^E$V?ZqDuGLHZJq8SL|%HDT^e_ANWslxbhQk&-^
z*tI!cK(|SB>^?<1bn{iU6$#j7k&huR3p;Nxe+z$+N&{`SgN!#xHaI`rNT7YSc>cg>
zt#vg3h9w-da3;kS`i$e=UwHhE<bqk>ainsc0B?l14zpzg4U~f%VtTOb(2K#n`$i_N
zq2S~OgKm<@nH_2DwCBt|xUR?AF!xO&4`Qjy+&!o0IdWbd+0#FfU{Nk~(;uE%V(AzD
zxn04E?AF~MlV%4=s9}Ud>d{gS)yHHT8s~@?>Nj6si!IBc@8c;Z4}<=-JJ3I1^yEu-
zZAGX8zf<`KYLU6>P9Ad+nQs}zpP=kpPv7zFn@t^1z|`-WHa=hyGpc8KBToBkXQ9nZ
zknh&JY7R+qrGO+Y@PALE{GXj0)crA;pP%nq!@!2+U^!1PB7LR0A|*U~<=y>L3}qWd
z7SV*h&C`wz>Yr~pTzdgMP4c|T<k)TEct?_9qapcg3Yf-pfrPk7d5Yu(nY-Gn9Rfaw
zEu`S5AmG7=<P)KHX=!Q27|i|ksOg4BUtYQqtR4ja|4$B_p&5N`QLg@?EuFuG_g?$8
zhKusT;HyeW-PQyK?)I#jGu4PyJdnUO&~l;h{G+^2qyB)@U(oCsdOXW{aB{$YruWEM
zKW&E%LItutw;}nrWya!eKG}CTXd&c6)}}Uv2<tnAhF4$asFBbds;3)cE#7KN+!Pp`
zs~10_Iz=*bwY1K*$op~c-ZS0hhT2M{Yv5$kKV=U-z@bl9y%O;s*d1P2DrQQ^q^@ng
zrEE9!j`QOg*lS9bN{q|1rDp0L3rvdBaIAp3SD@Pq=vNYZ-_50&$?$vU6aPP|zB;bS
z|9e~JP(tYtkWdLFMY>0WQqm35NO#9XDJey|QA)ZSrjpW9!YFARFktkE=N{_k`+NS`
zix+I{zR!7|>(q75jkfrDn*HKRI=~Ce55%NBtp9HpK%?+sdx=JY$_lG}K$~N@Z>QfQ
zqRK3=yW0lgfswxzKy`IE|3KOJS5q)!?6M!8FvTr+JyI;_!aq}?S%*{ZkA4C3@n;#9
zClpRuB3m1)%o)=1-+W45e-VqUV!Wq=?~a^n?VTt!xGXVWrBv^j9<PpEAc8E2K;5(&
zP=*<6#bX9Z8(4Kgm)j2lr7@-mVW<F=)`(qxuRHHEs13YJp^Hm$^dY!zBSsU(h45BL
zEC8|S{=2KI4_t#naHBFl_<8s1YJA>Y4}?BVw;+bV>Opl5F}&|mI{^*WF(3AveHmX{
zZh_Tqwq-0ahC<G<Uz$}?dWh-OmDy<q*cs#S0z0cdWm0x;{-la_il870FNZvA8`%1(
z|KfRh*3T|+uWqjsd_ZB3oOc3QQeT8vrQz?fsP_wJR@A%+23v6iO+;m+J8h>KL%8kQ
zh|5R|OQ!7egAT(R1HSL(S3Fdeh~*olkg!SrI@v<x91juv@PZTIxoZqB9XaB?)g>xy
z4|ZS{=dBIuJ5}u=`*%iz+p*oHY8xHb(e;k&)gB>Ztsmv0pRW7d46=J~6oBpO>Z<?S
z?<f~_K3Y@0fmYx~oZf#T{s)^bh<Zk(Ilfm_RmJSc3tK?{gREg9ELs|2NN1^uM+~{G
z?lj=c&1rrRj54U{U=`RThmu=bS|*%c80k)K+#v)s;`}x^(MXw3wANwv<Yg?Kn0_M@
z|KcCzGbDiYB?vqwVyEZ0T+5y*ShDX&!^*&?N64&v<ofyGk!Cp|pIX1Kj#^9Df8T$F
zn{lpC1D3UONT;!meDsM7U(Z9Uj6ET#Yd8#XI9Rk<&Hi5^-)OywcWu98ls?Hu95Bob
z!tqvv@f&rM9r*Tyyd$l`$L<;s45WuwU2c9I#=*skulPzrYQ0hbXFe2&B8D(<gJ!4c
z%|i*!hSMhzSfo`yNJeo>?-N0wk*Uh7y?RL#6gYwBqb|%8Z^3HN53LW?$fsUfv7b~o
zy8Vu*ou7y2@AGL~cx4qu*&mt-cWg>S0Sg>9oOG(P&6ITDrXQR${bZ4rPh;2SD|)B*
zJ<~sjF#H(H$lqn)H7;pxQw|a-9eN8_poBbM$`lDYjmgOU#YSE>lZ%|y^UHe0{TE&t
zu7Nh*DOi+6Qp}MA8!8fGtl;Wo1D~1lC7OrB@!|%?DnDI66vs7ZsPMv~jjh=apl&uA
zspxN2?YsjVmS7gJ3L6K<Y>DMeXn%h{R%UoI!yf=vs0gmRyeTxvWP`rU*q&{!S8?{@
zjRh>arZlnq*IS?qJ7%+7d?<|d;D50E=cl;)&`PHjFIM*N1{4v~_~cUEWN#$vfiHuo
zW80fIB`2T1!#jbSNAAfn*SZM<#;b!@NPr+We~Y@&{6z58-Uo<s=W3G2_LEr+Nm6@L
zFp2iC?^b9}NLO8vHf3@-Nd)t=Y=n6000&FEHD^zj&DWeL3y)_KILF4OBT1uC8rO~o
zi_ZJkXsl1fO-T0JAs(M*T3YvA+`2!IzQi}2=Q+3F@#{nhAIiS-yc`NRvie!o8@L*J
zF*=ZgCUkd-lL>{<f!&?0dy*G33y?3!#HIeA1t8tH;JP%<WNvdg83DD{<gBbA+$U}1
zF2w8e?Lnz+8bkJMWT>V#>-3Pwx9rh>WU;`7Mb2@zz#-IjTD#&bfokf1!s6A0z(c!j
zbyx4|{Mex+zi0PjxGtHq0VL+TZ<B`{BHME60F*^-i2FqT8df{L4b>zkb+pP<-CWBT
z<jH&bKj+4SY~4UxTl@1ll(4G0x=}kP#wLnF0?Q$7cGW&>gYTJi(s8ZQvwx`Y&y+fJ
z7JU2^8l2VVibo<-wWh;XzKrg!<ne)tcH)9LIZxs>e(HCgX9Wdb5Jh(Q*vt{Lf_5pw
zJ2!(W?uOUDte74>Jn-n^KYx|LH|49ya1Xn*yDeqjfQc<|iwVa}7PbXSac~<LU}-n!
z6#tDIPv^LL=o~?arHUhCrnS1F>R7~ah@R=5yi;)PF&FrZRZY8guH|sP(#qZ?aLenW
z@@SCf8Gp;tq<e4Q3dnkG)^f1FbztQ=2_2}JqQd;}fpElA?sOy64(C79sR#k|GN|9^
zYFX=8=xY{6czhk|i?h7EY_Tq~|NRv<{>%Lg;dZ+CC#-)z0R}{W3!p!nX;@iVX+v-o
zX#Qt9N1&ua9KF0c$|Sp<`EwipSFlMC5QuJ+Aitjh`RRbK^)*h+S%!hP-SJpndIux&
zK>TZpl$ifungr6Pr_<8YJ4u*`E*B<TnOjk4iGZYo)3?e2GNQz$eQZ&0+Ts}d!2gcH
zUz>Rh<&JkPH&&~8Y(|5wdF>(f4P%|%VE1&Vo>%1f#hOw3=jeHnrrPeWEQVmB@Q`4F
zJ!G|WXD-XqFqtw~&9pzQmEdt=fX+1y7E3~0#!uNEywoWR_pVFH!p1=v`t&ayMQ!sN
zKMiRxKbZMCUP*EnWK67EZ3%5WDwVXFSr)gN`#sr8!tZjQNC!HeCc&pV)RtS<P@B1K
zW&E&lu4KN6w=7`z4#<zBXTv+PG3QcqRP^IkrrZ(_*pMZgv?!yC?BMhx0`!349|*x_
zLG8|tWj~a)b(%z!a^2z~o}Qi><dHtWvwv@EMIyQ#BcpZy0v3!ERQhpb-PIw?cr(HV
zm*hWnFcg8B^w^($V_$2?i;;}>h?HUCyC&?`8jPn$Uxw`d46v0FP6O|*o(AI*0UuH*
zfhFjhbn&*#wE7(}M{Gq-`~kC_*D%{b>Bd^eyKBI||Dgc_ydj=#(7uZ``dK-fD7omD
z`~Qo|F+YLT7Y2(?&@q`GnnkVp1E63ATj0L32|%Bpk63Hi%5JRZwxkd$Z_QT`#6QLZ
z;T$VK`hwlG3ReB;^JG{RNh&^$=s3Wg1MJ?nYyb-(T)1q+ngo#~9}AQP*ze{`U4uG-
zg=>U=o(00(QN`w&e9EKx0VsY6Vn{YIs5()?u8ZP`KPd3XusYAx=z+eOI{1vG!gMQb
z^<90CzQKa;%<@O2-P~p+ON+OcBuo!<aCwJp3V`vnD+tpv1cv}PUGlRB1H;n@@2LOX
z8(=DqRlX1b1Fe^WFRlz_3+(FVX0YDXQk0O8K+a0W<J}y4O#V*+HsLUn+Vc}BX=V%R
ze~P^ZHN{!KGp1Ic@F7OAH7g-uob!%e{K__X-?U45Kj2vXO^L*apdn?2$iq2#AjrbA
z$v7DW!ilG)JSH0eRO&MjD^Op30dxyo<JcmL=uE}<9(e0OIS#LaX;0j}7hAF7VlTeF
zE~GxT455B;|G%&PdtL9@ALl=GvheX3Nczps)@w9M3t0AoG8SCiQTm{Z<4ydYah7m`
zTiINCgiJK#8`xgtwBsB}JKOX^gGY-9TXVEtt+ON+$839flLOj7Q4<(=5qFEcdev5O
z?v#M2v=4mf@XnzODbZ;-cO*N?-dft1``|9Pg+-0D^zqP8V}6|i5|I_d!wqjN3!?<#
zY$`I46!RlF{C>=EuN+TbX0*2e&r+!MnagDU#RH~ha`v1vTJ4{KQ;**ueGsRFwYFgi
z;I91pDVBhH|8x^bJUrm9%-fPjb2<mazJ8?b%d&LQlt6Dzo^3Yy=nx=SeIL`m?5bD5
z{|Dy)GEHBI8o;yInmrH`H%R}Flnxn&Sx6%6hwGLW?OP8Y)6t)(Ex@i5&X}Msf_xt@
z6-<ZyoD6&Po&*pZkt&p)OSd9hu5aMx;?zTjKUcKy99m<;D=a%H;$L!enfJ(s;B|%+
z)|%wK(~A~C^RB4yL;0Y@uWIXm6#4JC02!Y!{>)`NJwKJv2LTByc+h8*Ocant<1p-$
z20LtOSZO+yJYwG#+Jp<7U;`NdhbhhIr<$5YCKDD#R~OPd8e<3r@@IGH>TlTMK*4w&
zwb=(>$=`1C*4d`Oylttm=J9HJY^($Q&e&EXmo6OiEozP&GJ&YP3Jl~j{73D4Kcj+B
zcdDIdYyN};>ZV#7qNt=J&O#2yfbKEU{;<Bw9ObrTE;pv4G2CT$QCY%+<d><|JCNA1
z0c_v00@%izcsJFeHQuP0f8LT|Cj*j&Ilr@U9#dXUy9R35nmeZcwzeBqv&mleYPWm-
zxepS~;l`F0f55A(D&is|2>zlQ5I?kVI;&Y)uBg*CpQ(5D`1*-aEzVa%9336;X|wzb
za&yh1yEfa_Do@BTk~C$3ven+ItsQJ}EI2wL{bMRH+;!iuOkc>L_LjUcZNsu+!xzwW
zOw){yT6mj;HD3cUv&_G&22VG!l_@SFo)@EC3#`8B&BXogmXyf?_ukK?U3G+R&y+ea
zVZFB&ET*$7D)WPZ2jbJr$JW&AE<gr5i>*24Yx?5((ENA+Ue~S9!7rOz?~Kj#!u>!l
zY&HRiu`}uYvDo4kc}NG&Cv66fnGQq$v87t<yKn&shT1Q~A|P?1WABwdtIcJ9p52UU
zCEGl=SX?f^XB9v!2dpr~hUm;i4TFVKldQ8ZAG89fhB$55V4%V4;*RSQvv*tOBe1j?
zJb(&aNthTp*Z+{2lWh35UhHqVBPL9UwDNTa=g}9Co}QjOVzuR|hnw50=3JkDCXlVo
zKpovyv^9kO^<TOP2-XQC?Acfz`EFq1(7Y(-#R}5FU;HRDcoi`Zq?$VUJ!oGp-}`ca
z9A_S6d#ujto5*Rx+_L?0@BgV5fYl#lpZB0^jMI}cGG=-Ch=+?Q!A+i9)5_>ih+0~{
zFZjD84*;QKY`Q_+G?VS){fC$<g1*Mp?P@TalE{CEJk{+8G~w&|iu)`v6mU+^1zZc6
zD4+6*hfePuVj~TddltCga|6CPTrB(MYYSf{{Y9lV7?7HWxf4XZ`qT?dVBWy%a9Cne
zCv9wnazCa5LCGrE`_cnD?x4crB_10c{W1=N1mY?PJA!;u!%x~TDJCc;&xg*QGgFK@
z3Il3Th=j2eoA4Yd(dz;=qaL^f-!p->qz{1`9rK{I17Fy!^}xLLct#Nuob_wNP~nqP
z8WTool7E;3d5KNHj!78OW`a_uAFqq)fmkhOl>}A?Vr1?kZJV1Et4{Oi|Ea+=4W^~S
z9g&_6P_qAL3`B(?5Ifp$sd-C!eSAPlOADJ3kBpI}6nvw@XTs&`SJHt=`n(kwN<f*N
z@R-J$eYKg_kyqvjxes<_Wn*J|!o#EbOlGNO!w5sddQ;Q7|I)+bz<Qd+0XeG_e)lgP
zsdJd7#IZ%D=1)T}FtTRA{mJ>zrc|mpw$mP6#?Tng1}F=_V_F{ehwP`;13z<(Sy-w~
zP67YCjQ6vyax?t=sjFX}Ksk<0S~FyYEC`X{9YKmE&%lXY>Xb2q2AjhrLIIQg&Fs7=
z+0Om#<^XqN#&La7+8y(I6?V|?JyxhmLQa13NZ*uL?Un|_J8vLNe9v4Fh)_oz=_O54
z)VG=c-nAP19K=-WB)pde+nwd)k&tlBy(D??U>>(4it4CE>@^E6+Hvqb(cg3RNeUv+
z*uFValMvaq!Q%r;?S7!u(_~0FwXb4azW@44O2CW1DuXo;XIc6VcM;E{Ukm&n>HmBa
z9Aj;1tD6sOEb~H4ln!vp{o+Wvs<_my&Ift0`@WZ25pC~Vqx^L*IM^CH-JH{4e<ye(
zb08S@C!7k8hwxGdXrUQM7su`ncpF0I-{7+-B@<~;lL;Rkw=nwu(f<s?a7WB+f#By^
zB7E*EqhOSW;T6oLq-T20_O0j6*b18jZj?!^7+o2OAl~a-Pj}Z}pJwEjeljZq-`xk^
zuXsO)$rPK|*}p1Q!aDR$Ha@SR?IXWs`+<LR5GB2u7|~rm^gRM-NMN;vaFv2oVr-`T
zc}X4cV?T8{hCmSFJ4G6Lj`gvZlF%3Sd0v*l+oOQf>rl?FvU=;|F-LFr)?l7LuRNvo
z?4+SqS^5jHV8tx=>U3adzM}ry1xDrkIns))I{dekw-1aLWTO6ww?TV>cNSJFDbR>S
zOyl5|NP<!ejI{cFtC=q}La0su3s@K~KpTJx3>^w)NG|hj|Cge}%0W$v_0~Q<C(N|n
zX9a=vXQ>7Adq2*obuj6ik7wb$>jR7#!J<LF-Y}dDN>@7OL`2tdIPM>JV1a8xzwEjd
z+dnikd3(JD^k^6$8ET&r_?IES#{UghG5$ay92On2=2*-A7Cl9h`|KkotH8%*M_gQ$
zCAHoOb(TasoaTKFI+X?9{_0`2S$$Gb;Q?j+fM}T(5sJkc{EC67dP^cYV<ydx_0{8Q
zMDkM8?RNz=XY&OyA9<)jWyCh_l8CR1Ej$kJyGyB2IAAPFJonjx`jc-k!hY4*hVeHe
z#3Z0O;$!zM3m(V4=T?g%)+qxCcCDm>@9q;hLw_qY`fQC>0+sIWcAuJ*+Vq=P*k^3d
z%l8fVHcTDwKK`~j|9in#xw{94QO^|2a{WEKiq~H>TCl^Kg^jBSG?r_;_+lQAVH5m*
zG}@<qLiF75ksGmc@Ty4BpSXU39Lu2~N&}i#G)<6qCr8JM+U381pOa|#aEVHIn|$0k
zAOGvU*Rwcxfwc{2JHMdPRZ7CDsc2#+Ox+%r%qAx+BEiP!WDR^MIr<mmjUng<VWs-D
zpLuzBc=`^$keC``yKjwVV=~240{3XUZ@i)Z&WwVojAXA-SCujLb&L*S^B~{gFX_Y~
ztA=Tx*&kVDu=-r-AS#o|v`N!pwyJGs;4EYZa9=@q9l7s<PI-8$K9|GR6&u&4y2R_-
zM!Cg7jzoa)?MSPgyrl1U1P9Y#PuB~=W`=`4Hy#(VDCrkQ&`2{fgGKM{3|6tc#Q)W%
z>lzZ#@mY+RNAi9!tPJ~QZo=w;YWMhs>b%%FW3~5rlu>L?Gmbrrsoo0|qKzvxGo`@k
zh_n6v0v(o-MY?fot$m5#{eR97xCKg3A|8HQDb0+A=dTPdGNZWHt1sTwrLZ(HkV*aL
zcMlndP2e1951A`j?u-Aa)nZO207H4^CR|0Pdn69e>gGGwS`wtN$O)Q1W1=Cc^|-H(
zuYyaQmf(qm_8%@u2be7UuJ^5LS5O9G%RYEfZNq!ocu0!^y(OyXs6FR-J}FL)&F=66
zbCiL1K^gI**dLxm;ALEh_0Iml<OrD7iq$&Sjn<kH9p%yGcD%QHnHqfKfxXBSx+`p}
zBkiep!1orP<%qgr*6$4PI^x8`a&wYzWE+9)VzfVOvSFA+Vp?}K;)cqg1<of!hEi@~
zGL`SGV|sV^^Ka+N!eT)KJky`U4@?HyI0*L5eV1QD-h=H?(*@=On=4$5MG{St*Ps^o
z_NCLN7rP?~wX@rkRcS&?;k#Cs+G6i%Z=CxmEOZNfRJKYpL<L=P?5mBvrY6G@+t~aJ
z<a4n!o{O8~lD#RSf1nt+OADO!&^AB!kVz=eT4`gZIv<fg18cJ97d!T&Wl$9!XZm?e
z7;#`^!jJ<h)lxERj3hR00op1oq|>C)|LaN}D=$DCo|R43Er(1ewtRQ$_2I|@N`C^6
z*x1l&-7K*?m{yY_RGpkyH@7EgeNFw`FdsQLt@f}+?%Oml>riF{v~*WBt@4-l0Tj~~
z;V3vH4Eu&gAY<S+)})RcBb(C#tq`qNMN#o>=N#Ec9W*9?7e;!845DYZkoLU<fAlts
z_qs-zUmo#IqeeWv23~m#tX0Lte6>EPRiEjLjo%wGICNKU#R7{y$d)Rgq@Y-9Gw<&I
zmWi7Rxf0AFYc@)t-j*t;&sbh*7>CtLOdnmh##rc+dUZGo3xa8*DPlQ*=Tlcmx?PlK
z#y=4TVm3oq-2k6CP+#`@3433}Ntm!h!dOvMvnR_p%PToB$_~P%w9%BbGuL|%mG~Oy
zsV&$+Yt%x8+K;4}n~mrdfC>Q=^iDUyCuiBW`nWIUwmq~Lu#&eRlSB^g*f#WmP;`1s
zK{EYX)RT=D+p)WgElTeFt<{74=vvX9vx5*5#wNCD`RqARW#l@J@;=;GwFmqc>Hq}t
zBO8`=)+rWrP17pYJ~xYfu$N;8c1NvPvi{sHv;*BI`lsaVKv2-=VSg;3XoYiTbNhe4
z2TnkL!gS)9p1%GxabFUb$s74SY)mAj&5bZSuxD!b^4)(2vt}jPDH~L6Db5{p)B124
z&-5(ugD;=N%HqsU<qP=E{OPI-4C|)5`aQD(h(A}#zQ>L8xtzAG$Ks%v;5G@b4J@K0
z8=qOb!_6ta!YilGKqP}zN;p5<wnXSbw;0W^id;+g2pEL{Ojhfx4?z0-=Us7{Pyh?X
z_gci3N8WV4H6A^*l2jKd;K5uyv;l9Oac#zvYAXgk8*FRo;?O`B9sTIHM__+ht4R}`
z2KQBI50Z<WTlq7nOJ!T{vHil`7)fU8v_oQrDhT__%rxQJpf#-P`Lge4_-6BTvnvYM
zkoF?{4?AA~%!FtX8)r!bx2z9kmpwXI?qIM3=U4_pdHQ*0HA~5OZ8YFLu`NTKKXfm(
zyq~AK{Bf~BQ0m#>2H?&OnH~oX&~#Bf`H?zFQ73MH`K2r})>NHqIM0C#1z);!U~X|s
zjOY}kh(8sQ0?*^=R?g1|@dYg-Z}uBsZuy<P`sW=Oh$ykh<=b=xP_-ii{?;9NlGKXH
z!I4Cw#czKNDeK<k{V(=ll!U-}tnJWlvcUL=Yl~qGJFcet|JpPa@xgUW@S+{WQ(Bg0
zmw{A1ukC&AAZ9hln{RTmA4epZEAUefBZAA&7luVjt~a)hT6+WMGp#q*vVz+5%>|`L
zw!1W47TGy2Zy@{!O-~5MkmyZE!#Q~fNXR$Np(rwMZ5>@pM*Qbc0Rh8S-efJI+pCEP
zo{;2rdbbImJeO&@w$9kbccgz+>n*)-7xAX>KJD4?*ae4xcF@5Ghs`YC2d=qSDQh8l
zMM?d)oP6usG{+aynvpZ7+U4i>6DnCWsICWGfzzfjkj;_L3ODKu4nyfD(Jv;Nof1?5
zG#dv^hs`@#4d}$O#k^Ig#Xo0JU8u`7&M4koKkr4n%Op~Wf`s7f!@HssloV<rgX_UD
z$U`=sY_!%KUaAeT^E+66WWs8ZUJ}(B3y>N?O#QCHk)ma0)ceNXyG@r6x6@zdO1=$K
zhaY$Rg0ZIshWIBlbuH-9eNtW8*noyyNU#G<ac;g<gIVLm?Omel|4#FQ0M=~(k;d%V
z!TU)4td;tiv-h#9Lx@z>f@3E7y}!N@YKm{u%v=qW4B{hQGiqE{z88I&VDS4RTFkM(
zfish{WSJED?bjT@qb#(6?JKDhVv!SNm3)1{GHFgCcRM&3k8SA3PRk)ObFvY;Ae^rp
zjBC^G^CtD8ukJ;daSgkuI%?r=tB{QJAp!lKyeam6hK;tCR;|o@Z1utAiMr`Mg{y3d
zVHgl)N{$<mSS^PZi46`tWBKATp<STyuMkZItiM?6&#=>sHTwNS7nKUDd8A(^UG-LX
zlmikGGIsTrovdKX@9gI1fk2!iQ_o0Q8r5cIKf2&+;n*7@h;cv?_%ddd^~k^ir!_=u
zKoa8Jndrw}4rfqP%;Hz>&c;hRaU0G_HL%5Yaq<D%Q$Dgdcg4|e(CumHT^=FijP98D
z&u-37p+Ieu0J$&i)<wL;n^`;QLIqr28`o7*<wagKr+%<<B(Y43(IyL2by9_YaJZ_s
zZS`!9FeRpxV9NH^#jRY(+o;3U(?AW)u~SVA?b>_c;N?vq_^54r>F;tu??lDhJoe@n
z5Vih=rUf6Yj1OWO0(BC(H1I~;eoHqEZ1cI1vkgR51<uXC!XdJ$0kWcuT!&$F?QLJ>
zk2D|u{Q*!U1b5wg>fSqrPoivWcEOSQs`#3Ficjn8Cd<&8IyzixUbOGWm}VO^81lc4
zJK1>eH!Q`Vhw!;th&-&5zeGJnk5+$Z<eAxzh8%6r8YCqo7-jn$+HtV?1){_yLRhj-
zE^}j=XNr-%9$)%0fhH!#*FTn9W3V~|>W8SWZ}96Eeko%)^of?5O-P`u_GO~~!cHLN
z9dVn%_Jof-$$t5V_RUOY^QLC2FU>b60*5lrFgnx0)6G}si=@LBP;U148Bwj%%+Un^
z<s?E9r@MiJb5XG>*ix1q?r&+Z%63rlWv=imBCo6NbF}5;&#tlc^Osui&m%sW6@y24
zh`Ceuz9$>L^Hk}+o>bIaMq8hX*>ys@iqBg-MXm2f+rcL$kq$Jf=Xu4-t(RL3WcwtH
zTwu>frf`S)#Dw<zp&OffZgT)+4B>T{O~iXCeGgdb`r=ma%a02xkB7W?K8NFQv^;5R
zAtwb}0o`V`ap>-MPFj=o#$i-qs2(6*&HYHnW1EwYiwFrN-l>ND9>_{9ur_gIeOb7>
zzILMIh{O0ayX0l-395N5)%oG<*?xHCYQ_0Ymd|X{2jLLkhLpy`4l|x#8P!p!3a~Lw
z1B5}-K|Yi<Ce4Tl{~pGPl~E33<KvSr+fUy7y>zX;t>@c!wa7v22elFh#$A(?@tZrN
zLU$%qviMNkH;a5^AoJhm-M42>`T&0(y|2*IM&LG9_&f)fl=;KM-fsaJ4||zpA&4yH
zQ+ku~LDqE1AQ6ea`g5batd`%*j}>Cj6AqePSIx;npwnKggTSI=0eE$7M`tIfV#Jf%
zOILmstOG$mxl}(KY`axXi_KoDkwG){)mNnD965hhnx%Zu=yvM|RjP;t-<&{D*uDT4
zSoBeL?u3Tc!pql@9x=NXAkN$R-4TAp$+a4cNi=#!!m%WGCWK45w(Wj=>iyQ2$N{ej
zkYKfHJ<mGZR)+#qawlz@SbLh6A2oL`L$ro><<4CyCoTtlo*82i51+MZBYMU4Rp}_>
zK445+U!t{a-&0rMM9^qHFMs8^0%}<ACf|q}dQ^{Pqm}t|gUruuu>JYIGEU1P>u^;~
zjeEX+|699a-b6C243X2=M8X2*JRafQ=3tGni)Xi2^pRu6JRj%n%2P(XN}eK%2=0`(
z;`V$l@9Ld{d;4Q5x?rt^CM>t~^KoK$s1udu!(wTVpWjEm=Z8cpc|NY2Ql<Z0F#8++
z?zoc@RA+fG<}cPy+3PKe>o6Zs=CfPZJ<4!~#JAUyoa5pk)z?9fR!!(_*y4vBp`A~T
z<UQs^uF_@?pDFJnSvi?#a_2)H2lIAwy_}-1$N>V&Pe~1x*}mo|cf|g*POb4VQfMQq
zTsJv0k@#sjj={#Sr}4(5{2RaG66hk5_v0dc<UcZtaoAhSDAz>eh1Wk1Xs;VoB~O``
zmk@z#vunU@Q<?<tYrq}s3mQE_S-3d^>Q5;tj#}(HvW0?F%<A3W09h+#MH(XX``Xxm
zEiN*WK%M!qrz>*ChWClECDt%E$c3WN3y6E-U4u$)8%2_I_{a^Xqp?%->z}l5qCQR4
z%L*LbeD)frL2cn}x%iXI<72OU;jibuoath(Uk9&&b1SJ)>b=UVOm6W)ZSeB`;B6fr
z&YPf^tYEix6nXb~-`UnT6Kd;#Z}?D6{B?_A53lx7ud##fHiV(fcYqTEK=cqO-d*E2
zpC8>D)mC<AU{{Yv;pflaCvaV@1tE=N7iC#t2xOV@VDwK7Hlnwka)r9Rl&mk$bzeTf
z^+XB@2~hzj4}y2|hQX`NBZdkYN{Gt%lgp3Jf@hV1iR+h%Asv3#-ge8gp8YahR*^(_
zoBp@~V0y(z$YAJgn(vyXY(c>MW!B~~anPTx$4*A@VMy6TTP%yC!Wrkw%Zo&y&Z~{>
zBoZo>6T`}C=oh6vWhD}_Iu4!I8Tf%zdFNn^!>9?Fua(-W&dNsJ7i|?I_>q#5!cx4m
zwJgXhOFBpNaNO0uB@|sF(N%kAF4_7ZMjdq+l)63%zwz-B#eSYe`5XC`cgGa}-tkG^
z!Ez-lju29y{Y1HpE}t6ZR<=8+OlUH?^0H;-em3fbfZOIUhuZ@Wm*us!f^wr~egj0M
zq3j5pswN$gmxV6iWcBrIgp?gp(vMy&mK)Ns{BmH)_TiVlgm*g~QMBK$Xoa!T`laUz
zyev=Z?ddu82KXm=@K_jfmvZ=WMdP%+KPITJ2Gg!NHdp|lb@Gw4^}>o9^lNU*E^Dx&
zq@7p)nwR{oOh2fI)IB_K8%5!xdDnV6`?#1eFKqWJ)5gjYYpE_@Pu(x+LURKhChri(
z!P@QlzVNu=<*v4b`QEa~!-%O$@l)~jhJ<k)bnlr7i>6p-H2hF{=`AX&-E!DIMkLQ$
z8;HnV$cICCAL-KTJfGytNA++uay|q}0nO0^PMgw#GNWRa0KVL3%(4JIO+v`OrWfJg
zbOd5C0~<2zOoi4D0FvW*XOn=Rdk+k78a~4MnPRD|kG}+-_v`t1CD*8tO5`i5cn~!J
zRg(T^Zb42L&G`)k<~(?y2vTR2ZF>&3%TnJ4Hka1nCx1eKIilmu>Y=tq*g;5>%;wBk
zJ&-$ps}c8bT&2mjRrxX0-=x$h_=QyMIYOd1c>z5`l%DES{%UbRYuF{icP$@2)(@K8
z|BSzx4tjDqwxikXxt0If`ITEGEhgv$oHa0`P$re^R?Ff37B69Lb&|37$~u6E36~up
z+Q#p>+*r#oJn*&6XfKaZrTZK(Z+x0k9uYe>B)uP>n|koxV%Z72fBs0Va&UYgO+e!H
zeYyF<vCD#6Ve9!ZYX}J@4R1wA-<+bYt!=vjuwc^KI5JIliKPOFILTjbB>`vgz!f@p
zTdbs=Fw%spX88#;J%W^lb8D^@O-R9I-2Z0HBVEY%TB#V&`4f&AumP&(x1dwi){})<
zmku<Zemt&|WkyFMyQ_iv?HMHwS@9X?LlzzK^xI^^XYHDV``&tR$mQA~PQ-5-tO2%X
z@chB+t*ADi*eocybK+6C9o0qs`61lt2S5<7zoGrA<6mt90}(*(Z$7u_0bwUuku;!7
zdz)A(j$@FM7E0kSI%}Ro>i7yAnjz>{n|g6n_sg$!M)=XudN}u5(awp`XZoKfeh+p+
z*TC*kPg=Vo&z?g~fSnq+cd)>R>_pY{R3azqI-$4ygSIl|mo>_9flioTEVrjud8cv<
z(9_K}28b;x-^D~<!dbS8B*mp+s-Q5h(;Q5xCh%#5A(28V>_;>*#af~*Rcb<!wBP}l
zNOyn5oyXCYel*9@3x#@cX%BQLuQLUMtXJl2Q(w!c#Ok!&g>5QMX@Tkjq8D?rYm2S$
zzFhffZ%I?QasX50I929PA*;1ehS`>J4J6?Yq%`l{MwH+gEjz#@O36=~7ID+?+goeC
zxSZ22C#zNw4|wV~rtD3gdK6n6*Wb#@-0r<*s$K3`7PJK5KM=qMUt(*TTC_y2XXJX!
zE9y(^X?kA{xjwl{y>JSH=}aq)i$un;j&$#-$@VmD2#!ZkpV}H)3#wfQf-jcg%9fV1
zK2D>iyH9iGW{I~h&Q&smjmnlZNIfNPWO*Ad;L`e?wZ@1!?t9a{&bo$Gn)G(ee(Sc8
zuu1Zo=&@#B$VZZ4a^-wA2&x8XH5llupUq1OU)Bq~$r<JYt}f0Q%GGwf$mX$E?(mJ^
zTnL@Q>KTxj_;$^1z4lw!*)IbuS{-j@5fQ&2vGn2}^@^tq+~n1PikC?~;tFrbezOpb
z2z^<T${EgJ6_v1FQ*1Q0vL?R3H1Mv>3iHB+`*Y-Hv~i?BPbE;38>QmVH+DhoIyvE1
zU2hanGF@M2MA|*IZrDzv=u+OA6$9F8KkgtVg;&Qn(~eFyXt6}BOnBM^FIDSrr5gRt
zD2xEwJ%`MuG$ME3Y6-3pqqiLl#gAejFI<K$JlQ=<z3wxs1MMKS@>dgemSx;Cp*jM3
zU3)c<=2fEsCV2_V)V%rwcRFw^gcY3V=sz!7AT`1Fye#YK8;OAX!NJ^^Zbfs!?Z<<s
zXSp9Q%=Gy-u04Z+Rr;tbUz#Og7&_Mzg*KWLA<ctEcyCdIcex9fvm7G<7U)&PztaS(
zlX9VFBeZS^K>Gt7YgZ5RNuMU~MbTE(FUeaj{%6grUd>fiPpp@+!d#eL#EWhE<ExM<
z9h@7ivLO9!$1!Jl)an3zzOziE6=?RVLf)X4-Cp;WzbITg#?jE^*D53eARk|S9SK|Z
zeT!#fAv|XuYnhtipKXEuwj!&i+vk{qGhOMVjP74Z2;Qg3v9U8%*@_rV=tL~gqzL}B
z;!%xqPPw7<ospAbc(*$jC>t8r00Zr{oCNX1hRoUL&TGFK0@5pL>;;Vxlh(T3P4>)u
z_wNq$1$bOICD1W@E~N6=wb{#PC}BE+-rA<{z*X9(Fshd(|0;x88-#23xX2pkRu`-3
zOFeG=B3{{lmbJ2y=3cXP!m^c=`77<Uf<--OT8Cq@>JSP*`Ruog-;OEA|M%E{{TZC$
z{Y&~<4zsRr2-SC;@Dgk1bn{J@vq{#Bg^h7Kv=#`ji|d!%$oQIC+sUVOr_nB&wo#*7
zHngMm0rj&_kcVdSK?MYk$`&j&K(f_KS>fQO1f(bf5AdEkJ_|(d-*JMjZQc9zM)qxH
ztXFeQSTGIvx8blaoM4^F5hwKyk-`Un>gyPod0Dv8q>7aBkZi^|);68$BJ8iGH<7((
zH$V7-L>h2^G=1%lk5uR_rg;$-oT7W&)vDF(NG8dS+Z2KTPBD{|KEa<*wsoda3Wt2e
zwntOfN=hQ+q<>sN!!?ixscxlNr(yKQE$Q}@ua8_y)56OpWy#j;dX85E0#8*;gB|ZQ
ztG_X!+c&b}R8p7__<i|XiZWDAVV5*HH8IgMI<Yvbqg+w{4@VN<PM02-W~{JQxL4w_
zi*3N!6>t4LE!6B4_ES|)mCvT@zBKw29*(yMUDg03(p%~-cMI-Jr3eR3`NQSUaAJb<
zmh7uNS{&kH98?HYrf>IY62><w8Ix5z-pQgV(5E2?8&Z3|=rw!iF1OD!NZ)WuWJ57&
z?ctEqFyUHG!@V^p<4g*hoUKo)wV9ireGIoZl&(s};qfp`8eCWu0S}$lu1y!!M#q2S
zJ$tA!JFN5@J1_^4u|4HUtNHumy;n}yH734^htK2#(Kp(URUq&zw-00EKy5wqSM#z0
z&i}y{potL;QI?(RJPk*&Ht#B~z!NR`KjjtBR+la~vr6Y6ui?%-u{orCdUTg%rFnh>
zUQ$wW=4lSsxe*SFFPiq;G{jbsv{M}vdnE@1!ooKNFD80@xCm)=t89kM_ln@y6cp!3
z7x+(fqnOH~boM=v$6QXyqj}#1;X>5$ZQM{>B85E2<#s!d^v%KCWDizrP=KHM0;=39
zW!H($JTujUs<T8)=q4^T)+PQ2?Gk>%LBa7Efd5(zG@vh8ltSn6Zf*F)ZnPnH=Pw4h
za2O3Bsx2Ze_Rohhd$*G={zB-22-eyv=j_56{;b6hna-6GeuwFriGuo#)%efIu0;U}
zp#4yZ2H2+}r}roY*0R%3H~OX@fxq+xfw&68J^ZZoiheOh>Y<%(#1muu5#%fOMSiZ{
z5K9ZC@D*$UFY`D`Y5W|y0Xvf(n|o5XIno1M&u?w4kTnMCMaTujvqx+`hjhauwO$W4
zRz^)ag53@GZq25n)*Z!H9h`7mrh)bG+WM;=pOS0qt<rUJ$Gs4ow_ngA2S-oG8mCf|
z!mw*LoyrfETkc7Rz7|Wrk#p71BOm7DM%tL{X<BFfpxPHs^Dvd_jsM}zNYW_qh;~FV
z1G{E^P8!b4HQ@u2+kX$^rHvJV>4m=ZnSOS?v!s>xDEvQ`9OgEtIZV6zPof=P-&o`%
zsw$z8BkP|{GMjKI$ot}pV;HpAO#T4>X&JSUcNzIpeCy(#Q<j6|^yl#pO=;r&Fr1qA
zKbef~1w%-%bGgwbikmTIzysKH)4lQ?%qW?%ZBu1n<RA}DwbG#1#YV*3k_<%F&`nSI
z6wEjQY16qduwm;i=z>DG)u#=Z8*o|eCFIh&hrkPBdFBZa<M5$XpARtH!I#^q6GJ5&
zOJ6kFl8ZbP7BNM!>(jJ)Vcb;M&<>oAsDU<jGaK7KHwL|d%Wl}<{MJ#tQC1+6*TYc?
zH|!fr@jcFbo49-gGoF@~mKdU`(4Q>MaS)N4hPoJ%e}pYgKHGDa7;10rQ~2vHdF9+4
zZ?ZoPJ0hEO7!moj!APk=J%6-aXwlyokD(AWty-@YWnUFzl35gRz-yf~JLNU`Sn@jI
z25Og5x>Go7{JQ$!p-bd#73FTG*h!b(ApQm{X7@M2ks;)cA_OP#C#bcg#`_On?bHUN
zh7C$p32o+Dd<>XQ%gW;qf?RI`Ti#Fsmj#NL0Un4yxaPvISMR1U+_;H3KkSf6B1W~Z
z=Dh_J3zN1nHL5njqai@=if1dStv)T*2c8B(rH3up!&Pasms~_|b*G`;75?AwH2WRM
zJfD8NlmD<X+CH>*>7gkV8+DyjYbfQ18QN|uTRf;7{w;}<r6DZ~v7@*WI^}(_fU=R>
zKOi&M_ur+8yEuKg0Sujx14AbS9PERwv*cfhWLmMelRv<v2;cd9o+AZTJJFF8Y5+a<
z+)RldAcr8r71=_ZO|5KMIT5#U-0~FsSpWXlB{i)vLpT7<t`-)$XSuq)!IIKFhfXPq
zbT+}7#|M(2Oo-0`GiqH#x_@@`M)H9{k~bID{jz$Pto%i%1+YZ&$Q@X2oDL4WI6J#X
z<?`~a)nD^x7zDBDl%?m=Xt-viX{4uVj-4$EdP%w|k_``-pKI=~EHZjhC6~!XQ<JMd
zr!CNh2tHOs^FE)gFf3i<P7>@Bo9&rV{kA5qoKW-UKPp57*D3P!_4Nr94R-{807DA?
zRar%_tmloskyED%qfx%JdA}UynVw3;!0_$mw~u9qubUH$yY$w3`X{xwFlMie*A7-a
z>--|;`^eGkAQlGfv3PnwE2_PQm4-m;E@$<>N{EQ5U$)EGk*la;HUL7F>|Ib3v(>vp
zCO;9lxv;!{o_>j~e{l`4D{u>cHm;;?-FgTFOjAVG$*14U+u5rNE(OM4`ebg)3le_W
z^%Rx?=C}S{D2Cp}YYZzZVYTsRt0CgT>U&aGSt1=q-k(BR&To4Y>W!ZskCHkF|H8C3
zPEogdX4m3FGoDFa9b>O~T?y#plu@WjF4J_kOvT@P*Wk;!CES45=R@>*)_*c<j}vr3
z1ZdkX!@0GCe&anhNDjT7C?tYZaSOOC%6F(%!gLv9KxxGjsW+|8hDAkD?$xy~rD+Sy
zc!8UQwSo+a1ybeb#J|mm1Y}R?s%$YI4Hg~Ccq(QUD0OR#EsowPWl$r;+EOjx(yd)z
zJ4k;0{GTPtf(DgYoAg#pXZs7#$5QnVqiiCja^P|}>&Hmi=^NG5BjEULDbug7aqE9?
zsWcyl*S9=)ta?d5rQgN(d^ee;g_Qr@U%rJh6hj_;leqnVi_MM{!)@p6x4T6;z4Yts
zr{vJ+*hV2^v*N7aYTA^9gig}t&cw7dxKy`qM%boHOMRfpgZij|u<G<5dy(h&>-*mY
zcjusj$xp=z9OqgZHNxY*deEJT+hja$0CsSB`95}+!bJXt_p;qO2yM~q5AG5i{RmuU
z)&a{B0lm{Eq`dx-%PyKOf#fo0@W8OlI7ZQ5bwBPQ76(dOuuq)hx->N&={Vumf6S08
zb!U=Q^y6km!3!h}>VyJhzNBBC@QVG|OMy7NK)ibYW#bp~&5hica{t6kmeER%=4O`b
zEH+@G!s=k!N|Tzc=N_MF4A$hRxN|@s-}+vB|9M!1yY;$@*cl2lrc?ro9v)ws1M>0B
zn81Jo85TjX^Y{<nbz8p(p`N9<%>azI0z*euUq!4_(fO3g%H+kb-t+t14~7JT>ofyw
z=~7Qf-7XD6YSRs<vin1lep?1)@oX7b+~jh3qS6}d;H{wfdksYVr@g9XjWye0hLCH6
zyI+5nYCL#b(EuUJ{UF~EBCx+zKy!K#w+Hbjg8<Z3!ViN3;!hu`71^X5zL1lX6X6(*
zQLBs@x}G4~`$sl$X267r@hq?c+y_&GdqnVN`|lZo6@W0$Bq%vQ@2i=262cbtxVu0v
zuFR)qD|`Rl6l<~vB>VlGY!#3SvQ5BCJ$H$n8g(IkIg<oJ%W>`;Nsg{A$*(C)p_rcY
zZ*)pQ7@RH_i8#Hc;r--5m)$cYruNpZ#SR$Ly=agzUHP8iRzu$y`*ow-<Heh2U++iF
z;;f5)BX2$lua9TQMu~8Y-zMBpeC6?~N%!+gI%?sFbFhj_GGLhf|5`G`f-M$YZFri4
zXZXnk&9|FF0plFIL^nYm<i`MmDJklXXnjUy2^t}Mdx=R7@}@Jx{1WK=!@5Crl_JrP
z0#BaP7pxbLVF3F})fR5s(?|;-Dufy1>&q+cC)GLBw0_0MLgKmGcvLi=EPM4Ag+=c>
zlE}nB-ecdde2VJ0Ntq&2aL8kl7?8L;w}Bx*D6~OrSEy02DEe^%z|5H?uK6mx3by1F
zJGG5}HzA4}FoF$&<NiE!saF|vi@dh?Z$2p&w*=U39WXmKr!G*RUON1d4qu|;*YD7_
z=RjtZJ*=4ChQ&&-<DH(Go5F}^(|Di)Y~;~LbhU_^`0sY=C~l^f{e^r}d1(4=8vYN!
zJRfc468!8>9RZMehYsw~aM98=3AacCgh#Ia+SjmS5|-*(UfL!05q^tm3(w#AZJNVq
zy3Wx_Wp3g=V{HDgZ@=jD2{MF%n6byW+X@U;XU`6UbB-N(NR;w8DY!gzHwl7T`|L=c
zk0gVDoByc?LC1{Na@v=LiHf$Mtk1USu(oJ2mojZ$QTBF4)6kEI+K{yLw`Nq<?Na6y
z6j;9$npEx+qC4B(no`{VKLE`T2Z2UZ@1@be-Jh9K@){9BE6Ax$Vn?XRu_kc=T2LeN
zT>|n3&WdZ;pQztCT>rpX)T9QHecIjhn0@}uClp0eOv(qe`8?C=x7Yg?zk-Tze13)%
zHL^1ynEIY%HLw@L-c(NlNj_~eqcbbxCJl7onFpBUxOl;dMCbP6)bA)8GroeDVcVnj
zSn88q;$!*Q_!AiG*z|#6F0kRliXyYTMkimW&;IPa{3lhNZ-`0M&B3XkYI)n&QT1KC
zUuu9!2nK4NO#=ain20}maSjW1bo5aaX#BJhnv}C09{%v~eq5VnUn0%X69W24$!q`x
zlhzrJTs-b1JU6_by)x!In>=aMSGq*OY1jk3ozzeH^(x@TX@U4MlB5(n6sKM1!usdd
z7-b>d*jDS_R^6)uY4zikuc#C^KBz2m3^P+lQ*<{!=c*~#T1B}l?dfxMJdHBJFT`22
z;c%NS0X9GrGvjzGLlFJV2eh7!PZqkEk^Q1;bcIyFl+84vRc%f&LIJ=B=os$$J;L_U
zri%JQ+F}h#Y%!!{cKqSHnE7vO{vQ~im>H01fpec%sRdJD92+6+qMIBC<NSfKD}71j
zPa%}N5&tgr3ek?Anw~Q^H<y#_IX_{&b~--%Dz?B+5L-$<Tif&}OsJE2R@gA8gFz7*
zY?+Xst<xm4V1NZr_PIyLdQmEWKj_`TsH)P|Jny@JVb3KnzynM73p?d6BhQ~p3m&|k
z;Mw~#4CUh&^7QMPUrV^%{-?PU-@Ptk#qbbLqVQ(eg0$n4`t-BRjj_{;hI-`?oMSE1
zQ|s7dAV$NKY0gvc`(Qc>9u&IGmhT$Pzwcs51}QdCcJ7E<Yf$1Nr<3b$a-4*$2e6Vo
zt#ILo$IncdWS;yvzQA;vKueU}bj=3zX*+v1I8#xC;;m6%^k#ILQPZQUM#n+F3YXHy
z9wgZI!2Cg3q6T`St7Yi@Pc9&TxRMZr7P}@|7~n(2Xw*jMp$WbJ{{9*$f>O82La``@
zJiYL~5>=Bky0ha*fpC`$5P?gEutyVHrbAOJ2W|Z3=dD%i89J8T05-MHi(xkbUDLM*
zgqaZSWCyo>TVeg4S&T$!(cO}WyJtr`WeG$CLpPrIyvMj-5{7J#U)@{NwRYv_UAJ*<
zGMQ-}WgpB@MccpXrD4bpQxcmC?oDQt1x+Wm>vh9YHzc1S^B#hm{&M#IX4j%DMAaY3
zYCQW4t4mHCao-3M*_6O~;-9XD{rEcTp5v}%4mUgX#V;v7BEy8O*qCU$^zyRT#W8W!
zlSFMRRlCowZIQY;!*FJ=;I{x>3CfSG_UYGKmF#ZQTsM`9m85jsD=DF36g71v>v640
zL)|zHD%oyn-v$7JNvgOJm$Q*Q_;s)W_G+omK-8mc+qqNwR|e9IoIs4lU<vBu4>Wbm
z@c-a*5^q2j;)(D%ky_Y^k>Kt2LML#!-ouT>`RN&E@YeSLrBL(w-?8;0(#=nDeCd=&
zb0S#Tbd!bBf9&OAM?|})<XvNeUoSEQ9adMsATl&M?5?XqsAIpMI7BG^@5rJt`FeTo
z>oiTxCw;}ZL;`>Pm$#}ZhGxb3o99yi`f$)?fUq@5()q!}ZX-f#`D7*=r!e`z?R&ya
zn74VTM6nx_gVxy&zSHYxA8<B}AoFWC(|B!vq?l#;)w}lIk=|dZs5T<Oe}OTsOv+@5
zpum(!eQP_hhB;L4F%TqE(jluq@V+nH__qtdFe|2xJ3Z{sqFG!G<PJ{cbDEo(5@@9*
z0AvIlgnuv4Q(Rr{V)OHS(@ij5iHa$lHyZK-J2dNTckP$+sFKk|rO-yk%?9bdIxDbX
zfV$T^NE-jZ;E!<=vSj6b(UI%VyOn<Xxa2nHoS)+V?7Gl7FEESr#n)Y(_!aWhYQj&L
z8K5}R;p-!^UcH*YeNiwXgY#N?W0f-C;w8pok`h=l=HgGwz`Q_g`~%!e^P<x&qDO>s
zltL$*5+oScx%lX@(*Z(GRq_ck=t5I8Ew7Xe514^S*cf>M!F!O6$i|gXib^Yd#Xs76
zHRK6QU9n!{QNX<zoK*A`6{1BpeOY?+iQS*PcLT_H(uY;1?iTuWH{~2lk;e#GP1o4I
zYf|k@{_C0I%%Bq^Htvmh1}4dig6scCj3DL(vWKHC1L8n~<|ZQfYkqJZa?0H!eVcyD
z*M}b}e4}h@$&T+gx5wR#5%q^ecy9vp&EKyTJO-Xg!SDi<6?D<4oltx<?pr1JB4gND
z6g#u$`}alQnRsM*9AF}xn&9f8LWfrA*RV!wuK?1R@4dah<a!wg;vHw3YM<*oct1uv
z%d2Ag=}?)_5P%2UrPLQM|5G1Ekqp_OL|dxiexszi?EvAg9+JdFplGr?!aE_i(e<hb
z3#zxTwxVlF5X--!c8Wb{lXi&|KEcMjTiU1a^u{=q8Taby9QrO$rSa$*Rlx9`%R@(G
zed>$imR?|Ph#E+lQ6oLC8oyBs3dJ))OzZy)6vKb!8-PwfDS{U{hj~y1z}5=A{AX}u
z7pJrv#6V9k@w3NjTRmPsDZQcn%Usdnu2@uZI&iHnAX$7Q@6z0+d7{&)pi9QE>kshY
zhEKWe{CyGI^O5Hj*z9!F<eOaArmnbU$LbJ)PSKLIld?lg*9(QuepXh@*lN^|xjZCi
z8g3|cF)EU&aYsl0a`rYMpE&j-Y0hK&E1U3-!F7$9z~Z7Ml#BiQ{Qu6oFeVN&tBiTH
z`O!S>BZ3#}L7qMg*jD0uZ(NeGDv12Sz}VsLY{X_r9Sv8u`TGPF$ukV0^W$#m2ne)I
zG3;9fA&znN`XIvsP4u<-X%cs3P2pLv?+I)IHqFTI$F&O2T!<=wbxFel1Y5&0v|v_N
zR>x7BU&2w}9~O}oj&PSsd(0ZY_$`%f{r~9^h6Zt)*Y5;UwDm5;x$wlycMD9#;eg;^
zP6=1flU*vbdo4Q;{)Y~{p5xk_>sDL}_FOeFz(APXE%uXG+>|hcIJP;z3}h0XCvTR(
z#b=?PAJGm=7Vx7hHk%OWY`4^(QDm^n)03Fm5W7&SggF8+@B`vZ=eWfb=_5Z%o2gH&
zjddoKCoY3ohvHAnf!0*S6ftV7q_4kq^d@E`fLIcP8#dVxMt#eR(=S~8Av~&lE8{dY
zKk?!lWfy*Yymb8WZD59kz~xvMVCr7ft853niq&8Q2G=n%0zJz9dYf?Fsx1eqG<RJQ
z!F-4>N|awLrMa7YA)K;B_HtoG9gD-w$|&$;1uY~%+RQ8S^>6SDZNk5`F;+Ahi7|;H
zG-K31(8lSIhjjB_{;aVbRS}+my&>Gar>x5+Z0uzLJYL30N%!U>N8N6hEG-;uU?v4E
z281n@QiMP4*2p^MzuEY|4lW04G9Xo1KX`?fzu$ZDL|;C$+=Efz^NI5uX87`x3WU%z
zxp1x^j}zoOrw4&E-b9|!1$CQbKTG1wsC97hIWx%b^u`rL=hF(i|CH~pc{oVQr8#{i
zr@tTzh2iOTJtef?<5Ut=uRJN|y!AE?;G)5Tu}1Gdz+0uW)XTA>nZ0v+QytP-vK6&&
zb$4<mkH9Hk9U@zLa81ijkJTJUX1;DiNAMA{39|fqk<r0V^C3m8iL*<18!m^1Ui+Ou
z*WRb|jLY#do(9AECmCDucNM=CfFy+NlN-zC$wogb-psO6&<D~3)4g23{-2Bf)%Hs_
zcO8-^0JT7`;rnZ~eVyTR2tJu)3Bsv(b)@0+e&V}f+-3L?>AmZ!IO}qTbaX2bLb7px
zKypkKB7lk>z0G5e5Fj^ak%pjFtb5nHRRd)1zjF!v-tE-5E^?lnC?p?E&BwZ0KhyJv
zfd|dTD-@Kn0w!wmF_EMsAA{51!>^D5tFr8ySl5;Ilil(EotwSZgwtVG39ml*+}B`C
zEibFUHO{}gYaA&QTsb&;{g6P78xeVJRpmPtrCLr)P*E@=VY%1I5d`tB+hfi`^+>K!
z^!iuKAj1qxHtGjq6W8YjxlbOml3xbIeNqs<DI)QcG-7;^1!dZAzn^$*&y?OyPE`B{
z4}Tq_Cq>18j!1jwd=Y7d11g?7-uHsvgLs$+6hVIH`Qx>=D78~8;X}jJpP8>Fo5=Bu
zyivhNI$$ohC!Wp07xNBmWEbz?OZ(FPb(Kgufm-W2de_~T1m<rqg+_jQT9<br6B-VP
z!h&vbJ@om`wtM5zppkJ6UtOWKs`=)&<SPapBo0vX<CDHQ@Z>~q&6~yMzAVEVP*z!n
zeHYo$6C@|v4(}tduNFvi=RsK|fu){$Xn<C6o>3TEjrdWQB($47e=I1i?)L5)VXW&&
zKLgnxNiRP7e{8*VRFrMBJ}l!PrG%79mxP2tNDtj0AzcE}-3@~x-Q8W%9n#(1jdUa3
ze9wTs=bYdA{&CH64f8yA?fcq$U;En0c)CAw>!|-2hgG~{NRGRlw%HmrFke<d7DS;T
zJi`3yDE_wOL_M-5Slc6#DawJtlJsw~7FvV2@x@-YY}e6Dt^F(h-<5+9&x4G{^H>$&
z+1;@BZ4DUeK|s{Go`z!&i)ifK?96g5zY&05-*s&&bKy5VKK-2|s-g~~VZ`{d3Oz=P
zwchL<sY$<S^}#f=FtGm)b7bvhAZUyZN>EwGaSE#-fVP~30jnYHytr;X<41djF<8Gz
zz8i;X+*v06?f>{2#6|4T$@V#y=BpeG@0dwGPXPx^nGyCn(qMb2%9FlZEq)%6nNOXw
z(dY9XL*KAV=wEV~_m4DnM$*<%z112NN>Y~JP-bY~D~~2)I?Yx0n_~EbBiYYRr;Arm
zCvouf^SkY51k)KB@r$PV^-$0+T746|7TIU75W97JFcH0m`xvgS`&5V5sWB^tF()wS
z$QCi7KomEYJu6XDowk|>ZGZ8VVN$RBFklvNQ9kxe>*?N&i`%b1l_glcRKp$kIrn3H
zKlzQg{7mhfYd->FD<4Fva+|T{W1#}abn3Ie6K<Xa0Z8Spnb{xFm+O^e7wdy(Uxt|W
z<E{61dW*8Gb7pFdD-i$Vn&09Ko=!3mu-nE*g@uJJ?Ti1d-vAB<RkBBdn~0d06`^fr
zkGDg$G-Sq4Xp@Ah-a)z2Hwg8!<nFA#gm^h<e>+;ojTYEvFR%x$3JI^xv2gaV2QPKP
z1GCDk&A#))il^+w8Xb~-`lZ<g@*S%AlIz%;56rMagjeM6bk{F>=SS-|sS^i0{_Pmp
z4FXI-6w<~d8hpMQvsApfb^Y>TbL#9}AVa^|GEg>*1g%1RO2l~9j{&duqa6QmjBjq)
zL$*UuM<Io@iTeeRRQF+%Y}Q9i7uN*heOLa3%F!i{K*PlqB&Z4man0`O+p&yE(bEk%
zKGOqLuZf8ev^?{P)Ld6~UIC$?%~4yR54~>3$ENkosjY@ZC%puNAE@yepl_TvQTQ)O
zfW(b{-ZaObCV~5e42>akN3~7teOc6GTw~N%v0f81LL)!`>R?`Q)e09me&LE|nM2qU
z7vzIA7<j(OUm-Q~4@|N_fsUL7V|_al>9G4F!d<c*b$0Bkwld8fdFfhJ-fQ=q-mRK{
z(P1v$E=Ej?<mul@60Ut9zySqSmiE7Yr6T;BJRtG|bYZS7)Q+F3`IF<=A$8tE2V(od
zQV&zJGxf<zu{Z_@#SxY-rv^7;=$Al1IH1I=*(v2Qn1ehSf!jI#M4KDU6Tj@!hz*A)
zZ#Ylf_KF|ib>b){ZlLNn^n>WOI9`*DtH2@^9fqkRTbv}A<f@RFh0<g5mjzd%Rg44=
z!OFjWEIK?d$p>z42PYD}8D=l}4nt;a$!;f`ExCOSyhV5`E%AEyuK~URR8*{$VuHVP
zBa0KoT*33Z?{xAoN{k9fo9>QGarg-tp|AT?P%V&)5$N{Q*YQfdf`Gyio#Crz=3Z|M
z>m8?=Ge5f{g@!tImfU{4UI|4D9e$a>D7@$dpHJD}ZB`H|ssG7H{5#-eDl<<_z=WJw
zPl~wPtG~wbH70>z(p)f4P^mblH3=yc8}Q5)NuZTnar%3SuA$Vq>ia3#NaY5~Mn_>S
zLXV*kUU;pFKECwlG~&w-tC%hiVJYR#4$C#mVn%jc5FxGv{PwHeV?wt*^5oy|cAoC)
z{0`-g$~NzHp!e~7`}Z0lb^vWMF)<}&dpApTZHEG?fDii~S_p6Le}sZv&L!Nzn)}uw
z0}?0ThvQI>ZVkv4eB3;2wNP+v>zxKJ$a&=_8?Jcj02{K-J#eBS!)E1TrlDiM;CYp3
zhfGZk4XFnVWN^?X8zEBZ?<QUd@oa<pQCubxZe-Q>FsT6M`rM;4PXYeFd+}k#+_}L&
zP-&HPULHkom;BMgsVJ6;lddb)wU(ZDYsX!${G%7CgKZ7fK#i7X)iUpLAVU}^2ekI}
z+TTa;uuOfvt#M5g?Ag&^m25$X@}C;}SnK5;2XD%CyGz%usP~Iiu%Q*_!%&p<JfGiF
zbsro+;>#%{Z$R9do5yUSq}QnhMYQT{ZdK#^K6cryrM6B{kM`?Ycf@$dNnwCAG*V{F
zn-JpOYdLKEy>VTmPljZhtk0jq&6NMmJ(YwQ-3*!!XdiNpNHULbIZ@3^jHrWvN`rH<
zqi?7;n3Ins5Y!+-capVN3H5y*dyw0Qk)JC;SW1G<tX$Q5C608GahE0Kduh&HJTKYa
zD%}i8CBTzP#4&RQHovnu)#86RXU>!WmDO~lVp@)#=6EiTg5=@9RT=L2cz_Eyhov8|
z{q32i`?Mr}B%rU-pPQqnr)MX(({N;X%@xG{b9qy!FOf6u&LwF;f7qzXo$&e~FK}jI
z`T!^TeF$)1o1e}4fHO@1-!I&K-0mw>bh53>P~CZ-P!rc{J7<v1X3N^Qf=KdMZV(Ph
ze&Gu4XnjDB6)X5cBKChTXD|)i_Kn<$c*6;L(XMQ+HdCA+?y4y@ZGW1+7U#x`F%?h?
z3fFB1;JNjoc5Mx{B76SWKL6xd`QF>CEV4M2<`GA|No8*)z<7Bt_%!h<>iiU9gh;Lc
zGpZBEb*{wKbx(>|W~>QhNBu|@kP=UR;*R#0<aa!ul~|0k8~2njv2t7_;dpdV7dBP#
z4y)|6(f`QGTgl|8w}_`yVn46+I{tMv2|6y2Bat~8>?Mk$<gOj%*Pi7@$CY~p+q}<-
z-!7L5_05e)z5hD4jXB6B@tSur%PZ*J(kDmK*h~qqKTx~lY$O2pPd0B+0}k8iBB(@V
zZQ&_rjFOp@V8Zw0gx}td0g^DcRSFI}u-YDIabUE?`ZDcr*`)g&_%b)S8HPD&?=l1h
z|4!hdE)*8FlyUB;W^I4ef#b_hYG==M*WKN{UH9tO!t(gLE~1}``<4ysBCd#x@|r*&
z;Fi($+yE1=&1Ht<BXwNcy;+Ba^Gb0);0GbZ@HOD~Ms}}nGT2)V1>}~ULp%pU2W`a3
z%KA8a^bA5!|8GKr7tY8R<r``G9MWWF20^LDD^BVOLbdQp`IZ4Y7Mgvs#jj8+OZ9BR
zcl!N`*cPT-mItbD@Jl3%X^&zpeH~Z}+1gBFC}`Ghwr^&#a@}o2raPM`+^Q}YCvvwK
z>BvYH;ow{f3z;tyorvY6y!7KHu>mYJS}L-rO8aK!Qc5j}SNbRT6}yDW7po?q_`E>O
zoQ07H0a~V3X3<SQzf1>yPQQrtwDvr^1E_JG{eC8ZfOyWcxN!6%t~$30XBzD&6d&;8
zUjUg*W}qr1!T8DTqT>k5)o)Gm-6h(%^z!#vgv`yg@6FP^N{OvmP$r9~y+m$i`rbXq
z`#TMc%8NYZ=6Y!=DZov?v7)K2`s(lt8I8Yvm~&O}!q+2tmURjFrD#1>9Gs=U7Y<|#
ztSpo^1k<$)F<o?{vH1dE@rShpOK1XBbVOU{L)Ftb4)prfPQ(jh0N=&SVHc`@adEN9
zwr3L&DB|e;QITXTdgWtZ+;7dV5*3Jys>wi9PS0$%$|4|A?~1V&J5&6-`&yTc;RH2X
z|2@Gs*#d-BW*V<Cn>k(+fLFepd7;L~Hg6FaXm@<QN8oDZ)2PRW%iK;;j1J?iKiF6p
zC<W?HGhd%pB5RwT*@U`E^jEM`m1oJ#PFE+EDYvvN>26k{v0I!PHe`ycH(|eE&ejPn
zvHLMSF`9ETGG8!%&d09vY%qhe<JHVw2HN`ymz@Nn$cyF@zB|3<Vuc?`s_#W6jLk^`
z?A8cFn0blmbZ*{0FUMt0MS7k8%^inofRo#;^R}N4wDp!PZIn+_++x5;yI8ToQM@_(
z89JiUxP})R?NZI^lgSLNPy%G-AcxWkxMJaBcR4U`QWH++{`=PJjlrcRL7>uYi>k<a
z*=a3is)6YpyK)Ehi+grqqXZ}ncg_SBdsTHj9(k>^Tg1AT`PN4O<d7i6VkLju<NRk#
z$etM84erf2_iey1>EGF@5=jO+1Y!b2Q@c1V<X_YU$?d6eS5*3Selh!4K}yw@tKMqP
ztt!+wgPy`s=^w#0uxt$M?!-mb|8?3GNWh+$*&MoF^Ol46Usf#%dE<QO$g!w>Xd0(_
zK8xCsIe%+w3lHl$KwT6fkW(;dmy;8vh02@9MtD)Y);CDJA{vO;DyDgReKDrYomg->
z@2e13hDijMuUA0$UZ=AYSKS`!x4X<I`UX(vQH9nwNzAFmc=4t%%wdOcr%J!uwz%zV
z)lkyEJC3^T_BQ@^vp>A&8S?B$`@NcG5eG9sTC}ZB`neJTIG(qDLhy}Y!DpzEo;7ws
z*{$JAr)%#ftEllWj)FXmvY^LL#Qmri6)K-4`nuRP1->2M<NECa$gjS&*6d0Jq#JT~
zqg@*IL#<?aE9PvMd<CRv(vN1bA}6$80<NX4gv}0N;ri0)IbBcQO;a+_b$9ghN-t68
z88GjRSgY2l#mrsbJ|emDJt0M{p$i}-GcxX8@g~1k{_?usD)QnguZLQ9*N;^cP?15`
zfilJ60tvCJ=!gufZ@r5?vu^eqZ>3sAg6A;@F}cy|^b7|o=KbQm|7Mhv3qSx`ocoDq
z?7PjzwM?O!%m?Vmb$mbjU5qN9ugoM$QhA^_S&ydB6IdL}(&Lguh4esN6<Nf_=3C@t
zV(AOv?63?(*3I7l_C*|LQ2Rf^i8}<SlixUfLQoow*??m}O$efyboeSM8E9qoQ%@aB
z&~7!aWMp_)((0=Y*weiSzRWc~1w8>__Rum4(i8JRPkpT**!u~vFb9zUWoR5@+IGEZ
zX)neEt1R%Sc4M}>)YOAz?)NNhACnBEBQbHRB4DmFGWwr5&EJIu#y5@YR9mq8K2Z;B
z{S10zG!sohV{XFE2MD3GY5N|T!f5I@oMG_L`*8sz(AMNo1i7M9riIrVp{>V*p;myl
zDcb_Y(mAQWu*43w2Knzpa^Bb0-K;oh#da6Q(<HUPDO3TDIcm}&0w84ZF=giK+U2dR
zM9=FhiXz-t!A2sG8C{HKdxL|&l0wBK5mE>|>_9<wTaXCd?s$(bvno@Uw4kVTzv8ax
z*Q-AA@*b5y99j=PQ8Nrcv>wh-vMI=H!i2G1^an&jq7MoLY~HwJ4@!v5xjTj_{C@T+
z{%eiJp%h$ql-&Ko0{KZVY7RiN4uLBEebjgU7f$GdwyLn`jRHW#dVKo!714iLD+_FW
zAQ?t&_!ehE&>&A5G)-?@1Bga1F#il8m&{vM&w8V)*YGXM4{RNFSp>UvEv1FOd$?zT
z<;?fdknQucJWvITCctD8B{0(ab24-vetL27p0a5O&?ovMLD;S!F^*rre4kJ)AaTZN
zyxERrD>d=I%`NN#{(;-;z_X6RjjD49C#u|*kLKI9V=<)P7Q64Ox}Fb+oz~fjTkLCt
z_<4Tb|0z9&zG0kI*|U-{U}2b_&IEG3tN+*#V1_BKrIqG)gbb*qgtXE>p88CsbMpmO
zFayLaTSWFh4Jtc)67OmGF!CmaWni*Hb*6Cgc;7Wcf%ml}SOz8?^xWzyT)XeMEhwG#
z3EO@21W-N9TOEk;(!HJJ*B<lP^&ZEg{RHR(zvi4RYa01L0{VsNJ^hZ5rkoug5afdy
zl154p4WclQ5pG|PK4a`^s<{kdH&7APPVHS5j==kf9Z|p9qGxBS)X3I8jQe4u3Wow^
zt8OWz;`ugT7THC%LQP*$Y8v3#iDpSA03`Si;{QrY5l1C7H-|GMizNwz<yi`J0&V!-
zvm1$P(7ZS;Z5JOXL&7*0zk>D`YXQE;AOwy;sMyB%t^_8gf%JUvF&663H!Merzd8-h
zbb~<Wc2m*d)DrsGo-3dR2MgD8`Qnqc`YId6P}h+UkeD)2Sm<ksbY_+n`L7Ze<_y)6
zp(9%mxZADC&yto0%!vrREc9t3-FKB;ahw^DLZLjtXM&Z&RoMvgJuLMOx%u*9wF+M(
zs}Uex^PwN)m@N>trMTkxkp-`6O;Bnp!A$G)pphbR=R4g8m-FP%KV5r~x33ruOnA0o
zM1$?r{KNpWP#pBhx<(5GbwfbRtgp;)_{$mDA0!asi<#Em4@7ET2pz7T%3?3^ymzL6
z&1(aSG3{ORY$n1B=jxLW4Ov@V*TcLL;tk&l4s>?FyN+;#G^>|N{O%90$S9etRH`dU
z0!cVpUVQ>LcOJg^<KrxP3l9Rp3V!-}PMB%*%bB+1{f%`R^2<S6vp+C>D*!c!;F|ls
z&553}xMXGAOc?p{4Q!o1@L%9&DEUeBf2`(guSS4hzc;**GzyfLO8_Fk2&HmGR-Zh6
z8CW09R45D>Tk|mj5}`ne-F6kTur?x)t?oG0_`G$8J9w-XS3#I=UT^e`>@94QwSfQ^
zb)e>BE%A@jCZH&_$0ORF)DpM^g%z)c+{F23%BIZW5~A{kZ>c?rUrBa`KaBDpB1;1c
zKE1Xtc_(j?_UelkHxhnotdN_(AQ{CBZVi2Wc%>oWRgwY76aJ@c)Lz#2E<jHZfQ?L`
zmM0P7CA3x=hK^`5g{R3tO1=R_ru|Rv=k*9$ZGqdD1Iz~7S0FY8xsj5uC<P2RTmh8x
z7Zu4TH4??zoB+4hQ6||zP{qomLCb2mNx|v8tA`+Q4CrXQRu|AXeV>$Xw?**h9vvY1
zLKx)%7t<y4LcdLnM`TLY;k2)Ql2O8JHzyit{4uCvQ^o0^`*F(ifB1w^T=UQGw$E%n
zhte&Xx<Bnv^wmENI^r1$2(<0~InAi6LYzg9lGg{{U-r<Ch}qdERb^#mX=8G<sC`5H
zzu_%`q|d?K&K#06*6PjqA3fVJNL4srZ`-EQ5E#7ghe*ziZIs_uIz8U-S;g%{P!2Hz
z$wNMu^ZIlC>E%tCvO!%gh5IKS46*P0(w|H%;eLD|=^#A1LluDM4ei_O?LV2CFd~_9
zS#zjgI4hlsNl3Vmyn!{;Epw$3{2O5awk#L~CAykxgkESYH%6l(8USq_Fjt`Aj|o?B
zf5EQ-0opnfJ9PgbcLi|zqXnJ9mERE@E5CS<m7Tu6?*gQcLSF~R#9U<KPdJJWKha4>
zh1YRmE^HBG^j6YbYW5TyT4~WzcmE-R5qy?F4QP@Eh`jXY`M)R#j7l9moxhHK$lpVf
zw88`ChbTB^4xhxWT3zq-*`!3?_^Jt|51w4fY}9N(9mu5CY8}*JqP>qm2^dr~*;Q)w
zC>OOKdIp&Zp&Mp|v2Mze9AcL)F`?BCK|MbPAr0(`2@RQ}*mjB4_Hkp&gAGg|4eYW=
zw5RPp-m~a$)fRh678L9PZlkuQG8#5rMo2*F&nHJpByKJfcuy?bT+~JVRPSGyjrt%+
z%6Ci*JB+Owt1lmSaC9Th6+qMei!9Kx(CQYiD>{S22jWAc7bwmpx|B>d@>}Yp2;GOU
zhzJ{1##c9qWRzVCJar77eAV3%4H}POZ3GZMN<t*@?;yU|r{Rs`tn?p2Y~c_?Dy&Q4
zinBe|(J+qxB&VV&KB=kI2}_bX^yJ-cP+GuEojF_p65}2|XF3LG3M$j=33kd5dM#_W
zEL<&M)9K4XkXxgA!b+!&8!<(2gHN;rcPLreHy?i>hIt(_aMZdt(Y1E-OT!18coojK
zt}Ufq6s*O7zMu7<mGnCDUmb5}by?NdaNm`s0Y>ldNrrhW?(UwTvxHLpUpR}rAvn*S
zs<+*xD<x0qaD<vu-cuVBaAr@QAW)QAWerdfSj@|c31vFI^q9S$#ow61BG1%cEQHcx
z=eifX$*<1%6QMXWvd0Z7QIkzh-RiJcq)War73I0;kq_d%8%J_h8)W;Lq%-&Sct;3&
zJlZm9vfeMR9k`^3!`;u#YA3naCq?wBK{2?{mU+z9lt=mAled@A6xih++sAPeq94RM
z(Q!4E*b0X#<nF0m)-XB$w#|E#)JDM01b&!XcL$Iv#wbV6cgN6gX~URXjbtc(E#g7x
zzjGMV6*trpMZI<I-<^YuxDEMibbK5&0`ofQkGKq>6hFQC;U_`CcIT<R5spNf&A%|m
zJpfd~@D22d`I3mEta#rFI0{jO*HyBvL~Pa@U!Idu60&~fy~XU{_V;_i`i4A}r|||<
z;u^noOUn_}^f|G|`#bD`DB$$ylYO1I8(Wl`%pNd!<yXwvic{>_^9>JyGfZ!O(vel0
z`L7LL=R<IyL$(H$y_(0ouo~Haha33Rcm@(!?$!wXhMIKB34WxD{GzQuDg^B|ti@5M
zX|3i{k84}ON$BwGbm)`=gE&LqFNgN)kd8Rkw=VZ1sS;YOzeZC)kXyt#<KLMU77~T7
zkxmFEtu$(=z9W&S&{h{dEONy!D9P5m=yMgH6=QY#Jg6+Got9i4r8~Z+DoNy=P{V#l
zFqUidqc7ww2dEz>d$w4$FPdF6!o+cC3i|v($7>j#dH+_GvqIC~(1(%S#rTP_%3@v<
zxBit#A`dYtoWz9XvZBAh-+?u%0e-e^zq5^vB-JTDspm7Pkgy|smC1HO>?@%N%p>(R
za=EK@DB}Isr*X4$axPNJs%mfKIkt(RLo)6<LV(W^_)UxSZ=ws(NrwP-u6k$0zK4&x
znhQH7C^sRNUsiSmUNWGs&_ZNrPUC{f?ohB%6mDvwL1sQkEFb?{Jv${a?(J_6<OH%b
zp!o4zd@(yMaEqY>!#Hvo(SQF@6{|R;;tip#qHw`8N=nKsG=Z4}7MH_U8uSZ1T-&vs
z-v8aw_sexq2$BBM79c8nbo~ah)`c}_W0PKR{3f;LmcNSPc=NWcARsAY(xx11-nls4
z`rM?gREm(*?RFzvr@ce*{%m$(M$1%PSH=#{3(tGs;)~S3p?1~W>l&@{`Esf7+2vHP
zno4N@MeHy+1{AX8dFX<H%O%k|2-mYmr*C4MXC!*}<MD42a1=^<)~QTo;*}KB-sCUU
zM5HA$&3uR)TJ8cvweroMZ~HmIj5@oT$M=G|i^|X+ktSOq7wb8@0TBg#O-29)x6eR+
zB2yQMb20g*u`OfgM9=zRN7CX3Gn`ZDn^apGKkkfD-YhOZw$6=7?C;O$%1BQaw>H@L
zevdjAKR~Car<F?P-y@UnA1ZB`N>nP4Kc6D^%x~Bp2YdgM=Z&W$zM65}+(Ep-PT27y
z<OVpYbse7UbXGnl{v%q4Rvd?wS3X#C3CntqEro!UqkeH`^yVsSUlQdh;YahuK}m+T
zdrO7}P7gj&d-m*E9L3lzm+(XYbwT9rslx1wDopLjeKEq&D*TI>DIfJNUy+K0eaUe}
z|NkeGi2kc_)Wf$pRtCG6fkzCShY_qb5o1}~1Xc^`{zJW#fud63dCK5O2VdACb8yL5
z&CONExIg{U>L@Vc^zd-?-UKZQLT_DU3xZLMMt{AtWog3?_^x3oTWi}&GlQql&D<7Y
z>%W`z?s2T`#Hhtrq6=!h!nK;SpC9%;ZR4pF^1f)#=9b2%*Gl3Yt9>@dXTl9_?R!g)
zbFO2RbLqtD_J%%@mlx(LgwklLo-h9K#Ld}HI7DD7I_pdi?9<GL_fY=%ifPfZT&Kk<
zKWPO6{2OBs8$N&8Li^>z%BhkQQ_dR)38vBePL8Bp)+F25+Md2(<q2wjhw9|h<J5`?
zBOfmp{gcmuGQ$J1uDL6Xc`c<SC2Ku*>*Z6yl=x)CN5^h5(JNZi!mgg$9{)+49ej7k
z8mEcy)5{Cr4Or$33BC#wc3F$j>yKc>`ACQD5KyEstQ2;Lr{~GX2;>iwfBxJeI%IXu
z*Ac+@>LqSMh4p@%uRY%UKI?`KH`U;lf#0Epk0@cGfzUv@q6kWR^nnEv{N&jy#`Nmy
zizk>hsVJE6D_UZA;U?=2uWdyX{?FC+2=p5Hct4KKP)tofpkVY7CX6E_jveeV!IP1T
zF}#WBkU#%CfQq6mKLRU-Lm%Iy9BW)9m2r20CnGX*YiJb{<;^Qp!`8z4A7w_FW&CL@
z)isL|wH4BdAIJCS_@JbpLv%bMNP;e}s%6BdJ!ZCWfjfVqKOw;FIi+bNvc6R&Ryeoe
zCc1SZBeV`a|Lbx*NLhsJY#yQ}>-3W-@m9gc-m&5=l#C24j^)j-GD;NbtT48x{#C0G
zrV#>M?6^?wyDLYgFXw4n=eP08dS~%T%p1zc$}^lugs&E=*mlT{gie34H|(IGWeCvx
z9eh!eJJ!}l{X*fjewur)fL}n%3|CovFx$u}G2)^o)V$JkZjbYv$Mvtvxe2oLsJ1X3
z*Qf5cuDrf08d;{OuLDJi6?c^mkBoTbtNpU2eEn};-IYKkCg%uK`=?f=muX3@;1v&B
z?F=t?pA)UU;VWdXXYVQ%9K|4z{juB$E5OS@vTjNR+{qAktYl}&`Y7tHY=QwwAxOpN
z{-}^d$$ou*n9kZq1qiaz9b_IeDcnXb)+&v>#07M;LMk(m{3XyGt8~r&r4^OLE(H_Q
z*m+{ezgY5L4CBrRpPsBEJdyP*k!yYR{Ztm?Y|5ACIG}gP8$vzM0iic)4X<g%UYv~!
z6n>T)3CH?A9NAsx-#qbdco<d!`&KDgf2X9nEyE$G+vzmnwVi|=0`jc-d%g2qf#pbs
zj|X2|XR31zB8^$Bd763QB$x>1bGPki@u3A_v<FEZ<FQy}nOM%Dn|1GIa~>DUdv-`2
z3clBY0-%a$qCQ8xplYBQ<3WqP5e;Y{u#iLFb5+f@)XB@8zCDSLwjG-jxMdfqeAM<U
zFd(FHmSXTlU_2EDgSo;eKailkpY>v7VV)=;6(FD2XP}n?ENGhN9D9uswYq&yEvl4-
zb@1)e0(&4$@#{K<P3ZwL@g!GNoMKSB|Ea)gIENgDXjfLVDnS5`@eGI^Z~|5P;-5c{
zIa79s8vk8aKu45%@&b2?Fg>}PFH^kY!ap}%%0l>~QwyReuWI$22xjW&cCLK>^llz3
zvL=OmEl`pQ`>K3BnU2~@a5XWI!UpOiBqb$nKjPp1@^_APwiR=I<o_ZF^6|w}b&LTI
z+7V?)J!V&!ANSH!Z2O+jZ50qI!nQ?dI{&w~{*HGSMSq%6+iTbxz%mM}W!YvG3$c0_
z=5-K=`uf5rQI@@l3Z--9k>=O}w^WfOBhF-oF_5xSAyjF#lJH2rbQ@k67D_Sq22A<k
zua)M<xS}6B*vZMIevov$>W}4iv(|OJ1!<ReNPsg32yd6O3F#iSC_|HR&inJT7?x@c
zjbg&4ujW0*WqKWjWrV)Ioj|b`*-UY@Z`b&|e~dq|&I>|Rq(%>9&RJl%D3~s}vU=l{
z^1x^!Lb|TICd6i?&Xeq}?G#dCXBeB!^P|?^tu?SP;jbC?5<Ngsje7+Bo1udI0$K8E
zCfVX0=)8xI4P}jPX^&khvUes5#FCnHJ)P1Uh-Na1+^2hVk1EV7A%K#$mkfGZ7FKI^
zuy~-Y9do_6dRX%_vmSUUS0!0lD=&ukuSNc1#v-|7m^6L`-F!$GUVphYF<a2*#pBu8
z**$D*>}SRFnl|hXCMznOPi{KsHL+5H>X_(&9!u(QQyL{Q<3T+uoaX$sE=BPUp!aA(
zPw_vRzYxIe`;b8iOl*aF?fNql1A~hUeuv_nUv{=d{1c*(iYc>jKbi4zM-PPG&x4mM
zblb~`QIx2Y#n!{}@ZIbG2904W0~<{*Hq6~iuVUQC6`j~;tkiSlYxD%wB$BeTSY|Lo
z3VeTVpJW%<=H<)C*q<!wC^JfQ6^|*$(6<$Sa|HUWpw!=V)${&As9d#!{T}oim@$Js
z{A{KifwQ+z7kR_6K_F$<EttOWL#ayTDU*x3dIg~m7d?|hHSk6TK~jX3*F^HDJPTd8
zlK^q90F{qtdu8UAZL9R-!cVyPZVg7ul;+@2icjh{v5vdTsXEU(KHhIquIKivX;+^C
z2vwUW<{VyLDnnqa19jwl``I&%t{>T7UzIv})3E5xeW}^~s(Fh*e8*2C!_u`4#mIW#
zU(pdYK_Bbr=%`W_@)QW})>g-mx8;%bqxgA0AmWW$cdU1e6{Ue)-QAb@SWnKS*PS$d
zbWl1^mv&1MJ{ABnVw8o7#U2E6U5Ss{A4Gcrv4KKiQ2<AG){c*jy@XF+Fc<!4DOsAh
z9<J!km*aYKSx4e&n*z)eIbx^Xce73>V)*<pO@bbDnZYqdqI~ZRIuqE_E0M&b-;z}6
z52fbn)XCBoqlIXVn~Fj08*uE^DkkpEPYSQYz1>wcSMV=>RS}19DULhCO-Z_bqOYkL
z11c{5M??F5l^aE&Iq<7?fPe7YY)M!r#2>TBlJ-)tkql&D$+kq5VZH1cW^wpQWK%33
zMZ;)XFLoGLY-zjAQFQTU`6%f2+%mu_faCBLF~EQlh9qYfX{m`A%=eWf-F1O$z6_y)
zThFFLSse<o0^Ydge9KI9V|z8O5ka02$;OfkUSUtQ5rALiE(YYY%cV5Uc#NuJdo;HU
zCRvb7U$Qbq7npJ^3yfvWKq|kB$0JUXqWd!b)SGV*br~w^kNorUzS#p1doOh1`22h<
zJ^O^^CZwpPWV9@q?cEV?d2RPchA2D`63SD_Dg?IsWd{DCL^-ywG<WrtsNb1h&2nz&
z{d`Ct!VuYT9dSoMOl(ymD%tNe4VQurda&x5$ig9>L}Jq0GSr4QB{>8mF`q##>62gX
z!#eW-tF=S^8E?Zs^Xviy2pDIslxisXrU+S(ZP`+jPXNM?tbBp0gNM^`EkVvsl&YMx
z^w8oiEkO1XLVB^?K`JD$vaG3d6a8lMuB`){4#0fE=be3hyY)a*5+YGiyPoyp9ZwWo
zM=JKaOwyU{ua@|5lux3so<|#)+8yh9K=_ilTr#_i=Drtfz$(E04HWo9JOw%nQmZ(h
zNYWTIS)bl|ueR9|%E`4%vM2(l#x37}&L;1x?k43)YWQ{YCvfvdR48vfrXRQ7z0rqg
zI7^D|2OS>ae&^iekpTwS=n9fKKh60)Ro(9ShGA;|iz}lFL}B1|;CkrBtV`pQneBw>
zrrG6AEwyw;khNHCLBI!!2$Z23+rw!zj@1+ay%S^8$+^lKU5;%#sCM8-1vS>+EUtRQ
zZeTVnMfsCZNA0!&He;d3e=QHX{q8d9Sg9B{Q`vruuC)+R0@jO2X<?pi$=IP<2`GsP
zR}1F9X@`ePvqxk>K<xC1k3dBv%OMfw>AH)=Jgye~Dl^7TNQ;g*J7@7m`2mV7O2Pq4
z*}d5G?L%B#9CyfW;rw22vx0OMpivg2^Xm^`%r7sO2-d%)n(pofpz`waBpqE{`Inxf
z;@jbYzj1;c-U4g;`}ATxDTxZIABgya_$i$4z!4jS*avjTdNt?o|1{0p`HUR3=aUJd
zaLA{QJfa!I5HDB}7auavSS!7U`4$_X;0YR-{}|E-L;$^vd%hLmC^`YRNfNWsIIRNZ
zQu<<PX(>Z!LtJS*7G^OOMMuwUCD4Z#2VndCGtc**X5W}^zcXVJJEn~6?f=E+tIWMM
z4{PDTg0vyDUBjk)yH@a7Is>P|m_2!;JhRMu`1oth@ca;Hx;a@?#r|#*ZEH51q!^YP
zGeJ7un7a9SIp<`Uao|>1F@0dK1v*sIaa7a4LK*HkZ*{a>A8xY}OvDQKAv*iA&M6fY
zT$Uux>b6O9#xI_pfFW#PYW!+823~)g8~R4@T9m-4RsW7cvK`TyH<_YDi1X++;%C7Z
zKFY{c>W9<igTkS3N@g<><0gCKgdb+FcRWZ9C2^5bXoCFo<>yOK4s1unrzK`Te?oNq
zqTwH7gay1peuAl^=2pd0V&R7K9{2O!0O{#dKnVxOek&)d>Qa3NsKTIz$Gin%3@3sz
zPqhC^I~zY&Y;di^f17>Td3vCF;pQ*#<*hL#c!iXTJL;mQC^K`-c}jhVy_ibk-#rLr
zfS->fD!4hsy{(jL6oCiS)n2sm?K)AHy;4%gJ5u57e2hq}S>6bGxk#Feka8CdR-|le
z<p-3kio_bJROx00a68WzLbUPx!`hr)6@PE}vdnEth!ebfoZqB*z)!79@W(t>L`vc|
zQTMgWrzge=5cTc2l~jfXgGvmkhhpLXSPNBxfO)+x_R?FwEfA6Q%NX1fDL{&cU;s5`
zST(3LY5}2Ig=xp$u6l}01fLErxv7n|GY(GJYcg>%!N+!cL@Kv22-Lzr{{s#x^Ys`%
zJfi5hvwUIxmmQRrrJ|4t2AY@;*Iodc<~A8am)uqG`=P!De&wepG;;gytLnuvP7v=I
zGjcjOHKoaN3ELF0?D@usiF?f-e<d2G==m*HLSS<j!gn**WzSz9Lko!(0T2S)siCw7
zy;ll3N%2RSK)ly2ROs}~JQg`S?J^;QYo?@e0bR%J2c-Y{B25-BHs)*4m$AnW1X=fQ
z;1&M((iMI_1c8<PPavp!A+oaAyKSe{lZlRn(!I`|eOnzl@I!U2J3Q=|Y6D#a%)(4U
zHIxTA)nXamDz6!NVM(&4l#~oB%=E9x4*%^gbBh`5l5!Wh%Z04WuDSJ<Fp!AZSaI4H
z`;GDrs?cfIT6df54(hi*XGqrD<0jNE0G%yss9TRWR+%K5(>C1Kn`pW#j>}H2Ad~zg
zn=`VK{)yQHxFNDdG$<fY;~Kh&SRE98mTtA;T5vtP+_OWidXw?J;WlbuSR*|%lduv1
z)PinbO-(8e&ulZCaWaA<%X<^{)aK9jwvKse|6A|B=1L#x<B9$3xu$8?ETAIzv*C4?
zRB^-f&<8<tfIo}?+{H~Y=a)4_s>+4-r_c$H2$u-<4C2#Yv6*W^5zK}9I~l97%mI(N
zu5VIFoWS^GZyk&;u0vU?(YB?ThTicwybI30ZGCJd<z#X=NfB2UJ)dG3da|S~1GkvX
z$JwF1hS<q0$fuyz&>TO%(Ut?Emd5Us^EDC5k_=X}NC1@6wrbN{jVBKL{oLPxV_QzP
zHqQz_&78^Akg9v!OQanXK*(RoNY&fL)ZEO<&<lpH7;t4SOaW6_Qmx>11!2+^HZ@js
zwDEY5>;oi_4h2x)^Anh^>Zj(}E;rJCF)}iWTi|dHc{ic}o+?(rQpWuhExv(MI=d0|
zh3|{f!f$7LJEqX}>%)}#dxZ#@$xG#!UwU&fAnAW5g8&E)hr1BkHdek{t1y}I|A1za
zgh?%L!;439XdVi`Vpir1xMqDKgpo_=5D0ZzG82mzqVN|n?Ygo~lBH;zAF7?a8dc^g
zKmimW!h^4@d9c`|#+MQ-9bS`UyuNp{aIUm>vwD`&uI9?TC)8ax7JyP$M!E!-!IfQ5
zz@=6(w#wmPs*BvYFk}7UDvd!F%oU8X)c-z%lI?$&qQLy2c*xM?Aq#mnM8sf^AtU?5
zBoHOo9gwWxgPZDbiDs<%bo+xLym|a*`f<i%KXoJJa=AP=mG1F|e0Y$V)XP$1KCgsf
z*!}QUI$2+}jT7*gaj64^K1iQ57OXTQGzq8w`RZ`o`#9;(n%M_Yp?KVJvP!29><C}6
z5uJ^GPkwFpG_P_{Bo>ezs(0SrU3$5vW0=!qebVyb_UEN7-e?zvL7;mBxI0%vw$Md&
zr7*n<2L?GBhd>f3YFh($_3Crxmq&qtBSuXGF0Iw-Vm{8s&-KSuF1rWosf+Y6KeRj;
zwP0&FR-UcebhK`F6Qu7zahH6TkGl!yeon{s_O{z=qzoq-YBX}pr%$Sps}R;gu<k7h
z8^b4{)PMwcc7qysR*@cogJ|J`P?2;B^j_*NDkS8cx-W`q%uex3So2(%<(Z{6KVR~S
z8Uw(#7ul6ILVQb>$musiIuf>&WSfeXoNFvX0h=4fnUyVaxZBfsMm*7Cb<1&Q`}eP^
z6;(ZV6pnOEU8R2J<aF(WSIkn~opqf=>1iBFH3Gl93n^$RSn)_;>9)fcvY8BiB7%(w
z2H8>AK%P8c{r_(0B7x-W<lm<nZmvz~3EMyKsFMbSW}bt;0cv$jfFnhL0Pmt;sOF{+
zB#267O9$kyWv7v;zjI3EEY9R8FKV0xzL_zQAU+1P+FWrE!H;o)m=+s#{lGil@jCQ=
zD(XI<r1jHnunphj!V%1b;*=Y&^Tx|dd1i7dGulq6=6a>LUBQEDGG8h@UjO0FcIjO@
zR;N9m70px#51z&t{495~`E6giw}yZ$@jfS8B$cc?LAjM5@nHw0(TnVC%QBrUwc`_!
zu4K0^3b@60U`;n|_;2%6W|U5mpSZ$^-%L=yEuA5CinwE2vLJ8S-@a}mbrK1+bK;VY
zqM#~l&=8fjq1Re2aUcUaZvqQ*1ePyUpQCMiSx>Uvsu4HwhEs{w+!M<+8y}Xc!3p9!
z`v>gcV08L2;aA(7!M>C-!G3gXshU~FckHC7QsRalBArOfxzBez+5nFj6|VZzsJsKi
zEMZ3~trpb17FSnkkWTGkw+&LmO)*z>QR&X*c<SSqy65eSX_<<*q$743-HrilG=cx0
z6sa+8)k$<^Y{nxk*BTiiLnoBkX~O4lKpw6QB=|*Xioq`R+AXd?NZrKehb`7X|5!t<
z*q6~uSWX8w3bkPgYA2|xjE_1;=I-tVpXsku!J`1h<BU%wlL<RJM$qf+V;{$8Qp9Ra
zjU;H8h;aQbFgKEqC_HxYSr(<cdND^z{Ta0-G_1ZpdvP%gDS)M~$BR2NaNEtb)~^&F
zRF9rLe^PvzhE*CU*izpaMSc%gW~l)#pvGt0!Z110@wPqjMo;N=d@fa!e2wkqPNXRj
z5C+}!gvcLsln3mENKQ{oxqMyeY!PKIbgbzMM69Z*396IBIGs*=!{2_RM;v1z>AvDA
zou#~b{pI;Xnl+gKj(XT!1<2+YkUw`wOVH(51>(Pf{gJypyYKb1SAOFk5j@BF@;^a8
zox2XhDc2Xj2M?UFBYQn}J=49O;YG?TD0G}HqB^X?gP;Qh&yl|n11f1sEU(<$vM%W@
z5MJ+mKS_J61T>ch_6tDOSCNsG6*8VK%VBfiyEIA%(Dm}~{hOPJ@}tscPrkL+J_Mrw
z2Noa1G`2ST(uE%Sd{|4IW_fOs_+}yM>Df!TO`vTL7u?0wK0UXq*yd#=X@E3^XTe!z
z&NHfAi5$lZL0mP4h_k>SH%Tk7%1<B)n*-mI6vBIf+v(I(iRK!((1(dAbgYn3X%;<^
zX5~l|6Lx08`Kqp;6~lo!6on)1rBC^DL@Kpq%_Vu-TZd%3N_-}RUM)bqO|QF)Q4-3+
zbrExUb2ag)mrarz=iXEZ7c}M)Nl9xk=85eka}m<57d^I(y;AfT#l%45FL(8!9Vq#C
z8fc-=#|Wqq4Ezk%@^ZI<g1$EAfPb0H^X)y*`!(o>bEdyX9hqD_zo1}#`G2xqPT=&n
zhuk_Vw<UpjrIaAS-E{ZY@SO|&y}izPVLe0t=ycAniD&F`T_Q`gM<Q-UDsamR3JWVa
zpL9qDKZAC;Y6G$C#r|N#7eLN*Wq*K#0bYq)mz5mrK@j60#vQ*@MpZ?{35b&9$DIQ`
zH?xHIxywz#j)6cB*)!>9UY?GdG>1Ly|4roB^Do{O6OCeHhX-xM;B3%Q)13+{rvvD3
z4QT2Y;p!qcp<yWZQ{7i>+i5?;K}Ad#?QYk9cuB9z&N<ehWeDhxVb8NzM53h7bGx3P
z-r3f~im#y>dlvj{+3!smfRk+}(zfn?D@S{3;S7SHcz(!lsGM<1qp$F~;YF=|b*tS7
zm%A5tQdqL@xUPt3=qBk3R+SLpxDiJyol{(k7dguF4k@_P#RBgafbjYGLdKocCe2og
ze|(&1|B^%hv%pSOvScGR+&IfVV+^W?b47sioj2ufuL_$kl$u!MQ$twqpPg5^85yhV
zwgG)rCdkGisR?M67qn7?&m8;yX#xDjda`iTvqj~ZnVCt(SvMnD-~urfRKx~OGP32g
zFD*YZs_E@P_lz|FYU?27NsUANN9x^;^=8z?l~2QF2>Gr=Zyn{4H}cOE+I9Tg)4<Fh
zX<oS@wA6Gh97&x5qi`nxm2YltzO;lhMy6BAy92yUi3k!$MUJO)c9O)Tg?AzeD&NQd
z?zewHR2{pD%<UpD#}ivm)MDFR1}an=OX&c#mlFZi%u5+&TvO!<;YNh72{h1JtG#Eh
ztc4{@(fVIHM2nCOJp+`6J}r)G&l{rtY^0!nI;TdmeaShp{)~G>ji-{xBy3pylW5k4
z;gz@#XRZMQZh*?IwN^q=*$fyYv)W(ffx$wAl>X$`Pojhq-)`<pO0Mo$IgE|k#s-#K
z0a)^SdZZ-n2&EMKF!#(TjEoaGm0Ss5tgvoh)N7oj{4_F@aw8Xu97oc3X0AkyN__C_
zfK%59ee5NYQpq05PLoznN!+Hgm7aWXcsgyr#7a$X?@@bNzwN2Y5!u4;@NA2)$Hy9W
za{;hQ0^+NzL7XtBrR-&`Q{L!f14MftKY99bXbZYQ^cQ%jQWuRyNISjNpOVsdYU&3l
zf=fKg3Yp|rlxM<lb({rH6O%Cxel+5kr7!u=DzZ3ey%K>%ZUBKAW3L5r+_PR)Aortd
z$G<aAWo2dct4D9pX)X?`N5-H8C|^qs=n855KTBkR^kQ9JoKBTX+E>M>38Gm$Ea#$1
zPz>}u1j_Rz`@6?ZHW*Y=QwTJ0s_E(bROC4H&c_%EqJ!7OutEg^&8ah7+N&s;>2F*T
z+y(|hEkh04myFfKK38UK87*dm5nS^(F&|kTPmM3I5|^Ki^#=rZ<^g6-LYuFbMh)TA
zNv@%Ev`#xR+jY+C<6Aaf-o}?8Y0kVvb?55K^=_|t40P#-{f(XlnaWf$ys1F@ts2|L
zMi%TcDUx6ysRC9;*#MA5{%89K<`&R217K}+Vk=j(0&&^OUJDrxoc8x4&GnmXT+pBu
z@Yr2|nRMg>!@LoovD9DZ>#&QXsvG{18ZYQ)WWqvr36F?i8X8kV=lFZsDUuv`VkZpi
zt;6fgOrPdjiap&-2#Tl3Ll1UY!5S$CMRH+yOGD<-su%hE<wf+{Yp9VrpThjmb2Z5L
z4O;gZVXW%lk)3O$u>7q`rD+1acE)QXj&>gr&2`rGc<o*kmIuuFuuEWDWg07*!}NkX
z6G!eiJmHK}C#k#Cgn0!C_*yb25PcI9NE^t{QynwLs-}-gz>OrGVCaiyzYageS!M;c
zLPO(d^Wha^M#L{}Od-ACKaKHGiI&#i-+|8>XGa1@t#7(uyaG5l2{h*;gbS2d7(qpi
z20b`8(AvUa=lh%p6sg56rGRVdBU(6+iYueg#JY)pXBYl+uI^|4YmR#^fxCMy_*UH_
zX!yiCSIbtr$fa7-A1|v<`kj&JdTDi<?sv_H(RfP{fB0bKOY5NJELIx+83cuB7JPPL
z&sf;m*%_gTG-IP6{CyteUVFON{4W5hg&F)CHAxt{LO6W6JQ<lBF$WsbKVE<N^5s#+
z$3$H_TK|7?fc@ynnpq##zGz@cQcZ4te}T_LZ42MBkg0a)@7JgR!iu=_Z9XMZWSQcE
z2g59qz4D@GoLN09m1o}mk#!`hm}I@m7UhEM>{?L~kdkpmO<)A#XOdcfZr;E>`af$z
z%zW=j0|Dm=NxHm259%DUh|KZ!3i5nln9y-h&G0uF&DG&g<d;zCMaTU*MmruLi>$3u
zxdt?AGXDipR-X71i)CctL?{`^{WBL&bZsrb&eETt4JUxHuFURcP?|3>NCh$i`jCZ1
z??kzWsyH|Xg7e|(8+(cF>;>}5(#sXmo|o-7(~GO&qkVO*ytt2zId(^Plj8jP>(%H4
z12`0x>g9M{l=bzO<I%__VNbWiCO!|3(Yl0h59#p9qoh7HX1(tZ3CG4JkWA+;c&bp&
z@?iPev;iV2+AVe}^u+`Wh%jcBlMOoQ!LO{;4g>I(H9;*9X8mEiSt&U$j}{<yNQL_G
zUN;Y*()YNOsZQz%0U5!Hp5Lz@06Gx8f<P*kx9Bz^>6d{MGN!hy*gGnqa~Hk)E;=^Y
z4=B)YF~#+g+CZ#Q2hNNVH=7PlLXoRABK!mLi+*!ZgC8|4QNK`S2ne`HTm8zc3<R(I
zjzbf{qpzL9kb9mKwYxBoQFJ9Mf*+dlKWFCt69@TQ2k|K{SrnSUX_Z;F7gWJgH+Y=k
zggL<dr3R{DlM3Qrb5>fcNoO>hI%chon!-k12HYtJP}pIV+*YjZHwVt)kreQ8_U(1r
ze!^0>pSKhPfol*}Dc8{_hd<G*pu@Sr!&Hyev$zqwx+-a6;tA|z{YX4L`u6C7SC(~`
zU94t5%QVkkL?yoj-C|A-DQ39dp2lp2P0QR-NVVV3V?FwL(ILg>>e5-<>gfm_4FDYp
z?59|q&=ZROkb4*o&<X>~9FJV2bZECRCW@hXei}%m+9LeWRTc)E*yZ%np-dZLp-e>Z
zx29hbo8FRt|0=~@73;St^$*33meILb%R=*ys?<q-1r|o2)_(-?H6WtgscYq!ii-&b
z0X=F<ug=XC5*xKV>XvJQZ&t2N*i7XSJEcH*L<CGTd2#qm1Yj8Ks#1nT?Z4ZLARUjL
zZ2(?jYGcb-^;NB^@sU2#jbqf0{i&kW4^$mJ_O`bFsZKw<6mVIt6!)wPTWs?PS{Tt~
z(+3a4<AvhEr2!Z~0e*#jc4;X4a>f<DKqH>@EIdWMFRB(D&{7|@Sal2D{jQ`wFfx8^
zJ(gDQI$%}Nj^45OVQq~7Z|qDRpD8dyiChq>uWUHsr)@0uAqW}FC@@6J&~F0a@>u`^
z30v3Nrbk*p2S^|a?>Eks?^=4mJBDxiHeZVEul4r<SplM)twkJ|vfKbeR+oNPlz*aX
zGF<J{|KXfKQbBw_p0dhZDpH??^IvH>h=EnlC=B$lSBPU{64ZX2jw5%%q2Ils%yZS*
zrFtM)xw}`wr)S$3h>D78bXodUemIe|Em6BP23UtE^IhKJ57PokE(MHQcxrWmKxvVS
zwsu;+0Q>66;8^qVMvWEd+QhcsZyYh2rtxw}uAiSBC6JIacHbKFvkt7uc4G&~lC}|5
z#H|dg7`5~41=>Y)Ge(XODMnzFMXR_o!T0L`+VF;eiF()XNq?XAUr6DtP_n*p8@C^F
zHv(Q;{$uK<ro)%V6jqLzxWErXs9B#l@=^`gwo{p_$;4i@9ZywPa+O=_&@cl$6+-B8
zNzhF}=BO>eEo>IHxf%Y=T0K!seJCvF)+X_%=H0kEvMM*Vn@9$pHl^+n804F(v}VAT
zo>f1Gkn7Y@Tln57VKLYn@iE*w&`zBn7SK1m-Reld#m9J{VQNAltAWTTn`^8%$Kp{x
zAZKOuG;|qwFA&K|gCjeeY5$QWP7#4*bx|c2{Dms2a`Ia*PT9es>=Z7SOZ&_2ZlHiA
zs%zU!M+luGNe-?KxNb4S*hs%UJYi89t{T$HOpW|S74idfVeUhRLMOA~>R<{Vnw3;1
zKTOmfX6ba1(lav3qsMS>$mti|Z^kQdMkQ4T**QCnpdRD%F_P~sQXqzgG;ZHeV=H50
zUyVzl#-j1UVsWbE2ZF@tA9=^g>Q<fn+^VTe2Y$o?Wa1L%@ryt`Olt!zAaHLQ^+R&<
z!J<AO8{mob&!gY#PCcPEb%~Lly^Js8%26gZPaBn**+|7g1Qen1X_L2qn#tv8m=vIt
zUuQMi%=@ABa`t^pOaSiZkBW<jUrLqB+)pJCyfy*`t#{90uIt3JuJG_RPOAOQ1#`YU
z(*SAu_eag)&8u#<M%S$-iNI>p8LQhJ>r^)8d@GRV=Gy*@{qz$`-(Iz*^E$HgP?0?6
z$9?P1rQ5RWPegPc-dB<Mt=<?J&ar5e2J&%m>i8_Ww+dw9!kCbS5al6Sq8S7M$Yw9;
z=;$;$H#m2F+@;x{2ZtdgsTXT`PWWx~?sP)e!{`r=n2g4aMJ}_S!us6+rr8TV{bMVI
zW%5V>q2!QkjtHF34iHH&jv5fZNEG$g`FCdcfYJy2og$29p|6Rr3QcZMl}`s8T^5Xo
z*WM37SB~UFQ(cMx(ALTTR2iM)`6mq=Q+(x8<c=v2^@2Tx1zv~!QkJ@(U9~=KaK+Wa
z#-`lD9~}tRcG_X!Gb{&JPcr!9u4<JN?VPc5Ka2-<?>(%NW;Mk1*28?LYE?>#F8hTJ
zR@L56sT0dop;cvOS$-s1|0CdxpukPxvXVSE$eUA`byV-F4H3E^wFu=0cn`Ae5e%Vz
zs=el4HujK|CS;q3G8@=A7hhTl#gptWgvAqP#VwC8ex7KM>b5cMhfelk278SAJ}&7!
zDl5-265`B94*JzG{^A8bTowwg`W@v->#wMv=HZoGSp(RA?ss=ILs4mtJl)hm-UY$P
zvO07Rt86VI*xlWkr~8Q^$d&eCcSA~GT}RzWDA^k*mtS2?R<p_xQ&6npqCV>jF9O&k
zuEZKY3AIJ_thIdIjVJauhtfKvBsTs3UNMlxM^K<`Y*vPOt3^q@3ELu)tHn?E*GVz+
zkpq%JY)p{f52h7})4`{^Ti_l!WpvoX>nwcHuI-5}j-OkO3;CvS8C<<+Hu5G+gs=b$
zV7bS>d3>fjc)2x}8&?<eO6g%NB*Y6m#!**x{-ooFb*)H1E^bx#Sd3^5mH_pS9AJfC
zI~6taLGHBOZ{@$zgjvP^OdRafbL^_4-nIY$t~F56(C(XIRdG?~OBoWsI4{^aQi{}H
zpoKxmPS>uZ6LbBO`rqS3I0IdHP-NgRi9zTs-zmv%@#zVy7VBHvsCVtuvd70p6iA`)
zlS+5s&e{Id$g?m|?mmwbjPTSlkzzMP0qc<YJT6h?>Zq$B%-LhTQ)8+c$e|zjet=OV
z15t3hTy!$r(+g5!MRa+{DJ<GUJ&oMf&tJ^F(mbPgnR~@%!OrJCu+|@qkoqu?WHmTe
z5*jt+5|`IkWBbOHBvRA##0YV9B|!eCyaGY%%cDa!+TtRonm{Sd_nzp#ziCrH%z+k0
za5F{{f!(YH=T{Xo2ijc&?FM(_()o~(kUv93Us|Z<zusA+!#(WkNR;m_U&b#Y-*j*_
z2C&TQpS5Z35OUkn233X+e7ZJqbPg05m;zZgQTleX>-etR1lxr1t$Ez*V0a<rh4I!d
z%qq0j1Ywn|f$h8`2Ah^TZ@pe3aJTQD0xL6Kn46o+GK~lSuUh}Vqco^Y%<aZw-#xiH
zAQG}2766)PSIaP@?ADv&7Tt~<7dt=%UJpIa9iNPoSKtIK;P-f2Mzs}@y`GM)vDh#&
z95@e0c*Fy@=Y@1`#~-V^nqeZkm<0A#pC@R&4x7|IL1#KBltQx5B#D=2OIJ9kJQMVo
zh{CnbRhCofyF{j@<MuW))fqp<M1yXK)__pmq?D%9^6Qhu+7F|d1o0EKL?{o3|6DHl
zU776X(b~O{oqUO3POsqe^RZ8D_hb9@tjq@9PTlWRdmez-$W21YzZ>%HS>T`lkFB?i
zi!$2Uhh-d;k`9sX4iTkcknZjjNokO76j4B0x+F!qksMJ8Nd@U{q@)}EdjLJ>Iq&;r
zetsC7``&x6*lS(awH^x__KIS%dwuQX`@XvM$b-$?i%+U%fxhIEEMM7Pyj^Ir`&ALa
zAsHTsjNVe-Lq@ead3%DeK4MO&thl(?7ifnu91r^sTz&0NkiSiq%br9gyR_<JrWr_x
zUDIRxmm$o}FWaYbjm(n-$(TTrpwiz`*P+rc%877uMUV?=IXQvvj3#Uc?^R#NzgV?R
z4IjSU`~5pth;j<f32tSjE`0d5<5wK1ar-^q-M_b~Ye(k~@SkeE97a^g#U=5xg9c%c
zp%vM^NQg~MhsC&y`CCyD;OHJ88N7YN{R%9ia~5b5HM={0gR%>5RK(v{;g>U3{apSV
zBm<j;9|Z5d%{6q<)x_!|_Ek~W;^AduSNfJ^B^QDgue77CNE-t#3&Qdb8OG7chN(H9
z9C8fMF$f!X4r7G)>wzgfo}xlc4h?7$yypXK&XOsYPdJF~T{^?JdV6aIWhKASJK-Ty
zG9C6WfK-p8JG*w()i984892p{em?FtKTz<CLv5gEAZfDJ*?i<C_@w1!#!JrbMb5kD
zlt@QS>l-h~XSJ>!NU1WY&`c3w-0H1yK&gAAMTsZ}(54p+n{y4lo4j%|4oNq(0$kg}
z+Rtsquo5t!5CzN`N{pQ201zvx(Mo+Q-(9SJHai33oUAc@5$@2Nj&f?r{#`HQL3Vcb
z^D(Wjo~J-edFUAJGfjtN){jJTnQsrQ+NXw;SeTjb3C3W*`Ii=4?Z}~`vB?vOFR?8l
zMsiWB?<E7Q=hBi0?`Cp86ytp6bNg`%FqRts;!c6!;;B#NP8!Y~YvTs}OPI~{8$H_C
zz!~Bqm<GK`KhKkt8Cb`Q0k$tyU67$9dqPsidplxB%I)1|RGQLkWD|+(c`o&5*pQre
zJTIynV<a`3F29Y$O)1puJn~%M=YuRCy>uz0zDaPR@G4A?l#~3btD{py4|Ts<m{J4K
z{>ghbw~zG;KFKgf9vTlp0n~z6%ulpBu%^^$6E&Gf7Q9z0&5sLIGLvdIX&JNJIeCas
zL2r9<CDTEG?02R_=td0Q2G-_oAgghre@aS?ddLT7{}*O0&#$I1!`~x=p5G!CxnQju
zAbl|Wq~7T(avyjC!2(FD&}_=1qw+gB0<4c(uDhcFP-N5eUpT0)pJx|QhYd^nQ6;Ln
z=brm0o!Zv<qRGI!A=|#gQ{7u$tgd525#&3xi1D@X4u~FYZMq!JD#LvJsgNRO?63(@
zdskP3WOdQ2Z%t6PB0|oPZ=DA&SREIdSP~b1ZRf9#qtyURoP||0c*n_xR~vgG&o-kF
zZj(y5_h~>eudoRR+6AC^CqtYfpDPLB`c%8SZd8<?taX3!%rSCVU6FIG`gB7HnDPqb
z>?Bve-b~N35Z`d|@qF&;#wzDWr9?yi*<Vb^opHJk#S70gUsa1(G#s>!rn#mP^;N>F
zV%pe8#*gT9T2>*FqSnQ}tC>2&i?5vr-qDb|seFAI0^3G*eQ2+#)Z~@_40C5c&f7=w
zvfb_w3Xgu<tJ*g@-+}fFzw%MyfYwAu`29zQJ`d+;FSGAy^#H&(8wUhbw>O)XKv-aa
z^GyL6(wym6Ahc6tmG`C~Jv#8M0l-G()$*fa-Qr-7pIrZ3i2#lu&WILDp;5DMFf@ry
zBKmEpoc=~g2C7pfe(Eq)db8pOfPV-C6vfNKBuLlSt2R<AK+KTBUD`eIa`KJgzR`Y6
z{Q%KiCf8)52A5;v4T%LZt|!~V+Dnnj;8KCuG*cvxh$&iwbFRA>!c-@zBnlg88>G~f
z>DIXdpxrRcK-p$B@x?;H5c7Yw%NK|7o|<_|0k_qZkNqf}eFVQ^keG;iU7c=-zQysk
zKtUW>hBHJ}{-A|SfW$2>c5#r2?N4f^V<*w`;@g121`~wvyk$m5;2>umXtxaoJ1gXE
zAa&#(GEHBIO_vUkzd1XV^k*H{JPl3I+(NNr{?iOB^2j~TjCd10yFHi+^Se`rU<Ad!
z+C%E(1G#v4q9>!Yr47dfd&g}eRaVbmUGo%$AS^t+09`#$z|JHzj#v4G=FY9KRb)po
zO5p(i*_Zi;^V%Rff&~otihK*>ZX}&Vp&z?Zf&tA1!z7i^Fg>M_`=kBUA$t>$`P$ys
z7IIKiQ!5Mm@$I+ca<dwwWN2{kyg*H^56tMh+yr?*Lfj%y9XM84IaJDZQw-Kb*^TZs
zLSQ875$s}}`!~Skw96w8j+7~dwdA&x*;g^t_9oRa4$|o8Xw`|IKb=1Oac4b(j7Cz4
zg~vXzjuGLe0e`b9CDnMV;e;+TD*+Xu;!vsy6W$!?IEzqiIF{is`ZKO8aj?feg>)vJ
zNxs(9E=0B!0*qe7gI_HAf12d5jGF<OJMqQQ^lqE=o3>}mUKZIyn|8J0YNHQj)q=JS
zRG!_Q_`?m#SK=@<y#o!;=e}EO`W{|=zRvoe%iQ#fyF(6XeSV6=2?I{r*!A>PleDN;
z=cx4{e?Di_son&IIwAJ_NfW8M>vo{8<nNWy`wbke1Kd?dwT^B2B?C@I^K#LtMAAQ=
zucM!%2w=r`(fw4d%TMk(Oy(C95=i{QMF=UzJ6tW-`(>e*PcmEghQ|1Eg~y<pb{={Q
zW<LGZTaAw#l;=)pOS-L8cYZKgrmEXt!2$j>`lrnAl8L%&Z@d7Ykxiin2qgonp%DTI
z`pz4(=jk*&pfTr0m%(k39z@<HQ{MVH_=>y<ECLAvwy(FmyHdG&OC<UxW<4Jz?c-$_
zY;i^B$orAu;>JhJq;0S`mm#MX1{++Ls;881erf3?x(cH-_QLQ@T+`mRv9lAF998M#
zCuAL^G%ok|_Hzj<q*2&-w=s(o`N?<!AB(gT@jpC5Yxg?9B=(Ivy~x%dKNTYpdtym~
zY^o>Q`TaYydGhyG8Q!mb+io5A<%1n&sICs#<w?8z*bsDf%wlXP-8?6dMqHh&qW(No
z$thN;^Ig+Y`U9rBgMP#_;d4`fH%$jO+a`eFUn-}V=dj$SgUZlELIW}bxAV7aTmwk!
z?lYr)IdXpe;kXPR(@&#NF6Iv9x55khDXJWLFMW}>L@2q2?Z|gex#v=QA4*^?yT}T!
zI5_9R{U>P#4wR0vpm}@`V407>>fK=*8^GK2m3#Qgm7nt7<E!Kx4(za|3y>z?^b`F0
zbol;FO4F(=`Uej0cy83I1V54%X)Ze#xJq=IsMn6T3ck^=%o1n;<Uy6Avm>+>$tbN+
z=1FT}v_8B7wT|<?$ApjpKpQ5ai!qp9t%@K^DI(LyqnBT<0$}Zfg^C-uN$Z~GmH??M
zK?WfqpJ5>Ke)MyS%vti9xlgJJ+kZ!@;FvG=llDwB5q%8ZwHV=SZI;%fhM+{rGRG_#
zd;Z%=oM^fnHfI<SAiDg5YzteSo;f=EgZ_Qh%@)c_GHQSr`duOpKLhr#ogtve+gRnf
z_j^%{XHG=~&D6qTie`1o*SBjTpRd!R>l5$-6{+_q94}Mh|4Lh?#RD?$n_1Hq&-xsc
zJWes>H&IuYV1M`BBwqG?x4risR0RAy2Xub(yhVX+>|Usx^TjWos@_ArZK8n_#EqG<
z17e_BuRlKiQ<dr4{0kZKQJyayIg=O1vmvNbhQc<Qa^=x!!WM_?K+yYndF##`FA^K4
z$94i2yWm<|$EJ7>Q&RD-4iXy%!uM9?&{k5fdVc3WSkVtj=P0LT16;=9K3K$0E`J{e
z<Jm43ydGK8-rxhZr!?|Ic5bs){YvrugdcZ&4%J~=0sQH?ilbK+lEBVs*_Y9^xVT8N
z@HJ6y-ZYmc+xXSW)4ul=P}Ab%<J}eK)D*^rLb!aGq+(BJROT8_BA6{k$Br$dppY8t
z&a?ZspkR*PmGrO^=z1}Ma_ToH2i>TVv;OoW$o2@ES8tlom|4ABm_Daz(-BSIHSQ3F
zRtz?{BE|5Ov~^h<w%D>CI4Bv58?3?`J0#JjX6}KWh>rGKx47#DN+n@rs2ws9yFPE_
z-UC6CV1IlWm#@b^!pDj6z}q^6_>)eRiJIIGneK_36O`2|)E0e$nI|7EHg^|+WCRem
zTz+oBsaJGk8g3_#JaDf#WdFHe!%YJaxrc0gtIzhifl_*We34Y8{R*>ZzUrvQHnR8k
z^WGhx-{me3(^~pfWiw^~+UlDFyJ<m}9P~CWkYL#m)G}O5Rc#;a`7qTS`&HkXUHI&B
z_D4e_{Y*!-ftlC}z>&$Qm(Ydc!pgh_TU)^ISse2EsYa;4&~#UglzaFki)bIB-%|Z`
zCr_m0_+WZ?hBoR!m>lw?&QA96P!fawJ)tL8rfA#@Q;+zdp|@Co7tUHLau-V+CTfi(
zpZS()*)uk9@X_&uOZVq5fE+HcQJV&uq;=vUocc_}cS)-9CFxbWMh|-#W6KWw&bONU
zQ~tP@4JkRra%lQ(oFzUtc%{pT|1rn1X?3xi2&t3bVUzy{QAac_@TYy@2r7>{(=!9+
zG1X1!2Sus5f(sZ(3hcAn)iy>#^h5=p`iZG<F13C@1pUfPx%x+R+heyBu<LttkrL6R
z@YiB}YBX>Gp0Ox(L))u2w2EpScyz&lgGsMV@s+nexQkKr12Kg$Vd!jEAQlir<9m@7
zw$lUz?qc)^pZ@tW^=^(&7xQ6uJcq9D2X7BnVWg~ts)n?>Z#CR<I<y&`ZuS%o4Pg>>
z&yyql8;q34*{DPbuR#J=cENxuPpoF=y?G&WvSAdoKkzeZqI&H${xZ%PL}7)feZ=`@
zlV>yqc&sx>ov*BAZ?P?1jtBbjfecfvmAX#*nM@QCqz5}eSNXgUU-Z#ns+Ir^^`->X
ziDe0ETI$K~ftC=W=*S5cnY&+V#M<4O-fsxi`E=IYpq*q2z$d^M$d|5EL;o?%A3)<t
znu8#85cC~RcJZ5e?gzpv%y>S!xX3j`qVZjM9^(Rd631jtMwQHiK3qHQe1^KMESRik
z1jlIt58u^c=!*j7N!M_EZW0<J?-UN(w)S|P5hL~rpmN3GH}6M*-fsOg1fMx&)hrM=
z@0gYu2i0QPH8Ux6C-inN)g<JzpLEx;GJ%nDEF^T^gg3b3n}cwai(B{`gZ_6C08Z!z
zs6Sz=V>O%Y)o7{O+}u~QTtT`Ifs|v4&;@+c888iiQT~bQFlhai+Q2^89=P<aiW5DN
z&Eew+83G^ooRu=@{BUeFfys(ZRaI4!!ItwD;v(6=qD<3f#Ts{V5<P2jw5Fm78ZnDV
z0~#9PwS(bq7GLHPI}QYd77j~g$d&rvu2^k*q|cd+^E!XMx;Xv4n@~=pA~D(3OX1!}
z<E>_%J^ZsazR@k4T2kPTzdFF7EK9NWCL3T1DA3x4YkwrKK4$A*npaHWDxSrmz>VaB
z#G$054la3x>Q+a@?9JoEVZicQHKs0hr&FTrCj^SS%BgRt?lx;rGC0pvE5iDB3qV}o
zdbBE;VZni#&1f(+o%3=$O%BlPLUihVaNkU+1}y%u+Z%J^P}%Eti3=B7x^lIL5(qG%
zugtG)K|Si$1CeoTz?)i&9P^pt3$1qZm5IBK#f^{`x9)rg845W&L-j((oAECT;x#kd
z3qS5hs~BGt0!fBRqlHhGm7XSi_eOxz58&|I`h5YYf3LKhX|9KW1E?4=1VMgeo5KLt
zJa0{5J^h%l`@}R)0`OKr8}v5DU59Nz5)f9b<@rko3NS?plWnC8`%&h<W<SMF<T^6o
zD7UI7%}TH~RWr#Khhs{9{N3$=7?6!AWslph1ozQ?Xzlb1t5{UGfy?lYdhqx*cv}F9
z4SV4_8G91LGv&P_k_Wg5ds@e))-`|_`zRb$woCxC^?#i(I1b~~oMok%q9#5*Q)m9A
z>AL*oV{x`oKUA$ZnqzY#-l^?1Il^xGf?t(F6VLiRGy8Kq{bTI(h+40a=0-auDjE_I
z>iiN13UJ^&hFAr3>}X>e?`0qQv$Os9!-`r54}phTqzkGJeUZ@IRY<?UL9zTz{3)Sj
zY70iG8Gz4(Rj%mBD_Uq6S2G5tWpCfV3&>??>YJz1XEQHWO{Y-ob?s8cW-pzILmE8p
zxK~4czY@wFz9;|O)s@FyrV<?tAHTs6cI>v%fxwYD6v8jrP9=t^N%S=U#-xtQZ4jb#
z5O;AR9kn8?`Z6=(bX*UO^6tfEV`p#cPOFC1?T$0fPc<GfCWBt-h>wfB42fiQ!5`J|
zXM9h#^_*Hv$Jhk_$OCz}#BDdO$(#9+*TgJ9yQufq$5^N@_u0z@-q^wmXeNbT%D6Dn
z&^$G<wOywvV}+4iXQ-u0uzlk64qwBQQ>=TRW;3R2Pc)jeJ{)ehysJk33^zh;-``u=
zMsH*Arfb1M(dM9Bm7LoQPksO;t?+$*>-Hsp<vuDj=hwH^vkr!I_41NI?e<##dHZ^|
z&GTg-`NZomialfg29CHR+1S{ezM)I)zh=2y8N-!>n-&WIHRtuH%D3pl#0Q!+D?5@H
z(R0>qmMShy#rfV$8?nDW;$VUEBm}AZ{r+*(0$s(9aJ$T^&m`715%&llN*49>odBk%
z-$fV`V+0hw-&Nd^lvM0`Ou^%`|A#_}N&j5$K~~J1L*+`22Z!7b8@oYNbw%=n_2gVe
z%!;z`VK1S)b`on187o8SbLqF4wBt5}AMB4>7E$h!BUzxag3bf8!CvWu7c|UQ3#ZR&
zoT98-v5NQ3N4q$*!a;JmKIvI14vI>x5=?D%f`}Uj;gtbPpt`-tsl2~vaaWSV91Stl
z%HD0p;jqB2nN`?U(AY-GNes@8#1vlf@Gi!p?0xHAqa(%hLG#gtuG+uL<4=VAv7q20
z8i*Se+gSLp9_{@x2`BGbc{1YW5QR@GVkC_I=gGheJbBs6zt|vZ@92<;_vx?z5Sd<6
z<&6w^-h$7fF;wsIzn^(n1c?LX0xbkipV(<;I;J7{eLYu<4_aZ&_(L-UXS;`Bnd!a4
zGfT?^&<2V-7$Pfg_VJu*^6{%ckgS$oDVW;fS=!n8w%gvv<G2nO|D7G1gH4FDjXb<4
z-SmYqmt!d>-?tDqR3F;O8Q$aDp4V}5dUA2|-WCAcYO`msoDCpyWb;@|k%RNVg-u;y
z%A1taPXaO>2}D@fyX#?t7I_}L3VLe&Rm*c&-6HE%GDmXE-DsxADKpJcc(S(=eo>r}
zKBkQHe4p!aF@7dy+9QUFlD($q+IZ?G4>>FSAOqR!2IZbN(RKhnQE;kQ<+LM+WhQ>D
zHNY$9A2_(!)uxE1n|yQSi{bN}qJt-++5ck7S2{`tu?<uxWC~PpY{Cj|60y++5njk)
z9`g@LP~lw<Q35q%G$f|522u8Kr{NeSVJp&huR4}M`t~2?J`G|aW@(h^$RDS#eEJO}
z3)J>+*ljZ6Nfnvf_S}lh!#bb?#2~Tp(d<$AsQ^t+hyJ<dMJL}6Y*ff35umT1cJo;#
znVlU*y=b9A$i%=OK%C^i%tUw50Ek`08jHi(0RV-i14sP6^?^*Z^iO2a>I#qP<(QH?
zhF>=!|AoiP6x~4@=_pO&nbgOHlZ^<nk3SG14AvMDz3RI2HUz(VqFd^-vJFPxk8a<E
zpwQA{qpbdr0M_QKrmpR4{aC1s6Cz9`J+x>4=$Y<2{HpVE!h&9jE(N3b$Nb%FZ%d?0
zS|5qF)ZAXgq#$}DZZA_y!*8iZiLH#67sfJonDi*fJ(De<(LQrqs@d?Ka$g-=4y|zU
zs>-jvas?Nq)tIj;#Av|aUS=u$e&g0$<jU<N{PBUs>kpT==mu)#dg~l5)iSmSq4(>|
zq*m3o-nU$9V6gtdPXaeH|HYAL8p_+Ss&;9HyAsOL4>H%Yx+;YrkiQ!M6=Vhk;;iUV
zVpZcT>2r>K%Opd&0xe$B;@HQ8L+V;u7vHQqqOh*cHaii3VZET|yo<r^sLcDFv6M|>
z1L&5A$?$Or2nZ<cm&FUvkY>W*V_?Q>cHbCr9gBbtkwz_xNhYGMHO@r2Srh+|hsVeq
zzb0;s#Od=kMf>?U$9Uo$l`%TX5}NS%GW2xEtA5D8=L7E=z>B=m!|`DMW>fX%<VT{B
zrL680p3{U6KNWvu{ZNZ#zhHT&&(x?_&?*RalnhP!$04F@@OCq1RNx@)6nT$~9R>)a
zmUJMBnsn~|#2J#%c<GF%yOOXEm-Z+DV|^GoWU||cwB)7rboNF<-|T)aCquD(HW}+k
z5b?Y(BoBu-8xAxCl70@6#DAVy#0Z$^)<e8@J|!9na`mG^6(x?Q#}b)TBw5B_Dk<X0
zPpOorX5)1o2D=%Erb~MUv4mDfCqw0rs5G1|3$Tdq;Nn;Ut<<r;%MN)qUJWaYgamv1
z<J(Tgg#QH-WI=vrZ7pXyW*u(h)yOgjEhG(X>c)93nbj+EKQ`2CqnImC%JXjlTpW2m
zTWqlN4Run@=^`l9`hdQF?yjkgwc74D{`ao}QR^$6IYel>42m*XD3vUnphGeZ%JA&(
zTukfN-MOqFDxYA3C*ZCxLlPNq`6ByhVe#v|Mdcz|@#qs>4J*0HA^Qe4xa0u12(l+q
zx-sSW>Jfj2%kTcrhdvYK3CdfJ9^o-Jzv3cV-?JlRgWp4%cOq^9#g0)X+0Zm<qfcZE
z>wK*>Y~17rMgD7YWU52uwg(9C_LNcSIInOp06jccHJ1HczLYb)jl6yE+?IhT$0H14
zqNgutG0&pb_Ra@?j=CtR=;QHPuj~+({T>u6fhHqAmz!;m%b7omNCfRPFQY2AC|1N>
zWO1`SWi@#rP)vx7_?{?LB!0lcuaXZ#BIj1BttQvxPi*C9N}aBEaq)*6#tzS4l0ddl
z0ru+M7F!2`-F)defc*Y^Mo!(vL_L;4qvsyGpJ`z%zIw_^ynYAb)_r+!OZ5<HIA=hi
z!4Lpb45-?AFv<nUTO(wqWtpBihI=dWepX7yGl_nGIjkLMM-oQ1n6`G1rZ7gD9#p@I
z@yXvA_3SBbyBPo%9GTKF89EFblbycjVd_*M<pIu)Jc0XW;{kij-cuqqft(6)=p+*h
z3p(9Tq|VDSEiG+Ehv(KgL%R32??_3#tZ<FKDv+pSeowA5+z9~)h=mcl|2kvW4~;0W
z>P2`I=p?a@xY<|iU35`QJhd<#di{Z%jOm0ziaDqA0>8-)FN{Hu4SO&v6jV$NmAR{D
z)6*1V=dnwrr$LeQ-1t|D268z$-_J~{WlgL`Y80t&H}Ct{O%nWg?Q163Sq{qOy0B!2
z&EfLYvZ`DHND=ZrVddb>0JQw@zGEHoGKq{Pj{>$iE=GtVw!6<a^{R&78VoNVV_dEN
zp`@|WYcNhm(RJPKHx9$I<)MWI_-UU{R(x@tk(DpqziC7;&{rQZ9PI<6JLYnv4b<xI
z2<@7J{O}GaBYg-~r6&0M&hRY=LPG<0-k7QVQ0nO7BpfT@#=8{%NCP9IW*VTb5{6Hg
zj`de&Z<vPiWV1MGuUzQGgJ&#Ai4mWQ$SaSKMl|(UC06e(xJ27IGh%Q6nT;2w6uXJ4
zus=dD5Tp1(gjssF>Y2C13!MyqN=$fZuL$&{R7A{)>`_=Bb-Ga#!&nZ7HYbKbojPp)
zAf1Cq{NC!%Kd66Ywf@_<0Drt@p5sIO4B<w74c|7<@pCO0BP7Q8v8VPfH$C&Y%SX}$
zTrJV=N4IBCp`?@<QUiK)6;kqy%=-I0w_l2(pw!AvJK1WQdak_QstY+C(+H?%(l)rm
z1}^Hu;G!<TkGKEAS(2PE<mLHzqM79wnC^LOiy#~#1Qv04VL*dn)nE36G4mdld!W%8
z-mrqG^~oRN5zPRE7@5YV{u65qjBD^P1@b-J>ZAL%YR;1lClAz4vK~;NE+0!dDGOV;
zpICmE0hp)DSL3JqBMBspzoqK7+<cqUF8b#7PfFx}oAeIB+Z6#oBzxIE9Cchs7sy32
zj-fR<haFklBQxw5IoFU&lwlT5hiUjEfF<FtRl427B=?#8jKw?S#-we5kK5ReT88~X
zwH)g>cox)#3^7o&X(>+#!XpnF<ye2G+09`CeqOk~NNW^YD8ks&a3WpIlE%~H_ZD}Y
zFxGFD`?-Z!MAJmoBAfbMbk!1>i~fB;V3PmYAWSNU{tx9s+kfg$Hi9j;(t~p^R%4Mo
z<vJ$=hql|9oNNzNoH~{bZQ0>?D7>H#z10I4LT)}kYPUuB5t`_LC#i-O$CfHAP{R1}
zdCz*4U9KGmpk4n$^r61;i%VlQGk$Zg`-*4-;ze#+4R!F(#r3dBSObLo8k?n%$69nZ
zNKvYP%Zg;W;E~Hz!v~Kac92JJVV7!9;#;XlaNH~To!ngd5cAemk^nD(u+0cD<Jzix
zh9w!H;`Vs$Y-pe!h~5?^=o^p{?oO%v8<PWEk>^88nVec?Z>~Suo{mv{y@|<Z_2A2k
z{3tMJ?fUX^4@f5nu>jNY$5-SmZteQK%$~qE@~TM<EggS%eavkhL7~>i=Ayc4DNUmS
zu$Ol-ZKek`F%~V=iMmJu;3h49Ri~}?DDMV+%_aGsgIieS-fhQwt8TmuwA7+-0mycm
zTXMsa2Ln~S1@+DkZ4Heo?Q=H|`j-fdgS!@NFgeETV#Cy<#8){S?^ADmVziDI1QcMW
zqC+=RMh!{Q{<pbwxr1=#0H&ogub5riaieF}VZnr{zaBJL^yb%*3(<Vc?|+z+&TfRh
zZ(AS~L1P^3PyXwIQlf}JqG-L(LcRuFo{2S`y-J%SQn%2ePKYS4m17G1uS8LxgVcS+
zbfMEW6(QX|6@fG*7$x0aAT-Wg1=@rQWNStb6^3@vatiJn34Ot;MzzVm=&CLwz8heQ
zzGhjds?>18Mi57x^sm_?j5PAzWNMn7VuaD$79V-(70ep~Kr3_qz(Lr5iv81~qn&)s
z%oZS<x$etdk`d&o<xUIV)5(CBz3MU|URgTVAD{nY?284=cnI1>^hK}C;&2#2&3_mx
z9{srr6m1je*RVf-m^`HXZFWcX&!YPeb5&HK*@t60GQ^DGqJf{M^_l$1+oD-bqWlL3
z224-S2=xX;CaA$g;HPJdL>y=KQxING$HbT#GqR4)QJ5(tm-7FZgpmhpUOA<EjoVE^
zI%s;myoVmX2i5*v7xMNN(yo7_?tdrkc0>u!_v`EFf<1tN$uG@}e40p(<yWv8)%iJX
z!{qK$r@p`H(%vfg+Ft@9sj^DEBgNh%(rl9>A=bwRNh6R}lKYf>AHNu=F{uhAXQ#ed
z0TM%O0=^tn-X)EkmrAvAAGRE2pH$_=4m<0@>Z_Jda|&=*gK}^VBVf}kC<ZFxt1K8^
zeutS)QbT@|*4l2ea(Z$>2klQ_XXZ0OK$`#7BQSUo@yLDQ{-lQmst|)wtIuldsD)Ge
zoBL^te9%!q1+EMMYEg(1^5r+DIRYZQc9)|z+Drypxq*T~$F`A@p90^=b>kIr8RZNi
zllc+m46*{Bp10BMn7Gn+f*w=I{D`T?^h`0jHd0Wv2b7EYh3vPJ^lox)s3`6Gt46rm
z<3A<L(l@1Wrx@ZeA1|d6)OOakn^+KK3IW~+2WXo4(XwG$Hxu;ItHB0E{1g`5!!9)w
zB5VD<2fbnYTau=Yo;tIQKVFbPO`A$$JVYk%l;QsESX{lrRep2>vW_axT4>40T<Bi^
zA)`TjBS;Os6DwI)8^}0eWkYWlz^3mhAgA@ka{a~-A6t!C!hS79Ns4x{nx8|%)J}p$
z-U(O_8>i(QmHu^uLnwp{B?Zeabk5sN6O){(UB_mh7+)6Bf6}4O$gc@$eRt6s-Lx_g
z4>6*6eNVY_xYDK78rI~mrT1H_AS}%rYcq_P3XKJNtvG?iQkScA?W&ivVb3@lW90h0
z{Q~yJm@FHcZ;QAo!sPnn-0V=V<Z2PGHHjZd9dH1+s3P;-Yy3S30mWo*9*5?wvm5`F
zLV<g%>+ct;yidbz3fQ9B1A9WkEl084#nFtz;sfWGNP;@XEWdoY-fHYTH~{GV1pSvs
zY(3v}x*$j+i%bO{KOT1l7I&|0d#n_G?ZRAPp$aerg~}vaAqPtP$6>5tU?y()6f9=b
zOZKpM$r|tWDgMf2<4Gvy>lfJGw2`0-Z>`_;MT)5{<u_ohd3Ac30`)e)xgB~szob9M
zPL{%WuyNl_T&x)dI={EYGs4p>hAXVLzvufq{_9ynUIT-C{L%i?-}C?O`~S76pdfWw
z$f$gKLdBtfF0vzaFpM+ltEoQJqgLmeR-CW4a8a@fJ?;yOox|?iI|tI5hEa4JAy2Ic
zMZsgMwZ>hzcv?;R0Ve%P)2mW04+9~V)%tTp79--Guu`#;`}*v|3yLK-XXw1wr&q;w
z!k>YX1aiOyig(rfq@?I=!w+;}p<+;=MjIA5h?$7q!f9l@|2=r%HVM{I;^^t;<-dYe
z{P-CeF2UmKkF=ZDU$~|($v{VOBgur)r~Ed`i)@8@uLpvG+L;pcQKw8J%|iAhbNakj
zJNLp@!7RAw=%v>6zhFLwoUJXX19&e=Ow}g%S$yC3fl54Kzz@kXyu=#3({m3RM5p}9
z)QJ&2m$lB{gCJ+J{sec9i-?@QQBHAqq|7J|=6aDS7&b^($5XspUyzJB$q|5hGf}3C
zZpMB+Ipp$KqCfkI0LG@0kVjDgSMZjE$1XnX?Ma(c`h?;BcG~eBkMrhv=U_+b^%bX~
zQR`mkNrK2B_)PQ!gA>x11JKM$Y6jY1^qc0Zy<PKxlr`d6KakG5(hC1Z?*C3uur1k2
zOKS7VD9$2Je#$Mr6_k|_LuUSH@WJ|6JEx$y$ZG}%8ap7WMFapa3gC9^hk^ygUQU6}
zJI0?kujFtL{g&-r8;`CGmw+|hl%E<bKl8Bi+B#nkT?!Lqy0>um%b5b};n5gEag%j9
zp52EP`;hD4WLrePh}*U^zIms)5u*27q=x5)q!gSwpxOJ7CPYWiRIcXAJif9-63R!o
zsZ4QbeX7u}dU<d-iRAB&yn8Tf5WVnkV>m#n7BB|x#t%*n_1Ogk>Px(lyn=}qV@dz>
z74*9jlcpzomY<X-`VD*fpMKhlrk;PNiaqx%VnKrc>em2PX7$&csnMWMH8LC?j33!z
z=f^jXhw1460-rT4Y4P2S48Ex51$G2s>cwNAO{~vCx!Pt|-fUcFjrYfLnv0>eBLYNb
z0R46f_^h;Wp0E}nq_%<d$+}hOE=G7{^ZHb0D!NmxgCQQq(Jm-=OETFAJ^bveJuV6X
zKY`x9gv;(dpTT!o&iX%jB;rMu(DC0g>8WuS&%ViQ*$&MkRL@odw6riUmCrRV0{mUW
zbMuX?WD6X9>BST9kqj<I0GUZtG%?%w!RvS^x2>)^)`!rB*qDB&D3h7FP`ThK2bjL+
z^1GY9OGIkOfJl&_Kc6u$ptyp8gmd^Yqw4+pl@JqMOb;EKk+VcGYB0;N3+MIkC!lH5
zoImLOc`S@Ca~C1<3Cza>0x-~4h8DuBEB)Qh-f{O=l9)4)Cm&Xc@c+xL^r<Ns;@OpC
zWL7i{49=|MU)oqD0EV9^F|6V_Hvhj06@o8|mOsuoRvDi-NJXZ@PB}K-Yi4fF-_)M9
zfQ@k#R{T*R<%VY!s1tobpCEn)2=1$MePu4sNO*4PhliDp2h88*>^eI-I^NdbBox09
z&<IHArxZtCztMu7p<yO9JQL6R3wqwXmIhme5dbho3*~<Mw?4T&K+`{1AFB!7^$I=h
z)=K;#;#2#0+Cp`}Gk#pjL81~mQVds95_%|8{ob=?>@~yxuRXyi>5;Myf5$p5godCo
z+r^s<=@=2#376YHOClU#*G$?kUsJ;RHbDGVkS2rWSI&FiUL_#}{4-KKAb;+AJaQ#`
zo)&YZ`Tg#)nn=2z?5imEj+6$ecg3%cv8ecnJ5kpPK%kpSO!;y5n?2+<er22|s(O-3
zJBzXN*%IcPmz>zr`o>C~kM`P6chn8Oy!tATb^AKVaT;X!MLbp5><8qwI*(!_RXQbf
z=x#=jg#)_&3huR2AZ066L(^I6=*Xb~;f;ih%qlvNgxj(Yn~!f3UVy@2W%KH~!UX={
zwGph^%INpc9Jx5s;YONsLv5}^Ncn^hsD2g;0wo?VI%oY>L=zLNvm7Gj#-mH`2S<>|
zDaxlfqK+=Yu+j6((By3$oniA=;y2>w)0c%47O3f&d-d*#56f|G?;*0O2>b!Cj;E=3
zB2;qJ(`Z)`A5T`NzMqe#_#hX1$xdT+rUsH0Cw#7b!M*4aw6^IZH@S+%&+}+QSckI%
zQeHC2C~Xuw|AZLx|G2)(@(lQxLIn!Itm@p=r*DC>;S@VFqtZ!vpGycKsV)8|LhL5B
zox_61O#-Qh0A{wk<(`xs>`w=|NN*Gfh{$ZZ5IIksP(a}cq^6||q1ML7t{g=p#K(;o
z^_<a&&@50s8yduews3@m=vr45v5^-E6>4r34x)u*P6yyh2Qo5#fA=!O$>@{o!9^Mh
z8&7>l&jx9UAbHHhn(xxdnRi+Rm<f@3)Kz;LE%0j#LyA97O^;IDKyRnbrRvRJEr9V<
zwTN>=LBeKCTq$Hlmr6H&tV%eh(WoBIj$+0`{n*poBn|VY-CFD+ua&VaQ((VdA%j8g
zijN-dk&p}_IbY*={O2HKdV3Du7$TUZCTHFicAaP<xsr-jIHiLTBKgmKbzl7}jKL^(
zAo~GqODoWyuFR$eaYqj0c%tCOE`A^`Mthyu088yaVFeWo7gf!*Jda6fbKy~QMc8fA
zCEM{@M_WU~$;d8=&+S*=c2|Q1wS>R<W^&;E!1F?~2)(dtKzInNAsUGCqw_E>N;Tlx
zE6)zNZr>o7CnJdU?!XIBM;n&l-V@pFRo|B}%E##oYWIyvN?QgqNg8M~AVVZB`Yqi_
z<?E24_sYu<TR-3R9Mabh9g!Mur*m2T%;vZ4Tx1X?Vw<2Ywd&8MX8W>e_a>P4U%2?M
z8$32j5<KDbll_Q9vBosN4bdmNRI<@tF7q%_&D-77H;!ICvK#l7y0J|w0VTz;{8hJ*
z_`7y6s%K?@@KDi5ke>`~3A&ql)ZP+U{;lUNtXGuiwGEcTp^T6@TgtH&x83Z_I>nN&
zIh3#@%`E))=~)*>&j*xj*!0{xwXTXBp1cf(y1&Pi0U6WAr#5Edq<S+#t7&m;T$=R`
zL^B0lHYXsF>iW^)1dutG%w?#S_-r|)x_F5__dTI0vnM$JnO6vlhKx=M=^&GrXw3u}
zG4Qc;KcF$T5;(oXR&k;pdHSmBCH%wnrpRTuZBC99XqEW>(o?xjqnm0u{mE9DfS^HX
z>?uuP*~^BQ9JIly9G}4wO?CBHPljjI65wDkXIc@h^mcmFikCL}Pf{3xo#Dl?_rl+x
z!B!3c;~4W|>x78cu}I5YDC|1@oem$aM^>BVJqKf}<Ekxg6A%#%9X(VLS@_lHbx@tm
zW8c)F#258ff#zQtDvIBC{>Zvz_3St(jOle-_YA!qKS}3vF8WD6J9#~p;%2TtSx>U=
zc@*8!Qkgt_hF7D>GhWlB%3|6$RHsp)Gej<8?Q`q#Q)#F^o5Mt8bQPMz>|n>~Vz=-5
zqk(U0XYNC*7Xod+KI4ryA<r(V7S)sty5;Li>;PJ92a5j1#DS(#g41rqEImJ8;*n*j
zKM9oeX`^z2(Qzb+3DvC&v^C|vV?k@D=Pd(G{gp@^@A3^wyMSD9U=R%DEulLQzwBB~
zKhOQK^Wg8LDO+h8J}C5)Cm}+TIp2L!Y9vy&4w)4%DSG4nKXoc>=?b_4^O~D|Qrqr;
z1AqQc;r3vP|D03`ln<QSKFo3V6@re;SyIWuzio+nHpz?LHZv-rW;g=l?C)~=ouBF&
z(aT)dud}7WfcmL^FN<J&7b%{6yu-)H$A;1dZYwJ?$T1=s_djdxCh@Zg(QwITLXHJ@
zWK~pDv=qw3m)?^>L<##WzR!HW*rp_@<#kguaoB31;)Zh3W%$(Y%hX{lEG|~}RWD~H
zv3IGnhONGaJ02IR6rAl^Ebp61NoMrNqJnPHRDMqj(`sb+|Hta!jsdr)NXMVKtS7O|
z(fc;uS~bD?aL??{+{T}USywaFn)<OmcAsW$r}4_Z&2jry^?`k|6D@AL!QwF!yX2os
z$$9sD^;R{OHz}w(1qB~9XPeeD)P}+`kgEx6$yuOYTy716HI(-rG!KdNKM8oXWwX6S
zSfjM+SKi_`QNe`G3n9j5WKB5fT30(h=QE!rWr+T~0PpKS(_XDN-E2FU?I`~tY=vYn
zZ<&`~>*10ob@)IG5~|hxy{{c36xI*T^>G#XR+uc=K7M6K*$R{;1{8Rxj-p>pKNEQ$
z)s5&|8<|E^K<_bN_n@iu)j2-zy3!=P0ofpY4JH#_<UJlF{8o6-l%ZZ~7O5C1<g!`h
zeyN-GH<mI-t0cw5^pBPo1{sD3OqY@8LsCiVT-QBK;bhWRsv-eGXqF;_4@M(?`9<7u
zr;dSSaq+pUwGR5upCoaK?C{e^p7e=fHO^~qJ`eMcfbQ~bE9dOQMyPHpFpqMm6=qi1
zpU_j`irxr_MPJV3Os-0+Z5J-4!hM7B!}F=a_uKEkgrP1|vvI6AujzdW#>&%nYK?1|
zyglfuUd(>OZ*Nj>i}i0g<0@$bsba0@^nSjS5$_Y(DGrTOzNU|^d$-;NRW~o$GMcZy
zI#eYRYfu>f>Pz^xZE+O%S@S8roL<L#k{4;%f12RKPjb{+iDLKf8Y!FWJaPV5Rw%n^
zK~RV>TQ*Gm`Fny5j&u=x__U&Uz%7&@e;p8a92DVzrFGg7xdH@8V7(~bG^KK)s}8*4
zDs1r${DWF0+yy)w&NAFD17Ic)4nOY#54WwSZyth1#MQo;>St)R#c+|oAi9~Lc3w#I
zh2A_K#gbv+=Y6pdqFP$gmcNb}n#7v1p8P9GaR4=)D)scpI7R?N@;2U!D0-cL1)I;f
z+U2G)RUz+pRRfwtpe)Xt<^_<{5zwjLK@10e;Z{NEbY;saILbJsQhSCT;SU=7t?`g2
z`_G3hl7^*P&4<1j=UV;2;v&3pb5jL&v6E*tc9<sgXc|a_aNefyc2M;3X>7!-n0Cm4
zrxu5WWPq&e9b{o)p}$I`rV&kVOu}8*$t)83uF}8SN-5?3Q^_LX{<MVMuCD1?|LUv_
zCvWUq|6b{@Q3gn&j|=Ba{i;z|ulUUVn>17^T^VQf=Dmr;8Vgco`>qqcP`#3$>&TOe
z!OLI=U^9K?T5U`5i+jI+R_L^IMdVhyc{<Be+WAgvPdyKV-GH(dFcP8#DWStYW-s4F
zO5O2un<<T65ta_Z7o<e&&wa5a-$I(zI4{b5*vneey+YW$O!PT+g1%E~qTYFmNHi7t
z)jC0_VL;uRXt(Y+!QxKIl!CA1BFwk|CTLe1iC=Q-+AsbIg?lj%xcMvoS<A3`Wfbki
zAJNdz(C-3SKvj$o`!5DhB3@sRVeyY@uG?qkb~xPT^IjUYn|Evr)FKP-dv;x_P)!R2
zfF@q^vd<RU6y0LX%a)naC63njc=UF=9kYL)-s7<%gI_dL#Iy3{h-U!E8Cj!LwUUg*
z^XO**2fL|s3=gt(-<@Nl`1_;jX)Oodms*&g=N@upZgV?+ni#z6dlm<jcxNJ>pGF16
zwc+Tp#~;#=l>hI30Pz~PUcvW!FY|pYxbe##mEBetuiRF0W$O5PZn)fGAEI~Qv-p1G
zrfzn&7QZO`He_ipO<#b$dF}fave{^3k0a%VQTEmghNh7V&Vx3YmngMb#%q0i`)Kx+
zUNp2^(6F*F4c!Ez@2jyyVxv%3CQI808y);1*)iPVHW*O6Z^WWXa}9-0nH$*=dLO;g
zYoWrtUTJCAw7+I>(mq=qU0*c)7<xnVy#3fkhYvKGu<xCuk%A|^`M;L|vnV<AthwLz
zb)>}QZhlmr8e&K7e((g;Dc+=^#=-t`ue!&UVY?8oTW#Z!QJt>!unx~$z6Op>FrYmK
znt2V+vAW!^Otn@9wi(>pYEsrY4y2Dym0)A>y&xxPIB1q?@aS!l&UEtlk^JLC<XO>8
zat)PL^wV@EV(Q2g0R5j*#c4h7=$2T0j=DT+!jogo+6wMBerT*Z<=MJp`FS>MHfKp9
z6&RYD0PCYn#HC+gJN6>*-6!jc1$W{h_Ir?j7u+k0LHXzpMqU(|_rKa3jo{+^aI0g1
zOvGa0W1WJNp3}iVmUB#U{2<Dq9xUjAUt?A2p4fTMz}U#QtlWy42b7*rE{=@7iHVPQ
zPc;{5s31^R7VOTRo}+WS^chhoDekbXsC5w|Q}F_}d-(*r;ht!DMIU(pH~QD^FPo{>
zamDP4JGB_W*X3~qf@PQK4uy4Uhn*owp5&3vbTs`*+7#V@o1;>>+0{~>|DHUBs1!YP
zIlKGp`L=m@Zg48ak8~Ovwi`~dA{8_&*V_w_7pcg?7pFTMRc8&&)p;WfwGYC*F6`8d
zjEstH56~w_sH3hf64PODAeBwSJiuqf@G)(@3uQM65>OlBa?XW(R+||L`a4-H5USS`
zXkgY}jE9Fu%6PdR897F#f5?-j!h?3a7YX%5PJ>PHM9&?|+#0Z1?gOco6A-$qdxomr
z<Rm)Z_-q)No`jSZRolitOW*81dDgzugSz}Uy3I=OckrdB|Cc6Soes*#Fu0IC`PfP|
zlaJ=g&M{p_m(-X&bbhdip1er;$tsWE$w+>;0|<2&s2}=P+s#M1>vdag4yUrlokL+h
zg0iC4HLMu3e=1?Cg?)*-y}#V~Q3DTh{0Yi^`Jc5HIvLSRsTLD}%~}28?A2sS%<_Bm
z!%h6*xH=c}g;zmH-xJguX|Y3xlBc?P6-s{eHsC+HRL=$v2iFX+r+AJ-D1+8eKYt&u
z-|Y60Xhs=?-{aZu*H1%ucwBuK|LxLGrVQKok$WX>8XE6%sJ$(IXLnbvkWNKBU7_s|
zI7<K$1pngfngMLAKkvg~N0pcTw+cJlzUmV^=H;W8$tKi<SNoZQul!?_9i5Q1R7vwJ
zE@rOJtsh$1yZ<UA1Z^tCM%mD?Nt#b+fSX{^Rh9DI+otTjFCL2FqEkRV52TDnS}A#6
zRD&6<ci)KDN<UU6684~(&hSTDupivQZ8Nj5p!oPilb;vgAWsx_;=MU2JY{lXqG)wD
zoXQoqFNl_5V;9@+Utql6B7fK`=!T~)T=bz!RVTOi2}aO#@)MV^Z_`yq>grREa;8eW
zWAH(h1cFo_Y2JpZL&n<a9UZu_OdSN#9M8;fK@(bGu7wQUVbUp>n`Fl*zL8k30xRjr
zLl1r@yx2PYx?>7b&t~akxY<$V*m>GHmG8w+uhi_>DexKB${6}AE4j;l^4_ySyL=4!
z9@;C_1pjpC@xobOW&3Ea5))rqsL%a~gZR_#Eyug?DTw1!g?+bIrhkpikf@JH)7hoP
zExkyhFyhyGn_+JU+t%vW_5%D)s{ebn{K=9r%h0Sg6GKzgZIC<}MO*|nd}RKyZCiXn
zpUhb6{%7y2H34fa!S9!wS=C8kO~Ub&Wcu#ZP>`zcT+QiNjlEx1byUqE8;8h3*4`Jj
zPoF-C9H=SI2LkaL2?+@*A9hxilNh|zVAmC*zLR$QI1Zz8k7FrwaVR!Q2)x{^v#GBP
zFEzHr$MJ=>^7j7Iw9%z8BO>R~%!30Y->%*wzLlM?oZlXOE!x5%`rj;06xZEy-@kBF
zdqRJmp#x2IvS;aDy(75kEZ|vSWV^rE84jDq3BYN?AF2|f-L!nFW8_6U@BflGFT({E
z$8E*W!O7md>(QAYl|u0b2U}X&*rjbhDirUT3=LG3wR9|SaQ`k9US_*yNEyl4#OX&Z
z5&@PSs_ED8+)<4?-wJt#iXF54`2Th-mynyB|3suxe6^ryr~rILcHQ-gLTQExNKr-C
zgB9|at$%rp59%`Qrp4p;$~9nzPU7R^d&h<Z1=CafG57o3`WN@-7c;?#xNFbhKLu4k
zG;KoLuNr*BOBBA<-tw#3J1w_O2$%iI)ya*Fg>6nYR%mn``*iOHXPaj`(nDuQgS~v|
zZ@GGQ9qlaH5A1I#rIH7qC(~zyHk@ioT=-5@8YYk+*`qG|l>ZXL5~`F>M?LXm**2Ca
zIEX|u5MO(BImMnbk_m}SZ7U?VwAGJa?LMcSER@>QFTJSui(5`M5C2G>e*?ot1<swn
zZ}zXGMac#+Dh?6;7%-Y=R_cEz(}&W-C3&c%>1?m5>C{fdI5g(D8m)tE#Kpi%u|Wx@
z-{E$ul-NAE9%yy%K}t2uoRK+5^L+M?6AZh(62^$j|D`EGJa^9c)EI58EW;&Pj9<ut
znB|^4p_|#+uh!n~coL#dER30`h43V{&hDG`L<ytE-2o3N9j`o01AE_`zo_{|+(cuV
zr0!hFTRSd$zbyydHd9U!H0=@to@~=1iU%|d*YV{~3fwbw+{dTHu(7<Fu#CJIuQA?(
z9UTj~5FnM8rz>v?;&Z+KkJI3#%?R|VV$m#IF0$ReO?ofT?r+i%;Da^~z(`Hceu05$
zf_CX|ts)(fYy~Elmwal!ucIy;nzX)0H7<dSw)r#~K$|~&u#8xuSgX33CJq;afN*rS
zEBtAYU2yt+=}qE~lOpVW**nEYh?3_|hKxDZp5BfQKJnFbjTMr2QKZ;+bJoW^_P?c(
zE+@0spe?&6I#((@yzv)5_AlSTZf}53s73U=O&-okjQBc*^EGqJZ&EmCGyOD`ZiFhb
z7C!u*u0$s;G5(OW^0_8u(~pt!6|w+h)ZsRkW!T65z;_Qv>J(rlUr^^1**%7A9dVQ#
zp!@Eyd>@yX+BeOlq-bsy{LQ~bHZUWXAylAx$FTT0(IUYzER+*!5)gCQSN69@Rup`m
zZSU;NTxOLnWNcFAnOB!L1xL~Dh0<%_{xv8q)aA|(y2!gH=G{pPqsWC1t2B@rr{vRx
zQ{Rqrv*sh+yk%;Ykjahl4g0UHAf}J>Jv!p3D)Rjp{Fq+-?}i4z!Ib0y1LS(muO{~u
z({|gp2OiDggPmB4av&iy2Qw@<G>ToLTztpb9LBR{Vl>^>M;{JNJOSe--xBpnP!zwB
z%yRxER=d^6X^{jaACSN?&$VK`tUkM9YiCl}=53bPYP0Ltz6e`7=T#*t8~zZgv%9B1
zKZ$y%xcO2x`#%qO^{+#{jGnK4YnvDoF$P^<Inp_+u!vk-d#S0S!_c*N9*{$jxKUop
zTjJrPP)6zolp&i@1U+8N9RQj$D71{mIuwM9@!?9P54*7)#Em16i`IWUp6N4{lFaGP
zMiwqkiry9M@`o`a6PEZ+2_By#OKM3dnbqw6z1Uk3^44{Z(ARWFS&{!5`%*Na`ox^W
z>-(4tb|VY4T(@%eK{ZPpRP@UKO#30Fa_SVV%t+Jz{K9Tr6vLRjvcDu3&u%aSMiIxq
zKSd|dkUNl&6#vgFCKC2l&lb!$46}P~YvewC;{A6UYG4N&6JxF$<Das@>@a7u(T=H+
zW9E7e4edP)BeTk2Q$jY~O2f81!>Zssk6{CdEnvPdS1KL_)wfXJgC@~)y8oGe&3?=&
zN91$p)9-1r!Hrr-%I7p+Wpyv~3GhLPG6TgXhl@??%(GI*h_~)7>kyr~1c^7*_HDI7
z$|c|O9?ysjE(xAoy!fwT)%DXk1i)CyDb@lxA$Wn`ADm5t1a0z;d<$&|d=j}f;m@Sc
z&jXwBLWL>gu$M3gXzLx8dab3G4LB)b9RqhDab=k^%8HcX94;?-?yu<>mmn8mSrYl`
zRt#=<xTeX(!+&>oc8Bay<XQ8!iW=Vzh|p5JAJI!*_T}m6)w~GM(8qiIGC5Jr^X<0b
zG;#RhFJw0}UdXG17yf36T6V<T&TlE4sQ$K39Mb)pmi04MJ_3^1q8_?7&yY+E&G*hu
zqE8&7#u5X7)}hJl&B?E=6T|i|j=;DOh{A%(vq_bmhLkSv%D-j?5Wl?hkz$zYD#f2b
zk<+k%TGa<HG5Aq2&g%lsN%-vSEdP-ByaVNE^BK?j>Ur>&FMU2C&`QNmQ|z&R!%u=A
z%BjRZe*tTSs@rTGBBK+kv-sOvu%g^jl%>Q+O9fXSe7R@z_Yh1AOw{G!u-;0xG2O9p
z4qk5PM6M`otj2A5mJt7*^!qBbpsA>qjpZu^fq$U{xVt3AjGYuLYZIcbv<A2vz5M#l
zR{z!v{*J<AIG;ByHV^%f)QUU*yIO)JZ#5+j(LlEfSR4W0n0Bl1{!0qzPio_!qRv*#
z)G98v7xz&hUO2<nqN|9cASi6_&~R}npBt^K#Pi|Xto!(oDU?`^Cet*wM&iGh$v*)w
z(cWZv+Ss`l@;~ES0y&I$(tY+^k8hdMPN6M_PKum7;={epi~}msmZ9xRE`j?W7Q2((
z%0sp6*^GT&qD>2xn|9zft;w(c96m4xRqV73O`Q`vnd|Za;^=0eTaKM$*lu31E@RIB
zRm921LCjJrd0ereS8bE8s#5Hmzw*uyWZ!3SqOqW@pM1F_tw5f-LEO<{JB5T$5^{ey
zXq(4wT)Swm`!zJFABr@Dia{YPXhT%2UiR$(pEL-nU-NSRZr?A@=7fqi3lD_kX?vu9
z_!zI;*cOqQrTZ&|w{UFRG2f!zfs?%4`ssb@FV^pbB%TGH;8HqYTgu;9LWK5pF82lc
zmu(+uClQmGfuK+dFK12(a_{C!83#8ARuf<CyEko0!xPSeaYz9U^E((}-y>0=kBxUr
zXI<h@(<xq?%5cp=_z#x19L40$qqbluH;_=*sxqqB@XJ|4>^{xsJQlT%XMKGmNTqs~
zZf90%4ibAm|0?oM8wK>(hI5|PV;tBAVww_0NOgDa*gI!f)L|s~yF!ad1S)qwWh^K(
zUHhdzZX{bVb!$&i27&VrwqR;`HH+bd8iVCjh5MFCandNaN!ya}Zl9RI$AmTxQi|6|
z|H)~*X)*#CVs?o$;)T%%4(XXdA@cHc22`T%ZcGU11=Y~!b6N-zh7wp$sT+>ovdB<J
zKb1WRNSAiWGh9|0YuN&3DjHHXiN1w9#{<!w8eUEN4w&sOtx%*Aln?E*K@ZHkN{1eb
zHQ+vQyq9(Grg_DyU&I9A7-}_OV_QnqHY3}xqLL<8>#(m?Zb-Icu6-82ODc;vpKr2x
zxGF*RCB#hIMGw6ov)2jFf1aI-&N%V6{2j7gz~+B$U|3`Rg-q?lQFJ?_`7R{k;$vME
z5tP%`E!Re8Z%#4kEJy&sodPU@1d#(H{?aGWBIQ)*HE7y#IwQ`*Ga|0m-d_m>1AGW8
z$zzPR!!^UxZ$-5F5SNq~TE&&5t~SA6x5q<vG*8DGcq2>(oAhgGFGCJCZ-6qR3H#bb
zFnnQR;HA;Y?vT0ML|v}yms6DG%=cSuYcY0Ua@@7WyD}K3fBmo`Lr_$2nb-2GTcc}(
zwcfG=(R^F8GbDGefdd*OJ@ezv36-m9(3dp^|1sz;vGIE}vr0{UGrQ2Y*OEXmxX<M!
zgdnO>G^ntqP`B!%<dj0VgHfz_Y&QHU^MHqQ^v>bOqi8z0kFkANKJU~yqgV8SDoMV}
zPwslSFQ@ANBkR56ss7*p@tnxa$T*RenUN8ZeUOzIvRB!AZwH5@5K5VG?7i2q$rd7e
z6J;GUdw-ut^!mL&zdyR&+&Vg)^L#uW*L6Ma*ZqFKnB+NeT-GP{Wb5q<pMPkB7(8hT
z?Y7bFIab<JgZg=mS2k9o0_ha%7BEoDFK2HUO~<}|b>!|l>sio*hKJ&0rTcm<<3l&H
zSOMq7hhF*X-y?ST{{`hMd<4rxqba0g)Pyg<KY}_!CUtvk3R~@DipBwZfFQCd!5%+c
zi^<pCU)9YuSBGqKwHDXPpvsGd=nD-xPVi^Fg29lO!~0+-hb(_SHf6ECcuH4um#3sp
zVX|~`c@xd>3eslq);lACsl^u43ts(6s`af0E;KH%h+G41&YpY3F1P+%5pMZG<}|Jd
z%ed(o{-bpI58qsOdh#<aWII&Ch|pmwBk;gTCV{KMw<!r@SL(u?m4Qc6Dlf~*tDvsV
zXD>;2CyWNY#%0Ax3kp5^?c3R=EU<jhCyHei1$UwYqq{LDAAIS4>^cpEgujD~Z^Kae
zMQTDbsK75Hm7L#;-YWG<iUM=N&Q`I>8_v_5Y)dJG^IEEgixi4tW?Fl+J8H}svYPe!
zN|AT}B()`&&0YU_;T-*ChKle>7e{f??*keAVi{(O?LdDa^xgO=!_62Tpp@{cp{Glg
zm4?hBMk+0Syi$3z(~oLobe8*v=)iLi;MNt2ClH`sIhDo@Q+<vku3%SA?v#1;#;X_6
z&o^4tsx!!{5Ar%Yms9hsX*Z@swU`d3${z1OkE8e>c@SW?JoV@WligtwLksS+VE5B`
zpq41Ylc5W2Ptp@+ZutoeHV?<?$=5wgH`viT{r>zngJ47gxm<ZBpt<B#Z8}%7Y_>jA
z4((VKvoitrylJAwkZ5P6)a1(Y0J<k27#<dbdcWWo;$!Et=m!`DJjMQQ)K0#`d5fRu
zr4z`sPu5RK{OBX^0PA~hoWxny=lT=#>TI3TI;@F<W9jiJSA*3DVkM`9^_}!7I*cEP
z;c7+4=|9Q$NP;^vT=NIH<aaR^^aOgImrNZ1!%en)wYAAHoNt~t12P}tn@V%-yBDeR
zEd15nT(2Z(he3%#?$nv0fOCwM)-fs{KB6_UZ~XQ9cYW@9_b3mSu;kUw@ef5;CuB9m
zNZA;0DaUE6dGJU=?z8_sPh%RLrI^ACKi_4U$rh=Jz8`W$Cq%xT%oYOKZ-@HSPdCkv
zH+~f{e{pCgjbc^~zt!vSGkrh#pubQjLSfLlG+2m^E<_q@Omk!T0Cg0{-+IOY9eBdd
zY@o&9mxudGc@(3>oGmgx>{iR%d(y*j(U|-dK<Gq-s%3wSDFr-&S5}97vMx*hg$xp|
zX#Dwb-Tp8K{EAT;9bgdc?WG)_%7`N~B_4_WJH7r980@4Cp?-ZG*j^7RJVGs?`r7~+
z&gO!#BOZid8Y)5}oI)2F+4Oq!cm^EN)~A@w{eFOs5GQ!%SvLd^AS`7%jD1mNQdseZ
zPPJ|Z-h_R^UcNi%c$9(2$`=!qpp^opJUu3No}VfTGZlf$>P|f2-1=F{oJjMU2*hFp
zR`6@EaiMi)w)~ryPaily@+5m%>Z??wO1t-GX=cs%hI~G+*_6u|AwZ7AUKR-DE!wLO
zU!?(I-p<!>*c`_obMXtybOt7GhXeQ27fJx6SCOznn7Hd)nK=nK!eu`1nWzZmvxVhw
zN%$q+Z9(I=Bv!Ub2JU3<<?<O(_Tzsympk?toTs#`Y?3XP)m=)O_bTtseS!eJT3IQh
z;Jh31@9Y-#(*so0%KKI<vf9&U!*F{vQ)<P@BbtNIEM`w+*R%Xaf>MZ713)@{`h3Ri
zVO|A;1}o!b=16q&G;)w4SwBYV@rtWv;pp6>`e4<bny%D1BxLjE?BK~)=D1M*55UbE
zmWlldfK-5vM){B9wZY82)+url3td!9Ul9M^X@pluqtiCIzWK<`0h)}4tJ2ZrSZdJ}
zEwFO6J+DHt_Z_UbNa&BpzIqJFo5g=zUi5L=B}};YuB(NM{*X!`!T~AXsj{_#j{>ku
z4U=ngPY!8ueuZ&xbY1j>(#mZ#^nE53EtTVY#_Z>t`)^vEv2mAc7i(m*#|em&U~jO}
zpVNL^)=KeMK97Bu^x49DLV(!_Tz)>2qAA3GLj+T`iNownZ#)~as5EeOV|-4_ocF$Z
zzRK^A`>~Ak@opZX=gXfZN~*x`f%Hb?WiO|Sc`k%!KA|&PKKfhP)AE4!DBLO<!j5zh
zwTZh^I3ft2i?ajHtT`7mGSx`wVKh_Xz)wYBr(walbD)PYfkgBDx0=d0>_Ex+9;8WC
z_`T1{d&fqZNxc7RNsDFB>N_Tb!u&E<DC<YfmE(DHQVKRU9jTMHBK-ID>+|RmnU_bz
z<T9QRAAQNYh(hd&eZ{V0sZ=y~*YV9N1e9m>(Z4ml>fr@+8$5#oqQ)39kRT?RytjLa
zfF(6)9sybH2zY53YV?Lc^*$iB!K!LP<!7mWwMhvA%i85!e`gOqsIBp-eD@Z@%l<gX
zJj#K~!Paj&WkV7laNCr_vCv(W(tomd#$cW%@b9$#trL_nCd#|c4<=l7ec}^4217a~
za|$PQ5sE9uyPoIU``RaGYw`C7`MreMnhBDd64g!;2_J9sSI`Kv`LEOpnzGr6tgPO^
z#z%wW@LG?rewpaKr)gC`HkHNlQKJTZJ|(mr@66~$%^M&+d?b>sO5UpqsJ2&*oj^Qg
zYxC{GgG>(L+T`fkFBTjk1afy)ayGwE-(=a^{>DO5hX3p1)lqK5c`d1J_RAgqSo`I^
zIYU`k9+E%ST;5*6jBJ9gSQA!d>T9koRZ`D4F9#fb+BuM5Qvk6K=$t~<{g^d8a^pTZ
zrx8fM#)VwZ&=5{jTt1y-2TkC!ZAZRVMRdqrLAn6qFN#sF=p2sYte=uf9<fozeU0Na
zxq`fC#AL-2ixwO>hg^0mZ@BtR>e~e}Z+)!X_9d(<kLuGpIl#<wm=f+C7donrYf%L0
zEKwy}N@po0u0@r=ZN^J~cS?nl6}YQ~wa$yc3iWHLb2iPB2CR{~$31KH=x;p`ARU>o
zp_5<Ewa|~4D8MWN$D*E3VzNSQH)$_lMh(knOvi21iX5NfiNjpUWx%I4Ve{YjbQyLV
zlNFv~OkU6Vu@Umt;@_728wDS+IIM4%jR22)iIghUL5FF<XssUC;$pBZ&q~uU-!vmo
zE<c#QS9jK_J2}pJUliO&7pV<<XTL9&5160oK!wd{?zKhWV&towVuRmE$zmNE7!5VK
z^C@`LZ+bFW8T^5kGAzeJI<@>XsOHQm@A-!lS)@W#HHE|PAz@769cwIi4jstB!g55W
zbG1hvztu_Y>IAm%Z(N}%%&_hV@2PUTksrz|8H_QFejY(N5yP3L?6<JrKz6Er^0;u3
zJ^rs%e?h8J@>=NP1k-(r&fx@A16MKLoxcvbsKg}U>lgBrPDK5+k-XZ;E8nXtnryv4
zj#cg(wGAm&yFGVB!yF@PpUL!QCHcqGX;B0hx;=t>MEz;O=+pqcKQ-1h09RqMar*<k
z%>MJ8Qgri_I85|%(K?5P_V>v0r2Ij_o#>w}!NDSgeD`afLN*a6NY|aZGf`blO@8H~
zEc<E(-ey^t{|GQBa~UbgvK+#JT9Z-iv9{xi2t+7oA(gsNSMVL6PAi0S8@CJEhPuex
z;9np<cIlt@4d{{svuhhyg)%T^LgFp1q0_5^<qKJ{!ZN2)g!n}ck;+d;`4c_qAzOpS
zW1yg#2WS90M*uHIf8XWHrn(xv0%s0k)!Ck}*nqXOq`vK$Ig{N3vqT(q%;Vy)y{}a-
zGkB<$<2itFYiO|MlnhSf-M5&;7SD*$-H7_FvtHSpYin-&K_{S{ql2a6=z#GPPBe|R
zt@TO#j3jfk`1{lgFCG*hMR{1Ei)tUmhiK1!ivNyc_+4&4z55O?FJ=>z3cRc7$T%^!
z;mRAlFYb|fv6#Gatp)%bW_#8LCj-A<-l6^%jUYG}>Q8>+xgI2vxXEcMg2!TGVq`vS
zX9^7fMst^&rAi?gsHuMdq6uB(T)6-T?t6#7dwr{-X{0$0gH`LX^k7+hv^|?f{kjIm
zV>b2jV;aGntyhXCCls%L#nU+;LbMHMKH&#Eu?JGHf*rJi>eP*J=fLwjQ321U`tv5Q
z0%c@{Z+($6T=XF{iD%`pL^4ne1+P5*Q*+jkcQ9GBTO&|LG|d%yg7GGA3`xI15QT-x
zu<f`OH1<IwuIuHtCrS(6FTdmAmJd~S-dSg>qHS?B@$t}~Ldt6EeF84@0M_O3MA$4C
z^YGeP^WS;J4(sNO%fH9r|Eo<?a>^wlZp@HOL0`)rT$RLCu_>(>We4}#<u*_Vj;&`)
z9-RvEy3K(w3@)))b0jUb`#o(FKvYc{GD{q$&~*px0Ec8T=3LA;j&thX{SVcEo)8Ca
zrY*&dXqVB$8UuYWx$6@7x^QIh01<EQ^JwSC2sw-(M#R$B;}_L;7p0;Gu-4XZ<YL^w
zJt&+R`)?sY$N&RIgck_dT!@Q56JV_NRo@GVt3S>8v@6AoWkZbB(R*`p!})q90APWO
zheoOtdpAs>J}RSOltNQaPj4yl?Yql4->4D^;6nfT)%CoBI$6TrJzE7`3j0o0+LfEr
zZ4fYpsq=U>uc!tv<PF?2uu>M;Z6(@IKM7vto9cI{HJrF8n>L)1N_GSR98%2BpFeXx
zwzFF-#ZW)o^q#=?HMqzlDcxI=r^`3>o{ll}^-K&Qn<Q_@x=2Xa^^+`-@#EO6H_MRN
zPYI^+J$zKp#ANX;uc&C&+B<2t!5@bczaTq1cJWN16ZJvI5dP4lOr6_9e99?y_LB#c
z<qm27`=r7-eay@&&fi|xg>h1Gugn`zaz^1VGqm>~|AzhUj?rY|#{D;W`07}I7zj(7
z5pDB7m_eUPIn{>U&G#_^WLgznUgO}}$D~y}^;4(-`~_u0qX$t4XRn*G6Bw3`o)k_%
z;CDP>Zr-7AdW$%M#=I|oPev8m|D**Jy|)4!<UX?}IB$R}E4J2$wZVDU3O%jYnv%_+
ziKJRjfIwo3-3O6Gf5Z@}E^aN<KB7Hh&o|WGv10c?lAC8u16KMirdLkH_oWU$@+~$<
z4x9bZDLzimNm6x(VY13_CT=lo1`*GgC&qR0#k(LU)K0DvcjB*kmp|kVD2DnZd!=%=
zM6O3%O*h%;OlI+@RJRF23k+e}`yP8bpq;b+>B^@W6{V-xlcR|J(gVMG)e5xVXxGRf
zmagtsxB(Vs`TLfH04lW;HoU(~VjH2PxuMbjhuQElq+DR(Q42pQ1*{Lv4E@erolS=&
z)SO9YOExbK?CWPMR8z9gc0Giq?GZZ#6B|Vxf-3^v=k@2=D)R;?Z4o8mST<dv%yNb1
z24oh7RGs{4p0hOz|9q$nit*XHa~?i&#)BY3gj<PRq@TxZuyAt1!NNEf=J^K>c|Zin
zvW|-wIU{CLjQ@3!-sO-0(Yu)KScR5)Ox~PA9S(7#?A+Y=$e5Ue8jdPnH38>_OiXZH
zrEcMn?=i8Hv-1hYdg|o2quL3#lLkz10$j4t9w-Pr#F%C6u1d&jdVnJF-59ZhE^M`9
zy~4bL+qOE&J?l!a!>=JoR??b=T)Q2wGUF2Dn?MEYFjJ_Rf)DInLeO!5nRw?T`S}tL
zsmTq`&!hW?%I}4C=vbLCl9I%PPX_-;b#xSrsjP2O7M6I8FFcH`>F;{EB6J({Gji`@
zfD2FZ(h4nzx!2&yORGl1_JxuYVhg3HCR{ChGO|yntXp_DJS1pW0!C0Be4&?C@Y%M7
zMQ~DQ|B|?p;jWS74<mS%oEHm;*5U7atY%Osj`vhWUf?9n$?WLwuj`Gr((uy;?Mkz7
zPp6H?nU%gfg*=yj@~E%OD>s+bA!aFvIMRqZ#+vUz=H>Mm)98`44t0&cgcX}IJrPC+
zrfyzcL9nWn=adeDNDkjhV;bDJo(F{$<{xrY4+Vhtipg@z!4APlVNR}hQK$iabE;^h
z+uD^C%bD`@F6LSQr9$=zSN-hc^68@yUx!I!Y<Fo%^a0vrP@*#?KBdRnudb*x%ex$0
zlG$6czgd&^b4F^3Z$|OHdsC6rSk=&QK5x5OaeU#$Pl6-T50r4=#Xh(p?gs?AdR<xI
zc`)aTp~n8w^-PJ#nP>hMYK+AIA(JviVo%SJ;YI2$KvPR1RuR8A@Y-J+w>vxD+ZUbT
zNRs#WUq2(71u$#9qEP4EAKvjeAdCeW&mGSm(@-6F#D-S6#SgETAgL$+XQKcP`aubX
zl<)0w)V1`CdQH3AR~%eg6?xWs1XUNtqM*s|-$9-4hHIZlwQ*n+-<wF^j%m0kP?L3y
zHeDsrNX$5KWSeoYW>?Fjo0=826PxW<T1Qk)?$_BNN&Z|Mzq3A%qz<+8oz~gz=kHr-
zn3j<gyI)a~KM_0eX02oQ3-n%S8?yPQY+~3@@QZuz<7#AEhsF`w@u|HE`eoTUc}4uL
z;}6TMBML1w_)R)@k9j|?yFFM(lx-wV9QaeP`9zkaPAg2UW(pIGfW#zBdr#UGPyN@;
z^;8-v9QH;=oA>)1X9q!?;Z!<*;<I>YJ<xra00#G;rq?V`<sV*$B=8Jr!5ore1=mVa
z0k+Tj17MI64ugLG1U}Oj;s$yhs(OukInhyHe;hPmJYzNB3al|Sop`+D(+aiz@oIZj
zdvWC>k}_zlNDA!S#T~Kss9pSIk3UVxt54ll%P1+<xnf+s%qoTtWm9wc*t@V_=NFT2
zPn-9iKO~T|lh#R?ST^HXnRZrSkKW$AsYT&ST%1qPfzOsWk0|fF2A2pSMtvaG_-&xf
za_&#k-BPH*a3LHAk-DB**L0W)Usa|M+9;52D6z|r{S`6Nj-$A+ppyS;J~zTD-IHAD
zyx2W_f<H1==;~Y>9HdQ9nG=gy)d<SbBnl1Xy;ReSX$#)t=@)q#akf&0pPO71BLIuq
z`8Ljm!&iw}cm6mQ9~-V`o*gV%#_6ZzWF_WCCr0ovRXhcdz`0a{caR@|-!ssecKF$R
z`&l{LiAQ~HRmJ<Lw9q1-T-;5)!amjrPyVP@y3u`on3E`X$w>LLs3xX|F+#h?@`Da|
zm-Nf)2L&9t7qAjZ^MX2CtJ!Y#p2JOpURc!`(4SG%{>Covx=!IsVYh2Nxn7xnadJ8$
zBqTh$)iH8}n2G49{GOxxdFwoL(>7v-^Td-BZ0k|?^Ck3s^?E|j@$!fliSFd6eSMEp
zOD~x*pZ$7`n`C0#OFq-O2US$x0gS2f9cv-GTT=<m4E}P0#_4{Vzv-}ylZ56m_hToC
zCL~CJ$#;Xy7@D)^h+DKIarzxgi^=DF`DGjB&LSRXy&!FWb{@lf0mlu^T+_42o7?@S
z^yo9krv&d~L$w2#ik(^{b`IC_C>4d+rlwAJJx->^MBv2zIj)?}X9qJ}qtH#)!4g*j
znT3?Ap3o_KKb^Ojb4%n3Nts=%L}jCi$MUqZqT*S*bWblk)|x&oNrdv4H*V6urX%52
z)Fm*)JTbeG_2o1&G`h<|?3egIXLN`$Iv|GQ==X_vY-X@{)p0?UQ8`VS4o{}kCe7FK
zp0OYc6LX9X@w91@&jRw?pwTiQRxT~i3)h{+Uh5ZxkL;9LS2YSI{Z`yszaC>}hb~wm
z(VgWnC?iIAb!IlLLM*McZh6_sv6I!xAOJ!S6~P-cJx)TLpz~~34?q3gm%1W1MmrP$
zX{|p*5Pc0=rz2yK6kc+-g&fG*r`nT=;ty^;{y{G8Wt;CW3XWjo;3%|SJMFn9VqJwW
zLU!2pQAWhQ?i$XkhAbf=T6axPAu)NRjT|wWGWL|ZN+pYp#F7`QMSx<0zo~>Ddk_4i
zsQh*(1km3kKL;B8jtOyuQZ=f@H&lN}Y5(pv+gr@YSq>5PVJ&u(5AxhS!=>um__ILG
zFYsXm`~6_<IGS0jdlEMSFVPf#^U0GGPm9-AXL}aQ#d5S`ip!&B#(fepfCcDWw~USL
zX|@9)xftxmpTpT6c(V+jU608IzJtFv2DR_u&jfXklzMM^JQI^mO%08PyPZ99SKh^!
zgq;9pKS1Ru@YK%^bbTuVpoudOEA8Hw$}XK3>gqo6=RX1kQu8$}8<X{iyrj7>I=u`*
z6EU+2w%_~L(*cvqw#g87`}zX4uU`pVFA%J)KClh<Nlia-=uAVu`Dmej#HSyh|9AnO
z76`=9Z0_vcgtRUWyF)5P4V8jU?@bWv&@nwAkD2jiyWD00Y{{;_i~+~5;7a?vz`VKj
zo{DMDlFBI2!3uS!y2P%HG)=pf&kH|l{i0=f7>ZTFxYc5k#ytN=D&Q}Jp+0ncEAif0
zu1pKF4JwMkrm>c5gE~40*gRkHD{ljXN~@k4*?gV4u(-G8&Ve1w1#pV@4(1(?oQoXg
zo&c2oX3&S%x*J0d>gQA6CbM?WoO@cU=MR+l;trjUQ!#tTp&MPT{b4Iku!pY5o^<y<
z?h=ooAF_Sx-bE{8tHtRZZ(lq09Gy{H#M+MxG$xFS*7vn8l%$`$ykeFI(4kQMcz`;9
z|Ez|kZ)dzTLE&g(;M0M8FmU(Lc<?<4?!j`!Cc6PbyYpnNxFz0pqI~57D9bffe@m8W
zMw2*Rqw{GX`Q0=LV_Ts5+bz5$`2EM%<?AuaK!i_#2vgz{ym0)@Un$aLdyMWPA)}X;
zm>tk6rpY}$n`v(%{Rakl+IATJoVsJVV#isChIDz7@nL;CAM)#wm5_3qhuGk(VfGog
zrg4lTx1k%4+5=Lpg-PY2vSh(Kp<nHy*}32L!OK$cnVPbq&=>pEzF4niKe6}=KR*Wo
z7&`i{Um2^A&`CCcR~E`93n-$N1A+?xzMK@o9uCMLT=4f1Z@XEDu?PQAiwpPXy&78C
z3*dU<_iLKh?Ort$jTi;!o}tEVrT!LwaCJog#&iD|bR67g%JnEzS8?jgT1M5oOB)~~
zO|<SuaNvSzP>SRc24H(T;(ord3gXOt5vkdm`wqG`tx@DK2aR9l1sxDGrW?{y$sa&M
zlt!^OG}_|=7n*9dK>;IO%>w<tzQZIu%l$-){?WmL{X+U)FOo$yY|pp86DaDtgr>3h
zZ1%(Bfac7|FYa)p+q;si5TF64=3MkR!Ag_ATKUTNwMiLdPVJh7f)9P4u@qF-?XT1?
zF68D|Qbm0YpifRb*#XEY-h5BUqyDq-^bgSnuXfKb%2vrh3`ZJj0Gmj}6fx0<f4d@%
zR0S|gvKr{fOE&y~6XnPq-NS(|eJzEC<66uPIRm%OB_|2-MR0j^3*fKwD>4gVGp?Fx
zA!sH_N4FK~-#~1Uq8DDl3~fKQ*I~U?KM5MUuq_^>DqzkX9`zEb6F=Zz9%*RQju=L6
zdQFdvBfM-T&tj=@ktOWY(k|BUo2Bc%(Hn@Ng#y<}>As4QGrs+u`2C~7YUd?rWeOT7
z=T1LzhX@+s{37=_4MpIg#R3gxDI*Zr$Cfmk^%Lh+_pt;{xH|G{YHB=djJ`bvJRAMC
zBz?U^3{pnvnM-OcURnuRr*M?+fWbje|99;H<{0r^xFH`PlM}UH(aB`?Vs~l2OjZCH
z@$5Bn!hHR}7G;_x1p1J_W$9Y62lr%tMd$jgsZ^qok|*5*rgk>S36y28;|Gqi@0Wdh
zXna=40_Cz_MbG5);&M&=5w(Od&t!If_<h{Wd7VPWSzx{?WwBLKCetOXu2LoriP>l=
zop@R(u;veASx@+W1@)vtLf6hHX6~_=O&?|)>@P+2oXDTg9OB0k!=Tu&djQ6H^Ui;p
z_?!rJwkNV_TP-e3enluqq!4zu(u96wzXDxo+d!<#nk4wajd^w#nvM_KjQgps5h+4-
zv_!mpS0$zI_gVWr!#6qtSLZ70z?=qks%`W5L!y#~Bw@}8oZGyLkXg=O*}>uQ_`_$u
zfY8V#<ovwBu5W1FVcH;j<<4}Y9ztw*UD?IE#E!Fny*l1E`y>m=XE=ymGb=OrwPscv
zflXSbA>>Oa8{@B^ex?<oofVqk2t3*dfC%ZGR%wfS8msH?<fQ^8_G~9O%8lKl^6hL<
z7O>C_T`)Z@hjjgyUr=yGXC&mM@A$zk`A!Mm?Y`p6hoMNQLe-g#Eptnc$K<%3$)zP9
z;L(}Ebl>!7lK?s_<(*=@rAKH5Ert(!I6a##HL2LRygA7gBG25qHH`OOmUH|hvRsaB
z3iv$O6SB8Mg@lLKGj1)Pfa5E4St)PVNOs#TPBk>T*@Ue*$UFc1K@i`3s_HDgNk@$D
z=u=@l_IFg!oDN#;+r8U?SqahO>-zW7CU1JL4;m&QL@&}NTNp$MaF=<u?*&PA8|*pY
zy#8xUhRV{B=}o|VCi_wLpFsbjx(sxYpPl`{)eXz*`Zxkc+{v~XsGe-U#tBc1CqFLT
zznAow9o~mHQx`uKD+~?urvSLan-uy}zb$MrM<JIM36Z{N1%9*C0!}93Go0pGelF6e
ze)}n7vh8FJs}<CLq`>fmt!&ODEi~dwTIz_rH^ABZmZ!~jjwCsO8N8p(a_k#8{)qu!
zl-Bug<6Zt_Nu~mYcRwVq5$J7sM2Xs05MuPTS0f+R9EzHOsWJ8v{5=4jo&3&S{`}p8
zXj6l({w=(OmuS#~T9%I1zFvpBcoC2&bYNDs7YcEI5P+>15)h}xw6z(bO~TT$>mU;W
zHZ;v0;dI~)l&y-ZKCSAYqB1`De)2ofv>h+ewoqhSEK@DPU{b6N`uDcs!?u-%=EsW)
zm-ajIGOsSq4>fkqKQ?9<KWN7)h6qzHc8}lS^i#chdayZc7vxAmS?OXfFo|VXKtKRd
z#m;a&#|ap($&6C1zGtN!R>Z8&*zEQlWg!Hz|KA|m?}BElTt5boyYf+!VtDKMy&QBP
zV0V@uZVutmllF<!q34%3od%+QL4?jhL&4tWK}bl*tE$U?pDqoNvThuy8RoD$v$FC^
zk8!~TL@DBc(~eGFbN|f&5jVAtdq9eNx;;BF<Qpqi0eG33xLA3oUw7-TngRfkj0A;Z
z*aWSG-WtW24md^qr=z%98uj`;$I<tl$*M&)K!6d22#$*l{PC2Q*#h;wt=E1S65GxI
zN<H~&7QKrd3#7<lVN1V9>2{ddUOI9Mt!G`JQ0wAd9H2c!?OaTZB(~adc7w;=Ux^x4
zjz1bxa|?Xn3y&z<K@$Jaz4ijQVe9PF`?*8R)a3;~PyW(vCX*m{yXM)y&&$K0sllTq
zHiagBgQ@{}r1vPU$=Nim-1bzDNz!QT2G(-OXXW>tv1*k5>T=g6IzauA2hrD`e#!;3
ze{M1|Kl~9<n+h;PucBL1J&4uAN$vqjO=msP9rEjinbUz0ppJ^pq?)-BT(o|s;`yC1
zJB;!v-xLW$s@-4UTHB_;%MZmu)PKNtV3|0n2lhSWVx$_l^jB=+0O|B4<?gM!)(U^U
zX+VUP$F;krlqfho_t}5_37B1rOPar+o}_Hnc-YJ6nWyKGOXHH9@71ojzA3JN?<N?k
zKH{=&B#Y*D9uN~m4Iu)Ydzp+12!fqzRC)xtAL`tnGee0L>^0Woou?@2OEL_aN_%bs
z0ir6>an*8#yBEa5VgXHhERY*+C+EC|hrop8;BIp7mBfn(cenVG9rgtX^`7RkglBn7
zAll<OY)=G5zc<`^(lD7}wpJ{#xD;r>oj6HZQnV=imtpA7jQ$;Yknkpy|Fz_J(%aDj
zaZ!N-3S01Y+;l;Ahq9w-5FP&s3ysr%*RQc!h@G8XpBB5@I3TOFiN|>L)4{_gzQg2d
zt{M==cR)a)pqvYA-e)F(OHuc)z+m7NPZ%d)HXfbV{H3E8F6NiE)50B~24dZ<(COY*
zvBiaFaL+5f2aKSAzyZM^1H?NB%?~e>Ntf`JOX+OU3AcbA6XF0F@NmCNU(cqawtL5b
zw8D2B_vgXNU{=OF<x-GVAW53&WH`QR!>{XEx>xHEX#l$~nK=q3`*a&idn99pD(=VS
zuGwcX(uPxy-7mcuODWUXD0>L>K%0m`K}Q*Cq|0YXSkbfz9LakgK!)K=m?09Ojr4?l
zA}OyNyc=UE*tHC&-(evV*Ds$?(D&dZL?iY<?uf;XcPBXsBhmDO6VUX(JNtYwxn(gb
z+;_Tr=tp528OP%Vj+3p@epEJiC8E~EqAWM`<52=zEst+AXtpl=raeFYsoaxVWacG+
z@#-MF=`1anlygU^>fd}|z`so$<{>Ovk^|-Pv%+BSuIb>Ah?+1!(GLEe1*|s!r-@VZ
zM^xoRrWf;F@~G>v5ww8Puri8OopKec_QoH;Ek%=opTA(5J=yjrxLnV5qhc>IVS#}U
zc$+3%kWP$7Uh*nofu{E*836o>NgDM6C+N7aj-8n~t74=Le#Dq{W6`lDM5kzZrrukZ
zf9ZU0)NnTUuyl&j_=d4}Zfa^OgTH6gqwCZ7_dr16G1S%8HrH#GerFes1zS?b|GfO*
z0Qpb5FQSigU0^<TzGhma*BF3U^kINtbX2>Yeb?^R)1+*O#)Ffgr;`KtXb9Z&{N##6
zizg=1H6lNgTQ%!WEz6v4Zpw*k&(N@YH`kq2?{o~gTaJ!?aeH0MnK{F`$?n|UMH8E#
z6mN;T7eC-c`*X=Q+bV`UAmNUo+<9BQHrBB#qBPbLS4F=oGb7Z;uFKOw^_4KF4<mmM
z)2*{+d`a%(e{H-bHx%zlR2rk8Z(`&AhM86qM`VA#HqS}A+<#;WbP7N(ms=I0LoifO
zOK{7=#JA^?{f2rLysAb?A<eEMZmM8XQG@<Y(b(RbAf0yloj-p{D@0C1Fq;_xr4*#e
z7UWnU#yMP5UX7Eh<gV+`iUOk0rHr~hG7js2X$oEcq=|Qp2Yb3r)Oqg21L9!fsn~@1
z2{E!z{mu5V0LrNFm}<t(qbQ;Ovk+bwh3ngJ3R2}Wx7OH&_a%H;?k>`obmlQ8LL6PN
z1=MH%FURo$`)PBp(vG2qNqN0L=_AeAN4qVYm40C-SRUH685ji}_z$6jk4DrCZf&cr
zU7Y`N6U&g~@FqOWUM1x*{W|UK!RJbV=$z@(^IC(ej;6GT{C=vFuyZ0}gtH^xOWGk~
zH}Sa7+2d)=-(*bd30tVqw`s?J$cKrzaQnl<(}53i{qb-S!K1|eLT|_v6MXKVLQ8TX
zpjqJ3A5-`bM0Ced0I=_`@1HUMA{%F3x~1vgbNw1@2s?YOi)yv^yqPY(#$e@YDj*P9
zzBHAGQwdc9iF-BeOzA~ZXp;XuMiroim$m+LP#3_Yl};#^_;QKOP!2)?%qr;z-H{`3
zKLUeQ6O=Dql^O*3i;Z;L!ChKL9UDuFl|n=ftm{7A#_YO%AVk{u8G_F%7v(QnD_ZWd
zGSFs85ss28Tp!lUpAL(fVgpLG7jU2HzL6N|yEvhBzx)+Su!??15nXQ!Rmbgz84YO*
z6L|g*GmJHf4!5rhJ<?y7m9Vv<k2HT4mx>7vi=EL$V#7X>l~)pD1t;jIC1^2yeAz>V
z!8#HhH}DPY?i1PQ!&q$7OS$6{w*wxmEO&KobG+bs$<`g^TWuThNQ`FpnWQ6fF#N8y
z3&tJg#Vg9sInnY^O%^%y&k0lGlH$1>YhavD{R-|*9zSNBtFDF#7tR~}*e36V;Lm3d
zjRc}NuD2MW1q@KQN4W&d^h4;Y*gX@!AdYkM3XeZ`H`7sGMJh<sAc*zp-pdChR%r|k
zTP}3y*W`CB29{)~;sF5#?}OC!loV4_(}a&-5*I~@4(CHTM{=-?{A`J7(m#<MF+3bV
zJwjF1<bxiW@<O~7k)4rGZVKktIsN!34iK+MB^D^l1-pE7L!(M~l%kfUG&mr-MSV+H
zODv>|Bl>%UH~OpNDZvqupMa<T|0Hh+AqH@vK07-Mcr?6F<_m5;?IH)3PBsew>JUK3
z$c+-k&>IloFuv~(SwyG6q1GLdN0HGI0lOmiE-SwV9_Sz&D2`ax6J;qN26)*$*bcH-
zj9$T~Z>*W)Abvl*v31w)P|^tM`uXT&4W7vuhZ}KTZ#gQ=`OsKEq|?7}DNa}EyeW*F
zZ_;OJt~*RWKjBKhGQb!~3e0)%I*nTVwkd48c5=$ApKQ}6zZkLkCBt^6CevM-08k7O
z;>$=gjeRov?|X@&yxNJOA4A{+ch%I@TQM}w%AfwbS?S$Z(blfkmQu!l!4*+WM;q{O
zvwk7Y#tCkj9j=VXX#O&)m?SK)I;FC^#)xK1%sGlol>w$3dAFT4#JpnGKt(Na*tYI0
zPZ7YTtqNS|zZ5k>h%o@A3fnGuR^rI$CSM7gS>Kl?IUtCh3-a^3U-SfR^>z*q54)QR
z-fEwfn$tvyR@^*4VgBC((+QXt<QwS58s;{OjI@y7O}dXd=8d?Y5S`xzlZ%tnJ2&5b
z1cn){vG(V_2;F&T%(r%o7vb@u>CtwX?;{hh3e5#(JM?{qIax+ceW?`=s@-B2<-k84
z$LLl_{sgdSYJ<md>mZLRG{0T=&-oD(nfv+ayVE58c*z5?`y%f$96uF*Hhn|wTTjk!
zQ;0eni?M;<H65*O8@B)U2>fq?_Pu+wp&M2neJfLoy7*y)JsgHdzwmeF>m0u-B<1rk
zC9`RrJEB_F<hcH@>nH`t`#6$`(ffvyXO&Kx@T&M>jDlzfDfN%%1g_5visYCrJN$d~
zrN^MxOS|j82FUJ$Zx*_M%`P!1l=$Mts>p$q>{B};EkHm(QLof6nEN7+vfeJqU0$yh
zr7lQ+-XyC1v%~GawIcDr6AsBs)i&>Q$YhZtG|LW-r!mx87%L(P+V-fEWG6de<>cJ_
zg%@PR>t^^K>YLeaKBbSb+o)dvr9f-|kM{31=(^wquCW4W-iAYm0Ruz}xZl`~<Aiv?
z*z~C8W&_b%?fXc|0?pc)C+UaQvnEn>z;AzQ+5?84%6H<xKMyJJx)lH^rjeEXfp<#<
z+MT-~MM8)4WLHVy?JDT2dtw}fhgDX&afW-jxODelt7D&fj<f-&%7nTrV$^r>lbA6;
ze61ekGw^!^^e?_lSciq^#>75nZnO^HaH<?tqx(yf0%Ly}T9|lq5KAwVxSE<>NBwLH
zrIyR|I2trietjsyY*es0p3%W60_H>euPMtb2VurmvQfqC`QilV8h8bNCl1{I7cqd#
z0;|RzF!DzuDM<^_9rdrLhUFn|^Z`ed${hSl{W&5OI06U{HlNhq^d?}^ffYcs(N&XW
zHlB^?(z=WCR+o)x5`=<z6gCrx6#WzjWB>M@=KTFf77$j6cHqizp?(qlOmUPVeg*)@
zga){VI3%-^`7pBGo_DR?JXY{xJK=p)i+7jmf6@%ZXcM%s)7{QTQpvX{QIS9GZT+_=
zGo}sEymgp3lJ>J1AXu!QQu+a7Ww+4V7yA-3H*fh;)%BcxE-{Vs3~Kpix38&T64-Qs
zPRV9rs|g!@wxxV=FT^{J<Zx6bD3h;-CF(wxTL^j*Oa0gUsV&P8uSs`)LwlW98-CWY
zo^$IyWmY>Mp?!1PWaB@h7f)u7#nfUAt?UFXGgqQcpb_Rz4==-1+@0kjT!yhtW@bt!
zsZ5Ej-&Ft#8fRE9(3ub1L^*fpS=@1#L(IhliVjQ~Ag%|m=mf9N0c{2-QP8zU9izZI
zqg+kU`lEk?H)~FQzE7@PA{Q_j@M@<5xO{gEXOa5PhBMxl-Ph)+|CVtMgtjiDlg9PE
zEL6*SH6=iqrizwbVyoESK+Vzi-mFn$raFm3r0UT?%L<_&@P5TYFw61r@%4%%>#WUJ
z2DAD%sV_^Ytt9`EmCefGh)VPBdawx5BuLQCG%Q4?F-@0EpAJyU-+Vk{xk3@)xc|^-
zbE#@IH*aIyU0&z^cal8ONR7|3GR>k%1@(TgcltbiiaKUhdQGJUg2j>=ZZE}GDmWrO
zZ2^#IFDO^vHLWB+Vo;d9B?INEwJ@&Tdj$BfC%G&rp>^QsOs?$r2%TC%pVxd(%)w;K
zJ=QAljGjMDGF%=Mt)2BLeZ<r8rVx<yoOA62-^O5I8|~exGo{1+1ypM^)Sfbu+ynQ5
z>rB1eS!GT5{(8)!>m}RI5bVx8f2A~vapzF3py}f<P3%b~+$0ytmtJY?B}sc94XIsd
z5=Th#{$Ct7#9kH(7lM9{6#GcN9>Lp*(xP4FnXPdD%FqQ?v&T=RPNY3iR&IYwB^WJ^
zMQw)0U@SmXeDlI%jH6RP;4S{IwL1S0(DxxEvI$kf4OnjoEXkOlCW$t2!vqUDd^26+
zp=fVY0FiGQC)U@?kum;#=wyIeR~-JKhV`K+y{F4~Zq=^)iy<#Xz`s*4iyq@WKR49^
zm$WL#7=_Tt^@<x`@2%^q?Gbx&JT5$^c#kOP$UJxt+B!{+AN&&)!w;~vfbwH{$EkfO
z=G>^2yUle2H}Wm;ac+ZB9F}=&xk>?Jwl@rbncKJLl4g!Se=>|)Y&=Ah!PS9}dOH<h
zYm4oZz4J@c-yK%qLCkwzFfH%&ENTdw&*-0OwU^}=>e`?4B40U=mM`=y88$|3dkm05
zcJkd8*F+C^Nf6Yof4mnbG4<0!qo35^C~8`TU1lS|EE-L}&)NfiD87lk`s3O2B9}77
zxmg-zE<ZT*ccoah6m0?M7$7i=lnyHo2tEk>&%wh)kCvbRfFdzDCI&_5^M<VmcDa4q
zCvf=d?S)!3S}2Hh!aX8H=V0{h9!idWy~wb7+~xGqqTzWU$tbN0S!G(%VI=L_wU^}(
zKVV~<Odp*R*heahnOmn4+N^q@3i2<chsoMyX44ht-$uM_K9))TxV*9W>!O#>h$)|V
z_^n2Jyrs8<RRZH+J_8#0EM^h&J3N48-wH1kClA*<ZHv`ne^F}=(}doaCRcZf>op^E
zP;V*?c?DeV(_T#JRNPf`@7AJuB1oHvitZfX{+g|KH-$`0^CI_HE?Gt0EsOwdp|iND
zDr$-2eTO7H59O^EW|rjJv*tLs-_Ae%vf-6!at4KK8b74e`4iB<1)XqyBzpUhloT|j
zS38k4e#BppVQrQWvoyP!i;hekUVJB@nIL3<1o+<`<1b1Cs1)3)f>@Rxe+#?EHyTEz
zVWYI_Sn%$3f`AD7*=5G5QlC2v<g|TY0-Yc-)~858v`pwB+NTai<jj<gcxIGdFN-`h
zitB&-{O0WV+zJC0_4OHo(6Yc#oLyI^nRU6|r^X!^bRRk`Ixt^e(};k+Sv|`3W(v?I
zjtG)1m(}zAlDppIP2y;_p+2cA-nyY$G|7{Vf=?**=_4ckLqbK0a?X;)1L;`rJQ3$<
zyA%IG8i=NlV{{FxGj*dzKPy4Im4S@VL4IEP%MDZ|1v&A!NZ*_x7&XteLbN`m?7{}D
zm12b4H+&48oEe9`Ua1yXu2uP;8wwb-JDT45S7`p-K|qTj<oF>6`vZ}}l&T6+LH)LZ
z#%H5rmwVbo6%wSlkP=zlWpH7sf0%|+^qM}RZU;vG*<*)sKJe6<ROIwvTZPEf)|eag
z(O~HK|GG&(=OJ#bTM8ZV)x6v75E+PTpaC>n6*%g@VtgQ!NChEtHDf!>4L@7#lq1Rv
z)c|>%HJ~@Pp3(oKHPO+x>wll^mC}=6I4Bf>mxM=Tp;K3JC%-ZdKXm)De4`{Q&W{v0
z(_Nq#Icvc;pZvzMQBB$xXV@q(W|OP^dx&s16ky%E+}Ij&#9;h#TBpoH@h{k)-$6+P
zds!`}zZ+_M3f;3!Xavk}M7t-o2>~<wzrQv|0ArMoR?ky`>u>$K?`QIq?D_>Xv=j8g
zS?krRinn`+a*;oknDb1nH*gey3O$z&wy>vj8)@!GR7V22r3yTt1FWH(w|f@#_HW7!
zR@3(e)el}v|8+}^yVLK!3Ex{AA8c@VX_@)TXetwXIW`)pK2$T-VB|gMHQ~4cpbNOW
zvT!Pz-$e>IV;5NyZ%)jajEydv<Nr1waOl3=c>wfRq}mFECff8Lw+FHAKYNarRlEWQ
z#9>Uyq*G4DbR9rjH3%i9=QoCNaRD<j43cdRfOoI|D%i(-#~+<eV;K|W8+Pv!29Amb
zSb2DH4csOYG4t#AFjMQrSZ(=>jc}v4uZlo>C009~-b>`Q7Uf{yOsJQi<V)nz(tC}b
zJp(L(-`xA%B7;*;eyzU&Wr6qo`qxHN<-c_#OQQBXtOxs-Nd>pq`MzOK)k|l^3yu~Z
z@Y_C_@Pt^;wLtkEKv}%!nVG(X2Ah!G8QF)8pZ;4lEOgnqxj=&N&ubQLekx^F9R{zb
zi4Z*yziOwW`t2&*`5#zAT+RGdnO<C-FxjG}gb8MseElXJwaQGm^)YMxeJ%=+B5`(h
zwpPaIIsvbCZ~S9q;pi?>5&5AS*jupI=&KbC)ocLlRy`s%&g$=hI1gv$W&WE_LG)bE
z<6W=yh4rk1x3lO>mT<=0)R8mup4bv4sceF0FRV(mY+mIar@}vBJJczBd$5A_|6M2`
zIrV~At<IE5y{G+j9j%SEKih@JjG>+k6kDtPcshA)UmH-gVWJTEx}yC{_;^izZi4zE
z2Ro=o`^2haCyul~2yf#qAPiPAOEYo-JW2@VMpYL6$TOj|7)9Gv)$IDlkG>~iWOCGv
zy4a5P{i+nP>U;0Ov;gvpcP$xLMTjmqGTdvDVLLZo%W+Pi?+H4)Fw!wYC|BYdmW$b3
zz!ooVpSnwO0Hn#VGrxnbZ=*gR?#ZDRLY(+X@(Xw8AO3Qgie)zgqrE0}3iK{M0PJ_O
zS0zRUl=SO!cvbGONY}21fo6r{-t>P<UW?Ql%)NX>k>h|SU=IZ3lZ&jV^R?8G(<+%c
zPS(oe{!1*N5Nvd>doT3u4R^BS<nQ0<PT%{xqn9V{&)*NG9LTAuIX1SH!Q7d<vB}PH
zRj4$rgJ_mtkrThTaVRB9Uj=<mWN3^Y&7ohTwR5{{X_#*pHu2`XzA~lHR>80bm7Ukv
zlMlXIDI!obn}Z3AXYRg9jel>0V^IK(Yd8xO_$(8AP*-JJkEvnM!xyi;ECHp>8>9qT
zA1|Y7J$~T;a&9hj_iJ4aY5)GT?lH}8Kc0&G-G3nCRq#MV1E_Az<;>1YNGL&sbni_^
zVzIWHDa3RDlBnPGXfWRN@x?Z(c^#<qVdQk-K2(NU9vO*OndTqDKDvI0<tM<%<z}&x
z04OiKBi?n`yIJ8K+kS+UaF}ov%876}tAcWE^%92gc$ISe8~XC)bpZnQpQIKqgOa%l
zW#!>##m3KgQp%*Ug$;xU^u#>k-@VT6{_y}3Y#t9dDjqqtnBzyx+Z?cs_`TXl5N$2D
z8TqQ0-aL}1bKv9#0UyjTWkm@fHtTN_wa@P@2AV3zBE<YUhlcE39EV<Ce$}mYJF!Pc
zBKEw|*su?`V49-UEhL<Ng170p(LpC<{g{i5V0^aU7}fTyI<#|gXrz)_$x%;)$!li=
zMzFa^nD-_n7-`UbXp>zBhec&ulv(oahjWKz#TcJ*U_E)5+*cl2&LQ-5#c^5eJ{rD+
z!rPn_BKYk)2&YuWbEWKC*?n!H;3D-JD)qH_8ZUyH2aueo+#OIp{0^_i_UMaan*5Oq
zTFd}O3uzvprl^7_zzyMQB<?v}YTNrimbce0eu;t_NXBYzi%cmM0!>$2fL!4eGt*Ht
z1b=DBqyYHj&b{@Y;nB=lD5)76YN?rZNRga&H(?iaEkY6L6yTU*gD0{C2h!wUI-Q)H
zL~koqnyfOTK{*mWCL~O%B0s)T{3>$PJ&EgD8vXP01er&9iKWH3;oz8OTptmvD%`bx
z>_gHD2_S5<5UK3U%JJlQ_z*WdM$RF}R7&#qW2Sf`>v#cH!U(^4iwl=<l+Cc(ONxEE
zn)|U$9V$c~Xg3IDC5(FdRlOULIs5Dp^#V__>g;+IS#|g)Vm(3`YEn>al(}?B3AX8(
z$!YPtrxL!ztT$0{&#Ow;gZZd8S@S>FB2e^f8&ZIXA!r4-cy(BaP01w#logo<JB!a$
z6st*Z1Bl+?3!KZs32vd&>uQ<_h!uQ3`d-E)BdKv1T$qk!q~dment4$rrsaL;`JS?$
zG0GY8o}{(9LV}e>902DVYKjQ8_Y}>i&H<S`eA6wb`Y7F9;iYfRQJ14156~R@@j&+y
z<Rz4?2dEcrivz|NL&f17%bq-K`D)5_@)6bu^;qv&%BS2&eG?B_HNg6%fg-kI_V-^A
zc#|jE`WH?|UlM8Arx0enPfP>he5eYk1|6_gHKF-6!lb{z{k;KWEouiayHPLOj4lU)
z>^l0Qy*s>?oMf&{X8usqz%v87#bmzBs1!XA&Fax=UiK;E7J`RV<mmYm%1VN!g<Zs4
z1D<MpHOI4#V;1b^l_DRTQh~>t4tVW->E<QPZ8BWS&1IEW)0)I@apy2g+;6%|hz7>;
z*=_?PcN@2O&J3TfT@b7jpTW)zAG}!!FhvbtQ=c;}VD=hE;uZ+)kM2f}ko(}fuQWe1
z*7EUHqTf$?GjK5vY8ai0!jJG4hXh6PBcZ>s>ieeFf;`?iYND+xL!W{Lia9?;?M8&W
zoDAwYVGyC`dBT)@(Pp?R@rLBJt3qrzl(lL55r=lMPVhE4<5yE|RzJH8D85=iujOJk
z<gK#;<z9v}Kb98vNS~b+z8fB^Q@eMDF4-+d52ZO~$xO{WrM}nO7#R;cz@Nrrx<$1o
z)qKddram$lq1Qc3{;Vu)qV4yNm%zPzR4P6^CD!##OpfWp?+)nVG!2zo>EpP8fHd;7
zLeZtPAuTCx!;#!R0#u>VDmY(rpV9hYEP$Dks2EpAXn;GBiIt1903cmvx8F|KX%NMm
z`C#$7+*!kDW%bogyLqFl8=;r-v*hwWQadvr8yOx)Xi~@+yDnCjK9|<q=R#eg*<K1!
zo5xf_dzB+D%q4#g0sW?z;bMn(i1AGYL^*C=hU2vd{do&=W<y<@@%L^un%1nl_k=6|
zi7^KC_1&}e<zL_}%do3AHty#Jb>Ubr|A>=(qfn&mCJJa#fc$d{pYpKAt-okrsr5We
zy*pWgS)v}<x7G=G=hU$#yQ=vWwQqD(RR}Y!*3UDFElMk4Jz+_{NF4pL25%rH?swA4
zj5?2D8j05c9QwFfgae-*W9;e_*v>Ybg|5)V5uLFn&*KaN;*-w>qa!4Zi?Rlm#Ic1S
z+b?yAln0YtkF!un?p$osGh5uLoE4+mvBi;qgy~)Km3>roD!|7|ML$Q3<_*t2H}smg
z5UMfiIe&%}SEOv2i~223fyKa<d@xw_xNjJkoNo2NtH`y5Tu0e~&Z0C@)V>IpQsnmz
ziO7efb3^$4(`58_O`_<#qC0H*VHRSK*(PPwlH5}KXNajcCMu90-ebLAFr|Pk&aqz%
zUCi54t-%Y4wlW|LcRVHEjdxIQMFAHX@aXcHg~lz(t*QQ+XQZ>+)h}~`jFoHd<Gq43
z$-&49oJG|O;1tXq$(ya{&DtYjtvUn1W87y1<lFnw0J8GIO?<rhw5%ni*cA<<@F1fd
zAYAo7L9>3|iDQ@!DotrVE$y#59e{@kIC6AU@!|9QcD{{=NG!~IW24~N;Sw9^zmF*r
zts+U0p$9>xi?^4~$f5rFlm9v9YJUEjDBz=3AZsN}k@b{z_hP)3;7QIm=a+MvaSxjY
zNQ$46;JUG-w%;NBl-hnbje9TCqv#!cyPbiFTZ;CUidtA^{9&A)qLaN-8dIhP9xm&C
z2*@pr7KfEJnby^P$!9aU%N(znLkN0a)_9Z{C$Q-`yL1E}ch3CcsT5OV*c$G`9|`Ua
zcmLS+nr(hbF{4@`j?c!8V&G*4`E<5D>EYbD7@p)Y)%Hm6G-qj3XpsmxN9_(&in^k_
z<@S`7)?w4z&EU*8Qzc3q_M{%ZZN@L#>q1)wyEmXn_5*A}S_mxxNTk;8o)Y!(I+sNr
zk>|1^n2JcN>hyeTwoHj&Jb!l5wN-Jl8J9tBvH9JCnP0&cJvr<KOcmFr@oYb<_3mk8
z{%bb6sID)OC*r=?l3cuKAoO!7+6@{f!z90XLo<)$Wze?#R9{=_!&%Pbrdtduj36O^
z0>?QY(ITqBxT0=C;V9&$Fcr?SI036bEQAZ$)dTa0zzcMHR9XsyN;s_tX69`NW@2k5
z{AA3<&tY1;X@1t$$Z1D7uSMEzVOb+$kmE_Y`IIQjKqYn>;=ADQPim`nz=s3RU+5KX
zW#9rID1?r1_M|7|=9wVb^w~N9=Te3llDGyAl|nAg&kn*)j^Aw`e_f8uF~zMW&VB{c
zTsTSDe9Xt^%bA2V|C#l>nw2Nn+gV(N(34<C&kewO4y<*jk$CKWgJ^igvL2RtM3a)x
zdihR`E7D0UU^d08H1}L#zS6>AgF%3*i<g>{ho$mDS|<8OB^Su?3@TRG*hiY_UVkUs
z7j`(_<vDJ%j~s?u9+}-m7@N1Qk12Qa0|R^3QWIqMb?X~U<-&TFpo}^qa(4>fVXQbc
zays5u*#oI%5{S_EzLC!p{qabNYlE$kH1s<(BTSNn0+vhk79Pi}mT({@@VfHdcHm^n
zi>TPAScDHkAU^P7hLOZWv!bs;r@!*=^FLvceLf__-}!6tXI2oex95^q$u1dI{^sOZ
z)@EFqIqQQ4438rn6RVx#vNFr#X`j6;_&#o{M1wP8ebS+61+&M>@<LT-QP=2O`Ol?{
zukJUG+@@{(<eb*i9i5d}wZ)ORc2p&blM`$6hl@oo%f4EvIKUJ#MSV8juB3Py!vi8r
z{omu3n~lDaw<9MWsm!192xRpux0Wn&_*T66<|`CG_m2WXxW1|k&zbCkyT@mBpxDWF
z198fMjzvgY%m~`<ZrJ*ssEjMKvA^OG@VLX%=G{y4XiItB=FbPdbixO#Er~1brRX?}
z4w}Nan<+u7dX4B<pWu*F?%BuNWjP)y0rJ@B=LbPxgF_YU_QwpsR^ekIJh%<+fVM30
zk9YRG!uoROfOwR|nAVsuTLX4@v)*?b)2pxT)Ca5^|JmooR5&!5S5k97d%N0O$7e(E
zZLvq*_Qs)}NV-Q0d5#9gJaUa5_=9|PE@C|lnV}+n+cwG6@oFUGwo90;B(jQAgnL82
zXgWaZp@jbpm?BQA@k6pUq`h&PVTbMR%>)}8CNz)~@!OMgk$LO&MsQUj+eFhXItVQs
zgrl{jR`%v3M9SR#Ei;}E>jt=Hm`k!tHG<iL95Bq9zb8-T55p$WGMa0GVFEKy^}z`4
zNfM6-(@V<9k{$Z32W0SfaJF+=zZRsWJo>!(!cuFWenS~!x6Ydzuu+VeCr3*=``Q_v
z(ye`wo1ty_XR<!HhgnKA$89!zW0*ED{VcHDM@@>T<FAI~LdapIgN&OXQaY{-&#{}1
zh61S)%>}t!QIU1LFQ>c_${%-1Uwn==!BT$<`G2&%by$>J*FUZ!NQsnyGzfwyp@MXb
z2N4k|k!I)=hHe;eR6-DtmIjsX?vO?rq`NzY?)ly0IjGO~eV^w&&+ot=Ue{bQbMLkH
z`mA1S-@`jM<;*A%(VP*-YENqXi3tntV&UHk2U}V>YdCej&BhzWPt3krA#oE(jBus#
zzO^>FS+Aaa&)|<)BBJ{C6Vdp34M__P`^}Tm{4}!&A|yt53Ug*o+s(jdQJl7IwK=}o
zk6%l4Z{C*+cSSyVX4g(GUc6<*IFX;=?jBXi<JjAL^NwMZ+{Z3~$+w))L!AZDM<0mh
z`(ShC^;)j4WN*OltR5>VZ9R2n9Vfgxvj5$D3!jN_Y*<cf`#^7^cR$ok**gPkz+`DQ
zJVF}aSU73F&XDZHUU?;Tcx2UQ-F7#ONui|!vBV$~=SxKWdEgw!)KQ2X&(gS)f=NkK
zF&gHJ2=EbIeLTYBy1@%o^_fWNqs}_%Nk29rNZUOxp9}CoVo$f79WRVzL6uTae5(NU
zx|P!~Hx1B~l}iw6D|x+K1#J?q8Kaga1j%aJSE3*xMI6vToDE*DRD6=AN2WhaTE<@?
zeJH1VSyA+1-SH|e!sAPWyzJBG$rs>7X5@sslHF4kMv2&%ik>$KJ%<w8>sGpVB{-es
zuTbp9Pfb=>tH?9ZV*x7jHh$sPrKwjOQ(GnO?(R#dY<z6e#p~}cz@>0%`z{_&F0Dw{
zErn(0o<yz6V4z`6LugkG*8HMegik6@dUxp@=F<1C+6_SqQST!BMx4K@xOu(q(vvCV
zHXM=rUb&8<>j~OZrmSYR(k=B|{nj1}{?FGREhvbTKK30-KvEP+CKjezm~7PxO~)6R
zQVf;8x7{c5Tv}=Zu4SX*0h&A&H~UhfF~4Vkohy5;RWdo;#x~I?#lG3(tS_LhZ!P{f
zBj91;GaARo;kcm+;(WpWj|pejcs2dXM=RTVir0Xl^Y1}bL9=mo@kTsF2?1;tIS3nM
z^(g=D*c6}`)9zT@a%TdMOM*g2gmV_^;#q01#rK3QO6{v6^ozw`fr)WyKY0T$o!#7A
z^_l34p%FX`zAcr{C>L=b+K)`2I|fTKYD|9#d}g^(n{DNyF|CDLNCvkj{M<dYD=0kj
zj3bwy4qsZqdaVGqBo^aRmDUqAU;hcPGVO;9LdZ4m5#JW8z7i*IaKPL6awnUinY9Nc
zPgOejNQb74YNiHm<Z3ueM6QNB(d>UkRE>3b>%Nl7Nu|(9tN9p5CG$>}p0GM{^w1s8
zckki+Xn*0d4y(t7&<q#8;e+qeHT3MyaEy+6yWB1S>h6#0MLk*OlP;uh(@Sw{W&eQ7
zFNL}{ubpTr74Os$KGre>MUW(=O8D~GwM0g6k9<=Dp{2-c9<CH3|7cnH^s+TGa>ENl
z6UKTXGh1!xCC&mUX8Tky%S)K;(d1&O8Ep8t8msoWX3)^((a}SR)#g7)L1-Jd@HLi9
ziAp1AG6gsK(=$fZ$IFUX59^28xf07k2#kco2AIfE=X;vg!oD>6mC1@i5z#ArU4;c`
zgY;Ra4#M!))X#(6>Jftk0El<%+I?LV`N>Gxy7%~iSA-u%+NZM*-*RLG$Nqt?P`|RW
zg5cw*7_DHAer2gp7NuawRt@}#3N_Qu!xODEYn8pwgjmdf$lt<A_kkT=<OiYNEfn@<
zf}O|?&j|%)x@?PR%7N&`d`*<f>@70P4>~0CIoR1jcPJ<*JcKt}IEvS_06;~8kJ#oo
zEQEKX>{p&!H7SCt5jIb(j?!$L#s2VF+NxE$uruh(@)??lo`cArYy$q#@Qnms#l+uZ
zg2Q$O5-kRD^fo75zP+<WiYMH)n=Du+wNTx8SG}dKS{^M7t<8qUt+3|@+Zg5eh$`qm
zqZICYr}DJM?E8HJPtj->(%oRDU~wLKs>du_*2uTnR#!L5P2@B6o8<kgZgS&|z3e$y
zZs_XsR$G%7O%`_pw_?@8)>1xhZPT@?31(&Q+9di$7Z=RpzvR@iVZ|w()VViSpmgmd
z32Ta`EI*5Wp_~IGmxz1l!1V<=8YaYYNCIbY$foPIZ&Yj;p1Te&><H=}u_w%2nreFK
zdnfT@%Iy$_FzzI+B`q@-i2TOuUfyy0$KFnpWUN<HZZBg?>3=shaIdl3e}Qfwqa4=`
zTWz24!;?-*i}j|2h90a=Olyr{mF@_pHPS2Yn6qbwSH@Lsf0hW>fg4xyrYz?(JA%;o
zZe&5*=@4jCfi+jlEh{^1ne(gG=Av^abaCQ+YxdB%ZhjCC$dta$ZLpCr_)+W?cpGQA
zV8|2#bZpz`I3uT94K6AGcfaj^wTBr9C=G-$;*6(C0Qh9bcm1*(gAj8RZgFjQbj}42
za|;mdmN(Q-X8Kj^TNGm9H&%j&GbDY7^55;RDf^jW3Vi=8=4W@ZV&<y)kf9QUctj*O
zSy3ID?4aGc;sm^7)3M_<I!?%Rvcw4fd>)u3!|nx3#;$Po=N0~uu&cKfXiZ~I><<<a
zW2{FV=6Id#qWiRmL)EYE#%nZL6_(J0W6RJLYF8E^0E$Tnig{g-_l##-!qR7`a^?ZQ
zE&=Qe{cwexbG~s;xsz#f8)mV*T1Ppi1V}3FsuO9$unXC4rDDBy^=8TgX$N`VD&WGB
zF#=($rl{I4#xsu~y#DpbZL7(9cgK<=Jw>0!nu9(+_DOM_e8*HlDfaPNA+L`cg?Kv^
zfoG<q3qFpDYXN=p^k6;F%!~_g1-DpecZCk%)|L^5+Dog6dBLpTOBsWxNIV;wBguu4
zdzn|+4dJ#})1x>Ief1a(yI;Kr^Itt)A#8-XaOXShnQ5>1;N=-#^x*?udSF`qLZi<<
zt6GFgySvB>Jz?0oiaJj37?Mp`*DD{X-}KxYJ*xL+nC>$ceV9|z>$`U^f*c4M%O97n
z*B|4VHtS3K&NxlJd)xihVL^!rut=h`yL`e7S}FlwTn!gTkJ$}q9Q(q{tkVL$NcLv8
z{L59lLP{rXhnlc9iWsNn9x6Vg<QDUv76>OPNlor{k0!?JsATXBWZqJeA4WpAZ6ITZ
z`S*6&(kCfXZ|CF2*yR-r6KOQ;W~9_U{rGHE_j1@X`@UkGxo1ws*Y#vO4z{UWmo_cp
z?VOBXt%g1x{}MNbeQ4tP%;<7voUDf9irGY>U41*V+92y)=c;!TMdeIyOTNU7G#l=f
zfLHfzmyTlG8$w!S#s>pmUx23&^(VJq1pEvpHz7%Wd5CFnc*h8iD_MdtV&o~V#&ABv
zhqn|=J`wy0A<skZTm+Q1r)ZF^pYVJsUBRGUH)|_2u?hzPp0TT=K?ruV?SvE1f@4k4
zEDzuA>4Xeal-_E*T`WZ6a-3D2iJslV3@;?^H;92b0!_us2}Kb8btpwxr!1TlxT3MX
zj%K!XVgB`Cp$099`a<vEprgFn<lYW@{ERA^Lj5HS>370j$j~>BN4we}pqoUVZtpol
zA+`esQ!a~T*B@mDplgqR!mfpOe?~YyJ6fI}_;giG=S^K7+y`MZ9y5vT+as5Nl%S<Z
z#<DU7@iX_sEQTD+%0@}OdxbfTd(%Q*O1uyPeE7$-706Lm7wH4UUiieAHrg8rA~#vA
z7w@ae?{#T#a&eu^h8aXFtKXBw$zw#<*6NaOsCC89w0VH_VeZS+(z>wq+UW5cgj1W1
z!>WoMTFM`q(~bVPh*HnoscaGrAFO=~bF99XA|f@ffMeJxX2qhTX7A>%;I?OAD;)`8
zF$<H#9#+-RaP0zONlPXX3p#M@6HsEL<<k*p;mFP*&oGuKc@BxYGO-_?tJ#sSnIkKM
zY6>NL#pVa0RE3NRW|9JGg_P?lM#D-k^z@$Gr-|e--O)&4W-rEX46T};)hb@QoZ%^Y
zYjLy3AbpoeSnS{_%hqnXiroicxC%ax>tF{gH%w`oPjZyB(s-nh#4>~)-i65^Z4hvm
zBO;;Oacg;$(p!Q3jwI#dbWV73_pUHcYr!#dMdfHhmo|H@y+Iu)t^sCrG)&se!Zwj7
zH(pIvgJ;s3pxDrN$IB|efkj+pYEC?G>ac`)#VAA40sC2)(DL^W?#+{%>YZIu>7S+}
z0_)qGs4iu7N+@5;YZK+t8|?TzsXSylY#2n%@~+C2@<=$&m3=J`$89VeLdsUG_e^Oh
z=aY=c3!6&8k}aIXE0sJ~mRFpLSRtM4^`JgGL71NXv|FWnLE6{@X!7S7K&?epjSl(Y
zG%W82ca&$FExf+FQHd!~zC60VgdqeS+hD&>eM=0!=Wg$?8$E)-)2z>%L3NMdR(VyD
z?B_)q*CWJQ-IF#J7-ul)LxJ^0JH$b@eeA~KH*fV?z(?6LfGb^}H%2t4Y$Eq%clmDP
z@8VRhb;UP_Nedru;ZQ*ooKSY4qtX?bSxXZzR{(9xs6a2Xh_H2FQ9_WR-zm6|8R%U*
zx9TzJvOkAd)E!vKdf(nNG`am{Z*+Oamb33ISQ)GKHJL{(tjBK>d3d5n{84k`27aMr
zXr#-*g2sEdmRyGg8KxByPq&s)QVI=%Ou@nO5AJA~*Pd&NFAFHrF8UWihs}LNeW+!x
z=YE(z034RjARrw#SQsBaGhL*%TB0Eq+7}H*$C;L5w2&w}VRNapSOG2|i^&{Udn-j-
zW-<ACxXE{?y7L}<Peo9%>_AxCe-ydUAD}`+i|<$1cuec^a(Ks?M+(NS{3Y?xk;w#A
zwx;DO8f8>T?e?yJ(W(mpzs2*nQcvoS8`BXCO^J0j8@fy-*|z|#3q%eDe)Sn_enW+9
z4vRUxCHq!#a@}Hc?J>xg={MCEoq<U4q*y6$g&(`s^lSK&03$()06Z6$t!2dmO(Spo
zBwl!OAtlePQrnUIdkFsrq0ZEVzLkow+ZFqQh+%{kO`C{a3812|(bys_#@W&r4(O+r
zis-vJdGEiqHYfga6CLD0>Ur2<4+>w`#B74m1rCp<XRPk9`$o^~?UqUO*?NqHapfHj
zGN^?m(AiO@OYoxwFoeJ*tGOB9hjH+_^ioN@EqUQxwa?-1)21)7TByvgC?VzWO$Wxv
zAa~Vx_#oo5Si4E9Tuce`B{(y;@9=}X{3G7gOOzblquc%r?7be-Uow3nU=6b*?=ok;
z&E3}<%xZ7QRZ>$EBIvPYunBWF?<H`>6(m3G;d%tmsobcLerpiguq(?JMRJ{Y{x~~!
zA$00cmdSbf%Irab`~+OI@2wNbiL_ES*RCov;3Q)Pg@Qv5s3$xj!o*hx5%dN7Gx;yM
z9_4DU;7nAm9vdnZ_cne1X1<NN07YA*px8MWoLBa%Y&F3nq6LrBfSi`I#oB}KD7w&*
z$R7OREE5;%+IZCM)BB9k%HfD^jhlo;X<TwfxU)#)6*wQWOcuPUijWw5*b^WJ-z;L<
zaqXM{?x9-gQPhaKb1?qLD=-;$Er?`9MOC%^Jq8Jk*L2L8d2eUQP|vyCNgSB_XW#i;
zRw#CRHgeBdQagJHuYT7^ZmOvCn$_}snmcwM#?1gnx!p$;e=gJ^t(v~W6h4e}b`}&8
zVp|WhKkVmWO`VDwjCum)c4l3bU>|i{O0V2(r1vXR7`is&4_igvCV}$sR$M)LTvl%9
z@aQHsh?u#95b3Axi4<#ZSje>qcfu{89gU{JA#Pn8Dc!9u8d25o55o!vBAf_<euufJ
zLRG*C>+d&l9zK~#7=r2(<YEQIgNM!Le5qdgt|^Bf?yT@z0dGA>{dQmGAwlD3@R6ye
zp{nYTo5dkajk+{FCBrgvZOT@wi%EFDNrR70Q9fOzDM(4P4`MfB3-kdb*00$K5sM&>
zrK0=9hD{;l(w2_;(WSVE&HZeP7(}`KHm^3n`IOLfw*9dw%ih75)Q91#cO@}{o@jng
zlHCR_!#K1bE|B!<qmsDxcmR*0&|v9PJJP42S#5o*Te?za=VBlD6)F_fYU(PG6KRxs
zzi>4T9>gE1?L1oWMcmP$?|@CNjSLnu2lYT_1&<?f)b8rkjzR~PgNoRB7LdY=y{hPw
zwsQ##$^3TJ{TQn*O9H6$Zx%1y?1A6>SU`c#`#O#t@m#I3ej)X4!KtrRQq{S<0-Mbm
zwBjl{tiw!GabAA)pIvC0bgMsyeQ=mh6|0;>Fz~Xgo?v-qg`=~TIOtYBU}YuJ*6QZa
zj`rz^H1@EP2vD4aAB-)JeqO-%;d@<WH-mc-6^-{24CSS_x-eE;-nTxAnOC*IvSu8|
zJxno|4DW?-8XaBA<?9aCyCXJ!G&@m~OV`?ieO-}PmXxV$kE~&trz@1nH==vkpP+da
zLtQT1W428bf$(LBgHE71S}#xtIX%k#<nO>3y;ECQQ=V;@CE<eZXfwiA=DK%N%R~Ke
zx^Rko6?)ReUlS#*K}N#T+7k`f?^j?1`emr#jrU_y%@#uyiU<sD?NYSCoTZvfeb~2m
ze1q}vvdUPx0eH{I`R7t{yu|MUxt#alRoYpmX#2^IJ-QhLLZo<VDlb7jtu~UhA=n0X
zbg?C7YK4N7Rb?6{*~?)EJLm%384I{I%sy2qN$1({)mg7aAMeB0D#x-C<ha!D_uD-W
z-6*EExenc&1)H}-VmUzwV0h-PHInDx9wPkCW9ui8y<KFY+$Me6ZQQjhL%1GPw*4bs
z8)81##kHRzo$9tjocwk&>;+leAwBIQAD6m5PH9Y@?3UPD#u<5~D>f3ze{>-BJWLbR
znF#zmiLB|&o{~klR!Xa5bPSMS)o$NoXS0Wx9&+k7ei+hkiySBsrBY6s2l1~KO|c<#
znHuVmsX9}RlvK#Xa4+h&7qO<rX@xxc>M|56Eg-}(?U}U=A$5n%Q`Qb;NWUROwjSbS
z<KW-`w|h@GOMt}n8|xB~<-7<|1>*ly?mFlafdyjNV7|C-@vzQlgv8e19w>?s$aN0y
z4(!&?O-Nd}3a{jKOO;An3`+T{6k(%JHeEWb@B7+NiwqpLxC{751sT<xV{GwiU*9_E
zj8X_S1JOAmve0<m0)&Q5Z~l!r@%xDF5cII2oyaOiY(|}*np$j8_G4#CVqek7H{$E%
zf>N2DV?@VnBxDfP_sf=<+fyGuPrW0kZ!lW54-@pdXUgkKu<6P&8^f=z|CmKxkb@*s
zUDnsa>)i$T&W{3!Qv-5k*nq59N8i^IIRzQ2w4Nz!f%a*W6i?}$kQW*k-u|Y+yR>y=
zB(mG;-jZ$fWXjHYA_`GFB*WWj$JVvy48ivnRFBc^T5?+B9G}f~AO3LY(&%;p4#HBi
z++0srC`gzJun)*nBDz)BK3oA73Dzsj=IP$R513_O;AXIaoH(w2bP5U5i+z0q9QzX8
zWqmpuqQIt>Bc`glG@5;Py^53JScKfxvySPoVMQ*|{REM(xtoIiL5Uf?w_&c|3UOS2
zq!jDu@+2T}GW5<ShmpPuq;ORlw!J<yCDi2x*29@D$j)T5Uu`Uc2nt0rEI=$&h?r*H
zucgxXX0BwW`i%vza@jVHtVw5>rY=8VK5)i*R&G%%Wn?_`v8a`X2ub7X8^aF`%&d^;
zly=U@eAm7`#36p4J~=f4k^gyAaHxs+X*T0Gs}?oc-R1B-Ww8LCO7Umf{!4j^4v)ht
zlO_!)mnM<BtcWl4eQqX>Bee)CQtO1>93Y7+q5pI<OAYa6B1*g^XP>A)u5WZA?~Q9<
z<yGUdM33l7wxfwSD`T~|^#z)|ZZW_nRN@zg`nt9!?s(<1zjcb<U%Tssps5}V3Ep2;
z(Eyynep<lMl;$y+Lt<hq@4;n4zqe!)5tr_m*)P8~N9I<h_wS*r*MP)}G`ot5)r0!h
z<-m)mLIfBE>VNkEY=owLZ=z);RHH(J<+YvC(N~$(N7cnda=2`goR8DZ;c9e)9y$bH
z`6oB$+v@A<`GG`he=<$~iz1J8RDJH>J=-L^N`8Ua1}7qBe(-r;zA>aAUP1z5nAFUG
zo1Pv=7x>n_pn#|K=-Ae{EQ(WiYD%2T<YWD(P@n8|3z2Y1a?9>Mv&wstIk<EM5`lel
zb=3j5*?SNX!bBqziZ^W#iYal4QG1q=yRIUo!$+J09c+ayV>C|X(1U}iVi)x_`rNt;
z#6_A%Z7_Lj4FX)n`q$lvFUCz?!^cXo<_=G~LIXKBEq8p3o`+UMig$;Way=+N+80?>
zqYm}a{ZYL6b6*8&u`D<$$h}!v!H{%~9X03tA**J&TwNjbodFkT9;5lf%>g~ho$Za3
z{Rt+!vO-2HcKNRI5>rws-}Vu>YO=pZlFj;&S3`B0sG^%kOeI}jUOMyly9YPHu}{&-
z7fakPU54Ey$v)ZbNRP7%)>noZNyga879B2V$ZKfdPr-#V6uWd4@iz25&dFi;w@3Yx
z3ojB-^}>irJVOut+=1bTRW&+aC$)+XEe2nNk-aM^2U!TR`z$%wMz+0cZplbZjVK>7
zEfwUlnr-Rb*@>h2_aOOy@gu_n&tU-&Znv@Jf9Ph?JX{^0G3Se2rjzLR*1{>WyR$CO
zRV0?RR7lOT`D0eXj6CB_!hRS~h!8xK!i6mLd}H6bZLhz7iNZ@wxIp)@VROMXN1kIM
zTA7ES?Xdd0CP2QS<7*72Dg#ME;OSieHWV@s{c#>J-Gz<X>Ci1{RMX02gAih-I85(h
zYi#0{>IK??_&k4O4^@?zS15V1RGrPA03Or_o)JNkN27w&cLGWUZ;h_fByJ-XpFe`n
zS8@%qdx@~M=-%I)Tyd~C&~<iJXOSrf!xwL4ToD2C6aNnRKiTo)16%+*2zZyKny*}h
zM@)cZuHwu+4T#P2@pXt0+2fU+n5gA=E>dJ2EYV%fUn8^&=er(xb-!Q*{#DAYxGoGi
z4uUTe$?<mX7}4d70{a_KFSWiF$Ix4F{BZI@Y>bt?33JUdzBurV5WRj&DbMis7W-}P
zi~dB7SPWWFIgy%JAmG@(kN<C_|98fkk?^dQZQidu=*c`t2VQfc!BRBL-nK-MS!}d=
z;ywhFfoc5asJ+p{3%xd*54g$hRqUt@Y6~@M*Tf^j`3o5BAmp1v=KLgaCx=rKI;Ejj
zeZc+QGlQl7dLI9gK@V=p>|jVsg>fB87&W?-Uhb0|NO1oCA-7tKA1O9aujmUO+4wG9
zoi2TxM=6rJ|M7rx<@zZ1@~13FyWq>wPuDJFrYTcWJDwci_Qj`0vx#EXGk|H^LB~#O
z6gWz*x0Z8{@6iQ*pDVT-Ay(C_FO$%wTe{;dn1;Z-_9&L^?Qt8G@b1KG>kPTSbzc8Y
zqyB!TKfm*UR%Qo1-D*j5V=GSh>cIK}xe^U=;N(3g*iA~Fc@bhFGv-SWR98du;k66w
zGkk_XkzmDK&Ax9m@DCA4;SSp;2r$)`$10G&m7z3!P_ka@%^@N&6b^d-36&A1>nN8P
zyK6aqSl#$=4G)OwW<E>6g5Fj6NUIaBs+sGBJ)*w?iXu&F*7X&(TV7t`9}A@ZzbwQ5
zx{se5`rkeP#V%1G+masL)GC4`>@qi5$w=8~J{mc6p}(@`s=be{@R(o*8=>ypEUN`u
zTD<S|^i~9sVbT(L{VKvu>C5(Ugz-xk0(5m%q@}%fljOv^P}8f@?4|5^da7PLC2^Se
zhA)TtuB^Boxx<iLg0`2QyMdra5=FMFiZwbC35r^_&r|f^3{6LKwHCRqYR#7|nf|7b
z{zp*$%T7Pw!M%VNlt|cGZf1%75xyGbSG(;`0}u3oF)f#m6dhSBxRoF6rb)Y@ORObV
zx4dMEUxggF6YYdi+Ai(34T_gk-)~Jw*ZP{{R87R*c4bpNoJ=7DmR)@xpAEi2G~dm6
z>k5Ur_Vr%m+m77kf*I0S&yCybgC(KWnKV4~EXw=3>W4jKa7+9r0n?>K4XyjyytOwj
zpFLcI*<^q_15x=v(^PfUZIf{Kir}jnk_cBrBu$-mrH7*2Q-`J*UvyzSZo&OGWn1xq
z8~FVR4Qvy&$81-IfOpymfC%gK(L>T*7)eShcm)t$ty-OTtR{I0av~s)FM;wIP!_M>
zxb&V@%!(ft|28iz1D%}2LZ5Snw?-6&%Vw3U`vca@-ZJ!8i`Sk6n77tiSV<?hE$fQ@
zJ+1rq848Zw0};!2@HJR{egEd5pdj6e@oir6p4ww)ez+gi-ey*JFGktOa<~(a^4h3e
z-8XEVfk<HCty;;jn8IA<2lR$io|dLq!t`1vvor?;Cl>T}>lezkdP?HugJX0t%amgc
zLZQ_kpuU);W>&iW@ndmuY)1B*CWXe&G<PPAYqtHQum<wd>+gq}La`XQrOAcok_Nvi
z7yJwA&IHETcVsL86+}4}DP-BOZL}muC%J^v{CU?G(;48Z$H+l>F1_~)y`h5T19Jqc
zm`6VAos|2+;>W2~Sr?h!>g*i7G)$8-Kx)|B-t^}rae$OfPGo5=2vT^dvpecZ0XF=F
z{{2rGWblJ$I@gDHV{t`O?Z)(jULQWlogE4_B+r>}Z(zHU8(p3P!!Z<%eT^Q#5GH6b
z97#YN`MTpjd6NHy{rK(Bfb@wdNnV>cP?wyq7+`3T?3T&q4VvNj6!<VoV0lPuZKd8W
zC-j^8kt@wn`}(v*p}Z~Or?DIGXU|EmQXggCec31NQKF>O8(;DR#Vjt{aqGjWcxE5j
zl=mMQ`k=2sfJ|tt#%@$i8*Gfgc6HM?OD^V;NZ&!U8>Q5kJnj0Vv9x=tzAGDxMtKr;
zjz0))i^-sM60Nh_e|+5316?sp$NDc&`gdVZg`YI9-65BV=VZVYkwQ5PCsu!-(6DBu
ze*NBfdENDt<@zG03HF*TrV3SC3#_C)kaz&r4>#ibhxWGz&-x}YG;4G4mHJBVla#vb
z(THY}X4><lsTAh1XcIl!$Feq_C%(KzO@7%lxb&)b;VzDk%}6u541xSBFuCc;kYDx6
zrmMomY;1opHG05w-9uc}HS5LsFyqbs)Qq#YH~97<v7c~M<}5$*LFY?z>5iJnS=r$h
zPR`7LC+d19GZve&73U5OUg+319OU=u@F}257~WIvo!r&mZTE05F%ACs`lB~(78gmS
z%YJ@hwM6QyN9fdceBUJJsH@Eij_CCfe79@!12#i|gE3NLE4b5tcch{(I!?OVmkulJ
zkE^L`<kyr+9JPuTzvfPIO)rqQsDI06!yoI<Snm8dfY|(OQ2Bg`WaI43kjyQ(7rSB9
zn=k?BJjT>Cx7#0GYav+g2Uof$)*(`3Ic|4Ml1&E5f7CU~T^!s**@mBEzQ1n&{Cepj
z=^sGeHvanPM|lRoH4nx`&s0o<5GvGG_hn|lTxzz~b`>+6m;sxca%-w90g%#;&k~hc
z@`V@U%(|uG%yy%=t|hE?bMi=GxE(wT?YeBZ6;50P``TXJQhCht#Ymvl8wXB)&65dF
zIk3rkWPkYHE=%&)t@vku7s9^@@qZTmSVNG!YzJTB1BZikJP(r{S1(3`SX(U0`+G!M
zEvqqRibGFLt+yj{Yo;Vj)26T0s^5Ue9gk7fuQ^D~tBj>SBDfv`_7pWAsvhhO){<=Y
z%3AdSJl#QiSDo&{f@XbHiMEeT-#zL}Oc8^5T7w@-Au**Rc@xM~)hUHIRguh&?;j#6
zTn@L5*6b?_L7O)<-hk$lssj3E-Hhj4c+0j1k9^ru1mTN>PpSt?GH^>HoodtOQt#Xw
z_|Log|8q>YgyAWGSMoV(SYUZfTfR*rn8pe!#%bBX4AgBIU$9mmx1X35O=RPwatXg9
zme%ZZ@o>}GJ$Tt)G88+B`;r0WKqOs<_bi3F2@Bq57TE8C5)<Wuv97(KCCObST(mvj
zD8h)jGta|!_D}|Ez5&Y<=e6l^<~#I@0d1TTONC`<JN>pV?2+qhp^7pNp85-mZWCQY
z(v2e0CA919AXxZiH<UeUBrdiEGNY)bw8n(=i3BEB{8jb6X8X~QJX<<lsc}{i!e_bU
zi_m~gb*B|crCvzs-^SM8=fbrov5VL$bCC&B6ekFiMs;OcjuF$isscfex6)LW@=yNI
z$8ow<S?6Ne;8fiV1SOSKk6y@we6}Tl(#eUmeS;JYR@j${6wAOXD05(<_QNa4W2&I)
zEzB6TzvM@l1ch%y$V*oaW;%CSQlOUyfC|drC+}~8?N$a@9x#>!Ql``=?>^{f-eODa
z<YMahUL?=68P(^Ou`S5mm$y7Owl{rqq77X!1QrQO6Z%t_R$XijUoOkRnwmU;fZ+kl
z`tlt-cVn7^m-aTTn-9`xZBVs-GtIu6kkTt*=F_lt(~@|g&G2uL_22AsS~d11U<zUr
zo>3qwIP)M;W}L@1QnZ1|c!@NYlBf>KHk%jK@ucPV`PD4e8YHg6<FLxuvP3e=Yb=~#
ztXpg4G=x9I01V%kSi|lU=DS&zqi=!!m|YhnO7f)Ic%&<9DYU*Fmfc8C;rrjmM*r7_
z;kRUZ0PoD$9!MHm7==sa7BowbiyR_vE%&aiZ{V145X93_{Ltt5rVIKi;gYdMs9cG8
z2Y{co;r+ah_zE!#3~q81i1Jj&{Yg*A69f^^%$tL(33PB=P;<fJ2y`y@YJ~wh9%`Te
z&Ds8qFF&Q1*#^i@lS^E4HRl>~R5bGRDPjI;i-%qW=0xnyiB(YRv!93z)ZL^7nGpj_
zF~6RBIH1+YC01b*a)_czMi+h<a||t7Xj=2INl*0>$eF-=Q2`EM@GjjoB)8m&vrA7t
zGSNM20RT$5mgp}(#oCx|N1_}?C|%1tZjRv6k`#^&|2I-t4J!}gZUjW^cD1YzVF;@d
zWMc<ZMWAcbHQu%Mu=D5?5h8N59oT8j9cDzSBM_!;cdvQF>llxrSq<vJ99Hz}4@1#j
ziqh^6P57v;J#gG==~Zb`iavWbe3OsW2b7UQl^e&^;rIuoC%|R96yI#zzQ0rh<`!J{
z_TY*^HV3Rw<7ztt->b#RIPj;W^PTZ#JeGYNHJ<P_+;@D);0nGv=~v(|Ocee<-dmeo
z?++l;BlN$E`Jw<!7{E(Z-%3p&-Qurc%lPT+&4COR=m8Lp6@L4xVwdjfEt>A6*l;^7
znx*8y7PbN9P6H|puFSYSG!TQksUE2ul8xmBHb5^}%Qs*#hdu6xMaV|2eA@s{H;D|+
zsax~LI|G*^=D<QJ-_)penpGB5NAM&82(%2;Eb8xLpMw*=LXcDp^b-cr2soI8D$WY;
z+G8$^@6Z~_slol;9~t$>uhG>}S#x|AEZQ41AEBRvCIk<lrHIA4uEA=OAi`9(D|SlT
z3^$1YIh}r}Ik0F@{oY{=SDL3ul$z7#q2?6ev>!Q77V#!RoioJFK6Jvr6%3Xn$vffS
z`K$kUZ*5nyS!_Hj3Q14-U^*=a)3E0te!{8nJuVQrvP=SR_I-|dWzezK9n|;ckn)As
zgpW8N1p!!J=qRY|cf#*(CQH;TZZ}Jic)+o~dx06nD}=O$Bb)LAG6l|_`WFFUNm3vQ
zmBidylkv2BE9j|;Q9j{PRl2*I9NvLmQ+N5~sGpl?W(%_eC5To=3RGO(``Px;`g&fE
zrzN%oszbQZyK0KP4YN>ayE{vFCeUF)8tB%`lcQ~l<TDyxzB4qS!f_5N)Qd%C6HuX}
z*-6`?z&}zi6SE>)Ol#;oSsTwXUYwXtrEOlDYaoBjNv8Q!+1gyCjv!&uefWywRV)m=
z6Z?L<Lmd&u<jkDqFQ}dgoLicZ6=NlrU|RgKkJN$|N5c`f=@jk}p0VBsWK8}ddit2s
z=IO+b@%B5JRR>g}=toK+Nvopl<-@%uDkc(}XKx6SNZ@SSBY>)5a(iQY^kja-#^a^9
z1T|2re)kI0E1z>CUX~TK6v&Xf2ITN!(n8)&KRjb!2T=7Y=-2XGy2Hz39rm=+jdpgp
z1*i4NuuiKNa(SLEj&tG@@qN*^2kkH4kXZo%sJ?!c><FP0d9waeTHXcde(?u$L2><9
z!w6QD);9r^l->7wb_)%YK|H6(ID8cmkFZkgJoB>#Xg@;H-pt2`?Dgl@?aLGJckkF_
z%^haF1Wzx)#Z07elr&5;zHP`^$iAmswBJNSVtplwD9Hv+4LNYTWOpRf?^-1umz*t~
zZq*ob0WN^W;s8}IGMmV(5n(^NnOBhBESFhA2c{hZi4&Se@tCgq@2@Jlp1q;Mye0*H
zxa8BXZi{SmzbT<QTd(Y7s$1ak4Ln|Rs6md>fDdmt07<p=njzmiPsaFef;GEAs@%9&
z4)FwduPnK0&u27lCuFzW1k<J&!&qC?ouNg$VPkKHPlkZ<G&aGL02)bh?l}%(!gOGO
z=gc`_F9MJ+DL@Rko3>E$E+X#E+B8D!<-!^ZR0_1k2~BbMurq5uSWVChXqNi+kXCWp
zvG!G9b=Ji-EFe7}Eb>GfVCEx`G;2BiaOrv<9k*n6-Xq!TA;9<w7DJe{6gl^yLDXVR
z^*J1U&?A8M)+}iwYOZ@E&mzmh^z}oZ#3oxTnb*fv;z|0zHVD7|6)+x=HnmBZ^U<MN
zwp4AFD&rcr*Do@;Q$q^&8>UPFcZ~{Utg7fPrm<)IadS9kN}O@_h1l~PU~DrYS^8?2
z`BtQp?AaeatxOmQTcuE^9MT~$+1Q&0)#nd?`TPcacbWUam63^&C~}xh^M-j-%V!ZT
z=+X;e5}-Gc6NGC6srdlCiic`)?oS_^h!g6L=Y(Gmz5u_9B~Urpd6%0c!)4Enq8cz&
z{CR2hfKKuR2M83(XJ$A>*{loRxy_)hb@uv`Hj4mIpxm!>vOU;7TF8v`E|)ZjgzpUX
zJNpHzqat;8yftJX>(%K#JZC<E?F}l`vNCjFBuyG_id$YCJw#2lGcfV-Zc+O~ASJbN
z<;4rM6g5rgk{3`R;`RXA41|E5)QY`;+p05U5`GteNI=~37#M%_O+0(W`U*UQbIWk#
zs|^n@X4h&I?z=dy9Zo798<(NVvofyX;WA>k(BWwngS6V45+UNtdyhKf0&r%=kXv~H
z&?7i<^0A|G*CjaW{XABXe^pKoPR$hiXx_vDka(@D?lB@0Wx57Telg=q->_(_MdVh>
zwcPVL`-;FT@C4emyiw2)bGLg;sQYqXp{A_&HE~TOd<|!9&`G=Wv9XaV5nH%}t|3&l
zFJp(CfL3M%713*jR(QOn8=@p|-{QYvZMG~og4OI>Me@UuwqKm#uO3sc5M)uZHEUdv
zfB?bHIwRbKQO>m=m?|7TPG}hZ8zuh#R+wU|0edl8O>BSiUh8x2z*apcFj?M_)!}Ue
z_!UA9>t;0yBbQAqlg8QwnFKbf^CS!I1p>h>FFc_>y}AuHN?_}Yo@uw>WDZzrjJs$l
z&uJC24#H;eYM0Wo?y85TyCmG+47zp^gbq}s=74F-^2+<Ry{YK)kkIo`Tr%K$vr^-(
zOFK1=85;Q;{+w?gqUO@jNqBVEnW{gI2v>H>&X#j>9PNB<H?@w&02F@*0V<_muvF~S
zZ?WW$C_%a#%hmK!E&QPh5+!)jU9evLt%3VmN*i&Si~jx_ElKZ^T+y%GnDE=Ao@Q*W
zD8I??g+q83{h3FcGP!^bo73u%hEm&#a!CsNdt_M4(!y7LVAY9N%lWnpmv{XLa*T}k
zR$Dr?pv_*c0<)KaSOuH8BX!AE3%nK=2ZRfg)?+{l1NMgwM2^nmyPXdfi|X++r5sE3
zG9hYj1>x*C^X+f>?7bgfTLT)y4NSNw6~=S&)%fYXf_vv+6mR*ydfn?_8GSmu8eP&Y
z2}gUpVyn;N94ZZ+KRys+^1vWD&H&Rdga9a0W&8jnSY0IF)S$9uP^T+cL)*iGqoaab
zi#a19HipSwq)H<>0whVkb;*hX2){piBoqaya*R~#=770lwA(=MXLZ-Jgdw3h-(myt
z83X!D=irue-HeUhPO#?VS$j=}u?=m_aN_*3P(Y>jV)F*})?x|ddgUDN#NvR)t;r<!
z8$g?;7TV%c$y=e3%Wgs=cG$28+k=KYyTX$=1D(nb3^s0LN|{vGp452dOH^+>Xm{63
zC3TxgjTtdN++O&URiLMbao8OR9E~3B2L{(@PSZ9lJ^Xk0XP&MB#ur`#yg~;9yxLmi
z#9g}s?ko9I{Wy@$4|Z^DE$2WRiI3VPoosyyOKXSBo<)!sUWF_=y{#`vDD#7~QDqo8
zJV;Zi<WvtWHzGI7JnU-#5|(UpFKQnHvELC6Lzo;e?*r32;qRqChY)+_c5JK-ytie)
zmEO0_y<j0b>%kO=Yzc)bAd;pP4=Ac>dCTywZ&<_hV0OqgW;db1a-gsv9hVg`7!J`8
zynY|mQcH$YyRtpGDj4n_4V#BFf8%);_qQ8+{{E(9E?le&!FhGC%a-Xl9aPUm(q76W
z**)Rv+7g5!_msK8xA5DU*Q4I)%tgz+%k~cY{ck_N^p8Hk+fe4&p{8}`uHHchN0&*F
zbuR9M-+g0n7#0x0BxJ<7ATxcUx9!8+7%6{I_>UI<ZKr5nw*c<>XR#OA)N(<Mhp3-+
zXF>ekIe%opPc0lD)2ReRE!B3N+0v({4R{`J00|IP_YREkfC+zDP!^@`HUE7X!$M%X
znNzpgf~cY8*tnFm>%%#4B!xt#qXaGWM<d<Mfsn&4{E{F|dy(JW%yB4CDtEBgtm(yw
z=5w4KEQIQ!48gCBoSxV}`=19)08id2ID{uO1ufK=VH)vOJfZ{Qk>8d=GJIeNYnP<t
zK0HKj#qysy3BUtA0izhYX9V2SP>W?WxYI!Bp=JNuUSBHFVl_!X$SFLcISwjFUw(Y}
ze|Nb4zJtF<vdJH);BNeyaj)L4pNUFNo}L1wS-ZB6(Z9%o3E=X?0CC#f74pCL*#C}C
z{XqacBf6M3%22bO!MGEL{|`XFe*x!|WMr&<uxb#vTgccQin`k7pJCvC{+x;sz^90s
zo0;>#F@1!(TCb&Dxcf1-a5%wlD<z4;8TP*dL4}ZNV6g;hs^xz^=pX$LoE0F$(YqhJ
zvLlGB#usm3OFBC%-{ytADgCcQO~QgRFti(#^!N$vdMdZ~J*o~k2Zx&04CHll&gVXo
zDt^HsjJey@74oDedw&h$_uCG?2Y>^_+roKl+whE;4T^u4<}=D>eGmqM#!Um|tmrl~
zY9RrNF8*%L6@{#a*1wh6!SdL(+^`>a;WPqw;iy1@v7UOJ19LuM-ZF$-n?1U69|-&W
zv}Kn#HoGI#f5(SDoB_*-v8n8EI6F5Jcz4tc;3J$hNWd0A(8lI#HTrm8Vbk+uNo44f
z5qUwgY9b%tm7T5@n*wyZFI7If&Of)uAl{Yo^x6I2*!BxczuUyq-~N2a|M?;48K6G`
zI_*ryle;}!*&<riyNcCWB!B%5`~a&K)N9;z&_WmJ>u4_ZVCE)jr0%TNKYh+qc0i>s
z^nE1}TaPjlDb17&DDCDPvGeB7rv2^od+0te2!{i%ra=llneypx&yW}yQ<PF4A|H5d
z4;0A{Ryna;pLJ`(OyM!2zgBrsRE1+RLcSx6l3hi6>guyEErDa-qhABFO$B#%b|i4&
zl?z0;ck`7*?)-M}FTQ}enivwFQS#625|fq3o<oq7bPJH&J1=dZLj5$u$G+;B8A?`8
zfKKHaQ^ENS1Gk^k60reS2Caq>la-ze9ZyhnSmr~8=9{`bd@zk1jh~44wHEfi{snmW
zQ&gkr*9;@aJ)rark;g)K`TzRsZy5UR2>*Kk!50YtBjeaR^Oz&-K5U-Mh)b=cGmQE-
z<sJJ6S^zPf9I{PZ$3XA}-9;Q!j^ZD!`9FUSzfA;C@l9dAzDvBDGptMCXc50Fkeh2v
z=eLD|GQrN>wu8WwkE?nGf!F(UAVUQoAcLfLgMwGxe9054(pNA-)s-cI8_z2LYs<vU
z9~dUMiR#<-fsQsKQAS$BUw`|J-2a{zzn@FWQ$UTSs6?$u=r86Gi0O(9ZS|LA!z2uU
zOSyqN(E@bU{ir29B2f{P7gqxOmrVb&<$r%p78xo>dg(=LZlV+g7ac_xb5G>w;a}eX
zCLIZTdkq$S4+cMC0GGymM1T5A+nyDZz^y1l$C2td_3qEIMYD=2rV)?h6sy2*tAXRt
z?~Bhi16A@9+qi~K;ond67s3DRXbN5coM8=4&6)YLO1`9OkU%$*`0aV%)t}43bBF=i
zodYm(q8pi@NAacVtXBX1Iru<&afcJQAIMCKrg-WgZ>HdbI~CH%{rBKtT5jCWgL}te
zY`&92b#oxO;`ayqvd#aDVKOMSigQzS;`p@V_gQyGVYM8A&~GOKRE4H@poic6gpXe-
zr#3SJb2R_V(*LhN2QF>`suP!zLn72V1dg(LIiXkSpecG7#lIT2=HCOcrANu`ywKvZ
z$eK!Tm<x-<KimKRdXDhtSO8*g?_*QgE#}3owJ|oWiG=qmD$Q5l{P}&E`)~$v5=IC)
zUJR-|D})8}(l0vC?sR~AJb`rQ#q5xhj{>m%N+zR&Tu$6*{`|bjnV-VbaSyn%saPnG
zcf(kR+Br`L=jCrc(^*OJ1^C7_nV=$pK8XRb2f(!;nF(}iGCOeWU(r3700_91<wKj^
z`?#g8-JZ-s<@L^N`BON8zXGDe#$#cF2L!wGyIq{l1tqybzlQMOlE6)ty{usj4r|3a
z1{#$MA+zTYM}TAR17u{hY%3_pCISIXa(CvjXm|orK>?2C{&UaZ3G^H~A}N$R!j2;x
z^n2|07eY=noOY>o4V1?&9yzoPK%Ov=e+u-pC&TabBCNh#Y#97N`My%{jc-XdNzbE#
z2DP)5T3hRNYwB)mt3LK$kl~{*Q15t|%1EJxeZ?!M_+1|M`@!4jd1@y8YPP$_+qk`C
zvF~z94R#|pqubk-BS&`2+Sm4vh1$bfd6CW{|Cl%MSuD&v(`eX?E!(B^&8qQgKhZC{
zFHCtZ{YnPfzX$I>d?~$uoY2#3>pXKW^!Uj?UiK6TKacqW{2MlA9?(0^WtX*0;RhjL
zhI}7pTbBB{Qfwz^pEO_PAgbqh$jsDQZ~HtnX~#DZC|z~m`gX@q$yc|zgc}*R#ggSU
zDSw69))`gh+d&74tV0$~bA%sJ`RX%sI{w@dT#5wWaHJ_w_)Tu+Sl;|LbG<MHGZp8X
zp}}7PY*i52H@s(da~TH#JrV^c_D|hdP~CTDO$#^z2LQ+BC6mG(jLW1IpKf(kez_(M
zEgaqcsj)kFLA-P6xh17irCDZsb5R`m;^z=J(3)#rg!f_;AX+%F(<qi<M!ub2J@Yil
z3uS+0T&mE}H#)kVuELH>4^8`dzq*;8Lm2f69FLBsqIh7h>RJR}A{At>ug~-giXJ-{
zS^TL)V^cu9iS6w%eaF2s-X3D9e4mTY1FLt5fg_RY%q`FY(U2{|>N7gCB?+>Vv_y%2
zsqA$MG|Lp2_O_AgSd<kT(vKK5OMiBT?G$n5v?%TbSd=q^6i0i9j&m{Uh2$TVl{4e^
z|4j48Zh-Xcw+(%dGJ2W|AaeU!xaXopE~C^L{+Ihcq)LTG6GP8y$3lXg$Tc9Mr(z11
zBD(b^%~dV4M?Keap_iWzYP)$J#ziv)P$h}C4UhA1)HuH%enNC+XFjea=&lIE{mFvc
zOdqTcHjW%d%#<ta?Y~&okf9pM&zwaZ4744N?y*n~8+fxRuS0KJ6n%^ofq_(cIQGxA
zh)Hi*W|Z5t8Vw1lBY1tpPFZ_~S_Mu<fNv;B-@;{-R|OavVK%RRQYj^4Yv?akKB!1L
zXRV=_zEeUhQ3y+fC3f(h!+D^oNP}Z-mZIMIGSX(5P9e&feU7b)r^ASpW))6PAN~z%
zI*wOxAD46s>Xc;p`FuFTN=w^Of`0WOjvQ%`Zq}}mlg<_nb5}sJq8$7b2(b_}%TFJC
zC@x%}s}+Cr@I?yDur&uL9K~zE&I7iw5J0~bE;TJ2z5*?Av#JF?cfNJQ0Y)R!MD!O{
z;9Mk)`*D;Oz2SQN6`l2RhEb=ao+W0WH)+=k(|sj!i3o}eH>*E4cx}~PLrlI)vtmC*
z1lSlmh(<jl3c0mv$EqP9&=pR#_{&6|AyGZV_=b>?+y?_XXqPYhmEZMp7XOkYJex!F
z)6%JEjE`nG_6^(#H7!owR_&oXrSS}@Kufs;fThI1IOiBsjn8^AclZ73iL)1vg|Kuf
z@J7o&SM0a}nBzOM?Mo$^`;!x$Bu3&CKSlfuKg=5f3ZDvg6eW0s@{>Zo_9}jPf?-$i
zcH#6$(&=Q}m5^B>8x#sr1yEIE>o31&_<m}@fBa!D_!W3bL)?B@3GU5Rxx6qnRf?p0
zt}>X7dHK}*bBfc>ZB&wqJ80S<!;G!eRXLM!ht5NGUR9al;~O4Ryb>5u23?9Ei6$fH
z3rhB~;xo4FK3z{=fp*T>Nzv}Og&3x~8a@!Uat`$X01SaBT}$@B_%^$FT}QHqz}<tY
z9)bm*V4B`nr*a%d*yxZJvU#YmYgX!<P>_dr9-zhKd<^JX9ZLD+tg5;QKYlH1fecAz
z-<0)_k5BuGo+VZZx2`U@%(=m8gk#zyzn_OIdjY;c1e^%0;I^WSrsjHouGbA%3MEt>
zy@7-9uYJdAfo3p#Sd&ZV(v8(&L%S3TFX&Fq!I>V7VK{)<gwCO&DD)dQ%&x0#Row8}
zo}m<65%3;8l^@(|d*bEM?aKMqhccIpZ~vBdJVTZ8)BLQkn$JMXbJtuomvin<J32T?
ze*!Mq{2`oG3}}{vVOBz}lE|G@rtHBVlVWG?LK+eQ3I%E@GiZVb$HR+SZyEXQgk%$C
zG4}Jd0R}359RJ54u&m36qCH~Z4fQ+QBX_xyu}OYKsb@$MSQX_&rcQO4@MHamHrVQg
zh?sqi5-YY(^EEslz-<d0BgKbhcw2bF&aqBvr`qOB-D~(uR8Txy9G+5##$}>r?dac-
z>H7pnCGEk=={hdyV5$9(jOZh$I|l{F^L?Z9;^zX|q&xt$PiZnIRAe<r65Pxr2x!=y
zBKo|J7vBAaNEw$W{m)bF%5{3WSosZ4>HEhT{$CgihXG!7`Bh9#SxwDu3$xqLk0i;=
z1uNe{`%eQw8JGKwg|<B}=Q7kvwy#p2q0#$|knwi_88Npe?Ld-**RKn#zP~j|<Ug6k
zn6Ih&=i$fJpjozYhl=;kW$;3WqNun^EKVi+OexZQ4G_YFIcp2zpv%%SpUAn<#dKrR
zGpxTIm@7fC06d2|9aI_p{HPOf*IfE}<syDYWT!sEnYj1~w}BWV<#jL7M}0Uhg&$1Z
ze<Rp`GRSE3sl#6<@*0SWJvYj0BUj5NUspi!<jo(^pNsfbUBSf6i@vC<if<TH<=)D~
zcFSudRIE0FLSByQFIv1n4qvY1sPB5MiU<$(+0`f!GjS4~sg6GdOG_FcHeuTZ6mWMe
zHQVN<T-#M=T^lcJE#<sKEw|H9eNc{e&gr=nsdJX=p}~;V1;}}%p<jXTpwc-r-JKM0
zEX*`iZppu1SmCl74KG~J^slV=pb~B3(YB*txxq}=im>6-y}Vy3xU&Qd6czd4UKRI7
zW4vwNq`77#rnB`Ka8QUKOD=yg$p+oBt@IoBdMM>6Y~Ew6)2?Q<cjbk_naa=UmSi3P
z_D7yyb`#(JbyY`4GK6~#wl4i#%9VgX+NrwR<*(CGfzZzJTc+<sKaeOiHQiR&K94y0
zBIq>WAcG%c|41HWcV^=ydiJgCUMBrhjlgHIr}OwlE1XxmuU70G1)3g<T18~@p9_TX
z_u^lHjWf|eR4n+}1qCka5_8knE)iJRW5`|qGxp<@2b@}~j6`A8a^1tih(XWRb5VA$
zsxG3TsnA@g*8@e}%9^Mjt??SsS(5uwDCXtJME>#5uF;kcRhM{Y;G{x_^LN^WX04nI
z45f$8$ry<P@)XS(<%X8R{#PDBBl7u{qN@tg4|gAKMBE=?c`}{miMys+Fm+-yA`aYs
zdbS4fPmbTkMJ1aq%8P^KiGSE5&+E4;HJ<m7wf^ZilHdGbRlzoMu=wCu^(0;PK@aNc
zh;sl-D<P1&W^p(qG_-=>F<V-xKz{ACOSqBl85G?;J7pO2V@=LK#uGMLw+9~p)r8Lk
zb>B}_<ry<69msl>1WSpqqYWyJ=Z-nawO1mi+Y09>@6b;=Kn1*de_*sKkf?D%!zv>k
z(p|aY&Qw?hITr?jV_~Sg%G$s}Bv=AR%|X>{_ZTVYDD}-jp3EHfNP;_+_Xjf8b<r$K
zDpGs5<ANm$hqrW1?an7E!%qqT?9%P11ZB*;EO71M;6bZ~vku$jv40nWbvUK>2S}@g
z;5X)u+*Hb!0^}v!3u(^@G*N5-qq;RN&N6j8g2N@fNl0a#Y2$fvO+NS5DwzBzgHo}{
zxGM^)5jt<gu0}T_%hvdJZFxKp=cHwjK%{t#e4++SDJp{~OqT`I`Z*jQUUP6DvpoK;
zzpbT#VpUQFm`oF9@aUv*m>#cm_K4IOD!t9bbuO77O#F|ikTH2*S@KmCC-$SXbZGxk
ze4l7-OvqTG)Re+gl)C^9Mz<V<csoO7mr9P_9M_DcZzSoT#@J^pTirJSZ?8nR2bfG%
zK|8UW%HFi=>vCZ3av(7JnrHF}cntwCG@cLMzicPbw!iTiPxyeQ9i@wh9Iv;Yi)(WM
zP68x6Ms8rl;eyZ@+3%VkSBKWwAJpVjN6>5cPTx`f5k#&q%3M}Na?TW`FfA&UBlFUC
z^Hh<*jkM>Y3s-Icu!cxIjX}eF_C&L0)(s}=-*$)e*p$q2L@=(-^v87>z1JG|=Xe`>
zl6zq@;WumS3iSg^ewA;|l(3#_Ko+yr>H+aZkTkxhl4_~pW~da6-`<-IyfI@pHQ|em
znE<Q}AHeUIm6$95R~pEthO88o_Y8KQlM0&W1bnV2+sWCR;BgDk5*PJY#7mvI*&F3I
zpYv^5NFV%o37Y<+SZ9%g<Dku+{5Pd1E<JZVkj9U>^3UV`IF#bQO9#+IG-=6k5fnvh
zzR>ZmeU!goZkK*C@|uM;Q;W%C0N5=b!2VVhbe3wl;~lH*>_F!EzR2O=ua1GUHLM>$
z0g}%QQjvNEHoycVAJ?R0^?T5!Dt&zJx7elPsC&iCfEv8Z3%_4<(6+HQV^H#Pp&Q6U
zBfn0kD4kE*2#{?rfG7oCEEq6k7y=3%J=);?>?g3{expJ4n{ZO5ujgt3<)d!kKtFx~
z?-#Cpjocu$%7B#SAm7JD_K^g#=#ia+^MT@DM>XIGsqUHQJ$?l~#1<g87QDYPc*86A
z8?%%&vwq<kC+Ze2@KfHon1m;NJyt6?cMjT%#Le>+(a(pVc@`ALZAKG-Yp<I?t~PTE
z7=lMrP6wOze7R2$;W<$TT*Wts0F?+x0B_=2$k!f?3>zDb!k10!Aq|2H=g}FBGVQTC
zfHz{d+({960j@w)WZnJAVC9`X^xKTxmz&IW%L+@f!oZNwBOoY!$y`C6d=k9B`7$Du
zotiqiQMdk_{57-$ad7N5=hxdnZvp%<wn@MJvV>RAA-$NZ)P67lBIt3iqBn560d`Pa
z5AVjTnskIEpW$XoeBr3#S7x7|1&}jUnJ8HYfKK+h02hEqg2Z@^s#J90roVrDzUN6l
zsUsDlY++CW0zy-H8r#SVefQ$B!rb6EPR#ae)gPgUYKlnf8CzZy$balH7_fJcu+N;B
z0A)Mu=7?D$UrO)t%y0hc%9qC~Qm&K<X(R1Qo&rHX)^t$A=PPM!V`(EFpRd$sC`%U`
z)tQYQY2MjRIyZn>0g;+roAQrr(;;zx)_yIz?6T1Rx1}C0m&|#zWJ*!KWYym(fA76f
zVr1$S*|D8x?Z2>fOQW*`e?L3eF7xN@_j#Yr#`fNE&;>V&sT`-E0CZRkbf39b5NJRs
zB;rA`^YOE?lHJ0}mpYH?JFoZm5In!)!wENKgUrSlwZraDcAsv~Umo=@Ed1R4S?1gK
z<$~tcJjJ)dmwZsW0dXM(SZw&(F@Q>j1zy05PK!S6iM1}*@3Psa(X~b6=_l(?7bh-?
zTWWds(n_XEm8Cc4Wo2e}-CBIVxId=g_fP#Fx90hY8k*ClOj7`^`C(dX{d|ota5TJe
zn$V7<7gwC?4F6ro?-hGFV@|jDa*yLKPsE?gobT3HyrEVQI3oDTb=&fqrGFKc{@Gi!
z+WOS>d$L>Cy?Z}*&a*pLfunCXO!C*;(8#S03)Zr*v~9aum<ig>H&?gd<yrmt#%7;R
zeC|Hs{xqsEq^qKCW^HYVi_Fwws~CZ@<NNHsP0P=yld!x$HTcfd@3vxFcX!K_pPe86
z|Kg{khZoCgCl}BxQ8t4TB}b4X$byX8M(s8~+b0h{w$GOiv`M%5RD9~g<HJfze?GNu
z;|}U#)%<3=40!RBb9DWzZ|@A2+sJ9wh1uN;ueu-4HtBx2UrBsdP5ip$)t4&%ov-r$
zb9|5G*ZEva^4@R0W=o@>4&VhQ+N&1s!Qc!w892A~|La=yvywmOZ`@h^`sl*g<jlN@
z$$4EBS&}zwcJrK`H@A3RXj|razpXabN@q_^OkW;zrf*96+iJU~pXPN$KGk5Kdi~YY
z<Z#JdvHf#i_uKt@6*cAhsrmBXV`lQjUb`<YWcx28qGZWOqb1dE{x>Z?F8@0wvV6^(
z^7~t3pYGdz>bKjez3!*DcFWcJWG<0e{>ReolsT7js{ih;80nQu|9C|Hf4FILd)7qx
yu6ehbH}9&Ft9q|_Unlzqjhf%UC|$AXz<;LD!^`%VOH7%_00f?{elF{r5}E*$#Ub7R

literal 0
HcmV?d00001

diff --git a/pandora_console/images/pandoraITSM_logo_gray.png b/pandora_console/images/pandoraITSM_logo_gray.png
new file mode 100644
index 0000000000000000000000000000000000000000..9a4a8bf9e4d2e370eefa716fdb95939ad0c5db29
GIT binary patch
literal 321916
zcmZ6z2UJtd_C8Dry$UEzil87xdJ&NR0xG@tB2`L2N<d1eDk@b#dPh2h9w0zK>Ae$3
zfS`0jM|%74{_czS|7ESS&Pk^1J$v@dnc2@X`J|<xLPpF$jD>|o_Tu?JI#^iuYO%0z
z*9h^ku&|Y%Y)IcE0377i<*~4;Vn{At;oW?9u`_yMuda^8ee+C+1;A#&`tvLH%_W1)
zc>Ao3{TK`PKfmK(VTC(l0sfmu<L3V76MJ+0Df54KoNSzbbKI-V#{KshckNGB2gBhH
zH#ed;&y78A6nymO!hWIia2E?p4(r7~@_KKvH#3OR@2mLMm(NYU>hGG~4{<&H;SKm;
z6%C*adGkn)H6S~f?5E5UWgMk~!jDIgH`E`A=m?La2!B3jeRyAk^c~iU0HI546>r7E
z$|r5CC`m(f>k_co2ijCv3M+xZR%g&|-u5M>^NYnB8};bo?M%-O!pkQX%_kNf$IZ9|
z<g=PP5r;@|hoN-f*_E4L5aMVH74%f$>6^Pal)+d4RxE5nxi;YtiOl6XZjJ8;=XW2=
za=g1^V`HN^2L+;J!(*e=2<5Q;n>Qqoa?R@vI1M$sB9}I|JDzn_JAQ$*4R^iGGNOW$
zK}?>+YwU3~F)=})v-wffc}mS?y7E=fXXq>H|C9HpI=TBe8H5njkQT}tj~-}hJrVw2
zWw3BASz}$^%+&?MUO!!9>)pAz(7Z@x`u{0=P56-3?D#<u9|MPNO+=9v{!JtPPscMQ
z)|3TUh5X^dn+HA24}bXlo4`84f>Ta_$fMF*4UbHW*qrkCf_Ew;qxf&runE1g+Kf#3
z9v1~pKE|K=P`}+N9i#_#b8gO|y|q*a>&VNM)HV-$M75qR2L)XI-_juvs*en27^2Uz
zdQ(SbkRQa3$IZS6(dcTsetv}wIkErI-3Vti)VX@{P%@6!TUuix^tRbtR3E9#sEtq{
zX>2GHztgQ|A$o)WGDscilE)KV3E{gAO}5>+N)gdB4epCWd^3^dx7}zpK?ERy^csk>
zn857Nhd0-!!AB3UZ?%_W#SdZqE*esYhS;Qhw9I@Sb}KuF@GS*|sI1-VF19xv<oWyC
z1R0{YWH$+5??D%1z;sQD7S64yb=Vf3G;mZ#kCy|c-Jj;+-O6d8+@&&$d1+NnLTZ^q
zLV67${ymnj%2FM4eWhtQ=?II$YT}Yd{%xNCfPnx3CM{D0RKO+PR|*bLDstZ%jE)H>
zD%2T`ZDTrZLr{|00Jii-!=Ko%{Z)}NS-nl7VG7qeu!x`|UDVW8{G~O)gpyt={tVZN
z))KAVUjyk8JtaV><F<<h7cxYOy-F$31pelieDG%s{KqFzfb>ud$9F46a-RoSz#p|F
zS9PO1YwvEYQAK2QQ$Dn9dI<DnZ9*q)&csQ0_`NP70JQf->{bjb2**YYpS$u3u6_yK
zNR_LJ_+H?8Al~}_YW-THjoUNBZweNH4brBCd2B~qE2%yH+a>0#T2c+(WGB{gYo=N=
z??7my4m#Pje}^m<4xDhp<X&!F8~<_sNKLu}rJ5hd=cl*cj)m=jQzwK_7b+e~By&u5
z(#pUo)tez**Ae?`_aSOJ2D3s+-W9Gwnx~%!N$gM&2S@q4zC-B}K@}0~SxKQ!rvEh!
z7C`xvTwy4N2FE!qo(!)sODp#Ljc~RL@{}%^t8)J*fzW?ulK)sSiBJz8QHA@1_)Ud&
z<q6_0D$JECoc8&5)el_s_eS_kp_?b*^P?>~j_&azaJ2)3)A(b^t%)g%<gId*GYm>e
zNsJU33|E(abisRjd$aoIB|uAlyF91x!v%J>zru6?FNG0baN1tdiG?`lv-U@|2OPgb
z2rwmb&>A4B6P#;#?Ua5h6W{hR7ND8>xmeRWdvIO8{@vX(Xm?NPn1i#wHdy*4*jHQP
zueV^~ydtErhbR(&^&yW@XXky;D;0evG^*s{kV%gMX_4<=3F$w^Be};re>2uK&5>jH
zf95r1IYi{F1tRjI296fx>2G!3zACZMoWGe&mrp(ZGvCmO;=I5^<lxTa4m}}pwL$9G
zD}HI=vl9dtSM%3qJ%Y({U$f{}KWVfU^!pNN!tz5P$vvCk`Q`K0;B;*SGc6Oy&f(B@
zT-9#;pk^m*2O{?FeipH$Y!O2D?%R2h*KST|P3gl48#mZ`f#q4P^ZHo+0bk4Su@)IS
z@;;sGE!~+DE8lNB6jKf7Y7fn$CSG4l7@iNmr`ktF0q%-0Gcum*M(qW0PwN?rxS&gG
zH2W*Q?mK(t=e`qjk~vX*M0K50{6ccQB~8PxbxJSVkw0yoCyjYW(I6%A71(@gC;>rF
zpudH28Gq^r?;2IbOgt%xpGj7GlR>X%>+-Q$lBq1@NP?^uO_CF&WzXb~kD9n-P6K{1
ze{jh&CSFzs<WNoIZS1~zcO-?+tot`bq1Dd@lw+b|K)^A$f5y>V{6<gW0M{f>ItixM
z%|r#e7yX#k7o;npj&y!@71Fg>nA%f>G5~wh9uA6QrYdwRwi}Ar`*kxc9a)}E#q&A{
z0^N(7u6bflP4R?+EW72mIAcZw_rK@DfTzZ`5kO;egOu56I1-sOBXI(O&zHk9#f`T2
z=aSUJVBjjzqe02+6Dpb4UX#aK*?nHH6FQ_a(=2m-7%IHq#nprvdBuHh_SUfXpi!Or
z$Tzhz%$=oH6z?9WE0jVCvqrz9duTp0EVYepy+-MS_E8%f$3LAd+{TANTdpPDwQl1+
zcr#6RZTVkssHDkER7u+hLFWqTV_-6<Bl8q9Q;C!euI8lEgnIQG)9^@L<_8#W4udw!
zs(XD{MC%+z4A4hWWZWMw=ftzQ&p|6*c|3CCL(LD_pL3XE&#RQUIGEDmNamczVv;MX
z9y7{{0bv$~=Y1d<aOKSmzY+C>r^{%x_aa5G3w&3~u4;vm(V)Tt?4{oVaZB4CE>$?c
zV>A2i=oQU!DSE)8U`%$r0!T2`)gTkY|Hw74z83es_y8dU&#gS~exbb}uCuVfZ=Zzt
zoJQriy_t1+duH(VAwLI2#fM|LX|F8T<E_5hSzP$Cw|wT&S8AA*Ly6c21}SBT26uep
z+MDiZrdBbrd?ZEYrpev0?$~PS)0kuroEig4TYcS4L!0=}QQ1Bh7mRst8sc=Uykn3y
zpto=7M!f#XsEgv-adL=lHujk{yCHqH%DL^`&#J8WGUl4{i2|omJ?9BuaqiPHS}iC5
z?HRL3!F{QYb_Z@;sHxc|(}yQV+WS|d^=g)IwnF-lgmeAxYbr>nW^Y=ni}F(!%=ZP!
zGN|Kv4o(l-q9R4GQ9tqLfIMDO?2J3D<;6=Qi;!ZlAS$A>$$A5m$0wXA!Z+;t%apdu
zme$2(jG&;LpXJf2I@R$&!O;jDgi{k(w<oHs;6HU&s`Tk&`7>n676g?`fT+T8#x}iE
zvlzu^d1fu>!6X89D-`}!D7H6>c>3B}(HfW)n=G9nqO!P8kcvo8gn}H^yn780A>RU<
z!<|uPO%6*k2UU3hujZ^hfmUt0YdGv>862UPNcC;ll{>HKGG{?jIlPOQVYxpXZ*zk!
zTruhNSA*-E<j%44<hyMUk?QM2V4u&HiXE*iqF}Cg!+SZUL>4%c@4KaJIwv!O*_K>Q
z^KD+s2WnQ;m6ySf^5*PNXIhXz7cWMQEHIKF^JIiMB(eL~7V@Ck<RE7O1~WM*ziE_u
zAEFOwz`|gSpJvhOqyW4;J6xG>vbYw>3F;}8dpF3Iz4;5*{;tlO*kIpj?8m9pAHf3s
z1Y@vL?e+V)z?~ih@K^B>JO6Pz&{}Z~y3tKy=2et&Y!ep2#8oG_IP|RO@uRd4Gr6YP
zSMZ&N=RzzgXoA7jy}dnZuV4O}Etw?<j9&M%%{9*UO~&_I$Rs|J<<-b6b_Fhpv$Z@%
zbboC$khsik>f3!KLo)wpL4xlbQZbIswi6?hrQGVt%kqztrOfLE&fMVxD>cAt(Jda@
zR?(H#T)`k8##UsB)Fn;T7|$ZAy5FEeRdyNlIz7My%@W67bID83lE|bO^vOwxBke4u
z&Zq8sZNKgGKD_}t$!sggZTxB#7P&cCeek5+<;nDRGX+;AGT%Rf#hA6Gx~GnU=e^(j
z(@TJsgBYL88G{NvF)ianp?I+-t-TOFy54mTrf6rG5=iEnc{taJKi(xCVf^7M&GX{~
zuO^PqZkB9N_o`C)y1S)|{ODRo-QBDck>0K6k1J(5y6v)=od&{{0UVs1;wen<@(eg+
z52<321&acK=?!8oe=e{GT(`A1ke*@EhxgWWrz-dE`ZtB97IyyDR6WmJ+Q_RKe^lu`
zsnYZmP=e!3OJW`EKzmM%e43?ow`bqLOQ6BP>WtZqiU3f&$Y}mkh840~x_MoOgIOdI
z=g^vdn7y_jrx|?WLanp>)NQ_bu`UMCm~AcgUgYHz#2j<!7b^0srv68y>g8nMhOI@|
z%Gd7IR*FFH3?GF}9*B@Rn9lajSyO2c)Z5V!E#-nrKC9aFtcnub2HfK_dt2>~*-y+9
zun?&Sm|KAUqe_Fvz_zKi*U0C)JO=$&teWax#{u5`BTN#eHtwG`PptP6uaaP8y`?C(
zlGWM(hyKJTt!uKUDa;lgy^p?XK1?%ix<-3>fH-~Eg#zcd(lmM`q`tYJ@0%?(p411N
z?vI;!&D6SA^()JOQ0#A(zZ#}G4=7&^@12-REpAm);F;e0WgXd1I8);=d~A-a8?ld`
z!pa&AotOW5OwUXAb!Xgp-({}61s6#iT^BQryqgDKw54mWHSl`P3rLGFbtlZPBV3aN
zcvd)Fu`c|>y7bJ+GoZTI6fsIEgxNUK=I?pOO!BfPWEpomn^gUqECX-pf%Ls$NvIY9
z4ke*to1HAbKWSC}>{>25@m&P@>8}9o>T>Xt2}?aghZ3*}B5>pVg9RbJ4HF%QpmN<p
z2;AsUL8w1qH?W>^ZeuwlWjA(5aN%7gdU~$&J6)&}qfj0EaLYt_$q&>j9)B)|-!W-+
zyn8MdJWcEJ`Yu8==D}2A%ssa)_4W0ZJzFR{OS1VtM1V~~+dZw1i!TXNyyquNnKs`3
z+Gsr<sM`jeWgTiYAo}p*n%;SvZr}`jF?B%k?X@FsggAz`o}Nw|?yZG|HpuiSk#Cw6
zjTZ0&YSGPA{O|=8PaH^yS;5Re;S3KCX5U|z8F;oW+7OMMOF>{`cj5{}tqV>gk^g`R
zmxu(E4@72V_>C$Tp4KN0nsjbTUBY~=g`LM;GLThV_E`lp?0G=_d$tZcdFqRm$BE~~
z2TV%Mc!<rOaH)zR&VF(Tdz>WGgX~8%ESQhQeD)^j!%*-~ftA5D@$3EF`oO@kiZsOW
zV9kil)7lI8p-R%_Xs^RM?yJ-jyRMOi(ofAsKv46Ahq*cYn7XrWs6L8moa((Oh>X9K
zbM?B>C2iOPy%2!>Q07WG^7hydr96kd0)b{?3K#02K$wnY{FiYesdH~bKRPL4oK#is
z6nBiI_lxIt4}FKJM|xM)Pj?>3IxLF&Bk;z2NQ;M+pwUTDHhQ!z>L|6x0y3KYGz`68
z4!-kKdS<jSNZf0v3OLK>Fv2`y3mM#~dmD8)eCDO)6MQP0wSUIi4<G~2TAq)HpS&T#
zW?8IRcNczR`Ha0Xpo8Gy$khE3l5ef$;Kf)6uoQOf%+6iL>$wM%<SbpkI||RGYNaL~
z;s@9fy2^a3v}B3iN|Jhui|vCWMxE7^cvU~aUOkLyO`1CzS!pPC`K9R6^7TR-1<eUG
z0l0KMf80Nqp5CIcUc~NWZT%}<@=%S*vir`XC`)Za2kjO?rB&6>ViR1ZwXa7nBo9-k
zv_DwM>(bYT%Mk-~k_BwuygAh697A+gR%lAnsIh!KRykNMKHUk>hzQ<-=eYbT9N))s
zw!R}^)9Ky(uDX1X)!)No-#_Pq_>qqq^`3>{PeyUq*+nGORm#%g0qC$3QfT!HZG*Y5
z59YHecCyw*w*=`KPwh2*HaGSkRN+hj<~1j`xpy;(FS_r)Oa^2nMLfyzqQg!CTPLeQ
zkF$d5#fu}EJnv6d?YK25&#j#7gw^$$x%q@FDV_?nhzWe?eF<s`B`Q3}E!@y7@qSOI
zy3y4AZNn{Ti+I$~d_{2J==;O)uH~=o$VzFxkmT>$kv5)Yey{rpJMOEb4CVR^3I?(G
zXF}-_RX`qV+fYmp4^m6Nz_c@6zb*qv`TTwGP-Rx?kLX0=m}&26wU5522{*UlpjA&W
zjtS4n-dSBS{paARPt21dbYp?LSvi}Eu0BMzi+!NL!)1x?DUUehHRpVb!*FIRcZHCD
zgzH_;&P|=xM_#FxnR#sL7)_Rf2rt<$r=`N1n|X&#8f+|1bFZJ{q8DMGf)v#b8&4k+
zHBBjJU-*6AAZR7|5~V)zzD)q<rGa^Qe42jy#^fC2vhC~xE_^i^2Gyxx!a2n<1z%Ge
zyT4RZ9eCT1qSW>I$~Obb-IRPw7BeXGvp?z66H};5!Y^*dJhyo1ibx2}`(Db*nLGGV
z23FEWOBd#xU-D_Gdb=)%LRHFgQWnfs=!D4w)V<h0-1jkM%eH#^Xc7A8q)1xfU^y}(
z<*SQdb@Zq2S&F%qM)SGxeIyD#Arj2Vm!$>F@gpg^HIQQ`4T^wW*G`v^AmOHuRD>Pu
z+1*+cQs<f=^e2K|g?Q)K&HY$rlA5^ElCT6s`29z#*`ywgb!MLf^=52wunz6=Onvox
z9T)){lv<%{O!nJ@t-mp!k01F+7MmG%XNqmSwtQAa*3yedc+cSxa93gVBjt!qk$B9<
zQo*@^y7Fpm|K~B}Iu<M*dPzP5zT)pq`<KI_s)tSP*(Y*HTo?0a`6C?*Qyyt+1PPvZ
z^vW@S;(~<+H2Y&t^I~L>{Rd(RgvO~1lo<=DY2*_YajzRr_8&AZAd_r*LV|g)v!s$s
z$-pk05RKO7cWi&Vi+tPBmBFk!ZAFRCp9mwMwPA9kIB8<QGyQum!)f9>B8C|+->Jc%
zb&d|60aHY-&h`BuVu)ddh4e7K@*M2`KbW{&i^n)1Z?mpqsY}U#h;J3<P2SB#&6;*R
zhLHPE8pp&Y6S&uG*$-3V3-bW2TvqG7G`0<Hy=6()D1ns-g>N*8lmd(S8~S4ds#TEh
z=P%-`wmUy2zI)vmiHOH7T=2Wu4m6qW2iZ<;tVR(;mmPe$&ocSq5!HNiD&v9WMgV*%
zPSyU|<9v-Y$mC3me|_T^dPB1`DbRRA&SvJ!_MtN6TCO7eSxry(w4M420d1?zc{u!t
zXo8-zVCd`+lVM#CV-};wfIuR}g>uv9Tgr82_P*3<_$d6XY<W9<G={XK<Oqx|$P&M5
z507C;aQpqBP*Z5&pSUyIG2wZY<6agPc;t@@T1nR3QHplkj#N(NSI<ao29G>&XwAK}
zcboJ(88FKhiEi4g7a#Y_9bF{o%rHNq41{s>cH`ZQeY%<37!rcC?fZ+qG9Fc(#xN`j
z1^o<6j&x?tC;4*ke&Vmy_|hk!+9m+tCH}0LiuZsd#76ufD)}mphYTmDJ3jD<tT>rw
zyJ?PZ*SUErN8}9b&7%575lMTKR@p0>!2Ksj>0`-&fwPI~tWgZ|r%+BKb0lW^8__P$
znf~H7XhVln8i#L@>p+2)O`mUAcyUMx?zreb0Gobwp(nIZG=NT+2MGkG95t<?kTjv?
zRq{v8a%C3w&YE*)kV`{DnZsGaBFjL<^9_nw6T|wklPh~rlz075mTb_c#4+H(tM^A4
z!>6(FN$vs-L$n=NW#s93SP!5`z2D%f=m&XXRi`qQh*xSECjhgs)|14u$u*mxsfs9`
z3lmY@)T&WL;95I6WvcF4onVo+haa;bnXvo-7o#P{jvxsMqrm=MS7Cn-^eU_6Y@@Wk
ze`sK7X+9&&8LuO)PO-vi<IB>0SP6K79J+rDS3ez<0pct!E?V%%Jx7`PV_*%#g>M!{
zE20n+IdkvaRtmppt01g0$}X*Z=XM}|m_9d?;jiUCb(T$aUDYph!N-IRk@S~H_m*du
zIlf%IzRoSz+SJ3PU0&3UIj9fSD2WCGhceQiwU~Eze<a2V@wn!QDwcaQxcR&=YIyUr
zSNPpQ=jY%|ULO`|toD+@sd7`!at1AW97V!uW>PQ8%d!;=nuQJOb+8a(x<6mg(KmiT
zrnj1LcGVGJ96#JQAlv-n{3CGi-GYZhVnqpy@zC9>JjvXR`RapTbWkUar}BPNYOU5q
zzai|)Z}&##6kIr6SQ7T*y)A;SYAB?+`YMgiou%EAPW^9|r&EDC+9{FRe1=x$&h*2N
zg+2DbG)F$Pd`dtwBQDB7tuMR?A*O^Z`<3kr)#_%vsV+Xd71^IomIK}!6bQhi+j+Hc
z$NO@)i()hrc2wat)cK1tFyl=tJDKWO)i13#8PPB5jjYMp_z2=AE*@7GLM%_?W7s4T
z<g@t!zf0v}33LzN$L!^8H)}6>#zU3%6%s+c2JPP`=W|cNy>X9Xs_mpUe;AnhPPion
zW8ONAJ7u)V=Br;qV2ahQG-kBw<e-c)l-Rce5b)5r!tLtBc3j-}H|Uc2CeWpNJXIm>
zCkl>y#3G~+zY`iILtkc6=hU@DQ&><Sv#Bdn4SSKTdM=NGLd#oS-VG8$>c~%esz2xS
zgI?LJ1M^9nKYjXyCI%|LJ{1eg-tJW~PXl@(zDm426p^_GC0qd84ZB`HIP8l+6PxPM
za12bBX5A$Wb@5n+IU^uT+lx#9N`-QwhG;HlB{BxD?_K!YqE3?R4O5Z}=271!UCd~n
zIx(S}bNAJjZa&wbMs}c!A*+wliujHr<;clJy9jTJT_;)1OG&eAk{RZ?R|hSrt}CQ1
z_5-6bG-~}I816@k%P=8@Q;8zZ-#&}s5z!@!^8&sQ$?#q~e+GaK%J4uBCUc~KLcjgx
zDkQih#eM!v&7v>t$-%4LIVknro;hzVd~}nN)o8BLfsN7TxpiIoAnmG*%6SpVj0}~!
zap-3+Oqa0Dpu2L6hW(HeNm!#z+}7+``&6tX=oNxLVESX^2|xiY1^=XCKd{07NhOfc
zRAF0@FI}gm`$T}JLF0SRD{QFXvrcj`@8#<OB@^f~%t<Cfd$p#V3}lO(sG7LeWt_Q#
z2^>^F*!@{^*=Wm}Ov1o9e#gbm2{=E{Wv2BS(l&WlSEU+r)sm8p5(O?Ot41&I>q_1!
zpY?gWi$Mz*XfeimUChr*$Wy66Dsf&dtCK07TU~gco9Ca|qWHN*n;B}=nC}k77zF4G
zYIeP2>;sJBeu?4n{GM^x$dRpIwNF%e3}Z&sp$4YaS$EEJbx2zJz;3!JB1R18vSANJ
z)(V11I3FcpRY0s6XFzrgtH34uN(DG-I&<bu9|5hYP+9=I!mQC_FH_q83ii*+-PC7%
z+%t)4Rf(I;8eIdDT%!2gT7DHAYi{*+WiI}WUbHfNCN5daPDxAfoTBo;SEtooQ{A7T
zr`)EkftS;!=(8yV;%lMIN$%N#E(o)VS=S(oN!0Y|PZB+8R)xAC@SLuBl+mwQ3%?em
zMhtk|EHHH7=A?;l<Mg?dZ4OyJa~JU+Ihs8yd~Mnz<R0+FD~-U5=E@NjICE%t8s&5#
z#m#T_p<u7kkhgzjq&b;2%dpI-%5P`B<-N~`*g<p>zec_7INT@b)ZlIZ^Ni-8X<ibt
zUs|6=*4_2!SRDB-BjW7K@Aa=x^kB8`b>M#p(7c+H2m5A+MD`WflWw8vD+ETSPEKv@
z7E>8TGnq?DgwHf(fCl@&nnaZn3{2qxr;e~EJ6oT*@B7TUXAM$03nw^yoqS<f8dk<!
zQOX3@GT;#QuP0;0Te8{MtTR4;wNrh`Q{7URc7RwGSPOrW^!>;VZN9}7uOb0p6+i-h
zN6fl8M}yyK+#eA96&$G1s$3DnjdgbRI{v%=9}uLT@-f**V3;)CceFlbKsR?~oMWcF
ze)3_dlLNF7@QJuKC_AierrlP2j<2;lHGO@i8d`;TpB5Fcq3|!JhfR2&L%{vSrbd(4
zdPhq!RM!f)l!`SWrlmJ>&gh#)<6`+hs>O^qxn3y*WDzyF8XHnadP>b>Q$%_Tk+F_^
zl(W-&&3MAq(`<~rrEPa_rjI8+p2DSnqandLV<=-{oAh$F(Nfkk_0T4%si$~cIpivf
zXCz250|o&pxO>!vd*8xJ**kz{I|$ihyoh{?oV~k7jMC%PnK=u4gDXuHvUua@INk%|
zGlxxtr52OqsIQF{9^qd|l`>f=TgVgW)CA~MqSvLBs408$`0<#&){{?cf+tM$9`2+z
zu#QLg6kh*@QCYD<=m5?35F5H@MeHO<T?!6iDS|DEJ#$r)dmmyW{udH<!ci1P6f~+@
zB~y5tBMsBc;ghoof#U`0P5sUtb5!HU12xai%Od{*u~;Fy04F>|sbNKCy-hbcCRmhY
zA4w=c22%@q8!0ThX5BewqATrY@0jieJiXs7Rr^<`TA~}w%R2LE9+m`9leny(;4mj_
zs2MUs%X6>c<(*s1Fjx);;A968mO8+;HJF<8DOU{)-X`C-<U5LJZ<^R9;sYu|iNH8_
z#=LF+qG2+WmBf&`*`F?Uc0nTq-RCQ~At1CLP0+tk(;6FgDJRDUwxH~0Zalc&__!8o
zL4o$+I3c+0ZX~PK*Tx~z&GG%%fkM94__}S6omW!-ss(0SpfO{_0!%xS;^JUL&aip@
ztvWdPfmI#v!x)#FU2o)tk4!hGoE1}+1j8+8C3hElb-~ZW!y_KBQ$aNZeFIn-&T4&_
z?)C6ie{8}A$~PAG;<#*lpDVM?H}P3DThJzD(rL1%-ipDx*^a!vZ^rltFb&c=FKzdr
z4C4I)xK%%Z>IS!E3?r-rd#g6`;$S?)T>j#6K<eFlW{fI?mF?b~As{38^S{oe{s$wD
z5(G@EH+^f64gm?$zWl5COF;V0J)ISRycIqD>OP~@#z6FkTbE|##@_i}R~0Bp*DP4V
zDXj;!`W~v=u|Fm4MV54{wH!auTg!WKg|&W%8+ksP(|ecz`Yg;HR#WpB>bk$VUIIe#
z5h;0P?L*He{5dNj-JeYU$`QqpPkc`*`J(da^KZY;Y06&CRQ|=qA8N9`T#?MHbeb%|
zYx3TLNt_Rzzrq1bh8yn^-GbU)U*#qiB*Qv{zC?CB*#S%m`|gtcZz9ik5We$7m`mt}
z%fnsrTbrKAv-YK8g!DKXCeZc$(BnEYnF_YbZRed|wEy}=o?7<g0EqeGv2E2|y`aDw
zWb}CWe9+-9lpAtI`JAI+DE3IO$3W{+3~y3%IADqCR=8Yt79frUB0NA`%~CPEGX(e9
z%gARj-xPKEaEq#L1LDXa2YjF>Y3f=TJJNq?4<VxuMm{Y_qM3^Ek${O)i(kV3szphs
zj*~$GIhd<`yZ4KN`RSX5<^bceVH1_h=jC}<Nk(TQxVNojjg<+}AV4U+{W_DW)9BVJ
z#w`qPVgo1K@*{3?va&Bo5e_bK979Nt(;ulOUNp|La4!x`VIJCL)vuq|cXf5i)B#aY
zpN9@2`2SPT>w{bc4kp&Q%2;zQMKCJowo|k3;$)DO)eW6(^@+*m-*wWFl##h=GOc&L
z)G<99CHWua?uBUJO+64EQ*U}7>8%@D``2~nIAQ~=GCTy#Ck{>OFWKirmj-fy|Eu=z
zB)RGk5CUf-_kqH_rjNvb;o(14CoTgaqE$52)xkw>MMRb7Q+X$UjbcyzoUL-|{YMJK
z`;RPHK#SIwgq7!$SvTRZf4g=cU_w!LUb)0hQ9I;-vniQS^fwKrlwH^6M}xcZJx4xR
z`uV$^zwK@U<PuB~7X@*far)4vSoR-Ibl2Qm{g*G57;bwnSk47U8`rsdVtG#W2$oJ}
z`gf$z5=M3kjLmL^Wy4ZM0!mIR|5AazX|TTSN(~+jB#do=Iw+I;t10V<SV(q=sC=FO
zF_l?UP2QthIj_UyD%(=CVZJ_8X5tPX0k<V6BZ80H&VG+;X0_g|uFR|MuQf4;V&KOD
zSO0eI2rZ5Uzl9mhYaL8ja!F1mbRFo+_IFUdyWy8qPTBOL{}4y`KL~jxEZ@*dJa!gu
zXH@eC3y&%dv|6^?LU1v#UtY9Z4;!|vD_-6DaNa-JdkmPHfPXsdCX&T-P7b``HXtx{
z_S3plptwD|4BJ_D8j2~iaJC4uTg68r<rdpuZYg@w))#fenOWncn1Lx1|0@*}j)N~L
z`P*nh$lS~*)$RCu$2Rh~a{GmrbiN$u8O?%xqaX3IbU{G@{F#yKdBy@Vk?!#CbZCS#
z6awlF+bE?;&Sbc^^=4h2p302EL5=KI{Egjot>#2nBbR5hGih)~3wU*ZJH|?(Z|i7#
zOj$`@mWChtM6N~t`)axAh;#nf*HXTs=7Sq<7k{0OvfXWESlBm<hFRC)CjCGFM094B
z4=~wfju@!fmfKgCZHWC#=3yOq7p&if6fH$|$f2Or)YJ}Y8XB(Ez@(R8!!AgOFL$5~
z!EK+fNroWloe{zO_gJ5NYG?x_nUj~KRq9+{RKM^?{?GbJgk4~?%$K43JfU0^{xq}W
zewwnI72a(%Hxo=<V(3$Rzwe)pxUz?=MD6BOIOrMYZ(AzY2l#+LrH<P|IfPmNNOI`a
zk*3h&%BEXpk$uGP$d>1bx(RokO{=GgU6vHz|H~-CCY-*rHmehxAXLqj>9slAcz{n9
zlEbOy-Tn@FJB+Y!+6nb6nv-=F8gAY??7D;{WbvD#q}vy#2T62kgXfhnnR<SU=C?JP
zzCC|QT9kAe*+MlbFRkXh<;=swwqNe!N*CFI?(R!^lps+q&S@!8<r9CoNnlnj2BU6L
zoKiXHT~<EhYTMHrW<w%3ispF?SGJ6nzQY?+UP!fb%x0QwQP$rf{)c*^$A?FhSDiVL
zubMRE%wA-$aLz}4k%%|xhc&3(#dlCmRuZ*ZkiiGPX!oO;bzc7zc`$1_{?{wz+7jhn
zbx9f+)D29F;cVFTC(Z%UaIj^B-S~Q8R$%Em30c41+2d9%-s^#IR@>V(7B-<C^>e;T
zSN0-4sV`c}XG10$?vA1g$K@uj9-4Mt{O(Bt&325>!cCQKTsGSo;HCZh;J4~@f8XX5
zzx(hcP|H#un&I)s0rTXn46Mp~55iKP4Li4=PRm;v%a!AHWNl#WX$sPPJdXMW)_ZJT
zm6CY+U@B$;N@j;rOh^N*Z1fWV=U|5<50=goi!If+ODxs-5@wsu5~XjZ_kY~q)|by#
zgTFnGeruUcJsNSdf#NN#ej#SY$2bI?EWF&6+zRKMhL-ADiqX#ukHSwfB@a;$cDQc!
ztEsA-5Oe=!|J{5?{l(mnEyc8wpw<#WpO~Dx)WxhC-!tnMJeo)0_44Q85;8PbpLV1=
zj=A15dcFr91`Pp9WBAHG(|kmC{yLUYLb>#J%$&gl8JRZN4<e&%T#!o}S84;U@#oA-
zHtp_ShBGHo#_<k{IYZHB47MP$qD2SZw2f&UL`AM&)y3m6V4uRdVL^SF8TDa{NC@CE
zKU>YmVE$e_%trnw#ZKF&f3wcFqO@JPpt#iXt;PudGsL8$gN>po_{-@l8|SI6V}CV#
z_+^x%zxg&CTvjS>sfmqfByNDG@JH;;bor#gOXHl`Iq}0_k~c9Xad_aRpC_9sM$>bl
zU4$So*T9bAYe_Qd^YNsL46yHfp<jkw_<h@1u$)rU$FaK>MMDFUQ<IP~@TC81RH;`Q
z@Bx^yz<>HE*+pkT3xO_xPE87z1?{7Nz!ICV@_}aQ2Qrx6Vv^rW6LSx2X?tD9uO%;a
zZ4a!B(_~1ILMJUz@h3EIC)Q0-mY+KIJzsvjm}gz2xnQd8UGZl!AUbKV^p=#>8mYeo
zCC~g0>H38MQJwLoiRptJ0JZRp3Y}*yz<8{|${c0JRc`eQVPIM<i+$}*NF1V2{$Tpz
zI613x(_HXyW`lUHqAQb5(&dueTy_agg**~l#)Phzf5<qR$qKJ!e=nF4O7?)BaYoYU
zI%ZF}mYKcP`B`U|)B4v9Spod+1g|2^ASUMv(mnqGzkti$SU+vCbNgSyMPgXFcy)NS
z{00KP%JPlJY;z$t@QUbUX0sfQK5<_k3mnnc^Rx=CS+-{kEMaO2y-XAFzmBz!S{#F3
zXGst3O0A}Q-V^&OIxSNd_+l_q-a-Z*{(H2CoC_U(-BZaaFjuI8swYMM%A&g&B2X$L
z3};3KcM*K}%|R++gf&^nIC~||{-r=z|1lPIyu;AMkNRXlz)_)4G|Mp;KL>$VzTyJX
zxngeJ`M#rC;9L?f`dy@X^-ex~x!~dONfAjx%x_2ClFRk+ZtaAxeys(rS%b+$Kl^jq
zB;W0_t<vaO=7DsyA=#Nnj#HBRY)xkUk>pvM3Qvdxjr|Q-REjfV;0ckMJc}p0+P@4|
zN+~k!s#S`cxm4<|Aze%6I`$mrnH3Q=7ID>4>cDaHAXg`Dc4xGgnytrM&4}Q$!>^9U
zdM@gy#R}kMr=Ba9G>ws={(hsn{2_7HexGgU2iM<Ri`CTw%>DZ@CQ~dX(*H~a7L7$4
z><V}@k7*;qlD9$}D4Sp$6JPVTC9PIYJz)zK+i$I0@emkUMBsqp-UD|2nBf<9PSU=W
z6$^ZDHzMV9vSQ+9lv*<}%_xuTw`YNMu4{+M?6oig0)7XHKkMuhy9wY{MDW30xAL0~
z-nTf~&u{Nkv4q+5YEyNcez$QtpEC0Hme(w6U;~hNHnlXHMO|jCv>r(ChG==J*S1Mc
zEl}X~75IavDI=1iEc5gb`4r~JNMhaT6U_Q#sUae8`lar+U)xw;0IT`35`4a+<K4LQ
zi14ZU*3i<oGswe%3^SlEs<08d<=nKsXjha*4ES#E!q*Uf*bC{a9XNtr$RvZOWC9W`
zf{GC6jYH<%Yna7~{1b~S<g6iT!W?gB0ZgRGC@#HLy185Zq?ScYnZeZh)Eog>?oZ-x
zTuF6?PL`t$q%CK47$`)I=2=_a%=6|Wxy|<lJHgiY1F4p&(ZdB`=*_;{GYgZAh<<)m
zw?BT$Dk~x3NIvhmgpp|(?&(|iFAY*Z=XVPjhY$3Z9QdX>WR$!InFSbrxBwHcm^Rrt
z=dk0w-!IqB9f9(j8{JEuYj~Z^<oEgaT^(zStosE6iQff$^I$Eba%H$cqe8?N?Lv*u
zxVgpZ@R_Z-CLd>}L~yaqiRi1MtI|tq7`e=lk4Q3fT(W3eRW>S>Wu_s0h*_esV$U82
z(I<;IbwJ9jW=pyy*sAlI)b_03>4F@s9)@3~ALd6et6ZCD>d08TfU4rf)~R;q3YF(m
zMV-@G0P%dqGl>%0K{a@H698moU?0DbOM(am9PV-B`e$~ijkA$MKeDb@TbGLT8LLfi
zoUGC!U{k0{+56i#c5#^t$ZG~S`R&~ttLvQbC%+FI7rUaQ9<8?re#__TtYfixD;#un
zp=*cEvsqIJmkPOgMe}*OZB;CPAY*jmOt^5&;Cj(-0++7&c47LtI{_J@*l5~mYOOB9
zrNH!XtV5Y;jalGv%+3+OI!cAHU#GUWD-Z$egIcU2p)p$uk+_0apGkP|&a=E7#mk}s
zp1B!i<ZkVUp$s&_+@+(<z=xBDcdPPwpWwjQhZc3K9(SbME~afWuLh8XMrCS&6!E6C
zAugbd*9zau;xJC7<X+eMkCK1}fUAxY@994O_RpGzu<CMy7$FS=bx`8EoV7Hq;UJfF
zfR8Cgfkn-HsXrzLbv9}MroC1`rRJ*VfVWEm>>T4Iu{Xx1M~O~m#4asFeeU%%R%Vw~
zzg81p3evD63y<1}?Ia&8OEn6uieoDApaqh5=8`osB)JjgAo4BkRJWw0-c>dNQ}_mu
zP>FAWOnOovm9SXeSh5i9huII21i(wNgS8U<(opj(UCsuGZub<wuBFetvvSy$7tU1}
z3<SjVw#wE3g$uG+EP$w@lEBA3z8R8I>uUGd-Re)vs8jOr`#*q>d-Y-_S}p~^F0yKJ
zK01waKivZMU&s->_c=*GfQ*SDS(AwrGONklEM48*K}}BnN%iXu2@@H@)`yNs=VcVo
z9b_GbmZNRz#NUcAXy9py-}@0q+l?WGYgz@Ub!Cl0&tQM;)u|x*?XG7Tld%J5hPh86
zbqXUvW9J1#Wy9j0t|bEW2_cMoGIG}W01oz;J<eJ}Mf3HKd&G*LR9X_u7@oyaD|Fqw
zms{<5#BG&_rV>leB>7q@oc!Z~9B-V)GNG58*?Y$<_UXw<p_@V5t=+=X3Fsivnr|m*
z)|D*x+)~V8e-^9`N#y){_lz)XO^?4r=tbJ+UN$MS1Uyfxl*Nb`&p}_N4z^1QNf0Zj
z{PI>#Y1QA^B+>W!;KuXwSiIfTyYNGAPrhq;wN?7Vg83Irm71+4(nH}XlCIJ-17tI*
zAx942o~S47Laz=O&_}=<esfZUnp;TS6an~0Csvx+BZ51OcP8EkKMBdw7flW{QqlkV
zWyW5Di1}CU@(Um7-|s0X*XXc4&2;V!_!-Azu5<`ua70#B3J_m3GX!q%AN^QMX`0v9
z7JtY#lJo&D==jIJa-*}D+9mlzKs`ikVOIExM~xIa(5u(E&CL{nK7$1A*Uu3yuH*B*
z2P+x&rI!7`(6aoRy0A0KBGrZYWBBnu_p&E|izb@K;uf|j18igl5Tzwch9mfkYq3}Z
z-!eAp=cY6n&bC2M3_q#kCGr7^0_ZwM5fv2YntKsT5J2}*j(T~<ewU*BIbH>z<I=K)
z_}Q<I1ipz$2@N;QgNuI_Cy*S%&=l3*q;KpPzM4xS7_7qZO}dVk@CVIPEsB+=IIZ|T
ze@31ptMIor8)vrLm+joJe9zcqA7l8jg=GRFbxjp~Gwk_Z{sauhb?zX~?&rdjB0+@h
z`$7j98T>nEt98zZXrH-oZK$PezOm(W(Tm)8=Q)?N8IIRI{dPf5>5Tj>Ig=gCejE3n
z%p2=5m#7hJ8orO4!)uiMvOdXh!Y8nk8wEKi;<p?mf`4imQ0;~-!<V3sR00EJ61SB@
zK#|cq&RRgplQ>nr8QRjkQO}M$@b0+4m**-CiBy&3Q`0Qu^G%10`TzJ=%h%7=z=fY{
zn#n52AD&8n+4GA)$%}O}`)`)x-$+--5wtFowDl@OSx0A?Hz>yNO*A*&kbe>rhPhq)
z<|HazOWr1O;^9fEO4ej2v)#mg+;LJ_(i3S<WKLh)ALl*r!oplu80}Z>QFRzENNQO{
zrx2IO+S-(azDq(*h=VE`etow5!wP}{1{yxyahrT#wLLQ4bsxCcDzrtiaY9uc?P<j{
zR-^{ySg<FV5t46?c@`qZ5hlMT7T<1#;tOOE4FdoEveGOnv-FKukpS+W?~>()O31fZ
zgYkcyJOHD@nq8>`Y<ikSGMVR~1YGwufpmJdRS_K`fm0uKt+pgz(D-T@Ow~p69E9zA
z6D7MZNhX$bHQHV^m=8<l&G|LPI|qS2Jb#}<T$V?mb7r?IahK!$^zU3s1>N`*JcT|T
zbV4d{dfXg`L6fDoE3x^+&ondH_fIe+2D<qiVIKg2RD^X?rtw0jnavF~jioVJOG~ps
zNkn<GnZZNfAmd-_Ig$0>l<r{fiTLO@=#GjF+ZCev7-wgID4!}gM{y%xV4B#<!l+Uf
zBQoG+`_a_k-GMaG)=|FHi7Vgqx-U$Qu|JYQGw71tlGYNjnsOza8xXp`^my*rcSb48
zXM5H+tS@h1{Bu0{d_+@E^h947uJe{{D>d@dbQpWBtp0xI!Ml>JyoT}@*Z$84&7OYV
zR6KDBjp6_^{NS)vU<HJ@q@NR3etkIo(_Mz-C!Y{CyTH@!>OHzKwLBXwx94DJHIQ!Y
z#|9^|kH2K6mgd{@*a{&=Lbw+j0Zte|MEhdKiXOd4WyMD~WZKHQO>YswP(^e?*F;<r
z69W`KJ5y={G>27CGH*P5<4M>UCbT+~VS1iqodkY^nJV95o><?XleF2oIg+qWITG^L
zP;%;<V{c`RTN0C)y5^#>T{7&AFz~~n$}|44@o!lws}v^r5ouRi{ZcZ5M)Q+9@bgy4
zv!uOLhk@zA@dZzA0DgDSxV!7c*o%cex+`<fK~clLdAbsY_2=9+TX|uOqt6?vrqxab
z+<yLe&v_m@Zb*L<A30txbpxJ@KFz5IYC4_O#RQ?l)nN_m@lX$IX)FalCt028DFXE2
z;M)x5ns(-RvyxOB6D|g^hYGBWtKjr3;E`<B6;Gq!QRP2pK6-<1ebl>K%vdWO#|tbc
zC&WD_Yx&b})?~hWJrbD>?PBpZzaXT-Zikh`IZ&SVmPZMj&1UPq-dFy#GMHfhRt^I5
z47IZQL(g|z%}-J-5Qw<XLE>P`Lt>(~$O8@=>2JW4&512x?`W>3z2bodF|-PZZIpGd
z+6X=f$Ar1o)HqpI`n^?Txrp8h!+a~k9RgJWqlz`Jq<IQtyk@B1Ff~c0(0xLYAgS|}
zGJ{uw>m6TohV9!aW!ZGR<g+p7jMe0>_Mz#IGa(lG%oIGlMKzLokOt)VLKkn+^v@4x
z%NxR;Ak@UGZT)c0a|w+BrszePMqy;3UupeZntCkjUCnhgbIYtPI#Hd++`cXt7VJT6
z&2r4wuK2?P?2SHGEjOhwXt@|@uA)CugRRnjj0=-#+6Uq|pWk3`se6>&w&*i3^ev(_
zx*Di@X%7%{oo%Q|c^6nmE_m%|){1@~w~{)?xAmdU{m}h}b8Z27LT_&wxn+GGLgzOk
zNCk+K{3+4_0*^7;d^u(!JcpvzA*}Xszn7CahN^D%3O)6f8L@>6+k7C>$&@nCQE~L_
zozeqv)C{Wo$QXQKgeUQxya<A=>OvlNHgGYjk0JoOU(R=2YazN`LsB@KWJ<11*$rFq
zQ7`88!|cqjwk5qgj{;6FlV8D`B1vq<1sWkJkixFa%#{)1sFp;rEiyj#($)De@rh~R
zD^x+nVFr$KmH>_3&M{YoYBkLpuy8>O*Va4zz(S|h6o*XT0W$Gq0`<vj5_&yEJ=;v`
ziZ*gI^CSrekBL;gH+no3sk4ftt6^ybI93D8E5e|8S7C2;G6*8wAueEdX~K^|?3!(n
zoR8cx^A`sg1Ae@&MxWKPe<-6o82H|X1jX%c)#CTGc-ddb-fSu#Yr+GYqs{X~+AzDX
zYobG)wu^pM;fm}u8!R??hJaA#wjXijwd?HzVQc-!d%gJs{MeU%Rb3VTe5;dh6D8Lj
z_)URCUwxml?_`zLOJgay6axp=&P#!qB6#>sHTVuq2aQ%a(X&fisdnyrt#x9O?E(Kd
z_i2-c{6qNdnFL2@(HDA|la*CRn@FOi1i@<$`{|pLg*!EW0>t)caPw+3flLS9m!Ex8
zySxXQ{d@-8ZB^CcXj%iZ;%8$3k)fe`SO-EBZyo!7(W~Rtj#_Zi$QzJ7wQPR+bmr`x
zj@bIi#Arbo?CR6ryx7)1KEgPl^Tw3K?fR*uDU9j*>E?qZ!R4`nKKnVDZ7ShwhYD@d
z5@DH}^IuONox2=ZcwguR*UTuBgU*%Oj^PXu(VKyuyym{rlHSey*K<cTROxjP&zi4k
z6lGiYVvtS@MOj%!0EekgUvnlaT-Tv9ZcF}TeItv7E!y|+eO{GSpNQ?zQ?pj8FNt?X
zmb`V2QjR@v)Q?`7SD`;Op+)wp(#;y4q#e>~NXDro$Q5qC8()zrwdr2exz8Ss<NUo5
zWQtEbbROZAM$X8>(rP&hg(UVOOzP!&v)+15B4lRDdFOb}mNcE<wGtAAUAb+UVD;0r
zPr2e1#x-52Pktd$Q4y(U)6-Zg*bwjY<VACk6zpXUAz-3##lSBLVgHXn-8grGOM~KL
z0&=`5K4KBUfcdJqNO@h+?=FABci@y~XTQQ#v&L@@#Z_`z-4Iw-koD<v*6kn2&UG`w
zbn2YNI>+K7RO|IzMp8FQYX;9;E@QLHp6pz*WnaEhL+}l#&Xv*}p>EcDOgleb^nU0!
zLryx5Kdwv+J)hFnDb&z^14O2gtL0E*PK1n9`em=iyN+J*;xAL2&#w%(?O!IfZ(<g`
z)2_DjuK8rXZwiREv(dz8c~F?T9dn8LZ<e*@LjxLORHe#`Exy!^uRdgPu8>G?dSI79
zvv)bB%0HL30nf3V@7Ae$(s}MMOju?UtTS>_P+eurnVk-Gw@Hbd=!<G$ct=s@Y{-NU
zva>rJ7;c+co!;4(?hR9NAzv$1X<NK+yG=XSD7)CIf}elYJ*MjvEcVSx@hcdLGCLmx
z4I$=?HEQcd^Woc)R7=qm#M7-VHZdE+uzURlU_(qnZB`LQ;Oos%bfi83u;#0@flaTs
zrM}0$tC-9XVHuFY9>m1)zAs~<XZ*eO@W2vn3rXKr!S{!gjbTuvcP4JX{MU?Y*M455
zaGNu$Jk|K&DOj_ba;~d6BjZNT?+2PfLm%@?qcf`|iKB<auIwwS{c`$*TNoIV-i-;e
zBA!i-VtT{qWc=h*)(!KTyz;`y$d-d@Aw(M$&NRCgmi2)HejxhS(N(Z(=tisTHx|&A
znApdl-<;YE=L4#Xm$R|=KifLMCJ9=#Yr#e-k5Col@!}10k&h00)x(yR&_I`7B#*@D
z;ihNCv2pys%|YpHs2dtyG3l5-StU5Z@wSY|(0N=YJ8N`c(K`O5)Y)g==yccpbayu(
zC1#ipdNN}AP*FxkbNRh^4kG$XfIVuq!jM)_rnX1?aL%>Lb!+GW(rtJYIGkx@o5t~L
zXT#*Z4=s?<pdfyhpr@YT?xb$krIL2zuuxP=q3Zm1|MICXs1A<x>cAd__v$P6LJ{|a
zF7~cr?u%U+cMs!GBA4&9-DI!R>T*{cwnm~irmGDI5KXk}qcXe9TexU0<h>HL^CfyD
z=k>RjaK51+#Da<DmS=_8L0<d6{{=89<G^RdbLQXLb&{{dXr0gtP3nQ#eD)GeY3Dg=
z!HqjlQaV%k+S~2l*R67|*YMO(WZ3O7a>{<@cgvC`7vnavgM3R?lXj<G^ow9w`H4(f
zQS{O178Kj%OS=9U>gHTY83{Fr?W{NV3~Fb0#3Oc+-_;ew=v#y1toxe!BK7R7NggMB
zUcW<r`+F9No3{2&YeckPTsVR%Od+$~q$JNGPvf-o)u9=*3AvOTadVtmu9Ya=b4Y@u
zqG=n}-J|Mxjj;1G&kNf_fV3{;(o~1e)R}f}h$4J<9+LvhL&qht(<97q$ISv(g&dnU
zYPQ-W;Yqy{DQA<CBr;yus>aeu9!$Fi>zfBoNzmHA!~)7nb}c$1#ye2?;?M>bu8&eR
zYAw|V^)olyp`+?8P+uCL^1oD(=sD1D(o%Ly7EVjFc-egA7Bn)vmvMIf9U_|-{y#(r
zJ?h<~HY_`HH`DwQM=hXjn%sn_(S&5TG?lg=oBIuMI>YN=Q2fSic@y~KiPNvU*GLa(
zC5sGpue-FM?0--D%UOwqjLD7bfrzg9a4cz!YX+swbP87AM2X0zh<-*`_ycz%Qeb_Y
zgBI=Fw}_iSdT@Ot=qoqgBnt$&UHyb)qKQV1A?>bSQ-kxQGA&hx!(?#Z|A0_YM0)mR
zQNMYE>qbTBHeo%LqYfM78?``|>Oj)#gQLO$HaE_!zlc~CAt{*f-PDE&I>G#Sr`gBl
zImg>5rZ)0}DzY@flJG-f)Ze^xH_V(V<#N@wRJ^xN=Z`)$)PJEqaJ!-Xb=MwR;nP~c
zr)_7!y^7?wfLySgG)^6kGkf17BN6#b)h53JL`8ntxw%(TjN6pkD?`uazONBJH=MCS
z$k%HmVDc)3?anO>I`N3|_b(;9$@2{cs_IPFtYfknkLT}kwk)|vWVW?JItipDy}mH(
z`h(%0LN_iD1~UDH-OyaR{Qt290nx;eQ5urVHfz1!8ppOYqEU<Z7A&{EQ%PJFr42w-
z!3yBap&MsqMMSrW3U}!I3}fXxO+0pUz6-(YRf4l&(nqiV5+HnWrs$o=lgmKNul%#p
z%I>-iJBi%7Oh_Qr8{#rD;!w;H0bpk1=p2jWFIukLCQ&JdLkJO$+(Q$UEDEcz-`cC_
z5ArJ(N(3q0{V=1f#q@zk=dbmtaiVaY^U@b!FKDOh9u+|sm4LTSa)a?EwIS(L-!Q@Z
z2}|0Am2q$DeDmlA^%ldYG;8v1-}MGew$p3l-rBhKMVqq~@cx5_BXq|9&-^DG3(_~`
zsLakW9HCDC53fgoijc~PF^mY3=EEot^8E1p@1F=%5duicqHqC-?YZY#TSL)_x4n@~
zhGX;Ks|G<hfx^aG+GbT%RXCO2ak=5%&3Ur_ln>Enr4+IG|M+_AxG1}>ZCFN7P!uGT
zE=fU<mLV1CmhO}eiJ?;(q`MoWd+3txZUL2M=onzA@8o%(+so^HxxYUK`0<;4o_nvo
z_F6lR<Jc(=Md4tXtTR@mf5U!WpniB<^aTA2?2!DOtmcs4>wg~n7&-I7)Po*?hZlMq
zwT2t+(fEZRPcYMF{nJn%8cg1@Aq|3)?UQ6KTevxJa_QdX{Wpfp65IH7*-%-Co~KkS
z80PlZp|J;Q6^V)wtq6H5b^4HV(m#bp_(8qMQ}}ay4`z@jRQC@5Lg`45)wO~J7yR!f
zd4ge5e?9C5jgnBsXaf*5IsBHNpO0a*B=12JFWux{hViFYe8_J>Bn~bIzdK0*m`v;W
zc?Aw%SXkJS8?aivN&1(H0@=vZTQG`uz?=r-dqd|k&a;1NA)F+TcOTYPGF}luV=~*r
z{h&X|os^J}+hrbV5yu%L_&>nL|26(K)`p_a!jdI;J3*QxwJ^%RMOn<uEzf^mBZG=-
z_~X=drT^>YzvNc_Ac6k3{2H>FgewPU6F*j!#--xnTIt2|sH6-vHT5p*?Xq*=<3HLa
ze+Joq#zef7XZDFX^`Zo@LV?-=T@$s4aw_=KzIaA!3`2Pz^v5uN9V*}cX)NxU4Uzv+
z2M4yxoA$1+F8I^vf9u}|{a|ZE;z|4qH}H44^ekjiHE#Q4lIrGnrx5pSecMDXtdU~j
zA>hNo#gX@yEX=>#82%P1a*7=sFz+(qIiZKEWKe@jI{C*7{{ea4zHDC-s2P$hFWvzN
zx1~-8TZouU0IT7CicjEwDL_juFs7!XBBsd#cK#@d)j&fWNO<>GU%t~Zh?-K9a?_!7
z#-lO9#3Lkh=>^0fwAix3neHwEWL_3z;a4V7ncxKLxFGU}RgYX4aP`an86JNd2&n$s
z-vNs>#bOGq12C+g925{SxqqDV-(UTOddzbB+#jC!D806819c_<-0ZPPo3iUaA}9Z<
zlz=I+b5s?zT*}<YmOpR(L%24KWTte}pVJZP|M83e6Bdrq?7${X0A?)a;ZvfSWIjWN
z?fXcUq+|YC9S{Emz<*>#fC<C|njMSDV8PaezhcYI_>Q1f#=QTfW=m5C_nqHILah=^
zmlrdOoZLajs*1(dIe~ByLjT>)KW%9B6*v@w0f%F0P#|$hF%FGB0F|SLH--uk@c#MI
zznsC1Cfs~Xt+0Rz^OEzl>HdDHHnOPJX(9i?t-8m*UF^0MWPDyLkyFmKztxXFcR~*2
z(w~8@f#<`!vBd8BIsl6R6pFG>{w!NVpSw5ia3e)dyY1;-{-gf#ciDZZ^pot9t;xdm
zotbj|8msQ`7s;)0p?rvqrCU-rFzgl2_eKjYyHQRjyg`xEBxDqKk3k(u)T+d)DYrt5
zugI&RTwDO4qN7;7rny1iaF~U&^FZj(S&38b@4oq~kG=4b)x^~D;w6*cePV0=k&e7o
zEYd#Nu9f=+4nX&YmH?mjf2!U|^I!T5!2e;gn=~2pM&ioL%PSl8Ibq1?0B9`j#b&pQ
z#Qntjymx5Z*q=_SEmVgJV9=hdzvf|o^$*!6&}ifoUD0Q$x|ck&96290YH3toQVA~~
z9oU>Ll&4IEJ(}JW@r}}h36cKEssHY_k5rgECdCFn)wpg(6_D&^8L4>qvwYUQ8@2_5
zpfv~g9~YL$6QRxggNyx7+`E0u$OEr*F&IarhlRk`9Qo7td=jVcn<-+O<)*U^8kEtg
z^{hw2FmLin$w}}eNS*&K`IlM4DZF&V%&?{g8`Q<NF6hOs&etNtM|=df%LfWz)J;O_
zciPaa1baWVO6iMLQaZyfI6ii}MG~!_yDFQonhN>&-Y6#wDf30N`O}Y*zrm<VK6i&x
zJ5SH)Y{)ilKJicPi4T!cg3qe8-ig7u=}g>A%mwWl!iQn@<fmc9FWmliz`yKg9OYS)
z&5i~`EQn^-^A%Pk0t`QmMgUxQVRAu?LG<>sNK@Lk=?L*-lKfNcO@M&~J3(Y<@xR#v
zSXcb<$;pkXX=Ya@k}YDmX>x@&t>RzfJU>5s@|T<a^Jh2_64R}fCa(%UY(dnRT|PpJ
zM;8kw2Zkq2*Ob3<_}c7=X~b3PKEAV`1zJ$q#MMgGs<$`*Oz+$x6Qz5jT&8mv*5uKZ
zD9j({s<vDv_3LSS(wSCxZRjvj$lVP-KzmD5T+IT<sA7T3A4o~7zYG-O^|d|ty-@$D
zn<tF-1jU-Y29$q7b2Tk-lc^TNtrU1LS^l*BA2{J({eBP03?waPMpcxS>2oq)Tzyj2
zMoWX`wm@KLZf-sZ44~$1mw>a1;Tlb;m5@V6v+p6$yKA*Trjt^ogtZ@GV<E`-<FQeW
z<;}s<h3jRyUu@Yls`T+`Ik*F*R(h)HXv!h;d%e5!?B%>UPz!6xKqTnhf$})YQ*jIt
zEicV=zLsQlZNe`%aby}D=_`KREUGXy{gSmZHWJ~Hk$p{Q6brqP3OtPwZ?v*pid=jC
zbxg%v`Z3zw71boyiK*IME`Gjc7mZc6^brLA0fsbab?1b2u9J4I4>zn_04x94-T4};
z3JH!Ev*N$&|Hjz<HSq6&G^u5|O?Dy&wpsA>8?egt#d}CL>PZ#hW~&E6YEGBO1z_)a
zyPM6J`kUj}wnIkuxEs>&n{|g#_<$kSG(Os&Ngb+`z%bM)H`U@OEaN1)SD6T5(3!Ev
zFfR=-Oa9YY0{o~G;%Z@P-|P3p1gK0)l``#pS20t^#J=}}#cCHTG-(PPT)*C^>BE&$
z?h()Qgq~(8gAr{z=ZIfBt6IKr$r&JAhb@-tcdxHbEjX{uJtGg(pBuhbZgi)|stoIk
z6A>C)RUAA764N$-h$zI!m`n30x;lsQ8Q}KHrd_M8ioCFZsm?xTPt}@ZO>1n(I@mWw
za|?B7J3!_Wxw@Ql+)6Z~a8DSNJz9jZ@A108pNk(ND;29%>zwW`+~nIfu%93DxjrT8
z*B}$Nf_I9o_pZZu&IL;j<L_(q&eq&==$UW1S0+niO}>azV$&;12ecjNgzKgCV0W1D
zbkMK4&e>zw_h0Po)2Lh?zExW2H&TbBL?1;oXYt!J#9(rX0<5$Ua{K&LtVwO9H@0Dz
z9A;Q9b=2kS{^7*xhRWR+e+2OKj>Ltul`o24yPHiFB>+-@?bp!b?uo*>z0Jf6#-Myw
za?Pb_>m4}Xj)|={Y>XL<L$iclr3XhYj&B-T$J?wg0tk6RQBhI+d-cFJ(=^ff<H3lU
z67`nCllM3K%YC0ZgK+b9XDipmr{P&M(!FiAF+`VBwC5#P$K`V}OPu0-M$M*6O<L;-
zG`E|?{$OFkdGoOGiq4K@eZI^0e#A)g%>>j}f1t|kTPNlhc^wD3bZ0m=EtbF2_N=Em
zVhf=8hf#wUucD^F0*ew4du~c>N*>NzjtFdhDk~9itOotss~Hv1<lB^R^e^7-E0GL{
zk$!7_i*EKl-CMG9f3`9l;VFGjc>{T$pnI*CZT!GAG*n%_7cbhAoNwJ%VNE!V&v%2u
znnk~irP(xdI`1a`*aVv-VvgGO<J5%qNu5(VqE~A5IQ?q6nyK17=E;T5QN)U^w7F#n
zDH_0OCvt;ZqeD61U1dhpQq7-`kG*?ZHXcTZ7%pipZnmgSz)dcPQxpkm$xhrwuezru
z&ZQJW()ehK*u~t`qb5=cF88*e<|A~v3yF`NdwxBgwH9r$pD=nw2hSBmLG$PVg?!cj
zo;&nra3*P%PhW7jg;sZgc4mVsRc+TKXEoN`gBaLlUcQAjs2A#jVxqGbzv)j};mIF!
zAqBr7XY+bG0BOUT%9y2SiEb4<V)oMOk-!mLEUdEEBRquC7^)?${a_#dgtMH-@#|t@
z!QWls5^Fn1C9Nm|#f$IR$a#Ca=4J0N7vql0q9Mhwzdr1BQ?c!i#0edMFLm|E0dq)1
zO=-SaL@AJF<IBSiS+X@rvLQs_wwmm?s8X<)2zAcrn($3<+wxZ~Aid_eNd4WAV9)?1
z-T1gCvf1qwmfeG$RR2zZALJ^se4SpN|9}9{f8o~T|9Ulpm+w?cr~_#GAhB}7-X1<7
z7TMiWeDj@5*4uL}g}v@fr)8~g%(33DmP`=`BROvd=Kap+RMvPZ?Uqw`m1tJ-%bu8c
zXSs+pj2Awmu4&zgyQX#3d!1rGXF{{!xE#XI`T(n+a$XAWftMh1#rdi%5~&|nPduGr
zix{&D)@dS%sa^UbKOxigsXp=&*!P3H{cEwjWE=54M#72ELrqpuL~I#{_fq3=ocVVE
z*A~|_JZR3j2d-1oQYhVFVKuB0zifo=d@IzZ`9@lz9_NgSC#>U4%6>X0@mmJ&x;PU}
zRTTB+(Mz?L>B~Ku1CGXn_izM%J_jw2+pZ!VeV&G9Y#?`NY}$MJRIAHu{K`*4=eNFO
z;zX+w_iBB@`D4FOAq;~+eUBOX2@Qths0(al$V#_vm*x-AtSaSI3o&2FedhU%%6w)Z
z&YR`#Bq0uup8XhK)eK~r!K+=wq0w%ke&nRXcCcVqSo6*?xQ?ZU=B=Z^h|5R%msK|B
z?S|-(PnUS1n&r6M-0yUXc9?T6VwsYlznW9X{37Jgs(AUbz`+&SXxlU8%hQHDTmEO2
zdV~cZX0!<w5ZrvwUA`^s?hE`>0363(9CjTNB$JCVNRQ$%%yTrLpL;smouh-nApi(x
z8p|!y_%Vxqy2dj!ih~m721RN8pi1JML&%0z5Cj6ir_`7#rIGnSbC(nnmO$aA%q7(3
zPzy%L1g8wEccH}nflirfF7Od6m3BjPt^JBLD{3@W{31=(5^Qc`^0fr`CcNiknfd<v
z*00zot;72i=;WBjq5}LKH*X9t_3SqHAWsH!oshiDS0QcGLEsN$Yu741og18mEx}MZ
zjzeTePe%zsfnWksxt#hPr>s6`iIsfv@prk^q%TVq<oUQu?OjJjlUZ~EM25#@J8lw;
zuT<UYq=kow)*O~<VACUUn?Db~K(Ds@_{M6k(u<ZRN%zK}fP_ij4}LEd{X+VSM33*+
zl!)!Zl4F0FG)-p;Hk!0+U+AQ-_R<`!{cP6ECwJ5qJKR2tldMHta)bH4V=l&{`sor)
zZuefQxb6P9>Ju)Xux)Q^7uFA?PmetLNQ8~g?9;BEXYp%nhv-g!9?O!`za<<4DW^8C
zPaTmJ6uM-=c+sDZLcCo{xN=(j@G9V>$*j?k=dEz>XdFEkL2!%%FW-Ykhb#hA1&<%!
zuHP2)yN$J8sY-SJI-hGxwc@CnofdYOwm(*VLsv#IvgXL@x7Fr-s-*YZcJAStDn7}#
zimsdKj+GivAU`dKubbp)rAMwM#&NE!yJ_f65aM_@V<oIWgVla+(MTl5En<oJ;{C-$
znpv8&U<9#6Oo9`4M|^bY(uno1A&WD1K0f#FKyY*D7-`aNe{iJXiyv%mC)wDPYVlbW
z{mO|rmvr?4d-b9Lkeu-dt;0|%ABn%ph5OqUZuu-e*V8VlnB6FxBhgRNOK4GII7*bQ
zpD5jvZ{g#JzLbkd`tDAk-<bO|&-@#a62bViv83|UL7m*i#`&BG|B8HWFvH1>ujy$X
zBY=G#jfupFx=B$xpYK@OgmycJ|DvSma^E#j5z4|BGuuh_P?qDIl~U_GR4LXw7pQok
zMvxmAX>fvRI6E{o<u$x9XpX06YL+zkcFdi5OlH&KNwZNWkXc_y82l3FJvka?cOYF?
zU43KiK&X__3x~psp=(jpMaJrqI?m`R*?dhUwGVRKDAV;930LEsaIa088v#WXi^rS~
z7}@m4risS=NWuA9`B8nZy_hGlO7(xADjeugs22{BX0BZ2nXw<siq$XXU~gx2Qp{i^
zk_<?G^nnkn@>hJj*`>{03N<N13{zTb6RXjbOB#Rg@fW}Y1!2efM(_x3xpyM7+E}wf
zq5DE`9(mJ2*v~Y*5dYxL?#jK4MMxp0t<?cOzqJ2YOr%DdwXSAM_E8)JmaAYj#ak@T
zQWE-l4O!rwEECog!3Ta0Z)FdW$%7Q|4qy1#bg$7jcLO3{ilkVLL67dFa$_yTg%bm8
zKm+%^GHu-_Xd<pReoF;7+99^Jnn1=dhS~%3t*F4!YQpTb<)Xg+0dou8FZc)Ir7Wt&
zPV<2>aVlNj86&lmORKKt^P_bp{2$M^8l=mZG@6_tSjv39hs?1WCrb_$ZXdx8T_c6p
zE{evyd~gUMA^Ww=pmmjrxF)ctz=D)gx=?h*p6>&B1|q(>nH->>ga6FjiDsw4yig$z
zR#*SE;4_tx4SC#}IODbt#~kODd&xz|Hig#1ns=U-`h{1ss%_s)A3cxn0XtNBL(fC6
zk`M{yMX+9|SaEp0cT!GgF`E{tQe&q_KB!9>PpO>I`g9Ko%M1(8Y<Wg@oTH#xvULDy
zEvMxs=#%*P!8f0IZv9#CAaxH$bhBISt<VOci(CKeD1g8l3aJ0lI=oE3=B5S!*Q#8N
zF_zl4L;Grrrmiz@#?M;%l0E?BPam`mjTNzsh3Rv(yyvv0q34pMYirb31Y<X>KrD`@
zhE7_{vt2WcXW=<lm?xDU3W}L&g9Q6WR|C!7KTRBgudkZr4790BZXmCa9<93C)9Ba>
zYxW&N9MIse<w?Q_)HMjKmU2?8o|#E*MK120`Q#j!GGaWwHaer#*<RTx`_jId|3%hI
zO~yJTSv?Vh1k-Gh?K5tkYdeZfk#&*Eg&4C_Z5geZ{`S<8azFHfA#9SA&tmrrLr6=U
zA5=atf8A#+<D%Gu^A>r-I&}hO((VEnn(6pRDZvaD)Vhvlo%d2MM_Cm#()Hm~?fKQ(
zFDJ@3{Rl136pi=ZchLuB#Q8&8fK98)tc}ACCVxLH!DjroiDkKZ8wBjc2<D%R<PHNA
zsTtG<6q<lW##6775V4)gy@F-saj@p{*o5{RDfJt-A0ddWHQgQ8Es&SWk@xRt)l)ce
zmxvhD|7qc}euFd#X`u>tpX+w}A_YF!tKPrwrpB1?(<b)FnTxJ5eKp1dG5FS7>>u{+
z)KeO`^`zk#UK6Oa%;)tZ946OXXP#>#&hL9TZNoy#7i|K@4|j3DD=o1Ik|e!fE3xCQ
z%yO&jS?L5nCnoy*CHk0`^vPEhfr_W7CzcNkdfwsp?K1YUC!e&pmIOd)nn;CKJYNBP
zWXCTOFOxVPeZb(==*T68TnMIzkg{J0TCwp2;#$pheNnqQ>BZwsj~dnDp%K1vJjH7?
zzhL&0+Q5?*;2+Z9XpEH)dBI&>VN5x%Z6%jdfa&Rpf<#4aRq<`{TLG85L8<T;3eG7a
zyZyE?)lkc}FDN1f+u8<Q(oK5>j+&*m<?Dt!dY$Tg2R>C?6BaBG?n><ogYe!l+l<{f
zx2IQp%*CzqrBta;IJiF)KvnDN^*V!=;oGy=JLD!xT_?2_SU5+6ZDcFRQNN->194=u
zqH8@$rQegr&GuewV8+MCzZHzjzkZwDy|!reXn%3`gMZfsMpY@tGr7XzZCCl?AO%xj
z&xAbv!Hn|I$Hkr>O!Ps_-Fo`^ypIB&(L1p@eETN1)19G%Rf@U%Hr??jS~D|k?D;8P
z`By!J(FK&)3DdJx7eu{T;O5l!D{?<AXpNW3aWA9pRo_lYqGPSokzu9ieuR{PUH*=$
zQ40I%VL#InY<_KX-oV+7Lu9n}@Ka6d;}aC^3cp@44svslR8wTN72eFHJ*$eS%6eeO
z4Uvuipi7qbkM6@I`LiPLUD7<Aha4R=Z@9SX=&F=LO8wa;$?=UiW0;GY(BAk>>bhJY
z=SCUw2kQoMF>XNKp=)kzkRTBcdo!_(gt=EMed-F(UD<nFKP}PzI##=dNUKow$;t4G
zB(ZdeFj<$%u-&=4GQ$zs63fF?VyBge8hnOZ9_P<EPj@`<Sm_5&6LCHF&VfK7rYljn
z9cO-(srb*|!Ay%Z_-m_I!|Tj%Ci*OvkB`q29d7!OsS|KQpJbp*kK0I5TOD!jC(f~M
z?MP{F48uy5y(J;x>f9<_4yeb;0$CRZCN0O;5|C$moA<Jeu|EYqlSTiW6u{5Yn6PZ8
zcc1K;tsRdx&Kyokc=Ma8(E7vGz5cDKosYcd5DjFPJ?wWPrHUKLo0%%M<?cO>iB|Cy
zZVgrmLWd>wTLrZIThBLh(Lq@s$WC0NZ3rH&OR`$UHbqytp3<JEN@}z7eR=K2(k)2Z
zELr*kPHyV=l>;8K4JTtoH-SkI-g|#;N{w;lixs9J0!l>AonSNmJvYjh_%1yPnQhpu
zFymKSn4lXN%4V>Tur|)m^0^^==oruMc2}?LrOr@H#dGH2gk!<3dDbS9CGS#C>ez!B
z^?)w|Pe6ug<2;|9Pb2dy=j(<-aH(FCGF_1JXa5Qbe*U_Cuq%Yn;c0&N8WL!Hd3nUz
zT&MC#nHXd66#_B@nt0>kYC(~gzBB!(@5>7*+Q8En%=dj+!VorOQ}@olxf%d_vm!LI
zmiE8Hm!&v!T5gYUvKE$Ukh0^$X^}!selE+N4!TztULaw7E1@1`WCmq`zEg1KbuWvJ
zIcbjC_mPb#gVdZ53C##U?T0d2g1mNR=zC~$Wwqw|!K?C#OWkfTn%Dy=94Aasf6ukA
z-t?v}jcH757+X;uIU_FsS<k~5Wi2NQ6W?cxIwTDFqz|<=3BB;G)`)t9N>uZSU$xLD
zxzBgz=2}p%jF7V7j%7E25vlcUm&%DfqB#~}G?faNE|pomAKnb0E<|4kD`MZ2!Oi_W
zML;buIi(ER1y1fWH|@u`(+qaJKc{hIs!@?8Nw=`Nk8p6@-+ZYzWA}I{X8xg!7&jG-
zHsQjivv>H2VM_c5uz@u+dLL3eH=~rw?{OVvF>hCN?OSo0KwLSSS66dNR}@_FhlW@E
ziRLEY6L{7FZ{a0qmhWxQc`Bh*<AD)XUC7{X8}YFE**V-*W^F2t#i*$+%-*Ix-_qYx
zWT)K2a3nKP5`uUawNf})x0sK0BL><nv6+Z72s>Urk7go(PvRTvn@(<|t3Cwr-h19h
zU(0XkepU5n^#+(mc<T9L2%*Pz>3to3Zk<_Ajr6)`Mz+$l%v4-ui8X%Tq%DaP*z+?c
zw&+vlch8o(+OQ1stP5%-;(kw6#HCa<U1RJgK!`lxs;7l;F(X7^kJt4Lc%4t*s`^L9
zhqMi%Il5Q$O`XYhQ);TZg%-c&gC%931oELwMSoIa=6dZ=O2@Cp&iV$3u2IM0?Z$6p
zfz5TwcLIeUwF|XX_b})1P|U?>x*$t^l&ROm^`ydL?gKOA3O_l;uO=bd0Qi^iGQ$X1
z^Y-;BCbJDQ7S0Vpe<9n=Lw|~$1Nao9U!NtuJqz~aQi_lJ?fI~K3}0MkU|EZnH2kqw
z^Rtm36^uznb}}31Zb!qDqze=$<L8vn!sL?bamP1KihCX$>l6hpF%I{0QMUTF_Ix8X
zMRt9@{Mr$>WGI%O6(L3mrP+X^al7`Is{0L+na(R6zrcRuCi+HYz;EmpL#|dM7ogYp
zbfjf7lXmRKx%7*9<0w8PRwFa?E0x$(k~uY2C0rUeLH(<e3<x<tFUaL|_lf%~Oi@`=
zF#&J->>}{@@$pZ)9*UF?X#{gW`WYLxyGFp_+EQfpJfw87=O3%5%>g>`9Cf-s-fqMb
z*5?MM?lYwoWPt<FtLo9TG#dTkQ4V{K;zE@j&k~zv)q})S6nQ^gDf_}igxo}P?rvu8
zVqX_BTzxV7$uk3@UBT~ar!O=TmyrBx2MuqJ8Q!67ke&0e(sU-r*?qotl+7b}G<}e}
zcWP`Q`fYx2vc;(5Q6>(}0@Ygc<WA~l+{xAjzjSNXurKsoO`X|}l2?Ws>)~XWOhCp%
zVr#T`eSvFSWfvlg!##&(<M+VM{Ld&)_`<>Er2(JB^$lWTlwEbUZtM0a3o-}?!%e;V
z<se&i6RHjN7OR3jf+=~DVd^iUnxM?|#r(xOjA!k5^47I<yj1@7o7Z17Kw~%t?{})B
zT11zRI?)n*=rC!i(p`KPlnT2_dXz_qQf~-WE1wR8eU`)7N(UQDFz|XiTQt{<T5-T3
z86|<Q^-iis$KzCTAG;-e38^<-{Q}(?x%yE$I`i1n&(hY2#D?H9_T#&hZ<r-@@XMe<
zbMd5BUm)Qyuw(0!ID9;E8zIq4ct_#tFTjj6_{o83F7te4_LYalD3mYue@^BC%@BC<
zglX@INEz!^u#P_L;uoG*mOp!+7E#P|&|(Olb5E1~{cFeO*uv|{IYj4Nt|JMl&5P^N
z){OX+1i2V&W`aALX`-za#S3eSaj+3;{e;CXrY{09I$Zb~)mz}(z4CyfgvU4?#q!%7
z_Z@@o$xSJO*6k)gZ}0LV9m$pg=a5Z#q29ppF&ijIUz_IBn&MfWP!zwy)2*WKA;gRW
zL#3L-^zsl*3=j9*=e!yl^L*`Q;W4US#Xe9g#fPh#8tXSG&$h|frrhj9t;=5LQ_o7r
zM9bmbic*lVc(r-wgg8?bSyklAXrfL~>2&2>yO&yCQJ>iT{``#j9rl;1Ti&~DQY)Qd
zGdq)}iT%=CF-Xba8UyvkC@`5}0Ev^NTKxV|5QmlH!B?m&@(96^xAmxw)AxNTiVkaP
zIcpPW9$<T}Uo3`1w5o`~Frgw*vo*wY1aENw#fT<~k(GN;;P}u5{^-FFrHH`0tM$aM
za_as8Ps{@$h3;RkCox`!6^T)uQN2>@JxNG}+7+mMb;k);c6cN%5;7TMn8taPUyhi7
zYN*uNtp0}D{m%)b06r3x_)Yn%d<$quSlErB>IJm_C2?U^9sZW<hsUkgOtus_l`q41
zShjgLSspSh(lBg=YA8~vUJFQE@Uz>5E`NRrBH)x6tu>)+H_}hRX&K1lF$f_+0&>$1
zwr+_g0U%DXOpZL@_yo7-Ndbp*RsHIR6b23c+K@e9BTj(7>axEKY}n9s{9{C4O&Rmj
zoml-FYmz5o-O4a7SN``hp4Li8*NS%jCA-l4`&g5rW~ut6=Y6HG=5JwG#irczw?`J)
z;yM7*WGTYJ_f&|31NN|uI8i&ys^1-Zy^6Wi|8V*Yi^86jg$4k3Jl~2<Qr3h_4!>u%
zj!B{__Mkw@tADhq&%INnOy66P8P@zuUIl276-Hs3biH(tw$AjIIm}vLPxt*Z?vONP
zw$%*pLZ?<#56l4JR^%XXsE2&pX<bH)=}?QbzH5t}A+w@!Ob>=6S%;XgPE=C>r~B!q
zkF~<ZXur-k@(=o*Ja4y0+S~PxhK@T4D#5ut8r{(Z2HyY~ieq2T=UGka){D!pFVCCT
zvgg$&WO56J&Y!P_sFv$><~z$C#Q@j!sAHeSsQu`xpA3I+jyo+_pk@&Y;i+a3kHJ_Z
z`OuYOI6ney1_dk6LQM*r(Y_pue6KHl8c=jvR5_GLs7kd(7S84cT-ZTm@>GovYic}{
z1e`B5XZ;n1ixjfNErQ<MRf#NKN*0>VT8<dCH}48kjE=vMBdzD1bl<)|&q6v74<(-d
zRAJtye^Nd4gx^yC1%&*b7mx*P#o-l_Dun)4an<a5^$!omEI$I6j9cCqCA_hO6fLsJ
zH&B8<XsMiWXU=%M>!6_|jd{=HY8nz^TA7-lF*gymdxp%|e5Pl08f0+UvB%GbAWv7E
z93BQm0qW9whc8b8URKGtPQ)>+2mpwN0kW_9o)Q>2<J3wwCe78&hz_Hok3t%Ob*#~~
z&Cmkrt$Do@{Vk%o3Z`Hxy)90+lIc^y&FF1qzsL~aT#}3!)Eq{t_KbT|-H@<qps{5B
z7mBt|HYr-_gr5gFq>Bf``b5y}!f+bOJl83y*1ew>5y~e?8*=Zfj{Z)%$Ba=;!y7Sp
zf=6F7or#U6y`ITp^{bOruWe02QARy-*`#~6x)usARYyBKnDqq)Yf2rEh|P%Tt=;q_
zNf;UW<~pjll{}))6P?f5NR#@vlIp9#IyW?KONY5XjWLi=eW)-$TRt*#l&()*I!yjC
zO-34%bS{qB_WE&*wiwOwWX-TKzFZDMPz;9W6{lp$Q#h9RoD;4~Ve(AdNYU)!RW{Qy
zzF@N`MK>qXQP~65?saYP#N-wA;dGuIY~?4h2gD$YXK$9ZJseCV_?^co(j{bv*}8XT
zx_5IA-~e?vbAfxIOm4fGyf~E}Dh%u~3{F*%1~+YJ=f7>@<e*==s9JH$_u%yw0ivuq
z$k6iRwza!?Q}gk8s(SGDN6WQ#p;b+$DD6G*N&lH{;}=gyLE8GsN|y04R5w5MjC(kk
z?OVg)FXux%hlv&RX*<#2!IlQb?4kmJB@XDZLf7tD=C$wQB(D@&CbaAan7dt1gXl}n
zAO?gQ6U8<r2IF1p?&ew3BAQgH&6&%;7u<T@3-f{y<!ea=_$wxhCk*LI>d1DPXL^Gf
zOasR-TR8JvL)f|LE#^LsQ4<k<b#Z#5j^55L!aLT{3x2ROdd<r3CrwDKiq6Dsk;q=q
z0Nf{VZ~~j=jAS+q8JrnLyz<){*M|=gRK_`vI9Oq@yb?N#CwzsA{NtO-n%mqB385@X
zCiw^<D2SIY{e1I2IQLrRXxyUVx5~hI1HGjA&Q~|0BK<U{P{kByi)nmGHGa_tZn+j&
zdRt8MNHKWMUlSDc=Dw6TB7>0q!-9<5c%=>xnomqWn&Ba#;L6}D`R}lzMGqFUnjJg=
z?O=*Be>V63a9aHe-%W-}GBtOaRM}}<I1+3XHe9QJ3$-iZvaepT8i1jmtGceQu0ztU
zXXa9B+MyQXh%PIvDNCFu+*EHlO&PBIl8_se#*U;|m9kGqVmj@yp7O;lKbYsZy@U)b
z)ye}ieIv5AKt3pAgig{Q-Q(Uc#Fe(DnUK}`?t-Xu!jk%CNw&d8gg$Xu$Gimh+tV}G
zP(|O=t|Y_l@Gobo@5~vh#634D$5j;}dKUDAZ{~CtbEz&#qlrm1fKX=b0^dG&Vn`an
zPW9Y7Q055z?(#98{2Hr5+;#>P=?2+#umAe>2faSzfipSKsx8>sQJ~M>egQht-2;sp
zZAXX%lcg5KAEx<FRxXqrT->iV*;&c^rY!^B%+6wJ*sdV7aHA{q=%dR^cD+S8SDCwP
z+k|or2GW!3yPGp(n1oidUH{}8OW(7c`~fpXdtzSrd_W1f11`}M-d*=>Jr5sFN8(ms
z#}5(yh3YnXKt8LE=Cb?Xs0{YAW|PRUva9|GqrTnXVv+BqiG>e<a=h_k<hrb~5^{1<
z%XpKkTqssu&@0M4Fb>E$n$I3ScH@gTC^e0mT<5g_HQ#Sn==QlJl4$_+*@ltzwqGEu
z59;|?J8Iqnx0QILkK*VLbRD3+rhB$eY>RVlXqV06UfKkoOR31|k<4SEDoUC2HO9$e
z5}ZjX7?@d}+I|Uj!!v1_OEV?aeSs_-Bd~pLqQJF&1x-mivS@&-Hm4G8o_!3;HET5b
zG!5z1-FI2hv>O#FCP}ZZ*vhRSDcTaKv~a%Q?w^xSrS{TTa$+sp>CGK@Ms?(_01dIZ
zO-hj=#W(L4Uc{bRcRW+<c0aq7)d`5t>hqgH6qs+$bIka`MrV#n0_P$8XZ(-WBbp4D
z<EuRfv>v?%67v%Bz-4wzuxr22qB*EM45jjQfc9AKFu^oaz@9a0NM+=dum*a7IMIy+
z>-d72#9p`ErqHh^-7rM4vkV6WHsw$mt(1ytjxj2ePhIqcl?q6k9Z#7t%cwE+mqyy)
z`cr<R_W<!=pSMcra=mM*&y2Y_*brenhoT-5DK1m|9J^HuaU4+ly4~Z(3z~A*k;x9y
zeC)i5{P79HP8L2Atl0_lThSycWIJiMwqqj2kKVtjk=Y(zPtzVv5;LkfQ73kt^d}yx
z6Iwiunqo$m`+auPITAIU;eS#Tz9_QNf0!0C!f_f`j_Cg~C%5>k$Wy3@XMt0~wO|5|
zS>`eXLds`04%r*<oeD9&=N0;Fq|M%<Te9m%DCV2)5a39k6|Bc-NG%}Hy@0FA5bwz)
zq5+vy<d^78#fb-aN8E&J?ps0U>gW#qV_RZk<gv;Ow(HJQA0Goi(kOx5+WkF?xlx)0
zzx=h<2>0BtyPpq6XWR%bRABurV-k^H1v4-<gxw`SJF5&&D*lWf;bT6U?JRLkl9Z0&
zgPzl*Yj4||fEYBymK2gU<*(Rrv8$R$;0n&Lr1YR?Pm!JlFz?a5JI-tM6A%Rf=Oam!
z{Ep~2V-F4dslvlfznhv;^H$0Sb6hJh@B0pBpVU;le?z?9IlY<I#%TDJfM3e|JK(F|
zXw1$_)dZ(7U2naF=~c)fJ_u7Z&2uf--$1D=o(8zW#7Q}IttBR}&O!U~;Frk2a_UT2
zK89;Nv8M2<I4tvioz-LgoqedYq}x1)6NjHBeC%f}Sxd<9HQGQ5_o-bw_lNIlG%h0S
z_>ZrfUdQ6;d%T|dVVN(@ag(9>c!VU%(>?w?FCOuJYfKC_FW4ty&kD){=W%3B^-syG
z^29Yc3`z_pS@oGu^SS}6v1?4YA<uxzF!q%8qc)~!$#K%iD__~ehpSNBC9|~4!guQ6
z%M_K|_7wk3OXS0D%+90rI<ZX;`qj4Pq;d*f%^yqS-A%tkuEm$~n?+qtKKYgk%I|>V
zZxnW9O2S7SqwJ4eHhx}Bc6|{?K0_6a#^V-$R~*+J-%oNx*4IahF0PT`NbQv}*Bh3g
zx^kKn2At+*>X}4PH|VXRMHi&GQ?Y*eiel>_Yg-2aSyEfQ@3|6sI46d}-5=$zW1=H!
zh+wwbWS`ck930E;+sfFMa(nuC)q!gJO9=VfoZsqR4Wq#Bmzv$c?e>?j@{i2#w!^#*
zC5&<l<C$o33jQ+=uJ|N2q>{4$2GdTWxn|>0H>7>*d?s}rr-I)AR+<A-;xm^P6Bae>
z!%i;bX{&KX5RNTgsvMfwGN_gv2!bg^_@DblWL~h{<mv_O`9x^FX2&^FxnP68I4!lg
zH%yXP#UUk#G?0XA`sNI(IRdA(X5qJT86U1Vc+k6{d2c*gLeAyjru=LPYMeA&!FUoF
z-}p{4b#?rvq>tq^hqLDVK)0p#I;FPxyMK{f<S&<@ClGVdVi{MPakRxK$d}Wha6UwZ
zve@@?aV+~+x@-LoN!Msiq&;~{;k<-^p0Vr#-QYUYgzNR;)7c;O`QTJ{&F=ArD$9Tz
zq%GKRK`E)hY|+UUAPa^lw%`3>GW4+V(l?d05zmDDgEH!mcNlW$k*IWfIb7Ch1B5ki
z$}0-Gvg;TcDhq$SO6j*ac5=ljT@RdJTJLbV*%)8Uv|d^G831ytNZ_<uJOFNOI2ZbG
z6s4G>595c;AXW^X5LwQIfQM@<hgca&wb<RCl&8GxlILSHd+O}7mL7Hy{^{j1z&lcP
z+^L@C&=fd885BFM9EBB@bk{A1V^l{@bs>fINjROQZnNtwrF&hh=R6{`M8)+?cHYYG
zUbGvRYB4v~vP!%ld7-GoW~f!lJf4sIS&~n2d*(magti)EszA+W@d50!OK@Y8)rYVf
zDP=x@bswhwa_a-`UobEUWK){r5I0Q;jqWl|SPfpF;5qA~8r<`GmBrV~1TanWB}&cV
zfSh4KXmxoguDItfTGL;kNlyV{kdm0$%QwOlGa?j>eknqp5d1c#D$vDQrbR|y)!Zsk
zvHiIv?RmzEpIW}9zLolNM^{$`pyD0HG8_Gert%Lo@)o9+{u(qTW|npum~T@r_MS23
zLpIioGCgxcLEmuve8=iRMK909N>8gZhUl<%-zg{Z)G`BK4D;_TfvBr?MVg&IP`7_W
znlZgSA!BoR)c|DjK!UNZgD0J0BTYij63}Fa0rKfuI1_I~elY@v@tLYfUL`aItZ{fE
ze_`wXZuC85glH?BNs3oM1oFgq=DMcyW{wMMO8cVz4BLPoczzfRE2?{;?P|T>;X$m9
z(8!}-&afm6FDsD<a{e!9LaGs36N}`~2%L#xYQAiBsbqe18+3KQ*`M_(2HEs=vpe-X
zPYqpcYkin);!)D>ZX!Y=-Fj>;Jurr{NPO=0qFnBJ<s)Lmn4)4c9MFPt?;!AK-iAc9
zJAMWv$L<E=GGgsVR&j)Oixb6C?dfe=6-HIhU20d&T}D`J$_SP2s=DU_AE#GvAE@A!
zdkW$zd&D^$SliqMy##J|b(Bye^w*;bjp=C+2y6^y2`E1{M0|99;m>^VHat?Q*<7y0
z{auCobX;ReuUt#X#~ZB$_J;Di@zM7{QmBqnYJ`GzNuf*Q7GS>lj&JoAg9T=rE~Up;
z)(ae23RVEvbQJ)bLbJCjm86!m3v+K+6))zh3b%v4a9F(O{Kx(O<r;dJ0Qz|7E6M8Q
zFur$avxhdlYfAwssF{VC`Ct-QRBKcM;spy%+Eb<4{O}=%=A-Q<m($do!^%O4lN-@J
z>~m*V`<DXW=RydJ|4YZbBU2fh`ziO^S={O!<T#5EV3IsUOV0K=ft3B*ul|&8rNs`2
zlr@|@p~YZ!Efw^foP^NI{fD6RZ+q+D0IH{-BYiZ``!)b6=LHAXCl?|wT%IQVVQl@Y
zweOz=RE&YGcnV97*v@$RkVTdLr9ApC{}jOY+7L6-@A=&s%%Au0lsA2VwvT+o2t-+U
z@uT7FKSAeTk0%?67N8e{4HzqF8c{luqJRJ{#`y&xqt0)I<Ju{5r>6i4&sfInCMoz*
zhv1iOF4|~i_4TE^!P@_-%b&M2qftgw4JA`Jr9}K}Vgl-annQDNH-m)ixmPw2RZSLP
z&Y`<bytt3=Ig??2x!1desSxoG#qN*MfmghFgd8cMww_UW2$u04)+7_CsDIq#^Iss;
zbl9R`APT&^tqHFpU={ft{O!LKHUH|{4FWG|%3{`Ul%=d#jWq9nzNad@VR)wg=I(j}
zn}TE``PmR*jb50;<`H(qUZWrxHIkBIcXkNlohI~>dpXjZ4QY;2aZAZ-TbD&%8%VId
zRZR_hL`7P6w;_S8%h$-@w5lPn4G;u}6A}}hA@CFj)HAZy0#j0)i2ufeLEI8&h8h|H
zCJgK;0E~a%{B;-*E7G~u_y#Vtm4d+J|6%D|dcb$@OP3Z5-8kkNe0=s@mL);VTa-c$
zm|YZ&27FR}t|_OtmuY}IU0wD>x%<%J=Az~W+l))_ZYE>@mfG(wP{}AtAhMWf5*7#z
z8H+_M_p*g^=)R0$s!c!FdaCW7kyfeGAkVPvE?3JD-)Y_IY4W-jGN!;ir2qVAO%@=J
znwsR%;LBF?zJZ}_9Fi&npS}E3@bF8|dmvP@|NDn0q1Shs;zE4(`xlIZt$g_iu4|@J
z0d@8HWyHmWhpHBmbLgGLJU}_(YRX3r4i5ZI1_mqslfwrd2Pn0|kb~}c5{m!(Ex;pu
zUdzs9pLFPsfBGPNLPUbC3-T!HcW+dWyE@BjZFqO~|5gns6fNvYX_1n#rZxl7x%5EL
zBucq8-{@kI-_a1@+Y?x1CYlmCUAE$SR-@xaQ;vaoHaNx>7H(^;t*xgv=w7+c{<76y
zR!hGp21Ab@=o<2j)05NOT3)Z8=w6m*=%cu^Qe>C`_r%QF@8^7gb1JTywok^E*B{v>
zgx%2TcW<)ZS+!5k$xL>Pk7EX!1*9~Wztzbm;*Sq(atx-EJf_n5{o$Xg{QXx0h_ZMG
z(N)q^SZFplGc!Y@$Al^Hjw;I^XN`p_*8v%mk^C-0lX-eR1WNMa`DBwbXg4?N1JpjN
zQJXmWQMZp{tE|yCF|lr?jPnP@=#VnnJ8O$dCaVlE=`<5RYsUkVKM+-A+BcHqoEC`_
zhkQd`k=`Bb<1^$d4}}}jk(<-4n|D`DIn~uC7+G0aoY0z@(mfcAJA3;4-QR8bkAnjL
zOMV<)WiOrD+_t;BEAsX0S65l~B5`dAI91HXbs5%joYjw7W^wl;@4MU%_#YlNnTf^M
zF%2Pc>9o?7V+;lTq&l^fiQ|6YPDXwc0PpLcQYHNI?v9haB@=RCYyu%(hLnJyUMg-Q
zKEak&DRH`JyAblSE4WBOI_LkVXsEwJCF<Ig!hf^?zHze$Bc!_royU_SXIhl7E;Ot_
z6qtXt^{=tH56~v7y?@1XJM2144zLoj;c8&lBdt_Ec<`VZTjMA4*Sp)R1n?%+byHY!
z3JYO6a!lvCfeZz3{RW3U_ohxnKEa=n|1V?nyZ~(U*^?~`VX5el+4f38J;qR{MS`_#
zNlEP<_|5?>Aci8UW<+!b2z9u*+SwhKvM9CxeuA7Uoif)1T!`cKK*$m8?w38H5Euh@
z3T#!7zOKLQHVzU}rS$f+{9UWeY0X0=h|3Ukcf(QvH;{fKkf?a|bg*D85*Ka29Cv4X
zI~fYhKVCw&^8Ovz{xq*g1n^9B2hBnR2`)Feuw2mF=Of#&ma%PEb!bu!*WI=+qZAmc
zM=FY()PJJ2Miqt}-FOX+oPObggO&0B1jPTTt-zyO*6E0-(zF2D3LRA`C#}<!kHB{-
z$-AE)PX;{yk&gicSNP}6E2k@Bs?s!EM^04IyDa84h8A8m6;7|po5^3CLwIFlcXkMn
zM_NjWG;`wabUq&@*{y7dvhp;$zP|noAO5e$=?Sd^39K^pJJ5MJCw({U&SGTYr2=$O
zQ^CiqY;0ApwVl<51qCWgB<hCNb)}N-ERp?;RudEkQ_547dQ|h(X1bx_(KJ2S=dKPE
zKtdLes#2;zfJ3IU9=|cPYYP_;5$Wy)+`F+~7NYQ9hVKJp@rWuz`)V)toL0rpz2P7X
zMoqy#o%>I8MwLz<5i?sbwobFGdP`F)N3OFDDlRUj2S$tga-%N6-67L!8TnBX@c0w!
z<pJ+_&_I1Cnh^7yUB-Y`rB=XMW6Iuu7^f_<UB+nEol5!XAO7?%e?VrG{gyCANpxSE
zkoQqbPR^=dTU(om<A3uW*+*XQDT{Bp=IQqzKHX;O3>X#518FdJ&~b*4-;o)~-cX(O
zdmG!I$cU;`QqN-r819v7HPsI)T}=evW%_%d?#IZy<B9!VMEvnQ6*TGnzOEnR9@kB1
zJ)Zb4Q6xg3?3RO9)ar!#xh|Y%!UX#c&rFvDwNVwnU{HCp-V^ciqK{4Vc#;VTYuY{J
z;pkmv!I2>QW~Sx<fiwmBK+2U`F<sgjZZJhc;_u3`@1LO>=2l}(ad&rht@(o_k~?2)
zY;W`E0yoS&3|f+R4!EnOp4?t!hH4_L>S8Jl>U73*sjZ7mE_;*ybfuxni68HDVKPjS
z){BHGjUe)&Hy^2GykcWx_t2j{<)a_QGbX&F(f7PEQ5{pNsC6}?CyQ{d&QdH#9Hr@;
z#cA$p1ZElSPm8fcpXyGzJX3m5qP3g9p+=fvj?F8fJA7Cmof4!)T`Z;&XRt$W$QfqZ
z1rcFx5H9^IDg5K`WlTRcZ=ZbiE)N9;Y8Tg#sa|~a<Sw(5$qINWr6E3ipUWF1i$w?R
zXliO+urLf~-f53$rPicdrsr6Rx9|2DFpD6fDzRcTSl__8Gxa}5X{_ZzMKcS2nJhS2
zPyP#IVw;Ba=B!)02{==Vs3IS@g&1vYY|vL-a*s_#oZ3{J$t)xvY&vznySVfHJ`~|D
zK)WEcg?$Is(CX@@%$Am$qi%lKuAGCzX_SbtaEW3txdu1FqQ2{-;m76()}8hG^=Kur
zO6fZyVB@_g*pK@={>y2}Um0*XoYi4xjy=5m6)YHLL*%egL6oOrMJsf_(r^%btJ~o6
z@xRUDqQ%K-vH^!&iaBN#&mk5tipgHg>sPgVfN9!}8Pj?ljx}RttkQE3oM@3Ue=%sS
zZ1VI@_n83IQI0x0I}Z_(kTml_CK!y>e%eqeEExfp{cepvq`biG_jV2N@2JMe5<tJp
zM0}4|BCFQGQ|F~vK!kho1RY%?#e;H}0!V8zX7H23AJr-iR9Ms1nvT!!tbk~%)2)Hs
z=~FFJ&r}w84(cx{_Om`wmGT#@oM^A(KM92KoS59@`>jSudADI<R~cpSo7Ok{N$!Q3
zZI585lCXOFGYrViejcLqgU?-cMy<vD99uQDJw-lfnX(3T$+6hcW{W!AlbF9iCcYI4
z6cZE_bf8k{P#GN>8p7tVn6qnD@m2V5nIxIAIHt@!6zGgso^jKfBdh!*8T}qVenP@i
zAH+=;nK5Gj-hA{<<*u64p}iGTTaUpUkeak^XEhv%ZveJL=7~AgYuAo{_1U}CR*XQp
zMKv0p=keZ^2+~lB0LcZFc|!Ndlr@X$=G0;}&V<rB_mKML6HVaLdm^#_=uVGZeO3l|
zBxpZ?HZRtHTuMevY2Ly9N;lXto=bvrpmErJ*cj=q{z7U&QM2%^`TXlU<D}I0Iimeh
zTGiX%##xCP++m@iB<466rFW(Y+2=@RVz73942)=$Q5$}d?x;!P*!c_u8mPW}l@2?#
z0#L)=wk%A^u(_+H$R8i6h^a-nN^lWiKPQw?s*!R`^bbV_R(Ypj)2(YmJJufdQ~sZ%
zca{~W)wxWZ5?3jWUFMW9HYw^aVUp5i*#Dxmf)K>(YDuTZT6lj)1Pq|kd1=D?yztW_
zDJ(KouE3698V#D_Ea^%{N9JQ>uRB71xVPtMzxPVSkN&m+$EbSy!*fcykje*|8I0J6
zKIz;7`*-;OYBr9sOx=&{&gV>8u80gle`?-g>=P6<HMMJp&!6`rfIbvgMFHdu+zXls
zZ>T@0@@{h8(We4$L0yr00~OL78v{ksYca~3si~>9e*XSeJ^5G6#Wcb#Pa@>`jqe_X
zGaz9@HG179cKcu|rkTaX>;2~DW<rUf@VbkmwLzDlS5Dc6l>F~K;x--puG2DRVWSV3
zT~1u`+#R+~Pe)5ro1JuY$ef8_Mu0+u1tEvIY_s!QB_|2ruWsKA==cim%rC9Ao)Ou2
zl|}j?{bh!O(jkhG@8zSTQ%fn2F-}~RX1U^HwBhWY*LN)ZSFw7Mft<JC>Px;kGh+-;
zy2dd``F@llpY(=E#2zUQVtLe;xLv2MZu2$?-_fzONdmdB)mOdoT$`Go_wQ2{(S&`r
z+kE0SW6g$WeTg6@AOL^(?pz_iia)ENexBBHXRqOClF5(N1B=_L4FQvj8k^NVd#WNC
z(FWJi*zx+qF7Zfky;2pzXvKL;$hKgb^!%!7(TpeT4yW-Hh(P{096iPEPs$Dk*O!ap
z`5{;e3?NAv^<PSa1E)^SV)v66?DVRDRqDqDm4op~NMVz47yNi@J?NOf5+2N!c#Lw#
zSWQnA0Os9nW>BphDtGrftl$<V>zh2|rdolkmac3stO<`?<P(hFQ>s59wk=boQNO{m
zcjpL9l#iO3?^xBCCcjQ$UYNaJs~G;mo<OS<iAWIt=)tt3Bc!j(l3Hc0qO$wpG2|oF
z9nN_Vq=lB9Xrejdqf_8zVq!AO{`PGx+2nUGrfi80ja-Qi*9iemONGqyUk|ppN*=k@
z9-;uBvE@|sn>IOBh|kg!=ewq!o&pwL9e|d>EA5OAt43zZ$|XkJ+}tuVRVL$JHYd(~
zI8@%Jboe|p5-l;?H%3$!H_Q^m*0H?6br^;_vz2+W`U-H>E9<Tlmb-fR*CR@4HP(Ja
zn73wE2XJwVawZ}z`kT80iB()t`T8^4CXQ9dG$Nx(mz4E8XIrSMWTWiG?EMJ2#81RF
z9w8lCP#;K_&mQ|>{Rpb7pLiy7|4bNqagwG&<qxC8;)uCBXIA?nWTTR>Ov<aVL)Zha
zz3C^QrAYhpk=TBg#b#=F<#BJ`!MHh0+ZcM1hQPrtzjMl^^FE#3k}7c_fwqmfW>L1U
zSfj3@i2)5pTb@K+H$OE65297wG5Zcyn|2L--Rtshue+OyPDb_4SPJY(rvykxb)chU
zs3r@E*>S+~EXy2&BQuQH={XNhFx`U6_{^XuwrukVZJN-BVgJQ6z%n>$^f5E}e6~cC
z)>L&LX}(#^jp5kikTkp)DfMLv_ZBsu4ha5~Ov^My=Kn6SyhL^WH@wt}k{0mGN0FuG
z=SfRaWUazY>-M&6T$gtC_HIH+!l+bJEB@)xPON~Kswwmz-rxX+g~6r1a7@XFTH*+a
zOhQM*Wvtk!M`^vhA7q05^Oyg#=ab$6GD^1Y3iN+UjEER|thCaW{sHbWoX8F{0nQP*
zl0`160{;x-pVDMXW8mWstw%#kboh?aL91U>Kj<SKqg>2TBE4XLM}R<RPFRaoSSrO$
z`kRkR7DpAP(Qn*v7HBUKw7lDPL)p=1T-e&#vA9~H;XijR7I{JInde`@N0(r$5{I6+
z3zFKar0H4Bi=6|1+nF<$fN&RcsKreIoYzRG+yeb?*TJ_}Vsooe40+6Mp<T!7VzCF`
zwom4sUke<#YM+vx*NIr8kOoZ!%NRGQEZd4y?YM+N-IULW^pj`oco2p$F51ZzD6ecw
z7aP(PJQj0L8M|2?JXG47j|H~3);IUY6?ae&E<tTu7D}t;U!q;Xz>IfyU@YN3(;_kn
z;+Rj>O-*Xc$8j;;m+Uk@5AnDxCkXaxOdFT-56f+AtYL#6rKLGxr+Zbr*IKd8hZ;&H
zOcAgbM*;6HDqr;O7CKc~R7jmy_Z$Rl4d_>FWowv^a|V35vPE$#7DFC}IX6hhW`&68
zdW=z;R39M1rBN4EK12hl4Zpp;y^Vx6s_J@KE#G32#G+98^>1)uri}N_&W;iM<b+tf
z+}z~(D0IJcVm9nWar>Osjlw)k5sHX0B#q>V4X?4HPBG_>|H{6j!mYAP?S{Hf1biMo
zv_P5fI1B7EE+dX-`6Rg)H^Z5DnvsU`rl##J7=TT2CCYh(h4ck0<S`zdz0zDe7#G@-
zpLjvsf2q~Y(r<Cnf9%fG@2;kQW*wqyC)pQv--|&%hPn|roJzJ{>4|u)1~u7zEp^2h
zJ9;qw((cmEI~ZC~rHgP&;do9}s-3@bvOdO`wr<mm*Y`8Yxs;Eo!WhwYKx+)spB^1O
z7)jxFu&h{=m3~5-fBKLZkALRF5yEtB6S#12K|hm`bZeyTdkk2`u^6MAGUVMuh;O`Z
zbk)-2YIRDzdKk7Qcct?=)@6$n;T5a+$grR0g!AD`+_(Q9TkjnW=NI*ThY&;%L`g(R
zM2i+8L>DzW5xo<23{gfOB@&{Gn&`cc(R)j@M6WX#Ejp7SI>VUv%I|%ib-(Xg_a7{4
zSvX_Pb<W=V``w@2Wu5n-y)>+7$gA3`XlHNTOXGbDVma5Ib^d)VB+-uDU<#ephut#=
z9Lt%2A*d*u!c9oDL?0ym*?w9BGGDsU?-f|DtqRu~8hKaMxxWA1C}_S!TJy3VAEn>C
z^2tlaCw6oz-|Yk4HNZ6pioG<|@R>#g2#f@otnJ{Mj5RJVbu80s)M%ReAvsGWo{4<4
zYQ`8-yzwO>_?X|qbRT^OcV}1OxG$O^r)sDRGdga$7VT_)`5Dn5mQc@9GJ_100BGC3
z)6Ml<bn}6<sHN?;$MsI{+NhN7ht+F6iZ`E^DKXb#!dEmLba7)2^Y}|3wnjoE(5cz_
z&Eh6<@vgC3(>Z(f^a5#h7mpmj_fKzB_kz((!a+d`Kl0M1R8Qoy-nvnBu)42`UC>>>
z#Psne9eKZS{VJ2<>AgdmBLO?xO<1a!3XJ-t&lie0+tY8SQnTq1Ws6L0sTGwWoie)C
zp_Z95OTI=HdJY<7nQjJ6y^CK~QEAZJ{tJE55F9B$vbxdqCm$-;Q`kVbTu7OTk@P^E
zYwX{t>$mmr%aZESd;S^!>s{8#?qoln0xNRGequrO+b>?sm*OI-ol@*iv&9|AaQewm
zA6m)Wt$x2%{<6xa?b&e)1vn|z!jOOeES)mSZQ}cZaL!1<tc%3Apt1RwnKO51`W!@)
zn-kP@vC`}_9F*U03t>iXFL4%KP88Mod+k&PSxSrsJj1>Iy2Mf(-#eNp5fRWa`ul?n
zT=-D|_`tM*|5}!FH)^*Um#toFvFm$c!VJG|DeKhL77l%4J5y?pLcc9&g!*Y-BI@eh
zI$pqi16gin#q+<7b8)Z`b)P?((>}nLT2Ia&t*o7k@!LAv&eZ2UyuJP+NTPWg`CUny
z(p+@%orSCMhqMcGVOeo?<~#wWRo@GH^JGje<+T`kCAiG3)34vw*~JiMGSdlEe;2x9
z3&D#yj;2jQ+Eeym)B-0km=C-Z$1Hg(qwnq(r0@RXyR9ED?S?G+r!TqP1}epFjYtM1
zVJ@E)&pY5MPK}E$Hj{oGR7@8^e<)*UuL}>GNrM}}off#4a8jty3`x?yVaDZlX_u-^
z19LPFJ|B_vuG0Cw<5m7zO-q9XFWU3D!>H6wBgz%EUyH|v>^lJ;mjWn_c>@H5-zh+K
z5N-4>D^5v3t2PE*`)aYYS0rwXR~yl}*+M(5w#?j+<8a6L%In6}D&NpnP317T-$<nt
z-_Y#l`Q?dS-l@4HN>CX(PDKV%5A#LCnq*LKW+KaH81WJlgv7jo$J@F|YjQs%HnF<m
z#S?ez_TlknaCKc);Jz@$f_w}E`v*h}sla2ejSO!+*|5A{^|@boW7UGc*!CM$?AfP}
z4MktR?6;(r7tbe>#Q-ozBW=dB%e}UJS0w5khQvUVG%SLQXnhOvLt<BLv9Q5AGlKT`
zMRUHArV)t!0B`2T{eU9qUbOasNL0gNy1h$a(V=WGHTRe9ErkHMvMp_2WlmbMW2VPW
zc??s~^C3H(M^z;PP{*O{5P>px2S@bs2V(M3QhxgY_LpUwh@bX=)H%i3@q_jinc^Cw
zIgL<hZpDY#Rpb~`dG@L$IbrL^P_Y4F`c{<`N}~F#9lM<QhyH;XR~MTcb!p>`b<zR+
z-XN>2Uz?_4PO$H1*B^d6wOOougosS79M%hnrbRE6KI$-5FjH9%=-p&|<0DQa@0as*
zG($eJ;UOpvWpR3ZEHw{~t`G0NNjTA{($!)quoe2*8PA|8C+@NS6EP1zbWvIXrhY0s
z7(+dczhEks^P*ynwe>pMunIb6!Ijwv^lBVfjg#FAO(yj3az%P?Vt5z?7j0_&@1w-J
zBFxdp&>)rbf$d#Rm;$McX3Qf__O;{Z$rSSU9Jp(Ma+~9Re3?6f4(M3aVDpbxMgpVE
z1>nemrbk0Z&N<#k42(d@MgY(KId`29GtubyFE)~qP^_WzBa9+G>RY>{C)d|2QV4C-
z>36@9#u7z{ihR03$U~gGfS!_pSP%B8cNlS_-l4+Q*ADU#JNFwe!THzes*&58PWc|o
zyKL5&vCoQ3g3Dr7t&JyNgU+x8%1=m}X+Kv%A1nrrnMWU(975Zu;S9;bkGfl}<iAMN
z-gW`FN=E2a!CC}xZY?qGyr@xk+nP%3j4#+fxDZM0{UEml{3n7mes%1%uaUOk95b4{
zb|z`%_Y@Gb1#5kkkYvb3x+?l{Cr|X(Y6L~7z#UvJSCnPfQfKH36gD|QloH!rHZ8_O
z?o=uN83JUc7Eqk@F~*$Kmc=B-giDKp-+q<9u-g_oCv!og^0Oeu`e(tJ+@H?40=T<0
z+dwcN4N^1WH+Rs$+m&Hqg}=s~ZKtn1pF(ygauUnWGt6k1Wc2>ct9r~?S+HK{N(!`?
z2U7ID|5FjTJ5@q4ZPy-^fMA8L)c<&SgD%yiJB>MA&^_7T?r+^uz}21T(n0QoGw-MS
zKt{G{L~kqdBF^%xjH}X6CiYeh+qfAUcGKzTP4Z{nT(lW$jA`TNjpTYNXZb=w+h;sZ
z{6CSGG?|ev<<(yHW8A#D^?HF(ZO7%MZoCGSfA{8xTQz>>HLod%6Gd?*oT(ZtVHm(t
z(Fj%;Yo^XUu+GgrZ3|RI`#gnjX?l2^lV1Ma+frj`Y{of(_sLe}*s?>G>U;)xRm+|b
z+AYyPbqZFY;Wf2`cKYbUWVF>x$Pd{YZik<n>Cz$|#VI9zy}Z1PKW`M8vXlRC@ibb1
z>FDc|rDP?xxDc7~K>bXQ;vq-VXU?r!yS$ll74c$XJek7GQT!`d#(qdZ&7<2o2~eH$
zu<f2pg=J3W+m?weMt9G@e3B@e%<PWbEYB}?CSYwGnmI_u;Kw^(0k7OVnIJ>lb5m7m
zN4<#EF2GX-XAamEc2cgla7_&j5W6LzUMI`6*bBQ%kK|Wuk-#Fnf-YD%1{t{fQ=hoM
zY0M;CSSZX~+w+7&?s#@91*(PPBBH(37L=o71fRO&$tNJp+JQ3gI7KnmsV3EujTspX
zmN%EoTl+w)^@oc0s{)o({{6|HACSYhkN-XKF0p-ZSg9)d$h8gAh*NsdS?l_eidmxG
zl#4t9$~Y7n8k%!)mqdsyAuR-bmQS-GdAQ4q3Fpc^nTm!leBx5+O(n8#dF}o5{;8Mx
zfkWA8I#A{v-DZkc4JrZDNSJbPVv#k|(BQcxcv?MckH|~vK-dSyy!^)NsAetaH#Ok^
zS>T^$6{+`+bD>iWS`YHSv=Z8lxKU71SsF6*eJ95n1eJu@$B4R{O`4D(bA(L-C{uRk
zd)yGp+rb`=^Cn4lPz6IdNbUIV=vQ8c`jOFHq{*6W{(`N$bxTKP^u2W6ujVJPzeY4~
z3#TgWgk#>72o5MefH!Hp*0P*MBAWzvUhd5|faFdxEzQ&7(0I2=f0yL5pYzIRYPuz(
zo>{@XufVC;V%s948e#7@sJ87On~wVx)(1p{6EelR?$GCJwaW0L2ZWEvw@oj6!s&wp
zAl(wporPF;M?AXwR2G8yP4$u9r@&YIb&woatz%=7U#?dReu~R6I1dzNspm@U@1`Kf
zWff7Mm1SM9M+Om<%FWbCjUatUYbE<VY9%8C26=;8ZIEyst7|*k{rcxs<IVBwP1b4U
zV@ajd2~ETJjQ6zC`@1TUF)F*JK3$L*7R*<=@you8CYovcXJ@@a6`EjGqI!O4#9)^K
z>LeH;adf7dTI3={uo3BsxL*JBvgl+aCcdA?p&(}U>N6tL2bAS_j`^+>O|K~nocm=_
zkJ77kFFNow*t^m`__YJ!fsN~9vpv~)I8_CFsn3o{dH;j~1ih-oct^bn{$h|&@W6MA
zgk99|<F?{}J?;^L`5PaQNbX`!&=E&bmP`ox<pJfKTwGh=YwUd!)qEkbxBBJI`5>Xq
ziy6djE`;qx2eu{_FYOo1Jl#CjIMJn+m3>@Cqh)=)EBDt>g5@Rr8T0LCc7diWiBMCo
z^S{3Z9hpvumVee$1a~H8S&H3H!}^u|!mc8UXm{EDgEu^&7BFqFZl)htvVrwFHht{G
zmu>H*{$NWWmBD=FiD43t0DuiSbMDwYYyq0PH5QxQ*K`@cn+@3pXCr-=GZ8@sXX5Ml
z25<*np;Zd|+lsHN3Oq@ExScTuE}qi@<|jzEwxFvHmWLOkt2%O~ieln0$mc$6)wjLw
zoN;{mBjv<wu5FseMW(?!Fn7DS=-A%pv;i_zgDfBWu2o=A_e!b>2;>Tmw#IVOJgX;M
zScC2Y55v2Gp@N&~g8=*@Xut5cL@YPK(GLkhV*GKXah(>cPh)yDCClI%<+j{kv-lo%
z5p_a|P*fG|HJ1U<uVT3<=a*NsNuyu!ZVO4nKVDcJM@^D`ujbI>UAp0q)>Z}GhX54t
z*M_1YYg9*t1pRe9SFRf#2NXD;FTL4R=ZRzA1f9V90ck($_t52xEc0XeZmQ5h(TNC0
z*OracZIs@?=nJ~B6q#PdJDbFZo!Q>=EQ@$LNhsm<dVR`zhuQJ1A<0`wn51ggD!=3H
zi6B^=!wW&Dl8=a%$58d}lr#+{v^tYke)Wq}s;UC4OTcTRGtHVhb&H0zGR;&_5emd<
z00~}eiLST>xk3oek#X&vq#AUk>AAn9O4n40c8+aZhw=&U+yz=0&J_sbwZ0hcWA7PG
zVXVw;YVr|@|9YG^Yf9l=P_M7Ql%_;HF0-xTcdR)e40?=Wmh^TRDuB)_vUw3;Dv+()
z3M`lKX51T>w3ZmRnR5N2;R;6@Bew-1o`9CiBm{O4L8Z|9{vzDtcTc2updGBPX`7dl
zD!Pk^gPJ=vL`&^f0XWy5*1{k+J8P#^@JpTy>3JjC+i9#S<g_HG0Y%sl@gz5L)<<Rk
zq&<!)<&T;54|Vj3kLGkzVO;z0YVTJSmvj;Lpv+nBDKoYQUBKD-*y3#NLW0J4*J!hR
zb2nM;MyNmGyrF5=ajJ~j?N#WmGaefud-a?Dq`%<j7>H&TWqzv7`m_C~T>vMlRn`ey
z`^FH`;?Lf)3$O~-C$UjIv1(?5s-5pnIRY*5^)egYw2^;WrxO(A>d4?;9Wu@X4o?V@
z3UfpUTfOThNOmiE|3<aK|H_vU=bv>1WiFE_p)_fcf`Q>f-^s0+b|jQF(|_90!-m{_
z<_s(?mmj6smQpcW?9~Pf%zNx?<;&KG%6%a|{ymwlgWa-0<*#F=<PS*2wV-UatBfKH
zAFPrPon|HD)1_akwFJw0Phimuf-=%jicjXXuj|~%C0}z&ZmxFc)4;t0IlFd)Dowy7
zSr)uYMTUK`U9QBlO|2)CWiPTsu1nD1kj9K}_APwIwY@tOcg-)~83)Tpy-=5pZm+Dk
zkHn7u_7r74`8_R@aiU$B0SV401xj<>g&|?!VIIykiZTI=V5PaoR7%)kEyJ8E@6W;p
ztIoUTCF7!T6<G1IQ32@oc;4a!^Y=Pra%K4Fs8$JA!ms=SulvOL==--8+#D{SkdRmr
zP$|^NBV|q-`gW;1gm_l`O{)Vh4yVN^WdS06!mm!T@}UOx0;AQ=VyefP7zM9<zh|yy
z$<bVQN1EddC->iA-w)2694Q3mV5R*PBW@5@5htTiE3KNA^HbNWp9E}b{BSNCcJRi<
z2wM`LT}2%v4ejs{xTm>1=VOETj?^A$C-98ES@^WDz^$7ECa7|lHT#;>zNt*i``vt;
zTr{`1ZOtR28t7W?DP9vZ&yl&h5}bmxmTJ4l?;s=LS|VW*J|4f_@+s2xm1qw(jRyu(
zc-8%mYNbY;m_loB&n}4aMy%nQdK7X>x3So{;$^OZM8s|{Qp3=tLMFqF(NqXok@gWH
z{q1;c%etJlaI7%?D+l#6!Dm3(h;{_&+@w5W6410rzXyl@xyGNDh!FbyVNwe-O^9<Y
z9y@~W4gUB<-e%TULM0p4(OGDdvo{#&efKMOZlo1F^E?wa04Tzq{;Drbak+rKh*WuH
zK=g5}%=<=N_%8{t*4t_E!4pnfh;dp)rosluYs_n|r5;SjV+|wHeAG#p=FJBd*pd*>
zqb*c-IptDc1o-#TkA@EUn2Ngrg#Mm8b&J-hg+n>>h)LUzx8||C6G4Tw%b>S0$lKhx
z8K>EX-L4ZH3WQktWwAT@GxZOcZwk1WILe3q6ZABE2M2o^8ymSy%VxnvXfu%#ceDL`
z=6O;TIoj`;8t-@}#ob>Ps27rcrPisknby#B1x<JloF4#$0a;H}v<7VMfmp>BmxRHE
zN3n&N(X9UHqpwM4<0b2c@eQJHEe$_}e`A~B4#%en)lt3kACo={9Dl|?^NHOGrw7W)
z#4W#n`MLfNVXKo{_4E6KGTv3#{ioE0w%wR2Y;rv_R1-O<QC{f&jtA}@=$g8*CQ#uX
zXtPiYv^4w^O{~mvl_Glu!%MBPFIAK92H~r@olT!;K#)ucgI`{>e|K9Cv9g~F8)QN+
zl1F$h1P<ET+Q!}ljCs!4tD>A|_{K{l{#*_{Y@}=B0T)`(wLK#y=XeI(CM}c_BB)nP
z{pru3xpsWdo_cVuU^8BhN+>IkGTt3OXgtZ-VI+O-O4n$w*ayz>AT^?1G3vj~oAP+&
zt=!hOAenDJWaxNjiot<k>YzWTnm<5J2mJ#>C3SmEHf@bTandBGyPY#855%(Z^XE_g
z5p~@kA4BXzue%kc-FL?`M1N|luN}t<Ti*ueU_rFGzknKFC5Yi}_ocmzXBZFtT{a-w
z!%oEVUkA!G3CqPn4r0#JTrqzQ6Kz(%mQTT)Ml8-g_=y5MOFdpQtnckyY(RAPJ@>Qi
zY8X9cdEod`C<6Sz$+;~kztHZuBH+UnEOA_H+o$x`{u%Gkwy$l$7r6yP8?<Rg$=r4n
zg5UIDp0vp|3j?t{SpVeMclsoG*jkaPXgEdZ)#K2g?XS@~`J;M_p>jkbs1=^jk7{2}
zi8?FF%@-}%v2rEP2Ix=23o~E9ExUq@1}G7da8RXeD;zGk_p29PNuqeOj3~ME>VsBi
z$5o?wIc1HGGXe9^J^Ms`XCit<w!qMc3i2wh>vpXH<_YMB@RX*%dtpcR3grPG+70dU
zmw(_L16gP{(g=4;Q_yzk9<mZz_l|5Q^TKzwR=hrP`#qa^yB}8<N7U^E^ThVg>X7mj
zq-<6Sxg8zSts=CtEaZ+%{*4uX>$NvKNvf)yN{U0OYJ$v17(D#n>~~SEPuDlt&y-wN
z>dRQv(4+`9EZ#a{*P$Md>6fjz8nYz2`%EzRYKnOi6l-o9ko^1sevu}C=Qh2(+**)G
za@=+g)=t1Sw(9cob{YkzBU+Fq`J}Zpu^2&>-f`=v_{%IEv)_-2I{fepN|L}ZBf?+A
zA_WJCb@iH$>I7f~H}6>sG(b6N2@FyAn~*+<Q<0F5LMm4J<2&XQrDbOF<}6<=`h4eV
zYq$BGSyt1IaB@hKad}7ve;g8G7y7({X4V$#jrf&{D!`r-x<y-x=&BYNejmryN$R3m
z7+hx{!5x{8a<yBodu*F#^LAFyFVxaUKX=?9hLI{VL3!!)cnC?~(Ts~8j%v_Vzt1Bw
z3+nmT1m5%MN5S*{fAbL;hg}$KvjnV^(w#<XEUngdS2I=XQkEUkl?H_IARxh1xDgsi
zR3Gd6R)!zxroTKoZ<^BU?YD@*zDhZ!%c^MSO{mIoW!GXh?HEw*h~145psFp`4VAL+
z^qX{U3zj%vEq>Ver3|n!exMr{t(|)H*Oa;b6>T_?SMB@Ayz+E|0!4*v%bVZ_ti*uy
z7FtW%oNkprH<*?oI#Z+J#cWm~t9I{U?fi`t_K<EN0x)|JTKtn}+L@(tp@;aFk^q+H
zzx(dKZ(xm~R$F|Gwa-qfV0=rmviJfPom@?6T~uLlKkB-x;GlU?OyvYM2eE;oB@fu{
zk~wzO5=FiT*6{bf;l$I4_fZv%jwGQXgspFXT{xwxHxD;{+~A1|(IrqB*jBdnHvdLL
z{M@`rHGni(KNkiY>FY#3*$-AkO_VQNGs{Z#zq>ho5)u+$cfk7Db?_dH<P)|(*G(0@
zWndd|B}-x%6t@J-vyQRgb+i$bl#s}lI%sKU1=-(1&W{G%b?hqc&R2@wL<EL%sSB<g
z-gG$y#$+!#6K;Q8UwdKs?0o&|;)r#=vh~XsYV>mxuY!4p7t!p~NXVVz7pNLup_Rp&
z9E?mxx#gL`E~JG5fqmcm_D_nxOOEN=`QL(sK(S~W5ac4;5S8`Q#cL6k$|z*{azL|a
z<9$#@-2q@R6dsXFHt?{Juo&J5y9-Z5NT`}SScQ1N<t@doJ@#JRmD3Cb&=aP(X(xcc
zl;JFzxt5f!dS3W2qr{15_x2qM3U|%MR*81DP`Bnc<3X2(RrC44Xy@emplHnNcou1F
zIwRO92UEl}v&6_A#}=)TA&Sv#ylH5&($|RMHo>Xo2a2c_ZZE01`OJxp7>Itk^HN~l
z6bR{8+_nD#x5Mp6D;|WO*sEzd&6ol-2D<Xha^|RYuSbAJ3M+0rx3fy_S|1wJWpifi
zmWWWA=jK*Df85rij3IqOW0X=V@`;)|A;ezaIH$;nO#t4SzxH9P?e^<SjHh{nlB6~1
zcJ~7I#I^zIugdt~w{i>g@^q0hf2&#cR&64?8*KPo?_kJ=k4BLiBP-!TQV#Ab0XMzE
zk+MBAmV2(wDs?fpDpi0%;!qoomz5Z=N1R_;8S`F%5cMsNTuw|AFFDQo&khZWW4SQL
z02{1$cU@%1#v)a4Rc)2SD?B$}=;>s{6CrN<0d56qqT4*V#`>fC@6BHS%#@%5SD0fA
z)tlXZI=yvje4Lxqm-G~WB<2`e)~O7~q)!<it5s<s{TDgnRR^;DWekfG;&BkZqg}HD
z$A_Vbx3_Qp;h&ES(pwZ9wsT>kC~BNyFl6-sWnA-sgI5E2D|H(_1;T)&<gI}LwpiVP
zf1KmBw@I0lT@f(D!NsykAZJX(L)!!$`+n<Reylg|*I;zQv{2DadJDL%|7ytPtjkL7
z(;AJvCM}5ziKF#)GXG||WmljL>bR<>92FEY;Ys;tKe`~38n&D2+(S07Ubrz)s_{v^
zNqbqN`vL+SZd`=eZnWRv5ue`6Enk|%x@Yy8!3|goT;81D;W?`Vf$vhnDZk3QcULIU
zdH5e4q-mnJY%5EnfMB9mjnPI*HA|%axP0D%AXR=+j~@T=kY9>~BhMdAmrPp;N1e#X
zGfBsA&bvP~<xo!?(hOctsbW^Tvh2lEd2)dD(l_rmAchQEoTI(}llvD)9c2#{nfQ5X
z{xUJ0yx}4wJ?F?(#Pp=(t}oaPCR-}ez9?7*v_rl#Q1XIG0W|vH^2xiMPkm@>(+)wi
zI+?BXdddrs39U6`{LqayXRW4-P)%dDU1&`6`ZV+B;Nx5{0K`3>L1!R$ZkZiDWE}r^
zlOPQl8%^2E>=nuR-x3~@ehliI16%+vNi;-&TSSv6Ik(*?5?z;Zk9TB9CGKI1lT;`)
zz)1pAU9h;gsO>##)>B;1`a&k7-8zicVwm3v)>a#AEzkE|W}QfEHm{D(*K3hC=q`7A
z2<3vnSxb_n_aDY%aT%Lv!Mo;ST18n<64T{=V_I1Wwf`DG&bjaU|Bw*=r`;FDH}-y%
zyH5-dWLij3bUn5{^S+0zl}R!|F0)5Q5O#KUS&cVtUd(@<Y$!a<Fr74Epbz$Yt#e{C
z6Nwo^ck~|xk#EN?g4lnQ>6Hkhmu~Sv`sv3*dj@P6Ms;*ZT=7}<?tN#1PN}xvJjl17
ze4jIKJppHGC!1z0{c{;vlh11L9sIVRMUzahCn&MacRJE+O4d&6_SzM!H#7pE-`OUA
z=w$0kU(EIa+6qbj{NyOTFqPXcyEX3?`DS8$BlPY>ZdbqMWF)`koN(1{v3y6(vTH$+
zd7HPp-(9Ba>2HcF5Y^jTI;U>nrZVO~z~@)EJ>q#3D!{Da0kd!0|J@bCq>lLD*}j(I
zXezOpG^qXCQo!J&LGDOnzkl8s?&fXq+Zi=W&8z_Wu)<rBy}5jk5PM@~@?P|PbH$|T
zZ0GtP_fo{QO+Z_hW%u0uTS&R;Ehx!fJpuwFaGFP39bEhG{CAnb65r2#F>;ocmR;Y{
zS7#=traUd$6O;cl!u>Rrd(O(>jF*+(f2q*`@AOJ9kM_SS*Buu^gFMP#ZwLawb@E>u
zoIk8M3?>Rr&34W8bMM>?X>i}2If0MG>j_K?k0v4JFFHBjR_->RlnrQCupY?*zMzDr
zkVbX9ics@>)pCYUuv1qip@99k{=0~X2sr$|fC%suyAd}kUEUfAT-X7BBnrPl_=#R8
z8~wpivXE*lTYo!_^N(3_GvY}C2N?r-d2|2uO}|@}XiNN0<x7(^OSgihLP)Ec>%-`w
zjY#`9p9?pDzfPMdpx}omI&Pptr}6xSBNg8&5^z-FHBm*uUNd6gG1lZ_{=OEO5f8pF
zxrPvX5vew8%?N%-SiQIS5#-;_NF{QO9~C?a2rt5d3@UIxwwyb=lK?Tnp8)E6nstDA
zqrM~5Pas0JZjg1;^#^-P$f5qedS~)Cj(P#f7Hxw%M{`aXY(c-ym;~HDN>)iR6SzB#
zG-!TgCUacxtiv|Xxx@8Y`-E<bmcqNkUcWQ&soC?F*&>f~?^9^G`BvQQ*NY+2;`q<e
z!bxNylYK88lwW%f(k|5}97#VBQP(oMpni|<6SZ7!u^fjV%ri+3M9)2uBtat8_R~)!
z_CUeqPRXG@g`jjk)lHACy@uEzL*$$Vu6q;j-{bFYI8q6nRy)w|_+4wza|rwuIs4GZ
z`{#8l=Z9tQQ)Q}MJVUn?yJrIANMd}rAKMR$u+ppjvl$r>CHLZh@0)>(Jg9i}Etxo<
zO5OREa91ujE@V`5Z(4mIj{OC-O<5eT7?Q{2yrjVPY@4yuk$HyE&0smxN4@2j5wb(;
z!9TNBW>8p}ZlD%$iJI^<ylKy+=Kjw^DoT9(eXh${((B8JX!;C{w#*<)N|ZMhg|4Fc
z)&fZguOQBc!^{nEA7S_g3ktMv|1b9>n2Zh(d9dA0=$^O_7;67bgu)Q?x$wP>vy0Jv
zLk;-QxLf?930v`sYFpkB5Le`H{e;x8$VNA%L28rD^nA#=b5^h<&fo-)j2q|n3>UEG
z7A#L(HI`D>R=%V19#!8WR1?^9{wpl#_w;@LeTU3a=4q0AjMj<U5*hllI{IxnJfoEL
zQhI~4QjXZG8+~}|5f~U9>Pns*RV{sQys^IiIZWzd9N(kGR6Fa`EWT$@?6LTKr_VVc
zc-749bEynJ|MwP15OA=UD3L8}8>W5r)onHTVXB6j%=)dg_;S_p4pZ9eGoVWoUyDdg
zZ@@2^j4@!u?eFwGoB&KaEQ=}6?VX|?t)z5ow?}byTOFQv?{;499qI34?h~p*j{5Il
zY8=Uk@^2~{?oUuKiQb8x9wcxg3x8TFAYfE&b@7E=#bw~Ch>_x<{<kurLEXae5Up(%
zINTcP+qa;nCLGvj2A;l01_WP=MHuWoQ?d}gK{Xbm7FVa#uSS5oH0n{V@vNo3cK))h
z?0iIr{AKl+0Sm(pys_wLrt8~oT@zPFX8>r?H#(LPiaHaXlGx<twH|Sq`D$P%C>nfy
z^&BcZ{_7q96}a`}uTed1fWwM8+m+4jmu>7V_Th@irp=NSLX~(H+((Q+HUL{-jhj%;
z?DdXu-es6jT{}W|Jvil+;JGfvumFBZ=yz`>JD4n1?oHQCJB%z&`9`P*Id|S=3wNl|
z1>k3~YwIjJ$;dC|-tn*IhL-I{q{!@C^~|+s>07p+rxikCtjBNDn7_<nC9)ygRy_Mu
zb6etRVN%)tOXn#2D8U5mlo^K-{k@zBmQ9Y_u#1RRXH(T`Ju@J>yC8GSG@N(E^)tD-
z_}df=Ju$PEq|6ct8u4cGn*r(&A2E%9^S@!nn~4M7H8j)YlrAm^G&{aUW`Q@q1N~4d
z23A1c&fc2&GfIs{5*q-_iybkz_nlKD1%%o*m~aI>NOF{l!EgI+{@GRA@P?e&>fzA}
zU!cXi!us0D^^KQV;(A{;jp7XwMuA{?=P!}Prryv0nwx-ApTmp*^Km&x)SpAiyU;v!
z<L+nnyUfi4JP!FWf@Jq-p?Q>D#Q(-1qxMN7DG9^~Wn6rKc|JqP*~L3zFko+Lgl^w_
z&wNu>M1r#F>gfR^$IGyvM?A>W(y!)4Mkyf+&K6s(<*&<wPx3zdw2T?R#+P5uWF+#f
z_Yk~ME%iii0ttzRC2Fw(a7y1&@A*XY{@Y!?dk?eRpXS=8_f$QYKKOnD1oF)P?1!N|
zdQvY1LADS7MJmh0$-eEzTdv@gC#UCr3rJ|J>GDthc?#k#haQv5Zk*`uNyn(S`TnV1
ztHlwy%dMviCFocW*odghG%Vxqu={&j7N$Hs2f|PQE~X-eSS2AK+9l<tZq6H3mx>KB
zB$Rlav-hmbJ=-vgi_w<QBqH0fQuyhhrX1Jz`01uV572T%_y8@PviuHU*8{F}aL!Y-
z@EhwvwR~{<ub`qkVSWD=oJ&-{7~>IiwuP&YziK}H61<_nbx*~MY;Xwrxli#<ZBTL1
z(H9b>gR;F0jb8B@%B&;PuK2-T(KRVoAOdO%N)m-!E4hC-fW^=tmdwZc#MoC~-3VPJ
z=cYdY$k#FbYT~GtZ>*N|3HA7kkgX>?IYpI4Hz)ZX)l}XOJ+Ut@vy6_5^_dBt!SR};
zxp^*^FVaJ3%)Vym&!t2ewk0A8B&c&3IARKxebwi9icV%ON~oo!r2}=G9A1{u5fFLY
z9oJ;BG@Z*vvlwk{-6hm4W-!VQn!u{>X5x!ZEJya~xWsIxPYm|(id<b)oFHQcQT*Fl
z4gkwXNP17ZyEn3ohGZ#-8RpBb9PdT3(q{g2+xK^p0IC3HL%QA5{+#xBy`RW#irzfa
z`@67UiCd*V<OrN*tE=kW>{3?_qvxnvHaMBZb^+EtGn&CxVW5LZj)ibS5m64thDzCt
z9~^rgIwB1+(le|3l^6X29YF=Gs=Ho^^#*cP^Qx0);dUvGU4_;J7XKRTZVOleNTBzR
zTer$Wh9HIm<nYtv(CRm&+l4zEJoM`AKLHL;e82f?^ij`RYS98KF#zWgS^V_Lz8pHD
zBq`G*)Y$<!_&%r@?xPX-VE{OkLwG{}>0$aG-t+x}$33!eDaW<%PKe@&(gr3{f_8ne
zrYZR7zlL?G@Y-oA-es>hi8vee1N$n`=64>OECZ!-OiX)sn0q20ClS~0wL2WvwaBbp
zp_5upQ~P7d*4?XZ_<Wzr%MnVP`+wm5y#29X-?ZM=P>xH}vL5xJs{tg<0w~t+zEDt5
zFsn5Z71fb$e|?0t>KjC+F!l8{HhrN4?o2t8P)Ah$+<;1=0NnPopwiG&uDe%Frvqce
z+Um}77te^3-{BkKUy|ypgoNj3hf5Dcv>%PXl|zrpitw*jhjcb#&nPnr%07^O)i6Tm
zVr~*!=P`wnZLbXNP$)K3b#Xp>{3DAk7le@U{h?>TvU`)RB&}L?oNSbw#!C0tmw;LF
z%Hr(a`yk4V$L_G9i}vgDr9)ESO5oP{W}emHHb`c+YJ*CCF={^qY72_^b@am?Lx+KE
z*wE9%wEd1F!luY}m1dhYwrQx;`Euc~&ZgeQ5;Pfc@@v1kotw1G^&LXijQ3Q!zlQ9b
zwCGxyAi+?IYTdeadmTAsB`)my?yf-*)!WGhJ}=Y7+Z3I-RF*+@)vadb9=?3|c{7P^
z_kz}v?gXt#Z3y!!U^S{7Jw$Yf%dEC)*8^I^9`WRGmFvBt9-MB$GmZ9BdfJp^80ChI
zclh|$x91Mo>z<iFwO{RRJ8Fw9l7hgL(B$mfeFyS1|1g@*i2-Vb&v+$Db=haX5_Sj;
z*$EirCM6Bi=jrFx3~lr)xM$VJ%CNi6@ogOc9%?a86`ZPlkffbl*5!U#o^&h;3B<*_
z4`p!s0RGSnjcEmDAhfgy1uk=P@UaE!t>78u4gvJ^^&Sp*lK7hln-;xMK~4OeAdJzZ
zNn}*8TBFh7B-UhxJW+7Nn@me|(f@Kh9RamPW=u+4r^y^gGTwdt`0mK(C>n%nY91fq
zBQi(aroH(i3M0yz-H(Ub(|`C>Gy{U+kqPk;3UP}Q*sa3*%$E4Nr10_w)_*FVoih*+
z(UAY^br(F47os1J_`bCD-Nq~IF%R*}F)cE~hS{1z$c!xrzYEg0tTAW_jcO2j<Ye0o
z6pkI4yIO~FCHvpWGU+jj1^0Cu9~(a2-fG+}wjfF*ec%06vBJ!5?B!YvE#%I*Y?VI@
zQo|26P4AFM_MR&on(JJUpY&Z#My?a2vFe!L=PDLX`(@i!0kJA`@?;(gob$>8V2Okq
zG%E@X9<e^JJ4S3Rv!(}(Crv{AvhE=WBF~;%CQ=G)03P&EX95l>N+rqSgJsEb%esRu
znpg34x`L3$3CeP4{MaPlfN&q3&IdHz*`iMlTudpG2tHRa>gvI;x<N1Ew*pQY=abIE
zZQG@m3%qTp(hhH+bP=T}wf)BMtttuoUm88gp6i(a-PnO$WVZq~qWC49*p7~lmyES{
z${rv|CdFsl`65J}CS^k{<G9KSKn7#Sf>MBv92<hbr?{Hrr`#pVH`Z2r4@KBjN;rw5
z>;jBYx1H>bUf0+&r`<@C-4?cok*k<Bs+j%@4<8bo>bWOJ87ptGWyzds3=}n;Ga`Gx
z&hu(>uLMC87tH<4io1ZucV-^F;GGIT0#+Y+wYNbNf!bvgJ_O*Q<w|DTJ+Ua+gvbAv
z1@LzIx=?A^s%Dh#FhX0#RjiWAXp}+`O}-~iB|ka>x`G>$Zf#J9H;#xofSWoxaNmI=
zy2&2KwRbpi*>{GiM4#2~v$zi+^u_%~yrq=&%uhz%N<M<?#SI|tiJ!0~M9Yz0PMbW7
z%AmRl`c8D68K<81Y5Wr)D3<_1+$1nM(5S=HUt4=D>=KL3WOf|5AL5t_P`2Eo-V_@V
z;^9V%d19i($)wjYBiM{->3pKUL49`@XM8*X)JJS5SOwGvhcB8g=1e;$Z2{p-?%Cv`
zzjoHW5<a^q_5>drC9#ed!c&$gJpXR=ROrFU6Vola=gHk&V?4KFi)g;eK(U#5d3kMb
z_%m%D>7grk4|dyM5EDoLi**Q?S@)(7et-Ddr^oQT0jkC<_k;KanNyybSs>$i>&LuL
z23P3Y=NEaz7=`vTE*OB(?+^38X&kHS^R7dcLZfc}^^d`Cc3F2T+4^1-{NC4qC@~$<
z%_n4($N5X$8!t&n^JPp$KH8DC#=Uu>Mku`mBKmOjMs9yge1a@2?K^d{5J9ZFS7hZF
zQ^hk|rPdwHn6QCv$GPS9_ZKtTv)8izW7{9E#r*M=)r$t1SjZnp1P!93mj_fk{9o0N
zaq?YCQ7H&ujQOBs#xhCEAnOlc@QDD9p|M0h@&RLm{fe|+9+mq<cdL1y0r($JDi$f<
zwnc+$qkxT<(`RnR+@oXLnR_V$8t)F=88GWJ;n*`mKR{Naw5Qp^se%~7O6WR!lqB6z
zI#ODloh)K3gW|N!qwmyB;)B4oGPIDL8|T%L{-rkwa)^_Ouq|T;)EQlb=_g_eb=Q;^
zOpm_wQ5yln3CYfu0`}DbH;N=~G`>!Q#ZDt9xx5qqKI=xz!n>=|ZADX7Mj1ua@`#^N
zIgWgK??n_x{ANidAPBuo3nw3UJeK*4U^O(Kkf4F_F5$UruI={2p2!iYu~h?pb?K@z
zm_Djk*Zdm&1uHreE2D!}=sI&`!cxif%HQ!Os@E13jhxc@NHx7H;)Ii{3%V*1TXTfH
z_Ieidg|Z)BHUD|~X}@Ra?QII|teiqT^XV_HoWLl`54LF~Y=oS|`RcEnZe{*@T1HM#
z@b8taV|#lYNeIh^Pu-`laTEGU?f5dk%5N`rf%81>`uf_eN~ny<Xz5``uvhz)46~qR
zc7vdMDpKgu(2EcUIFrFCk%?7}y8`MRCJxzUCtGb*SSE1TWL$=Tr>I^{>+KYvaG1M5
z2$S$>{f?+9<E&Ron`~9+@-e{A1iffATk^oM_`s>8;U(un{CA;s%8i!7=57;c5Nt1(
z@`;5GuDKGgLWVBgccStb+@+WAYKXJ65!OO+tvlH+);rN6X|<vUJiZZojh{per-;C<
z3jL_n*mNvIpn*^(3n9SgRykq@rkbvIU+XWRk{aBS<v3oVVJ3;i2laa0Q+pd+_9l3V
z40JN`%dlUQ32TruTGP2D!3pg?S{DI3<2H>XC>{>6-K`GUW3Crj`HK#(f^KWz1g71*
zjHhIg`_U(t%KU$C<5<$Ft4t&N7?KOV+12>Fm7i{8yg0npbJMXQ^7!X`qnYUY4!ho7
znTihU+-7UmQi;#Vevmc28v(zI{C*qb1Y64?1I(aGH$s0AW@Tj|;NPTM^s{-=yQj<a
zSPklBCRl@sT!Nq3v|WEpgu|bF<qb~px`tf`!#bg!9v!X6*s`Z*w{XgJO}u1(ZG#Jv
zcKwH1f-Df;ZdYrq3gV4h{v9*YDM4Rr+Yk;2UUw^8u^Z3js10fI8@XjG521tN<i=PD
z*h5Vb+Dujz!o%xN1;sHUo@SHtuVY7e#bJJ5uGF^WoR@kLCy_rjII3h{9{90Da9Cm4
zjJXWY&bf0TDQM%%m(P0Ny_H+$d}&iJ|CG0=yUM&RpGom3EX19_JmXNcpBJW^H-B(?
zQ;H*tH7@}^-Q;$vrSaO31$`p@^z0E%pkhK=Fk2XUwXIa*K`B2_Zs~PjzP_`?MbOn$
z?ctv&(^L;2(NwnTkGUWCdM6xf#9MVnLfK{j=Yb#PoqQNQx{yjl_??~^p`0jzid#_9
z7}u?q0)Lhed*Q$z@}IekN}qeCq*?fvHE~sclT;yIB6n=e6nnnbKJZu$V12#z6S|{B
zzB<tQZPK41>y6|@6G8BLK1{eVFKH(&wPv~Tvht`rZO+x!1_#tf;-F<L=3^42a4qdW
zynr)>t)m;L+_X0f%VAkQHoRlG43qlgwM1=hD%F&e!fSZT$FfIN6$I7yjs(9lH~k~%
z()6YHnpRut;8kpDwAP)ME#N2X`=In+e@&7miY`_FR&eYt&}Ow!B@`RtJ5nBEKLq{d
ze6!q4^`j-qH4LlH^|y8M<SQkLhH<*arW~|gOz|2c&4H=qL+Y%sWNDZ#m%NC{?G|j6
zDVeXfR`?^Si1tUw)@j0Rzio#*UIDp51YuQ^HVaMj?HxixiiuHHVqn?|!vZvqlLL05
zKL=|hd5fgK^g)5AD=h17G$8{psesVbv;>+Ni+Ahw=pxX9Xk1xZhGc00PuVLrpgu`G
zN+INGb80Ae85w`c#QcT$$@?rsk!spEPiol#iOm!{|NIM+GWQSNdt~u2ndw4WHvzID
z+i!X>@6<uy|Ce;*az-PthCcP6q2@MyrA{2$AVGXsRTcdKMwQfBU>riuC4Di#RaJHr
zI8xG(4|#vHBwfTp+Q~L-<%kb7GT;28f`E+?$idm}5-?px%e88Ky+!18zt+&1*}pQh
z{EgvviOh7@$qz<ak82J;X0}znHS3z(II&!%1Ab=3m*A9mAmD4@N0{n}FXUG{yM=0(
z+Kjr1rIY0FziBC{7*S3H9Gzq?e9$szOR@4P1;2J3>$=jL!C#en=^@%*TvD<nbtWCT
zoNo_q=L&LCdu(MO$GROj?Gig39%4!W{p-_!qIZIk5>6b13n-k5vtn)5W(OjITB2T|
zLf9EwC$DWKfd_xetZ~-mFtRh{k~8gKoF0%@_`7AkU!7a|4|{dDy9j|QzttnuyuM-f
z{>|<U`9I5oI<I=B42)1(J>77|#V&cJTYKulkiG(}p@72H+c~F}Ncyj0t^Ee*GfdX#
z#&#;8=Fd`wllLU<jgtib8DjQl$m3zvZqNUE?5RK<$b9x&4SX|`Q-}F%Y-sZzPM{ZJ
zrKSNdLly%IyY`2F^S9U^bIbUDi|m~t@t6LW9gR~T&{R(`$BzSGCMB(P$i&j{oF`8)
zy1&y^LGi1e57bh78|-JzM*4?$-p_#f9*{7Ju@Bb<O;aHLkhhrgF1d)6QiNg&=Mfeb
zczs|?wcWTp{1a|hng@en?&ToqI4oK7s4nP}t@$*Lb;Tn0$9+xkD>I6fN|ik)0jiNZ
z+Uq-|XIp)KjoK)nZf|B4DET5aP&Kub)DeYDA0SCdIUTw(MDJhZop!kbZj>AN42;&!
z8}d;Z^UoRYV+MChIKayVv2*|Inc8hqLw2;)knsu#M78nfA3<2BY)=qxJy1j@O_mRV
z|4Fg=ss}k_ny66@4#qFNRhKk-&3cHbg_x~ZGa)jfV*YFI@>dWU*OA-G-V)`rI`3=V
z3J=dHk^p>AMsk<Yh<~+Sie~bbPb?VFiNa);Gtv6NxAKT9Q<dC*tNS3;HY(hojVPkW
z#^~EuKZe@5cwJvzI26M?{$V!ymy^XxU|}1H<cgcW(xRF^B4$k2QVQ=8ZrmI9KHA#&
z<LBfLO&iJH%>{RjV3QCqTx1>9Oj2(#)y%#Yun9Ja>f^2ry)yHbw=ybbG&OY>%=%qx
z8|;S!V_i7AR{wkp$ZEJJryy~5)qsBXuT{xnu{h4I(+u|&AI*^qEj?17xTpTi)UBSC
zzc(Tb)d+5b1}?jsihl9ngSpGPcv@DhWk@QdOb6}LFw}tVEN$mAn}Vk`O;FCy;{72v
zY6YFzfRgB9{>C-ujt9`~M+3|ir!ZMGn8O3O^q(4c&|=#BmlDc&Ch~2?757;6cfl#3
zTstuh(=dCNYc@=+d+HRy*4A3Gr*Z#g5C>RRgwj&8?N9H9*Nq`fF0TA(-^$+2=lPIV
z176w{2OiI~ofgHt?@Pu?vIc5=^Z28@o6e7qkRs8s{oOYrc_i|6wh@il+Z@S=SI^%u
z+Ek*o6~_7QPM28(aXYu>$RJA2uJBk!Lt~psQMeB4ZKnW8F&b>(h#ovYnDWYSM?YLO
z$vCOlgQcRIEIQ(>W#4sBM^lJsn1Fh0aC^Vh?wEGniKLX<EEJmdV14^T_=wAKA|r*u
zB%S(m!*D!!-Wj(*%NvzR{wud0X+7;dxLZkvA$8c0Y8R0e=zcMt2)q4=;{x*dV(ndr
zr=H2LPZ2FnJQlq3OZP8LiYToFqma%QYQHX02Wv7ABl3%a@@p~<SItiKf$WlY`15A}
zgHD7|d)`Oe@%o`Pw8NA~9{p?sh#@UU?U^socq&a6r8jL$fTCqP-1Xn^eFQ&+y7&Mi
zr>4xoLqKX1<S-?NGqPz3s#rdMBVhY!<Q$BIom(zGbApAHQO#4zNB(x0b5TG(9`(0s
zot@S|ZO2wH?;DF=nijXRYvW|*400fP*#pivsTqK;1X7kml{wivmzzgZR_|5dZjTv|
zE2?Ji4iw|#m-dU%!)-DssBqRgk`X_h_^s*Ja}EaALq~%JZ}sc9mnxxSv8;xQb>(Sv
z%t}x&)AB7``8HG^kBE)OsB&zhapn(MmoHf(j<qdnK(Y>yehUj+t@vr<W#PxSUBAv>
z^mmCFFMn(`(Dr>et-uk%!uqy5o0zGCp?{ew=Y&s$>-TmC#IVomKct-qR*roD3fc@U
z={X-;_4bPPxZhO+%LNbQ%sDF@1h)b$fCfFZXmemP!F1%<H~&fy^|E8WfL<gB<Lee{
zFc=pX7m@zCA_n3Z=6KTjnr`aLmoJuYug@;vQuG%ObE0SK^Xd<Of9PZWOio_{p4B+K
z=lAgVx?{dyZtmF>BfRz=C?nQibLRd?RNe1yA~Jo|FL#7T1~13q_Ch9sxB^{#MUbUa
z4ZmB30iKol{&vQFE?=g1gWZTqV^2OI__ef{9UX!p`VUwne=T2dwiIcX^(8jw8flj?
zKW1)KA#G|4=3RPn;+!dyTo|}eD>^LFKeX1EQ<!-t{N8?3BHx;+F-JuH<&=@?^&F%6
zGEg%wg~Ow;Ot@Vx<dBZOP3`$vtD5D>lEj>iBt?b69cBvh!a$*2(?KO#LHkyISb(K&
z7M0e+*HOgvn9l<2;)ymB;n8n3(kVaKr#EiXkRcpi=@U9LLZTQnIWl-PGvf5>`~s36
zF6x)%bj1>DTp~du$NqY7X4<hfVIk@YjD$uUQ`L_0&^jac2b2h9nOjsw70F)OWYCH{
zhNRP>+zwFK;>dz3Y{OI-KcAJ_G<YO9u{Eaa1Nfx<#EFRs?U}%drKE|GEbS&kTryAi
za+9cnrrw#qc^Z}#AW5Pp`ONz5j`{mYK$9v7T=NgmdLoDb1tzf$l7b{@_N2&T*yw;`
z;_yk{eUT``%dDRHeWN+c>3N3-OPtDL;0#o0u#&GPDpm#5X6+(r3Nq7>aEd8FPiI?~
zjyCZw`8+7+J##(|YE#>9LVms7duo&(HRUZW5e|$!{mI;jsxj`O$zy%vF^|f??m(gO
zShsbB^LB)32cB{Vm$oCZBHn+k)OSroi?)KWrgOpyZc*$vgHH1#O4EtoNR<&RbJf2^
z*11kD4AJc~q$jIh)sk=ZzVfRLv5#rj$yo^;QF<8~tH49~F)1z}nP~det5x*@N0oLh
z^qgQ~qsqlELVs3Viqu&8mD-d;P(fIp;0u2JaYBh)Xx^#m7UxcOW<<j<a-&h`mxu9?
zfN|~mE1=}GT;weIOS5QC|IJSHL{nUCW6s&(gNlK&eFk1i_Q>Mh>(ZqTH7O|K7@1#z
zDm}pi)yq`0^0eSI=sBn(d(E@JWQ@wOEeL+S#G8`^Gz4_{wFP;^l!<790<OIwjmQB?
z5Y#uR5sDCW*e>6f2ohIE`+5BklT^*{*S><sdL}&)YJOUA)aFnDOSz9i<((Ao{IP1F
z<Je<Ktmn^aTF9l+mdWvI$xlXJANZMYu_hJD`U}SY#AM9xi+8-6INTU=*he)9KG?cY
zUDcn<XrP1&{}z5lhh$VvVn8~&q;lSonl}tq+IpKoD_}UdI&p9udXvP0y{?4Rs%C)!
z4R7G37J0>@`!EL?a9}$hE{-c!Pim&=Xb0FXNpTOwX|l9A#Iu?8mV*m|&N!ThZLFDT
z71JuDVaBviJ&gwXx)%S*yd#6Hz8y_XO(*3QRaiY>a0C>7vUk=nN^Q#lYglV}L!tw3
zSom(u>~bIKX`&_bAiim}BCCfJ=Ida{l6C<%IIi%LtL{$;-GKD_in#>N+Dg5C`hQ4$
zq4H$gMklcn2GA}EI<(mjxvdC@#<@Q;ZPg1M2L1nmZV<8Ey_B0$5*~X;==v|daBdu@
zN7-5lZ${Saf(*FOAcODFK6e}0Nhw6+uMCLIVW`MZv3Y-=M7C(7|InNnez)P*5m4a!
zk1rwjoM2=@R$-uqYN|KQ^X;h@Gb*c8@hmKV;}{==>#__cIk}X?1sB9!dW%#fA^(T8
zG02|q1Zc8BN_bz0e3WopEV_vxc1q1^ju|3a|Cj$3Grd?85xSKWKa-PI-YNLCa%!N}
zi#^u~=#-XNl@LusN0)W(bWE0?4Sy}emI5-_e+AC}|0h-=8jd{kC#M=C4<Xd(UIG!i
z%U*vj8N{7GM<Sj@uf>cmzW%Y0t;wlk*{Z4fx}8yRGNM>H{l7tzLgdT{*2JiyQ13fD
zT9uc={o#F33&^@hhos@JvF%%Qx<6_UdDB3v^XG507>t7rIf8H;)>-eZM0&7ev;y+(
z|J&+_KHPmRG9|J5CA!xod3ZQ~>v6yG0Z*Q9w7_C@rSAO<_)h<~v>j|HYr~v!RIA%$
zvkYIKhXMVBM6C&3@RZsH<<k)?i~HTjn*a0G{(rtoP-AoVm{pQDQeBn=#t`%C$JZxB
zGp_Y+>e;yOOcrtdS?<DDL|y)PS>wQW#LkZ=Ji*7soERCKp$CHW1OF(?89b;qE3+@_
za<j5p@faG>k^WziIW43BfadJ<v=K=By?ecZ;!LO7Yh|&63}?wsqLbyS&S6a*nX~*>
z`%@a?i2}5JPC1cN+urt4@p1?DnRPsi+y4Ikaz;P`&&|IZH)E53vzqc@0@&3v`2JTe
zV+b#R(m``SGmPvK`6X^x!@<nP5y0T+{imvMNOvhFMBrQP+cb?im*Pe<P|KVB=pm2T
zkpBPKbN`>+QO%vOs~q#s&)3ALw_E;#>7_o63?z(<{_PL15;)lj(IRPW>4M7b#OiGM
z9}++H6LSBzUqeG$sCC$?*3J11jCop2)cGQMSD49XH+``L5%`5GmJA?HUTyaf+R|-W
zPHgzgwhQ8)eg0oqPk?S5Kv)J~7=J%e<#ZskL>kI)4IRn|RNVhvqDXdHRaND4!DvZs
z6BS6FS{=9K`J^(s+GCRBf7w)_;e=&L2nx`P^L*D^z6zPU^Z;v;OG`Xw5WuS<xLf8I
z7omCD?w=k;OSyg4P}oy|&7x2!RtvOW_W#BRmCJP`EEA-96Z-!D;p{KKqU^f;aU8}$
zO1hLTDWyXshmvlP4(X7R?jfY41OaITq`Nx=0hN*(KuVArx?!l_jpu#OIq!LRp8was
z*Tr?gICt#5)?RDvwb%N5-cbt`>Eux)@Y!Cv5=ximMG5D3|B6Q-5EEp@6_P~O6A0%+
znvVL2X>+almrO-em$!kHp-EF8DA*cgdX@)mE4dCo+g7xCex{uLtGVp+MSUYGfeeyr
zl>isr3yMA{9>cBbrU>R5s)>fX^L}fbd#V1=GYO9PoSF*s_a_|%bnLix^(=RyY*QOQ
zEG}2cM$BTTd~FT)+VI^D!2547oc}Ug|N4^{90}m!@%W|0^~~4f&Udq*zU$b?IL$52
zJ?nNe5P81eq$#`k$)NaY;fEdsG%-2BrBUTud<C}audv(D{-{eKE8l`7v2gC)yP&p1
zLQhIfs_=OcVQaBx^)3yzbAmBi_@3f>DD4pWj`zD7cEwM+zL(kxv=O&s(cMR;<1T$f
zs%lcX-#*YjUad?55VMR74-Xsg{Wz%Io|u?WUb_<nLy#IJHUQ{|O|DTpZI4}p+g=`d
zQF<AL-Hwdg0D2Zbk%Hy(ri|O?`AkpsyJGr7{fA$xyWv(-Mqhq?kDjg?iR|G@(YX+K
zlz{r&+WZpx@yk!QVxv)4L%-*`5=M2=@1w|V8f;Xw_D`}s8a^r)E!;3Rf>#aX+O11O
zQ>{rv=Q9|TftOFLW<^@Tm$`5L?K}QMCJOi*88y+mjtMe`K+Vf}2o_lg<52`799_TB
zVj!h`duxlLRI8)spo!rK(<NsRr(nC056-Te-e1Kw9X3LB+ghLpJ&&765&Mz<pk`JU
z^r3_Vbj~YrP7?8pq{;Aj2ms;ouLU~$KLF|XC=F@%m1N5dx7~%#(1J}a;cMK>vJnr_
zmZp2x`2^H2(g&kH{x9S4-<YBibjA;@DfSvt><rRAWHFkP42L4Mk3Te^)O15d+=ip3
zVt)fL7?#lO+Nj0mm8k&LnfTK3yENf{neN{zs-h6^Jau-Y|9g9-j;Jf03L!H7gwz9B
z#BJUwR<pxqL^ny`)NukyhcX}=a}Dux=&={oI@PU<$O)yykTMq^oP=H|vr7UbpZlva
zUVgeM>G}_e-2Ayr<QP{I?IEk5<o+;c^$0~q8&?1GCVTdOtysV-4DD7S8Q#J&hszOo
z??nt`3ixu8FILv|ZTGDOr#&on_1$1+hW^wQ+a(8?69AB>{EaVt^KM77>&64nFrx#%
z_m2SS#O!+@DdORJY`-?=)xqY78EFJif%(_RKy;BUVKrsgu^W0?w!8jQ;D*OCQ_s?_
zZi95E$Lj+mi6XNo@P$LQjtK;qSgyFkJGX=t9f{D<Z$TRF*{!X<7DuL6(phUa-xm3F
zh;!SwgCX{^8vszDL{r_)8%38u0o+{!XmITgoutoS-xvwhhW5+NGZq5^KvDNpR#r-D
zQXY^5WTVGc{GFB~r-B*>YRX(}9335BU(FkM_8WmC=x@6D)}`P$zPCcecho_)0n<V;
z7P&z)(2()`<{EL5_nf9ZGXS*bETxy|?bZW12{cC!fJ+Vm2v7aytJau6g#iGl8bf;j
z{%L6`q7XQPzeO{$F@E`Z#@c9?UFwx~UL#`)0qut!Inryl4Zjh?gLkxvwli`g0_-nA
zFnn(#pXJ46*YG04?O^3Tc)MKI6hE1qd^P;1eFJE*!71o9_4S$KFqpe-^{bX!f!L8i
zM<^{#LNc!Jn>6~y0Qh2GfLcKm)P|vuDdLNbZfhhR+VIzLAcMv6cloR-Xt1%d-B_G_
zon^ARbwvVzME^}4+U55CQ5xk<9qwO-Wo+2-<3?dLlQ29}Dcf@Z{s-v}RAhTfco!4y
zoxgtn25T`;Mpt^lGQ)Gl8Wo4KrB&wi@Zn3q0KABy`hMFpPML8PMw&k5>%dGCuFu{;
z3;~Tih|4#)RUDWezKR>Vr}UV%g}Z4I0XZc>*tOOew}>vw<p!-f2ancTyXk1`4faM}
zmcv*R?57mRt-zvCh!{#>vyjXYzl*D@0WTllaSD9(lnR*)<fCFDksxqe0EPShG43yg
z4Y?<GQBm0qsx1`tmO1_LDrf-un-CVD58{^TRMDeeOP&}vSiBoGPI}=WW2}O{;TZzY
zCcR~_z@Wlta1RwW;8#&YA(u`^&VXUky{THk#-Ff0(!L!_@(}bo+1fy{qh!Md>q?oW
zV;K?`p-Oqn1R)_i|JPT=M=Aj_kR^<onwpkiSH?2p<=gZJw}MWkFL{Ef=msUs@1|E7
zfTNSj$^Zytytr<M-Gu4|h%=TxdZ*8pOWQdgezV&Ag*iBOzlRSU+`sjW!25ViQX>M{
z6l7$!>u@;fKxp!FUqWNI+L#=1g}>+~Fu~>|Ouu+bZLx~Vw1kKsG9NkHmBKvBgl<kG
z83D61<T0v#%ghE;faSPHy%s9~g!ypV&;BJikK2U#`8}NWyyb9il{A`GR*me&*Vwl$
zWio^a2cB<jJo79}hcY9#F$x5H!h9!UO%b)*;(3r56&*dNfBK#61#06x8FbWiw%e8f
zm=z!husL<f=}B4(i83njitxWfM6E-y)`7=&+ZtO3$QWSSDDPVQYU5y;C42bFo@|h+
z=>ue1p<9NF3{F9dt+7YS{T3pmnS^yF7DU_fD;(*Ijq=?<j$38j#{_UT++7&?D6c%(
z?td-J8KKr)30%;-zyp*6{Z$Z9bAS&4Jpkw-6HIi(iy$MmvbH`uURYT898!F9gzy)S
z3rK$#0zg!L6&rRfF9&|+(_c9e%hUWe{l7sVO;m|*HUCIJ6RV6a*?p#gHcD0A(z`|3
z5$GU*CBk~3$nPjP-}6?Wcq9-C(GBH=aT2@HT&4Stp#{kD3B_1#(W-fQ2<fe_2chNx
z#+3N%<y?y=x3si0j&4y~*torVHX@SNEmGvxs22+H0j}9A<w_Xit#F5vP9AV;s<piK
zPAKq`-fNPI`I`ro0`xL9uO1|Btgn0S0{^JEH1OcrPgrCxcU6KI?QfsH3U<iIbeq#C
z@$+)S+2iWW%T0!XZo`QhN1!O4;4==KA;JNJ$xQs#;1?+%4N#y}A*7>}n6mIv`s4b;
z^FuFlA@2-%Uk^U&;9JQVAYlM&%pG!G14FZMpd)%&&dO+k<3e>H?aC1#cJOxJoa9`q
zFi5#=>jYGX;RB==Y~PJXHQT{1&V!+AK~PZ&3JTwbD-nh7={Y#GE2l)}qgKxd&lOpY
z1TR}v_l(LN&@Wys^+ZXhvdP|VEN-99-@#pnDKdkuw-A5uN_)pm?rh%oWR_&ZhLz;e
z^qLK8OMV>AkDZ#nCSV)ldgsoa)Ohwm{J(1TZJPc+pFus58D6J6`Pc(OTPx~U9vx4<
ze%7wc4snkddtI6md-)T<T+*+-VJne>-@iSS`M+`K{~BgH_`TH@%mX*-PQcm0YUT~7
zNqtdalAu*I134yOsV{WfcSgo5+cz4lQ*Pb-{{6iJK<FIbn;=25T9mkJaJW|vWviZ6
zZpK+h^+jmMJLZ(&%g?}DU(N!AS?)`>MeMgZw*UTYjKDbCRro>1iD6cA^Z6&>96|Zf
z@MtSeB2p0UF#YBUK(=6rCs_ghAB5NczVwz5{(pq>9Ob>0T|&}VMKmk%qi?()5b8z6
zvy#4J0T7IUApmc8e;hbxB$KUt3>209kC6T!euF?k3N_e{!x5zWfW0P;jEcHcX~$u+
zp<37a0Dd-}s<l1WdXD)TPLzJTJ^Eil`_GjcU<%yWLaI*+5?_?bDIkEb;}zjeLb4(R
z@+DN`zc$+Iw1jzY^9KJg04OG)*Uc(yo@79yV9fVic;=ei_^7;+*oi#L@bold5J1nW
zPpUb0xowC44=O<o%r3>RiZe172M31@O)Uc=#Uj7Jc2)cbptGC6fPCWDhV;qF$$YE>
zea+v*rT-(V|MS}spvwlzA*-h70RC6n6Coj=bc|}Y&-gjGAXk*RX77{j_R@0}_J0`m
zZDNF~BQx|0EMvD<0x2fgn$5V@>v;k%DD(uh!Mlf$os*V@{-5{w|M4fG1~hyEg+g0>
zHU(g{G6(3YsCYH0j({3Pfg73-BS3SnteZaS+!k&A{nR3Z<1jeB3lwU1emnWs=zTkz
zWlwOK0y`3#7LUxO*3f)!^N)Z3S%);B1n2xL*rqqQ#=jdSQZ`>rK31fGLSF;`Fd@B1
zCnwh<j<p)MI_uje^Y>>EYd{MOK7Ggp`dIYFwoVc&He4PAsG$M!pWy=F#7hX%KLSm8
zf3m!^@r|=<A8OARjsJq%MOeReaKgg@p-qwucW+b!QnEN_{SLY%p7`5WL;`)r1MG`a
z&wfM3WBrDTjoqJJcY1}t+yUb<wL%#Tj6TT1c9@01NPqU4JU2Hb$ci-tg6pd{fX(v9
zVYV;<YTGWrJnM+i6qn1f3)(F6|6JdHyYT<@9~VTx*xOAB9#sKoTdl?bX;yJ1hB{EK
zk6S>OB@1hx$lY+>Xz3sQvsZnm1ZXKTb|Zt9s6>2mJDKrXFhJ__0!_aiSVz6Vcr2>7
zZan^0XvWgO{oM4UVAG?cqryT$GnOqTzYk?dF)!XQ7+m`<(YE{zMc3cFIArg}ckR6g
zprvjS>&F%1FHiUt!~v{{IJBC&IuSb{C*LkNV$k$QE<okgjYn?)-H>AQy{?_?8b-Sz
z9OGxW!GamR0q;V^{xkVRuyjb;DnF|O+*Bjb_&mQ$PyXp<(V3v%D7+A`A8;%AM0k5V
z^LMhRrUu?}RY)7)+zADkj09d`2dw}bihzDlii>X<Fr5O<QW}3Ni(CH#VCz$;8GM1u
z(}<t~euSU$DBdhWs4KE!Lz@IanR4|UF3`sF4@>4Raxzv0WKQhF_*~e1d!{mcXzyk>
z##9BdwcW@B_+>7#`h0U8{&LknJ>oMVpzF&{TR;SR2t=^1iK!pF0BLmC23!x#B|~AF
zW0&nZ%^wMwh*NUCb6*>a6>la4qBZ1%kx{du5fQoT=!Y?dow6)|P_7m*8=#toU=7C{
zHNyG`Vhq+?@3=%8J>3yL+4#fjbT5Z5uXY9u2D!LboikTOz6e{c)caTrrs?=uM!Plo
zX*BB(RZh!91|fl|Z}^juK)C;ldGsHDJ*0tTxl-L1yDFY7riyKO0%j)Axw%+~y22ZP
zRavGy4Z!?=zS+MYyzmqmRC<Ta7)5(0uJ0@KGc7joLQr=w%cDm)4%XH>i|MBP;6Hm$
z;MRt?)WZT$lQaQWcmQCmXK<lRk~dG3ArGjks?vj%8~Gb9lJ~y&qw(L|pdtk+VB#U6
zvYp-5H*at6Yt=xsD)E~+ghW6=WhBfCh;gL9VZZ*T37>>OAse)EKeK|cy_&07nP?yB
z{FaWf6{z^h%SjH`HM87*l+C}V^FKuzEDhWiG--pn!LViQ>xrx*gYkPRKNDDKbsW84
ztd1x6e;5D1AE6=yNbJBkpQ6M++stz1?K}G4LdO*fn8j#d!!dk}PxGH|@$U=&>C-86
zT&wi-0S>o{LF7>Nn;X(Hs62mO=X{Ac%AtM!M&OSnCBp=~CO6?lFgn5DB*4L}%$>G~
z`&;L`6(Gp4QjCVOn5lbXe?u$&_sash3P!8hR_}0ib(Ow>Yn@xgy#_P@n?MD!ZIOH(
zNSWr*c`@#AP%pe3XMH_lXPi6|`TeXC(d+=<(M~Uy`?wsF4!){-(G`-j#e-G+r;8BM
z;R;%(mVjL{eYpZKCMX+#BstbYbQ*3jwF(b13Lm@HiV=K=s;Id5y29%SzWRpPLbeAu
z$qSjAn;Sh8mS&)^4%abE`QUYMXUox!|KR@*Wd%Q@-V2yOrEnSE?y#ao16CEmWS;+a
zNl8gd4nXc#z8-Wzp^#NrSa`9L>d>ZwJe350xwSw@&J69)-*UVR1&zcL{<+%4CO}N?
zlrk#3udo1mf#a*<euBZ&u~8j1=~ilxjjbtsM<IStZEbD**z?(fosFP)czrGqS7<Up
zTVW3DdpBm~pH|>smGl!sYy-p=McZEu`OQ2A+2ehh1^$2^z{HAH1GMn0(dR!)&(!l2
zrs}J!5BzE^d%ZWztfTE<T}Zqi!>Rv{KK$>+O`i-g0hKZ;rqmb##{(<$Bz$cWS?o9F
zDjnf_1whgG51;T~H_IDu&om}{OJcu%6IgEavy7xux6I407=G&6DJMnx$2Ofl0745Y
z#SvJ`nw4cz@Ck+xgN724k}_ujG?pKaSD$WjBG>w7zV)8po&4OQKg!D?3+rfV!H)-|
z{)f{^O${<c)rCz=7>@k-an3783PPu;$Zcvu2m@VW1}V7yPSt22j21t&DbhE6a3A6=
z``N<TQfdAjH0;01=I^KR_je)m;1;YJ3z7{PI6#Czon`!ewN`LvLsw7lnmou$!%Ncm
zQ!x6I9bn%oLD~2&=}}Y2pi0M)u;)Vtyg#48M5uef1V+VGy4*o-cOp}?w=_g-e8=9_
zw)vZ2uVWtz2&2icC~HHal#9j8l<(!_!mKcdnORuqpJ^j?EE8xBoIC)W<MacC{q+xv
z4jm_?LCr-)Mc6t(bcaEe-o<#1&cnwy@p8Im9p#)At4Dmx-uI1Ly@=?2YneY^=b308
zcvhtbC8?TBqrNQnePr(iB+xyJw9;?&a+Nj_>QS{sE3j+T?J?Yp?0k6t>-NOM4!TEw
zI(^FM@0vHY)Ya7+LCEgkPy<U0*!sXzWwXxZJjm(3ZKLQ_N-8Lh{hGiYUcn%p+fwPH
zX&%YTvc{ybi3z{5g-EkM)j|N=1)aY+=Lm2M_S1k{IGann7wsvQ)zWg&0PGA!J%8R)
zf<VB8u`P=JJ*W4&z)9zuRBd8^?+<PlBg7A!c8@`R%OpKBG&c|;39iv|T?O`H`BtHD
zEWAQVEU*dPg14Z)j*h2?y!^MgNu-?nf4rnj7#B3MYC-3Q>?ZAD>7;id)KU<^=R*_G
z<JU-N;5ZqG-G0pSNwd)L<x@ZtVtcQC{<(qpMZKVqbu(LhTL5?HHF=vO2IvDpK|z6s
zB@hiOi)#gg(D=n6b_WzTsY6cPGuizb6}8+aU$e>S3I0?W(9Gx;BzNDtDbA*U_reyZ
zHUmvpB2s}LZkl2-A#fT)Y%pI_Ny%m!0H1K(u^#xz<By{PrZDJuz{E83k;c|Lgs~Xq
z+xwu0xGEgxu(j_wMk6ybEu~;iv)7PpG=&tN!b*TM`U{x9Rkc}<>OGRE6W$+7NU~!Z
za3MO^s$vtpYI3+?&<<XVj23>7Z~+ur500xSc5T`nGt~CpQTWkk^yh;~hbDBI$YM-B
zYDIgi0uI=&H0|AP2k>r5BKqWs(ICc1$invzYA7R<pDt9uM2m}yPmG$~wusBqyPy8)
z!_XOx4YGK}CeX{@{%ma5Z5~#_QWlD%i50r>xl};i`K8jn&~<t5^71m3ovrP;q1t7y
z!=FB+ji7>ISQpuwfT*H=!hPYCggGFSsR5Dx)<#mt1ie2)xLNLKi*Rf6!mHN2oFt67
ztdr@{qm6f$dgkuUZFGm;xmVF+m3U=m_#ayRpEptwd=Sz2^OY+JE<vlw;CS(gk+9F*
zPEsVN#}tHd?{XJ#!K>bzv}IB<5F99Zaozf*nkQdp4_=_VvSxi?Y4Hp<*_%I(e5pwS
zChz?AznR}Uo~&}kIpYHP(9ZE4O~<43#t}zs&>eJz@A)}7ORp&W=R2G)LLi)A!j}~1
z!nOCCzufubjZrdsHz{FWdI`)rX%f+&=R^paLI-9z9;2*{%^PD7Vm!&QC3CqlH)mL_
zcg5oYp~e7#^`ylfQ2eR8&!)lE%c^y&+D?2!^t~aRm<kPeOfg2;RW?rBf`lV@WiVZ@
z@#Pd3fy?#Vg<M*6&}V}8PaF)T09W9!hu??($0Osz4SP7OD>l(==SWGGM(vp77Uo+|
zkZ5AI2Cl)pGM`4d{yI#QP-dJ;dGFNF)%A!KNQ>xbmhhjQ^PQbnn;gWmi-4ATW6E`^
z%)T6-K864R^*?P`ZkZ2&5qBSA8(1RGS|#~wzGwmNOYoCf$$}mz>Z(xo_CA*o@O0?`
zb5d#G9t9x`fuogU4~@Knt&2Dp-={3TYs~2oO-)SzbZ28)E-4uNr)vi{EC`YtFag%-
zRqfthBNy@UD0RCw*opqEO$rW}o}Rwr<?T%sUlKz73x(d)-P7}oXf@OSibzpWu@(8t
zJ%vcOrmGmYCQ6d`5b*0~kge$&H8)<I0S@pVZ;(1-!L*n)41HdGRWfEElxjbPW|04r
zw}Xts)+ne+%oPYNgm=-y?Riagb!RbW=L0_ZP3FExL|MPU-G5^NAP|i}`W}bmU3m9f
z0u{k0I$JZ-eMCSy{FYh&$KX(o7FYJhYCTMN8<YIRezM{xgo>go{|Zc~acRHx{4(cC
zI_FyR`Sas5z@-=wwXUr3*d%RGU>H+9NPosdB%YO>ZDL|;Yb#IVDTDdPD!GS`COn)%
zz2Sj5$*_gNBlJ8VBxcHtpbjh#ft`=Xc{o+59VF$Y2elWb2Z_e}V_&PWEFhkt=nowX
zai0j2iu(Bs#66U+Yu-Vp{Krw=qNp-=161ym61hyVMiPC2geN7VSuy^sotE`@mFG<E
zoCyu|D%Vokky7<GfhT}Yl<lppJ^5^A%huG-y$fC%z$02^E7iANG{Sebb5Gx7{^_*q
zGvMlG)dpT<ki4&C>*_pSL<hh&2i0&l2|mkH=SP8UY;8p+fL*{AlbyN>oDR{ZB&fL)
zrdH10l&732;s<~Q44o~;-~gD56*M*8<v2dO$bTq$C@WYT{a7vb$YFWG_N5cPAT8Z+
z8PX@tx7HG>Yv4S9lFJP^j32Uw!GC^ubY31f4*0EdHI*ZO+L5IDym^m-)7lr5(4VHr
z$bqG-OkjmS4KslvnvUPQ)m;=6b3b#m*0kd=s2f?EJ&@1HJnZ`@*_>^A>SfSHB84m_
zHg3sWfRI*Q6Yup$UlV&TaWt>y(X9+M-Z=e+gn5f_|M6vh(c)SGK_QRjBgnx{BjKw-
zDi9F0zrRTaU|o5<Q&4spNF1M-upgVhBhFAE@48|<o;*&oA?8B~)>v6RIzFC@lU9oh
zmd;Y_oN)aaF3okD9jpk2n3|dn0I=<IS)MWnybj$ZwY^P&tU4dDWc-SE?woJc&j$hc
z?prL{pa*|D0!B12sa0vZn!Dgn-e-y8#>JpJC#+IPo=c1>04O93Fah{=4|T0PKDr4S
zk=IfFB2k9m^a+)|E=>m1$dVacQ+$4HrFAltNE_60n~GAifvPQs%0^~-q<PxSR-Wi%
zr(qL)SdmRyKaT>;@6HDM2GfU;XZ-&;!hjFx3dvl{S-`1T*SlAFe1)kWDpSH!-xu!L
zT@E+q$kQ~t$>}w3+C1?e(CS58vY($*z|KfqHqRm=B3QrHn*;nOLouYhHkdf*(pvUb
zfk@yBI$Z4=D|Dq9-A1|2;1dI~7+Uj=yq=}af=+7{-#H46ExjrR?Zsf|pe{;KL&zvW
zV?t8TfhA)DtV`OVU-a^5$Xf!}Vpx9HM&dJ{2d=<w>#OC5)IFD`J&}#xXZy?ShoS@Q
zXu%SYtwAUFqrn811K!IXo6BVaZsb~&{6~)KtDLE-abDx4ORma#8gaPtT(<fxr-7Jk
z{8d1r28JJxZynN87gH1^FnD*hR%MR?rC-=Mi1p)S*51PFuh*?=X0cC5K{lb3T9?<Q
z+c@pxwY$5EpWi6Xzr_KIGiD*&+TQsX9K~Sqi)WW^ct@T3J##J=#gauasm4{gY?Im?
z`t~ZN3!N^@c2Bj@r@H5b=<u}=;oFM+7@#dN*5zH#pz}E8Kmx_eP8k1|*oi-S!MtzA
zbda9G3Mb&Ezmq+&*Jr2dnOqE=hFwQe3OBViHa2oArSe$v%ED&lrd06qDb_+DxL_B9
zhXNV-Wo6rvvw}n8yq9i!<P>0avx_7se1iDWz5dFu+<TF$0hp(Q>deGn*XYts>S{Z%
zmcG>Vs!2Li^~)a1U-)Fq_sAv+noh?$7P07ubqQ3{o2)BwMPtiQ+kLesPqOYuxQRVk
zB6#Qd;yXxgs6o$l4TDw4Ux$L7;i3HMgCa12@yE{4WSJELPUP9FJB?J*FZtl&)LCvn
z!1k(C;>H^v`erTEB$Ts^nt(NljdR)c5sJ2U<yW=6qa`!Li5xDea1ZR#D*6%Ch|E;Q
zphj+h;C(t*3wF<lwq+bc5{w8dJkpaurq;aui=f0Iy7zd#yUmN|Fw5jJbxP8(wzBRI
zdu+8@^XlH8Jw&k)(d!z`j_K2(F@hF#Co6E$Hf`80@0=j%hoHjG64gs&RA_{9S&BG6
z3>Lb&++GVPAr{fB9-C5%@Eve55;F$qC*o?Cb7ra|Gs0oQxqh?EiM!uyLRMP*N}iUV
zm?`3ZLNDzSdQ^!;6ZVWATtc0t*oHm9V3e2Py_bBGdk0EbU`2}F^(5GyYr)g|L&dD^
zUnOAT?y@KJiv?9G&s!1o@bS~f`A^Al142SVeggZ5Zc?+Kg<hv6@SmOQqYqK{3*!A+
z?X5^YqU^(PK;z@%=j8^?6GF+|y__H~_+=k(Alc4ueC!K^ZvI0z-cr!mHd{fX+1_n9
z`5jX}t7D?EEhYxdGXj^{%P{o7`<NY~<951X{-MN+*K3)!9`C}T)3FERAv0OdN+@UM
z`>#zK(Sa_*@=wRJ?|3;+4LzN_?Uh>un>Bo&9z@8B(BL{+SLvM0let`9%Anl`5fz^I
z=*~W2xXVKLf{kFZ2z`m&_S30uQhLYnC$s`ACiMjv`_W0wr&n>)#God7hY45j0M_FM
zvrq)_(6_ltwyDTcC0uQO`<VuHPoic5bE1Z~aHGtJAL`+40z!^I(P|<(CM!)(Dlf5u
z2^f{q+JIb{MRCXSi^%C=P8$gcUo@Kt5sV4_gwUt-0Z<aKzMl7U(Mwm5e|_7;X2*_{
zR2VFrTNB6ARy~AE#rL`u`+(Z;E?+Ws<3xt}erKI&JcDA&#Q1paC%)#FwbH5cih9)+
z14VJ5(s9*tP3hM0=ZuxbjvyYT*WA@Ky#P#V&-P?xmjbTf<#$jgF{?sm!7TOFat$5j
z{h>0p?<CpqYZKPkRxYmrtH@L+!y?sp`ir!NElB%3c&x_-2yR=&aYk5=eyF#%j-GCC
zM73W%X7@ZwpO;D>6-@1Y*_3aP=RKY9lw$WZcY1ntJoCqpDG8nXz(?v05y$NbS45de
zdnrN-W{rwW{hTO#t4AnL%PX_Z<a0z+9a)5LBf6DoNKOrB(7N>g-a9CQhGM$W9&r;+
z3%PRQ){oV%z0KN(1k->)61c;zo*_M`C->e)j$-3+h@}AKkZ;B_=jLguIeCpie4^m;
zy}81oOq{!$ugn$?d!XUEboS^H9}rzwa2)UIE{FS(vFnV;daH2*x}jyV&dR07@j`~?
zv{_e9`O}E5nx!UZ9I*L*{-h~sQi?}`&gT_n$2P{XyiQgq#==^YJW@sygLo>jGCT7y
z>F!4&C~KoD_r{1Bj<U`VHENW}54Mh}ao(4bnebI*P0^vpNSLyB=(7YYh<`?7sL*Ev
z7>R+C;iTG+``-quXW+dT_I68Pz-|_D#&jpA$@1Q`Zt4~J71kKeJ=#)a4a8D!c)p(&
zbw7>ilEAYXHB*~a318$NBJcDsEcU(pFb%6-V!D&*QY3OIdquvKtz5@uV*UNHw5c3-
zbIIgm)wh*do7F)L!4vN0{!b}w;K|Z*_NeZwb^|iqNLVVd8+~F2Qm-qOko-v})jj@x
zWi&~tEbp-bRn!vw##go)7~j=Nky{mue1KlW_QZFvcMRb(l=zb$IWrRi0z~@11@mSc
z2SkO!@Y$pwkfjq$9>4adAkC+mR;y#rw$c!0gOX_qv;mY+dStxz1{s8_1Jg#pv75Bo
z1y<Kk1p?#6q)m<jLh@sR-1mTqly}p)vdkHitWo|YjpK#7`AXxt+EEbCPO!_?Y?<v)
zOSE8N<}AiDVcpIGe?=B(!KMAnmnCyG*6NmHUhzdS(J!jx4DApfZAQ!G5@8;;0NA39
zKk4IIR!$3R$McG`^wj&IPBm5_zGD(N93H&}oaMGy<qP#&nLcd{o?1p1WyMX)MhTps
z?9uZb;)Q#2;h5=lp1v50NJ&ZQSy{1I!8UoUY_N2lZ+mfgUlCIK8SLVKsM=OkBu>5G
zWDVDQZ!nq{T84&#+ZWTJA4PH%Yow+oB?UPd$y_%?)D;|l=rsWGMV}Bg)W(47)BNAl
zJ+5OL;%xB#XxxYeCM2lQ=M>{!s*r-sCgq-db6R_rUk$!0IfurRIsB5>zZ}3En@`Jh
z@ES3vuTVTPd)dQH-Y*NiQc)7}OfTtwG!B()+8v0$2J7G~EDjHSv~j_9?wjjQE$Z1;
z5!1GTtWC=c#BjAfTVXe;N(v&z7#tDrj5(%U$b_IjHfS2#tkcV@^G}A)M?zlHy~ITx
zx2q--AI~Bn-;INo6$Z7s+{@Re=MWZd80r2&tl07$7L!Ft^xmrhq<;M%fJFmB?E*R^
z04VCVih5WazH2YHby_}Me2P5UTg^7C3u6|W$k1xJKbvarwxrse#P`8&FzsnP(ET<X
zFVZpZh!%D>2OEHs;z*;bwNeiQVCIc*0QB%d)Y<mfd-iZLPh7JtDZAsI@Yn0-d4`!H
zstzr-dp+Et<PT2oqHTY~CZf#4rXBwN9Z#NmnOcG$*!F7!(_WYK%sO@v9sBKIe)d>6
zTR9qesmT7^7c9FDekC#v`{OSX22_#q^6bODV-r4x2c%kwY%EXlyEo?}-R0PK_Dv+w
zgvzxZ-POPFq*UKEd>}TlM<UrqT<}3J6)v-hUN!i{Xk^6t!$N3?I^vOi5<`?2;Z<IS
z8wJ(tvfzyZ4T>w3PY)JEfOcLw<fEe#`FZuDle+tgdup|T#mWi?5BsLS(e^N-9nxi0
zejRchC|`4rrMiiMFBnytfu7}Um(2XSx?{SlX7cpV#j|$nx)Fg#0s~h2uc19YtGOGo
z@KIFXJxo#R1s3E1tP*Zm?n-b{GdxJ%Ej4s*)GiC8uGMHJSoiyA8wvdKVU}M%RsW?X
zRbYu7D?RGg$lb`)kxRY<VmDNSj$g581*K;;GTE(!#hk-}-J3}4>2D?r1MifMhqdBX
zMio4I3w0|v)nw^FOyWzu6$XK97L?@NiN}T&BOxE%S-Q81cq9(AFz;%4tePoc7qXt!
zTPq*_bnT!?41n(r&_qb{01<kCI9iLStFrl%PvQmUGLNE#Lp~C#_-Fp)2?h2S?dS^J
zu=aVjMT(nmZh{YozqqUW$`MHR+@+jSH5cag-2a7c9kS?YKM|Y;g#>^#GOvu9?0I>4
ziCPRbvIOFQEXPwcE2Yzg!y|t0<Ck+D?}Ics^T$x9tWWocy*Us2{*`L$Q-GXItO7HU
zsb#6usfq@cFdofQOwTJTR6eodz<;|afUHiXe?r4@&U?2>kj0>FgV}0P0c)ZVq_!kT
z7;~X#1){CR+}aS{|DvbmLZEGJ54KtGTP=;}e42+6#7<hbUOvs`*1}f#c&sdP*mihc
zGy8tkDs>iOI%A0^|7Is8shB0?OLfD-Za((aU_3vxl}*+;9tS0=RsZNgGtJHD6}*A{
z(|oKjisj7(r^=8w<(41MrQwfSfB479AE-EMUt4;(y1CUQ0M;1yeo6;GvT`Cs{*?_T
zQB8{i{=@)ON=}<kUjtRHQCNCOL;Ih1Ti5+U5!7@($3*l0+Rmxs4{N(tHulOfI&?+j
z3pIrlD!c19`S*5x(m)%3y(2;M1ew!>yLKiFLqKoXq@A<`6*Eq0Q5(%Ff2uv-twMy8
z_>M}-6J*vZ*hfL+uROdvk@Sy&SgguV(6E?1nnl)FoEu<Yowb`z32vf#{Ue80#@C!M
zVi+07!errs08oz~<_PxJzhrfFYv<cJA`dHIu(%b$D?no#(brr<hl+eXsNGoxZ!}ou
zF7i==pBX{{F1RHV(tGC3%;wE!HcURTezr>c5FAJoJGZP0TcPNbk;DLw(H{o@l!QVK
z+X;Z%wh^f{dXnETo1t;{6zjhdKxjeGxk10k#$NbA1jjEr0?=z*8PUf=z)p<w^)I?o
zE%01^=x1rqWmV{)mA*@IHxVHjd6pNu)H0U(?#^BuR9cC-15r4JJyE{j$I5Q-{m3PK
z9cuHo^|L%Gg|po9uBAHVN^#ZM6XiCd=g_>_@0RK>8fDUPkg?RR6O{!<ZZbhYst-PQ
zrcd5vH(u!1O&9V;q(!x7Li`gO+N9V5R$ggE7h%awk^ol}`6&Ha9wM=sQ8`11#_!Ey
zHRSS(YoRxojH_Ggo|O{baII%_VN6kyI|v21Z4v~od*R;le6rjiZJV#;@GSOn!i46(
zw#OZ;pr&58jjc`pSKn+(6hQ&NA*4OGZwLKpL`)F++KaudpqN+PxWf%=ax!3f>K%w}
zr@w7Q(OY8b0J}n@jUFU(S{5*<snJ1Eao<M>ycc#43Y~7cGosv<Ts0#8DGjOHi`@js
zj-b9vN^0-*mNs=%IofUJERcG5v!s2{BcGgn%WbC+zkFS-?kj}AI-4LL0h0S&3eBDN
zm>R#+rI+X~fKq>)?p-?1+&fP~#J4LQF>YKQ6Yl8KXPu1*FHs!n&Fy4gPToT{LVI6}
z>0CZc-v7;KkC{od+pO#bo#zgk9K)-B>9+{(u!Z%&M+7I(Y*#eqTbHe&^D7kc9;_fd
ze(`mh!<G7n5{TtQdaLHKNU_?Mo6lX3qNn9IgYHznPIvzX*4_}D@RSyEgAfRLyDz^@
zJ@?owN-DG7e>F7tu25-esKtegIv-ePe){U_+_cnAVV-Y0qzx~Uu5X?{DcjLPAs#dt
z<)%wgrkNL$g(KMV`ptuN+}%Xzl%3cXV>5<_-Y5RM$Y_M}kgX-!(V-LoLiE(cydhTk
zAcS4<h|y>xuyykNOHdP=gZwzG$}GOa8?9R&;>;oM!deys!|<+2b(2+~tm~zH{I8?o
zNeM{6#5~()(gD3ed!W9FMe4364emqaQkWvoWfuT%6&bF^-n95I>y@beVt4rHQtc<o
zt){ze4l%rbI$UO1NAH-`j}yM}`ZaE~JpnlAOSr@)w!Ih2QEeKOWE6KdcVXYmJo8cy
zekdfTl;0)7j9>Qko8x=(#C?Qsxwj}*qsSqKFfOC!#)&ObXPy6&?-%C6o^@K&_|aks
z>*ROI0cw?Y-$18_zK!K^*dG>a@7)FAqJ?z;W%!u~wK3KgYQ~e?$REV-fobWo{N&5q
z#%BA%a?n5z(AW6l(w@Fo0FPnMrn%frZg9K@!UYVu!?G~_!Gmb=4hPUQ)0X#VFRQux
zA3VRclcZ+);D*I_+#ItPmY*K++d<rGz(CE1=05h-cU|&mzUl`h^zH2A>oTR}7-B$k
zN8*POM-c&#*W$~sz$p=oDV9^<qZLaS)P6$iQP*b_bJ|L0Fi*iGfsDgF*uuqKEVW73
z24&_HV_QWRd*b{{1o_H5Eqd5e8f|qP7Le$K`~vsW-keC{=vSJ&t{2oNqdE#tW5obY
zmw?QO;?w~HJ*DnpedHc64yGvRy1(qFE*nN=7Dcs-#@epI7rGaow0`n4b&!K!g3F!i
zO`&x*_GRN2<CS&-b?VpdYd;F-R|ah94&8IzOy{)xH(XlSj_Orciw>97!N^WC)nv^R
zEMGszcdFvu`vMA}Mtgs5ir<Ud{|&6_9g7@bhBqv*UG*iNQF&u?Q$P9f&>r6xu-rPG
z)r@Yj(?*x<O6ZOu?rECIbESy}*E*89h3;6e#vCil4uXcjD-Dt=P*JEHww%g6+*DWR
z7RNv>p%Js@gKkx|Z)bDwihcet_e}<rbW@tAQ-Q<maLp7};I=QWxM^T@?|ZFRLD_h|
z>65RZJKZn*4M<MlO&)JhR`?wP;gj*CxKt}GbT`2peIRto({UtMHnbF|{Vr6-w)Npr
zJ-MtEISXb7Y6}g(3LVhE&vPXx9p_tB_iS(0o3_}3<fxKOTjx}V(m=dW&S!X%uGlCS
z9Z&u-qi_2M?}gUHWIlyux9FEmlFs^}(-wL&$6--Zvj{GOB%?P!hz}*G3&H)ZmG2-d
zNe#(b9jUYE22~IA0D*a<0r+zk2_?+x&1dYF>E<!!+MobqbSrzOsvgaUrKVOh)1)Pu
zGC>d_Fi*7q>uKMEg{$yAZRi9OdO^#E#$36U=QWpHYu(z&ML#WP#b<K%EvBJmpf+^k
zm%vctF1pn#&$eXh?~)J2CVnol$pw)XxmwW51993L+BGeP@t}MKUzJvm8TO%wgJ*WI
z^{-PJ`u4A|sEyrp7jHtEjt3y16jvF3Bsm9u3nZaHViSWJqW4}yN5NwgGx>a$uSb=P
zg>Eb`z#BLC8SFN9KRZH2GJgf9b)AX?Q})f35$D0|o%R$7fx#YX+ok-M&Fb?#0eq?R
zh#B3-m`3~7B8Myn@vLp9K~%VoZ=sF74OZ?ne72SY>tG!c@kn5~L-;`OE(&{ulWA}C
zth8_AYW2q@ey~1mmea(O(WL~nppy9Ea>v4#mAtqh=M6Y~jwFmexB;?2!gl{bP1H1!
zUCN4OG>$IYK7ydHDW{e+*$E&NxKuxQBnK)U$4epoDDFb^3__v6y-QjgQdAL{s{}?K
ze?zAhgj<~|IT)(zgGzhdUP1x6E`;K3xY56gYK4zwem<~*ZT1*mqZb$^o~@ZnNOU=(
zU_MzR5*!^bd(zh%bR;ZxJ#_eep2G*f+0q5)erdRHzL9!vR)Dj{wtH}ApHp(HZe)Y}
z{QTFLUX8(TFHfY+&!iKUE9-uQ`{LpTSX&7F+z?L04}ma)^_$rGFN%6Tsk`nZ7fB5<
zBYtG<;5E5ZmbG`u|BO9sS$v{=a&*Fc>Y9uBSj}0I?LBEhRM7@25fKq;eND~gJ&g*f
zPa3F0@lRKpS4|BoOPy4z;ROV)+;;AT{>$Z4yb*2kh13UqJ0rdvIPM_|TsQt~HN)FJ
zZ#zG<C?mb(UitX^7YPdmV^C(f*Z?a<c{(r2!wT)tSDy9TwI@v9B@z-6VgOUP{pAB!
zx3A%4y`U>rCPh8PS}2s}hFq8A(6T*ubl0rpRT4sGN6Aa)?$7q=_4=Z8Z1H#FTrSr>
z&-^mVy$(=|v9S91QH;0qo#5+m^;E_EIr3QT{BEYJy>qTp|8y==(>DxRbtUQtyx}R{
znhJMPPY4Z6_lLBTSqn*%HKzuhg!DnOsZ5wj7P}+k)H@pawvxMXZ`YWS4={>^bMO>h
zqDDWBSSVliuP1`a{p{U%HBqmo($JqiB@D<3k?Zh8gHZE>1_lPw<LY>hSY;}vuW)R$
zS02H+BOfv4gog7vRU6npC5tR?n?GaeO%-~a(qaI36wjt4M!)>FmVmdoAY^<FQ}if0
z!y+e1XQ&At3J{D-X4TfZ#%m<+%)ikr?8sgkBWYBbKOub71@kfC`cxCoH}nzc`K*66
zRb}4n!y2UESGePmh=>;b>cWQJOZaPoK~(yquO>yS?zK_c)z-Puk8;`hv-7q2o7_4X
zLK5zMq9S5*&p&w^M+-Y)5O%PCjg3Os0%N=$Bk?L-N%Y%_SALDie%hm4q+kAshid&_
z1qiS4RYboEbu2Bd>JL!RyK$%2+QRHrKcqlR4=4_;ZERTD*Yi>-RnFS&hh<~13(8xx
zeT$|j8-pL|pcSxb*^)cGUCD1te;BS6s#y>FVp;A}HJ)4&Fu~;!S^DhUCduvO{Rfoy
zmOe*AuI*zSTPj^VaXnv-;v$FqP#!ppm~>U((LGZzC{^}J?9Q12hgxZ6CRwkdb8`;n
z%Ycd`j9?HBPD~dm6IwE`31imA;j;%X+Ac-l%4tPy-9eYw3=5&tWt5zSjsxRkdVX=l
zX0th2gL|^R{Qb285v^aSjVYgN2qG|Ra~u>xdOd(jfy0McC;_7I`m>DjlZG>+%dcEV
zT5ZJ(Ihd#!@*@tlZ=c`QOMUW-sjrC+-TcD>{EenoxolwhYed2M$-}RvZCyN+Ez+<p
zJ<Nokx?XzavM_!V2PZHgzf;1il%2U4;z{L+*8L~mI35=<)9;;sWjqO(C`3)fCowBM
zhttn$!94Xfoo?JV68JHFmg4A&4dsaVw+KG#)*jPZsZ}MFXDGTSUuR(_t~yHs)q>kK
zZN2)}M!w5h4cm8)SCt{A9UBSL=MY<i;&S!bvZ2g-%<?oU8O+rfKid>~pAusu3y1rJ
z+V7f!bwa!9H42+3r;jw7-<80G6Te1XOrg8DxRh|Y$^|7PnJX`^J~)62DB=(9jW+kS
zAoR^rRDjxfuo48*4=35r2%)E`IgZ<aFNl(8`{IDkEhTZ5rFD5#bZW@U)j|)TJ9PlO
zh+zWj;Hks{mc_lFF@hc-;BqmDb3`*y@WES=lRe=}g)f5*5~{cYb_p-0WvcJQD<0R@
z*Lzc$2|LWSV5ncCRSlM}SPPx<b=d-35~#~bU9%d8dNZtoRIFNLM?cz5<Yq<NS8_6~
zGY?flJta~}GILvq#9gZ%`6?^UYN1yhXWv}{3VV@|>(Q9{5Qg=S2klFH440eo@y*gH
zzQ<a2J2b5)MFPib^E3p4?>dBn*JB&s>(T}U_bXmhNh+AJLm_ovR-X`22jxoP4|g<n
z&AfMs7p<4UGsAofC7qej$PpBf<PB5eK*oBW_+B7yaHgOB#c=m=4o01ybDR(MwAOfX
z5-KZ!C*YWbz=ud*F-EBlovKWzRfV5k%m(znyh;!5toJ-+*1YbS)+e3>Lhu$DYF@wl
zM~iq@H%%2B@1ff}R5B-=14h31cqQBbp;SgE&*IZXZvY0pU9H*h^PQ;|rNz%ny#_f-
z3JV|ntRRy}**<sWphv>jmWSBBO8WSNbC#~vyF)kiuBIMlJ5twJ$oq7n)~kZ6^cV1K
z_%FxpLPHYX!JEn^$JbDj4e-ib5f0gNu*SyoGX2JJj&ZLz5+`-tVj)p#o-n6iXb;i6
zQ}<Zlz~MU0kHGX8=B_M=t!4#*N!3GD8%v-u<YT}=pXAf6uxgtyN@YdRL2xRa`ASnV
zykFQ3K11lMfAY}ioam)*`(6Ibz9+)#2m+OK&)jP~Ki~yKaAlOA=Q0E|`RrO};lM2~
zUo3Ev`ELXy4ozEWsqiIJpeYD*<A|a>BzOwUrwe$DWTx!+u=u;RBv2f<Ab>m|ro?sP
zcaXqt*ox|5Je9k0c$YHzupWyqczO5c+(ULer$U2X&feMCIsc~)P%N2U9$h@NA6wq`
zGl>f965|sdvz1cTI^Uo#-jvj4aGdJ*CMgp*hYio0E4-Rr`WVCy80p_T=5XjDj>v;}
zo1JkRVQcB4`Ic#OOHFA*c-7^kAz?twAW&OYRFFn&Iih<kRVHj!yfJik8Y&hrQAF2X
z+mONUkdm?gbauvvm`#7}C_Cg0%ExDG-WD{HnRNO!RH?I!K=!cm>sV(`PY>xy>x1b#
zinNC1Wb0I+O0p66!1$`tT&DvxX!Ie_>As%`3wW{M0OYbnt9bz$c)#4Kb5PuFO#2r<
zH!-K!<?EG)!eDA+66D(aOs(B+?B<eBq(GR40)k^|Bws;A=GvZf4MHr}k6rD3KNLOz
z3c>w5Uwdt*M6t56dY{6ZX4X@-B&Lc*zA-nk89vbv7?hy42jxY@V<q+4Nvj}Sw;HeH
z4pGD^D-;Hk^U7+0l2>gDl9k`(C6G_(V=&mz5pux9c-cWGPO7hpkwsBYnfv5RQ??&t
z%5!lWLaQMRS)rddLY2(5Fpk>Oads(WG;F6}I6@ZZ4g}Z6%~29lNz5KOuL=~>*dscg
zaeGXti-@wbJV_R(%L<=^rJ~&D6(<SF19##wK|6pl3_}jrD(K@uhViIFj|UC|#l8lh
zLV^7kNt>Ua19=`tP)fmMy6)Nm%X_hafal5`1-`yzyCYR1y_kiSeVHZogm-|1R|~q8
znunQM50<9{4UnveeS#d-J8z6YMLZr7jF&(k7kNgxTcSwLfbrdy{L{OnLZBRCQrY$M
z4~nFNKwMQ?gQT28$6wyGY9t>?9jG?L@M)VqF=o|mV;BS_g_NUXHKJL~tx+`&3VN0G
z9yT9d7UmqA^8L<<cqnD%=Z6lU39~Oz&yG$W=?^ga(#Ry^eQn|tH!v(3=~^s(wP_Da
z8|7cpDw|3hFeHJ!Cd?9jlq$+bu|r~2D(6}!-_vYjtEf1DhLwTi@_8<I@~Pc)O=V%v
zDv9jg1JPMpV|f1bvZB3?K|`$#m1jr3<4cBKtk33jB*5|^MXrrM?^}r~n@S%rM7f(0
zzokFZ3skk(Zp$t$)zQgZrfjAp6-kIiND%`Xg@?>-ui`kL`j`t{9Wbw<XjV=y^V%*~
z!YH^zlM2g|g*^Ai^w9%F@)gM^?y_>*d%~p?OAT8QXAN62aej7V`=-?y3#mi!@|On#
zj2C<H(6Y|r<zy1FAS=6{c5I1pD^Z5q*|SeyUNvp!mjwJm>Sq4E@G1hKBzp=#v&>FK
zpam#$SbrqJOJ)xjrmxxF4||d?sY|$cS|&quH%nnDa+F7lp9V>_GGh4RYrQFN7TU6I
z@l`G8Fq4V4*i{Fim|d(kYoGqwp3EgRInv(Ve%s{-)^*7f%<lldtMS{8_UxlUy4r8&
z`5;D-jdW*UaxOdb%*>1bs@uAQR*=pUuW$JH@B!?Qw5bW1O?S^3h{^;@IOwVASXfvX
zY^pZ$pxrb;Qla8KH1K?TwBf^)2>~bI*@3?qnon9}rTnk$Dw9!CC#I$vs}>ZbEL6xg
zXOu)F8o%lfs04o!beJFz`X%~IEVKMx3~3w<E;;g6&9Z)n4DpWgmsc~>z#d(<gtrW>
zOCu>-&D&2FPv;BZUVmGschHqP{n)jG{x#euvo}p8Fi&Z6CkPHRn|zc(x`*C*+EZr_
z064yBd9mg73dRqRByMBDSjY>iH~LQD7`4xRZNh0wzRa-?>psW2u#5Uo_P~Uc&{uRV
zWwz}{u~bX~gVngZ=-!Yh2qUebXKXevk0JBNI_Bl0Mn_?_bPw+a(pYRD=_Cp9m3Lr3
z;+Z-!NS!3r8_R2x^e=i@U99aLf<q-zT3b6_jPlh)Cl&{UPRo(LXCEj>rbPpU#fn}r
zFndWuyY3IrQg3lcf^4o<vqfWrc4DE5zUYeHQ!9z^_C`a7$;^A8Y3mIgWg+3Qhob${
zq0{J(sQTGMazGPGDh3E!PS1ZAw1%ZXxAo+6CLScV0l>?wDVQGgkI(uj6d<OsS3l<a
z&3a$}AMvh*L~-Xw+#$SLik&EF=RMtVk;m*J?k!JiUrd&Hurld4J2>lk-#M-+p81B+
zD;6C9uDS1&=8#~P6~lHlVRFz|h_WhU^Z-u#=w)5%O$yvwBZ;c+$JfOY^&g%&0wyiU
zSx7#Mu6D>@WPz?Z4+z9}pxk4jhl4dO-Tng=8EZ`;Q@o3R!^?pb-r|U_3Jidi_5@jM
z7C+6nyGqds2$q@{G#$0(t9FsD{Vp_1<8rV*gt{(MhILqIbO*X5`u;~<F;Z_7*^?Qz
zH*(c^z-dj(2z@LWkkWxdJq1&^GgIxGzNFSiS{tqq3wJz&CUMu|Nc@iPA*pp9ME+Tg
z(5DvBWA%GY1H8PK77X0^SusQh^i`%q(Lef~gSDK;R$JB6t_d<i79JM+@@w05r7b)R
zeWc2F&7zOhDX*p9B^{JRTHf6nFacCrfo&6>6K^Okm3$5pO<)L_5yQ8#vbvuE^tH@W
zFVkXzI0@d{!fRui^@{2EXf5iL3bhz3=9q&xiGlY`h9XjoSai@pckzZ7#`3kacSbG`
zZG+N&0pSqPwvw{s`P?+*oM4&fCL14sH%z`Ng@3GV3^FCoJ?0og9p>Tlx9(@Vn`e00
z*SdicfG(vX3r=J+nEv>hnT$$<^(%X8?M`AgR~$O<tPqGZXYyhnxAjQwrHkm%N+<rT
z@=#0=oxs0#KDcYj9g#3aeJS{P^OfZp5i#=7Ym4`%PY=c|BMwV&<YAD;5qCG;`b~bb
z1y4UzWk}ipSx`Enz|Il=p^sTTkDNYL*%@QM;>8al*sgHzOUjX%wsI=}f!IRX*tgIr
z%})v*7D8V-C()RUEu4X(Ucbr*P!qIZg^o@8QZK&*0k%vW9nIXuS`U{(VgoeXH}3?#
z0@gMO%_?re8Y?d?lbrvcpZn2EPsJn;uLBHQMQY7vjm%0S5HTJH^6Or0GiBVomhX>g
z--j<#2h-dE&Mt_NYbknD___(o^MjW|?_csio>Kib&c8H@K&Y*#E@5hB66g7qJ?-En
ztyjR-RF(V$q)4z~(Vo{4G88t{DjWe*)s|X?(Zp#(b@yyWGph#jULFGwUUq|SgSATl
z;Zot4Pm-;LDf@4a1~Gn*z}B+ucM9)iQX=ITa;jf^JU774KZ8%Q#5<xwRz{rLt7v=^
z*l*1=I!nyB5oQ~0i8Zf?+G2bm(3%DoYaiuvw6D@ylf-a#K@CE=5@oMhM=DOtM6k|D
zfJtY&*X6=`UQjNM*aY!AREA)A$k9a=@|{3OqG!|wZ=|)PvwFygbgfcXqqzA2+xSZg
zVs{NYkhAj4mZtJOG$T{cnBQaNo5YL7IzgdF<pfye0{m0=T4SP9_X4MzR7DUW%0Qgi
z0QRvV87ID?r`O%VkhTA1QhRz<+Lw^c;Q(UEWcFmN6M6v<eVKey>~0Ar7``|(@_}Sw
zDQ-J<#sH0yI&724`BBQ#RfUj@<2WG0dUKFckp%4_PujkG8|gn+=z46(?LNKQEQb?9
z`S#w)9zLiOPrKG;+&SXIg_t8g-CG{r4F;+(Np*C&F(p=Z8t=zCp@98lCH{=ZG)rJr
z8o^BmGB7NB|J2zcL4cIeWBDEG;Ct*?w@;U%IQpF^XoQj-W4^vE==W3^H#Jd^WgJZs
z&MgTxMam?o-+~EuUp3=I7hei|y(>EA-U7QT7+4|Z+LfQRM;%Lj2ZTZ(gF+;t<M`|w
zcR}foGW5oBZF`0lAW|pBA3nV(CQi|el(i&|XV#*ue&kSgz?NQovjvH3m95o;E#(XC
zwSFQHb?lM=!MT+ud_I5kbu0xsI?+ik*0#5gEkeDc7>!my&M$+3DFL#kW^`Gcy(m+I
z4}YB!3g1U~WOi)0;2s|c9M1)FbSR<`N<lc^tr8}1_9*B+Y2<x&BvCYR>Jr_PkBXB#
zoDFV@nE{H8QZ$K^2@9CLL8Y2ZBzIZH9bUvFzlOcWByl_6%F~-Gbn@(Wahs_kwWYy*
zjBJ3~>gCuIF)Jp2q>x_Gp2R{YcGl`k`dG|7tQc2@9vQ2~#D7x#WFY1gWF)BRJ4Ir&
zdk5r1!0~3ODNiZ<M|9Sa?e;1rDfcECkS+v9(2j29b0uXYbkD0AkG1D?pYLtyO@gTH
zUG<RPnpevN$u&>X^$R1PP8@$UpeFS5rbX2>Y7Ec+N7Pq_Mb&;^JHsF#(nyzzfOI#*
z&|QLbNq0zhmz0WhDlN#+T`Jwu3@P2+F}#Q8d4B)*1J~sT(R22>WAC-sT6<%3EtuK{
z({Lj=^J<!5-D5o=j{Bcw@(7fUVKv}fwQoH<YiFuh8=JT=tEBiQ`~Wk}v7UjhNfi@R
zf}Y1)S<zSUHHKsARMmP}5Pr1v(s_$j6Tbh_k}!QL%ohlS`KAsl33**CB0o<z_E&}T
zY!H$dqeyXEDYtMqgE;<}8uD2I7VX>ihsQY<2LdE7R*rrQvc3;1^<!o`az;hUMfzg!
zKsxueFN=4Lv-+j($fKZD+!3BLa$<Va2*&5JnKB4rXZ|mD8GsDY<fW6BT^fo;Deocj
zQ72YHvz%C8w8CVOS}t98K6y(R!N_mp*5<FvLSa5C*yy1$FuzqaK|#UEh{ET(y*9J-
z(j^sE_HE39h32HsRNGmTlM*rhD=3^Ht}3(e`i!W-x4AV1JA)avNsdk6igb&C6b`zI
zP$ywE2)E-A>lBc2@@UOiR3Q?G?W(L9e0=rQ$v023V75w6;>kUO7uoPf2=oHD65kyy
zcQzRc_XRi;sODBG!S}R@|G^={AkdPyb`#7!#-2QY*xUW2@8eQOV|?<fX+M471?OI=
z5)^LnVy8u~eU*zIiyl;f0=F|Ch>JK!MP^@PKa(c`nYI*=;FDy^0W?j~Ks8}n9bfsZ
zGRcJ6xEWFbh4qi8@|tt+AIfVU2lA0@QIN>f^ZZ+Nz0AsAHaqOB9FTE(|L869{=a;l
ztFFTzo-y$v_T$&hp=M37SBOH6mBM2sh5sb%ftZlbxXi@w1Y$I4&ewn*>b%8urcSHK
zHu?P5)~zEvL>MD_s5tC|$V1^UTs1U;R>LJc8A0fhTf21ko@dhS^o44+o+Q;qWu8a1
z`_N(0Qz|}(IVX_{H#3dv5iV{J4+EDvfsybL4>#)@+Ao2EAh@dKtu@Zvg^9<0dB51+
z3y}Le3F!x72|sAQgcpsq`caU@h(7FnNrKJj@`fgPq%*ElM&LR`+UD<EBPEu6=XVU`
z4R@^r>s#zApxQFSRTZj#MVhs~u?852wPhH|H>nrv!>eb-OZz2ZYwMj7#<8)nWh`VC
zjM#Ak^02$5jRC=g>y8V-ZE?-2XC!MKzhP;~4FV+uahW42N4njLUHbnd!GVBq<jv1X
zJ81#hVi^9H5=Ym#>w;)SYM$;o1r8d%9U&pyALv0aS;)A*BD$Qbm5H0dSvXxY?57Q;
z0~5PKX)ljTjhwl^OsTYFUIuK3Ip-|~6(40pzCyCQx!kY6B<Mx&X3HLTMlAgy+5F0B
z4H+lp!+BNue#WupH*u3)fJSXesY;AIvG>Et29bg_v3C=d=0fxNLPTQq3LtOkdVoG@
zCBewAtBtekJ-@0#r}F_<F6V>NGZG+omXwD1VY9iv`V-Pe{S+N>1?r7@8?*0d6glze
z3$YaJ1a|VF&q}9YFrCk*D*cDK6$d>EXb>f1k<VC4uFFz({q`$>T1?e1h3<DN0T)nw
zEC9L>3~r!&`1fF0q6Ph!(CT;Mm98p0{mxBw`>{0u7<Vvucz*y;(H5-YXS6>{g2~b;
zmeLl<_*f%nEr_RVx!X4Nb%^zb*2o5wnR%<=SJH75ULP5MG6A@)RNFWP{~R~nb<F!e
z{&wN87)U`8*WnJyS*{=%SaDtYHz^Bld2o9SDVMKTN%wMn;CB@-W&K8!$tH!BBpy(|
zBn5EPgthl2GS#J_RaRxVUzd|Qs$}pxH~!l%!es=th^-)1pGndR7y0L`(prF?fBPn;
z1cHoHH?#z<^3sdUTC9{08URCVeG{(hhSQ-A*Cp;ZbRHsov&Zp(4Gt1|FwQ|Y9xk8U
zT?AE~0N@QwlxLCb|1On4bI3rKRqIfcZn&VVi}Lo?R)gp~@z7zN76&aKBX$W?Hoqqr
zW&}jUZq%{R-D0x-Xb<4JBH(apH6(mzw1KZAjbxUAwDU)Qv;R_PeQddGK>QX>scy}-
zK(w8F^J^Pf!EuaBOJMT#Bd`>{s?fczTUMK)+4*#p^;D^2r$gx7V+xD5C~fqIwPFm+
zOUlNS*UWfdoeRt#8v!`x2g@Vm;X{D`KrFfhD<`mR<{$&jLC}Ey%)XW?K!a(cNxmgT
zlkam{0myzMKRj~z%l3J)Wml99xh#q<sREmNnLaNWKkpR_T#;lyVB2Fg4z7;jfuBTz
zCY~&}sKmv&EzE!^Mkx9txRo2e1~ON?dOLI1HvI*yRJ%zh9#flk`C%CYwdEu}yUVw2
z7tac)Im_ziQ>HObyR7B%N%I}`lHqf%vnESvOZ+rn+8p<nMST5I;e{n7wk~FU*9@aP
z)@A()Hx!jfqj>@c72O#7e0lTmvsVPMLB!kOHV(44R=pAJtGx+@?(Xho8WNvX-ak-N
z8Zdm7DgQQAqfD$cB+Phd@&-s#Ua8Djk^*Lxz>7u%UP~J`FX#y&Z+WPKe=C2GbIh@M
zMslL@Ap6S^#{<yRRV7$cFLg2U%=yW(C-;G(1Fdgvsy-hky+cZLB9Pp5Kx*ZUzJaG+
ztdrLWI)dlFJ+_R3a#;`EAwK_#9DO>b75ygLz7d$$WtA>hF>4y^$J33kzz*XWvNh~)
zFpg&SZ(YK_V1_#VC%0C`1^t)}kRWaS3f*cu_0SYcmD?o*oy{y*v@-4}x?fnuZj<NA
z#5>pkaKpftKvTf%g54IYEY|c{_G$fOpkdbe^AByKTXSjfeT;+X;8-QWfw;*ioN8WT
zK=8r)w*TGl@g6833f!xFVoS5c3qlRL{VjzvE~j$3929LHKKPI~0Q5Ss?e}{2OyjIr
zhvb-p65hb|qzz7!yv~J#dM%dKgI05cUxjl66($N8$9qYlm$k@GILGX{JNjilrG>E+
z2ZY<`T$SVMfu-gtl`|D1qyOZ5qIm%B`x;cS*!@o$^iP7K$^e>2!{NKb^&=uqOFlKk
zEmAH0`wC#)Q(90p9BAFO>;XuP<KZub4D^^l#0M@g0Z|am#KBAMdt#lOnzFCil1rL7
zi~}MxszGt+Oj_p9X*@j?KK0i7m&K^m`~!iI?-lZ*y`#7vWjlby;D?@~?C^gGOdQ?_
zq*FaE)h@AN+t!=o{15+ngl14D2|8^C%*OERJl|7qRhK3@0{Gz|+bwX`exT2p61%RA
z4p3tshqit%ib*mbMUnVYXm0){M<Du%qRM+99xuT_AC%sj;?3VQg|uXWL7sH3nG&y5
zQFFl|j(?8|*eJS{M2c3yx-^?&+QDTyP^|jo0*?Aro8-Rs$f@h~!BiI~ZVbq{=3Fk+
zHCmxny5`f`1C`}jGM9l#Zlx=u6I8Z#4ZqgtBiP^*kMHH7u0c<gK?NU%yA9|fz}3ag
zf$5g^3l{WR3N|&PROXdOeipA^Me6fVkV2GTe)*|sIsCL%4bDC4P5y7kz1{9z)_EEw
zDuDOj1$ZM=z_v&VBqHo8vcD0p*8M$I(A&ZG{caAgm5v*TAuDj*c1r{>GN5LtIDKsn
zuT)#>{e3ARR(aXn=UCji{tl4z<Klx1ZunA-3xM1wLgEcxnl|dRFkaeWB&x09dVS>E
zZ~vK}81sP6R2;bd2u~&o$81bFSc$;8i?^!bOFIG;Bq5{P=tVdp97LV37$y)s1^AU4
zi8Z;orV54_EOL3gty1P*@vqh;9l|lHsR$Y-J)iA+B~GRR(+In5A0uw?+4(eBmi!wJ
zIFLZX_3L?#^6nMja9yC@WYDvIj~Vg!%|kfqC4g`g&R6i(<&y>aK|MYg5A$+!Kb>mn
zNJdi>C19q^15ODsJk?qEwacRw+u+ZZ(G)e=F9%cRiG0d|VmLBB5D`*)S&dfMP+Z(Q
z5Jh~a);5>yZ~o_L4~ZzqApXaZUJxp9Mrc4zKMrRty^0lBm&)gYh(v_ZaAAL1jFx!)
zKbW8lS2e&q6r;WjD1UZ73{I2cfMRW_x5#~eU=_y2cH>t|OBn+!c8d!OOX&C9o07Qj
z+SzJw1GUFv=|0t(qaoA*wBCCC#20cwlSWfm^TkWQXfS7`b<WPts<g{%D$L4zJ;2dK
zEbq7FMjIO&vu_OPF3}z!A!5+ALc``$zcRpI{$`|jPWJ230N;E$A=C4ZieQB#<{1Yf
zeBaZBxoGa0J34B=-}J!m0I1!u_w%+d?uCtONqX{6zDy3WyjrVE$DV8uhfS^UYS|5%
z7fzx{uL}+XvVLRjTvDUzni_*mPE1r>JJ%UxYi)@z6mh|K|34}3$5hyZ?shC*E`TR#
zokb^A&6!&YhEse0XFx0+ejVQrTA_ZhK6iMl=agWYbw~Tu=NXDysEK<#x`ewnr&pk~
zqo4-rJ~n2#()+=(H;q9?CJ9P%by9rYZLS_3_e@(9htyyWyrK~vPb<YnOwA_Gqh$kB
z%NHmQRU;01ij*bS*QFpPAA^z0m5dhA7nd?mck;TTBUqRi84U?QoEpHo2jQ|~qF)Q+
z2QrjMT2<aa=abWZa6T~wh$uaPuIBKY3eWr1p3mzf)##(oNL>lVXfT7ava<S^3o`_L
z2ROQ&L<HWNkdUK-VqZGQq0w%^Pe5}2XaQSJUa6I1>P1k!7htoa?D@}y<x(Ejl(X*@
zIB@FH1t4<Lepzm<*B^}X2~_WojH{qFtxp;k{vya{73i1X5aPwrT<>WD*C;E)?wa}1
zHcP4;jI<Ej;{jXzmgy*3Vo#S`-X{4q`QHsz7%Ayrxv5BhXjTIY8wH)2@-Y2hF)aYc
zpC#{)N>~dqbH2t^=MF@Q(F7k8z6fXWqN{=G0M;4@Kltz;x*IK!@rBGB)DW$Gk)>hL
zF?Cb#0O4N*z_MTidvDriH{<JO6^%=QP<8Ap=A;G`9)XO?x=}HSAg$V|fy>=eI2fA?
z@1+Fmbyp%!{NAg%kS>%C+gKjy`7x6F{zv@lkTM2l2JLO1D9T?13>f*f5+#dl)}#jp
zm&t6$?#){$BMSNQr<FwXcLsQ<%fj39lS}puh`wm_A_%{f7OfTycvi(5CzpsF^N#59
zEoTdOI!n7@b$qk@0A=p!3Z}}(?U9ASkyMFC5VU_lIvQTEP5NT?Hd_l9@5^86x1SCr
zags`>SSh(Ki_&EXWt{`llT3LapOs*kkE8uEli4r6M*-p|6?cpk5y)r2;^c>-Qc`zn
z%Y?6B&}8Z#CvI`@_lU6<8WD^@R6N1t&-6tQG0z6HK+VZ$@E873z%(*yHm2{(b$PCs
z8irL0$-)08uCK%!5#Bc6YW;L21VCYooxXQ;dfsvL34vX|*f>r`*GtaE@8#%FMVluZ
zH`4WwCEX7CXm;Pui>Ozg<A`f&a4M!#B(lz)rBMFJuA1*L*&Ra_P~%&!BTh&b{);<8
zK#JoIbmyPQ2m+^HkO}(cW2EB0mo%`ze-fw~Sx2Ojj4;hOVj4D5;`87(J(pJ?e0o~Q
za28fnVju()xNvoe6vo8@ZJ?(_G5BS93>`jyx=>@QRkd$$fdgol05+Q_1pBBvaalwy
z=dH_8!(MOi?~C&<QXENE%J7O5-&NofFF((zXqR|E`nXqu$1h;0T0R#<RY9(Gj*I()
zWYv8;)F^i=|L0fr7f-w1>0O;ktMb-Z0Ao5}$q;t^)+4m=SuZQzi1&8kVB_~z1J;??
zANQ|v+=kIkv(-653tCZC{Y5cg(q=EXalGZt`Y2S*z(10Oj4j3J(#U_X$~qe28GbxT
zqT`K?g%;}CP+5r4Q~+Ad$ybwJ6c0NPmkWfd*~ZBOD&Od}t?7Na!(AKjKQ91N-q#vu
zfXy{I!S`U$ug=Nz2v(lfs4w%6zT5&Z6!=9>SkPTH?qP9Y#|-UyEJ%qRu}V-2#FrGk
zsLlI*`0pqo*WHS4<RC$z4uf+OjnPi+l{U@;k8(Jma2*zYf%Rlmd#M`OF{hV1XU4<a
z2Wx}aBS7`lOzP@{=K}c`|HBmsDkvy0JS!R6n;qu7@BjF60!@#&L5!g~4EEN$B{8DU
z{`KeE-I24Mx!FdIsSgY6N?w^{1m6t|%FvX(s$kjM`o%pbYu<gi!_PhL--6gCmCh3P
zy_d4ru&}Ux14EjGZcm=Z(=6cx0SIJrO?9>K-*}k^@&&9N3bwJmH~?%{i<yNu>@&e{
zNAKzW9?S#cYWw)<Kd5*+m<sdRzwu*$BAUh<oK{t@xw1;`OF^IBYd6RdtNd%o_s<js
zw|F}?c)JaMy7(J=(0iMcU4}3CrK(=7YBL8cVh|lu+MHvbw=vsl0LA?&d98upqQb<*
zoiZKC_JyTjMv<vaA#y+J_ptSySs{Jv(&K-j;&uh_lSytINfolq44w3`bQQ<9ZL6n2
z8<%_ZpiWT-J{MkZRfmjgr}VqiQ8xI1v;i>O&HLwb_yRl-8Bf%R{S8fx?X8{}ucZ5W
zuJfLvWlU_(h&(F2DCws%)rp>X>XN`kg75gD#FDVs4jo-#q?lN$>{Fo9R)&Q{+vc6R
zePWXShnhZ&ZuM)Op{AI6oMuY`#X$YzS-XVX^?a^enTOO?`SsUqRRPIjPDKNm^rcSr
zXS8y)GG{O3I@dGd4^ZFx?*rYovx;W6pO2m>aT@L${QUcmN#HPgk<qDGgKL(h!(VLR
zeS>n)Z>569r@kBcc&LICXk|=;>n<yMll%5y)ZGrw6Ef@O%P-;$A5zX<+K*4F{cPzD
zCX7;xZ${6qk82AR11Urc+-8)vf1la-RsM3;YUW$C8_%!g#3}b5cxE{$7-`4Tw6$@k
zrswi@A&Nzo-=qT_zSv>Fyeuz5dUyz|{^&tR_0}0)(gasM!nxymvZ$Azhd}qwm%t!{
zlEMaKdR`0qoQPPeUjHO6T=eX~$D#lQ4L|F#fyCR-P=xOUohEU~>%Tw8bt<g!b2)c<
zKPnedz_H}GP5#MJ0lyE^)UF|%?}LIo>|cq{M`>4*SEnq`*oEO!wK>A<fcpZ8WME)}
zm@NOJAWuLbJQTNmlp|y74~cuzcFsEJHJ{(us4g}|pr@zDx0al!VbXo3#Pa}0J`|zt
zHel}@ht#J7f@~%JOJUn+hF=?Ioi&Amog2`<lu!)nk+c;bBNfX+Goq6NC*@h+=m-#4
z*;`p-nSGjst*=T9jsNx?o%t+nzc>NRY2PpJq)Oi{(g$o>fEmN~oZm_GTwR3ffwK-H
zE6|$e6vL1mFrW<Tz_$X#eUm%l_&fKiaV5DYhpN{6I6)sV6tQ&ti<Y<QLL;Uic;WOS
zRc3qQhgd9|=FncXhtHRUHzGM_O(sFjSe2w}p)0q(xga<?fYsql&Cu(_38YXu7*<D1
z>d@14AY0iV*fs;vb7S+RD>gR=GHcRJ_$tKC2=vIWuro3N38~T1U+*tCq66Es^bZ~Q
ziHT3%Au|EvZS$sy`=E^y>VRk|I$iS*{03HuVkH0H&F2G6j@KahmqA}H|7s$)=E-lY
zlf8TvitS>y=tUXOAJFYWje@mFlCb9?fQ$iBRlvR(nvce<ENtl5<S;UHHQ1o|MWt>{
z(D84BVXOyR%?K-#;y1jCZzQ+u;<1tHv02pPM__O-O}TkLk^B6R+PF<XK=yy~q7HGI
zvL!*KltT?~=2vlV01}2a*oH0pL&+fX<ht)kYLps_VDoE$r44YMc3<T<Z}9Eaum<#3
zlW(ydt7LNJ6APcJ-o(H6?v-Q0*z~>)P7Hr$_2pVrl!YC$_qj1D$RLC--M{Qg88{3|
zpGnV{cU<gpqS^ijRsgB{A*5R3IG1d!xp!d4;wBDI;!um^U0C}iqd9``F==7KdO_{W
zvSqfN#q~5Td)G7i8P&Wd3)fdjeQP_R!t>H!yy<q85ir|y`QPvK9%Pz-l*#NUH=RgL
z1R-{GIlVg<2s@*>+O4QcndMs0-9uG;jnAGS?-w9*)<z@{0Nm%Nz$(B+PlJ8mn<J^7
zt6$p!rQD1|H|8duJCOgu0Ty(QDwr(drjmdS=QpA5W!}RLHWJYeJZlyoXi68>Ry6##
z16ktss|0^XIPQN*_oE;XB#F%k8N80unt!0kb&<ZOr=ugF3@R|vILAVfJmfM47aaHl
zgUaw_$=IiII<|DZWT$>{iS<T{$8Bra@`~t^&t&ao#CD(2wVT>k_tT}122H9U%m{1i
zrC_mL6W;cS?0*_1kAhkuWMpLLTQ{?{_s^{S!tHtA;rz1|pVApWZYzfU{7IiHa9n0J
zo&$(}0%81+@o=i5+S6dCylzIf#?+3u3Gf%-v84!9N5(^>ENdBZ5mP?QoZV#VgcP11
zc)E;xK0;hYkQP0X*t8>Om(?g1CNChzbUCP}J4yjsQ=3!AL#yw^2Uku$SmX3ROa9--
zMNftSR(BStDgJL=eiKxpniftj3{7ZnXaCh*X*-pQCUUzu$Zw+B)=l}Fa#llz+3Jup
zNJidRtFvqbymI&B>z@Zm2;<=J@$oUW4SxI8&j3F^zf1?1PB!7@fnZxOO-|P`My~)f
zx=s)9RhM6m0CsLH&^@d0f6gIl^v%~(FS#GxXz916fJ%r?m*4z*UIPtj$>l)+<ZrQm
zVCjMhY@%ogeBS_6$#TFn`&m*-C@BymD#&=ZAWyv6Bz?nDFy@e*jm?wMp={Y{p<qIi
z2<9J{!n7?F&7bJ70}Q5$caF@a{MgTJm9|Bomv{*{9^H9-Kit0r3!Q5j2&<xzjiO!M
z7=f4HM_o53Tg9!?4t^5Opk)O>aRVfMueop7f9K{S@F#rL@-xaeR;{F>fXa}(gs;rk
zkY2R-Aj`8o219^<U_iYvc<SrB=b*h~==Y{3pNOymbFQsq!3qxtrK1w8$^hls4qmFM
zGp8@H?lTr+S>ZK+-)3W69QFpv51!Y)Nso+7$<2)R{={}OU%z)buL(TD1SjE+49TMv
z`PFrhF%4d}Bx=4R1fX78@I0CC+s?gmqLU1=@~%NlVCMwRLjXFQmHPw(7eTALo^HL{
z1F)H7gtNJDRPf6s;h|tp3k)vEI(}s(FE$yZ%)0qA#Um>IBxtfg*?NC%6(FB2N*lC|
zXpw*>>Wr@6i!eS)G?;$Egls9Eh<LxOq->)_SKNx!Sk&6%fr{O4vXr-JWqYLTKU;gE
zcu}U3UCi)y@?g+4!}MVn|F_Ei;A%I#U(>X{*54MAExz6?EE#r>Zbf@4nA(oA4Zl}j
zDVd@jaoaJNq-zr5K|5xdm{8GiwCjUS6tYef+MKA1O%6Aj)K$0u0^>x0Wa8AjI&H_o
zm!<^_k-<wx1u<&UEX;sDNN8Y#ZD<BMaK$DCNSvPl$3=Lcpo+)im%V_jr|3RBI}4bj
zM+02WHDc=ARxu(yx_)C8#Gdb7KBN-j7)7yf)%DKD#7_i1B4dlaP|*}SCDCb<1HF85
zx>h4DVKDnG`rva3&K8V}vF2;X;PsGZW55|G=)FOFh@ljDX_8gm7UD{eJ8cA?9wgFS
zp()lSlZLdrF3B7ar7Bc%-qdu0!LM7CSt^Nt%R!N4{}uxO+lP^Hf!CWC-{X;=UGIhO
zwC+x$bE|$aD$(nhV|4*~;>K%hN+;|6AM!X{zKW*pN&a!#NC_8iBh`;?@oN^krVBt{
z&bIXR{Kw=(RxpMHo-v0jgZM)qF_<<-DsL?K%SJl08$0zWz!C$hk6rp4x#Z{pNDLx}
z$62rBCe-WM*eT!%A^H%BazHpNQUzF;K4-pi?&CSZe6mVGT8Om?>{y`Fvd^T<^3?3Y
zEM-RR^jd#If&Zcv|5!Kit^F~9CTS?g9r{4F=wiAQn?bzHxl0^%)bpJ7ILE>e0qGbL
zj^`Y4IOLPY*DboP*_#!^kYZ2$`g#CeemL3#0|7q@l{UJ06}|vl8=Ef1%VV#$79`x`
z$p=4S4FAUM-0fU-=O2ikrCHs&GMC5;*1<peTOV60(i=TwOi&f(a=>lu?$PY+y5N6$
z3IJqYRrA<{1dxsrg3^V0)lauJ50~>Xr4q4HA7VZ&4ZDa@v1xb9RC2e*H%nJKH^zK;
zdv^3vp#2xNnsjx!R0S6BVAx#kPaAQ35<>aVFjz*v9A7BH@lkLl3?Irz&7SSt4v0|R
zlKk-dq2u!~%LJ3YRO#a<vJ>H=FhL{X{qs(|TR;uAP~9YkKM*qZTccaFSP=PRlopY#
zXIpN&wnH~q;(7Mn{i=E(m$wi3AvEmYZ4(rUZsihs=i}|2=9az4_9D?|-0JCl9VTo2
zl2yw@A)kE9ruQcRFsjn=nAO`)YvMTyrS|6t6TL6?r~Vty=kNVSP0jf;;@jfQmO-<j
zwPBT@A?DmzE8lTjV<W<@VgFVJ<yt+{<Ci#^>q>^)$C@zI5IJ1*z`(~$8;@z|2=M^#
zjQ|{}a#8Vsjd-SqnrB)O7BWq`{@Q&uxYQD0SLx2#*jYr_KRj(PtueyHuX*Mj@1Qin
zS+XtEQs$a30Em_+27{BQRx=T##K3R*BqVX#C=Ia&KNnrzXJgS9$+29Jsox0-NZRoh
z*1~LCDD|=;UP->xlK0eL1l5d9rTLd_cP|*ny)j3m8BLw=pRkWTn4KVOOuxGK7Ltao
zKL<Fu52@@Uu=_uGC9mJJlZkcobl2?o<^Z}(IH%*O-0asyAF83M1Z~dJ(Z{63X~@Q_
z>rIXm8u#Syybw=qBB*s;;=Ya+Kw_@<(d>3ST7cP#i0t<#eYLZua%$leO11iPvh}Y4
zetBr1VAq9?NgoXtw-XuPCJov-zUszCf=|HV!$lsngi)%fl3|5=qj<QikX-M)(nT!)
zAFAPir%KZ&iF%f~k~ATqSJHYfTNTLZD*py}^mq8O1`$4s!6XG`3}z)QPkDL}mpSfN
z(Q23YiP$YVc9t5ABMIq&yrKe{uaSHnjD<rEV}cql3`O@einYy3i>WQB#9gv-nK_vV
z)!lcekD95tZzULhy(DC$u9Ympe*3>uI8?TM01Yr9F6NSaCKaU_kUKTKJ{Dpl6;w`}
zumz6?%$(|9twT)0*Ts~dNaBhE%wX?}%8^idKpw59tD8hSb~f6)KyGE<VYTe#Wxc#S
z{3EPk=1A{vJnD9}@2_36<$p_KK=t9i*w-##nv2K|^Rr*O{|Ont@-jJ8i+kAQ3|WEu
zm<A6rRC!cw6*j{+mjZx)j@9nT@z&Mh)>ojSamow~zV>H-kS$Ez^_aEk@c%(sbR2Mv
z1FjQ*Li7d@)G<bBUOUtz*GYbTbGOO$ZG<2ZTb<ZqILqK!BJ}hrU5;0Udd*cYHCndw
zMPyg%!tT<J!|VEY4eP=lX<kvs$M4}&H`Q5JHpvGq78{~h<#6(vCrtl9V88?RNVSJS
zqr6m=+|SpKLtKD+tI^duc?&L+%i_zDHs<98kTz5qgVNH-7TPr#J2d<a+Ta+n8p|E0
znAMYcokD&z#)g)EL#Ul^awxeRMreC$0GfzD00Ibu5rf_qo}&s0rRN)=qqLscO@lr-
z&VYGhWN08AZWbrOi}e!Nm%o_Ath;fN&QbD!vUNiL8+zqKrs|XiduYYkh|e~mJ{CFj
zYa0s-Il^^{2?PsnG?f?WGHBL(x?69>95j;kKFd8&YeO_<wmms|XRO;YQJ{d+O2Ki+
z-}ak6$M#rvFj|D9wP2Hb^ZL@=6*01k2^uuG|9$Flc9qNqH9!767veVG#yKXC9&f$T
zw#PgB?+$<1W~(x=yN?rB`PDDprfvx-WeIx)KbxeTL*KI#=|Y2$IUXM7prFpo&CL~8
zHX=akKX^H63e0L^dC8|7D|HeI4HY$kp>$XDyb>NidEE;9b1Au?yTL!EfnF`4Qv1Lg
zy(=3BtdChNh>}pV@!x6(vXLeAfQksBlA~weW5)H7(+D+;`!W25e$;kJtDruX>_dXT
zgbk`$d$v8b_!n^01o)uS;xHjKn@his%K{!o#?eY*Ghf}0_QZPowBoKO7WPVW(Tu3H
z7H_`#l71|61vk>ox+(d8bCq+K8#z02ZespLmW*D6r1(3#(~EXI<#x|kQx}a!Rd-fL
z)lr;me>a(8U-PW#e;0O-5)hBx2K8x=+N!E5C2|=m$87W7N?9Sjx|^j6la;KKpYgPp
zITe5NkH?x~Ex$1eb)vEJslV723o%v_7d8AgFkMyh@-S&S)@k~Y(z@`=aC)I#Z~^eW
zy>L}w;fX5VLqH>^dcd*gcbFvopEy>-7AWtZu&5JUbf8;yabdHhlZ9P6xyV@a+*U%9
z{JZDb+k4#a;Lv{-4A3XMasf(VIzbEGb%5W=fu|Z+6IH(OBa>mO+f01ghWNX|t<JPO
zXD__8RG4GTIXS-g!0$sb8|%$d@ZJ-AewxmifoQKY4pTKa#jjLt^gJV#GJ!ay3KHC)
zH#K!|r~H<Q5dNJPu;3^E-rm5+_?Q?NY)WiRaTZjH!4C?$#VB7-5iOZkw~71u!u{nO
zw{g=lis!6$lsO;6i1+>71;Bmb|3O?{6M&Z}AvW31lX^1xqVh9P{5VCoTiWq>0Pv!r
z@D&N25evh}3=RQ%<?|&5Pz@HPH~v{E6g06#S+e-uWdR~>wY)15M}%kb@Z#u+feUXY
z#c9-wBJr?68yHp#2XMgW;O&r5LMQ0Vr)iw1i)eRlbhJ{HcP_nCxDY43ab?t@g!L!U
zROS=>%Q^+#4cn43G`7j~<FjPfzXT&8+-O$&EAxMCKd6LQJJxhr@9E)Jr=R^f`Xl!L
zy=Xl@1$L>`*$AJ-6UQGKeSviNi+#ENHJb00*B17Qya526Q=F9fKi?&O_cmOCd;Iaz
z6i`i^K^TQx21R7v{Giks7<5f@3GcQlcL-Kt>bYJ5jEHyu02Tydak85XJ>`3;`nLQ@
zjl@(jB_qGlC?`PFS}{v}2UsWq_S7(-P)z@coUlRJmt(|L%D5XrTYQ`JgHh(>y8#pr
zU)5+Oe%qFU{Hwf%7|nYy-L&qBAX8q7z^9%qz`E5P&kE2TW{U>+my{y7X3|5CYOl3^
zudt%d9BQ5kxPPdt5qsas`B}xsUGJ@td+Y73Q^ot93nOr&k!bNfnMf<Iqq>NWq?ZJZ
z6&Mk=!#cm>|IJ5VWu(&nQz6e#ruWFL>G4@p?ev#gi6$M<B;?{zTNAhYclSB8jR7s{
zE#>(Ofbi<{^xs<07GtyZ`29&v8kh}7ZP7ZlCfwU1<@!58jp2p+@Z2v-8T3uv0FAr8
zfD|uA8O6AX0U+htsvukXbSx&MOTOre(m0JmT?jPd%~*>--tt%@13iS_fRPB1v4KSV
zU7ZEO5zBxQ$fibudKj?idJTR!Y99lz=@M4ZD>_-R#S2Xh4GQDnmG^!V;nc;BCLyIf
z&L=uX@`h`&A8XjcqNs7pKL+l<8gp}e_igr9<xg7lP&wo4)2$VN3x!~2Pjh5^G<ZkJ
za~x`M{l|+AOC<H$`=x{yelB=$aX?|Bir$3#x6Xu#C2tdl5Ei%KPRB_2z0TAsT7<In
z6Ldluz~-T)*nM%<K!~vZm~wt<ib#ebL*J&UnbdRu&>3j(fBE?Dm>A$5q=1Zjcq3w}
zs^d<P{HOGCh1W$V9kbv4Z7ObgB9K-UUcJO@puv{GxG6ASbxGX4?;fItX})~Yp9yWx
z%3e`(^`55@<Tvks;-beu-I^Pf6u+k2spIVZCSfH41_lfrvSBvIGx9Qg_K0!o{C7#D
z`4L|iOj6}iP=em^*0B)A8$r08U1D*lIGk4`UN56O)Dux%*}d{rO*M5t>CcnFMB+3Q
zV2i?SfGxlEWN^c;6&}7fTX%7nns={MZV+aVo$mYwj9B_T3Iz-`spdyVkBMjdeiHd~
zZ2hiWd#tyMF@_!MF)-^BhoO#E`TQdwL9W#gqPp15+FZ*hzD=`2=tQqCG<%9PZ>x}}
zr{=+5JXp*;q&nfLZpp(}zr=QA>x%DP(~o3K6EL}X8)k?Xm(NWB_kmbISWnl=?4S-F
zgDaIQV<?gYzo1vu($bm-TtA*Qm_!hM#}b}@?(&0=XC-d3%Vyrm-@fHcg8cH&*92Oj
zFhLRp$@Yy*uFnSTo;X2Jh%3q<V*NsnsJ|`k=^}o#30mUzyP_KkZt{eOjN%L6OY~t!
zfygB4(R{*&w#gF<APK^t`S_%7DV70)!B+n?B+zR%VSQ(ztaVs~uAFgfYF9&qy$6AF
zfO#SAGHp9Cq(f|$dEW7@y}nxR>)jsEaByjC{f=y9;g-V2Ac|niOYPasgXr8FtWYj2
ztf-2d{nV&(D!uvn6?*x35N#|8;K!OT+HK_Wm+=m!*QsqI^@&lrTpv;~AXfT-p~rG3
z>$FZxY?@HRYY{qyJNq&?JV1w|@^hMuP$+e>g;j8=-%1Wzm&f(G`sZ7nX3ry5dyUIP
z+AIA?xLjH?bEv{=Yp#7Odx(w6vc{Np(u=w9X0prdmqz>5KZ$1TaMJ_6o2seO|I!cL
z_8ge#xcXgt6(RzxV0Z93VuIc$m}Gd<&?Oo1O`AT-)U}Ofg7J6BlRlWq!<|BfH`22F
zf_hF(4~as3+l~f6)+}H$91UyiCFz>{letO?+vk9+bNjdrjXHKOGF9)#WX;?BwspN@
z8Al()O9@Veq_w6;XC=^Luf-j^i?M;;q6G)7)VRv|$(-E;xagR#itd~Pi+77IPMl~O
zbZN&Z@nq)M??6`)3}0z-Rcf7`I__j^!YJAoVZm(iPk;fIB1APml6P9)OHt&1<sH2C
zae(TN2V9y$w`BiAiDmIY^VFiHK6kMghhB{)nMtRla0?f&sFc$2UY=`*aSxenxL4-%
z!lL}tL0wntdWH*itfflApKMJL{s#CF;(7Cd3LHuOz#TpN(Q^DcYG^a<=5yIr|7ueW
zIY);YYg+V;F@?9^lr<4brN66$r+jSDm`YGTQfPH)p?9!!h;BF3;d2{N`fp6<S>`7x
zr{3Qzzamotcapyo9LETBp#id~WY{&L=8t%dRJN+#sWQ2J)gL+*l2ad+>R4VAK>ztr
z0dM*rsn4_h!li6btXbQTEF=7<D3yfm4M!BJWcyz|n7g2$L-gr#pg%#Zv+;XBaoORI
zd7366FIjwF+l0v2{@DP)9@r(KbWF7%Y(~nDxUy#7*l@=?tDaxT5zf(9I8NnP#b$5R
z#q8(TcX8j>*Oy!Ea5&{VmVga@hsW;nw-L&><2}d5Ov%xIS9#kcyJwkq_k7Rn63Zyq
zu4Df)r62d~zshC@uxaHt@{3`bh(Ig~t}Js{C20@z$(*%28!uKkLa*%QxJGdFcAxZP
z4=UWg2YTuj4#Dwg5N_<!@tTcp@%N9`zFxQJfHvz;X`bMrpnt)+oIfaZD2Tno=D(Jp
z492A35h1LasP~oO>zyKcA*`NLK&PC|)4ef}n!sh;hAWZ>AcNpnBMDmwEDZ^aU)2oW
z)rfDl3b>!DOBdzReqTN)-Ds3x7tvg!_f5B2D6{ZJJJDJoS=lGht}yA8PVYwFC+I=}
z{*oPdTcsw=eE_i5<R+N86Pr0WEugbDlD{iKw#;B4v8&LNwo0yUv$t+0fxc(P4skx>
z6H5SK`CN0Foqr&ay35slx&@pUN}Bj_>9(I~c4)s;3qft{T>|zN+$w~Kh%Jf{+0F%&
zjLcfr#m~&{Qb%d0Kj~fkrAEBN(ERUA*nOD;9p}F({q^F(xA^Q1>#wY|jXq=mWyyJ~
zR*7xT%kvedSzzho%zkdGY|<=@zY0lrC;4jyhdeWIF_p{!MS>U9EFGf&deo@DMGSZW
z=AQVtH%+ddyg9P?Nkhy&Bt`=`%{2v-rEhHE6*0<70VW<$fa(_iEK%TVYPFS{nz%u?
zJrIn)kZR9MOC#LPg<Giyu0OE-?ZI?3AC8)4%_GkqG$uzY-BZjul^xBWr)J`>Lsa@N
zD~nK8^-&70*6MoK>jr_WCPiDy0SO3NUrcR%6CV_XmI(TlN7tHG-9xH<rg(I5ZptQq
zXS6!5GQM_UBL&R)_a3NI8}eG)0<q-&dF~Aw9Ga_I>29^p!j1otzXK2P25d2;>K9{}
zT1SuUe#6Cq34Vpge%4G2GOPU@==Df{Z_3C_{~Jn~OdJL2on%@f&kKs&@Hss3kRgd*
zYLq`Tl#2B60K10jsGqOXG_KvBCs|jXjsZh}ZTtD+w-s_5UT?XGw|dC}yd;Q%aYrQH
z&6aL8Z;!5!&J<IRw{5xM4U3Xcx&C%tgy%ohC3+Cs;|`nt;r^{x^bc2#q+)x_V*c?N
zUWwE{u6w~4R#``MT#K9DAKi?)V@0>A{c|4ZV1Wt{?t6YQKMY{F4`Ve1@!fcbvK3A3
z!K&*u?sX%3w3gW90k*ooM&(3yJtw2V=6|%5dPUeBJ%LPZhdFgQC3pt?5(@2E_jnUm
z;v2900iJq0p0W|~Afsm;6Np2VFz$ib=1QYFtFUh`CwzOfB6&c?2WZ5sO%7FqUX@EG
z<S#O^4`;3RT|_pBrNW_hpf^t?j~^7qdV@T54};P$hsl(%MGlXS0UD9pAFC6YXd=|I
z^KNqChsXIS3SuED8x*aXe?5`3Xj2!a4TOXi$i;EmI87sIuj7URRFMFZl*TK65_6JK
zUJH9UA$sfo9m|1@ovHUZE;(rM>>e?$Hz?{5Ifzaukplx43~is(fvW@(^n*sIr-tmm
z&M9!SokVicgtKehMX^2o6bjHgfd3kZbRK%qy{jiMv*O*Opg<MK8y9wHLns?5`amjI
zA?NSEk`$vU5qy`S`lDW`x+OG2=reJ$9k${$pMLs1u!rXXf8TGaJq0HkR#}Q$Zv(K|
z`Iz@ck3T4G2mpZS7v&sa2Psd@wB{>3Q3<B=F@mE(k$72;MPF%YXk_dbT6#W6=xO*K
z2oUdCh?EC1`(mrA*BrhOXo}PHLIzR{vWIB7+C6{;%LpDUFc{^-i*7u2831NQGnO)f
zVuIR@!Sm~l<NEi-Au7%g@Hv6%ya+JW>{#-Kg$42JPg=mDf$KgqDGwVLegEr1Y+Ju$
z31!llivM076TK8LaT@+ToW^xqhq`VIhJ2vQ5p3>_v5Y2yNf)9sYnSK9m?NbMW3bz`
zw>=->p5T7c%BlI3EAOdHbzG|a4I}7!YpgK74$*@fGh6R$`ctJc!Wm?foYWnwe=@PL
zfU7S>3(QJd0=XywCO2h+78^XhH*PZ*nCbS_<FyNulfZz^%)lnMBs8#e<J1wprAkbm
zt&p;bY<owwCxbbM9u2Hd*MvbRl*j>15C`S=8xmb&UHKXLh$Ol2{HL?kDK#wSSShdU
zVt+3g)2P!sFZ;kH@r5{mQ9V;yX)48R6_jjRje?^(hNAJz2AM9%`<sRPO<BR~Q`_6)
zFI{xZU<f)bqtlFevfC{g@1H=6KlP?p%!hXJfv`o$w@WiaLYn3#N6PKUM<8$ndi5~z
zzNm+1wgk}{a`^J|yQ)kdTHSh=sRrsf3flU6X90S&V%e`tVBjR*xuCXnVfw>bYuN1R
ztdb>@`@{AG{486=pPj9tCj|J{An2!hG()7UeK)p6{^{HB0I+k}R#XK}_Cg!g*_X#b
zBqyTr{B&cu3fU%}n%UQ{efhXptK%{cSG-0LfZYt+$;WO*m(6wZU5-hv1vU$^?yoyi
z)Wg#O!L@fFaR=o|inPKu3|a=KDQ3<iesB3;ztg-eer!Nu3g3}4MYW~vnu^gxC3o4v
zrvcc6mf3#ia!0Rvue=T;jWV^fB7|3gk(nHjZ;$@Abq)t->BiWZ%LT%8A<I*uN!7yy
zwZp^(uL{IE@v!;oScq73tDRIiHj~@^gEW1N?2ICDd(vS(ZE*oUCrMMTP{1SkCg2FO
zjXD$Al)l4HKjy!iJwI4$JxkZBczs#jNlOI;1DEEbRM0sPigA4NKhgtR1d&rWO&14M
zMsh~3FSa9KG55}Qo0cPf9j#ERhB9(j3aPEO++YMiS-{x<(J8YNn((eUd?=k=A&2_0
z_{O2#9-kBF-{8*|dTTBS@7}-fX>CV#E6`bdnhBubBv&VHGH9l`HX}}-2?f4I18)6F
zoRCAm)QgKoEhc}rZ*cezmt{IEFyt`<t|+GW4)S6HB}RM-f=&oqIw%}Q>w*WwJfm5R
zdou^1!)4al!o(=<p(bno7<LP72X3b`YHh(|I6;OOlAlKAtac8(CkzpYDDf@gj)tqU
z=-w5VUq<;Xg$^rGY=Havti8QV;6Dq3f*JQfCEzY>pguEs*cn@S)F_ph1n_wOFm;2;
znH>qSV8JzN^c^WBm-9lYfU_xkMK(Nv=O&l~mrnWz`u>4oJ4$+zEF#g&#2wPKW!j!v
zo!w%~n&_7+?{An9n>J(oQ9|$ABhdAlY&xVN?-@t@#ispz&7QXaTvV#IwjM#uzXhCK
zo?@rX8jtB19ySKEYRSZqLVa{A54GdcpyV{4JtZE^h;7ihPyD6FTlnk*6$l(gq%G>V
zz*ffgx>^#gw=Nnq>u`iP{y}MH@fJ*p@e~I~)Z%{S1WIXdWez4Kiu6M!o~#d+Sn!9L
zhCvI{T~3)aORci|dpfUT_-h3UC~es)GX4pM>ucPDw<^|c5s`yat}~&7=%*SqhO@(t
z2MK^lyZw3fyI6BgnpW4VmCKkFp;V<Mk{~wi@}*VNQWNKRR6)jShYL!TB(_cGrzqB}
z{(`o=VLd2OUIm%bpUy0EQ<{mxRxvM#^>J3^7|v_*Z&dbcjWYaP3a<3xVGED~YBU`$
zF_P|BwmH`^C7}~u?7M;P;hGC|JtGKuo>I<?9a7ky!;N$}&J!g-CV3VS13YmtZsf&U
z$%~INg)d0NfYmG)bjiM=G`7LBe9e)n_~MmVw{5>@YVFghqc5SaVxD4l_@CBn`Ptan
z+4+U5;|T_pq1M{X;NyhYDLRbWe}0(IqOix6)oTxkU)r{7;a}{hKA6s~f9a&9_;<Gm
z1$nZZZEamVJEB_QYEV!WF9w3^Fno$6hVNbE32OhulB9vIc&@?(mFvf*FW6f48v*;Z
zx!83ayv_QN#uh(c6n<j$-R|D7Y^vo?SE9K+*XC+wcQI7-ZxBXK^MV(1E-IVOvs^Z;
zStQg#cdI1ix4kjEmH0uxqbDq1f^K{*IIXFfUQ8ES&@B-@CNsScJ0GqoWaoa4M+2jA
z4g#i_W8xp=sZe&D)H~u`^y=~f3yKN1yUMX<F`afcdJ+S-=Tm#v)(Pp}4iG7Ofj$<V
z;?SLC>ka<+B?@sHX}Y_h4&?F5mLL6jF6J0@1v<v5OwL_>WLE8IVIA@U-^gYWcVqwl
zN?U}@pz(B9o1Pecch@&vAwB#4p9qck1bN0gAD!OBTHR5$9Ee3jkP^mLR+}?>ek|t=
zSBmHq3cyfw*G=smGkdSyn}C#>loMP>t+2@>tfl!+w>R$}mA_DCZe~F9noImuc}Xla
znfxks7@(o}Pq602IJSwh_WH+7x(n;Hx?Ok9AhX?UiQTVdXo$f_@4EXh+GzAM@<YF|
z@AuwBmsSzFGn&Q{ORA`t8wbnF8~eS%vQ35&p#pb)YgT7HPOL!Iu&Dp0A5s}O=msxF
z@#K)-Qh>qA*D;o7dokVFo|k(Uua6v=kK*2sh-GZvYs!yJe;%z5O?(%`&+2P+Ej*9h
zL9^h`R1Bxuz*Eko3XxqpR-}8rDT%u5e9bp@BfHDSl{LZpC+G2qC%+kTBlsnnQK_uc
zVpMmpj#@_gMt4twX=MR<oHW0Hz*SW)%Wz+%XQ}>Qt*%i4-6Mh86HW}QK|qZNmoKs&
z#FuS>2?xyHtMkhrA-2!P4kS!sh7{jLiuYx;GZkDE9~~X3n6uqBy+Eo-uMD|PKkU}7
zykGIXuJ~w>MSlv4!@_hw!jxyeh99;y;f5m301KoT+DJb-5!kgty#l)RiJ~2s%60y{
znQ%mRCtzS_LjVpToF<OX6$p81%<G4<In9;+QN79DclvEyLVK(5X9S)+U3sZ!xJmY%
zQN=;4Fe&8^A|;xg_=t1QPSfQiPsI$i>WY5()+58Oga@Q)I#Cx+&Rud_7u~=y&OcWv
zwwS!uT~46RwdjLrbDcoqpAXbAETmb_XD?sY3C4xAYN$3FR3?)Kyll0)>%b!CRXnd$
zvw!sxm%u!OoGYakbG<Rm?p110HG)2f65urOkE!%fm1ZVPv9~>gb0PPZ25u8WVa;_j
z6nj|-lCvQWTtj-z^uW)$le5{C$h<4`)8ayp<NoPl*%<xDvpeSV3bszDyV|wcfg8MZ
zHhgRENZ7-K%>INzJ%j0TieKw6k9i|y@`PQ7S4r@k-|$Biv{IKLojd;g0<*(qf6|lM
z;~cO_y;#F|)jvFSbTvM<a#GA@<|e$XKjY<Gw!5Jd+eYaznSEk%fB!D;NRN~<WY+Sn
z)x5G`KUyFP8Vj1xat`Ln8!ZMhv>sIFK)Vk9Y^NpdCM6mvFmY$ahQjL)g}JKBu@`77
zu@?$Lh@L(f!brX+Y|#lW)cng&h*mX??;{r5daQzreUQUNx#bs_W_K-8X_&@)W*(Rw
zwkh|d@ORP&t@P@3X-C%_HKNY7fK2`Cf$xS;s?gR<RxgczgRNh|c_<--9R7}K9EovE
z82b4;F2IHH99<twSJ#WA8m=Kn*}c{Hia{3(PG5E#>|Y5<U>YUKNNFUnYP*P;g5C46
zo;2G2)O<};)XgTk5CHgD*X8qfX@n9Tpe_)_2Z<_6v1g(=do>f2OtZzhQ#n9uBmFGY
zceyTxWq3U-o%4nztNab=IB!i>&sUqc+?Zm)M`^2WM~27nQIc6j6T#6HOS)OQ7UcmO
zzh%II(1Uhf<;`B<3~zD9*r-ES{5?F@Z^OX4f>6c-_{AOninWVnx2fLw8sidSbjg;E
z?r(<6VO~9JRstQ!R>t!)rubTAvgFRoTj4Hx;)B>_FZi8+rj4kr(67sl^%iAKBadpM
zlJjpPjdwH%*HE#cfq7?GJr_25s&Fp_+F!k~)8LoTJVR3IH%6JYKONinF$=S$^(~y`
zW|s&VviK*P1>$%Dvev$=NDj{Nt5wnW3*@n%@2tpO?Gkpq%7Z>J+e0;{7>1H}S6QBa
zlGQ@R)dujvTfdw0`A;<(D@RVY!c@wGx^q%-d~prLGRU1uGu)e*DHG8qc1#Y-EdiDf
zCL2;}yO}ypO13dKn7bF!zF`6I%tV~9mD`^F<=Y-}>-oZt3F;tE!>eOpTwivVKr{7O
zp-fAj8ckN!J?-*!6?Ye1!Ar~z;^#=3R`jEvFX8Wc|3H?#4hKA`=H6Gkjn*=E-4=7K
z-)Gd;e;^!24kshp@IOWe$oR~s<zKjrh2X($Id4c0T(PB^;*8|HHpj=uFF2DfCXS|c
zQo~ZJ&iUiI4|$x2cAA-|*9E$!9m`^GInQ*=$Mfgt7sechPU;B->Ml)&UM{=ch<2Fg
z^<WDO`f076EqfZ?xhkIsS?KDdSJP#c7*P&S1o#bfa8~~UlJNdyL+>pOgar0Y0M5-#
zfyj{ZO7z9_JzLzt#g=Q6SShuslU~fv*L$s&23GS9w4d)KY47LG_hRmE-cj@f2q_43
zU@qL_9U;}^O_6GzP}=;8d8Q{`L-FES*^<5@UKDveD$ZDjG%D2o9UO&Q9Ah_rjB$x^
z5-pa4X3<A;t~SDa_6jbCN8-obz>k=9oSNMXanDEuXpcbbUI+k$2Wb}i{W%x<q4aCu
zVt*qy+NSF4yfmO`e+3X@>;v$o+Nho|>(!Q4S`KGLSyigS9mk;2XP?6Pvm6)k`VD>Z
z*7k=>VIqcA_of-qm*bb0mls^=VeM#ixbS#Qsg1oU*@hcjOXDH~cZ&Emrsd-~hVqt*
zemXmM!XSn@Pv3!}>xtY_&O<2<WB}=g@dE!L4C3?=Mi`kzbTi~hLBBy&O(PWG`*O%!
z->KSZ#m%H?i3Zask2`wn&tp!M{$=gkAy47EI_?Ov?qx-yx={O@<m}lnJ8NW}K%7h}
zL%AH63EVXL0)?;BWsbDPp{{%HN0eV-Icl0n?SQ@up!O1=hbr7vO{-)lH!NWiItd3L
znOOty4lG4=a;k-tdEy!@yIPy`SFmpCem3$iKuZGVu?h-3=TDKqPejPp-C;{t!~EN$
z%ZBYkg%cM?;l~b9-R;)a0}OHRd{#0B#13wJ&VOprwhG}7uf~j^VQcOdIYv>Qso*rT
z{isW3HE1*eW?-jY8hZlMSrT{PZOCNn8oO@5%H+Gi5lG|4GX5^qAq|a@yn@Fx8=mi%
zeGtkScO)8Z>U%@)bGuUkYi8e@adD297@G@39TM2ckn)&w?q*xA@R+Jwc}y`R+R>VJ
zF5Uqm*n(mNc_O_`g&!kdMAbG~b1kU)K^Ig-a?|bY6a0fNX#|wG1Y2LmHNjQd5Cbpf
z?hSW{E6!;wJ5yu24<%MO=KO~@jItri3TD7T8t*9OQ3G|GfjhW&__VsXoM#<e9cA29
z_=C1Ldce-52m;fi6>U?AjKXF{R`TWO=UUx&KVCYTV+5_DnzS)XIsdg?xn^+|*pvug
z^%-`=Iht<eVTDHz(+;SLw7-kH$cm4-yC%mIC-WE7{=50;BFv%Dftq?H<VvN}?It;4
z^p<VGg7<qSgd{#TS;jEgy;AAdj{nPrF_EF2Z=s23<G#XihNP&h2jr?3Xl~>;(`Y6}
zJ~Lt-7MJnoY!my4ni3J)rBSg$yjp6^Sz>HK?7Lw_nk=+dlAA#(E<K??HM&R9it+Kf
zas32)QY#I3ksDu5mIc;koCmI2rXvPZ7IQyg4bT2MDLL}IRrJj|ZusZI2lAd!7=_F5
z(?uoclS{GSj)oqOPJs`<l!x%T<54-V$(Ki`Ol5>y7s%nCkUKQp{v&?frc1MbTfN(z
zZ@IhPna6a$8}7WQu4lr|i`X-3e?;j)jTRfxEw<uA={UWC#kqYq$p7hN8mjI#Z$JSv
zB4caMSl!nxS0zVU@6I~*>UAASo=*Wk-<#JGlYEzZy>x`-7C$C=c8L93I^xp6{`<qG
zCe6@G5ssmkE&R1c1j)<;p$Pl$TnN^on>kXd?8yH|*;hwJ!L57C2nt9uv`9*)NY{w8
zG)fByNOwrbsEBllfTV<qlyrwmN_RI%3?bd{?eRV5-tXS?o^!`PSj**_*|X!x-&2Ul
zrsK4&PD=)MV5a}~cVPt>U|uU<Dadug;4Lyg9l1U(lj1%Vkwv!NP<q3TtjW85wE@3Q
zLZY0tb*H`3UX{mrc0c0CTW+wfEHuNx#;A4a=iJ;}5u%{RUasKDZQ#+uUt)OaSx!ap
zXErw+8b>g{<I5O5dF#y~-%c&;bdk@ZbYAf$s#_?GrQXlCcGUAUOz?||A;vVt=@w$=
zoq-R}!KTOD`C9GI_*b>_xZO$f_sc7?=}3A1`=tNa{|P67<gr1hk%Wh3GJ~gOa?r^}
zr5K|L`KJ5L)-~>Vo6C30`12>HPRIB1F3<1!KXc6U;b8v%j{e)*1goa=!BfffkiNv5
zqv5WD?r-wT<J;k>7y!(v86bTO)it8w<$R!TFx5iL{P9q_Xzt9uLiPJIUMBnqp^MvG
zq5TAr<X&7n6q5csZAZcx2iIAvF33)IMCreNyTFlexF#6kZ4|jMy>L2|<_F-8zuCcm
zKgWOV$pyKmiu<oA{JFy@{2Tf`g;pm_fY)LP0>NFS(xfGw^|a<aN0xf?3bYa2EgWA}
zRnn*6cPSzRmzzxI`d7}H;OOZC_UIonFb~Gm(N7cY1-jP+oNRSzTHne&<-g!)ram39
zEAmf?$xdii{MQZq-T%Ppu^BZir(T6Y2FlcpPd<9W!oSTlC5!9_kD2SI*vAg-cP#B7
z=9$T75{Hf=N!`O1DAa9_%UNvC&olEabc-Rp*J#2`hqfF>zdX4!mfAnz1=X1$Jbm)P
z;*DzI<{ZO=0hb?h46fWrj0}}~D#ak;q>X^oN6Mnj+}MFpmqfnJWN}HC>6T$DmT*m@
zprrH~Md~j6I>|!+3X8zV*6!SeotL#gM+<A`oxGnKOq0u;8X>gPthOx7%oa<*#76!8
zTNbw#G|f_4)#Hd!+lMEKd}(iWIBE0nOt?v3&@!6i+_%780f%XyWm@N8dPI2N*71uK
zQ9EBeBqV}#`^V?k+{KoYUAi*>1pD~rxdb0q<c9mD)e1NECwIA<G@%{d3mpWKs`r(w
zBIqI*E{V3!Ro<C)y4Z%~?TS@9GoVC4w2_ctKtX+g_m<UdeGPA2F*RQr0DpGpowv;e
z{q#!4&U_?KI~9$1Z>dIXADL*)E8kBB$}>k<MMZ)m<PFWO$c`WxrNhXMZ)mOM+$Rn_
zV&^ZMtIp0}Bd+sa-4DMS!Adq&Xi&9t1X2X7EVyFY9f?Bn_{2P<{*KB1m7dbSKzvzC
z?Gds?`~2!+o-<<dtzkb7gDK(!582}r0?UUA>x(B<p(_`<(B*<IXFL<;UUs;U{a|Lk
zV&V9J${{2quco5pHfoQAevP%aLJILLM*V1nOGUyW3hVI8mbUcv<f-@Q^phkFGhdyz
ziIY{VEz4+px_u((JM;vtp{g=mHajt@w|3ObQi9aqTt)4tWJp$Q-n&r=o0r$$F)ufa
zyZ%cfXK%@??jkG8IXI)eA-vou`r#>tbp?s3n^xEmF2)bt&lrTSP1i0XOxJGQh_V0B
z|IjQYXO4&iwckVEr0YEdM?+VKods5Ut%+x}&r+*5dh0`frS>Cw<GGC_+(GwJZ?CC>
zgH0kG8jPsOC--P`A?gOcGEi+vj@)fBI(wO68S<yXL?{WTD0es<s#l?&IeOyjwEv^_
z%3<{<E+0M5A_ebT>KvDyEN?Gu#}}YRP8jo{WXwP_BYv_JNEB3JkG0p1^jsfnH^@Sb
zzX{sn8ym6nC&J3~HpaTlcWHK{M8w2ujR6lG+U^3@DwLxl>nx|9aA#KIicjO=<=r0I
zEH5X4Ph&Ra4Q)kyThl)Lz@NXTV5|+*<zCk`s-{DUb$+X`Ye0o{+ks%S#nx2K;rPql
zb^Tpl(H)wW^|ttD6LZB!6~K5#)J#o3t0PnMnDW--oYthp&P}5T97?NSCOR~`M;mc2
z8DV<)qL?6;919hB20mkK4!O!*Y9CYul1F#4;|)dlOQQIShTkR(?d93ihmYmyPuW@|
z)nlLC58HA%8PDu?W={ViB6*)uX4oN;9wFJSDtiazLzctXu=76#(L2brsE18NJ3tK$
zN%+PuewGFyIx&@6@<zy%m6UwM`3P^67D7%Nl$<?XPgd%m<&`vHyb21U5fTt6=iQEQ
zMe$D2AiiWPp9m^x`ecf>H(3NyM<VM_`s6xYy_`B-PZCY{%gowi#upbCkBWv%#P}em
zChKWLrk6{d(j2|1ScBGO6?c=m1P}A>;bv<f@jI4~m82XT6*UxTiI&F(K1iZh!55O4
zFL_g&JJIbKs}(J_y+i2p3C##nm1*-`3B3XtL(<c4%qrshgAW8i$KZ-KJkNGtGcz+M
z=tF=0`kT%TwTq0AiCC^Dp%{ENLwczGb`%r*A*o&k+(dTNB{N`~%<9`aJC5()zuy4q
zY|m)MRiL{5berC5?+;IF)WDEYpg~5EskYrxPgA1J7CiQjSUz0PI0<tz(B0q@hKB>V
zwsG;@$Q={~1ZI{DZCT*(08BV}^;k|l>o98d42+l-aOg=DKV+#-HQam$t1|Gr1fj)g
zk14m2jr8cSMlkdB77suLKUkh0#;o4U^(1)RIzPa~#B{-mUj=%0q4?VooKYu0IAN>X
ziW6!NnSP8-;g^+@3mPtXJkj}t&hyzdI_BuNirHzcN*(@Gd?x;FVWZda*T9&DWmRQm
zamh_zCvx%i+3X8?9vAr0b0wx!Zj01tepK0MRtJ*EdNcI-B7bz}$A~z!w{PX(>nZAI
z!h#QYL;1-d`=f_`(8Mzy^Of_tcILFROfbNFL&?RwOwaCKlb0V<`SMwl=M#flWRWQg
z{WnWScjyQr<0jVjPgsxJWJytd{oY`hIbgKdJ6HEgU)msz8+i>RApIObrVfl_LFK3(
zhqexq$X;r%2~?(J>rm`K2iqOwYHh`^%)Yk8UDLN+%_{$@X#ehi;H4Mib<6+k1%UNt
zfV5X>J{VH@5zOdyxKJ7{!~6Zd2|2KwhbL4r!+b-<AmoG6fp<8gjwwWQht|6CwGewg
z__6CqV~*Ae?p0?PA%)QDKetRnm3lzpU^_)VepdLmO1>XUJD;y^xg`DmZs$YVkX--1
z)MmZteWm8Sf5g%LFChzhMVR@?BCZCpnpf2Gn^#C2H=a&1{gz*HMC23{!uH=^;l|48
zZTg{hR7?Vv0$2giP~R(ESNk;&Hm7RpD(|zoAipj27S?Ha9(*M8a+$_PyaUxIPOpSi
zv6rUa`jIeo5(5674EWdlwL?3&Y-aStvIK+D-#zHxJx(2Qn{SbBwuaSy#DfROw~KlN
zPiQ{D;0@hxEun0vM0rmQkSd^*T!yX71c3~0Sm(~4{{5!75Ow1^QS3ajtiSWm{*4U}
zdxrjF46E!^o|%bhdfM{txXcpqRE5cd-<15Wacw9!h(y=IZm{VAYUhNzVnR)15%+W0
z;}j9Sr)SE@uN@Pz#CMRj#M{=tO$#%VLTx29$T=yC8L-`|v~p7>Yz6%L930P)-ZIP?
zlC7~?!~0@?ZPBY2Ww8sDN&f=G?$w(m`u;-p4Q3|}Advh!La3G5$6|5E`5rM!1{c@>
z8wR$~8`40}_@?Z~j`hNE42;M)ErHPI#+8+oD0)ODk*++dhkT3)1x#?i%j6Y;+G!>@
zXnM;5xt4r<<F~*Ys^dTl6!w$ES^k^n`xn*)4Rf&bBY9%f9mPpPu_YG{2|Xsk8^GaM
zAdkl47)*OBq}I72@)r>!&;Ot81-KL@OQ}Q)kK9)`1bME`Z({c)Ag83PHumv3qw-x*
zB>TS?`3E;NhIO@$U#AS0wfZaGr~6wvwqw5OSemh+2_?~GUdVlfJp2E#r{Bv7)dm1j
zwB_97ZTbpf&awDRn(hYpW-k>S*!Qzub$(AB^aim1jt~F#2Ue6|UmYzB8w_jo@;9x^
z^lte122mkD*-H$sa#<d>ubg}3rAj$~iTa8fu=j59jsr<DU-!e+9qax{Z@npv;7xxz
zfGTWNcm0Wwe|f=wM>u<0V8KW+_P8HQeS@angURM#durrB4$W14;>qMxNAc>+<X}$v
zk*(IC%WUK{XpbZ4J(>3tEEUBLuFmyoouR*DK}-w|ss~+EOi#|W)rjgG9UVP6SkKGM
z%)HNvDTfIzPd*N5$jF|O=d_7D`c6-d;syzX!jNzKq90Mi7WYFnvx}t8UfUb2*A~)f
z^)W@j9aM>Xmk<>Sp(-&00;CWUn^%F~vI_hb7vFUaZLk`7R^t$__x_K2*V2D;94b^t
z+nW#8vR^W<dfe%J-eGCd$B|Sd46aIpnFkD+i3Yh<Dp_1SX#WG$`%f<n$3utexd+5G
zeIBxQdz3p=eJ8lQOabt#AJ!YiZ0-@nKJ$LA<T*+#fjj^_3j?ah%sF}QRNeKwgr&OP
z=z5Y)9N58C5}i`ZzHgxI*CwSUfe31#0Fo53fB;ar;#RI)0J3Z6%IzlX)9ggc!S`WA
z5O95#orb=;M0Pf@|LK(fgO;*n03GYe&SN?OFJi`4AW570Nl^`W%U&`#OTmRJRJ(BX
zfrSXFeiIsml|aoh<@vn?E6gG5{YSveDYU4r-v<=ULj@MBrwhrA@A`l{ftovwyu&<f
zmeTH(wnuDn+|nzmU6x1Rm|(!ziv@jIQX7zQ^1W9qzfC=qNG7Tlkj!E@@fMwV^@Uld
z>v?jMXg?arc7nc6%ypNXCyW%j=j6r}q^*IJH~(22|8<eQ*<eMkx&CTh=;O<$(8mpQ
z`P;#vSKxz~cjt}x`TH=D$yBH<mZbz9<HxnE_&Mpmed3Ijla4xDO?`AsGi_S)f(wm0
z!v>Zbir0Uo0->_GJyo#YW#0Ai0g$M$4A2G}Z>S+Rxg{;2xb#BElJoH@F)^{xip@t6
z)POT22?`@0_{F_-ra;B)oeB`0s~#H`04YFVkNNe-gpnT7Zd286nycX&W~iMSoP_oq
z=*a;|*<d-H+#yn6M<r!sE)Z`iT?Yw)2Edx-E*L?it$Kc^WJKjfet!moRL%17>{m&R
zH3kNT$i#Q=PFkYh)}#U5d&4KI&$8BRRvq)-3HN`!+eIC4lM&Y|v~z%1=+nyGm-HS=
zeTGS}qC{(+ck!%K=loN5d9eVh4~^sow7}t#KK7MzAP8g3OOD?^|G;er3BDoyWPc>%
z%gMLD$P(2Xbd(0m$z>H8e}I7F9)^EIg!3ZyCll>W#UbdMq`=^FNJvOH%B|UQ3PqV5
z3CK$UY2S;4shk!*Wb>!VsT2CRsu0>}i%waz{X;g>Y1fvrh!gcQN9BR#%zVr0jgZa%
zJ}RlG_;H)pN#J9{Ay}m*<!dwHW1l6B(v!1M#N5FzJJY52ijaLz=wdV(M)1+^bSyag
z3Gfl{!(X6(P|WTxLF}Jc;8l;%pn8u$kTL<8ZQ(q+L+x6o=j-0-bH3(d!CJ#{L;BwS
zD-g~32t<w>eTV1k6x8ogs2CiaVL~T{9u8WArxv?|5r4Assw(O_Qtb_m%770skbKzX
z|M?E;1dfgeRkQR>e>IUv{5rAl0eE(sq^_T7W?UX<A7yFHKV4`T$Y!RWv<#x(CO}dC
z0J=9$2b_5QN8v6bhE|@A6Nt=DjL7mHATraOV|=Yd&mkKoYr-x+YY$qe946mfSjwPm
zTBBp)=)vCar^~@EuYw(aA!}6{b%>B!kH_V}q&`%l#m*^w-7>9LIMUExBFit0I&VUe
zrr47p!+Ac!PeaxZGRRM3Smx^(v5Vuo&8QH22F6BJ1{cyt{z4(28m4xK`Tt<YNaIHe
z@jbmV6eb8^*Desdc&l&kX$?h}<mFO*EwDMIEQ&E|&W1h09Vym8G-8yTkWl&IitvMI
z)M=wF0sKN3Zi3@3C(oTb#U9qyYi9{xkIxbmPAA)*=^Av0bR;^lwmwz6v=50WjO=*J
z5>d~^rHzk|?@&AUipr0)LjMJ}Vgu>~4y+Pj<uKpQeGCzY>eTxj2ZQOXx}?n`7R|O}
z8;QlLksVg*i#~djg1)DVIs$^5qFisg!Y5kG94fX#8xEV7x{tga&U{DQ&gulYL>G!V
zH*2zesWGPAAGdDkn@n-4E7jc&0sV+7{QqQ6QdlgdT!W4e1UMle`BkS9<k<wtiQz}k
zFUP45`uG{7#lJlgd7VjE<Pg>|M0gpAMD3g39*ulG(7KJXP5@d8=?Aa{$*Ad)2_cg?
z!N9*(;*2ZDSkWECnV6nV!!BzA7d)0d8RumQoTuzg$2-7~Zg8J?yMdxL@Ov-kL~52(
z+*ap{8tEE2VnRgvC6~n<@d``{51~(HC}c*{LJ@B2$rq}Kk;0jHWA}Hc`hQ4K+X*z$
zeppVPjv2f;lq{{<VWvJ_`rfbG>f}C`^!j@YhmQ3OTr^k+d|<8Op08;Bf#|yezY1g@
z&8Im5IDrmGyln@Bam=m0aw@03;w|!K5VO=o=|VNE-J2@Br6HS%4gRls^56bX6%bY_
z9Z%vOGDCn}NKtf=n-OpronmV-^$_zefUjmsxsfqtO~Pne)NdMY0L<a;W*)^1Vz^%Z
z0aA_r9Q~Q6QeI-u1fshuCv^Zv_IFwc7o2_<{2BvT@~A4S|DuyRD8RlvwV+xJeCBzE
z;~me+;;`W60Qk$*R26sI0M%Cq=JY1_P&Q|gInm%ILY@#vb7Q>a(A^0DlwQXGf+K^-
zwQs<^poR?vhK2rOWMlHrQQj|sJkoSDDW%-}2m@+MckghTr66^t$8SH*4$e}2F-u{Q
zy!{#JZ~S=1l!3axf$qhb-djDAF^&jr{B1){R_&hmjotQLRb!SRs1(62G$JZ_?7$*b
z?ED9sD}pP%_hd!l?FV^a+o?{1%8i-UyrG7qj4v-^RN=uu%Pxa?9{D{MUd8mNGk3&o
zu&R#KTl|N{{!aVVz}aw2hp*Irf$(<h+d1j-fe_gKH+p&0&1a|@xKp(2;v1}mk88?(
zR<q;%Xy<DgH;O_E9U(~|p05c=j4ZIj;2X-4F5MWY*Bb(}Rw@-5IkjLw>w|ZuP%8LU
z^kHtj(v^15r)JWv(bxVD$Vr$GkW(zY)0$G<;CvRqEkjzlZq8aR1cLB{rISe0w}^^Z
zl>C^#E_#On7*vv`iHS<c)R(=fEx*G7u<%|dI;R?hkKi>ot}PYF9aslqv4tYfo&<Hv
zg0>kPT~kcR^M)NrD0mJM3b^GAzk7BlOQ7SCyw)w4At^CvIOsh+{|!>2cB5wZ!3znr
zunwpL{52Bz4P;M6u)Y$n7#h=?SNXMp1P7f%<<S__*=VH#Xk))nvaE)u9d92UtdH%+
z%Db!I(|F4SPsFVK)Mx4A%EYc0g!+QyNSpWT$#TJ=b=gT6a2&=aZ!^(B>PU{{p#}|E
z70TA(s4upHbTtjFNh|Y#v?~D8?j3|!J_VR2Bi%`YTWI<~W)F0=l%wvfqsI^f>Pfbv
z(~F?UlceI)k<27$SBwFeZo@l}YVRpH>3CnfimMc5SREbHl^zHTVot>L?JvJmnEeiG
zv}NJ@4zzTz^pB7(K%h}bJWy4Ch#Xa648VvYaPWxskeaWbALag3Qc^nehU%p08ek+6
zuOu~Q0)13*GMp6g2b$vruz_fr<|4mi<>?g7SAzBp4iON<?I8V42?)3qfT?;-0`ggE
z-%o#vI*rdd0vgBvIA33ben6&UM20cUAP=yuJb=8_^O(Q695>GF6-D{jED_+;^I>js
ziCVcsX)^Hra}khP4k|{t96`>b`0Q^J+(S+Tb@s*}15WWT>e=2s09=kN)Zf6Xo0$Pt
zk)pBlbgk!u3fr-M`9}|*qfS7=z|u*{{F<!Hrfz(GSacq0G4RR`i(sV?#Kx-kj}{^e
z?UAwCi-SBtly5Q0ANaDzGz*#L01Pl3w-u1|7>wg!gwbw5W*qKP;y>_?nnxY3&_(Vr
zyKn7D9tcsKXI3eT+iGY6U&L@WMcwhd`fCs!1ofTyf}M@ge2=(;oV}L}LX>tzeOSM%
zxX|w~sIkSR>Hzm8CNTg5bq`j91qj^07cmdzfn8Jr@G=U8vcks@^nM0{=3(zwuU@H8
zQ&CN%q<)e{IZ}gOj1=OcrbBL7;8ns{zFgRj;EqOJfp=m{f88H3eTHbY5I}>Y8ejok
zWPx#hi@-;+I)BLe#=EYcc6}qsetRGB!7ka6*(HKNwYKlc{s|1n1#WVcGBQ<0Gv}cM
zNqGLM?h8tK80{{Ew`M=}2+|TvC19J->2v1~G$GavfQ^z@&U8hFg^4)=KkD+J#t6iy
zqNw34l^4c!hL<nar8zWEe(hc)9i9uS=CxXvRc8-brzGlJrv%ueHUu=b2L(=uVH=mY
zH)bdc9atogIft0eQC-sT{VgC9Ev`|#s0S5ad5woaf_=Y3Ro93zhz^qil7{&ChIWa%
znXd~}H*LD`V()$cOahsHq8$+qM)>xuo5`ST@rnS+Fjb|?R{rTB8+QmyA|}Kb{ayf!
z3mu>+svxNEut-m#@NcdA|E;azx&X9Iy**1S5UHEz5TcvcLoPjY0$BL+zwd50Ee8kX
z<2FVkJ(Dpew+Gf`;|>BzUAY=$2>~Dok=a-+o4K7Q#>B*o^272FgNNl)SNtjxr?`Y5
zY{6i~lmQVEs9d`6ojZ3Nka6y21>Fz-`%wQ@ZqG`hzk+4y8!!EcYmHaTt|MF;Ta9?=
zijKLcmhO7GQPFVxl33-_7IJzi-fk?>zg_2lKbBAih`dC~^BrLT(GU(q1NSwWU`#-7
zj)h*CeV?3Am-{kEBe6d^f*zp{N*Wj6ykZ75-XZK?=&=j@wI=tTqL>+h29Y6TA-mm|
zw+Jq3r&lqXh<`XFujG#TJR=zTs=O@|#ZAg#0jj4_GumNj7@d|W8TTURn|tKo`vV%#
z7&YYS7~weyV_rw{H>Ono_m%wHm5YH(A#$66yhLZ_)_V>m1)*=?qm5zcz_s)Q*xE>^
z<<tL}-2I=dE;tSr&Qq3QgI8Xl!hi#533bbFRvIv|umZ%9lc3~R!wz`SgbL8Wxx*#p
z(;})O0JMHEFTFJzrJXwzFBd(ZeHG^(GU~k&jMSDzhJ|Tku`PE|7xNml>AhaC7X&iH
z+Mt5>Gn!kWKHvdHddG3Ak6lxso9MJO<p>MP<hGIt%nb>Xikgu5H4UilR%p_agnPay
zSaMGWnUYhqu&^+*{zt(eETA}4Fb^ENwAkWKThEj5Dms0^f!h-Q;@adTMru^KmL)1c
zH}3TAC`i!I&t#Vw_T3rA1%Wg&9bzM{G2UM+=%~>g^4Y7QJeeREoMKBVGdu&r%aQ8<
zCj>+bqV@Y;bp~v4dY<iaw@_t&H5?#Kup)sBo`K2?TOg~6fmn;OhQELRexS9rwIW+Y
z{wwMs$gAi-u1`KIX@$foK2?l%i&W>ALt@gPD%L({$Qr-H?ALQt;Uc&cHV(-h#LHMi
z(4Kl5<hnSxnzsCUna{5ZT2!IWhca`EZ#NNdRh}PAG{mQTl0n&Mks(pToLq=D0`m~A
zGBGn3ZaS5`0~Q&~9xTdY^mzn9w!}mijH<SPaRJ$W=%`~;HhvpKgzx`lpb@lX!=U<+
zGDZ6_229L=@la#3wm?9{w{T6%^v<PohrH|~-whyx=OMIT3i~WOS*0>i#wp<ISZ_+m
zoKNTr9<ph(7pu%vzJ3j&dN*)dw@b>NZRqvL<j}C8p(yLpJpkvYE+w=o4eMvLopkC7
zm?ATwpnAstOo+F5PsoU}xXS@Xt$66%YkEWykmq~4cb{k?FKCn-*o@5J$_fKez5FZi
zy8uJmbcTZ9{zlR2H!i^n3Z%riDQo;+1zJJ6i(IJQKW(ozV28(!a?$(KqqZt!N#no6
zpAmG(h&*!iY~2BQt}g2SBoPS<^SBot6-eMU&&qBS2{L8B4a`nDkbYU^32+3#e!_4T
z)JOwVvwQ+ZlPLKyOR;_PnmO85W9MgZYb&zGz*uZmw>?j=FE0Z^1w~R@L6RB;OSxWt
z{{=mQBG2wO7_t%w$ksnoFJGdB%+BhsrY5L7hASIDugFbohVv*wq#AzmYLz4)Wfc*C
zT&jJlwQ|q>Aj&qVBN;az8LxbLz*##20yreP6ZqhYcwlgra=$e!=HxF<06uRZHzuz}
zS(H4-dV~GeL2eZYaxFP3oy6aJBW8(Hj0EgHqmp+O7j<{yD$@53aGF(?8NO~^iOh#`
z#YFbRa0JQgrXm@H7^ptMqAtL~pU4V^<Q+Co-Tx<<l7DFgrdCfqh>jG{IFeVRigv=2
zfde67768&SH??y4x1ws!e<Q}LL^^|(ckNZQ<ug!qjNxKH@ktop1<X0jQY>*CP%{aP
z-%OAxXQe8Z>JW~YU<gccsuI7b7r&UMs`wb`yMZ`Zs;o?gcBqCdfk?^>b5nBz^hWZt
zaVutITWj(13)EFe>J23_s)O3OJbs;=hb;_0^@it3x#1AZQu@}kmZ$ft45kT2BqKWb
zfn8M5v=6(;M<O7gr-nGsyr(hLq7ak;(nopYGbTKDr)(Z}$sDbIEVf01>Z1^><N&^y
z4NJ@`43=s?J$R^P3ZfPdjqhlkDMC5@In84)h5@poYF_<BZ$uyIN3)>&+cq6`R*G>)
zaNp>sw7E4;2^zfU)jYG~`;&C)eg?H8DFjRLg%<Rl#2xYb^hA(j=xh2lyXdjj`IAib
zmy@Y+)sC0Ifmn5_1)0l+(Dp)(o3Q6tf|TLkB-3uU<yxW0`cRGZ-aspmX+F&2akdqB
z(^G+1UX3;+r-7==-xXL&3&>Cg@jBbC@;_bC@aVRZJ87L)h(S9NhdRSF(MAGSlyOdB
zViw!?Zk-&bl>qW9OAi0&in;fg7TcikwaN^!OhMX)_p<Q%7mb``!Vg;!-0)i3pw-(c
z{rkKn`(q038NMhUih$)6jP6E$Jg2_aSc!#d9r=BZ2M}>GfKx&W!@sRjc}*8z+oB@~
z9PuZg-U|MP@I2I6iSWjJIb>lv<MUITwDJ#R9gA9}6aqA(!|`1fof#W>A3KBv)t#lu
z^w{6W&b{7n<6-X5B@|=CC`_IdSK{5CEC3mdgaOFlz8bEEa#l$c2K*a|UhDdod=8v2
zax5G*WBL=nN11&(f{o;^zBtIR$P4gi)T)#JB{Xx?>k(An=#kEqU{nQJV;%<fBTMSQ
zV0Y;!^JlubRspbXbd#1fb^zKKih%+UVT&9R`V^t^$E2<0@g($PcrgZ*j&lmgEb>SH
zNCZPo)tu?2^8^m7zdqV!krvw;Nvye-J_~A;&X13Gmm7|%5d{<Kjv<p-M!7?&AT?Jq
zI_afXlzeBWVZw6NEk`SqqeyrJEYfItP+kAKA$dlQuxWcDmMj=l+n*jJAH7JZ@^Ys`
z!;W#y)~NCi+kfOVnWP`}Ci1O0dq{qVoc>qTQ?ML`;FDx}a$o0~qmQb;-`<jd$Pm1K
zKGD%FemJRJVASAeM7R^TFa_cLzW<!1yq=fq<CL$%wtchd>`$+{`cEE-9ltdrDoWp+
zAqoLR0+;xc)(Gl`ceqh@SZ3<!23!p`AYax^-FW<m$(hM!ej}(OFIkBY-5jOF7-`)v
zUs^9EjSR$>F52%XCN7dk6{Rrlg#fHPVl0m&5zh;Mz+V#Mq7-BrWv5ZEvFjuAaw1dS
zy{i_}S3l$$2b$Os(A!uIX&K6?4xXfKcJJNF^y-Ao9mK_ZUNBdDyKy(uagSeJ=w$la
zgDWfYv=Nasp$iMUqT?*g?1hGPULMF)EMWyXO4JAq_$}!$t{eH8uYbKzmp<x8pSr7T
zY>X_2(}ikB;&EJ|UY0UG-dSSa1R7S3D`u4^IN?}4zQ>pPjt<KCFcEZ7H6|q>d2F`r
zSgy5g!UU2?^m=}60<g_39svP?)SO0)Bro`p$&YIA*PMf28idxeu)4hcH1PEBi-Iz$
ziV%i}@x$|n6`1C6KN^^iVz|~{U4ozYvV*xg;x}d9e`G1<I_i#6J1KI=2g%so$5{Mn
zKg=_~ocV!_tg=6;o{FM`8+2Jxm*`e#Ft8IqN(f#<5ULe7j4k?JDr32F5R~X|h0rfz
zP&*{_;Q~COKR7rzp90rt6y-Ph0<$+SjevYjW46uqMCORW_k%#@wnDVq{Gf<X7;N3W
zwN>KCAFqTZ-km?Gi^?T2Aqy4uKz=5j8B)bkS}<f?7^$n%g9v^ti-`lH4bh*eZ)iL@
zyxv>Kg>|M!8<L+!#V1~PvQI7CKxouI7P|}0MzOF24e}V<tiIQ)IfUefsaAi5dtyTu
zNClde+~WRnv2gEthCgHg0!$I@d?dY|Y>64Q#=HImb|(I^uv`_&kL?c0-V}Jyqoqze
zqNsY8o{onBJ`CEbU?4$@<i2q&dSL!0Y#+a4k*(jla)0H)$aaDOQDl2jz3T^JR5fJV
zOV|gC(g=E+z|V=JUFc(^!2X?B?n=@Qr^xFF$=e{-CHypkSeDK6Pm1%X33su!wzjF5
z7?1c*SkwP+R_(AxjY%OAp1M84Y0umh<|zIV3xn!hPJlWFHE3RHIfzNhraH$y;6<PB
zK=X&5ZZ~`O2&8KJMIYW=LisiL$XL33hFtS00KN8;L|bBl4ts&1-F@>=gUheF3;L+X
zaG^~JwhW`RDVzvuPmnV{-qh42N$ss{gNh%6{0wXw<Bl$1h=}P)>oS#|)7due5(rH&
zMSxMv*b0WqEDKT?Ht_ND?{mxP-rfzJzd^Kgl<|^#*UXO*)odR47}gt$3eU?50BT--
zZmYiB^h%CyJk4mV&T8|L)zbR$sS#M2WSN-9J$#fGVc!6S*I1Nh#G%R;v?GwjcYR)<
zFklyifitggjntSO#Dr!Hs5aqL_VgGo(lhne!F*PiT8{cVVm9^V&);rvtDMCT%CW*w
zr6+kMTFt=WIK}L^gqN?dTv-S(hK)iXh)|Kq&NXyrhNwf+o$Xc{|1F!sx`PjsI0@3I
zZa$p>?ks16@3_RWa{3YNS)mQ&IyR`}tL9`amWXQFc#d7m-Q&3hs*mG6yH)K`l|zoM
zaHUR5-(g*gDeuG0sqoB?CaiEX43ldJBM_3Elq~4VOXVmV=3|UH)XiVmz8E^vXePdM
zmr)AkH@$^rW+H1NGb~PN*X4SfAn@%1Ae2^_qNQ`FuDgt7=FJ;Trt{3gDqDsC4gUu6
zpCT9kKt?pqVZ6fkclX-N*UC)`ld9N5XN>uVDUG%|4eTiHYGf}!>1eknJ8xOwco?aq
z2!~b2B&Ga%kYQDXDMZ|GC7M;|D~fmzEod&pbyL6Eb(Ix)RjJPR=a$s|tFCd8ho6;j
zr3#j<(SBa>1XO~j1#=r1OuC5SqPTnj%o^iIPB;eybYuA0*KTLKWqX(Mw#;x9wNWtP
ziXyF_?p$Ih8Mj1PZnz!F=0zfuT*YP(gc`Urzi{Ty1+!Z~c=b0_P0Gh-+I02$=|Dw*
z$Jyk~Rs`Qk|JW7LF;K0-+2{MYA^k4w)?*ZnW?FYh4hMPY^EwTK=_pY<tZWrpZ0W7v
zW^qWKrr=%3kGG9#<=-|$#x;DfRvO&v%5YJ&zGyWe*>`2B0&Oc~-|x3ug()jl5qY>~
z_8n;z+=;<~qhUT|i<3G(gWVL=IGz*^ct3(_djx0BsA`IQfKCR6<hj)K;EGj&P7ejo
z-e=Jx;P`=8oN2$9G>0rWN6E^uN<TT~79DQ{F?!TQC1{8V>aGQox(dxSG<tOjMtMa<
zMD7AdXPg6_T^0iVqu%$_PWN?5D=$|FH->mdtDQB<+C+m%O;J+}yr+?=0D?K2m8ob^
zb~Yp7>&b(vc3FD#YaG8;<Rrb0-q{q4k+iOV>#`JAo=K(fKPmrRhWl?LE&t!q+Q1}@
zkR~u;^sg=oJ8~SEXgAJiL+EHkX31SuXAO~PR`q-cyO!*eo#M)eKbD-ceW&Wtd+Hu!
z_t#d6-yCtltGpHR)V=BH;RWJgL)0XN+R68UfxW~pqQjZV`mo4IhtN~vV?hvY8U+bM
zkunQq(jskYnNQ9^#q32fP9VoaRAuc7jFvxem^aDI+k6m%y2<_#M2;i@j2d?XZScY~
z3(V-?x3Hwqc6>n&wM^fnj1xx<Z9#{)b#+?T`lwOU)TWEyA}@ErMC;PCuND45gs-I#
z&Ix6BC2fyUerqTA+})-I|5p!XhONlMe42h~gIEUDPIL%IKNILFn@WVy#vRe2Nnb8J
zu-(kjGay*v<Eydgrty||#eIGI_It0rvDCOpNmLKqmIz}rF9qPW`PHtm2>#cuCR$??
zphjJVzh<3wZ+B!lgoK^cexiIMut>6wF(mR*^Wx4Mb$kr1rg%}m;qM1`Q4Sun5|AH-
z4Ffo&9x8-Mw*XPc@pb~yb|nJ~G2%IVMOt$vLu!nn!qAJf$q2fTye;h8n>C1WfAk3Y
zFRX8ck8WbL(W7`MGj-$Hz$fM<-ShUbsR@~1PRd!nNZb}D3}$490INM)UHbf_a*~;y
zH<Ygq;>1B2Zrb<sPauQdoJQD<eA8=Vxax~X=_)VECE(=&-(*kkF(WM&d^>@ptuWK>
z@1kSf)#&DIy_R>cog|A42<4-0d=ZoDsE;B`__ro1wjvS(tvDg>NPB)0I0Xv})ozD%
z_Jl$@>Aqp0V#P}psug*ww#f)R2J}GbZ#C6IkTDKaYoRI;(`O)8*^v}bAy<6kH08@h
zF(*M_m_vwEOT|;s8-2{Tzktf@5@u#*$(zkXk&2)3H;9DZ1?c8SelYzV13*EB72oEG
zl0tyCwx=yhB_n2`iltXcN6AjRo+CSi;R)eQeN;-<$`zNu&Yfr;3e_Zi=ZMWhV07(R
z*N4JP22C>_)p}uPX5{ZAbX8NtTwN7)XV3|Fnc=uCu3mZc4wA*zOo83RyZE)p$cHN=
zSI)e$y-_>V<5GP7+`z!!$;4z{)M-jYLk&p69@8m7YOAW#0nY!9k-EyUiu?!i+bsw(
z{bw(L|M4+U#6A<6k_p>UCmcL6#V|j<wAfObt^NE%qB{=<#~zN^iGyHSfpS)6tL;^1
zEorRkm_Hq(-`CR`H%~NuYF?hOL}l%eTc22)Xp^J`tz_b4ye6{F7eLGM;|_amLx*S^
z&sjxHn#-oUMB1gr#ie(TXX?zZxV!M-<Z|i_w8+LUPrl<>+S&P{Q4)}gK3i`pC@2t>
znI|FbJ$gZu(@=OF-H$>xHzMBVk^e(-szK$z#uJdSLLC!gk^GNgLbRaG|3Btp{2%{>
znW6W~mv)PW+L)<7X~Tf1vZ(jHdZ|aILq&Dp#l@xh?0DB<V7=Rdiru+4opWhvX@*k7
zbwzN&gT)vO^Rn0+E&Bd|XSs(S5*HWuePVoEK$nps=bw`XP}>5SO288UI}VsBy0|Is
zwdYwR(pbrk-c8p&9`^x<G$?|Err)+(6!>Bzrp7V*T3uSc?RmN-Y^5o0S4(EV+>3(O
z4DI8Y%oFaO^?PN4<jU6B_tGmWDmZZ)j$ZyX@c`w0T!F7(GKyrD#S2lSxN-=~8(Tbn
zJT;4PgVa@&oQjTwj>mqovJVVm!e=k?GKkIyF4QvF-!CgGi*JondTb3-gf(dTbaRx6
zE%o14d;D13YUuN$j{Zk*FwNkv!A1YaWBm7SF%@Zxq-`8t>D|VhCV$AXpUnJAt_#QK
z`K~(AtOWYrm6mKhj|~ZS4TJQiwFWT$%V2PL_&_J*j&t=bKJ(6CKs1$-%ZjA$WYgtZ
z%h(2_--7`<{}}&(>Q)pPqI5F&OLXIhX>~as85&CX0=Na=ocAEFMa*fw=_;sD6)@Uv
zn1o(aEVvloTODXX#sLjA?=B7S`kfuUi-?HWI36yUya^dEXaQN)&$5L>)WAGeRDb^;
zca=>f&)BEO_od#5@5@E{L-jWu*U)a$K4U{GVxsCJ%9exiO{8TcZusXH2H*4!QS-m2
za6zLHbIBd@hVNOKhdn_LVGFi&f?T?OiJtZgFe2;^Z(*GwO1_w(M0cX%NmIU#!f*v!
z`^jUc)35au=&m@GvWgNZ<&<{rmj$0bc^K*IPh?uz1pjD=$@kAOLsZB-#TV@(R+GBa
zxxH5yF@1*=Ip^e$j!&xsDPq=R|GMLY@oPcoMPs=ey1DhM5lQ`zlwa#H?+OZPgQ3Nj
zPi~{pEajRs1;!bi<KNa6WUs2`HyLP2&@A59oj+@6!IWw<L@&jCw)!>Zt2gK3_1{xK
z{$wBIs<gq<h?Evhn6U}^D_knA0WfncG2#Br+bYIugE?iO*u`HlqLp#eC-S?$73rLL
z7k#Z+4}C=g>zG$^Oulv{b#`5!mA9DA#6rn|Y=HBhUBVT}7z2S#h8ti-th%~7d^3D@
z!e!bovL!krOFG^3a+pd9JabVX%~vwt@!$b#7XQ1dldg@8jZ67<|22C+le$$N+w+@)
zfwaankat5~vF2sB>U*$B|KtXKe>R{9-9)+c7QZ#LM3-t}FBrS#p29HM?KMJ+U_whv
z%Y?zHsX84zc4C+6R`p18Y`+R~?0UN%`uf$;8X2fH-4jwYai52E#$O>sb6wV?gMa$_
zZ4YS6r4jXu9mBP$y3tsWcg_3qUGvqn#9z%h<Q=Xd0K>(Be5RYpt}B2eV`6d(<;M$^
zFW%VJX?e+wWsSMzi`<gPS$GnQa3Z4lQyS35eA7xIud3QZ>@?O=K#gwRnV_x^Q$}sK
zB=^+Rbm2mAeySFfySQO7>t5z&WSG1(m*Zw=ul5KH9<Yql)2n5?9YddfzVtfFXYS8M
z(Kq7PPh}AxPv!}zqVVCZ730uRG|q_;qv9NjSQkStHPW_eFw7ZJ=!x;EFaMbKGrD=6
z9$hx_7T|`X`eJ!rEoQmdTXsDbjLUece<}cI3Esds`1BmcOIIE4VW{_bK?I}B?0l&<
zi34KXmf72@HQ9+2in-X?y=y;wFn?X1eJ3XG&<fA!#@*br+$NX$LPaQO+rH{V*(&g-
zcaAA7NBfo{UoM=oj87z3r#KKMBh$PJDEn|cgDj;P%hKqgTG98jN4ursoA`MDXFxuW
zNSorapJTD;UO2oPI~h8U-xjBaDEc%=WBr;@Y!x;9V+oZ05E2a}P~z5g#h>2(IS`iR
zYjEU@EHH?q(20REgB+-vM5Mamqa)I1V`n!S0E);}>f#PUHh8xKdiJst!o%X|Q2y-2
zA}yGZ`iIijnSiCIh+~jGChz`SN%0O+?aLRJ7q1==iX&Cfo3M#k>6kL}{qu=8teT(S
zI9Agr44>YW;keP{l~E~473vgrLZ2Q)VYrYB3H;-u(>g(-yFcZO<@IQ0>~jXo!M~S+
zI+3QX^8x3G8A~jduP1c6K6a&Ahh-n6XD)$)v)iq=(TRbgQRh~y>4@KD^*<Vm4>)+i
zwQ>E$;p6W_e<$^#lp$bREY;M+gy`7m>qe+AlMPPCsRS<?z35%T0XF~8B^w1#&tsyk
z28qy-Jl*e27+80&aQz!I!k7&%Pn;k3scK*l)<?pLhAVRUNa4AhoDGSM6+v%jHBB$h
zupp@9oapQtH<y4`(5%PH1}wN)CC_s#b*)IaZ%(EP`5IIG-76(X!4{$lhlLic`gfUp
zYm1iJW-1e<^QN!vDYhLj<yWfCYz-tVH^lx51@q4S-qxX|hD6`iQ%x4y4nQU(q^Xd5
zC?_<I@W<|35FG^9yvEwwDCudpHEV^75&36rEIk)P=p=)&gg9&iox`FU&XM|rz2TLo
zZVa1d#((=0@tBsKR<GuTjndq$aM)}d_Qvxn{XbI_`R65mx%{b7Lv-WcFkrDFZ87=-
z+*Gdq^i@J#jKsJ~ewa_pwbwLlinRqTIp_N-8-*4v6lpQ?G-^bv3Qi}D&x9bRtr6m%
za&v7oh1du2?!)luq@Ufw%Y0G&cO*`W2|qbG$@KR2mdq|{DS0v2qn1KrZF{a4p3mK_
z*7@?E^HKj{|24`(I5|0&1ZRA9A3p9-=}U@ddawvxs#NORy1!pHOxsu2Uo10T?s4hv
zpXD-gc+uhRe|W+Ep^Josq$g)`_vFIB&ThjcKR=(F97?8vBo-YxaKb|MOxcZ6E-&;`
zdbLN79wEn+@z=AdkFr1%^XxQCHi(@<G(K*OwZ}3?ri!}Tt0wz>p~gj{u8EAvZp|oq
zMbdy?+EA;H&p0_>acimM9;~(h+|Xk#kjfS9Y|~acIhdu+Z_s4Qz$owhvhd_W&D;A_
zGx2pYZ9Y@FcCFxw&S2KYf!evlL!N1Whc8Ys648$}^>A7BwhzG|)zq2c;h&vXow~ZZ
zNbn_&X89?5>lpPO2J6)5w{AqTv06W(pLWzBf>&2pk63%}oG27><w(5@EEV_J{qh~}
zG|y(F)^KLGnat>{pwf%4cPAbPek(;kzI{l;uH(VJ?}(h>*VMtIiGDN2Sq#Vp)+dJ}
zQo9mu1Yfhio%J5WuTS;<viNhCRWo<$KS;yyac+LTe$6j^<HU_sq0!D6y>@p)a_>0y
zMBKk$;>gUoU>hB7jNTGSBdK_J@WDFCZm_(@M(M*=gCLhCVJBM|Ho?)r?AI4P`XDuP
z9P%_zKU<-4I)8T(m#E%Iael<IrcVB_$uBPEvev%Y{OzbgF68?TsR;%;4r99S+Tn>o
z=lA3)DmhPr>ozyHq*EkSi9W`brj0CfwQFp98v2l~T++NDI|zN0tL3@y=<K!<Y$Tf-
zvAUYbS<!`6qcW6IUX!-Et3ch6s{9DE+lW5BzAyU3DJ9}YYeOl|RijdB!|aV;&gVTz
zSE<{Top1~MWSKt}J`J!kzkgG}Rwq2weyx+^%5}&H+_4Dn`E;yD(Rog$i1Kx6!(a-k
zIS(8J`2{QW_l8@MZh52(jd{b(m`@$*4$=45$4Vxk$1CeHs!eN^+<nWpqAMRP4;~Z1
zVMORm%J1$vgSkG_N%H2O8-z43>&&b#`kB8-oxj9d?ZEs9yE-1(_KkNgk6iQgW?B19
z(?K(}*9A5fD?<BZ_oXi5%Y$-WSz>XR{_ISQ1JJj9JUkj6uExs>Ng7h!o4#`x5K~0c
zdsR4JLAXV=9BXA%R0X|0XJJcsjEN8kfd+?R+>M@<R|hWJUf;a@A%;69pcA9uwfh++
z{yY@t1?Rm<+gn;w%SWj#W^c`)SD$=@HF}?Zim_JNq>9~cG51Jd4SYtvqS5-&!i|GG
z=hBmy^V%@)c16omuJ{7(#4Kec$@ec2i2mU$zk<W4q0@n3xId<}bh^UA!$h9|+xe#8
z>nj&6*WGM|<xWcl+i&_45)o)`87}p>PS&$Zl_admr33ua3-ns*u{;(3GBeNNH<hFC
z+Ax<_b?d9^1;_-i?_(~d_G8Bwk*ykZ+7cA`S;rdxNuDTw=w8JMgn^9w?FL;so-X4=
z`>jx)2QdLLmUSQZHdViU#1rt3PvcHHy6a4|J+XeDxwF;nTe7(ePPsLWgwK&*C@JTT
z;l_6w^lP3aeAd^pgJ5WIIJ#@Zd0E7Ok#@s+&()D_Du^HECkKz@^6cG5%a2ba2UQ>c
z_;7zV;40pze|yYr?hgy%mD&z11Ve^2lh3R8gK#MBSc4>jo`l?9<)`BxYSD%>l|xm6
zg@O=2PfZ3~<1*xyU-I!AI$E$kWi=Ip+q2f*_idR#&So6}v!cDiwZmYUSeB&Orf+_^
z<w|?;J>7{HgUfx+&FwKIE%NwkBQ}_ncwVyY^|g8fz1I8I+ScO&!I&uvZ;lng7XcCC
z1Fq|yg@d(nY3E&Pfgw`pwtfpG1(|h-mp`Pov&&RkNARXpZ^gX2tiK*1E^v0Qkrgst
zxH;&zul4cy55lkryJhy_o>d=81mg=~gA#f4rVCx)`m^`=zAN7E#B8steIx8WT3@A1
zs}oHoS+;KYbUL>eOKdw_AJm)TmGl651cJh^K+R!BW<!22R;eN;Wx-3@4-Q+ZL(y9z
z!uHy7VT(6HCp1%(w&HFP_ha9i=!G1oW^b%)m)@PNaD`CLA_g%O+*bKnC@|1An0HGf
zYq_xXN53Qm9DEHe!~Y-=`eF)Nl4;nA=V1O^b?s=oW?fo2%MZ&k!2DALyHW45=4YEl
zWs(Nor)9N7c82By>#uy<b*GhvyDwIS&Mc^3Scp)iKY{0@4Zb%WGyZN?$0#@P-Mdu$
zY&{!;)Q3>he6u(`g+8iMX<`}oI*re-a4=_lk`gYiB%}meI4c|!y4)h6=bNM&?4B-5
zJ9*ArU{Do9Wk^^a+Wi9mvxAetOD5hpLdZC?1ErY9ujZ=`<>rh&-#{1Q@lvZtiv5>)
z<w+f`ojKdODf8C|d#gNRl<{Hw0s?r`#ZNm773i+bO+NU6H1J}S1_wM=F>jaJjXpq^
zq@5)|OK}mf4EvE|BeGOmD+huI%l&hB{BeBmKiOS;=n?f~2)kq&5?<9yiRIci;-li<
zYeZ0$J@#C9c-AZrTVRmv+aB`9eA93f-Su4Z!)1cOinI;dWlcZ>TM##?t`dy-n}Ay*
zB?lheK);)mgbMTGb>-*jc0V4>pJ%0top8sxzJKZfsaBiA#qefOSR`}6lSeP<Q*ph2
z$}`pbGcHTEB4&HOKKI^gB(pG!omeyu_MZK$Rqq@h_WACbyVKR4BD==77tfUicj-r^
zy@t5Nnh4O^q?la8iytDGN!d)liFDcX+`|%NSL)SJdXbQtf5#;x&a^HG{jS6=)jn}S
z?>3^)URM60AErmi@oE=Eg-w#9-!Pw~0S=e<i-W09oMDT=yHf)@M7Iiyr8wx7nSU)%
z@R|Dr2r48@E48l<R2m!u*(}K#X*6ijuqd{`iUlbT>+s;Ptr>}D)Snn-EV5hpE)J>Q
zyexC}owl_xn?BkB%?mH}eGhhR!|8IX%QnQbM`v<2dXl1|8zAU!s2ua0uioNPd-;ey
z-3$@xHnZzx+;l%6d8WVeU@P~PO6dnaJxbRk#nr{bbQPZgyZ*3YadcN&AB~jm?}r?`
zTS?_bT)xw}#PdB}n(=lrA|FIgL)>HawNAgYifrCt&u<ThmI$0^@?PyuJ>L5K{jz91
zFs1ADY4?<2+S*H7qPB;Fp`{KDlY6gAJXCT&eX{K3cxv~dB0T)0RQxg5lu@ya_a&O3
zCchv*KQ0*1xe)qc?Y=e}`evVUsH#=itLu`QU(+Hq!)a18w!a&7c(0sZU6qcqE2NYg
zFE|j@SWaOsQU2z?_uD8R8>?#ZSGI<w^Pr_X=ozZoEB}_QgP=#d{bHjq@kL$5MDm=8
zPg7}7KzD;yCs8h9g;V2kja=37Op`z~*6iT*pI!Ao9q?GfUI&~owdOkPs7e1c5nK?@
za|K;1F5WDzjjA)R&PHl}Q1V;=Ial5>uGXQ29Mf`G;{t2UK5|ueY4G*ZysEG)sSI-Y
zGo1^cu3mxY^IsF})F-v3ebk$XW^qOLy5Dp`_`(KWQ*;$U3!*SH)3nMCj>sA{eDr8v
zB+0PqDV1r17k@9$12W#3L;c8|uUM9nD-V~W66IbnlvaN@sG6}#6CGQlC2(Ma-@1KS
zC)4hKn8-%(_$%g$NT)YX$l{vuQC>mzg;doEZc9B}dbw0}CHa6em+m^W@R_jG#_m?Y
zP|n++0K2Q*<9L1r8?z~%-*`=m66$H`ItwhMZOB<oO3D{POQ~l}vP7f<nHp`Z?lau&
z4j^KY_>3O1MZw&uc25NVnSx&2`<<wzYw!uz$PEKQDY_6JboqjAxt8-Kk*(pi+M2FG
zc?1Fxxw*RPIrz|5#x;C!+vR@r9k{kl=bB@<?sk-(@$-kJ(E$fJYRAS3O?fthF8d!2
z^p`q3@)dqL4$2j_yi*y_8E~Ku?{U`=VLpGfoW<a)-T5pqQRKt9@C0T?sG%u?dpjk5
z$O%jjAh+!uHaKp@L>^o1vDh?ztkyhek8k>Ek_E+6au8a1Vy;O0<f=5u&UAJ$_|DF6
ztu7w*!EYR=h@shOhL$Q*N7pW|dzH?a2-f5iJ1nlLQY7(^IV|d^CNxI6CRfouNvjM^
z2<Yx9ar3L^F)2wX32kH;k2kXUY}Re{B0}r*Y-sSHNIBlV^bGv@j0#MRUy}+iYo;hn
z5O}@%8MtT@oDfFG>VecXxeLAXHqEKv*YeH;vt6>n>3c?5yR*=g>z+IXlF<5ASy(%x
zzxJJW8xxm+xrdl5?+y{pXE_g(7Y3ma8@DdO7AWskw^1>!%mwrKh@=<STcAS@Nn_H@
zAO(OSJ=jB~S6a;fF0b=OtYl2V;k!?`%0)!8hS|TIRj|v$hXx06bc;-6<i3m#jw{0^
zXkyv6Ud?U!M;2WD{NsFR?BiYFi_;dl!0nR_lw!(!?F2z>ts*tL_f3W31Ik(YLe2N8
zh{g8U#3$^{${H^ylv%5LvTUZ-s{~@<7GjoVr>A@o0l#7yeo1WI%ta6N|1@K43(;{F
zTHn44CNW1_R}2}Ru0}H2c)#P~%5H6WDwOxQ>)k`L;a6ApX{Z1qaSyNQi8Q7Fldkuy
zYo}id;T4zH1e#k+r2Ygfi2>z_TL=4e6*d!oHti&=mN;l-6Aq^*(TuuO18hZD$Dc-q
zPkaOg@ZVAm^KJwI`t}LMTsb)(ng;mUFC&ha@WGqF{CH&D+HB};&95*lO#ali&r);2
z&dLfa=`h;bQp8^CBiof_0>`L;lZKYMW7*|_pp)*LEjI#TIuhnDr-n<aA!KePFHhpq
zT=|NRGS}AEC!r1TN*)QZ!7Q2h#r=E~mEZGY(+&r@{P75Si8Cx%+fTf%OSM159KYUU
z1ZM13Jb$(g4?<=f``zO`V8PlxQsU3M_Z5#uLady*6&HJeoV9v%DIC&LD(fsYxH+TJ
zO_fT^V;OZV&nPGKi28(Q;qx5T%kh<|>3{_w@6*(4hN!s6JPF7LCnmhFl3&AJTU#^v
z!o5KCJYuY6s%dS6k$La58^C}{unD(t33m@)V&7Z8Zk=&g-NDeLOMh0~Wy5`5$4i1H
zq#WD08O%|i@B#C_FV(3z`F&41b_hfSujf}pYjukS4i6+%;azWC4qsjQ?&hN$YG&qD
zDkF1ZOKWRN^NepGLEV2y`mx_#s|N4Tw4Lm?L%c_CG&(f!AY6pK#|THw`98lR_N`hr
z@x69st2a<L%LyM<Bbs9i)*td6`;V-I%cly<ljzpilP$e(TCI)v9m3vS*d22EeY~bp
zs`X2(%;uDo_WWJ@iAR@#chJ@MW^Cwg(qyc&G#0cg*thAr4@GoEp7;q|-KHd&&yWeN
z-cx)(5Jt3ANsimQ-BiC|m&_n$zSV;kD6>u6+q@Dzef%iRsA&rqAK1yt-3Q~c{*wEe
zk;P+lYTDZF3Bi5VN#ft7A6r@WOH9VSGK%-nOKm#Fjvs%nLmTy?5o`LzrO5EUrB4Xs
z^v!^NgRJcmd=Fm*D-Z8?BERg=;p}yG_k87uD8el9q|H(S3gRU;H)2n2#<`JxXf0g$
ziDjt2Iz5>3!A8bN1ReD4H(NtjU(UMEC{ie*<yBZ5xv;e;6lOvUAz)E~EnHjnTz+)k
zyhAJFgz<(4a6qWL=R{C>Y^T_pPYE_k_QV5aIgx%1tCYASt<oHHl=8$B4Weop`=HkJ
zv(!=cXFBvZX5un@x{_wEZ<@V<{l@)$srwidSvDUMrtlOVn2apje}wRfB^(?aoVph4
z7*{G;EZR+0MrVmw=*7Zljd9^FwY$0Y^xMYDKa@WR2o2lZXrGN!W~~TZ-5lcft9nn_
zfio2MDvu2pZ|2P_Q*9rK{XtDe_L}~Lrnx(C?5Ue4`6K>)yj%CVu3O)?U3)O>ZTH^q
zTbIC!jHxsF-f(nKX{7z~+{I$T0v1FDQ|!aS{(#JnFCrKa5v^OBDG%Hx&E8f(k0us1
ze2q0*pE8X$@y2Tv`93XJBIMvJ>!QcRB_`mBg@K@FV0Z50@j?e)O}fuY^ywRBBlm;X
zB9-|R$n-iHXP3GXb2@Dwy-S8;#oZT(j(DUDC(4gYK8=m4|9?DvbzGF)^R}!jE+8#}
zbS*7il8clyh;&Lff;0k4Nh6&C3)0dJl2W2{DhMculyvud*5~_s|AY_h-uF3YX0EyB
znmHxeyck2z=1?An2{reAT+pI|7cQnNO*(qzNpzyJw{bm65(O5gZmC2m)h^K3W-x^v
zaW5xz$0*qlfc<cypMQU_dB9}vriF$rOyO-AsFN2u=8P3KSZj1mV`KU~`jk-qpZii<
zb9eh+h~fy=XU$mB4Ktd*6Z7VEex^X=)%SWm&C`5QcPN$bK?~t8yJ&~(^MnsE1i>%{
zEE}5gvF@v^S?zZ7{7$G$eO(>2g){}pZ)lN-c<;F|Da|`5?2NeZopBVA@Yv8j%g1ny
zGsVDAvFK}3e!a#27;j>>13#vlQ;_af;16hPYYG^xd}Q;8*z1p6&$t-Wt<~S~sz${)
z&p(@<<4q^+%Fq?zy=yER*Ef|Hm9jAy&{!CMQ-1JV^X+?k6Z8=2H}@VE=-JJ2B)s!3
z*-#cM30}bG!_T9+MHLo%g2`~?9TclA$<5<O_1N`yRhqK7$1MzJQ_oI%e{_BOX=EqH
zLbKLY>_LKSn!BV~8>+VURk|>=h4ZV3<Wd;&4s_Z8MHumrt_p~1H=;un(^!c{b%#h>
zuk)Qs{b^+%rn@|vmiKNw5)$W=BDP_H%xX*gapY6nrlkHtkPP1MDQu1Ip>y9^b39r1
zQ(DN<jjxtr<uZfc3IbXJ{jY-eEfYCht`<L2BSh?f#(?twE@hn8-T-Gp9))o#6}%mO
zR;AG+0^;2lmcORv>IFL#=fupaVz*u%6OAfQGXPoDb#xn{g_8FoyVhjtH*c>7`V$gI
zO%r+hsnfk>``1(XF9)FD2GAxgwe^6y-`Mx>N&h_NPA<U#-%iVcaU|-rhuQsUHrL-D
za&&ame+chwWeQ-O2DB(A!D#z61L+biCYp!!hpiQE3>lmBZyubM$bTQlD(<*WQ}m^|
zru~_TOc2ePk~lY7Bq;$5p^PfRoV#-7x=H%xE4@%`S1a^T{hLK)WnM?(KXU4Slrx-o
z_ng<ykK8JbE1mof4&kWa5p`upAtmZIPO`a?AXc%YBs??zZj=uo2gI5P?#)Zozh>44
zGRv#}3*8riB+xf_R6Z!HngyFsT^YP*MZb#MbxINMp^yz50WhrGVJ4=~+8geQ)d{(;
zS8FwN@;v6Q0Ho?b&$4i2|9%+YM+qKdWa;1^VR9!?@-ezDKNMoAC>IwOe``T``<FDW
z5_I8%R7b8JcA74l?*Gg5^T>Ph<ol2D@g?7TK8?87J1T%|u}zy%n_1NGt^7p_eNEi-
zbh+5TZzc}{KKyPV@77z<!xx{jgxBz@Sch@IA}nD<onig2Zi_%bjOoi}QZ?MEDRDl>
z*_~mr++BO@XtFqL5+tC<h;pg^SVQJHn%29SCAIm?*%{J)xB1S^Bj3!Qskl(NSjxu^
zKy;kxI2zd}6+EfYq(_;S%+%S3GN0TX$`tCLeUq6MD0!=sUJC?dq0*;>+VTh_Gamyo
z91Cna5kxWed*Q2%_;|9fO@#1rAs+>vPu#4_EHD~KIs+>6l*@|K2J!~1QB_#yb*=Tt
z_LMa9%(h-nBQ122tHTSVH19NnI^V0RLdfN*HjLh{NiX@UKH&&K)IjUhBudP$$}HNf
z`seZ$66KD?%X;Q|YbO56{6|gm5brJ!{epk$`-^$-kQwE_-#_)1Ve!%OoYc*3y$a>@
zjnLu&@h+3&=Z+Ksf2>o*I_)K$7?Zn6YB>lMm7%y$98z9U*>e?*1PE@v<EX-~+i;RX
zbz_K`*C<dCWb1@&o`GSF)JcuB?5~N7K`A|XNAdZtEP^z@wWXVs2V43U#D!?|@lho?
z$A!&13B$(n>v>B>{eamc;Rt*P!Dl6uVSnI<{R+!FfZ-3kM=&bQoa!^60tU@pSkwOa
zEPel@JXirv*KV?q&KqJc<+*PHouCpm&Wtj@I&t6Hoj6QxDnRr%9W*-4f0+}Rx6{rG
zM04?hNm#`ruENd{Pn!vAR{R5;4Q)S#V1-$*JLC<?Bl=M@D+c}h;^@%JZ#}}*9t!`-
zKGsrOd(c;fSCYdK_@evG6q*iV(5v*qdGe13G44kMFa%8&sTxD>y1BbM63vk&Gh)uQ
zrYV|?Ei7D*)YR16Rjia6xCI@CsfV$liwR~7sIHn#cj_w_2Rur_GKtT`8;kL#>n|yY
z$)SpLsO3&eG;3avRB#Vn-blqlAF<kVd7UP}qgJo?jR}4iW3v1BEx7X*Bxkyz!KRZJ
z?L}D$M(evj)=Lg6b=4<w_PSO;E~*o|2=Ajm0~|Iu1Q!=KanjnG7k<(-#2pB#>y;lq
zd=O>shQZq2B4ec*Z@(ADa1kl+VpU91?9|Dt|JhOWygNxL2VrTsGCDmyJ$#sqLXly(
z%a~OBo~kfg(WQy(<c3E$jt;f1CbJ0gC&Ah9K_BRrf@ydv!q4w2&P&{s3Y4CZk`R%%
z*_8)tT$fW{JZ$$iNCFETG--Wc2veazbW>c@h3F01xGmlxqJ$(8T`*<4PZl^?Rml?;
z2Tl<h`uD?wkPY<=bwlp*FK{RbkO*POEKQMpz-z{LBzEirJ|A`4sfqrtN+Tox56H~V
z&zFzs^$<ZX3D>r^u0mb?opyDi#_@<uJr3w&zTDfDy>&--i+xN4=~tRBV|u##>jJ2L
z9MuNIo%{$!5hIox;n!c~Nh04cyhIZ9HrU1O+u~Lwhw>$ZYYXe^-3-lsK-~g&=gEf5
z$-yfk)FG?IJFeEFU-U{EFI3=>shj0x{30$-P*6zAHCZ0U&nQI}MMAU#*Q0%jOqD6K
zSklmgO*=<tWZ8Pj%ilHs=-;IwfelGsXnz<==K%gL7mM=!)n4wXHm_Z$Xv%se)B9h<
z|Eo9C3PRAsNQp9C?n$F$AYabT!q0tML)&DGD;`W-r8G8?8{BuX#XSA^zA89I9189Y
zue?1;dh&cZbKsx1{s~a<+K;p!PyJ?-iVt;g4|mzl+-6HPE<M-29T&O%nA>p&BcC_F
ze)+OpB}v4`Fk1cV%8E^z1WFs{4iS;aDtWc0Q#(v&atX{a*jrOULWBc2a{gO`-EIz;
z=zTaRROj8(pTF-d-yxfRv(Xl$hi@X8=}mC!X)-bu_3g(G!}wCzJKzJT183|4F6mel
znNcnucz4LOeQ*{3Pw=MBhLL6Nt>jx$#gYmQB(77Dco)L(I!ys_V&KH1na)!hD<~Ji
z@I(>h0IiQ=d;YqSp#^K8BevoDIxQ8JD)Z$d^4-Vd@h=_l%nOCq3h{%JG4x%)_F3O4
zmLvIB)2w=jJm=1tXg+ZG+8u7#o)GfJ>3dB91KO+Hg1!TFW-UQs5`r$U8w4-~gpjO%
zMf-{o-H@<`(Q3GDYtZ+ILO1&Gf3RuV+bY;SPXOzaD`aPRNVuThR7pvxS*T0Zwt)4{
z|3VFt1|rgbt-bQ$ax#|#N<{mztYN4b>$EF09cnj}l-$l{B(17y66%Y6$*7;&OxkWh
zI5j;@Jw83%Fi>9nBdU*LZI8&8<l)`dwHYUV#vj)#4lrsh(krb#$I-R^5h}DY^Nq&h
zumWhO7&bV@KD7Cs*Xm;yT4JF{G;8Nexd!%Vi5a|;Tyc)4&t>*5+AValL9A^I|CngA
z#_E<i-HV-gytEfSWQGUHh1pD>ZOw8v3*C>TPo^WtMxIzvil1^zw8A|f4ZeF^>k1le
z+P3AMTKs2tfrqd)pDPw4(pDbvJ6>-P{*YNglS-cC%!5?Zn6FT`$`wfJG7fp>F%DBb
z47(E1mOxZquaRxoiTU9ktvb-6d7zIRZd_0Z1PaRMLK%VC5ad1G0*tSj?zvUcIl;Jb
z=Aj`gUsEMDwY87g*?aVvp3N=0rzpsAf@8@8@hLdlhz@<nXSgHP0{*={?G+pc?Nff!
zqWl-;A3vytq0Mv}tJP4bZ?*;|)%@!22Il8Tjy~1FKg6T{1AnXj2oYoRArSZy93zOd
zKxspek$e99^8Eh<hbXeZ{zwv2ap*WBiYFO=ZT6^@U*M-G6{Kax)m$Wd=(yA`=wZ3J
zP2Rs38;<P~Vq&02LHij%kzYDNNk(j$cUin@6flrXoEP6>l8{15Uwz;PH+;`N;87R=
zw>d|N$2ByXb|#^6ehOl~B0VZFYB&K~#4!BsI;E50lVC(N)UB<WU+y3c4GB!)81vBL
zi9MIv<fYq@)0rBj$zmslog2@C5%fSmli-jAvwepqI%B%r?sLWu)r-ivTk^T)p+B0j
z^HeDU#ex}V2%Ws~;+=6#k?Q1!kZZQcdh0PLPlRTF!+PGg-Nk!X#A&2TxkkWM3B-SX
z;<5-9^CzIXpRV}QFs{0)97iWuOlK`HbWx9)vP*NyLv-rl#eJ4YVlq%I=vgXY`IU;0
zmhNWkaA(0sM<4|Vc~kN9*?yS9IsZVanTdS@bsaD*ZNfBN6O({wtw_RuVE7^AV)ISs
z8w<mN9a(3&fy>~i^+pJ`BCUGim8&_{3JVY%_B;j9Hdp{}uZ_$|*IHjJJ8q3_GlYQ*
zWD?Oxrt*VW;!CMp;O~?(_-*sgX~OOnE0VzSpCG*T(jTfR-l@t}bys;=k~{t^zF_%y
zt3-GhIguAJ4eE8vOOvCxXbG4-lfAK!gU!X?lmd)3(W5rY6X)wWc|=xq<z`Q-CRU~S
zU(K9%OUdjyoHM4q69e9ZZ;G<Bv+ZjMSv7$FN+I@I48bDCs}{pt+@F#>4P}ejH;Tvp
z=Ne(fl_xOne=*tA1kyss{lwf(ZR=xSIXp5xy=>m@S<(A3|FfF*YNw)QMq!vP;-@6D
z>N_vw9TD@?VwZIL-}$T_^1{H$mNB7xQv<3*ZuLmh%0j@f7R$W!`)A7{WEe(`6)^2Y
z{RhOfMOHg~%L_*fV)PeU{A2pHa1-iup?k6lKQZCpGT;I!2U#@)^DeW%EkCQnl<G9h
z!0qjAk9t<VL{enstG*X^v}@UJVNgjgkfX@8(2vZhYI<?JwMpcektcnGHJotq>RA%f
z9=H)gh)A~BpQkJ#80ejT25F&|c;5f{ES_B8b6P_8wpR3Aaz-px0v5$iip}kh57_im
z(B}9W3czB@*<E+QOvRG?QtOw0_!Zy<c4(5O%Ukwpg1gX50+^^&#zK#f=5^$sq_Z&@
zJs6`DVy1lgaQZwkaW@nnmL`XolXx7-Bd9o*m}lkM#vyl;h9~zEJ@L=zei>Um5UFLt
zM>e6u_RkX_*>N=W>jQRkSuIsI%AX6|o!rJeBHZ%`@BMSp@dTrf_d6JPECLCSu&zN%
z;ZtDz9JHwA0S!YF-BES)kI(2(=D+t^q(&1W56H6E9{(NU-SImOM!G{=?Q=^si>CE~
zEfBnnLZnmsoCX=tokbNkHlDl)5MaUm_Z<YEA7ISa;wNk73+-L88uWxu!y#YXEg-U~
z<aHssZhmg=SiSGK@*Hm-tOhIdbb@0!t{tBzVTezQ8XlEQvhbTl_FnQwBNL*1;1N2F
z52rabzKn(TPKanMk`}1wIM`}$I<ux^RrHuYp=>F6-GU`DiuUsWhmZnssc66zs(k?m
zUWJ08!EgeW*9<9~w2&74Lp0$iZV>w+;tRVWw!y%Qla~AV)fR6%&yO}6Ex7FH-yrp%
zhojx8L(h`lk<Vx9rN0vr14hP4P+V5_ZsQ4M&n*l|D1YX~&Q;QmiS|k1+nt-t9fGQO
z<axB`Y%#?Us6U*q)pps5=-8*dB7AsX-IDGRNMJI7N7O5ZZ4xn}7&krO-0dP#sZH33
z&de=ggg~k8Qv~ydkoQ)3)IqMJqvPD8dvvM;VV_UWg{dqC8XD>=*^P}IQwrpmwPCu-
zreG@S!lwO6qi{&jxB&No6jka8yKZ<g+Uy_z9QU?~=~CUI1P3`#nPBubD-K#nDgZQ6
z)N{AB16)6zCpLt=2)ZUAs{Ta5M>^thWm0rQ1r#{cCeH6Flym45Cux?hxVX4z%6Ht^
zgycGyOO&&&4@dzvUAb`YSjs10Dh9b#2qWrh_hc5I??~Sb?w?h>eD*DFtr!oW+i2wW
z^0m@3=REdDHuGF!CpoOOb8DZpQTK{0ib4r@I#URS(MgVN5FS6HJi@W!MNZ8iUdy`v
zI)tht@piV9+8yHZk1Z_~gS5n&(hGTA2|k*=x%Q(d+lfN0`o>1jE_z?6Tdi}ZsxIkf
z$>?S+so!>ZGHs1iaBF~;{GZ|<aNUhCq_FCqW_AsFMV>KL<qTsiPkOq$deBiNIxD7g
zZG(X6iPfqnbcJ_(KED0tzt|o`tlR2Uol5o#KB9k7<iGE}p*F2cfe8BKZtjr$W4?5R
zs-?k8%xT6hwFZcJmJd7h+J`4@2wg7f=G)1#Sga~1(@rHF-`=?*s7gj2cMppHMfC(;
zI688<0RXs8H0q^P-)F>|`8t`?ua#N(r_;(KF|tW(O-;=sfCF&;B;2W25r;9VAo{Pu
z+%E$h$Nl$G@i0~#hf-E?Cib%1b&S~O)7r5cNs>sh)kxQNIP0?AL0jciV2<7aQTNv3
zSWg5oKJCD)q)@8eTF4RAJjX?&5>IH1tWZ}ho_+8+dM#*8nK6vyIchb%Urdq5eK%}^
z+M}^U2veuQizf^{;17QCVjT5TR|&L(drrGHm`xl$T&KDF@+AX>xPfnYU)R^xw|&X2
zVM1I=^aHa|Lz#P@mE__&-fk|7pVldbEm(LKPkRe(oPI_3F`Ur+2S=X9A-9z-;ZmL@
zEzio>pOGM60Y~Zskq*NXA3djq-GbbKt<4sw%<$$~?V$$*X5BHY!iF>u3Qr4mt>FR!
z*og+)crGGCjFI>i-vebZ%R=an5+f>>K=esO**Hrfvl%&Xug9;++xKiAU}V)5d8s|w
z9NGAuoR?o3^*B2%5>|{Ezepa>I*10iPlFKNetvD5_&<tAPV55bB(c0s!P3;IAZG4M
z4hmxA0r*I(9@mNGcU2P<s%+TozNt+;JNNMg^~7cw{*IDO#rTaHxO;xG>2B;{#+f$U
zIG{<*S`X-3U9h_c?kb%)Wse8g4sNuMD`^rz2*NXv+wz0qvxO1IXt<|e9m}UdkpW_i
zFN_0>#;!g0Fpj;)XD~P6!15>_x&3u9f9qpz&ysi4`fFdih2%0MG8F1IbWVk1$?%vK
z!#OV)sa0N4c%hi8Plbdp9WdzwF_(W5oJaW41VyL22;yt7CS)u(W56qU<pr&z8Dyh)
zYnN!3LD0V7vC-gA&9kQTJT4*42c_sJ_nT>SV&dTCwtxqxR?d#I2b;VAI3jd`C+j|D
z#i1?n=x9Mp2oXH~%CGH~?WAqJFE@gWF;j7OKgw^<UoqzoK3u}sjJYXkB=@PLS|ABd
zsA!wPcNQ>q8-&z5cG&L!9%zl{vl>ndL(oA)Mua7QDOg*tetB|F_b%F1KZhvF&6ivo
zHebJ5EPrm3#Fqg)4CwZHcCx~CkKOI>w`$_<S(F4+nE_=#{WiT2OMH)TROW7DkM+FG
z*BSEiVL}&gYsKx2jXd*oSB9CXDXkBQIW^cnRvCbcEm5RBw{Ab;7!kza!Z5kmjc5UY
z%pvjH(Z-bCM(cj$R2)SRnGavdKKfBQnIJ1ZKGVJ{$C#NitK+31{d{gtBlVG%XrnO$
zk#IPQ*N_lsa?v^4OC*x$%XN9?=dd}V$cpt^pG0d<Vxte6L25hKzrF;-T!`oCzVY5$
zn_cy|vOjLO-g7?qGc>}w-FlK)^Eo7qE{+i+%eqy^B22YH@mVd6iQma`>Ay?~_-iw$
zoA@3{@>%4$OQlZUMq@L+PBhu33Il5ESVa8NJAL8PGF)GNzeub)lb**Sov`{fA|c@Y
zh>4qnmsr_lN=nMUfm5?(+J3|vyLX<&v0NV|YD6au{#?xzHSF9}ERI+Co^9XwmhYHM
zUvOqhALeurVKupS)bzaMGg7|j`<{-8*sUh|EV^3|d=+MX6ulP&1#~yBU02YZ`8zn(
zyaEtKl=yVL9=T@lde!p6!ouC8H1}$&)#im?+)-}|qv9#1T;O9ZEUX}~sX|(IJB%;R
zdOb?H%4U7xC78+NM<SaF8x%sNhx~rVBR^$dI9<)yU7R-hzg_DX?Ax)s`RFi7)o4}e
zS1<Xa(C_yzLIydpx|hG6EL$IF=7h`y^|ie)m1KjgDAHd>4p*Cmf1&lD{Rsggo4yTl
z-+J6?uga3YYil;@l4h;Lsl@r;FK%43Buxr#%pJqKEMm-rWfgQ{T5^Bb)u^gv#;$gx
z8c$gE<*8l#m7TSA4)1MxA(#BrKbBd+JaBQ;KOo}8enOn)FL6}qal0s%wce42p59}v
z{<Z*1R)1#)xf8QOn+_4}{&8ZGi_N27fjyKIfyZ6Tb@&oV=E+A<b-3K?8r#~2g|D{C
zXN9Q8{Z_)z8T(^To>wWnoaU+qC<}ayqvh)|lgjV4jG~KmYW^x?{(Z;cQ*T<~5-oCK
zbRwF6^vAyq>e$)acZ`Fkm4{)9aD89Clh)Cbi0)9X%rDM9<*qslc}*i)9l2dPmh#x_
z$2n|Cnp9X}+>r!ilKz*0;LaMa_NP47+V+3<KIl>TDz^{<hoJ<^iqAKAKa!IzA_}gO
zSsBUyP2DI9D<*agN<|ptlYOA8ib7%{JKjf4>a0U{f;brVj0;My{`}(L3#a$MO`)mm
z+Q0k0Dijx(uy7zq4Jx!)clfwWY}@3vPykmS)L*|g>TG2*X)fa=P5jl+Utzu@E0Qxu
zE%*F<XCmfGZLRNm;x_KaCI3sp4v@vifp(;;*RNh3kbtVgI<9Tx20+Z%&~vA0Z-q`-
z;y^TdIh)i}Ym>UT(qjuqxi+{#=@WfUc3U}8h^Fq=Hb_~w>Q_+M<sJxgGWD0o$MO5Y
zsG?x2(Q*3htmXOEHAVdmtHPN;*V~HB*1OMR7MN9jhF}Ij&trxz6$C1`O+M!4zKHI#
zXf=;Hc`5CE<F0pEVLsdzd0|=6TjA^KJl%F@<`Xvg2+c*G<pWFsg!q3dafCM3n#j=}
zkQ{e-fVo5BdgiD`9&c~*h1G()>~1@oZbsckm6pp#F4tW4GpoZwHu1Lv&U(4D7>V&?
zy;$n}0xDoc+VV2AtDV6o<iX*8&HI=!vVK&KD{SLSe9#c1gOJk(Fepr8b$NUpx~SW-
z5P96Nqg6UMPUHGf`z~vu5UaG=dl9G^yvlB>bTtX_GE1WJ*h*zrB16F{^4x9V4rKs6
z>eWwA2h7~S!kyVN$ubYeuLohc6ds7hV?X^0#?2~;Vvw!=X66pKz9c=Uw8RC$9~)zb
zDJOw%M<>TMMdI$xwhrL^UDJkpX=aLsl6Bw5O5-<D%<D|Ve1&WDJ2bT&EgXN?5<XZa
zHG5f_@T*lv!g_<Lz2ZjV#i?MVSQxAfjLwOPeVj90^hxyCrsnN{i1qb+E`eWYUiEVD
zYptsMs_g-9tl#NZ6M|RxcO=K>`i>q;E%P$!S$o*izC<tc9?|I0rs(ofT!y<*cKM^3
z)nX1Nz18;>F2%l+jcGrRc%J`JIkz~_GCaFg{lf!t^TPL5!N!a`Eq-e%HhYlkW8zZh
zmi0m$`l=YL9H?9MB}#SMWLGa{35!s@f1i;G<)0ZR`a>8bR>LkWW4q4%pY};&oj3)~
zN)f;OU^b#6zB!>BAOb`K9y<cQF_AUzd0WP)wdQLKaXN~Y>Z3#o>f=)*?@G<6NtA3~
z-MsOZWA|)|wT;{`DMv!=bC|F!qJNaG<-wI&Q4l>DFc%95T9{b+s#=KerF2L83P)B^
zW3offRS;=9d0y<Iv^%9F&<JU4j(d1VHcUw8HQ3jR!@C_x6WMxqWiyv|-y6+cHeMzb
zaX|AJQ3Dd$<Btyn79MK`$PXN+ux!nlDxJ_S*aZ(i6PTWvnMu~4u6ND&{Oe+&q0DhM
z^T&%|`#nPZe=K>LJi_lxExm~C9etMCB4Dh^j&K#|Ig!tz{okvd0R_0Yw$YtP{WeAX
zO<$~)OUn>s-%6hq-SghFD~=vp#puVx<pTC|y@jyBNW82v!F4llAMK_3N2>7e?@(7u
zCk^Xzm3mM&7hc({MoX&_MOBr>dufI}jA4|ZhY3jso$SAe#ANXp@+g;Byn6Fl@p&I8
z8_O|oaMN3F+;~?q4bLv(E*zI`9oLlIQEesQPDaMcF7jznw15ct8*7cy@4ZC*!kNC%
zJ?r9tGlzY)!TsWVUWSWrBK}+gQO_OhTIyANYJ;yh|EXZE&sRX!ovKGIH?Z%Xxbr0e
zN0R`;LpaK_?y}{3;k~NVoJNsIu{^jz-Gkc~flXIjRJ2-6Fy&b8li4_LM<4d~8~Lpk
zG)hK?v<>;zFRCleTK28KVOeScX}*t?UJ>dxyB4&J+24(tFKM2hYgcw@`+7_^Y9fL`
zHL=avR@Vk6Sq(idZB+9fmaz}rbG>*{ZBVVM-MtmtX>_Dm;~#9Sa*X^)NTl}(%Cv@Q
zYGrcvVfcekA}oOJUz=n|v8on;VV01MgRH;v9Ak@9tV#-#emXicju9f!o#~v)Uk@Kr
z2C}j%+hjVNG^qGRXOWC!$AyO=l%a08UH7bbs(U%04ooPDHwRN4Voj9+XIPo$SnrMe
z8i?E44ag`oW`Oo*uWw#n)^P^mi&KB4^?_?3_(+!A8uS2<cwdx8K9=mRpyvHNcyB>A
zBWvmnsMDUjX@6z;fN7$7U+M&s`6UgqX=qUI4KC*)nbjU~f5g4?uLuQr6cton-jYmA
zs>QkE@{6>nc_399840U4H=VD&HyM(j2D2&KP3B1#>~jFqDXq56Ga=$8dG)O4yt&<?
zQkL}UIKh*DDJGIFuH<nF7`~fAL~>_rtv0RirI2OvyMH0=u@Yl=vpSM<(}gaU6THko
z#)hRH;XeDZ?uPQ~TK{n(GPm^nnK{#JpFJtOuT_4|qRr7U#297~fsB36;O6J!lVZlC
z4YrmBBkODB!Fej6*27Az8arl>Q>S@cBNQ|Sv&DVe6?~RP^Ca>chaLw^u-SQ-HRODI
zEGbdwx4)%P+f5DqL^RsGALBzIQ-0i4QPrSaA?dy`sh@b1T&l9nyU1Bzc6&vl;GjFu
zN8LW`b~U*75DmT&v|5mjP4P)kI}3X*E4*ZQwHkaslF!+Hip;m3K}DJjPBi+h=YtZ5
zon<w+GkC$Q;ANETPNI$DragFvV2(E4(FVcN%F3L$>$3X)n*~q`QlsyM6m8Q4Wa(3S
z>-=ec2?FI7pkR6R!s;Um8xjb!iCZcMjc>)1og>ExOpa3i7oS3;ITAJ%#JhRh0)P9|
z!fiz_^-y1)2i<}a!BLwN%B>rm8pXoF$Y3ZyA^OS1n&lz(J9MRkgS=&#mc~KN3IUY@
z3d)oE{0#?>kLdVBqkMF;%{=oR2665Cf1htO>YivbBzosP5`p+o^aySRFKmtmkY{Pt
zayWjg>WWyd9p0i5igFOMo3y4VZJ!fbs*VNc9pG#v!WNno?PX>QAL1%#U)cNep-w*c
zob@KR{h;!%M)Wh-UpiEEgy`|5>rQ4x`mhHVTP?#Z^O%0+QG2Juz;^M(CR^-*@xwJ$
znQfWz(NXRaVAwg^GBS)zM57AMAyy5>)_D!W0=C>2fx=rKoebuNJ{Z1@Kc$TmKwk&3
zKGiv*j{E$_itAr6_H}wt=DCi}s+(DKW0tM&915d`*GkFNyOKeW6p$M)N}^l{i9r!w
z90P9HxM^7V`rE#zjPty5ln?4kh>0aJ_B+#BxKi+We5#GZs=dqikw~Mh9A|>Bk{>B6
z69fvIC~2y{t00!SS2row?TBKJBBmdv-*@;R#Q9z#^B|Gyn_nG598Fyf5~TfllHbzD
zYi8JaC*{gqeeulEOzHZ00L$yf&`vLdkn^d>pn?7N)pYJ_FUSR>K6_x4%;v6Pl>X?g
zVe6xo$grpf`G_TGE5<tj)TVo=mbpJb@y2kQ8t!2RsA8HkS)f<`4wemS=}|`SAKW`Q
zdaci99<I*Po2Uujj6Nura<fDH-I-mG!z@vv0!P>#LVR>w@Lp3V@D?y4a)@I1RcLC@
zd&$*)>d8g1-jFx(c-D(Dpi!V`L*D-@bePkI;A?uMc_>cx??|bOPbRL9tRF&^=}@nJ
zOJ@)aG~X?+-)S4X-zVj6^Q`IyPk-i(k4R3%^BadWT>UW^uo=)$O^foSuY5%}-W7be
zV<=QuIa+F_a>3%IsPg0+CfI#?)Ihx|OWne>d&bYdsSS3GdM6SQ)7VydLm1ytMx>)B
z_P18aDeA0L-k<cygJd+LtXHKKkTaduS)kjy@B_Wx4!O*`#4`EDR@+S0SM2oYa=Hic
zD2L#yBgDeM$AAM#Du~E%i`c;|137`OiipJ?;KF325Y8q({Me%3&`g3XV)X{|h>y!d
z+%BflFx4vB=b)3&_WbQcV_)4(`PSN{u%E?PL*Hj6mThWM^BMQ4F3vt#WhcVXkf(3g
zE>9mc=G91&Q%S1UOGdU5)@{5Nk=W7K{$~+@&7wtZiZfG77@*~=*r&Y9uD?IWUsyBg
zLWbl`_1Z}aIcI_y8#7BE<yYLm^d$E-L}qj)37=NTZ1zZ54gL}_LL`cro4!}e6f9R%
zdo5;-;%Br(A~Es$H>`eYK7<_=5V#YytryU|-jhYB&GRrcahctJgEWF3A{MS%22P|t
zK2I&wUKL@mddQLQF`ln5JbYO8YKI8!D$HZ5UyQ4FH;{v1bnmd5qemecSa2P5a-_8#
zblr05f3VV<I8`hi_`TtL)yqL2U-G?#$I&|RGsFA)qjBeJS{NV5O&q~s4jpnXqQG=!
z)WNcmi2uzToB-Xf_<7pP3ZwzHAC8IKDrb0ZMv1;?0In0PHf<aWhLIA!>LlH88DrJU
zU!Tf1gcdCeykz8`AWkYJX(Do=F>9w*R}=x5OXIpq-JO<#m)ZupIf>0WdG6-s49p{5
zjjdEINNTD|oU*%cR60&e&~yPcG>;aQ_$4>vY%QL};k&7{(Aqn{WTzjO_2q^Hjrf26
zWAs$oX`Xh`OlT2CohX@Aljn}1{WN9nV{>KO-4D{M#;MjDf^P(#(8fVAj_$q%zS>#&
z6R8An{*C{zu?o-|s5j=#ijs>*yPhs6C0rCNAME~ag|FIzNXp6F2ESW_WS%cmcKrB=
zmi>@zi1Mg+RF3;rAQaYg%&p+**;r5P&Y@THn*xj9o1D{QgL;q7R=AJ(f8hlO>W2S2
zM=zXji)_mIk0ZCO(3A6P&wQ?~9LNk4@8s$7{534!M8AKHVnT<|xXU<V8t_rxzFvvC
zpXCvxqa<h3)nY~vMW^}n3P`K;PdKFC#<z8~z+^i>Z^u7;Oujgl*jX-|n*9NtDJ8}c
zl^VC|^QTfG{#j(>GDK4&Pd_P)OYolxFxuvv27`hu98ER3wNh6BhPX))RbKA+(TV%{
zNAjE{MN4g4xL3fqY@y;UiOPb4-j+<8hWb$I2BWe})s9*fPgWm+iG&G!&!kUCUJr1(
zwqJR$JW?pYUFLdxd+eJ=sdLe1R<@u}^3}P`?AK5x9&~929X~o3pwoY^5=~qPN9#8m
zmuq5-*kQUttSD;8O$3RB()|+qLY-vY$uu+alk+MbvnQ~JUK%r$pB`x85CA1lmFw&=
zgzj;zqC)xnFjShhf<RbhZsn)~s>y<fYfPhMBfg0a<3QXRo48yvj6CfoF0QD^zQ2I|
z0Q{a9%i=Gc3UTHw6@sdi&Y(LuEmJdM-)3)N!)Auw5Z=-5Z&36%dKdUA%PHhi&0&<g
zl@vpq())`s4&_-cMTVps<NZ%B-yvf?O<uuevJwkF5=G&-6py&K;<ymp{%?OfUqV_V
zSaUJQ>pvvoXE2A1_z3wRM_ckOjcBHH@!Pp>i4R`eQJ9b2CRbHPigJ&g4+#psxs!2I
z3kFdPL9)^li_@*LHAmf=cxU#tp_dwP72%uRD9lP7y)p7|bTK%N2xCXM1n2D(YxCP)
zM@`L%D&2eXrq4->a$-B9HJIwIezbtx(^4+t36Sp)z%h2{RG5k3??XZ!fxsYyaU_s4
z^_!q*)!6=IJn7us(nE7jr_CulX2FwH3Ea%1r{}Hv?pU*CDD$}{<gLLCz^Yfs8-2NH
zGRyo@`aHu{<~&Ec>~lkW60EGLe})bg8`K<RzAQh<K(*jQHkJqXHGYKWjkgZK=<vd;
z;tTd~m(N+fa%A&KyGm_N$!t}gi{it#zNcL0;l%w7iM!5&`}8IiLnMwHI6Q|3rM2!q
zL5V2@sQ`7FiRl_(!itoRQZ3C1@2=PsJjz)8Rnh<SH8?~!#OnJ|nyW!7nSxpNc5@p`
zhpw9Sccu!`?<|niaUOxawuhB9%CSBHIl?l`#x>m6-RRn2IVALczW=-coyuux#a`yy
zvr<#}U+jP5)>FPTG&B^|t4VBWKM%%4caeEKVp?)Z>>SON9(l#bYoB*sDxj!zztkmt
zCRsPh?Ek+ygE~cpNc|OoI?bw_(MP8f&3<H!2@fKem}v5NTIC1ovXkN+QqpD=I=3{s
zw=~yaJ6z;xn&;l`%7HJ3GEkWAhkj5j7sg^4IA5)~iTu|suR$;x)71-Pn9_MwmZi8^
z&nx+~G6!1f9N#(CNYsI%*BIzq_i#p;y>fe?*=Vt^qGWD8hc|AQf&11zp7v+)Z44Z&
zHS&{=M@caNICK&~S~w-A2w11Tj0&{y3ElG$3hJxxr~{&>L^#TCyjiath}6!5Em)Uu
zAzd&Iqn4yFvf$jPQf>3+Z|+sUilq~Y`=9B4hGMK}wQ>*#k`v`G%)Zca{irmMZR-q4
zX|L`*r_@vF^LjGtxC1V=+ZVl@=4rlEq8LMqPn93oy%)rl)0r!tb06~K8*J?cD!UOX
z2vAwh{fJ<4X8gKe@j_M=;<Hrocoq8rAahlT$apQn`D*nyPmg?vDQv+=7;Rh_iFq;3
z3@3bDQoD?D6KtzB%n)TipF1ogO$%b$67=vvGGT;h%=g^bsGP{}vH=HNF|{WqHhU*R
z24(Xk>z*Hp!b!s_ZhKF}D&Z<}fPYbdy5)GOD%@fHp9U9+V1y>=RI?CCld(o1x23lx
zy~gL1*xvc)7OX41R0^EEahanh2NR_%8*H~Lb%@0;^KP6e+U>>GI4ImwO7{vdeuBYT
zd`jgq%}Y>zUqipWXGu>pkWN*~Gl8q33KzXJ=$r)WrnyQ`xuVki4~5FKb+O=Pwl-f9
zLk+Fzoj|m{#5`0zO4bQr@RFGcJLIx@ROan<@T|8WEz^EHpeBj-q2FXtZEb$<&+!A?
zvBF}bOw{P9+q8ZbGhQ;TOGmuuP#vdfKZc_OfBFx#>*_)R^I>8MNeq_&nETSwEFOHl
zb_Qd&`sZlw5dIIolreBC^0l{5i%dPhnf4mrB3I*;xC`bn>J7I&X4@JnY-u@<t`j&t
zs?1;f0Cu*d^$=f3L5)@4kiz^m>zMxS5ys}^nmbAAa?J7g_Qy@fM3K)Jr64WqE>#T&
z-dHU?Bv5(=6!D+H**7~8gQyp8+y)&4l!;u?j+zW`9)lfZ%wOoFL}vUab6@%#&Q@sQ
z^-8mVm$rp|Nq)DxG9LL18yz^>p@-O0?@x@rB$z=b)o!e+c?HXL%)S{ojBnOxI~sJn
zVwHf4z5DY_tY?Wo@Q$jywbM(TH1?qmUL}*FZAo>z|Gn)!hS9mX3w0n7B<Qwy{78OT
zVd3_xSGailZD2@(C}@8ys6*4I_0O6L@{+l%mML~p^&&+p|E3a^Yb_<U7U=#8>tqm#
z7(CVttl1-0Us6tQEql92OifF`9yr0zexXq9^K`7qiF!Uc&({z@5(4gQq}7e&j90t|
z&f$5K>Lu&rKj3O>Iv6lcAq=An|J>&0=1-ooZ0P4(1KRJN6QiJCZS$PlUT%N02piur
zZn5)3@1-*alI|8<+*6&e9b;r!WFg@EKx=vrBMV1|f`Li;iJOG@X!1+<%4O+_o+p(5
z^G_65hlhs_nr4nSuZ1bPs}yUk%Kd`R$8<87^sj0v73S2GCsrb<_pWH>%*J$clg)|E
z9OpgC%s*v1%t=J9Zv~h=G%DlX#33G)n=iP{Uzy7i&6-@FF%?ym_>AuDL^0Odo1Psb
zm3PJE<$h|DtyTYuHgE`-<YK(6D3+n}lPu9}Y|t(&J)gPk0lZ&~U>frX7_KiCddQTl
z@6>xrQ25J4o)gk27)U2w3&bu>I!tKP3|J~H&zTI=zq2eMdTF&!0M}4eO=cXXQy0M?
zDp#^5Q5e`;?w^q{`%J*#qyEQAI-mCTf1p#HEs$C9k&RL_==nLZ!~DkJFt!<_8pB#|
zGhS@25>Wt158<P)64sH_r0y)XXKf9=1=XLF947v*Po+h=^BrxbRrSbChw`7O)p0(L
zb%zs-V)(qo>Samb#(?WND}IA-qxTpn?%aDfXyMD~ff)I}XZ0Ha7Iv)B7W)Kfb7kUD
z2T1h@$J*U0&eF<b&4u4Jim}ZT7JfEpxW)Vvw`rXzNHZc~PqP~!hS414IdS9hjpNzL
z`{l_>m;T0HTS?nF^2K&B0MOW#5w$mzTK~$yfn+es`@t&84`@fHrd9@nB{t-*Y7xa{
zfDia*Mhb}4O8J=k4~!@2jT%Ld{#5KfU8)DN+2dj+mZJq)U(eQTZ2g<mqTIH&t6xC{
zx(_q{!5?V~g)XFHqQQo+#|!MVPc5xNWf;Vpi8fRkAMR0$c`3^jaud^GP&xcrXW|Ps
zBjoK(A_O)myvNLtB*XE9)TJZ#TmHnKmX9A7*W8d$u>Zg5U;0*rHawcxyG~}Z)eaa-
zhdwk)Z5?53umLICGlrMacG)hVf~l*97--n3kqG|{IhAp(SUSp=I4=c?U2z!3(Dm~3
zk86%kithYEP{9}#5cuXojO+L&!I%-ve5;y6OHU;uW6-i!AVOk5ZFZUHGPlTdwcPM2
zHIs-69Blt4`k>AMfhf93OelFwn<U^*KFZ)Rmn*nbjiH4qCp|^rhnwh`X_!aax_+f0
zV<?2uiNs#%VD(0`@q)C?lMK#6&-0O}yhtTen<TzXIb$s1mo)GPhM5CDaq;xC3Y6Tc
zc<dTvf?eo_Bp`g?hHGP|oWGwUkIqv(NjbY_F`%l{yO}wFQeB2l?p$W$(3QTmdY)I0
zqwLv_p8mV)8L%n|aGWE=XV*)*0gC`|2m}e8d~}->nnwNI->6Gp+5Xk2erKorp3Z^`
z(t_7&TY2Zf4O&K=-@6~5O$Ax5Aui>K7vbaiwlVb~hx-lN6Z8=P-UDz`x3f=Dbth-d
ze5&lL`|dWd|H=s4Aaao18PYTURDYuJWZTVXae?C`VEkt4+%4qn^Y9Zt|NOi2g~w-J
zXXt?m#P{%Z=uyk^QK7U8_UTre6{+a1ktyCj_(1ugqV0RhhWzpSvtdZQbNuz5pINX|
zzHlUwI<sxzj58TpVio=l*{~NdP<%2=VtswcmagLS^i#Um5}u5Z)Z4dncaMSj*TRYy
zACJT@=kws>*vi%4j1KwNl8d0ojWRi4y2*9~pT#h?Bu7e}1wO$EjKx}9b|1u?{aAly
z*aIYWjM5095>?Q(duGkMV0N+u_gEnONcxp(t?+kZO4!e`*I8e!S?PXC$3jmr<(Fvh
zg<-AD{&d_>5~a-5%U#c~EF;PpBqC9d@icl^#WwZ7Wg~csM4o#IoR^LJHBhVE@>B$q
zW@w0BMny?LS{nS+P1^7Swh4Eg>a@SzPpOc8W0(2Es>Leiu94N;Q3-YFY2mtI@Wx#7
zUIk9aauE4vueK~j54wS&su;xGG+sEWft(5FF+q4Jk`t00+xs$7&Rta>M20y-{8|-m
zAFv*<LqhI90|s!tfT>*V7aqc4<caDDaFqQ;aN<!~v=E%*lI@|I7qA{f2Grf$Hod@i
zrxUs_IF=jHJ>^?a)D8ZUMwpok=lz)E_`P+*4@7YTP`8C*LA@ONS+^nA7<L}px#r1a
z-SGdsB(DOk(hOB{i_js`^^pf##9k^0dwoA@zx+;-ADt#vH{0@cz<Dx5C)p@fTftLN
zBV`>BqiE`R++s5`@PtB*BY5bFuI1FPFZ!VtXP>37@&>G#2cEly8+e@$<F{iPCQfio
z388WSB#{t8^ZI`w_Z&vKjEx14yzc$?7`6oJL=#~XyA+LT^V~nBemBvX(?DX0MqT3d
z-eA``0uucKr>wzo>P`dJaE9^LTgjL3KWOF4e~}HKv<1QllH1X1TLh9k2uz~?ZKD*H
zAw^x@&{0y)X#+X{_$bVrzaILdJBk-r2V<!|4jA93`n2<qZsVE2d#DFo-##w(VfmHw
zE$0kAYdoyB>*ij4X(}3LkHs3@EK^Fz8^Yb}27cvdERTI;NBnZ{sXzQL$oyw&7_hY$
zq2I}A*0I&64%renKrgwV5#u>{lmpmvFn`E7yVNuiJ<^9wcPOZS_)*hzUb5mn-*Nip
z^rX@m{eZ#bP5`@oVu8#s%oloizNYq(Ai2U`u!-O<&;J&UHjXkdBO`-7;lQe_Xyg!X
zxbwVYS0DZ&(bvL3lWq_J*~FcEuAXr0`F_!@ba_+=8`JcsqDtAB)NM;yCR@-!p^Ded
zP@9G!O^)(X4<6|lKoo0-uDQE0HjS~3g@+<!p!|s!m*L7UF#o;SAhYRwXlcn)_v_b<
zC9{_s;{sn){5RF90o+VQR<MU{eVn|8qdTK!{{xN+#JX)hN8|Z^eJhoqMI}pPZaVFp
zP-9NHJNrDI%J#IkND_h;&0S4#x76|Bvy!PibP0s5;dahIOKo)FS?{k+)AHZBx?Kr~
zuVUknZoKyC2(9@iZUHdJE20yOoNf|)9npu9+8{M9^?fROPE;B2!sm&V<ofGS1RHdc
z#{U&tth8|QAJHez-?o*;N~iX0Gn(DanE#P3RI~D=7Iat4V5h9Wt2Ap3AHVvQBc%9M
zyEvF{Xmd@MiK3YxJQ|6q`u44@N8xAwbDn&>AtV1U*3Ey>!r1}W%O1SIXd>ODv8H9%
z#a9<Hm2N97ttsn?-6%C!lbk79c@a4<Fk`XNa>g?=8|4L9U>TT$N{`Z|>TuLzD3}Ln
zQNACIHRJWYmNTTxWl+;7JeceU!_RN0=QNHsbX52i4N}&u<VSxnwlz{9k-Y!#nkheq
z(W}cZHi7FA2Mb?n+qu?#Vy=aXnD2~$K2oGBD~*t*p1)QLHILv;Er5*l9j@jx4uaZx
zGM}E-9b>tENn)Ln_@FLk1p!jx593`UEw?=eb-8n-Ab={jH^MTgWWEk!ukN7=o4wL<
zx#*Mts-g!NxNeTTO7U%WlVOzBmFI2AmHPD?&26c>IH2i35#e0ry5#=r_VNtRPBFN1
zN8xtr0eYMp5Dsnl`d5$o7)-B|ost{WF_phMKU_Can`OR+5SzAgaEq`#K?!5DU770b
zJ@ZHc0P(5>SJB;HP_Vj-OR~+|G<Q)X2`%XY)&wN9ey{}z%~lP$51+UE6lO$^ZjAlj
zc`a-0jk00{=0T}B^*>cX3K#g&g`5|L-sG~e$uEB{B7J1x4e+2JzbTk!_YhpKyS1kg
znukST<Ltbn*on&t5-QL<>zPaPBr1GzGa`rOS;&+hbW$%J`yOCIUO}JM#i9n>`6@Xe
ze1&OVUH9qM(9++-pNlVb%+_h-Jv}|`Zx&zwlbuB)jZaRu%q(k~+S}W&$#j;o`K(nd
z*{hqV!;bqi|0_>CK+h7J;8*2ld~~A$^o5RF(X&j)*hJs-UOr++dwF2hDFi5d!s6V8
zGX1D?xbcml-`8%4ULFzjFZ0VnN4mA_0i!o|{yDiV`(MV({v7OAxLMqZm@W|d{hs`D
zYti9Sl5!AIgnct%Hy9uG?Fk~dtJZNWa@Yn|JY+%`11|$#&_FQiua@TyjVTDM7?CmU
zgAx0z^`+}Z--?96!jV=CbNPOoc%(1ZL^7&zNhwm&XbFfhsBjc0zjQSKVPFVll%t`{
zh5n=+=hj<r%TZY!O#B(>N$7V!|BTgmkj7)akX`jvc;1Mj$i)Gj*Z>5Uz=+z6)l4{C
zMOAthJ2&T>EFIn6IC=Nm^j!!v&=0oem`ic2XLB9IG{Lx$#xu#U(tEh}WADVw(ook#
z!s&<bPCe!&2^}i9t6Da)O5_DZr0NH4Y8d0+2cG}ZruyrGJ$fbLQybe}UX#d&<$N7j
zw`lF5hbbgP<qS4%@G=wXz=sUVYgjL+>v;3v1i#2JwhXMBA84A071^S0Oy$iPIKXaG
zLsS`;?KoT<o_kHEy1~cJ`!#sF@PNGA>wLY)WT!~Xl8%5G<0!_n=O6qQItMIi@aaVJ
z;a91RbY1IjRWD5VHAvC=K=d|B!EBTdJ*74@n7IOpJ^p^%yO@ud`LgmYe=p*J3MRjp
zGp;tG(+tvJ`1VlVVK#Hqt^82(>gfBf(U$)kT#;@&j-8DSdZ`bv-e28e_?+NaViAu@
zZL7P>NhDMm{E+IzhKQ`UtK{&q_dFmdA>MNbI{4DJ$l2K@=D#+S;BAZ{vpXM`j^c1P
zmu%)II=|aI%nJeXXfQ0($Zu%br}pW4;L$+`xD{h_uZ5pPUDn!rhw8jacJ0nLM?g?4
zG>0ON@rBt0w7weQ^6jv7SWFHh`RfQx+M!2<q&oRk`*XAfyuy3P`+MRlAoJX4nKvw>
zbf~fd^x&!fubBd!)TSf1CrnIhBr@wu@ZI7n!YW3~W=4*c+Kuy}f1`?2v-Is>IoO0D
z<$s<ozYXYcWUP}U7f3INCAOaJt3s2Vf<sb=DIZ*n3G>agH*9|Hm&rywh#xf54L&(M
z6thfY{Eg^jfoz0x@hhs|;sInt^CLt(hxRY64|)#nX2bj#M`|W1wzmkOlHU8jujskW
zL$Dn24`K*{U@&1ck-cTRWv$x2uRL>4@@3t37;tCd*+}==;@?kDF1swmqFGH3W>n(B
zUR9f=H$&^FY9%w~#8_&>5kUD{pZbk{K$UXj;=M_W8!Nun@m->u6M?;to&V!_Y4sp2
zYB%pK#I5EsD-L2uS6hxYXPm!hy)M5|v-z_b#gDZT=P*I%GY1<?=PQ~K9Gbn^P#!D0
z@(*FvSDecAwUOkiFWXxALh{#QE;wAN;~U4QJ<oRdR|$_`LiMnvUQ>aRJAulCUf!UI
z%e#=CNf&+S9@3$h=N0PkzE6V*9ql6dSmven4?Zcy5C#)~7e*{YDqVQ^ajDx)f;|Se
zcg&WFh@tdMsO6u|41(#AkEu>nm3w(q=?Lfo!7wKvE?ioJRhwc%+F`}`ug?LF%z787
zdm<39iX*2O>YlTckYp&ot<C2zLag-rCHH?dK5gRBw!5wa<BnZS^Z1t)Ou0WAM9=hz
ztuIw_aN5E!Cz9WI!tOJnHWNljIbSU3Z&?>*pcI!=J9wqSXmDHlBo@`YGr#)q>8n*e
zMhe$&GJT47neA@~04DFPHjH~<l1NVQnK}?4H?9HWNg1@twbKvMA`BlBdChlY?L};*
zJL>T9ZALDXgy3Z+x+|2zFj_tMNbK`pvu^OVv~h1cKfh+z#ltXweG}$OdgL&+E)j@k
z3Rrk7Kc07bek6AUF}yjY$0HOj67}Wx&^uW|jsLtD2OK3tD_(G+p=Q9gsPO&Ej&Hq0
zEqJF3xXEJWj<YMTX;4iHa{p0>UGC|e@@SbKy0hWZMz_jTsxfC@F!jhvl*;+lEf-rF
zF!E5vu%VhFy7ODLdFJzjwk|tO97sCjsIcQ~9a|>DOz+&H!}MDZ^p^4v(vFERRi%ZZ
zY5liIYP+-#?wsvJErzwYuUSogpt~A@$0@=pdnF<g1n2|WQTfiyJ+%R5B~cNPhRwqI
ziIZ#Xa{Z%saNLd@xJdl}n#w=(W5AWDfo(j1R$iB%99LX;FdJ{)MENxBvc;UmRv{#a
z=9x?l_P4HWh2%kpRDPWRba#;m6<e<b2KSG-DgMoznw{PFZQt!0Vn37zC{5-v!YFkZ
z*%O3X1}C?SqWVKg9Q}A7wEH)NqofjfD*94n49QJJ#IPi>&Q6`4_`kf30SoVJao^l9
zgyufH;&gU$s(8sGXa?8{dUzGzGy4Y=VDRz}o2ZqO)a$ux$x~2%LUanCXAe}W=M5Yz
zL<dAV=GpJzMi&9jX6trp`l*3}q_oN;iTXqv#-;}De^A^M7h^?@$~Hzf#0UCjU1G_S
z{9wKcoXL~kKc)B{yk4|%+<~4<f4S;Jx7b%h1&KZ(JUvgc=t_&8X`KvJDEGQ3s<z44
zI~5)USE_!(6i;?H?~r{hfJEY1&Edv@dfvCEKS=~57s{If0a`J?c!usHy9MDQtUCX8
z{p|j_U-h25)?-^-8i~uAckH^rN_rH2UJAz)S^9$eu(=9XC^`TOKn3Nu5*fiO*!wVP
zL7=&OLevqqzrVlOyK@JhhftR+(P;1qklmwuS=}YqnT?+*sHweetfVycQ-@=s6m*=p
zs%=VplTHtkpWl&LGh7{4V&D&BML!4l?09IB<ci8)kIeWb0xcqpqYmTBp3TK0rB>to
z9{bG%Qzh(_Cw&C!knJ0ChC(+wNscxf4$y=ZHFX+&+-E(j{M9&5Am9pCoXB0XsMb!7
zKrmm-xh;8~yE|c;$^~^p`KvB94Z6{DM_mo--~TtrcaRa~zhW@>{Ex{LXyk1;t&|0l
zQ`&nNxOmsk2j0wm`o>*d5gQ}zwsrM_xIPyPL<%rSkr+QSm(h<z1YbDb#t4iOvpMJ2
zAP7M=NX>G>gg1nh5DN7DC0rNsTrL*ijvXoy>$d*yrU!RDWUsZX$~7)t|KO1AngYZ8
ztQ2-<C(&gv5Q)D@Bh2$wH$;AW``&+FM*un`V%3+9%8hTDcWPDrHr|4fByrNZFv`s!
z0$t+#XZr4S&d-Zh44f@QL>?_lU2Swtc-|?uw-?7txYAdxoD!+{-x3_mJbgn_Dav<?
zl!!Ji5h-$eXSg{ibeKTBXwwp1azvkdT6H1}TstR@653Dz{Xb(V=ScY7e2&R@vD+~i
z7l;iGvkXAUm*}}e0=8w<UCvp7D+0qyGI;{{jrb0FzW$(ne2}{SEZHvLT|&Skd)l~6
zWS^8tu0<R>fAi<k`3O2iBJcl4)K>>Y^}Jupx>C}pAR!IXAV><V(hUYFA&rzM-H1p@
zgS0H&-5nCry_7W4-7NLa`tkdF{{`jVxij<RIp<Nym<y|u;``2WzApbjQp+S9@#3Z9
zJ*_UGf4gr1<u(8Fys%y387HBDg!{%WKt<J!ZyM$mHK^W*9SmzV!l<dy{=92s)*l<q
zb;hSmU#JIRUI_2y*Zmv}WuDVYpKh+^x4C&OU7g2T>?S7M`KtC$PIbjwftou(gqP4y
zl8wdHjxdvK>&Iv_%ak<c2{_SyAfCDf=^z+v-w)W(BTHlYMxfK=#-iZ90U9?gSSXLD
z-Wkbi|E$CWQT;M)%>F034nM`)_s-p*a}`IsSABPAW8w<Cy+p`}jrav3O9=Xc@WY=L
zjO|e3I|jCoNgw9rlNU9;ZWZ_Y`Oe~yV_JECJ8NHQ*K@2{!_~#bfqfY1o%iHIyEmki
z;S80L0H%HAFZS$LWmP(Fif{cd(#9hitbSM1fj?8-wWxm~aX$h%HA`>9zc#h>RWw0<
z?DV`og2j_C8h^{k$LoOWCTIIsuKrUs+a#!7a=F>IqrL0}&iZa#*l|I=QmVaPS&q1V
zAM8uCw$`m7p@~L<zjQ=zp#S*tM?t$9qm~8SsqP5Bi||3v2?1&2D(f6Lo-tUDOKiSy
z?B(ODcAix7ejYqu-r&9LSa@|?ODym|*_&ZZGb+oWr<){irlKb&9PSh@0r;YYlDgYz
zl+@>!Aj?w2G~2Svu;Q2cSP_g&Ij;GBp_ys;hg9qj^Ih+3EVn%$s>>J?vY;u;#S^=<
zAMRaD_LQD@$C~Y6jMk7)pE)+d*($An2=NRjgWkfl!x&F^tC(}Wmbq`GlmG7xf&oSH
z4cDzi0oz4yAgAjpYP%|+5ZO#WlTfd?^rFtR$UUEPAL-32xiF0f5wgD29Ct3N65r;C
z4wyR}YP8RlbaRj$<8Bt}Q|00aZS~*g1A3)W(~o>CkQde(t~?L+KtWhS0)|B_PWL3b
zJkD8GxO|W*0P%p2EP@8ye)K2TJTf998*87D$>wGeb98^xYgn@)1Y>QW{g+)~&2)RU
zKd>NPUeYjr#}@;5#J;#%w;}H^%gf6rZjK6WWe*U#c;fsFuO;~4-Rw)ED==It5YIl6
zppKe3d*kVHT+g8KuX*_)vKi=t^07XdMp9ezNx7&}7HrmBM2}azN~Y`<Hy^sHYKwd|
za+hkr1M~HpHw|OT&cxj=({`;w9zTkk26v7I*XP8^O9pQRAbilT%)o%sO*TtmQwHTE
zp$fGYopnnuD7tqPX7;Cxi>SALAM?m#@%^5J1$Wbx5;CGVxk8M(%aA+m;c}o5yoEG4
z^ARs0z=q~C6dQF#kk~)Fh^s)mM^K1%fPmy_q8R(lS`adFtfUEM@-YMiCIH2ug?rrN
z(IOvxBvTUVWkMi48I8fYl_q9Z;~W3KqKW@El*{D<khmtcCqAU5aj>|E!Xi@8u*Bos
z*SfJu;<M6<?n6rv(Sqcu6}WI{1?_7eR<55lZ2f7;m38O+aTwDuYPu$kATDqnL#w71
z-?oy>MoB#w_^L>}Xnq2zC3LDcj&SU8H#;S{US$Mrw4QH>nxW!*kbc6!lHbu7tPkjC
z1nlkYcNM2h-(It@uy6$T@Hv3&*AsdazjJz)_fBzL7C3on?X(9eC_5_01T!#Q&wq^N
zt$`)6KQEpS;l@KN!@5-E@t?7&Y-<=}USF|y<t#akA-c;^qAt??FOwc3*o$DY0P46B
zU_3z~!Jz%D@bvU_9WtV@X+!R98)1kSa)95jY~I>RhbhTa+pbpGYKHBPDtEtKYDEOQ
zz`Aq=gQSr(M%bK`5jGFFY2bM8TuFztOL0!wG+o6G)ymw>G2D<_G!B>11kBm$7x2o;
z6Yq4xp^;8KCDht@WsXCuEe%N^1bfObp040Sy`D=lRCO%Ah{zYUvP(khl0ybvVLfCA
z31+$kY)SLkSs0P)Z!P8K1c?pk-L&ed7kz>Zo8HrUf8Msd_|K%nIxtcCF5*`aPkd(*
zN(Qm2pb#>j^S64f$7+9a>Px?{+_R1HdPLMPSUFg}t(zRSLdCeu^n@Rj8xm-FOyW{{
z8MQX0)}%?;GzP6ST?N@40bNT`XsB^$of-=d!c43ZF=@ptzqdW>%22l}H<`!9>q<k+
z4J`%GB0Jfp%*TAcP)#j>-wl0t%(HozZ@>)<g|`ZnSEgDHJ<&}-1z%k30X7~GwE}e;
z>3M=fdWIqytil1t-TR>gK*OqV2=BKmRulL?FEJm-<&;K!%#0oq^-MI69|R%c-=GD?
z3$4EnDC9~0)<LEQO4=UtDh(+YRG{voUh{xz{~i;3$tM{9(zD#jXhGiWCL7O&LGbST
z9)$s=A6*g_PmxkHm{+<V6CVDMqXDh3V+rOzkHMdYGQlH{T3Re#jp##sa1md5K};e9
zVIPX?{+{vu`vcQL*Q4e&{?aiQiMwdRm}@4VBV}*bdI;nKmPrI<ftMWW-53bxas67;
zmoAVIW~!Kg=AiHSErt_8Nk7PMnC=rkNgT1mJ@+nDD+<Lo16v$H2j>^%U4JIXDj4ci
z8t&CW$FV72eVr7H9HL0{+OhEva@w|guLMASEJ_209p7Z><Al3OIqLUX6{uE|WCixh
zRM((lt;){b9m=pWqk@pRyN`h92=!7zFg<T&htyJ+Y%udztq}tfi2iMFa+~`7Pkd`^
zl7@ik_a`GN4FG(?o_Tk7cN<2Yk~MXru%l-U^Jw7RU{9cSBUOwKl}%g;F-*$&>H?mm
zgj{hG_bG%C5)E!53Mg+QL;@V8{Au63B8#cveS;?OuNX(F0ISj92cnN|Vm=JCeFTth
z8-YprYQ!p`I6V!W2_&B2bShRy!df@p^Ipx62Rb-l`$-;R1!uWkeGVElyo}*-^5uy6
znN0(OfJrZ?-QqJnCRN=(kHV<NsOQ1(imK#`0&(XuthL`J+thWFMyeQSpD@?Hj)wNB
z5-SCSXl^gCL36KsVHG&}<)B%HciWf-H~<1~0MC&=w($+(vYYV;{SVh0CITTNUO=AT
zBsB227AUu&6X{D?+$O&xYeED{RZ@RY@UFhs>TjcoFdN_2M^Q4U0fFh?cp2IM;>UDx
z{h?Gz?fR+@Yr9P&s$S|nm=xlz6~^ojUKEDhRST9jr`WG2Sor?3B0uT{dUV&Nc$TJo
z`E|?>c)aN#daN@uN+#*^-cqm6Eda`<hxa${L1z|N9zuK~ZGA|<`2#yhWACBWn0AtP
zI9Q-M&1Rx3suNf9!Ky?<6QmO9@-Tiv#`HXDzTGVI=8O4>d_y210nQZ>1N^$=4Syw(
zuTNPUAiNkoW96O_D2?_aBCM^K$PoOrax_IIp1c$AeRGbz$rRY)f5kXzl~}KjWukEY
zTX=6gO<Wfu@_m~*Aaz8APxnXp=NCB8DDh{lwe2FAltYZad(7C>wDLWu<-5wXicdo%
z<bca{HkyrQz)68>aS!ES`-M#rU`pr%6M}IkSB8NOYpvrR&&P+8Py9cFOKg{7ugLqo
zw>Z_iLV~!UGnC2`{xIB6T~$~2$2pVl&sS{_l-^5AYuVCiM4;bsj#E4H-=G5s!>zJ_
z>RndgbJV39A{s1l$smf#_oRMqI9}N|{Jn~1j8T0>rwc^U|J}0_8n7a3bx)J*9jnCh
z0l5b-Y78{RXZ8X7KT$KB%mvlTetm?XN<=-C1gHrT(}u&pi6Un-dN;KE`8k3tO^6EY
z7k@nJ`Tk|7`R^DX=QoAemR^D2qUb|F06C6cn5filzg}I@VPVq0iYUi?K|{dqtt@T9
zp<_X&p&gt4xxc?ZFY<^aixU@ishoIH0-S;b=tbgtFw1jF81}KT)`m1qvPowDWmtGq
zL!*vNE_$<{w`Ss@7HxsK_G6{Jwvf~&cpma1ntrKQe2E0Ssrub7-7NoG<^jQALoh~t
zm0fn|;m|Wl4IJ+V%%hW&*|d^1MKEQ{j~H5yA!mgxVQ7{$k<QOiAmmXe)Dp&Nq$%60
zRY-j5)A&n8Kn;RAltQHL3~EfI;7T754PKvK*R$fjP3cGQpm#r!ia4`-NQX`XmYxpf
z^)IFeLb<$|pJwxMzAF9#KkSA^-CO9jL|&<G#3Ioe8g0#PjQ<wFZ=qdano+bMAHLj9
z3o$^wa|Tds*wUIAsc$SFUWpmb|AJ^B5~dmhbXQ6MQU%ZsaFl@~SOmnP^B*xE3L^TS
z`M-JgUJl9tFIn@cpDcL#XnXX_>*vnZFN<<>H~K2uQG5VKxxT5wg1T7?8=EFhIrPe@
zZVAxI8YQ-}qE@#bNEY)9$}1rx0r|;YQ2f8EKPHJDfVgvpVx|MQc*{Nzl`MPX`Dlh>
z;LwY?QlpEjiCOLIF^C`qq2&WRuRph$_Nv}XB4UuMCrx_F22v8RW;xIcP{Mj<eM&pn
zFwW@#mUikAAT0-*S|JV8B3T@II&1Jh{X_7Fu%M%>=b7WXIoa6)sxA)ka4g&vAR}<}
zR8C<VA#M}*%a*r_Ayu^!pfDweH01i_K+U0u_QYg*>$-<7WKQc-Kh+mI1JS-Igzf8U
z6O+p?5nta^;D#0hJyW!X(t*rn5u!tEOHH}Ob++R8H{gN3(E1h#E=6yZip%pZAzk+}
zeQ$sD5K7@nW`juc_&R#URg_@QC9%rqw(&Q4<DQC37Ezn;;H<&w0Wj1))nIWEXH=V6
zewWz%J&hqB$uJn6FI@k;Spgz9znz_v^DxyYZKUrt>DxCbH0gXrUv3UJyU8qXo~+7$
zJ{yl<5GTh|g(}-^Z@$HFl*y&vI}DRX6cUZn1bowaoU>ok{P86i<{}mrRpft3K^dO(
z9Mysf>{ff}V8`C(F^(~PEU{@CTl*|$CYM)?tc`PIRXZa(6Ntlsvio)rRp^LEROQ$Z
z?NIG4l?nzPEt2`4ETH<*OwLxU>d4*aGQU%6V4V7PZfwlnKI&w+yux97$}?-7Y7Xok
z7iv=E#hpBJ2X+yhqxO}R73{J%sd!*x0bs1&sM0;g#3n#Mz}cf)S6+*1-(i!E`W6bZ
zN{%qyaPj;F+Kh?M#6WRwJvYq%TTcI#iD5hhTn}(|=c!RV+Fbea6XU<!oMRT7Q@i3|
zI-K?K+VL}|FF-&O;tkk0WiLOFcV|RghGH7Si%J>S&Q<R@M3mF?$wwTSmU3nh7aT8-
zJdRv2RZUQGsy7e_!d32-B2xL-h7o-4yY@YP-H)FpE21PeAs;mEprD&C`X)6`9<XVI
z9p$Cy#Nl>NTD7+7-0LFPll%{#jdw}qx(YFU^X9}e?k-QW)9vT64+-881-5-tA8AYN
zwbs)5YV)U{>UH*LX?gjkS^U*ugb9gC-9#UDS<uuN_D}h^*wo0>+c>>A)ZLO_-jSMo
zy|G!qdBU^WD|nIUu4%Eod+vtUJLy`mdM+|o!D&%+wN<f-k-IFjaIsSty6GxCg&haJ
zI~C*`C#GKqq10(gD?TPY%nO5x$SXuX0rPFXYpl54PoyJX0Je5eKmV$q6|w7o#sCfT
zOdi!d)sd_A$XaJwKNOX$9hox=$X9`E81@e~j3%vYH~UV(bxWaSphC!$M_uhm8R<b>
zk7y>F@=zwP9-U<fyf{6{4bqFN!k~P5^l*QvZAl-cBrLrtjidI}9=upSwA<iV?F)}R
zUu=mpfrrql6_wG`JYa>TF-OP7whhtI=^g#)B7C~vJ}QU&(F16g%W<Ggi&+i)F~&-5
zo@m|2;~~Fwp}C%kQt3W2kc$D?IR`;UIwtIu4ZV<nR-jo+5C+q31_Gj9_)v}~0pdvA
zC2=n2w)u9_nEr&SKZLB3;BkNLIwlAUUwdYVzUs<WO=B@~c;}zV{Ra!}&|w~nm{H+?
zK5^7HrRu`1GXwrK^DNNdSSjvFdkueY@FNlAsKL@nPGeC3BEf$6DnJ?ck2ssqTJIqZ
zo&h+Vz_oh!R-3|t#eOY5vt|PrWB@)(N6irH1%&qcu=0?{SDT;DU#U**+Guxq+H5xU
zj)Chlc3k*g8YKUFM5wsYR<v}`{@T&~TTm=`Ur#JEx0JEDwS!QF&fSIcm`r+TDh+)5
zgFWx}5^S_h%&pPbUtJ<th;gkf4%+8HhES4;R)U_rcoJw#20_$OdZ+&_I)wlXFI-a*
z+fdBp%n%*ZHjb*=@_m88rvrWH9y_tUw_>TX>i1mg20C?uG^VFY+RcD;&LL-DPO`)d
zgZy_(#nz$%(FTQb1eSxIws+Q>m<T_<jHeEZU%mREyc6d_3CG9pM}kRA%6ELj&u><F
zI88ugp)c$mK+L3;n_Mm_WK*GIQG&E<xtunzg64a^X+A(a021fi_!OGcLYO`<4=BJ@
zAaa-W4q3O=m~lBoSHByKf}q}<5oDwB+Q}1Ebj?2al@*vSwA6c?A|C`5PTAy%NQnce
z6ZIK^2u}UO7;|gum6kC5K4tU2+l+z^k7gl*kZKo4^g78T0mR>gq+y04hfk%hELOkJ
zO$b7!5Z0Vh<r__Du}ItTvFbj1ltfLkV*tYC^Ez>*xN?GM(jb`KMc<TFun;hg1xZRu
z+O>b4tu&v+v8EuGCS<f3c@V4z=*k};8+7cJHa2sNcj>UJ7Nry^JExb_at)UjY%jjG
zCQlT6L!HoD-e*{A=*`-Tr(_M%ls5Q-y%)QIvjC+E_UN86%$?PwoZ}JQ18M?nv|}2X
zw>ZA^Qfzd^HRa_;I*jMib7@D-##>7?m3xDt9)avyfkP>cKTixcUV()7Keuj%`FI^U
zE#l6RROt7cAebb-_65v+Aku#Bn6q$Aa#bE$zUwi}{lE}=%ysZNhTth;<f#S1t#;7K
zy<qiCYK23yLy|(%x`km4S&WjI*vB`*wKQQ6(5BVOqpVkc!Dga8GA|N<Xup-t0X3l4
zHz`K=UPs2aYw4sX*?b$aPb~xh;18(~3Wvh&FXJOZzddC9V4e_{KS%GbV$S#K>gp~W
zMcba^0QY$V9j(Hq8$xQ{$P&^(Q<>nhpIRrV(nta^Q0jc#_=f~nIU)g~7a+r!jZVYP
zqojqOT&0SC4F6B5mOzF9jp4RODgV0G_`?|N*8bO@Wt<1e4xNK`T4s|!;wbqRxsTWQ
z(etkN%KE})8{IF8?&e5S)?qqDn~4C%B1_#~suWX6Rtos;8jA4#_x2)-qs%L3qB7#<
z#i!@b)ye?2xflS@Bvx5!YI}P13k;`T-=%M7d5$kW`yfkPXW1okqM)TERag8zlcO7m
zSZc69`HM|;&dPizVkdggxo}8i>@kP{4j8zA8%sI=UQzRwG$2VRgy(KiUvMJCN@z9Y
zghoM!yo~dFFl;?|!CKLSyPf{%v7mnSwO*L+z1ws}IXTWF%^B7ls*9ITt^W$npsq4?
z64Xv?!(t;LI@Ti|Gcm)$=}?6tISQ0pRyOUGPr{?VY)ZyXNl(AUmWb@XEQd7|u@>vn
zj*W7BBC@rt8F|uk{D)oHXE}ylqZrP*i+%4~q8Iv0y!DL@7s=(258w&u-l%$7)e{~q
z{C>X*0+}yf9LuZS`}VcjRGBukWNfyzwAPfhzZz(*lU2`o%95px$?JfHe*%s2=N=nz
zcl`)p7U6P?o{t}vI)N@)Dt)o-QpZieu*ciVF-}fo3c;jV`0UT6;crx!M${i9z8d$l
zzl_M8j5&ifV?k=WE{hw-+pnl=h(A2>A8lyKd&1`MF}&ln*8XZG-9h4CQZ=ju>q3YT
z-9DVL09w5xLPA2lTQ!|=b8eRmaNC5RV}5m#OM9jl<QZb&ISsQ}W*)mL5_F&6kDZ*!
zwLdJ^O8rxD^E)d0mVA;cPg(^!{|38pqLwC^%>Kvkg`<3ry~RN{*;|;kt2=o7Vn~{*
zfloKo3H17q#Dh59KkdVLrRTB~4-(He4t3o9jyV%5=Kyw}huGiwEkx87)$pUXfylAB
zsL%RRvP?`)o^$#w)7}Tr9jRtOF%74a=D>Pz(mX6z?rJdq^7K3Ke{ZU@$l67q^)ls%
z>$UdAHnnvIZ%QG=931Nh-V+|0_#*2kRL>*q;gt^WD=T5)s{f^=z-lmI<!e>sKEJB1
zIy%`MovTxsb71m$ZU+Qq#4ZSD>f9asKi`u{^g8JhqvxQ7-?GxaAt~;*x&2+a_G~5n
z&cw!Cf`o-O8p@h~YfL~)1b}Xm|Ci=pGWjkBQT#$q!(m?*plA&xOI$k7bl{Eslt}9}
z#askVx3>L|sIuPd%1{wQLPCO}JLM4=KO}!4JO7taw~4uSJmP3hJ=aqevG!Z0w8CDS
z;xo0%GqmGR4Kn4{zz;qC{xxJylF5Q3kLDW^6v}kzH@~*DJ|&+*54BVL#MmJJoozDS
zT(E~)AI<w?(y3_5?)n3>=l|!-z;S~@kEmykk$5}-;~>;rvP(K{!2GTM1TY*NFQ$Rh
zId~rdou>BMOr3*~G^-CuR#?qYwE6p--+q=Jmf_t~%4W(9#b(rx(0;(K#apF+8zt&#
zzyOzM@v$Q;d7_rplB9^K>q`cn1X>F3_GlPh*NC#NekcJUS;B5uOZ9p%rB8v0ju?b2
z7HQTb8GiFx?C3CDxCITBUJ-x}zK55yJ`?m+Wt_mr%d`E+V|d?_=`W}W-H(C7>{Y#1
z6-Kgkrc=0C0bf!^*bb{(9^B+5bkxB{p_|`>CX5j>HD37I^GYt*DwaO+?#Mk??vf3U
zpX&zd->^_koqq;j1B>_R)3_?><e9@6d14O5H=Zll?#cmRCg2OE!P(hHDJhJGQ}WtZ
zIOvQjKqFPDf&Fm3`F><x*lD_+(2w3x4TFzzclYu!RCd_mS}eIy=3ev8NfdZ8lI75c
zchMNCECbsKmB50EF?+*k@`wxUe~?kB6;FVK`UO*QC|f)y6($ZfoILyxo$Z^GccG1F
z)}d6JF4tdePYQ?&<@q_8Q5`ph#fipbiJ@Pd_h&Rq*LWxc0r2<sq*89hDWW@(a<qpu
zQB|z|tZta}zTB~XU(P{(1XL$Te=<dXxRO1dQ3m2D6&6KqAptL`_|;F&+yDRc(Ros|
z<MSU8%csZPg@Eti%V>biNBUB&>vY`g5UA)~KV%3wkTM8L$j`|5^ROba9UDU~a#q=*
zuGV4xWLFvce_8<Xjq-LktLpAC6Ib%5lT;Pj?@Bl1mOUg(iCXtX-H~?aBtM^PMn!`F
zh1eLL`<U)Eu<VPB^R1hn_}|E}um6Tva5Kmp%hU@rbl$-?s{c4az;>c<H)VL|g-9ey
zZ@s=9>?pMbIYjLp5zzFmBvC%jnR8R1y=9AXYt5>V+UM8gB4%Yns^=wLh;!enR~=I1
z(*KLn+nzVmdvBy{mPNl7Y;()Y&1E?zn9U%gnjrA=bi1brSL!+_3#|O?ErVs|iF8lL
zYvuP){K43{tl1xEAXHg%&3Gsy_<ikj74u7c?uT>5?|eu`{M){;KH+x>3?k17A8O}9
zg_eiS%Vunbz*>Qq99Dq&D6V!=HlfQ&b!-!RqJ9?0zy$#L4M7#}%&&-#wVutwP0W|5
z0g?y&?(cV?7C;Nm*v-Pgc6>javh;cUq)7^B$i>YE{imk__Lg8T9tNgKJ1D~UpEBr$
zZYVZ#u(P`d6G^VJ?osMu?3#T5VV0-kYnS&%p&;abJ@<L+D%`Q|!7B?3iy({mrBMqG
zr<l%lE*3qxJpe>usdk<ki@XdvV3XqpUy%cnwjJREG6e9T4@q9=kwngSY6`ImKPFKk
zK>&7y8sfb+XnRO5Dpja?^W%`4!{9S)3KYik5s|Ss>#`JI!VN%u-!lV$A#b;=+fTrs
zrUA-({UP+Evu;G5`qMK1jNORolcIP3RnGpd2aH)Drh2t_{FXr%e_OFpt*y*%`;g~q
zZrkz5S|aQELhQFnyizpEsBLI1Ph~a=#hT1eabGmaC+k(y^I;V*2xW`?__9>&{(j>l
zQNhozWX(U~GUSvG25?k-Q$e^S0*WD(S?nqRY!7R`3n5cL8W4GBi@8`6dF-S74O|0s
z0zGmy$SV=!`b&zH@5MneCX5R0xI{EoPqt3poZ|9P-TjUt02{GRK5JMkk%8!Lg$fm3
zR><JJ_5(D%a>}MxW!g4!Z~Y}9ZS>*$)IkK)|9_D479;%2rt8xk*Z6Br)bgyS6@ry7
zWqfNLNR~r2fO@S<exta7?bpc9m}Ya;jqpIMH^V1(=6K_DAM>l;S1?Ws{A79lAdq=z
z^DfH8y}CuO#Z>LhE&t~8o-MBTBGxzNS?B{G%Gz&Y@v?FMui`H;8ZJ>%6v_jjVjleu
z5VB-J{XHV<!ZH0NK^Fnn>VyqdQ0^mzOofUq-o~Od6_?){tvK^^*9Q&7?;~#hbc)<&
zp3i3doGS2rE5(q_KBS3^#YGVXaVf=FSoYsi=XQ@)zB&CpCE(<yG8ThDxfjuH?%#=u
zdR!ul?A?zX&Kr2%&rQr(a0b6}<^Hi`q5XcYdaz;wz{=&Hm?J7drvH7q-g1AjUDy&~
z>Qfn!7AjiXf=)wY7JKhAuEISSOqtg$+w1*nU@f<3=8a$Yi8#@zFSg%)75=IfxCu}!
z!$r3mp&r^butf~Wf~e`pBj^mZonT_6OT)4Y*2zbh4!)_4LoPS?x0pvX@bnyUB-@9h
z&Pmf`$|+WZ_O>8;)#EwN59NX*Y_6&JE%=l|M>c;$>@^xLi7tfjh>}kgeY*QyYLEY|
z6q^CQJS@h%j+|)-7)KTe2Fvw|?<(JWAL$Z@W%kT;1Bgm~HPP*P37R)3xvO2H+zeM*
zrH1uaoryg>?JcE^P&rTr860yAPiV5^qA#IM$=ux7Kt6v_Xbax)i#YWXvD!i`$80y4
zFmb{@8`$)~?pk}%#!dnqB=b`GC<z9J3{CgpyokSv(=Et5Lay5z?<Pxom2ylzWLGH=
ze+2#}if|BzC#6pyHvwOlUMqq88}l>{<~R`qMfoudxMu{T=7pFmS0c2D3UP25zy3WW
zD5nSu#9B*PONt*|yC7o~E$2V4&ClN=2$pnH*Qo!sFJJ1+Z#l7dN`JK^%;X)q%Jxnb
zEx4esi#Cg`=OZi0X6&IctFI<w_r`K9b-rCH&5#ggaaeZ<IseW$O<XJJ>;Oev=+yM|
zT$JsdyN+N`Rp`TlNfd>h6?4tWPDfl^T>7Pf9nD35y4w;eCxgX8dG&XUhZ9UboE@M7
zq@PB<D8{!7#6@OtZ>^zv^&J>8;AyA)G*E{LPT#Ly^XN8`W?tAkib*?p)%Ai1Kt52%
zAFNC!5GF6*!z1_QG8P<Ag@a?zOP7Bd;?}s+S3#fA^`@yd`OHPVBI|io<?c5giD`-p
zpmEB2I-0fFs=RwX?cL<;MK>Vzk;T=cIM$AuLU6(b;j7&In_8#bY^ZBNyMy*`)z7|>
zSU#|aNr}OzUNHHiIeXgO$3z7qQ)g|sXhE2<p8|A^SEeM>B%$FbLo{y;A>-1^^^2z(
z5$Jr!$$7j~1Zq*cl9Eq;hno3AAnVj{!*CKCTvbnd?O1li#6-0YzhWzITx<dGqiH}S
zl}bV3R>&bEeEST{o^y`Lf_p;CaW7@3n=_$wtl?j;{>=Rjb<HTpkyi<-C>)Ei87GxZ
zCf`N`N|OHHXYuligu2X5fx+$kb2?NybII_kCJ$M$kS)zNPfg71fot94$=zS2@$Fs2
zT&IL5O1e@W*u2imp|1}{Mdb9#I_D5KIf-dJ1tjJHFdL!*_Juf>hqcd<mbnlB@C0SC
zygw=2X~)#K=?N*JxTUDdFG}Q+3+U{<BO489S7&6B`{*p4`G*aK1e|9<!#!y1=$zbB
zcoKqMvii93ys#1%q|khjDVw<!@!r6tRnay=Nt{|N*Nm-$FxPt@#4B^Q&!WN<84Z*I
zYLyulCvInDWMlxT@w!ecpvg_?7t0@OCVT}CMlO!hqu<}?;T%`6j9ffQNat)oGt8Y5
zlf^>Sng5-V942_Zcio*9H%IqTX<<!w-pD<{8dJiXV*-`rs~BWtqO5!sCc|~3`t*(-
zTXc*pVoTw!j%H?;r^iYlBHjKwJ^QU2YoftmRUYk@$NXbyfX}xk-FzakseU@rqx|<A
z7W;cyM>LhJcAdAqmh~awVP`}q=mZ`r8X6_@DKWY=@LopA7iY<MxDe{LG(+ut7z4@C
zD?_uEdjc?iA2LYRs9<Jue$amWmCN8h8iW0_0>5=7o+563y@0x3EZ+M;f*M^2MrXSF
zRNLd<deT!fuz)b^f1yPT=40mr{*8q3xa*n@Nhz5Ne4Syc62!3owqYYCWXfTeIn{;s
z4U<Bw{_J&m%mH)X7jzEySR;Oz#Ws+tH)vhFW&ar4yMfp2K#vPtsaXQ9qM7-B4RA~_
zV4F~ED0tKpT1fiw&aoo?-AVct)Mup!nI?;8r2o@^y8$pSbn@h&W;R9;M}%RSt)vZn
zwS2<;iEsvfE@^<aAYc#eRWNFV>ZqwnrB-kT3(8Q)tyClE?XnxB&A0T&s3qNXpK4$1
z$ckc2kSBB)*9%G=ceLI7U*y!x1R*0ae|2+tqd?^jz%m&dX>-f3+<e<o8<G3IqiIUd
zpyk1$4@0v))PpHXY+T>%td43vuyq(p;=ilsd8F*&G#PDHAmz~<`oW(T58{F?w#`G>
z=KYY0z(3flA5FP!1?RtDa-JCNk4BN;&nz#0l#}<eg7WU^SS4g~9j%cq-)hjkZsW3i
z2Z(9@Azr#eU0YE;^J57Z9zws~XQ`Rjp9U#mDWzy63EP}7Y=OR#sat@rz(-;gSDV3!
zmgivPd^Ae~pCfLQ+}c}Y!fagMW#Bin|5-7xk#8CFXJ6)tA}J#6L@XzYOXSSlr^Yk_
zhYB_=I~oGfNNr~V1F^@6yh2ABD_HUQ4R}-H$HhrQzq}v(WLQV0F}V)>!N3oZgq*9T
zN&TXbPF!7Z&IB;Cm+I;9#C*?U0i5Oy%`wnhKpj`m$E-1|WAE~ezki%)me&6FP#R&G
z^{)KvV)5^A1*Ep5A&m|eVEkykX=tY8dZUnq+o}S)&WEsjnUTfL&O}Q4abjqPVK1*U
zn6W^&jhBxv-u8>F5MxufsQnPjaIXn@>Ty`UeINAfyV3o5)NGr7*AcD)L5Yg0$&SBL
z7_PAVt&vShvbiqg`ZcI_B(+ACYTO`6%=21@!yIvZ?#{7Z@!Z0O@#>1tpIPna)#;q4
zT?t>dm;f3>>80TwQ9h`n08~cg>Qd!<-6oGK=F0bF5+r5e+QS6Dyg=}3HrU=PVcaf#
zn?_xO21<x}2U=SA!#f^uP(t(XWqPm1lg-D78dVAKYmh0ihMJnp>s0;{BP%X7Cq<Zz
zw^Nxkn&_q~+n1NO(1MwsO-8oaI--pw6{Naa3<$D{`h7?;ZHiCB%=?G*K|O#1OwmBz
z5ph4}6s9H#V5Wv&&^FmKgNjzePlks0<yE7YqbYbrum7N8oeA!bX?WIST$ejB4?oaP
zH$D!WWF1E!@HV%$p7FV2A;3;?5IyGPta6aDuuoKaW!fg0Z)>hg8bf!9@_lOzgFL^6
zFGjxJbWTu1a8VCWrRM@=yap0>t<i@Wp<gV4{P@psmyAnstn*HG5c(!HJ5Q?DR7e%I
zH1M&slT~RH*#@bqPKJ&Yn$S0Bonmo>j4(AG(7~%<mqJYuCo#i{^_vkYlY@iv?KoGm
z#X;R!9S@XVixn%KCjJQM_EU7QFBAY3r#Y3>b6>u7Z1EriVOpHO5>|hYHjq2)W=LQ+
zo*U)QO)s_9(Vlzaa<rz*u32i7mvnD9L(cuU=l=emjizfU_l8Kf5M4u>CB^>q0q$A~
zZAr=Y3jmX9Nc__A)nRBFiI|4}WWZ(M2<Xdr!!)<_G5VeR0+bg%t>t9(9wh#iL_kCF
z54Lti&XPxc!Ib6T8!auQG`SrdKul!t(WWEvP5a_2Hd}^{%5R0E%I6Hlpt-{l?EH4!
z@KUbuJSG&SzxI|9o}j>^gP7B+bH=s4F{Zh06qV2ph##hBBw+yO#D{Rgv^YAX;6jba
z1#qrA6!2ud1{Pl7Pd`2R#&dQCTku+Yinx+xh#AMxXo37MwgiIMXbh7clCp?Qsw;W-
zG`Ui~@R;mmyB&alt0eVwNgMF%eIeRKJShH|Y4hDAVHaz_>y|pYije(OOi;(DATjpp
z*2G%#7&$F1G?G+<=rU++E^m%0dgT{<Z^q_1qieiinkS1v9RTVu-)4`C?b8^xJdMBF
z+pi(D6I0gO5fxZ_>siUyFS5N2a8S0b9pI&{LY#FOvDO)}yATg-TxH~`&=`Jm96jDB
zd~66JX?JV?VUORHz;SRfgX{=M!#r}UHUYUt!I;83D{E#cD=?99R;AF^?{zP2mLHDx
zqCQy+{_)a4U=NAM|16uopI6+%IQ_HD$X{0^inq>hpYN)*R*=|)24;<=9vT!b^j<x8
ze;~QaAlNh2KNp?o_-s{ne&bn>D%&k@fE`IBhYLu$Vs6EmZU5}66<JCN7pI4}BuCT4
z|NL)Q*B2P9NMswc1&0y!#AVuIg)aB#8f=CVU0GPNd@H9Y>SoeQ!gF)qH>JBtZ=L=E
zBn#z`35*rstDa#VZ3SgG-?LBkH_@%7l}nM2;c(}cyRe;}1ryoCZ7<s9=7Dnh;d+a_
zKn34022~=h_XHZ0cZchF7x^ik#=-)m4{yEiimxIr#%5;!Lm3_Ye_IaI1)3i<Z^o(f
z4p=CxQfNR2QP+jGAv2T@+LWKybd4Td;?_}=&6|g1qfyl;8@;wW<6wIG2#G{mliO8i
zz8h#;evPAFjezm3jYS$r%lh&2Ygp<BqNA8}w^I;|8ym7?la(J{V4#ADa-u=!#m-u<
zf--^Yk3khQD82z~?Qc(VbHYt~?JGN1_Hv`tT_b8V2#AE-ZF7_fLIhW0i`oc6`MVIc
zEdp}<S||0U1h+-s8qvYiKUW!RuP%O^iDIG|Y5y9eS{A`?l2dfCN~*)SDAzfK70-O&
z6Ci*;nPZTH^)DDeStA*LuR^iw)K3?2STzG{YA&LjAV+)K)jEM?=3v27w%1-F9D<-R
zq#ioJ?Wx6&#PDkemZEXH^Bq@LPsh&fujn<`vFf<k86jRj?zwW=KPTpb4vWt#X^W4+
zks1GG?zg;o2?mc_aAuav->X<D@3>H#9{p%K|4Z`J!d#o!l6)zZc`{rwGqoA1;G&6+
zHiv0e>brC=QazHLO{17P<e?qszPWZRU}k!{1$O??h<ZIgCXyhICrBTHLG{-9V|kDl
zvess#dQYVB=b%EknEh4DgYn~w#$dvK83#2c+95$~q1Y@@y3$+Y42!QFI8;GBR37L|
z@UFN*)c{Xi-M|V0%owj7&1CYzc027&U|Vrhn%7Ph%CFtM`SNr5!1!kO0;1(=QhSYj
z#X?&O_5&I~{>0U~`GrmMP+~20eGex{b5tB=H4ec+ohG2Lv~OI;QT%nS>qt7anCiRY
zdOZu9HmcT0Jx_+}jQZ$|BxcPL+Z(QWJ?nW1ZZ~F}7o+wbd&zb(4PCdHlKbke(c6Wc
z*7Y5^Q|THLtAqt*UQWqUAatiRXF&S{G{+{9PCAET#KHEi`TfaaO?{7^wnWQ_5obU<
zr2t<7l|X_(wpUzV4ck?7)b0<*)#9Jz%V>JEU>}O;bWgXeP_W*)h{o)+0FCjf?I8^%
zzp<GB1fc4NUJx9B!3z0q-QDjhtAz3?QSv}|kd3fQ4rxNQX?cC`hG7*{1}q07QP&&9
z?UN%p+VoBgtp=>Wzy6GRFg<juBLYV1d);EW(b50Or@)jFgeABjM!ps#>*>-Qv*f=?
zNOY_c*+h3pn<lI-(j6CWY<T2ab5ZaDYKsy;r8%f#P)fGF81~Rj@x$3%Iw4PO;{0L;
zM0`;O6J;MHVB?<rjLSmV)33%Hg+$F5x~0Wor^EyP9Z%F~!oaxT8pXKrVqQ!%+h<Q@
zoV!mLiiL-2cMTjp&GkRy(x$JB;6Bj(Lqa5vnhpVmx7fE!W8{T54sYC=`O%mi0J;+X
zfnFiZRzfFuW5K<wX$Rgqf4?d?Cnk9Nl>_;j_C@$H4-nuow_tt)!x&0CUN_Wf=J@rf
z<34bV-5gE6wvRnwD}Gu7>Qq#B?b2U<?)cMC_fAJk%f*F-JQ5y63%}l(m3;UCUi#?C
zWoby&eLNXTYE^d(rbnYx)QNZgx6mV|54tyZDzDY%y6XJetc;W7V|JLX>D3=1#Ho!S
zOum+!(JQ>VE~YHE@tMtbi3-~PG|-gDHax_Q*yDBCsDj)&Q-JZK@lTN@b3_zYzDZ!O
z9Yu3#e!#v4KICs84?Npx4l`<7Y!7m*CJKmX)msWwvqKf-{Uf|W78)6~l|v%PD}mu{
zgaRh&!qQgz%?7z~dD98-Hf5>D1Wm^P4q)j&$NC5tEx70A7e5gI_~IiU5bw8%!)%yH
z2|>D4zvfi;RB+eV`3E2Zc=(Q`KlopkNANhr>yd(vUgDkiell<#3GLX=&2Xq4=LMC|
z1ASvrsM_)?|0k1JN3!K=!!taSK|*Djy$>@U+#TC|?(weVSvu%eE)Y~RQt&Kj58-AQ
zwpIm7{@taCNH1$O-L%P+uWMgV=T6@4w9dIuud<NXr4phn?I_Tmzsc(Os3x_IaRDw$
z6UgmKXFAtL$CD^c-~RO|N}k;3EMuhm(uN1V36CHKk2b|2+}?V`kyO8(WMGks<?FH6
z*7)MnJn6$gXS(O)t^UOvfFI~p=+L1=8vee;FGZLkBx{+&SRLyR;kQxyk-V*!(MnIr
zVsvBse+39JL#9?9$#+-bd)QlD;ZZHhJoySlONmOUWx3BP1DkWya-M@a4S^6E?#syZ
z2SRUfP}@?R?8Wh-$&@JH{!#UWM@8KI_te|l;Go|_tqX~1#^@KY9u)5nHjE2%t-~k{
z`R4w+iPFBW$l5+EvszX(FgE=%q%xdFRk-C^9tx%m=%qA;90f~jYEELf2L(7SGQbUy
zNn|}v^twg+E+e=9=*2&^_|8KtE6a($*j5)X|Bo6+aNoO1(pbQt4wrDc)9n$IS2wI}
zLjF<r<3(1qhJ{0@o?#FjhmJO9@XyczQ6!M0{WKFKVIguZ@_SV(NQh6QqEg^J)dWBg
zMgR=wdQw*&X*R4AE_gepG@Z)(>6OPJm;&wv6NPRley$)o=<m<sGXDEnn<*h=1I|st
z?^QvcVFCslpFNfDG$JpTfG=zkPV|}stjNK)L|+Ovc*zMLhOsbn4bYA-XYySom>C`}
z<pLH=oSF$O*tqwX=C6H-i*W0MPI2&<e_IwpsFJ!h6e2szu0Ed2w0qq`6+ocU*i|h-
zvBX;e<!u~{pPCQCd3&)*70CPCo^UPFtU$eAbmR7YD~jHZxBBA!fFSicDQEnFM$&t5
zuIQk4iI)xSFN>-)67CO=ddyY5z@!C_BEhtiTgGB+(bCJ(6;Hsm1|w$!CjWyp!nCl=
z7(eShJ|P()6SD;^;uf%{o2I<ir%3&Z-^>LbyQYyU)1#y1%vepT7o(LgbJ{KwQcofs
zE)432rP0ZLB11t`{OSqxD=s-7-@}1@r?LIY7g*v{0iD_lx{M$&EcpKnHyGetU}$7A
z*$BG)>?k_qP-w}<9OV2K$mW1SH{VX*>T`#*y>=)~dLX3Lddl)dw)}*_DM=-+E2p`m
zez)=B2it!dH-4CA9l{o-!F>FC6fffZM-L7_<)4@)^c7|`fUuT%jz+%KDZH`rsAl9E
z1!eoZe^?&xdjx}Qo)?+a3NJvzGLRl_)Nl1fRXzQoMP43NJ&mj_nN1D7?2YO<LZeU6
zWqxQfu0M5==)2B#%y{7bm*TBSBk6z=n^IYPt>26&;UiP~#HOFykI~hOE)uG6bZO5k
zz=izQLqCV}_@C4GBB}4B@in42%_4_2VlQYQ26Iiw;Tan>0l&9unpD!GDrKt6zljdM
zEj^`pro?8FY!C~g32()Q6(L2odD?4o703%lDiX+$qcya^+dE?IM?w-foq2n6-{gH?
zRsBW_&TKb8|1a5`%s9@uD}1hq*zP|NxKwwgAWuPoK_AC@_1_jgzIxk&o(=e%AYtV(
zQW{b~kntT~EUXL<53kGerO$Hh-9#KwW!Q-9oi#@>zd8vSmL{{Zm`lvLI(XIC(dc%5
zK;jl0Tpd9J-v`<V`xMFQNk!yKhiYM2j`v>&$^FlDXaIyzfKpSO?D)&%<fj&DarXLz
z%Q$G;w{;tJy5rCv!^}`+UbL~7I+D}p$2sT(277Tt1)dL6-4z5SU}c&&<1{rgAYI31
z`k=n>CaoYR!J&7Qg54k=97_+vwU+{VKZG5v&6PhMyME`;L8j`_5CJ9uFn&-PcpEWK
zU811a9xCK1PVgeCd^Cs?r@XB@ze^>ot)-<EiKooZneSFDg2TZH2n#D9j#fCm*UFVF
zL@rnQ1MdDQyvW<)>*>H58M!TkJgjpv08}}CUo3-E;4sX2Io9@{jrH=vw6sfVeWff?
z@$;DU?Pw9!(d<_04o-YS1LFWe9)FOXqEiNcOB;dz4!I7gPr~bJ(mkV4^rl9TPTwd>
z9zkmoydF{~gYc53j${u6=kx4n4RTBO7?vl=<|MRzCsXB<I<_m#o`YWz2zx70-nOO?
zbvqmX4%}YhcpcKV!PDiYN%uCtG|xRJ!YtX4Q(A(~&s;ptLW~b<2tX}vN$A4tt>1X_
z9Y*Opm}k;3*+eSD{=Dn8<aa?@%A1hBddAs|jiP}GkXM%Ny95s;bcEH7GI0)7U|r?X
z7AphpoTaO4-8he_`Pb9DAeh7(Od|$(LK~~S)oB<uMO;PL5-Um~qWVR#^>3JaP*twY
zg1}77a_B>z%)oKe&bg>>J#7ONp{O%~4kjwqF;!d_w{%y7azF?oCsd&0PC=vDDAdLC
zfd0Fu6OnXo>)`eEonuz9<Xkuw0vmGMBzbUtJh?zcEge%t<kO3A#+Ps00s9y?2Rl}u
zCJd-hG|K%<%X*YHTkCPJ;x<YmS&d-r<zlPy(Z(Tv!k6DaY-%_t#41c9D(=fI-M5vj
z-`NAfBdi&aE5^-71nHj!MDJ7(1k#{X)Sox>(3hk$cTK5`?eAW%t*@L6j_94z-DQ`r
zt__$G0Th=5wmi*5pJpJU!^qs_q8MUOSkyRjd~48#A1yetzTeunJ#VDsBxDhY)j#jj
zSiu$2b(1MQNqvX~0qz7C8K%7t`-~A)aM5nF<D`0zu&2)5oUDV@Bd@Q>xJovA7=EA2
z<8R-zP*yzNmTulGsq!d!aQW&qP*m%KF$*3w7xj<}3`?41O{(=gL@rdPGOkaH68{tJ
zGAPkGDZ!YAl&8QzkLjxE+&)GfV`JmFa$uZ5gxHF;7Hg^7<xq8fQ_ry+I!Tu@MXwga
zoP+!ZG%uP+c3PU^H_9H(%f422BEonF0@Ckbc=)oVd<G3lRwB&HnniaiQva$Bb4J5l
z>uNpHk|@*SbbLCU37frEZGAAmmpH9>yG(H=OtdB~%`k3&JAT4W@xpq}kY1D(v$ynx
zqy#N5`oRy>C_PD|M(VQRqp8m<Q|jhr?hz{gv`PJwy%;Z?sXdB@oL-9=f9{Z+N-GH&
z6Ty01^t1QNPP?=rIlC@2qMuqcvA@_yvcOgH@beh_NFQ1%@($F5GJM{YyC*57+LY;}
zu_JjCDxB{;qypWcJ5W2Kh86^u{qNa1H7maL_tw^of&-c8&x2?N;Svj;nfHAS<_ec$
z9#(VT*r<P&PCzF`n4gy+T?>fVeptPKua!4fuU7XfSb`rYtLim1%CI`T9-sfi;PCi4
zn4CV(;~f|nxPcn=eIh7j0QwduQ}VJ2uSW43Ud^emC1}yd_f6$4AAriPC-eHu#R>RQ
ztmU{r*stqlX+jYQ#T%-1m;G<g0)=!W#+wENC~qw$(ZIi4yV~dLu(r%T`tTI5R2C$1
zF`Ek7lZ>wo9qLVfS4utqulY~^0w$Y@kF?v)wGGE^FMD;WAEIWN)8P2<PX~QtV^b2d
zoZAFmxK|;D4M1xBBv3?}1!5?OTaSGsStY})(`16z&|I`8`a(zh#d(`ASng(^ct{`%
z4A~aLnlv(7v3s@SHe-g}_Xu<Zz0W|Ve4sAUwjXfztaerQ+izm4lttj+-G*Lh-jN-?
zH8*qTO*#><y};a}SV&U0gID@6ZLn2>Q$ZMV8wz-{A&93(j=Y7ZWQ7^0Qx<E3DMghf
zlXjFJYNvipmBbdunv>T{t|knuqmM5aTO!S*4fm$YMP4IGwQpjNipP(xd(Lpd<mI&q
z9;Hs|<YZo!v5E6`7x<rzY|<4Abs^C$`6lsaP0=>LqfqT5lyL?(Tt`QT(c3MlL-{=k
zr*8ev2F$J3Y?&r6@sl5YG@35{^r}ZYx?}doxJD4Cjd;KCj@#Xhl*q_KcKMo1%qSz4
zOx&TVhsr$beU-hvE-_Y=Jpf9LHp@^9?(y(*SU?z}KQ;|*$|f`IeqhK)$)N{af1e7F
zCn_cn%%rFBCV?~l2#s<&SXr)L0^(|zLCw!GDD8@^P230QBjSpzNk!p}Ll&*2yQP%D
zhE+hADz~MBlo#*t6}i1+x_QJT-&4dhI@*i=`1>(Dxa96H!;K2u56m0Ja%Lvc#j7Ks
z<ulGAwox7ZP1fQ+Wjdqz)?ohxT!5qh71>Ox=rWSBSz^kl7+-Gl!~XGi@8+ZR5$V`X
ztpc)`cNJwpc9bnY9s4V1<y((4;~j+`y+}W>$KfU3-@^)rb%0>G>*BS)C=pKuz#Iw&
z2s$>GpgZ;*1*-L*E#4BPe*xqyLZ?}(D=QshLG5%TqrZ^^|HWj-eG#zZJkTeN!JQ9}
zIqx=X{t-JzL0Vu(P+p6cg(24#@R9@%yixG*k-j`m=6CiPH37zr(^WQl92Zo0J$}j#
zQlXEmj`N=ip*PJk&DIzUIUW8qneKbTfxFq~6r*AJD!(d|W_FhJ*sCRKw&|P-VoNya
zz^}KINojj7-x`X%%~zi~6Ek_YzzxP4u#KJkFCGzxU1gvDh|C7imuaI8b-UmWA44>9
z?cN<dpj7wWYb^0`VHLOLJ}iy6nC*U!#3BZJw22QJ<7_be{u4$m>3Jr?NS9jVX9)`7
z#n()2(mpb8Ff8gCO+Lhe3kkqeeMY9+tin%;$3;RG6cl!Th0`@9#D1bcp)6&>np-fa
z-1I;1h}##aPxJ6NW=n7bFSJYxZ|RV>XTPy4{Fo1NkwqH#a*xo=Z`b6GKZS#*RLHuX
z-&>nk4t93WXc%I^mwNFm@b_`5;dD_95a1tM!E~`cvzyH4wzM*temY%NxvS@AHGSVT
z@Ma&-x%f(C+Sw2d+o|pcoDE=r1VCBAZATiGP9Byul>nrCXWQ1NsyZM!aelCOq3ePf
zXd5@f-b3}@$MSCIt=a!%z5ur<A2<$aigjZ?E&|DgtAn}L;sC!=u#O^0vJUYr|F|mr
zuuUrki$miVg05I*Y>RUzx$;VJA=^y!t2257nw;M%Xs)F(6vj<Oau2K41A`Q-ge90d
zU;#1lA8+hy1@~fw9<7*X5VkYJ`M|LtL7TSuc=lTmzb+W)j@JK(W3ben02lg_rr2t_
zG7qTbA=IZYT4Mx&rRjzCZbhsxzF4VX^Ys#j+FhMxca+t#t3H!(`MMEb_xqAl(OJ<f
zWw}S^;7w-)*YD^Q!)aF?l_KsjpQkjxSV+ph=BQ4eb&0J0sC$am9Pn<ca_GD43%8A&
ztZO=}9Cx4eldh_%2|hD93^X3=T*Ln0z!Nt;Iz-K~XuHYmYw`=}&MJ9BN3wA7nbmq$
z+L6C1H^2f2$ig!+jD3)*O78(2zEBf?<a7lnKh4yeUXrak>-JEMSJc;p@Y`5EIajr6
z&@14_ciTl4G)?!~L|eUjX*hj-u{&4kw7*EHwL7{B_rW8}!nhG*8%kE+`svbHn21eV
ztua#Q_KX@x*`IUFNHdx@>S=G(W@XILdVGaZTclQ4>ZR-!z1Z`{0#uu>d_SM=C!mKA
zg5HrgI^^`+bBA~o{SU~_&#)%kBE>sXEqGxRV)yt(8twRJ6}Pid4R94U?;BRctz%Rf
zJRP9EE|p)-T~wK`!Y-|e2m5}6S4vVVR?5l+{h-sqvIB!H`^e<2!e-42&G0l=u>w7_
ztVPALJ`E`ZbGsgYztesq)qcXnK%@4hw~zUg!Jcdulnx;ekfrwCC$cug1&V3RjZG~5
zON-X9?Ik_<05QKkYPdM+6fV-iKV3BljW=<NhMu?(`Q1+6QS@ErDzB)ByVjy;i8I=n
zUEZAum=oziUaC#U2mJoJX~8(cTcW7;E%NAQC$7HAX09-K9qHebHGIFMX{b=6WN|X~
zL^y_;<AZFzyjB^b7AyBI9u=Pi!@j$Q&*YqAj_TrIF7c|xZDftvzyaB>N%iSYZ1#le
z)sNTU!)(#Q@fO|c?j65LyBno^s?%Cz3AN)nKw54BO(s;qrJvyJJC7V8C=57(%!jUN
zM4_3S_mRF%YOZ537AA<KqP#kU9$0K4=fZ`sCaXJM>J^lXzBc`{dC60omuF!<AmUdC
zhL$K<SX%z3c(S3<yZ+;+Q?Pklf?5#|-hFL04|a!P-~rHsj%nB>|0dXo!^z&+e8WMs
zjcG9|)3OZ#)7jaDpR3kXpQ+LRmVmrq6Hp*i0A^;+HnLmRO$2>|)v)bOA5xBDjpxPf
zuaTXs^jc_a(4qz3zgCz=V(5%M@?AmYqJ<^D9xG(cngr}Z%jtA>T)#bE8qq(odcJ9f
zQD5mv$u6vck%xigTm@VkeS9=~g4L<C%pxMnpxJRptR{3i6hd~a1yP2gsd*Iv&ZWT5
zn2E3WRM&U(3~2Cxb5?}Zijw}x{P-GWADuwhVSICV!0C8Be0y}|X}y~+?T1B>;^=a9
zt#0gc7Ubjzwm5JNJJ%k?YeqP*bh$(y?Z}l@>Nrv$kK%QaB(`21(z?)IOB0r}(|T-S
zEtyXE>S9!(VLAVW6HrfNur2)wP<(&=^L>b-qT+U;nIseR1+~7()yfi~H}k8^#6PM6
zl77R3gZd_=tHfyDZvzm)glFHz(uoQz4D8pwmYrgR=NN6cmPL;T2OE~}Oiv=pQ0m?x
zUe@z>l4?Y)OH5X%M4gE=D&CKEJPSgV)V;iHpoIqvaG-kMG%wHA_8$dn{4Ck-ug-&a
zIcVPf>SuH{KN+H0Bkk?m^dK+k*u@`G7<Y_=uKcjcyS{k|@Z360sU=|O_xkYO&C$$g
zn(PzDYYj+88)GY>^i<|edipoTkYAD}a+qcjaQ=%&xsR^>t@0%TW@Z&`4gdaq`DJ$+
zegEHu0(iCGkjRUl7?4@w$L#FDzf-?@FyHEXSNPR~kBARXl|D%#qVpfe!!+^kqF>{G
zih5Te4n2}9als9QzRYJ5n@#<)k#EmyX8!}-{yMW|MbDVM4Um|rts$Fsw|B*Ch5N?m
zB;1dXDQ-cpP#X{QuoZy%{gOMT9!aIuKf1~V)Xv@0C!(WJjeg~Rq#J5eswLo!D4Qw&
z`NCq1+bLG|_jXg_oIB?0&2eJ@UyTVE`@zbWr+nq;PWAsN`|7wTv~Fz~Mgb8?QRzkn
z>CO>Qx>H&~q)WO-Q5ux)?(Qy?l<p2`8R_nCkMBA6_kH(%_kB5koO3+>X7=n@YwfjH
zJkJp4H@uk#I!fy5Ra9#|93wgX=96I&Vk|linO$Ga_T9rS3xC_w%{6%LdftUhX3ixd
z6YZbTQAinr`#mnU#NylMRZ4VHw^j+>F0B%r@N$3pZ2cF2iWlq~G+b*N)?`-feeWk3
zWB|w5!s5aVG>65qz+Fzb=Ttm7<n~%sP<?rhpWzooz+Cg>(uD&xM3+_~wA~u{ZgRia
z>_9=2D!sIY#Uz~EQ8N>7FaRADVF1i5@@Bcb4cI9NgwKQg0eqrg2FS3aahsC91nSCI
z#=jy^6!V-YGtuXvV<>nez@s2Q#)MQ0^qM^Clv8m*L1219^CA(Vx*H8$3dbYL$hvXJ
zN8@$yEAoRJc{aVpF&a_fgJEUYo3c=a&;zE4XY|y5ylV8*LEs@Sb(Vpzi5mmpp5Go6
z2V=|nyQLNlm_cavZna#v1u?&`cH*~!DzGB!C6SSp?Tc5OO_~A5w<(h?&QC?w727=^
zM$-yoUI&K^K`O7*(??kw)g_4@7;jeyVcD$sD`KpYcc^Awx%B+r3BK$qz0d_puxk(^
z=+M7(VQ&8tSVwPhSi<+Ck8hv4N%IksQslY%SWV~!m?|go?NvGZ0cCmM?bZ8mw!TrC
z+u7OJ=yRpfJ>U*7!vO-)UFRkEzEjB}2>d>Zhh<qtM#uOx92>8s*V!dprQiRGBW8+W
zOniABN-JHNNq7U!{|vSo{2>8Hv%13_AgIVO*1K%Rf^I&a6{h7EejxY7T%AG?@t2#k
zgdXiPvgH2G_V)H2xG@-~iA57zLp~aotEZS*5?hA1vej@F?>B1d{k%|FA@x9F%m7`q
z$>`VdO9lQ|jPpbadt?P?##aUlF4076r4YdV4!~^6w<>bq9p_o+KR0;ZzO-V@cxI;B
zzQE;~M$LxY;R%ej_??m8W;2>;@9dU}_Ur@DO~I9%4zRp0-lucUlLOrWF=4y<Cw*D*
z(r-8%_MSxTr{06O;;lXO++WeO=o>$t5{AUetZ`hWy6~oE&wWm=LeoAd<*vE{FRjTX
z2WU3%CXuQIk|5Z&F_J@|A&4JR%T+y6mkjzTP%3s}+zHcv`?L{z#+H6Iz~+9NTEX?L
zuchz_#K&d5mJU+Z8$E39RfP3K4K-8vu4YzMy~FH4E;&z0U6s%kFxek*`y17@G<uv&
ze|`InL))X;w%CKs%okaBM2(jU6rTbo9-L<*O)|%=kVMe=0m@A1lUb7n{^kB7BN70F
z$eI5Wi~YLF7G4LYm5FJsSo7hIc$7verwb&u`P+2XuFK&8czQey{=9^NI~m+l-Zoy<
z`gh&c4U~2aM%{WRACcqI#a9&M5LCeCJ}-(&SlY}0F<qRhzx_yq1@Zn~mK`P37J$a6
ze!608DYmfRA3hM6;%LngFMBCWFr0J?kmU`E9>@>LPAz^o%@6?I&jUDsudDrL+NLhe
zZZ2>yiCb8}1n0QSLrjDKxsE{)4BV9-Bo_Pvwt)-3zd6mBcw~mlOpF*5Qs_cJ)FlnH
z_Ew!q>Hqxp5hOBrhsTb6yW}D5WUl5hNnday`oOzw6Y<W?MdG4Ds#2(9^+7<8Y+$2G
zKGr(&E=2x>7|bfNR{Mz4Y0);8Xy!_T`A}Gl>NjOER}hU|_u&HN%c&_QaAF%M(0<3)
zUZuMCNckP|V^VTC^cA!qk$oE4+!k9o`S~P~Hnf;Pu=>&0Qa+i1=Ax*NMl29fqThmQ
zMm}QtlV)Lj!5)2x8vr>62pl0~{ksQa*OOI31WJn@FFny$@Rz0_i6d#+F0C}w0lkfa
zhH;0K&(0Q9&)!1IKnu+;iKkbAFBQRtAH`F^O)v==*QEM|3n>+FP|9Z3GxyXnbAL<F
z(&BM{e5$(0wuL@rq;$x^^v>e1!gR1$>j<yjBx>!EU`zCUARpUir_760fHQX^>c<%=
zpONtIw*iy)Q~^iWBzjSqG?(dn9EG!+iO(v_%ZF*iKJA(SX&;m9qERnIZ>4wv-UOG>
z(Z>&uQZF$r&I-QHdX59~_CJcQ&x~^Ls;F3<^aoNYj-SJ@EgJ`me0>3qtTjk{Tktpm
z($OxRU`k(ypg51`%bsNEcL8KBpp&{MH&}T(SADU74XUgAWmo&UMtec%-&h<!p&MH{
zs_jkT?IGRJN`infizFH?w?8N7H3zl3o3Q5SEf#eP@*N~X;y&^C?a)GM54GaC2>H~6
zKUYSF`EwVEA%NrI#`PHf>U4zS`~7d_tM3cIdo1E{jg6rKNMja++$spmtH1S{-emRi
zuP5Srpm_HB#Y8(%Ad}(Yd9FKilx?uGu_^uxid^Y!>SUqcmmf#U^CE+nkH$05Igx*R
z3$On}+zQGDE$Ub?lD`gC51`QxBxEQ135v#+8cfVrQP;Vdq;xTEQ?PvY3e9I$(EI85
z=d*ww@Phz+E24%VrA@In0l>~UYs9|UDlRssHGli^+ojFFAR}?CBfanl)z@9-4d0@|
zoYpa--2(10s0qZm;5<f6c92&E^qNCkaxd}e2`#~C0y^T~GBU4xgE=2rJNvH0vsBpq
z8uYwRv5&Yp+?nUk_j=5Pr7IvkrXG@s15jRB95<&2eRaHFH-fg;N`*Ta-M+nA<kBxY
zypjD4`uCB@)VD(vv=>0p9jK;ul7UHjG}0(JO-p&-LTN%;8dXy|M39Ggj38f7T;ntD
z_mM`-Uy0CL<Y7}w+!2QE2Iq-8=<scfHQq$o()9yT)JZ*VANgMAfWR)EId3S^Z@dAK
z#8bFhsM__k4<*{hf<rLu%<|tj!0mHZSm5QfWM*tL2Y0!nln3{u%DHe&U>hD;R9%b?
z5-Y8jOsb)?X768Q#pQkJ)wjG=w)DNcH8gqh5!kwVndI_vJ2!WC_oFW9-{;a+_|;=_
zZw~VYOLlqBR8w(~XLSs%1pHOY+XZw6iXV7#T%W75rSE_@hW9fV>gRT!S7^k@BYuz5
zU%ltRt~L&8!v!S-$-8p5cvNjzjn)ko`5uIw-W)THJNN!D_~i~fA8Oag`xqgGt+tk^
zzYI`Z`<`$SG^FhQer++Xq-W8qMQven#||tQIIv|<JE4ofLhQyx^Bd^$v?#Kg4<@H{
zl`#5$CM!oeoxA(Q{owuOOs@$DY<ujPYVW*{*mjiq)T+xgsQ+W^HacUax^WJ>L$qaj
zeaej>6*z1iNd%^|PEtO8_cd^h&djW%F6zBL4epfG{HwWxV*Vyd0>9AWa|$TZEo)|l
z#HOr}N$Mh^&6hy>`7VBc#nx+DTQxosk+nhBHkqCs5PiX;PNwn49A>V5#EQc63FZy8
z+jLg-2Hb-e-(NpB)?UeLolO3(6srd=C<kgE390QY%Jywjhy1V+`0-H^(|y@WQd_uO
zOgx=!ANG~^3tzJnIRvbXo10sBAS<&@*kh@1zxfAhpG*PDFg~j5<J9+->5PLts0Zzz
z@}GRWqlzp|Csz+W&|!kk3=HhlWAa%HXMZ(kCbKU6@)U`zO^+VVm%`>FabRQBspvg|
zJTyS>VzzHH>L-E&{5@KfAW@GO1|O~#-&jAtMa$Hl#~hPs^P9>~QBVdlc_^od*BbO{
zvV{<8PL*u%J8ZJ|$}B9ixWbq!^R0hLPRXx<*5Rt`O}(ds?+O0(^z+(-4u{01nK{q8
zEV@abl6sw<CYhR;oJ7qj;^{C!q+pj4g=|9ktMK<uTC7`QX4KMX)T{U_96T%nx-Fef
zLli%VF?XhCW-ii=k`q)UW?rvni#mK>Pf`fPS{I?fg4+GG4Z<UjcX}G4%j}dmNz?C4
zhh-6M6==FTx2hFsi(H@^6$>DSHPu@fsAykB7B>SMZHL=`+*k9<KiU{vP1P8IM4YBp
zw6?mWReDk9CiVM_L8uuEnV+RM7V6Y2-W3g3I{IwcfbNa*1o^#qk%Y~IdjyMt583OT
z0o;%o(@uQ?1~!mXq{qRJqSNK6JciZYzWKlhr{jaysi$Lh(N&Ouzf#LPh=~Mjw1j6H
zTA#@6y7cp=l$Ua9bIcb8|F7`S&kerRXu0o`21oCdcY!PAZr3Z}{Smqxg*i&LdM3L?
z;G3dBhaaEEFljS6&=Lq%f9>YJ$rU+SThN@Vf($p$3&4^1N%7dJ^fwMHlJ;l`7r=}L
zpTj;3aOcU_KGjjg2bHuqXegvwo1BZDSXfwE3)`!;*g>f7dfjxjWN4=|6u=W2wzYUC
zUz0)@f%7QQ%Tg*yrT(7l(=}baXI4)}E1Fj~f}TXPweDIM6NUfXrvUt(TFdGzP^mcQ
z_Cx6wG7x&)xixadPs`+aT$1EfiBUw~GFWnqIIMcFcN-OOg5aEECwgxkFw}!6s83FU
zzsrmZsN7B~WoPg^9CdI=zEwS&;BDn5(yRtqzcHOE_tT_u9Z{4wu8x0L6;(NBx>Ytr
z$i9QD1X-h<@A{s=7wNeFSK+<(zY2+UhJ%cN=ITO-w&HS2f?ggzDOU!KD#P6UJdFuo
zl7FZ{Y8_r$k$GuUTffRGAR4#{e}ul4xxZC@VHNnT@+nt)5OEbnHlb|tf<2pv0@>dz
z3NQ+GIN(U>S>Y2g)9cWFpMm2W;&po9IXd2nvE$qlh6yc~bz-kk_ne(vnL1-$blivD
zewaK%)R5mH=(IPPCzH;BIp4(g6uVZ&;j-{q^wF(?`!AfatY;>M9=i(MaUJ&pd`6Zk
zX!9iMuloa!>7~pP7+frda}4G!xYk7g{5H4+pj6h*$%6#Q-PeBzzllj`XHvXr7TGBR
zK(OZN;N;OZLOKX0du5N^Tzi38lLzbX^ma`Z<{!fII5(ZV-m>D}h3<kL9Zy5h&CZzZ
zGcm{Qe!7o~lHqEDt-9L1bu%z-;g2YTp8_p!W4UL)zOI{LW=q{e_ZER&G$MwJJhdLR
zu`H0HSdi<=1!h#wZs{2C;wa3EnI%vNFTk{UX-z9fLY5hqEa9TxL%}Nb9#6Q)X&k<v
zRLnAW0W~(1&k%}akVc$-)+5^uwENWrAx14tL$nQqrf&`@Fafq4xNroZ`!6D>7k3C6
z?)N~YZC~$4?|=!3$-q#DqkgpZ`p)PB&Xnz_=76*pLAm|aZ9W%Rtg{_<+Cpk%Z(9-f
ztQzqiaG8&5Y$PS^a0)HFhc!YuZdsky&w7j&Xhj_{h5>jsvPDc^Kn}ppUd0?F`7bgz
zeL)mK4fg?GT<W{!x{n|Y)X9zKCPWM;<&JP%1!HLVk&~uz8zWo#;-=Np&@iIMaQuQ1
zg{E!q-YNmVH2DWo6jv@uH!08ipS?{CEhxhNs`88ur1=vEyo#KcJNhu$V6;dWd3lNk
z_4aAzIvTz9<fouhKrxT$mXK*069+Ox;`_mCHhZCmA--Ft*oNi%pGw(mj7QI2U1huL
zgGbqRaC0ws8}J3KZVZ9)_T_w5$;#;JS+h2&0~2W_w8k0QWQ$dkGOPj+Xng6I2IGZ(
zqfTaZ+Dk6)8{5vPZFhVn)B@m?3cIu7G2b8)_`Nq1j6vziAD>jDIo{Q^P}Or$TBhZd
zAe?o*>#Ex&0$nB?U=CH$KcOI6Wk_WW7}178=rxZXxUojPLK}^1(IFSUFOC}?S|FSP
z{o$HgoKPf7dM=~@Jf2QjZ#O^1-ZucF&pA7>{;Wcpb?w0p?JulTB9SPOz~^A$mVSRa
z(m@@Q<b03AkK3727bB7SoR2^=C{lmBqL{ha=bsj<QzE_QF7$e311DMlzt+V#w46W^
zL>$!reUki;i3Q>x?o}BxW;zvvmxCWD+WZUx66F(P&nBFuM+F-ZyN~m2->xe69<mWd
z{d~qeMU3J8N60~;gN{|bxK-6;++InQY`l~HWF=Q@x`%s`wDuiHJjMK!yH?Of{Sd}B
znLp#B0Zpt!A##m1jLj3FmH}c>5X2kyd))r`OKHiN9^Mr<7ndbBH?EYl^jxU7r<(}H
zT}UjerSQyWH>$gOuTB6(E*X<n)W<i>tq#$+0<A$?rfan<6HB=ccA^wdAd}3!0Y3na
zYcla1e=_n?GVVVeu6AEw)`qxPCm4oVe|cR%juJG|P_s%mMt)kb@YWl;Uwnvt$FW8O
zKZRJv6)5YYE0!t$%9txB9JzTM(AQdrs$N<w;^@e2z=B)Rg$z!Z3dh|4;>^&!eyJNv
z_Wm^gUO(<nT9mdoR2HK_Uo_i~Z$S8tSbKTAZexC<NUqYdP}G(GXxk-s`#TvIML&3T
z7RZ}T5lx)MT`kfkdnlOIlYQUGwCTeCR$}OLFK9#HjZdillkzLRnv37K%j@s)3P$uj
zXTSTFd9L5EE-YJMM+dANr_!HVUopq#e~s>WMT})yR8etIWTdZ=M2=P<?ToG=qwh0O
z=xP*Lrm+GuAzGT_vwkf79<QI(!l56q*}w*&!$~fTCRoQuAH2vWW9G$aTsJZh8FQz2
zm^S0$FjNr|#|<-5gv5)#u>c}f9_8lePYd6JyAUl6W=Oj`@h4;zELv*Re%k1FHt~Ph
z)vqx#Hxtz2zHIto9hA=f+7uT7JvZa5c5D4#YH=^x(9I3li~u#LdGN%W+-VcxlWg89
zXOjJNP)dN+LpTQz(|?o}ytAm8+;th_NE-tr>2i!EDjRar_RCMD&B=S}SZ<0^Cew_!
zi?Vv-q8m~sUm~_#c3mv{l)PJUIs&|UapP8c6SQ(YbakyvJG&lzgx~`bX6xPhfx*Go
zW>-(GiPxsxE#{>nRTOmn!lvYzg-Cr8A3YkVZExPy6=k~8)6zP-9d&SIx)mc^8GZPh
zGotUxm0@Di{~?7Pp5RctOa-e|hd9q03Vj9?i|_L5RMZHHtb*DgCQ@vPLyR1_oy?hm
zL?#O=d>lPIDvJI1A+bdh>8})0y+k^XuUnB+wE*(U@5gB4eRdPN1{<;8O*uIxVTD=}
z8XY|`6UnyhsoslFJH})8zMg{Hv>L)2PCT<6W3p-Ou9o_qKjM<n(;q=<PY%`CXRA#|
zo*4Ns`qM-ViNQKy5kl>CufBgeD{aj}+jDac%irtFoS5`ocEC}1?_03=Q?B7Lx3rm1
z=o{VuYN}>2K3sU~Z$QzCCR9gXwAzHKR(b=%3j!_<nUyIQ?#{}J!PW)37Mr*lPpxrm
zCWB|WI!xcH{fa%HdfRe{pNqjywprCtk%WCeEc%RTEVU=S3KT`o%5>>yWwwMjwdFhe
zhB7$H#q+T4JfnZdHX>;so){lPbL&oWOFiX069MGD8L@}zqsZ4>Y?jm2n9HFL!@m8T
zB?x|)Uk$*wZ}&FEJmWTRa60bI*l1HPm?U3!^DW5D{Sg;a<8B;shc&;axI5=LQHN=j
zV)3n<c+%;C9s1xZ(TQ<$IOnh0Ws#lIgG}3bC#qa)6EO!?Ob~~&Gh;dTl%*;PzDaNW
zj^Woz$EM!KUQnVpA_*7}q9lxLJ%^ZyTXuUvLcL^I1ww&+?Dw{CAA1st!lpXq8am%-
zvvQdi=6Tmrm;O@ztsB^7Oz6qH&@n1U#(0&5V9hQ%NDl)4-aNmPMExQ#yXs3pU+l1+
z_PUE3pXZlqgaq~B(t*s7&G1sr$+opG_0mj4&c)euqS@5hOi*f(ZR<XwQTq7aeUyZ~
zOU6sJS-q|(_`|Kvs{Ej3j#ur>7Q+!mbh7WY^{i7X?iw}PX}CRP;e9gq3A;=i@cwbp
zYBsXT#C@F9M7BOzMA6oM7AR359{vEEhH@BNCs$6HEgTYm5>60nGt(bEfyc3Ec)t=&
zNOklE4^0paV4WAJA~;e-oVH5L86UqvftL^(KT`X)i*(IeiBdf5!0YnD&TiD8<oq?G
z?rrPTXHVXS)!0#c$e~bXRr*_gA}O4YX%OxrOh)jV>CI#r%on^gEPDX?fSWz$ASgDc
zG=}ya4Rf&Fo=-Q)Xi_dI>GT0PD;ABuWpxafdQ-l~yk?}ap0#`B(bkav4o?5~0<!};
zN-O&NyvOq&u)D>S3@#o<y?tV~Q`#eQ`;`qsB6jm<Y^SUCr3U}csMB>}yNCG$g*GD_
zh3#IK#~9fmj+W=TJD}^SVnR-*io_JJ@ZiXxbv(5Y#Gou(gKH{BxNOU;aM$_1FHd__
z(|chxoU8%{04lq*ork{->*<BYV+5XpD5UsTztOg2IhUqR!|{qYu`v@9F;#aEpf?+v
zwp059^Ofqi<q1jC@u4avnyt+mzwK7Rs6B2dz$5E5&*}o6z}uL@`ekFf3svX)nfh{&
zbppYNGMt<B)cs+fCw`gg6FoRO%nZx3Sg79gAsuUq>fH#_3Hj=H!9<T5S2<vFgvC|$
z1t4q3k37E5zSnPA$d<na?u)vM;n}_eogd7s&a+0h+ezMai<^)7aOI(&3%~n56sWa^
z*q3>%rYI{BIJs*#6nQ!w`WZU?LI!4Wc5|q0+M1Z8{MgNP8_%IgmG~W5NQobCr^vRP
z155*T7i}^y!rAB?*EAN+tGhw_{85Mxl`cpxxmL^d85gt^9T5<@k{pzi*SRHZ+BLo)
z*&t2{QKl{@tuZ;+sgL=^Wvda%+s|s2Rj95v^seDlwrh!!-Uu>DR{2ZdY%<YI%c`9@
zHZD#bv!DXo5^MA~h@JkPx}~-CjgP&ov9c^or+-p!aX3fW=Rj{|ZEJ#QebnJy&47+d
z>H(-$jlUx#`avh*RSbIohzogqF4v&dp3RRb@Qf%A7QDz)c6ctI)jbh2av12-bU~Sn
zTI>wz`!zvX-n6IU>>HQPMB+h`$}7YB0#>Fu#zR-5zNt22=aPAZb|ng+LDuWs(=>=B
zM*$B`G&Z{}y&ntL9N$)LZGpuIR;RcDs;U?DMtjkdWX)7njt?!b{BB#1*G#$wE^+f9
z0~X@JBqsJvmPmj|zFU`+`^~ItsPMNH7V)p!23#7W)~dp|-QA1>vtReyxQ+!X5JjEp
zs|XbnGr*ZDmSxKNaxIDiN6NnUw)}PzU%vXLI3w4^g>ATQ<WMv8%#aXpFa<<pA5H<Y
z`ZBYzD^F&@o55u$f9R*dj@;BySPc7HzB4+j1CxAr{_w4{ym4l0&KIQea_;~#-5Fj#
zXAgaMMUasA+SI7y(<TA>?Ttjl<WIi7%l17D$B$XAcs|vHS%+OdJ>#Wjwd}t*FL)D#
z8$(SJTD#g9wX6FlI?oQ5axX3p1wHF_t19D|i3^_7YMu@H-fCIu4C}!XSrq~)m{Ea}
z<d}lFyrr&)%4aHB=3{1T8Hm+N6H)nfbi4J(MQo&A2_6vnvlFU~Em7q$7u;L<77O|4
zJqDAu5F;a3op_$3CvOw<jw(S1)HF?T+w+M@pSeG!*E++AFM9YqV$?tJM+szdKjdX)
zk2>^WC!H)L8x|FnCK)tKP{HzV(EJcum$+0Vr``R&e8aOKB_)O0s0uy<IR1K@BeLhI
z;ZG+WnOO}8R*WJW4Js_Ae;OpWaD4V^qp)P(DCB+<I5xSADqY-S1mT+#U@_{Beo~S0
z(7^Dp(JP47Xin+gSm8|V$m|yOgD0(`RQj7AVhu8duI_fGV;NPx!B62K@2u?IUCzp7
zUR)xMWLzck6L`lsTDdZ9C<OfVv*!>Ru{1#p1wHHmL&nTccS-r!2*r6irC?(|X=R1w
zb{~VO5%vPFz6nZCWhuPmOA^lCLLa&c4I;*@5EVpVoGY~_=xpRy_8wQ>Lr^~wN#2y?
zSbuQ1N+r{xt9rJKTf!gIpVCXNr$juBlM>J`6W8LlLC@4wVR$3p#}6s`O~=FAV>_m%
zTXQQ*D#PL!j_<;)xr-iAJE-WUVU<nZeSDIKb9L5wb#OA~n_(EG5!t$sbAuibLtkX%
zp0E+SqCm4lp(qLIP1(Ke_au++4rK-N&h@jdhJldPs4l;KH{<$O`Uj^VH<$Is-!K$&
zAe)`{*?o#0CgbO6T2Q0DM4ejW0jjLTj;GAbMZcU!qO^*Y3)L=SDA&h$*oPt{y$8)l
zpB8e&^_m#92~O$p*Q&Y~KT(gKEF2Q3Z?s3KjfF;jYpE5R3S%!zt8=(>rz}Ou9HB=P
zbzFJ6Ej)15D`+0R;1KY1A2iEc4H08Dk;jRW+@wmr7^O)|$S-LXzLhKSGaovv$2kUh
zK1bfQPSJ92-GC>Bz2$QOXNF%$rlW&{kWoSN`A2t&sgZ&Sf3qv=+@fS?k2)yZ^XJ|$
zG*bwOsw*!r(Ov=lH8w_9W6@DDEGC()JxyA%<BhuJ<kJma!XQw&H_e!^dYKsQ<rVyk
z`X+S6$%b^SF?Vq?BiQGQ(aFjwf=y@0<D*SZ6gR5HSf5!P*}*Oz{}qUlseHu54<rzg
zUwlPxBJi90<8V+~Fxh^dxw*OBCQ7T@xbc~1U8N^tt}(}8^dp~x&K$AwBUBD19rS}+
ziN8GW^BZuLRSEtQ<KNhrG?DKte_DJ8nb3IV7-nf0yr1$tTdoalxO2X9zL+bRjDM0#
zZp?3@W+G6u&8vnC!dG;q>e)D9L{Uh4Hqnh|0pM+fkE2K3`1dqjBiD}`6x*$gv`Vrh
zAq=cmXdotv&=Xx-w^1L{Qvc<G2yMo~m;Xqob45-Pl4s|vST~pJAj~eSh;Z9ROTdng
zqn&K^i5o1}xrd)u+3C8^iCup#vxqyIwCe8{Q9FRsUlLC|K9G!MTA_8e`<$=cjoSG6
zk5zHl)ak7Qt^CC2k{f!d8_hZCW9MsiI#N@;_LB}wcAWm&M<NGY8TjA^*en$k+8~}X
z>W#0dVlHB-N^m4NMdA*v^u)crU|6$nI#ZA>-4-LblUkl*Fd}cCf2toYBvLFW+n#>)
zNgoZL61RW+ocN9DD~Xj<w(m<AieKzo3WKdyCDx<t0`u&}Y>D1%s_1Rd$xhpUl*aF%
z8Bmx^Bp<0X-++?E$~spY&G(+Zh^LAExbbeX+(Z>gH^Nw#vef@6MgFYMfC$@3_Cck2
z<<DkOT~soqyKkrmg0I3I&L4Ae%LxIn%S#pF^<O996)AyywJR&j1zg6Rna^ZaeSgVL
zj7}A6cc!T`IPX&tmnVPahtL~)%^wMgEf1KJj&h0@!YvR`>PNPa+L#^6neO9fOTq8?
z$8+DE&hk~g`@qb@Zwdv}mI2cC?mHu1BMXc|TJ2j?i*~+6Yv^mWrWN@i0llKHBJJz#
zg<|y1cJFL-Vc&m25v#dyij~kObT7z0p9r#IbaH;Om!vX9zQB)bA^+CY^|YkR##Go{
z%)-99i#1)buChVZw93`)`+CvonS8BDg-{TQFRu%Ph`T{-F*8$-?1#Je+P%7sXJ_wx
z8p(%5@#fy~<2eo^1dI`)ujSWb_Y@o@GL>@*X?2{!<dfP4SXa!}n^xknl+M~r*3Hh-
z<=@nKxXGM#IBtY`$BJMWySi#lO)=aqAXgRKV4kv*BTKnTAjQ5v#qGP%pvd}UxG=i1
z2i${JLFCa7<xVtS=r6SRMQm(rXwi1nR_&Nh)rhXL(hZiG$4P1i2iw10(>S92l`X9)
zt$ATKS1(`EH&$}-mSpOK)lDMT8Vv(xJ#1a}S|ZaSHBu|(1C|fLw3Px1ak*#%z{VU-
z0PHL}iypNgK~wT*5I%Zy)xb#b1=PHbH-Qp)QO`xDONYllWk2x9X^)#M*69%^9Td^q
zQrgV4x<AQ?Z7MS86nFE}ksPJwoTBEoNHghgGSez?Ib1OQ)@CXM9gb;whKhQBNtx>h
z8()akka@1pFO!kCsrw%+Kq9rDeQLW*v(fR&Uh;gjQD3*muKu(lAapyV&lp1{hV9K3
zfaXt8)NKR#$0~aZGvWxIquWWLD;x^PHdq86437H)5jbOWW><ogeApVjVz7%C#7NSK
zSf+h2^I7HT&MGh2cgqvO&Yh6F0^JH%N>3WeWXbk?aT@)SlUyCLfx|=X(D&O|D4_J<
zCV8gM`=XJg_GdH#kjXi#v7;fWCCz(@s*E>*vxw@coWOmv;J$;i1!fN*?({(d7x-8Z
zyAFUHP47<aEGxFb7Jfq1!c(&|m!d*HkA$L(MDFDB+;jNJs9&{qRNEu@(TdW8G7ItU
zuhM(5lGbY=*(&qx;29yb8f2V{hHGjjAWu^y`fb)Bq*<2etr|8jD#68ScZ%$ny8rgm
zqzz7gbZ`vpr{1nAkx$cCw>6SViPd86KS<kawECwkN1%_Y^Yp^Q;`_=~>8$;^9tps6
z4_R}~GUC-uHgFcT8O@$a@+y?}OnyVY-XzdFXF7MV{*FAg{syxx4D(f%$B^?n_l$<b
zj0obvW-h<zYAuRi!^cUxg2Xn`kfG|uqzwK6w1#2AtUOYW*dV<};2lxTAlWnl`(1L*
zI8%Q-K-N@nUbZSJ@-}mI?9+H5mQ8d7%bDNcvps844)Vd*eA*Y|+wZI)lf7{j3Gxr>
z!?nzMupIB}&a4oQM2+N@vDhI&)pT{g>EU$9z%KHsIjZ?}P$5GqROOdibXI(k4HUv5
zCe3>T013XZL*>&O9AALISBTi}4~emOms>gT#pZa-qn}Doe(fL`+oajpfJA8L6&gyI
z-Nixxb7SFZG(W4U>SXWe`stz#=_)xu|5!~sj4F2zOV4o1Vz7Lt%Mc<J@|!z$FUDw~
zI_V`xYAQ+h=JC!Vy;<^ag^H^b(<H^Oru3SV0!x>ASS-SsC`RmR^9SPW5-R3Xl^YL+
z<Zj!gj(z<^5FgCRUoPvocD2D58FzJb?waNiXK?loJfNK}1KE3>5)G6j=2^o4Vq!|;
z^QoiO(?(7k*1H(}I}7T3S#E+@s{}r=Z>olo`SqtdwfhIA^h4?i^{&swJUjY`PMiY~
zy}mc-^+(M`<%KWy6$RaO*+s3=7o9$Q%(gH~t1MZrZM!%@mdc?q#F-@opDe!Fl89ip
z;wDSTb9;d3xugu1&&EF323kM*@fAL?C1A8>Hg@Hgnlm|l;lW54VZYukT$o<cN`$Sq
zcq`+Z>S16P$&<>WQ4cl6>Wpd5WrGjnOo~9~rL_A<YdmSYkL%m)?hbJoR3=<d1zTsG
zGY;|2?|_o3!$xG<;rVauy~luBsE5F!{VJ{a?Ha%2+{M1Dr-ftP<=9rkf$WU<PMpvA
zeZ-YdcNOSJo!kE!I(4T!K~8~R#cV2YKSlgxJautn9RTQZadU8(OESIY7tEXE_)-4h
zK~TiEpOm>A7#n86eCyeCz3)(So^TtLAFJeTDW)|Vh9BYbSA-M{pl%faOdgi7rsZ>Q
z2Y3<vWN*aY39lfZ0?cnT#m4W6_Kq&i>}Vg}jIhVXjWiuevVK3a>IZXqMZXMp;LZ9_
zt`H*5+_v^$A93t~JEI<w1&GlTx}B`%u-jx!e<wlyB%%L`kBh?aKLn0wF$<@csO)k2
zIptif8O6tJAbbGFa8pG|iOsup_zh&z`d^>_>#K)s_-3ZIlwl!;c-)TeN5`&WTcwOw
zAqs=5EIMWm>vf_B-Ow9#m+B{67Z!BGlj&F7F;@|3Z!WC_kEY*gIUnnJA0tP4^d6Rt
z(b`C}^q9e;URQ8L2|Cu1$JcxMn)bdfK5se>DZmPMvsY_;m?|lA@+?`oEQn-ydb)lx
z#QOBb&tscRD;C1b!I~AZ1hdUb1)@-7!2kbR+n+ze2B6(>gO-gaD~`t62VxKTpK&|3
z-?tbRL9K;flpD?z5RW^W<gZ#0N{JyGZT{x~VBHE(xB`9wXV<Pf5u;!xx}ciMNVD-2
zXrS&^7E$wPIkB_3EQwgyy+4v}i1@I_Y$+~Dn;5H}dZDbhcN<se7j5zLA}QzRfF(my
z5BIYnse4!L_M!LM<9Q_I(*LuqAdSm`$09jiHEr94>w>kWNQ4m5G}skKTwz3(8izNc
zWo$hY<he=?%^|N)p)dVkrh5a9j_w_6Ea-apdk~b!+rLO=cL+m1g(gq=gp=?nELP&p
z(v<n#RNgd(<&hv7sES>>qgj1G>w{sQy5a$5Tb6-LQ-A(RPTaeyHF)B?d|Ypw|FN%N
z-ujPGXnC-6^74oq+|LeCIr$Iar|!w=!K_ziff-7k>g!v#FLYjAj#h~@Ij$c$Tr}u-
zRvw+t6wXcUyQ?+zI40m_C5<q|CFwM{9PDZK0^H&Mz8im?M)M6w3Y{h~LaKi%^(sFB
z%jE|AH|D5Gr6Rk&*+_dJw%H4WWuDl*$1hMP-$hvSG)b`gsf{^Y$zt#bE8_Bm1bS5t
zOqB<Du&|*KKBVj9OKj8ULOAg(B7w#J+xGu|kN<C>fU!cQ{Bz=SEF~p717*5MwYiMi
z0v|3{{!$A)II<X0$tR-?=~LF0Cp4q)Je7*AZ>Et8{*#4YzND3WdVDvc`DLcg&}Tyn
z-7%?9`|K$>H3PmE0%7*F4FB6f{;$(%CW55&8Cy{8(Y}=Lw3cW1YU|Hgu#7upE+ZcJ
zz-At4F5hTv4em;Y(QQnPjv5)QU+P8KW$EM{o(Tt%@a`^w0?^>{;<X7i?hM-5^hFMA
zL*p|xE6=~d=KjIH5aRpN3}}|&C*{5LmwlhJN6sEs@bnoV6Aanf+|+#&keF>}thT?E
zuiJ3Cs5l}2t?<x?(zJ=;;3`A%xc#jhq|da@HL0@h%r<gA->b4Khp&)FFs<G|b}(a4
zD#jr83$hmJf7qXYvtbkwP%3GvLt`}r8b{s%h!~Sf>Fec+&4`-!<5k@1c`}`nJ|=b1
z#BQo5Ij(MtIE$D*RXq{n!MHk}ey(43dEphR>zSlRHhFh0V`JOVBuLn=y6eXe-Lb*J
zT?M?xKUlW^WI8uMr@vUFaY6b#aX5k7GZtQl$jUcrW_qDxsFk}p3r!UIq*?w)-3}L$
z7oIWRTN~j{?JZAit`sGO#IfZCen;>3FRwqixM}fD4`YVq78<R7*NLIRm;Ardo7dkN
zxDMEsa;{N#$vbMcE1u!eCzCW)F(8zx42UT_zNCMGx-+ZWE-XPW+SfJ9?qElKmkx)z
zCN`e6uTKlVow@zXw1>(q#t3(IMbGKu^K^qf!CYtUR~0#`kKm!9q1eWmmr3_Elm3u9
z|C_`4pF0PNk+bm&wp4iN+lZAoW`hL}$4mcQ#Rh^^s<ba0a#a9b!DXaE=z<LG<Jm1M
z?+I$<Gx8MgtGx&(_gbmvwR1-5KU-ogZB7&M@(`dHQ=LDB$LPysWM#*)Z}iN995lKo
zw&#ET?%zuN|2F_$T2LzaaTTRGxvI~GYI#dNMm?s2lzWqFQK#Qnp-Nrh`5O1%ldj4R
zkB;`P1Bkfi@Ot^Vl3p|w*o{f%tAee1&;U%n=E)q)c~ie5?+?(d1!#{8SATW;qa18%
zb=CgviRs!W)_*ai{}VIx1=kmlQefmH5x#`75|MG54$p$R7bC854dKPMpt@)55A|^J
zl)Dm491vBe4u~cVCU#tBsb--;8hwV6Jwpp_9~vqu!z}+d5si*rze!DxTt&FH8ft(b
z-~&PECcbq{Bjz=cj}Hma`e%A~1M(clS74yFv9Zw*@UrMUH!javH=^y@0A(jeWxX=m
zepLmrl$Bh2nvq6S`iJdWmNm=hv@>LB2SsB?60`;(eJWhNZ%n%gPtLL$vDdde$!t3)
zv7c&J7qiP@HJ%QBAgam>>gir}!=p;JICUY-W0L6*wEVx&{;nr>$uP(ldQD;-seM-|
zKM&>G!^Wx=p!gsb@IQ^%_zlXGr-c)oxoKaL9I$I)Y*+E;&bUk<NvS5QZ5A&<74n&}
z)^t`~ovYqPpDMsXr9EvDL%G9x#Sl}j<!LoiCF^O$sTVQB;dZ?JmKfA4YmsOBK<s~8
zs86XlJ&0ANWR0s(?)j+kPq(%XBYfkM;hQjsw(wd2_CeilxjGOeq)Q<pqAV23jL1IC
z62d(G;@1qJ4Yw@H&K?KM965r@D3SN%k^xm^fN2~vxj4G9r&AnW{#AAnwSPmTbK2Md
zE@+7O_loe})guI>g)Ob(CpW+*c)PEcfXyf^B^9g(E^tAc7Ai|asarP+UWRXJlo|Cr
zM#)tmfav0at_f<XVxj50WRkm|Ch|!w1=9bj$G+}Q=g=$Q-G}EWXEm}h=_#HKFb;Y8
zP5PAR>FCIo8p8UeSlo*w<<v`m5ku56c%bogEH(=*7u}Wep%sEX**><7W+6o3*Ef`Z
zT{kcVNC~YbGY~)JGA!YHD#-=Q5go3g!;|4GCvn;Cp!n|hrYf;Teo;|~1@Tb?t<40e
zdOfuVQ4it`^;o8lE_+|w2k)^CAWORb!EK7O9nk!l=ey!A0*4mr(Ef{EO3!SpFep4J
zCV@-p!la}CdNnng|8nnZd5d)XFG>YvW%k^>JjBVq*l)S?*q&1csq)KEet#s2&Oco8
z1x5?sR1u!8?85f9ODgS)g7lpZqcu<sEi|jj1bm$LS7<VWwb35aTo!9^SPCc$n|mH=
zpR%7?BpzzNABe1F`bWP=VG8-u+Yv8YFV7Abeg+4mvN7FXyri|UQhC4aG4Y_Z-Wp<B
z_RzFU{B{*g7M(^M*8WL-eSCXviC~`hK8m0Uhj`iATsZJw|FH>ZwuF@Q8qWlXNE!?O
zx|lk+0<=G4FK|&MM->&^J2NNEOF~trGG*h`?j_u36s2$jP}s{Dq50oei7KCi|Iqmh
z{<D?dfOO(W03S)x_$>{-C5^6hM7gV6bYxy$p74WAL31pCkTdcM1TZ~I=xsQ^#LS@O
zzQ%yE;rBb79wc(3$aI0Cyh@z@4`N%z&oTL~t2F;5bjdsrKicRgF~_fa7|#zDmZp?l
zHzq4mN>mmO9cUrg74&>p5s!FxaRqO%e7}<L>!*cqa&oo<GUl1Z(3NnrjnSH9j^#V(
z$mW^<ZVdk2Hh6JEMWpXCc}w)&Dfp;TQPOKmJ1%=yH2SUfHyB=4kY_GwNbnG4BSn8w
zGk^g<0<?{KS<A~8V>?s25D>E(`2(X~Boh8tkKOf`4a0%ZKD+IsQ<<K=6kTjVXKV$!
z{WelsPse2D?h}}OIDL-G^Mj_=Ol`+Cpj6}yvLcXu0(+oxESUxolq(l%k8&q0H}&O?
zmSm}%zmUg2l`b(+iUBdiNS?ZI@=|%Qu}Hw2>D#xfp|2Yp93AHrKr_mHc^F2K6${4L
z>8x@+CnJ(L03b$9P2$nMbVO{aW9i0LaN$L>zwLz*+ovE&%>T)*BSC#w(zkPe4kO9g
zJp{|DJ{hn$Gc;+}Ic!`JKKV{_M5r0%GJwlcHln7YQeO+oUX<;0i{rT<g6tZ?nbiS_
zSi%;+83T^wNRQ?$V(6CskxC;?9qbDfPrjV%lrsQ9EyW{H-=UG8qpPIECQ@c!b@QHz
zj*fecQTgTTewXl&2v}BVVTdNUD;6{w7P=WAG#aiW@vZ<T#{XT8o{AsnBKb#)hwVc1
zCGYN;)2${*)iYpB)+e%}6E(hDj!^Kd#9MD#jkku<zkp#YlO+2*?!GfR;^)_FlMS^a
zIra)h6~-QU)OLL#`|C`aZ$sc=aB3BI8}G_RE<v#}yE%d?<?~i)7)DuD^pcair-{*{
z;4%JLZK`A_BCMw})nbMB7hUIMMjNrV*?q~;52&v}1@k{MolzJX5hUwVfxV(WcS&mi
zU1-pWIfefPRYV<MQfYWeWb@q~OV?C9<}3385${$h7{=(Fn(aaRYkU8)adZ_mwaqys
z%ovvs&-;HSSs*x}ficdJcAzVz$<H&oM(r><Fi=A26;OosNLrB}Bb*`UP<{oD(qrr)
z4(L==&!Q4K&XrY>m0T964BZZ}&<f9uDdK_8l%iyGowZT7kPUDD=!Cb!yi@^~eT$TW
zyX|Ukg0lP90>gS_vD%7Y%>t`rOwEttSxJaa?DDBhkL?9J{RlN5GXzj@K2j&1%QP5!
z?5vvnc@H{TsAD#BGUS~7R|CrRrvPBp)ad+ABJH#_HTfDr;+<A&ilOG5gw}XA+(NLc
zfpR;w@*}pXR&`gLuM(LApxdU6tvJmMH;^zmE{iaBcO^ol2Q}RPY}F=I`evyIFHOD4
zPls_n^myd9?A~qF+*Gb_VdFvRvAc|ys+TWIxH8xd&94aZ3e6KPTv|tD<aL8<+Aq=T
zaE5E6iaPbk8||O|E{;U3SA^f_Eq^0t%Q42jdy=TP2d?lzXB|hF;GEHRF9CH|DZawO
z%9DbGw51+lBj(oFbR<!xs`*Uq!4uLDCK)MIk1JtUM<UwQm!#<971^|Tw5?yz3v(@{
zAr()9ri@?T!2osavc*1~5Z{Mf#AvSrmS{v@e}jE9gvO8<dC^3Nd9la94Si9?KI2s0
zfj@XwjM7dQg9Eo%dcIzm%k{u{054}mhqLMi8l~B<j7TeIyI#lK+VzV~*R8$C+JnVI
zRa+<*ptdt?4<=>r?3AE`qT^7&yl$XC{=*;o8Q`yrAk18w+uPgNPq|)v+Z1Ld%B>=a
z8|vuj2ncrX89TxAy)|25b77zLQ>akwJoGDZmBm!#cvGA+PeSip7mv>r|Jzc}tIJ+y
zcjMCD?_ZNr+g_I(Tgr}R!FIX+<M01#j%+la$Nff07me-eg@{OsIzJzo3^eoFO<7ct
zI;UqEFHPU?Qy18+5Qm6kwv;2RS`KPor0sl3(>tnnh3p7s;>?*<zG&fYQ$^?+ekrBH
zxng*h>S<)uqb2wsR{!@7Jt&7Q#I^C^zd;KcUcQ(b$UiC?@@Lo3i>mSF*QAIov<fNm
zteY^u{54SID&z=1=0Bn?sU6a|NLnOHJWEhpd6}&8L@-mg$dkYCmMQ(;qyGB?fXzbj
z=8PLWE>77&K4~A;c6X(0!2F^+I`wQiI`eGoVV*4S#XaMD0j)<BngznXeZzA{j)<i#
zLfH}dyGiQaefPc;bnbKtmx>uZXqw;tdA$7TJ{=pcB<{ce+5Zv=SReBDXL1CHLals1
zEk*6iyt)BTv)KwAKm4w!{<gMI7+U)TC#k3@0P$hx<kX47cXQKp8+wbFl=PxxVq#)d
z%(TxhHYv85AS3)W{FwHW%6YyFYsoOi^#t#;1bmnyq}6cJf$Apha|#_ufpPPt6bH2@
z?_eWsrl4odfbsN~eLPU`e^gB^9xOmfr!36ByTzewCF9b&+x4j#)I-0ZqoX65$bNC}
zn#WARLJodZv%O_<gq@vzE>YfQ6px}<A1){AAh<b;FWZB^!-Fe3G3Wf-tpOku`hmQ_
z7XMy1`&-L~gV7ib*Fin+2jt{>HuKH!b`n0jZ1%4gtR<JM3GLO5d-ei_A=Rs`2AoWu
z=rke}LRsX&e%s74Vr-$;JP&|Ri<zD|P)n_xH!@3zZ=pBkNK1?dz6=CqQdwEKwf<g#
z?tfC}zeVr35tbX<K@`+h)apIpdE#-J_(v?@o0#AVF?xBF<}Yy#<M3xR6FdpkG<&ql
z33DcS{9<k7@q*LZ!4xc-t$DX<S6dqS^qN|ZZl^_IA2dqpW&FM_e+p;eUsJ+~_Sajh
zNrYZ^5S&Np5y?t9Zk)El%mpW1aY%s<rDx&fjF?Oc=o|{iz2-oJPe1<vHfPuPldDMW
zuQ&3@{gA|a6x9_M79OH~P4fxUFNWk;ly4S;R*ZZ;4WT-G<be@FZ-4xjMMqE1f2I6h
z_`1Rgo9BmQaPSL&GSo9btTbU#>7f*h_{@)7&mA?2%P8+Mv^e<8HT4TdVFLM>PFw!j
zEq7%7r$e1!`DfP|QRE^|2p<s!d=GlDsNZ-`<<GLOGsE`V1R?H}L3-SAJsBq5TD{2c
zuxP+VQnuM-M?VOn{#p5d8JGY44-`3&7~}HI`N*#2vM_%}W~4+*B*Hje&Ji?azZ2bM
z3%l+CqSHJ}4)><1{qp@gws5^8XuocCsJke)Y{CD4{CT#g)`q60>ozfk3O3hSAo4TC
zkKo@@H|6GgBBYi#C8YPXA$>2TkQ4L=6MVb5s;6YW{Oo#)1J6e%C{ya7winx*UL<$k
z{PJf@NEnI@J3~th^!7NfDW>Q+JZcp0f<_Y{;xAr&3Vu2~_GdB48jOu5uU{`P;azua
zuz3~8N9Csyh_eyXgHW(jHRUVJR><vNt8JdyX(BUUb5TLLwseI-GGx^5J>QsX@;v$x
z!NA=%L~mH}!XBy9&C@qiJ6#T@)wLwAw^t|-=lhS09wtwiH`1)TKI-Dk4MOgg+*1}d
zHa5F;RkiC~DZpI8w=fABuQ=-Zo<vCT*Nx-^{uzf(fhj79jhFXiIjmrZ?4NA>5Pkvq
zV+Rlvl_vY^2zRL!9uX9d7$zj`sXe~tP_>Ug2LMx3tXbfomNzmvBr8yYv@a9`kfi9?
zSQp(?_HdGG4uwvmM!^lF0Y6*iNmToHdOTMmJZj{^3(;F>5Pn8wHI)osp_G5$1OMUf
zfotCm-&Hxdyf|wr0k5lj8xCjR1V#$ffK)8W=+n`?Eb4vP^Mm%fqcLGFnWi34JFrfi
z2JD<a4sqM~BlV@!II^QP=M#|$_$nCJTxTeyg3Jq|iyo@jZI4uiM*{tGIvX#L($qkx
zQS!RARCkL~=$b>JFNso&DGM8v+VhjQ=SzXL8S3eGhSD0~<KsKNX;Qj}yk!4q=YJ40
zm@w3qci<FvJlZ?~@nTP$L;!q~0u{nMXqW(3R)Jh|K6o^r5ibzEyo`E{=Yh}!9~Go5
z=qExxiu|lSZjIU4tM9Qzs^zt2WvzsQpYY-BOs)M0@K(6xo-E5Ezbg?B3|3PUQlV`8
zBz>>5I^<`Rn3D%iUB!9$_*@RVySo!|gcWZh1(hB$V0iJ%xYR>V?uRPfHP?y0{}PsV
zpg0fA&3lJBcZ4FdvlMclF$jF=5L#)Sr=1uwvPkQCt%ZKZg};8Wz9#i>pxjZbM5Dg^
zFENKFqKkzcB*f;siZDF7?#xJN75LU`vM7tK<{InN3pDLrWhy-=asJx5cgSnQuS-hg
z+H>PY2^wwZ9W<_-eb_VVnl^D-x>&zKiyZDjV6!OLJL(S;lZDqF4j=)K((~*XS2n&`
z{t+R)upup1+|q^odOtn5ajhT4=Bpo?@K0TD=aAN6h(j}JNwgR|(}=<B@-=o_!Wj1m
zk=wPerq30dA9d(}IdEOu@70Wb+qnGlS%|p%y`E9>AS1+plW5sNnq58erxG!{#lq}Y
zJ@0S(TvzPS_f>(UkW_=I84Q>U5=bZU`7B2wR|mU~bfvx;m+FpwR1mrTdYv(i%M+<z
za%jzguC?3-VAo1{XJ0==E|^h)A~wHi#+<89V}8RDX*;hcH35YE#)8=2K>5cEUeBnb
zSlI#Qs!d!5@>E!`;l`zjK&saTEK9<#IUW?<PA9qlz?T<YBX5MsqC(R%?1NGSaLeJ1
zfGhrB3|yi0MRAjVZm?_V2#Gk@L>q;bU8M?5cO{w1%d?vNiciSdtk7(?f+QK{YWW})
zQYf#baQz1G*CC5<x!h#58!A+uSah4iZ-d=}k>7kBdO*+l@(6cY?Yd)GO96?_qT$<l
z@6zD0ihQ}r)qmqhe%ty9*t$#Moi2u}O%+7_wcSzZ>Eq-9moJmRh6e$3yrhy27EAE(
zhB4jrZ(WE3#^r}LVUh857b{T?qa2vXV62hK7?gYYV-VbU&CO8oKV=J^x2kRQF~*~>
zeX8+d;20#W33t^hG-swPt2~`3k7|*s;EbzLY5wwH)^#i4hjha_%{3(tzK=mL6lGh=
zZpjswNBvzZG$G?RQs#Kz1zJ^+951nZ=l(e3*BOq58wI~$b%kR~6<pCruS*ZiR@~Ew
z!Dycqk#>c}<KY{gwB^SE*Ig_dUGhM!51MA)$fbMU$f+@Q6;3SpZVnF6g(C5=gPI%(
zwb1Jd35){jPvAn|Z_FV?*z*zLTJ@m=d{v?m=0@(8M2A>P3cGV%3pI~+lSA_=S$wR?
zf92Z@H8r)U4mKkN(1bzCZU18-r{{c15wzD+doTs?nErVtFNmmsWhgm6I@B0JxVIo>
z4G;Qbd3Pc#EUYf{a{$RT)e1<K8<<?5y7?Cbuy=jbEs@VZ*&rWzp^Pl-pn9366XVAp
z_xD-@#!DqT<=&j#Dui*6Hv*qfu&hq;IZ{p8kcP7-Hb2aUu=HB`j<nsa7{=wg@pJDt
z3&#*iIv`sycys1A9nc~g6<{=rjJe|O({c!!TsOpY1MZALuu?I(P>89LH{v?Aaadc3
zM)(;>h&#apA|lO(w|$9dr_~t+*IMeI`#}Dtlwc6k@#C9^TXR>zpyHS*;N$%y+mf3|
zQAunT1%Z+*;r)J5pU|k-z-tfN{OzVpxo)+N`d0pkDX~_;=!Oo~lLz2TTo|^2ee$re
zs=`UQu2P`ic>yed{<M6xS%wlXo>ioLbu%$?dS0*;1t-n2iE}rI65#B;u5nuP^Ll|u
zEM{Ud=Fqy@^4)$H5U^kgzHFyQL6ndE;=_UU5p}?|!#U7US_K(3zS3XlGP1G_rP@p(
zgUEaK8+10elkXKh73sC7731YMDwwt*H*Z>Tdf-skki$P91|A;G-=Lu4PHk(VY!&`-
zW`pUv<57GT0++;No-)mXL*)WBM3K_xTmp<l-BYr^u>f#75}Tj0zPV~IQ;+n&{@Hc{
zbxWG2XWeR3L5Of@Ur7rv$;v3<QNk#OkUn>)QQ3)O43pBeg9Na7D1@j${zlkv6hp)h
ze(EYcDN~PKDi{Sm1iPI8LH<LG*8jR1hXTPQc*L|VRD~r$5limr?BsOZjbdS?1%Z|_
zZ^y;vmw9$Px%Ne&j2Uh0ZkpCon5~vaZdx_PEMfj0JPs*1k;~j}3nEtk4Y0cCI3=a8
z@1yK1z|!ooZO(9O)$#;0M@-%G$XzEs0O;)7=bADl9<D}t%1AxA-f3uf0ZG1@OuG|l
zTz$D{T;0g#SJUZt1Kx6*1eg{EgIIh1l7~{)_jv9|B=aP@TTH!ygLHtuZB4zvH?m*0
z#y`<<I+9@}8g4c+CAuk{d>?%BXs$cOHGd%0I<I8ZKATp!$kxp?3cY;U`RNAS8{LhQ
zD4(02=Dx}G+$W?tZ2@kw-0uNKp%SSKTXiw#^95?aS`5O2NUoXVnL5Y0u#cL<*SWa=
z^%<9^3cn9-Env%0WR6;bNagAsCRBcWiqAOks<xvK@97ZU@t-)ZcNE}JcMn3RnY9p2
zm}Ch2MT5GT%Ys&MJopVb0md{w)@bHr)>?D=p9kA@PPY@c-#8(@Y)zVOz`B8*sIYIN
z%ZQ5-rmqiV@0EMm#I#^B)LiDezBW{eDS3cz8Lj&BzFEbjfo6dk`{q;TC66QEsTjlc
zd>@Z)$=Q7hy}tAQ7za%6z395CKX3;6q7xDtO4N5+X<^Bp5Z14!7vLXSkoJ+g&PxA$
zhGGhsfHL>Sce#a1Ip;=<ZbR{eT4G)R-(=GtW7I%WT1x2pV{L%3hCJTubT?@hcx2C5
zHYEp8ex!mWJ3`LX^EFsYK~<EGYt=`jH*`I_LeT_9+;cso&ljN6_GF!P`+;%a2`KHe
z+uek>KVtP5y*r`^E9Sno-geZ&SP?gKtu7(pdKE6QM~o^>JNKP$IiR6H1PP8yj?Z3>
z8qSEmO1Z9o=GA-zl_@_|<jHA1K0fZBZE$TGu&f$Ov`gW}z*&od<*2x*HRv{#yd_4z
zzRaKtNP&AdO`_gf0FKF2tuM*pGW&3=KzQ~{ml~E#50MYS7)?S*8a})BEN{TWfCdXa
z4&e^D=X5%hq}zCLIMqZ}6!L#)`wpNcw{GoY4k$$hrHd35DS~wAB^E@b3QC92dy(G3
zSU>><sZxUif<i!gCs=4wf+D?lF?0w$<ln)g=l(NyzAxSpXPjX$zS-~It3K;lYqM;p
z<bj1gB^Vjow9gxtJYPP(M6_^|@exvlOJ4_8Sl~A@mgBva`A&ko)F@S*`y_wNjcFBC
z)p<QX(PP9OHz9BX>om$q-B!!i$`1VMSPFZ1?=LthxiXj|WjdZ~SjlSCKInM*H!RI*
z_1WvUF1ns=w-*Zxu(dsRaGBmHD*HX1lCd*H+;Om?m^RS!O+pUCp&3FbLY!Q-Q-bWn
z_eH|WbD)Iy65vcEUl|CrN<LgBKdCk%o>sn9`gA?0o5-humw``^0R!8nYtA3Fw6yf1
z+IKxb=tM5!dHERa72^Pih|m%)UI>R<nDR{QBzBP?fJr40)uXy0XSEH$+U_eKunUtp
z_LEZv><QWUDMH7Z-}c&Ep=72y(Eud%wPfJ<zOv|6(182G{U;YkKfs>8!W7TsURfhi
z<)c2*B@jB(DW2r@(DOH5J{@2js$1k15~$}cINr~9aFtB_H*GeLZ+rypIw>gE>9!fa
z7^EK2#}lCf;;&wr?pwDnh>4Y~*24d0d-4i1oqo=_>A1vPk$;`(QaPv^Suzs8mCzEf
zl~x!TO_+*uc@6uCT=^3ZziPn3Ai}%^6x~5A@m0Rn+5@^hWS6MNs!FS*6{}q|CABT?
zLtp8@ZjbB5_HdkyWrkbl1}KVZ<8L@pXc3JAQa6@^gGmbf>x)J}hDN#Y2}8VKLT=ov
zvsT`(VC-_PcvnC)N0kBkar~-w8ieSrgc{2M3p|}>;c%J+l;2j;Mz^Y;wY<5)!SPs`
zoHn#>_;oi1MX%B|r%d;X@i(3dCL$uI>nxnVkeGhKMxn%Kwsz7dIT3DTAE&3)MdxAC
z7cO9P-OTxvh<|1(8+hjS3;XaIvK%ldzISzXb)iHLsl9G-IWb)e$h^~&iBhq|)_x8B
z2OodKa;5-_G|!Vaa-WuwiOKt_s3GdYD>`|b2=5;0V~|5H%eS6<*1<i!Vt$64__eYx
zfwj^EUO7G+3oX{G<}}5{Sy!>nXem1%=WT!55`Z$`cS=l38c6KnJ4?JsfszV{aZSUo
znpV?4s>j6DvpR*<V^pe#ly-(FJ{EnS=^6FZLh4~-rRU4cU{0Pi#Akwp5u#TyGD!s|
zra3?@YdNj3un^Bf4`Yf$F}rFo_q-IK53R$1GX0@LvG6CqvAfEY)|{=YOXnQ(A;o%g
znWke{bRD)M^vUEdDdmo)a!vpm@OgYa=lZaV_tMIK)E<d5(t=dL3ar!?L_-yg-P~3i
z^pIVlFE@RZ4D4RJDY7TL&it@)=9t4a;AP-V`%4^<^H=B}5}g?X*ea0lcyZT5@No)&
z2~fVgxv^}`7~m*l<TapRG)p#M$VV?v7mi<l8Op!)ac!>ODxbJ@|L|>*0FaWh;W~{_
zrpPg@1jFE;o-F4MsT53jD;=)ZX#QgO{2Qj$De=0FM5T-`DtSJg*^U>Ir9NaLMTwTe
zh@0RIm}GS<GSrOy{QSPb53x!JBt(PT6W6?*W%=Leuyv1*ZBkLadD&<swN@jZ>szzF
zfqi}r*V#CO07s2mN+6yR0DN2vz+~D6o}Jq(;?VQnc}L2?R}QW&W$m{uZVQ8*^RhRv
zsuy5PVse&7qaQV}&CApaoKA9HHLEf*m>sgILak6TjV?lE<QT)LSg{+>uZ7~dPW5){
z?zzw1@U8Lj@!Q|ATczU|j}w>}5u!sv;sViMArX5x<e=X4($`K9&cP2;goTGwfjjS<
z+<bhtau}nl#BRuByVl*EY#Z<MLatPag!LiZ$cs)7ZjU8A5*g_5o;7ferI~c`Ry*97
zQuh5#_B@b0eXHc(*~i~}Guh*U?G=h|-xF$s0MQV08j{&TI{9OUKQ4|H0)R+I=BYw@
zKBIBfDOR+B&MnVL9b+-uVHQN1q4OXeBCXAAx&rr}QlQEX#0tslIARO3zqv}_G9@0~
zg?DBC^@D21r<$sjeI6K<>AE}LmmZ0-{{0aBq``IE*+FJYvPi<na~;YaWT@6Kz0yX8
zD_$^^9v9g`Ys37p$zVh6u*OQKh_^w%xzxuDg4aZs6ge&eMdQ#kHa9mH4cbj%yZ;6q
zexP<*F?PD48xt9i%pqF^h3C_O=MNg;FZ=D{Po>~L08=JE-&c$oO_}2s{LQZ=DySd?
zUB-U_38ngLFc$oeYX!AnqS_7dVZRj`Q+2GSDRd#c;qCXf@%qMIbQlL)(!lZa)Pdng
z8-~;JK90wYZMn$cH9(G={4M>g;xC#1!#_yesJ-(gO;85ZCZMb&ApFr4QeKbDDt47U
zpW+#Gd;9X;+PkEt?O3<;#dT+pnIiRyzrP~5tl_&I1+x3KZGf|MP;Z+ZY#_TC1cdd|
zMS4i9E4pf-m`Fw)*~t9kF_+o%AamS1+0O0<jRJFTo%1gt@FepXzjG3wju0OegZJFx
zHBNO8tR~O};0lxkQzHu~RSb3Q-<8hvWC*?8dc34#;AVUPoO3ZiWF;6${rGd$;+iMb
z)RdKXT;EVe%Iwo_MQ|VZ8%g7SGLit3dXipMR8$MU*oh8%(TNV#PGLYR_7Vi~7-Wvo
z3l~!+$2zPg*JUj#h3*f1G)>@S{EjCi_QUK}1j{^I8>2+HYSJ{zel(}B&Bw*c+FfSB
zU>Z=^;sNHu0B5xKm$1dnt_K+gR`uG?w<*mLUBLR?&79&lPQ?x&a{%sHdygRK%Zyt7
zx&u4++D5*68I-3&35hHePdfkPVt3%N?qCddi(x!}5KlWxJP1zg?)=bUj*GQW3`f#E
zP~&NQQ2XuMx9?in*be7v_MjR$=^$-^)+;6i#1~vOup~RLzw||MZ0pY9In+`~zoWEE
z%W)XNiTp;4MD&N5Xaw7(%nrRd2?`Ygg8w9KaSf^hk1^gtWj?wKp2dHI-PbrJNcSOE
zUguoQuDy%Pa_lX0zU%uWO<?lmK|S>2CQxQxKBtb<LeLhYM1!>O!CpC2ofijz2<wDF
z50~%W@MFUjx|Hw08QlzF%6#klwL|xh3AXzP&U>7NvYS9a-x*9yRu)$%bO-yUEQM}{
zjwbe{8xVzv3vhp-Z(HbbAE&g>WjuCuuZgEF{FY9ds{ldDNzU>CemkQUOd4YKT^xBA
z=N_cpFt(!VeV<UpVs96K_cGqWi7(+ctL?gSHnWqZJyqB3%(j2)tA69dTnvKkTN83a
zV3Q^xm@Z_ts+t-~_*0qG!Ss}vWtVhNlm|qyj}e%}v_(uDzhMOq)Uaivl}Ho_Y}Y?8
z*zg0CjMlOvf4>D@YmkPKg~d=-TH4p*%D{;a+2|QS@h506IL|po7hHVf%+?cT@c=hM
z;{$oKn$$j7Nmn4(R`b{Bu7LXz%*@P`s90q-A{h;E&CWP$xi?yS#pI+b#$rJRfuci!
zilE51bG^%(=tBDM*&}LDNP%}zLR~2jKyVCMowm~rBj39}w&8_XgSQZH7D5om{t&XR
z(6+$J${Mh4=sAdOrJWM6*dMKrU?jLTS6Wa~8#xBg&(FVo=;%o=i^I9Q8D4YF;Z^@|
zU)?SmD+0W<p;H@%%LjL{7FSTKk?qrpD8Y(com)aUBJAOM$ddd{+v;3(?kc_@9jdd^
z`n`k#Hng5(J`^F}ogA<=vrw@;U&;1K$KlgH1?q;tQdihTLyoZvYQsUjG)ky!3!A??
z<67MywYLTBRB%Q|e~C437}z3xfPELT`S$Jcn153=h|tJ%f;$sUiabf4t}}9vl3(YG
zy;z=ov7XZ-VOGSLM!G6Nr#I;~`WfADQyboEn>)v|lK#A!1JAS!T)q2{{DJRW?H2HV
zAY3Cllfddh$GkZgFHpz>uTxt~YFdV!Ch&SdrfPL4C2W6m{4Nwha=2)orpSTJ{I)Te
zia7&#u`s3&vcuGW=O`BHWmf!H&SR1>s}Y7VA58%Kw><9h`VBaUh{O41x6=*5DHS17
zcgR<DjlqQHj6|oJ%}Jz|o&MpsM%~kM4nH!DFYJrG8n0I|SRb5{%{8s3`?EL3`~<(Q
z&~ySK$w0vKv<|-wPy&Bl+IXUWaJHs++t1Nbh#x+31lLWdY>EsgB8lvT`d!hw4xG9a
z57#Lw2>Ee9d6}+XY{k?6of9Z_(dPOOEGpfIJ)nj)>~yYvh1-n&LiPI4Ax&5W<j<=T
z!O)5m0_dqMx*H=OA&KHntTp)EZ5YGfIWXq#WtzOzqd($bAmF}$P=*1~D#BAT_s;&D
zQ))I?jAx9dAY|qk@C$JO$t_i^Pwa>)R^H3(p;M%CW#FbX@!6s3?UWYnH_&}Cz}I4c
ze|jy&-*jB3>{pm0Ufe&22<OgtsOZA=&z?{bSZ9F-PEylJuDQecW(~^nYek@_xF4G%
z@eHhqD{@H+ewgg5ZSnNSzc84wzG%2h^p6<E<vjHVq`a`G=xTPQ=RyrvH+9Iq$S)jD
z2BI5kkHq8Oo)B`08PJNB7YdKd3qRG>>{A$;_2cDhQ%T3HaPy6$+KH`Gu)|Ue+xrr1
zflERU7qvA=W($7+NV0?G;k*DVgE-4F<&1wwUR?AN8hrG_<)9x<e1QPM&<L#jBhr65
z_R}dNL^Y+ZTyQw~t#dKWW-IcK>~OV_Z-stH1ZWuq?M5>oZTSB9@#D(l@u}(iqtP)y
zi87aaIFiNTAWosnL+x%MZ?5Z)>BW?8bt?Ucc=?psgY*N>=h^{Cmw}%Co#B4SEIV|h
z60BvLgZf%lEtobOynw>*IskIig=eOcFKll76JK5nuN5~d!{&i94fB_%f*-2>yH@qT
zt)HC-tb}WlW8xw^2|zBi(QR!;-JsHZ@WDUd1X_t1?QsIfw#9SHrxGwF4*gx<JLSgq
zCAEWk5X81k_YFq|gjvkqYZm_Zp#b?W!;xQ(r>p!ppmZH@Kx|L#`V|-qS4#lejDA%{
z`+9$rh>8>h4ySV4NmM!Bg5vmhP(-T)Y)3VO^^@+Oh$@c$(YvmWrG=<rR^ULJ9ZCm1
z(ucSE!~gU-?Y(^@0RwYEU$tbS(fOz1yzuzcvp9<!(aC=zj9%L3JoKSXlECy1RS_zj
z_OV&#_Qmo(&jxz!8dLDJ7DA95HK$@d6is(F!<|a~pZa_KSP$%6Ou%cSJiN2U@yPvg
z0jt^|qT2Q8KYs`^=TQmJiM;c)6et#Su#0-Z@gK(oKS}-(<;)3`shNw5%X1>jK4U-R
zmwg@R()8|`zf$!fLLav_k72@1A7Q^c*3te19wN*M`GCHGfP?4>PYy}7a-uo6zvDe?
z$AI7(RlOjSqz8eN+S5}{#XnMG3SC=L-Tsk;TAL-Om#A~}p?NvonBjUNn;(B?4M6^T
z2{@Lo)ti^Bl)y6=3)OD<I~#r(M?U!JfYWcLvV1@e3(3gr1Q}L(u&A0HaM>657_JDQ
z2b?uc9<^6=ErBs9x3l;G#dbL-&+BWV(Xa4bA{TnNM2@!Gj`>MF+euG2!%rpuZ$|Wo
zY5Eo8|K}e7aTEBVsVt5@Cpe>#A&BRk9yN$J3}pl?ILZHWJ|K&&(LEPqWRTbG)S_d!
zFZnB!pI~h3gm_)#AfPdJ065_|p~kJG%>k=lt>3i+BxA#RY<gfk+HGlY*{*!4bk1+^
zjegpJ|Gt0liv)1!8_nCm(<CMKy&4rWuM&3^vpXxqj*(x#_m44+paOv2z}6=~?Ty>y
z){gn_kNr)F1rNNI2dvtRtaQBR#l1qgm6eq|U|uO!Qmg(#HQ=NaAB{2SkJz!RY0h}a
z<uc-l{r_1s{(m|0;Re>8%K4${tJ*CrCJsy||7Q4X@OD#+`p*s>_zuNKb<786+@-@M
z0crtsxAt=UKfEpQ335j3<SLP8H^T|AeFo^d!Z{;nKGW}2QTL9<O?xC3WUHVJNUnGA
z?aTc!YJR||rQ|)wzCO;#%&hMYrZvbvKGh{3_2%Q*e}XsAcT`ks@3*uCx}r+ia4)C-
z@J{@YrgnLNLTy_)WXe&1aQ1xupzoO8=LQD{g`cMfTC9LB6_=$9TZ_(rThe;JFVRWu
zO<+dY9*){nkk&Ue1h35xZl{3u?=NoJr+t6=d$=T73*aSbHyC5^7lMoTdhh;tU{ZUU
z;B7ck`wt1c^_c5xV3Ty2h!Se_86PQpcHpN1*8W8zN4Sqidln=ci+`<^5Z|Zs%RK-0
zA6!lWjp2VPnWz9be$$E;fhX?gsG%(%zWHUdo`-|l;KtQ*gBp9#W}o{%ZQUQ;m?S+A
zlxQ;RK4XW284}Tsz@B-6tQ~euT~Ff|7<nyX&)?u@n&<!nx1T0DcCTspryTvML@dG<
z2&|^R-{$oILPPP)%uINL@q4bROxu`WQ4pUN2&?g<bquhbP{80o7~1o#?}ym3qX{9>
z=BlQ;FH)<r2#`g&H4J0!xn=w+@<pf<@{RBejTvvygN1$Yiu?ReasDYxf8wM#2nTe9
zO-(M!uC)Ilqd880X@hx_R{hri2XIHlTHPJY`BuvnP1%9VL^mD&cPahXE1Ii<MYOQk
z_)wnsQ4ZOD23GQQRqK@N&v%9wkpW+WAF>t=kY(++Y0^#E52MBy4ZPm{$kGKA1qjs&
zLDV{2@4kkr`Sx#PKYW+m&lrqM5ZD8B@FhhwfATnf`o%A2fd*H!@oM&Jor`fzOGSUY
z-FnL;<X@G^An31~fqaLx=+RdNe_h`XAx#YiLb^_^{cW5wEG%s23h03}uN;&c-{7tK
zw{rqaJrw%7)dk!h5Ys5%Lvat2_aj`4-~-AV<<1)4_DbWm0qchY@+a@-#936R*ZuOc
z=9k!a=X|U{g#obZ5iM6P{zjh?@xoMl8ib2RBq{pSoYePo@*c%3JkA#V|H8otZur&1
zr2!tGO6K#jAoB2j$j25TCSuE9DY<>PAi&}4PDxegzvGkO_JnZgP-xwl1pznj%~8Ki
z{QD7aR3!3&vT&6wwLu7U<$gdLE2gX(bolqH0FCHAk_zCW44@g$U-<Lm8&8RUI`Q_y
zkQP**LZ5pdEw*Tm{lZYQ_;9`67!^0&dvWg9TFQ?<e=^#oeIc=Ree#WM-7kCpQ{Voz
zMgP~|L?{u8a^ACpyix~s7{G=g7|jP|HTSByd!9^#t3Bjhmo~6s%o<?w+I}dBpdwhq
zG?_(j8mVancJD;O0~&aL?E=X%7xiUiX4-cISP9}240~=L(oA*?uo_ml2fpes&`|8~
zz+a#066L?6a@Z*$+n}+y5C9NPO_zjhi9hFmU*o@>7F4koYKOQlN%@f-!)v<4)-dTR
zVs(M?*Ot5REw-BGdtC=~h%*fbZ~V-||F1{?zXT}kXCMb@tR~ofb*~;SsF4{9<j6f+
zJ)mg+)14iFFwvD|8t}`zySNmjeBO%w6*d1a5Bom`LeQgx#P;1OfufJko;}NKX=@9R
znuq1LGtU2y&N6_&g7!)LdEJ5uCUDJ&_uYRz-S6A24gBmNd6J>KxA+|q5#4Kdxyjm;
zImsg~w)Z@GHJ_SaY|D$xqx_z&<$NZ;Q%_$XG}YS-&b{m`rKir(!dxP8wi(Q-KV5t;
zS|N=DVjkc6mfRfOGJ#93B0oshr0g<1<lBZDLQl7pH%sF2D}D>fg@dk$y`f+Kn`lI<
zKrdnns?FRVm4dn2$7ZIsLFO*=>geFik3704vbK%32xrliUwU>%Ut}P*!FL#CXKz0{
zFXM@B9~uf+2QwlESy)&+5qI8`d**>&qx5IS)z#G<H27HnoVThPP&wM!B^t`8w$yFB
z^Q|urv>)@+VfC~eh;N{>F(26CY*&VCqBa6{O9LxWs6Zu=y0i5E3c&xi=Kq@n&Z>bo
z#myA;*tt%%%rLRAREyfMb(_9cirX`{vuY!4Rb^ry5=@gW6;;;rT<u4UbzG+MZoC`>
z2C<dP=9RO&tbM5vYB?CNJx5s}Tfk2Gmf>TCxXOG5VyWuzTyW3BUUJbGsN6V1vd{O|
z0(v!mo7S47oWIf9LA(UdUIy>tpIX$XxiZ!2+XyJ~C`45tveP9_fFO@WVYNCG4Y_J1
z-I?mk*z&;3LMc-2-?3_bV>I2|occrPi!d0hzkE8y*Hl>I?7~c%$k2s}-K1s9v&&jE
zjlwfY;6_smWNfM5FI({6Yzgrmi#zV_y{<_glr5`+wsyCb=HimY1t*>Rd*^JtOd4{!
zQ^DlBop8-7Byujn&AYX>7K)$nL<S2}tgfx84j0*UjMHqtW>Rgonr>o3^PBOT=Dvc)
zS_r6_U;>er9tFRWw?AhxQ)eL*dT}@wnZ^w;IvoZ&qt=@4Ck@*FSo0SWjdpj#6Q~02
zTZXi+2^)O@G;3CSf06ns2(Kmq6&ug@;DFRxrx%N43~8(7Z1Um;&kD{!HfIN)jW*rC
zf4^JB$4ctYE%#qBswE+zElT-Ii;fe}$L7<(B?e3PCxk00HXGrD1N(GVoi<w)KEh_X
z^I>gmjjb(3cKbURr{E}{P5;v2HXK}SQR0f0U4OiJ7?Cn6>8$hh4gGR%Xl=NZlvK*l
z@GvTazk23p<>${?WU#bD)avb9e?f11dxOg#3c<}8u?v|SV`Fb7INUcfQh&|@pdy$F
z>l^S3k8Kr%(yg%}Kx~W47p|r*Lk0&2MWQC0=<9Mt0#xf=&moFPFsCCdW`?bFw=&&l
zl)3(#UHR7<^@Ib_-hTJ`lTvbWGMf^=Q`QZ+Wx~0_gDApYtv8GKWv8W$C+7Lj+2wu1
zV3_T!uSjvVe}pK-^39Zu1~I3|N=a>n&~ok$(pIE={y0j3^d`O9-`|gr78G1`YGr=e
z_~+E{m$+qBfJM^<1cTd9QsQ1dhTRBppi|YfCG3wNIfSQbyHM2Ex$6uA6(Ds;gnO!9
z5>Mc0FMt5MBW(iu8c=L^O?BD}sE;GEYSs1i`)LjyI@GP^cC}+aQmqknQraT9TkklN
z0(W;d8=Sz+ekhv0d=<u&2*S>!UMJB=_wl_{&M_{)=FwvUt6r*S78kv4{hqx&5(0dZ
zqT@i>lKUpYPcx(m?Qossdbkoh;@Luy+n4L8LV!0tb8a;zemK%^Nc>kQu-7Np#gu3$
z8TgYtz)WL*-X%Vp*ykVjiYY3m-tyes(f9S;eyGUizlt*Sohz<06Nix8U>CG%OUev?
z@}&AKX>OqOXrG6`J6|m{wPw%O+~v!c7qYDoTl-=0+(~KcvKxJe2M2N5JRTcuA?at1
z5VTE#3{ERnEvw*!iqu6#zweC8F(`N0z9?!2Ty}!a$i{ehU=L^u8;+pHv*Q;OFF0pi
z%8r7@;`+aII%T}YX1IUX5Z?#YE6M^wd^T_#2r=t3)1Wx6Cm)njLKX?`%Qy+bV<Z(}
zfmev%c@I(_!@llraj`aCm8*B5btFE%zTpE^-YfbpCQ;&C7y9qh`37=Ds&*aGZb`U+
zDFXKzFp%aB?t|K~tGgZ`McS$Ap$=-cY`vrv^*6%#eBDDyzG|}9UC&brWU%xb9T^$9
zjh)qpk&s1eviAqC&}<G{GA})xY=M3aKG)vWwbqv-(kB1aqvZzy>(4F}zD>bx?GJl)
zTxNcLKA^s*r$?N|)|dP}-DyIQaT3Z-nw`fTqLoQD^ALx_Wm5^3$AKLe<cFVCign8Y
zttV6>&M*oCc`pNz_^jg)-OQZkw-OJLPRJ{lB7fPRKlei_5Ab%5A*CjM7k`EdR2mVB
z-3{WwulLMDJc)*Z+wHMUH=t;!^gCFnNF67T+cyFPC7Ygj$!%q&Uy!-g`{_<;?V;e{
z;Nh$LLcS~p&aHwz#N9d#MBMH?a$b%s6<<jAwzQ(wIz&5=>q92Ej%6(d+!JFjyUJNi
z@F0EU>19}_S7q4E-kKy>rB?CRbcknZaj|T`ojZ#aoKMtr_Cc+puK=^f8JH#|EggRS
z;#Xcx`#X+N!RKTMA!ZIVw!<!JN0D&5=ZY4Hkn=50aj4#f@{qcWMrV-keCQpL$%!T>
z^D%(vYWv$*TYn34R<Yj~>-tYLEZVHeV~Kn5aoMW%c(?@N#79`+dDBC~N2#a+@hMgV
z02hQdk^1=f9A#!=+C*I+?>wufutCKq*f%t^+X9Ef7vvT>jDDeqe@-&**46;WHB_o}
z88P?$yU)kAWa+?Y_NUg?>{5iR8h**x?Nc-ltZ}0n*mQYCFhv5cMg5!*vS|$Xc$ZvP
zbA0HhFWAsbCBL(nnQK(-qfa@-zaK>IqZ;7A?>|V)>D6f2dQW@QZ`Zsy&yZmFdr;62
zZKu}7CS~k9@W*`{(U%Q=omB%ZQHwj<9B$6+?gMU6Mjr0(>oZDpAKXO76x;7Z`XHeL
z%qEpqZv6^&bydd1+<fAYO-Wk4irpS)wkEI`O1rw#*b*-yU*m)QUb!a!S{tmQy#fM~
zK1m;tw^H)h<HEXbXPHlBhs$k!Yalo<v$KU!v;+nGH<tS&hkt<vXu4(ep<#7T&-F}=
zlZ!EjhVM!4d8I0d<}2k*#Noj0=uDZ(dtiKF_)|~04gySDn@0i^4)$CTpESA%lf@V{
zk+w0ivhHd$xl$89Zi4t1h~iF7#d3_XX3fwRq*Q{D5q82d6VMKyJx((xf5iLF{(>-E
zcgv<H&zH@@$EC(c_XGj~b#hvG#w_l*WAMtmZTHoRo()M&seNyO)hZVIB!<%zz7P1J
zx;Qv~%vJw|r$9iFpb3MmY`u_mZ`V#y41nti*G7ZoR$t)#=8C%=r9PIl?A5qwsJ{WV
zbLBt1SQ?+<04a<w+9dHXH{ALNBpGj0(|+a3zc~}}ne2bwVdxp4^0|cp6uM~T7btww
z9gXD5E*2nU=ePtdK1DBBc{znR24uQ4?M>!AOLxr#W5u-^T2Sq)b6u0#gQOrp*2>!2
zn(6SL7fTYd*<<SMKH*nb>Vd%=0L>bqnD!WcApPnJ@O%z;6W|}W4<0<2n`?T{1w@z7
z7?OfHU)vD9Kz$R;a!odmtv?3j;q*vA!^x`BeY6jK0dPHXZfir{CR|a}=>ScQ_Ju?y
zc~|);@5hAWSv!91SSwQ3F=ZH>_X~nG@~xiWC+KhVwN&6!Ep$@?IZySkbAR40@yycY
zLU{x4bH-PGdOx%W$(5Qlz=4{Um6Z(z#5Mu7W2l*^ftV?v<?0^rXS6Llw}Mcr2QXL*
zwW~V>3$w`kBe8CioMz@<T;`2BKBO;cRv!j~fmw@P$Lsmc_u<5C*;7;9k5IE^J#K4j
z3!f|&mubhO0N(=*rJPk>`YxcBEQL)5ZD0DmWAtALzgHr2b9a}ORzRXYA8*nUZyIJ|
zWnE*{TF1rg4bc6gh7x{=7Nq+JY>w_eB&DQ3S!vVp%C6)6hod!guE2z(MnZV|`uc{1
zBqY3ae;VqO>g)>0X{(nQ%^sh=16*Pk3n~0$6_A0Yy7y@q_Q8@zodNsz#85MJVUnk9
zJ^qAvwj@E^G>n1Y?l#|OrhU7s$3sIcO89E!klLNimC6z@SNiHr%=J;EcADq(X}a)F
zQUQk5QeUa|VR=vJtnKXAJHN};<p|trsnA<^ZBIu1{B3P({CG=;sx;Ef%ggIidwV-i
zh^|^s`(c9PuBz=TwhNA&h~h<97t_d?f?gK~;H9#&lV1@=%l<}kOVo#Z&InqdS;p@(
zTsu}8{3-&A7Cz~^h<qLe^m&rzxv<5j^N+W19hqwQOhVLq9(M3Fq38m?N?|U&h2#m@
zfnTjpT}UAFlVvE_7)&TiKei7_lAr~mpUZxB8V?rAdER?2of0$iAe{15c7+_&7Z4-H
z?(Xh(W{~Tp67;ye2x4exSohF`^>fhy3VQ=cuUwfwxF9>cYI7<vP$-v4c|W|$3`yS&
z24@=5B-1X0MoY!xA?g<(<<f;PYoxo(fP1j}K;Du`XuuJu%i#*us{|{xmWAh-?Y_Yl
z<QmoU+z9vz#u@}kOG~4(j68(*13RF8e$QkK0_<V%ld!OymZSzXKSx&}B&nOE8V0Ll
zPoF+51yhE0>!-rC9uPKC-4YJ2ZEx*+Yx1F9c$$4}o7_*B;hk42E(J^cg)qbmYzDnG
zulwo|vVi%4^6(o%80n5;)2<_n-GE~h#rgJ>LJnFFjA-_yP*-I-al$9Xv@6OIX+n^;
z9;J~!yS%~Z;LE<Ula8CDMuVN5*usaD463|==Y)x00O6g9QZM81+GttNFe<)?m-b44
zPwBk|&lDvjiU}}w(j0*V05v1P{O9>szjpE;%(hL^%C)30Q~N@LRx5A+34MSe1|mUi
z#Xb8(<KA64#IAs-un2?)eQ%;$%%>uOOlr3H2tO=VxeH|>3HVIFCjjJ9OhrYdM%YZa
zX_vct_g<<yt35JXhz=+;?b<$jZZ6atW(CL-0}=kO<Ko1~;rjp{-T|BGJ6~R?22V*z
z`JnM&j?3HmogCL92Vp<;M-;(Lwn~RU%wsbzsIb>nhvbg9)ZnD{d3?RdbRHSI63wI8
z)?6oQ)NSkC{G((<<S`Pvi6BEnSH_!maRCk46;)V!HD@I(07Bc;UXoZfgd9!<loeQP
zOKLy<DCSYXC0(avWczzzZG*j6^lpsw0ZTuZ-yA2v=I}b_UzQ_LqDIUbQ%{33h<q(`
zF8~EALFf(hzZ)kD8ZF?K#~H5+vVkfehWX^lfdOUs;~yP(w2*RWOEhhMfOARSaB^_<
zEj?|5zw|Ws@+#4FbTA~1|MTa}ok_spy@o3)Du$lD^i{~01u!a^Xm)Kf`7EAKzhpKE
zR5kJ~k7yVGHOz`3<S?tPiQ;T=V>m;ekb!uIV#CX<3nwxWvg2khD5Mrn?54CdP4g5j
zWGHDsoNioZ=$4FjSm<<!vy51SRX460HtZjWUQLvik}8=hN5*?#OoCZT&d<?>mm&#?
zdOb}=hC23hJWATZ{p{0mSN!L4{PQq|$)y(Z3zlPA#~7QZ$Cp6XuU&HE{W7sreu<AD
z)JZ|Uw6MbO;o)Hvk=a&;?qDT^R7@m}s?>oJfJ*<wlI$uW9*|&!i?m6k;ZXQ(R5*Y~
zB!x&F)RafZ4aaHa<b>v0(e2KHa|ywJ!I#O4N=s3;#>OL>lc5G5i8f}$NZ8(I^fZAN
z9$eT4Hv~xKR?b&suiP=Q3!pUzHYJK;=WSY=nN46IUM)dX&IBmO$i+I3uPWk$ZeO0V
zNV7(r?#xWThUKY~P<Rtw5A+0%BRAJw8U=+R`QBksFawn6We{s3QzZfF*tXpcl%k#1
z$RN40Fmc@B7_f2Y`4{V$L@alfz$C^X{eg>HKn!)*Nnd9Y0_)SHRtSy5-aF}sxj6ay
zBaQ?(xv8bzfauovfsh+<J0of0H%5sPX@^onAm?FWf^|7+!0REVTIaIHnEALs8SqrZ
zrKb$&BuUqqC*nh8FHRl{jr<FKj*L&|?MM&cqsmB@Cne0icxjC_(|qfrN9Pg+28v|R
z=y><pWXk$%E>EUqgc{WDgCJZ<&7jm<UtQ&60&tyCXjS(Y4rpo<iH5|QKCsq#GYboB
z)&=bkF5iVJ`~vbjqS{0>v$jfwlXRYaO}}^-dVw@R2v9a?2sgZVUg(ITBVKuk6c)G(
zWs&_w3`nfBCy?82<->BHY1q}p;I#R>yC6+ADh52~#Af<RFLG*YRXDgWkH3*rDuDMh
zokDitnepCMrq@|O*zOp^?Rg!V?tB4||JL7X4ix(k;C|<6k0eEcBFWIRd*KVYTtzh?
zI<$eafva7sg&#6$7Z=@|Ag7kFCU};Upcv`n6H+B7{zQhiUr2<iLP&&QIyOl?EWOvu
zfJX5q%HKK$e)We{%9;fp%WIu%+BN-(YyzV<eLfakvGs)d+Oc}OzW#pL=i%W%hcjE<
zpnZ6fw$bC$*p*#W0aAlDcemKZ@{}#uwXav%8A!a1_{m(H9rQXV{`h$xfPm7A1}PH6
z&;n#VOu-?R0pMF_l|Ysdm~y%(?<6a0jVUb8mw-q<gvQcnYLsog*0rqSpn^SbpgJqE
z30WFq#q6#Y@vnz2oo90FmmNrcUoKr=U+*#DY?LA_-O<*z@iC0S!pk&ep>YJ%sc@ui
zEhU|qm|-OAK0vBvdC+FsBGu7Gr&o-lh4YjngjU<5H%DI4%E-C`<mAg``-WK(vRmrL
zLsj0Co`6IUX@7rbA-y#99*-Db2A}W3Bg}1{EB?1BZsIw{O*g!Od5&$Oum$lo<<+ZK
z<q`q{tqQi<0YJ0P(1>4SJ96}B!0c|G*WR@>#F|;+gbeOOQFP@ZhPJSV@8KbYftrs0
zF?MxBIPJ~B$QRr>UPkVP(Ez@nIYzi|{Bv)Ymkk9kif={M<n&6yS^&h%dn!}6ZC5*_
zXP5hx{HNu$3Yj5q6c6*p6*V>V&9t;M1!v5dtmhf1aU^NMVJ}5~_T{1L^H*2?yy+vG
zRZRUtirn7X>T8qRp3RQJ=gl?LDuFLzjDu3}r1XPiv;oxI^y@F&e+=T7bSOyOn|KQR
zEF*mtf^u(gN|s+AjGqdOFzp;hFCswcTRRspv&>y8lLopp2YggR^zn8f`tlAgzF(x^
zu?!pSV7{KdzR`g{g?|3~9QZ-<TP3O3vAWRAqlXXg$mCL<FwX{e8@xGnXLEI?16Dw=
zj@i$i@_~2DgND$kU4Jn)d~NBwwnfVH^peSVa%o*AZ-^%BnQ3R-$Jt2Qzwo0m+D7GR
zx0OMNr>c|-&ZHa}Stvse%BBpAlD<G-vDjHnP%$OaEfObL1S_%=2){vJ#2=zdb@XVi
z>Zy0$Lj<1x$p^JTv`T&oA!h?H>{A!OIG(e#jbb07feqcUtZx>U5$AD>7JO3iFv()#
z{LE}3Q;i6?q*+O0H89IDIW8-Wc4c>k_DUe^lB2-Qo=a!d55m<z!3y>2Fg)aUX0{S%
zhC!}&PP^U5QwY#&!(0MlhPcZCd@ut^<7wZ@%}|P~LFMH+*?;lv0KGUz=&rpO)eIf$
zBp-Xoq~>HTsM6;h``Gj2R6qH`uvKdUww2kb%K36sP~WPFySqDGe+EO{O1=tP&R^uw
zSJ<1gR$P{zb;ocRnEZJkk@WzYL7~S`mqW<d(9*63XNOp>@4X05kk``J*P5_u(1I<^
zSuMf>fEsEzElt1`sQ}HOVYQ2+@khvCUYBkazT<mo+c78<<i;q#Ws+}Cf1$;hL#rA1
z0o1vJqtq2GA|uIw@R~DuIELs6IH<2z5PJtA@gAq$1roz!U2WbJ`4p2|>3DnS9gW_+
zVKf+UNpt+#(gzHon3e?D&{ng)N<+imz6#-?ml09OhCPE0M=v$0u-(ByPPP;*WY5fx
zrGY}MFRykkABAq^1@)1#ffC2Tt(XUIv*0G*5}-4r1@_Wh3dpz^xnuj_Lb&13vlMy@
z{FeTPRSeO!29H3jd)1hOlxjHgUNFA>`8@W<-CA=pP?np%4(w=PQV9a_!c2IJTQgC&
z%`j&4-eHCeYdqE>r24j*$|#lx0BZ}%y9=MxA3LmQ`3p=AO27@WCJ=yIgim!o_AUNj
z^FsVy|3?LZ+L1-qSQ`;&k%VS=!;k|hJtv&v`N*lCKZ1r-7(F{3j8-%0-hJF+1%|07
zs2PvGf7s!O!mVjrCgV%4cwSmj(CL1Zd!9nOw6qk~4q}wchQ3|B>EvJvfJ^|WQfAML
zm_&6w4kEv$J!1CZ!-v3IgRADhF`t@9W0txE$q=vxz?8cJh5oM3IFACr@(an*8!>Ai
zmtTRPtuXN{r!&wLXZZM2>G^m1rH=k)yP3n$?zqo1PA`tT<|xxMqzmFn3ADu9r_WqJ
zsh(O|y56XgC}tRe#uXlw$R{VGE>mQ0{)B2PST<aj89n-kj^KZu=><A&cY+(=^`OAv
zv{V#CK@em^s<FCOFw>EVy3?9);X{VXr4bT69d-<MQ#TK<yBi0KS_-32E0cbxBXFY)
zA&bc=tmy|-pDxo)rS$_O%YjQ=n}HjNRRe2(MR_Is1(=xyN4;J7ZI_=_r?~uiJm)X?
z3G(QYRCg<@X$G^!mnS5x!38pr6zSHZU9?*UVj%OLiG0Ow4>`{ZGDlf)JSs4L^!CMX
z)~6n^Wq4t&8tUt7o?CREKObFsi|Qi#LnMRMn$r}1@<niam@auyNNs${5&cPI>_0<v
z{-bRF&yD@BUJ)uwdPBEeiWJwTDul|wKKKHvDJooxgR~F)mq2EMRAGp}3!u<UC?O;Q
zvt9#JF0DGX`1no9alL7eYI5~mu96s61M>k_rTzW=&FF5ZojY>85&!uyP<#9{bl1Sa
zhhW}826dyym}_D3MyCb|?=|2=i4<>Qef8O6+=c}C2?(Uvs77+sya$P65QK-KQu2eH
zM$#hX1$!+`P^gInVUy?0qOBvkPI&L2G_Kc)mNsj-d<Z#&44Mr@@h^4n9anTGooY+&
zPlhZhm|&u^6Ej-KP9{KOo7GrOoTylB*ApWC3Kim0C0~*ox7(#23JrsSo@@EC@0fw{
zKLO#ny3zVtGqc7GG-i4hU9B(RP&a~uw3C5zi^^O_eTZ+3%{%sbDc!?tfJU`p78Xz@
zcun7!+6ju5MDc}F(jK!LT5?h0i32G`s;SWsGhHo2v<3FN##MoR=vP$XR8P3qMPOa{
zgAwv}DpOowLMf-3aSq^hw*u?JmR!YOq<pvb1;xp@eo%M}g>(tXeJx3F-lfeOiY=?@
z0U>TU&m$jik$P@U$ipAhdza?(;1n{c!H_{C2s2=9^}2Qd@W(sPN|yM|C0g2y-$OFE
ztz`l7t~l3|Kh8zd)&`)mXjS$)vqKt<TdROEl&!>2b(g&8ZtY%td*sM@rOyMN77`Vv
zJPR$t-=vv#7j&(Xu}*uc00vW@XWzq#cAR#tf)tCO6&f6ZM(_)n$sT$O%ahHD4bt~#
z{<JE9w=F|KI~a<F45OX=LzY|10yk1lK~pb5V6tmHW-uQDQ{s)fs>UgGaso8202Gz2
zwPM32=9;zVaUO#~#Hbl)<dpUVMi-T%;plQo&}pcO22?i#Y&a@xKs`J4kcD@k4S(a}
zEqbE2mRLmw;dK>MlL5>p0bw23@8auum=R4;VD?n_1QU9O2oR>4%E`2LvZ5p?g|^!D
zV;JpMkFbZLcJgl@xF*!01S-dJ5e}jFtQ)G!?04AVxw*M@n}}V<SJKM_iVL)pw19OZ
zj<z_!qH`shjR;o;^(WZ^X_*{;6OHZz^Nn&q*U$&o+^!tcYYUb0R#oe`4=Y}lZ6@&v
zHc~EfW{UN5l?w|e7}i&Od|&Yz^}C|HWFi~Vyd5~!6<q_<%Md2rxG`+?Jj1k=Q}bJ!
z^|wNKbD*K5eyn`V8PG85K`lT<AI!LTzH+W~qCDBV^>?O6+=0Sh@mnWD{Nkp~n;TdJ
zDQQ5p?HoL5v5KGTA_7Fc_$UohejNxM{c~}rq07r=A?r_{JUOqD;6Qh+c;j<D%3OEl
z-A?=17RAIFQb;gI#N2l)tI91qoAmLB6T%|!NXm)eyMY%ZBzm-$MIR7DK@~i(M-DXz
z#9<BNEgaj-=9|hRW$SQ<WhL|8aG_gU%S6IM$38obQ$Ol0d49xv0MWGV8tC8FT0XrS
z#w4=k1X|;dcpJW$b@oaizVjgZda4bjUgozUZ^_q77cAb>@*aR}Gc=MnF=Uj@HfuKe
zH1B4vo;v`+Qh%GB^)uKNzzbpezrbWpd)tTi%3FEiLFv5DXJh6*l!>(932tZyjaOhY
zV-Nu>74zh!dpW%PZ*Kec5knlz3Wwf&?$i0^HrLcncyMMz@U%geso&VV^Ub$?NEt{P
zxx2$qGxPGUA;Pq$+sf|)$dI*>O-LD=N5o&(SCj(Pq%R^+cE>>~qo}_y7a;_{K@m1V
zGTsd`*A(rhSq_C%a|n;+_PwM<eEtK&H8#iDmT*S?mc=;T8UyWu(u-vzC(gaSGy2}9
zbU0wUw2;qB@ABWDCE@ktv$Nm6d3o^{6jV5$A}S6y4u=NF3ks~WMGaHSNKKQbM7k!b
zHjR(3S2-%PL(VYef&$2QKe=2-CnuEDdfq2VXlciP+{siih*gsF)onU$182hJAmNQp
z%i$+kSY(BV$64bSzCFEm<h7}vxsR002NNdC3F%5E?`lRh0oG|OlW)o}&P&h84vjOl
zZpKvBS0XAG#(BK`^^N*dY)Yqh*9M03r^^S!*8?2TqLuZJofaA@rz+8|{p+B6ZGB*P
z#h~W?fRT*6`}ePNO}^cNz`M<X7^ojDv(hq0u<?(Z|A%_Q2O%ojz>A9^5?F#4e1plT
zxl5r(59X*GM9G2)gDWmpr+pxk^o{S{?seH<C5_j1&0Vg<7dE*}PWN8*Y6h4LDo&Cr
zpT?RVzPU2Zh64R`cvYDOF(u_Oc69-Gj;3QGU`r$cmbz26Hew4{^#n*A!;1XIJF1k(
z$xms8$Ufb}O{*r}24SHB<ABEA6Aaze_L!RayptC;;kfi+#dm(X{Ikpu)^C2H5vRf=
zHnp4UyyhfMkDgqT9hdQJ0P^RQEM!)X%+^9yNas}&n08PaO4<fKwDdyNA+C>U!Y7ky
zwx51-!F?N$ml?NVQbTXOkT7x96KVssBiV3IHCNQM2U@eG|C#pynevs?vb$q*o3n>4
zs_Yuq>QsW+0yaurXGd}$i<<XMQC~Zd6GhYX+MBJ?#bqhQzt~i!Qt~w4ZQ8n$t)MG1
zW!?D3Pf5@HUz^!w_^^@oUx5I!;#}Jr+KDs0oQX9Sj|`?8KU}w_t{)^k7~=kog?xjd
zX`G=>qInR$6EW^fXv->Be*6eK1gS)ecxj}Zr?^hvAmxcvTM1xTw;J-b4JSL91eMb_
z+f=4&fB^f97JBc?x`6G=H4CoH<eg_2UT_$)<9^CKkJ|`X7eT)|^HgH&Xv5JnlZ1N)
z4ib{RlQEOHsKUJ6i3f|(hr^rAhBL*!;j(;6b=QYu(cM&qfiAlBag&PE@~WRP=WnC+
z14wL75$NY>D}gIvMHl49eb)}HY&_p_ikT}@IDf6^VyYu#6T#es*S%?w!N@S(I?G*8
zp2{dTy*t<&TOmDO8M5s?Kd-DgfVb%KX4beh#UMGqL5ZoVsJ4&-<c``0qy+;hE;~yN
z=(gpZEEW(0N?CC>FPUy*8pARtHw~vh(XOuy<Zk<>^sjiKC6XCBl!tx$Wcb_SY$_5C
z&;$uzmL&~Y*a}%OotI=|U+<nQT%FqqSc&yH_%g4LjL)F#P9KZsz|F5SI?w4t7hX!Q
zurh3W)UAJ3xcKhNP-L_0unJcu%zU%#)cEM(II6>kX&GdB+f+QI$>3wIE6uRo0txi@
zZeiag=?+r~&WXA*?prf^S@AdncN>hmt(31zv$9?{CHGT)A{~et>&g#1lGyUM_xDTt
zgL$|s9e32arUy4?TbsO8h1#Z_&}BWGtIVMZ7;!`JSsi_v+e_8of~xTMy=985k}PiK
zFNi;1Q1z6Z)^X{m4useq-*ZO;cRm~mZ!TDUutP;R?IB;pxV-UAhCg6@s%r;QCv<OY
zeY(`L49QrqQ+c8J9l|nkwnD}OpuiA_q=%c=Qx;h{hOKYC)dqaAPwG6G>s*|_lOzb+
zjFW^+nmRwdm~Sv}VWPV7Y;zrNfr^BB=-Y(v&96b!KE{!`>vs)VX16qNdms8Y$+G+o
zBACUaXJOE-L&Z}p)z|PiJ2iYPbsY2p3_Zin=&!tOVfL?!nUPC*Nw)A-dFeB!pf`kP
zetF=eOeMGMM*h1AA-i&N(t^P)Soy|{r8CzFmG3Ym<GmKTYHXK$v(L);c$2O&OW|W6
zemWm92On#0#P$XnA@0xDZPbV5p;xjCocvcp=y*feNGk}`gACG;OCE@gk6aanVKTXl
z_wwy}FuPSU+EZo`<ik&D;iLurZ_j@SE<i2@a5=H|WE*Lk>x!Nw)iO%L6^*@2Y3R&`
z;Rayrc(yq64P({C%8A`PpCBlP!ko$7M|Hp#MiRmnP_jHX#dl_?9E_wzTWl9>9PL3q
zCJBjBUiq*#RyK{`<ZF;k{8oMJh9)^J>H9U>)w1sJ>SdHj^h=Zbg;r=*y>b_er88uN
zmn}+%I-eTBZ{^{A3`znK@fK4eh3MS}(2bjJN&zQsJafx$GkRv`Kisy_FPW16hV~|9
zB=iZX%V(rw#>U*RWjrqDgg6oq`x0QO+;57cOmg{x24L}_Uy&^e--8n5-3ZmLR5?hU
z=Vz{@JMZ(s=o@*t^>C%Ubtxyy_3;_(<EsL|ZwkiZrd?f5?#ux`B`?1lri%kYNzW%C
zhB_5s^<FpOopTwiS|G8&e|uE7&=RM@|J8`r-m_nceOgdPrs2+Ta%Nj&`z?3NHHr=b
z^Zu3*JLZkk*{0Iz^;T^yIbHIn`l&rsDy_lZObiTM-sVBF<BAiz$HpBSACTCdQMcE|
z^C21#mQ{AwPR$~6!EJ7D#aitiLS4yd8LZH9U!+%b@%OJxlsdOAm3$Qm8B1EDbQ#Fr
zNbV`d&g#HO5^frMw!RlBROYj#XB`d`3bFY@8W6eg_fVwkOo;1uPB*)Rzn|1mjiEtR
zV$7V3ZH&D7Atz`1Nr)~Pu7i;39F&){f4Y8|7ReQH<o%fyQa5LfCA%p9j+|ktspQ53
z$WYfy6WPfVcLaT=PTg4~FzE0J7L7_&HKeY`xe?I(BZ(|CV}BJggGhXhXD`zLU8~MF
zyPky)O_QX6G@gz$BwKyx`RJQjl+o=ltCr`^ovq@-JE2-1Bf!m7lgGJhLZ#OST-j2x
z*plZGHHGCY);(0U%Y~1fhu2e@OOL!KAV_{7nbBuvQ?XOHGvM6N+5_Tvu7VvOZ#xU4
z3VZG8kCWoSRQXlAJ)?YHdy0&<Ig3_ILb^@`=1tamE1)Y!5%moFO{tI-XE7P&@P%aM
zGBD__J{P+(>vrK_<=A74t;>1xcu#Q)Kh26No^_{2FN<9+r?TZwyq;gV4p#%TW2BuV
zWbP3k%IK{xcfhr|tEsk-I;rhLO#Ch03JjBqp?}|2QkO%Xk1%D-YuX)=zw(asiQaY^
zyDunSm5E^Lc!fVqGQm=?;~Bd0Lvqg!DubbB@T-*OY#ujiK1lKpk0wQ0^z!two~y6h
zo!hzE@G1~uLDPtDqbiVHM7i+SI#`5OQ!H5`=9zSZ{5i|rv`!(UCf{;Cd~Foz(8JdG
z8ubeEs<3bcyE%-z)8)(mvE6OqDZqW$-zotI-soHCkIm)F3mxVyzpb2_^>?B3czpv0
z5{CAzDr2;&9!PY4ZTJ4xtV3km3vyc2>zx20<wUW$?eaTgXg>7OBVPxicq9BV4VJ?`
z-ae8hpa$gw;_96(tu|*^tm{B`v`~N$&GRg%?UQQ$l`4V$OseE>Rj=}@pw34JgEgWs
zbK|`wb_vOeepzwTf8*YNLdhQIP(Kehg|BQGY|hbi-cS+)qy|Fx`eC7L{3(@%;wE<T
z(MH5ezN58xzC#muk#T$rJcq7#omnoOz7>EFI1+FzUy8xS`3CP%lXc(EG$iNFMYuO-
z7ygYy)2XQGfiyH7+VxoAlgC=7YmROGMKKdGpqsR$*10Vu^;E(&q7Ci*t`HOz;C)1$
zRX@p91ultIQ`xQ~f2#1}`<SAqs!I~zow?&ZO6-^oHY<O;J!Z37opZ)f^`wmCwhcaI
zDjbo{FDiW<vMFDF<^y69KM}>W{jQEf(yk<*K&4az1J^fQUfy{T@wl4K(_$GfD<fmT
zH$3>AJpy=!LOFj}g>Cj_&k7(|)T9M-Mdwuv;!G@p5SAN=*}$EiT}6%oKnT7CAA9d*
zh45dq(LE|F&mt?|aKe|f`0^7P?#Iwwu3XhD2Kviw$$0PU@98<=hcZ0I!vMW7K#Er2
zJ!n&fU#DhNNvvD97;f_z*LIbgkEx-2PGX^Qoc*mD+*F!t7%d~zP|X%+q3)ck?A+GU
z#MHMgd7q1%IxC~Lb<=-Z1b{r+2DP6Zj+3@YjEAi$2~-!A34Uf%H5EVq*{wtuFEyOM
zTKs;^Hh{|2E#S;nMpeF&-dJl4fuQ&1%wiOQOOpZ#ne@I~$R=e0`hUY)NTX8{vJeS#
zVI9i@Nz3N!8jvV~2z;pYa^TIKl4alC@SPhJM#D0j)!*T@I8vA0S++@uvEY@E6{`jG
zc)UNEc{w&FUc@TJef){IV^2eK%4u~yxWUfs!%aU#GIr%N0b_QjYn+}eIH~VHzuN|L
z3c1&%+lvz7-45@%t!M?rq6kXQUl;x~P@L<8p-20Z=g<Cv-#^|c<!UK*a2PTA#3q%e
zYy42mwK=O3Z7wsz!hX0@V5G!ZP^THt+2$|0mg-It!pm(T>FS6v=j+g70JFd)^7ojU
z(v66};D=<nx#nfLxaR#Y(APvP!$CW%25AAl;w(!}<3?g##QlwKHQV45T+r07g#P9Z
zP3w{CoBVS#y|6%^NbgJa9XFDrN62p}vtw2SG9RhjoM=MU?*+|6V9t7sO-UhWoXQ3F
zJiyA&a^+WX^rMCypz9SJ>aK7<PhXdk=78s;?=Co1Jv`A;VB#Az+#<<cr|@Ec^CCM}
zN)2!8n#!e)1YnXSNkYa<<U#zj9G2I(5fUuFGullkH>XR!rvVDl$`|3#7i{UfX7PBb
zB`owk%n?AZ%EqFYA*V_Fv?d`1(ALf~GBk*I{{-4WHet{{x#?H))&_E%46vxqMz~K*
zaTw%q$;X*0!_<UcA<vVt>jHv;t}%zC;nknB0GcAtvh>y)RdsI)XIjP!uS76+0o?ln
z4fj*U>5VU%xmC-bST5Mzy1Y(ij+htGov+?W;Tm`yQ+vqu^JHn~n|w=KtEI6z&6VnH
z&*gG&y`Mu!o<E0{<Oj%sD|omp1Ha`yZngQ|M9s}F=+bKuCo6>Mw#vkTXd<5}dqtS3
zr_Wvij+m-irX<u9ivn<4h?3KHlel2exuhm>M>wm8xh`<)rSjd7@*DXtA)Efo&l1HP
zw%(XsrSrd!iPl=XEzrDvKyA2t{lJmoi#J}RYHDzQdn2X$4U`TpQ#Za(-xzH!EOaj3
zrA`n62nG!;cP=9$d%0SgYh>rT<!v1&(}22g(wf9k%5uGa1xfPdIGV)4uOxcfwd9A9
z+e4+MQ@U!a0)`cC0WjFG4)2tJ6@-L!HFfZi310e;3EMkDx2p=f;Bx>3h<#eNPcyJ&
z&LAH;c8WUdK9r(`B?`Yiosm6lkvLHlX4UyZ-w=RFm*G29POaB(s42e~va{{6R}zo0
z7~eeL<*sz*mh>j&Qvfk)!$3EC;v3Lb@P_*rq!4IcIrsJ4RCjHX7GdhdbwYYs2^YHc
z29qSX@!U@}FybOS{6=+Q<f%LAkUA<ufmU?`^95hYd9Rr9r-vr3IUyPJjU^YIFUF3Y
zUROAlWTuoHHbO3nf-c?1sJXkj?YIIG%3Ld3E?G8bgjqH!Dyb&+o%i%@U)RaYsV5*G
zdc|>mL9Q#?MVL3wA_4V4LI)nDDmC*6@C`BR!gxwyS_U7_W1sKWiLwzu59Mz3b@+&r
zDE|XnY?7&do#X=s&g`J>1FvIe^9p#{Rz9V51O){J>||Rt`wKKcj1Y(AjOO{S>>*<7
z$2QbU@`rp7(=tgM@SPgBEie)Ukv#WSM3{E_wW6|ycEVZcNG-%pxM_JuY<%bBWh3{I
zCY6gLyO7tNo#o)7b>5X5>o^$pF#JAE<I;omDV_JyM;#qqk7c21LF>BewZZpJnbV}$
z1;g;$bd6$tN`+6>Hmg_czQJb)<rh!1JRSJ#duS5$KDC~WIPy9W-5F-|oW{0PRNMUJ
zDL{@HyWt;a<TKMBH7YGqq%Gc2Zyr0@H)S8_cfPp<EwkCAwmU_@rkQCT8xb~G_1-4-
zitbLkzt4&y?<D{VF4p;#Z%1CXeb+*0h+)T6)ajxPpN%m4B;`bV-Q$F&=0bYos^vax
z61qE9_hPjQk6aN5i7n^b$~)MVLY(u}6NZuR@=*yhwvRxdI-#@~2mT6(DT+>py_DdQ
z(GEbJYW`GCXnLoi)rks?+?}d$$2ca8_;GT9;y$5gDAD5UcenXNyiqGhXP*OJ{F$yi
zSm5}C=&%&hayU(*dn8Yf%Pjsl`yFlwkfF;{c%L<^8jrEZTt*dyxeu3Z&{d#hZM2sw
ziP`rohU^65Z?5I3Ir?2W4X*dVhYvSZtg*Ss?V_dwZq7D8sZA%FfE;9FV`k<J(IL#`
zPF035AD@*+KNlLGy-*&*b0_~eyPzE0?~tE)4Q#V|%rD-aN}ksYrN+dT{F=~Gg6|J}
zc290WK&4jYgmuk0Z=0mg&8Q&ly0=3y!;v`mUYh3oyK0j<wY<$K!5f5<y)gp9TafFs
zB?nuYxJcQ8kjHP(uKBv3kPz9<lsz;U!2~>QX03XSovZ*$z-d&c4h;Pids`0v^$0h=
z`pA3zNngwj8t13?tK}NrwehReLL4OFW2P@XhrFk$qBh>gDjB`U9^WuuyA3PMEDWOm
z-V}l#E*Qfn%f4d-)hE#2a!1O^#*u(>wbI2~likv0$JEDJ4C)w=t~Y+S>@A9?lc(M=
zI%=AXcu&qSDbqN1t{E8mS^CE1nL=H;>ceF4bCl*Ri$Q*mm%?wi-30$OpwG_bCwCs5
z^G^?FstiOjKs;hJsy7_xwPqIFOjCZ1{1%K|+a+-E|8e!*@l?O>|2Z8+l1)ey*&`&8
zaZ1P@WzRA*vp46Yl4L~oI466{-lI}BM-H<0JY=t9{chCz^L_mO$RC~8Ij?(M>%Ok%
z^}IoZZkXV+FxhnL$K8N$y}f=zW{*L8cP<i%jEJc7?xOhfK@WBB#q0@Un7^&d<fnK9
zA=izt<9Izs??18U&!5-Qx_LwHsX8hnWA23L3wf(DM4t7xnA~#vn?OcukC&_VkL&vP
zU-qT>d9U)E_9g8Qd@#Si96(zaWfDfi&gmK&bRQb0%rul8%E-XrV_k-q6hD3~$fnBe
zF$|nlURv}O&ba~0W5By8Skc8HCTIK#GQfDC*oV)D9JgUTX{vj2$yD4!?k&ko&FIP<
zGx)2UC!0DTDbBs0!Pk7ZB?zPd+CNa`k7j&gBYgUV>3GL4Zo}-TE^a`{S92gk@8gWQ
zL;hzy2K@EP!vJqPh5ZpL31OqwxmkP{mY!2wD@F$#7Eh$aJFz-X(T&4!ByzIX{_(@M
zqE4}Ffk3&}px1mnJ;4ib;vm}{ru9COvO^ueBIjmbNz(K%-5!7p$W*)FHWxyjlxIv8
zto@Q9BAT0{HakZ@9?c1gBm7BspT5_v&yFd0hM!kF>1VBZz<BT7c*jF{!!%KiAW@*3
zim$LIPzKUw(KU<>l={u{If@q&h$WB${vOaJip?$HSRM0T34OQ76*kk`GVr$kX6<#u
zv7{{-lrLoO<L_k9V1>jK$cmFOq1h3WrmrbuuRT5{zAw?2IlKifr!2)UBH8b_>=#YJ
z&zt3%Uc`(RJ7v$&F16})a`G;?*X<y;@raci0;OaBBIqN@Jyt&QtKq8rfQxcMrD$7^
zY_x#;gMN8qDdi=vNznghpReIRcte#7!JX1)LEHNzXS<}>2ytIUVsAR&6fjr+#A6MN
zEa6B_BE!$Eo<{5>5FWfl`6i#QWqsBO<R6Y4LxP44hGt7;;0*}qY<uiRW5V~1`~yab
z{nH+5gd>6JNEOd<53;#Zff4*WO<}RJgdKi$n--iFW};9R1b|C3^5&}b*2eu1%9l9v
z*hy-x6KxqXkq7rjd_3#{=A%cjL_@>~n3~&mh^9I3*vWDWI||ZfiII$AeV-ptbN&~^
z`0CJ=P{+}&Cad4325~?xl=g<bQ+X55IGX4<!=`TfAx&=j4WgOke|cEl5M#zRm7BV2
z$~~lJ#e<YmT<s`3v=FRe8!OMxHz?NS41xjl0y71+wWyJ+vy~vTS39=6XgCm%Yh14c
zCq8V%kMFICf%9#kE|gzBTd^2Gr~ZY_NIfY$XUR~5^>!h-B_5)CdN<BnZFhmXS>rvF
zj`ubwrsAIzqWhuiuisu|h6i36j`cs9%ZT~bq<`y0vU7UDd)Sp}pF5Q`g`9iM{tcrL
zou4}=F-u+0)up^i353<9>FHV`r{~``a$*y6!IAVO9|Ac|gm9ZB!qbYXqY1hQy<&Kx
z<!gIMIlKI$K}F*HhvRwzpk$~)-HhAm(K$}inYm`2sJGo?7(KICS!$={1(3uJRmWnB
znJK>3Gp&(BZLx?<5IC59N><(Sdm<U*q&=#6Y}Yn4CC8TN+?WV#rk+5I?kM*oKzI?0
zUqtNYHF^AWJD`*H>Q#2-4*(&Gl7Wcq9LaHz_C+7gTJ&YgbpRaNG(@L>8b7})9yq9d
z;GiUbPfuJb_zKZcxt6$+f0yO5Gz<NK;e66L1dh<uK!>vID1y=n=W*!SOM&R4Zg#sB
z+I)ABQRXvyh36w{>t^uWMUd{mcH#D3kZe}Xt?-2<2dT6a)-w(tQ*~h!Q1`AlwevS!
z^Es{XY9Rv#RXR<?xtkz%T~!`GKbM)Ez?Mnb17LLlNaRL%e<brDPC7R3VrW~{L9Gtk
zk><&Z0h;k7n=#>}<6GC{p?J%q=?Z`Qwfcjyt*<w3#vP)dMY)x?o4y;ms|v;k!ib@+
zG@JFTN-h|bh!W}5a+rg@(04T#KFdU^qfghgjpEma9b~N^0w91A6Va;<+N9|7T4Ml>
za0i^hc@eqC=Chqm8#C)%AD=2PwRLj|c(Ys-jxzF?iM*d3nP@|>q{q}&QaO-b&-uN3
zKj~XBw3RE&49Di!u$sGW&g2LV1uS7(zfFn_d}k2p8=@x%NA@t=#L3j1`sVG<G>vu@
zWvCU;%b&CsB}T3TW)|khI|j7g<r>z;%Ve1q4WPhyJ)DU7sA%#<A9w9Fld&+fWqu)R
zRjEkQX1PZDHn#!B+(!c8?4__MwQ^J1EwnnDTHUx?lJ|N`k7lkmzj_^-9(Y(U>N)0`
zI{sR0B#5U;*l&Nbt=d>$WGgZ#Kf=pchX5EfIXmxDhkgUML!{W=tW5ytV@Ey)5`vO+
zSltv>W%h?dc-PEPXW!GXt@DJx8NHckyMP1cgy;y5hEMQy0xPPr4Hy<m<ww_9fXUvo
zoAy|k5+C66nKs=?^8s_d6=w1+sQ4Hs+1qNhUevO_UBqpT6!Q?b^bmvW4Iddul-tvG
zm2})z3c;`886&Q*r+rR#az`uyMi#gazt*ZnlEogqjcvzoglz4jpsCczVn3^5T-|F!
zhEo7!M^%lvn?6b+Cq_VC-s;=#Yi9z;;)QFFBpqu&vDOy3*RfsDpUNLh8Uu$#`E@n(
zC$A_PQ%8_zmNtxGYEdp%vXP02-_lAuA9;a;pti9TsB;%P;(yLz6U(3lS&Fa*(2CO8
zE;A-+eyBxR;%beDSTeO!jyn!tlbnY2x$uM)QR-<k4ec;?t}ln`#lRM+sG6gzyE+68
za!!*qx`s>_&5aUmH#hXIL%<&J@O|+*-l_%d^|<PjTA8&6={cw?k*VH9>_ESd(c2%Y
zCuRghhIKD>L-;6ZB3|BypS5t?4&8N!x6}+LLk8?X2y3!_{M7q+QU>+sze6-^<bL0T
zzoTIrhe*K;9pw~7^Nwq@h2*TmRQ%vmpk9^<u(IX+mQ@5``QT`CqPNv&@ni+jlt|aA
z@H)fnn1#>L{Oo(hJ0SYZYM?2S@X_-ntt^w9qR?c(r<BZLF3Sfh>fc~lm$Luzt=sm_
zjy;D|!*doiHw19Zg|^)_cc^O@j622jsVXD56%0Qf_I7;|#NlKUeX2TiK+FDd(v~|T
z;utW9@OFsaM#gu|I&Bo~PmkX?+3}}f9krv)>9JW<%4>K}+Kv{PBaWMj|9B0aSDwZP
z4=C!7(}>7!*@}c5EO49XtGZA6DhbJUR(f=UR0T~uC;L|byokCrXX<6E({_t@;w|B6
z+YrDDZn43$h>0FHog6WbGp!$Bb2nAG<d3aEhlyooL&w0XM^%ItJ?{E^4gLv9V)<=J
zE5juJ<WNh5bK1Qt2yQRFmbnS>J@x(lshD9FsQfK-PfyQ%0fBW%LfpGk*up+pv!hp=
znk<9MQfnla@SoFmNmX@3Le0)coA}zS)Cr=KZr2Eo)hz&{FcTq@`drrXw9mDNFcmhD
zQe?EBWWy*{zVM2I6!bGuH?O@(+f)8C43s)!ycoHi%N<a!lkvy-i8_K3>2CO5*GT`@
z>KlXScx{<KYdv(Lk9_;mkhc2JnMDy~FOLqglU)mw3?Rb5kbOQl+#e{mKo(o|W>?3O
zT2di$%QH+54G!KdoTm-3iL9BCgTt2bi&i#^uL*nD@)B%*A1u%RAwZBCBU?!9;!gXV
ziW%(ABKH?TY>QKf*m|>MdA*K>$4KNurv227V*9~pV?RkLFOFB#AUkG8wrlJwwO3XI
z9csS!#A|9ItF|!vBmeyVF_CHYT9mi2kByF4(e-*!tOJcKcN;yc@`<X$fU4gw$`{SP
zpcI)Lh_MzqVe|XpVWPq*-S7$|b(R1=tTQQkVp&A%u&;=%=lvSM%GC?eeB|q_cVI@V
zA`+_C;<#lc2GC5-qXG~Si4xAHfa{|IgbF1(_-}_6sRmBSQqA71T%z8B^pha=2}}cC
z^a5!1+_XXig=3i2vX9|*7=TF<P-3fWrhP=&@K@Tub|cMARQR!U6`E;*-q+vf2o|tQ
zF#ZVZY7G?><Lm0*f-q~WeUfz|O#MBwXk$VtnY;hgNt%@oa*;1=X5-ljSYh4Y{%Zoz
zrefGplZCL8_jAzm2Ro0itfDq{G_s#>6ff!Lt99O_TL>XX0n(6ygFzG;jyC2BYaU&1
z7JS2(&x5{sCH?OpYr-_vRrzi2-q?}0xO+lGT<#lu$Ih1M;-e#VB8tbg4<I6inDv?m
z+d7i>LWGs~4}KrcFZHvVi!1X*fauj3^24FIzH+1U{>q?_&3dQJ&Y^V3Si4QtWBf-T
zMN7?RC?<qlDYy6?_l&#4N6i0uU%<STD<qFM%m*QxzT4}!EFtWo6vfwN=MtgW3Q+k4
zy9P1O`|>u^+ak{)0tpmbJRJxA9Ck4LDBJxrGy7=pHV;CcaN4~sXTAQVY~gauP#lY!
z`Gp_3{wEDY%h2^hE7@h;99IQU*iG6I#{K|wG@smkqDRFT89##4C5ji4_hm`)PsP;r
z1fM>lAfG;rbtV6o_d5MEJ!upW=uLFg%#sd}g{YCSO2f!0%ZzZ2P}pd7N*hJq;~eg=
zuF1WDbdmg4k=8sBXwitbVV}W!9pR>-?nO1{zC6?xxaYbqhNLc{P4AGI?O29DKVCUh
zi3}S7uH%;c{qEeR9BL6Fa@9fRZFO<}P>jn6S9VgtffX~@`N_*PW^=~5_fU}&Z?B;}
zmDW<y1~*YukS&_WYFMq(@^WN&#EY`tdN*<M%vwN71`6GKBvxZZ)c<hqX{7gjhRSUH
zt9Nwx=9iZ>R8uJJ<Cz#ApJKQjmu3n!Vn=-!(xOAAr{N@~@kWK^7a<#BC)SbFQXP?7
zZxpt**FeaYFdpEcgu71o?>=YM^9bhRk)6?N^#f0@A=@j3xSaIo+^o_0tOR!+q3$tq
zBWFlVuY!p1cT(4mmw=-E<J+RQV1S!cr>?zgHFyMzCe{h4LRrj=xe%UoNHpBT7cC0$
z?i#Q_ipL$c4;6(R)H-xp2%MOvIbV5+75nz>iJ#Bu`J414V&~*Fz7%8Z;p6`%d5XLn
zhlAQA?SMtCH7Gs0nIgCLE+%}1f{$WM5!^w_Ee<6LK>(t0p*X>D^cPFKb<zp5kJ3gd
z=L~c7EX7Gv)PjyyZTj9#3bmX|m^742-L#(v9NClIyv~XS%#YzU&j(9h$fkXnP7xgb
z_3kRzwN{A8_)EpNE7TVm!{_j6uM{}eIpzex?5|iRY8_Z+?dqFd?R=0YsZe+enOC)n
zP1S_#T{em!dO?Z*wazf-ZmAUND}=E_U@zuE6YAehG_Vx>&fgUdQ;8yd^&<P(1$NH2
zaclr6>1}8+>$JZ!kj_}UTsBlT^SjN++>nNXo)2|~nuKj!at7GMy=W0atZ<z0qmL(O
z72p7XwUcLJ8<iAja;dA@_l}!Ph~oqKllmOZW$S<jQ^M)pX@w1s+G4P0J~cv8`=(oI
zCzV&w(T7Ew6kVxx-x1x6<BnDy?RQQ(>mbf!1zBk|9a&$q9np1b-sAx*Bz$qM`lOG;
zX1|tauHB|3EOh_3Y{XXXq6M$ii75RW3MqR~gF_R8F!O#c4Rw>n`xOE59Wt{(17Nd&
zCv||^_IoJk*lk(3yS5QNjsdEENsP1Y{f?qDYY)ZM(9?eP?(S|shOUzI8vp|&$7fk<
z*_}KY)aitc4D%%@se)b7IX2#28jwv7o1W^=({q!}@oGlG^6-m_SF0}T_568zS*5^b
ze~|f0bi;Q?Rjd?8nX{V%lLWGQNT5diK9%erq2Ow0oF)?uhCN?k_r4N6s)68x5lVdM
zH<I>vI{jahI!FLX&fn+W&z@V^>-O4yGN&c17aOU8s<@{u5kEKW6c>v9o$hTnmY~mi
zxc{ZdGw_Ug;*$;&+p|O2zP%qLtN$a`)KwV&0d$mp*e79Kwi4ZvqQ~VkaJLwC>8<$P
zCN?c9WY;w$x9`14{Q`5}?~O93QYf`q<>tl+wu_H_ctF>_&gL{lRu9Rbq3LcHUC+1a
zqM56&CSy-KMdq6OZI0}5+t-8auB++L%AtsbxeP}H*(qJme>?M3(-^cYjtscfx}Gp0
z6^-EzT3I>y0b>_O*i2u-<uUd;r;fr3t|CP})s{!Mq~Q%Wh(L4sHaFLGw`SrO@CF~~
zUE9IUJ+YaD#{CNS-`WVdW4vQv_&U2@ZGHKfp5+GVrFs0ZRsql_n*$1*7pF;Y9Bo?|
z>=5dxJ~({saYfBNRM=1@ZF+x!n>g9-F$mWgA}7QF$y$xm&ey#A>jO(|y=;u_?_kB3
zQZu)N&D&$tmWXm~`mX+vHWq{E97%AsjcR?c(Czs*E8WM&YGo09(=jdSOUNTbq8XlE
zR*)p#x1ZZ^mvwOX;(fPEKITc>ou?<w^e4(vO66`+cHTEGNLMk(wpjPSj(PULhAF4d
z5jk#1g<{qpc`AHz!{2hlPUZ1h{6X}j6JUMOn%$lL&h;q?TuhXi-VhY@Em6nSwq<qw
zxM?&IuBDdfca4pUkcpk(y$%855?wHnm4UU*h_3CvTcCAbp37KXsV+9$N)MCWYej{z
z%E^<?>Z`)!aq?JNbMdlYqPr0W#Us9Y`3Bd4pOn8@i(|A-r^rUfM*I0nx7mc9!}gA0
zV89X_1f`1}p2LHZ!kAtlIxtCoHQ0l73px9a3j~i?P}{?Hx>i^$cF0-6^Ub&BKz7P(
z>C=b*_Xj15r-ZBW?=*@oD=+W2PGj)W|0qlfJBOzL#n6<;hrH-D@M(>>+Gf`h!mJ2=
zNQq7e^ZQl!%1dABj$19K&s;)o7ltf<PR@6m5GwlFrJsemX|U;GBZ2m<RSclG!CBwL
z`Y$dnYU)sle7$L00k3Q7)L`!P;yipPH0?eaJh9JZH?bgCSt${(g<XhftG&X@!-WYv
zelijx%xy<KZCwUaQc?<HEgOBnz(W(yz|nmJT@9D`9^rE1nd*x58ZU%^34RXzA(g~S
zL|#GfEg01}JxPonRoBp<ns))Y<Om0Qh#|cJvRcvuDVevURZyQ=zU4u3vSeTt5~$dF
zq<G>k5fN3kd>t@QeE#?6;IJ{sB0XJNOCEBbPFB#!q<;I47gryQ$pvpq$ur_@uaJ;X
z>HLP9`r@s^TPLp%hKCq<=w6@4{qcT2T;UKeO+i?C^K@j!QSdrOz7@KQ8`n$%ItGOw
zZ5ScmzkhGzBjY#YqrA1j$n)m+*&I$EKl@HHe75el=3D{ei(mcaE=QunjaLH+!I&Rw
z!J5hi??i#lvB%U_HNSWlqMEh|n8x42Lx_J^5giT&+ce*_LQGCh@=$&sQEPf|NZ`yy
z`n!>wf>p7(`|GCLh(@b50aI8VoE5XLXJ}|x$NEmp8`w|Vh3LnG;D-n^O^g*>NEJ6O
zY*`AV4{fU76(G>Q`6YJHP_i%B1L=-5;!)Dg@0li+;t53FW}rcT7q;tcY2i?%Pyf31
zRIW=6kHKWa`No8yY!5Tf*&36=8ffrJV|iolyim`;Y5E%J=)}$_e5QN_6NcbEFl3um
z4$dPNoZOxY=d6<d-Ool9rVPM+5tYAXKwXb%x%zjzNMR^?1bOhG=K#G_if<~du8d3Z
z6}}r`C2$<G;HC#Ic4y#MsPGHz2fyBY!2>^KoZc`I930H${J|Pc9C<N@_NLm6GjYj>
z5AI*|m?Fm<`I#;KF7*GNmpDlJ`zg$}lu(ztGgdIeU?r)1fv)D&iE#aIW8iRFNQzAG
zFOH>Vx(*+HEizkMnWv8s;2|g%N@C__u$Jct{gdRGY-8&bXDI2H2e78s#TZu6#<$vm
z-8OjQOtW3@Z#ONm2lD1a5K5=cY^b+kP%Qt;bTCX65(jm}y(443@It-W-^$8L_f>X)
zBiXxnxSic`y6Aa{9=V1l+|i(<-CjgN1mt{VZ(3Z<=g&FCSmr~os2wyJTk$OpE~u5Y
zHBA<AaoV6@s4m&<2RFZD!P5H8e{Y%@KKM`XwT)mtTx`lniCQTd-Qz}&d7Qw3B*U3p
zreEL0iEM6^Q0G5LJKtJ%HvM~?C~F^zUh|mrvWIU|IKrv_TNYS2#ESk;N?N-0LA(7O
zLY-rlAY&IOE*O|`L7%sVn7yA?K1sX*P_TtBHDFB@pX2l=f8?)p1Q~Qh)SN0I>0@={
zg7oxsnM9I<>eSTNg_q<e3q5fVt9XNz(yq;oxTxe!g;eN2Y5F&bS7e#Fx$VD1mMHS_
z@`9YNwE1WFKTCfKR$XeG&7fbOk(Z0Bt(4g``O!H99D3C3z{E5VLz!d!i6+aoBjFwY
zz}Ve%+UD1NapTrnKC3F_WUph$ZflSCKJdRl+|3eZ1ei?v<o%~u?m%<N*txmewM=Z6
zS?*O;9`fT$G{=n-QX;1DYuL0#)j)lD*2Qz7__&HXY5Y?Sv)(QfYP(%6Ha50tUzJjt
ziL?qnc-d{yJG$lN!|05Mf9LT<4Yr(~Qq?K7Qq1rB{H|0(wRS<>ho-sq*q;0@%DHg!
zCF<l869v@A60ekYyI&|wh3L|yOTkw@jh`*s$*0Mr_oO4jN;7M<bIcx6;;CjBK%}Lm
zhvtg~stXGp-rSUI$e$0SKCv8n<3ID`bL~xPo(@J)o=WsM99~D_X8+=aPX0<0TTOuD
z{V;NltK8$I_0Gs`2175!XGiF9RYKzbl<#ci5v35(P;oy{IAOreynK8*773b68^GVG
zAvu-<E>>nZ*vmP%hzEVnj5<2valTd|d6zIEvj9R@eNP_wIo_M+(>Kyp9i}kCysfXu
zX{Q9r0GJKFfPjD@Xo+B`a$lPi&&kQD#alaIg2Un<iv%OmY`86O>q-Z%^Er9K9r1x-
zWjvp4x9;^1!WA8Q&g<)$QOis1Z!>KvwM#6!KY^RE?b6DW{e#yioO1DHtZpXcnDD^X
z|LHMo9Wu7oDc;NGWVaq)B(0AxFE782(OUZ;Y$<!eC^YB12lJW2!&)K!fcC<=_lmg4
z4Eb-;|JI>F2QN651GBE%9}|mQI2ObF9;i*!eID2BdC^CL8XVI4u^WXxR%u_TfR>DZ
zXsE0*FV<~Cx<t4DZit&?X9A#3b8py-y}XW|E!_~RcN1L;)6mdJ@00}qY$KdV&VH#o
z)qgMiEAmcI=K^$;XlP!q$5P(xBWV^eCAb5`>kjZni|!&Rxw$rB4&7v=z#8$q%pFv0
zccLjN@}IF@nxv2qTFblgM=x4^-RGe-!)=xB06(|rux5P3JLqUjd;7JcZdpbp?TVKZ
z>+hbUbfF34tE@`DP)S!@Uf1O}mN{^Wgg;<X!YdsML9g5O2Yd1?LaVbXD%^wa1erNO
zJ*jqAzmr5~=M|^1mim_TQ+ZI}eTQPADy%S>YRtq$K`;Lk*eQHWNR`rD{HVyB@6U@0
z@Q;L_qN7Qk9ycoR@bKhdv>YCrB2@YR8kdTjt9qr98CBtzJ^p8dcll5fnQgu1`gsyr
zT0}%d0XU=cw+2~I{BNhWJa)Aybn5deXlaalI+-=0qy+k~vDo8`_*}is#65SQ8Ls10
z>L;E7?C@Kn`RX+RAHFggO3G`-?wPMG5HK?{v#3tl<J&KOr7FMKHz0b*`sn{RJGd<S
zY0eR@%|e{qrHNAoo!5gkwfWG|(Mdcp8t>6}S{@1#B7G?b^E=*IxH0K(&>E=!iVE%a
zqcr<jld<(@XXr1QRhNg>;(N?mY_VcI9EXPw3HhnfuS1+R*4JftLHAb^pa}FKH@T!P
z+dzZJCwzI79D)`aO_k%k(-!@T1Bw@b?+h6>YTE%F^HCmt_eCrB%I$s+eV_Ow$MYOd
z$;#)`_35t>jW<V0o+3ZN-iCa1V=cw!`YYAISLIU8i_RScbP5~w{^&pY!t_Pi_#|e@
zBAJ{4tO$1(O5eK_Z1DZF@L|ALqGWRpb&Pa%MOj9QeqaAjE*oAT0CA2e9mX}6w>z{a
zHhh>Bk|G;AD!+epKA7KIWsX$Ot_Z?+x_P;Lt6P92q6Ay95ZpEktOJk<L<Nzlo2zSG
z=Gqnec|4KxlOYd|T8P{u`sOz_G5~bdZQgtH^|XR9(f_{*-)L6<T>Q1SWYc>Pv1*+m
z13qu?#oNNazG&doTe#V@Z6S35ggNivM}PJU^efjtKI$`LfNmasiI))6VnV=)A$7`@
zd2D{enW+~C!tU|kG>(I_79D9*h=laN4w<sHvZ9WsW?W-3j)$|3ji?0|y)mE|_x@hC
z8%To}0d;mPuD1K_r6J7d9-+tA4{O`t<l>6GHkz6^4deC<Yx;C>aFEx_YW0$dLH!*9
z9uho;;a@{vO_hKDpAAwy)!NcbB^O;)D%E^($f8q4{)xpN9Pk>V5c+r)JHp{+kfA%m
z!hX7{s;g#gldSsxEd*i}|7S@_NxRnAOcNb*vGs266O$Oo%*@RBUdg@IY>k{6hia4W
zx$#ves&^6ExlE_!`SE;Z802hQUl3Z>eDCyxb;>8oCLuK+*j(en+Y(QhP|{85>QXC|
zPcS9>>wHKMT?g#11x_`1i41+X!=)Ig=~U^yb3PBVx3rz!_~_b+8Ono*Mjbspe4Qs+
z2B;9Py`#s2lGC8a4iHsQ&dQT|U(7$?A5l&X%Z&)&jj@*W;W^egN_G_;5Yix;@i8wj
z$xNJgK5h{xP2Uq<hZCH`Ys264an8OVTW-BRqGQ!Sqmy)Hg4s9$ew2R~thbR8h+I;z
zGOr~msi<sC^ifdLw38Y}bf!{C+AF`-Rw#j}D@2ral&m^c?!Vx1RR?C9UG3~EVt*p-
zd-`{N=rD~Fmvy7)3qlXniN4+Xr|U0aC;$h>FO~G0fpMn(FZv_>0>|-|W3I-=T1no`
zCb53l(5vPRg$x$d>s2|wh{zu0dbOBE4kY`f3@|&w*!?0YlL``NRu1yB$csrDFHv?h
zd*z4QiOW&ve%0}uNmXB8Kilb-3MM3u(%)H*?5}P?NYMwBD^OK#=~GFF;W2J3G@2_O
z>(}Qkc+c5p!<#GxoC09BmVA~Ul6U-ze|sQ1n{#aTb%`weG1<Flc>b-C^nEL$$w;9A
zR%X<iaDAWK_e|5WX9mz@%GJEJ<nz<SYOD`O2(;P1$nYa`<>)tP_zVx+h^E*~p&!m7
zE4e*WVw`TuN=h}Ab{YRyG6F~l(fst>YjAs#=gNwTU%<-3>v^W8C#<!kP|RIXeSgmU
z%bz*3VN3>yZqe<;Si2iGq5p-?XnSW9lc`IIPmUO=*GSR$JKm*f7M}jLm~yn_b)ATl
zL)6JaUuAijBpmxlM@J|B0YBNLe>MmXuY~yb25iOQimggtM!+lgIVPGhG(KNC2}Mhc
z>JwLGa^Ic23LOoL`uS3FtanZzvmnxg@oY7l@LP3tbv3Dgo&V#Wlp3817p4s!R8T1?
zE%nKC`t?lCu5<C9W;Wm;GKyAJzOaMSFEhPFG>0Bm8Ty8HTG(F_d%}6570)?QCQDx<
zSe2}_#@4l-%fki<8l{<1fXu8_uqY(85W1Vt3mwfaO_x2lg(g$2nmx2meEBEiPTh4|
zPD}_~90Eeae#_*aiaa}~x^A2VXRV{nUO`1?s38B0=sQ+<kdc!?*2vLg6Yhzm;u(0Z
z)+OHA6sb=pZ^6oZFU@~ul+=h{FqUjf<%UAYW9G&6nNdX?Ct=>H(!Ps?cXEJx_e!X8
zQcYrVx7Re{nyYjU395hI_EDGlFPLZrE-TKt)<M?k;Z5@Y3=3WaJ_f0gnI<#UJIc<(
z!|>cOx3RCb;di0QMeF0*oVt07(hL22)fST);44f9cm-WEg29ZntRt`fIffzpJG5UZ
zL@&mgdR=c^3581#vAqz8Q;z)kXznOX{qLR@QeTzu-pvDKceaHxOdcn{Weyn_7!a0;
zE$Xz+Sn%B2N&bMS0#*nSLtvV1zh^J{XOt?!TaE&ueaU^N&vR$sr+`QJA2s7|uL(tP
zHi`=l_@l4}RXihLT>_3TNNq54LqCwC-ykF{9e=h1hiYK^)EMdyEb3_RjObc^Popp~
z?#kd$(JHV(6$F>NJB;ePTZ)A%w=8r!`^Kzg^uyUy{Gb?fPeYpDmox?~jy^r+AOO*a
z$<VB4#m||eXvM&PLIc9rD_Zp`{&tRI0%ed8)_fn`+#>{){0du0`eWU{PZ=X&A^F0c
z>i1^^_8+o6|8Kz&nNa6o_qo~GS(V<<J$934$%8~K{W*t1h2XAswSAlF>2mW^2Z%7m
zzvH_pZ$PttomDewsVw(QyWk2C(TgHdbIirH^k{?DAboP0tHO4}=D5q;Xp4!X#`5P%
z|K5diLx3)vyr=uG_6IyICJn&<H_+mBXl&+y&T*0y`Nwmmqo#fPvKo?GCuYZi678^a
zhry4=^DxMv9hpG(F0eu6>JzdE@kHaet*tGR`Q3WyS2@LWke>vp;-5?D#AP|-#e-Yk
z!ANhb!V;x=glMPEDVZPg9Qp+#Zjh5hGzlz?H@b17FV^h1wZ7*xyhjlNb18;+pzE7g
zKh~=oC&b@a`GqMg69!sk4tLk40;~?pDMsFIk-meC%ky4%gi?<DyPD&<aGcNEMb@1(
zQNQU2<{?XFTNe}ZeX3v!x8MEz=p#>e_FM%E%C+^8L4dd1vg-Brg<m1JX#On*lQCW?
zW2kDqRtB~GH6clGYuR;iPp;CPXiL8}CVHtIvS&Bo@E*u{q1k;NAFa`4=O~tdQ*#Dm
zgorW@_<~NeV0?W1H$J(oLm`BgOFa)xQVpB5?5^BGzy2My&qG1+%RAzm`!~2M0p5v%
zGQsdV)Hc&`RJ@nJyf+NeWR#51+2L%A2jhjkge+=t>lQx$!3IKAlUF%!!pUGv@_4~n
z?sr;oSwq+G44#N8cVDwse)Q-SY!dQ9#WGK(i#SlLDUP5~0mdN3c=_7Bmt0Dwhqsh|
zR&W{)MDRe42r~;^vg|n5SpAXND~U%(k&1F4UsVP_db<Hu+jexU#H~2yg4uOy*UK0S
zWCP%E6ur}stpD-2uWml@9xFtI&gP&vW?DY(@4~}j+7Mb%KW`oXv77YnG@8lz{V6`X
z3AppD)k$o7XXzC<d<#NlRqowtO5V33OMVtf0K4;zx><FspPBBwpo(qFvu9e$KD9)a
z!xJ7LH>{gmDzjO~x^n97pd6@`)+fCylOvY3N?}{7chCF)E0Oz-nzO4bFS>F{nYBsI
z22AcyP{#zBv{CR#{wxm)-g1`;Egn6F_NJ~M+hjOPdb|XQnB9fA0!x}hY)2_ME;Qd?
zGF2k@P^uv2(rKV0L4$U<R}Q)gbWMz}92`g=`JaRE5`O63dab7~|4u)g<|@E(88fV`
zDEKOr!5S_jmYlz-GS7KcWw!R*|MkFBj}0F~i$OJRKWRdHDYHISCwR@Is-Y1n;;}w`
zAA=T^8WXyKc}xXX9??KR-0H1PBZyn5-l%PFZ>LzqV#hu(UCAza1Ut`NmlG1>w^02o
z{MHQ$^BQO;y^s~A5rBTZDGN$k{<H7|ny}?#qeU^}5}Ym{K^d$3jvlN(?0s*+PTBT^
zaeZ65*nd*ag!o!zr<Q}IX3LSp9l;k-+W$T}hbN3Llf$zYI2c}@!{d<@&oLMgX}3B*
zhQVwyZmImSRKYy5Duku{tm}Aku(7$~eW;hxHA)`*MlaV)&d_i)93*zB)Mhh$aUZ^Y
z`}SE>*)}pVvNY0ntjd};uR@;6E$fJ<+j>v!r`(7g(fo#xqOfj1wrcE0)gQOwp@DFQ
zvrQGhWSXtConA*m(z`QJES~>^UX$npNFEhaacS11Y^xOZ29k>XjRUlqQDrl7RT69O
zA$8y5P=u7H3Ppy%x_qeT{z&DoExY5dpJHv;1Xa6hb}C6Mz+SI!cp6Vm#6`?yomtY`
zI<S5UUi8?G(dN!!c#8wM-b)DRQ8|c^xaje<7uEuDd0~C8`*5p9v^MUaLf{4vI`mNX
z*CwMU-^Zn^Z?fq^+sV+VJ#S*Pr|GX$IU^x9&YKU;AyD|3{9$FkeS2^yz|MVs_Wf<5
zDBxmEM`6>v_o2>fwne<JIy3{Y&il!1&-?M6dm`OJyvwj2;f#N0ccPV@v|ark4Phte
zKenZ+EIuK;5pR#U&Y?f@w$^3;N%&2g-NZpbBP~B?v+0kd|HW8vxGiKZo5$m!tLt_M
zpg9e)AsT(-?&8#?btiUfqxIJJH{Q)R1P~-btOrQ2h$_KE$TYdEu_R%8Lle{PRGmUc
zos^q&RZ(scJjx{Qj9L8rqtLbLW>Y@<?qgXNy(?Jeal-ixr-+|{Ny$@Nyr2MKBa43;
zbRh0sn%`fgO}y``(SIW;(Bz1BE_Y4o;@!J<J?BzE8t3m2KVO=E7VoC1sW~bH?f|LJ
zuJw4C8To|vWd86mNb#MnZxU*q#i)&;DHllsr}ulc791y;`o~XTPU~V>CYxWYn!+WT
z@9+#<!|Q=!wmmbGlb^?f3p89}sOi^026hT3GI)FuUymq_nKT#HN}-EQ-jiEwzeaVs
zk3taZJH~rnR!d_RN{!I>@MjRZ1TlU8S>*Ek{O=!M&;;O6`i<sZ+2_v_+6*+Bu0Hh=
zl)eNQ%Od!ozM%8Nx<uvXG0g-HWKT>2bKw97s%ttHXJeSwHP7a14#WI2k04UDvQEs!
zl1n)Yj*-pE$eAX=JLfXyaovTM|1HE_qD*n8l0l@)-rk<sT@_vP4GAXKe|p)ViC20n
zz-qGJb1T9inUKY<M2Libs&5O&Ia1?R8eB->Q~{yOse%bfV0lDWybv38qlYxy+N&S?
zR-@)Tb)Q5~&@Aq{z004wc603f)-jK#Zgf9c7%cXumXKA^rhre~Ec01f8+HvJW9X?n
zcYEJsYH}*3K1c*x_3Ke-0G|`Tu;V{ryAMrQP8`g7Ov1s%MPCALJi3UPJ&?SAlTH3~
zyehDMEyF%3&CobWzaw%3i;&Ad;&-Iy%6DX`&rzMG95z9;yy+yW8NE<_b0I)yNB6e<
zO*kwSA{xLb0RXaIRE_1##IIYWsMt9<2W3o@{HUzbp1y^hgT%i0)DrROSA)qDHz<Z<
z(@AJmPze6IC3j>X&y+kFet|i(FR)1Xsz(-GpQ1TKvbe?#V?+bYC0(hT|9S9*9dUI-
zLkaY&7(#v)ywcj)`EU9kv-N1zBcJ-iZbE3Sy7WIbzt06`{_n<x)xd?n4BnSi1O}c!
z0k%K)qW6bs-!sG$lD|(tIZ@jd51gDfGU7gA;V`b`m;W~G9G(`w@8_eU9Z*NwFi=9L
z*4(L^x2LmcH0@(urab?=`|3)+fS{mXrk}!{zWXL4$pIEomLgJZDT?OHT_M>3?$YC)
zKi0f^wepIA#qwbeazvwzuLQIEgg&i;3FRAo(AU@Jfy)<b1^Rm$L!3iAg*smmH0Wn?
zl{eEX<5z%1M2vmjCXUdFFV%Z@;Y=leUusVhua@(1mUZ`WT4X$w-0Jcn*SkzE3tVJ7
zjpZ)~oZ?DMp2<!f2>C9&KB#!!e3$9U!&6^9{{S||z$bV;>*6&-nTF?h1{U`M`6;Pa
z8YmyG%+Ie5jxMz0Cp^rvc?Ca)a3sPOA=tty<0Jgz@1Gw*bID^IXJajrv^6wJ2eUH?
zsqv(s823@-;CY%mS3Od1+#tIEj(OausUIH|qIt#Dg^@gc(wpC%H`=fl0u(H75MnSG
z?mmj|<#v{qnVOM$Z=Uk>GNE(eAzE{hQBj5+#G$nUYpnn6S`pmMH`6!mzL54x?kA#W
z-(gVa&ZGC+U4{rs<<I|g688E8K**O(jN>YO!1wO<<?Mf_AW$t(g&mqrx%50Jw!3*B
zm7i}H_lDytqoaev8nvyhtrO)u!Ib~41}1z>?As2DlHpR&3@#=DI8i#8xKfs;q0SPA
zab>GfjQK;3Cv~LwxHx5u#C?ON*2MnW&iXY9^wDty&cLpFZaR6_Oy%d<h&Hhq)}(?z
zgXzmVhAW*UzkgT8D>XYpdF82m5%f&{H#XoS82=c3N-5vu;@}w2-`O<EJ&M`b!Wyp#
z`JNv1zEPoFK2ig^m4&hT<E|4EpjJ`3V-VlzP+zdSz2v3T_fj7vh3uVab*PjeY1=wB
z!<DNYmo1cT=cg&vmt(iMc|>r2ou0?$*qz}m->#AQ!{C0S{pwbO`VZF*lRm#;gp$t7
z!2FEjt;K#BZS~=e)O09-s#<x&AxJcJflEWJ(?(v9`WQi~829BFy4W^Ludgs0`@`gc
z<%M9W?y|^!Ab_&0+AF1cz(rT%g<@S`8miooKbJBodaNIbXZ*ydx)rksf;_FNv304m
z#iI74i=&_3SQ81pHjT6%)3`W)O>%Ows=xbKpIe*zNji21Um!j{o=+<-x(dljd*b64
zh%%LgwbI%Z>sjO<Yrt&T?a{LNWjhx<a}Tu&^61%%j_N%;{W3?}R7!cvq#F3}e6Dn1
z{Dmd^L?$$RBjrT0h%%94PQa1dXT4@n=X=9Lwp#$Ni;(CY+hxPqMwZXJt&Gj)kLhjk
zNd^*LV`<`{(2FcRU4L>iw8NG+@zwoSQ0jKos4o#_M}j3gQ6W!CbY;7VXV3lU2@5I2
zWuFZ57B&SwFX0lOqhptP?3h^X%GLwVwsR{+dF6k06c0N|AexuvS&O3Y^v%dC_3b_3
zqPTs>a*JXmyCt_)&av`iFWQIFSX*Js$05gVyFMj7eYR%{+ilv1J#IZFrpnCEH~ftL
zv!vT6lhtxuk0NB?>*iy_?vGX5wWugUOX~SBJJZ*3NyBWc91-c?Avj-8-38m#k?EIJ
zooVS)YU$gbcNj26ZG(QbD=f8rM#r8JwI2OrF`G&R2fLiNGeKtZt^9CHzd8puC7!{3
zPxYpN?+>#+$m`RrvX&leD-_qc^@YTCANPYl7P%S)c@7K>p$Dd=(XAY7Dcr3mE22+1
zzo<~FUg^;`CkdQCZTGKV>giMS1hw-#->Z-62j;le7`33TeRU(Fk)}4CQp?r&?~l#m
zotU=m@N48Q*1FcZF<39x<Bs)5cGQQK2jA9aUbM4Kmw1o83<?b1q^q5RE(d<n$91Wb
z=HM({XEynIQ6kmKl&q-hH@Kz3v8brX5#ZK8rnqW_?4&rbSR3_hb$1>2dYf0qDVV+6
z?j^M?_vo+JV=uJb^g{UZtseERl=OTU9{PMy<Fj>c#sVF7<a58`8xX?Bz(Y39NAViq
z!Z`1VeUWFs=ZF{lkyA@=Jg)itjdM_M^2eSJt%;8gtLW+!<;Q!jpswaX>8O@RgJ}4C
z`~R9mXYzwvLNUl+0?lDz1n2Rf+|=m8Mla4OO5$?~$szrLi>4c_p)+jh5I{$VRb3of
zs5Y;XpxOWV2~pBPUh$aWu?Aov9%WKLvjm<r?wYohM4m=(+-#{=FI1G3l|^MH&hn&u
zY8yPpjxlU{6?RmTd6ht_lpWIYwYV|kbzaHAETg5-k&!c20$36Cs|@ypMJv+ANjN*h
zU;M`|#0_3j$8~A-daN#3{PxgtjO-+_qs2pO$=e)Yw4}dPQMrI%RnEtc0<*KT{nmbs
z{>&sFQ=mQ2du796yY-nPhemR8Ewgc}uGS-)rKK0(1<NT<%WjP(`v~dIWxv7I3%A^r
zBmjQ3Yp_(*Voar9`U+u5atx&*$aYhW{N5{%NmYnD#0f3l^G%G>qYaw))AV3}`@ET(
zXa6r1zqvQK`}LajetJYCWu&j#B!P76O+6SB*=QGR+q&J`%R9H|X6L!9`*zGs-Ea|7
zb={T2Cm?ITvS{WtA%$ZUw~l)9N}=OSNly9vz4D-=k=Dp-E#KV`j){DuDH}hY`0&L-
z&Qpw!zG<*D;BfzlyKeMUz`Ci;vgnI20C3NZAi*uf5L~r4Y^?GYp5}vYVA<gj5YXN|
zp?+(Y=inYM>PXl=S(mlsuCZiJ$GS>~o>Ma3XHp0RNo1Kk62GO;Imfrkh=n>|*Ugz~
z^IyzJQa3U>PIn=^NB3nrXeTVYEdLgoTQ-<ZsHnEqhs5W~wyO00qS4A%l>>u|+1G6+
z2Ak@6d3bzcd^0R}&X+Qi!W*6~Vokr{&KWClsGGzx^53GKgf);LQrSxSSjcE_YW!wQ
z#u4xfFl2K4hd;#}=Fg=YDDi|sNHn<p`s7|FaqyE}gb-BRLQS=WI^WomZCz|xT3Rxx
zc+rw~7_WGjuCW?f=a#-G=-@0cRLBd#BXC!d5!ag;rGyPo2A+mda198S_~oJ7O@x>5
z)(hj&ZL1y+;SC0qZC$QkEnC2be*-I|%Fv;lmBKrc{*~}&!Wn!eb_p1TXy+5NVQ2dH
z6_t^e@Wh?lNZC@c+s^ao=sOOtgnx(pHL3bktGFZcEFS0BpQQRLR^iic&R(hj0p(95
zC!_t^_0~vCXx&En)8lDZ(VY?LV`cQu>V>g2T(q1}M7ZgU3j}v?Etj8{k@)IuV=>`~
zyeD!;Mzoq%jtv13W8pkD<mkd3onZX?8D(YLQt^|ln#WM*6rV)-eLEm;V{I3)gJ=ev
z&j-I!)$nH!vj{eoBuT*6Vhf7Zdc;8;zh7>i8x#V4zruGVAW}>rkdyO~*664|T}@h3
z{Kuf6pmJ5ejU$}z{`*1D*4imKH80(HOa%gjr0er*7Nv-!Z;dv1%Q=@zm1-|~u9&)}
zKB9RAcdPN!ZCV{8W|TM>ILX~z{;Zr0+dIUj{o?`vru8iAdtzk0Y0$NMDb7i4{$<|L
z#5J%L!&=5giJJP0h7?rVH@+BueHBVMZ&Vef^t?~p-3X%{G_|?o`(bq0Jc7#os|+GR
zBS+I9uc6-FWVP|bIfyvXytdEWe0K^X5(M|*N&S-y^!S+VqqOZ6ZF&<nbEqfzW2=W)
z;Gr2dDWmvyo?b0r9!E7$Dt&N&#mniXa(@z>sKQCn;|czlm!A4W6gq4ZKeItyE~;UI
z4l|S+-)BBIH|O^zV!ebrZ$#U+T;At`Zwgeo@Gc?5?ICQAl!l#*wZ!$geK_>QxWHl{
z2EtplX`;1e5f|IDkT;}+?U!?RYJ3Cad8*&gGP=aFp%8a^oS*F99mZTgssop2v}H%O
z<bKZxEs;sY=KiXy*P>_{PHvgb5xycbH$z|FxN;Vc-Qz$J%H%&W+Wd_BvoA13m@xc<
z<xIL7bn(O+CMgb^;u*g5(?Wy@b+T|-b*W~4d03v5(p7($3PevB6zFpK2Zs37>{T9#
z*XPrVcB&p@Qj_|}8QSpwJQ<rJ!R%DDuZs~#p2PFulgxPDKZ;JnzPax~BGJ2MymKx)
zxtRdJL?uWoUtcE!>u2J8XfOTxv#Jo7GigP`w>L!5IpIxJQN)WIoq|HVN9+tVq5VZ|
z7wp%Aib1~6{Yz@9DVKOc&W`~WhR2FKZQ{xG3arJh#zw5M4+HWEB|gQ*dZe%>`8iG5
z(()A-64d{%5DZL~5=6ACwlUp(>RL{x((!Hg)$wA$0KBi0z|br%gl7=or=jQBCXJOx
zv-F$v@_FR@N*Xl1Iso<I0&&QoJ<X@6s3TKwQ%3OiBc)WZv!DrzHFqbU`A=j+RqpdZ
zc%2)UGx6?2g>SbMq2$y+TC5Mr+$kK_{9)Ii*)9$qd@FA$6Wg0^7&$&_5XK{J7g1%a
z4z)(zW1y<bQU^c=77o?)i1i<FkCR2YxUlDlsdE$@y)?`9VJhT@Np{BV{X5-jQ5g?+
zsX>BCE46FlBV7V6^T!KP(KB!Klh9d-a_22%BZ|I{M3u&|RS5pgOMchEGm+4wugPKe
zcyLS#gzQP0@5Md{HXi1d{W&Ze6KUkk;=GB+;1>O2?*|<3{2$}Vckf&wy{8GK7;e?i
zuH6}Nk8(a(ld-O_K0m3$fvm1Op3=j+Dy8mi_QLr}6lyc2B_-ZEQ)DDh{95}<DQ#=6
z)HkU!Wz^Olo)0b^Qkr^d6q*LRB-e&jUzrf#uxVwzK$LmBR#{V1W8VdoE%56z^0;RZ
zQIehOA=LpiQ6a?pi~Cy->P(1-<X*f^@u^J9Kj!&$72QoowCg}8UC05ZYn%t`_n77T
z1TW7$q&+DBaB1e=dr<FA;_)mT%S+RAM4Kz|`hH}O8$(-LtTSf&Ah1&*^d;*J@&z^6
zTy}?O-)IyPd92W><z+fa{C{i;=}TAx*2&7oMyw6-G(qXXT;}Mo)<tU@gd3lM<n`?7
zrTh>UekDhPy!W+%LjB75Sw{uWxBNyj$GDgY-^o8AYsMUi&RKp(W)$%c0fFm=czI6E
zU@laQ&a)Hp-axdrw&nu18?gj*Ywl}Morw+niA{trLWVg4^Se9=ezT(}cJK1+TaQoC
zY~DHw3>G03gs2hD%PjL@-!7ZGD2f%V5V01ASjnma#6m9LxH$0_&8BqxlLUI7pZ{?+
zA1a8SEz@8pW<NIk^8`eUvUQc=k^8CM+Ywrx`@vm$o=<DcFe~b^eM@KOs2s(QgHG&@
z6PI4mz~k|A1~FSn7rImkAVqbL4*l5Ps8VS>Vp|OlLC%aiJZ<WIR%PhO5TPSmE|^Js
zA_fiah_9oi1WI2vZKs%T!Tzq|yGJMhZ<C(;?bo}vB_i6zYuN85;(M@r4S!Q;%izdR
z!HMOo+6xSXmd;xE$)W8<8HRVnTh<3%FV>$6Skt>|KIi9cX>A>>&LLSRWxc3yIk>cn
z2JN==!DXyacj}_9rdvI0fiCN9Rom2^O>vQiq6$J9Fc<>G6NEQ%;l6!QltF)@o|R&|
zgs9<>&=+}*dzTO^l+@HwvTFP;+q|faUn$Opo*Dp8o8JKuO{&Y9Q81XxKEJhMmQXNQ
zBOA!@e_aeY*)F)tP`S^OuuC%Pacu5XD7;gR-r1;$2E%wyzyEumviY(~%cobcE(k7{
z=P9z8-|+aIgx{!3)sUBAyqh8!+Q+vkj-1E=$U;42)Lo<lTb@^+rmjl~iEGChG86>J
zstLQ?BrSn`WBcU!YRBUe>%^A-m4tON0@yfbV&hK#dg!^<^v3|Zi-u)gB5u{mqAxWv
zzG-dYCK!0bxD+0u^aEU&)f=Zc$;?ntRxC>UN<|*FT*d5MI2)UK_qiF=n-aY?r?7Z!
zc%bPf$ECk>3#VLVt?YxnUvWS59fiHWA@%mMCRu+@;_o<9wOqRjIB)x?uDW_r>BKW#
z#-z?1l8;-&eQXaQBZP{*#>LM@3)S1AT@Jjft0Ue2;pIFjcN6oa#D=G;Yfb>7r@22H
zmfPSulq-q;l6iG)5hd;v)9xfuzw}LGFJ>LDcj?wTr6}$8s^M*wix;$rRu<+)ALjVB
zFgqU}<{N5G@OVL!t^&RebJ1B_0}v~!czt74*Mn{jRLLns;i}z!?JPXhn`G_$gYUe=
zn7-2D22d%*RYv|=rxlJntg}>!3fE^7pLhoOhRohaA9YE~$~N(ATTEzP5VdE_C~H9u
zx4yTjf~IFl+I@1n+`HyX!_)KeUnT2ImM2+I8zWOwp9**?vqM*&C#KkC?TcpH2FBhS
zp+L{sN8%Jav5Q{3YHx=vO#j&NYBA2bJAG#s06AP)*c9t^1q-jTU_;mxW9ZZB{h@Bz
zhfo42bJ!}h7bkU3GKQ3$3ZOyKU%V_4{@hXeQTE|E0&Nx)eUV%LuS|qG-@^TGUfI-=
zU?t%T5IwB>R=)DOL^rhfe(ZJbwLNB3kdRTYbbS5(6S_1ekj=Y}`&#L|Zew${_<+C?
z@TVRs9>Sxu5@Y6w)0<mcaql@zZc7_aex^<s7#tM6g`qRijJ;4sxln`4ib-2`t`apm
z3Wy?KanGE&N_<yu*7@7N3g9Xvvg(4G)(IeLH#_qzCwFqhMSI}rlw`Jrw~Vf5Ic?dj
zB#hj5>lctCB3W>9$Z(rUjaN>$<R0z5k`d!*wHQ6Dbr>F+u78f6?gpymYyR?Lz`@U@
zf#UcN1n-#=s8#)TxP6czbhnKgX5~M%^em4Kr2q!Nwd@fNQt^}6APHV~e0{C%d~I3u
z&&CfumDBVSy~;`wm#(4q8S0iyJSZdI!k#^QR@bR;94SL)W0ll!e^d$__@9ud`duUW
z&Tr31M)p@OPlfX}6WS%TdGy9pX{taX=WIZ5H~y<5(EeK-0hA9UyCGX?pS+w(vdRKp
z6?~)%r$YZu5f2BoSu$9|6+DBK-^wOL_FtHFlZUlYH8tKSLoeg0{yhe~XefCcTK8g6
z0mnj~zI=i{DH@d!>g43qG;g|ajyS|l3Lt~YDOQu3Q&-;H(%m1^y}(vRWqnddoF$ll
z<P*ah<MSj!p1XI=#>?p@b2ti$d0_ats50voyK(EX!nhuQ>{a^YHSV7&7(n8~e0&ar
zMvX76%u=qfQb~V}z@`jP)nT$XY7bqK+=}?#s5M`J0IX#!-S5dnEi>EI3-#J;C~Ich
zI5F^zij0k!!`cUCeYYMooc$!oRo;DZmiM)sJm>!%0D{i~?k|rU!0tLmMTxC=8%kDN
zdkiE~5(qgUvPzhR8-M*yTE_70g%TUh2**R6YpT%qU0*nU$+3AKuRTHr7|0D%B>cUw
zqT}a$t|Oh;irvkUkD>^1%I>U&I-qQOiqZesSX1ECVo<vslTU`sAs_1DizNR>j;=)i
zc-AW|UQ6Wc>|B$%{cZ<E>AOU&ow8c69ulbQx_SMTiJR!7|3Pm~sxP}YUw+|BQ+;Oy
zv36FnzQ2X7UC=^&@&{Fy(QCGgdLo_izvHk4zSwkwQM(t>Fgy@W6gAw6+X=n+F{UQK
z^PTO&uQZYc(H{8q(OENS0_kJRht@*ZRUB^Wg~P^y8UHb7a);fb5d^Dq2vA%IBy?Bl
z?=c>yBYy9xqW9sk4OibuJ)xZn-7@-8T39b4k>?jNVknND<Kx~9RLGjRi{VBTqnX+T
zh}@-VZlk&bJvqDY|1deE2)J9s`@vu%)%wqWrrK&0Z#c`4UeHMAK)D|CIoCyhH0QUe
z``C~w7vY;9En~MSP(OHUHRMP_-uVNzpvB}*F_&}lS>H>81fIC|hO~iRZEsz3;6GrP
zA`QCo&{`L80h#|qJ@9`!?|po|$Aq=65x>UO6ey6#q+Ug}xrfIdY-`JtWFV!!zjNe(
zXysno6xE!x>mSLv<UW@M4V>6@0po^q_BS80<`=&t!QP)B4K}Oq{)Q$zi41N(g!RAk
z%iGqm)70$a6%9SWyh9NrYvK9q_$ZC}OnDjv3ZJJzmnI25ZAn6CJ;Fy2&c|rYG3+~E
zZpS#<8dIs={=b^aWSr69>k7gjOjY!9d{z1uB7Wdwq%~x;v2S#%e|UJ9f6-6pkFM|C
z*_6ZEeLpJ#!4Lo%ug1?WJ3Cw6^8b<bmSIsw>-Vq>LxXe((g;W+jl>Yr-JME@NcSME
zQX(ZFA>9Z=mx>^Yl)xaZh?Jys{`Y{M_nhDB2R?XR49`4!-@VqlXD7N<AADiJ@T%O@
zO9?ef^acZVR_tAWD-MA7$;X>ld`ZN`&j4_r)U&?6=0UGsx*5A9z|5ed?2|g^5ADij
zTD9h|UjKM5;tvKn6;OrMsIF%5ac(Xi9-cV;U;L{3&jbc0^w-}W*rp1vP&4ETlM%+=
zv62S8k4uY+#Vz^Lq#&|mUL7JYIUzOG%INqYf9j3JF2pI2z%X<?AwQuz8@q)L;$3?8
z#s^MP+OOxY(QM?r)uyz=KTvdY2EMsEO$HM*g!&*-PG}B{ras3BlQ^M98z|c}#3(B-
zHw5P>n0;XHN9t8ZKc7(bi@LZCMMiVNSN+|)!VQ+T_^%&)`BA@V{!za-uQQ%rT1v6E
zkiI36P^^g!CB~`{Eaf{AaSgzV&$`?3X9kpPzwsJasuoTeU(T+<gb{d}O!0(iS%ltl
z>qGq-gmyp+q-EftLCb@hV9;^u5KuDxllW>B=k@HPj(E@6@VTdLww9xBwWR;|F!SNZ
zGZ{mZiL|dhC+xj=r%0nB<fyP&xKILe{;Q!k$_BTpNoHfn(TTM}-yjbL!9=QwoA1%i
z&pzMg?EJgm;z0f!F*%hy-4~-qv}~L^h*Jp`fbN;Qz8dx<ZVQK#LpJfL1s!5E;2Mog
zCXeO2uA!-)3c$icEVW-R+h*6hxx<tqP+kJG;%v>eO--kw#rMA;`D@sRKCw%Xph-Hq
zc!z|X)0Ji6;4ptf->%f_O$%;eMSI2z$+#*etxDmqTrSGooahT=$Q3ywHB`UGm`^x`
z>H```e5^*$<eydgHe_)=JF7ezZKK7FJNG|YnNxm~L+?(FHWJeRiyG;Qf;=D~AW)Bt
zjJ)f1c&GF4e_w-~<6a#i)cuk3S&(ue?{*`m3Z6EDX>gW%DM1FkO}2u5Ax?W}DSZD9
z2m9j{RjYfz%tUFUuLH?J6GcnTKT;5FJO^2L^KsjCr0=f}+P$)8%6Mwu-x4Zk)}rv>
zHL>sk+KZ~qcW410-_vHc_2KnkFHdh#**=c7W&qmTt-2?<q4>Iu;tvqpbAy2JG~`jG
z*DFSM>b5t_;`cWopgJ%_*g9RAnhJ|)n8sKS*m!cKV%A73GlhuxG+}3alqH=<R)3hD
zYRa!tPDx08dtMp~ImSQl?`|@Cs_YuISxS50jof*}pOeCAC{@(<#;pHKL6+BVfBEe;
zR~<EvXNBNoy|=_~#q<6A9R<HG_{GEriLp!z8c>E!N#w>1L=|w>lm5~BRiUHuLbLaC
zrpZXSL<*VV@C?W;aZH}k+O5hTKWtvf+W(SL5#!iowU~i5YJS3~VFcTP0IuedTXsHe
z=G9xbdJM<Zm&ljuaoH2HaFdnj9x8?n05w$~<s9c)*&IkqQ}B~2QjhCn#V^D-mqqtt
z-TG<D7sjPfNmhT>#~2jf2VnP%@P2|Q)vq(PI%33`_z%Ys!I~Qqwz4`n9nb|w%Pg<9
z3UDCTP0E4DdBq+1OXJlSav?GkbaQ@2Hgv0IogJ?fjXHbv-$3<8rRcCHSaUb~Gxu)L
zl{7Wi_Pxqpnn4$uq1klP{3!nf+~IW2+-Qlc*PHLmy*DQ8++NhiyA%v0?Z+Wt@_i_z
zf3D|O_j`JhV?_+P3r0^jNWZDNo_e6b5<2XU)vp5k<vF4r9;Zap!KH#kSkyTCD-UvS
zyp!f8QyybtBK$Zr2XIwpWH_re9MBDR^kHWiaUB#&)}UXJyIJR3zooU!GNWT`?rC$D
zS5Uyho8tP7^=4RAV03ybzu!jB`Pqr5B(L9+l=HGT5%OaaGh0an?Fm;TISMxym-*BS
zEg&})iI1O<NW`ZDBgo59dns6|`<B-JJ{*ebOGR*M&5n;ZsF9j>evA!j+LA#Q(Jar7
zL^hCyS4Hm-Pbkf|(wq%c|4oUk^5DnRY`+#4;|!M7DWd4h6TP+fW!>&;x~G*_KZIk}
zO~10Z?LwR1MLm=5TM@7O-rIIInsHoJ|L^Z7=E5gSkSj0Wt2)^}U}?fB|Bqcd;`k8;
z8Cbqe6U5Q2>d`&FUHNW8)C&zkb1*Erkttg(`VM!D&A7tnPdITDY^)DQ(CPFG`^<{~
z??;)n!Vo*0Wr67mWyq&Jf2qNWk1<7TXu*mUj%_C|Ud=9fUtXV|&|UMxo}oOs=#{ow
z#%6BgyZC6qo3z9VlB2bGaJoC*n^DzUnSBta&z5CUH9<3MJG{vYEW-b7kFYKlwCs~R
zc?hw)_Z!6Wh;Se)I4C9mhU1s2i25Q!64PRa8o@}{2`HK+#;9f>ki59~<(x-0p50{!
zh-J@e*ED+INHE#&oS(USAI3fqox3I%jT{}V7tJZbz}XkiL-6<+nk1q#GS!5^sRb{F
z3+@~_O;5jhOLGb`AxYfjo-|VLKlPI`<<+Ymw`Nh7>j&pUn5yb$4qCR0kM|umg0KY-
zk7W=vp&J?s_iX?`j8<{KkwHUN{wkb>NkP3lUMq+o+<PL&q;m5^1MB*d*>dQDsSFe!
zMpuz8nr6!cJr4CgJ=|_?;otmzSfEyPb#z9YT6xZOIZir#vd#hw|L_Wc?g5nB)~Pj(
z#at%%sxALWkKZC%fR9OoTx2K6#SB|8WSepE6S~#!iSN2zmG?d4I*lC^o8)5wDfU=m
zZniV@!gbfY@BXV`&x{&{!X6u1S6PN`RQzaS-~)&!fQvTI2XhLukG+LAy)2rlRgWeT
zpH5QE$_1*p#H3K2jNw!9b=?(dNBcj#j<BE5(WM&iN2WDCT98RfdJKKxMJA$1cn>@G
z5HuO1Ebt!LUN1r;Lo>m7<ELwCS63K%!pI&gYdV2nW69aWh${Q6n-7J^avsC!ZvHXC
z&8$^^4iO(XHA6<*u{7T($6^^;ix@9U#;HVqTs#4TPI|+So@+SmTlJj6f^Lt>pw0Y#
zli-%_W`MqTpprl%b91`4AmSRN1NWu~iVs99(z)qeN=A_ZpNx|>IN9b+!hn77Ae(0`
z6W#EBbUCzt2w-`A;V-7e23VJ2HmiSHCc*@nlx5DMTAg;NcpMb-bIc0Gt0k35dw+|8
zK0y4>hWoC6?`n*eRSjn8*lNIgW#S&#*k98ll0$QUe8)ZL0YG$7juvk@;^S1P8J~HD
zat$Y>yk#S<pX{Y{+LKJ4h|p&y8B$MVE79CJj43NNfkMcQYOKOKIHV_a=8^}oOo$^-
zZauWLwq_)>-&0L~1Ui=ckXf<UlK~4DZxQx&QUtB2QQ%AR=dHt_r+Z!7$FL<cPdCH7
z(DUo?pI={`y*N0Z|8FZmmPAW>C^xYz|0TGe=1#p*2H#zw6{IC#r|OW0T>-@Y-Tv18
zEa`Xsd+OM`Tw3Pl?Xsa4{pOPbNjaO-=2}{O{ezI(oRVnjcS71Xoadz4btYPP(GWS7
z$ipi71ArumW*b_F7@xh5f%{spO{)YatRA}Y6=T_q*2+&u&E%QOO-eL^S?(bM21LuZ
z2T{~8{GV~3<JmN!L|gY@y<alD@XZVNcRD)Alo*q6mmO6Vm*w})l)`g&L~(|;sf*jy
zt1e%1Es<8vPuiBIfDo?d2!X!Z7KYDI_S?VjW}j%NSqli`fad6%&tQ1mFzQXbX&w0w
z%m$ByIC;)gqd60rQi(JEZK=Z-Az&&ywyHZJ8=Q$WdZl9aZqUKiHGB2Zn^`{vM1s4I
zm?GsP-JJVRMHoAJCQpY^fS#~f=&q!H&206mEA6a+tW_c%^*#+V6C*ab8C}F^?$3!4
zCj;Irw1y)e0mX9SbIN_SL0hm?3CY>R^>yKyf6)5s*GY|q{i?WT^p*ea?E`28F1}jh
zwT1&l81hpuB_*Z%cTL9^kKtkvYSSSJ(15hr6YI3o&~sB@TIl=~7>_C<;vg-vy9LJ{
zn>GACpKS()Ps0+7DC+9IJJG#qPnjmnRv*ghHdyOebx$X~p5zCS1T?B-TGq)Q0yg1Y
zBn0t1qZrG&F4(D5#4#qh6%|~DBKJBchKIF_7lN!uw=WZ4D}d$6^A|78sj^*d1KW0<
z)d&&(*g$G#*Et^_Y+l?un|g)?VZ?SR#MwT;%cCp%7mbN9ylO9m5p2AKwJK#QvM`a_
zob>M13Jx@NI^DcK7Vi0&A^7A&{7VRd0a4o~UxC^@Mv{LtWfmT-QmOYXBO@b>mko`}
zeh26yNkdkr+QfNz-3yMXQ;&3+3Zb`h&s%1^-oL*klS1#^yxN<cPjx3hKKwY4V#p(3
zL*z039&7ieKliLm7dP5W&KBv6m4Ae(adTQ+2Xg|_mqnzkxzV`~8x6`tHWW_FT7K+^
zihMLUCF(noaTY(2*Pwv=-=ID9<Jq+*MM^o)HqWob%nB}Ve@aM&>EQo&S<r0)Tj~<4
z#pL5U0@M6CY6_C?4D(Mf@!6wGZLP=NJiB0mu%clVcbvF_{H+m%WFj95PMAg4b7mr7
z!b~YwZ|vMqY-YzSrOviNQA>X@W;%H##zTvRKllnp)y^h)WhuXI#Hmd1VO1sZ(4Ti9
zAe(uK{<OR`t?iUz$ZEz?P*AYGY#RNPCvyjt%2DAxvuJ*_NRmB$!PtX2UTmSO`=?aH
zh_F_Qn50G)M*CPo;?on!dx=-Biv`T$$VtbFPK_U#*7{IECVAN+v=dalm#zIs%|G=b
z%yu(6dTII#pH7#Xe~t^fO1xsq;m7!RFEcZxx!Kw0#of%Lp+Dn5TmiGc2rxPBFbXDk
zPxkITag@v$4)$_XG>yt`a#xu_Wxhw;oNlI{W%=WH%bLw)w7}Pb7J>SwI&2F~VA$T)
z>-C41uv+9aJa;oGussu<fG~Lr^#{v=-#YdwhxkYs1ta4;B<?YfeD%wqi38Z}01`i$
zV556LMbG5hSKPMv%ZK>SkHjYUacC-Ahp=-L!&Y2n<LvQoqSZWHC=;<(=Rjr4hPX<K
zhyn@xeafm|$aB`~Ri2{vbn5hAIbVcKI_w+|4I(SoltfxZtA>iQ`HZEX_|jzBH1HeH
z>YkSfe?S-R*$C*Lxjs3f{^%~}c5M}#X2>{ho4CVJu7tW>a53Trktl=_x8&=p19x^y
z-Xa#G!DXff3URMTp^tql#=6I&dpJCzpO1Y}6d1(`iIcmX^rRUAPG>q;?*7&36x_;v
z%3xRmr~Jwh5f@B3bTp}zUA}!S6Z$~Nzh9(&^%YLlfD<F$^5ZoYT4xQQuwHgG=DHS^
z2o=A3*HUk4FEz33HTAzl%L*MWu2;eU*{?Y>e=mezBNu@fD~;`K?^7I$4h;7gg6=lM
zk6A9N7T(88SZ#WeoRfmUW|lF+^YvXgE5XdgG0%;nKy+RKL5X*$K2ZhP5W4z#MOTL4
zcw&3;rZ{W;bw5imu-IT<T0pOg`k@QZRV#JkB9eR`zI?;Ks`>vtN^W4-gPG3$a$?+5
z6I&&=dq&dw%tR&ds#YF7`oUjiKcB-mpJ;!lUh{skA#fu1OovtfGj#VTNb{_f(uATR
z<$FVYy@d6H`RmY1u|Ptk5NppYW*e_Jm*ddcCL5L+!G~h@p>-e{u=}Ezx&Zr=T^MeC
zIdOZnhT47wzz!1Bv*Idtp`m%}xfXv|lg}zEoLXo{cYKcOd{{jPZLFEE;`<$dN-*)3
z6+?k57N>;t)T#1luzTE&8>&M=RjTpaTxa$r!9Vh)Ll~fvl9Dlq)MYlNT^HtM5nvwi
zUzZnPX67(|*sd5ZIv@-A`}L<Ov;u!aBw>HDL9jAw6u5Qw?;GLMh9Ubyle4qeC4alb
z#cmTP`vBx#tFzgsj4C6Co#D?ZU$qQ(Jopj}L9YJY%Az0wHUeo0{cb+fTN5}!^G3!2
zax7J<6Z$E4h@*fB6_h;CHp5t36xP+9z9ig$yzj?;Kf?|>D<K<hKI8WLj|bEV5mI>n
zAM4}Nw(&`|I>kv%Xc{!z9@bk9Z2c;`B$rwFMMS`PAuam>3ji~kQTQ$^prn;o6o(@J
z{6wF60a4i#Fq1aVS`h`i4_TdS*U$N8&y2?)MZTFU+>O{)Mm|$h1yo9KCFup3sT*IT
zn);Jq@%Gfrz{u?HfS2<x@PhU?blI2>Se=IYl&YwQdGBU0C^OE#h9f@?s}EF{yk0fu
zHa#>FymwjDurTD>Zu$VpnYfoV`!Ase_T+%a?h)8D`N}ma@}B4h&dnbdD)&KBcxgtj
zE;*;mcKdike5$Y|N356RNg2b-kM|nyBib{DKS-5D3;8Y7PjFsCCC9*t1wk)4cOV4#
z#AtrHk1AJDk*ElJbZo4>Olp9nDl_wqqHvsCupd%iPw&3_alCmoiVPvJ_$b9(yO(1U
zY}9EsthmE!3_T_q3dXNqJMp-XGFVt&hCUk2c_;s3_()d(<l(oq*6d6S?1Y9sm2l&j
z90dQa)FNzTnKp_n-9K<{DNgsWtesqAdHNrR1|Gs1$HA=Ycg<@4D*$Sx4Q@s8(S+QG
zNO_(SDDec2$3KN1Xx-a8xtW=kmR6lb|3q~*<Y%c=9jDMMTX>IO@Vuh`i!c}!Bpi#d
zYSi9WpUV3~^K}Gc)sW=7)(_tpeovd4nqK6Ji{Q1+QjPl}Iu6ch-?vpN`-5!U8_frP
zUFF0$87-`Zr$&^Gtr#9lZ8rDi=TaJ+`h~QsqvJO9=Csm0CC4J_ZQaJLuxLM4F=scr
z1M~%wZd1IqBgS5ajtA!dzD=yBp2ANuBql<b^kn#)6-80J7IugOj%do;BL(YE24d~A
zcZl$GMPmO`g>^l;{`<3T+e|NuomqM_ZczUfhk?W35HT=9ba%!dBt)+W&;M(U*TUQ|
zMthsJM5^PprR|*?Ik#*^A#$^!7r|?6kKJ5cve-XnmGGB#nugs1ys*|)s+yuHUw>i{
zI7>Ru>5t<jq<Wx5#UZbbb)KjbK0id6g(*}p3XW6x<(sjZ1MPgrkp0YE>BU}&up&_L
z(pgy;$^W}*S8ltBQ491yI;yaEe3@zN>qLVFvc%R~=vVttiOqnWvP~^TNolF$aQAqx
zW8aYX1gV#qQ>>8EU|-|sCA~pqWJT!YA1BZd%($9`1#c^6-pKaUmSkGPUwU(gj}bB4
z!M(;zfd2)NcwV?Ey%8)DRP6>z=X25P{1SHWp2os8_y&e#?%#KHUC&Q1P<x48z@=qm
zWR!=gks1G8TBDgr__AijmbHp_RaCD;c(X}3=G|=pDm3pO0h(O_Oz9)H$-_d<M(s|X
zPrA>N${qbHDHJgTVe{gOx^=?b>&fVq1X2-QV~u{PWjAPL_4SgnV2XfmB&BvU`6jjV
zRf;?R98UMjzkSk)w^TDpCX#2}=+V_@bwL13*(5DH+q_I`iW^(Rhp{aC(AM0O&dK@5
zty{NDIrlwX;^wxS?vCYjoB&sGH02wlm<#}d0bB3M_NFc*_DCk~D534;Jw*3S?0Nyx
zk6MzU19RQWHqiQ0^$j#(QL}Q{ufcTD0ShgaxZ<pDS3N_!z}!yk`iJ|W$^U_-qikND
zb<63#kgmraNVE_@36<3r<dpJ;E0ZQC*_wmwgLXgR<q~t~M2+>?n21+os=mRk`Ouo|
zJ56pwxibDQ!+8y*I=4G<Rpc2Y(1PPH$|l|Ls(bv#3!LdbfE(5sZ@>Tj!Hkg4pI2K>
z&s^2B(Xp<d+PTy<vTtwj*a_qz?%f?4*1A~9Hd=-*@F@NPf=ofAS_>ZO;@MI_&(=>l
z^4FmOAI7EQJLJeEJ?Hdlv$(XW4hl8vFdT<>HSXo%jodZ3?4lcx8!c}S=bM-l|MsqV
z@EqQxv87nXeHJrGpQ@thxvBC|+<t6DvqvaTPvMp_j>C`iWR#8q8-kegUwQNtLf(S&
zUDuq3$BSR=KMWI343uQi?UvyFIKJ_u2TuL-ye{Mpj*dqim9?#OjmIpVWtj}l=7Y(n
zDE+Ggu~VZ55=m}iE}Nb3s=(~}FTztUE1`WaPz3O9om}=*<IIfRUc0D8c|FqXkMC+(
z1mjm!5Y3jJT-^VmWnP8GXQV?%$frFR_h9Wf_#@tlih}kZsNH9A<2cU@+&TZyK^kzE
z8SPzHX^t~e(OzCdwl1w}anH&(mAihq9ow{Y8~IhpPQtL+{`0)z*w|R5vddr@HWhd7
z;NB7L!&k#H;zU`$-iWC#u%-{Pb_D}&^HIqY`;Ojgaqam+soULz(x(p{yT-KI2q81-
z4#6dai#kw<GF}P)Oe&z!HB!?C2C`8oQ+8oucdNm&RS(Lo|HO{a(bSD9qtG2S`c^;|
zeT^x5*V4ur;_<|kG%C1ke<j1?Q-+xw<-D~{Ua~IZRd~t6o2Cnh)0=n=$8=pEUC87I
zigIQl>|hP9$ZyYF&yh~YAL&^CrP9J64k&}dX64S^Z1*T3LVphrkc9+a{gI|d`n%lp
zY-Cu{1sVno4GaSWvRQoAvhl|q15>EfPZoCaApe*pM}&#$F{}#`254}!m7ST36cN;|
zMBX!N`4hL)-=Sh59|X9(XU-#qtF3V~h-8DcK=imYF@=V^2korR5nNk&tgA<kAH8+{
z(gd#@AOn#qDkGZvaK}UBIbB{z99COjrBGEp;LD(pvLkV$A0c4`7^8-}6{+t9qi(CJ
z_5c>Kr{LQ~5wFVqG?PF2XU>Zf-cJJacA9iALiCRw1T;I|czrP^3AWqr6ObPgp!q@t
zDYnZu?%TStI<ZOU85pEGyG86P6!{<{cV^~h@hf6a8>v4ZCJGJrNDTen`-7zKV?RrJ
zW^y5Po&e&XlaZ!@?Moc=_gzKT*DwT$S7iclKYbOqus6=Z$3cZJezGC{Q%ppw=FoN!
zp*YEx^J~l9`%>%Wy1Ut})!&jxvg07fX8IFUBK-ee{0|7T!n5>xurYECfe|bkTZhq5
zG-;{kFcViL;;#l~P$@HQA5@9)mRtI66Gy}L{=O<J(6&V!tYJpH7qZGwzC|!C9dQ*+
z;N_52=>Q|-KxawA#{=^(!{cp${>@|X+d$ID+%|G>#Qyf6fv4euLFiAKNs+YHm-POO
zL=h+tH?@0qsGf3`!0@TKe-vX^(lg}2gGGJaVvTjRcCv;`*PqyB!Jf{TtE?_1%uLdl
zKNK#{){>G$^KJQbx7F>wEXCi4LpeuKe;-`|rp?#<6wX$oU($0E@3Z8dEvXy$TZ79T
zNo_f)ximiev!nCNmoM#ZZy#g)37m{a5`)VRq*-a7oW)js7#9?dF%4~`IUV4|ZsN+V
zjoEbWDEuRIFj8$cAh0?;Dm4K#(!Pg$@Gu*#ZPE*k4FOURZCD&zq!nGy!QQ$}y|@#c
z1`3q}bq3F~=c6^>?9b+oq#-hR%K`@;8X6jC$;MdR>PI}-%du?XqyD?`)C+^R=~-nT
zSr<P?2M)&o#&&+UJo$mXj0_rjFu?`c@`{^14IR^WV~*T~E}zx%$?1_T9H54BnFW&&
zrK42E_Clp{y2>g@;=8aBoekHEIRc%A!-LAm)?tB6@rniFKBsCYMZ$F7o?pshz!@P4
z&Uc`gWjEdkkYF!R&B*IqB2U7+jj!03;KM=7%T|KdAm>A72blt62hMWKpJr;q<(Vvy
zqTATnc>UQQe+kgs@4w(ZjUnQ*gv}*<B`-XHn}+n0Pziz_%-4S0SO?T2wn9Ox+gEQY
z8!I}qZYq6faw#~k?~aCkQlS*3s)r+P$>z%2Dq)|Ow`#?%yvx4>h2=w5(OX1@y^RO2
zqpg26<1Ti7yypM%wSziRr}8}UvqA!0dkU>F(bZS_3~6!S5#GbP7+bta(6??Bd_nK7
z#HA6D*H=OB%S8M>dC1H%dWR_Rz3+&^cUQhV1gr8);Om1U@~|#w8_o@{Fn@Ve4${Su
zX9c}Utc5i^7Vx9bUZuD{>4g%Cp8$gqvZ2<S-($P*g<DqvJ%O1ir$&uCBC<?%#<}h7
z+0iQB+R*<Z+rqk`78))><G6CL_3B~kQCn5oS@c~&rS<5BZkpGknWKhV$yAG~0J#jV
zZ4|bH*1X)y(SR549PhBOyj#8pTW@*{vgO5qhriI;D|$@-y%Bgd#NXdPx~yxggF?mH
z5vRmFz0u{{9cQ}H%8+Vz4!g~^aQbklAkVMfXN$rP(L_(Y0gvj3B5pvecUUX^7RE-g
zQWW?spb7xA&)6^w#cvfeYz5#>)hL64DdG5~#q6)j80c<Ip(<0^OQ(NH>g7!fo51A)
zI#Oj-lpVyT@Iw|Ug)>G{FcU`jwJTRq#@!U#p@@^45s<>aszI!tbZvcqpP<dfsUF)q
zCMsyK*@4O^tA0`1SvZN9mmmA!*A0k{7oJRp=z#>(4g>(PB?2I{fy0{Y_^nNZJJvj>
zPSeYySu0$mx`yTcJ9&mXXx>oQ>IadKk|$i)9GBg3Y&}@^h5d@rg^aSYvPCYrw%;d6
zz@x7RV^QWQkI-CVV1y6}y)rB+iz@<L7bBXvsI{zf_<k`Rhn|C$Xi{`O*0Q=D(YGWl
z*=sb|%S|5NP^F%TUy|jeaS>rF!;(#SN4-zqt`Y{{D&Qz(l?=m2cv$Ybu`5+mHT>h%
z0k~1RbZCc&F&m+h>NC!M1kd%lH(skFLOY}*-(I<*gB4~=VHTGB0BM#8M)TU^CGHpX
zWFq!;aHyB=FF#2o>ooY2Vib)Y=wAV;O`TgG3*KO^FLF0b{J0nXu2zc7+^|_m`B}Xb
zaW9Eh>#-eO!_NtgTeMd$;ObFp6ktpDpP|>-xgSw4E17FH!xpqInrB&%&ZE9Nuc~VG
z$N@a_#DpgDGCO0adDT^6TxU>5@MtuEcYE#{7>mtW64s|v!-i`)bk<+vytzLx3O{Ix
z#|cFSyCN|_p8|_v>nLJeJc%k-IyD=;B%F!(&<uw4bWL!}-w&m(vBbLrh!qp^xo_Uw
zQH@Kt-|KPV&UF2!*44zy*HBpaAQJOhT61bT-ciYVi^}>02jwG1tOclF$qSFx2>8`E
z*#gSQ(sP;E593fE&N7G-lCq$s(s}9<l<-I#iD+{fRLmL1Xqi8Dp8CTOa`_fofxJ__
z0&@3YxHD}kTRABIz>R(A3v}}Zm_hWgIp6s!QwyX~F6A>;L++Lxm-_0WA+Yd-Fi&&U
z=lIuBs`git?C#wY4ET7m!Vb*j81!;OWeX)zLX=<37sKfa9=7EyYNI;9M3iAbv*@-*
z-`I1B3rW<3O4UY4N^LVlGF#EoH7J)KPYZd=)H~#pJQ4rYX2JiI#Q=mR-aF^zw%;a3
zOsxC@vU>MMwKJC?*nQQ8IG0BrUod?M_bTpTyD4G)E+UKFw!rQ33yMI!=04Rqg-@?4
z2>-In+uRS|JqwO+CVokqae9aB`)fPJ6?w1q7K83X9aZ1OB~la4^LFkpVKv-DTCekD
zu%0jpF@)TgX^MyeMCsKoF%Oj5qSMElHys)DE_;zg4KNLW)3|#~H?L4zvq)O9x%*YK
zQ`>b?lhi0hpGZl;s=8{R{8I1f?}by!ZE0!IU;l{Y#{IUUh2TveYH=o9EBz!Q+FrM=
zzF`w6$M)#*(UDLu*H9bOz$pdkgnZ;FnDYj#`zu1RJZ^qTsK5F+SQkSW(5|Q>z>U^A
z=X{vILIgk(<$BM)74_bzJG1~ppiq80v1A?y05Vy`(qkEjVidFFI)|${WIw-2!w83E
zVF<>b*~K}}NDg2YEmm#TQK~)d`{n1=`AWobhbYtYA-@l;Z&eAP)-2k%{rulDc!DW0
zIoY$~m~ql2Hcgb7n5xwCP(bM0UR}$;bi?d@WcKkzXT4cz-yPq@jw7Xgf)o^Te;jwY
zBL!~^^QdbQ%7tS#H`fUCpvX)}s<f>?t@|L{pTyyQdTZr%Q`7+YBvmZkgiGf*2(T4u
z{Y02{!eK;^POaD0VDI8MhPLPfruipb>HM||4qHfB+Jw+e6^);lC{uts?Z9F!e;=Z<
zWBTS^A_`?#?!6P}4G>m7r_kMlSLFlc*$Zi6H?C4UqPt<YYClg5MU0(OTRS-9MHQmi
zEO?<E|J33vd?OD%FLb`0!19J^4Hb64El!1FqMw;2le-li|BBXU+bg)0_;q&nykRm>
zTCJQ+_&@ILm<T0<iEl0)+LAElcUK;5FPKgji0+cxq?GD;%W}}vsy~DT#0)RKP0{GX
z?$(4IsI(PU6!-9YdJ2pm*ybH8?+bxAiR$?FlMJ1yb&l5lVXDh#qRtMLj(sc*0q~ro
zozo=gLhUCB5LH2oU##?>U$g(WcLPlqGAIR)S(91jcJ4>A-xCEnBB9wL?lVFyhK@zY
zHw>$#zac^{8dGyt5oc^_>51W#SIGno-ZI(`%c(=5kOOlDxw)?iM;2uZ7*73tZy(*A
z+7@Ki)I@G>j3Dx*73r|i3b<;{BgXF*nc>nf4aLE)6MgpbTr2tTl+v^AzKB#?1d#Gt
z4QloTE3Q-p56d0SkRY!^#ZwoIc>Us2E<88kXJgk#)D;_Ve=n?6d3hh5QfrBP=|>o+
z?q7w-B)l#8p^v_AL(#S7Ogk9!<f)@>vMNwtOY!B*UAs-`dxFV($q8W~s)e(1x{M25
z=$K!0vi;C1k&;2%6SJsx#^)`aNlQZYFE8_5@Pmarw*#LQu42O7M9|hT2t*F)iOmRB
zQp^CBSf2mUf_A{O5cjhe2Sm)Bc!d(sA3V96z2!gLtgOz}I;`h47+C<85S*CcOrh{e
z<ga@an=xLlzsSvt{cp|Uo<EoaMW$}>z{!ar(=7n396TbdulPs6{cE@=Oo5UnEcv5k
znP+|LSI)>v;t3do?iqip^HHruc2P6+<ap-qfVlHcqt9e}ny*T6n0wu8ZgpN>!fpka
zZF*VCZ?Rfs(R}&6U<sMIRzn57cJDDzvo3yedEy;rN>MW)z3L^otM>UF>vSAcDrd;#
z?hEC5;dkGWpl0xIF{UMd@0Dnj9&p<w7JdR*)%vCw*Cs4vb|~u|>YI$JSraR|;sxyb
z4;@g9`sA6!y>MbJ8sE6oweZ{7Itv`RG~Yfgyu9oG*NB+W0LK#SZp$E55lkxK9ihRt
z``s-(Tq18-J|J|_uU;~|iN$m|L|it9Aulw)Qupq5P;64OXyu`u=THDAKut!PcV%O6
zxE!RVZ;N}+QDR+7WxP25%;RyXGSFEJ8XKMXL7mpaF-?t}?xP7~z!*hJEA}odJ+26U
zlT11k-szVs`{;fJXczI5Qh|rZj$<~;_khj{T?+xN@75obQIYpuMS<za?TOis_`KiG
zm0ECLrT)43UxoKyxQ7wmvc$R<S{sow^f{rf6{o&W#j)$gs8II7sNstGqxSPRN}bXb
z+clI98Cu%fNwjtkM=!~0M6Xct|C?H_no)+fF3v3qNVW6@*07nmp`oq22<-+XD}4iH
zIR?O^a&EEc4%ht3Cusc@L242h=Y2NpVlNBpwrYf5$Nh|WQ4;>crd5D30Q#7G>s3eI
z!1Id|xd%~BpKuz4RW31>HGpTo`yC~k(^OL8@T^j-iQ)jDF#y2TEz{XQNz)5*e0S-)
z&hR#>8;yFkdDzP*uW%~mk~UgN5Q~3KEIuCzv5M#9MdH}m+gsXLPecH|A@Ff>Xapo#
zWt-gYkAIT$tIhSizykW9<Et&ZjV}1F(*KP`f&fEe#wO&&cC1$LaI~SmekCoXo5}c-
zb<Uy>WJ`X#jVD#CGr>{=m_OrTiIA6k=Y}$=n%|W1UXW2zrm?n@)1V%SpJ+&)kJ35o
zn50mg33FvK-3Bqap74#TDVBdNpl|QV=Z~Itr0wsXD7!AvN9a@T{k<XoF=U?H+I%dh
zb>mp~w*Vo}%BOS7(5e3|w~0ljfW5|v0;z?s!?WLO0qZ_zfjTlWZyQW_nQI)_FG0r)
zT4;MW=*w|mLMkKPoq!F#61Z}kkSUkCFCHfEO%HLjU<*{dRpsS@ce^;)#aY4-l-AOR
z^Wn65^l{sXL*|t|tzt5y#)M;Uy2fty;h{-GN6{WVd(|;qrja;v%ARoN($uFZh7Rtz
z1qKEp#77Q%@9N%tQw}Cn`USp|#N67G47r^ito04nip0!UC*+8|%(S{AC~U7AieUr9
z+>URxE8C`v_RJ0HO%|?DdDw$`E83A#9zerU;V6P7_pR(6HEB(A57wz9D%Vy=+mn&X
zb;c(wG{(>T+q<|1$;5WBsazW6$*Sw4X(LL34M-kL|0yit*sQcbD6gdbCSX53aKr0V
zagt|{f&fi9&D&G{+kF$KYC`AFHyQu<k`e=qaSUXZU}9BZLoY=n%7|P4*6rL{=q$AV
z^pJrMi~xqkc_qi9^V#1iqV3(5eBJN|Pl`fW`|2_Ob7)ey%jd~6UK<8$wn=1>Af6kq
z9(=opk@Grq6DjxQmy^xf*y@E@-SAGB#YKB6-l%koCO~|5F+9#wLq)c*U8o>ktuazD
zUa6X_K?7#>tb;T(qbs1+>{32{tm@E}E18hrG22<9I`FI8bpTPo)v^ME!g9lEJ4ofV
zBwH;n+l%uvRd1^%cFgAIOpx1nFJ8R(S;}}&Bo1pb7JYE<vUP65&8I%ctk`4HmGyHa
zo!{QFiKtJ>{B&|8QvR>>3mO!Vzalv?o4qtikIN@1UGof`v?5z51c!4UVlQ?=Xwfn8
zoAB|k!m$hKP*<K1HN93|6K^f|K2>kvvnu{kprdj<wid1QUxVoyP;j56fz^^_<imSd
z>C%4`g}MGxzghIIJ(6AkI*v~#aY$$vAxnnc#F<OOb#zz2;b4{edm1YDL%o`hP(g#e
z)>SsQv57Egju^zj3k3>%@`GDjk6B%timOxnr1`_f#|?TuvnY_Snuv*sNn;~qIsOim
zFUwU_NK&~3rP*hBD8%+a+cHL@DxQHkg{^n{vOITVNvK!PNTF(`@XM{q%xkT>XT_UN
z&6aqimYL1;v4Fy5!;rhi9IAT~uIz?Bi#*n7s{#L*=AA0ILO}S}UHm%tX&wy1LKnC}
zk6dE%`9mB5v@k?C;coQ%h;baNT9rmfBR43R{{W@6{>^=J3!oW~fUH)C)`B7^CBE^l
z%wNT%GRQHVzkGOXg1UEL!yiQ$DS~ULZ@cdNg~Dy@<tli8KkdWIPy>GWVvPFSTy^vD
zc~BHw`>87C?5V+7vf^^qBi{>^0+t+TRVfhd_^xYAcBMfCTZT|`K74)Lz*_QSV2HE$
zT>-`@9hZZfn}vmz)<f6`P2JzD1gM;b!zaTD_qQl`6#=+@&XB330m%W@u*W?uMZ#x7
z|HL+XE`|IGd3iqu_7f5$t<ZsYP6@9f-Z9^mzJ3lg4Eafi;+8R9#w=RS{^WXDvS^Vl
z@U!PxSC7|SFgk9s>?)Qlc4nFl4)Qzxxnj$Iz>PvnCM;@`T{((>h6THJmEUTf@o*e(
zUwcxl1XUybsCTjAW1=xKGS!V-Uv&>w{p?<!RVXzf*%MFuxgf1*UHu0b)0AV3o;MjG
zkCu$GBQV|q53f;KQu48ZVRT4#)c53@6V}a}CXxJ=N(=D`zdD>6ea<JrlyIJI-N58N
z>EkY3NeurAH!Vr&h?Wuvnlpyr%JMZKomm6s#e;EHnfc4-Q^0ZH+a^<&-{*e)_=z>2
zcyx<&lw<NE7*K5BAt-Tp^0&Z5LkE@gV8l4)@8~KblYX3AyGkLKz4CJS0B71JSh4my
z%_7B*6m?6xFvEZ>Tl=f*?Dh<s$_7RYo8M`9VbQ#+;_rED{~bE?lnB%;<%ZI|(x>cC
z?*tJ~)S<{wytj_@VtO=oVB|SmXY5hR%V$~z_|Rj(@#?!7EZs4D@Unt93f}QF3V^iI
zBDE>KQGSaR8*o6%PSWX+Z;D>OeyzbDJRH#!!^n?@_@)UoquiBTT*p^cogS!l{nG+~
zEi|z1Bd%{o^VBE^Sx^U5>RqbhqWtxhBTRe)|CM@NR24X#h3dG#O#x*jXVFAs_)+w+
zm8C1#IkA0gi?kHfXw?54TCX-Tty@e%PQIS2{6k<SpMeIv1qRVDz%Qvrb)y0y)T*_M
zK)`78-U6Tig+JcwoZ7}VoA)ut3+C7|DPhnH^NuqE*o~B#jZcDnKdyTV<Cj)eo(*lN
z#n6RWVeFC}Y&y(;RvCLES0ki-$=HTX1EsGmxOi13O=Fw-C*LX8#$Y4LITQ6Ku|^dX
z?6u+nkN<K!!YnXG-KO)A<bDEbVfxkvb}Hu7M0>8;it!@1=zbiU&5xAo7W;&p(_H)=
z3j$$un<f=o><$n+d`+?xDr5~$wqy~cSL6}>AOD$#%iu^*=)HZB*#?u73)d!9DqnBb
z-7&7Yrv))}YhFy2Nl|YGe1SZaK^-(ODi?G*-a+d~V46WkRpv6dU}9kBsPn?TbkO&e
zh_#BTX{K-I95TEj`3*X$pDbZd6K~CktwGH>&;D1j6+_$9hV7NI?4ax_&JdTNT<HHf
zubQwfMfzYb55Q)a4e;2*bl<{*V0&@qhLoCdw>pZ+d1}tgfD&*YaG%86rKa~N_pHB+
zwJ~;%b=o_;D$8y=pLN6gc@K4Lb`U%YuJr2jp8~e2KFcesfvYURShP0+K42P5fTDpi
zGR4};fhSVX5*ah#d7JUkQFT`fPNnKKnOq>4)GT6eZ|`0nM!d9(;Mrs*vJczY*$Hzh
zXfMXZ4UhS8D#PH5`Wseg-ez-ak`j#bPV606VJKm~65C&IFDYZsNrvo8SxO0vE_u=*
z({&-Gax(3z>M57nAg}s0Zff!AWO8<PseKDbA^dWJEzNvKs>NMhTcGS$3$=IFSz~@&
z895S6#{Ttwv^pSoOXPl2)O&IzR0s4nT4s-2ZvGJ#vX5iqw|h5$TCyYN>RzTl{X?ho
z=QEUe#xv8|pHBgl4EV&DPLHwU5Ux2;YNBqG3;A-3{fg{Nqu!Ew(4F98FL$*+=%4KC
zE5(Q#H{u6BrkBz*b%sS&Lr8<U<KCST8HoXX5)NtH{J(+rGUGx8!z~OT=XoIp&{}9^
z{yv8YU1o?IZi&0Esd=xs@rA~SguZ*gS^Ju%-^|_x;V6Aj=Xq!YYv*jCGgnk5!+lg9
zU%{4p0<@csV@3M-q~GG6c7U}GS~dFV<}Dre)kD79(7M<4(&97jJ>d@Pb8$0viDGWk
zO<#5u1uHJm1{XLIg}eu00EbF{x_Jxb?rHE!tRGFH!l#!RZRd92=@ps{#r=Cvx;x_;
zGq<Q?VFOt`3}CMnGR6y&!f1-k)nqcb@@ZX8Xtu0`wI;*S^JDggOLF`M<auE#OB|av
z0Bt8z)3S9OPF0}%<npBW$%hKY6M!~Y90&tD=_C`WJ{n-(?Ua*<g^lTa_rJ#4FKmZ*
zmA+%=<sxkPev0|$Fk9B&r}N>2ZPCT|y8{!bQY4ets1bLud%(7(q_&Ei8S=A<w3Q7{
z_~#O$5{ZC(oDma19i&?VnIKwqy`4`j%4#he#>a(|=NPF4GU>s1{Zqbk!JQKaP8CTd
z@N>88U*|qbq0|JvV>`6<C)f?XnxW8e9lZ+a|M87P5is!5%6qVX=Y||?VrfeO1yNWd
z#C8nn{e1Qa!P*%TjDlON9Y1Y7Umwb1z8HR#+=G6RbKH}zT4SmJQU){{3=lx$4W~I>
zp3S7D@6jfM(u?mys^3|>F4ETb#al#3nyNny?lSeTKeeim?|Z|eFXUnUfb5gn1a@3N
znRCOtE=mQyZ&|4n>p`c9w&<?slAaul@il*rd-m}X=+#95D1#EOlWpA^VyvPa=eOp(
z-o~M&5Kr7SdJr2fmh^9dk`gRjw!ttn*psiHXs9D*tUw&ac>Q$5X17fGK^(}?pSO2(
zocDQm{@e4wgL|pFhh7)W(MW05KlmX_u<HynyR)repE;SJr764*wSNj+@P|+f{9<aS
z71gc+oV$CuK0S52i1)HVmN{{0vK8@VL?}AwS2&*ne3Ql22O|vhTYN!~8Eau%QQ{^n
ztM<8vWMOdzXt9@LRUMjBzsF{L+Uz>vlPmNW(t*B^C4K#i(5#G2mwx<QICdTXGpb)r
zy2ek$?J}IJe(D%Y3*6#7sN~8Vk^frn65em1PTKh9o+l1Eva<<hYlDu@7v6*qxz5LV
zI%jC_W!13xD9v-j|I31h^{<omgRH?N|IWGAtiX+Ckc75=0b8CvpS$$;!R9hEe#y(R
zyn;)uaSCa@)g1ayG`}+Im}vNM%&aIdGn)r>>~uGhFdznaETb0(axZzbLgxd=g!k<<
zX*{bh(n`;ce5tpN@d^CS(8}v>0b<xgm0Td6mW+vz8ZRw)t-P<a&em~LeQbEVY_0Y{
zfhLR;aiNZk30ajdif7HJ3?EWa^kiGl!$<||x$Po^A)#~u2ESlk=4jb%IqhyUEqmg%
zbKlG{?p#K}7#$c}?_e3Tr{fF$CZk5AhtbIemU(}6)*1QGQb|Qo5o_<9&h3AC1ZqS>
zaiS-gL|FW7fFdO#E|j|mM!LLTYl}n@S)}c7%<dbA%KyzpL4WY!KAV?Xki|nGtv7=Z
zq1A|{)HMRBa-Ex3sYE;&zieKJJulmKEK`4&29$s$NFn-}T;b6#YnWPW!M>!RaZrz7
zpcz6Zq^aK&Aws$IGZne2GXYRy8-7Pl%042j%L+oxa=)TT)2T&my(aW)u#)=$wbIY*
zuyRCYi|N<f9QNH-54J6Wpk6#@c5ZGPWbS-Xhxf^YS&v_3SFrmeNRcotbLXy4MYdo3
zLdBn}_Q_R2ae{$rKgyiR9}F=hD{^K6nFDzMq%g_VSr;gFtazI#G{5&_cKz#2XZ5;U
zYlqUhb0Bhj+^*Lo{3potIKqHlN9gVOwF=zHcUFj;!w(?9`qcC7*2|4|Y$|ZK=}uzQ
zSlxlp>@s8}KhH?=|4sgJ81w$)_V1+rT98%wkV4Ei9kK*iGWs&j*haiS2wKQ#p(k$e
zb`r;0GUL?~PGLM6dw5DelW0_xNowMv*#q|ACLL~y7w_=Y19=<;$i>OrMNc`r=NYcG
z_1|yDrvdAIda~v>+|+dQ`p1lgO27kJa-XRAZhF1iSy#7nVa(9-!4Q=$^18?6+z85)
z8$6dFWHi*-h9yw;cpAo$rzH(GBAE-7+0HH@Hr)2=tUg`E&ud|RcqQB~gbBk9wt=o=
zTUY_JC7Tod+!zBzvD~ol?uX;!W8q?ACAu&NDAkZS^+Aa97{T#uh+{~nyUA((ahzL*
zi2JJ#H-Pev4>rhwC;;v6nSQ;kch<?k#q8$Go|R1w_mR!n(M|Q)Nz4`Q5TXf{`5QB>
zN7}UIUuzvWQ~NK54%W;1Rr8=Z7_WwdKY0f6B>(u|LxtiKgVPMvXaBb9d&rDP&URKZ
ziU5uGQk-Wa2M5^Pk0Ow-B%Q}Atf`k<d~wQ0Q;$kS96J=pdj0%2MSv6mAZMDuT>I0O
zjTV$#!<Q2%Zu-~&dA)<O!?VZb@3NjFa_%bS6#wauWq+0AATedzj`h7;;O?7M;*Z0;
zwgKn!p-``p8tt!At3<U_Kp}_9D7U_T_bGM%u?YI$+q+k}N(5(a^3QcIxgTa@$9WH(
zeOiTS?_Q|yyD=xWTS8`={a;%~YG41Gjsu*;^_y53#5meYxpLV*Db}cFah|27rfzZ!
zf7f7f)_xu<|HJ0#yIWwV8R~Kekvh1zm;u$pXG7>B7FvO;JRRg}G61I~c_u@<8?Vzl
zn2cT?@%V3(jKKf`vga8vnYP>f(M&_|FsfP-5w2kn!;0@<?j)L``klX|O4T{jOr2!D
z)qZ4>O8D8?bK^DU)Zt}o54^@3^NgwfE$MpB&gD-XlRaS&ar?|lG)udtk?30tJt0rW
ztSIbPse3ifI{Ka_;W*Sh#$ztedh$O*Xf&uSsa9aG|0-ud>4v>OEM+{xfS(-9eyAX~
zoP1BRMEp}+J-NHrc=d|+2NVS*QA=(nK$?P#Bqjp|5Zn_o+ja6;a9EMQN&lku`Sa(h
zLYOOvxBA4veL(R|45%r-dVOZH`?gyYLQ6TFJ2>*5Un6O>1>?<L=YinE5F)A~-gD_u
zQLS#P@gOR2T2^3)hU4w#-&S6}22Sk5-xHH(&Lv$eb)q^n7DTifm&a!tu8JOay4h)t
zOW{3q+Yn&?a5aM^LcqoCZdOroyasfTIr1To6Ipc)GjlzxuB1=LOyljwKwS>-i^~2G
z(bO5>4PSN1*a2X3uIL<_epG6^h^V}<tRJc|g4pf>Jbdj8^7kWGmxf{fF>2#M>yFDq
zMnjrMqwgu=sA_b3FBH11-;3jkE9~7ix#>mw0!TUpW9;UZh}3fjm2ci{BZ-7JMBdUK
zRn5Nom|dVD`PR6_;?C;>=hKZG`2K<6u_5*4AmB8|d+<Y$^r!!uucH0IXzR#tk$Ut{
zTYEVENyETtOe|P*2IMp`Q)kp&J(tQlKji>1sV0L1eYX`MM2YlHJ2lqgvsh9#jjcSX
zC*WQxVt55VXr{~cD|)>Wo!Zc_hy(<(5QchO<`SiF<GK8^@$1BT>uM=2QuRi2#&mwG
zAE^h&ap@P7stUwn;8Iw<Yfm>NgCB!oG!+a`hJG`n=w@SKA4Aal-+jLNV)8t>QDJps
zO(&5b(LFffY||=fF6bol(-I6ue=B(g4m3n_2zOaaX=62fa@XSbiIaq-c5hC`CobZ_
z-@p4+rox5Q)241nYF{<I=Bweyx3V&oSmJjY^;GawV7<eI;vGS%v?PSr%dUU=H-A3F
zE;)NGCG~A0J9hluPjqENL&K#NzvpZ7Q9&=f1dtc_IFWor4>e#@vK^sO72c%#2~k?8
z1QldGf{<#k(<60NypQ*Fsnj`Ql@53F`{u%roKo`}t1Y>W7Ki_^uYaBULp7_u=eMez
zt=49|EJO{~|L}^YO06)#yT&2+TI>QUdSsfLD=S^~tHY|=WvVU5yq;pVNx3CR?z2w@
z@Smf+_%ZG>+LO+a+7FV!bKl9OG1{=m4vk+aKXA<PY};2Y&LGphY1{Yt^IeH}|0LZD
z$hS#{A>*b{8bb?nVHA>j72l(p6DOGsvVy(L@Y4_|CTlu>%koOKzj5`1vJ{7v`{wlc
z%^LRQy0*yV0anc)9XMXz-f?@Ce7OI@$VUtg4vsP}nWtFT3LUJogs^aLQT|-SK|#Q#
zjN+#KfIDbwv~A;hr%pJ?a$T}UfvMv_0Omea_vS)<f{QRCoeh-^gX(%(!fMO=IJtp7
z{C`$b50BrZ0zwIz@X2Ck`k|J>!dp93_{Ovf5qUngn4>~A>O>JwA(PTOX9D*>IA0jq
zD6ymB16abB4nM94(nJ?sZ+f)&Nk6`j&ZGtSklC}4Ih;ya4i#|z@9Jo1XdHP}RGw!1
zPt*zX!!7A_sOzbpY|YKJ3ViSp>?JY#az7Hr3RysGt+d4Z4z5*q&W;F7Ada~@wRLoM
zJk?Lu+AGvJtc;;VF*z_`Sf!tw%unwKura#^`VI>pnRqhousz?1W;=bGGs6CW0nMCV
z-1BH>@iS&X4swAlvGN6#AZN&$Q0cSX$WD`N#xekcIQ7xN<0FM!$Mr++T3%A8wF>Tg
zyQ_R9I%b2m-ueqH^OUsqz#WgM$~<p^+kKh5Bd$d!{9t#LQS|EgbVvc{_t3;imCttw
z;zW4iJLH|N6#~jLLbaH1ss<82^K8EAsa5jxzll_s^=kQ6l$#D!`9eL`e2p9oNjsoh
z+<gyZaQ;5>YA^mC3Q-tL4(hG*KpIeO<AeAd5y^^la?*kW9R+B+)LH7Ux`|^fto(Nw
ziDVkDov=#bUjCXjUIiUk|KlflEi)_?JvDSO#jr|?`~#Yy+;%CB*UFzzN2jNJB7ei=
zRqF~4Gs6H2i^j|5mP1xW%2d<7A$x^1cfhp+OM2}6D|)sLpA;QYA2@ps!T>De-dV7l
zzWx|{s8c=}K+9_9c64;8d(hk3{!aZ66idfdlk<R|kh+TQ)x+q0{>bow?#vrFC7Y}5
z;=ek@UdtLyh=;jU`fcJUoQkr5&G5=!tB&7UZfH#wJONuF#nZ)$fhDF~hf$gFJ&>fh
zd|`Yrt7));EYuEmvzAbXa>zpGxkNknzO(oQ6wndI(?+ghBerfXKvI~jD=$SGvw0Kn
z<l0u+ff>lVdCzYbRpN`k%LZqceh;$v+%T&coKKy2a8LH?Js+~<hTuh)msB6?-TVOM
ztuX}>N~&N&;r7<>9>L$Eu*&PA0YL1}iDMd6NAT>H(uYA@9^7gw>&Y}i@L2^sIk4O7
z2h&!78A+@R-S14B8WLrcbX5(Y%YL^nO*o2p@Hw^JPPM<Gr@5CdkZk4V?j6&G1dnM$
z9`lwLfm}9ikCp!w6IUjpq}bKkD2wFbHE2~fU`i5Ic~D=Vd;K#o=sHMXiDrL-Fo+xt
z_KD5}4<#*aBeG4*&9j#(aATS0bK&u~=)QV<5V~GO=k%%N{E;sZTlXnR!PLvxC$}$g
z*gQ<mnTL)qE-mFyn{B^vDT6g!9}*=J@Lq=!rTKIbu6B1QiA0`@z<=B(2{Xd>V=ECi
z4wk{vm5#qB%W`G%74Z1IL7-?O*=-CbB1L-ae`PdK)aNGyVIzt&<;CSU$Rc-eckg`v
z?I(e{S+5D<4eFP3)?ap8VV^!5StW@po=Pp~uwRuGVd;1dp+}yDMwLF}`{~8hX}gc^
zii=Z}%FTW7P>zxK>oU4T!bE~OV;|oEQnGt7&v3V_tv~QhN87N!!$LzO38YsM#*>A?
zS|F2jJ6+LU+ozWC!O0gzm(X>FnmG9W8FINrF?D0+bWzxS+a3mSZ`<zC=MWdk{c&4Z
zGRzz6=0o`ZKXAaTV5oYfvy}Ehcaz7$ld+;lYjA-bR2brmfgj8NuI7K|=IrL?wnq1}
zMRy@;=JlMk#7CPp&};%TP(-@>GS!a{R0TGVa2M>?dVgL^j&%iU=y#ng`8hNEGuVRB
zg6XAahK7b-hTw2HmcvC>gF7nUlKMJ9j`MR$Xt%77Lsgwr?}$J)upNd56V{*zeYWzz
zmSmxfOK?QDF^p~07c>`sc8e*>JqiTt7O~&!pk)_(xVf#gFuPnirvSW?y7!H{2X5__
z3kS;>Z|dsk<E5ThF>AH{Qq+H691i+^y5vLloA30}tgj$sP&4u&bsSzt_)nX~3wlEW
zm(Qk1`jFg#*^3dx9@mr&o5kO_imd=cO5CUspqlhj5wh;mAhl8I<?;EvHS=tS;}+uy
zluB<l%e$weFUwm7wNMq{+&56zo_917jPZRLFO#dd<Ho$7c&f(@jx~AF1*~L=dA68+
z$!YsPxvmZ=YJDmuqBLkWP$_-mZF*T@T9E<76P0h6;;@X``DI!77X`xCxLcMyt0qaL
zYsbt^!A-3t8mfJ-trEd6gl?8OS@bIJBu&!ZIn>0|bW?i^$C<Q-;h{Or%Tn9pP*Wlf
zMofmpN<x^$wMCr*V+g^A4<BCd-s_yIr~ykK>Y!dE0rrN5NaiO`XxzS-2wfHPi9nPB
zvj=PyJ*2!r_BOu{=TxNmTRL7C8iuF{ePYz*vUlJE<Y2C<t*eJ8DtGg}IX`7(-Q2XX
ztq2{h5)&B5F-gy=>OAuVoO43s|B&5@GP)jP;E8+5z1vvTJAD7~aqbU245!h)Kv%H5
z&#?^e&OebO05IzH;NJfHY2ewYfjN=)Pbd1P5>X`tYNeJr(T(b{k)lKowP90oAa|<p
z`>zZNs6!r<TdL$$xo7E^nznwM%fIc)jwTuO$K=cVV7Q!2<Y7mA=tc2Kx_z|KE&Zz;
z{XdhAZY9`(l|->mYIX}&qm<rK2B*ynx>9hu@<0OJFL9FO|FQL!aZv{A|FA4ecOyth
z8gvMfOLrrkqDUhW5(0~WsFaEdl1q0eB@H41QcEjH2vUo5_cKd)e&_t3H-3Bp%ij0Q
zTyw=Ym{7uvTN|j8C$jRtwSnH+?lmOXqd5WL4|a{%6t-9q2eGchlB@<&@@6DLpXCpN
zj`mf;W1o;C`40%HZ*6L%yiBJh0Hp@I4U&t%&<y{oWq!=23K(E7>KQ#VCVQxAHTCsH
zjK`M+f2Az(ccSg5XF-$|VRJ0#@wBVm6YePSTDkU$)f(jzuwl;LBfjXNq9NrBv>Z38
zXlxP?EiV>ie@Fw_`nC5h*9k9Ickf8$esFk}`1-Oe71C!)A=N<n{#oz`4=loF23%`X
zUh1g2Y2CjEI`-+^;ZpQF^6eLH_t-Q@;hu`7xydn7tWRJ{mA=g6GDF05wJ05#rz?JY
zq6=A;iyKrA`O9<=FTaa_kcGRJO9w89=N}rW&09Zr(i^GtXM-$Bq=ifRW?ye3UJTXz
zf&p|<`;{0@W<!MBVuJpE9SSr`CU)~GQG`gZV{mWJ@A&sP#!UBt9FaJr`dLkER*f(A
z=b@9w2KxH?RjjZqw1-(MVS|C9`_#L4Za*m<wHHSt!X2K&Rn^p_kw*^)uFn2hB81*r
ztX}B7%+-^|Pue!rP8V$3Vx_PhBO5!k6y~WLU@X0|2AZHA1oK%Vu0Ym@doYC+c9v-~
zcSFRQj;#|n!o@1V2FEUo@?|%&Xy~3utN-xhk<6E~$r50{sKjtA<&4x#Hzm%eA!cQu
z1vScI$~;H)nZ!bZ2mZk{tQ5$#qZQ9)R9YJZac<-XCeWIpC;Byuw3+L^gne!-SPZe_
zdBkInMPGBNoGw1td<_s(Y$KxT=)3&JRF*~p3qzS+O4w67f$X6G=&s9l@E0}Q5cbAn
zey)WKlnU664>d%t->^N+tmn00{uo23ExNJd4~2`g!`mVx#i4*>PchF+!T4BLctKo1
zYa+6NO;}Lye~tq4D<I`m5dhP>zcV@XP7J4xGqmLc+FP1d)yfy7f8?%k$4G^3TOiec
z8&EmA7#yySgID1W1ttv}w;7mf?`z7hh0E`RU&&tjV}I*@mX!F;Ps-xVkICcUE85xr
z4OxnTRoo&ajGv*%y53@!y{{@GBlA)7Yl<*C#}uql2%}gqPm`I(j@~=d{v+ABoel=x
z6MZ7ge#{%Adw1#S=nM!_TYPXY^-+V{*;$PGlu80)*2R$Y@$)0XUzc9$xE#mYC(Lg(
z!vGA1qqbt+4Sw@^Dix@QLpd3F4O#)n;TBgES_aO9=)o9q6aHMddauzBPAF18TKY(<
zkKe%toe%oSa_F9446AC)yu8I@#h<Qmx?^CD6tXgCi@P`NzD4vvFilz?c)ocN3aP59
zdV)h_;#%GM>?lTNF&GVazzByP$Ac+w@HXq{Vs(oRbqm9&wlD&y>ki-MufQ{jH)47H
zxvdZRkM(hp9I#-N_i_z;JQex8#Z&Y5O}<-2_dwYfAQ}l)gOFOgW}21=zHdX+{d1Y<
zVc|kI*oHnwKhYG)U@XvJ9r2V{wGWnyP_wH91$NZOtCyV{ihFMz1>gGW;1=<CKJM@_
zb*t9A6yCl3M9q}%X|$NoGPybx&M`e9ghf8aZy>*?h(8ar83qW+%6TgrCRR+gbJQjT
zq$^V-m^b3@PEdIh;X?bUkUKH%8y;&$#9*I*rvG!ONAHr2@A`H^UVyy(RqZ8GNcD$R
z+ZEYO($b&D+v=kf&#e!ojXvFLU*zu$Kg+F1pR2<d5~FkuettkJ<y^;`7kjb*JZ~oY
zZud7`=Wgq~$Xe@QAXa_ZXS@3rK2pqDhh4b+^K)gF$%cLJo_>^Y6Ztj3nVLtTro`=#
zzJvQ#C-;#1%pj+SHQvKuP&zRT-dLU?ipW@)2jcZU{vo^k@~~l+d0v~g>UpYfNxnu)
zf_2BUhUaU3UfW<mAvAH~k6p6A{j4_bmoH}E1gvB2cNQ5HNg|NqM11h!R6z@9@whR`
z&s(fuq9tDSM%0G|_(2!VbPn@34py`{8`s{Z+dOgUx7l7kF^q_fXUy(eTc{c0n(KG!
z4*GFKv5H-mCHFos`Stq@P4W~Z-geb%Y?&EcS{?*viDeq;;(#0b#Hu#ld32t@Dm%HE
z!e{+uubxIdXa#rvUIIqp9#;l8Vuf>V)_(CL^I19cn_&L)epvO-J-orc<sUa}a^PZV
zE&Hib4vUA<3`)yR*BWB17iu5c00X1PiR#H2=VgacW6f`vKTDQfU`KNuX2o{yE?1Hu
zfPiMxKe-Wo_hN@aFo>+wQzU|iVn&EX6fSEHY$<)HvG;T|UmX*2&LoZ21I6|1?RO<V
z+g)-20zpt*KJ668111r}%;S9?X(GF?i`4#(00+UlZ`ZURpFn^-tFTzl?Xr`{KEgLJ
z7<MeK+!-6V7zCd005~if&R9{V;w&z$KiVx?9Qh#D+^hYLU(cM7<b)u}2|9(kjQgY(
zfFQ={f0_7ar1aPM`#sR64hIvuOAs;a&t?ZlbC7HCEHzjjk+aM(twni-g<V5+T;E8l
zoeywSheM-GN~~nUmV8JXq(R?fweM;NQ%9R>ub9&fF0NmiNo<TS&@7e4hZrl&ayT;4
ziwlgybc{ECpLhPs8Y>4xUr~9mN4@WX4@DJuOZUzG`bDDf{cJk{@%J%OVKZm-;`zA!
zr<0E9&(xtFPdq1HQr&!StNU!B1Lf|Wxxg<*J268TGC66&dH?iKA)y1DQ}3?pWkn!A
zjuWKbQB}AMR6n<#c#c@;o11q{nqOA=bT0epg$v~QKJ|#$-AVG9{h%XF$bs4?GNJE%
zmgat~KB2b=;_%oECeqHIQ+qW9!<po#$mLHwXjd6hK6R@PE}xG*c9@6Kg^?H{pXn=}
zRuCyIkr=uj&;=?1%e;aFV7^(-GIA~Fzhu7Ar@kId6JOHz>v4|XUK<Ily$*zOM7s9q
zlX@z4%%2*fe*`FYDfzla+H5C^d@j!l<J3$Py;{ZofdB*gl)A0G{kDmx6LB?TY{&4e
zRcz-Sjt_QxrqVCNogcw(Dh(Sn<R8=|<CoyStWak*rN`1N;xe_bYaVQ0D-^Tm0hZbe
z)#Jq*;t<?gUPRC{jz!vOXXlk|zmq!wr+W_8sDZIWqU3m~zNhAc|D>@X!gKQLS|Qwh
zW4Fju;A~q)!=uszQ|Z%gIW*L{Kl$|1mBT^2L8|`ef&(f9Zw^&zL^pTExkDqRO3}P{
z@3pfV1<;U3w;L+(JSNOaD!1!~e^A#nuPqM&%nPuSTONacIlsSfzZ$_>?XdVYd-4X#
zct#u@9n<TtKZv<ww?_Pa#kO{s_vdAv#^c@`s;~9!IfF8M;9~)mBe1_wLEMw%u6|~a
z_e!)7-3=`hL`KF}`j9Cb72d{(AOde^Qt`hf%_5k^&p{CSzY{IM@l&yCc}eBzKqF?p
z6Zpq(Ne+yZZVn-y%;oLgm%1av587PGjaNY(oi9|fWjnU9(~LqnFiI?sKY&LNksAT+
zo*SX=)iPIG1Sp+%j-5>IW@ct8q3Ra})x&Svu1OR+=9lw#yzmg9Y#YLAt|08NT6+#H
zTh<(C=MN@R{G(Owg`1Q9eOL&IJn?v?W2f|0{`|6Cg@{E-@a~!<7Fb8d7{`?HLM$Fw
zSmLLVp2yr(a~K02&t~%5!j#MPG@3y&c!vr!Ul~dAR&zR%r2Ktl`3DpkaJF2z5jOkb
z6#=0Q=MT;dSorUD6<J>IdIJJQMKPob@ZiEdTw3^JiVG;u5cP03h)qOzTQ7VdnE~DM
z_+2@u6F||==y+HAYX|^y|79XF{y8H3$yMN<`DtSocx)EUHKe+~ReSX45q=HMM=4cI
z8g3$SVpNBj73e$*3i5`MA5tQB7R3o@cz#Vj`0y4D$~f;qo&FE_kc|5jF3VJ_EGga@
zb5=42T>Kc1Zol#=BL-V8G!}b^;NC*~A1pvxbw&x+Sp=H~4(&%MU&2rW*p`zd*^`*e
z-=pN)%Ol<9_NpboG!+Xp|0@&7wbZBQ=|EeIpT8@zOaNrJp9tgMVOUXyqe31>)+47q
zgJ;Kd2DFlJe=s9rYPgbqNESrhkp2jeXy^HoI>r*`jzM~3koC}ltofsvU*AKi7|fz1
zoNkDks-E#fn7J_|uPxmz=k;{>z1V*P9?C+|2Dr7%pT5iGcpo3`O(6GLz0eZiD){r&
zU8Sf-Wt=d!y14VcPXjbQKK?i}0lUJ`r+EJk#|)I`VN!SLapv^Tf=0(Q$oY!nn!^ru
z8Dxv!;^UA%f6}Pw&&a~0@5g)v$8xS_VN#XzzB{x`^2!5Ep>8Gez2n|J;Y;Wj3-IfU
zc_<d5yXJq0WHbEuS{LGvJ%OikVs=O+@sr|QztvcW34*M~GOPj1St9e|np;Z{BQUJ^
z?{gxDMYoxLE3;#;LMRn<p2qTpjDH_DiZk63azbkhl|mKgP1XugB6SMR34sX`KI_V*
zUs&m&Q@q+HCi^~1l?l@+_8ylV#CN!zrvZ}>x-$H0Xviz!m~QR(=HYB5yr?c9;OD3N
z#e3#FGe3D>rBizE7b-03h_^N@hU_SZ%W~*LWoeLBax-FWxq2;E%tDH^fM*zpDb#q0
z*+wVMI<?=z@@%$<g)3;8I5FsMHda-A%zxH+`VeO1*KXb%1xE7yey=9)NnY#99I%PW
z=Xri~7foWh8-u*{!dnY(D0I-(c|#yjkqhD86wX2%ggU$9f%@PMVZohscGTZRNwX=z
zZrLC2yd#U|iU;?Gi|8aW+KZ4cE*ylPk<yBPJ*Z_!hU1A472xrjJJ6}amSSy$b4}H#
zlT5IKrzD|IDXg^jCY|(d7>~-h=xeA%d_eylKWJH`Wv*S|TV=L@CdA-&L8U(HpikGG
zT%P8`Cj6X~A@)Q^Y)AEl|2i^gF?WxNe2-j~^{mGMLiN3rN9*^;g1z#NQ&yMr57GI6
z6E~uwixrTwhjLFmN=H6w>5FgwDx90-1yfsDU|fX7KsT^IUsP1Y`Se<fzy!r-rO~Pv
zIu^XhBl+y>&!#8BpIZX=qy3{gM&>6qD_D9~T+mNjSQ&cn+4FTRX9X{Jj=XuN5ce9`
zVb6I8Zx(1@BD7`rX>wk^(E}T<hi2&dfc|bdyW)q6QSzH^bl1V!yv`3roUIM%HC|p`
zod@v8$zFv`1(y2VG3IUJQMdDm{QG}=wBe1iagn@TUQrRCHOIIo8Mx6v2H7bFLN)y7
zQhp$oU!g`G@3Li{D1_lTsrhGgH_&<VY#Wb4{<W%TjbKX#(>MXKkH1iAo7(>&A#QJP
zH>R@f9uUrf4WTgzS3HQv0XDf2penEx6EvItCiLmppyxA<d>Bb9LXM<ki=Z*gxi|uQ
zFR~EOfv+LL7guh5v!nH)5NVU4zFB6pg0B87#1o8L8oFv}RsZLTfi+rS5TPoK`V}0~
zZ!Fm7_m!{9mRlyJ6&&Z~Hjn>(egy*xwBgF9`BBnGyycHwdOi9#7y2mzhGl#JCbAqp
z@-bx~VDEdO<qWShR+;n7;l|(6Tcw@)-*v}qgieZeji34GQF{aFOZ)8XT1o;@)>nn<
z6CNC<eiUP`Qc^54qo_ni6CkfyNo(Pn1Ixo!LzPfV3gNThOG*+1gz%=PUcb0(oI@6l
zQP^cfWuTa<D282D@u-VT2py#1g%AfNF`a$^4O2A4sEpT^RM^zew)nGW|I`9Ho+B4C
zjgCxobUxORSMwRDv@m~=XK~XZ>|@3{3nO>0A`&nHfW%Q{Oca60H<qh7Z;(}SI}cMw
z8I<2qo}V+IapA>CZPy(i^#ta)mHJ!)+ucBE^L0)%vb$GF1`6bt5MKD`fuL_8!M4V;
z0)j8-*9;sJD*Otw5<CO=%OAj)$1HCf1Vhbh!90q+{eANjFM^yp8K&TZm7hrphiSuN
zsU&)b1~)JNPcgp>JTW~qmJA=~NG{rG_((39jAM@IA3pZbJbFnos11Cwe(<ht`E1O3
zYR2*Xc17PU+u3s1XjSB+b*hmQDYTe{QkEN256|`Mw}oD+15)U+Ze5kmz>;cGwSnK)
z)9z+_tb`s7@&Q|dOsVc;0%yD>C{qehYHXY7h~*_H)V(3wC~(#!i4k-)^?G|hm4fH&
ziUdNN8Hc;dn9q%8P+SQVrEirv<uQn!wl-(UZf4y$eZ`f~+JyMckU>^q<&pI9OGD#q
zLAT>?jJ<jOxWYlLVR&(sYK}{IcVB&GPBP~$lN?Zvt1;GE$P!Gwx){uN7V1}_pd<Ft
z1MDK!g@<;7bHDGIuecWE<<Z^0GXTA)E&QP#gx}yp{`zS?GK(zh7~-JIP#ZMo{X<=d
zDM+f^!JH4_!bD{OW4?l6p8w~7hIs2$xt)0d-6Ia$(?juGwb9RekD<C}>oeeZKTVbi
z5c1yIj_=kFd^MMbAK{x$quo%fR>s6c@6RTWWJS1lhHZ^KDVcLUKI<d>pWH1d6^vrb
za>o|^#Ilq7`j2Ohic?4&t4;a?!+1h(1K_L+#Nj|9t-RbbW?#3bu&9V9$~53lF#I|M
z*h4Gbq{jY3^f1)UZ=2J(bsbWWrqw&*m7GoExL?~u0F)kRw;mM@?ti;H`m{EP1WZSf
zgZY}Yu?uV-CV;VHD<{Xs1!bW@>fM(52mrZ*VsV!leE6W?K0+TCe~6NLvc&C)`jV~)
zqgGZS(u67prx!2X-A#um-A=n!w7h(7Q(y7u%J#*pNw=y+yvvU#3c{)m?*uV9Jz0gu
zy@&HWFOOoB+%GGmuDEw~EYUE_J*t!oZ}=Tw%_DbrUQc%8^|S1xkt67~`>aQ9aZA|X
z+>~m<l-F$ohQ;?_LbS%su=8kqb{!|^*Xao>pg~F{VH6S>hnvv6Cb3)6xkijlEIcRJ
z1g}OPriW^$NRInvGX_Jmw)qt-tlQDE_+*#SDMT%N|1sC_rkVyP8bBvs9OU<M>)?9z
z<^6hqU#gg7O~p2ag4g8X;uFffR!yEAmCy5t-SGSy{%6UU?J%|;`y2Gn#Ct6bTD*T3
z6Qh^qzFM4ntR&=#&44q*3Wt?J9B?Fas;c&!#|RG86%<;wdlluD0G$?*n%d;|@+-}B
z?1$Tz?ZqpSDr_1EZn8wO^Qm}_(;E2m45hDhN-(5bEZtrHlNb++vJDh0SBMjb1`#Le
z2cWH1t#LhdumEA%j&E_KD?uc%bp(nFA}`qdLGxJTzI<Q#@u$1z<z6U23GEod2Wd6P
z9onp6i+1z5=(ZlL@oo^hs5EK_IO4CK^!U^#s;^fRt7$q~vs1p{xuO+t1&ka9dI8v#
z+fDP%5<>d9d%*kI_k+E?A59oSxrkCqrnwOQli~+oMdy@Vz&3#iK<IX-@Xhs(v!gPP
z3-?OjfH=-V)z;VioN;h%FcP)tC6n=5`}SE30GeP3|6Tc{=qObm8ERa4*y5Mx7~+Fo
zqZvlD^AfMh6Cb7eWz|9nz~_F0Xi2Pnb-598>qP|n(RJ7X8)Mld3410w;0NP5_4+i1
zkIYKNDYG&Da;aHjGz^T|KBm?de;CNSK?jB^KoVgV-#;0@()YD=8ugDfN7o*tB?oE{
zc65Yi=l47EL*qrUc7B5pU_^?~n(v$#?`&FVqG%S&-(AUbM>KDp{N8UktP|M-aw=f&
zJ>G8y>TizUqM4*C0l*6hI6)ppDU^83R?p!@8e@4C&aM+ac~`Ht@JGaW7OX!Q>u^^>
zw%c<B9Xu^+URxLUsM|4WB~q4F3A*BJbXn-8N&%m(UUp<`8UJ`VW;<V5ZnG^$l80nL
zH%Zu!M9hz8fE2Xeewe7b8y}*a<ffd~ZSJA97bNUD0M4*~xLR_Z#!%w+=?@ZKM}#lm
z7qgX=U&>+{?hMP3tSNht>bW?yb@=^+m|(tijobX!6VYxcXuQ+_W=%5r+!gLFZqv~W
z2{jwe^J!Zm8R+*tktBTZmhsufo9(gt-E1yyX(n28`O=M?t>EN%B7!uzG^3Gc7vA$i
z`1Wt6DCbAi99fG!;p(`iDdFrdr<p14UVUcG)C7*r7aDC#fqK8+r6fi+Ks4tF?s__Y
zgu^~Tit|#w#l$D~L9|f6Y=W?dehMMKXlN)(I6gqEdXGKCFrT=bdTbp_$CwrV`~Jd{
zlw$#&BA-Y9$n0kkpHCKcbXVjCsq3XysbJCNkFAUfuJwCak4eUVS8L7?d7J0H0QjL2
zJ%pn3-zAiu{~BsAzqnEmD^0Oc0>j*I_X{A#O6PhlGjxXYFp{-zR{}KjiBYwOy;blf
zyTqZD1)~Si-p@aL2ra@%Nn31m?2L%Y0c56L9NVh;!>pDWCkYc8HIPF79MqapLBkte
zhDS#BKiQ7)zxes#LWJiTb)48HSLf>pc+^aI%!g<n(s`xHC90bSwSzs2wPz9rfPBsY
zdL%Mh(qn2O6-&9{ihj9CzPt=tO9dgNew-k&oY;%G^>_Tn;keplfF#x4LEUlGOfkS1
zqKr5cbuW@?m@)+QaJM4w2D)KbC|0@aq&%prVGF4NDsz=@V`EoJL0WNg&wx_xY<I!I
zFEHWfGUi>Dg#ls11?-`Ba-G!QM_=B*x^$4LO=A3FsF~J0;X~Pzz4iNY-JJk&Gnsvf
z<jJa@VCkn@Ie|lcoiDBI(Xr(=Msa`lgm70p$OkaNd?g`?g88>HmQY;zFy}SSKIWXW
zK=of$S&6dM?=PYBl*>nB{RXccCtGF5nhn!wNczhUwdU#8aVq13q`^n)2Q3QaY&|A_
z@l^=8$fo7Wkkddaa66O4D@y?^?AloAK^ZsyD0Oxe|GJ3th>(&S6P^6uYF@j%DEoQ_
z`JZq1ir`UHfth|gE8j4K?qNL=vT76X=Z{HB*@I9cW4&b??`TV)WguV=Es1Q8LdbtO
zSg|@%u$;@{car|7tF9I+1{KCw#KXUlvXM8~w-vSikP$p=w)=V$epY1dqha!Y28M^{
zW*3x}_^aY=K99Vq96m`GZrijgw}~2B8C|4pJ2**FY4BU|)5=WBv45L|5hxV5CBCv%
zrs4P#V{V2BicOj`Occ|Kde)9H9@W}`;;Trh=TvH8rT_FVA5Wvw4$JFV*hQ^~)mL+m
zDCbD31pSJNic&y@ob7I{N0)8S`e5kx{D5sO(^4(j@0~&~>xtMjABABm>TQY70`a&x
z<(2TLV(Gkwg%l)x=mZ(A5$r&5#jh18w|@J})HTVB50;hrdQix$*hqqHSG=&gbNRUJ
zI3`=5g}%N=^BZ<GiyezeoFHZ>hemu^I=1+(FX?@~|57<Ti>{MtaK?x_9UniEl8r1W
zX}T+q()I(cq%E2<4SST>TKx)<Qmusp8P^t6;KtLDg_P^pu8HOV4{6~~$~m+_w75dI
zZb_xD=oRX&aRflX4fU1t{*#Jj%)P3Vmi%8_V-z06Dfe}Uh9F{$P7-R;ZVitE7Yp`o
z>Y;;d!e-`*w#+z!?NFWz5y_5eqEt(qGp>#y{3NkBJN}oIt%v+s69+yBF?Jj-O3EWl
zE)yfbd^)V+6B;!~^gM)=i_)%y&sG*4cb<?T>o=~HYa~yrSyN8sH+Jwg9BTSFMEex~
zN^Z)oqY+*9i4L`70bg;4-ZyWTv6`9sAlnmFb4w6%H}5Rh0iSaBCW3e`aG-py)iZI6
ziQV|hsQmQ1AD#~4qPm!G0?p<iLSI@P$KDX3FHM*_6xd)s%jfnnQSW;pN5@O|78)Ez
zS0+IDJzHqZ#Xwm;81@7U*!i_CHZ|3>ipbRn=p{f7*lG+e_p-p@RS;InkxcqqPM`Ic
zDw@mu&GWan^U>407?9n2xi@nNj6#9JTTwZ;?bHSF5uHt(A5tf3ZKkf7mnXyEbmry|
z@u~UCZ4cCij>Cp==2wokPCggfPLY5rTyB!J8oN#=xQa1HYArfU=c*?&sUZeY*`c}l
zqL|s<68-QMqPE3s&{YKREeD6qo77_jn-uTvEF1c~?FYh*%S^w&)E)Q>&b?EIeyR%{
z^g&#Wku@4J3|bpkNi1g9rG>mFm}j11^yj7R99iE|-aU<Wv-oz>i$r!^TC)%#-+M0e
z_wW*9#H&VB(1U68BlJ-sKlXnE+GZpu>!gG}t}pQ|13bQQ-NVFX99EEjkIO~2DmK;w
zfE{nY_<w)%3eWvV2^|Ad@gNadrq$X0g~NRy)z)h<FJA@}KP#XsPo)#I%63t-r|!5R
zXO~DKH!;|psC4O45GfWYEqA*^=Oy*;j7am)IWVHfrGUX~4)dq0=+_+ve!!IrStr~M
zt#yt71VEw7`+}X++Y%Q1QN4GsgJwK1bmBiR|3CjrqeObX=dM0JdAdI_p0nUh1gTEX
zDj1Jh-WrkV=YP2&)^!rX!3d|BQB7YKCAgP=<WWEJ$MvQAn?KJ0q8iZQQVb-MtOsW7
z7>q|O#^wx{s{{UQ=^f=+&gf`1Kxh`n{r5p)+#DW^S1X7px3!~n;ut5m!(5Y>_mYz|
zR8{kS7XJLDG;L0;j)A5HQ9T<rp0gJ`#f-p)*G<1tdV705?miAfDW&{nOixqpl1|h-
z9^*xz$5lbp2=*6^1tUWA9Ww?yBg(vP{40d+a%lquhcUx~bQWdtbGLXmHRn@&!ai9d
zUFFv{;1Ug90|)_pR@pK)`CltbIBSbG4-`3eUK-`7lBev50(;6&QD0<`Wik;45H8t?
zY9o^&gO$-oubURbkRX0ZK}N=tk-!t@I~Wl4A35|e(5L)uW8(s{sbD}(eQWD{jZe#-
z^M9o93QWpT0C%c0@k>o;e(N}X-H*h(u%UD?#roww=@ZTVXknjV3)jtD-<L9t3PHvB
z3<35aYyKGC9wP_|z~wUj^v6>&;<pfhRYx3Sd2~I<tGF|<d@}aOa<GC&>;Bk>L-NiK
z&l*|9ylSK(XN;gh)`WJ>lVLCh5miFM@K>a`cTTZ@!Hz|DGT)^dsGmbQK3^|MPq06T
z_0-htW;;<$X9J2%O@&S6iS20N&(mY8EN3MLoaw5>__(!fj2EeU5iCGrYpAY(AQ66+
zvw<J$fDZgdsd~QJ!LAs0GM?{#mLCAE%+;G->V~`$J<HXx@pBj!DKVQL31<u&6q)TY
zHNOe`RpOmUtkl|{;zkGmLx!tzT5N6Mi1B2ga%}B_y6CjGa#J7J5TAaP6s)MewK;l+
zo-wrk)ykqwjO5P8eIP&9q5?~KN0OTqG@T<_sDG}_dl7L?9|FihJun6BWQ$&Z>q>hu
ztr(GcPn{K+;<^c7l};e!(yS!hI6qw8xgvaI7~bC+t3?JmB2ag5aS1RTmIX!;&K3%n
zf>NQIe9uP9i}#wfH`W3aArm)2164AHysYpbsffurR^>96cnQ27v#>hwBqV5Vk^zcM
zGrxelx;|OD<`M@O{`^-v_j3p^`k@|gJOCP^=CPha(SJ}1{8T@#X8DA^HvpS1IrWaB
z0`PlDl!$VCmw0||foZilp`$@q2Kma1)_N)jZyB-HID7BsA%J&zmaGBE9ELwBbO1xI
z%<x!jZS`$j!RHv^9EIsW?J-K<*qHjx;xI58CsOwk6~T`y-S<#Gcz(OLmi~o{fG`h7
ze}rt*T<O(eB~M(@>#JWWv=R|VHuW*>K;^c9hRX<PZEJUWyNO<Xm3cHJ@}MhzFw<)+
z*0bjaCFduOb`Pw1-k72*9skovLZ1hIQnXo%qm$DU6U>NXeN2l$nf@ZWd9ja6jl)0_
z@^Y#aIgW#vWq)Bj?XDR1VhUv+1=2foWAHe@$XBft$N{J)+*&%xSfwLx!UOZk@mK)p
ztMGpFUh?+XjIj$Sq1O`YfoiFzTu=KI+)duqZupQGv*nMI(OSAtc>NDhykbds0`F6L
zvw-xN4AThQXUu1>^`R0RqfpRnSS)+wW;2V?FY_Q`qPWr@W1H>&vP)VsSnEi~#>Pg+
zz*YOBN%wDa=H^zCazFK3I9Ub$A?rJ7PC<E|zQy_(4Z_kUEI`KNlBzxMUK#-chrwj$
zKNvI*9SCTh{M@^?lWV*<{acDx@$hL;m~`&vTMAdO2Oks6i~6RGAa*c;tJza3ZOdJ~
z;KHCjJxXt(mc0+BV^d~k42EdU-hlP{L<PNB)4DDaByB&3?hcNhxcMteSvwwnJ@c`+
z*cE5th%^~Z`v~7Z>h9lU)kqm0SZN%lYb{jn7uquY4C`Nd`B24MN0$Qf8!yLsi;1ps
z>FcUP1_yMCmG41!BF_?Q)JrWzMO)p>#bA*vI^#Qcj>*)2UT6UfUUQxZh($f>OsR!O
z0cT99<Uox8yjgifaich<i6h^01^<bucRA1j{&Y4#o1g(&dmhMFnV3;0+4~K&cL>ji
z^zdc~p<UAN@53KElP^;@O-147Si8T@;*QGF8o8)O8nq#Tcf!)X1DUv?RNILDgKEWx
z_Y>Ez(ws*t7-;<r<{O@*OdUmN@QX7#qK{KL%5hb$l|h;5Ech!!0d1gSxcm|J-w64@
zMpdTEt4X*M$hnXpdDhK|3Wsu;K%dd!T_B`-NP*P&B5qgnI3kc;S2qh%z1Q7#WRvCd
z5$!H#RSMsJ=Oe~bXMWJd?J!aIeb(&xm^4QDPS0kskm@Ot>g>GzClp!zC;`Y3=Yh@7
z%UU%${kbSk31hvXikKqKJM#f26!*LeIf|p3eGf@Xw5_5TITp4;=fH)fONo@4GG4-|
zPnx>hnfw%9M3QW1U|<mQg{AqH^N2_G`wp%9muEFptUg4=)W`RccSgXZfeoWwozu@x
z!(~_f(^GbQuG0mf?D8@VplM_|py_9TlW|Av;jXq2nfA@I;L%M$2|koswD=VUJjw>p
z?l7feX$GrAN#Y*uVZxTr-#;G!Q^(Y2cFQP{h{~x?Xp1lGsX9MV?+1F{7f}iygCVS2
zg^hd$|9$toLBU7s<^jdPAZ#h)jCvfO_aW+W=dnr_QChlT#{PyX{NCMHAtU;hy<J#0
z)zuX~^1sS4zBx;P;w(!tzDh;}StCQ<>KT<@w|Nd9Y6alqEKVZ4u(S5;KAHBx^2`{f
zsbHL&v{X@ThKxbfogyYTcFX^#&4ykC;GA&8ZQ#Jy?>7*(E1(f(N0(`zA5@H%bJjfy
zmrh;O8i!{G_Mddw-j@-=C8W;^Q#p>8DcoaYew7U0#x%4aJ(dU2NM8Wr`*|S|+$V|m
zW(T*LOFbFZkoRWqCvQSGVbRU~rf)Jyf0#^ywqjlEW~TY)Ez?7)cW^H|KlwW%TP#3M
z5hPH9fcQABUq{$SeoJcWEM6kjU?TC4V(fXN^#i!MxyRHtXtF;MZm@ucZ#Xy@W5G=)
z|4u;-#1zbwiHBMyR%)=P%%2aI$FEes7uh>U{{cY{d^<$CB14Qz_A&j2dPH>GKGlyx
zfH2Dh5+RiV6EkR`2J|agy#re^GLG+FE7!*FP=>V@RX)&%!3h?hb%$YcC8z1pv^h9C
z&m1IF)2lJ_Wx#fh*Bs@#+Xz$f?2;t%{QtZ^_vyG4REAa7RbSv|wdk5<j!R&26S36;
zpB*Zag#63Q&Nm47tG`H%YQ5J+QI?0#MJ98xYot_9qQ|_Di*D23sPdz~UL~)R9nLw<
zJsGY^m3z;D=Rx977p}rjMgU55yHWp$yGteP7Nb)GTZoS%DdPhAzvx<X)i(}3a`wEX
z{V|Aa{i7J?KZ+ia8<7X?V2#rwP3U#7dwnO^`zFeo#_ppAa?ij~A<T&2XL2K>qp|aX
zDNM4S`T!w)`hqbDoa~*PehICP)(XbK={!gn|N4*1S@B^AudhDLZGwAWfLzTecC`TZ
z>0wezC+KhTPQ+RU>^(XX`O@;M{X%+zluxIT{;zUU7l}UoxX9T;v@Olg8)e97@%-IE
ztN)xOS`*NLofVd?gVFIy$n|SB7z_=^{L`|K8!+ekaLNfa3@WXU3wUPplK1%Q6pVok
z5jJ@o=*Jjtj^_l8&usxEi<3RQ-E!Sig)P7r5*t3OAMvg!vy{9V^T=q35u<RWzxKd>
z=|!CKzohNr$fCc&yya=%1f-_vbo2YFTQbLQkD1Ds5X030cXI37QwBE)-c3acmQ<be
zc~b>#VhLe?w~4Tht7lTHzKOsHm>AgJ+gQejrc@Q-C1owbTS*LJDy(-<M+Hr@zw0)!
zJh;|L{D%VH09gMEKr&nLlpmxy+$)@zD#pe7<RSa11{KKjg*JyS2!=KA^Uq(<7)il0
z!3(|UD1Cy^ze#$%2S{gTFEI)aKCP<0fjB7pU2Ql1@Q)?(yd2K6ZjnV`HT+GiUFOZr
z>({RjRJDi*6A93`{wE=kzlxY1a2&8+zRHj<S-4N3^A(nKoxrSE3Qs9_rK@%DXH@Xt
zw|hosixSj?Huv2aDlpa)-!-eH&w@w!P|rVWGyGB@7+LKyEMS=R@k%(9mG9BoR7-5$
z{0feqL?+8*GJJ&SlSkd0YS9*L`Em^q2U!-n!SeJ)9SmgIjN{D`cT?=>@BkFqso43R
zJpd%;Mp-@{TJiG+&eIxtI&=!3lxqRpd+)QF^M>QQ*#L*dBiGt~PjPW)ilV-KFZ!Ur
z|9?xENT%&K_lSK_<4EeW+0mnygS-y{>jGbi<SzYX-9M>wgKUXQ<Fc{xY5GsD^hYRh
z2nud6!y6AE`^$$aJ1keS4C{A~^ABfB8w*D!A^~FC@n?mZIn&|$ZGWbbZO`Lv4Xb8i
z@xOfLt*rG_$}+gMj}dvAf?7FxxGc|b=Vfb$uZN+>C`=*0i{ZpWF1jx)cL3Y*qH6@8
z)V3vD;l%V{O!fr7j~wYUaWc@hp=d%-N_w8WGLtd|4SV?C&2vFHztmFAeUL^_Fn$Tg
zCzrRK{37lF>loY|23Hwl<Da-&`D@teKd(oK<+9oY(YcmT6jqv>OHZ^Jy@8xXnjead
z^qnTo#-XFNohiNezo?zJ<c5p9CPx98h8F2-m&Z4^TM-rOid<XI;=7s21D(2oa7Pln
z9i9I?`@r5}2Xx*ljp@X#S%G#cy0e;@QM(`=&v=DP##v7~XNRQUr`6-=L`TCoxU0u+
z4KPNm#P9FCS(fw5Lm(z6(Fw|~?V_!%FLRrri0io7vhDW0|G&fx4zmneZj!9?+6)-&
z>*(lsta}nJw{=WLmp@72pu|0IieJpk=M*PJuarZytxMGH$IS?2E8`nM>%3kFFwnK^
zbMbPy+kds=+8qehf+3Mtm!HSV-e9cr<FQgXrsnZ$QYS!2%Ks1;ri<*Fakbp$c{LW(
zAeKI~xHIf`JbPk?<#9D&$Bq@@1$|1U-72th??Y2T@bAoXDtI5&q`aWUZQ;q~Y=!WC
zv&5DwG)RRs&MTbE{^tSYp&5*(zT3RccguSiC-x>V_D&}#nG-*D`}Y&DMsEz)S0W4z
zng%uFUEgrj;F1v5!PJjB&U@M0wT&0|+N%%n?R>p~_gj&jK*YQOOQ>X&>4>L)WgXOu
zRr2?xrXN?mjje~*ckF>wR<NHph@A|EP=Xz_%9hiZ4Q_~>BwR&!PK_P5fmw{vH3Saf
zv0;CtL-d%IUPTs{t1270-(rn_I0s{!^>5!UzCY1m#_!VCIAnOwh&Y^{4fG8X3OC5H
z+4<~}NbxUr<=OP|^kx7S0v0C(<sVLD`+FVKn8y2`6*U=BR2!~bDo;HzGOl$9;E<<%
z1|P9%$j7)F7KWDABIU#|Z~jr>jC$?%y}i*aN;fb;(6=?yPkMRrNTlK5Cc-9!e(P0m
z;J)dN%&UA(Km0IF{Al+P{BiGZr@WNx#0ym>Z8HOE%3@l<#tmsPS61+}{<%WRK*UIl
z?6pM=Lep##C<^i8tRl&gb8~L#5Ej~t(9R4DX@hHlgt1-@fu%^OerE6BJVxyBwMMS=
zV77CzCO9oYJJ5l>19gV}<kfM4!@D4huW|+2jMF$iLX2-Nokg2hU~L*Ozla7&bDLKD
z6`oE*aWXR~36|JN^XSxP1Q5)jzA5Y%C{>Z?h*JaT?y>qr_ERG^iWs)Co}V5=#t)8e
zb1b|9L@^HnAz|S<#P&}?Au3-?53r3nEM5KYOzd&IN+jDY!Y;Qcwl{nr5apIu`k<#?
zzg2s*6<FGx2a>b9^54@5VYsf|8Os;3be^BfC92DKfLH{zmV_kVx?OqZM81`nEWz`a
z5v1DmPW9N&kD|z$NTHDTcy<Z<wG~ORrqmU8e&;oG{RREdH49|*#5DGi;r%-hYOMU8
z^}7tLW>z|FAr7xEVVclafAU~fp0ko0CbG`tDe2b~j|3dI0J)UKBt6S`_VdIB404y!
zX|T<eB03%*-_RESLg;mLb<L#e%CPE5oo}Z&juK5w<CWZS3qO%tw_F6cKVO^rAnG>7
zmK5W>Mfv;M6hiaj;VuOYKt0s`v;qPGUWj=XYB;ORMgi{dSawc~&1pfeNQJp|mhV~B
zzyPD7<-4`z=*Dx?LkIUQmp>&_5B{{ht^`u&r>q%pU>dxxnd>SvKE_yL%Fadd?pyF-
z*|H(L;FdljOAqvM2>@AU4ecqqME7cX&Y_rlk#W*D<Y~Po1?D5#hHU|Sq-l?*!^%-u
z#g^$9eS%Id*Off@2&xWap@G36Q~#gp@c-?8!GqCKVDm^!)|0%7&FR7S$-{!k@@o#&
zI90RpCWq2AG>g`A>C-73msuto;1x-Rj;6PJPTpMqXv$nuUcSXB*}2WUwIRy%ZW0Pq
zz=%nTJXF2RtwzJQqicxoY9CL3@90n?d<mo>mDONL9y{YD*3J1QaS5{h<oB+gy~n3C
z+SBc6la4Pei5y7xO6cToOvPTl9LiP_fX2689aIp$xLaTY5R2CLJvq%CUUY5oIH*k%
zdVp^g^gC+5Ft-MwfEtg>vfk{7!g9>ws<ea756!T=TSt9BN246H4ROSYWY*6<F5@a9
z=!;Yt0LL(8e7qJ8y@ohu+!&nQSBKx(HQ59c!U=;;kpq)!q4&8E(|>YNi+=Xsuyih=
zIoH8<C~=Rl;9UBYPmJ<j>1#6N%z!e+gTN><9pL@_CK=;4U@U44t<5FW8_EYM;@UAi
z`2nWWVjf(6Ib;}Q@~V*P;Sz(zhu*3L{O5|e7ms+J-{S6aASyOn!6InR?-V?J`gCb9
z>sUj>@d;4$P$z2}YVK}uRpt8{1b2o2RS+X*`cdcb(KK)AETcIS%3{w{)P}g+jx={E
z&qGLsB6IfRjDwYilYRhbUF>sw0btaALJ&ac56hXAme&(6XL(fx7sE=*NHChuNVv_;
ze%_7%TmmOSgqiOb&a6sWH4yva=$?2ZD4C$=`~RWBB)+FZRo}aNdhL3_^Gmti%$%9%
za_C<`j^jj3kI4x&PGiw|{|=i~P?A5wy|*BGs8d)<KR|Z!C18Ax{rtmzD57JiE0{Qu
zH~};x9gy(s9%2a2i~dd|#wgx#NlJE}9k8~CbGr7?^i~?bx=yg@d?9e`-c9TUUWU83
z#)*x=J#+AxjQ5^Lo?N4L5UAsiR8oEV`O0yU2gjb7-n080@-7)x5p|#GigdtXzgV*5
zDUxu3s#(_>U;oaX$Pqx8ZLuCwG5_D?U<P}CWc1SjM`^6;@!JtQDa7_3-oAgWMG9g<
zX<>)!#8D&fD^E*_fqRk8mGQ<}$IZ%}lSk&o0iQ}rRu=%+WJ~4US9M%bHb9)6^mn!O
z(rO0tn@WHa-xyh|mFmMH*7+(t*k8ujGvwu_W=6rr3w=tC)^|yF)JeIs=l(P=_z@Yd
zDs1%Vz+<BGFXDT)8B`+Z?>HeaDq85nS$REPyyoWtF`*fU4;?aFWda-b`jDoALNib3
zX+i@S)^v=Qkz$csMblfnnICDxnUSokRz19jKt<&2VZZ86-d$PvOK2;(I&$YAcep(a
z%+SxfBcK_d6Ff}xLjFq)f4U&{g6Qj~MUiHRsLb$M46!8TIJUF<rws-RHkQuypNk`W
zY1L~5eeVFTKX`gw?6a=0)%s18>)Otw1LBVdmJo7x0z7(UbtUuICqOEqfqH1(Hup(h
zmMx;5^-d4vrx1YPLb)c#GV+fJTIfo$lv~p)am*N6!gx!HyM;%D;e9&44K*Tj@yjYI
zEDG<F=kl~3{y$4bngrkfNwt{jHs@%P>&RwWtJ1Jo5!cn@IYGY>h%$T_$5G5Q6Sdy}
z(+iN-OTBxow=4lAt=<1|f2<~J!@Om`2gD3d$=e<$4VpG=N40(rUAn%3ti>BLeredj
zw85<Z;R>V7(Uq*&#omv4u+cBF&U3Uq$nHU<0c>15aqrkKyX6?EfM%78ThP<fBhCH}
zD~=|}1G>NHu@4i&`WSHn5ySm+2^nahN+<&(x;30fHa9|=mxdm|qHCKrvq}50$<O>7
zcYocGq4}waToV)dTU|cl-(^7K41isRI`|hit{k*tezvFBCrMw(+*Mg!@mZ?-OH2<<
zx6iMe$o?bK3NwMwaZR^?U_$0_V47%v!9^L`=t76sSOS52EG;Kd>}(ZFWI(^+aV~=+
z6a8IJzHe&IUB*joB0uQ-I;VL)0KbeQ{+`#HXp5n_*W$Sd={;TAP~aEm^#Q9o_jm&B
zZ3BQ;H!+HP$|@+beUIo)n;>4(g+}c2-U7bL9Y<o({!T!9hw#1A`~#U*9ro(ERVTS-
zR<3`$?IME!2VN#wOUJZhaU9VD(DSbOD~&|)-+jBtV=a~P>ZWcwnEKW~Kse4EIe}`U
z-c99|1nDYZE-#YgIr~2-_BWRvmvqZNycR3)g#vl&aDLSx9dt`M`9L$9*YRMOvZ1r>
zS`nn0F(86byO(bGu&v`tkQAoLA|hC(oX}W$T%|U^>lWLUFJK;yA^iPNRnX$iKxgNL
z`NV62d5$JOR+2B>m%7UYoziZ}z#`vvc<O!a;P@&F5EExX5Y7Y<t2a(xfO#sn54m;s
z9A4`W60j9}#d`f;l<dayPO2NQ_M<7UJNZ@hhg-wQ-+dhn6{!~#-x6?Z1eKgE3$A+O
zB0-M-3|`P3SknhwiQMfUH3HX}zu({Di&N4+5!Cqx8#^MH7Y_`HiVQ@a)YJk$(PS9F
z{m49ckX=dCA^TN1C_ggdCBQE?DhGZ0_N@wx#R}<t>SVl+ZSK8-zWW4^vL{ItakZ%F
zwkJ{dv8KiaO?91Ns0AL?|4kT9;{|L4Qf=T}kyR<|+{@e(sBhXqY)@mm_Vl}7-Uxs4
z`jvt1fr6$wtqM^FStXFplov`P0&Zr47vDZC89Hucb7;hja30O(#*HB*<1;{1RCu`q
z!H6$EF5wXd6=D@_6@|GTkq2HSjew<K6nY|d-w=}<V(T$vX5Bz!i!i)F33Nuo^dSx*
zRfe2AmM`-HP!|$C16Uq^0V(VHr-ir&X;D7J8gBfyN{Gr!ByUiKO)KZCVpZB0Lzm-<
z<0*SN-9EYNMaX48d;5jgV%a~WJH>JVTj?TQG{cabpUD?9$m)0f{P)9<SDlNLkA5qP
zQ2Bi>TgPeV<126;w>dUAP}qmiRp0WoiP$2U)((6ZPB_C}VBO3!bPK*BodN|A4?9Ok
zKeL0jUd-CAj$V9;T*vo2^7N2$kkJ8;_1BduJ9^7N*_qF*HFtBR%#D3J^0w*0V(Y-%
zLG)Q;zD!CgXKQ^g2bF!HWbmKPHRud|e|w$PV_d3-zSh|NP+iaM#Jzei@3FaZu;0Wu
z;4GR~zc-oBf*P|T4H2MoV?I1rUvSH-c!m22wom?HTlGFTK==BevM@rO$dR5cq19S{
z1QPCY80<hjx(*bU67~|SD^aW+pTVmgdyU*<`E;i*drEG<_6q?n?KQ-=+|~hH_ky5Q
zvJ1gULS_U7G8R3~yFBS^!3cx3N(@cVioqOeuOv5O{=TE2@$Y~%K*XZ$`aRwc_saJN
z(B-UX1UfzswD)~A)4BUV1?_lsenE*D)HeWk0VM`$k#y_G#wOH3i9u4iTH%X0*!cm0
z!48^hJOyWI(A+<NQsmmq7;14XgG52WBxL86{LK2Caxh{Y1FMW^_npgEDWAs6-k3nI
zs`{W~W!i54TXtcBBJV9JWeDi^rK81VOgs~PjdmJ`NG>yQHL<fJq$aZM5UJ&26@|(U
z7`FH(@M8fPf`4_xzb|?ne}1HOWw_9^(qidazpmLp`_CDVr$w1AuT15D1K5igT(-!@
zOOWcG)v)oSXZs%{8@Xzo;P7R~L@O9=2poV?z}q)*USup4!+RQC+Gx9#a{ER%-kSs;
z2qr*2Oq$FV<VPn^;J;=Di&;@|%QVT4I<I%8v3_O!q9mr}c^LhB?J`aB&Rb(F&kDC7
zvR8K?4vBxR>KYXCKfORf03`;#z#)x<(Z$&=h(?1vyJXNZ2Fy##)&Bi|Mk6H}r#e)N
zyFOgbPYnvIUW2?bQp`)bB`*i>oIb(?1^A9f9{u-|_92Wba&DAl5slPiP7f{k6v8YW
z0Q>pcp-C>kF~-<)e{jyOi&U}^e0%bdMmun?q0e&s*I+?K?14xB{Pe7%GB6~!ih+T5
z9)|i+qwFSaqxbjgNO9vehEX2FgcbIq`i^km9U=4P0A+-V)4q{TesNUKTeN`2t_v)z
z9@XyS2rWK2+CYQX{GoqteFS7tmEq`PVW0Ishf;#85C}0r&cr6+7S45=rcq)++Jx#N
ze*m`p=or@MMBWCjYl9=o5vP|QjK)ZjUdIt2<5U#+#IB|X-Dg1hZqE1a+-&60d+KqU
zIH@tp;K5{_*)8VB?x(FtpeI|WPbP3Fyej`i+gTu?)rPgkixBN{xNhDo2{`gC7IaUW
z5CLAmY|w#gds<@><@_&<{{aU{pM$u|({tmw!^*-uO8rrR%ZM4hkM?^UL;_oJg#^~Q
zG6DLDmE~Zq{b9K_KW^J|eP<!VoBweXU2Q!VO?F4C{Osg}@E`*6?gPlur^ltJqEti8
zP~a)rwf#kO%nAA9hf#5&EhkZ9L@EK$?HVgyYJMPF9EVTFrw$7ylPGu<CB((`Wq}>^
zCYt5QeSKEJ9BP+!a%&6tCi-uzuY2jfDBjb%ktxp(Wak|RXKNb$;`H?SKbsXZvfb{V
zIc)!53MobmbaS%!<<QU&)p(o%N6USCE@3c6DHN#d?%Tzq4}w8!>$y>me2V_E$Mnir
zl<^htk?$aDb(W--pY#t}_AAu#IiU)WYs3u__l!IcQIwY@)x_HrM|gtTxrP|~Wa@25
zQ+uA^YA<$}l3f)3Jf1b{aDj1u26o<yDDqdg&NAH!f<uF(f{7Bz7ktwxVxA5~s2V;H
z_HPD&j(jpjLqQwv`2{e=hM0ag=h?i&I2LRaXmrv*nSGensUV`5oV(Ad08lUIy>Aep
z<T(*h*3!L=oHYw^HImiWa&A*$Y=wy`w5~;>Y9(*Hn~6IIYm7pLl;;cwv^+DX80}5}
zMztKgWqkX{=GP-eN#9KcF~xDp%G#;7(G?_teMCPjqxCfZJO!v(fUNu}#`{EOgXzs*
zfliuw_%^Eu=(jym*%bzg(zu^lO76D2%tVRvTkQFgi2V4gI_}n~=Ujg<Z>^b77MMcU
zdZ^x|GDnf3?}U>;$8@F!`Y&Dqa3}DhFRmR?PB!cwm)tl6;!;x2Xng#MZh{%?POdV5
zyZ8p7Vb7F6{Jqf8$JHc7J%Su51*Y;gWl}2aCKy{YHHM>~6VfA}j*xj9!ctm<edE5)
zt-_e`g932MwjsSZF)|ftMyy8zxt?y1q<J^UA+PZOZZ>L|;)}ro^uE(Q8EyXaI^^Ds
zhvr#WpDSvUp?gFOCxnl=UDvk^VVFa|W?Wyq{nx{|$Ah>vUjyoFPA`(Xby_wy(`lV*
znIYp4vDmi03B#>`$ceLS0ewyW0>&4do^&OyAyG{}4<p#~EnC+!<6X+x%)XorcbM6O
z(4w^f2>O<K-$#`|z?~9eI`GU-my!y{`~i9@9~Iq$Tg~{rM;#_&HIYGI5*TNEohuS<
z4jIv+?n##P3+=|+DZBZoGHp;QLxqH_23c6p4&q}PxpvCS21nJLWAXHtLB9S#JoNa;
zIEln^TFstPAOl|efcQ3r;Qv{Rv+E9a4dS48@(vUeVY(k|-nEsN)z$e&GA>hfI37e5
zYW8iZoGO?NZ)k4iioRTvfh`8F={|XwfeZD8dN_H$uQ$92`o@9a&m-qn?N+SGbq2NS
zTnGq75uVo8za`Ta9woF!{Pp}&?FcUZWm|bU$|3+37p(%Mlh7+K%_^A#&jPCx6;dT<
zI5oaWK-VZJhEt0%_h&=W7naVKFeacp&FElfXEZuTWbrQ*`9fn<Y!gG^_49u0uVtBn
z?8Ps+!?UegFbLiJv~2m-3aR!Q<pm`Ng!<QT?7xnITZ4xAp6bUo;a>n-@+@LL{{VME
zNYsI8sD}L#Fgd>aAu5W2_oX|1(W8U(M~CiQh87WTbm_tDka-sz4$SdD(sU1%7PlbK
zTdXTfF<T^(m=q0NTW~ya`;^7~4M!DzT9j;+isk~@zBd)pT_06D>+bOkt}U^wSZgh3
zGFp5?@wz{a%FTLa$SVAwVbuA`G{PW2^?_YXOWGN+<1@yDA<4B%TrNH~rDgy2Df|e6
zqF8_R$>?4n$H#UA`>hYJa3R>Z-bYlR_KD(Srj&hX#4Ij;pt|Im@-PlQz)DS9B4@wT
zuW?N0_C$Yz8#y@WDL{)W&yCPz(-RjLx74{(rPC^Vbe{XXs)qs6v&+6(P1PSDnDOAo
z#ubrLPDduJ<@JwTFaO=tZ>W(9y<T01{lF2K-1U;9M!FDuJQ7XWSFa|uRX4Q)Q&kH;
z2WOyF%zS>-0MwKV%R@aNIckt3`u-!f3u^N>e4xRjzwoWy&=ZqgM2oKGeFd?4YXk}E
z$J(<(%g6~!FdfgnZs_{TGoX|D$73*jbF57m>mrVsCsnqDk@)ZCEsuFyu(S2?hO*0%
z?|yJ;OJLG9*GH>KJFz1XObpr4gZx}1Jik=GRZDyI%W;`(@`XzlhW|>27guoVvs@%7
z7neKpIE0ROK76ekne$iEaDtE#<uq{PYTR=y6iZPGYJ%p+>T&TQhztR^1!h(2(l_Sr
z0t_A@RF?|5g*wTu7c|VMzOunOncWD-G<j?&(Ax9;+D(59$=|4q%~)F%r~q(!`=y0)
z-z`x6{=HV{f(40&z_9qLfyg4LGw5nl2Q*F-GZK7yD)_zb-cn;05s7toDmB16lXhh$
zH3f1Ol@9xv$$x7~Md0NwX`RC-mX`HT_VPb!j7)z0bK)Foc<<r!kbe=3ne;V4s52qu
zuGPtCjX%Ez&AWJRB`6StRn!2Ky-?s($*$^C%WB_xwQG3r@y5I;n}9wsT3BjOX{$4J
zcG{m6st7EjgzOU@6_NFV=D8Fe8k25k6_h=w^*39JN`=1(zxEa=z1*J`KJ5cB5%A9j
zzWF8Z+dhH0R}e~yxYOQvl^<qYi<lmDrK3wJx3)*D@}eYq4gyxs^uNy&@YC&Ri#rfU
z_DoRciOFzs@<R?&as{i07>pbepSA2(^18g7?cV8-L5T6@kCztTEvFM_s^{6_dH`!h
z(cXpuLYFjJWh*2`;UM0==9tj16!J?gV_u^sigqnk+c84`T8&l4Evk~_eu9U4zC(X-
zBPDYfMBFky(~XXd1iYDI>5M{$o|EHxaN|{?Id2yg0-OXQHso#G|Dk$SsMhb&;_qtv
zbuP)ytnsj^>nxb)@P4<v(Bi!e85byw&wq*39o<W`WoU@jiw}(S$;-IF>5<{8#|zmj
zZAtnE09ge`Pr1HivJlw21p=quM(=)VfU|oYK<34ryS+4#UwCk<Ce2I4#91#OW2u7x
zM9J>QhC!XvEQls*>HYN%-pU&((O=oKKhJ^O*&l6GJo|Z0B>;p!AS7>lsMY$36*PuZ
z7|1B@2ZCn7Q9U;8T}06F!@egPn4y8vT?)p8|0>dpG#5guebD;n(#y=YCM>Be$2?w*
z6se@9CpeF%#^MNaj%wLvubadq7nMG0$Q5=BhdEOK33dsKQSssxJZanz7DUe|&3kUs
zZIf&7bnqa-xP)Se@?ks^&h$#+PZF-7*Zx1UzB``kc>lk199dZ*MMfejqm1NO$Ijl_
zqbMsYjy;ZuG*GhFLG~;wTS+SG2#1c0$T}x0d;i`?>E7@C{nMkz8P4bPdB65}KGD?e
zpNa5@<PGQ1-Pf%!sLS3hN23?7>8=L@>^D}M=c+eUXSsSQ3h|#}3bT`asCMC_bI*?m
z+QWFzUK2+B?&Dv7v_?d494}j7Z`lrIIkq?*9)4WVE4+&9MKKso6f<(fe&@EcyLP1O
z#~=};p7(+)qc)l+uKXjVLPbM)czAYZ{k$guQr68PjwMT(Q<}QxDDv4hJw{u6&KcTi
zh~Wo+`;xYHd3-E>{*I(~{SL8!chlLmn<YSNRH;P+G@_2Vj;m2uZ@%KP<%EbB=?Ckk
zmF%^7>@~h~0s?^mbgnh-sZo>K&xDWTyN$=K*@l}6Jn*m2B>eP&2urEJPUuZ;&Y)KR
z6IUEMtEUX7ZOj#EV6U7CIZ|bV_uqhK6_o5Nj}mN~+`!0)nc!a@oFVRW?qrA}*K6(<
zj|&(fWUzPuqN%kJn)(w__{tuIl5wiRZ?8HZ50fVcLrtCtrydoyi>Ez1VrU=Jbe;hi
zx5yuAr}1e2<okOim$zQ<{t;mJQ<%tE4>)}q)6Chu?h=6TuX1Pq>*D>3J*pwdx=1`b
zuLv)3P3JIGFhjI2l_W3dv+mgur>Wiyjt}U2-diR~Pfot(Y)`dN*{3zxUmEOU&!k6x
zq#r2M8q`v<sT<<eTZ>3p`y6wmIUucIZTT&_gyje0FmFH)h14<S616n>rB(HDcooS(
zZ`u2MmsHx{n^96y(&%)iU2B{7E5?ob45u3s&FFX?>DKUhwA?9eB20WuiNsKPex$)p
z<QM>R6N({TuLeNW-kk@2M$*xLEw|w6$-!|byqYcB1267bycGFv=I2NVtRW)&(~>_)
zV-MlT2pnA>CtVW4$yQ9#@-;5?i<z0(n4o~bRLIY$;8W%r2PHM5w>zagZU)Q{A$gJ+
zXr6P@$wDkH?>;GI5UvJ$)+G*S8o}6JrBL!I#^tw{ulz(|ao1%^pG{s~IGGe%>+KQZ
za%~Cjuo8+Ghi(@KYQ^meE<Mga(#`jDv;AE`Dq*_1sd(ZL)f)Ub@OY`8cvv85`UlE=
z@%D~+H~*f>6$?Z=g{xzoMJP6{uB&CBRV;DDeH6_DzZN*WD)p$WtR<Y9^)7y(xM^|e
zD7hzwBqUU`XRTi!|8hE0;uMV(^Wwh%a*?th5EnSneWMx}bJYjS|0$*J84sVWL7RIK
zX$i&|O2;WgMMaCT6YaJ-uqVpruVfOTYpYeGeMo+(FhHxgu2dq3II=j`rX0CbX#s96
z82Rb$OsB%K+3h*z&Sx>ils3ehG@jq&cU`p+7`$9Nc43`z*7(OcwqZ*f*W<lPGQs=1
zuKDY_y-J9#|L<Hd87N%QD1H%XNu|k|2cXw|E%LT??Ztr1(Nhr}SANOb_M=wxwhLsQ
zEFJS9kvV{i4lF4FRVlf|0xb=nU^|7W-u*<}9hT5Q;KM0?ax+BByluY8>n+&A8_KjK
zWlC#h$h30!QP5dzw_7vW37tIg>QAEskqXl?slNBk$z6?a)*NW+`uwk7QsT3Id}Gu=
zKbM`vg?ZHf9?t0-2<Kl1`u@XG)TVpdnzUlqu9cp#x3r9oKy_cdKuDcf^|58h;9uQa
zfy+5R(pI*8fH;8SW>QNF8UVi4pXJ-*hlvwkx3pOK8WR60@HzEWhQAbx<Y54?@Aear
zpiWZLAm4!oA!S1{lKr&hv3|x^Emoq5V)Ktr#<z|krFJdYXoGogxP75f9G@ILwqqLH
zJliC9IYy0-F~op$HR){8-qbGG2D?}w*s<G7HS6c(52AcXuZld3XxDy20ak|Fd~kQ~
z)%oaHtH%=53~voWO*!(Bwax2FsXn}~@2@5a^<N#Vd65`rBF~7K**K;7?A%RNLvlqx
z8L_Zj=(BO-Qr;0z9#K7i0X7=`PUMS6gK;>m?t!;jR@mBYNL~82`G+4m($Ekh-~6VR
zVN2^G)KIIy?W2H3<dY=&8`>@Pxvv8E=y5a6FD)tfAGWkWw*vyr1_hZ<NRcga(lsIU
zK>eL7N__JaiD^W0(00)>H!^Iq4({08JC@QAj>v`Luir0hTB*5fO7o`x3)a@JLS_42
zPg;Cbw2|W^X3BMQ8<te^Jc?AX{?n_)$BWHv<?_RhsI=y&MC~&U8cqdkg-*#x-0e)v
z1Jod&P_=XZA8&sKrO~9<H@GcTL4{yXFv>{HHWVBwe)YF%V=D@~x3Y8zSVrqOl=rS4
zfQLav32{_ka{E_L8zb#6ThtjDcYBuGD5g`qIHhmB3U#y#G8bn#%Mi#7hOH-mm{xf_
z9h}+c_sHUUVN2T2ymcABvd?58xizxCvv`n06l<P({*`lpvV1*r3Ku1n)$_AEC|=zp
z6F_}GTBx%9{9;g{B<>5*sB;j94`SILNgL6A2)fxewXMUg6ehHEH7%h*3~cGs3R*So
z4lEVb6e+WL3|yKBsLzV>u5@(u(U_;U`yi?QMq%6n;#}tab&G?<bS31_OZ@rA+8W|I
zULSfqD8>8zNlfjN4V`jQc(em(<x3*wwL0Dxrufm3t0OWNSyv@wuNH6T+u1|PO5A2^
z69LHBE}c&OZg3S_17i3c>mmK<60B|~(emMOXfA~<FGGyD&l{N!CuZYM+$3Mgw*h>c
z`Qew&GU`N(==Zz-yhf(~2M-Ob%w0s=Y$kZ}A5<A%V7At)Sj(Q^g&C77NphnXGdFxE
z{_F`sVEiXB`~J_~2YzL>mTL~y?~4RkV?AKbW1iiF7iBoS5ENuDn=1ryo(fnb%Zg*u
z$#=9HiJ%dO{J5)gFDPhVT*Nq4>By%8`pSlt6C>qUOd-WlL=d<?Ry{<Av?1b(6W!2U
zUFHwcz2>$QaMW^D67y`1oCc?I5oyQkBsn`NoeR{R7e)HDf@=hpPuf{QoSU1jxQ;ex
zIrr_$-1+j7K5%B72~2QdNV3+y&XnqAyko*e2qz-1bY{LR+-s2=?MlxyQ05`(>@g^S
zI-;VYq*QkFUspTUrf+*4nhm!0ZWhRX>iuD0XD7hYFj61yo|)F$F7CJ%QqSM??fIF1
ze*4f5A}&E4Gk&wzeT<d^2&;yLUU@lnxoh#cB-E78bm%_aKm?|-V`p}DiIg%{q?NSB
zMNO)-TVUeh9I6Ek#m~59H~9xF9ygrmVuZmxyJiv@r|oV67LQM=nYkPeqmz1x873qr
zG4HkqMFUkN3k4vCa<6G9^Yyzv<I8tc{`(-u#rOaygrAj|+Xvxh^oy@od-ISQp2|8?
z`lTLF*9-t+*Nml}>E_XT|Hom3@nZ_Mv9qT)HTT9AUu`syOvc%?M>*TJ%*6~wg$@+#
z1?7f1u%^AKhRB*W1xWCIQZD0pa5TvHj)(`c96vg^N6D~&U7lVJ?dtIV>xirY4aV{)
z;-gis=Y#b%--^3ke!LWWE>^;dsc%rY(sZ4%sJ*q|FCBGnPyt%~8$YiG^1cljoQNx3
z^WLljYxPbRO_@DA%XPZ<o7(2+>fS-|2gs!DV2hD~fwu60@wJ!t>~WT0Bd4XocE(Ny
z_z|$i48{y^wp~+dm#;vYd*&9nABHj?H=kgCXyU}vBsWuCnu;dN7B8>d6R!{#abi>7
zGojTA{L(r52+R=w3EuvwCFi}6_wU~~S5;PqSqQB0oI_u0ofjRpVS)K1cF(vDoTj%b
zC@QkK!*i>h|1QO>>HNN<%3ea&7qQF2S-sU$UW{NdE+FLjd6jffgWevjEaPAgn(sd?
z5~7dn%9FS&@mxy-_JSQ_%8WZGp;{2K&wgv9alhsobxG(va%ta$$E~PJmF}%BbXzLz
zRjiyA{Hf_>*k6JuW$37WoY#!Jl4Cd%6VtG_r|0)1oL=WMVBZ~w4kC|Nj7lw?Z8-ce
z+L=dubLlF%AtLmAm?=kGEw2t(l<52R%{Sjai8akVPjJ^NlVGk)rt0?h%!q&!@LUPG
z!Hwougq>!!yFt@O8$A`UN{%ueMcxA1*^9~R3z1sQ8vyrUf#Q3aO@nrQf*1ZwQDC$3
z-Vn3HXMBIcU5Z#(W!JD=U&BJmYgeI5my&g@teQt(osMjiAyOEQcm_^uZ{M3Q^tiio
zl5--6v_Hc-d_8t!b?3q%vwJ+HeZ5zFloMcYA-JgPyUE-usrRU)p-lv_V#G{mQs0!+
z4RI7s>I?GhH4<6?z%7MLGNA|S5l1)jM=M`K4>B5eP-TS;2iIw8O<*rI6;49s85xx>
zBSYJIv4#Y-Dnq9#%KU*kN465>lG_%@%2TV0g(a6wH;T^-<Qt|G4jHr{K5+}jC3PL_
z=-fV|`gUXb=}hWMZQ0<DaQ`0P^s&XjZs`??o~wgDJuN4B(#Ed8@422|?*!?}&<AOs
z*W=Q>(!tkz(hd#|2}HW=S-(q7N-b895p5$h*=S>?M_8^iqmU#i`)d*YEP2lFMBqn@
zxRjKgz>@PBwBEV4GjCe<i0sUD=45T>V=58y+EO?3e7w0W7#QG}(4jpmX9Z&3b6vLf
z^76d0X>1F*@fWXzj?%t4kVD$A;6hkIZSo6vMUeW=w=<<T<$pXsiRpVR5gyflmKX43
z{E>IG3N13;jf4hEv5Pa`tP#8f{ZFxrQAZ_cBPTa^A)l2A%VPqI{adm_J%QqN^aHO?
z?dph!$Q0j-tbJD=s3X~^MlC*9w`!DTQh%CKX;^3p<syt0AzYt{T@N1APJ<&;l{468
zxSyUn1}UKpF85o*3st4x!@^g71C292_WpvRI;^sh?bXz@Lq(cleVKNp)ckE#`>-D<
z6m}<eV2*Ht>~R)3QQzT^K9lC|<>`x8*zvbUzDEjidYH?CDIK9IAz`Vei|=LQHC#>v
z$G`icv++{um6Mvs117QFf3pC8B;_r@KHMZ5DGmM2#xPs3C6-fA;IQ@4i+5!$h-J`#
zZ6$}34CWcNYAcXX<S9F1XKFduiG%1TJod4gp|q<txYh<}Vy?mZ5BjKBrZ$F8KP#i3
z)j`bLIS#n|E~aVzsQ}}rzmcy%0PWd`O6%ZTs=st;ZCs_3?k?t^j|m1XUxaZ!uea1_
zqh8|CTJ^n?kJ@gl%-K#vTx(+tGxiMa8-c4f`P1Fz`Djf(JG9liwK5|_qg?qH1d=G|
z<6)?%%S}c1*FCcMzW_FyDt7!0-pMF;y`yRJAujZ~<P^gNjUla>a|d_SH9q_)F(4RW
z*Su1<*hZcrABN|N8n`w%EEQ=L4P@ReftT!8l*(pg-O^z+|8(_Y$XLDzLF7d;nC}2)
zr|Pq__dMBw^!pRHG^Gs*ovi&At)F0v1WcPpiNq75w>0A$UNB?!7)VW(EyaheoLv*_
zYb7pheNFs&J47D2?pM~fOwR(Y9ODd0n=BcqE6rGU9$WCb#W<dTaGig`-(UM6c9*gx
z-fzvV%;L_ng4x8mr~}H`rWcpX|0{Sp3>d7{Ar`IzSc!}5s7fA<EBmr~w`ATfCl@;8
zy)hj$%yZgQzVe>;OF8*$>MU*LcV~N%oRtT`dX|CjUzi!MVEhhp%cqqs$ze)}9cx*`
zVyXuxh1_xH(FAFgM6cL&MMZ9aj~7$7rjiz%#TL7U%WTk>d|`x?IW^|PgN}OCqi>Pt
zXUMS@rj8&BZzt63D!zTgMP%y*mzE_E^Ww#CY3U?FoBd_(^v3lkT3Bi=J6;(ceNId*
zN{e!&cdI7gKXpGkWeA&*29=GaT(|0ARgj6PDemmgvyc9D_GUHEZ{NN(9D6n>u|Po1
zXJ}EtLnl1`{1%-4v}{lS4q!%v7qCr}JF9n<XDg3<JF)Hma@595t8hiuEa<}l{S9M;
zvt$%D^h<`ekNkyAH3Zv1p#IJ~Z9<KjO0`u%7(P02dj28c_iEA+zm@V~bYO9MW_twl
z%_je@N5JRV@Zy(%!f{4afML+#le2?Eq^tZ#%3>7GoUQO$j4SLK<Z!*|B;Az_2gg+k
z+{{+oXql$9o^sU<#0(_>Ec*Nou9b98*El^qE5g6m@}vH;vr+C^2OA)^K@PLWUj1(m
zOniWR=*f>x$dRe%eADc2QoBe7bNTWvvX&K9=hf(}Y>EYL46d%Oih}~~&C1|+lF&#>
z07m|?KXThWdEqwoPU4({>>b7jD_^&*)4Q!?nNlA`GKMTs=I`~<n@0S$e!kRwyIrJD
z*rR~`rPT29gNt;a9Ci|q!S$Dr#Eo4O72VYf&b@w?s*Q&aP13GUgw!$$ZA^yo-dTM_
zm7m$^ZW@&Cne+o9&GhqxKsK2ZFWz?`Vd{P$<KOJ}6{+X>_IEg;fXiRWRk<?&uw9Ld
zr?7U=&xa@*DE#$7wH9ULjByC#(U23!b{bLLwdutkfSHC?)D(g(dPhy09Ep|UHT!eO
zTo=)S>6fcyw+q)*)L|Hr7ht-9sQz@6L`=9Gkb_9s%ze#id>P~5gjF9L=^V4#vl_0K
zaeRWc%Gl@|+p7*3d>guIQr$Fs*G$a9YH+rJZppy93g`7pBgM+Dvx+02*yT&3RZiN1
zM&!%euUmplH+pbB3|>Xpm1um8XDsecz-{-=u=rP~>L1br>4Y0yD;=vFkiI-^?Kj*P
zsL(Bbdrcc(z21nTUK7U(IWYo|5r1UbLZhDrt$A|JgSS={X36^+#e4A;p6UCj)YMez
ztaXg@R73OnNYrnYbW=%s`?-<&4a2m6_V)kd$-!-|VnS`ZNb0&V63-NVkmsO$^Xq*#
zaX&$_!EWa1HKH(R!?Lz#=O@nQ*gbGXC0Iy9UA<^P$H>xh^t2k&3%s87uc6m-jx|+f
z@edWM0vH`n+g#AG!&+#yC#+N1r|<Xg^F`8y*n<J$d!_5|1TpaSb$eTl_z^}Q^^VT2
z5&qE6^h=7IV!fsyhuwU5^O3j1!_5lCygLCir2WQiQXzXMX4G>(lvB=b_!kE?yU2>=
zeek^Nd}1JfRkLyJW+PeQXhP@Mw1?&2+Zs<rX>ld9O6<>>NA~imQroW#B&`kiev0Rp
zKJ~VHay$PI{yQ-$Z3zxx-K7m7ucmu@@5#Z6)gNI15oRS6-?_L5FmU%kTWE#DBB6)c
zIg6Xv^nfWM(l!m8eMO8B@*85E5+0p__m>+h8;7q<#4k>_uJ=q_j(knGq>Pw{%cO$E
zIZME2QZm|q`kASQq+!)wV&2+9CGqZ0K5~!_evI2m{n}JAut-RI`SPXY_8MVB12By+
zsJ%O>Gm}QL#=8GJYd>jv-mOZU_9j%3@Uo>4RF~2QbfvY=x~sjs53bY=K(_5K%=TvQ
zl$h6kO`YtbGKa$Mb*uc!O8H`h{{h&?G<WzfaeqmfyxMWMIx4!<s9pcE0M!$>|FH=C
z44*nXrS6Q>A(50%$cjy_xqhcnneh-dXfO2}t7;V78_5PJZmpOgw(31ej?ok(^;?sx
z$koyQ&olFr?R$Z|NYT0PY89nc*SuFt>zcPMX>YmQY<BI!!y3Ldtfn~LB%9E5>=-uJ
z)B8FRI(*mg5;pzuoh4kA)5=<#o5*Yh{TF|`y~g@|_J%oFN4&uBl2u^ST>CDY8>DN|
z4mrAA2GI^(q9>0-E$qBiaJHf8+g>l%;ZYWjqO{)|!4w&l*{}(`d=FSxIDgQTX!4uV
zTb9+Vh^>kq%uE%v%(X_)HkSe(<M)Gn`BHRH$G5@xG|2}O_sf|8JB0KrFp*W^*hyWv
zjgG#(S$Eq<DVX-#J=p${1Nlr|iRbhbceaz&ygR|Covl1J9Jn==knxGLz$S}t___Ze
zbXzkBJ@&K6BD$^SKiYNcq>fEV1#;wr=+cink*M{K8T;nlbL#KUoj4M-7KV^#X$(Id
z4py%k`egCO=}`dP{@Xm40@cpi!jAqVq|~Ia)&pqW@`Ccn&z0)#-hIv3ucgv*%~zh5
z`ZhPaFpiFWx32%(HNf*_KBTy~*bX2lEZsT%`-B3`b_vbk*3P0+`krE|eQfNs#c93s
z5iaERN#mKcBTF`*7)GAZ0@&`2E@t0Koupm}7?9D*Wp5JJ-sn!tw232okfIv!-05IJ
z^2=7s=EuAI(J-uilX=-xPc}aP`2XZ}`A`tPWDrjO7G)cjJ==fwkz^&*!BntM!^>|h
z<`wH=THLpwy*Cx!Ye`k-a@W24=->JlOwLj-g0S-2YTa6R&+ev5^CC@=b5DJ%(AJfE
zP=VwzyN3c7f6H;6fQFLM%G~;VAB($ngaz<|=gAst7o~#C&+!Hn?rZ9e6!960i@nkz
zuhL%_fQ(3yYUjkp`>daeuvNEoCx$Z_?%5Y(Qc~(8Xu>T5Z%1LNocj9u+KWU82ke2~
zh?3*<9FA<i#iVatGO{|T57piLH$MYLr@R6751tNQ5k=zkM3<6^$_C%*S1mId^rUQ4
z2s&~K<GNDk!YmItI=W-f5PD24hH;)`AASX*!mZO4+rjnXlEc3M*^FY=Z&!7Dsj{SL
zoa9IrjzP*uu^(=~?#0PYn#Xngc9ay+$A%&;-I6*CbpzaB7cTZkc=jzZ<LT}<p7CsT
z2_4Po+j&XvN6H&#tyGvY?^j6DUgq>xV|3BpzOVci`)vI~$Bv-bQE|_^Y{i|Au+$;I
z#>m>UHRZ8yBYLJ?ju8Q`U^iP*CkNoapSD~;j7wMccr>p|W@FCui{7oVfWig$?||&8
z!b10d(?5Vo3s*VdWm6x$>lE<eu;U)nfGQP9%_UH)zYq$!NRMa{2>DiFSEf6h#PI!6
z#{EzMYuwlTjP98SX{5a>nw$kRCDbqAJ=w8>>hY(X6SZ{h+9XX*(%drUyArUu#J2h~
zFSw2^*@b+lrm)aaNoo!Bpa$pAcH+)b{!Y6ylS$$3e+}69<&fanagQ6Cnq9xkWPU`y
zCB2K!d9Lz78gibCE)OO6J*ar>!cMij-&JB%e5hM=$3uw0)(l)lmh(hy7$2EO=kC2n
zzt1rp9R=qth{clwo4a?XX_DPE-!q6nj=l=m(@8z&H-&J#1bs6z$+F>xx(IXV8_V34
z2f6xAeHX%*0fytOc~H2_Zs};AxTvT>rT3eL<wg@Wnjm!ZqJc^$@7&@KGo}_YR#<1K
zOawJ+b<xxA7lR~z8TAD@`(^vA!}~e!JYC*qgr{T9VV<KF&RsVl%zMDMqk0Z+*l!gB
z{|y<bugzX}WnCiAMb(b!@2F<XnOsVG*NG<N$C+i`-}M``SuSaZW)z)&Gb~*ii~k>6
z4+RW;pPwLU@NuX-xj%?hDdhHz`@9x*KDM#Zn+%{F$)Gd*K7r}0Mf^jh>-$s&`D{OH
z_agufF!zO+<e}LE)?rWOBC4JZ0z>-dp6scyeLcIj+|Xr)Kq}PZ5+)tH8IlwLs$O!;
zMv!bP5LvjTnuVMlw=2n&z-i<ucQO}T?daMTnd@HHlxX;Kapbivi=MY9q|y{m_$DvB
z%Ckx2HF#5N@|YRwLY_D&eB|80`O(w!@$r2!234;CdR6fo4wk20Sw|lBDTql608-7g
z#M|H7nd{4I&W5kM7qK5PpMrOXG^_*pPe~exGd0wH%iC>dfK=s}ls%>~i1;v5ATlB;
zUGP%vJy%TOddHZK@EGQeN4lz-^V8}tnjMJ_E9SZGvbuH+8FL3zqWjQ2XO|16)dMid
zCZcw=v!{on(4SuUQo?h}Z&GI+o`#QzKE;-Q+q(e&*spTn@34Ka7tu`jNCDBDa%XOC
zuHNwGO~J=Dp31};5SIYjzw!$&K%yG~rud-1d12xCM{<|nq<)EC)THTbwMU*fEzDE(
zbx5^@B`87R9CH3=o=lTv{%e;VinZKHojhy=0XIZ=ycNUQrdfRWsu}2`{K_*e%cxru
z4|qT%fyiIXUjbOPx9Vu#W;?&8kCufxhI)lzCq+O0j>s^rKUZ!-(yG|etJGaI;PafO
zgyErw-R@%1)wwDFFL`HyQM*8nQ73zsUraDPn=PJSd~#5Ei3O=)@qGmDdBrp3%UjJf
zx5c8j8T#Kt>&-6o{TVK#y8vPHOfQ_D%6R`WHlcP_vD+Ef%(wbR3;+0K3-5NI3{$~V
z)gu^px<_wO@QVGosH=WTsqYF`k>7V8uXh~WHPrcAr~^^hCLfxnWY}P@$x%}0mD7^c
z)3$bBxq&0~4uYhmY(K&2rngX&?)Nx#Mbvu@-HPDFmY9i~^`2Ok<>DfL((-YA$p2zS
zqvz8#L({s9tX7)xW|mt|WGmC{bxba=EnnJeR9l>0tlBPCI&kgvukanTn-8v;t4Nel
z@AEGl?ULr456+ug9Ni9(Y;-MKtnM2dPFWPYx017NFnl(Gp3Y4T(J|9l7bWto;5Q$!
z$p7d8*qx00#yg}i<Kx=9-`=MCNg_-l7l2y^XK7`28@9u|BhJYRM9cR6zJ3W<B_6VQ
zyRHERFZL7aGCz;T7XIGhI7nyA&K44sgZq%VB#mWhEQgi<vnMz2x1b>Ygydp{Hr*3o
zq*4GKWFBqr;IP#>4|;<^5DP*rVxE0wh~pwXS9ukp240C(>SnRfXjX4auR-<(OjMy*
z#Le^I(JOV9_zHb=dHI!V9@83q@3uI_&-W{1zK7}lv}H4`*;SaL23UtfmTB*$av3Zm
zBu!-Q{Ha~hi9$e0;_ltM3jmRP*%x!WhG+Cy8q(ZeUFrk93}jDBh}!C=?SC>eOcF}M
zyB3tHI^a9$J$v++R^}w$eT@EJv>0+@LF>{v!n?0!g|Ss8lwxha-HynGK<x4o<<R&1
z`SaI<@{OzB=-ad&<*dU)0h;qlL1j_cZVHdmpQofCRZqGN`tP33Y8F>V?;Xr9PIs&~
z*945M*00Os+8qvL7s-vetl<u0R^nO*eJ^|tDQ3u1QQgayS%JfYm99IE;}3Ypy+X!{
z^z%cjq@^<VLeWi55)Cr>uOq}<=AC*iFBFR;{54}oB@|jx&(Vn#yvna2L*KfH0X-(7
z13`&EOMpL}?D+EKrlkJa9PkP=6j1g~)gAXqFKtY0GWS(7Kn(g?_BL&@(Q9T@DsW=v
zQ~I~p=lyfeCM#IeZ!-2DTQg2OJ#={~G6r=X3T&V-wT#MjJ!9U7_UAW~Sd?n9F}VPF
zCFj~3m0496=>huBNtB^TP2QCU(T5`P{xW)gKBG$dtcD%-bB~SKexo6;YpGTfELYJw
z1?r0T-u`l}{r1srBxsUj$U$|=>T;5?{Ygp{uIRa2ksJ}{nf`<6naYf5`dUvyM)RwP
zKx5dQpcVO7Mgc4)X}6d&9Q@F8rgACwDtBq|Q%?ddcHTXUk5KagpF;4FR_^cZ^cU!h
zR5iX5A?S49dI4&qLZslCCohz+6e9_GLWCT_8JOqd%(CO4rG(e7A(`$tytC@#1NnhX
zF;}OYYG?9>ytP)5;nNXiN8PWZxbzV~;n_*e^w3H8C?<UVP&|jYFrZ!t&#kNTYZ8Fa
zlR?Qp2%$Z8oBP(96DBeqTvfPGes^j7UFq878R5%cUmKu@*-U%VB)#MA*LQ#2<zkM%
zrY6FbAWGp1DpXxoM&}cxtGD03qpd6!%YS~*<Y%>L{W|SbPFm@X=fq`c5fKlvfi2y<
z^S?>|gb(LVVy-P-8TsU{_DJuy6q8tTqtT8Mv#;e<CS^55v!P(OvSU;%|KCtU(ZYIj
z>4(A{H_LvudmUCYQ9?BW7bcE+2C#b!fL6n-gh11Z)LPN5Zc~=}_uOM(m9lHU04(I!
z{@mpS&Nj9I<2AR0=t_>%f-NsQ1L{uzaEflp6hZiYe4w@l+dRg9>5}70T@aqwdwPEf
z?Ozn{IN}Je3gRi22$vSBa_X@Hvj)tLlQJ^)wOYxd7Y&!K7%JbkvX{XNYx#dkyx{m3
z9T96LC{zs;PKK=TwJ&#cUa!9Ec-YdqA&+kJylbJaub=**QUiFRc=B1CRi?a&v+DJ*
zADO7>JqoafZ#j7@&fp<x5<0Sg!6}M@{x9ol=;r(7S-vZ`AYzo8bu6M9TA;p0{tUQ?
zAoI^>C%ojhyEw8)lBQe+EADJjt?5k`l@XL<(zh2*QkR%TwI2MD3i3Ksbp=Pk`BF>V
zbR)~E`R-Gz9i?c8gG~)t8}z~ra;efWM+a_U9@V1|@K^{n6m0ADq00e*V{czqtxbIv
z7t7JRfKno@PfCo3XDVX-aNpxk&W5UjF4CU8?j|{}&881B-P_JDVOVf)!#$o1V~D_7
zbSwSlA-PKnJ;b7>R+I4E(sA)1<UFa~;izECO{i%Pd+FNzL$knlWODS63ZCuA4q*2t
z(6D<GsUmjWOn$?HH?BrV-z*`s9N0_axz!W9`#-T=1M?MHYOF$fh3Bs=p+%=WW#T1=
zTqnJ`jvu%j-CaD{e_IsBe+omQgvIYiO$yLF$C%S$n%3Fs7CJ(oT9oJ9a3wuEhpBt}
zcF2>@zqTe*-;5brGcz@{hM(|nqAVan%Phv>Hl%MXo}E9|I4LJ>aWhl7w8rs9*QZaX
z3#eBjETTFS{>UPzl?+!-dX{e?*IEbYVq!{8=+pZ8s)nT5-*JO6U4o=BHi#NfJO_^I
zDCbQ8k|SAHQZipDs4}5mMvA-rdMM7)NG<T+Colk$@<2Cjtka0S=s`Nw^1tl`c5;3l
z$+ojqM&I*_i|<vDt?52ght@^9)=p3I%~Np{UBcEIP=lVrF{myRpSHF(2YNj^1fMEW
zDDni*-g0h2O~*z{$*O;qYWNIkx!KJK;QO~9a)!wgi|&tC6679<sa?ent-s-$QZGHa
znnQ6v1|6kLjF2Ln?e|#=TsrUSlzTV^7~)J}KO!Y0F7B-Zfb?gESrQh(&zy$VHBXA|
zRlCxHHp4dyNCo>~(>m#hK*St<xm*i~w=}u7bv49gX;@!8_B-Jx?_CD=Oop=-=&E)H
zo`0#r-<UdEvw~d=2xnP2csK8N@?tZnYRD7N(o9C$Vjr&SU;PTP=R!R_oKClXh^n@#
zSbg<X)VVLcnhSl5EVH}V&M{+i=~y0O7DA6%T=z<2ET+8iHtY}U74de)QK%@fTnU{M
zO4s=Sy+(=#uPDtaRo$aIM%cnUgDOl1dA1!h@bjOzHM9P`0|iS2g@!2~(lp6FIp)3P
z3sF5Ya33;HC7ZpKoaHOk`uh(pV7VoN@bx${-!BGRBzY6`?aF1Wp~U?Kc>ta{RUslG
zQqxzrSwWY>RAmrlkcWMu9Ch~F;Pi(CK?}cU6Y3QbAIU$i`+)gV75dJUm;Yn)rB3Ov
zwnpr%&czmZ=y3R$iwzu_eNRsG+H#+%cr+NGb6yyCl94|aa*S%WCNMK-(t{)wn%RCa
zCO%%d+1TCmYVsa53Tf}GXP7--u%37J8TmlLM+0fOJJI&G>hbu>WjlQ5wh{Y{h9Wlh
zqTrdj&*L&}Lzktc15r}x8!cg%{;1<@DMB6O8H&SYk<+R<BLe(i`kXl4=B+=G`MMLv
zCmB<32fe(elcX+P^z89}6c}**EPoXDY;Z4L454c=g4SIhi+TS1mP_)_qnUO9$ny%d
zUVtUAw80t=gg<j7{+p^L&u-zxGrHuj$NuiW;I4I=fjjSj(w;qK9Xp5P2%=y(v;$$J
zSf{<M^Cjy31quT%!t(C^VYgC&fzs;`8o8`x%6pIj%+Vtb=r@2VZIS8qnQT*cs~T@$
z9_l$Zp)|}Az1Ya4<Db;gSn?eApDRE7UlzX(C<*6#==c*L2|IYHejJ}!44}FLu<NL8
zA1PJB<mB$tkUCHruz(;v1H$UXbm~Z<GqWMfRQ!)Z>FC@PTY70q))dET7zZY!6qV17
zoU(UzP8*$<=WFqUAhYhjf$P?e%p;KU4h89nUNOUK*A1JlVK3teglH_LFO^QemMZO1
z3aE-6CV~KGU~ssqM6EAqHAO29$Rb!f7&Lo!huN{&ej}eHre+2@v)r%N(^c?~Z)?fS
zI(ZDDb1)5smkJ7t&$#SgJor110bJ${WyG_TvO!OOCwtAie!2f#u{_t($Cz^p+xY_R
z*VDWUX;rmey{3kE%v<fWs@%PEXRS}7ownvG-0IL&?HZwP40kY=$Z{M9z?+~1O#>;3
z?a||Y=mpkSRLNHj@_H*gGtfxd41=9r)|c8n-1l#vOn`a*f@c%!mpKy`|K&-4W6cmP
z(p6N)h9`Sr4ctJwtnc|I^zaY6L(&+`v*aWC2L^hZvnT5qAAvm|R!O)_dujfok8&Y1
z{iD;gH1R6B0Q6(rJ_36o#hBl#bQBlR^Yqx$78!j1q9-2+7nLuO73zM<kor_E0HoY?
z<%1|K{(b|chr9;s5}Rn^N0Ax)v1c?|XN__Zha#p3s}$Jw8E*+0o_o;sFjAxaEgKa8
zMqYg5vpm6s6Z*2~b3#U`#XZEk%5_VnT|MXUTf_@K25}+<tsq+L)%Hy6@zd{GJnuCI
z{Qmh_T;&Q<?;m%9IRnPGht@Ou^Ln9mh*O--UouJ1;>kpHi;c*DkilS{mJRN|{!8ps
z_>CLDEf|-Nt5;2Z)8F}!yQf-9W~fID$LOv@oJAG~>V%bsJDs4+QV`<l(9>bIw?2as
zyHrk{Fmx_lSgA_0R?B&EtemHo-tXdtJ`=c*KMd#j-7iP_2i<>awTFHH!ARPliC^>-
z{IdGP!-#Q(*N%9+>X0<r2IWEf2>V7Sc-1seWbh-4Bc49H0WiI1rjIWJgQxw}^y^R7
zAV|ApWob!?1psLAKXq0*X-BJy^;0D;7ni#lA}wyFNbVDm<C<spqbNJ{>#MT8YG^Qi
zYjb_P`h-HWIPc+W_h+0AA0zB61E%Y&li05u=U#TOI$y+g`TBd(f_DqiFN2c8E6GJ-
z>e``>zhnm{FBSY(FT^ecxEcqU2*jEhmAS5g!H2Dp5{u14Atmb5Y&^<E)TD@j&o=l(
zGIHrr<UiB9LyEU~J+zP8m@Du)%Y2HNxdz7}Oz(FN9XR1Az$}@Ymq)7;c(9bEg(pfZ
zl+$hCqw}<FRfstU%7=m;{OL!<2*BM{66L<_5V)shOaCBa^PNHjjYXk98QE5vnu0>>
zv!Hgwo*BjWdka5C@%l1<CI64q5T7y`#6t4A)l8P2ry!o4qcBemyvW%PHLbzs2Uosx
zY}aGNE2@Hfg){0jU(21GG-M0<91+5(<3C`-3@jhrr*R6F5JA}4MbM+nVMDW4i5PrS
zY7Cf4LvV<l-OTnL(2Zq=g0<(y{-m{L1EbFQ?NzfTW8N4`uX^^f4#1)2+Fyr1IdzIv
z*!BhoTf<1nX?t_R+EX-fc#0DaB~+D2m@wP=Ic?f`e)SU97wZ?(X7v9wV#>!B(nY#z
zwjau}(=)oOzkjs30p#;8WQ5b_>F;65PKo1JY97Ly(&<~?Qv8E^B!7x3&B@5LrXpdu
z67sLG>`s}l`7^uj+j;dJNreGOf4#fbM|*n4{K7)h%qiPunZRvZ$68<b1K6vlKxPvo
zq<4)8@6%aILy5eq2+r$JT(Cu%6P}E3B5Pbx^HmC%3wRd-(23NEiurBTL+Ie<NPUq^
zp9xe*9kx2`0y>6H{6`?E|K$#bILnvK`x!l?<;uW3<DvLeBT}$=?F6ZVD{Il!mBTpz
zgoqrbhuFgvi?DH$3Hv-)xX~h2zS<SlG%f;rAULiTfjzF27Ldd`?DOrMPCkuzkhKb*
z;*T%{06Lb{Xl3O6@;LkHXGhcv=60VDwma*;zBzd=d6jBK<;;EzZGxlgg~~tE9YTVm
zkWgHyxkL3;99HVKg&TxAKR=&ODa|CoG1%S_q0jkioU-`WSn~ntJL-&2|D+oB0uaiy
zSK8*<uz+C_YP|4<TAnR<NW_}~5w#Z}dGQejd%s2p2XFR7MvuN1f}(s`)S4Fvx=D54
z2ockFqfygxLo(!mz(m}!RzgeRF%B{^tw3%-47q#+mU2ql0@R1Q45(>+EhPQ`v|i^$
zuWgE%=A}fH3`!bZ;_<zR0mLkIxGt;3J8ARC0tII{+OfU-r$zg#K{u_|7fEubkAkp6
zLv#$vMmd{YIA@fZ*R8sTXn(EA7WE<G@FNx!-*eXNH3)spo?<7*&Y=*ZuztvIR$N(~
z7|XYCc!zeSOS5SInHT1-NX-ct+$yw;L>>OH%63^Vf|Zt$k@21@$kuwPA!72rYO&D-
zWqJzD!aH`AEX@W*qb$g$G8Zx<Nv^+fkuokIsT1j<cmswAAg0lK7f}v$#I7|8MGD1*
z?`C{Ux38C1&?1{@e?))&O`di}llcyxKirsK=^R}GDrhh-Aui4xA|@!H{BKt3{kfR5
zw7v6e!D0Ii_A%4(>m9OR6|&iB^*TTN+k}Fd0Q99gtwH$q<%k!YGjhNFJ{CG@NScai
zW^uDC&c%L6mrbUTLz-0BOApb}?>EnCbua$n2%o6#9U-qb0bhte$WQ0fTA4BESDI1U
z*5D#16?T~2fyfv;x41f>zEdGa!>B?pL!LkKg{iJ=(YbMBwa{-w;kw)!+YiIQ{t9P^
zN4gEsb2<BKeEk1xRWKwi)=y*brpW5}T$-nbWc$IRM?|42w;bOBl)Ro6Mbcy2Hz+_*
zBE^IW8sNcYY)9wC=_SQN2{x}!4}MQ&%;6`%h{t0Kw{Agstgh!EO;oOMig6wm#ck*{
zqzx_>t-Ktww`8AD(JK@;(!P0MKy7{V=hW2vq{<1)L4c}VCC~dwYs6>eo%O&$*x*&2
z!xSE|1oLdgDS(!!n0ABYWuM+*w%1xM?B6k%@*BGARg!vHRM{x4CFz_oG3_@eCOdg}
zkMsde1r{BC$7Bfx1Z?AlGw?a4NAGaHf#QTL%LvnCb1a{PxSk*;jt+$!GG8O=@b<P%
zJ$2tXJ9kbf@23`uS>;R<)260twx42TOsDPD>E24*XaO{gk%$Vcja|z6Zx$M{`5E!8
zDA_}WljpkPz3|=8kwj8s&h059#<y^1dtH2Em6}5)AfNeSev^Y`zXBTt1<{}N$72|u
z63yO!*UeEqP`{;BJGf9)MQwPQ4oC;C8xW^VjCs*cRb}f$?>gvsm^M@kB8ZcFW-yJ2
zPXuR*@aq%I80qVF16b_u@gJL?Pm7?SrC#<HH*aEJaeR#?nLYU>W*}zVO`2_|Q|AJ6
z$gBR@51x;G3&si@CGdk^zy79etGLN_k7L1G%5tDAg*G1FvZzQcy|X@F--vHiCwYcw
zNQU$iJJ2u$f|oLn@IdWx^%>dRO!SI~#tyrPDOd+`YqC{Sv>t|T2a3Bi@2%&#{vUB8
zk41IoWfZMs*53MZ5mx(hc4%jS?x!5((fuPhNj<55UZ^6$>A$Oi2}2(In-Zs-^;^*6
zS-0t{)}DzH7S+feQRcI&ic{?Z8{*I6YbU#Y=MB2E%#vfjNGR!mS(K2Loik_7oUhtf
z8}z&9M>e){xO#;kC#@VkXzE_R?|RE^#(4~Y_0$3RK0l%%w?W08xh~A`y*Ts@0|Vyu
zU7nqLkx5toA{!iCABa|`S(>^vE$)^UB@-APF9g<eaT6;rEoP9k6@SGUzpg4=D;Vcz
zZ7fLxxd^8{)YQnpvGJ;yy}OFEWmg3+lD0cg*PHWTiRvvbv+745?cAA0Y5Jfq*0w`f
z?6tuDd|ibH^a8roR6sK{^%P?KaR;ug^%HYB*DdwV$DKl6@hzmj>dVwhY>>}!f7@cY
zJ>8-sNp0k4zXZT~4&5544h^G*JKGr8b~8$veUsx_D^zw^Ld60~1EW9FFl)M#e-J=V
zxjz0z_S7G${AW#{sO;no2*7oru@llv6To#&ol{I~?M+OMBK+v)5#z9an%UOQ&dzyH
z&7T!5q}o6W4$Tl93uOLDK;e%R)?ud;*d2vT)hI>iWpuTIw$o`Mt)T((q)*yO2daC*
zuqXgy%d}}u$XiUD&kGL(SZ$ZzC-eFKNr?rmU6Qd?8^8j!1?r@UnCxjfIT5Jp5*Dv9
zho(;7{>GRVh6*aHOi+FQO!dg?9lAcSH^X>kkhc>_>Cq@p&t5P&%HyT1W&kb^)a`O*
zlQUA*GH?m0=3vO~mk%`~SXs$r!uU<H&x<F?Soo465G#&bC<uub4Fc@5fOe`m2)Y!n
zyN$PG%tk1I>4Y9Z70O2?7WM0@Dr#AD+OYl>TOZ)_3F!v$<~+GJ39^ORpVuTLB${uO
zJ{s4$Lvx}k+dDMea@tz=SwPpei?5pq*Zo5meVr6n*(B>f8TtOnWNLWtNk&W%#w6MH
z^>Ox3FVJk+lDz1#ZKv%LkCh6KS1<o{Bw+H^VCE+Q-(c5_fU!R3ta9Dg0KH{@desEc
zBPS0jB0Wr)oqp!F#-6!Jrgk*t4H{h@B!i2hC%z5cv|*l)-j&v%c%kkCd;H{y*?{V}
zq3KN<KWe?ZJrTT;fY2f27^P@Y;LaVKORjz6%aXM|CrD>V%;Ap!T3vweuN=+p%x=E<
zx>ZR(RR!wUcRv${OGqZGmNdy(pq5gddgk#);|o3=wUy?`vG95!?tTA}{2ZCNp^IoI
zW}!KjkKta&>e81<*vNz`MD((VUJgu=)|HsHidS}v3<AI2#GR{nEF_<5bzx-KynRa;
zPb2rqim;arnia_p=q_L7!dO7GLBELBu}bj8L4N%^;YJZ?GBd+~^$#vPwQNRl(tdJo
z^{L?ecfB8ZT-t~P)7f)Frmfjv=RwoEh&`plkmUIe^36Ro4ZFA$h1P4qatX`Ze`>=T
z2(l+u_Sba?TZ!0>K8BR!*ON?FsGX{0mrK{p79+h`J}R_OL-s~f05C!)h4g<ngHN8m
zdRsB~YvU#Pi)37e^BGpB9w8`B{uNZZM=_|<IE?{K?si4KJ9<Z(>8_-sUnMddHO!=_
z=UBS?%0CR#<x__&P=KXF!M^+cmEq}!=1ik`wDDvTad`NVI$DX4!U|F~e}}!;()Ib~
z-h;t*F`hq71x01_t5>g-W_&g<*CuM7tHNy~3rqIWLA`cYZ-Zl6GA?<6I(6E><mF`I
zvH3e^vtMx@IY*);0P#TzX(vgVXOm-0ZM7r3=4LVSTD$r^aFU3#Q152|wpNo+9YCGq
z{<MdW_+kPP#NpX%<6lF>8tE9R=iZv%{BYB}KPL=@Qh}y>+B@IxeRumc%_)xGd_sla
z!ci>z-;=?RWY0C_Nv8~OOh2W&iuPq9o@=b}0*Kw>Ua7gj2sW=xQ(@AuTP!6TmS3+p
zPJVv#1NYhI(h1+^B*bi42~yH3JJ3`tp*m#M+R4Y_6IZdWyK%D>cYL6x%m}GR3r(Y#
z^$vCfbkmQ!n`ZvZ&Z@xPI$-IQDS@TrC1qh{EyMbn^c9GK6q>!C^n2}km;yJsu~3Ul
z{947MV>OHz3FG)-0o_emD5y;a;VJ;m^B3%*k1s<0g2vw`R&F#NXpt>_b6!|aBSn&$
zjIbDtV-<XUE+&zP5%(~D&NXSue^O>OHZrbdi1@H(zz~Zo#%uMyhe9P*WIA`Y1LS-5
zxF5@Z0!y?yr~(Ln_4-*(e3mJseuVwjFMxN8p^o*{0!eDIu(D^(*<5ceL~~d3ocQ)*
z4<5af|2Kd*27O0&CC!ZBr&3y5U8u#XLO7i?IcePq&jQ-SE<K9zb4oM`cDOz!Wqy)z
zgS0ZO<y+vipc7{AZI?w<OF|S;=$dlgyWB5EP~JB{5VG|whPQIEAL<z=K!siL_hC(*
zX6SDfpfG%a?5tah_G<Oed@-M_ObA#DA6$hk6cfj?%7};RFi=}GxCS@L@DkoIuW_+x
zWN8a1z2mIS+d*S$0ynvtllGLM^W9w+7niz;X2sSo=qb4d;v)j+zb*G?0H>FJ70s9u
z;Ws{iY7yClJJ<?c*B#SuEU+BZ3?#pI5j}R$3V*)wAwFXTz^af(pj;+W8KN{EWIXI<
z!$>$R*_}VbNe73Nq;ykQ=)Kdjzmp*on0s83G)o2eYqq|4f3x#d$a6Y<ZQcP@wa40z
zr}+Eq$?i6uqBRLToEtO!f^ZIHr!aARHQ9WOkavA1q||}G&o!nSKd}m07IfwEXiY*1
zuULT1B(?eUh0?(OYm;XJKa#i>Cn~{y<hFbaoRzQGwIkNs?#o)NRn?jB-T{=ho3P4-
zEA0?{q(*vHW<qtg_<aS>&FPhDVL;6yyknT*>?GB+q09+-b?M?_x>V3^N_)xQg}DAT
z>~@$Jviqx_iRtTw5y=WkrozU~+L5Gm2R48XGd6WGDnTuTJj@tDxQgpA77i8@vKL~Q
zX~66=-*h+iy@JbQ@0VjD2au9`9i~<!=-*|qL}n}9B{HZxMZQJ9R9Z9qySdqb#E@n3
z?4@~?l4nl0m5CxLMTdbG0NiTi_m9_fA{-mrUZ;~Sm>KB4Zadg2Ylm*L?G8^~I&YDN
z6>p|%NqMeZF0y3^j8z2gjHyrd?Y+sxhPdFQJT_CXI9P+9J2$o>?(8_GXzg#o=;s@I
zu#(3Ebwu2+nC`k7A2z9YT4A+vLl3F<E&qGaxMGN$V0L9?rHN!%jpM8njUw{>*0GWp
z*%SA*K7c@iJWLfq_<09z;uB+{LYVm2(<yT=@pr}51OU|X9H(tuy2k<Mt8hQAbmc+`
zS^QH#p8S+NSL+M8qB3GQHJU57cq$T~xM|a&z%2#rX(Ecf+xxBFsLX8#v$WD`raWSL
zY|6&{?woZ7A}R2kk_cCn^hCy@T^bV0%aY>pdO21Cp4%Paes4P8-jk{i85cVs_(`-S
zo8il>;PI%trPUXTGfvXo89NW*R|aOjhqSWCB<F`wU9D%nLv-f3+`tHV>YQ{kg@@$E
z7s>%%uF#s<b+hIt1}i%liQeor|4b2$j%kJ;0L-U_%2fO5RRUFs<Z*|@Oyu$QAE&xF
zGvt44e&gNLEE;firx_FzXZo>-rkH(4?o?&*&15)9J@l01^1cybMt{*TWw+wRGG;Hx
zMs(z@ZSEZwZ`i6Cz&UsQ{yL{$hYDl)@x`|y<mq-k_wFYE%>&M+&L8RFsqCSPSPAjh
zFkj8FmxT4_qSh+dDzeB{-oH2_cRGX-5I)@sEq!jDw_@DbRduq;NJ=r%ji2sQtty5b
zX4+z&5vbD|^K8($Syx}*W+7sHDi#$rH;cjX`s<hMrg)|~lt!OZeB)RWO!IuN_{Ig-
zTVJQW(feP#u={xCQ{l|`7|&-fY1a1AS~Gk=p#0g8S@$55V`OcAT62CL3hzatSuSZf
zfk}yds(i?&Ia3MCiD2$-74(#VMXhv})-9~l=Cl2=zAe)SMp<4T$9g}%k?w*Ndfhng
z$hKux;c>D-<I!p0>By^5*v6h!Fql<_{T%A~rks1|8;sX)9yCSz`$esGNcTb+#GZ#+
z02nA6H8nNU_vyS_=jiT)P%vC*C>`7W&Br<vQ$H<NB5|Sm+^O5dyc$PZ>4K}+a~<7d
z#_T5MI=8Lt6Su`->WJpF=Hr(q+?0#9baFhN#r^2)-YN$C7&rrbY<Gf2<nT$%8=NS}
zp6zPH*vHP(m7#E?jaR`QwWokt*+)t0$#a-UL?lkvZN-cCdRoBlhL+5X4e&uNP9Z&2
zLT;hq^tqa;XFLN$&0EU`jGIRZ*7>v{Xo^IStnJ39*P7WzP|`P+4=hQXPd~VJK9U&{
z0jrd@D9q|6La>KxEmpZ~mSP#cljCDtjUVgobhNj=P>)%`EUrazwrl?)ucWe<^r&E0
zw#6ZPTn?UYjFa1^xb*<caW74-+qe$ykm(8T=(!r7yeCuoqR>o6Ok=I<rK^4GsDx;c
zY`gTY&q{MBkl!9KpRBMcm3CA)tr&vxht^Fmg_vm98<Fs|Uj}WZt0JTBX8^%W-6<Xa
zHgV*<t&xW_5}+$xl{TN^)|4X~v;efrP;zcwol;~c?Lhi@CBj*e)Y6b^rJqgUG6PzY
z^9EV+Mv?&B{o~~&M8kRE^a`jcuV%md=x}$unu992sFTc7{op%Qsu~^KBg{TGl-!)r
zJ5j1}=)G*R0D{I%w!y$xR440snIsq_1kth4V*_&AR8h<tArurKAA9BmmSAwP)MHFv
zH?AWHKDxbi_ZzTr;)LN)ID4q}VUS#RQ712Lf?;4NnpX?SAl&=8YD`3RM>^Ldr=Pe!
z0Q=5}QO$CIJ9s}#LF$0)a_AhIOn~XqNf+)FcQ1R{U-t76y{ZM#E2u(xgtZgInWM99
zg~N4^I>Sc*9k@bO=^7L<xTePey+w~%dl=yv_(SE^XWmD?_R?O7SR2pj<d)8ko}R_B
zh%o^ycdCd+OG$k;e&|;KTgu45$o)k2kSJKcgK|_U>8`@?t6OY=J$B@tJm|H)(<K?R
zuSzbz5@@>2&;Jyl#}rvMOY|-C2oVL00m8QPvM>w4FR!_?O!~`f@z67W`uzD!w)0+@
zXd>%teXee~ZSpX~adkG@k@WQRpn7)LvXXHux6ll!r^UFTGe^^Wz~`5z^IB%=E?hC#
zX(vpc&FG~g4{KTa(drGrxJAX^(NZh6z-j^9T9&UV?=!71h50+BUpEK2g{dd&&ZD=y
zBc{hl7hY-=kcU|zX0#p?X;x{1bJy?YuMK@Ojn=FYm*3&)yDxd8V}9oG)0IG(E_Q($
zZO2-%jf5q6&Q&OGL)J`nlx<saUTaAlZ#E@dufPq5y+4Qcn3hH^?E2hUxlBFz{yCEg
z$QUD_83f}WA4ePg4>B7XQX?MtkZ0U8gg43Pw-0Vykd*G@0a==AAIKMv$H&F>X8PO@
zi_*vmOn*|j=uve3q3(?=Xa&FrY1ReVX6kI%)5X+dgU3@VG+uE#lcZyP2POju7*pQ5
z<Cm@bVgpRMLPScPpaR6evM4|Q3bT~Y7AHFHR=n3Ef&tQsqi~~9t>k5s&g3vd|Lbkm
zCNdj`W78j7YsP|h+D)}e4IfFwhpQSBV<tKn)~Vj3HH?CxR8UaRg<8Jl*5lV`G^Y(X
zO%WuQZP}G6CBaO9BKQolPOEv18_c^5Gh#k(@m6UHKRfB;E3}k|t(9GBGIb=D1nK}7
z$d7Bztb)J%_?y-cXr19mUg`XZOLXKVEgxCaI+47kZQCLV85qA`iou06UL~Sjs{#9a
z3LW^M^g*?U&lxa5>mj(FYqTa~g7-hiy6Hh3W$%~3D{?DBxK}F$q?PB@(zR~uT_9F0
z>KJt-pRiCzJH1k=jM_I!IKRRJ>d+U^&Ik7MPBq?cY%9gLFM&vemvpuTr`koHkfUW6
zfe#5;sj`@5x^;X^Z;-^2X3FyP*k-{HNk~IOLn8pDvBJPVey9C%`81TGsvh&Y%@<zg
zV|PW5%Jn5&JgA_%{`=X{6Q55&Hb}3@?0V1-^KX<$7Rt@U$m+~6`FpRjWgx+vqPSr1
z>3bw~ckfS`3Dj8SM?a$nj1HS$<0$zUAylOOQ8QM!n?WP*G4dQQuoCLI8c8oKKuzz|
zwyi21c)xOiP|$t6Id6kXG@$Q29R&q|aA5LL9~jG;#3fX9SuVQr^`{r3){$0y@O`t-
zT0Nes6uZV7ucTh~zts4dk1CyEn)MrP-=?;eFun2+c?mt=R#r7~g;x8=R0S%kLLayW
z-Q20*r#+d91=|C4)wQ9e&Vp+t3QpN2R3j<``Hc$Q7c~+_C8uZX+ul}mT@9DGW^vC?
zWy`%{DcJ6}rs@By?LFYB?*IOA4swv}ksY$i2u0=znb~_QGPAO`Q;HIbkWI38_EsvD
zSqCROWQUM>9RBaqb(OyN|9jupb^R`SJg)jYF30)2$7_%0i<*D(bMeCIKupZ3_tdN|
zox}aRy~S<QfApUbNaW;<rJM(lGp}v8*wSNywB0|8jHC_bQNfGxDwb>Y7Q!-oWv1U3
zw|xP>08I++QXeT=)3yoa<xg7saPOV;?5i&qFSIEFr;*eYo3Z+9;bh#toPNt#N2R%x
z%Fy&}AG)&UHTYmFTl!tDTKh1q;&mfy@8^Va93;8t`cJ~cdOxyM@@^GJB2vqR8+t;r
z7MI%VIQ-;n$yp!4z$mne%qrEOzA8I!76^x;Ic`N@9c&>-+&@o(J=WfM2c(D0iIv2j
zfg)8VLR-e+XY<P6_hbM=62->GQZebN>;5P!*}yqw7v%T+uA8n&B+g|mTnJS3Z2IC?
zY27c3JB?CZ>!hKs+{Fr)F1^^OYi@D3mxP|^#_eD5YK-r?{@7QKjq23r%$B#0*igmB
z)x`!2C&g}mbCr6fUD>a?X**)IBoe+*=}P}xZta3(F#+v6P3+E+?%qe!X711CxX#?U
zYyfLBHmp+<G{+qvv;M}mPF@**@om)oR;`?!lLDK<!;EqMkm$Bsa2)(46Foia;wT`=
zv>-+^4Fw^a5jr2GI1A8w$|KEUMw=xUb{Giz*n(R)Ak$ly_R;XJdsq6tMW{ASsDrC1
z3$ALP#%A8UZfz~~+-3YFzf7_{yEdX}$x?aul_JNo>&G2l#u5jzpp_b<{Gq#80pgB0
zZxc$!^n*^~=QTg5?4nfQRs$zKs*T!Yo(*WAn9`J=ff()cBQ8chS`2XC2KE_&w$Prn
zDXpM-#Fy*vV7-SVc6i&CL^Ahupo0WWDg^t&T1st?3iS+_t*opVig22DMCGG)xs1{x
zKivJ!Lp&YKb9$8p3lmJ-r}EYpF-$cwHFcz8U0GGKcojxAKuk=WT_z>+ep{F%*K-I0
z;tZb$2aVRgTmexR(o5Kk@#cjU&i5?lQ*#O}(P!LU?GtCHv`+!2_+fA`-zT$YZa1nq
z1PC%c!7zc)V+qW;^hQ#%)|yv<3t<ekHTNo&GD^?rrZ!(O_rkqj!B_t#<!PpFezD(T
zo?~l0U5(x79m5hwXPFe*8dAt*c@q|CX@G{J9b?xZ#yvs#tocrGzdGma@CR*U|Bj#-
z(w@N2e2HHzi6vMh38XnLv3!9PR5YbzWyqn1obwxP^Y+Y`SCf@U;EF_Frl*$*@Y_vT
zLMG3bI+M<2!M`+8_gwJ2Q&qj6<0l-L<LDHNT-P=i#(NXRoR;nBl0Es|^#kQM;RRh#
zukQ!uY9uTOG?0cR2NzEz=PV9)(h0K0`(u&!2flR>L++%=$@ED`%5QE<rMwk>Fysio
zuy}^4B;d78ohdmU7=LCB!GysuK#CHMIo>@>)`CmBp-lwIZhhyQT6G6ix?&ZTQV48=
z<~$bpSJLCUg102dA@)N1kE>$aF0&e@#q^5Jqzx{Q884f}ultw*bfOh#u6anH{n!>;
z5t}L}QoK!wcoHboN{9pHKsep~KA&}>`PRZ0gNg(ln%F7J+2$$=m#cXSbx~FL3pG2-
z#sRJP{m@wnL;&IRaR&&Y0!w(GyoK~2^pm8JN7Llx#Wv=vUXNcys4eXK%+q^rs%{qe
zgFvl|eb#2`=*9^?$63~9Wf3EDn!3WXs*3IVc7%(UR9eeVpLL_?+^obw-RH%|J9UEB
zczXI(!Ffvi(rW?CxFXj;Ohf~^YdjQz0K%1c)n}V4{dRq-*jpj>5>!*vRgLptTP8)8
z=?;@8AAtrRmIesu!8{3ukNL<BmEgQg$_h%b+y5#{Owo%K&Z)X1LZ1r~;^d?nnRn9W
zIV9IuWX$*oZHF|n9GAxjnfIf@`!s|hP(|26r9-6|ii)<F!2cu2HWDnV$9fjUL8%MZ
z!jX2yEA7ziCFS?lLj`YY{PcBn{FjvRDDT6_A@e5779Pc$HmZp!ufAL%C&w;IOHC2H
z{@xWJx;dUwdY33%!JCrpICs4tSB?e9xH~P%MfziX8c)^aMnA4ceT<Hdrsn6#22-V>
zcY`;GeNWI|_?jf9|J{<9lWTtTMOZQyS*bB>Xw>NPmV#ptvyRQnwXczJvrkzbf@ob-
zSM8I~Csy*O%uC#QozYsA@Y;a|-#ij*dOQx*#K&SF?`6(aRZ!72ekm)igMBe+I1j}g
z7-uV5N7Fex>?r0vKJ_$sx|@b)&(D2hoK^5LTd5{&@wysvI|_yEs?fqf<S^!K&WMk!
z(UuifIX|=P9<i)>J?NS+-f*W;`(iW*1q94_zcsZ{CW#ELip{JX_0gBz|18IttXSD)
z*Xxqo#nwrv)+-0HuZ#pw0)$h%#`Krl7HC@~6uspXCRYHA&la1-#+vS00bT07*Vp*_
zdV34kILYlRl`O!(r~m*hZ?oayBML7Un#LX>Qs#Wul~`w#7>Vja?zKDXD%~%jx>Mug
zXk$GuF<T}^Qg`;1-CdsZZcVc7jdNo)&bj1kA}7}bZnJp=AilaeZajZ_8xcXjcX{yJ
z=HOYey~(6ty=3WLrE_j&x8uVh_M}Y?Zf<Lwe0pSWo-%8MV%ZeP2EP&Dn6Xx~_5q$o
z?O-yCwxnL+{zymsb5N#f1Q{GaCvBK>xUq#vu9-#{^6Lp#f1)4*X!Ut5^kP?iZF9yj
zRo!xGuoSMvXY@N}dJ}AH@eSexNC)Xf#T1*Jc=6ZT7@RFIq;Y^__Ew*QNxjSKt;;Dh
z=u?c%b=Oofpzb^Zn0og1c>W;mg~~=T#(VtaR0f5|qQ?4t-bGQQJY1Qi(ZKm;R`+H-
zBwLhcFOSxZ2zw1{{ADCv#Eo-I`<KC-ZV#(uK>&)HW+$%ujHPOmmy~A%#1OOhZAGul
zMCMBtiC&AflNK;V!Mo=+*Hgl>)asxis_D7}38A+F(miHSbW$3j)M=07;x2^pYOVtN
zFbLOu*ED_MS&m)WIOS!5muXzNRPYvPLy01@vbuVZP6~4o^hz%-of3BCl!U^)vAk2%
zN?4&W{efFTjeeU__fUomce84Gpbwa(rBsoud|Jlg?Xi?1_$ZJmRkCyfQ@>0FPvtgt
zz!>Qt+YOeS7Lr7`bAJm2?Uk<c8f_BC@6Z5ilwHHXfHn!Bh?(n*d|=W&dB?v0$q5rc
zpCy`#{Ur<@O-{j8@3M=KOM$ORpZn@_r^UFF45*xH4|fMOgfJwd`iGrqY^u0<ML6Y0
z*`fFC6-B$mlt6n0!Xp9{5(51@T0^{ugWgz$1v^8CblvV%m6h0gtIm9iLs1h@;VZ*t
z8aDeph!A%@UD6@dXAMj_c{|^~7rVB%yB*F;6yY*KsWAj^6lM-zH>PEpVb^3Xx{QUK
zH~HwH84A6*N6+kgQTF09yo)5wmdLtE`AQrCM=UXaLqta2g&q8bXFK$a^6x^MptBQO
zQiHA{5xhRNEEY};{etE>5q{D%_oHMUWy=;$dXR6XaIr7QM;aaTLI`fT@!sal^S@B#
z#DeMCtl`y2PDt?C1CtgPMvB8$Cusyw>tYF;&#U<7R@7fV0i2hPGfg$`&J&+=V`oym
z2>OXn!0zL-UT~(v#iHGnl6v%$2(b-rV(E{rC?onwHV)u>vXEh)?`f226Gd_YPtb`s
zeetEaprByalxUy>z0{=^5^U24%~xhzI_e^F3OLW<RH)VKGwLNPgi<Me_HZNTt(Wfc
z+?FDiI4gcag||THJVTCUImlXcaX}4Er!Nqr?2OmN(W9FcJOZ~|<p7nAsU-+bk$YH;
zPJ@dguMVbTOQO%|P|XdPNDU(cRidi!Zrz$Wmi#LVZ-{RXI>voCm!0(GF~DWGM|k5V
zPE{>|U$tD0jXy5rtOXOtiU_g#+|C;WFge2^$wV1!J(iQVi8>+%#akae3Et?VKmS_Y
z-EB0DA}P9z3<g`|?I2!h?ys8(^_{7ErVt*Yy%}P^ms04n`S9g*26W_!*I?wX>0)2E
zj^BEBo#ycv*5F`SP*0YU|8%KuhqpC@HB+x+ZN6r<7eLDUpR9a^?$U2x!ZUJm)?;uN
zPWs%@Q?;d=GIUYNQNLNyMN3|R1q_l+6S=aGlym+;6gzA)Cbb0rIAbRMadbWEvL*z?
zS1$ouC&&t9Iz?jJMf#XNHbg;X&AtQ&69JoMc`xHGiO$AZp`N`Fys0pni<qi(mAJD$
z8mPK#M&6Pw;Ez@~xTkzKLQ8dyHOR20`<*|bHFkTGJB3juI-1SS_M)@aC1eB$%f5+@
zCP!qPFL?;fCH}&-7%yGoh~;QKk(LwQ*IiJ{xw7b}`q9mp&3n61E!#ZzWI$59hn9Xk
zq*LsYbn=^cQ@YdWthh}>qfrvYIxLP|WtccN!sF)dF38MHmq>ky3c&+lsa58{#kTTE
zBuc6!plQLtHwL31XLMhCfIgvy^1{Ln2CUWRim;&xe^W&t{Zms0l++n4Jz2pglD+!j
zYsr{g44_9CL~O2MBwx3HufJ;P8ah7GOw5eOsKTsKe<r#(5BTqlF5fUQa~aOkGMvt_
z+2MiGp3^gGGRt|Nj5*Yjx7=M_%jUkrfkZLjvS4b-4_}#?A8g^T2&A{V8deojp^U0;
z?!(z|n#`6Ex4svLOtpu3L`Nb5i^Ajw$zrKApUB^e%E`$w&r>6%F(4zmgsF|+?sN#+
z73Z0kKnK)}7TGU<f!){Sx>i}0RlUAEwr_1ZW6XFb#IgIsZgH>YocAKWS!T0WnWWi-
zY|AycH9B&BUEJu|rhQ{lKq(=*5ynWxJ3CbEe0q`oY^q-ffR`8{2aSr1P5nJR-*~B3
z8H@HiP{=x677Dh{F~L<s*^506V%9#Yjua}G`5bR@G;*o2yK&teEs~woQnJ@K$x?Oc
zO7C~<HTDzfgUGpI&=<G~c9KtsLuE^@X6D^O<LV`M)3Jm?SZ&kfx8aYz3r>~cQpoXZ
zezUu~)fJsJrZ_WXlP!H0zGxFy=eHuISAxHYw$S2Xr{VrEIRFSCqQa?OS++_2s)2b?
zzfHtyt-|7UCk>mH^?rN?I940RbY4WyDX;4%g2^C?7ZWIxD$U(X2D?n!ZYCXPMzDO7
z#+DTDqj4lEM(j-2><7FzXM{H7Ikf77+S9$v+si-N?q{`Nj0;n<{*69iEe1u-UVZf^
z-^@BQy+mX&m>-i%zl<WEKIQyUsgMv03x=g6cS&degI|IVvUXfOTP;N_)PWy6;r6K$
z+B1##cBUwmEbppOglw|?%e=YGojZ5wJ#GYm<V+3UIOGXH&k)<7FWh!qLWnA~wzQn?
zX$)2ch~xGN&6gRg<2_5bvQOL(UQ!sAMX_g>1UuuOwl10IbslFUZtl4_izLrO)X_Io
zWCUplZCA)eTbStMN$IzC_&eph^c#qTjAT#^Y-3`fMg;xu*FWv-_^wr)Hah{eH9Rju
zw`+2laRTN_iRtWQKb!7R?<3RREjp|6q^q1j{sHZyflr^d>Z)iYa$AKwcy7wTB5>7o
z*x;PWT;YO1Qu{)($<{zw$|iDSnQO6xA!}1n@?JMXkVA2EZa78v!m>yW3svJ7)=7{7
zi((R^p3jLCJJILc<DS3i=t%U`SG(Q!q<`+NInr~Sm{@3l?;Fu2mQRo!$)ppqn>y5?
zb^=J~2Exz2v|O2Mhj`(<>dNzeXMSdv7VQ0W?Y)p)e?~)OrDwmtP@AoSy}-;F*~YIt
z$m{P{PCEvf_q5(I%PRLUr;+B_RDul^p0l@fFAXG__T6AdZ{TlH681T<rf;89-w$|E
znC3a`+Liz?v9mKcOR%6{W@e&#Th&e=m*-tN+irhPdQS-Z1ZqS=Ax3xU*Iy4tw9@f*
zPjiG%?d%gamh|j5?--}?BKP&5WoJ8iBb_bo&`l)T{ZZb+4gh`D&lVYz^nRIUs2k89
zQ(Z1&54Qy9?5EQmn`>XJ2JnVD+xzX$C)lKJV~Z$yg+IP0%axwAe#~BaO8~8QMV!{n
zF+B*1_<A<$LcmJX>Zl8!tRtcH(hWH&FlgQj7lQ%;GW^5ZGZdZMT;<E6n&;PDbE>{Q
z&R>t4vv7|aW$y8Kn$v4&d7EY+At0d7=b@O<PUNVnU&05oUI$CY_xsvY&V%g@#a#s|
zy*}&8^posB2ZxzkSmvZmo7}Y%a!U`KOjuE8+&$Ont7`aUL$JiQal=b&ilj?Imou#1
zeyCxbF70V*`YB$~4_@LQ31h!KjT@rz+gw6Zw>wr#a$~{y@UEb?r>Cvm7+gZSPA528
zd&X0Qd{rrO=<u*cWFXpsjP}iX`gCILVU{8&JhG^TUAlDX?vf>4k;gYay44D^_aA)i
za((n?W!I~HmK}ZQLTF&vyq2m)P4kpHp#S~u_OxmH_$}ZlY=hqLGmt0Lr`Sppf(_e>
zLGezKQE}8q8U_2X_p%rFi^kT7tUvGNbyDAZyRWcmLyWxXnj1(l%``7t!AQ$sMLA_L
zcp_oJzGMNt{w{_yNNy;DrCZa+QY59W;1yei{}VrQ;NlL68{ZDd;?_rW?K%4fT|&9>
zgW)TQYlTY9g_vT<r&I}ZyB1N;%CE^N;8m2y=2N_L7B#XBAwsMM<i{;b%Rgy}>8%_d
zy$B{Bh1Z_@Xy|la;yrTJ4}Moj=cc)hN)AXegDKA>Ma}VVuO`xw4y)ooQ1MVlnx+1C
zq2-HFkD+9rOkfL%^zIMbrl!+YrNPI6_WA3-0Ahr!#{0(2(fTB@!HY0Q(T>|8owxJk
zYfSm4LbY1l<xtKZtXoxanO+|eh_R(5;tLr%tlWR`#S^3gB<V@wUQW}`ueS?&5c6eb
zWu4}w4$qn!T+(0Okx&h|^2}p3wb-G>uFf;QYRXR`&GBO7UfSq@H{qB>!}Zpl0nur<
zh!}E({Ht`=Bcctt>vgA1k4-zTIf*5j<!@K?HdK@BIOUxLgX#5W0~)1f4tkJ+VILuS
zo*)eZ+!wLjbL!Uz_~tsE^w_~UK`V~BdtFa%tW9c9L2~=kxazd+`IcJwRwZEhJEKl2
zJXz4=T%3$eo9p<FFP89#YTD!-F*Yt}A{O&axjW`iQwE0UC9Iv-cuEg3+8oRF*t_HO
zSTzCa&GPMOq+>@6*&p1E30?uC;{W=~fCmhGiplc4KIty>or%zuq*8xyWH+rUKdwsv
zzxAWPS@!nsqfu$SGUhps?I>WgNbz!W+qss~9n2#6>zl>g5u6>b@N3WDmuTR#C#CiX
ziN9-j(t(G49@=R6;pt_X8Vz^$`wXB)$=cG=vWO0OB24b3C&#wGukVf>;F@Uytp*bS
z1DS)Lzm-Q9i4;s*x~5ABY+P)Lo;|rtnLyaWWD=%u4?-RIrL}JdtyhHPzb}D{1*hr}
z%e{#im=_Mxnvf)1_^(dLzc`s2r_)g+zH_aNAaL*1i&C?nsfZc8|D-u|ZkeGm$NuwF
zM({4Zm3b!58PLKyJ-6)RyMHCETN}TR%3Wh|yd$0GFDUbW92)~=X_c%)jHRciXU1r%
zi-7t4`Rri2D6<l^qM(7!YpfS*#e#S1>BiL_SgppLE}E)QYCR2z#mkV|$hK88=MlG%
zb;ni}dGgb-7ms|^i5#D^13M{+z&4=%N;68l558_Hp<yAE2t#vna?ZqoN$cS_RKhP<
zOF^Viftc>D9ka_ECffKn7Yz?1dQw$PBE9=9{k%i}aV`3oOB1xYFB+2eowtk~bDMUC
z{j;lF(cc^UHm$gtyv>T<+tkXNWWT5=I(OR+RXy(PAv3bKEf`VVdmJ?OTl@c3s`eMx
z@&`GC2<rm9dj48NTEX~?Dp|5fe|F)qT>V__1-t%ZwpT5TB1=Bp^pCxhL8cYOG*xC$
zSXx!J!6wi^1E#$(5A^oBKkq-2lluXsHmU%N0MUnv;J|L?+>ZKV$7#QL18A`r#FTbw
zHDoZf)(|BS?`?dh^3>-@7>Lz70i?iv&m4E<pG9(i^T7U&0Q~t?EW40?FIz`zxY$Qj
zqu57r&fRi0(UaNFo+X>>>wD?Dux{{w1Q{hI&{g5QO@n>D?M%9w0kbB4p>{9!!n}9R
zRf(BDVqZ30$<9e2A-A*H`@th_tx|&(Boo+64N$m3y-Hu10l&~()Zut-zyf*(9GSS*
z+=ygO;o>p?$m%PRA91dLq<{dXDDCIE4*QAaDFhCxFFKMkWJ8;tsi~4g&H6tVbo8*;
zrtq*2XpVhhNZt!(H2d<KHPo1me=lQae+iIb7`aP;O*{d{EK9#SCzk2WjsZf-007!;
z_Ipp%ib=F8?U-~`!5DECZ1hIl{Ngz1Q$rOL6zmf#Z{Y#~CWwKmvnjHSA~E;0qPz~$
zK)X6^yv<S1v1|XXX!yTH>VN&|=Mb2MSjB~R`PvJD9;Mac6!*063SqJauRz+EGnt#$
zKMQpKH5V72ATYOn^xn4Yxuj`|aWiFJA<km}8)%7$=Qj^5mASxZ%3QRWjCDsn7y5}u
zz?{)QI(>2XHsGPks$)tfU0|Nbg|j)ewcAv&RY^jpwFn^_7+?xx0PT1B2bAc4UEKev
zA^z@f;OetzFdAVx;O!k9i}XUXaBizGHNEW{n9>9-;;+A5?{9q2i;bc((kodu<G$h;
z6D;P1)@gk=Pq`wSG{G9zg;z21sSNbA)1s+WZICFtj>lbX)AYDcInzA`Z(c_~7V{7A
z-$!rqbAwEBM5>ItP*-Q?i2A}?nu<UMQd2xZlJekwS9Lz4id=z?i_!FdrTPBuzW&SS
z%m{JwWgT!bBR7xbPd4&+G{jGxru6XOeVCZ&s{vZ{l#rH}XN(b-o{5<Uaf+Q(5JXh>
zCZM8v6Z}-!%SkSM1TcGJ8F_hg8jk8G^u(-b$!}FCV#B*|sq-w6G{O>Tv9aq$po`AZ
zhHcen3lGc{3w(;6JNaIidhf<NftL{HJ|r?}Q5;hTao8;R>-$_3SzH*6k{bF5%$vl<
zlS-tu8E>Z3+Tem#b65V0+Bz;OC;w2^ldK-mL;N*{q&}<=Zf<T8$LbN!nNENOqRWan
zSKJ7R;ZRjh5pf<J9qea#dLo!a^BHPRB*n@3mE2w6avABVa`rjf8wQv$E=jA0qRvt!
z{eV!l?o3=4=VjIwK_@qpK{JE<Lz#JvDrOh1c0?o};jX`Fvpi%pq6Z~JcNYhThb4@I
zj$Oc)wrMc-D6kxh0d;6hUIn`>kHy_*duaL$zmQ!Di=}0xvDLj-4Ul}y8bKoSSer@?
ztN<4PjC<a2bR1D=-fX1$BsDML=7mnVs{0U^LJXVN#;qc`F=JB%#DbJD(6J$WO5~WD
z)_hkW(Yted7#Vn<yd*8vw|D`nO}%*d_%5KX{}0@p!@c^JOK_Oiv6Pq?A<Tf7?AuI~
zQ^CPvl~O7xM*C?vm+^|jK&@{$)puSvQF8DIsjYTsxtD#7R&!{jlMXClgXjV6xu@pZ
z+KAC?gaa{(>l$KvofO5!DI<+r(Ik+f-JElM%G6P13`B>0OE9QA%w-xjrFfvuObgTt
zxTeHqow=1l@PX}NY0EW911nJyYNbyR1V?zyVJa*=fVhwM<*j>x|J+=!w=1R+<Z5??
zQ}Y^qH}2-CNN42@_p>)VTM6d*m8x4bisht?HV5siU?7QxXqd<bSRSUOjWuUwU8nJY
z)rU_E7~b{~*=M$v^?%jF3m0>wk=7$%cJ|+&4aPaKRR}<nD~+=R&;3a4T2=I)?6#+E
ze67Dr1LuMkYT5K}1FVE_E_Rj3zh(RUze($@Q>0q}OE6JvSzL*cKzbgZ#lw@^#Umg9
zU1=Ig7R`@|N$KUpi#=qZjDD=xdKufp*3Z1etdY+Q)PctH>B)Wo4cQyrg>F|uk@UwL
ziPkFp1J;9zVs3snHNxd;P%cxY>T9o&saosRL`yUVQHQ^to?BZ5C_)})cruchTD_BB
z^E_Tq`HG-SxEIsbB4LklE6mJtx(dBOpXru_vQNxUEUW(_asTzfm=T3Mm36qC9l0Br
z8!55>^*qZusHW+Xa@LgYmR|NP{2YW~>gHUwcb2!)2u^~^wiC3>dNwsQxopEzKT5kR
zh`^LMZjaFhA9O|6(%8q3&&N&Mt)(6HQO-NX>%({V9qRVzb`rb-tVgxaZ=vlqu^cFu
zK?w6|=NqrJO+w;!%7vR#HHB#BHBgS$bfx*ll)C^wu^F8FEl^`45<QpO*Sp|^$rfZT
zpjaAxtf*Z9j7s3USz~+u09xVj<vpAiR|WxUSyfU9)1IoKnMPR^_7=*6#S)UrY(G5B
zlL{R-TA#my&Y9O(<wNqMe|`&{tzOL+>qqB_Rr5t%`N;mGtCY0*kH9GiXkafcGm&k|
zJqUw^;Q>smyu7?j;2JN;By;5bXs9}h%LPH12v{yKukwMVq2sZ-so)So@XYjcEie+7
zEB86iE(0La3bFE3ia7tbtvvAU`_mF=C$lOZo?Ac6TL3|gfo49VS6FiiMNgAA(X&|Z
zcVFpx206fIj_@UY%OweYc0uRfZxB5Hmrwowwnb{9kmuSBK+qzr_R?Q3X%a7vf$3?(
znLv1)KZ`XF3y2icU<UO!Z(EJv=Ygh0+WOQtf}qmCAQ!<8bd#2I*pkANob#`CPEdUs
zDwE-c!a?#vXn|vqJ|e%UsE9yG8B=@ouUYAT`2rXVuFOD2<)iM-PP8lNk;8#MAtEEx
zO6lfRQBfHx!@!gFAoSYiM7TrK@FhtmNK%6X6-YoMf~g>;pzB3A$Yx>aTa2RTHW9~s
zz4YAGliMi~tus(LQyA(}1f6Fgu;L@ZFu9{N(<@=N;uRMj&bw^kHd6UTC<hEt+G=vT
zPhu3q+=aFZ_Yi;?jst9VYePDwtCtmF%~>A-9*EPA);HxO9k2y}1!tQ!F*KO-BqKyV
zgoB&>Qi~+K52SsWUdu`j<76Ln#~;3DRYwl>01zcB5h=J$gH({QZMJkZ?<jEl0Uy!^
zV@fLj04nSdixpts)_OvY4WPqoJthI5_VU~J@9VC<xP@mfW{z|E2T+3OsdO|VruW`D
zBTsk$0Vj-`jT|!AZCDH>HWxp?`N?}BO1~P&4qq^VVnvy;jLLI>oJOiEE7whl&}_`n
zV%haTEM0CUCYST{+(6&o{Lb?FO5q2}o@IyPyJ^V2K1pU(?B|#c-LIrQt;c-rgT6C(
zT$5BKbF@*=k%Plr0Op%^LFo8b18wbcK2c2y?jz#|EXX)Tm|SSTbrmuFg&WA}>FKC-
z8|5u)%TggNd=H`Cy!Bodt4A?0Ymy%F+gHGF4SC!uQqVFp*b0~%ljrHbvBJ3jBh27p
zV6nTkVrMjFR_w7HJKrNVGCsk50?tM7IO?R3^$e(=iQ_u0`aj{e{ue&|f06*7xJVO#
z^$-XqXuSn^_ZN4BI^QIaO+D!ym@EWX0yyhUqk5sPlW*3|o?E@U=AoQ$-QmHjJ1__+
zTi*2S1NFa4XMoqHY9WT{IsqUlaxGsS=COH19L&dS)a1uO&wwHfhT>sfpdDYhz|6+}
z@I>Y>u#Usr#~-4Z)Elk{u&bu^07zRp2!-854~Tqo<F_Kn&8(wJNJtRJR5v+U+7Ap2
zbaNLk57N?~I|bT0(R)%KHJ+)lr7b!cUcq#~%U%9~{0Zu=(sFSY79OuX%>AO83iSqz
z6Wt6P(b*xh-ph=Kzy1RYkTebU1?auAnDQ?G?w*<{t?*=j?YRmIfZP+G*V#Ou^i)e>
z)+V3ryPxCzdj_N~+OQPG!1NPFCB-ErAg<`kg#kH)Cc*$BRV45}s=1ajF-<zGq?Fi;
zp~JvB>prgB@ah2f?BLah^aRtvWgW=yKy`F>bp`4NEf4JljV_XDaC(a5Q`EORhS~mE
zY<d3vX=_=DSHZ!|07Sm2sB5|eU;qWQM(yMQ7-rIMDnD)lV5D;!k(gyh?%{7!;jgoj
zp2A*(ML4iM=Fj_Ua@rpo9Z`6v+wTLZ&KH||i2H)&SwWqwVi>_-@U^JS<2+pLH{G%D
z&8-zuZohwft}yd+muRMV*I?w*tZOorXP@TN+g$^f6#NarQ0!c*JDIuk47aZmaIibh
z6NkKYkWt)hM4h?NaVg|ky;e!J6qwmmJ>MUYI<twA=<7oxtD&SUuwX1~2=3p1fH#rR
z&cYVn@LkSbr<weo*fdb~g6DfEnSFpVu44Ac4e?Pn>9BS6C2Qh-j-J~P<m=^Wze%s}
zJ4}VDO5ioNMl3P~ZdqD$v95v6S8mE6C{8K{w<O~c-g%ic(Jmw<J_A4Y&lmNVJLn;U
z!$~TfxD;&16{6X<%Ok^#t%@O=CrC)7-R$l2FCgJXHPWN>%l9|m;2WQdzX-K5`8++l
z%$Av%nKlMI^U(*J`H~P^L3WlFG1;WN*e2>QfdvFx$BtjXNXP`ip|9A=1eU(uM9g&Z
zWUT;GAnPP*q<aw^*l5;V7eh=L{@O<V?G$f{3Bm}h$R&s`9_9Ys&8|o<>Ai-z(J5GZ
zHy*CR=JqijX*bBq{>xS}>j3{+lfBE+i3rlaJgI+74-W{S6@eXh<CL?squFc6&&5l8
zJq3r>JK#>54d+F(_V{Xtm`N3AFBpclU_lF`THZ&=Sxoh<pps9(nvK|D>G-%D930cH
z_en}3_g6-#rjkG5oaTmO!2`hBVN-9}qD;zxjK|M7^fM-9=|MptMa<O-pv;ed2>{}|
znMi$i<@Xt+hYXR3e=Vf|5hVX0@%DQH3(fZh7Dy`Gh}|eyzCHHEH4MBl{_@U3mD7kX
zCkf!53K<J`_wNIs2i-ZUJ0AHO)E^c-K`?+Hn6U&ZG&5ga%c%;q79#)0-1e8()x(Dk
z?^kCLKX>k2iBXZ$1JYNMsh_XM`^tWvTK7d8FLIrh>C~6Y-CkULGL(!9WzhJ%;V;$f
z<n6t+>Nr$2;@VO_0t;?|5n;yKmyXnX?JMneZ&U?~TBn~AR!?unm7?Bn7YTGmAI0e_
zfYaYBH++3<rGV_=7Cx%>wTda_+o_xSz4n#J>beks9?kqFncsH3VVVt=ZU=W<LG8_f
zF<|CW=g;dp_)_B#kj^^5x6;n)^Tc*N;NZL87E!)$iSkvTlFo&!yr!ag6^|d_tARp_
z{N*wJW2z6NCdKs*9tn4uY>qVEo5rg4sa1iH-Sk6(vcI-!Ko>S=l*7_Hq*bH81XWz)
za|6UC1>YJ;yFVZ;DJ=XwO5F2nZk6+CAqtirVt8hh)Q%mdI)H@CB*3gN=%$E$DF-%$
zmqu}7dE?#G&Fwbcw1JR+Af*59e%<AOm^u4|t#_xl#u0ti$wOrmcT}SUxj$zS7Zo5S
z_y#$_#n2(~h8%>h;LzGp#xv$rZ8Shu_mMpr@Lmc9UGy|u)ZxttXmRA&IP%T*oTORt
zDv<JO>2&~7(8g)t`Bc;NUHZ%aP|5s_^~3m~(2CS4z6X(!Opn;#72Tq?A?Uv|#0p(Y
zG%E76E>}@VpRTqHN@5!OTK9&GrN<1ubz{q8*D2_HT6fU+V{NtV(O7-6i-=LGPPO0`
z3W5g_5xn>Iv&_gqQ{H;~t4BdkQ6_9K7B`6gYntxl*xF)YxkKNC1r{EzQMW5XL0-N%
z{8Ub->ysgIcG4G>^{h1;K4ghr?Iv*#0wnpD_J>X0)Wl=K_o&0V!<F4#u4ia$$pDG2
z8RV7e3u$B{HHSPG+oMjSf6+H1uiH!?x-a5q<EJB&o(WmGP9CILq_<z38E*98pK1EP
zaS2%PDgr3&jayYZJgV}FlYU9G_KKmnthpP{jfytn2F{8|Ni})Tbfq-k|JI3DUOOg<
z3$-%){9@~PEk~p?P`>7sKnRHoj+Gq)jSv>wt5atHRNUHg+KuO1rapGN#HONc+{0?Y
zuqwRht(RfiJhAU12As6L4xbZ_sld`bVo;J|Vmr~m7GHkja#xkk)8bPjnY<rpfbOkA
z7o8UrT;*TcVP0BhDj{QmrJo{w(deb%vh20Cy<6$pbm7)o&Rf#APg_1HFgLD_hcX9h
ze&3h~Xv;slk;e(a9c0xot#KJI$6!JE4GGpO9lp&#I-3|QFnv4S93anUY>s%1Wkb)K
zdXge&2d&}IRJ3BHQNRoZFE~Uqz%Tp0PmzGWgIgHztXaS9*qob2xtcHs(HEB>7n&0%
z8JswKJmCm6amU$yV`oWjYG3w3vC(S&2b&AgRs1&qX$bO@rg7@OikEDVT8prMc<7|n
z5=;oKaC-43>cImOCPYISo_4}hRR~$}W&zLu(tf~b+n6P%prBY|o!#kzu1M^DaOlF=
zmpL$h>R8J?=GWVtuDd`6z23K3o9^7Kc2jjDiG=M+wgXg^8+`!#u6z=`p6tDsJljNO
zVoJw=mjZ;`WjOK`%|-vb@CD<<L*Ee=`~nf!5}8Y$ju@v>bV;SH7@|V`bF*B}D2g6I
z6aKoL_3PTL4c_Yj_!laCT7WV0LYu2w2)T2|%o_b<xxFRsw`E)V3%7U7Seis9-+D6(
zzszGM&T~pezFLzR6UhOW0)DioH_`|&6jm_W{ljLb?V$^;U@SNqT+Jwd_pliQBctRs
zFo`FQ)}wb=zOFt7LRP0Axy~0U(8KR>)6@aOCybDlgbfY<RL6)lN7p9aTT%2g=C9Tk
zf#X<QWZv9F_HZ$$9RkXMw%hsYZ=Btj`t&I+NSrBvX^OFbikw#+yv`c8iOihZO-%?V
z;?zG?)PF6+()V$3jjFG9-+w(3OQyFyf8mOw@(+io=LFo3&7hW?B7SmNf9gXUStR;x
zWlbP*;&u3P<9fd_a~SfYCuNU=+g(|w8#it!`D?!Zn30i@8O?4;cb<s~NpEhnGCQfz
zg-Ye0uVm_#1v~L1q$Io}qRSK8UG>A3JoMf47z3MXsDc^zEjbF%>B@7GlNU}V#bIb!
z@N^IKy&9cDh_&?1$ZxY?UB#WkT~UqH-D%{TOyoItTmx!WhDk67R-vE1l7$c4hHJGZ
zqXVO{9cqV9MX(YAsIk*z<b$ZF?y*|8nJ8APwTq4>Z+d?h?z15+V|@$j&9kp$`VZfB
zhNW+UtM{@{mzS64dvIOq13c^OrQdc6k0bnYvv$N)qS~lvbnxRnRr%k3_}7H>w>}Ir
z2kz5Sk0<b^AC>iXx}II^iH`f7%3EF#`e&Mzq`8&G&;n*Sq}TrX9@svRNlV|DK<Z2d
zAspZr8ehrq`#YvtA5Pz_jYry7I(J`x=ywEK>uqr`Y=Q6V;-^oa2!I16ea~WHobRl&
z(hnZ|lR>_!f1Uvy=iZ|mi$lzVW2$CAbN$-FAw5`>Vu-=6nXN+%_!CW3GeY$`x32%b
z;cxViT9c&-U|!BSn|u#Br1$>EMozKx)U`X`hE_^pG=xX(@pg&>x)*4HkXfM%#>dAg
zs-4Hom@SSK{r1ztI+0Rl;8CJp%=M~}**6NPB8XiXka_2efcW}F7x25V5W}G7dIhG6
zw-5gBuOI*G2NVUVZKHI`iDv2-{m$yqUp}7TcewZ)Jsi_uxmD;zMR+HseQNa$_6_s)
z--X7(f&Hr^>Cgne5yOkY0KX6;{s$Th^p+_UgN<?9zflD36*#nfZ@JQF@#%}NX2>I0
zgfJT*h?A8k9-IW4)&XeRg|f$z^TE}p4+3__!(fiy-rm<RVJsH3eazus2%MVWi?MK&
zozYp1Je{Um&&9zE6TZzNYIR4k|Gbp6?&e0blK2oqlF!o)35UKA7!mGG-Y2b;j?}b_
zi~(xV?9z&e?+-8VU-$iO8P7RO&%G>EFV-ule~wIyJUFLAi(t$?1_Db>soEk11Sq0j
z3p+c$(8>Od=vYt?y9^D{daXQ@ShSvp;%|)euQ}rn5`)zPzp>i5=JgssfC#McS{_Zh
zHkiemI_Ulz30ldq#J8K87U^~0cT0Q}SMj@MJFIoYgLQcM;3S$h8Jsms&Yn|9Vs!pp
zeGE{9VJ(bo`|o{G&RQ-1>XF0t+f5zT)zonV9!c84uid!EnOZa3CBEEnF8kshOO9aj
z0SUtQXtoR*&4P^gt21zpU=hART6pj;y=QRXiB-1YR9da1wU(Z-o$)+)*GbY`5)g0p
z0*o35H>>zp!s)*gGc1Y_3S0URVV7Nat*nMm6(J%b)K7b`0^A)n77$J<$?LN>pR0dQ
zb>#?1a|~n8)bkDny(rKt@}0*ak#Lb6_ISCs{GI1FszdWU?4FSZfr+uflJ$b5gM0ez
zGr!UDf8Xx^^;_^gphHH2{4NySSIPRQq!jHh?PMlVfbGP3aPH|dcsFZ@)uSX<-_ke^
z*Q~rq<=2D%tGE95)mte8+Q_b2t4;!FfVBd}ffLo{u6GVr50@gZakjOcy#peB(^C0{
zc}KAZMX-ju7uMbxDItV`eN+5ktswO)6Y@80HmeHvm)f7UuiQx(EmYGzf<+v^4<zTM
zfw@^XE2}SWMMr4c-ecPv7aY84M+?ZT0I6Gr=FBq{{PY^a|NTJ!IXV3HJqhHbwkdgw
z$)-Xe@ci0!rqV94D{Tbo1$@<??9jsvhn6-KX>cW*@Wp$1+N&=7t2Z9(?>|J|XOO8b
zB4K|#j%53^BS~hD-aB5Md;Wl11K3C}^^;7kZO7~J#4>NFejq&kYlVmQU||8QUXl(y
zY1hmj!4!dI<CXb2b^p-cZUtIl4D79a5Yr2+8CiIec0jqm9qa$H$)891R}1dMM0@o3
zEGLz-J|be+4VfJyYzogW9-RBEAsiST3DD<FEM0cp)Oi922lX#s{oAjHz)~R?<92pL
zw*(p0J+s!%c4awU=eKLKO@r-rqbnyP#huKG^!&;N7B(&>9loi91@9;LVk8oq@SMH$
z#=!GQ(CUoLvGbLS+xbZJ>(Jp&gmT{N#IDIF&AG}8k~|EKK#pQV+^9%xCH2d&>zj3W
zQphv<k*~^JT8xl<2g}eS9F`Ckb~nNV3*IYr9zn1l3$BJyE05jNN+@3RW7KP`tz~Yv
zv8L3)Dk2Ghvz{kvrc<Qn<$gnx=r?};E8_c&0uBi7KpY(WdO9&Cyb_!^#SK_?7h1LF
z{(ZJFW-6ke{^vScE)mFut()2<rW%zXoiFCzJI-<N>wlLS{&GFAC@A#w(xZskYC#aT
zs%J}Ic19IBtsmqUZOdD3-;o)A0L-q|3niAn8_2&A^MBjo-(RD<4p1oywdK_YxW?w>
zFZyY&mk2Q)ocfcPmQm<)DUn-+C5Z?wkt6U_Vd?6)s{vX$f_^&bz!z-*j)@G&g{Mgx
zJ$-(#%L;9ld+)|TQfr2&+=;Wi_BW09@AiK{DzjCv;vqZ(X>o{M;xrIo3X}eto^>Ay
zei8*1e2hAb-+h3h%^|;UUL+8utADV*gRl9w%XugXJokYiMCxp=!PzG9TSfa-ocA?x
z4_47nFdW}K6C{1B(Ajq6vGs4J(BHrHzgRA8852)JOU^G40=sKlDY{UKf+PnEi}NK0
z3m}|hHDDy{pkCsbX}S~uE)W9Esw-=kLVKitt@ZF8ZUgtgS75Vo(o~^z{i0oB;JL{0
zNPeeF2l}Iv=tk$%%^VQp%A3v+h&~GShUN!8%Km0)iCCD$0u6`KO<hWKZxfG6*)LYd
zIZb-1UpiuPOuwM7{#d?i=K(YSTe>(9K%bR>wwES&(7s4TOHVI;6*RgI8eF&Y(-#!~
zb>Q%e1SVdu$P|*x?GV}c)57mNf35KlAKumgQ}BVaOG&l<S?c&4yPc8TwNGXxx&go5
zF+c@M0nC9nRWgJr!1?N#Cv<RSzdrS^AA~VC<0H;y%tbm5SC6t-aF`IyyMsu)|BDP-
z0`XS2ccpcBVyorTJ?h5j8;`)H$AV+i06qKJIoQl0=-RbwX1IiA)E<pxNPF!cA$bhj
z!K`sN<T+`27uLJ4XR}581t<Pm|37(1@5Cs$<2QDu@ql7sZkz3XW+&FXZTNuw7ZH8i
z$9PRTyUyFIz!<x8Amn~g&>=i@sDj|zaKrEj9$YKW-6Wb_zwP6hy3&Tzzohq$`R4@?
zSg7o?_t4+3etHx>J=9$RXgIIoqQQ_B5S=~+qSN~z$Wg0$T;x~q7etMtfnAzrUpbg{
zyRXXW*ZK}o!1pi#xxVOn-XRGOD3>%2rH@d~j%pun#4nxtJ-&reb7=rn{BWXmtL%?t
z5kr77{QQD+ys+Tc%0wS!&xuS{J;E8Dzy6ae;Wvm(szK^e-)XD~oqD4>PyFXk4uK$k
z5&N$@xdx9tqt8?YCZY1TRpeBA+arG29^Xr0QfWcvl}0IF$H`-lAZvpKzXGaHx?Wwd
zpD2T{v9Sd)c8}47Zf;s$mH27y{RqE}P+aOS$=Bf-YgbemJUlUepsiuuM9|&EZC)*l
zatO%z6~wS_+b3ps+k2jv{6&Di3c!0S37foSUs+e+m9KRq9D7U_Fs#MbwHB|7piW{2
z{w+h45GM-z=Sq9bA?whxy;hJr2?&ZUGCB&%u)@@ERBdRB;FE&*Fk@0e!nW4%#_oTR
z=n|p7#GaR5+g)P%4bST11;04x7kwSV0}Px+<>reP!pF*4YY1VqHv`cz>PwS<sw(&>
z`6oRtN;AVeoxRHH_gch<$sNB||AmZ{RtFAZIZ+@x@er!&?+YyBu5_{4pFU#Gb+|By
z*9R>QR^IV#Y|?t-5%1Ny`mfdLuLT@Dc$342V@$jfT402rbkz+Uh>38}EDU1%v&5q3
zB0P<Rm^j6lFTUE{N$JclK0f%4f6qIxav;BwVukn+kjcr(aDdS1;}c@sEQW}%kNi_Z
z_87wFfGqC<M5<&HUrBc)7sF5p44>On!cuD(!O<PgQ4(gUJDt?W^5@%ti%E73T`4+h
zQlz(R-}*iKK=b}m!T<gNegep^C9LPCpR;M4r8cJ;F^S8bi~j1KMe!$R!WQsYTXwQV
z&1g>bCmBoEpF9ek0!v4LOA+UFYP<rKOZRXBHMA+Nfk6ywLLVM;{FGn#+@#q3Q~pvx
zW?5RbOaB?wKg1jIy#l01lw;V<9rbh_9$t{}+ox_b-YM~=`Y9t$7=4CA%L4r>jT(2;
zZ3M9o@#R1FiVOXYA&=A%x;yKcE$7-8gr3`Ur*_NNtS6uiniGHCK{=%&Fv0MVg@!`4
zf#{t%!${X(0f>KM?fsO_|0_LxF9WNQ8kNY}tio781PBBoEsCejuU@O~CzD!p0>33q
z`pZLEz6SKh&~nOuhEo66ul~op4bua@i_LY;^$!RP=kSL^_@gZC)M@fX|0LO#NnF-f
zJNT`wttDej(oufzw2wl|kkYaMYYeAiz-W;e7(!cZn(wmg68YvL?(6)_ux+UVI%&$&
z;A+S-;d9>Y)R#Ddas^OLbO{rg%M~wKP9>#1dD2Ifa<xn}a{k^e%0Cx!{CP{%)9tl|
z^&Q^Z57NDk<TSjmfzwd`I>7^vBm(MApIvE{q|BvkGTivjl0aHT5V!S`1qsn+6Tbax
zEZD-Te@S-#m^J{>ms5koaNrRkpG}698Au4JA^_Li?<%rC{l~s7NHNqgv^LYdAEm9W
zJ#;L?T=FPf>|mG!pwsF%AI{<qa{P?lN>gDYn~_zQul$*Dvod6fAYD)=CLw9|15-se
zt!gzJe=^j8EckyphX0|!VJOUEy8AnDjrdBhy}qAS@3q{-&asynr|u;4$HA}&LC7o`
z&qOvG0?fIw67%LjF`)>%Uk=WpURE6kaJC)3Q**euKmg=cC>WvHz-hg`CagNcJbXj`
zPe}_BrPPFXynw^aZ=FuVdkDwy{}+m|C`>@Pj9Bvo+#2ImT?83I;Ws5Wei_d2J#r9#
z80(r@qq!Wm?ugc{JrcJHmOch<XmcnsFTUk0F6;2ltg!07RHT0QglF}i8xLRw3b1~1
z85K%>*5KRt;!w48FX#0$M^NYiG@2j_OOF^%QZ60@MIpLafw+6Yd33i5+U)N<?Dc7H
zY5h;5sK*ajDFG@BG`a<S%iqmBc#a~L2qYXCU}`S$B6SD~7hIAnxFpfkRN_B#r?Zl9
zXh|Sfew`KQ&Sf43SbG7D`Wg2Rm4SXzjs+<wbs(82UPx$>g1>wBZnw^3p({Lifds@y
z2=D&!so6+ah{2c!7v)|d5Op=;R0gp>fBjIo2>R6=I9q!G4ayejxN-dEX8v2_p<~SB
z{mu{G5aIMSSpTpSVEDj-^R+p<2|uk8=kJfmRweOru~Rt`F@puq22?Ea+L{#pf)q4_
zP<)ufXZyVK;Ki&#{11tgE(wIp2()PL3+Rv8U+6C~UcS-IV|@e(P0UFzVsigd#zGWt
zlVN!}zL%rfnZw>hcAL1-{XwR@)M2CxC9fVYgF=Y?>et#yKRtlMvsQjwygTUP^Jsg=
ztH?qR!DLrK|3VU5;o1nW7ux0Z>;7<RI*DG5y;=ZG1XjBNyJl<Uv`U9dEI-AkuQphW
z^HO*|^m|In*4EZ8fJ<sRN4Vcj=F-@(Os666!=8PT3BxtmUzW)bFyxCzcDv>d{WLoN
zhi3Vglnwi{PDEP(zDN25`~hL_E|usnB~K@)(3+JzKi&!=uTAu)`j^9-osr9%eEdhE
zud(3ALGHQhbGH3G7(d|^HMMCl{a|w*TC>+KteQ3yem?)+kG)FBv)pSl2l{|HU#~z!
za=I?`a8Kmtfm*O&B+Zv9heVh&6gbRd_moG0`7rb5;uyVd-Yv|>j_G_Jokhifir5+}
zU_Pt^X!r|9;*F4cYhlbg<w-mUt{88r|Muzx7&AUfw$OAsGRM<5U;!gdT0TQT=G9!T
zn%S_z_QOmS$XDCAh#|R;W<|DYfQ;Ro<Uvap_76dPJ>JyQGn$>I?PiXLg^~(}++oM?
zSQ~aSgjGvu>FDa7nedGzzo4!>{Qj*Uj5^2%Y?{Sa)S%TN7ShJ#_f?ZbYU}fzb2gI(
zgYRqq$c7J)f;zaQr!fE(-f)#a>4KxLD81?2kGnj4ZRM^HPRI*g1p20kaKT{rKrdfk
zUq{?0dzy*ap%oU&+CPpc4f@I^=(H3H*_kBbJQB$$o*$r9C3w`#4(xO?O!4MBVENr~
zU1olD&iR7n@Q>Q!MqbkKKCjE(>r-TA=sal2=-^Oa{t*f0U!g)=sKmXNFJG(zN9sKI
zf%s8pJ-%L8qxyC|#-JA1>Toks+Yo&PM*ZW&#6{uX=F>K1RPFzLEb1q#|A(NzeHP>?
zA9|TDgEeItoK=&vo!=(Ai5?V9z5Bx$7XuAftx1zL{s0VWA55XuUGT@#JCfiKVB8bz
zEIm6g88c3p#b;c31%<X~b{|>cK(i2&5++eBVqmDJ2SAjrG)hHwg90UfU<H~k8o%#2
z8i^PTJA<ir)k2tn_CY<1n>PiUokr>qpz+J&!<Pc^&$o^X1?PY_Qvn0zV`$dM?zWZg
zSmmiI>MM4HN8<H@?T3TNRehMV9ca2Tw*Zp`Lr49V8%rLv^dsfpuB&8b`k=>RPXOi?
z@PlvdqCEWf0xC7QOk7{!(U{PfV?FE$tPnpMX2XI90;_q1Upz|<tW7zc%sl`ASf){(
zDk-`D(wutcPC#GqHSp?hqHt(&@hh7F{fX6hWU;AV<LCJ{Y#-(SAj(6#P(dIi#U|+s
z0f>UHibY?(ZY%Iar7S^3`*7~pDc1+z_3q?@wwD%dr^s*fC2cFQ_LaUAnAZBA=F6cz
z{1KtYMDTp&EC!xm&jMq_%0CKAp1EbE9<}z8iCgs~AT{-Lx-=pEwv`CmMR78d#xs7r
z^I`v$b^rY;ZL>h2P0v0t9DKhcd06SfB-_`W2T%4MK<ffslW8jLxDn(4B@!-gyYBTg
z#R208reHe!9;NiV%N)&(LEVjj9?5xKqyXd~HPMg$=!XkI@$Bz1;mCI5hLAZZDJU6b
zhZH#9|5(gTNr+_f{B%|NQ-vL(wb3v?|4=XN;Mn1TAWuHBES?((h=T$4c{Vf3?4qP(
zfIY5Rv#68g`A8~!+6j=8^p&;9CNp4c+ssT}2FV4}{dV)cRb-=PBF|AR>=N)gByGiu
z&B4MX)GS`#r&3||oy{0iL43y}OGe!iRe!}B&g7MpgMo!eXKHp6d9#uUP2RtXtG8cc
z!nf>%7PLMpc@AZ0z@!~SgmD1P3-Y^kfY@>q2rbVjd|F?l&p>|owl=YX5E`pFMj*`j
z@J(saO8x4jyoE=I?wBa(i7o+PQlEx~-GSA0$S%@P_O8Q}VW9ldA>i<=<Sj7$l(?p8
z!eI2f7VdT`Wkd>Pw|-mg!vv1=f~Am^)KRMCnKYnz(vH1UpIlL=0YGVMpt1MsNdwA=
zpYi&`zGocJi{ooiWt0ineU=x#va<5pYb;<>i0IBsZ(IxMGcRwov9W9!YEG?+?gq>k
zExxxpzmhscv0OX!v{u!1n7o_5ExWHk-`TJ^5be&9)K7Ud1~Sl1O4#rW)t4uKB)(H<
z3^4uRBog0R%E*EndD6N|?h8y<P8v|1dKJ-@srjhcA!RJCxP%t9??PF|JBnjGvBCy0
za*RXo-mN-oTIY`Xkt=Of#QS+whkdTNJ0`GiHfhf3s~Cl7vGF56x7>tU%4GZQZ8#a$
zGkNWS6i;N<iof0Dus73-x9Z{LX&Zzcuf8`EZi-L%+c0>2_48NQ(x2Rp1if+QOs=oU
zsNlUB<Dmyq<8Y6<=Q{9;Oh>VPH0QxC;If8X+<agoG1+5U@5#vYqC*|zo-azIbu%*|
z)94uahP@b8<)S82$7+}+Lnn<+EivA2yAu#a6wwyp5HW*d+8=Uom5i|DDDHl>5K%h&
zW^(RL?Mj0y`dk!qEmODGvbg7K$$F*$h8a^$zsbrsm2GB00x~Vj5y+)`Ym#K5=!My}
pRFDs<LH?=~I`oah?&9q+^YUI%KfT`Kjs^ZGT~?DTma(|?{{a;<3*Z0%

literal 0
HcmV?d00001

diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 2db51874c0..f43b60ad75 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -144,6 +144,9 @@ class Manager
         $successfullyMsg = '';
         $groups = [];
         $status = [];
+
+        $headerTabs = $this->ITSM_tabs('list');
+
         try {
             $ITSM = new ITSM();
             $groups = $ITSM->getGroups();
@@ -165,6 +168,7 @@ class Manager
                 'successfullyMsg' => $successfullyMsg,
                 'groups'          => $groups,
                 'status'          => $status,
+                'headerTabs'      => $headerTabs,
             ]
         );
     }
@@ -276,6 +280,8 @@ class Manager
         $idAttachment = (int) \get_parameter('idAttachment', 0);
         $addComment = (bool) \get_parameter('addComment', 0);
 
+        $headerTabs = $this->ITSM_tabs('');
+
         $error = '';
         $successfullyMsg = null;
         $incidence = null;
@@ -884,6 +890,110 @@ class Manager
     }
 
 
+    function ITSM_tabs($active_tab, $view=false)
+    {
+        global $config;
+
+        $url_tabs = ui_get_full_url('index.php?sec=ITSM&sec2=operation/ITSM/itsm');
+        $url_setup = ui_get_full_url('index.php?sec=general&sec2=godmode/setup/setup&section=ITSM');
+
+        $setup_tab['text'] = '<a href="'.$url_setup.'">';
+        $setup_tab['text'] .= html_print_image(
+            'images/configuration@svg.svg',
+            true,
+            [
+                'title' => __('Configure Pandora ITSM'),
+                'class' => 'main_menu_icon invert_filter',
+            ]
+        );
+        $setup_tab['text'] .= '</a>';
+
+        $list_tab['text'] = '<a href="'.$url_tabs.'&operation=list">';
+        $list_tab['text'] .= html_print_image(
+            'images/logs@svg.svg',
+            true,
+            [
+                'title' => __('Ticket list'),
+                'class' => 'main_menu_icon invert_filter',
+            ]
+        );
+        $list_tab['text'] .= '</a>';
+
+        $create_tab['text'] = '<a href="'.$url_tabs.'&operation=edit">';
+        $create_tab['text'] .= html_print_image(
+            'images/edit.svg',
+            true,
+            [
+                'title' => __('New ticket'),
+                'class' => 'main_menu_icon invert_filter',
+            ]
+        );
+        $create_tab['text'] .= '</a>';
+
+        switch ($active_tab) {
+            case 'setup':
+                $setup_tab['active'] = true;
+                $list_tab['active'] = false;
+                $create_tab['active'] = false;
+            break;
+
+            case 'list':
+                $setup_tab['active'] = false;
+                $list_tab['active'] = true;
+                $create_tab['active'] = false;
+            break;
+
+            case 'edit':
+                $setup_tab['active'] = false;
+                $list_tab['active'] = false;
+                $create_tab['active'] = true;
+            break;
+
+            default:
+                $setup_tab['active'] = false;
+                $list_tab['active'] = false;
+                $create_tab['active'] = false;
+            break;
+        }
+
+        if ($view) {
+            $create_tab['text'] = '<a href="'.$url_tabs.'configure_integriaims_incident&incident_id='.$view.'">';
+            $create_tab['text'] .= html_print_image(
+                'images/edit.svg',
+                true,
+                [
+                    'title' => __('Edit ticket'),
+                    'class' => 'main_menu_icon invert_filter',
+                ]
+            );
+            $create_tab['text'] .= '</a>';
+
+            $view_tab['text'] = '<a href="'.$url_tabs.'dashboard_detail_integriaims_incident&incident_id='.$view.'">';
+            $view_tab['text'] .= html_print_image(
+                'images/details.svg',
+                true,
+                [
+                    'title' => __('View ticket'),
+                    'class' => 'main_menu_icon invert_filter',
+                ]
+            );
+            $view_tab['text'] .= '</a>';
+            // When the current page is the View page.
+            if (!$active_tab) {
+                $view_tab['active'] = true;
+            }
+        }
+
+        $onheader = [];
+        $onheader['view'] = $view_tab;
+        $onheader['configure'] = $setup_tab;
+        $onheader['list'] = $list_tab;
+        $onheader['create'] = $create_tab;
+
+        return $onheader;
+    }
+
+
     /**
      * Get list tickets and prepare data for datatable.
      *
diff --git a/pandora_console/pandoradb.sql b/pandora_console/pandoradb.sql
index bf3d8b98f6..f6b49f1528 100644
--- a/pandora_console/pandoradb.sql
+++ b/pandora_console/pandoradb.sql
@@ -620,19 +620,6 @@ CREATE TABLE IF NOT EXISTS `talert_execution_queue` (
   PRIMARY KEY (`id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
 
--- -----------------------------------------------------
--- Table `tattachment`
--- -----------------------------------------------------
-CREATE TABLE IF NOT EXISTS `tattachment` (
-  `id_attachment` INT UNSIGNED NOT NULL AUTO_INCREMENT,
-  `id_incidencia` INT UNSIGNED NOT NULL DEFAULT 0,
-  `id_usuario` VARCHAR(255) NOT NULL DEFAULT '',
-  `filename` VARCHAR(255) NOT NULL DEFAULT '',
-  `description` VARCHAR(150) DEFAULT '',
-  `size` BIGINT UNSIGNED NOT NULL DEFAULT 0,
-  PRIMARY KEY  (`id_attachment`)
-) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
-
 -- -----------------------------------------------------
 -- Table `tconfig`
 -- -----------------------------------------------------
@@ -794,30 +781,6 @@ CREATE TABLE IF NOT EXISTS `tcredential_store` (
   PRIMARY KEY (`identifier`)
 ) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
 
--- ---------------------------------------------------------------------
--- Table `tincidencia`
--- ---------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS `tincidencia` (
-  `id_incidencia` BIGINT UNSIGNED NOT NULL AUTO_INCREMENT,
-  `inicio` DATETIME NOT NULL DEFAULT '1970-01-01 00:00:00',
-  `cierre` DATETIME NOT NULL DEFAULT '1970-01-01 00:00:00',
-  `titulo` TEXT,
-  `descripcion` TEXT,
-  `id_usuario` VARCHAR(255) NOT NULL DEFAULT '',
-  `origen` VARCHAR(100) NOT NULL DEFAULT '',
-  `estado` INT NOT NULL DEFAULT 0,
-  `prioridad` INT NOT NULL DEFAULT 0,
-  `id_grupo` MEDIUMINT UNSIGNED NOT NULL DEFAULT 0,
-  `actualizacion` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP on update CURRENT_TIMESTAMP,
-  `id_creator` VARCHAR(60) DEFAULT NULL,
-  `id_lastupdate` VARCHAR(60) DEFAULT NULL,
-  `id_agente_modulo` BIGINT NOT NULL,
-  `notify_email` TINYINT UNSIGNED NOT NULL DEFAULT 0,
-  `id_agent` INT UNSIGNED NULL DEFAULT 0, 
-  PRIMARY KEY  (`id_incidencia`),
-  KEY `incident_index_1` (`id_usuario`,`id_incidencia`),
-  KEY `id_agente_modulo` (`id_agente_modulo`)
-) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
 
 -- ---------------------------------------------------------------------
 -- Table `tlanguage`
@@ -1095,19 +1058,6 @@ CREATE TABLE IF NOT EXISTS `tnetwork_profile_pen` (
   REFERENCES `tnetwork_profile` (`id_np`) ON DELETE CASCADE ON UPDATE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
 
--- ----------------------------------------------------------------------
--- Table `tnota`
--- ----------------------------------------------------------------------
-CREATE TABLE IF NOT EXISTS `tnota` (
-  `id_nota` BIGINT UNSIGNED NOT NULL AUTO_INCREMENT,
-  `id_incident` BIGINT UNSIGNED NOT NULL,
-  `id_usuario` VARCHAR(255) NOT NULL DEFAULT '0',
-  `timestamp` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
-  `nota` MEDIUMTEXT,
-  PRIMARY KEY  (`id_nota`),
-  KEY `id_incident` (`id_incident`)
-) ENGINE=InnoDB  DEFAULT CHARSET=UTF8MB4;
-
 -- ----------------------------------------------------------------------
 -- Table `torigen`
 -- ----------------------------------------------------------------------
diff --git a/pandora_console/views/ITSM/ITSMTicketEditView.php b/pandora_console/views/ITSM/ITSMTicketEditView.php
index f534ffa870..686cdad25c 100644
--- a/pandora_console/views/ITSM/ITSMTicketEditView.php
+++ b/pandora_console/views/ITSM/ITSMTicketEditView.php
@@ -90,9 +90,9 @@ $table->data[0][0] = html_print_label_input_block(
     )
 );
 
-$ITSM_logo = 'images/integria_logo_gray.png';
+$ITSM_logo = 'images/pandoraITSM_logo_gray.png';
 if ($config['style'] === 'pandora_black' && is_metaconsole() === false) {
-    $ITSM_logo = 'images/integria_logo.svg';
+    $ITSM_logo = 'images/pandoraITSM_logo.png';
 }
 
 $table->data[0][2] = '<div style="max-width: 150px; float:right;">'.html_print_image(
diff --git a/pandora_console/views/ITSM/ITSMTicketListView.php b/pandora_console/views/ITSM/ITSMTicketListView.php
index b2e8d8eb8d..50ba2dbe0d 100644
--- a/pandora_console/views/ITSM/ITSMTicketListView.php
+++ b/pandora_console/views/ITSM/ITSMTicketListView.php
@@ -38,7 +38,7 @@ ui_print_standard_header(
     false,
     'ITSM_tab',
     false,
-    [],
+    $headerTabs,
     [
         [
             'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',

From b1c662da6794de812ff78f743555c2e8db358c2a Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Mon, 14 Aug 2023 14:19:09 +0200
Subject: [PATCH 015/116] ITSM pandora_enterprise#11471

---
 pandora_console/include/lib/ITSM/Manager.php  | 131 +++++++++++++-----
 .../views/ITSM/ITSMDashboardView.php          |   2 +-
 .../views/ITSM/ITSMTicketDetailView.php       |   2 +-
 .../views/ITSM/ITSMTicketEditView.php         |   2 +-
 4 files changed, 96 insertions(+), 41 deletions(-)

diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index f43b60ad75..07d5df4ed9 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -145,7 +145,7 @@ class Manager
         $groups = [];
         $status = [];
 
-        $headerTabs = $this->ITSM_tabs('list');
+        $headerTabs = $this->headersTabs('list');
 
         try {
             $ITSM = new ITSM();
@@ -185,6 +185,8 @@ class Manager
         $update_incidence = (bool) \get_parameter('update_incidence', 0);
         $idIncidence      = \get_parameter('idIncidence', 0);
 
+        $headerTabs = $this->headersTabs('edit', (bool) $idIncidence);
+
         $error = '';
         try {
             $ITSM = new ITSM();
@@ -263,6 +265,7 @@ class Manager
                 'incidence'       => $incidence,
                 'idIncidence'     => $idIncidence,
                 'successfullyMsg' => $successfullyMsg,
+                'headerTabs'      => $headerTabs,
             ]
         );
     }
@@ -280,7 +283,7 @@ class Manager
         $idAttachment = (int) \get_parameter('idAttachment', 0);
         $addComment = (bool) \get_parameter('addComment', 0);
 
-        $headerTabs = $this->ITSM_tabs('');
+        $headerTabs = $this->headersTabs('detail', (bool) $idIncidence);
 
         $error = '';
         $successfullyMsg = null;
@@ -382,6 +385,7 @@ class Manager
                 'users'           => $users,
                 'priorities'      => $priorities,
                 'priorityDiv'     => $priorityDiv,
+                'headerTabs'      => $headerTabs,
             ]
         );
     }
@@ -395,6 +399,9 @@ class Manager
     private function showDashboard()
     {
         $error = '';
+
+        $headerTabs = $this->headersTabs('dashboard');
+
         try {
             $ITSM = new ITSM();
             $status = $ITSM->getStatus();
@@ -417,6 +424,7 @@ class Manager
                 'incidencesByGroups'     => $incidencesByGroups,
                 'incidencesByOwners'     => $incidencesByOwners,
                 'error'                  => $error,
+                'headerTabs'             => $headerTabs,
             ]
         );
     }
@@ -890,10 +898,16 @@ class Manager
     }
 
 
-    function ITSM_tabs($active_tab, $view=false)
+    /**
+     * Headers tabs
+     *
+     * @param string  $active_tab  Section.
+     * @param integer $idIncidence Id incidence.
+     *
+     * @return array Headers.
+     */
+    private function headersTabs(string $active_tab, int $idIncidence=0): array
     {
-        global $config;
-
         $url_tabs = ui_get_full_url('index.php?sec=ITSM&sec2=operation/ITSM/itsm');
         $url_setup = ui_get_full_url('index.php?sec=general&sec2=godmode/setup/setup&section=ITSM');
 
@@ -913,7 +927,7 @@ class Manager
             'images/logs@svg.svg',
             true,
             [
-                'title' => __('Ticket list'),
+                'title' => __('List'),
                 'class' => 'main_menu_icon invert_filter',
             ]
         );
@@ -924,70 +938,111 @@ class Manager
             'images/edit.svg',
             true,
             [
-                'title' => __('New ticket'),
+                'title' => __('New'),
                 'class' => 'main_menu_icon invert_filter',
             ]
         );
         $create_tab['text'] .= '</a>';
 
+        $dashboard_tab['text'] = '<a href="'.$url_tabs.'&operation=dashboard">';
+        $dashboard_tab['text'] .= html_print_image(
+            'images/item-icon.svg',
+            true,
+            [
+                'title' => __('Dashboard'),
+                'class' => 'main_menu_icon invert_filter',
+            ]
+        );
+        $dashboard_tab['text'] .= '</a>';
+
+        if ($idIncidence !== 0) {
+            $create_tab['text'] = '<a href="'.$url_tabs.'&operation=edit&idIncidence='.$idIncidence.'">';
+            $create_tab['text'] .= html_print_image(
+                'images/edit.svg',
+                true,
+                [
+                    'title' => __('Edit'),
+                    'class' => 'main_menu_icon invert_filter',
+                ]
+            );
+            $create_tab['text'] .= '</a>';
+
+            $view_tab['text'] = '<a href="'.$url_tabs.'&operation=detail&idIncidence='.$idIncidence.'">';
+            $view_tab['text'] .= html_print_image(
+                'images/enable.svg',
+                true,
+                [
+                    'title' => __('Detail'),
+                    'class' => 'main_menu_icon invert_filter',
+                ]
+            );
+            $view_tab['text'] .= '</a>';
+        }
+
         switch ($active_tab) {
             case 'setup':
                 $setup_tab['active'] = true;
                 $list_tab['active'] = false;
                 $create_tab['active'] = false;
+                $dashboard_tab['active'] = false;
+                if ($idIncidence !== 0) {
+                    $view_tab['active'] = false;
+                }
             break;
 
             case 'list':
                 $setup_tab['active'] = false;
                 $list_tab['active'] = true;
                 $create_tab['active'] = false;
+                $dashboard_tab['active'] = false;
+                if ($idIncidence !== 0) {
+                    $view_tab['active'] = false;
+                }
             break;
 
             case 'edit':
                 $setup_tab['active'] = false;
                 $list_tab['active'] = false;
                 $create_tab['active'] = true;
+                $dashboard_tab['active'] = false;
+                if ($idIncidence !== 0) {
+                    $view_tab['active'] = false;
+                }
             break;
 
-            default:
+            case 'detail':
                 $setup_tab['active'] = false;
                 $list_tab['active'] = false;
                 $create_tab['active'] = false;
+                $dashboard_tab['active'] = false;
+                if ($idIncidence !== 0) {
+                    $view_tab['active'] = true;
+                }
+            break;
+
+            case 'dashboard':
+                $setup_tab['active'] = false;
+                $list_tab['active'] = false;
+                $create_tab['active'] = false;
+                $dashboard_tab['active'] = true;
+                if ($idIncidence !== 0) {
+                    $view_tab['active'] = false;
+                }
+            break;
+
+            default:
+                // Not possible.
             break;
         }
 
-        if ($view) {
-            $create_tab['text'] = '<a href="'.$url_tabs.'configure_integriaims_incident&incident_id='.$view.'">';
-            $create_tab['text'] .= html_print_image(
-                'images/edit.svg',
-                true,
-                [
-                    'title' => __('Edit ticket'),
-                    'class' => 'main_menu_icon invert_filter',
-                ]
-            );
-            $create_tab['text'] .= '</a>';
-
-            $view_tab['text'] = '<a href="'.$url_tabs.'dashboard_detail_integriaims_incident&incident_id='.$view.'">';
-            $view_tab['text'] .= html_print_image(
-                'images/details.svg',
-                true,
-                [
-                    'title' => __('View ticket'),
-                    'class' => 'main_menu_icon invert_filter',
-                ]
-            );
-            $view_tab['text'] .= '</a>';
-            // When the current page is the View page.
-            if (!$active_tab) {
-                $view_tab['active'] = true;
-            }
+        $onheader = [];
+        $onheader['configure'] = $setup_tab;
+        $onheader['dashboard'] = $dashboard_tab;
+        $onheader['list'] = $list_tab;
+        if ($idIncidence !== 0) {
+            $onheader['view'] = $view_tab;
         }
 
-        $onheader = [];
-        $onheader['view'] = $view_tab;
-        $onheader['configure'] = $setup_tab;
-        $onheader['list'] = $list_tab;
         $onheader['create'] = $create_tab;
 
         return $onheader;
diff --git a/pandora_console/views/ITSM/ITSMDashboardView.php b/pandora_console/views/ITSM/ITSMDashboardView.php
index a0d162f45d..a43fc9907e 100644
--- a/pandora_console/views/ITSM/ITSMDashboardView.php
+++ b/pandora_console/views/ITSM/ITSMDashboardView.php
@@ -83,7 +83,7 @@ ui_print_standard_header(
     false,
     'ITSM_tab',
     false,
-    [],
+    $headerTabs,
     [
         [
             'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',
diff --git a/pandora_console/views/ITSM/ITSMTicketDetailView.php b/pandora_console/views/ITSM/ITSMTicketDetailView.php
index 24c61ef792..9bebb94709 100644
--- a/pandora_console/views/ITSM/ITSMTicketDetailView.php
+++ b/pandora_console/views/ITSM/ITSMTicketDetailView.php
@@ -35,7 +35,7 @@ ui_print_standard_header(
     false,
     'ITSM_tab',
     false,
-    [],
+    $headerTabs,
     [
         [
             'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',
diff --git a/pandora_console/views/ITSM/ITSMTicketEditView.php b/pandora_console/views/ITSM/ITSMTicketEditView.php
index 686cdad25c..16c9825a98 100644
--- a/pandora_console/views/ITSM/ITSMTicketEditView.php
+++ b/pandora_console/views/ITSM/ITSMTicketEditView.php
@@ -38,7 +38,7 @@ ui_print_standard_header(
     false,
     'ITSM_tab',
     false,
-    [],
+    $headerTabs,
     [
         [
             'link'  => 'index.php?sec=ITSM&sec2=operation/ITSM/itsm',

From 6d642ed6e3d14bc7768774ff835a253576a2f9b8 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Wed, 16 Aug 2023 08:09:19 +0200
Subject: [PATCH 016/116] ITSM pandora_enterprise#11471

---
 .../include/functions_integriaims.php         | 88 -------------------
 1 file changed, 88 deletions(-)
 delete mode 100644 pandora_console/include/functions_integriaims.php

diff --git a/pandora_console/include/functions_integriaims.php b/pandora_console/include/functions_integriaims.php
deleted file mode 100644
index df5b85a709..0000000000
--- a/pandora_console/include/functions_integriaims.php
+++ /dev/null
@@ -1,88 +0,0 @@
-<?php
-
-// Pandora FMS - https://pandorafms.com
-// ==================================================
-// Copyright (c) 2005-2023 Pandora FMS
-// Please see https://pandorafms.com/community/ for full contribution list
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the  GNU Lesser General Public License
-// as published by the Free Software Foundation; version 2
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-
-/**
- * @package    Include
- * @subpackage Incidents
- */
-
-global $config;
-
-require_once $config['homedir'].'/include/functions_ui.php';
-require_once $config['homedir'].'/include/functions_html.php';
-require_once $config['homedir'].'/include/functions_users.php';
-require_once $config['homedir'].'/include/functions.php';
-
-
-/**
- * Show header tabs.
- *
- * @param string $active_tab Current tab or false for View page.
- * @param number $view       Id of incident. Show View tab.
- *
- * @return array HTML code. Print tabs in header.
- */
-function integriaims_tabs($active_tab, $view=false)
-{
-    global $config;
-
-    $url_tabs = ui_get_full_url('index.php?sec=incident&sec2=operation/incidents/');
-
-    $setup_tab['text'] = '<a href="'.ui_get_full_url('index.php?sec=general&sec2=godmode/setup/setup&section=integria').'">'.html_print_image('images/configuration@svg.svg', true, ['title' => __('Configure Integria IMS'), 'class' => 'main_menu_icon invert_filter']).'</a>';
-    $list_tab['text'] = '<a href="'.$url_tabs.'list_integriaims_incidents">'.html_print_image('images/logs@svg.svg', true, ['title' => __('Ticket list'), 'class' => 'main_menu_icon invert_filter']).'</a>';
-    $create_tab['text'] = '<a href="'.$url_tabs.'configure_integriaims_incident">'.html_print_image('images/edit.svg', true, ['title' => __('New ticket'), 'class' => 'main_menu_icon invert_filter']).'</a>';
-
-    switch ($active_tab) {
-        case 'setup_tab':
-            $setup_tab['active'] = true;
-            $list_tab['active'] = false;
-            $create_tab['active'] = false;
-        break;
-
-        case 'list_tab':
-            $setup_tab['active'] = false;
-            $list_tab['active'] = true;
-            $create_tab['active'] = false;
-        break;
-
-        case 'create_tab':
-            $setup_tab['active'] = false;
-            $list_tab['active'] = false;
-            $create_tab['active'] = true;
-        break;
-
-        default:
-            $setup_tab['active'] = false;
-            $list_tab['active'] = false;
-            $create_tab['active'] = false;
-        break;
-    }
-
-    if ($view) {
-        $create_tab['text'] = '<a href="'.$url_tabs.'configure_integriaims_incident&incident_id='.$view.'">'.html_print_image('images/edit.svg', true, ['title' => __('Edit ticket'), 'class' => 'main_menu_icon invert_filter']).'</a>';
-        $view_tab['text'] = '<a href="'.$url_tabs.'dashboard_detail_integriaims_incident&incident_id='.$view.'">'.html_print_image('images/details.svg', true, ['title' => __('View ticket'), 'class' => 'main_menu_icon invert_filter']).'</a>';
-        // When the current page is the View page.
-        if (!$active_tab) {
-            $view_tab['active'] = true;
-        }
-    }
-
-    $onheader = [];
-    $onheader['view'] = $view_tab;
-    $onheader['configure'] = $setup_tab;
-    $onheader['list'] = $list_tab;
-    $onheader['create'] = $create_tab;
-
-    return $onheader;
-}

From 8bc65474f053da1ab6c2ece7e0dd2a98932bcd0a Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Wed, 16 Aug 2023 16:52:57 +0200
Subject: [PATCH 017/116] ITSM pandora_enterprise#11471

---
 pandora_console/extras/mr/66.sql              |  31 +++++
 .../godmode/alerts/alert_actions.php          |   6 +
 .../godmode/alerts/alert_commands.php         |   8 +-
 .../godmode/alerts/alert_list.builder.php     |   2 +-
 .../godmode/alerts/configure_alert_action.php |  75 +++++++------
 .../godmode/events/event_responses.list.php   |   6 +
 pandora_console/godmode/setup/setup_ITSM.php  |  72 ------------
 pandora_console/include/functions_config.php  |   4 +-
 pandora_console/include/functions_events.php  |   6 +
 pandora_console/include/functions_html.php    | 106 +++++++++++-------
 pandora_console/include/lib/ITSM/Manager.php  |  52 +++++++--
 pandora_console/pandoradb.sql                 |   6 +-
 pandora_console/pandoradb_data.sql            |   6 +-
 pandora_server/lib/PandoraFMS/Core.pm         |  52 ++++-----
 pandora_server/lib/PandoraFMS/Tools.pm        |   6 +-
 15 files changed, 236 insertions(+), 202 deletions(-)

diff --git a/pandora_console/extras/mr/66.sql b/pandora_console/extras/mr/66.sql
index 9e8f9b54ff..a9e063130d 100644
--- a/pandora_console/extras/mr/66.sql
+++ b/pandora_console/extras/mr/66.sql
@@ -6,4 +6,35 @@ DROP TABLE `tincidencia`;
 DROP TABLE `tnota`;
 DROP TABLE `tattachment`;
 
+ALTER TABLE `talert_commands` ADD CONSTRAINT UNIQUE (`name`);
+
+ALTER TABLE `talert_actions` MODIFY COLUMN `name` VARCHAR(500);
+ALTER TABLE `talert_actions` ADD CONSTRAINT UNIQUE (`name`);
+
+SET @command_name = 'Pandora&#x20;ITSM&#x20;Ticket';
+SET @command_description = 'Create&#x20;a&#x20;ticket&#x20;in&#x20;Pandora&#x20;ITSM';
+SET @action_name = 'Create&#x20;Pandora&#x20;ITSM&#x20;ticket';
+
+UPDATE `talert_commands` SET `name` = @command_name, `description` = @command_description WHERE `name` = 'Integria&#x20;IMS&#x20;Ticket' AND `internal` = 1;
+INSERT IGNORE INTO `talert_commands` (`name`, `command`, `description`, `internal`, `fields_descriptions`, `fields_values`) VALUES (@command_name,'Internal&#x20;type',@command_description,1,'["Ticket&#x20;title","Ticket&#x20;group&#x20;ID","Ticket&#x20;priority","Ticket&#x20;owner","Ticket&#x20;type","Ticket&#x20;status","Ticket&#x20;description","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_"]','["", "_ITSM_groups_", "_ITSM_priorities_","_ITSM_users_","_ITSM_types_","_ITSM_status_","_html_editor_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_"]');
+
+SELECT @id_alert_command := `id` FROM `talert_commands` WHERE `name` = @command_name;
+UPDATE `talert_actions` SET `name` = @action_name WHERE `name` = 'Create&#x20;Integria&#x20;IMS&#x20;ticket' AND `id_alert_command` = @id_alert_command;
+INSERT IGNORE INTO `talert_actions` (`name`, `id_alert_command`) VALUES (@action_name,@id_alert_command);
+
+SET @event_response_name = 'Create&#x20;ticket&#x20;in&#x20;Pandora&#x20;ITSM&#x20;from&#x20;event';
+SET @event_response_description = 'Create&#x20;a&#x20;ticket&#x20;in&#x20;Pandora&#x20;ITSM&#x20;from&#x20;an&#x20;event';
+SET @event_response_target = 'index.php?sec=manageTickets&amp;sec2=operation/ITSM/itsm&amp;operation=edit&amp;from_event=_event_id_';
+SET @event_response_type = 'url';
+SET @event_response_id_group = 0;
+SET @event_response_modal_width = 0;
+SET @event_response_modal_height = 0;
+SET @event_response_new_window = 1;
+SET @event_response_params = '';
+SET @event_response_server_to_exec = 0;
+SET @event_response_command_timeout = 90;
+SET @event_response_display_command = 1;
+UPDATE `tevent_response` SET `name` = @event_response_name, `description` = @event_response_description, `target` = @event_response_target, `display_command` = @event_response_display_command WHERE `name` = 'Create&#x20;ticket&#x20;in&#x20;IntegriaIMS&#x20;from&#x20;event';
+INSERT IGNORE INTO `tevent_response` (`name`, `description`, `target`,`type`,`id_group`,`modal_width`,`modal_height`,`new_window`,`params`,`server_to_exec`,`command_timeout`,`display_command`) VALUES (@event_response_name, @event_response_description, @event_response_target, @event_response_type, @event_response_id_group, @event_response_modal_width, @event_response_modal_height, @event_response_new_window, @event_response_params, @event_response_server_to_exec, @event_response_command_timeout, @event_response_display_command);
+
 COMMIT;
\ No newline at end of file
diff --git a/pandora_console/godmode/alerts/alert_actions.php b/pandora_console/godmode/alerts/alert_actions.php
index 97a492809e..e8915b05eb 100644
--- a/pandora_console/godmode/alerts/alert_actions.php
+++ b/pandora_console/godmode/alerts/alert_actions.php
@@ -405,6 +405,12 @@ $actions = array_slice($actions, $offset, $limit);
 $rowPair = true;
 $iterator = 0;
 foreach ($actions as $action) {
+    if ((isset($config['ITSM_enabled']) === false || (bool) $config['ITSM_enabled'] === false)
+        && $action['name'] === 'Create&#x20;Pandora&#x20;ITSM&#x20;ticket'
+    ) {
+        continue;
+    }
+
     if ($rowPair) {
         $table->rowclass[$iterator] = 'rowPair';
     } else {
diff --git a/pandora_console/godmode/alerts/alert_commands.php b/pandora_console/godmode/alerts/alert_commands.php
index 435f161def..c0e9c3087a 100644
--- a/pandora_console/godmode/alerts/alert_commands.php
+++ b/pandora_console/godmode/alerts/alert_commands.php
@@ -153,7 +153,7 @@ if (is_ajax()) {
             $style = ((int) $field_hidden === 1) ? '-webkit-text-security: disc; font-family: text-security-disc;' : '';
 
             $recovery_disabled = 0;
-            if (empty($command) === false && $command['name'] === io_safe_input('Integria IMS Ticket')) {
+            if (empty($command) === false && $command['name'] === io_safe_input('Pandora ITSM Ticket')) {
                 if ($management_is_not_allowed == 0) {
                     if (preg_match('/^_html_editor_$/i', $field_value) || $field_description === 'Ticket status') {
                         $recovery_disabled = 0;
@@ -1027,6 +1027,12 @@ $commands = array_slice($commands, $offset, $limit);
 foreach ($commands as $command) {
     $data = [];
 
+    if ((isset($config['ITSM_enabled']) === false || (bool) $config['ITSM_enabled'] === false)
+        && $command['name'] === 'Pandora&#x20;ITSM&#x20;Ticket'
+    ) {
+        continue;
+    }
+
     $data['name'] = '<span>';
 
     // (IMPORTANT, DO NOT CHANGE!) only users with permissions over "All" group have access to edition of commands belonging to "All" group.
diff --git a/pandora_console/godmode/alerts/alert_list.builder.php b/pandora_console/godmode/alerts/alert_list.builder.php
index db53e202ad..f86537f945 100644
--- a/pandora_console/godmode/alerts/alert_list.builder.php
+++ b/pandora_console/godmode/alerts/alert_list.builder.php
@@ -106,7 +106,7 @@ if (!empty($groups_user)) {
     $groups = implode(',', array_keys($groups_user));
 
     if ($config['ITSM_enabled'] == 0) {
-        $integria_command = 'Integria&#x20;IMS&#x20;Ticket';
+        $integria_command = 'Pandora&#x20;ITSM&#x20;Ticket';
         $sql = sprintf('SELECT taa.id, taa.name FROM talert_actions taa INNER JOIN talert_commands tac ON taa.id_alert_command = tac.id WHERE tac.name <> "%s" AND taa.id_group IN (%s)', $integria_command, $groups);
     } else {
         $sql = "SELECT id, name FROM talert_actions WHERE id_group IN ($groups)";
diff --git a/pandora_console/godmode/alerts/configure_alert_action.php b/pandora_console/godmode/alerts/configure_alert_action.php
index c2b3d9cbcf..9a3903021f 100644
--- a/pandora_console/godmode/alerts/configure_alert_action.php
+++ b/pandora_console/godmode/alerts/configure_alert_action.php
@@ -159,19 +159,20 @@ if ($id) {
     $name = $action['name'];
     $id_command = $action['id_alert_command'];
     $command = alerts_get_alert_command($id_command);
-    if (empty($command) === false && $command['name'] === io_safe_input('Integria IMS Ticket')) {
-        $action['field2'] = ($action['field2'] ?? $config['default_group']);
-        $action['field3'] = ($action['field3'] ?? $config['default_criticity']);
-        $action['field4'] = ($action['field4'] ?? $config['default_owner']);
-        $action['field5'] = ($action['field5'] ?? $config['incident_type']);
-        $action['field6'] = ($action['field6'] ?? $config['incident_status']);
-        $action['field7'] = ($action['field7'] ?? $config['incident_content']);
-        $action['field2_recovery'] = ($action['field2'] ?? $config['default_group']);
-        $action['field3_recovery'] = ($action['field3'] ?? $config['default_criticity']);
-        $action['field4_recovery'] = ($action['field4'] ?? $config['default_owner']);
-        $action['field5_recovery'] = ($action['field5'] ?? $config['incident_type']);
-        $action['field6_recovery'] = ($action['field6_recovery'] ?? $config['incident_status']);
-        $action['field7_recovery'] = ($action['field7_recovery'] ?? $config['incident_content']);
+    if (empty($command) === false && $command['name'] === io_safe_input('Pandora ITSM Ticket')) {
+        $action['field1'] = io_safe_output(($action['field1'] ?? $config['incident_title']));
+        $action['field2'] = io_safe_output(($action['field2'] ?? $config['default_group']));
+        $action['field3'] = io_safe_output(($action['field3'] ?? $config['default_criticity']));
+        $action['field4'] = io_safe_output(($action['field4'] ?? $config['default_owner']));
+        $action['field5'] = io_safe_output(($action['field5'] ?? $config['incident_type']));
+        $action['field6'] = io_safe_output(($action['field6'] ?? $config['incident_status']));
+        $action['field7'] = io_safe_output(($action['field7'] ?? $config['incident_content']));
+        $action['field2_recovery'] = io_safe_output(($action['field2'] ?? $config['default_group']));
+        $action['field3_recovery'] = io_safe_output(($action['field3'] ?? $config['default_criticity']));
+        $action['field4_recovery'] = io_safe_output(($action['field4'] ?? $config['default_owner']));
+        $action['field5_recovery'] = io_safe_output(($action['field5'] ?? $config['incident_type']));
+        $action['field6_recovery'] = io_safe_output(($action['field6_recovery'] ?? $config['incident_status']));
+        $action['field7_recovery'] = io_safe_output(($action['field7_recovery'] ?? $config['incident_content']));
     }
 
     $group = $action['id_group'];
@@ -258,7 +259,7 @@ $table->data[0][1] = html_print_label_input_block(
     )
 );
 
-$create_ticket_command_id = db_get_value('id', 'talert_commands', 'name', io_safe_input('Integria IMS Ticket'));
+$create_ticket_command_id = db_get_value('id', 'talert_commands', 'name', io_safe_input('Pandora ITSM Ticket'));
 
 $sql_exclude_command_id = '';
 
@@ -378,13 +379,13 @@ $table_macros->data[1][2] = html_print_label_input_block(
     )
 );
 
-if (empty($command) === false && $command['name'] === io_safe_input('Integria IMS Ticket')) {
+if (empty($command) === false && $command['name'] === io_safe_input('Pandora ITSM Ticket')) {
     // Selector will work only with Integria activated.
     $integriaIdName = 'integria_wu';
     $table_macros->colspan[$integriaIdName][0] = 3;
     $table_macros->data[$integriaIdName][0] = html_print_label_input_block(
         __('Create workunit on recovery').ui_print_help_tip(
-            __('If closed status is set on recovery, a workunit will be added to the ticket in Integria IMS rather that closing the ticket.'),
+            __('If closed status is set on recovery, a workunit will be added to the ticket in Pandora ITSM rather that closing the ticket.'),
             true
         ),
         html_print_checkbox_switch_extended(
@@ -749,54 +750,62 @@ $(document).ready (function () {
                         disabled = $("[name=field" + i + "_value]").attr('disabled');
                     }
 
-                    if ($("#id_command option:selected").text() === "Integria IMS Ticket" && (!old_value || !old_recovery_value) ) {
-                        if (i === 2) {
+                    if ($("#id_command option:selected").text() === "Pandora ITSM Ticket" && (!old_value || !old_recovery_value) ) {
+                        if (i === 1) {
                             if(!old_value) {
-                                old_value = '<?php echo $config['default_group']; ?>';
+                                old_value = '<?php echo io_safe_output($config['incident_title']); ?>';
                             }
 
                             if(!old_recovery_value) {
-                                old_recovery_value = '<?php echo $config['default_group']; ?>';
+                                old_recovery_value = '<?php echo io_safe_output($config['incident_title']); ?>';
+                            }
+                        } else if (i === 2) {
+                            if(!old_value || old_value == 0) {
+                                old_value = '<?php echo io_safe_output($config['default_group']); ?>';
+                            }
+
+                            if(!old_recovery_value) {
+                                old_recovery_value = '<?php echo io_safe_output($config['default_group']); ?>';
                             }
                         } else if (i === 3) {
                             if(!old_value) {
-                                old_value = '<?php echo $config['default_criticity']; ?>';
+                                old_value = '<?php echo io_safe_output($config['default_criticity']); ?>';
                             }
 
                             if(!old_recovery_value) {
-                                old_recovery_value = '<?php echo $config['default_criticity']; ?>';
+                                old_recovery_value = '<?php echo io_safe_output($config['default_criticity']); ?>';
                             }
                         } else if (i === 4) {
                             if(!old_value) {
-                                old_value = '<?php echo $config['default_owner']; ?>';
+                                old_value = '<?php echo io_safe_output($config['default_owner']); ?>';
                             }
 
                             if(!old_recovery_value) {
-                                old_recovery_value = '<?php echo $config['default_owner']; ?>';
+                                old_recovery_value = '<?php echo io_safe_output($config['default_owner']); ?>';
                             }
                         } else if (i === 5) {
                             if(!old_value) {
-                                old_value = '<?php echo $config['incident_type']; ?>';
+                                old_value = '<?php echo io_safe_output($config['incident_type']); ?>';
                             }
 
                             if(!old_recovery_value) {
-                                old_recovery_value = '<?php echo $config['incident_type']; ?>';
+                                old_recovery_value = '<?php echo io_safe_output($config['incident_type']); ?>';
                             }
                         } else if (i === 6) {
                             if(!old_value) {
-                                old_value = '<?php echo $config['incident_status']; ?>';
+                                old_value = '<?php echo io_safe_output($config['incident_status']); ?>';
                             }
 
                             if(!old_recovery_value) {
-                                old_recovery_value = '<?php echo $config['incident_status']; ?>';
+                                old_recovery_value = '<?php echo io_safe_output($config['incident_status']); ?>';
                             }
                         } else if (i === 7) {
                             if(!old_value) {
-                                old_value = '<?php echo $config['incident_content']; ?>';
+                                old_value = '<?php echo io_safe_output($config['incident_content']); ?>';
                             }
 
                             if(!old_recovery_value) {
-                                old_recovery_value = '<?php echo $config['incident_content']; ?>';
+                                old_recovery_value = '<?php echo io_safe_output($config['incident_content']); ?>';
                             }
                         }
                     }
@@ -863,7 +872,7 @@ $(document).ready (function () {
                         }
                     }
 
-                    if ($("#id_command option:selected").text() === "Integria IMS Ticket" && i > 7) {
+                    if ($("#id_command option:selected").text() === "Pandora ITSM Ticket" && i > 7) {
                         integria_custom_fields_values.push(old_value);
                         integria_custom_fields_rvalues.push(old_recovery_value);
                     }
@@ -885,9 +894,9 @@ $(document).ready (function () {
                     $table_macros_field.show();
                 }
 
-                // Ad-hoc solution for Integria IMS command: get Integia IMS Ticket custom fields only when this command is selected and we selected a ticket type to retrieve fields from.
+                // Ad-hoc solution for Pandora ITSM command: get Integia IMS Ticket custom fields only when this command is selected and we selected a ticket type to retrieve fields from.
                 // Check command by name since it is unvariable in any case, unlike its ID.
-                if ($("#id_command option:selected").text() === "Integria IMS Ticket") {
+                if ($("#id_command option:selected").text() === "Pandora ITSM Ticket") {
                     var max_macro_fields = <?php echo $config['max_macro_fields']; ?>;
 
                     // At start hide all rows and inputs corresponding to custom fields, regardless of what its type is.
diff --git a/pandora_console/godmode/events/event_responses.list.php b/pandora_console/godmode/events/event_responses.list.php
index 0cf83a4eed..0e39683c7e 100644
--- a/pandora_console/godmode/events/event_responses.list.php
+++ b/pandora_console/godmode/events/event_responses.list.php
@@ -75,6 +75,12 @@ foreach ($event_responses as $response) {
         continue;
     }
 
+    if ((isset($config['ITSM_enabled']) === false || (bool) $config['ITSM_enabled'] === false)
+        && $response['name'] === 'Create&#x20;ticket&#x20;in&#x20;Pandora&#x20;ITSM&#x20;from&#x20;event'
+    ) {
+        continue;
+    }
+
     $data = [];
     $data[0] = '<a href="index.php?sec=geventos&sec2=godmode/events/events&section=responses&mode=editor&id_response='.$response['id'].'&amp;pure='.$config['pure'].'">'.$response['name'].'</a>';
     $data[1] = $response['description'];
diff --git a/pandora_console/godmode/setup/setup_ITSM.php b/pandora_console/godmode/setup/setup_ITSM.php
index a2b0a69fa5..b65736e61a 100644
--- a/pandora_console/godmode/setup/setup_ITSM.php
+++ b/pandora_console/godmode/setup/setup_ITSM.php
@@ -63,78 +63,6 @@ if ($has_connection === false && $config['ITSM_enabled']) {
     ui_print_error_message(__('ITSM API is not reachable, %s', $error));
 }
 
-if (get_parameter('update_config', 0) == 1) {
-    // Try to retrieve event response 'Create incident in IntegriaIMS from event' to check if it exists.
-    $event_response_exists = db_get_row_filter(
-        'tevent_response',
-        ['name' => io_safe_input('Create ticket in IntegriaIMS from event')]
-    );
-
-    // Try to retrieve command 'Integia IMS Ticket' to check if it exists.
-    $command_exists = db_get_row_filter(
-        'talert_commands',
-        ['name' => io_safe_input('Integria IMS Ticket')]
-    );
-
-    if ($config['ITSM_enabled'] == 1) {
-        if ($event_response_exists === false) {
-            // Create 'Create incident in IntegriaIMS from event' event response only when user enables IntegriaIMS integration and it does not exist in database.
-            db_process_sql_insert(
-                'tevent_response',
-                [
-                    'name'           => io_safe_input('Create ticket in IntegriaIMS from event'),
-                    'description'    => io_safe_input('Create a ticket in Integria IMS from an event'),
-                    'target'         => io_safe_input('index.php?sec=incident&sec2=operation/incidents/configure_integriaims_incident&from_event=_event_id_'),
-                    'type'           => 'url',
-                    'id_group'       => '0',
-                    'modal_width'    => '0',
-                    'modal_height'   => '0',
-                    'new_window'     => '1',
-                    'params'         => '',
-                    'server_to_exec' => '0',
-                ]
-            );
-        }
-
-        if ($command_exists === false) {
-            // Create 'Integria IMS Ticket' command only when user enables IntegriaIMS integration and it does not exist in database.
-            $id_command_inserted = db_process_sql_insert(
-                'talert_commands',
-                [
-                    'name'                => io_safe_input('Integria IMS Ticket'),
-                    'command'             => io_safe_input('Internal type'),
-                    'internal'            => 1,
-                    'description'         => io_safe_input('Create a ticket in Integria IMS'),
-                    'fields_descriptions' => '["'.io_safe_input('Ticket title').'","'.io_safe_input('Ticket group ID').'","'.io_safe_input('Ticket priority').'","'.io_safe_input('Ticket owner').'","'.io_safe_input('Ticket type').'","'.io_safe_input('Ticket status').'","'.io_safe_input('Ticket description').'","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_"]',
-                    'fields_values'       => '["", "_ITSM_groups_", "_ITSM_priorities_","_ITSM_users_","_ITSM_types_","_ITSM_status_","_html_editor_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_"]',
-                ]
-            );
-
-            // Create 'Create Integria IMS Ticket' action only when user enables IntegriaIMS integration and command exists in database.
-            $action_values = [
-                'field1'           => $config['incident_title'],
-                'field1_recovery'  => $config['incident_title'],
-                'field2'           => $config['default_group'],
-                'field2_recovery'  => $config['default_group'],
-                'field3'           => $config['default_criticity'],
-                'field3_recovery'  => $config['default_criticity'],
-                'field4'           => $config['default_owner'],
-                'field4_recovery'  => $config['default_owner'],
-                'field5'           => $config['incident_type'],
-                'field5_recovery'  => $config['incident_type'],
-                'field6'           => $config['incident_status'],
-                'field6_recovery'  => $config['incident_status'],
-                'field7'           => $config['incident_content'],
-                'field7_recovery'  => $config['incident_content'],
-                'id_group'         => 0,
-                'action_threshold' => 0,
-            ];
-
-            alerts_create_alert_action(io_safe_input('Create Integria IMS ticket'), $id_command_inserted, $action_values);
-        }
-    }
-}
-
 $table_enable = new StdClass();
 $table_enable->data = [];
 $table_enable->width = '100%';
diff --git a/pandora_console/include/functions_config.php b/pandora_console/include/functions_config.php
index 8d105c6740..29e96c7da3 100644
--- a/pandora_console/include/functions_config.php
+++ b/pandora_console/include/functions_config.php
@@ -1923,11 +1923,11 @@ function config_update_config()
                         $error_update[] = __('Pandora ITSM default creator');
                     }
 
-                    if (config_update_value('default_owner', (string) get_parameter('default_owner', $config['default_owner']), true) === false) {
+                    if (config_update_value('default_owner', (string) get_parameter('default_owner_hidden', $config['default_owner']), true) === false) {
                         $error_update[] = __('Pandora ITSM default owner');
                     }
 
-                    if (config_update_value('cr_default_owner', (string) get_parameter('cr_default_owner', $config['cr_default_owner']), true) === false) {
+                    if (config_update_value('cr_default_owner', (string) get_parameter('cr_default_owner_hidden', $config['cr_default_owner']), true) === false) {
                         $error_update[] = __('Pandora ITSM custom response default owner');
                     }
 
diff --git a/pandora_console/include/functions_events.php b/pandora_console/include/functions_events.php
index 29281ff5bd..202b849fe8 100644
--- a/pandora_console/include/functions_events.php
+++ b/pandora_console/include/functions_events.php
@@ -3635,6 +3635,12 @@ function events_page_responses($event)
     } else {
         $responses = [];
         foreach ($event_responses as $v) {
+            if ((isset($config['ITSM_enabled']) === false || (bool) $config['ITSM_enabled'] === false)
+                && $v['name'] === 'Create&#x20;ticket&#x20;in&#x20;Pandora&#x20;ITSM&#x20;from&#x20;event'
+            ) {
+                continue;
+            }
+
             $responses[$v['id']] = $v['name'];
         }
 
diff --git a/pandora_console/include/functions_html.php b/pandora_console/include/functions_html.php
index 352e3509ca..df8fd7b2e4 100644
--- a/pandora_console/include/functions_html.php
+++ b/pandora_console/include/functions_html.php
@@ -6405,52 +6405,72 @@ function html_print_autocomplete_users_from_pandora_itsm(
         }
         
         $(document).ready (function () {
-                $("#text-<?php echo $name; ?>").autocomplete({
-                    minLength: 2,
-                    source: function( request, response ) {
-                            var term = request.term; //Word to search
-                            
-                            data_params = {
-                                page: "operation/ITSM/itsm",
-                                search_term: term,
-                                method: "getUserSelect",
-                            };
-                            
-                            jQuery.ajax ({
-                                data: data_params,
-                                async: false,
-                                type: "POST",
-                                url: action="<?php echo $javascript_ajax_page; ?>",
-                                timeout: 10000,
-                                dataType: "json",
-                                success: function (data) {
-                                        temp = [];
-                                        $.each(data, function (id, module) {
-                                                temp.push({
-                                                    'value' : id,
-                                                    'label' : module});
-                                        });
-                                        
-                                        response(temp);
-                                    }
-                                });
-                        },
-                    change: function( event, ui ) {
-                            if (!ui.item)
-                                $("input[name='<?php echo $name; ?>_hidden']")
-                                    .val(0);
-                            return false;
-                        },
-                    select: function( event, ui ) {
-                            $("input[name='<?php echo $name; ?>_hidden']")
-                                .val(ui.item.value);
-                            
-                            $("#text-<?php echo $name; ?>").val( ui.item.label );
-                            return false;
+            $("#text-<?php echo $name; ?>").autocomplete({
+                minLength: 2,
+                source: function( request, response ) {
+                    var term = request.term; //Word to search
+                    
+                    var data_params = {
+                        page: "operation/ITSM/itsm",
+                        search_term: term,
+                        method: "getUserSelect",
+                    };
+                    
+                    jQuery.ajax ({
+                        data: data_params,
+                        async: false,
+                        type: "POST",
+                        url: action="<?php echo $javascript_ajax_page; ?>",
+                        timeout: 10000,
+                        dataType: "json",
+                        success: function (data) {
+                            temp = [];
+                            $.each(data, function (id, module) {
+                                temp.push({
+                                    'value' : id,
+                                    'label' : module});
+                            });
+                                
+                            response(temp);
                         }
+                    });
+                },
+                change: function( event, ui ) {
+                    if (!ui.item) {
+                        $("input[name='<?php echo $name; ?>_hidden']")
+                            .val(0);
                     }
-                );
+                    return false;
+                },
+                select: function( event, ui ) {
+                    $("input[name='<?php echo $name; ?>_hidden']")
+                        .val(ui.item.value);
+                    
+                    $("#text-<?php echo $name; ?>").val( ui.item.label );
+                    return false;
+                }
             });
+
+            if($("input[name='<?php echo $name; ?>_hidden']").val() !== ''){
+                var data_params_initial = {
+                    page: "operation/ITSM/itsm",
+                    search_term: $("input[name='<?php echo $name; ?>_hidden']").val(),
+                    method: "getUserSelect",
+                };
+
+                jQuery.ajax ({
+                    data: data_params_initial,
+                    async: false,
+                    type: "POST",
+                    url: action="<?php echo $javascript_ajax_page; ?>",
+                    timeout: 10000,
+                    dataType: "json",
+                    success: function (data) {
+                        $("#text-<?php echo $name; ?>").val(Object.entries(data)[0][1])
+                    }
+                });
+            }
+        });
     </script>
     <?php
     $output = ob_get_clean();
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 07d5df4ed9..69c2b5b51b 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -181,11 +181,13 @@ class Manager
      */
     private function showEdit()
     {
+        global $config;
         $create_incidence = (bool) \get_parameter('create_incidence', 0);
         $update_incidence = (bool) \get_parameter('update_incidence', 0);
-        $idIncidence      = \get_parameter('idIncidence', 0);
+        $idIncidence = (int) \get_parameter('idIncidence', 0);
+        $idEvent = (int) \get_parameter('from_event', 0);
 
-        $headerTabs = $this->headersTabs('edit', (bool) $idIncidence);
+        $headerTabs = $this->headersTabs('edit', $idIncidence);
 
         $error = '';
         try {
@@ -203,16 +205,42 @@ class Manager
             $error = $th->getMessage();
         }
 
+        $default_values = [
+            'title'           => '',
+            'idIncidenceType' => 0,
+            'idGroup'         => 0,
+            'priority'        => 'LOW',
+            'status'          => 'NEW',
+            'idCreator'       => '',
+            'owner'           => '',
+            'resolution'      => null,
+            'description'     => '',
+        ];
+
+        if (empty($idEvent) === false) {
+            $default_values = [
+                'title'           => $config['cr_incident_title'],
+                'idIncidenceType' => $config['cr_incident_type'],
+                'idGroup'         => $config['cr_default_group'],
+                'priority'        => $config['cr_default_criticity'],
+                'status'          => $config['cr_incident_status'],
+                'idCreator'       => '',
+                'owner'           => $config['cr_default_owner'],
+                'resolution'      => null,
+                'description'     => $config['cr_incident_content'],
+            ];
+        }
+
         $incidence = [
-            'title'           => \get_parameter('title', ($incidenceData['title'] ?? '')),
-            'idIncidenceType' => \get_parameter('idIncidenceType', ($incidenceData['idIncidenceType'] ?? 0)),
-            'idGroup'         => \get_parameter('idGroup', ($incidenceData['idGroup'] ?? 0)),
-            'priority'        => \get_parameter('priority', ($incidenceData['priority'] ?? 'LOW')),
-            'status'          => \get_parameter('status', ($incidenceData['status'] ?? 'NEW')),
-            'idCreator'       => \get_parameter('idCreator', ($incidenceData['idCreator'] ?? '')),
-            'owner'           => \get_parameter('owner_hidden', ($incidenceData['owner'] ?? '')),
-            'resolution'      => \get_parameter('resolution', ($incidenceData['resolution'] ?? null)),
-            'description'     => \get_parameter('description', ($incidenceData['description'] ?? '')),
+            'title'           => \get_parameter('title', ($incidenceData['title'] ?? $default_values['title'])),
+            'idIncidenceType' => \get_parameter('idIncidenceType', ($incidenceData['idIncidenceType'] ?? $default_values['idIncidenceType'])),
+            'idGroup'         => \get_parameter('idGroup', ($incidenceData['idGroup'] ?? $default_values['idGroup'])),
+            'priority'        => \get_parameter('priority', ($incidenceData['priority'] ?? $default_values['priority'])),
+            'status'          => \get_parameter('status', ($incidenceData['status'] ?? $default_values['status'])),
+            'idCreator'       => \get_parameter('idCreator', ($incidenceData['idCreator'] ?? $default_values['idCreator'])),
+            'owner'           => \get_parameter('owner_hidden', ($incidenceData['owner'] ?? $default_values['owner'])),
+            'resolution'      => \get_parameter('resolution', ($incidenceData['resolution'] ?? $default_values['resolution'])),
+            'description'     => \get_parameter('description', ($incidenceData['description'] ?? $default_values['description'])),
         ];
 
         $successfullyMsg = '';
@@ -283,7 +311,7 @@ class Manager
         $idAttachment = (int) \get_parameter('idAttachment', 0);
         $addComment = (bool) \get_parameter('addComment', 0);
 
-        $headerTabs = $this->headersTabs('detail', (bool) $idIncidence);
+        $headerTabs = $this->headersTabs('detail', $idIncidence);
 
         $error = '';
         $successfullyMsg = null;
diff --git a/pandora_console/pandoradb.sql b/pandora_console/pandoradb.sql
index f6b49f1528..22f587d32f 100644
--- a/pandora_console/pandoradb.sql
+++ b/pandora_console/pandoradb.sql
@@ -397,7 +397,8 @@ CREATE TABLE  IF NOT EXISTS `talert_commands` (
   `fields_values` TEXT,
   `fields_hidden` TEXT,
   `previous_name` TEXT,
-  PRIMARY KEY (`id`)
+  PRIMARY KEY (`id`),
+  UNIQUE (`name`)
 ) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
 
 -- -----------------------------------------------------
@@ -405,7 +406,7 @@ CREATE TABLE  IF NOT EXISTS `talert_commands` (
 -- -----------------------------------------------------
 CREATE TABLE  IF NOT EXISTS `talert_actions` (
   `id` INT UNSIGNED NOT NULL AUTO_INCREMENT,
-  `name` TEXT,
+  `name` VARCHAR(500),
   `id_alert_command` INT UNSIGNED NULL DEFAULT 0,
   `field1` TEXT,
   `field2` TEXT,
@@ -452,6 +453,7 @@ CREATE TABLE  IF NOT EXISTS `talert_actions` (
   `previous_name` TEXT,
   `create_wu_integria` TINYINT DEFAULT NULL,
   PRIMARY KEY  (`id`),
+  UNIQUE (`name`),
   FOREIGN KEY (`id_alert_command`) REFERENCES talert_commands(`id`)
     ON DELETE CASCADE ON UPDATE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
diff --git a/pandora_console/pandoradb_data.sql b/pandora_console/pandoradb_data.sql
index d25b2b152b..752421ea36 100644
--- a/pandora_console/pandoradb_data.sql
+++ b/pandora_console/pandoradb_data.sql
@@ -26,6 +26,8 @@ INSERT INTO `talert_commands` (`id`, `name`, `command`, `description`, `internal
 INSERT INTO `talert_commands` (`id`, `name`, `command`, `description`, `internal`, `fields_descriptions`, `fields_values`) VALUES (13,'Generate&#x20;Notification','Internal&#x20;type','This&#x20;command&#x20;allows&#x20;you&#x20;to&#x20;send&#x20;an&#x20;internal&#x20;notification&#x20;to&#x20;any&#x20;user&#x20;or&#x20;group.',1,'[\"Destination&#x20;user\",\"Destination&#x20;group\",\"Title\",\"Message\",\"Link\",\"Criticity\",\"\",\"\",\"\",\"\",\"\"]','[\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\",\"\"]');
 INSERT INTO `talert_commands` (`id`, `name`, `command`, `description`, `internal`, `fields_descriptions`, `fields_values`) VALUES (14,'Send&#x20;report&#x20;by&#x20;e-mail','Internal&#x20;type','This&#x20;command&#x20;allows&#x20;you&#x20;to&#x20;send&#x20;a&#x20;report&#x20;by&#x20;email.',1,'[\"Report\",\"e-mail&#x20;address\",\"Subject\",\"Text\",\"Report&#x20;type\",\"\",\"\",\"\",\"\",\"\"]','[\"_reports_\",\"\",\"\",\"_html_editor_\",\"xml,XML;pdf,PDF;json,JSON;csv,CSV\",\"\",\"\",\"\",\"\",\"\"]');
 INSERT INTO `talert_commands` (`id`, `name`, `command`, `description`, `internal`, `fields_descriptions`, `fields_values`) VALUES (15,'Send&#x20;report&#x20;by&#x20;e-mail&#x20;(from&#x20;template)','Internal&#x20;type','This&#x20;command&#x20;allows&#x20;you&#x20;to&#x20;send&#x20;a&#x20;report&#x20;generated&#x20;from&#x20;a&#x20;template&#x20;by&#x20;email.',1,'[\"Template\",\"Regexp&#x20;agent&#x20;filter\",\"e-mail&#x20;address\",\"Subject\",\"Text\",\"Report&#x20;type\",\"\",\"\",\"\",\"\"]','[\"_report_templates_\",\"\",\"\",\"\",\"_html_editor_\",\"xml,XML;pdf,PDF;json,JSON;csv,CSV\",\"\",\"\",\"\",\"\"]');
+INSERT INTO `talert_commands` (`id`, `name`, `command`, `description`, `internal`, `fields_descriptions`, `fields_values`) VALUES (16,'Pandora&#x20;ITSM&#x20;Ticket','Internal&#x20;type','Create&#x20;a&#x20;ticket&#x20;in&#x20;Pandora&#x20;ITSM',1,'["Ticket&#x20;title","Ticket&#x20;group&#x20;ID","Ticket&#x20;priority","Ticket&#x20;owner","Ticket&#x20;type","Ticket&#x20;status","Ticket&#x20;description","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_"]','["", "_ITSM_groups_", "_ITSM_priorities_","_ITSM_users_","_ITSM_types_","_ITSM_status_","_html_editor_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_","_custom_field_ITSM_"]');
+
 --
 -- Dumping data for table `tconfig`
 --
@@ -1156,7 +1158,7 @@ INSERT INTO `talert_actions` (`id`, `name`, `id_alert_command`, `field1`, `field
 (4,'Send&#x20;Report&#x20;by&#x20;e-mail',14,'','yourmail@domain.es','','&lt;div&#x20;style=&quot;background-color:&#x20;#eaf0f6;&#x20;font-family:&#x20;Arial,&#x20;Helvetica,&#x20;sans-serif;&#x20;padding:&#x20;30px;&#x20;margin:&#x20;0;&quot;&gt;&lt;table&#x20;style=&quot;max-width:&#x20;560px;&#x20;background-color:&#x20;white;&#x20;border-radius:&#x20;10px;&#x20;padding:&#x20;10px&#x20;20px&#x20;40px;&quot;&#x20;cellspacing=&quot;0&quot;&#x20;cellpadding=&quot;0&quot;&#x20;align=&quot;center&quot;&gt;&lt;thead&gt;&lt;tr&gt;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&gt;&lt;a&#x20;href=&quot;https://pandorafms.com/en/&quot;&#x20;target=&quot;_blank&quot;&gt;&lt;img&#x20;src=&quot;https://pandorafms.com/wp-content/uploads/2022/03/System-email-Pandora-FMS.png&quot;&#x20;width=&quot;206px&quot;&gt;&lt;/a&gt;&lt;/td&gt;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&gt;&lt;p&#x20;style=&quot;text-align:&#x20;right;&#x20;color:&#x20;#223549;&#x20;font-weight:&#x20;bold;&#x20;line-height:&#x20;36px;&#x20;padding:&#x20;0px;&#x20;font-size:&#x20;12px;&quot;&gt;Automatic&#x20;alert&#x20;system&lt;/p&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&#x20;colspan=&quot;2&quot;&gt;&lt;hr&#x20;style=&quot;border:&#x20;1px&#x20;solid&#x20;#f5f5f5;&#x20;width:&#x20;100%;&#x20;margin:&#x20;0px;&quot;&gt;&lt;/td&gt;&lt;/tr&gt;&lt;/thead&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td&#x20;colspan=&quot;2&quot;&gt;&lt;img&#x20;onerror=&quot;this.style.display=&amp;quot;none&amp;quot;;&quot;&#x20;src=&quot;_statusimage_&quot;&#x20;style=&quot;display:&#x20;block;&#x20;margin-left:&#x20;auto;&#x20;margin-right:&#x20;auto;&#x20;width:&#x20;105px;&#x20;margin-top:&#x20;20px;&#x20;padding:&#x20;0px;&quot;&#x20;width=&quot;105px&quot;&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&#x20;colspan=&quot;2&quot;&gt;&lt;p&#x20;style=&quot;font-size:&#x20;24px;&#x20;text-align:&#x20;center;&#x20;color:&#x20;#223549;&#x20;padding:&#x20;0px&#x20;10%;&#x20;line-height:&#x20;34px;&#x20;margin:&#x20;20px&#x20;0px;&quot;&gt;We&#x20;have&#x20;bad&#x20;news&#x20;for&#x20;you,&#x20;something&#x20;is&#x20;on&#x20;&lt;span&#x20;style=&quot;text-transform:&#x20;uppercase;&#x20;font-weight:&#x20;800;&quot;&gt;_modulestatus_&lt;/span&gt;&#x20;status!&lt;/p&gt;&lt;div&gt;&lt;!--[if&#x20;mso]&gt;&lt;v:rect&#x20;xmlns:v=&quot;urn:schemas-microsoft-com:vml&quot;&#x20;xmlns:w=&quot;urn:schemas-microsoft-com:office:word&quot;&#x20;href=&quot;#&quot;&#x20;style=&quot;height:33px;v-text-anchor:middle;width:100px;&quot;&#x20;stroke=&quot;f&quot;&#x20;fillcolor=&quot;#D84A38&quot;&gt;&lt;w:anchorlock/&gt;&lt;center&gt;&lt;![endif]--&gt;&lt;a&#x20;style=&quot;background-color:&#x20;#223549;&#x20;border:&#x20;none;&#x20;color:&#x20;white;&#x20;padding:&#x20;15px&#x20;30px;&#x20;text-align:&#x20;center;&#x20;text-decoration:&#x20;none;&#x20;display:&#x20;block;&#x20;font-size:&#x20;16px;&#x20;margin-left:&#x20;auto;&#x20;margin-right:&#x20;auto;&#x20;border-radius:&#x20;100px;&#x20;max-width:&#x20;50%;&#x20;margin-top:&#x20;0px;&#x20;font-weight:&#x20;bold;&quot;&#x20;href=&quot;_homeurl_&quot;&gt;Go&#x20;to&#x20;Pandora&#x20;FMS&#x20;Console&lt;/a&gt;&lt;!--[if&#x20;mso]&gt;&lt;/center&gt;&lt;/v:rect&gt;&lt;![endif]--&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&#x20;colspan=&quot;2&quot;&gt;&lt;div&#x20;style=&quot;background-color:&#x20;#f6f6f6;&#x20;border-radius:&#x20;10px;&#x20;padding:&#x20;10px&#x20;20px;&#x20;margin-top:&#x20;40px;&quot;&gt;&lt;p&#x20;style=&quot;font-size:&#x20;18px;&#x20;line-height:&#x20;30px;&#x20;color:&#x20;#223549;&quot;&gt;Monitoring&#x20;details&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Data:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_data_&#x20;&lt;em&gt;&#40;_modulestatus_&#41;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Agent:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_agent_&#x20;&lt;em&gt;_address_&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Module:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_module_&#x20;&lt;em&gt;_moduledescription_&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Timestamp:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_timestamp_&lt;/span&gt;&lt;/p&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&#x20;style=&quot;padding:&#x20;20px&#x20;0px;&quot;&#x20;colspan=&quot;2&quot;&gt;&lt;p&#x20;style=&quot;font-size:&#x20;18px;&#x20;line-height:&#x20;30px;&#x20;color:&#x20;#223549;&quot;&gt;Report&#x20;details&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Generated:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_generated_date_&lt;em&gt;&lt;br&gt;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Report&#x20;date:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_date_&lt;em&gt;&lt;br&gt;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Description:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_description_&lt;/span&gt;&lt;/p&gt;&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;&lt;div&#x20;style=&quot;text-align:&#x20;center;&#x20;margin-top:&#x20;10px;&quot;&gt;&lt;p&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&gt;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/en/contact/&quot;&gt;Contact&#x20;Us&lt;/a&gt;&amp;nbsp;&amp;nbsp;|&amp;nbsp;&amp;nbsp;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/community/forums/forum/english/&quot;&gt;Support&lt;/a&gt;&amp;nbsp;&amp;nbsp;|&amp;nbsp;&amp;nbsp;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/manual/en/start&quot;&gt;Docs&lt;/a&gt;&lt;/p&gt;&lt;/div&gt;&lt;/div&gt;','','','','','','',0,0,'','','','&lt;div&#x20;style=&quot;background-color:&#x20;#eaf0f6;&#x20;font-family:&#x20;Arial,&#x20;Helvetica,&#x20;sans-serif;&#x20;padding:&#x20;30px;&#x20;margin:&#x20;0;&quot;&gt;&#x0d;&#x0a;&lt;table&#x20;style=&quot;max-width:&#x20;560px;&#x20;background-color:&#x20;white;&#x20;border-radius:&#x20;10px;&#x20;padding:&#x20;10px&#x20;20px&#x20;40px;&quot;&#x20;cellspacing=&quot;0&quot;&#x20;cellpadding=&quot;0&quot;&#x20;align=&quot;center&quot;&gt;&#x0d;&#x0a;&lt;thead&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&gt;&lt;a&#x20;href=&quot;https://pandorafms.com/en/&quot;&#x20;target=&quot;_blank&quot;&gt;&lt;img&#x20;src=&quot;https://pandorafms.com/wp-content/uploads/2022/03/System-email-Pandora-FMS.png&quot;&#x20;width=&quot;206px&quot;&gt;&lt;/a&gt;&lt;/td&gt;&#x0d;&#x0a;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;text-align:&#x20;right;&#x20;color:&#x20;#223549;&#x20;font-weight:&#x20;bold;&#x20;line-height:&#x20;36px;&#x20;padding:&#x20;0px;&#x20;font-size:&#x20;12px;&quot;&gt;Automatic&#x20;alert&#x20;system&lt;/p&gt;&#x0d;&#x0a;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&#x20;colspan=&quot;2&quot;&gt;&lt;hr&#x20;style=&quot;border:&#x20;1px&#x20;solid&#x20;#f5f5f5;&#x20;width:&#x20;100%;&#x20;margin:&#x20;0px;&quot;&gt;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;/thead&gt;&#x0d;&#x0a;&lt;tbody&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;colspan=&quot;2&quot;&gt;&lt;img&#x20;src=&quot;https://pandorafms.com/wp-content/uploads/2022/03/System-email-Good-news.png&quot;&#x20;style=&quot;display:&#x20;block;&#x20;margin-left:&#x20;auto;&#x20;margin-right:&#x20;auto;&#x20;width:&#x20;105px;&#x20;margin-top:&#x20;20px;&#x20;padding:&#x20;0px;&quot;&#x20;width=&quot;105px&quot;&gt;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;colspan=&quot;2&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;24px;&#x20;text-align:&#x20;center;&#x20;color:&#x20;#223549;&#x20;padding:&#x20;0px&#x20;10%;&#x20;line-height:&#x20;34px;&#x20;margin:&#x20;20px&#x20;0px;&quot;&gt;We&#x20;have&#x20;good&#x20;news&#x20;for&#x20;you,&#x20;alert&#x20;has&#x20;been&#x20;&lt;span&#x20;style=&quot;text-transform:&#x20;uppercase;&#x20;font-weight:&#x20;800;&quot;&gt;recovered&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;div&gt;&lt;!--[if&#x20;mso]&gt;&lt;v:rect&#x20;xmlns:v=&quot;urn:schemas-microsoft-com:vml&quot;&#x20;xmlns:w=&quot;urn:schemas-microsoft-com:office:word&quot;&#x20;href=&quot;#&quot;&#x20;style=&quot;height:33px;v-text-anchor:middle;width:100px;&quot;&#x20;stroke=&quot;f&quot;&#x20;fillcolor=&quot;#D84A38&quot;&gt;&lt;w:anchorlock/&gt;&lt;center&gt;&lt;![endif]--&gt;&lt;a&#x20;style=&quot;background-color:&#x20;#223549;&#x20;border:&#x20;none;&#x20;color:&#x20;white;&#x20;padding:&#x20;15px&#x20;30px;&#x20;text-align:&#x20;center;&#x20;text-decoration:&#x20;none;&#x20;display:&#x20;block;&#x20;font-size:&#x20;16px;&#x20;margin-left:&#x20;auto;&#x20;margin-right:&#x20;auto;&#x20;border-radius:&#x20;100px;&#x20;max-width:&#x20;50%;&#x20;margin-top:&#x20;0px;&#x20;font-weight:&#x20;bold;&quot;&#x20;href=&quot;_homeurl_&quot;&gt;Go&#x20;to&#x20;Pandora&#x20;FMS&#x20;Console&lt;/a&gt;&lt;!--[if&#x20;mso]&gt;&lt;/center&gt;&lt;/v:rect&gt;&lt;![endif]--&gt;&lt;/div&gt;&#x0d;&#x0a;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;colspan=&quot;2&quot;&gt;&#x0d;&#x0a;&lt;div&#x20;style=&quot;background-color:&#x20;#f6f6f6;&#x20;border-radius:&#x20;10px;&#x20;padding:&#x20;10px&#x20;20px;&#x20;margin-top:&#x20;40px;&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;18px;&#x20;line-height:&#x20;30px;&#x20;color:&#x20;#223549;&quot;&gt;Monitoring&#x20;details&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Data:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_data_&#x20;&lt;em&gt;&#40;_modulestatus_&#41;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Agent:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_agent_&#x20;&lt;em&gt;_address_&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Module:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_module_&#x20;&lt;em&gt;_moduledescription_&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Timestamp:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_timestamp_&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;/div&gt;&#x0d;&#x0a;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;style=&quot;padding:&#x20;20px&#x20;0px;&quot;&#x20;colspan=&quot;2&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;18px;&#x20;line-height:&#x20;30px;&#x20;color:&#x20;#223549;&quot;&gt;Report&#x20;details&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Generated:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_generated_date_&lt;em&gt;&lt;br&gt;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Report&#x20;date:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_date_&lt;em&gt;&lt;br&gt;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Description:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_description_&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;/tbody&gt;&#x0d;&#x0a;&lt;/table&gt;&#x0d;&#x0a;&lt;div&#x20;style=&quot;text-align:&#x20;center;&#x20;margin-top:&#x20;10px;&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&gt;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/en/contact/&quot;&gt;Contact&#x20;Us&lt;/a&gt;&amp;nbsp;&amp;nbsp;|&amp;nbsp;&amp;nbsp;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/community/forums/forum/english/&quot;&gt;Support&lt;/a&gt;&amp;nbsp;&amp;nbsp;|&amp;nbsp;&amp;nbsp;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/manual/en/start&quot;&gt;Docs&lt;/a&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;/div&gt;&#x0d;&#x0a;&lt;/div&gt;','','','','','','');
 INSERT INTO `talert_actions` (`id`, `name`, `id_alert_command`, `field1`, `field2`, `field3`, `field4`, `field5`, `field6`, `field7`, `field8`, `field9`, `field10`, `id_group`, `action_threshold`, `field1_recovery`, `field2_recovery`, `field3_recovery`, `field4_recovery`, `field5_recovery`, `field6_recovery`, `field7_recovery`, `field8_recovery`, `field9_recovery`, `field10_recovery`) VALUES
 (5,'Send&#x20;Report&#x20;by&#x20;e-mail&#x20;(from&#x20;template)',15,'','','yourmail@domain.es','','&lt;div&#x20;style=&quot;background-color:&#x20;#eaf0f6;&#x20;font-family:&#x20;Arial,&#x20;Helvetica,&#x20;sans-serif;&#x20;padding:&#x20;30px;&#x20;margin:&#x20;0;&quot;&gt;&lt;table&#x20;style=&quot;max-width:&#x20;560px;&#x20;background-color:&#x20;white;&#x20;border-radius:&#x20;10px;&#x20;padding:&#x20;10px&#x20;20px&#x20;40px;&quot;&#x20;cellspacing=&quot;0&quot;&#x20;cellpadding=&quot;0&quot;&#x20;align=&quot;center&quot;&gt;&lt;thead&gt;&lt;tr&gt;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&gt;&lt;a&#x20;href=&quot;https://pandorafms.com/en/&quot;&#x20;target=&quot;_blank&quot;&gt;&lt;img&#x20;src=&quot;https://pandorafms.com/wp-content/uploads/2022/03/System-email-Pandora-FMS.png&quot;&#x20;width=&quot;206px&quot;&gt;&lt;/a&gt;&lt;/td&gt;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&gt;&lt;p&#x20;style=&quot;text-align:&#x20;right;&#x20;color:&#x20;#223549;&#x20;font-weight:&#x20;bold;&#x20;line-height:&#x20;36px;&#x20;padding:&#x20;0px;&#x20;font-size:&#x20;12px;&quot;&gt;Automatic&#x20;alert&#x20;system&lt;/p&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&#x20;colspan=&quot;2&quot;&gt;&lt;hr&#x20;style=&quot;border:&#x20;1px&#x20;solid&#x20;#f5f5f5;&#x20;width:&#x20;100%;&#x20;margin:&#x20;0px;&quot;&gt;&lt;/td&gt;&lt;/tr&gt;&lt;/thead&gt;&lt;tbody&gt;&lt;tr&gt;&lt;td&#x20;colspan=&quot;2&quot;&gt;&lt;img&#x20;onerror=&quot;this.style.display=&amp;quot;none&amp;quot;;&quot;&#x20;src=&quot;_statusimage_&quot;&#x20;style=&quot;display:&#x20;block;&#x20;margin-left:&#x20;auto;&#x20;margin-right:&#x20;auto;&#x20;width:&#x20;105px;&#x20;margin-top:&#x20;20px;&#x20;padding:&#x20;0px;&quot;&#x20;width=&quot;105px&quot;&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&#x20;colspan=&quot;2&quot;&gt;&lt;p&#x20;style=&quot;font-size:&#x20;24px;&#x20;text-align:&#x20;center;&#x20;color:&#x20;#223549;&#x20;padding:&#x20;0px&#x20;10%;&#x20;line-height:&#x20;34px;&#x20;margin:&#x20;20px&#x20;0px;&quot;&gt;We&#x20;have&#x20;bad&#x20;news&#x20;for&#x20;you,&#x20;something&#x20;is&#x20;on&#x20;&lt;span&#x20;style=&quot;text-transform:&#x20;uppercase;&#x20;font-weight:&#x20;800;&quot;&gt;_modulestatus_&lt;/span&gt;&#x20;status!&lt;/p&gt;&lt;div&gt;&lt;!--[if&#x20;mso]&gt;&lt;v:rect&#x20;xmlns:v=&quot;urn:schemas-microsoft-com:vml&quot;&#x20;xmlns:w=&quot;urn:schemas-microsoft-com:office:word&quot;&#x20;href=&quot;#&quot;&#x20;style=&quot;height:33px;v-text-anchor:middle;width:100px;&quot;&#x20;stroke=&quot;f&quot;&#x20;fillcolor=&quot;#D84A38&quot;&gt;&lt;w:anchorlock/&gt;&lt;center&gt;&lt;![endif]--&gt;&lt;a&#x20;style=&quot;background-color:&#x20;#223549;&#x20;border:&#x20;none;&#x20;color:&#x20;white;&#x20;padding:&#x20;15px&#x20;30px;&#x20;text-align:&#x20;center;&#x20;text-decoration:&#x20;none;&#x20;display:&#x20;block;&#x20;font-size:&#x20;16px;&#x20;margin-left:&#x20;auto;&#x20;margin-right:&#x20;auto;&#x20;border-radius:&#x20;100px;&#x20;max-width:&#x20;50%;&#x20;margin-top:&#x20;0px;&#x20;font-weight:&#x20;bold;&quot;&#x20;href=&quot;_homeurl_&quot;&gt;Go&#x20;to&#x20;Pandora&#x20;FMS&#x20;Console&lt;/a&gt;&lt;!--[if&#x20;mso]&gt;&lt;/center&gt;&lt;/v:rect&gt;&lt;![endif]--&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&#x20;colspan=&quot;2&quot;&gt;&lt;div&#x20;style=&quot;background-color:&#x20;#f6f6f6;&#x20;border-radius:&#x20;10px;&#x20;padding:&#x20;10px&#x20;20px;&#x20;margin-top:&#x20;40px;&quot;&gt;&lt;p&#x20;style=&quot;font-size:&#x20;18px;&#x20;line-height:&#x20;30px;&#x20;color:&#x20;#223549;&quot;&gt;Monitoring&#x20;details&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Data:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_data_&#x20;&lt;em&gt;&#40;_modulestatus_&#41;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Agent:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_agent_&#x20;&lt;em&gt;_address_&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Module:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_module_&#x20;&lt;em&gt;_moduledescription_&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Timestamp:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_timestamp_&lt;/span&gt;&lt;/p&gt;&lt;/div&gt;&lt;/td&gt;&lt;/tr&gt;&lt;tr&gt;&lt;td&#x20;style=&quot;padding:&#x20;20px&#x20;0px;&quot;&#x20;colspan=&quot;2&quot;&gt;&lt;p&#x20;style=&quot;font-size:&#x20;18px;&#x20;line-height:&#x20;30px;&#x20;color:&#x20;#223549;&quot;&gt;Report&#x20;details&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Generated:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_generated_date_&lt;em&gt;&lt;br&gt;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Report&#x20;date:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_date_&lt;em&gt;&lt;br&gt;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Description:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_description_&lt;/span&gt;&lt;/p&gt;&lt;/td&gt;&lt;/tr&gt;&lt;/tbody&gt;&lt;/table&gt;&lt;div&#x20;style=&quot;text-align:&#x20;center;&#x20;margin-top:&#x20;10px;&quot;&gt;&lt;p&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&gt;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/en/contact/&quot;&gt;Contact&#x20;Us&lt;/a&gt;&amp;nbsp;&amp;nbsp;|&amp;nbsp;&amp;nbsp;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/community/forums/forum/english/&quot;&gt;Support&lt;/a&gt;&amp;nbsp;&amp;nbsp;|&amp;nbsp;&amp;nbsp;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/manual/en/start&quot;&gt;Docs&lt;/a&gt;&lt;/p&gt;&lt;/div&gt;&lt;/div&gt;','','','','','',0,0,'','','','','&lt;div&#x20;style=&quot;background-color:&#x20;#eaf0f6;&#x20;font-family:&#x20;Arial,&#x20;Helvetica,&#x20;sans-serif;&#x20;padding:&#x20;30px;&#x20;margin:&#x20;0;&quot;&gt;&#x0d;&#x0a;&lt;table&#x20;style=&quot;max-width:&#x20;560px;&#x20;background-color:&#x20;white;&#x20;border-radius:&#x20;10px;&#x20;padding:&#x20;10px&#x20;20px&#x20;40px;&quot;&#x20;cellspacing=&quot;0&quot;&#x20;cellpadding=&quot;0&quot;&#x20;align=&quot;center&quot;&gt;&#x0d;&#x0a;&lt;thead&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&gt;&lt;a&#x20;href=&quot;https://pandorafms.com/en/&quot;&#x20;target=&quot;_blank&quot;&gt;&lt;img&#x20;src=&quot;https://pandorafms.com/wp-content/uploads/2022/03/System-email-Pandora-FMS.png&quot;&#x20;width=&quot;206px&quot;&gt;&lt;/a&gt;&lt;/td&gt;&#x0d;&#x0a;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;text-align:&#x20;right;&#x20;color:&#x20;#223549;&#x20;font-weight:&#x20;bold;&#x20;line-height:&#x20;36px;&#x20;padding:&#x20;0px;&#x20;font-size:&#x20;12px;&quot;&gt;Automatic&#x20;alert&#x20;system&lt;/p&gt;&#x0d;&#x0a;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;style=&quot;padding:&#x20;0px&#x20;0px&#x20;5px;&quot;&#x20;colspan=&quot;2&quot;&gt;&lt;hr&#x20;style=&quot;border:&#x20;1px&#x20;solid&#x20;#f5f5f5;&#x20;width:&#x20;100%;&#x20;margin:&#x20;0px;&quot;&gt;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;/thead&gt;&#x0d;&#x0a;&lt;tbody&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;colspan=&quot;2&quot;&gt;&lt;img&#x20;src=&quot;https://pandorafms.com/wp-content/uploads/2022/03/System-email-Good-news.png&quot;&#x20;style=&quot;display:&#x20;block;&#x20;margin-left:&#x20;auto;&#x20;margin-right:&#x20;auto;&#x20;width:&#x20;105px;&#x20;margin-top:&#x20;20px;&#x20;padding:&#x20;0px;&quot;&#x20;width=&quot;105px&quot;&gt;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;colspan=&quot;2&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;24px;&#x20;text-align:&#x20;center;&#x20;color:&#x20;#223549;&#x20;padding:&#x20;0px&#x20;10%;&#x20;line-height:&#x20;34px;&#x20;margin:&#x20;20px&#x20;0px;&quot;&gt;We&#x20;have&#x20;good&#x20;news&#x20;for&#x20;you,&#x20;alert&#x20;has&#x20;been&#x20;&lt;span&#x20;style=&quot;text-transform:&#x20;uppercase;&#x20;font-weight:&#x20;800;&quot;&gt;recovered&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;div&gt;&lt;!--[if&#x20;mso]&gt;&lt;v:rect&#x20;xmlns:v=&quot;urn:schemas-microsoft-com:vml&quot;&#x20;xmlns:w=&quot;urn:schemas-microsoft-com:office:word&quot;&#x20;href=&quot;#&quot;&#x20;style=&quot;height:33px;v-text-anchor:middle;width:100px;&quot;&#x20;stroke=&quot;f&quot;&#x20;fillcolor=&quot;#D84A38&quot;&gt;&lt;w:anchorlock/&gt;&lt;center&gt;&lt;![endif]--&gt;&lt;a&#x20;style=&quot;background-color:&#x20;#223549;&#x20;border:&#x20;none;&#x20;color:&#x20;white;&#x20;padding:&#x20;15px&#x20;30px;&#x20;text-align:&#x20;center;&#x20;text-decoration:&#x20;none;&#x20;display:&#x20;block;&#x20;font-size:&#x20;16px;&#x20;margin-left:&#x20;auto;&#x20;margin-right:&#x20;auto;&#x20;border-radius:&#x20;100px;&#x20;max-width:&#x20;50%;&#x20;margin-top:&#x20;0px;&#x20;font-weight:&#x20;bold;&quot;&#x20;href=&quot;_homeurl_&quot;&gt;Go&#x20;to&#x20;Pandora&#x20;FMS&#x20;Console&lt;/a&gt;&lt;!--[if&#x20;mso]&gt;&lt;/center&gt;&lt;/v:rect&gt;&lt;![endif]--&gt;&lt;/div&gt;&#x0d;&#x0a;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;colspan=&quot;2&quot;&gt;&#x0d;&#x0a;&lt;div&#x20;style=&quot;background-color:&#x20;#f6f6f6;&#x20;border-radius:&#x20;10px;&#x20;padding:&#x20;10px&#x20;20px;&#x20;margin-top:&#x20;40px;&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;18px;&#x20;line-height:&#x20;30px;&#x20;color:&#x20;#223549;&quot;&gt;Monitoring&#x20;details&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Data:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_data_&#x20;&lt;em&gt;&#40;_modulestatus_&#41;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Agent:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_agent_&#x20;&lt;em&gt;_address_&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Module:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_module_&#x20;&lt;em&gt;_moduledescription_&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Timestamp:&#x20;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_timestamp_&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;/div&gt;&#x0d;&#x0a;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;tr&gt;&#x0d;&#x0a;&lt;td&#x20;style=&quot;padding:&#x20;20px&#x20;0px;&quot;&#x20;colspan=&quot;2&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;18px;&#x20;line-height:&#x20;30px;&#x20;color:&#x20;#223549;&quot;&gt;Report&#x20;details&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Generated:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_generated_date_&lt;em&gt;&lt;br&gt;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Report&#x20;date:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_date_&lt;em&gt;&lt;br&gt;&lt;/em&gt;&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;15px;&#x20;color:&#x20;#333333;&#x20;font-weight:&#x20;800;&#x20;line-height:&#x20;15px;&quot;&gt;Description:&amp;nbsp;&lt;span&#x20;style=&quot;font-weight:&#x20;400!important;&quot;&gt;_report_description_&lt;/span&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;/td&gt;&#x0d;&#x0a;&lt;/tr&gt;&#x0d;&#x0a;&lt;/tbody&gt;&#x0d;&#x0a;&lt;/table&gt;&#x0d;&#x0a;&lt;div&#x20;style=&quot;text-align:&#x20;center;&#x20;margin-top:&#x20;10px;&quot;&gt;&#x0d;&#x0a;&lt;p&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&gt;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/en/contact/&quot;&gt;Contact&#x20;Us&lt;/a&gt;&amp;nbsp;&amp;nbsp;|&amp;nbsp;&amp;nbsp;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/community/forums/forum/english/&quot;&gt;Support&lt;/a&gt;&amp;nbsp;&amp;nbsp;|&amp;nbsp;&amp;nbsp;&lt;a&#x20;style=&quot;font-size:&#x20;12px;&#x20;text-decoration:&#x20;none;&#x20;font-weight:&#x20;400;&#x20;color:&#x20;#777;&quot;&#x20;href=&quot;https://pandorafms.com/manual/en/start&quot;&gt;Docs&lt;/a&gt;&lt;/p&gt;&#x0d;&#x0a;&lt;/div&gt;&#x0d;&#x0a;&lt;/div&gt;','','','','','');
-
+INSERT INTO `talert_actions` (`id`, `name`, `id_alert_command`) VALUES (6,'Create&#x20;Pandora&#x20;ITSM&#x20;ticket',16);
 
 -- alert templates (default)
 INSERT INTO `talert_templates` (`id`,`name`,`description`,`id_alert_action`,`field1`,`field2`,`field3`,`field4`,`field5`,`field6`,`field7`,`field8`,`field9`,`field10`,`field11`,`field12`,`field13`,`field14`,`field15`,`field16`,`field17`,`field18`,`field19`,`field20`,`type`,`value`,`matches_value`,`max_value`,`min_value`,`time_threshold`,`max_alerts`,`min_alerts`,`time_from`,`time_to`,`monday`,`tuesday`,`wednesday`,`thursday`,`friday`,`saturday`,`sunday`,`recovery_notify`,`field1_recovery`,`field2_recovery`,`field3_recovery`,`field4_recovery`,`field5_recovery`,`field6_recovery`,`field7_recovery`,`field8_recovery`,`field9_recovery`,`field10_recovery`,`field11_recovery`,`field12_recovery`,`field13_recovery`,`field14_recovery`,`field15_recovery`,`field16_recovery`,`field17_recovery`,`field18_recovery`,`field19_recovery`,`field20_recovery`,`priority`,`id_group`,`special_day`,`wizard_level`,`min_alerts_reset_counter`,`disable_event`,`previous_name`, `schedule`)
@@ -1202,7 +1204,7 @@ INSERT INTO `tagent_custom_fields` VALUES (1,'Serial&#x20;Number',0,0,'',0),(2,'
 
 INSERT INTO `ttag` VALUES (1,'network','Network&#x20;equipment','http://artica.es','','',''),(2,'critical','Critical&#x20;modules','','','',''),(3,'dmz','DMZ&#x20;Network&#x20;Zone','','','',''),(4,'performance','Performance&#x20;anda&#x20;capacity&#x20;modules','','','',''),(5,'configuration','','','','','');
 
-INSERT INTO `tevent_response` VALUES (1,'Ping&#x20;to&#x20;host','Ping&#x20;to&#x20;the&#x20;agent&#x20;host','ping&#x20;-c&#x20;5&#x20;_agent_address_','command',0,620,500,0,'',0,90,0),(3,'Create&#x20;incident&#x20;from&#x20;event','Create&#x20;a&#x20;incident&#x20;from&#x20;the&#x20;event&#x20;with&#x20;the&#x20;standard&#x20;incidents&#x20;system&#x20;of&#x20;Pandora&#x20;FMS','index.php?sec=workspace&amp;sec2=operation/incidents/incident_detail&amp;insert_form&amp;from_event=_event_id_','url',0,0,0,1,'',0,90,0),(5,'Restart&#x20;agent','Restart&#x20;the&#x20;agent&#x20;with&#x20;using&#x20;UDP&#x20;protocol.&#x0d;&#x0a;&#x0d;&#x0a;To&#x20;use&#x20;this&#x20;response&#x20;is&#x20;necessary&#x20;to&#x20;have&#x20;installed&#x20;Pandora&#x20;FMS&#x20;server&#x20;and&#x20;console&#x20;in&#x20;the&#x20;same&#x20;machine.','/usr/share/pandora_server/util/udp_client.pl&#x20;_agent_address_&#x20;41122&#x20;&quot;REFRESH&#x20;AGENT&quot;','command',0,620,500,0,'',0,90,0),(6,'Ping&#x20;to&#x20;module&#x20;agent&#x20;host','Ping&#x20;to&#x20;the&#x20;module&#x20;agent&#x20;host','ping&#x20;-c&#x20;5&#x20;_module_address_','command',0,620,500,0,'',0,90,0);
+INSERT INTO `tevent_response` VALUES (1,'Ping&#x20;to&#x20;host','Ping&#x20;to&#x20;the&#x20;agent&#x20;host','ping&#x20;-c&#x20;5&#x20;_agent_address_','command',0,620,500,0,'',0,90,0),(3,'Create&#x20;incident&#x20;from&#x20;event','Create&#x20;a&#x20;incident&#x20;from&#x20;the&#x20;event&#x20;with&#x20;the&#x20;standard&#x20;incidents&#x20;system&#x20;of&#x20;Pandora&#x20;FMS','index.php?sec=workspace&amp;sec2=operation/incidents/incident_detail&amp;insert_form&amp;from_event=_event_id_','url',0,0,0,1,'',0,90,0),(5,'Restart&#x20;agent','Restart&#x20;the&#x20;agent&#x20;with&#x20;using&#x20;UDP&#x20;protocol.&#x0d;&#x0a;&#x0d;&#x0a;To&#x20;use&#x20;this&#x20;response&#x20;is&#x20;necessary&#x20;to&#x20;have&#x20;installed&#x20;Pandora&#x20;FMS&#x20;server&#x20;and&#x20;console&#x20;in&#x20;the&#x20;same&#x20;machine.','/usr/share/pandora_server/util/udp_client.pl&#x20;_agent_address_&#x20;41122&#x20;&quot;REFRESH&#x20;AGENT&quot;','command',0,620,500,0,'',0,90,0),(6,'Ping&#x20;to&#x20;module&#x20;agent&#x20;host','Ping&#x20;to&#x20;the&#x20;module&#x20;agent&#x20;host','ping&#x20;-c&#x20;5&#x20;_module_address_','command',0,620,500,0,'',0,90,0),(7,'Create&#x20;ticket&#x20;in&#x20;Pandora&#x20;ITSM&#x20;from&#x20;event','Create&#x20;a&#x20;ticket&#x20;in&#x20;Pandora&#x20;ITSM&#x20;from&#x20;an&#x20;event','index.php?sec=manageTickets&amp;sec2=operation/ITSM/itsm&amp;operation=edit&amp;from_event=_event_id_','url',0,0,0,1,'',0,90,1);
 
 INSERT INTO `tupdate_settings` VALUES  ('current_update', '412'), ('customer_key', 'PANDORA-FREE'), ('updating_binary_path', 'Path where the updated binary files will be stored'), ('updating_code_path', 'Path where the updated code is stored'), ('dbname', ''), ('dbhost', ''), ('dbpass', ''), ('dbuser', ''), ('dbport', ''), ('proxy', ''), ('proxy_port', ''), ('proxy_user', ''), ('proxy_pass', '');
 
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 10ec468d47..9543750842 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -1850,8 +1850,8 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 			}
 		}
 	
-	# Integria IMS Ticket
-	} elsif ($clean_name eq "Integria IMS Ticket") {
+	# Pandora ITSM Ticket
+	} elsif ($clean_name eq "Pandora ITSM Ticket") {
 		my $config_ITSM_enabled = pandora_get_tconfig_token ($dbh, 'ITSM_enabled', '');
 		if (!$config_ITSM_enabled) {
 			return;
@@ -1867,19 +1867,6 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		$field5 = subst_alert_macros ($field5, \%macros, $pa_config, $dbh, $agent, $module, $alert);
 		$field6 = subst_alert_macros ($field6, \%macros, $pa_config, $dbh, $agent, $module, $alert);
 		$field7 = subst_alert_macros ($field7, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field8 = subst_alert_macros ($field8, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field9 = subst_alert_macros ($field9, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field10 = subst_alert_macros ($field10, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field11 = subst_alert_macros ($field11, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field12 = subst_alert_macros ($field12, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field13 = subst_alert_macros ($field13, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field14 = subst_alert_macros ($field14, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field15 = subst_alert_macros ($field15, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field16 = subst_alert_macros ($field16, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field17 = subst_alert_macros ($field17, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field18 = subst_alert_macros ($field18, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field19 = subst_alert_macros ($field19, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field20 = subst_alert_macros ($field20, \%macros, $pa_config, $dbh, $agent, $module, $alert);
 		
 		# Field 1 (Ticket name)
 		my $ticket_name = safe_output($field1);
@@ -1913,12 +1900,15 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 
 		# Field 6 (Ticket status)
 		my $ticket_status = $field6;
-		if ($ticket_status eq '0') {
-			$ticket_status = 1;
+		if ($ticket_status eq '') {
+			$ticket_status = 'new';
 		}
 
 		# Field 7 (Ticket description);
-		my $ticket_description = subst_alert_macros(safe_output($field7), \%macros, $pa_config, $dbh, $agent, $module, $alert);
+		my $ticket_description = $field7;
+		if ($ticket_description eq '') {
+			$ticket_description = '';
+		}
 
 		my $external_id = $agent->{'nombre'} . '-' . $module->{'id_agente'} . '-' . $module->{'id_agente_modulo'};
 
@@ -1959,19 +1949,19 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 
 		# Ticket type custom fields
 		my %custom_fields = (
-			'field0' => subst_alert_macros(safe_output($field8), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field1' => subst_alert_macros(safe_output($field9), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field2' => subst_alert_macros(safe_output($field10), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field3' => subst_alert_macros(safe_output($field11), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field4' => subst_alert_macros(safe_output($field12), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field5' => subst_alert_macros(safe_output($field13), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field6' => subst_alert_macros(safe_output($field14), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field7' => subst_alert_macros(safe_output($field15), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field8' => subst_alert_macros(safe_output($field16), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field9' => subst_alert_macros(safe_output($field17), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field10' => subst_alert_macros(safe_output($field18), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field11' => subst_alert_macros(safe_output($field19), \%macros, $pa_config, $dbh, $agent, $module, $alert),
-			'field12' => subst_alert_macros(safe_output($field20), \%macros, $pa_config, $dbh, $agent, $module, $alert)
+			'field0' => $field8 ne "" ? subst_alert_macros(safe_output($field8), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field1' => $field9 ne "" ? subst_alert_macros(safe_output($field9), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field2' => $field10 ne "" ? subst_alert_macros(safe_output($field10), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field3' => $field11 ne "" ? subst_alert_macros(safe_output($field11), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field4' => $field12 ne "" ? subst_alert_macros(safe_output($field12), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field5' => $field13 ne "" ? subst_alert_macros(safe_output($field13), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field6' => $field14 ne "" ? subst_alert_macros(safe_output($field14), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field7' => $field15 ne "" ? subst_alert_macros(safe_output($field15), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field8' => $field16 ne "" ? subst_alert_macros(safe_output($field16), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field9' => $field17 ne "" ? subst_alert_macros(safe_output($field17), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field10' => $field18 ne "" ? subst_alert_macros(safe_output($field18), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field11' => $field19 ne "" ? subst_alert_macros(safe_output($field19), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
+			'field12' => $field20 ne "" ? subst_alert_macros(safe_output($field20), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef
 		);
 
 		# Check exit inventory object.
diff --git a/pandora_server/lib/PandoraFMS/Tools.pm b/pandora_server/lib/PandoraFMS/Tools.pm
index 254b304fe7..b712fabe59 100755
--- a/pandora_server/lib/PandoraFMS/Tools.pm
+++ b/pandora_server/lib/PandoraFMS/Tools.pm
@@ -2359,13 +2359,13 @@ sub api_call {
   # TODO: change to logger.
 	use Data::Dumper;
 	$Data::Dumper::SortKeys = 1;
-	print Dumper("------------------");
-	if ($@) { print Dumper($@); }
 	#print Dumper($response);
 	print Dumper($response->{'_rc'});
 	print Dumper($response->{'_content'});
 	print Dumper($response->{'_request'});
-	
+
+	logger($pa_config, 'Api response failure: ' . $response->{'_rc'} . '. Description error: ' . $response->{'_content'}, 3);
+	logger($pa_config, $response->{'_request'}, 3);
 	return undef;
 }
 

From 1fecd7d289efc5ed4bad3b7bd94015fe4c5470d2 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Thu, 17 Aug 2023 14:56:55 +0200
Subject: [PATCH 018/116] ITSM pandora_enterprise#11471

---
 .../godmode/agentes/agent_incidents.php       | 189 ++++----
 .../godmode/alerts/alert_commands.php         |   4 +-
 .../godmode/alerts/configure_alert_action.php |   6 +-
 .../include/lib/Dashboard/Widget.php          |   1 +
 .../lib/Dashboard/Widgets/ITSMIncidences.php  | 418 ++++++++++++++++++
 pandora_console/include/lib/ITSM/Manager.php  |   5 +
 pandora_server/lib/PandoraFMS/Core.pm         |  14 +-
 7 files changed, 517 insertions(+), 120 deletions(-)
 create mode 100644 pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php

diff --git a/pandora_console/godmode/agentes/agent_incidents.php b/pandora_console/godmode/agentes/agent_incidents.php
index b4b7a81e74..5722b6c9bf 100644
--- a/pandora_console/godmode/agentes/agent_incidents.php
+++ b/pandora_console/godmode/agentes/agent_incidents.php
@@ -1,21 +1,33 @@
 <?php
+/**
+ * ITSM.
+ *
+ * @category   ITSM view
+ * @package    Pandora FMS
+ * @subpackage Opensource
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
 
-// Pandora FMS - https://pandorafms.com
-// ==================================================
-// Copyright (c) 2005-2023 Pandora FMS
-// Please see https://pandorafms.com/community/ for full contribution list
-// This program is free software; you can redistribute it and/or
-// modify it under the terms of the GNU General Public License
-// as published by the Free Software Foundation for version 2.
-// This program is distributed in the hope that it will be useful,
-// but WITHOUT ANY WARRANTY; without even the implied warranty of
-// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-// GNU General Public License for more details.
-// Load global vars
 global $config;
 
-require_once 'include/functions_incidents.php';
-
 check_login();
 
 if (!$config['ITSM_enabled']) {
@@ -23,9 +35,7 @@ if (!$config['ITSM_enabled']) {
     return;
 }
 
-$group = $id_grupo;
-
-if (! check_acl($config['id_user'], $group, 'AW', $id_agente)) {
+if (! check_acl($config['id_user'], $id_grupo, 'AW', $id_agente)) {
     db_pandora_audit(
         AUDIT_LOG_ACL_VIOLATION,
         'Trying to access agent manager'
@@ -34,102 +44,61 @@ if (! check_acl($config['id_user'], $group, 'AW', $id_agente)) {
     return;
 }
 
-$offset = (int) get_parameter('offset', 0);
+\ui_require_css_file('pandoraitsm');
+\ui_require_javascript_file('ITSM');
 
+$agent = db_get_row('tagente', 'id_agente', $id_agente, false, false);
 
-// See if id_agente is set (either POST or GET, otherwise -1
-$id_agent = (int) get_parameter('id_agente');
-$groups = users_get_groups($config['id_user'], 'AR');
-$filter = ' AND id_agent = '.$id_agent;
-$url = 'index.php?sec=gagente&sec2=godmode/agentes/configurar_agente&tab=incident&id_agente='.$id_agent;
+try {
+    $columns = [
+        'idIncidence',
+        'title',
+        'groupCompany',
+        'statusResolution',
+        'priority',
+        'updateDate',
+        'startDate',
+        'idCreator',
+        'owner',
+    ];
 
-$params = [
-    '',
-    '-10',
-    '1',
-    '-1',
-    '0',
-    '',
-    '',
-    '',
-    agents_get_name($id_agent),
-];
+    $column_names = [
+        __('ID'),
+        __('Title'),
+        __('Group').'/'.__('Company'),
+        __('Status').'/'.__('Resolution'),
+        __('Priority'),
+        __('Updated'),
+        __('Started'),
+        __('Creator'),
+        __('Owner'),
+    ];
 
-// $result = integria_api_call(null, null, null, null, 'get_incidents', $params, false, 'json', ',');
-$result = json_decode($result, true);
-
-if (empty($result) === true) {
-    $result = [];
-    $count = 0;
-    echo '<div class="nf">'.__('No incidents associated to this agent').'</div><br />';
-    return;
-} else {
-    $count = count($result);
-    $result = array_slice($result, $offset, $config['block_size']);
+    ui_print_datatable(
+        [
+            'id'                  => 'itms_list_tickets',
+            'class'               => 'info_table',
+            'style'               => 'width: 99%',
+            'columns'             => $columns,
+            'column_names'        => $column_names,
+            'ajax_url'            => 'operation/ITSM/itsm',
+            'ajax_data'           => [
+                'method'         => 'getListTickets',
+                'externalIdLike' => $agent['nombre'],
+            ],
+            'no_sortable_columns' => [
+                2,
+                3,
+                -1,
+            ],
+            'order'               => [
+                'field'     => 'updateDate',
+                'direction' => 'desc',
+            ],
+        ]
+    );
+} catch (Exception $e) {
+    echo $e->getMessage();
 }
 
-// Show pagination.
-ui_pagination($count, $url, $offset, 0, false, 'offset');
-// ($count + $offset) it's real count of incidents because it's use LIMIT $offset in query.
-echo '<br />';
-
-// Show headers.
-$table->width = '100%';
-$table->class = 'databox';
-$table->cellpadding = 4;
-$table->cellspacing = 4;
-$table->head = [];
-$table->data = [];
-$table->size = [];
-$table->align = [];
-
-$table->head[0] = __('ID');
-$table->head[1] = __('Status');
-$table->head[2] = __('Incident');
-$table->head[3] = __('Priority');
-$table->head[4] = __('Group');
-$table->head[5] = __('Updated');
-
-$table->size[0] = 43;
-$table->size[7] = 50;
-
-$table->align[1] = 'center';
-$table->align[3] = 'center';
-$table->align[4] = 'center';
-
-$rowPair = true;
-$iterator = 0;
-foreach ($result as $row) {
-    if ($rowPair) {
-        $table->rowclass[$iterator] = 'rowPair';
-    } else {
-        $table->rowclass[$iterator] = 'rowOdd';
-    }
-
-    $rowPair = !$rowPair;
-    $iterator++;
-
-    $data = [];
-
-    $data[0] = '<a href="index.php?sec=incident&sec2=operation/incidents/dashboard_detail_integriaims_incident&incident_id='.$row['id_incidencia'].'">'.$row['id_incidencia'].'</a>';
-    // $attach = incidents_get_attach($row['id_incidencia']);
-    if (!empty($attach)) {
-        $data[0] .= '&nbsp;&nbsp;'.html_print_image('images/attachment.png', true, ['style' => 'align:middle;']);
-    }
-
-    // $data[1] = incidents_print_status_img($row['estado'], true);
-    $data[2] = '<a href="index.php?sec=incident&sec2=operation/incidents/dashboard_detail_integriaims_incident&incident_id='.$row['id_incidencia'].'">'.substr(io_safe_output($row['titulo']), 0, 45).'</a>';
-    // $data[3] = incidents_print_priority_img($row['prioridad'], true);
-    $data[4] = $row['id_grupo'];
-    $data[5] = ui_print_timestamp($row['actualizacion'], true);
-
-    array_push($table->data, $data);
-}
-
-html_print_table($table);
-
-echo '</div>';
-unset($table);
-echo '<br><br>';
-
-echo '<div id="both">&nbsp;</div>';
+html_print_action_buttons('');
diff --git a/pandora_console/godmode/alerts/alert_commands.php b/pandora_console/godmode/alerts/alert_commands.php
index c0e9c3087a..b71961fa5f 100644
--- a/pandora_console/godmode/alerts/alert_commands.php
+++ b/pandora_console/godmode/alerts/alert_commands.php
@@ -592,7 +592,7 @@ if (is_ajax()) {
                             0,
                             $management_is_not_allowed,
                             false,
-                            ''
+                            'ITSM_users'
                         );
 
                         $rfield = html_print_autocomplete_users_from_pandora_itsm(
@@ -602,7 +602,7 @@ if (is_ajax()) {
                             0,
                             $management_is_not_allowed || $recovery_disabled,
                             false,
-                            ''
+                            'ITSM_users'
                         );
                     }
                 } else {
diff --git a/pandora_console/godmode/alerts/configure_alert_action.php b/pandora_console/godmode/alerts/configure_alert_action.php
index 9a3903021f..4f87289255 100644
--- a/pandora_console/godmode/alerts/configure_alert_action.php
+++ b/pandora_console/godmode/alerts/configure_alert_action.php
@@ -848,16 +848,20 @@ $(document).ready (function () {
                         }
                         else {
                             var is_element_select = $("[name=field" + i + "_value]").is("select");
+                            var is_element_autocomplete_users_itsm = $("[name=field" + i + "_value]").hasClass("ITSM_users");
 
                             $("[name=field" + i + "_value]").val(old_value);
                             if (is_element_select === true) {
                                 $("[name=field" + i + "_value]").trigger('change');
+                            } else if (is_element_autocomplete_users_itsm === true) {
+                                $("[name=field" + i + "_value_hidden]").val(old_value);
                             }
 
-                            
                             $("[name=field" + i + "_recovery_value]").val(old_recovery_value);
                             if (is_element_select === true) {
                                 $("[name=field" + i + "_recovery_value]").trigger('change');
+                            } else if (is_element_autocomplete_users_itsm === true) {
+                                $("[name=field" + i + "_recovery_value_hidden]").val(old_recovery_value);
                             }
                         }
                     }
diff --git a/pandora_console/include/lib/Dashboard/Widget.php b/pandora_console/include/lib/Dashboard/Widget.php
index 14712eee27..4242f6ca57 100644
--- a/pandora_console/include/lib/Dashboard/Widget.php
+++ b/pandora_console/include/lib/Dashboard/Widget.php
@@ -429,6 +429,7 @@ class Widget
                 case 'AvgSumMaxMinModule':
                 case 'BasicChart':
                 case 'AgentHive':
+                case 'ITSMIncidences':
                     $className .= '\\'.$name;
                 break;
 
diff --git a/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php b/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php
new file mode 100644
index 0000000000..b7fa112af8
--- /dev/null
+++ b/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php
@@ -0,0 +1,418 @@
+<?php
+/**
+ * Widget Simple graph Pandora FMS Console
+ *
+ * @category   Console Class
+ * @package    Pandora FMS
+ * @subpackage Widget
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+namespace PandoraFMS\Dashboard;
+
+use PandoraFMS\Enterprise\Metaconsole\Node;
+
+global $config;
+
+/**
+ * URL Widgets
+ */
+class ITSMIncidences extends Widget
+{
+
+    /**
+     * Name widget.
+     *
+     * @var string
+     */
+    protected $name;
+
+    /**
+     * Title widget.
+     *
+     * @var string
+     */
+    protected $title;
+
+    /**
+     * Page widget;
+     *
+     * @var string
+     */
+    protected $page;
+
+    /**
+     * Class name widget.
+     *
+     * @var [type]
+     */
+    protected $className;
+
+    /**
+     * Values options for each widget.
+     *
+     * @var [type]
+     */
+    protected $values;
+
+    /**
+     * Configuration required.
+     *
+     * @var boolean
+     */
+    protected $configurationRequired;
+
+    /**
+     * Error load widget.
+     *
+     * @var boolean
+     */
+    protected $loadError;
+
+    /**
+     * Width.
+     *
+     * @var integer
+     */
+    protected $width;
+
+    /**
+     * Heigth.
+     *
+     * @var integer
+     */
+    protected $height;
+
+    /**
+     * Grid Width.
+     *
+     * @var integer
+     */
+    protected $gridWidth;
+
+    /**
+     * Cell ID.
+     *
+     * @var integer
+     */
+    protected $cellId;
+
+
+    /**
+     * Construct.
+     *
+     * @param integer      $cellId      Cell ID.
+     * @param integer      $dashboardId Dashboard ID.
+     * @param integer      $widgetId    Widget ID.
+     * @param integer|null $width       New width.
+     * @param integer|null $height      New height.
+     * @param integer|null $gridWidth   Grid width.
+     */
+    public function __construct(
+        int $cellId,
+        int $dashboardId=0,
+        int $widgetId=0,
+        ?int $width=0,
+        ?int $height=0,
+        ?int $gridWidth=0
+    ) {
+        global $config;
+
+        // WARNING: Do not edit. This chunk must be in the constructor.
+        parent::__construct(
+            $cellId,
+            $dashboardId,
+            $widgetId
+        );
+
+        // Width.
+        $this->width = $width;
+
+        // Height.
+        $this->height = $height;
+
+        // Grid Width.
+        $this->gridWidth = $gridWidth;
+
+        // Cell Id.
+        $this->cellId = $cellId;
+
+        // Options.
+        $this->values = $this->decoders($this->getOptionsWidget());
+
+        // Positions.
+        $this->position = $this->getPositionWidget();
+
+        // Page.
+        $this->page = basename(__FILE__);
+
+        // ClassName.
+        $class = new \ReflectionClass($this);
+        $this->className = $class->getShortName();
+
+        // Title.
+        $this->title = __('Pandora ITSM tickets');
+
+        // Name.
+        if (empty($this->name) === true) {
+            $this->name = 'ITSMIncidences';
+        }
+
+        // This forces at least a first configuration.
+        $this->configurationRequired = false;
+        if (empty($this->values['fields']) === true) {
+            $this->configurationRequired = true;
+        }
+
+        $this->overflow_scrollbars = false;
+    }
+
+
+    /**
+     * Decoders hack for retrocompability.
+     *
+     * @param array $decoder Values.
+     *
+     * @return array Returns the values ​​with the correct key.
+     */
+    public function decoders(array $decoder): array
+    {
+        $values = [];
+        // Retrieve global - common inputs.
+        $values = parent::decoders($decoder);
+
+        if (isset($decoder['show_full_legend']) === true) {
+            $values['showLegend'] = $decoder['show_full_legend'];
+        }
+
+        if (isset($decoder['fields']) === true) {
+            if (is_array($decoder['fields']) === true) {
+                $decoder['fields'] = implode(',', $decoder['fields']);
+            }
+
+            $values['fields'] = $decoder['fields'];
+        }
+
+        if (isset($decoder['limit']) === true) {
+            $values['limit'] = $decoder['limit'];
+        }
+
+        return $values;
+    }
+
+
+    /**
+     * Generates inputs for form (specific).
+     *
+     * @return array Of inputs.
+     *
+     * @throws Exception On error.
+     */
+    public function getFormInputs(): array
+    {
+        global $config;
+        $values = $this->values;
+
+        // Retrieve global - common inputs.
+        $inputs = parent::getFormInputs();
+
+        // Default values.
+        if (isset($values['fields']) === false) {
+            $values['fields'] = implode(
+                ',',
+                [
+                    'idIncidence',
+                    'title',
+                    'priority',
+                    'idCreator',
+                ]
+            );
+        }
+
+        if (isset($values['limit']) === false) {
+            $values['limit'] = $config['block_size'];
+        }
+
+        $inputs[] = [
+            'label'     => __('Limit'),
+            'arguments' => [
+                'type'   => 'number',
+                'name'   => 'limit',
+                'value'  => $values['limit'],
+                'return' => true,
+                'max'    => 100,
+                'min'    => 0,
+            ],
+        ];
+
+        $fields = [
+            'idIncidence'      => __('ID'),
+            'title'            => __('Title'),
+            'groupCompany'     => __('Group').'/'.__('Company'),
+            'statusResolution' => __('Status').'/'.__('Resolution'),
+            'priority'         => __('Priority'),
+            'updateDate'       => __('Updated'),
+            'startDate'        => __('Started'),
+            'idCreator'        => __('Creator'),
+            'owner'            => __('Owner'),
+        ];
+
+        $inputs[] = [
+            'label'     => __('Fields to show'),
+            'arguments' => [
+                'type'     => 'select',
+                'fields'   => $fields,
+                'name'     => 'fields[]',
+                'selected' => explode(',', $values['fields']),
+                'return'   => true,
+                'multiple' => true,
+                'sort'     => false,
+            ],
+        ];
+
+        return $inputs;
+    }
+
+
+    /**
+     * Get Post for widget.
+     *
+     * @return array
+     */
+    public function getPost():array
+    {
+        // Retrieve global - common inputs.
+        $values = parent::getPost();
+
+        $values['fields'] = \get_parameter('fields', []);
+        $values['limit'] = \get_parameter('limit', 20);
+
+        return $values;
+    }
+
+
+    /**
+     * Draw widget.
+     *
+     * @return string;
+     */
+    public function load()
+    {
+        global $config;
+        \ui_require_css_file('pandoraitsm', 'include/styles/', true);
+
+        $fields = [
+            'idIncidence'      => __('ID'),
+            'title'            => __('Title'),
+            'groupCompany'     => __('Group').'/'.__('Company'),
+            'statusResolution' => __('Status').'/'.__('Resolution'),
+            'priority'         => __('Priority'),
+            'updateDate'       => __('Updated'),
+            'startDate'        => __('Started'),
+            'idCreator'        => __('Creator'),
+            'owner'            => __('Owner'),
+        ];
+
+        $fields_selected = explode(',', $this->values['fields']);
+        if (is_array($fields_selected) === false && empty($fields_selected) === true) {
+            $output = '';
+            $output .= '<div class="container-center">';
+            $output .= \ui_print_info_message(
+                __('Not found fields selected'),
+                '',
+                true
+            );
+            $output .= '</div>';
+
+            return $output;
+        }
+
+        $columns = $fields_selected;
+        $column_names = [];
+        foreach ($fields_selected as $field) {
+            $column_names[] = $fields[$field];
+        }
+
+        $tableId = 'ITSMIncidence_'.$this->dashboardId.'_'.$this->cellId;
+        try {
+            ui_print_datatable(
+                [
+                    'id'                 => $tableId,
+                    'class'              => 'info_table',
+                    'style'              => 'width: 99%',
+                    'columns'            => $columns,
+                    'column_names'       => $column_names,
+                    'ajax_url'           => 'operation/ITSM/itsm',
+                    'ajax_data'          => ['method' => 'getListTickets'],
+                    'order'              => [
+                        'field'     => 'updateDate',
+                        'direction' => 'desc',
+                    ],
+                    'csv'                => 0,
+                    'dom_elements'       => 'frtip',
+                    'default_pagination' => $this->values['limit'],
+                ]
+            );
+        } catch (\Exception $e) {
+            echo $e->getMessage();
+        }
+    }
+
+
+    /**
+     * Get description.
+     *
+     * @return string.
+     */
+    public static function getDescription()
+    {
+        return __('Pandora ITSM tickets');
+    }
+
+
+    /**
+     * Get Name.
+     *
+     * @return string.
+     */
+    public static function getName()
+    {
+        return 'ITSMIncidences';
+    }
+
+
+    /**
+     * Get size Modal Configuration.
+     *
+     * @return array
+     */
+    public function getSizeModalConfiguration(): array
+    {
+        $size = [
+            'width'  => 450,
+            'height' => 430,
+        ];
+
+        return $size;
+    }
+
+
+}
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 69c2b5b51b..49eb73e601 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -1095,6 +1095,11 @@ class Manager
         $order = get_datatable_order(true);
         $filters = get_parameter('filter', []);
 
+        $externalIdLike = get_parameter('externalIdLike', '');
+        if (empty($externalIdLike) === false) {
+            $filters['externalIdLike'] = $externalIdLike;
+        }
+
         if (isset($filters['status']) === true && empty($filters['status']) === true) {
             unset($filters['status']);
         }
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 9543750842..3aa75eef89 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -1882,14 +1882,14 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		
 		# Field 3 (Ticket priority);
 		my $ticket_priority = $field3;
-		if ($ticket_priority eq '0') {
-			$ticket_priority = 1;
+		if ($ticket_priority eq '') {
+			$ticket_priority = 'MEDIUM';
 		}
 
 		# Field 4 (Ticket owner)
 		my $ticket_owner = $field4;
 		if ($ticket_owner eq '') {
-			$ticket_owner = 'admin';
+			$ticket_owner = undef;
 		}
 		
 		# Field 5 (Ticket type)
@@ -1901,7 +1901,7 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		# Field 6 (Ticket status)
 		my $ticket_status = $field6;
 		if ($ticket_status eq '') {
-			$ticket_status = 'new';
+			$ticket_status = 'NEW';
 		}
 
 		# Field 7 (Ticket description);
@@ -1974,7 +1974,7 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		my $id_inventory = 0;
 		my $inventory_data = p_decode_json($pa_config, $existInventory);
 		my %data_inventory = (
-			"name" => $agent->{'alias'},
+			"name" => safe_output($agent->{'alias'}),
 			"isPublic" => \0,
 			"idObjectType" => 2,
 			"isShowInList" => \0,
@@ -1983,7 +1983,7 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 			"typeFieldData" => [
 				{
 					"idInventoryField" => 12,
-					"data" => $agent->{'id_os'}
+					"data" => safe_output(get_db_value($dbh, 'select name from tconfig_os where id_os = ?', $agent->{'id_os'})) . ' (' . $agent->{'id_os'} . ')'
 				},
 				{
 					"idInventoryField" => 13,
@@ -1995,7 +1995,7 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 				},
 				{
 					"idInventoryField" => 46,
-					"data" => $agent->{'id_grupo'}
+					"data" => safe_output(get_db_value($dbh, 'select nombre from tgrupo where id_grupo = ?', $agent->{'id_grupo'}) . ' (' . $agent->{'id_grupo'} . ')')
 				},
 			]
 		);

From dba0bbebeb2a86ae0bdc3c5cd957359b6320fcc2 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Fri, 18 Aug 2023 13:46:27 +0200
Subject: [PATCH 019/116] ITSM pandora_enterprise#11471

---
 .../include/lib/Dashboard/Widget.php          |  7 +++
 .../lib/Dashboard/Widgets/ITSMIncidences.php  | 39 +++++++++++++-
 pandora_console/include/lib/ITSM/ITSM.php     | 54 +++++++++++++++++++
 pandora_console/include/lib/ITSM/Manager.php  | 19 ++++++-
 pandora_server/lib/PandoraFMS/Tools.pm        |  9 +---
 5 files changed, 117 insertions(+), 11 deletions(-)

diff --git a/pandora_console/include/lib/Dashboard/Widget.php b/pandora_console/include/lib/Dashboard/Widget.php
index 4242f6ca57..0231c76400 100644
--- a/pandora_console/include/lib/Dashboard/Widget.php
+++ b/pandora_console/include/lib/Dashboard/Widget.php
@@ -429,7 +429,14 @@ class Widget
                 case 'AvgSumMaxMinModule':
                 case 'BasicChart':
                 case 'AgentHive':
+                    $className .= '\\'.$name;
+                break;
+
                 case 'ITSMIncidences':
+                    if (isset($config['ITSM_enabled']) === false || (bool) $config['ITSM_enabled'] === false) {
+                        $not_installed = true;
+                    }
+
                     $className .= '\\'.$name;
                 break;
 
diff --git a/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php b/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php
index b7fa112af8..722389ffa3 100644
--- a/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php
+++ b/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php
@@ -29,6 +29,7 @@
 namespace PandoraFMS\Dashboard;
 
 use PandoraFMS\Enterprise\Metaconsole\Node;
+use PandoraFMS\ITSM\ITSM;
 
 global $config;
 
@@ -178,8 +179,12 @@ class ITSMIncidences extends Widget
 
         // This forces at least a first configuration.
         $this->configurationRequired = false;
-        if (empty($this->values['fields']) === true) {
+        if (isset($config['ITSM_enabled']) === false || (bool) $config['ITSM_enabled'] === false) {
             $this->configurationRequired = true;
+        } else {
+            if (empty($this->values['customSearch']) === true || empty($this->values['fields']) === true) {
+                $this->configurationRequired = true;
+            }
         }
 
         $this->overflow_scrollbars = false;
@@ -215,6 +220,10 @@ class ITSMIncidences extends Widget
             $values['limit'] = $decoder['limit'];
         }
 
+        if (isset($decoder['customSearch']) === true) {
+            $values['customSearch'] = $decoder['customSearch'];
+        }
+
         return $values;
     }
 
@@ -263,6 +272,28 @@ class ITSMIncidences extends Widget
             ],
         ];
 
+        $customSearches = [];
+        if (isset($config['ITSM_enabled']) === true && (bool) $config['ITSM_enabled'] === true) {
+            try {
+                $ITSM = new ITSM();
+                $customSearches = $ITSM->listCustomSearch();
+            } catch (\Throwable $th) {
+                $error = $th->getMessage();
+            }
+        }
+
+        $inputs[] = [
+            'label'     => __('Custom search'),
+            'arguments' => [
+                'type'     => 'select',
+                'fields'   => $customSearches,
+                'name'     => 'customSearch',
+                'selected' => $values['customSearch'],
+                'return'   => true,
+                'sort'     => false,
+            ],
+        ];
+
         $fields = [
             'idIncidence'      => __('ID'),
             'title'            => __('Title'),
@@ -304,6 +335,7 @@ class ITSMIncidences extends Widget
 
         $values['fields'] = \get_parameter('fields', []);
         $values['limit'] = \get_parameter('limit', 20);
+        $values['customSearch'] = \get_parameter('customSearch', 20);
 
         return $values;
     }
@@ -361,7 +393,10 @@ class ITSMIncidences extends Widget
                     'columns'            => $columns,
                     'column_names'       => $column_names,
                     'ajax_url'           => 'operation/ITSM/itsm',
-                    'ajax_data'          => ['method' => 'getListTickets'],
+                    'ajax_data'          => [
+                        'method'       => 'getListTickets',
+                        'customSearch' => $this->values['customSearch'],
+                    ],
                     'order'              => [
                         'field'     => 'updateDate',
                         'direction' => 'desc',
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index 82e011d020..52fee63dc4 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -249,6 +249,14 @@ class ITSM
                 $path = '/incidence/statistic/groupedByOwners';
             break;
 
+            case 'listCustomSearch':
+                $path = '/customSearch/list';
+            break;
+
+            case 'customSearch':
+                $path = '/customSearch/'.$id;
+            break;
+
             default:
                 // Not posible.
             break;
@@ -382,4 +390,50 @@ class ITSM
     }
 
 
+    /**
+     * List custom search.
+     *
+     * @return array Result.
+     */
+    public function listCustomSearch(): array
+    {
+        $listCustomSearch = $this->callApi(
+            'listCustomSearch',
+            [
+                'page'     => 0,
+                'sizePage' => 0,
+            ],
+            ['section' => 'incidences']
+        );
+
+        $result = [];
+        foreach ($listCustomSearch['data'] as $customSearch) {
+            $result[$customSearch['idCustomSearch']] = $customSearch['name'];
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Get Custom search.
+     *
+     * @param integer $idCustomSearch Custom search ID.
+     *
+     * @return array Data custom search.
+     */
+    public function getCustomSearch(int $idCustomSearch): array
+    {
+        $result = $this->callApi(
+            'customSearch',
+            [],
+            [],
+            $idCustomSearch,
+            'GET'
+        );
+
+        return $result;
+    }
+
+
 }
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 49eb73e601..97730665b5 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -1095,6 +1095,19 @@ class Manager
         $order = get_datatable_order(true);
         $filters = get_parameter('filter', []);
 
+        $customSearch = (int) get_parameter('customSearch', 0);
+        if (empty($customSearch) === false) {
+            try {
+                $ITSM = new ITSM();
+                $customSearchData = ($ITSM->getCustomSearch($customSearch)['formValues'] ?? []);
+            } catch (\Throwable $th) {
+                $error = $th->getMessage();
+                $customSearchData = [];
+            }
+
+            $filters = $customSearchData;
+        }
+
         $externalIdLike = get_parameter('externalIdLike', '');
         if (empty($externalIdLike) === false) {
             $filters['externalIdLike'] = $externalIdLike;
@@ -1104,7 +1117,11 @@ class Manager
             unset($filters['status']);
         }
 
-        if (isset($filters['idGroup']) === true && empty($filters['idGroup']) === true) {
+        if (isset($filters['priority']) === true && empty($filters['priority']) === true) {
+            unset($filters['priority']);
+        }
+
+        if (isset($filters['idGroup']) === true && (empty($filters['idGroup']) === true || $filters['idGroup'] < 0)) {
             unset($filters['idGroup']);
         }
 
diff --git a/pandora_server/lib/PandoraFMS/Tools.pm b/pandora_server/lib/PandoraFMS/Tools.pm
index b712fabe59..010733aaeb 100755
--- a/pandora_server/lib/PandoraFMS/Tools.pm
+++ b/pandora_server/lib/PandoraFMS/Tools.pm
@@ -2356,16 +2356,9 @@ sub api_call {
 		return $response->decoded_content;
 	}
 
-  # TODO: change to logger.
-	use Data::Dumper;
-	$Data::Dumper::SortKeys = 1;
-	#print Dumper($response);
-	print Dumper($response->{'_rc'});
-	print Dumper($response->{'_content'});
-	print Dumper($response->{'_request'});
-
 	logger($pa_config, 'Api response failure: ' . $response->{'_rc'} . '. Description error: ' . $response->{'_content'}, 3);
 	logger($pa_config, $response->{'_request'}, 3);
+
 	return undef;
 }
 

From 8aed6c6177b7fe59ba807ef500e9a11926ebb6da Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Mon, 21 Aug 2023 14:50:37 +0200
Subject: [PATCH 020/116] ITSM pandora_enterprise#11471

---
 pandora_server/lib/PandoraFMS/Core.pm | 47 ++++++++++++++++++++++-----
 1 file changed, 38 insertions(+), 9 deletions(-)

diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 91ef9cca80..427a5e09af 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -566,6 +566,10 @@ sub pandora_evaluate_alert ($$$$$$$;$$$$) {
 	my $schedule;
 	if (defined($alert->{'schedule'}) && $alert->{'schedule'} ne '') {
 		$schedule = PandoraFMS::Tools::p_decode_json($pa_config, $alert->{'schedule'});
+		if (!defined($special_day)) {
+			$special_day = 0;
+		}
+
 		if ($special_day != 0) {
 			return $status if (!defined($schedule->{$weeks[$special_day]}));
 		}
@@ -582,6 +586,10 @@ sub pandora_evaluate_alert ($$$$$$$;$$$$) {
 		my $time = sprintf ("%.2d:%.2d:%.2d", $hour, $min, $sec);
 
 		my $schedule_day;
+		if (!defined($special_day)) {
+			$special_day = 0;
+		}
+
 		if ($special_day != 0 && defined($schedule->{$weeks[$special_day]})) {
 			$schedule_day = $weeks[$special_day];
 		} else {
@@ -1314,6 +1322,27 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		$field20 = defined($action->{'field20_recovery'}) && $action->{'field20_recovery'} ne "" ? $action->{'field20_recovery'} : $field20;
 	}
 
+	if ($clean_name eq "Pandora ITSM Ticket") {
+		# if action not defined, get values for config setup pandora ITSM.
+		if ($alert_mode == RECOVERED_ALERT) {
+			$field1  = defined($action->{'field1_recovery'})  && $action->{'field1_recovery'}  ne ""  ? $action->{'field1_recovery'}  : pandora_get_tconfig_token($dbh, 'incident_title', '');
+			$field2  = defined($action->{'field2_recovery'})  && $action->{'field2_recovery'}  ne ""  ? $action->{'field2_recovery'}  : pandora_get_tconfig_token($dbh, 'default_group', '2');
+			$field3  = defined($action->{'field3_recovery'})  && $action->{'field3_recovery'}  ne ""  ? $action->{'field3_recovery'}  : pandora_get_tconfig_token($dbh, 'default_criticity', 'MEDIUM');
+			$field4  = defined($action->{'field4_recovery'})  && $action->{'field4_recovery'}  ne ""  ? $action->{'field4_recovery'}  : pandora_get_tconfig_token($dbh, 'default_owner', undef);
+			$field5  = defined($action->{'field5_recovery'})  && $action->{'field5_recovery'}  ne ""  ? $action->{'field5_recovery'}  : pandora_get_tconfig_token($dbh, 'incident_type', undef);
+			$field6  = defined($action->{'field6_recovery'})  && $action->{'field6_recovery'}  ne ""  ? $action->{'field6_recovery'}  : pandora_get_tconfig_token($dbh, 'incident_status', 'CLOSED');
+			$field7  = defined($action->{'field7_recovery'})  && $action->{'field7_recovery'}  ne ""  ? $action->{'field7_recovery'}  : pandora_get_tconfig_token($dbh, 'incident_content', '');
+		} else {
+			$field1  = defined($action->{'field1'})  && $action->{'field1'}  ne ""  ? $action->{'field1'}  : pandora_get_tconfig_token($dbh, 'incident_title', '');
+			$field2  = defined($action->{'field2'})  && $action->{'field2'}  ne ""  ? $action->{'field2'}  : pandora_get_tconfig_token($dbh, 'default_group', '2');
+			$field3  = defined($action->{'field3'})  && $action->{'field3'}  ne ""  ? $action->{'field3'}  : pandora_get_tconfig_token($dbh, 'default_criticity', 'MEDIUM');
+			$field4  = defined($action->{'field4'})  && $action->{'field4'}  ne ""  ? $action->{'field4'}  : pandora_get_tconfig_token($dbh, 'default_owner', undef);
+			$field5  = defined($action->{'field5'})  && $action->{'field5'}  ne ""  ? $action->{'field5'}  : pandora_get_tconfig_token($dbh, 'incident_type', undef);
+			$field6  = defined($action->{'field6'})  && $action->{'field6'}  ne ""  ? $action->{'field6'}  : pandora_get_tconfig_token($dbh, 'incident_status', 'NEW');
+			$field7  = defined($action->{'field7'})  && $action->{'field7'}  ne ""  ? $action->{'field7'}  : pandora_get_tconfig_token($dbh, 'incident_content', '');
+		}
+	}
+
 	$field1  = defined($field1)  && $field1  ne "" ? decode_entities($field1)  : "";
 	$field2  = defined($field2)  && $field2  ne "" ? decode_entities($field2)  : "";
 	$field3  = defined($field3)  && $field3  ne "" ? decode_entities($field3)  : "";
@@ -1877,13 +1906,13 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		
 		# Field 2 (Ticket group ID)
 		my $ticket_group_id = $field2;
-		if ($ticket_group_id eq '') {
-			$ticket_group_id = 1;
+		if ($ticket_group_id eq '0') {
+			$ticket_group_id = 2;
 		}
 		
 		# Field 3 (Ticket priority);
 		my $ticket_priority = $field3;
-		if ($ticket_priority eq '') {
+		if ($ticket_priority eq '0') {
 			$ticket_priority = 'MEDIUM';
 		}
 
@@ -1895,13 +1924,13 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		
 		# Field 5 (Ticket type)
 		my $ticket_type = $field5;
-		if ($ticket_type eq '') {
+		if ($ticket_type eq '0') {
 			$ticket_type = 0;
 		}
 
 		# Field 6 (Ticket status)
 		my $ticket_status = $field6;
-		if ($ticket_status eq '') {
+		if ($ticket_status eq '0') {
 			$ticket_status = 'NEW';
 		}
 
@@ -1966,7 +1995,7 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		);
 
 		# Check exit inventory object.
-		my %filter_inventory = ('idPandora' => $agent->{'nombre'});
+		my %filter_inventory = ('idPandora' => $agent->{'id_agente'});
 		my $existInventory = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/inventory/list', $ITSM_token, \%filter_inventory);
 		if (!defined($existInventory)){
 			return;
@@ -1980,11 +2009,11 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 			"idObjectType" => 2,
 			"isShowInList" => \0,
 			"status" => "new",
-			"idPandora" => $agent->{'nombre'},
+			"idPandora" => $agent->{'id_agente'},
 			"typeFieldData" => [
 				{
 					"idInventoryField" => 12,
-					"data" => safe_output(get_db_value($dbh, 'select name from tconfig_os where id_os = ?', $agent->{'id_os'})) . ' (' . $agent->{'id_os'} . ')'
+					"data" => safe_output(get_db_value($dbh, 'select name from tconfig_os where id_os = ?', $agent->{'id_os'}))
 				},
 				{
 					"idInventoryField" => 13,
@@ -1996,7 +2025,7 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 				},
 				{
 					"idInventoryField" => 46,
-					"data" => safe_output(get_db_value($dbh, 'select nombre from tgrupo where id_grupo = ?', $agent->{'id_grupo'}) . ' (' . $agent->{'id_grupo'} . ')')
+					"data" => safe_output(get_db_value($dbh, 'select nombre from tgrupo where id_grupo = ?', $agent->{'id_grupo'}))
 				},
 			]
 		);

From 512d5331d3b2c2889d7eed0cdf77e08c0c90f88e Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Wed, 23 Aug 2023 18:52:06 +0200
Subject: [PATCH 021/116] ITSM pandora_enterprise#11471

---
 .../godmode/agentes/agent_incidents.php       |   2 +-
 pandora_console/godmode/setup/setup_ITSM.php  | 189 ++++++-----
 pandora_console/include/functions_config.php  |  43 ++-
 pandora_server/lib/PandoraFMS/Core.pm         | 296 +++++-------------
 4 files changed, 215 insertions(+), 315 deletions(-)

diff --git a/pandora_console/godmode/agentes/agent_incidents.php b/pandora_console/godmode/agentes/agent_incidents.php
index 5722b6c9bf..29442bf227 100644
--- a/pandora_console/godmode/agentes/agent_incidents.php
+++ b/pandora_console/godmode/agentes/agent_incidents.php
@@ -84,7 +84,7 @@ try {
             'ajax_url'            => 'operation/ITSM/itsm',
             'ajax_data'           => [
                 'method'         => 'getListTickets',
-                'externalIdLike' => $agent['nombre'],
+                'externalIdLike' => $config['metaconsole_node_id'].'-'.$agent['id_agente'],
             ],
             'no_sortable_columns' => [
                 2,
diff --git a/pandora_console/godmode/setup/setup_ITSM.php b/pandora_console/godmode/setup/setup_ITSM.php
index b65736e61a..cbdb34b572 100644
--- a/pandora_console/godmode/setup/setup_ITSM.php
+++ b/pandora_console/godmode/setup/setup_ITSM.php
@@ -151,6 +151,7 @@ $table_remote->data['ITSM_sync_inventory'] = $row;
 // Alert settings.
 $table_alert_settings = new StdClass();
 $table_alert_settings->data = [];
+$table_alert_settings->rowspan = [];
 $table_alert_settings->width = '100%';
 $table_alert_settings->styleTable = 'margin-bottom: 10px;';
 $table_alert_settings->id = 'ITSM-settings-setup';
@@ -159,8 +160,7 @@ $table_alert_settings->size[0] = '50%';
 $table_alert_settings->size[1] = '50%';
 
 // Alert incident title.
-$row = [];
-$row[0] = html_print_label_input_block(
+$table_alert_settings->data[0][0] = html_print_label_input_block(
     __('Title'),
     html_print_input_text(
         'incident_title',
@@ -175,29 +175,28 @@ $row[0] = html_print_label_input_block(
 );
 
 // Alert incident description.
-$row[1] = html_print_label_input_block(
+$table_alert_settings->rowspan[0][1] = 3;
+$table_alert_settings->data[0][1] = html_print_label_input_block(
     __('Ticket body'),
     html_print_textarea(
         'incident_content',
-        3,
+        9,
         25,
         $config['incident_content'],
         '',
         true
     )
 );
-$table_alert_settings->data[0] = $row;
 
 // Alert default group.
-$row = [];
-$row[0] = html_print_label_input_block(
+$table_alert_settings->data[1][0] = html_print_label_input_block(
     __('Group'),
     html_print_select(
         $group_values,
         'default_group',
         $config['default_group'],
         '',
-        __('Select'),
+        '',
         0,
         true,
         false,
@@ -207,28 +206,8 @@ $row[0] = html_print_label_input_block(
     )
 );
 
-// Alert default criticity.
-$row[1] = html_print_label_input_block(
-    __('Priority'),
-    html_print_select(
-        $priority_values,
-        'default_criticity',
-        $config['default_criticity'],
-        '',
-        __('Select'),
-        0,
-        true,
-        false,
-        true,
-        '',
-        false
-    )
-);
-$table_alert_settings->data[1] = $row;
-
 // Alert default owner.
-$row = [];
-$row[0] = html_print_label_input_block(
+$table_alert_settings->data[2][0] = html_print_label_input_block(
     __('Owner'),
     html_print_autocomplete_users_from_pandora_itsm(
         'default_owner',
@@ -242,28 +221,8 @@ $row[0] = html_print_label_input_block(
     ['div_class' => 'inline']
 );
 
-// Alert default incident type.
-$row[1] = html_print_label_input_block(
-    __('Type'),
-    html_print_select(
-        $object_types_values,
-        'incident_type',
-        $config['incident_type'],
-        '',
-        __('Select'),
-        0,
-        true,
-        false,
-        true,
-        '',
-        false
-    )
-);
-$table_alert_settings->data[2] = $row;
-
 // Alert default incident status.
-$row = [];
-$row[0] = html_print_label_input_block(
+$table_alert_settings->data[3][0] = html_print_label_input_block(
     __('Status'),
     html_print_select(
         $status_values,
@@ -279,7 +238,42 @@ $row[0] = html_print_label_input_block(
         false
     )
 );
-$table_alert_settings->data[3] = $row;
+
+// Alert default criticity.
+$table_alert_settings->data[3][1] = html_print_label_input_block(
+    __('Priority'),
+    html_print_select(
+        $priority_values,
+        'default_criticity',
+        $config['default_criticity'],
+        '',
+        __('Select'),
+        0,
+        true,
+        false,
+        true,
+        '',
+        false
+    )
+);
+
+// Alert default incident type.
+$table_alert_settings->data[4][0] = html_print_label_input_block(
+    __('Type'),
+    html_print_select(
+        $object_types_values,
+        'incident_type',
+        $config['incident_type'],
+        '',
+        __('Select'),
+        0,
+        true,
+        false,
+        true,
+        '',
+        false
+    )
+);
 
 // Custom response settings.
 $table_cr_settings = new StdClass();
@@ -292,8 +286,7 @@ $table_cr_settings->size[0] = '50%';
 $table_cr_settings->size[1] = '50%';
 
 // Custom response incident title.
-$row = [];
-$row[0] = html_print_label_input_block(
+$table_cr_settings->data[0][0] = html_print_label_input_block(
     __('Title'),
     html_print_input_text(
         'cr_incident_title',
@@ -308,11 +301,12 @@ $row[0] = html_print_label_input_block(
 );
 
 // Custom response incident description.
-$row[1] = html_print_label_input_block(
+$table_cr_settings->rowspan[0][1] = 3;
+$table_cr_settings->data[0][1] = html_print_label_input_block(
     __('Ticket body'),
     html_print_textarea(
         'cr_incident_content',
-        3,
+        9,
         25,
         $config['cr_incident_content'],
         '',
@@ -320,11 +314,8 @@ $row[1] = html_print_label_input_block(
     )
 );
 
-$table_cr_settings->data[0] = $row;
-
 // Custom response default group.
-$row = [];
-$row[0] = html_print_label_input_block(
+$table_cr_settings->data[1][0] = html_print_label_input_block(
     __('Group'),
     html_print_select(
         $group_values,
@@ -341,28 +332,8 @@ $row[0] = html_print_label_input_block(
     )
 );
 
-// Custom response default criticity.
-$row[1] = html_print_label_input_block(
-    __('Priority'),
-    html_print_select(
-        $priority_values,
-        'cr_default_criticity',
-        $config['cr_default_criticity'],
-        '',
-        __('Select'),
-        0,
-        true,
-        false,
-        true,
-        '',
-        false
-    )
-);
-$table_cr_settings->data[1] = $row;
-
 // Custom response default owner.
-$row = [];
-$row[0] = html_print_label_input_block(
+$table_cr_settings->data[2][0] = html_print_label_input_block(
     __('Owner'),
     html_print_autocomplete_users_from_pandora_itsm(
         'cr_default_owner',
@@ -376,28 +347,9 @@ $row[0] = html_print_label_input_block(
     ['div_class' => 'inline']
 );
 
-// Custom response default incident type.
-$row[1] = html_print_label_input_block(
-    __('Type'),
-    html_print_select(
-        $object_types_values,
-        'cr_incident_type',
-        $config['cr_incident_type'],
-        '',
-        __('Select'),
-        0,
-        true,
-        false,
-        true,
-        '',
-        false
-    )
-);
-$table_cr_settings->data[2] = $row;
-
 // Custom response default incident status.
 $row = [];
-$row[0] = html_print_label_input_block(
+$table_cr_settings->data[3][0] = html_print_label_input_block(
     __('Status'),
     html_print_select(
         $status_values,
@@ -413,7 +365,42 @@ $row[0] = html_print_label_input_block(
         false
     )
 );
-$table_cr_settings->data[3] = $row;
+
+// Custom response default criticity.
+$table_cr_settings->data[3][1] = html_print_label_input_block(
+    __('Priority'),
+    html_print_select(
+        $priority_values,
+        'cr_default_criticity',
+        $config['cr_default_criticity'],
+        '',
+        __('Select'),
+        0,
+        true,
+        false,
+        true,
+        '',
+        false
+    )
+);
+
+// Custom response default incident type.
+$table_cr_settings->data[4][0] = html_print_label_input_block(
+    __('Type'),
+    html_print_select(
+        $object_types_values,
+        'cr_incident_type',
+        $config['cr_incident_type'],
+        '',
+        __('Select'),
+        0,
+        true,
+        false,
+        true,
+        '',
+        false
+    )
+);
 
 // Test.
 $row = [];
diff --git a/pandora_console/include/functions_config.php b/pandora_console/include/functions_config.php
index 29e96c7da3..2aec7dd6bd 100644
--- a/pandora_console/include/functions_config.php
+++ b/pandora_console/include/functions_config.php
@@ -34,6 +34,7 @@ enterprise_include_once('include/functions_config.php');
 
 use PandoraFMS\Core\DBMaintainer;
 use PandoraFMS\Core\Config;
+use PandoraFMS\ITSM\ITSM;
 
 
 /**
@@ -1903,11 +1904,31 @@ function config_update_config()
                         $error_update[] = __('Pandora iTSM API hostname');
                     }
 
-                    if (config_update_value('default_group', (int) get_parameter('default_group', $config['default_group']), true) === false) {
+                    $incident_default_group = (int) get_parameter('default_group', $config['default_group']);
+                    if (empty($incident_default_group) === true) {
+                        try {
+                            $ITSM = new ITSM();
+                            $incident_default_group = array_keys($ITSM->getGroups())[0];
+                        } catch (\Throwable $th) {
+                            $error = $th->getMessage();
+                        }
+                    }
+
+                    if (config_update_value('default_group', $incident_default_group, true) === false) {
                         $error_update[] = __('Pandora ITSM default group');
                     }
 
-                    if (config_update_value('cr_default_group', (int) get_parameter('cr_default_group', $config['cr_default_group']), true) === false) {
+                    $incident_cr_default_group = (int) get_parameter('cr_default_group', $config['cr_default_group']);
+                    if (empty($incident_cr_default_group) === true) {
+                        try {
+                            $ITSM = new ITSM();
+                            $incident_cr_default_group = array_keys($ITSM->getGroups())[0];
+                        } catch (\Throwable $th) {
+                            $error = $th->getMessage();
+                        }
+                    }
+
+                    if (config_update_value('cr_default_group', $incident_cr_default_group, true) === false) {
                         $error_update[] = __('Pandora ITSM custom response default group');
                     }
 
@@ -1955,7 +1976,23 @@ function config_update_config()
                         $error_update[] = __('Pandora ITSM custom response default ticket title');
                     }
 
-                    if (config_update_value('incident_content', (string) get_parameter('incident_content', $config['incident_content']), true) === false) {
+                    $text_incident_content = (string) get_parameter('incident_content', $config['incident_content']);
+                    if (empty($text_incident_content) === true) {
+                        $text_incident_content = sprintf(
+                            'Hello,
+                        
+                            A new ticket has been created due a problem in monitoring.
+                        
+                            Agent : _agent_
+                            Module: _module_
+                        
+                            Regards, 
+                            Your %s server.',
+                            get_product_name()
+                        );
+                    }
+
+                    if (config_update_value('incident_content', $text_incident_content, true) === false) {
                         $error_update[] = __('Pandora ITSM default ticket content');
                     }
 
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 427a5e09af..54a13f02e1 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -247,6 +247,9 @@ our @EXPORT = qw(
 	pandora_update_agent_alert_count
 	pandora_update_agent_module_count
 	pandora_update_config_token
+	pandora_get_custom_fields
+	pandora_get_agent_custom_field_data
+	pandora_get_custom_field_for_itsm
 	pandora_update_agent_custom_field
 	pandora_select_id_custom_field
 	pandora_select_combo_custom_field
@@ -1890,95 +1893,19 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		my $ITSM_path = pandora_get_tconfig_token ($dbh, 'ITSM_hostname', '');
 		my $ITSM_token = pandora_get_tconfig_token ($dbh, 'ITSM_token', '');
 
-		$field1 = subst_alert_macros ($field1, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field2 = subst_alert_macros ($field2, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field3 = subst_alert_macros ($field3, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field4 = subst_alert_macros ($field4, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field5 = subst_alert_macros ($field5, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field6 = subst_alert_macros ($field6, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		$field7 = subst_alert_macros ($field7, \%macros, $pa_config, $dbh, $agent, $module, $alert);
-		
-		# Field 1 (Ticket name)
-		my $ticket_name = safe_output($field1);
-		if ($ticket_name eq "") {
-			$ticket_name = $pa_config->{'rb_product_name'} . " alert action created by API";
-		}
-		
-		# Field 2 (Ticket group ID)
-		my $ticket_group_id = $field2;
-		if ($ticket_group_id eq '0') {
-			$ticket_group_id = 2;
-		}
-		
-		# Field 3 (Ticket priority);
-		my $ticket_priority = $field3;
-		if ($ticket_priority eq '0') {
-			$ticket_priority = 'MEDIUM';
-		}
-
-		# Field 4 (Ticket owner)
-		my $ticket_owner = $field4;
-		if ($ticket_owner eq '') {
-			$ticket_owner = undef;
-		}
-		
-		# Field 5 (Ticket type)
-		my $ticket_type = $field5;
-		if ($ticket_type eq '0') {
-			$ticket_type = 0;
-		}
-
-		# Field 6 (Ticket status)
-		my $ticket_status = $field6;
-		if ($ticket_status eq '0') {
-			$ticket_status = 'NEW';
-		}
-
-		# Field 7 (Ticket description);
-		my $ticket_description = $field7;
-		if ($ticket_description eq '') {
-			$ticket_description = '';
-		}
-
-		my $external_id = $agent->{'nombre'} . '-' . $module->{'id_agente'} . '-' . $module->{'id_agente_modulo'};
-
-		# if recovered
-		if ($alert_mode == RECOVERED_ALERT) {
-			# Check exit incidence.
-			my %filter_incidence = ('externalId' => $external_id, 'blocked' => '0');
-			my $existIncidence = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/list', $ITSM_token, \%filter_incidence);
-			if (!defined($existIncidence)){
-				return;
-			}
-
-			my $id_incidence = 0;
-			my $incidence_data = p_decode_json($pa_config, $existIncidence);
-			# If exist update state and add new workunit if necessary.
-			if(!is_empty($incidence_data->{'data'})) {
-				my %data_incidence = (
-					'status' => $ticket_status
-				);
-
-				$id_incidence = $incidence_data->{'data'}[0]->{'idIncidence'};
-				my $updateIncidence = pandora_API_ITSM_call($pa_config, 'put', $ITSM_path . '/incidence/' . $id_incidence, $ITSM_token, \%data_incidence);
-				if (!defined($updateIncidence)){
-					return;
-				}
-				if ($action->{'create_wu_integria'} == '1') {
-					my %data_workunit = (
-						'description' => $ticket_description
-					);
-					my $createWorkunit = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/' . $id_incidence . '/workunit', $ITSM_token, \%data_workunit);
-					if (!defined($createWorkunit)){
-						return;
-					}
-				}
-			}
-			return;
-		}
+		# Ticket info.
+		my %incidence = (
+			'title' => subst_alert_macros ($field1, \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'idGroup' => subst_alert_macros ($field2, \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'priority' => subst_alert_macros ($field3, \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'owner' => subst_alert_macros ($field4, \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'idIncidenceType' => subst_alert_macros ($field5, \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'status' => subst_alert_macros ($field6, \%macros, $pa_config, $dbh, $agent, $module, $alert),
+			'description' => subst_alert_macros ($field7, \%macros, $pa_config, $dbh, $agent, $module, $alert)
+		);
 
 		# Ticket type custom fields
-		my %custom_fields = (
+		my %incidence_custom_fields = (
 			'field0' => $field8 ne "" ? subst_alert_macros(safe_output($field8), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
 			'field1' => $field9 ne "" ? subst_alert_macros(safe_output($field9), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
 			'field2' => $field10 ne "" ? subst_alert_macros(safe_output($field10), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef,
@@ -1994,136 +1921,42 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 			'field12' => $field20 ne "" ? subst_alert_macros(safe_output($field20), \%macros, $pa_config, $dbh, $agent, $module, $alert) : undef
 		);
 
-		# Check exit inventory object.
-		my %filter_inventory = ('idPandora' => $agent->{'id_agente'});
-		my $existInventory = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/inventory/list', $ITSM_token, \%filter_inventory);
-		if (!defined($existInventory)){
-			return;
-		}
+		my $id_node = pandora_get_tconfig_token($dbh, 'metaconsole_node_id', 0);
+		my $external_id = $id_node . '-' . $module->{'id_agente'} . '-' . $module->{'id_agente_modulo'};
 
-		my $id_inventory = 0;
-		my $inventory_data = p_decode_json($pa_config, $existInventory);
-		my %data_inventory = (
-			"name" => safe_output($agent->{'alias'}),
-			"isPublic" => \0,
-			"idObjectType" => 2,
-			"isShowInList" => \0,
-			"status" => "new",
-			"idPandora" => $agent->{'id_agente'},
-			"typeFieldData" => [
-				{
-					"idInventoryField" => 12,
-					"data" => safe_output(get_db_value($dbh, 'select name from tconfig_os where id_os = ?', $agent->{'id_os'}))
-				},
-				{
-					"idInventoryField" => 13,
-					"data" => $agent->{'direccion'}
-				},
-				{
-					"idInventoryField" => 15,
-					"data" => $agent->{'id_agente'}
-				},
-				{
-					"idInventoryField" => 46,
-					"data" => safe_output(get_db_value($dbh, 'select nombre from tgrupo where id_grupo = ?', $agent->{'id_grupo'}))
-				},
-			]
+		# Extract custom field valid with data.
+		my $custom_fields_data = pandora_get_custom_field_for_itsm($dbh, $agent->{'id_agente'});
+
+		my %inventory_custom_fields = (
+			'OS' => safe_output(get_db_value($dbh, 'select name from tconfig_os where id_os = ?', $agent->{'id_os'})),
+			'IP Address' => safe_output($agent->{'direccion'}),
+			'URL Address' => safe_output($agent->{'url_address'}),
+			'ID Agent' => $agent->{'id_agente'},
+			'Group' => safe_output(get_db_value($dbh, 'select nombre from tgrupo where id_grupo = ?', $agent->{'id_grupo'}))
 		);
 
-		# If not exit inventory object create, if exist update.
-		if(is_empty($inventory_data->{'data'})) {
-			my $insertInventory = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/inventory', $ITSM_token, \%data_inventory);
-			if (!defined($insertInventory)){
-				return;
-			}
-			my $inventory = p_decode_json($pa_config, $insertInventory);
-			$id_inventory = $inventory->{'idInventory'};
-		} else {
-			$id_inventory = $inventory_data->{'data'}[0]->{'idInventory'};
-			my $updateInventory = pandora_API_ITSM_call($pa_config, 'put', $ITSM_path . '/inventory/' . $id_inventory, $ITSM_token, \%data_inventory);
-			if (!defined($updateInventory)){
-				return;
-			}
-		}
-		
-		# List field incidence type.
-		my @fields = ();
-		if($ticket_type ne '' && $ticket_type ne '0') {
-			my %filter_incidence_type = ();
-			my $path_list_fields = $ITSM_path . '/incidencetype/' . $ticket_type . '/field/list?sortField=idIncidenceTypeField&sortDirection=ascending';
-			my $listFields = pandora_API_ITSM_call($pa_config, 'post', $path_list_fields, $ITSM_token, \%filter_incidence_type);
-			if (!defined($listFields)){
-				return;
-			}
+		my %dataSend = (
+			'incidence' => \%incidence,
+			'incidenceCustomFields' => \%incidence_custom_fields,
+			'inventoryCustomFields' => \%inventory_custom_fields,
+			'idAgent' => $agent->{'id_agente'},
+			'idModule' => $module->{'id_agente_modulo'},
+			'idNode' => $id_node,
+			'alertMode' => $alert_mode,
+			'customFieldsData' => $custom_fields_data,
+			'agentAlias' => safe_output($agent->{'alias'}),
+			'createWu' => $action->{'create_wu_integria'}
+		);
 
-			my $listFields_data = p_decode_json($pa_config, $listFields);
-			if(!is_empty($listFields_data->{'data'})) {
-				my $i = 0;
-				foreach my $field (@{$listFields_data->{'data'}}) {
-					$fields[$i] = {"idIncidenceTypeField" => $field->{'idIncidenceTypeField'}, "data" => $custom_fields{'field' . $i}};
-					$i++;
-				}
-			}
-		}
+		# TODO: change to logger.
+		use Data::Dumper;
+		$Data::Dumper::SortKeys = 1;
+		print Dumper(\%dataSend);
 
-		# Check exit incidence.
-		my %filter_incidence = ('externalId' => $external_id, 'blocked' => '0');
-		my $existIncidence = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/list', $ITSM_token, \%filter_incidence);
-		if (!defined($existIncidence)){
+		my $response = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/pandorafms/alert', $ITSM_token, \%dataSend);
+		if (!defined($response)){
 			return;
 		}
-
-		my $id_incidence = 0;
-		my $incidence_data = p_decode_json($pa_config, $existIncidence);
-		my %data_incidence = (
-    	'title' => $ticket_name,
-		  'idGroup' => $ticket_group_id,
-		  'priority' => $ticket_priority,
-		  'owner' => $ticket_owner,
-		  'idIncidenceType' => $ticket_type,
-		  'status' => $ticket_status,
-		  'description' => $ticket_description,
-			'externalId' => $external_id,
-			'typeFieldData' => \@fields
-    );
-
-		# If not exit incidence create, if exist update and add new workunit.
-		if(is_empty($incidence_data->{'data'})) {
-			my $insertIncidence = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence', $ITSM_token, \%data_incidence);
-			if (!defined($insertIncidence)){
-				return;
-			}
-			my $incidence = p_decode_json($pa_config, $insertIncidence);
-			$id_incidence = $incidence->{'idIncidence'};
-		} else {
-			$id_incidence = $incidence_data->{'data'}[0]->{'idIncidence'};
-			my $updateIncidence = pandora_API_ITSM_call($pa_config, 'put', $ITSM_path . '/incidence/' . $id_incidence, $ITSM_token, \%data_incidence);
-			if (!defined($updateIncidence)){
-				return;
-			}
-			my %data_workunit = (
-				'description' => 'Incidence updated by ' . $pa_config->{'rb_product_name'}
-			);
-			my $createWorkunit = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/' . $id_incidence . '/workunit', $ITSM_token, \%data_workunit);
-			if (!defined($createWorkunit)){
-				return;
-			}
-		}
-
-		# Check exit relation incidence whit inventory, if not exist create.
-		my %filter_incidence_inventory = ('idInventory' => $id_inventory);
-		my $existIncidenceInventory = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/' . $id_incidence . '/inventory/list', $ITSM_token, \%filter_incidence_inventory);
-		if (!defined($existIncidenceInventory)){
-			return;
-		}
-		my $incidence_inventory_data = p_decode_json($pa_config, $existIncidenceInventory);	
-		if(is_empty($incidence_inventory_data->{'data'})) {
-			my %data_incidence_inventory = ();
-			my $result_incidence_inventory = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/incidence/' . $id_incidence . '/inventory/' . $id_inventory, $ITSM_token, \%data_incidence_inventory);
-			if (!defined($result_incidence_inventory)){
-				return;
-			}
-		}
 	# Generate notification
 	} elsif ($clean_name eq "Generate Notification") {
 
@@ -4009,6 +3842,49 @@ sub pandora_select_combo_custom_field ($$) {
 	return $result->{'combo_values'};
 }
 
+##########################################################################
+## Select custom field id by name tagent_custom_field 
+##########################################################################
+sub pandora_get_custom_fields ($) {
+	my ($dbh) = @_;
+
+	my @result = get_db_rows($dbh, 'select tagent_custom_fields.* FROM tagent_custom_fields');
+
+	return \@result;
+}
+
+##########################################################################
+## Get custom field and data for agent.
+##########################################################################
+sub pandora_get_agent_custom_field_data ($$) {
+	my ($dbh, $id_agent) = @_;
+
+	my @result = get_db_rows($dbh, 'select tagent_custom_fields.id_field, tagent_custom_fields.name, tagent_custom_data.id_agent, tagent_custom_data.description from tagent_custom_fields INNER JOIN tagent_custom_data ON tagent_custom_data.id_field = tagent_custom_fields.id_field where tagent_custom_data.id_agent = ?', $id_agent);
+
+	return \@result;
+}
+
+##########################################################################
+## Get custom field and data for agent.
+##########################################################################
+sub pandora_get_custom_field_for_itsm ($$) {
+	my ($dbh, $id_agent) = @_;
+	my $custom_fields = pandora_get_custom_fields($dbh);
+
+	my $agent_custom_field_data = pandora_get_agent_custom_field_data($dbh,$id_agent);
+	my %agent_custom_field_data_reducer = ();
+	foreach my $data (@{$agent_custom_field_data}) {
+		$agent_custom_field_data_reducer{$data->{'name'}} = $data->{'description'};
+	}
+
+	my %result = ();
+	foreach my $custom_field (@{$custom_fields}) {
+		$result{safe_output($custom_field->{'name'})} = safe_output($agent_custom_field_data_reducer{$custom_field->{'name'}});
+	}
+
+	return \%result;
+}
+
 ##########################################################################
 ## Update a custom field from agent of tagent_custom_data 
 ##########################################################################

From ecfa71b43c1124933df1b265e34a4d7942a55521 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Fri, 25 Aug 2023 14:15:32 +0200
Subject: [PATCH 022/116] ITSM pandora_enterprise#11471

---
 .../godmode/agentes/agent_incidents.php       | 56 +----------
 .../godmode/agentes/configurar_agente.php     | 15 +--
 .../godmode/alerts/configure_alert_action.php |  5 +-
 pandora_console/include/functions_config.php  | 18 ++--
 pandora_console/include/lib/ITSM/ITSM.php     | 99 +++++++++++++++++++
 pandora_console/include/lib/ITSM/Manager.php  | 38 +++++++
 .../agentes/estado_generalagente.php          | 42 ++++++++
 .../operation/agentes/ver_agente.php          | 32 ++++--
 .../views/ITSM/ITSMTicketDetailView.php       |  4 +-
 pandora_server/lib/PandoraFMS/Core.pm         | 85 ++++++++--------
 pandora_server/util/pandora_db.pl             |  2 +-
 11 files changed, 266 insertions(+), 130 deletions(-)

diff --git a/pandora_console/godmode/agentes/agent_incidents.php b/pandora_console/godmode/agentes/agent_incidents.php
index 29442bf227..6b6efee2ae 100644
--- a/pandora_console/godmode/agentes/agent_incidents.php
+++ b/pandora_console/godmode/agentes/agent_incidents.php
@@ -26,6 +26,8 @@
  * ============================================================================
  */
 
+use PandoraFMS\ITSM\ITSM;
+
 global $config;
 
 check_login();
@@ -44,59 +46,9 @@ if (! check_acl($config['id_user'], $id_grupo, 'AW', $id_agente)) {
     return;
 }
 
-\ui_require_css_file('pandoraitsm');
-\ui_require_javascript_file('ITSM');
-
-$agent = db_get_row('tagente', 'id_agente', $id_agente, false, false);
-
 try {
-    $columns = [
-        'idIncidence',
-        'title',
-        'groupCompany',
-        'statusResolution',
-        'priority',
-        'updateDate',
-        'startDate',
-        'idCreator',
-        'owner',
-    ];
-
-    $column_names = [
-        __('ID'),
-        __('Title'),
-        __('Group').'/'.__('Company'),
-        __('Status').'/'.__('Resolution'),
-        __('Priority'),
-        __('Updated'),
-        __('Started'),
-        __('Creator'),
-        __('Owner'),
-    ];
-
-    ui_print_datatable(
-        [
-            'id'                  => 'itms_list_tickets',
-            'class'               => 'info_table',
-            'style'               => 'width: 99%',
-            'columns'             => $columns,
-            'column_names'        => $column_names,
-            'ajax_url'            => 'operation/ITSM/itsm',
-            'ajax_data'           => [
-                'method'         => 'getListTickets',
-                'externalIdLike' => $config['metaconsole_node_id'].'-'.$agent['id_agente'],
-            ],
-            'no_sortable_columns' => [
-                2,
-                3,
-                -1,
-            ],
-            'order'               => [
-                'field'     => 'updateDate',
-                'direction' => 'desc',
-            ],
-        ]
-    );
+    $ITSM = new ITSM();
+    echo $ITSM->getTableIncidencesForAgent($id_agente);
 } catch (Exception $e) {
     echo $e->getMessage();
 }
diff --git a/pandora_console/godmode/agentes/configurar_agente.php b/pandora_console/godmode/agentes/configurar_agente.php
index 6348dd07b0..826aca12f4 100644
--- a/pandora_console/godmode/agentes/configurar_agente.php
+++ b/pandora_console/godmode/agentes/configurar_agente.php
@@ -39,6 +39,7 @@ ui_require_javascript_file('encode_decode_base64');
 ui_require_css_file('agent_manager');
 
 use PandoraFMS\Event;
+use PandoraFMS\ITSM\ITSM;
 
 check_login();
 
@@ -605,20 +606,6 @@ if ($id_agente) {
         $agent_wizard['active'] = false;
     }
 
-    // Incident tab.
-    if ((bool) $config['ITSM_enabled'] === true) {
-        $incidenttab['text'] = html_print_menu_button(
-            [
-                'href'  => 'index.php?sec=gagente&amp;sec2=godmode/agentes/configurar_agente&amp;tab=incident&amp;id_agente='.$id_agente,
-                'image' => 'images/logs@svg.svg',
-                'title' => __('Incidents'),
-            ],
-            true
-        );
-
-        $incidenttab['active'] = ($tab === 'incident');
-    }
-
     if (check_acl_one_of_groups($config['id_user'], $all_groups, 'AW') === true) {
         if ($has_remote_conf !== false) {
             $agent_name = agents_get_name($id_agente);
diff --git a/pandora_console/godmode/alerts/configure_alert_action.php b/pandora_console/godmode/alerts/configure_alert_action.php
index 4f87289255..4883467c10 100644
--- a/pandora_console/godmode/alerts/configure_alert_action.php
+++ b/pandora_console/godmode/alerts/configure_alert_action.php
@@ -800,12 +800,13 @@ $(document).ready (function () {
                                 old_recovery_value = '<?php echo io_safe_output($config['incident_status']); ?>';
                             }
                         } else if (i === 7) {
+                            var text = '<?php echo $config['incident_content']; ?>';
                             if(!old_value) {
-                                old_value = '<?php echo io_safe_output($config['incident_content']); ?>';
+                                old_value = text;
                             }
 
                             if(!old_recovery_value) {
-                                old_recovery_value = '<?php echo io_safe_output($config['incident_content']); ?>';
+                                old_recovery_value = text;
                             }
                         }
                     }
diff --git a/pandora_console/include/functions_config.php b/pandora_console/include/functions_config.php
index 2aec7dd6bd..6f2aca4b9e 100644
--- a/pandora_console/include/functions_config.php
+++ b/pandora_console/include/functions_config.php
@@ -1979,15 +1979,15 @@ function config_update_config()
                     $text_incident_content = (string) get_parameter('incident_content', $config['incident_content']);
                     if (empty($text_incident_content) === true) {
                         $text_incident_content = sprintf(
-                            'Hello,
-                        
-                            A new ticket has been created due a problem in monitoring.
-                        
-                            Agent : _agent_
-                            Module: _module_
-                        
-                            Regards, 
-                            Your %s server.',
+                            'Hello, %s %s A new ticket has been created due a problem in monitoring. %s %s Agent : _agent_ %s Module: _module_ %s %s Regards, %s Your %s server.',
+                            PHP_EOL,
+                            PHP_EOL,
+                            PHP_EOL,
+                            PHP_EOL,
+                            PHP_EOL,
+                            PHP_EOL,
+                            PHP_EOL,
+                            PHP_EOL,
                             get_product_name()
                         );
                     }
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index 52fee63dc4..c718a93268 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -257,6 +257,10 @@ class ITSM
                 $path = '/customSearch/'.$id;
             break;
 
+            case 'inventory':
+                $path = '/inventory/'.$id;
+            break;
+
             default:
                 // Not posible.
             break;
@@ -436,4 +440,99 @@ class ITSM
     }
 
 
+    /**
+     * List incidences.
+     *
+     * @param integer $idAgent Agent id.
+     *
+     * @return array list Incidences.
+     */
+    public function listIncidenceAgents(int $idAgent): array
+    {
+        global $config;
+        $listIncidences = $this->callApi(
+            'listTickets',
+            [
+                'page'     => 0,
+                'sizePage' => 0,
+            ],
+            ['externalIdLike' => $config['metaconsole_node_id'].'-'.$idAgent]
+        );
+
+        return $listIncidences['data'];
+    }
+
+
+    /**
+     * Get table incicidences for agent.
+     *
+     * @param integer      $idAgent Id agent.
+     * @param boolean|null $mini    visual mode mini.
+     * @param integer|null $blocked Blocked.
+     *
+     * @return string Html output.
+     */
+    public function getTableIncidencesForAgent(int $idAgent, ?bool $mini=false, ?int $blocked=null)
+    {
+        \ui_require_css_file('pandoraitsm');
+        \ui_require_javascript_file('ITSM');
+
+        global $config;
+        $columns = [
+            'idIncidence',
+            'title',
+            'groupCompany',
+            'statusResolution',
+            'priority',
+            'updateDate',
+            'startDate',
+            'idCreator',
+            'owner',
+        ];
+
+        $column_names = [
+            __('ID'),
+            __('Title'),
+            __('Group').'/'.__('Company'),
+            __('Status').'/'.__('Resolution'),
+            __('Priority'),
+            __('Updated'),
+            __('Started'),
+            __('Creator'),
+            __('Owner'),
+        ];
+
+        $options = [
+            'id'                  => 'itms_list_tickets',
+            'class'               => 'info_table',
+            'style'               => 'width: 99%',
+            'columns'             => $columns,
+            'column_names'        => $column_names,
+            'ajax_url'            => 'operation/ITSM/itsm',
+            'ajax_data'           => [
+                'method'         => 'getListTickets',
+                'externalIdLike' => $config['metaconsole_node_id'].'-'.$idAgent,
+                'blocked'        => $blocked,
+            ],
+            'no_sortable_columns' => [
+                2,
+                3,
+                -1,
+            ],
+            'order'               => [
+                'field'     => 'updateDate',
+                'direction' => 'desc',
+            ],
+            'return'              => true,
+        ];
+
+        if ($mini === true) {
+            $options['csv'] = 0;
+            $options['dom_elements'] = 'frtip';
+        }
+
+        return ui_print_datatable($options);
+    }
+
+
 }
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 97730665b5..9e08b05910 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -325,6 +325,7 @@ class Manager
         $users = null;
         $priorities = null;
         $priorityDiv = null;
+        $inventories = null;
         $ITSM = new ITSM();
         try {
             if (empty($idIncidence) === false) {
@@ -390,7 +391,16 @@ class Manager
 
                 $users = $this->getUsers($ITSM, $usersInvolved);
 
+                $inventories = [];
                 $priorityDiv = $this->priorityDiv($incidence['priority'], $priorities[$incidence['priority']]);
+                if (empty($incidence) === false
+                    && isset($incidence['inventories']) === true
+                    && empty($incidence['inventories']) === false
+                ) {
+                    foreach ($incidence['inventories'] as $inventory) {
+                        $inventories[] = $this->getInventory($ITSM, $inventory['idInventory']);
+                    }
+                }
             }
         } catch (\Throwable $th) {
             $error = $th->getMessage();
@@ -414,6 +424,7 @@ class Manager
                 'priorities'      => $priorities,
                 'priorityDiv'     => $priorityDiv,
                 'headerTabs'      => $headerTabs,
+                'inventories'     => $inventories,
             ]
         );
     }
@@ -855,6 +866,28 @@ class Manager
     }
 
 
+    /**
+     * Get Inventory.
+     *
+     * @param ITSM    $ITSM        Object for callApi.
+     * @param integer $idInventory Inventory ID.
+     *
+     * @return array Data inventory
+     */
+    private function getInventory(ITSM $ITSM, int $idInventory): array
+    {
+        $result = $ITSM->callApi(
+            'inventory',
+            [],
+            [],
+            $idInventory,
+            'GET'
+        );
+
+        return $result;
+    }
+
+
     /**
      * Get Incidences group by for groups.
      *
@@ -1113,6 +1146,11 @@ class Manager
             $filters['externalIdLike'] = $externalIdLike;
         }
 
+        $blocked = get_parameter('blocked', null);
+        if (isset($blocked) === true) {
+            $filters['blocked'] = $blocked;
+        }
+
         if (isset($filters['status']) === true && empty($filters['status']) === true) {
             unset($filters['status']);
         }
diff --git a/pandora_console/operation/agentes/estado_generalagente.php b/pandora_console/operation/agentes/estado_generalagente.php
index c0c1fc8582..ab71c2b944 100755
--- a/pandora_console/operation/agentes/estado_generalagente.php
+++ b/pandora_console/operation/agentes/estado_generalagente.php
@@ -26,6 +26,8 @@
  * ============================================================================
  */
 
+use PandoraFMS\ITSM\ITSM;
+
 // Begin.
 global $config;
 
@@ -944,6 +946,46 @@ if (empty($agentAdditionalInfo) === false) {
     );
 }
 
+if ((bool) $config['ITSM_enabled'] === true) {
+    $show_tab_issue = false;
+    try {
+        $ITSM = new ITSM();
+        $list = $ITSM->listIncidenceAgents($id_agente);
+        if (empty($list) === false) {
+            $show_tab_issue = true;
+        }
+    } catch (\Throwable $th) {
+        $show_tab_issue = false;
+    }
+
+    if ($show_tab_issue === true) {
+        try {
+            $table_itsm = $ITSM->getTableIncidencesForAgent($id_agente, true, 0);
+        } catch (Exception $e) {
+            $table_itsm = $e->getMessage();
+        }
+
+        $itsmInfo = ui_toggle(
+            $table_itsm,
+            '<span class="subsection_header_title">'.__('Incidences').'</span>',
+            'status_monitor_agent',
+            false,
+            false,
+            true,
+            '',
+            'white-box-content',
+            'box-flat white_table_graph w100p'
+        );
+
+        html_print_div(
+            [
+                'class'   => 'agent_details_line',
+                'content' => $itsmInfo,
+            ]
+        );
+    }
+}
+
 if (empty($agentIncidents) === false) {
     html_print_div(
         [
diff --git a/pandora_console/operation/agentes/ver_agente.php b/pandora_console/operation/agentes/ver_agente.php
index 74000850f8..9bc9280b31 100644
--- a/pandora_console/operation/agentes/ver_agente.php
+++ b/pandora_console/operation/agentes/ver_agente.php
@@ -27,6 +27,7 @@
  */
 
 use PandoraFMS\Enterprise\Metaconsole\Node;
+use PandoraFMS\ITSM\ITSM;
 
 global $config;
 
@@ -1558,16 +1559,29 @@ if ((bool) $config['activate_gis'] === true) {
 
 // Incident tab.
 if ((bool) $config['ITSM_enabled'] === true) {
-    $incidenttab['text'] = html_print_menu_button(
-        [
-            'href'  => 'index.php?sec=gagente&amp;sec2=operation/agentes/ver_agente&tab=incident&id_agente='.$id_agente,
-            'image' => 'images/logs@svg.svg',
-            'title' => __('Incidents'),
-        ],
-        true
-    );
+    $show_tab_issue = false;
+    try {
+        $ITSM = new ITSM();
+        $list = $ITSM->listIncidenceAgents($id_agente);
+        if (empty($list) === false) {
+            $show_tab_issue = true;
+        }
+    } catch (\Throwable $th) {
+        $show_tab_issue = false;
+    }
 
-    $incidenttab['active'] = ($tab === 'incident');
+    if ($show_tab_issue === true) {
+        $incidenttab['text'] = html_print_menu_button(
+            [
+                'href'  => 'index.php?sec=gagente&amp;sec2=operation/agentes/ver_agente&tab=incident&id_agente='.$id_agente,
+                'image' => 'images/logs@svg.svg',
+                'title' => __('Incidents'),
+            ],
+            true
+        );
+
+        $incidenttab['active'] = ($tab === 'incident');
+    }
 }
 
 // Url address tab.
diff --git a/pandora_console/views/ITSM/ITSMTicketDetailView.php b/pandora_console/views/ITSM/ITSMTicketDetailView.php
index 9bebb94709..a6ed7d9b7e 100644
--- a/pandora_console/views/ITSM/ITSMTicketDetailView.php
+++ b/pandora_console/views/ITSM/ITSMTicketDetailView.php
@@ -52,6 +52,8 @@ ui_print_standard_header(
     ]
 );
 
+hd($inventories);
+
 if (empty($error) === false) {
     ui_print_error_message($error);
 }
@@ -190,7 +192,7 @@ if (empty($incidence) === true) {
 
     // Show description.
     $description_box = '<div class="ITSM_details_description">';
-    $description_box .= $incidence['description'];
+    $description_box .= str_replace("\r\n", '</br>', $incidence['description']);
     $description_box .= '</div>';
     ui_toggle($description_box, __('Description'), '', '', false);
 
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 2d286816c5..33b45b0ec1 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -1932,7 +1932,8 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 			'IP Address' => safe_output($agent->{'direccion'}),
 			'URL Address' => safe_output($agent->{'url_address'}),
 			'ID Agent' => $agent->{'id_agente'},
-			'Group' => safe_output(get_db_value($dbh, 'select nombre from tgrupo where id_grupo = ?', $agent->{'id_grupo'}))
+			'Group' => safe_output(get_db_value($dbh, 'select nombre from tgrupo where id_grupo = ?', $agent->{'id_grupo'})),
+			'OS Version' => $agent->{'os_version'}
 		);
 
 		my %dataSend = (
@@ -1948,11 +1949,6 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 			'createWu' => $action->{'create_wu_integria'}
 		);
 
-		# TODO: change to logger.
-		use Data::Dumper;
-		$Data::Dumper::SortKeys = 1;
-		print Dumper(\%dataSend);
-
 		my $response = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/pandorafms/alert', $ITSM_token, \%dataSend);
 		if (!defined($response)){
 			return;
@@ -3878,6 +3874,32 @@ sub pandora_get_custom_field_for_itsm ($$) {
 	return \%result;
 }
 
+sub pandora_prepare_info_object_inventory_itsm ($) {
+	my ($dbh) = @_;
+	my $custom_fields = pandora_get_custom_fields($dbh);
+
+	my $sql = 'SELECT tagente.alias, tagente.id_agente AS "ID Agent", tagente.os_version AS "OS Version", tagente.direccion AS "IP Address",';
+	$sql .= ' tagente.url_address AS "URL Address", tgrupo.nombre AS "Group", tconfig_os.name AS "OS",';
+
+	foreach my $field (@{$custom_fields}) {
+		$sql .= ' case when tagent_custom_fields.name = "'. $field->{'name'} . '" then tagent_custom_data.description end AS "'. $field->{'name'} . '",';
+	}
+
+	$sql = substr($sql, 0, -1);
+	
+	$sql .= ' FROM tagent_custom_fields';
+	$sql .= ' INNER JOIN tagent_custom_data ON tagent_custom_data.id_field = tagent_custom_fields.id_field';
+	$sql .= ' RIGHT JOIN tagente ON tagent_custom_data.id_agent = tagente.id_agente';
+	$sql .= ' INNER JOIN tgrupo ON tgrupo.id_grupo = tagente.id_grupo';
+	$sql .= ' INNER JOIN tconfig_os ON tconfig_os.id_os = tagente.id_os';
+	$sql .= ' GROUP BY tagente.id_agente';
+	$sql .= ' ORDER BY tagente.id_agente';
+
+	my @result = get_db_rows($dbh, $sql);
+
+	return \@result;
+}
+
 ##########################################################################
 ## Update a custom field from agent of tagent_custom_data 
 ##########################################################################
@@ -7019,8 +7041,8 @@ sub pandora_API_ITSM_call ($$$$$) {
 	}
 }
 
-sub pandora_sync_agents_integria ($) {
-	my ($dbh) = @_;
+sub pandora_sync_agents_integria ($$) {
+	my ($pa_config, $dbh) = @_;
 
 	my $config_ITSM_enabled = pandora_get_tconfig_token ($dbh, 'ITSM_enabled', '');
 
@@ -7028,44 +7050,23 @@ sub pandora_sync_agents_integria ($) {
 		return;
 	}
 
-	my $config_api_path = pandora_get_tconfig_token ($dbh, 'ITSM_hostname', '');
-	my $config_integria_user_pass = pandora_get_tconfig_token ($dbh, 'ITSM_token', '');
+	my $ITSM_path = pandora_get_tconfig_token ($dbh, 'ITSM_hostname', '');
+	my $ITSM_token = pandora_get_tconfig_token ($dbh, 'ITSM_token', '');
 
-	my $api_path = $config_api_path;
 
-	my @agents_string = '';
-	my @agents = get_db_rows ($dbh, 'SELECT * FROM tagente');
-	
-	my @agents_array = ();
-	my $agents_string = '';
+	my %dataAgents = (
+		'agents' => pandora_prepare_info_object_inventory_itsm($dbh),
+		'idNode' => pandora_get_tconfig_token($dbh, 'metaconsole_node_id', 0)
+	);
 
-	foreach my $agent (@agents) {
-		push @agents_array, $agent->{'nombre'} .
-			"|;|" .
-			$agent->{'alias'} .
-			"|;|" .
-			$agent->{'id_os'} .
-			"|;|" .
-			$agent->{'direccion'} .
-			"|;|" .
-			$agent->{'id_grupo'};
-	}
+	# TODO: change to logger.
+	#use Data::Dumper;
+	#$Data::Dumper::SortKeys = 1;
+	#print Dumper(\%dataAgents);
 
-	my $ua       = LWP::UserAgent->new();
-	my $response = $ua->post( $api_path, {
-			'user_pass' => $config_integria_user_pass,
-			'op' 		=> 'sync_pandora_agents_inventory',
-			'params[]' 	=> [@agents_array],
-			'token' 	=> '|;|'
-		});
-
-	my $content = $response->decoded_content();
-
-	if (defined $content && is_numeric($content) && $content ne "-1") {
-		return $content;
-	}
-	else {
-		return 0;
+	my $response = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/pandorafms/agents', $ITSM_token, \%dataAgents);
+	if (!defined($response)){
+		return;
 	}
 }
 
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index 09574fefb1..f3e40e9e9e 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -1397,7 +1397,7 @@ if (defined($history_dbh)) {
 }
 
 # Keep integrity between PandoraFMS agents and Pandora ITSM inventory objects.
-pandora_sync_agents_integria($dbh);
+#pandora_sync_agents_integria($dbh);
 
 # Cleanup and exit
 db_disconnect ($history_dbh) if defined ($history_dbh);

From 9a42e5e333b94dd98519c40a48365c00a63e7d3a Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Mon, 4 Sep 2023 16:27:43 +0200
Subject: [PATCH 023/116] Discovery migration. Console visual cahnges

---
 .../wizards/ManageExtensions.class.php        | 148 ++++++++++++++++++
 .../include/javascript/manage_extensions.js   |  39 +++++
 2 files changed, 187 insertions(+)

diff --git a/pandora_console/godmode/wizards/ManageExtensions.class.php b/pandora_console/godmode/wizards/ManageExtensions.class.php
index e088278eea..e39f09fa80 100644
--- a/pandora_console/godmode/wizards/ManageExtensions.class.php
+++ b/pandora_console/godmode/wizards/ManageExtensions.class.php
@@ -37,6 +37,7 @@ class ManageExtensions extends HTML
     public $AJAXMethods = [
         'getExtensionsInstalled',
         'validateIniName',
+        'loadMigrateModal',
     ];
 
     /**
@@ -283,6 +284,10 @@ class ManageExtensions extends HTML
         echo '<form id="uploadExtension" enctype="multipart/form-data" action="index.php?sec=gservers&sec2=godmode/servers/discovery&wiz=magextensions" method="POST">';
         html_print_input_hidden('upload_disco', 1);
         html_print_table($table);
+         // Auxiliar div ant string for migrate modal.
+        $modal = '<div id="migrate_modal" class="invisible"></div>';
+        echo $modal;
+
         echo '<div class="action-buttons w700px">';
 
         echo '</div>';
@@ -297,6 +302,7 @@ class ManageExtensions extends HTML
                     "Error": "'.__('Error').'",
                     "Ok": "'.__('Ok').'",
                     "Failed to upload extension": "'.__('Failed to upload extension').'",
+                    "Migrate": "'.__('Migrate').'",
                 };
                 var url = "'.ui_get_full_url('ajax.php', false, false, false).'";
             </script>';
@@ -687,6 +693,7 @@ class ManageExtensions extends HTML
                 );
                 $data[$key]['actions'] .= html_print_input_hidden('short_name', $row['short_name'], true);
                 $data[$key]['actions'] .= '</form>';
+
                 if ($this->checkFolderConsole($row['short_name']) === true) {
                     $data[$key]['actions'] .= '<form name="grupo" method="post" class="rowPair table_action_buttons" action="'.$this->url.'&action=sync_server">';
                     $data[$key]['actions'] .= html_print_input_image(
@@ -715,6 +722,21 @@ class ManageExtensions extends HTML
                         ],
                     );
                 }
+
+                $migrationHash = $this->canMigrate($row['short_name']);
+                if ($migrationHash !== false && empty($migrationHash) !== true) {
+                    // Migrate button
+                    $data[$key]['actions'] .= html_print_input_image(
+                        'button_migrate',
+                        'images/reset.png',
+                        '',
+                        '',
+                        true,
+                        [
+                            'onclick' => 'show_migration_form(\''.$row['short_name'].'\',\''.$migrationHash.'\')',
+                        ]
+                    );
+                }
             }
 
             if (empty($data) === true) {
@@ -1053,4 +1075,130 @@ class ManageExtensions extends HTML
     }
 
 
+    /**
+     * Checks if the discovery app can be migrated to .disco system.
+     * If app is migrated or is not in .ini file, it cannot be migrated.
+     *
+     * @param string $shortName Short name of the discovery app.
+     *
+     * @return string App hash, false in case hash doesnt exist on ini file, or is already migraeted..
+     */
+    private function canMigrate(string $shortName='')
+    {
+        global $config;
+
+        if (empty($shortName) === true) {
+            return false;
+        }
+
+        // 1. Check if app is already migrated:
+        // Get migrated Discovery Apps from config.
+        $migratedAppsJson = db_get_value('value', 'tconfig', 'token', 'migrated_discovery_apps');
+        if ($migratedAppsJson === false) {
+            return false;
+        }
+
+        // Decode JSON migrated apps.
+        $migrateApps = json_decode($migratedAppsJson, true);
+
+        if (json_last_error() !== JSON_ERROR_NONE) {
+            return false;
+        }
+
+        // Check app migrated.
+        if (array_key_exists($shortName, $migrateApps)) {
+            if (defined($migrateApps[$shortName]) === true && (bool) $migrateApps[$shortName] === true) {
+                // Already migrated.
+                return false;
+            }
+        }
+
+        // 2. If app not migrated yet, check DiscoveryApplicationsMigrateCodes.ini
+        // Path to the INI file
+        $filePath = $this->path.'/DiscoveryApplicationsMigrateCodes.ini';
+
+        // Parse the INI file
+        $migrationCodes = parse_ini_file($filePath, true);
+
+        if ($migrationCodes === false) {
+            return false;
+        }
+
+        // Check shortname in ini file.
+        if (array_key_exists($shortName, $migrationCodes) === false) {
+            return false;
+        } else {
+            return $migrationCodes[$shortName];
+        }
+
+        // All checks ok, discovery app can be migrated
+        return false;
+
+    }
+
+
+    /**
+     * Prints html for migrate modal
+     *
+     * @param string $shortName Short name of app
+     * @param string $hash      App hash
+     *
+     * @return void
+     */
+    public function loadMigrateModal()
+    {
+        $shortname = get_parameter('shortname', null);
+        $hash = get_parameter('hash', null);
+
+        $form = [
+            'action'   => '#',
+            'id'       => 'modal_migrate_form',
+            'onsubmit' => 'return false;',
+            'class'    => 'modal',
+        ];
+
+        $inputs = [];
+        $migrateMessage = __(
+            'All ‘legacy‘ tasks for this application will be migrated to the new ‘.disco’ package system. All configurations and executions will be managed with the new system. This process will not be reversible.</br></br>'
+        );
+        $migrateMessage .= _('Please check the migration code for the application before proceeding.');
+
+        $inputs[] = [
+            'wrapper'       => 'div',
+            'block_id'      => 'div_migrate_message',
+            'class'         => 'hole flex-row flex-items-center w98p',
+            'direct'        => 1,
+            'block_content' => [
+                [
+                    'label'     => $migrateMessage,
+                    'arguments' => [
+                        'class' => 'first_lbl w98p',
+                        'name'  => 'lbl_migrate_message',
+                        'id'    => 'lbl_migrate_message',
+                    ],
+                ],
+            ],
+        ];
+
+        $inputs[] = [
+            'label'     => __('Applicattion hash'),
+            'id'        => 'div-hash',
+            'arguments' => [
+                'name'   => 'hash',
+                'type'   => 'text',
+                'value'  => $hash,
+                'return' => true,
+            ],
+        ];
+
+        $this->printForm(
+            [
+                'form'   => $form,
+                'inputs' => $inputs,
+            ],
+            false
+        );
+    }
+
+
 }
diff --git a/pandora_console/include/javascript/manage_extensions.js b/pandora_console/include/javascript/manage_extensions.js
index e5c98c6a58..969a9c4ce2 100644
--- a/pandora_console/include/javascript/manage_extensions.js
+++ b/pandora_console/include/javascript/manage_extensions.js
@@ -70,3 +70,42 @@ $(document).ready(function() {
     });
   });
 });
+
+/**
+ * Loads modal from AJAX to add a new key or edit an existing one.
+ */
+function show_migration_form(shortName, hash) {
+  var btn_ok_text = textsToTranslate["Migrate"];
+  var btn_cancel_text = textsToTranslate["Cancel"];
+  var title = textsToTranslate["Migrate"];
+  var method = "migrate";
+
+  load_modal({
+    target: $("#migrate_modal"),
+    form: "modal_migrate_form",
+    url: url,
+    modal: {
+      title: title,
+      ok: btn_ok_text,
+      cancel: btn_cancel_text
+    },
+    extradata: [
+      {
+        name: "shortName",
+        value: shortName
+      },
+      {
+        name: "hash",
+        value: hash
+      }
+    ],
+    onshow: {
+      page: page,
+      method: "loadMigrateModal"
+    },
+    onsubmit: {
+      page: page,
+      method: method
+    }
+  });
+}

From a059f18b4b727e2cd52e9b86590b1d9e9f472929 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Mon, 4 Sep 2023 16:36:58 +0200
Subject: [PATCH 024/116] ITSM pandora_enterprise#11471

---
 pandora_console/godmode/setup/setup.php       |   4 +-
 pandora_console/images/RC.png                 | Bin 0 -> 845 bytes
 pandora_console/images/ehorus/ehorus.png      | Bin 892 -> 0 bytes
 pandora_console/images/integria.png           | Bin 895 -> 0 bytes
 pandora_console/images/itsm.png               | Bin 0 -> 852 bytes
 .../images/widgets/ITSMIncidences.png         | Bin 0 -> 5921 bytes
 .../operation/agentes/ver_agente.php          |   2 +-
 .../views/ITSM/ITSMTicketDetailView.php       |  26 ++++++-
 pandora_server/lib/PandoraFMS/Core.pm         |  68 +++++++++++++++---
 9 files changed, 86 insertions(+), 14 deletions(-)
 create mode 100644 pandora_console/images/RC.png
 delete mode 100644 pandora_console/images/ehorus/ehorus.png
 delete mode 100644 pandora_console/images/integria.png
 create mode 100644 pandora_console/images/itsm.png
 create mode 100644 pandora_console/images/widgets/ITSMIncidences.png

diff --git a/pandora_console/godmode/setup/setup.php b/pandora_console/godmode/setup/setup.php
index ee1600a0e2..d7f496c2d6 100644
--- a/pandora_console/godmode/setup/setup.php
+++ b/pandora_console/godmode/setup/setup.php
@@ -173,7 +173,7 @@ if (check_acl($config['id_user'], 0, 'AW')) {
 $buttons['ITSM'] = [
     'active' => false,
     'text'   => '<a href="'.ui_get_full_url('index.php?sec=gsetup&sec2=godmode/setup/setup&section=ITSM').'">'.html_print_image(
-        'images/integria.png',
+        'images/itsm.png',
         true,
         [
             'title' => __('ITSM'),
@@ -185,7 +185,7 @@ $buttons['ITSM'] = [
 $buttons['ehorus'] = [
     'active' => false,
     'text'   => '<a href="'.ui_get_full_url('index.php?sec=gsetup&sec2=godmode/setup/setup&section=ehorus').'">'.html_print_image(
-        'images/ehorus/ehorus.png',
+        'images/RC.png',
         true,
         [
             'title' => __('eHorus'),
diff --git a/pandora_console/images/RC.png b/pandora_console/images/RC.png
new file mode 100644
index 0000000000000000000000000000000000000000..b89cd3e2547d9552c28c54caaecd2cdb5c54b189
GIT binary patch
literal 845
zcmV-T1G4;yP)<h;3K|Lk000e1NJLTq000yK000yS1^@s7`i?D|00004XF*Lt006O%
z3;baP0000uWmrjOO-%qQ0000800D<-00aO40096102%-Q00002paK8{000010000K
zpaTE|000010000K00000krmR%0008ONkl<ZI1!zc%WG3X6vjI@H%(Kb5w$N+Q?M?C
zQWV_iqKOG&18!V&;l_=0BS=d@Tv^cSLU19v5cD4qx)2mh!O|ovmqLAjuSEofwr-4}
zHBbG0)7%i~Z7Cf%cjkWQJCB)jW=sbo9*-A{F-NudCm@kX47toR0vH`8nM|e|jmE4~
zuh(Cp2{_`RI$<DxVKF4Y8;%ErLZLof59ITC6Oa~mCKii585|sp77B$0<Hht$H9Mkf
z;kxdqW(^yW`Aw}>n_`|8=xc7$>2zpqZSAiZTMe?BcSIt^BS<6~jqZi~QU;FWoKg;q
z3AQq3!+1%FK-Qm8j-vb_KBAK|I*l5j-7CPB!^!1xI%2yEKNjAXk)S;Xyt;V33y@+y
zj=?Y1AIbCK;^JaP4iq|ra?H=0hjn*%cd0nrl0;r#Uw>~;Tt_1z+({{zpCNmY9)62B
z8?r<?qpMslm&j=V#S1og3FRN;TObfPYmHTH?;Oc@80EX(-d=ZQWu+zpqlyHr$5bkH
zKnB@t_5<O5&&|!%nJ19bc(i-)Z2;@1?SnzxdThgdm!xycfgMDaeHk0zG<%qBugo<J
zZeZQFjnO8Rf?#ux`4Oj8(_U`Ey1j|HJ78wV-MAC~WLa11*w$7J)k}aX#{@;cpgIb}
z*>~i*I9%X<bXSncU@$n+to>yLlrLR@)`&zR4t;k>fRv?D$)&5rA%?j+K0Y3xQGW7o
ztI30;i`YQdfG@MwD`9_%#bTJnB+83qu#m}Q%GGN1DcE5e=vcF%mMnSWQ-OCzdJk(g
z80p7&diLY&ZA)p)_0G=D$CXOu4)_$A=yKd={fUZ}Xz_h;&m#}O`eo<)U`nx@L9nk*
zI2;~kF~1uJ?KbjZeYJyndN`AF6e0m(1YHkX(cM4T<mo9|WxWc%#JT1u%xg7tQ{V9)
X`8hfZ=U3z*00000NkvXXu0mjfqdaBq

literal 0
HcmV?d00001

diff --git a/pandora_console/images/ehorus/ehorus.png b/pandora_console/images/ehorus/ehorus.png
deleted file mode 100644
index e533fe4eacb63528b0041d62c4670041133762cb..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 892
zcmV-?1B3jDP)<h;3K|Lk000e1NJLTq000#L000#T1^@s7-Vl`l00004XF*Lt006O%
z3;baP0000uWmrjOO-%qQ0000800D<-00aO40096102%-Q00002paK8{000010000L
zpaTE|000010000L00000E7LGE0008-Nkl<ZI1#l}&r6#@5Pe^w2u4T|5yXp-h{xs>
zi-^B5Sm>c9Hz6SPAb7PowIVc#SpNij5-&>hP)HN-CwNGzh&|*WMg;XBcxgcoMv`>i
zn*H3y6z!o4$;{5Yd9yn+`vJ0gdU{fn78QrX(LOjh2#c2P?(QO`S~iT<y1F{t+}xzA
z=(@hX#?H>ptH&|o6o;jli^XC)(F|pTWm#$N)grl0K!c*{?d^S8C=|ZSnfzN@TR%wi
zQ)t}xF@mzJUk)0!x3|&K(gL5)2kspjL3wz1sJ2yv3&o$|68b_C_ym%p<X&ZGOnE}Z
zBY$KfkbA3i%=;u_h{a;aWHP9!sX=37BSuF@iG#`_#k*wz_xARRl>C|N;NU>pZyzzo
z<8h=?DY#rNG&MCL91h#e|8`~-R{E1mev%`+<5n*AMK1PH`xR?nU*AwZpO0&!DV<K|
z>&?y0Z<c^O0?L}sa$Ue)hY9lg{a9aL$N2a-gaysb%_@c%yN7gkc6MT5U;xL*$B;}|
zT3UJ_*L6HQJ5#k=TwF9us_R))!^*Iuqa%!rj9_750jH;@*x1;3U=z(w9gRlStR|C5
zc)ebAMicq`Tg&ZESSvHy)Jt_dvD--JlbtacN)4D3+puZ>i@quuBRrMqx3de`kUYJw
zQb(r=c#bYJl$Tk5!?7S<kxGwNMSoj~!0mP;6bhlMs|)q@^~h$k*x%pB^71n7?(WJ%
z*5s2i%x?jw_CvXMY-~*RmOY-CnSl(24QXp@!|d!VE-x=JF);zTq3x4XNBJ#L&p=!I
z`}-l!0oB#jkY}#ul&9su(7v*=g4)_zOifLxr#?A3sY8_{pFMTj!`I8jQ#`e%r>Aj#
ze*Oqn@%qwHL?RIc0s*AcY0S^h<Lc_l4)%CFXl-ppB9X9dTH*C|qheyLI6@5#4G0E<
z=;-KBjk>tF!0zs@Dnl-p(_C7vN~41RZ=`e@%F^(E7PaDtnOM=+q*U+AhyOQLFNOyd
SJQr>N0000<MNUMnLSTYXvy{64

diff --git a/pandora_console/images/integria.png b/pandora_console/images/integria.png
deleted file mode 100644
index 9dcad27e3ba5424063cfce1da2e0399a410ad094..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 895
zcmex=<Ns}j76xV}CJ+Jw79e8fU}a@tVdY|HXXD`E;^E=u;^yY%6B6L%6XfIO77!B<
z6c!N`73JX<mk<+?5E2m;VPpoXXJO@JW#ts%<>nP38T>!MAjrWW#30DbsKme|$jB_n
z`2PswA_fLVRz@&jfC5G)p!?X^IXJnv1sIqZnVFebm_e=us;mXdF|Y`-3Mm>ovIz$!
zvMUve7&T5@$f4}C@t|nX#SbdRNkvVZTw>x9l2WQ_>Kd9_CZ=ZQ7M51dF0O9w9-dyo
zA)#U65s^{JDXD4c8JStdC8cHM6_r)ZEv;?s9i3g1CQq3<ZTgIvvlcC0vUJ(<6)RV5
z+Pr1!w(UE1?mBe%$kAiRPn<k;>GGAU*RJ2VdF$b$$4{O<d;a3(tB;>PfBE|D`;VW$
z7#Wx$-T{&j4<Y$S5a=H!78Yg}c94G<naY8fS&)TQ(U48ZF_1m6P*};Rkwe63;=+vw
zIhBorK8Pk2UE~r|F?p!^5#%MXkBIY76InijdkF5I|F;-;m>Gc)#w^HS&+zU1t;OHA
zef;>*yt796!-Ve48r$;pW%uKqQ@^d=y?S@kE5$~yO)G+Sdus34=Jc4^#{Pi(t^1GN
z+xBF#_V=$dc`x}w$nbZG*!5dAv*xyBaaK;#F8?f{z&bOM^MJ*zZ2rfpZ{NR}`rGBl
z_ONRv+HbvGKH7J#vGHGi|B%yBrK2{R&+|P#_Tkgi+gBJkAGXz1{+;wCHazyn*N3ZP
z)xCFKO`UR{<#ZnVJEduyij{NbF)f%}c+R+o&tn1q?f$pY{y%@U|NF;fza`iH`78O~
zKeVU*XJ`#w@}J@S(f5D9&Hv*o|6$dZ`9FW`{m-!P@_&ZT1$^D{AD&HqwAb{@-+b>)
z*K}l_zRiDosba?O#ZCP2UMnBQGgssv*tRLUBLDEO@b<M!tmnyUow80ze&wXWwq0WZ
LQ<ug9{{J@tY>-;&

diff --git a/pandora_console/images/itsm.png b/pandora_console/images/itsm.png
new file mode 100644
index 0000000000000000000000000000000000000000..0571f55298245044779adad6e284e5bdce70a92b
GIT binary patch
literal 852
zcmV-a1FQUrP)<h;3K|Lk000e1NJLTq000yK000yS1^@s7`i?D|00004XF*Lt006O%
z3;baP0000uWmrjOO-%qQ0000800D<-00aO40096102%-Q00002paK8{000010000K
zpaTE|000010000K00000krmR%0008VNkl<ZI1!zcJ!n%=6vz8slGY}Y_=y?R1T3hF
zi-HP5LW`tP3Kd*jrIR33A#_k%u~u;rsY?-|qo4(yY^9PWij&|+5f^pHsO^+uVrV}6
z{V%!Y84?8#+;`8%|D1Erx#vEo3rZvs1;=sriD@(y4PQJSue0(}IQ{+o>3Y3B>4rj~
ze527g>=ui~pT?9-CcnTO&*gHfHh>GH&*$?sP%OKydm^9DJ3hfd&&Oi12Skn(3Wb*&
zIc1c)mZOgpUUHklqGCY-$!(ENI-Tw*l}f+7?yWo#7F-Johr=NO6uK2iDT6k57ggT|
zFisik)O7`ZjrE>rQ*sorZWz~9dqw~qU0PbY<@fuKAU~o@S7kS8DDx8hT`5|Lh~Lre
zHbBz(ImZ;r0rrC!R^dMreL9=X&db?RYjs!&ohTR#Zqnrp;yFQtIaREMJnMBTm&>30
zQUETo&T`f_IIJ-RDK8LP-$r}9hIYIG;*lZU7}1J=4zOPr7@hiQ$N=ftFzI@5*vtCJ
zKxMK10QkCzGYz-=2oC2YRIAk)8Xc|GYNsWWq1JX%WNe{v7j%H7?suZgv~1FQGZ%3f
z<BYpHd9>3j2|jn&?{nO$j(82=jdtMw(3w&utRq=6%{kYEuCSi#=Gh-h#$IFZNZ2Pd
zI_4R-pmbe3SzDwB7?IooD~KW4&4_svXLw+HtW2Q&4D}?yLss{%-3*QeF%P2*%`|~B
z=+1X{cgNsW`dgK*1<eQ#?v&L@w)96p2I~bAsaO3j5{b;gtAb+|%xNF;+Ak1vG!O`U
zK)z{hcGrA;vjY25f;}P7t7tT;Kh}22RnpBvLqkFK0fOA??d_edR4Q3)TT`jjHuQ#w
z_0|0Dc(2be{`K)&r%pS;7DzN~2HS$j?&pLjc}qzEx(MB@ZhJ=)qhFDFx`KY0KIW)q
eQ3Ktycl`zj?=be~f#xXy0000<MNUMnLSTZB9By?0

literal 0
HcmV?d00001

diff --git a/pandora_console/images/widgets/ITSMIncidences.png b/pandora_console/images/widgets/ITSMIncidences.png
new file mode 100644
index 0000000000000000000000000000000000000000..18c83029b4162cc9c308a7706cba5dd3b0f7fd62
GIT binary patch
literal 5921
zcmV++7vAWJP)<h;3K|Lk000e1NJLTq003tI003tQ1^@s7YDR2t00004XF*Lt006O%
z3;baP0000uWmrjOO-%qQ0000800D<-00aO40096102%-Q00002paK8{000010001I
zpaTE|000010001I000007)jkP000)0Nkl<ZcmeG_3wTw<nRD(rH<v&X1R)VLpuFWN
zRb00VXjZL{trjXoFs*AVH9`S_MZannyPtNct9G?Yfl#fAL>^Y#+Ag0@f<Sdwf`~#?
zUh)c%010{LKF&Qm|0Ms(+_~p@@3|zTneR(x=AVD&pMU;2Gylx|Ggl%8uIP;|{fMgd
zi9|_+_@YODnx9wCqe&Q9UcBi_3|skg3jTQq%Y+%0EnV=8Rff5bJi8Fmm6gTs4vo?P
zWZ1TK^CV5vO!KXOdlyUdMTwGySibZNh}^xG{<moHLwfjV=mJC|K0Ra*_|5X)G3cSQ
zvDD)-9X?t~HvermLsqAJmxvi4L1C$_|LW@MNbd{M>EA#C;UmjlBc#5LM`7U@N;^J3
zOfoYw+27e{2KnINWYQxelN{cEg#BUe7)n=;ZJ}_wK_iV3LaraQg)~q~1BVP?_-8*k
z-9jmlk+v5?KA)rlmGaY#MCz8wC|t4qO6CJK_(K;XTm;(rdN*3RVav#9IFfFaVfI~l
zpGuOX>6v)s7dDg(QKNEJR8y;F&&)f-r$LxyDtfJCgsN#h#6&R;ot0(6&bsZrH->(;
zed`<%5#!idSue*-ciud%6cNy;^(WAQ(Wf2uDoE4i1Ra%k56t-qi$eb^uhU3aZA;ZN
zwSihf*jcNZVlzN$Tqf+Slb-q+%U%2OUs_7x{_B~bgMx#u1g?JdT5_zGei8;9R?h@o
zh<DFzxq?N%o%0T<JaLMQykeA|tY<<>kaDC(W1SVTpu<APMW<&%N*g!tW~B}-8OCt-
z<+1*Z_{^7HDk<sKbX;qr9g`d%(T6ZdLLtYawL$c5)COt`tyuj|wkG>?+aT^jSU8_c
z|1zA^j?d^cEc>(e7v^78!wB(2-~%asY1vw*1)1Tkc&&te516j-L;zU&@dv-S=f|@!
z-L>BoCIm+Cyju!l^6Fg(p^B1rihf5U;PbfdpGG4%#>b8f!1<FuBQW-V^-U#FVZNdc
zI`&7KK5U7!{*NPssb)kV9STQR8`OxF*_R9-+ZREGz9}KZhT48}q%wxP`B%4mnt-$D
z-JOVP>Dv+-n43-Dk9STB=kwSS;*n3#!7@k(%l~}vJ{|n?r&j4<tAHZ=<&YXy)69^d
z>Go1VhdDuKoGCFwH-*Q2M}Rr?mVYQsPfsUJVU1KYnC3N2SpLM%wJWav&ICk|C8<Fl
z8J^p?FQ8N(HSW)tBLN?WBb|^@8Aa<p7_6#No62Q`#KAPb^tGsYVzMP6MEdQ9k_?|p
z`a~sPx<aIMH5!VfDRQGK%MFEhOg@2lR=y!2aagh{KunX=@X^_K-&7d~=K;wO;LCw9
zbb!LU^1ebi<EUsuX-_p=I|PAV`Z1kB<YeWOi+>r3L~NBXqYCxN%=+p_^BybW(|}mq
zG?AqpFWvPSQ{s4BH{nTx2M?aL`0*F??+7x-4MDfuato=ds?rrYD+;LeAr8hTPMjFi
z$za73M+jCei8{K9BOy8#?*H;ja?MR`rNAmFju0x3ZD_Hfy4qUu??3xD2E6!^T=LK(
zkFszRT~Soj!`vD>=rREP7qfmrAo!?&@-PSkk-;;zv%hVh7qjFNIvba4+fB+o+asdu
z@i>k!#cYP<Ii5ecML)P~l)YYP$`KN@^A8J)Ni%#?jxYn?guo@N8vgru%kZ}F_%ZLM
zawLdN2_0Zz>2?M#4K`!4tsln`ukJ%`Twox4_PmAU%)JXp1J&OOX*#d|BeifighAbp
zBZNx?9YYA5ZKho~Ku8bzXXgC=c+J4HGw`y(0_#H>d2rr+<gL%gv%mTGk6=mAt?>_W
zML&)sL_nEfJV-xCx^O289(|fT``BUz9y`2c!ND)N5MT7;2%#)^L>O9*Q&o#Oy0~5N
zi(l)>p2-NBu#pNL9Mt@UXC5aFU#w>FPri{!afv>+F&O+4Wdtf+97j5KYXDXU;IMfr
zjvpm2|FC6np8F~tK@D6aOohogB_JPCV9Mop8oo7Zi1z88{j8*Nx?aAVTk=9)&`kHW
z7V<zIR~i?Ls#2ROOX2r^Z(<!QP@G}8JV^)B`%8O%l$Y1s(gw7+R1k~w%H2Kx)}cYD
ztxgCcbgM+7OTuqKI2q^jD^2(3PcGxjh#|x$fYK<1wc$L>DlE&|*}@suA27o)C1jQX
z;7|!A8qIN|E?bo+ra`46K3|2IdM)DfaZ83kWJRxUz1(g$k1sHlVGw=c^hsY*Wh>@0
z<!Qz-l&Vz{Pt>b0|M6g%Izw*vxUhhZ;N#E(bzuzIZQm|iI`0pUJpAyb1qB7|QvYx`
zOvaBNuiiQ9;cNS3_czpra4jai_~&hz!TQiJvzo#(>C+vb+`NDPezI-bHZozt1hRAI
zPBMxrru+8oBl-FHF<D_T0Zu#~aSM+rv^6qi%9QA>GZ$TLlm;+3FHj;u^-?ngfHyZa
zTwYUCL;CjZOQuep%2rIdxw)*ug9Z&EkY?nPWxyzZ@7}#l^);vi@S<3400ENX4;-P}
z^#dV%E?ooN7pkIqoyv`8O;NvP6@V98?Z>hNnur^QMtG=v!pZ{{ZK8XBc@ueS-PbW-
z*q*DVM-<IeQBA}p&5%eGnc(5D!g+uB79PaH72JseNCM7U8sgU<arvwOju<l1!m&_1
zN5r@hF07<x6Lz+WXu1#hHFN<~!&EUHY#1<FZHb7E7_wWDiG_-BenWy!%kG~`emHLl
zfls4{_2<E|i7N)aEDSqh2$8|Z)t^z<;_>(}Y<%GAorl9hJ34m>1D&p@WM^l5I)-ue
zf^jR~HA8L~LBhDf0*giXPH-)^2ob2?CnuZzaiD~Pt{F;*3e5zJ)H?W15-lI|CC!lC
zunh-FPc40%?E1Q8j|~Zf52M`rP4TO19>;AsX@*3C*d-h3#0ZOPIF&g`SME2=iMJ<!
zdB|&*G(+M68SK@<#0Xoe=*-TpZeNKQ-uX#0gjI>si4hp7OLAhw@)GqGABoiRHbHg;
z84cSoF;*KY^)02rN#o16ZjLK@?yDMk;P)-NJ6;UiX@03jxxe5$`>eKNF1mQYyGITm
znlxbGrL02ujX<P<Zdg^(&wy7T8Itf1HV*G;-8kfva>nH9Q76Opj*m*>&fE0@Xkb=;
zUdzrH0IisU^i@wk^mJ`a)pZa)*G`t@@D2a+gQ;UCOgd>sJLc>Qky3fshBUnP(bfaY
z)%O$-fWF<b9P!%2$K|#WZBvFs<YY~C#PZz4%?^u=%5cn(QDzawHXvm=Ga6C@ewir2
zsLwA&!+zP<vXF$Mbj{}v2Yk^mHA;*4(&S)7RqGPjP!wrn+%txXic0-*uTW-C4fg;h
z2xUg0OocVcPYv>9YLKV;B`qAGj1bCHH_B9FDBS38zM!_S@T%5R0jySHzH4S+Cw2Mj
zn{%XynoVd^Cq~vH7i|emkt^p+zpjFAl5o2T7I|8e95Dl}uJ&pkM8csA`yxHY@Tb+w
z)!hy{k)9<pbad-OPjUu&T)l*gqa)g3YRqxktN=r1R<C}iN4@NCIb<};*^clGHT>1x
zci$9e>=eh$Z`XZzxumMy+p(^WNNcj(_|qBJe#s-pFtcLqhvT)VYPk!^XKwGX<ddVb
zXI`sY1nSJJDlWMqLWj`yuAp1`)ErE`uON@vRWfFZHoP}L4a<G43VP}JM++P3YR~z1
zq$o<m=<)yf%ETM*z*FM5YRZ1~RAK&&N7&-cijmWm$Gfe6;a4Bh(*)V?_kLQ5tC<0y
zxVZS{rAy}>n)}G}(+rYHYyFQ%E7q1=sztR6jgSEL^paWI4;(n4cSke4RKqDlWaIlE
z&oq;e<de?$tQdg`jvP5sQ&p9$TD6LVLLug39DJj{Xf#UTPfT+Q=kw2)F@x;h`SHJ+
zH5%|?yGH<LEO4eXZQ3+aUtiDsT53Bsefo6MvmP^oBHZXqhsP1q?d%P0nc)j}8x|{r
z`OV;%ZsteA!2xDz0JmkPtn5pYj5(ndajP`YFkx#8&EpxaBw23A*)lU~%vgf^%T~m_
zOoMGL*#4~-wzclMVf-m8I=0MMWp<kO<kH7T`LUyM=)Zj8*CaDbzZIvagTb4~h@NN>
zNSYbkV-smyHlXdg0N8yRZR5fbi70hoB+(6dSIppsI$u$Ke@$e_O&l5pj!Ec}n%z^u
zyxINwIzAq8#f-T33<P<}@JwQ5z=x9oqs{b*W7{?dCrlXSXrqxYR}8yiM$8OxCzAQU
zPh(G}#d6>(##y@cYqw)6<`d(#%)p_l(V?waP@?e=JyEEp-w7POC+lpPfdkcK4|mNf
z3ExK}9fB3A`Po*)tPl?FMHyUi#zCW@879SrbfaDB7C$r_mtqf1ni+lo;K}iW!LdKR
zNuKF{37^cu_b*w@%vs|S5(KznCY3|8*`0$9H#F~{hWKFhFS?v@Z5CW^Yy`w|Fz!k+
zn2GnD49$Pr)pGh=M^CBY&<ehnR5)8^yc(L}l)Bo%>02^P+A`zC&<v;3DwRjK6mMds
zxOl=QLr@-JZIWtdD;c{ASPjknFV3cFibkeP9zk*pEKA1@FCeoPF0muwINcR9ZiZ&i
zvzP${J$V5}jFtdjyxO+L>99jHj8<Sb;AVl<VTWd5gkNAmcjBdh{RZp?ymYR*nG?cb
z@dWBT@4Wmj_;SUtEi-QB8L;F4lN8vHXb)%0jMI4rCdCM4BE22Y5p0>UYhf6gK@u>J
z@Dkw_#DcsL<m$`fCz>8(?(SGa^S7@V&GxvgjI)7}Wv$oa_{O<s<2fFh>CFrH0@x{l
zxS;{NDR6BVcO7|Y@RfEFb}}@>qe)g}DR2~EbrSHuA8j){&VVijv-|L|_E(dkJMmJ$
z3b`4YPaHi&vis$JfO$n9_+S;aGTD0Pk1vlOa#{aXOCDPq!_>L5o`p&Wo14hY>&I&1
zWqzI^_KE-i;26#9^z5do_w4*)`_|j89yj7o^hhD;0fVoA({N^1&&`yPmg~F*nV|jv
z)?2&N9MB@Oo#yBq8R|4f4aiWZF*iYm!0!}>Ks-Z?DQcocGV2EOchyCll*PR=(K4#w
zd2c*t#FPjF1G{jyvsvBK{N0<WNh6`Ajf$K`%^JgoW{ny(Yt-7?tWjhl(RfiQ?Yaj^
z_oxyKM1zq4JvIwaOU{5S$!YCjSp^nSs-}h{RSFWt7xV>`pf3^#l0l@g@G5U?NZq!T
zt^~NvXotUH!=AL0<V?>%G@K==zRdH{0?dp@ung1WXr15ZugxGA*5v1p63+R}a=L?i
zBAn;eY|N6i^lZte^>jzR^I>aIsYaEWD(C;;*4kvbOGr4&i?{ZY<jBREs#&}qlx)>H
zM}A3`f|{z7&ncKx?Uo})!T}9n*}C`o$x)@BTLNA9u`QtbA}8j~xbXxvS%ZBROJ^w@
zSQ#{?`G-VRPfqPEEAsc2=#xpLdnml$$dDe}!caKy6iK8hI#g97hUu8O%TK-qWLeRa
zbl*OByh|)Crtvpy*dSMjaz?6>`7^X)0bOx#T0qw1P_ML#GWy1jzLl#BXZ7k`^e)Yr
zgzo@=`TZY@pPyS(b?Q!P*RKs5HjG?!(M2gg<@Tm&k}Kup$&=B&d-oE$c`Ehn-FN-e
zf_cl#UP`i~l%ZZo?+lG&cZQg7o}zP0k0dTR{qC8E7l)ear@!^qTQWRI^!Mxz9y~~H
zzx{SKEj{D)pDg@ULg%>+^itP@^ir4aKQzskB`J;{)Ds(?-MXo*&W8&tAQ*UWcg>nL
z<n6cLW~h~wm1Onm)nwDAO)OqsUQS+l<rVg9mRMG2h(jAdTQtx%fwoD6Cy)ooMd|nE
z)*RK>`gm9ZCBb#5Yp%J*hgPd_?_~J!;UtTinuDOgL7ZL(VR1U-v3PcNww|5<*$$rt
z+N5;HX9-OcAP<m>qBVtj5y`u$!RPZ4`mD9ycp!|SLx<{dxDE#M5jwb{0uRdZS5**(
zIJ}Q(PVxD?=TjKuqR?OO2oSoENz{dcO(V<7%E-cn#*c9&TJHIt584FUCQ&{>E=saH
zz-fW>vQcBkO%gAeBwDGCo)0YU;Fbdzb;2viy!{GacX;Gx&(7^-Jj_iP<kBwZ=58w4
zQE*|eg%=8#vZUIzyKvA>)D5Hjy#&k$mo47-L$RSDEaLD!TxhyuT7mw127H<r2BWAZ
zYOmHzzZ5U7(un1o#ZxLAvEhvxRWz<LtEe3uE-0EA_8R4dn`TCr8u>cIkOhA*l%cVg
zQCZ0tfEksCu#^hNNyGDvft5nvNSK(GDj({6F*QlYF9qfnvw0;|b-;2{DjXzY<vS6e
zRenr^YrHF#JxdO(YqPP$G$SAGW6qwtASMZfzzgME%quY!5F+g^9HBl5N8x@o{vJ*u
zg|K<0RSP>8w^5wb(G%ggF=}^GsdI?~S527~Mt%5A6|Wq$NwUrp;W#zYPqwmN=7%8*
zgc6|w0huWD9UD&?qqUOICdoQ4>yuDjtP}#X0*w>}P^JI8{xx!Cpqp8?7&u%&y?*Ll
z<i`t^#K1dJB&EU;8{Vi<y;2B3Ee63D-NiO)aJU(KqC8%CuzH%-s2qTGsnTXG<1yUH
zGrJy>G%YTrUydnNF2SoW2UY1s+-o^hGiHlNqeUd#pD&#C09TWa7i@Roc-17lD(!T0
z(kt4jD#sJybQDz@zLe(HwF<0T+H(=vrAl*M7B?s1WJ;rFhXJa|wx>C2r%<K2_Dv`V
zt9jURIbBstURwDZ0>3Qj#O2T*v6)Hd9Qw=0PSD#0$CF_#nVO60wv)0zB^Ng*pLldJ
zsi@mx_}qk1nee+%6^|YD^tmG=I?2FNDjc!ly;$eq<|Mo}0XxQC&nsQ)9IiWw0_2j2
zC`=FrPWa;HBn(rZ|Hb%4K)y^2!(rRl+j23g`(5iCy(tKBvd)3iM-&Q7{6-F*HaS<%
zn;6kg1<aFSEmf*C3|YKTKvh0pT&Go~*}Ov6D=N$>R2pE0(&2wcK<G7|sM2szHCgj0
zp<YQvc?%c#={Bd1TAq@%FLWMN8swtT-}?z_k}v*;>zuYql6a^Pz}EuXF4UUW_SIXX
zUEpWw?}lZZDIqT#JP%}4Mfj1lXFISe4RTSW^t5XFYqcp64mLbCj;MVBynp{}(kr_!
zGtdKVti4@FQKdmH%8Bn!s_3_7Q@=!w*#m(<W!awHFjwn$eXxP8G%+wWf|dO@M=Hs&
z@>A4a8gsSzMqfx<YHSEp>5@{J%zYI$aO~YD-^e77`$ay?;gu?V;HxiGXd5iojZY^U
z4djya{T%k2B`^Nho1@2!=~MLkHMSP<AOkk9Py@YGEF#@BLaK0=%q>v&mwkR}=6#P$
zOXLz2-p|o{d$Kp%*1h=TcPq*dJ=`}t+ke}X@B1zvIhy|3dv*-}uwDt$i3JQPz_6mT
zxau>N<iOW^$fo~!BT{v`BGT`YK~K!M_o2Tg!e89YHY~)eJE63KfrEQ@<uufsJ>N87
zYzkL?kDeDa4jMMDqIaL1gnzKv@=hpUo37i`d~2jO?D#gdSdFfC2*eigE}rl^1Y#As
zUhoiGB=NXsFL;<$q3i7%vzCd6r~K`kc#^RY_G(lbeKjiF^=eeRzZw-Q8siwew^mQz
zTMKu+w`SZx4xsuv#{sUVC~+?p%JikeNY_h+d?WuqX3~J#hX)D=00000NkvXXu0mjf
D)Fw=$

literal 0
HcmV?d00001

diff --git a/pandora_console/operation/agentes/ver_agente.php b/pandora_console/operation/agentes/ver_agente.php
index 9bc9280b31..a9ecdac681 100644
--- a/pandora_console/operation/agentes/ver_agente.php
+++ b/pandora_console/operation/agentes/ver_agente.php
@@ -1658,7 +1658,7 @@ if ((bool) $config['ehorus_enabled'] === true && empty($config['ehorus_custom_fi
         if (empty($ehorus_agent_id) === false) {
             $tab_url = 'index.php?sec=estado&sec2=operation/agentes/ver_agente&tab=ehorus&id_agente='.$id_agente;
             $ehorus_tab['text'] = '<a href="'.$tab_url.'" class="ehorus_tab">'.html_print_image(
-                'images/ehorus/ehorus.png',
+                'images/RC.png',
                 true,
                 [
                     'title' => __('eHorus'),
diff --git a/pandora_console/views/ITSM/ITSMTicketDetailView.php b/pandora_console/views/ITSM/ITSMTicketDetailView.php
index a6ed7d9b7e..709f28ce9f 100644
--- a/pandora_console/views/ITSM/ITSMTicketDetailView.php
+++ b/pandora_console/views/ITSM/ITSMTicketDetailView.php
@@ -52,8 +52,6 @@ ui_print_standard_header(
     ]
 );
 
-hd($inventories);
-
 if (empty($error) === false) {
     ui_print_error_message($error);
 }
@@ -196,6 +194,30 @@ if (empty($incidence) === true) {
     $description_box .= '</div>';
     ui_toggle($description_box, __('Description'), '', '', false);
 
+    if (empty($inventories) === false) {
+        $inventories_box = '<div class="ITSM_details_description">';
+        $inventories_box .= '<ul>';
+        foreach ($inventories as $inventory) {
+            $inventories_box .= '<li>';
+            if (empty($inventory['idPandora']) === true) {
+                $inventories_box .= $inventory['name'];
+            } else {
+                $id_agent = explode('-', $inventory['idPandora'])[1];
+                $url_agent = $config['homeurl'];
+                $url_agent .= 'index.php?sec=estado&sec2=operation/agentes/ver_agente&id_agente='.$id_agent;
+                $inventories_box .= '<a href="'.$url_agent.'" target="_blanK" title="'.__('Agent').'">';
+                $inventories_box .= $inventory['name'];
+                $inventories_box .= '</a>';
+            }
+
+            $inventories_box .= '</li>';
+        }
+
+        $inventories_box .= '</ul>';
+        $inventories_box .= '</div>';
+        ui_toggle($inventories_box, __('Related to inventory object'), '', '', false);
+    }
+
     // Files section table.
     $table_files_section = new stdClass();
     $table_files_section->width = '100%';
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index cad4b74324..199b84482e 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -1927,13 +1927,43 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 		# Extract custom field valid with data.
 		my $custom_fields_data = pandora_get_custom_field_for_itsm($dbh, $agent->{'id_agente'});
 
+		my %OS = (
+			'data' => safe_output(get_db_value($dbh, 'select name from tconfig_os where id_os = ?', $agent->{'id_os'})),
+			'type' => 'text'
+		);
+
+		my %ip_address = (
+			'data' => safe_output($agent->{'direccion'}),
+			'type' => 'text'
+		);
+
+		my %url_address = (
+			'data' => '["Agent", "' . safe_output($agent->{'url_address'} . '"]'),
+			'type' => 'link'
+		);
+
+		my %id_agent = (
+			'data' => $agent->{'id_agente'},
+			'type' => 'numeric'
+		);
+
+		my %group = (
+			'data' => safe_output(get_db_value($dbh, 'select nombre from tgrupo where id_grupo = ?', $agent->{'id_grupo'})),
+			'type' => 'text'
+		);
+
+		my %os_version = (
+			'data' => $agent->{'os_version'},
+			'type' => 'text'
+		);
+
 		my %inventory_custom_fields = (
-			'OS' => safe_output(get_db_value($dbh, 'select name from tconfig_os where id_os = ?', $agent->{'id_os'})),
-			'IP Address' => safe_output($agent->{'direccion'}),
-			'URL Address' => safe_output($agent->{'url_address'}),
-			'ID Agent' => $agent->{'id_agente'},
-			'Group' => safe_output(get_db_value($dbh, 'select nombre from tgrupo where id_grupo = ?', $agent->{'id_grupo'})),
-			'OS Version' => $agent->{'os_version'}
+			'OS' => \%OS,
+			'IP Address' => \%ip_address,
+			'URL Address' => \%url_address,
+			'ID Agent' => \%id_agent,
+			'Group' => \%group,
+			'OS Version' => \%os_version
 		);
 
 		my %dataSend = (
@@ -1949,6 +1979,12 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 			'createWu' => $action->{'create_wu_integria'}
 		);
 
+		my $test = pandora_prepare_info_object_inventory_itsm($dbh);
+		# TODO: change to logger.
+		use Data::Dumper;
+		$Data::Dumper::SortKeys = 1;
+		print Dumper($test);
+
 		my $response = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/pandorafms/alert', $ITSM_token, \%dataSend);
 		if (!defined($response)){
 			return;
@@ -3854,7 +3890,7 @@ sub pandora_get_custom_fields ($) {
 sub pandora_get_agent_custom_field_data ($$) {
 	my ($dbh, $id_agent) = @_;
 
-	my @result = get_db_rows($dbh, 'select tagent_custom_fields.id_field, tagent_custom_fields.name, tagent_custom_data.id_agent, tagent_custom_data.description from tagent_custom_fields INNER JOIN tagent_custom_data ON tagent_custom_data.id_field = tagent_custom_fields.id_field where tagent_custom_data.id_agent = ?', $id_agent);
+	my @result = get_db_rows($dbh, 'select tagent_custom_fields.id_field, tagent_custom_fields.name, tagent_custom_data.id_agent, tagent_custom_data.description, tagent_custom_fields.is_password_type, tagent_custom_fields.is_link_enabled from tagent_custom_fields INNER JOIN tagent_custom_data ON tagent_custom_data.id_field = tagent_custom_fields.id_field where tagent_custom_data.id_agent = ?', $id_agent);
 
 	return \@result;
 }
@@ -3868,13 +3904,27 @@ sub pandora_get_custom_field_for_itsm ($$) {
 
 	my $agent_custom_field_data = pandora_get_agent_custom_field_data($dbh,$id_agent);
 	my %agent_custom_field_data_reducer = ();
+	my $type = 'text';
 	foreach my $data (@{$agent_custom_field_data}) {
-		$agent_custom_field_data_reducer{$data->{'name'}} = $data->{'description'};
+		if ($data->{'is_password_type'}) {
+			$type = 'password';
+		} elsif ($data->{'is_link_enabled'}) {
+			$type = 'link';
+		} else {
+			$type = 'text';
+		}
+
+		my %test = (
+			'data' => safe_output($data->{'description'}),
+			'type' => $type
+		);
+
+		$agent_custom_field_data_reducer{$data->{'name'}} = \%test;
 	}
 
 	my %result = ();
 	foreach my $custom_field (@{$custom_fields}) {
-		$result{safe_output($custom_field->{'name'})} = safe_output($agent_custom_field_data_reducer{$custom_field->{'name'}});
+		$result{safe_output($custom_field->{'name'})} = $agent_custom_field_data_reducer{$custom_field->{'name'}};
 	}
 
 	return \%result;

From a8a201cf19ac705eb42d77802661abc5495b7100 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Mon, 4 Sep 2023 16:47:01 +0200
Subject: [PATCH 025/116] Agents show events 24h switch checked default

---
 pandora_console/include/ajax/events.php             | 2 +-
 pandora_console/operation/agentes/status_events.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pandora_console/include/ajax/events.php b/pandora_console/include/ajax/events.php
index 7ccf17938b..ddf36ee912 100644
--- a/pandora_console/include/ajax/events.php
+++ b/pandora_console/include/ajax/events.php
@@ -2000,7 +2000,7 @@ if ($table_events) {
     include_once 'include/functions_graph.php';
 
     $id_agente = (int) get_parameter('id_agente');
-    $all_events_24h = (int) get_parameter('all_events_24h');
+    $all_events_24h = (int) get_parameter('all_events_24h', 1);
 
     // Fix: for tag functionality groups have to be all user_groups
     // (propagate ACL funct!).
diff --git a/pandora_console/operation/agentes/status_events.php b/pandora_console/operation/agentes/status_events.php
index 39b8b9edf0..30df1fb897 100755
--- a/pandora_console/operation/agentes/status_events.php
+++ b/pandora_console/operation/agentes/status_events.php
@@ -43,7 +43,7 @@ html_print_div(
 ?>
 <script type="text/javascript">
     $(document).ready(function() {
-        events_table(0);
+        events_table(1);
     });
 
     function events_table(all_events_24h){

From f8911bcf9c162f4367ff6f6d3d1efbfd77d3d306 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 6 Sep 2023 17:00:16 +0200
Subject: [PATCH 026/116] implemented os version management

---
 pandora_console/extras/mr/65.sql              |  12 +
 .../godmode/agentes/agent_manager.php         |  15 +
 .../godmode/agentes/configurar_agente.php     |   5 +
 .../reporting_builder.item_editor.php         | 118 +++++-
 .../godmode/reporting/reporting_builder.php   |  22 +
 pandora_console/godmode/setup/os.builder.php  | 194 ++++++++-
 pandora_console/godmode/setup/os.list.php     | 228 ++++++-----
 pandora_console/godmode/setup/os.php          | 214 +++-------
 .../godmode/setup/os_version.builder.php      | 213 ++++++++++
 .../godmode/setup/os_version.list.php         | 195 +++++++++
 pandora_console/godmode/setup/os_version.php  | 285 +++++++++++++
 pandora_console/images/os@svg.svg             |   7 +
 pandora_console/images/os_version@svg.svg     |  15 +
 pandora_console/include/ajax/os.php           | 376 ++++++++++++++++++
 pandora_console/include/chart_generator.php   |   2 +
 pandora_console/include/functions_agents.php  |  18 +-
 pandora_console/include/functions_html.php    |  43 +-
 .../include/functions_reporting.php           | 113 ++++++
 .../include/functions_reporting_html.php      | 121 ++++++
 pandora_console/include/functions_reports.php |   5 +
 .../operation/agentes/estado_agente.php       |  23 +-
 pandora_console/pandoradb.sql                 |  11 +
 pandora_console/pandoradb_data.sql            |  12 +
 pandora_server/lib/PandoraFMS/Core.pm         |  15 +-
 .../lib/PandoraFMS/DiscoveryServer.pm         |  31 +-
 pandora_server/util/pandora_manage.pl         |  19 +-
 26 files changed, 2044 insertions(+), 268 deletions(-)
 create mode 100644 pandora_console/godmode/setup/os_version.builder.php
 create mode 100644 pandora_console/godmode/setup/os_version.list.php
 create mode 100644 pandora_console/godmode/setup/os_version.php
 create mode 100644 pandora_console/images/os@svg.svg
 create mode 100644 pandora_console/images/os_version@svg.svg
 create mode 100644 pandora_console/include/ajax/os.php

diff --git a/pandora_console/extras/mr/65.sql b/pandora_console/extras/mr/65.sql
index 31e221f3b0..3f8d48a9ca 100644
--- a/pandora_console/extras/mr/65.sql
+++ b/pandora_console/extras/mr/65.sql
@@ -62,6 +62,14 @@ CREATE TABLE IF NOT EXISTS `tnetwork_usage_filter` (
 PRIMARY KEY (`id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
 
+CREATE TABLE IF NOT EXISTS `tconfig_os_version` (
+  `id_os_version` INT UNSIGNED NOT NULL AUTO_INCREMENT,
+  `product` TEXT,
+  `version` TEXT,
+  `end_of_support` VARCHAR(10) DEFAULT NULL,
+  PRIMARY KEY  (`id_os_version`)
+) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
+
 ALTER TABLE `tlayout`
 ADD COLUMN `grid_color` VARCHAR(45) NOT NULL DEFAULT '#cccccc' AFTER `maintenance_mode`,
 ADD COLUMN `grid_size` VARCHAR(45) NOT NULL DEFAULT '10' AFTER `grid_color`;
@@ -73,6 +81,10 @@ ADD COLUMN `grid_size` VARCHAR(45) NOT NULL DEFAULT '10' AFTER `grid_color`;
 
 DELETE FROM tconfig WHERE token = 'refr';
 
+INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES (1,'Windows.*','7.*','2020/01/14');
+INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES (2,'Cisco.*','IOS 3.4.3','2017/05/12');
+INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES (3,'Linux.*','Centos 7.*','2022/01/01');
+
 INSERT INTO `tmodule_inventory` (`id_module_inventory`, `id_os`, `name`, `description`, `interpreter`, `data_format`, `code`, `block_mode`,`script_mode`) VALUES (37,2,'CPU','CPU','','Brand;Clock;Model','',0,2);
 
 INSERT INTO `tmodule_inventory` (`id_module_inventory`, `id_os`, `name`, `description`, `interpreter`, `data_format`, `code`, `block_mode`,`script_mode`) VALUES (38,2,'RAM','RAM','','Size','',0,2);
diff --git a/pandora_console/godmode/agentes/agent_manager.php b/pandora_console/godmode/agentes/agent_manager.php
index cbe7858e9e..3b44e6b986 100644
--- a/pandora_console/godmode/agentes/agent_manager.php
+++ b/pandora_console/godmode/agentes/agent_manager.php
@@ -548,6 +548,21 @@ $tableAgent->data['os'][0] .= html_print_div(
     true
 );
 
+$tableAgent->data['caption_os_version'][0] = __('OS version');
+$tableAgent->rowclass['os_version'] = 'w540px';
+$tableAgent->data['os_version'][0] = html_print_input_text(
+    'os_version',
+    $os_version,
+    '',
+    16,
+    100,
+    true,
+    false,
+    false,
+    '',
+    'w540px'
+);
+
 $tableAgent->data['caption_server'][0] = __('Server');
 $tableAgent->rowclass['server'] = 'w540px';
 $tableAgent->data['server'][0] = html_print_select(
diff --git a/pandora_console/godmode/agentes/configurar_agente.php b/pandora_console/godmode/agentes/configurar_agente.php
index b07fb5ca4f..6b11b2c9c5 100644
--- a/pandora_console/godmode/agentes/configurar_agente.php
+++ b/pandora_console/godmode/agentes/configurar_agente.php
@@ -215,6 +215,7 @@ if ($create_agent) {
     $id_parent = (int) get_parameter_post('id_agent_parent');
     $server_name = (string) get_parameter_post('server_name');
     $id_os = (int) get_parameter_post('id_os');
+    $os_version = (string) get_parameter_post('os_version');
     $disabled = (int) get_parameter_post('disabled');
     $custom_id = (string) get_parameter_post('custom_id', '');
     $cascade_protection = (int) get_parameter_post('cascade_protection', 0);
@@ -281,6 +282,7 @@ if ($create_agent) {
                     'comentarios'               => $comentarios,
                     'modo'                      => $modo,
                     'id_os'                     => $id_os,
+                    'os_version'                => $os_version,
                     'disabled'                  => $disabled,
                     'cascade_protection'        => $cascade_protection,
                     'cascade_protection_module' => $cascade_protection_module,
@@ -996,6 +998,7 @@ if ($update_agent) {
     $modo = (int) get_parameter_post('modo', 0);
     // Mode: Learning, Normal or Autodisabled.
     $id_os = (int) get_parameter_post('id_os');
+    $os_version = (string) get_parameter_post('os_version');
     $disabled = (bool) get_parameter_post('disabled');
     $server_name = (string) get_parameter_post('server_name', '');
     $id_parent = (int) get_parameter_post('id_agent_parent');
@@ -1119,6 +1122,7 @@ if ($update_agent) {
             'disabled'                  => $disabled,
             'id_parent'                 => $id_parent,
             'id_os'                     => $id_os,
+            'os_version'                => $os_version,
             'modo'                      => $modo,
             'alias'                     => $alias,
             'alias_as_name'             => $alias_as_name,
@@ -1280,6 +1284,7 @@ if ($id_agente) {
     $server_name = $agent['server_name'];
     $modo = $agent['modo'];
     $id_os = $agent['id_os'];
+    $os_version = $agent['os_version'];
     $disabled = $agent['disabled'];
     $id_parent = $agent['id_parent'];
     $custom_id = $agent['custom_id'];
diff --git a/pandora_console/godmode/reporting/reporting_builder.item_editor.php b/pandora_console/godmode/reporting/reporting_builder.item_editor.php
index 397e533366..7b40d6cea8 100755
--- a/pandora_console/godmode/reporting/reporting_builder.item_editor.php
+++ b/pandora_console/godmode/reporting/reporting_builder.item_editor.php
@@ -870,6 +870,16 @@ switch ($action) {
                     $idAgentModule = $module;
                 break;
 
+                case 'end_of_life':
+                    $es = json_decode($item['external_source'], true);
+
+                    $text_os_version = $es['os_version'];
+                    $end_of_life_date = $es['end_of_life_date'];
+                    $os_selector = $es['os_selector'];
+                    $group = $es['group'];
+                    $recursion = $es['recursion'];
+                break;
+
                 case 'alert_report_actions':
                     $description = $item['description'];
                     $es = json_decode($item['external_source'], true);
@@ -1183,6 +1193,94 @@ $class = 'databox filters';
             </td>
         </tr>
 
+        <tr id="row_os_selector" class="datos">
+        <td class="bolder"><?php echo __('Operating system'); ?></td>
+            <td>
+                <?php
+                $os_list = db_get_all_rows_filter('tconfig_os', [], ['id_os', 'name']);
+
+                if ($os === false) {
+                    $os = [];
+                }
+
+                $result_select = [];
+
+                foreach ($os as $item) {
+                    $result_select[$item['id_os']] = $item['name'];
+                }
+
+                html_print_select(
+                    $os_list,
+                    'os_selector',
+                    $os_selector,
+                    ''
+                );
+                ?>
+            </td>
+        </tr>
+
+        <tr id="row_os_version_regexp" class="datos">
+            <td class="bolder">
+                <?php
+                echo __('Operating system version').ui_print_help_tip(
+                    __('Case insensitive regular expression for OS version. For example: Centos.* will match with the following OS versions: Centos 6.4, Centos 7'),
+                    true
+                );
+                ?>
+            </td>
+            <td>
+                <?php 
+                html_print_input_text(
+                    'text_os_version',
+                    $text_os_version,
+                    '',
+                    30,
+                    100,
+                    false
+                );
+                ?>
+            </td>
+        </tr>
+
+        <tr id="row_os_end_of_life"   class="datos">
+        <td class="bolder"><?php echo __('End of life'); ?></td>
+            <td colspan="6">
+            <?php
+            $end_of_life_date = (string) get_parameter(
+                'end_of_life_date',
+                date(DATE_FORMAT, $utimestamp)
+            );
+            $end_of_life_date = date(DATE_FORMAT, $result['date_from']);
+
+            $timeInputs = [];
+
+            $timeInputs[] = html_print_div(
+                [
+                    'id'      => 'end_of_life_date',
+                    'style'   => '',
+                    'content' => html_print_div(
+                        [
+                            'class'   => '',
+                            'content' => html_print_input_text(
+                                'end_of_life_date',
+                                $end_of_life_date,
+                                '',
+                                10,
+                                10,
+                                true
+                            ),
+                        ],
+                        true
+                    ),
+                ],
+                true
+            );
+
+            echo implode('', $timeInputs);
+            ?>
+            </td>
+        </tr>
+
         <tr id="row_agent_regexp" class="datos">
             <td class="bolder">
                 <?php
@@ -4097,6 +4195,8 @@ html_print_action_buttons($actionButtons, ['type' => 'form_action']);
 echo '</div>';
 echo '</form>';
 
+ui_require_css_file('datepicker');
+ui_require_jquery_file('ui.datepicker-'.get_user_language(), 'include/javascript/i18n/');
 ui_include_time_picker();
 ui_require_javascript_file('pandora');
 
@@ -5027,6 +5127,8 @@ $(document).ready (function () {
     chooseType();
     chooseSQLquery();
 
+    $("#text-end_of_life_date").datepicker({dateFormat: "<?php echo DATE_FORMAT_JS; ?>", showButtonPanel: true});
+
     $("#id_agents").change(agent_changed_by_multiple_agents);
 
     // Load selected modules by default
@@ -6291,7 +6393,11 @@ function addGeneralRow() {
 function loadGeneralAgents(agent_group) {
     var params = [];
 
-    var group = <?php echo $group; ?>;
+    var group = <?php echo $group ?? -1; ?>;
+    if (group < 0) {
+        return;
+    }
+    console.log("!!!!!!!!!!!!!!!!!!!!!!!!",group);
     group = agent_group || group;
 
     params.push("get_agents=1");
@@ -6557,6 +6663,9 @@ function chooseType() {
     $("#row_group_by").hide();
     $("#row_type_show").hide();
     $("#row_use_prefix_notation").hide();
+    $("#row_os_selector").hide();
+    $("#row_os_version_regexp").hide();
+    $("#row_os_end_of_life").hide();
 
     // SLA list default state.
     $("#sla_list").hide();
@@ -7137,6 +7246,13 @@ function chooseType() {
             });
             break;
 
+        case 'end_of_life':
+            $("#row_os_selector").show();
+            $("#row_os_version_regexp").show();
+            $("#row_group").show();
+            $("#row_os_end_of_life").show();
+            break;
+
         case 'inventory_changes':
             $("#row_description").show();
             $("#row_period").show();
diff --git a/pandora_console/godmode/reporting/reporting_builder.php b/pandora_console/godmode/reporting/reporting_builder.php
index 4e0c73da8e..aa3f9c94a8 100755
--- a/pandora_console/godmode/reporting/reporting_builder.php
+++ b/pandora_console/godmode/reporting/reporting_builder.php
@@ -1756,6 +1756,17 @@ switch ($action) {
                                 $good_format = true;
                             break;
 
+                            case 'end_of_life':
+                                $es['end_of_life_date'] = get_parameter('end_of_life_date');
+                                $es['os_selector'] = get_parameter('os_selector');
+                                $es['os_version'] = get_parameter('text_os_version', '');
+                                $es['group'] = get_parameter('combo_group', '');
+                                $es['recursion'] = get_parameter('recursion', 0);
+
+                                $values['external_source'] = json_encode($es);
+                                $good_format = true;
+                            break;
+
                             case 'alert_report_actions':
                                 $alert_templates_to_report = get_parameter('alert_templates');
                                 $alert_actions_to_report = get_parameter('alert_actions');
@@ -2699,6 +2710,17 @@ switch ($action) {
                                 $good_format = true;
                             break;
 
+                            case 'end_of_life':
+                                $es['end_of_life_date'] = get_parameter('end_of_life_date');
+                                $es['os_selector'] = get_parameter('os_selector');
+                                $es['os_version'] = get_parameter('text_os_version', '');
+                                $es['group'] = get_parameter('combo_group', '');
+                                $es['recursion'] = get_parameter('recursion', 0);
+
+                                $values['external_source'] = json_encode($es);
+                                $good_format = true;
+                            break;
+
                             case 'alert_report_actions':
                                 $alert_templates_to_report = get_parameter('alert_templates');
                                 $alert_actions_to_report = get_parameter('alert_actions');
diff --git a/pandora_console/godmode/setup/os.builder.php b/pandora_console/godmode/setup/os.builder.php
index afe3982d8c..d8a2f47d00 100644
--- a/pandora_console/godmode/setup/os.builder.php
+++ b/pandora_console/godmode/setup/os.builder.php
@@ -40,6 +40,191 @@ if (! check_acl($config['id_user'], 0, 'PM') && ! is_user_admin($config['id_user
     return;
 }
 
+if ($idOS > 0) {
+    $os = db_get_row_filter('tconfig_os', ['id_os' => $idOS]);
+    $name = $os['name'];
+    $description = $os['description'];
+    $icon = $os['icon_name'];
+} else {
+    $name = io_safe_input(strip_tags(io_safe_output((string) get_parameter('name'))));
+    $description = io_safe_input(strip_tags(io_safe_output((string) get_parameter('description'))));
+    $icon = get_parameter('icon', 0);
+}
+
+$icon_upload = get_parameter('icon_upload', null);
+
+$message = '';
+if ($is_management_allowed === true) {
+    switch ($action) {
+        case 'edit':
+            if ($idOS > 0) {
+                $actionHidden = 'update';
+                $textButton = __('Update');
+                $classButton = ['icon' => 'wand'];
+            } else {
+                $actionHidden = 'save';
+                $textButton = __('Create');
+                $classButton = ['icon' => 'next'];
+            }
+        break;
+
+        case 'save':
+            if ($icon_upload !== null && $icon_upload['name'] !== '') {
+                if (isset($_FILES['icon_upload']) === true) {
+                    $file_name = $_FILES['icon_upload']['name'];
+                    $file_tmp = $_FILES['icon_upload']['tmp_name'];
+                    $file_type = $_FILES['icon_upload']['type'];
+                    $file_ext = strtolower(end(explode('.', $_FILES['icon_upload']['name'])));
+
+                    $allowed_extensions = [
+                        'jpeg',
+                        'jpg',
+                        'png',
+                        'svg',
+                    ];
+
+                    $tab = 'manage_os';
+
+                    if (in_array($file_ext, $allowed_extensions) === false) {
+                        $message = 9;
+                    } else {
+                        $message = 8;
+                        move_uploaded_file($file_tmp, $config['homedir'].'/images/os_icons/'.$file_name);
+                    }
+                }
+            } else {
+                $values = [];
+                $values['name'] = $name;
+                $values['description'] = $description;
+
+                if (($icon !== 0) && ($icon != '')) {
+                    $values['icon_name'] = $icon;
+                }
+
+                $resultOrId = false;
+                if ($name != '') {
+                    $resultOrId = db_process_sql_insert('tconfig_os', $values);
+                }
+
+                if ($resultOrId === false) {
+                    $message = 2;
+                    $tab = 'builder';
+                    $actionHidden = 'save';
+                    $textButton = __('Create');
+                    $classButton = ['icon' => 'wand'];
+                } else {
+                    $tab = 'manage_os';
+                    $message = 1;
+                }
+            }
+
+            if (is_metaconsole() === true) {
+                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&tab2=list&message='.$message);
+            } else {
+                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
+            }
+        break;
+
+        case 'update':
+            if ($icon_upload !== null && $icon_upload['name'] !== '') {
+                if (isset($_FILES['icon_upload']) === true) {
+                    $file_name = $_FILES['icon_upload']['name'];
+                    $file_tmp = $_FILES['icon_upload']['tmp_name'];
+                    $file_type = $_FILES['icon_upload']['type'];
+                    $file_ext = strtolower(end(explode('.', $_FILES['icon_upload']['name'])));
+
+                    $allowed_extensions = [
+                        'jpeg',
+                        'jpg',
+                        'png',
+                        'svg',
+                    ];
+
+                    $tab = 'manage_os';
+
+                    if (in_array($file_ext, $allowed_extensions) === false) {
+                        $message = 9;
+                    } else {
+                        $message = 8;
+                        move_uploaded_file($file_tmp, $config['homedir'].'/images/os_icons/'.$file_name);
+                    }
+                }
+            } else {
+                $name = io_safe_input(strip_tags(io_safe_output((string) get_parameter('name'))));
+                $description = io_safe_input(strip_tags(io_safe_output((string) get_parameter('description'))));
+                $icon = get_parameter('icon', 0);
+
+                $values = [];
+                $values['name'] = $name;
+                $values['description'] = $description;
+                // Only for Metaconsole. Save the previous name for synchronizing.
+                if (is_metaconsole() === true) {
+                    $values['previous_name'] = db_get_value('name', 'tconfig_os', 'id_os', $idOS);
+                }
+
+                if (($icon !== 0) && ($icon != '')) {
+                    $values['icon_name'] = $icon;
+                }
+
+                $result = false;
+                if ($name != '') {
+                    $result = db_process_sql_update('tconfig_os', $values, ['id_os' => $idOS]);
+                }
+
+                if ($result !== false) {
+                    $message = 3;
+                    $tab = 'manage_os';
+                } else {
+                    $message = 4;
+                    $tab = 'builder';
+                    $os = db_get_row_filter('tconfig_os', ['id_os' => $idOS]);
+                    $name = $os['name'];
+                }
+
+                $actionHidden = 'update';
+                $textButton = __('Update');
+                $classButton = ['icon' => 'wand'];
+            }
+
+            if (is_metaconsole() === true) {
+                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&tab2='.$tab.'&message='.$message);
+            } else {
+                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
+            }
+        break;
+
+        case 'delete':
+            $sql = 'SELECT COUNT(id_os) AS count FROM tagente WHERE id_os = '.$idOS;
+            $count = db_get_all_rows_sql($sql);
+            $count = $count[0]['count'];
+
+            if ($count > 0) {
+                $message = 5;
+            } else {
+                $result = (bool) db_process_sql_delete('tconfig_os', ['id_os' => $idOS]);
+                if ($result) {
+                    $message = 6;
+                } else {
+                    $message = 7;
+                }
+            }
+
+            if (is_metaconsole() === true) {
+                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=list&tab2='.$tab.'&message='.$message);
+            } else {
+                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
+            }
+        break;
+
+        default:
+        case 'new':
+            $actionHidden = 'save';
+            $textButton = __('Create');
+            $classButton = ['icon' => 'next'];
+        break;
+    }
+}
+
 $icons = get_list_os_icons_dir();
 
 $iconData = [];
@@ -62,12 +247,11 @@ $iconData[] = html_print_div(
     true
 );
 
-echo '<form id="form_setup" method="post">';
+echo '<form id="form_setup" method="post" enctype="multipart/form-data">';
 $table = new stdClass();
 $table->width = '100%';
 $table->class = 'databox filter-table-adv';
 
-// $table->style[0] = 'width: 15%';
 $table->data[0][] = html_print_label_input_block(
     __('Name'),
     html_print_input_text('name', $name, __('Name'), 20, 30, true, false, false, '', 'w250px')
@@ -89,6 +273,11 @@ $table->data[1][] = html_print_label_input_block(
     html_print_textarea('description', 5, 20, $description, '', true, 'w250px')
 );
 
+$table->data[1][] = html_print_label_input_block(
+    '',
+    html_print_input_file('icon_upload', true, ['caption' => __('Upload icon')], 'form_setup')
+);
+
 html_print_table($table);
 
 html_print_input_hidden('id_os', $idOS);
@@ -101,7 +290,6 @@ html_print_action_buttons(
 
 echo '</form>';
 
-
 function get_list_os_icons_dir()
 {
     global $config;
diff --git a/pandora_console/godmode/setup/os.list.php b/pandora_console/godmode/setup/os.list.php
index ddf2145212..1ce9756cc0 100644
--- a/pandora_console/godmode/setup/os.list.php
+++ b/pandora_console/godmode/setup/os.list.php
@@ -45,7 +45,7 @@ if (is_management_allowed() === false) {
     $is_management_allowed = false;
     if (is_metaconsole() === false) {
         $url = '<a target="_blank" href="'.ui_get_meta_url(
-            'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&tab2=list&pure='.(int) $config['pure']
+            'index.php?sec=advanced&sec2=advanced/component_management&tab=list&tab2=list&pure='.(int) $config['pure']
         ).'">'.__('metaconsole').'</a>';
     } else {
         $url = __('any node');
@@ -59,107 +59,68 @@ if (is_management_allowed() === false) {
     );
 }
 
-$table = new stdClass();
-$table->class = 'info_table';
-$table->head[0] = __('ID');
-$table->head[1] = __('Icon');
-$table->head[2] = __('Name');
-$table->head[3] = __('Description');
-if ($is_management_allowed === true) {
-    $table->head[4] = __('Actions');
-}
+// Datatables list.
+try {
+    $columns = [
+        'id_os',
+        'icon_img',
+        'name',
+        'description',
+        'options',
+    ];
 
-if ($is_management_allowed === true) {
-    $table->align[4] = 'center';
-}
+    $column_names = [
+        [
+            'text'  => __('ID'),
+            'class' => 'w50px table_action_buttons',
+        ],
+        [
+            'text'  => __('Icon'),
+            'class' => 'w10px table_action_buttons',
+        ],
+        __('Name'),
+        __('Description'),
+        [
+            'text'  => __('Options'),
+            'class' => 'w20px table_action_buttons',
+        ],
+    ];
 
-$table->size[0] = '5%';
-if ($is_management_allowed === true) {
-    $table->size[4] = '20px';
-}
-
-// Prepare pagination.
-$offset = (int) get_parameter('offset');
-$limit = $config['block_size'];
-$count_osList = db_get_value('count(*)', 'tconfig_os');
-
-$osList = db_get_all_rows_filter(
-    'tconfig_os',
-    [
-        'offset' => $offset,
-        'limit'  => $limit,
-    ]
-);
-
-if ($osList === false) {
-    $osList = [];
-}
-
-$table->data = [];
-foreach ($osList as $os) {
-    $data = [];
-    $data[] = $os['id_os'];
-    $data[] = ui_print_os_icon($os['id_os'], false, true);
-    if ($is_management_allowed === true) {
-        if (is_metaconsole() === true) {
-            $osNameUrl = 'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&action=edit&tab2=builder&id_os='.$os['id_os'];
-        } else {
-            $osNameUrl = 'index.php?sec=gsetup&sec2=godmode/setup/os&action=edit&tab=builder&id_os='.$os['id_os'];
-        }
-
-        $data[] = html_print_anchor(
-            [
-                'href'    => $osNameUrl,
-                'content' => io_safe_output($os['name']),
+    $tableId = 'os_table';
+    // Load datatables user interface.
+    ui_print_datatable(
+        [
+            'id'                  => $tableId,
+            'class'               => 'info_table',
+            'style'               => 'width: 100%',
+            'columns'             => $columns,
+            'column_names'        => $column_names,
+            'ajax_url'            => 'include/ajax/os',
+            'ajax_data'           => ['method' => 'drawOSTable'],
+            'ajax_postprocess'    => 'process_datatables_item(item)',
+            'no_sortable_columns' => [-1, 1],
+            'order'               => [
+                'field'     => 'id',
+                'direction' => 'asc',
             ],
-            true
-        );
-    } else {
-        $data[] = io_safe_output($os['name']);
-    }
-
-    $data[] = ui_print_truncate_text(io_safe_output($os['description']), 'description', true, true);
-
-    if ($is_management_allowed === true) {
-        $table->cellclass[][4] = 'table_action_buttons';
-        if ($os['id_os'] > 16) {
-            if (is_metaconsole() === true) {
-                $hrefDelete = 'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&action=delete&tab2=list&id_os='.$os['id_os'];
-            } else {
-                $hrefDelete = 'index.php?sec=gsetup&sec2=godmode/setup/os&action=delete&tab=list&id_os='.$os['id_os'];
-            }
-
-            $data[] = html_print_anchor(
-                [
-                    'href'    => $hrefDelete,
-                    'content' => html_print_image('images/delete.svg', true, ['class' => 'main_menu_icon invert_filter']),
+            'search_button_class' => 'sub filter float-right',
+            'form'                => [
+                'inputs' => [
+                    [
+                        'label' => __('Free search'),
+                        'type'  => 'text',
+                        'class' => 'w25p',
+                        'id'    => 'free_search',
+                        'name'  => 'free_search',
+                    ],
                 ],
-                true
-            );
-        } else {
-            // The original icons of pandora don't delete.
-            $data[] = '';
-        }
-    }
-
-    $table->data[] = $data;
-}
-
-$tablePagination = '';
-if (isset($data) === true) {
-    html_print_table($table);
-    $tablePagination = ui_pagination(
-        $count_osList,
-        ui_get_url_refresh(['message' => false]),
-        $offset,
-        0,
-        true,
-        'offset',
-        false,
-        ''
+            ],
+            'filter_main_class'   => 'box-flat white_table_graph fixed_filter_bar',
+            'dom_elements'        => 'lftpB',
+        ]
     );
-} else {
-    ui_print_info_message(['no_close' => true, 'message' => __('There are no defined operating systems') ]);
+} catch (Exception $e) {
+    echo $e->getMessage();
 }
 
 $buttons = '';
@@ -183,3 +144,76 @@ html_print_action_buttons(
         'right_content' => $tablePagination,
     ]
 );
+
+echo '<div id="aux" class="invisible"></div>';
+
+echo '<form method="post" action="index.php?sec=gagente&sec2=godmode/setup/os&tab=manage_os&action=edit">';
+
+html_print_action_buttons(
+    html_print_submit_button(__('Create OS'), 'update_button', false, ['icon' => 'next'], true),
+    ['type' => 'form_action']
+);
+
+echo '</form>';
+
+?>
+<script language="javascript" type="text/javascript">
+    function process_datatables_item(item) {
+        item.options = '<div class="table_action_buttons">';
+        if (item.enable_delete === true) {
+            var delete_id = item.id_os;
+            item.options += '<a href="javascript:" onclick="delete_os(\'';
+            item.options += delete_id;
+            item.options += '\')" ><?php echo html_print_image('images/delete.svg', true, ['title' => __('Delete'), 'class' => 'main_menu_icon invert_filter']); ?></a>';
+        }
+        item.options += '</div>';
+    }
+
+    /**
+     * Delete selected OS
+     */
+    function delete_os(id) {
+        $('#aux').empty();
+        $('#aux').text('<?php echo __('Are you sure?'); ?>');
+        $('#aux').dialog({
+            title: '<?php echo __('Delete'); ?> ' + id,
+            buttons: [
+                {
+                    class: 'ui-widget ui-state-default ui-corner-all ui-button-text-only sub upd submit-cancel',
+                    text: '<?php echo __('Cancel'); ?>',
+                    click: function(e) {
+                        $(this).dialog('close');
+                    }
+                },
+                {
+                    text: 'Delete',
+                    class: 'ui-widget ui-state-default ui-corner-all ui-button-text-only sub ok submit-next',
+                    click: function(e) {
+                        $.ajax({
+                            method: 'post',
+                            url: '<?php echo ui_get_full_url('ajax.php', false, false, false); ?>',
+                            data: {
+                                page: 'include/ajax/os',
+                                method: 'deleteOS',
+                                id_os: id
+                            },
+                            datatype: "json",
+                            success: function (data) {
+                                var r = JSON.parse(data);
+                                if (r.deleted === false) {
+                                    $('#aux').text('<?php echo __('Not deleted. Error deleting data'); ?>');
+                                } else {
+                                    $('#aux').dialog('close');
+                                    location.reload();
+                                }
+                            },
+                            error: function(e) {
+                                $('#aux').text('<?php echo __('Not deleted. Error deleting data'); ?>');
+                            }
+                        });
+                    }
+                }
+            ]
+        });
+    }
+</script>
diff --git a/pandora_console/godmode/setup/os.php b/pandora_console/godmode/setup/os.php
index 539189f88d..99402ff30a 100644
--- a/pandora_console/godmode/setup/os.php
+++ b/pandora_console/godmode/setup/os.php
@@ -40,24 +40,13 @@ if (! check_acl($config['id_user'], 0, 'PM') && ! is_user_admin($config['id_user
     return;
 }
 
-$action = get_parameter('action', 'new');
+$action = get_parameter('action', '');
 $idOS = get_parameter('id_os', 0);
 $id_message = get_parameter('message', 0);
 if (is_metaconsole() === true) {
     $tab = get_parameter('tab2', 'list');
 } else {
-    $tab = get_parameter('tab', 'list');
-}
-
-if ($idOS) {
-    $os = db_get_row_filter('tconfig_os', ['id_os' => $idOS]);
-    $name = $os['name'];
-    $description = $os['description'];
-    $icon = $os['icon_name'];
-} else {
-    $name = io_safe_input(strip_tags(io_safe_output((string) get_parameter('name'))));
-    $description = io_safe_input(strip_tags(io_safe_output((string) get_parameter('description'))));
-    $icon = get_parameter('icon', 0);
+    $tab = get_parameter('tab', 'manage_os');
 }
 
 $is_management_allowed = true;
@@ -65,150 +54,60 @@ if (is_management_allowed() === false) {
     $is_management_allowed = false;
 }
 
-$message = '';
-if ($is_management_allowed === true) {
-    switch ($action) {
-        case 'edit':
-            $actionHidden = 'update';
-            $textButton = __('Update');
-            $classButton = ['icon' => 'wand'];
-        break;
-
-        case 'save':
-            $values = [];
-            $values['name'] = $name;
-            $values['description'] = $description;
-
-            if (($icon !== 0) && ($icon != '')) {
-                $values['icon_name'] = $icon;
-            }
-
-            $resultOrId = false;
-            if ($name != '') {
-                $resultOrId = db_process_sql_insert('tconfig_os', $values);
-            }
-
-            if ($resultOrId === false) {
-                $message = 2;
-                $tab = 'builder';
-                $actionHidden = 'save';
-                $textButton = __('Create');
-                $classButton = ['icon' => 'wand'];
-            } else {
-                $tab = 'list';
-                $message = 1;
-            }
-
-            if (is_metaconsole() === true) {
-                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&tab2='.$tab.'&message='.$message);
-            } else {
-                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
-            }
-        break;
-
-        case 'update':
-            $name = io_safe_input(strip_tags(io_safe_output((string) get_parameter('name'))));
-            $description = io_safe_input(strip_tags(io_safe_output((string) get_parameter('description'))));
-            $icon = get_parameter('icon', 0);
-
-            $values = [];
-            $values['name'] = $name;
-            $values['description'] = $description;
-            // Only for Metaconsole. Save the previous name for synchronizing.
-            if (is_metaconsole() === true) {
-                $values['previous_name'] = db_get_value('name', 'tconfig_os', 'id_os', $idOS);
-            }
-
-            if (($icon !== 0) && ($icon != '')) {
-                $values['icon_name'] = $icon;
-            }
-
-            $result = false;
-            if ($name != '') {
-                $result = db_process_sql_update('tconfig_os', $values, ['id_os' => $idOS]);
-            }
-
-            if ($result !== false) {
-                $message = 3;
-                $tab = 'list';
-            } else {
-                $message = 4;
-                $tab = 'builder';
-                $os = db_get_row_filter('tconfig_os', ['id_os' => $idOS]);
-                $name = $os['name'];
-            }
-
-            $actionHidden = 'update';
-            $textButton = __('Update');
-            $classButton = ['icon' => 'wand'];
-            if (is_metaconsole() === true) {
-                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&tab2='.$tab.'&message='.$message);
-            } else {
-                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
-            }
-        break;
-
-        case 'delete':
-            $sql = 'SELECT COUNT(id_os) AS count FROM tagente WHERE id_os = '.$idOS;
-            $count = db_get_all_rows_sql($sql);
-            $count = $count[0]['count'];
-
-            if ($count > 0) {
-                $message = 5;
-            } else {
-                $result = (bool) db_process_sql_delete('tconfig_os', ['id_os' => $idOS]);
-                if ($result) {
-                    $message = 6;
-                } else {
-                    $message = 7;
-                }
-            }
-
-            if (is_metaconsole() === true) {
-                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&tab2='.$tab.'&message='.$message);
-            } else {
-                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
-            }
-        break;
-
-        default:
-        case 'new':
-            $actionHidden = 'save';
-            $textButton = __('Create');
-            $classButton = ['icon' => 'next'];
-        break;
-    }
-}
-
 $buttons = [];
-$buttons['list'] = [
+
+$buttons['manage_os'] = [
     'active' => false,
-    'text'   => '<a href="index.php?sec=gsetup&sec2=godmode/setup/os&tab=list">'.html_print_image(
-        'images/logs@svg.svg',
+    'text'   => '<a href="index.php?sec=gsetup&sec2=godmode/setup/os&tab=manage_os">'.html_print_image(
+        'images/os@svg.svg',
         true,
         [
-            'title' => __('List OS'),
+            'title' => __('Manage OS types'),
+            'class' => 'invert_filter main_menu_icon',
+        ]
+    ).'</a>',
+];
+
+$buttons['manage_version'] = [
+    'active' => false,
+    'text'   => '<a href="index.php?sec=gsetup&sec2=godmode/setup/os&tab=manage_version">'.html_print_image(
+        'images/os_version@svg.svg',
+        true,
+        [
+            'title' => __('Manage version expiration dates'),
             'class' => 'invert_filter main_menu_icon',
         ]
     ).'</a>',
 ];
-if ($is_management_allowed === true) {
-    $buttons['builder'] = [
-        'active' => false,
-        'text'   => '<a href="index.php?sec=gsetup&sec2=godmode/setup/os&tab=builder">'.html_print_image(
-            'images/edit.svg',
-            true,
-            [
-                'title' => __('Builder OS'),
-                'class' => 'invert_filter main_menu_icon',
-            ]
-        ).'</a>',
-    ];
-}
 
 $buttons[$tab]['active'] = true;
 
-$headerTitle = ($tab === 'builder') ? __('Edit OS') : __('List of Operating Systems');
+switch ($tab) {
+    case 'builder':
+        $headerTitle = __('Edit OS');
+    break;
+
+    case 'manage_os':
+    case 'list':
+        if ($action === 'edit') {
+            $headerTitle = __('Edit OS');
+        } else {
+            $headerTitle = __('List of Operating Systems');
+        }
+    break;
+
+    case 'manage_version':
+        if ($action === 'edit') {
+            $headerTitle = __('Edit OS version expiration date');
+        } else {
+            $headerTitle = __('List of version expiration dates');
+        }
+    break;
+
+    default:
+        // Default.
+    break;
+}
 
 if (is_metaconsole() === false) {
     // Header.
@@ -262,6 +161,14 @@ if (empty($id_message) === false) {
             echo ui_print_error_message(__('Error deleting'), '', true);
         break;
 
+        case 8:
+            echo ui_print_success_message(__('Icon successfuly uploaded'), '', true);
+        break;
+
+        case 9:
+            echo ui_print_error_message(__('File must be of type JPG, JPEG, PNG or SVG'), '', true);
+        break;
+
         default:
             // Default.
         break;
@@ -269,12 +176,21 @@ if (empty($id_message) === false) {
 }
 
 switch ($tab) {
+    case 'manage_os':
     case 'list':
-        include_once $config['homedir'].'/godmode/setup/os.list.php';
+        if (in_array($action, ['edit', 'save', 'update']) && is_management_allowed() === true) {
+            include_once $config['homedir'].'/godmode/setup/os.builder.php';
+        } else {
+            include_once $config['homedir'].'/godmode/setup/os.list.php';
+        }
     break;
 
-    case 'builder':
-        include_once $config['homedir'].'/godmode/setup/os.builder.php';
+    case 'manage_version':
+        if (in_array($action, ['edit', 'save', 'update']) && is_management_allowed() === true) {
+            include_once $config['homedir'].'/godmode/setup/os_version.builder.php';
+        } else {
+            include_once $config['homedir'].'/godmode/setup/os_version.list.php';
+        }
     break;
 
     default:
diff --git a/pandora_console/godmode/setup/os_version.builder.php b/pandora_console/godmode/setup/os_version.builder.php
new file mode 100644
index 0000000000..89e0092085
--- /dev/null
+++ b/pandora_console/godmode/setup/os_version.builder.php
@@ -0,0 +1,213 @@
+<?php
+/**
+ * OS Builder
+ *
+ * @category   Os
+ * @package    Pandora FMS
+ * @subpackage Community
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+// Load global vars.
+global $config;
+
+check_login();
+
+if (! check_acl($config['id_user'], 0, 'PM') && ! is_user_admin($config['id_user'])) {
+    db_pandora_audit(
+        AUDIT_LOG_ACL_VIOLATION,
+        'Trying to access Setup Management'
+    );
+    include 'general/noaccess.php';
+    return;
+}
+
+ui_require_css_file('datepicker');
+ui_require_jquery_file('ui.datepicker-'.get_user_language(), 'include/javascript/i18n/');
+ui_include_time_picker();
+ui_require_javascript_file('pandora');
+
+if ($idOS > 0) {
+    $os_version = db_get_row_filter('tconfig_os_version', ['id_os_version' => $idOS]);
+    $product = $os_version['product'];
+    $version = $os_version['version'];
+    $end_of_life_date = $os_version['end_of_support'];
+} else {
+    $product = io_safe_input(strip_tags(io_safe_output((string) get_parameter('product'))));
+    $version = io_safe_input(strip_tags(io_safe_output((string) get_parameter('version'))));
+    $end_of_life_date = get_parameter('end_of_life_date', date("Y/m/d"));
+}
+
+$message = '';
+if ($is_management_allowed === true) {
+    switch ($action) {
+        case 'edit':
+            if ($idOS > 0) {
+                $actionHidden = 'update';
+                $textButton = __('Update');
+                $classButton = ['icon' => 'wand'];
+            } else {
+                $actionHidden = 'save';
+                $textButton = __('Create');
+                $classButton = ['icon' => 'next'];
+            }
+        break;
+
+        case 'save':
+            $values = [];
+            // Product and version must be stored with no entities to be able to use REGEXP in queries.
+            // CAREFUL! output of these fields must be encoded to avoid scripting vulnerabilities.
+            $values['product'] = io_safe_output($product);
+            $values['version'] = io_safe_output($version);
+            $values['end_of_support'] = $end_of_life_date;
+
+            $result = db_process_sql_insert('tconfig_os_version', $values);
+
+            if ($result === false) {
+                $message = 2;
+            } else {
+                $message = 1;
+            }
+
+            $tab = 'manage_version';
+
+            header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
+        break;
+
+        case 'update':
+            $product = io_safe_output(get_parameter('product'));
+            $version = io_safe_output(get_parameter('version'));
+            $end_of_life_date = get_parameter('end_of_life_date', 0);
+            $values = [];
+            $values['product'] = $product;
+            $values['version'] = $version;
+            $values['end_of_support'] = $end_of_life_date;
+            hd($values, true);
+            hd($idOS, true);
+            $result = db_process_sql_update('tconfig_os_version', $values, ['id_os_version' => $idOS]);
+
+            if ($result === false) {
+                $message = 4;
+            } else {
+                $message = 3;
+            }
+
+            $tab = 'manage_version';
+
+            header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
+        break;
+
+        case 'delete':
+            $sql = 'SELECT COUNT(id_os) AS count FROM tagente WHERE id_os = '.$idOS;
+            $count = db_get_all_rows_sql($sql);
+            $count = $count[0]['count'];
+
+            if ($count > 0) {
+                $message = 5;
+            } else {
+                $result = (bool) db_process_sql_delete('tconfig_os', ['id_os' => $idOS]);
+                if ($result) {
+                    $message = 6;
+                } else {
+                    $message = 7;
+                }
+            }
+
+            if (is_metaconsole() === true) {
+                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=list&tab2='.$tab.'&message='.$message);
+            } else {
+                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
+            }
+        break;
+
+        default:
+        case 'new':
+            $actionHidden = 'save';
+            $textButton = __('Create');
+            $classButton = ['icon' => 'next'];
+        break;
+    }
+}
+
+echo '<form id="form_setup" method="post">';
+$table = new stdClass();
+$table->width = '100%';
+$table->class = 'databox filter-table-adv';
+
+// $table->style[0] = 'width: 15%';
+$table->data[0][] = html_print_label_input_block(
+    __('Product'),
+    html_print_input_text('product', io_safe_input($product), __('Product'), 20, 300, true, false, false, '', 'w250px')
+);
+
+$table->data[0][] = html_print_label_input_block(
+    __('Version'),
+    html_print_input_text('version', io_safe_input($version), __('Version'), 20, 300, true, false, false, '', 'w250px')
+);
+
+$timeInputs = [];
+
+$timeInputs[] = html_print_div(
+    [
+        'id'      => 'end_of_life_date',
+        'style'   => '',
+        'content' => html_print_div(
+            [
+                'class'   => '',
+                'content' => html_print_input_text(
+                    'end_of_life_date',
+                    $end_of_life_date,
+                    '',
+                    10,
+                    10,
+                    true
+                ),
+            ],
+            true
+        ),
+    ],
+    true
+);
+
+$table->data[1][] = html_print_label_input_block(
+    __('End of life date'),
+    implode('', $timeInputs)
+);
+
+html_print_table($table);
+
+html_print_input_hidden('id_os', $idOS);
+html_print_input_hidden('action', $actionHidden);
+
+html_print_action_buttons(
+    html_print_submit_button($textButton, 'update_button', false, $classButton, true),
+    ['type' => 'form_action']
+);
+
+echo '</form>';
+
+?>
+<script language="javascript" type="text/javascript">
+$(document).ready (function () {
+    $("#text-end_of_life_date").datepicker({dateFormat: "<?php echo DATE_FORMAT_JS; ?>", showButtonPanel: true});
+
+});
+</script>
\ No newline at end of file
diff --git a/pandora_console/godmode/setup/os_version.list.php b/pandora_console/godmode/setup/os_version.list.php
new file mode 100644
index 0000000000..eac41fae71
--- /dev/null
+++ b/pandora_console/godmode/setup/os_version.list.php
@@ -0,0 +1,195 @@
+<?php
+/**
+ * Version expiration date editor
+ *
+ * @category   Os
+ * @package    Pandora FMS
+ * @subpackage Community
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+// Load global vars.
+global $config;
+
+check_login();
+
+if (! check_acl($config['id_user'], 0, 'PM') && ! is_user_admin($config['id_user'])) {
+    db_pandora_audit(
+        AUDIT_LOG_ACL_VIOLATION,
+        'Trying to access Setup Management'
+    );
+    include 'general/noaccess.php';
+    return;
+}
+
+// Datatables list.
+try {
+    $columns = [
+        'product',
+        'version',
+        'end_of_support',
+        'options',
+    ];
+
+    $column_names = [
+        __('Product'),
+        __('Version'),
+        __('End of support date'),
+        [
+            'text'  => __('Options'),
+            'class' => 'w100px table_action_buttons',
+        ],
+    ];
+
+    $tableId = 'os_version_table';
+    // Load datatables user interface.
+    ui_print_datatable(
+        [
+            'id'                  => $tableId,
+            'class'               => 'info_table',
+            'style'               => 'width: 100%',
+            'columns'             => $columns,
+            'column_names'        => $column_names,
+            'ajax_url'            => 'include/ajax/os',
+            'ajax_data'           => ['method' => 'drawOSVersionTable'],
+            'ajax_postprocess'    => 'process_datatables_item(item)',
+            'no_sortable_columns' => [-1],
+            'order'               => [
+                'field'     => 'id',
+                'direction' => 'asc',
+            ],
+            'search_button_class' => 'sub filter float-right',
+            'form'                => [
+                'inputs' => [
+                    [
+                        'label' => __('Free search'),
+                        'type'  => 'text',
+                        'class' => 'w25p',
+                        'id'    => 'free_search',
+                        'name'  => 'free_search',
+                    ],
+                ],
+            ],
+            'filter_main_class'   => 'box-flat white_table_graph fixed_filter_bar',
+            'dom_elements'        => 'lftpB',
+        ]
+    );
+} catch (Exception $e) {
+    echo $e->getMessage();
+}
+
+echo '<div id="aux" class="invisible"></div>';
+
+echo '<form method="post" action="index.php?sec=gagente&sec2=godmode/setup/os&tab=manage_version&action=edit">';
+
+html_print_action_buttons(
+    html_print_submit_button(__('Create OS version'), 'update_button', false, ['icon' => 'next'], true),
+    ['type' => 'form_action']
+);
+
+echo '</form>';
+
+echo '<form id="redirect-form" method="post" action="index.php?sec=view&sec2=operation/agentes/estado_agente">';
+
+html_print_input_hidden('os_version_regex', '');
+
+echo '</form>';
+
+?>
+
+<script language="javascript" type="text/javascript">
+    function process_datatables_item(item) {
+        id = item.id_os_version;
+
+        idrow = '<b><a href="javascript:" onclick="show_form(\'';
+        idrow += item.id_os_version;
+        idrow += '\')" >'+item.id_os_version+'</a></b>';
+        item.id_os_version = idrow;
+        item.options = '<div class="table_action_buttons">';
+        item.options += '<a href="index.php?sec=gagente&amp;sec2=godmode/setup/os&amp;tab=manage_version&amp;action=edit&amp;id_os=';
+        item.options += id;
+        item.options += '" ><?php echo html_print_image('images/edit.svg', true, ['title' => __('Edit'), 'class' => 'main_menu_icon invert_filter']); ?></a>';
+
+        item.options += '<a href="javascript:" onclick="redirect_to_agents_by_version(\'';
+        item.options += item.version;
+        item.options += '\')" ><?php echo html_print_image('images/agents.svg', true, ['title' => __('Show agents'), 'class' => 'main_menu_icon invert_filter']); ?></a>';
+
+        item.options += '<a href="javascript:" onclick="delete_os_version(\'';
+        item.options += id;
+        item.options += '\')" ><?php echo html_print_image('images/delete.svg', true, ['title' => __('Delete'), 'class' => 'main_menu_icon invert_filter']); ?></a>';
+        item.options += '</div>';
+
+        item.options += '<form method="post" action="?sec=view&sec2=operation/agentes/estado_agente"></form>';
+    }
+
+    function redirect_to_agents_by_version(version) {
+        $('#hidden-os_version_regex').val(version);
+        $('#redirect-form').submit();
+    }
+
+    /**
+     * Delete selected OS version
+     */
+    function delete_os_version(id) {
+        $('#aux').empty();
+        $('#aux').text('<?php echo __('Are you sure?'); ?>');
+        $('#aux').dialog({
+            title: '<?php echo __('Delete'); ?> ' + id,
+            buttons: [
+                {
+                    class: 'ui-widget ui-state-default ui-corner-all ui-button-text-only sub upd submit-cancel',
+                    text: '<?php echo __('Cancel'); ?>',
+                    click: function(e) {
+                        $(this).dialog('close');
+                    }
+                },
+                {
+                    text: 'Delete',
+                    class: 'ui-widget ui-state-default ui-corner-all ui-button-text-only sub ok submit-next',
+                    click: function(e) {
+                        $.ajax({
+                            method: 'post',
+                            url: '<?php echo ui_get_full_url('ajax.php', false, false, false); ?>',
+                            data: {
+                                page: 'include/ajax/os',
+                                method: 'deleteOSVersion',
+                                id_os_version: id
+                            },
+                            datatype: "json",
+                            success: function (data) {
+                                var r = JSON.parse(data);
+                                if (r.deleted === false) {
+                                    $('#aux').text('<?php echo __('Not deleted. Error deleting data'); ?>');
+                                } else {
+                                    $('#aux').dialog('close');
+                                    location.reload();
+                                }
+                            },
+                            error: function(e) {
+                                $('#aux').text('<?php echo __('Not deleted. Error deleting data'); ?>');
+                            }
+                        });
+                    }
+                }
+            ]
+        });
+    }
+</script>
\ No newline at end of file
diff --git a/pandora_console/godmode/setup/os_version.php b/pandora_console/godmode/setup/os_version.php
new file mode 100644
index 0000000000..ec5d27beae
--- /dev/null
+++ b/pandora_console/godmode/setup/os_version.php
@@ -0,0 +1,285 @@
+<?php
+/**
+ * Os version.
+ *
+ * @category   Os version
+ * @package    Pandora FMS
+ * @subpackage Community
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+// Load global vars.
+global $config;
+
+check_login();
+
+if (! check_acl($config['id_user'], 0, 'PM') && ! is_user_admin($config['id_user'])) {
+    db_pandora_audit(
+        AUDIT_LOG_ACL_VIOLATION,
+        'Trying to access Setup Management'
+    );
+    include 'general/noaccess.php';
+    return;
+}
+
+$action = get_parameter('action', 'new');
+$id_os_version = get_parameter('id_os_version', 0);
+if (is_metaconsole() === true) {
+    $tab = get_parameter('tab2', 'list');
+} else {
+    $tab = get_parameter('tab', 'list');
+}
+
+if ($id_os_version) {
+    $os_version = db_get_row_filter('tconfig_os_version', ['id_os_version' => $id_os_version]);
+    $product = $os_version['product'];
+    $version = $os_version['version'];
+    $end_of_life_date = $os_version['end_of_life_date'];
+} else {
+    $product = io_safe_input(strip_tags(io_safe_output((string) get_parameter('product'))));
+    $version = io_safe_input(strip_tags(io_safe_output((string) get_parameter('version'))));
+    $end_of_life_date = get_parameter('end_of_life_date', 0);
+}
+
+$is_management_allowed = true;
+if (is_management_allowed() === false) {
+    $is_management_allowed = false;
+}
+
+$message = '';
+if ($is_management_allowed === true) {
+    switch ($action) {
+        case 'edit':
+            $action_hidden = 'update';
+            $text_button = __('Update');
+            $class_button = ['icon' => 'wand'];
+        break;
+
+        case 'save':
+            $values = [];
+            $values['product'] = $product;
+            $values['version'] = $version;
+            $values['end_of_life_date'] = $end_of_life_date;
+
+            $result_or_id = false;
+            if ($product !== '') {
+                $result_or_id = db_process_sql_insert('tconfig_os_version', $values);
+            }
+
+            if ($result_or_id === false) {
+                $message = 2;
+                $tab = 'builder';
+                $actionHidden = 'save';
+                $textButton = __('Create');
+                $classButton = ['icon' => 'wand'];
+            } else {
+                $tab = 'list';
+                $message = 1;
+            }
+
+            if (is_metaconsole() === true) {
+                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&tab2='.$tab.'&message='.$message);
+            } else {
+                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
+            }
+        break;
+
+        case 'update':
+            $product = io_safe_input(strip_tags(io_safe_output((string) get_parameter('product'))));
+            $version = io_safe_input(strip_tags(io_safe_output((string) get_parameter('version'))));
+            $end_of_life_date = get_parameter('end_of_life_date', 0);
+
+            $values = [];
+            $values['product'] = $product;
+            $values['version'] = $version;
+
+            $result = false;
+            $result = db_process_sql_update('tconfig_os_version', $values, ['id_os' => $id_os_version]);
+
+            if ($result !== false) {
+                $message = 3;
+                $tab = 'list';
+            } else {
+                $message = 4;
+                $tab = 'builder';
+                $os = db_get_row_filter('tconfig_os', ['id_os' => $idOS]);
+                $name = $os['name'];
+            }
+
+            $actionHidden = 'update';
+            $textButton = __('Update');
+            $classButton = ['icon' => 'wand'];
+            if (is_metaconsole() === true) {
+                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&tab2='.$tab.'&message='.$message);
+            } else {
+                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os_version&tab='.$tab.'&message='.$message);
+            }
+        break;
+
+        case 'delete':
+            $sql = 'SELECT COUNT(id_os) AS count FROM tagente WHERE id_os = '.$idOS;
+            $count = db_get_all_rows_sql($sql);
+            $count = $count[0]['count'];
+
+            if ($count > 0) {
+                $message = 5;
+            } else {
+                $result = (bool) db_process_sql_delete('tconfig_os', ['id_os' => $idOS]);
+                if ($result) {
+                    $message = 6;
+                } else {
+                    $message = 7;
+                }
+            }
+
+            if (is_metaconsole() === true) {
+                header('Location:'.$config['homeurl'].'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&tab2='.$tab.'&message='.$message);
+            } else {
+                header('Location:'.$config['homeurl'].'index.php?sec=gsetup&sec2=godmode/setup/os&tab='.$tab.'&message='.$message);
+            }
+        break;
+
+        default:
+        case 'new':
+            $actionHidden = 'save';
+            $textButton = __('Create');
+            $classButton = ['icon' => 'next'];
+        break;
+    }
+}
+
+$buttons = [];
+$buttons['list'] = [
+    'active' => false,
+    'text'   => '<a href="index.php?sec=gsetup&sec2=godmode/setup/os&tab=list">'.html_print_image(
+        'images/logs@svg.svg',
+        true,
+        [
+            'title' => __('List OS'),
+            'class' => 'invert_filter main_menu_icon',
+        ]
+    ).'</a>',
+];
+if ($is_management_allowed === true) {
+    $buttons['builder'] = [
+        'active' => false,
+        'text'   => '<a href="index.php?sec=gsetup&sec2=godmode/setup/os&tab=builder">'.html_print_image(
+            'images/edit.svg',
+            true,
+            [
+                'title' => __('Builder OS'),
+                'class' => 'invert_filter main_menu_icon',
+            ]
+        ).'</a>',
+    ];
+
+    $buttons['version_exp_date_editor'] = [
+        'active' => false,
+        'text'   => '<a href="index.php?sec=gsetup&sec2=godmode/setup/os&tab=manage_version">'.html_print_image(
+            'images/edit.svg',
+            true,
+            [
+                'title' => __('Version expiration date editor'),
+                'class' => 'invert_filter main_menu_icon',
+            ]
+        ).'</a>',
+    ];
+}
+
+$buttons[$tab]['active'] = true;
+
+switch ($tab) {
+    case 'builder':
+        $headerTitle = __('Edit OS');
+    break;
+
+    case 'manage_version':
+        $headerTitle = __('Version expiration date editor');
+    break;
+
+    case 'list':
+        $headerTitle = __('List of Operating Systems');
+    break;
+
+    default:
+    // Default.
+    break;
+}
+
+if (is_metaconsole() === false) {
+    // Header.
+    ui_print_standard_header(
+        $headerTitle,
+        '',
+        false,
+        '',
+        true,
+        $buttons,
+        [
+            [
+                'link'  => '',
+                'label' => __('Servers'),
+            ],
+            [
+                'link'  => '',
+                'label' => __('Edit OS'),
+            ],
+        ]
+    );
+}
+
+if (empty($id_message) === false) {
+    switch ($id_message) {
+        case 1:
+            echo ui_print_success_message(__('Success creating OS'), '', true);
+        break;
+
+        case 2:
+            echo ui_print_error_message(__('Fail creating OS'), '', true);
+        break;
+
+        case 3:
+            echo ui_print_success_message(__('Success updating OS'), '', true);
+        break;
+
+        case 4:
+            echo ui_print_error_message(__('Error updating OS'), '', true);
+        break;
+
+        case 5:
+            echo ui_print_error_message(__('There are agents with this OS.'), '', true);
+        break;
+
+        case 6:
+            echo ui_print_success_message(__('Success deleting'), '', true);
+        break;
+
+        case 7:
+            echo ui_print_error_message(__('Error deleting'), '', true);
+        break;
+
+        default:
+            // Default.
+        break;
+    }
+}
+
+include_once $config['homedir'].'/godmode/setup/os_version.list.php';
diff --git a/pandora_console/images/os@svg.svg b/pandora_console/images/os@svg.svg
new file mode 100644
index 0000000000..80f8caf194
--- /dev/null
+++ b/pandora_console/images/os@svg.svg
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+    <title>os@svg</title>
+    <g id="os" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
+        <path d="M10,0 C15.5228475,0 20,4.4771525 20,10 C20,15.5228475 15.5228475,20 10,20 C4.4771525,20 0,15.5228475 0,10 C0,4.4771525 4.4771525,0 10,0 Z M6.15259698,6 C4.79331529,6 3.76139537,6.31928651 3.05683722,6.95785953 C2.35227907,7.59643255 2,8.60958751 2,9.99732441 C2,11.3850613 2.35227907,12.3991081 3.05683722,13.0394649 C3.76139537,13.6798216 4.79331529,14 6.15259698,14 C7.51187868,14 8.54208016,13.6807135 9.24320144,13.0421405 C9.94775959,12.4 10.3000387,11.3850613 10.3000387,9.99732441 C10.3000387,8.60958751 9.94861881,7.59643255 9.2457791,6.95785953 C8.54293938,6.31928651 7.51187868,6 6.15259698,6 Z M13.7468746,6.11772575 C12.5474073,6.11772575 11.7019375,6.31125975 11.2104653,6.69832776 C10.718993,7.08539576 10.4732569,7.63745819 10.4732569,8.35451505 C10.4732569,8.74336678 10.5755037,9.08138239 10.7799974,9.36856187 C10.9844911,9.65574136 11.2517077,9.88138239 11.5816471,10.0454849 C11.9115865,10.2095875 12.273317,10.3522854 12.6668385,10.4735786 C13.06036,10.5948718 13.4564592,10.6956522 13.855136,10.7759197 C14.2538128,10.8561873 14.6181209,10.9373467 14.9480603,11.019398 C15.6869872,11.1977703 16.0564506,11.4421405 16.0564506,11.7525084 C16.0564506,12.1627648 15.7540061,12.367893 15.1491172,12.367893 L13.3447609,12.3304348 C12.7811144,12.3304348 12.4185247,12.1556299 12.2569919,11.8060201 C12.095459,11.4564103 11.8600335,11.2816054 11.5507153,11.2816054 L10.9372342,11.2816054 C10.8238175,11.2816054 10.706964,11.3270903 10.5866735,11.4180602 C10.4663831,11.5090301 10.4062379,11.6597547 10.4062379,11.8702341 C10.4062379,12.4338907 10.6897796,12.9039019 11.256863,13.2802676 C11.8239464,13.6566332 12.4597672,13.8448161 13.1643253,13.8448161 L14.7263823,13.8769231 C15.9224127,13.8769231 16.7670232,13.6833891 17.2602139,13.2963211 C17.7534046,12.9092531 18,12.3571906 18,11.6401338 C18,11.1157191 17.8083946,10.6778149 17.4251837,10.3264214 C17.0419728,9.97502787 16.5754178,9.72263099 16.0255188,9.56923077 C15.4756197,9.41583055 14.9282983,9.28472687 14.3835546,9.17591973 C13.8388108,9.0671126 13.3748335,8.94136009 12.9916226,8.79866221 C12.6084117,8.65596433 12.4168063,8.4722408 12.4168063,8.24749164 C12.4168063,7.83723523 12.7192508,7.63210702 13.3241397,7.63210702 L14.8758861,7.66421405 C15.4395326,7.66421405 15.8021223,7.83991081 15.9636551,8.19130435 C16.125188,8.54269788 16.3606135,8.71839465 16.6699317,8.71839465 L17.2834128,8.71839465 C17.3933926,8.71839465 17.5085277,8.67201784 17.6288181,8.57926421 C17.7491086,8.48651059 17.8092538,8.33489409 17.8092538,8.12441472 C17.8092538,7.56075808 17.5265713,7.09074693 16.9612063,6.71438127 C16.3958414,6.33801561 15.7608798,6.14983278 15.0563217,6.14983278 Z M6.15259698,7.44481605 C6.92761095,7.44481605 7.48867981,7.65886288 7.83580358,8.08695652 C8.18292735,8.51505017 8.35648924,9.15273133 8.35648924,10 C8.35648924,10.8472687 8.18292735,11.484058 7.83580358,11.9103679 C7.48867981,12.3366778 6.92761095,12.5498328 6.15259698,12.5498328 C5.37758302,12.5498328 4.81565494,12.3366778 4.46681273,11.9103679 C4.11797053,11.484058 3.94354943,10.8472687 3.94354943,10 C3.94354943,9.15273133 4.11797053,8.51505017 4.46681273,8.08695652 C4.81565494,7.65886288 5.37758302,7.44481605 6.15259698,7.44481605 Z" id="Oval-2" fill="#3F3F3F"></path>
+    </g>
+</svg>
\ No newline at end of file
diff --git a/pandora_console/images/os_version@svg.svg b/pandora_console/images/os_version@svg.svg
new file mode 100644
index 0000000000..1274ccc3f8
--- /dev/null
+++ b/pandora_console/images/os_version@svg.svg
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg width="20px" height="20px" viewBox="0 0 20 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+    <title>os version@svg</title>
+    <g id="os-version" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
+        <path d="M10,5 C12.7614237,5 15,7.23857625 15,10 C15,12.7614237 12.7614237,15 10,15 C7.23857625,15 5,12.7614237 5,10 C5,7.23857625 7.23857625,5 10,5 Z M8.00124224,8 C7.34616977,8 6.84886128,8.15964326 6.50931677,8.47892977 C6.16977226,8.79821628 6,9.30479376 6,9.99866221 C6,10.6925307 6.16977226,11.1995541 6.50931677,11.5197324 C6.84886128,11.8399108 7.34616977,12 8.00124224,12 C8.6563147,12 9.15279503,11.8403567 9.49068323,11.5210702 C9.83022774,11.2 10,10.6925307 10,9.99866221 C10,9.30479376 9.83064182,8.79821628 9.49192547,8.47892977 C9.15320911,8.15964326 8.6563147,8 8.00124224,8 Z M11.7596741,8 C11.127857,8 10.6825074,8.09977011 10.4236253,8.29931034 C10.1647432,8.49885057 10.0353021,8.78344828 10.0353021,9.15310345 C10.0353021,9.35356322 10.0891604,9.52781609 10.1968771,9.67586207 C10.3045938,9.82390805 10.4453496,9.94022989 10.6191446,10.0248276 C10.7929396,10.1094253 10.9834804,10.1829885 11.1907671,10.2455172 C11.3980539,10.308046 11.6066983,10.36 11.8167006,10.4013793 C12.0267029,10.4427586 12.2186015,10.4845977 12.3923965,10.5268966 C12.7816248,10.6188506 12.976239,10.7448276 12.976239,10.9048276 C12.976239,11.1163218 12.8169269,11.222069 12.4983028,11.222069 L11.5478615,11.2027586 C11.2509618,11.2027586 11.0599683,11.1126437 10.9748812,10.9324138 C10.8897941,10.7521839 10.7657841,10.662069 10.6028513,10.662069 L10.2797013,10.662069 C10.2199593,10.662069 10.1584069,10.6855172 10.0950441,10.7324138 C10.0316814,10.7793103 10,10.8570115 10,10.9655172 C10,11.256092 10.1493551,11.4983908 10.4480652,11.6924138 C10.7467753,11.8864368 11.0816927,11.9834483 11.4528174,11.9834483 L12.275628,12 C12.9056348,12 13.3505318,11.9002299 13.6103191,11.7006897 C13.8701064,11.5011494 14,11.2165517 14,10.8468966 C14,10.5765517 13.8990722,10.3508046 13.6972166,10.1696552 C13.4953609,9.98850575 13.249604,9.8583908 12.9599457,9.77931034 C12.6702874,9.70022989 12.3819869,9.63264368 12.0950441,9.57655172 C11.8081014,9.52045977 11.5637022,9.45563218 11.3618466,9.38206897 C11.1599909,9.30850575 11.0590631,9.2137931 11.0590631,9.09793103 C11.0590631,8.88643678 11.2183752,8.78068966 11.5369993,8.78068966 L12.3543788,8.79724138 C12.6512786,8.79724138 12.842272,8.88781609 12.9273591,9.06896552 C13.0124463,9.25011494 13.1364562,9.34068966 13.299389,9.34068966 L13.622539,9.34068966 C13.6804707,9.34068966 13.7411179,9.31678161 13.8044807,9.26896552 C13.8678434,9.22114943 13.8995248,9.14298851 13.8995248,9.03448276 C13.8995248,8.74390805 13.7506223,8.5016092 13.4528174,8.30758621 C13.1550124,8.11356322 12.8205476,8.01655172 12.4494229,8.01655172 Z M8.00124224,8.72240803 C8.3747412,8.72240803 8.64513458,8.82943144 8.81242236,9.04347826 C8.97971014,9.25752508 9.06335404,9.57636566 9.06335404,10 C9.06335404,10.4236343 8.97971014,10.742029 8.81242236,10.9551839 C8.64513458,11.1683389 8.3747412,11.2749164 8.00124224,11.2749164 C7.62774327,11.2749164 7.35693582,11.1683389 7.18881988,10.9551839 C7.02070393,10.742029 6.93664596,10.4236343 6.93664596,10 C6.93664596,9.57636566 7.02070393,9.25752508 7.18881988,9.04347826 C7.35693582,8.82943144 7.62774327,8.72240803 8.00124224,8.72240803 Z" id="Oval-2" fill="#3F3F3F"></path>
+        <g id="Group" transform="translate(10, 0.9972)" fill="#3F3F3F" fill-rule="nonzero">
+            <path d="M0.239098823,-0.999498516 C0.367920916,-1.0006481 0.46086938,-1.00001443 0.545625818,-0.996148978 C5.85594931,-0.753608542 10,3.63723482 10,9.00280962 C10,11.7312591 8.9006895,14.287461 6.98753217,16.1564431 C5.94922318,17.1707773 5.2256829,17.9806061 4.82608058,18.5663616 C4.51483939,19.0225933 3.89267968,19.1401314 3.43644798,18.8288902 C2.98021627,18.517649 2.86267824,17.8954893 3.17391942,17.4392576 C3.66277305,16.7226734 4.46505413,15.8247132 5.5899319,14.7258091 C7.12171888,13.2293915 8,11.1871442 8,9.00280962 C8,4.70099732 4.69132984,1.19528432 0.454374182,1.00176822 C0.441581214,1.00118392 0.425875842,1.0007459 0.407122626,1.00045278 L0.204431552,1.00096401 L0.173047576,1.00133321 C0.143860257,1.00169127 0.124402045,1.00192997 0.10826377,1.00210401 L0,1.00280962 C-0.55228475,1.00280962 -1,0.555094372 -1,0.00280962244 C-1,-0.549475127 -0.55228475,-0.997190378 0,-0.997190378 L0.0986592653,-0.99792167 L0.14911528,-0.998523592 C0.192941176,-0.999044088 0.192941176,-0.999044088 0.239098823,-0.999498516 Z" id="Oval"></path>
+            <path d="M4,14.0028096 C4.55228475,14.0028096 5,14.4505249 5,15.0028096 L5,17.0028096 L7,17.0028096 C7.51283584,17.0028096 7.93550716,17.3888498 7.99327227,17.8861885 L8,18.0028096 C8,18.5550944 7.55228475,19.0028096 7,19.0028096 L4,19.0028096 C3.44771525,19.0028096 3,18.5550944 3,18.0028096 L3,15.0028096 C3,14.4505249 3.44771525,14.0028096 4,14.0028096 Z" id="Path-87"></path>
+        </g>
+        <g id="Group" transform="translate(5.5, 9.9986) scale(-1, -1) translate(-5.5, -9.9986)translate(1, 0.9972)" fill="#3F3F3F" fill-rule="nonzero">
+            <path d="M5.93830089,14.3635692 C6.30852501,13.9537491 6.94087583,13.9216502 7.35069596,14.2918743 C7.7605161,14.6620984 7.79261501,15.2944492 7.42239089,15.7042693 C7.28217928,15.8594768 7.13715,16.01028 6.98753217,16.1564431 C5.94922318,17.1707773 5.2256829,17.9806061 4.82608058,18.5663616 C4.51483939,19.0225933 3.89267968,19.1401314 3.43644798,18.8288902 C2.98021627,18.517649 2.86267824,17.8954893 3.17391942,17.4392576 C3.66277305,16.7226734 4.46505413,15.8247132 5.5899319,14.7258091 C5.7097935,14.6087152 5.82597871,14.4879044 5.93830089,14.3635692 Z M8.943119,7.56724451 C9.49480124,7.54145411 9.96293532,7.96777368 9.98872572,8.51945593 C9.99623585,8.68010519 10,8.84125436 10,9.00293537 C10,10.3523848 9.73199051,11.6661445 9.21843823,12.8844407 C9.00391256,13.3933584 8.41744587,13.6320103 7.90852821,13.4174846 C7.39961056,13.2029589 7.1609587,12.6164922 7.37548437,12.1075746 C7.78585079,11.1340654 7.99998666,10.0843244 8,9.00292303 C8,8.87239659 7.99696323,8.74238768 7.99090758,8.61285123 C7.96511718,8.06116899 8.39143675,7.59303491 8.943119,7.56724451 Z M5.35650642,1.65292436 C5.7304364,1.24648271 6.3630526,1.2201268 6.76949425,1.59405678 C7.86955054,2.60611849 8.7319506,3.85799548 9.28762134,5.25683726 C9.4915113,5.77010846 9.24070825,6.35148245 8.72743704,6.55537241 C8.21416584,6.75926237 7.63279185,6.50845932 7.42890189,5.99518811 C6.98434699,4.87606861 6.29458082,3.8747904 5.41537399,3.06591219 C5.00893235,2.6919822 4.98257643,2.05936601 5.35650642,1.65292436 Z M0.239098823,-0.999498516 C0.367920916,-1.0006481 0.46086938,-1.00001443 0.545625818,-0.996148978 C1.70508629,-0.943192496 2.82882174,-0.691139109 3.87925052,-0.254949612 C4.38930817,-0.0431486814 4.63109302,0.542033323 4.41929209,1.05209098 C4.20749116,1.56214863 3.62230915,1.80393348 3.1122515,1.59213255 C2.27594636,1.24485768 1.38082518,1.04408237 0.454374182,1.00176822 C0.441581214,1.00118392 0.425875842,1.0007459 0.407122626,1.00045278 L0.204431552,1.00096401 L0.173047576,1.00133321 C0.143860257,1.00169127 0.124402045,1.00192997 0.10826377,1.00210401 L0,1.00280962 C-0.55228475,1.00280962 -1,0.555094372 -1,0.00280962244 C-1,-0.549475127 -0.55228475,-0.997190378 0,-0.997190378 L0.0986592653,-0.99792167 L0.14911528,-0.998523592 C0.192941176,-0.999044088 0.192941176,-0.999044088 0.239098823,-0.999498516 Z" id="Oval"></path>
+            <path d="M4,14.0028096 C4.55228475,14.0028096 5,14.4505249 5,15.0028096 L5,17.0028096 L7,17.0028096 C7.51283584,17.0028096 7.93550716,17.3888498 7.99327227,17.8861885 L8,18.0028096 C8,18.5550944 7.55228475,19.0028096 7,19.0028096 L4,19.0028096 C3.44771525,19.0028096 3,18.5550944 3,18.0028096 L3,15.0028096 C3,14.4505249 3.44771525,14.0028096 4,14.0028096 Z" id="Path-87"></path>
+        </g>
+    </g>
+</svg>
\ No newline at end of file
diff --git a/pandora_console/include/ajax/os.php b/pandora_console/include/ajax/os.php
new file mode 100644
index 0000000000..058fe75578
--- /dev/null
+++ b/pandora_console/include/ajax/os.php
@@ -0,0 +1,376 @@
+<?php
+/**
+ * Update manager client historical updates backend.
+ *
+ * @category   Update Manager
+ * @package    Pandora FMS
+ * @subpackage Community
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+// Begin.
+global $config;
+
+check_login();
+if ((bool) check_acl($config['id_user'], 0, 'PM') === false
+    && (bool) is_user_admin($config['id_user']) === false
+) {
+    db_pandora_audit(
+        AUDIT_LOG_ACL_VIOLATION,
+        'Trying to access Setup Management'
+    );
+    include 'general/noaccess.php';
+    return;
+}
+
+$method = get_parameter('method', null);
+
+if ($method === 'deleteOS') {
+    global $config;
+
+    $id_os = get_parameter('id_os', null);
+
+    if (empty($id_os) === true || $id_os < 16) {
+        echo json_encode(['deleted' => false]);
+        return;
+    }
+
+    if (db_process_sql_delete(
+        'tconfig_os',
+        ['id_os' => $id_os]
+    ) === false
+    ) {
+        echo json_encode(['deleted' => false]);
+    } else {
+        echo json_encode(['deleted' => true]);
+    }
+}
+
+if ($method === 'deleteOSVersion') {
+    global $config;
+
+    $id_os_version = get_parameter('id_os_version', null);
+
+    if (empty($id_os_version) === true || $id_os_version < 1) {
+        echo json_encode(['deleted' => false]);
+    }
+
+    if (db_process_sql_delete(
+        'tconfig_os_version',
+        ['id_os_version' => $id_os_version]
+    ) === false
+    ) {
+        echo json_encode(['deleted' => false]);
+    } else {
+        echo json_encode(['deleted' => true]);
+    }
+}
+
+if ($method === 'drawOSTable') {
+    // Datatables offset, limit and order.
+    $filter = get_parameter('filter', []);
+    $start = get_parameter('start', 0);
+    $length = get_parameter('length', $config['block_size']);
+    $orderBy = get_datatable_order(true);
+
+    $sort_field = $orderBy['field'];
+    $order = $orderBy['direction'];
+
+    $pagination = '';
+
+    $pagination = sprintf(
+        ' LIMIT %d OFFSET %d ',
+        $length,
+        $start
+    );
+
+    try {
+        ob_start();
+
+        $fields = ['*'];
+        $sql_filters = [];
+
+        if (isset($filter['free_search']) === true
+            && empty($filter['free_search']) === false
+        ) {
+            $sql_filters[] = sprintf(
+                ' AND (`name` like "%%%s%%" OR `description` like "%%%s%%") ',
+                $filter['free_search'],
+                $filter['free_search']
+            );
+        }
+
+        if (isset($order) === true) {
+            $dir = 'asc';
+            if ($order == 'desc') {
+                $dir = 'desc';
+            };
+
+            if (in_array(
+                $sort_field,
+                [
+                    'id_os',
+                    'name',
+                    'description',
+                ]
+            ) === true
+            ) {
+                $order_by = sprintf(
+                    'ORDER BY `%s` %s',
+                    $sort_field,
+                    $dir
+                );
+            }
+        }
+
+        // Retrieve data.
+        $sql = sprintf(
+            'SELECT %s
+            FROM tconfig_os
+            WHERE 1=1
+            %s
+            %s
+            %s',
+            join(',', $fields),
+            join(' ', $sql_filters),
+            $order_by,
+            $pagination
+        );
+
+        $count_sql = sprintf(
+            'SELECT id_os
+            FROM tconfig_os
+            WHERE 1=1
+            %s',
+            join(' ', $sql_filters)
+        );
+
+        $return = db_get_all_rows_sql($sql);
+        if ($return === false) {
+            $data = [];
+        } else {
+            $data = $return;
+        }
+
+        $data = array_map(
+            function ($item) {
+                $item['icon_img'] = ui_print_os_icon($item['id_os'], false, true);
+
+                if (is_management_allowed() === true) {
+                    if (is_metaconsole() === true) {
+                        $osNameUrl = 'index.php?sec=advanced&sec2=advanced/component_management&tab=os_manage&action=edit&tab2=list&id_os='.$item['id_os'];
+                    } else {
+                        $osNameUrl = 'index.php?sec=gsetup&sec2=godmode/setup/os&action=edit&tab=manage_os&id_os='.$item['id_os'];
+                    }
+
+                    $item['name'] = html_print_anchor(
+                        [
+                            'href'    => $osNameUrl,
+                            'content' => $item['name'],
+                        ],
+                        true
+                    );
+                } else {
+                    $item['name'] = $item['name'];
+                }
+
+                $item['description'] = ui_print_truncate_text(
+                    $item['description'],
+                    'description',
+                    true,
+                    true
+                );
+
+                if (is_management_allowed() === true) {
+                    $item['enable_delete'] = false;
+
+                    if ($item['id_os'] > 16) {
+                        $item['enable_delete'] = true;
+                    }
+                }
+
+                return $item;
+            },
+            $data
+        );
+
+        // Retrieve counter.
+        $count = db_get_value('count(*)', '('.$count_sql.') t');
+
+        // Datatables format: RecordsTotal && recordsfiltered.
+        echo json_encode(
+            [
+                'data'            => $data,
+                'recordsTotal'    => $count,
+                'recordsFiltered' => $count,
+            ]
+        );
+        // Capture output.
+        $response = ob_get_clean();
+    } catch (Exception $e) {
+        echo json_encode(['error' => $e->getMessage()]);
+        exit;
+    }
+
+    // If not valid, show error with issue.
+    json_decode($response);
+    if (json_last_error() == JSON_ERROR_NONE) {
+        // If valid dump.
+        echo $response;
+    } else {
+        echo json_encode(
+            ['error' => $response]
+        );
+    }
+
+    exit;
+}
+
+if ($method === 'drawOSVersionTable') {
+    // Datatables offset, limit and order.
+    $filter = get_parameter('filter', []);
+    $start = get_parameter('start', 0);
+    $length = get_parameter('length', $config['block_size']);
+    $orderBy = get_datatable_order(true);
+
+    $sort_field = $orderBy['field'];
+    $order = $orderBy['direction'];
+
+    $pagination = '';
+
+    $pagination = sprintf(
+        ' LIMIT %d OFFSET %d ',
+        $length,
+        $start
+    );
+
+    try {
+        ob_start();
+
+        $fields = ['*'];
+        $sql_filters = [];
+
+        if (isset($filter['free_search']) === true
+            && empty($filter['free_search']) === false
+        ) {
+            $sql_filters[] = sprintf(
+                ' AND (`product` like "%%%s%%" OR `version` like "%%%s%%") ',
+                $filter['free_search'],
+                $filter['free_search']
+            );
+        }
+
+        if (isset($order) === true) {
+            $dir = 'asc';
+            if ($order == 'desc') {
+                $dir = 'desc';
+            };
+
+            if (in_array(
+                $sort_field,
+                [
+                    'product',
+                    'version',
+                    'end_of_support',
+                ]
+            ) === true
+            ) {
+                $order_by = sprintf(
+                    'ORDER BY `%s` %s',
+                    $sort_field,
+                    $dir
+                );
+            }
+        }
+
+        // Retrieve data.
+        $sql = sprintf(
+            'SELECT %s
+            FROM tconfig_os_version
+            WHERE 1=1
+            %s
+            %s
+            %s',
+            join(',', $fields),
+            join(' ', $sql_filters),
+            $order_by,
+            $pagination
+        );
+
+        $count_sql = sprintf(
+            'SELECT id_os_version
+            FROM tconfig_os_version
+            WHERE 1=1
+            %s',
+            join(' ', $sql_filters)
+        );
+
+        $return = db_get_all_rows_sql($sql);
+
+        if ($return === false) {
+            $data = [];
+        } else {
+            // Format end of life date.
+            $return = array_map(
+                function ($item) {
+                    $date_string = date_w_fixed_tz($item['end_of_support']);
+                    $timestamp = strtotime($date_string);
+                    $date_without_time = date('F j, Y', $timestamp);
+                    $item['end_of_support'] = $date_without_time;
+                    return $item;
+                },
+                $return
+            );
+
+            $data = $return;
+        }
+
+        // Retrieve counter.
+        $count = db_get_value('count(*)', '('.$count_sql.') t');
+
+        // Datatables format: RecordsTotal && recordsfiltered.
+        echo json_encode(
+            [
+                'data'            => $data,
+                'recordsTotal'    => $count,
+                'recordsFiltered' => $count,
+            ]
+        );
+        // Capture output.
+        $response = ob_get_clean();
+    } catch (Exception $e) {
+        echo json_encode(['error' => $e->getMessage()]);
+        exit;
+    }
+
+    // If not valid, show error with issue.
+    json_decode($response);
+    if (json_last_error() == JSON_ERROR_NONE) {
+        // If valid dump.
+        echo $response;
+    } else {
+        echo json_encode(
+            ['error' => $response]
+        );
+    }
+
+    exit;
+}
diff --git a/pandora_console/include/chart_generator.php b/pandora_console/include/chart_generator.php
index e8ee5f294c..ac0cf16e53 100644
--- a/pandora_console/include/chart_generator.php
+++ b/pandora_console/include/chart_generator.php
@@ -213,6 +213,8 @@ $hack_metaconsole = (is_metaconsole() === true) ? '../../' : '';
 
         case 'sparse':
             $params['pdf'] = true;
+            hd(grafico_modulo_sparse($params), true);
+            hd("resultadoooooooooooooooooooooooooooo", true);
             echo grafico_modulo_sparse($params);
         break;
 
diff --git a/pandora_console/include/functions_agents.php b/pandora_console/include/functions_agents.php
index 940e9e3e7f..b4ce559d37 100644
--- a/pandora_console/include/functions_agents.php
+++ b/pandora_console/include/functions_agents.php
@@ -497,7 +497,8 @@ function agents_get_agents(
     ],
     $return=false,
     $disabled_agent=0,
-    $use_meta_table=false
+    $use_meta_table=false,
+    $join_os_table=false
 ) {
     global $config;
 
@@ -720,6 +721,18 @@ function agents_get_agents(
             ON tpolicy_agents.id_agent=tagente.id_agente';
     }
 
+    if ($join_os_table === true) {
+        $os_version_join = '
+            INNER JOIN tconfig_os
+            ON tagente.id_os = tconfig_os.id_os
+            INNER JOIN tconfig_os_version
+            ON tconfig_os.name REGEXP tconfig_os_version.product
+        ';
+        unset($filter['os_version_end_of_life']);
+    } else {
+        $os_version_join = '';
+    }
+
     if ($extra) {
         $where = sprintf(
             '(%s OR (%s)) AND (%s) AND (%s) %s AND %s %s %s %s',
@@ -754,11 +767,12 @@ function agents_get_agents(
 		FROM `%s` tagente
         LEFT JOIN tagent_secondary_group
             ON tagent_secondary_group.id_agent=tagente.id_agente
-        %s
+        %s %s
 		WHERE %s %s',
         implode(',', $fields),
         $table_name,
         $policy_join,
+        $os_version_join,
         $where,
         $order
     );
diff --git a/pandora_console/include/functions_html.php b/pandora_console/include/functions_html.php
index 551f6812ef..db51873122 100644
--- a/pandora_console/include/functions_html.php
+++ b/pandora_console/include/functions_html.php
@@ -4865,7 +4865,7 @@ function html_print_header_logo_image(bool $menuCollapsed, bool $return=false)
  *    Key disabled: Whether to disable the input or not.
  *    Key class: HTML class
  */
-function html_print_input_file($name, $return=false, $options=false)
+function html_print_input_file($name, $return=false, $options=false, $inline_upload_anchor_to_form='')
 {
     $output = '';
     // Start to build the input.
@@ -4912,11 +4912,49 @@ function html_print_input_file($name, $return=false, $options=false)
     $output .= ($options['caption'] ?? __('Select a file'));
 
     $output .= '</label>';
+
+    if ($inline_upload_anchor_to_form !== '') {
+        // Add script to submit targeted form.
+        $output .= '<script>';
+        $output .= 'function submitForm(formID) {
+                        var form = $("#"+formID);
+                        console.log(form);
+                        form.submit();
+                    }';
+        $output .= '</script>';
+        $output .= '<div style="display: inherit;">';
+    }
+
     $output .= '<span class="inputFileSpan" id="span-'.$name.'">&nbsp;</span>';
+
+    if ($inline_upload_anchor_to_form !== '') {
+        $output .= '<div id="span-'.$name.'-anchor" class="hidden_block">';
+        $output .= html_print_button(
+            __('Upload'),
+            'upload-icon-btn',
+            false,
+            sprintf(
+                'javascript:submitForm("%s")',
+                $inline_upload_anchor_to_form
+            ),
+            [
+                'mode'  => 'link',
+                'style' => 'min-width: initial;',
+            ],
+            true,
+        );
+        $output .= '</div>';
+    }
+
+    if ($inline_upload_anchor_to_form !== '') {
+        $output .= '</div>';
+    }
+
     // Add script.
     $output .= '<script>';
     $output .= 'let inputElement = document.getElementById("file-'.$name.'");
                 let inputFilename = document.getElementById("span-'.$name.'");
+                let inputFilenameAnchor = document.getElementById("span-'.$name.'-anchor");
                 inputElement.addEventListener("change", ()=>{
                     let inputImage = document.querySelector("input[type=file]").files[0];
                     if (inputImage.name.length >= 45) {
@@ -4924,6 +4962,7 @@ function html_print_input_file($name, $return=false, $options=false)
                         inputFilename.innerText = name;
                     } else {
                         inputFilename.innerText = inputImage.name;
+                        inputFilenameAnchor.classList.remove("hidden_block");
                     }
                 });';
     $output .= '</script>';
@@ -7208,4 +7247,4 @@ function html_print_wizard_diagnosis(
     } else {
         echo $output;
     }
-}
\ No newline at end of file
+}
diff --git a/pandora_console/include/functions_reporting.php b/pandora_console/include/functions_reporting.php
index c01e44157a..994496322d 100755
--- a/pandora_console/include/functions_reporting.php
+++ b/pandora_console/include/functions_reporting.php
@@ -773,6 +773,13 @@ function reporting_make_reporting_data(
                 );
             break;
 
+            case 'end_of_life':
+                $report['contents'][] = reporting_end_of_life(
+                    $report,
+                    $content
+                );
+            break;
+
             case 'alert_report_actions':
                 $report['contents'][] = reporting_alert_report_actions(
                     $report,
@@ -3562,6 +3569,112 @@ function reporting_agent_module_status($report, $content)
 }
 
 
+/**
+ * OS Version End of Life
+ *
+ * @param array $report  Info Report.
+ * @param array $content Info content.
+ *
+ * @return array
+ */
+function reporting_end_of_life($report, $content)
+{
+    global $config;
+
+    $return['type'] = 'end_of_life';
+
+    if (empty($content['name'])) {
+        $content['name'] = __('End of life');
+    }
+
+    $return['title'] = io_safe_output($content['name']);
+    $return['landscape'] = $content['landscape'];
+    $return['pagebreak'] = $content['pagebreak'];
+    $return['subtitle'] = __('End of life report');
+    $return['description'] = io_safe_output($content['description']);
+    $return['date'] = reporting_get_date_text($report, $content);
+    $return['label'] = (isset($content['style']['label'])) ? $content['style']['label'] : '';
+
+    $return['data'] = [];
+
+    $external_source = json_decode(
+        $content['external_source'],
+        true
+    );
+
+    $servers_ids = [0];
+
+    if (is_metaconsole() === true) {
+        $servers_ids = array_column(metaconsole_get_servers(), 'id');
+    }
+
+    foreach ($servers_ids as $server_id) {
+        if (is_metaconsole() === true) {
+            $connection = metaconsole_get_connection_by_id($server_id);
+            if (metaconsole_connect($connection) != NOERR) {
+                continue;
+            }
+        }
+
+        $agents = agents_get_agents(
+            [],
+            [
+                'alias',
+                'direccion',
+                'name',
+                'os_version',
+            ],
+            'AR',
+            [
+                'field' => 'nombre',
+                'order' => 'ASC',
+            ],
+            false,
+            0,
+            false,
+            true
+        );
+
+        $es_os_version = $external_source['os_version'];
+
+        $es_limit_eol_datetime = DateTime::createFromFormat('Y/m/d', $external_source['end_of_life_date']);
+
+        // Post-process returned agents to filter agents using correctly formatted fields.
+        foreach ($agents as $idx => $agent) {
+            // Must perform this query and subsequent operations in each iteration (note this is costly) since OS version field may contain HTML entities in BD and decoding can't be fully handled with mysql methods when doing a REGEXP.
+            $result_end_of_life = db_get_value_sql('SELECT end_of_support FROM tconfig_os_version WHERE "'.io_safe_output($agent['os_version']).'" REGEXP version');
+            $agent_eol_datetime = DateTime::createFromFormat('Y/m/d', $result_end_of_life);
+
+            if ((preg_match('/'.$es_os_version.'/', $agent['os_version']) || $es_os_version === '') && $result_end_of_life !== false && $es_limit_eol_datetime >= $agent_eol_datetime) {
+                // Agent matches an existing OS version.
+                $agents[$idx]['end_of_life'] = $result_end_of_life;
+            } else {
+                // Set agent to be filtered out.
+                $agents[$idx] = null;
+            }
+        }
+
+        if ($agents !== false) {
+            $agents = array_filter($agents);
+        }
+
+        if (is_metaconsole() === true) {
+            $res[$connection['server_name']] = $agents;
+
+            metaconsole_restore_db();
+        }
+    }
+
+    if (is_metaconsole() === true) {
+        $return['data'] = $res;
+    } else {
+        $return['data'] = $agents;
+    }
+
+    return reporting_check_structure_content($return);
+}
+
+
 function reporting_exception(
     $report,
     $content,
diff --git a/pandora_console/include/functions_reporting_html.php b/pandora_console/include/functions_reporting_html.php
index 91d8a9e5a5..da2ab3bed0 100644
--- a/pandora_console/include/functions_reporting_html.php
+++ b/pandora_console/include/functions_reporting_html.php
@@ -391,6 +391,10 @@ function reporting_html_print_report($report, $mini=false, $report_info=1)
                 reporting_html_agent_module_status($table, $item);
             break;
 
+            case 'end_of_life':
+                reporting_html_end_of_life($table, $item);
+            break;
+
             case 'alert_report_actions':
                 reporting_html_alert_report_actions($table, $item);
             break;
@@ -2440,6 +2444,123 @@ function reporting_html_agent_module_status($table, $item, $pdf=0)
 }
 
 
+/**
+ * Html report end of life.
+ *
+ * @param object  $table Head table or false if it comes from pdf.
+ * @param array   $item  Items data.
+ * @param integer $pdf   Pdf output.
+ *
+ * @return mixed
+ */
+function reporting_html_end_of_life($table, $item, $pdf=0)
+{
+    global $config;
+
+    $return_pdf = '';
+
+    if (empty($item['data']) === true) {
+        if ($pdf !== 0) {
+            $return_pdf .= __('No items');
+        } else {
+            $table->colspan['group_report']['cell'] = 3;
+            $table->cellstyle['group_report']['cell'] = 'text-align: center;';
+            $table->data['group_report']['cell'] = __('No items');
+        }
+    } else {
+        $table_info = new stdClass();
+        $table_info->width = '99%';
+
+        $table_info->align = [];
+
+        if (is_metaconsole() === true) {
+            $table_info->align['server'] = 'left';
+        }
+
+        $table_info->align['agent_alias'] = 'left';
+        $table_info->align['ip'] = 'left';
+        $table_info->align['os_type'] = 'left';
+        $table_info->align['os_version'] = 'left';
+        $table_info->align['end_of_life'] = 'left';
+
+        $table_info->headstyle = [];
+
+        if (is_metaconsole() === true) {
+            $table_info->headstyle['server'] = 'text-align: left';
+        }
+
+        $table_info->headstyle['agent_alias'] = 'text-align: left';
+        $table_info->headstyle['ip'] = 'text-align: left';
+        $table_info->headstyle['os_type'] = 'text-align: left';
+        $table_info->headstyle['os_version'] = 'text-align: left';
+        $table_info->headstyle['end_of_life'] = 'text-align: left';
+
+        $table_info->head = [];
+        if (is_metaconsole() === true) {
+            $table_info->head['server'] = __('Server');
+        }
+
+        $table_info->head['agent_alias'] = __('Agent alias');
+        $table_info->head['ip'] = __('IP');
+        $table_info->head['os_type'] = __('OS Type');
+        $table_info->head['os_version'] = __('OS Version');
+        $table_info->head['end_of_life'] = __('End of life');
+
+        $table_info->data = [];
+
+        if (is_metaconsole() === true) {
+            foreach ($item['data'] as $server_name => $agents_per_server) {
+                foreach ($agents_per_server as $agent) {
+                    $row = [];
+
+                    $row['server'] = $server_name;
+                    $row['agent_alias'] = $agent['alias'];
+                    $row['ip'] = $agent['direccion'];
+                    $row['os_type'] = $agent['name'];
+                    $row['os_version'] = $agent['os_version'];
+                    $date_string = date_w_fixed_tz($agent['end_of_life']);
+                    $timestamp = strtotime($date_string);
+                    $date_without_time = date('F j, Y', $timestamp);
+                    $row['end_of_life'] = $date_without_time;
+
+                    $table_info->data[] = $row;
+                }
+            }
+        } else {
+            foreach ($item['data'] as $data) {
+                $row = [];
+
+                $row['agent_alias'] = $data['alias'];
+                $row['ip'] = $data['direccion'];
+                $row['os_type'] = $data['name'];
+                $row['os_version'] = $data['os_version'];
+                $date_string = date_w_fixed_tz($data['end_of_life']);
+                $timestamp = strtotime($date_string);
+                $date_without_time = date('F j, Y', $timestamp);
+                $row['end_of_life'] = $date_without_time;
+
+                $table_info->data[] = $row;
+            }
+        }
+
+        if ($pdf !== 0) {
+            $table_info->title = $item['title'];
+            $table_info->titleclass = 'title_table_pdf';
+            $table_info->titlestyle = 'text-align:left;';
+            $return_pdf .= html_print_table($table_info, true);
+        } else {
+            $table->colspan['data']['cell'] = 3;
+            $table->cellstyle['data']['cell'] = 'text-align: center;';
+            $table->data['data']['cell'] = html_print_table($table_info, true);
+        }
+    }
+
+    if ($pdf !== 0) {
+        return $return_pdf;
+    }
+}
+
+
 /**
  * Function to print to HTML Exception report.
  *
diff --git a/pandora_console/include/functions_reports.php b/pandora_console/include/functions_reports.php
index f13e935b6a..bfb43c0607 100755
--- a/pandora_console/include/functions_reports.php
+++ b/pandora_console/include/functions_reports.php
@@ -814,6 +814,11 @@ function reports_get_report_types($template=false, $not_editor=false)
         'name'     => __('Agents/Modules status'),
     ];
 
+    $types['end_of_life'] = [
+        'optgroup' => __('Grouped'),
+        'name'     => __('End of life'),
+    ];
+
     // Only pandora managers have access to the whole database.
     if (check_acl($config['id_user'], 0, 'PM')) {
         $types['sql'] = [
diff --git a/pandora_console/operation/agentes/estado_agente.php b/pandora_console/operation/agentes/estado_agente.php
index d7eb3e3aed..2759e2739a 100644
--- a/pandora_console/operation/agentes/estado_agente.php
+++ b/pandora_console/operation/agentes/estado_agente.php
@@ -169,6 +169,7 @@ $refr = get_parameter('refr', 0);
 $recursion = get_parameter('recursion', 0);
 $status = (int) get_parameter('status', -1);
 $os = (int) get_parameter('os', 0);
+$os_version_regex = trim(get_parameter('os_version_regex', ''));
 $policies = (array) get_parameter('policies', []);
 $ag_custom_fields = (array) get_parameter('ag_custom_fields', []);
 
@@ -393,6 +394,18 @@ $table->data[1][0] = html_print_label_input_block(
     html_print_select($fields, 'os', $os, '', 'All', 0, true)
 );
 
+$table->data[1][1] = html_print_label_input_block(
+    __('Operating System version').ui_print_help_tip(__('Case insensitive regular expression, e.g. Rocky.* will match the following OS version: Rocky Linux 8.7'), true),
+    html_print_input_text(
+        'os_version_regex',
+        $os_version_regex,
+        '',
+        35,
+        255,
+        true
+    )
+);
+
 if (function_exists('policies_get_policies') === true) {
     $pre_fields = policies_get_policies(false, ['id', 'name']);
     $fields = [];
@@ -401,7 +414,7 @@ if (function_exists('policies_get_policies') === true) {
     }
 }
 
-$table->data[1][1] = html_print_label_input_block(
+$table->data[2][0] = html_print_label_input_block(
     __('Policies'),
     html_print_select($fields, 'policies[]', $policies, '', 'All', 0, true, true)
 );
@@ -443,8 +456,8 @@ foreach ($custom_fields as $custom_field) {
     $div_custom_fields .= '</div></div>';
 }
 
-$table->colspan[2][0] = 2;
-$table->data[2][0] = ui_toggle(
+$table->colspan[3][0] = 2;
+$table->data[3][0] = ui_toggle(
     $div_custom_fields,
     __('Agent custom fields'),
     '',
@@ -872,6 +885,10 @@ if ($os > 0) {
     $id_os_sql = ' AND id_os = '.$os;
 }
 
+if ($os_version_regex !== '') {
+    $id_os_sql .= ' AND os_version REGEXP \''.$os_version_regex.'\'';
+}
+
 if ($all_policies === false && is_array($policies) && count($policies) > 0) {
     $policies_sql = ' AND tpolicy_agents.id_policy IN ('.implode(',', $policies).')';
 }
diff --git a/pandora_console/pandoradb.sql b/pandora_console/pandoradb.sql
index 440199f901..1392a366ca 100644
--- a/pandora_console/pandoradb.sql
+++ b/pandora_console/pandoradb.sql
@@ -652,6 +652,17 @@ CREATE TABLE IF NOT EXISTS  `tconfig_os` (
   PRIMARY KEY  (`id_os`)
 ) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
 
+-- -----------------------------------------------------
+-- Table `tconfig_os_version`
+-- -----------------------------------------------------
+CREATE TABLE IF NOT EXISTS  `tconfig_os_version` (
+  `id_os_version` INT UNSIGNED NOT NULL AUTO_INCREMENT,
+  `product` TEXT,
+  `version` TEXT,
+  `end_of_support` VARCHAR(10) DEFAULT NULL,
+  PRIMARY KEY  (`id_os_version`)
+) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
+
 -- -----------------------------------------------------
 -- Table `tcontainer`
 -- -----------------------------------------------------
diff --git a/pandora_console/pandoradb_data.sql b/pandora_console/pandoradb_data.sql
index ebf38a35f7..d36f1b5de8 100644
--- a/pandora_console/pandoradb_data.sql
+++ b/pandora_console/pandoradb_data.sql
@@ -2636,3 +2636,15 @@ INSERT INTO `twelcome_tip_file` (`twelcome_tip_file`,`filename`,`path`) VALUES (
 INSERT INTO `twelcome_tip` (`id_lang`,`id_profile`,`title`,`text`,`url`,`enable`) VALUES ('en_GB',0,'Zoom&#x20;on&#x20;data&#x20;graphs','Do&#x20;you&#x20;know&#x20;that&#x20;Pandora&#x20;FMS&#x20;allows&#x20;you&#x20;to&#x20;zoom&#x20;in&#x20;on&#x20;a&#x20;part&#x20;of&#x20;the&#x20;graph.&#x20;With&#x20;that&#x20;you&#x20;will&#x20;expand&#x20;the&#x20;information&#x20;of&#x20;the&#x20;graph.&#x20;If&#x20;you&#x20;are&#x20;looking&#x20;at&#x20;a&#x20;graph&#x20;for&#x20;a&#x20;month&#x20;and&#x20;you&#x20;zoom&#x20;in,&#x20;you&#x20;will&#x20;be&#x20;able&#x20;to&#x20;see&#x20;the&#x20;data&#x20;for&#x20;that&#x20;interval.&#x20;If&#x20;you&#x20;use&#x20;a&#x20;graph&#x20;with&#x20;full&#x20;resolution&#x20;data&#x20;&#40;we&#x20;call&#x20;them&#x20;TIP&#x20;graphs&#41;&#x20;you&#x20;will&#x20;be&#x20;able&#x20;to&#x20;see&#x20;the&#x20;detail&#x20;of&#x20;each&#x20;piece&#x20;of&#x20;data,&#x20;even&#x20;if&#x20;your&#x20;graph&#x20;has&#x20;thousands&#x20;of&#x20;samples.','',1);
 SELECT @last_id := LAST_INSERT_ID();
 INSERT INTO `twelcome_tip_file` (`twelcome_tip_file`,`filename`,`path`) VALUES (@last_id,'zoom_en_graficas.png','images/tips/');
+
+
+--
+-- Dumping data for table `tconfig_os_version`
+--
+
+LOCK TABLES `tconfig_os_version` WRITE;
+INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES 
+(1,'Windows.*','7.*','2020/01/14'),
+(2,'Cisco.*','IOS 3.4.3','2017/05/12'),
+(3,'Linux.*','Centos 7.*','2022/01/01');
+UNLOCK TABLES;
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index b90044db58..fe9c011a8b 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -3915,17 +3915,21 @@ Create a new entry in B<tagente> optionaly with position information
 
 =cut
 ##########################################################################
-sub pandora_create_agent ($$$$$$$$$$;$$$$$$$$$$) {
+sub pandora_create_agent ($$$$$$$$$$;$$$$$$$$$$$) {
 	# If parameter event_id is not undef, then create an extended event
 	# related to it instead launch new event.
 	my ($pa_config, $server_name, $agent_name, $address,
 		$group_id, $parent_id, $os_id,
 		$description, $interval, $dbh, $timezone_offset,
 		$longitude, $latitude, $altitude, $position_description,
-		$custom_id, $url_address, $agent_mode, $alias, $event_id) = @_;
+		$custom_id, $url_address, $agent_mode, $alias, $event_id, $os_version) = @_;
 	
 	logger ($pa_config, "Server '$server_name' creating agent '$agent_name' address '$address'.", 10);
 	
+	if (!defined $os_version) {
+			$os_version = '';
+	}
+
 	if (!defined($group_id)) {
 		$group_id = pandora_get_agent_group($pa_config, $dbh, $agent_name);
 		if ($group_id <= 0) {
@@ -3951,9 +3955,10 @@ sub pandora_create_agent ($$$$$$$$$$;$$$$$$$$$$) {
 	                                                 'url_address' => $url_address,
 	                                                 'timezone_offset' => $timezone_offset,
 	                                                 'alias' => safe_input($alias),
-													 'update_module_count' => 1, # Force to replicate in metaconsole
-	                                                });                           
-	                                                
+																									 'os_version' => $os_version,
+													 												 'update_module_count' => 1, # Force to replicate in metaconsole
+	                                                });
+
 	my $agent_id = db_insert ($dbh, 'id_agente', "INSERT INTO tagente $columns", @{$values});
 
 	# Save GIS data
diff --git a/pandora_server/lib/PandoraFMS/DiscoveryServer.pm b/pandora_server/lib/PandoraFMS/DiscoveryServer.pm
index d331c7986d..777e51ec8b 100644
--- a/pandora_server/lib/PandoraFMS/DiscoveryServer.pm
+++ b/pandora_server/lib/PandoraFMS/DiscoveryServer.pm
@@ -788,8 +788,8 @@ sub get_recon_credential_macro($$$) {
 ################################################################################
 # Guess the OS using xprobe2 or nmap.
 ################################################################################
-sub PandoraFMS::Recon::Base::guess_os($$;$) {
-  my ($self, $device, $string_flag) = @_;
+sub PandoraFMS::Recon::Base::guess_os($$;$$$) {
+  my ($self, $device, $string_flag, $return_version_only) = @_;
 
   return $self->{'os_id'}{$device} if defined($self->{'os_id'}{$device});
 
@@ -810,15 +810,32 @@ sub PandoraFMS::Recon::Base::guess_os($$;$) {
   if (-x $self->{'pa_config'}->{'nmap'}) {
     my $return = `"$self->{pa_config}->{nmap}" -sSU -T5 -F -O --osscan-limit $device 2>$DEVNULL`;
     return OS_OTHER if ($? != 0);
-    my $str_os;
+    my ($str_os, $os_version);
     if ($return =~ /Aggressive OS guesses:(.*?)(?>\(\d+%\),)|^OS details:(.*?)$/mi) {
       if(defined($1) && $1 ne "") {
         $str_os = $1;
       } else {
         $str_os = $2;
       }
+
+      my $pandora_os = pandora_get_os($self->{'dbh'}, $str_os);
+      my $pandora_os_name = pandora_get_os_by_id($self->{'dbh'}, $pandora_os);
+
+      if ($return_version_only == 1) {
+        if ($str_os =~ /$pandora_os_name/i) {
+          $os_version = $';  # Get string after matched found OS name.
+          $os_version =~ s/^\s+//; # Remove leading spaces.
+          $os_version =~ s/\s+$//; # Remove trailing spaces.
+        } else {
+          $os_version = '';
+        }
+
+        return $os_version;
+
+      }
+
       return $str_os if is_enabled($string_flag);
-      return pandora_get_os($self->{'dbh'}, $str_os);
+      return $pandora_os;
     }
   }
 
@@ -1640,6 +1657,10 @@ sub PandoraFMS::Recon::Base::report_scanned_agents($;$) {
           $os_id = $self->guess_os($data->{'agent'}{'direccion'});
         }
 
+        if (is_empty($data->{'agent'}{'os_version'})) {
+          $data->{'agent'}{'os_version'} = $self->guess_os($data->{'agent'}{'direccion'}, undef, 1);
+        }
+
         $self->call('message', "Agent accepted: ".$data->{'agent'}{'nombre'}, 5);
 
         # Agent creation.
@@ -1681,7 +1702,7 @@ sub PandoraFMS::Recon::Base::report_scanned_agents($;$) {
               $os_id, $data->{'agent'}->{'description'},
               $data->{'agent'}{'interval'}, $self->{'dbh'},
               $data->{'agent'}{'timezone_offset'}, undef, undef, undef, undef,
-              undef, undef, 1, $data->{'agent'}{'alias'}
+              undef, undef, 1, $data->{'agent'}{'alias'}, undef, $data->{'agent'}{'os_version'}
             );
 
             # Add found IP addresses to the agent.
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index 5da49dea30..5001beb4c3 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -6671,6 +6671,19 @@ sub cli_set_event_storm_protection () {
 	db_do ($dbh, 'UPDATE tconfig SET value=? WHERE token=?', $value, 'event_storm_protection');
 }
 
+##############################################################################
+# Set existing OS and OS version for a specific agent
+# Related option: --agent_set_os
+##############################################################################
+sub cli_agent_set_os() {
+	my ($id_agente,$id_os,$os_version) = @ARGV[2..4];
+
+	my $os_name = get_db_value($dbh, 'SELECT name FROM tconfig_os WHERE id_os = ?',$id_os);
+	exist_check($id_os,'tconfig_os',$os_name);
+
+	db_process_update($dbh, 'tagente', {'id_os' => $id_os, 'os_version' => $os_version}, {'id_agente' => $id_agente});
+}
+
 ##############################################################################
 # Return event name given a event id
 ##############################################################################
@@ -8147,7 +8160,11 @@ sub pandora_manage_main ($$$) {
 		elsif ($param eq '--set_event_storm_protection') {
 			param_check($ltotal, 1);
 			cli_set_event_storm_protection();
-		} 
+		}
+		elsif ($param eq '--agent_set_os') {
+			param_check($ltotal, 3, 1);
+			cli_agent_set_os();
+		}
 		elsif ($param eq '--create_custom_graph') {
 			param_check($ltotal, 11);
 			cli_create_custom_graph();

From 753851410e6f5e4f73854c6b43686e02321d8080 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 6 Sep 2023 17:02:15 +0200
Subject: [PATCH 027/116] implemented os version management

---
 pandora_console/godmode/setup/os_version.builder.php | 2 --
 1 file changed, 2 deletions(-)

diff --git a/pandora_console/godmode/setup/os_version.builder.php b/pandora_console/godmode/setup/os_version.builder.php
index 89e0092085..caf968e5be 100644
--- a/pandora_console/godmode/setup/os_version.builder.php
+++ b/pandora_console/godmode/setup/os_version.builder.php
@@ -100,8 +100,6 @@ if ($is_management_allowed === true) {
             $values['product'] = $product;
             $values['version'] = $version;
             $values['end_of_support'] = $end_of_life_date;
-            hd($values, true);
-            hd($idOS, true);
             $result = db_process_sql_update('tconfig_os_version', $values, ['id_os_version' => $idOS]);
 
             if ($result === false) {

From eea6400f453a11b93d71d7a4d0891da38f34977b Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 6 Sep 2023 17:05:07 +0200
Subject: [PATCH 028/116] implemented os version management

---
 pandora_console/include/chart_generator.php | 2 --
 1 file changed, 2 deletions(-)

diff --git a/pandora_console/include/chart_generator.php b/pandora_console/include/chart_generator.php
index ac0cf16e53..e8ee5f294c 100644
--- a/pandora_console/include/chart_generator.php
+++ b/pandora_console/include/chart_generator.php
@@ -213,8 +213,6 @@ $hack_metaconsole = (is_metaconsole() === true) ? '../../' : '';
 
         case 'sparse':
             $params['pdf'] = true;
-            hd(grafico_modulo_sparse($params), true);
-            hd("resultadoooooooooooooooooooooooooooo", true);
             echo grafico_modulo_sparse($params);
         break;
 

From f76615ba72cc04fed5f58c0c7c05404869dbcb97 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Thu, 7 Sep 2023 17:53:31 +0200
Subject: [PATCH 029/116] change

---
 pandora_console/include/functions_html.php | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/pandora_console/include/functions_html.php b/pandora_console/include/functions_html.php
index 6c6538cc58..0dfbdc15af 100644
--- a/pandora_console/include/functions_html.php
+++ b/pandora_console/include/functions_html.php
@@ -4946,9 +4946,6 @@ function html_print_input_file($name, $return=false, $options=false, $inline_upl
             true,
         );
         $output .= '</div>';
-    }
-
-    if ($inline_upload_anchor_to_form !== '') {
         $output .= '</div>';
     }
 

From 3d5a5c856b0fa3a53d150e309c6ceaaad945be71 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Fri, 8 Sep 2023 13:09:03 +0200
Subject: [PATCH 030/116] ITSM pandora_enterprise#11471

---
 pandora_console/godmode/setup/setup_ITSM.php | 132 +++++++++++++++----
 pandora_console/include/functions_api.php    | 114 ++++++++++++++++
 pandora_console/include/functions_config.php |  20 ++-
 pandora_console/include/lib/ITSM/ITSM.php    |  19 ++-
 pandora_server/lib/PandoraFMS/Core.pm        |  62 ---------
 pandora_server/util/pandora_db.pl            |   3 -
 6 files changed, 254 insertions(+), 96 deletions(-)

diff --git a/pandora_console/godmode/setup/setup_ITSM.php b/pandora_console/godmode/setup/setup_ITSM.php
index cbdb34b572..d71b3b984c 100644
--- a/pandora_console/godmode/setup/setup_ITSM.php
+++ b/pandora_console/godmode/setup/setup_ITSM.php
@@ -28,7 +28,7 @@
 
 use PandoraFMS\ITSM\ITSM;
 
- // Load globals.
+// Load globals.
 global $config;
 
 check_login();
@@ -54,6 +54,17 @@ try {
     $priority_values = $ITSM->getPriorities();
     $status_values = $ITSM->getStatus();
     $object_types_values = $ITSM->getObjectypes();
+    if ((bool) get_parameter('update_config', 0) === true) {
+        $set_config_inventories = $ITSM->createNode(
+            [
+                'serverAuth'         => $config['server_unique_identifier'],
+                'agentsForExecution' => $config['ITSM_agents_sync'],
+                'path'               => $config['ITSM_public_url'],
+                'label'              => array_keys(servers_get_names())[0],
+                'nodeId'             => $config['metaconsole_node_id'],
+            ]
+        );
+    }
 } catch (\Throwable $th) {
     $error = $th->getMessage();
     $has_connection = false;
@@ -103,7 +114,10 @@ $table_remote->data['ITSM_user_level_conf'] = $row;
 // ITSM hostname.
 $row = [];
 $row['hostname'] = html_print_label_input_block(
-    __('URL to Pandora ITSM setup').ui_print_help_tip(__('Full URL to your Pandora ITSM setup (e.g., http://192.168.1.20/integria/api/v1).'), true),
+    __('URL to Pandora ITSM setup').ui_print_help_tip(
+        __('Full URL to your Pandora ITSM setup (e.g., http://192.168.1.20/integria/api/v1).'),
+        true
+    ),
     html_print_input_text(
         'ITSM_hostname',
         $config['ITSM_hostname'],
@@ -131,8 +145,47 @@ $row['password'] = html_print_label_input_block(
 $table_remote->data['ITSM_token'] = $row;
 
 $row = [];
-$row['control'] = __('Inventory');
-$row['control'] .= html_print_button(
+$itsm_public_url = $config['ITSM_public_url'];
+if (empty($itsm_public_url) === true) {
+    $itsm_public_url = $config['homeurl'];
+    if (isset($config['public_url']) === true && empty($config['public_url']) === false) {
+        $itsm_public_url = $config['public_url'];
+    }
+}
+
+$row['publicUrl'] = html_print_label_input_block(
+    __('URL conect to API %s', get_product_name()).ui_print_help_tip(
+        __('Full URL to your Pandora (e.g., http://192.168.1.20).'),
+        true
+    ),
+    html_print_input_text(
+        'ITSM_public_url',
+        $itsm_public_url,
+        '',
+        30,
+        100,
+        true
+    )
+);
+
+$row['agentsSync'] = html_print_label_input_block(
+    __('Number Agents to synchronize').ui_print_help_tip(
+        __('Number of agents that will synchronize at the same time, minimum 10 max 1000'),
+        true
+    ),
+    html_print_input_number(
+        [
+            'name'  => 'ITSM_agents_sync',
+            'min'   => 10,
+            'max'   => 1000,
+            'value' => ($config['ITSM_agents_sync'] ?? 20),
+        ]
+    )
+);
+
+/*
+    $row['control'] = __('Inventory');
+    $row['control'] .= html_print_button(
     __('Sync inventory'),
     'sync-inventory',
     false,
@@ -142,12 +195,53 @@ $row['control'] .= html_print_button(
         'mode' => 'secondary mini',
     ],
     true
-);
-$row['control'] .= '<span id="ITSM-spinner-sync" style="display:none;">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
-$row['control'] .= '<span id="ITSM-success-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
-$row['control'] .= '<span id="ITSM-failure-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
+    );
+    $row['control'] .= '<span id="ITSM-spinner-sync" style="display:none;">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
+    $row['control'] .= '<span id="ITSM-success-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
+    $row['control'] .= '<span id="ITSM-failure-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
+*/
+
 $table_remote->data['ITSM_sync_inventory'] = $row;
 
+// Test.
+$row = [];
+$button_test = html_print_button(
+    __('Test'),
+    'ITSM',
+    false,
+    '',
+    [
+        'icon' => 'cog',
+        'mode' => 'secondary mini',
+    ],
+    true
+);
+$button_test .= '<span id="ITSM-spinner" class="invisible">&nbsp;';
+$button_test .= html_print_image(
+    'images/spinner.gif',
+    true
+);
+$button_test .= '</span>';
+$button_test .= '<span id="ITSM-success" class="invisible">&nbsp;';
+$button_test .= html_print_image(
+    'images/status_sets/default/severity_normal.png',
+    true
+);
+$button_test .= '&nbsp;'.__('Connection its OK').'</span>';
+$button_test .= '<span id="ITSM-failure" class="invisible">&nbsp;';
+$button_test .= html_print_image(
+    'images/status_sets/default/severity_critical.png',
+    true
+);
+$button_test .= '&nbsp;'.__('Connection failed').'</span>';
+$button_test .= '&nbsp;<span id="ITSM-message" class="invisible"></span>';
+
+$row['control'] = html_print_label_input_block(
+    __('Test connection'),
+    $button_test
+);
+$table_remote->data['ITSM_test'] = $row;
+
 // Alert settings.
 $table_alert_settings = new StdClass();
 $table_alert_settings->data = [];
@@ -402,26 +496,6 @@ $table_cr_settings->data[4][0] = html_print_label_input_block(
     )
 );
 
-// Test.
-$row = [];
-$row['control'] = __('Test connection');
-$row['control'] .= html_print_button(
-    __('Test'),
-    'ITSM',
-    false,
-    '',
-    [
-        'icon' => 'cog',
-        'mode' => 'secondary mini',
-    ],
-    true
-);
-$row['control'] .= '<span id="ITSM-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
-$row['control'] .= '<span id="ITSM-success" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'&nbsp;'.__('Connection its OK').'</span>';
-$row['control'] .= '<span id="ITSM-failure" class="invisible">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'&nbsp;'.__('Connection failed').'</span>';
-$row['control'] .= '&nbsp;<span id="ITSM-message" class="invisible"></span>';
-$table_remote->data['ITSM_test'] = $row;
-
 // Print.
 echo '<div class="center pdd_b_10px mrgn_btn_20px white_box max_floating_element_size">';
 echo '<a target="_blank" rel="noopener noreferrer" href="https://pandorafms.com/es/itsm/">';
@@ -458,7 +532,7 @@ html_print_table($table_remote);
 echo '</fieldset>';
 echo '</div>';
 
-if ($has_connection != false) {
+if ($has_connection !== false) {
     // Form alert default settings.
     echo '<div id="form_alert_settings">';
     echo '<fieldset class="mrgn_top_15px">';
diff --git a/pandora_console/include/functions_api.php b/pandora_console/include/functions_api.php
index 7e22befbee..9dfe1c0801 100644
--- a/pandora_console/include/functions_api.php
+++ b/pandora_console/include/functions_api.php
@@ -17783,3 +17783,117 @@ function api_token_check(string $token)
         return db_get_value('id_user', 'tusuario', 'api_token', $token);
     }
 }
+
+
+/**
+ * Extract info Agents for inventories ITSM.
+ *
+ * @return string Json output.
+ */
+function api_get_itsm_agents($thrash1, $thrash2, $other)
+{
+    $custom_fields = db_get_all_fields_in_table('tagent_custom_fields');
+    if ($custom_fields === false) {
+        $custom_fields = [];
+    }
+
+    $count_custom_fields = count($custom_fields);
+    $custom_field_sql = '';
+    $index_name_custom_fields = [];
+    foreach ($custom_fields as $key => $field) {
+        $index_name_custom_fields[$field['name']] = $field;
+        if ($key !== $count_custom_fields) {
+            $custom_field_sql .= ', ';
+        }
+
+        $custom_field_sql .= sprintf(
+            'MAX(CASE WHEN tagent_custom_fields.name = "%s" THEN tagent_custom_data.description END) AS "%s"',
+            $field['name'],
+            $field['name']
+        );
+    }
+
+    $where = '1=1';
+    $limit = '';
+    if (empty($other['data']) === false) {
+        // Current idAgent.
+        if (isset($other['data'][0]) === true && empty($other['data'][0]) === false) {
+            $where = sprintf(' tagente.id_agente > %d', $other['data'][0]);
+        }
+
+        // Offset
+        if (isset($other['data'][1]) === true && empty($other['data'][1]) === false) {
+            $limit = sprintf(' LIMIT %d OFFSET %d', $other['data'][1], 0);
+        }
+    }
+
+    $sql = sprintf(
+        'SELECT tagente.alias,
+            tagente.id_agente AS "ID Agent",
+            tagente.os_version AS "OS Version",
+            tagente.direccion AS "IP Address",
+            tagente.url_address AS "URL Address",
+            tgrupo.nombre AS "Group",
+            tconfig_os.name AS "OS"
+            %s
+        FROM tagente
+        LEFT JOIN tagent_custom_data
+            ON tagent_custom_data.id_agent = tagente.id_agente
+        LEFT JOIN tagent_custom_fields
+            ON tagent_custom_data.id_field = tagent_custom_fields.id_field
+        INNER JOIN tgrupo
+            ON tgrupo.id_grupo = tagente.id_grupo
+        INNER JOIN tconfig_os
+            ON tconfig_os.id_os = tagente.id_os
+        WHERE %s
+        GROUP BY tagente.id_agente
+        ORDER BY tagente.id_agente
+        %s',
+        $custom_field_sql,
+        $where,
+        $limit
+    );
+
+    $data = db_get_all_rows_sql($sql);
+    if ($data === false) {
+        $data = [];
+    }
+
+    $result = [];
+    foreach ($data as $key => $agent_fields) {
+        foreach ($agent_fields as $name_field => $value_field) {
+            $type = 'text';
+            if (isset($index_name_custom_fields[$name_field]) === true) {
+                if ($index_name_custom_fields[$name_field]['is_password_type']) {
+                    $type = 'password';
+                } else if ($index_name_custom_fields[$name_field]['is_link_enabled']) {
+                    $type = 'link';
+                }
+            }
+
+            $result[$agent_fields['ID Agent']][$name_field] = [
+                'data' => $value_field,
+                'type' => $type,
+            ];
+        }
+    }
+
+    returnData('json', $result);
+}
+
+
+/**
+ * Extract info Agents for inventories ITSM.
+ *
+ * @return string Json output.
+ */
+function api_get_itsm_count_agents()
+{
+    $sql = 'SELECT COUNT(tagente.id_agente) FROM tagente';
+    $result = db_get_value_sql($sql);
+    if ($result === false) {
+        $result = 0;
+    }
+
+    returnData('json', (int) $result);
+}
diff --git a/pandora_console/include/functions_config.php b/pandora_console/include/functions_config.php
index a33b3e50ae..de796b30ca 100644
--- a/pandora_console/include/functions_config.php
+++ b/pandora_console/include/functions_config.php
@@ -1905,7 +1905,17 @@ function config_update_config()
                     }
 
                     if (config_update_value('ITSM_hostname', $ITSM_hostname, true) === false) {
-                        $error_update[] = __('Pandora iTSM API hostname');
+                        $error_update[] = __('Pandora ITSM API hostname');
+                    }
+
+                    $ITSM_public_url = (string) get_parameter('ITSM_public_url', $config['ITSM_public_url']);
+                    if (config_update_value('ITSM_public_url', $ITSM_public_url, true) === false) {
+                        $error_update[] = __('Pandora ITSM API public url');
+                    }
+
+                    $ITSM_agents_sync = (int) get_parameter('ITSM_agents_sync', $config['ITSM_agents_sync']);
+                    if (config_update_value('ITSM_agents_sync', $ITSM_agents_sync, true) === false) {
+                        $error_update[] = __('Pandora ITSM API agents sync');
                     }
 
                     $incident_default_group = (int) get_parameter('default_group', $config['default_group']);
@@ -3818,6 +3828,14 @@ function config_process_config()
         config_update_value('ITSM_hostname', '');
     }
 
+    if (!isset($config['ITSM_public_url'])) {
+        config_update_value('ITSM_public_url', '');
+    }
+
+    if (!isset($config['ITSM_agents_sync'])) {
+        config_update_value('ITSM_agents_sync', 20);
+    }
+
     // Module Library.
     if (!isset($config['module_library_user'])) {
         config_update_value('module_library_user', '');
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index c718a93268..50f0c621cd 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -261,6 +261,10 @@ class ITSM
                 $path = '/inventory/'.$id;
             break;
 
+            case 'createNode':
+                $path = '/pandorafms/nodes';
+            break;
+
             default:
                 // Not posible.
             break;
@@ -467,7 +471,7 @@ class ITSM
      * Get table incicidences for agent.
      *
      * @param integer      $idAgent Id agent.
-     * @param boolean|null $mini    visual mode mini.
+     * @param boolean|null $mini    Visual mode mini.
      * @param integer|null $blocked Blocked.
      *
      * @return string Html output.
@@ -535,4 +539,17 @@ class ITSM
     }
 
 
+    /**
+     * Create Node in pandora ITSM.
+     *
+     * @param array $data Info connect to node from ITSM.
+     *
+     * @return boolean
+     */
+    public function createNode(array $data): array
+    {
+        return $this->callApi('createNode', null, $data);
+    }
+
+
 }
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 199b84482e..b182914d81 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -265,7 +265,6 @@ our @EXPORT = qw(
 	pandora_self_monitoring
 	pandora_thread_monitoring
 	pandora_process_policy_queue
-	pandora_sync_agents_integria
 	subst_alert_macros
 	subst_column_macros
 	locate_agent
@@ -1979,12 +1978,6 @@ sub pandora_execute_action ($$$$$$$$$;$$) {
 			'createWu' => $action->{'create_wu_integria'}
 		);
 
-		my $test = pandora_prepare_info_object_inventory_itsm($dbh);
-		# TODO: change to logger.
-		use Data::Dumper;
-		$Data::Dumper::SortKeys = 1;
-		print Dumper($test);
-
 		my $response = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/pandorafms/alert', $ITSM_token, \%dataSend);
 		if (!defined($response)){
 			return;
@@ -3930,32 +3923,6 @@ sub pandora_get_custom_field_for_itsm ($$) {
 	return \%result;
 }
 
-sub pandora_prepare_info_object_inventory_itsm ($) {
-	my ($dbh) = @_;
-	my $custom_fields = pandora_get_custom_fields($dbh);
-
-	my $sql = 'SELECT tagente.alias, tagente.id_agente AS "ID Agent", tagente.os_version AS "OS Version", tagente.direccion AS "IP Address",';
-	$sql .= ' tagente.url_address AS "URL Address", tgrupo.nombre AS "Group", tconfig_os.name AS "OS",';
-
-	foreach my $field (@{$custom_fields}) {
-		$sql .= ' case when tagent_custom_fields.name = "'. $field->{'name'} . '" then tagent_custom_data.description end AS "'. $field->{'name'} . '",';
-	}
-
-	$sql = substr($sql, 0, -1);
-	
-	$sql .= ' FROM tagent_custom_fields';
-	$sql .= ' INNER JOIN tagent_custom_data ON tagent_custom_data.id_field = tagent_custom_fields.id_field';
-	$sql .= ' RIGHT JOIN tagente ON tagent_custom_data.id_agent = tagente.id_agente';
-	$sql .= ' INNER JOIN tgrupo ON tgrupo.id_grupo = tagente.id_grupo';
-	$sql .= ' INNER JOIN tconfig_os ON tconfig_os.id_os = tagente.id_os';
-	$sql .= ' GROUP BY tagente.id_agente';
-	$sql .= ' ORDER BY tagente.id_agente';
-
-	my @result = get_db_rows($dbh, $sql);
-
-	return \@result;
-}
-
 ##########################################################################
 ## Update a custom field from agent of tagent_custom_data 
 ##########################################################################
@@ -7097,35 +7064,6 @@ sub pandora_API_ITSM_call ($$$$$) {
 	}
 }
 
-sub pandora_sync_agents_integria ($$) {
-	my ($pa_config, $dbh) = @_;
-
-	my $config_ITSM_enabled = pandora_get_tconfig_token ($dbh, 'ITSM_enabled', '');
-
-	if (!$config_ITSM_enabled) {
-		return;
-	}
-
-	my $ITSM_path = pandora_get_tconfig_token ($dbh, 'ITSM_hostname', '');
-	my $ITSM_token = pandora_get_tconfig_token ($dbh, 'ITSM_token', '');
-
-
-	my %dataAgents = (
-		'agents' => pandora_prepare_info_object_inventory_itsm($dbh),
-		'idNode' => pandora_get_tconfig_token($dbh, 'metaconsole_node_id', 0)
-	);
-
-	# TODO: change to logger.
-	#use Data::Dumper;
-	#$Data::Dumper::SortKeys = 1;
-	#print Dumper(\%dataAgents);
-
-	my $response = pandora_API_ITSM_call($pa_config, 'post', $ITSM_path . '/pandorafms/agents', $ITSM_token, \%dataAgents);
-	if (!defined($response)){
-		return;
-	}
-}
-
 ##########################################################################
 =head2 C<< pandora_input_password (I<$pa_config>, I<$password>) >> 
 
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index 213588c074..c883ee1f23 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -1396,9 +1396,6 @@ if (defined($history_dbh)) {
 	
 }
 
-# Keep integrity between PandoraFMS agents and Pandora ITSM inventory objects.
-#pandora_sync_agents_integria($dbh);
-
 # Cleanup and exit
 db_disconnect ($history_dbh) if defined ($history_dbh);
 db_disconnect ($dbh);

From 5093d54137a499ccecfbba278c4f2e25d7bcd267 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Mon, 11 Sep 2023 18:14:32 +0200
Subject: [PATCH 031/116] ITSM pandora_enterprise#11471

---
 pandora_console/godmode/setup/setup_ITSM.php | 221 +++++++++----------
 pandora_console/include/javascript/ITSM.js   |  64 +++++-
 pandora_console/include/lib/ITSM/ITSM.php    |  54 +++++
 pandora_console/include/lib/ITSM/Manager.php |  28 ++-
 4 files changed, 242 insertions(+), 125 deletions(-)

diff --git a/pandora_console/godmode/setup/setup_ITSM.php b/pandora_console/godmode/setup/setup_ITSM.php
index d71b3b984c..3196ef677c 100644
--- a/pandora_console/godmode/setup/setup_ITSM.php
+++ b/pandora_console/godmode/setup/setup_ITSM.php
@@ -47,6 +47,7 @@ $group_values = [];
 $priority_values = [];
 $object_types_values = [];
 $status_values = [];
+$node = [];
 try {
     $ITSM = new ITSM();
     $has_connection = $ITSM->ping();
@@ -58,6 +59,7 @@ try {
         $set_config_inventories = $ITSM->createNode(
             [
                 'serverAuth'         => $config['server_unique_identifier'],
+                'apiPass'            => $config['api_password'],
                 'agentsForExecution' => $config['ITSM_agents_sync'],
                 'path'               => $config['ITSM_public_url'],
                 'label'              => array_keys(servers_get_names())[0],
@@ -65,6 +67,12 @@ try {
             ]
         );
     }
+
+    try {
+        $node = $ITSM->getNode($config['server_unique_identifier']);
+    } catch (\Throwable $th) {
+        $node = [];
+    }
 } catch (\Throwable $th) {
     $error = $th->getMessage();
     $has_connection = false;
@@ -144,6 +152,45 @@ $row['password'] = html_print_label_input_block(
 );
 $table_remote->data['ITSM_token'] = $row;
 
+// Test.
+$row = [];
+$button_test = html_print_button(
+    __('Test'),
+    'ITSM',
+    false,
+    '',
+    [
+        'icon' => 'cog',
+        'mode' => 'secondary mini',
+    ],
+    true
+);
+$button_test .= '<span id="ITSM-spinner" class="invisible">&nbsp;';
+$button_test .= html_print_image(
+    'images/spinner.gif',
+    true
+);
+$button_test .= '</span>';
+$button_test .= '<span id="ITSM-success" class="invisible">&nbsp;';
+$button_test .= html_print_image(
+    'images/status_sets/default/severity_normal.png',
+    true
+);
+$button_test .= '&nbsp;'.__('Connection its OK').'</span>';
+$button_test .= '<span id="ITSM-failure" class="invisible">&nbsp;';
+$button_test .= html_print_image(
+    'images/status_sets/default/severity_critical.png',
+    true
+);
+$button_test .= '&nbsp;'.__('Connection failed').'</span>';
+$button_test .= '&nbsp;<span id="ITSM-message" class="invisible"></span>';
+
+$row['control'] = html_print_label_input_block(
+    __('Test connection pandora to ITSM'),
+    $button_test
+);
+$table_remote->data['ITSM_test'] = $row;
+
 $row = [];
 $itsm_public_url = $config['ITSM_public_url'];
 if (empty($itsm_public_url) === true) {
@@ -183,31 +230,13 @@ $row['agentsSync'] = html_print_label_input_block(
     )
 );
 
-/*
-    $row['control'] = __('Inventory');
-    $row['control'] .= html_print_button(
-    __('Sync inventory'),
-    'sync-inventory',
-    false,
-    '',
-    [
-        'icon' => 'cog',
-        'mode' => 'secondary mini',
-    ],
-    true
-    );
-    $row['control'] .= '<span id="ITSM-spinner-sync" style="display:none;">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
-    $row['control'] .= '<span id="ITSM-success-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_normal.png', true).'</span>';
-    $row['control'] .= '<span id="ITSM-failure-sync" style="display:none;">&nbsp;'.html_print_image('images/status_sets/default/severity_critical.png', true).'</span>';
-*/
-
 $table_remote->data['ITSM_sync_inventory'] = $row;
 
 // Test.
 $row = [];
-$button_test = html_print_button(
+$button_test_pandora = html_print_button(
     __('Test'),
-    'ITSM',
+    'ITSM-pandora',
     false,
     '',
     [
@@ -216,31 +245,62 @@ $button_test = html_print_button(
     ],
     true
 );
-$button_test .= '<span id="ITSM-spinner" class="invisible">&nbsp;';
-$button_test .= html_print_image(
+$button_test_pandora .= '<span id="ITSM-spinner-pandora" class="invisible">&nbsp;';
+$button_test_pandora .= html_print_image(
     'images/spinner.gif',
     true
 );
-$button_test .= '</span>';
-$button_test .= '<span id="ITSM-success" class="invisible">&nbsp;';
-$button_test .= html_print_image(
+$button_test_pandora .= '</span>';
+$button_test_pandora .= '<span id="ITSM-success-pandora" class="invisible">&nbsp;';
+$button_test_pandora .= html_print_image(
     'images/status_sets/default/severity_normal.png',
     true
 );
-$button_test .= '&nbsp;'.__('Connection its OK').'</span>';
-$button_test .= '<span id="ITSM-failure" class="invisible">&nbsp;';
-$button_test .= html_print_image(
+$button_test_pandora .= '&nbsp;'.__('Connection its OK').'</span>';
+$button_test_pandora .= '<span id="ITSM-failure-pandora" class="invisible">&nbsp;';
+$button_test_pandora .= html_print_image(
     'images/status_sets/default/severity_critical.png',
     true
 );
-$button_test .= '&nbsp;'.__('Connection failed').'</span>';
-$button_test .= '&nbsp;<span id="ITSM-message" class="invisible"></span>';
+$button_test_pandora .= '&nbsp;'.__('Connection failed').'</span>';
+$button_test_pandora .= '&nbsp;<span id="ITSM-message-pandora" class="invisible"></span>';
 
-$row['control'] = html_print_label_input_block(
-    __('Test connection'),
-    $button_test
+$row['control-test'] = html_print_label_input_block(
+    __('Test conection ITSM to pandora'),
+    $button_test_pandora
 );
-$table_remote->data['ITSM_test'] = $row;
+
+if (empty($node) === false) {
+    $progressbar = '';
+
+    $progress = 0;
+    if (empty($node['total']) === false) {
+        if (empty($node['accumulate']) === true) {
+            $node['accumulate'] = 0;
+        }
+
+        $progress = round(($node['accumulate'] * 100 / $node['total']));
+    }
+
+    if (empty($node['error']) === false) {
+        $progressbar = $node['error'];
+    } else if (empty($node['total']) === false) {
+        $progressbar = '<div class="flex mrgn_5px">';
+        $progressbar .= ui_progress($progress, '150px', '1.3', '#14524f', true, '', false, 'margin-right:5px; color:#c0ccdc');
+        $progressbar .= ' ( '.$node['accumulate'].' / '.$node['total'].' ) '.__('Agents');
+        $progressbar .= '</div>';
+    } else {
+        $progressbar = '--';
+    }
+
+    // $progressbar .= (empty($node['dateStart']) === false) ? human_time_comparation($node['dateStart']) : __('Never');
+    $row['control-test-pandora'] = html_print_label_input_block(
+        __('Progress agents to synch'),
+        $progressbar
+    );
+}
+
+$table_remote->data['ITSM_test_pandora'] = $row;
 
 // Alert settings.
 $table_alert_settings = new StdClass();
@@ -579,7 +639,6 @@ ui_require_javascript_file('ITSM');
 ?>
 
 <script type="text/javascript">
-
     if($('input:checkbox[name="ITSM_user_level_conf"]').is(':checked'))
     {
         $('.ITSM-remote-setup-ITSM_token').hide()
@@ -643,97 +702,15 @@ ui_require_javascript_file('ITSM');
 
     $('input:checkbox[name="ITSM_enabled"]').change(handleEnable);
 
-    var handleInventorySync = function (event) {
-
-        var badRequestMessage = '<?php echo __('Empty user or password'); ?>';
-        var notFoundMessage = '<?php echo __('User not found'); ?>';
-        var invalidPassMessage = '<?php echo __('Invalid password'); ?>';
-
-        var hideLoadingImage = function () {
-            $('span#ITSM-spinner-sync').hide();
-        }
-        var showLoadingImage = function () {
-            $('span#ITSM-spinner-sync').show();
-        }
-        var hideSuccessImage = function () {
-            $('span#ITSM-success-sync').hide();
-        }
-        var showSuccessImage = function () {
-            $('span#ITSM-success-sync').show();
-        }
-        var hideFailureImage = function () {
-            $('span#ITSM-failure-sync').hide();
-        }
-        var showFailureImage = function () {
-            $('span#ITSM-failure-sync').show();
-        }
-
-        hideSuccessImage();
-        hideFailureImage();
-        showLoadingImage();
-
-        var ITSM_token = $('input[name=ITSM_token]').val();
-        var api_hostname = $('input[name=ITSM_hostname]').val();
-
-        if (!api_hostname.match(/^[a-zA-Z]+:\/\//))
-        {
-            api_hostname = 'http://' + api_hostname;
-        }
-
-        var url = api_hostname + '//include/api.php';
-
-        <?php
-        // Retrieve all agents and codify string in the format that will be sent over in Ajax call.
-            $agent_fields = [
-                'nombre',
-                'alias',
-                'id_os',
-                'direccion',
-                'id_agente',
-                'id_grupo',
-            ];
-
-            $agents = agents_get_agents(false, $agent_fields);
-
-            $agents_query_string_array = [];
-
-            foreach ($agents as $agent_data) {
-                $agents_query_string_array[] = implode('|;|', $agent_data);
-            }
-            ?>
-
-        var agents_query_string_array = <?php echo json_encode($agents_query_string_array); ?>;
-
-        var data = {
-            op: 'sync_pandora_agents_inventory',
-            user_pass: ITSM_token,
-            params: agents_query_string_array,
-            token: '|;|'
-        }
-
-        // AJAX call to check API connection.
-        $.ajax({
-            type: "POST",
-            url: url,
-            dataType: "json",
-            data: data
-        })
-        .done(function(data, textStatus, xhr) {
-            showSuccessImage();
-        })
-        .fail(function(xhr, textStatus, errorThrown) {
-            showFailureImage();
-        })
-        .always(function(xhr, textStatus) {
-            hideLoadingImage();
-        });
-    }
-
     $('#button-ITSM').click(function() {
         var pass = $('input#password-ITSM_token').val();
         var host = $('input#text-ITSM_hostname').val();
         testConectionApi(pass, host);
     });
-    //$('#button-sync-inventory').click(handleInventorySync);
+
+    $('#button-ITSM-pandora').click(function() {
+        var path = $('input#text-ITSM_public_url').val();
+        testConectionApiItsmToPandora(path);
+    });
 
 </script>
diff --git a/pandora_console/include/javascript/ITSM.js b/pandora_console/include/javascript/ITSM.js
index b07aba4c8f..fa3802fffb 100644
--- a/pandora_console/include/javascript/ITSM.js
+++ b/pandora_console/include/javascript/ITSM.js
@@ -100,7 +100,7 @@ function testConectionApi(pass, host) {
 
   var data = {
     page: "operation/ITSM/itsm",
-    method: "checkConncetionApi",
+    method: "checkConnectionApi",
     pass: pass,
     host: host
   };
@@ -127,3 +127,65 @@ function testConectionApi(pass, host) {
       hideLoadingImage();
     });
 }
+
+/* Function check API */
+// eslint-disable-next-line no-unused-vars
+function testConectionApiItsmToPandora(path) {
+  var hideLoadingImage = function() {
+    $("span#ITSM-spinner-pandora").hide();
+  };
+  var showLoadingImage = function() {
+    $("span#ITSM-spinner-pandora").show();
+  };
+  var hideSuccessImage = function() {
+    $("span#ITSM-success-pandora").hide();
+  };
+  var showSuccessImage = function() {
+    $("span#ITSM-success-pandora").show();
+  };
+  var hideFailureImage = function() {
+    $("span#ITSM-failure-pandora").hide();
+  };
+  var showFailureImage = function() {
+    $("span#ITSM-failure-pandora").show();
+  };
+  var hideMessage = function() {
+    $("span#ITSM-message-pandora").hide();
+  };
+  var showMessage = function() {
+    $("span#ITSM-message-pandora").show();
+  };
+
+  hideSuccessImage();
+  hideFailureImage();
+  hideMessage();
+  showLoadingImage();
+
+  var data = {
+    page: "operation/ITSM/itsm",
+    method: "checkConnectionApiITSMToPandora",
+    path: path
+  };
+
+  $.ajax({
+    type: "POST",
+    url: "ajax.php",
+    dataType: "json",
+    data: data
+  })
+    .done(function(data) {
+      if (data.valid == 1) {
+        showSuccessImage();
+      } else {
+        showFailureImage();
+        showMessage();
+      }
+    })
+    .fail(function() {
+      showFailureImage();
+      showMessage();
+    })
+    .always(function() {
+      hideLoadingImage();
+    });
+}
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index 50f0c621cd..b3ba547dbb 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -265,6 +265,14 @@ class ITSM
                 $path = '/pandorafms/nodes';
             break;
 
+            case 'getNode':
+                $path = '/pandorafms/node/'.$id;
+            break;
+
+            case 'pingItsmToPandora':
+                $path = '/pandorafms/node/ping';
+            break;
+
             default:
                 // Not posible.
             break;
@@ -552,4 +560,50 @@ class ITSM
     }
 
 
+    /**
+     * Get info node sincronization.
+     *
+     * @param string $serverAuth Server Auth.
+     *
+     * @return array Array.
+     */
+    public function getNode(string $serverAuth): array
+    {
+        $result = $this->callApi(
+            'getNode',
+            [],
+            [],
+            $serverAuth,
+            'GET'
+        );
+
+        return $result;
+    }
+
+
+    /**
+     * Ping Itsm to pandora node.
+     *
+     * @param string $path Path.
+     *
+     * @return boolean
+     */
+    public function pingItsmtoPandora(string $path): bool
+    {
+        global $config;
+
+        $result = $this->callApi(
+            'pingItsmToPandora',
+            [],
+            [
+                'path'       => $path,
+                'apiPass'    => $config['api_password'],
+                'serverAuth' => $config['server_unique_identifier'],
+            ]
+        );
+
+        return (bool) $result['valid'];
+    }
+
+
 }
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 9e08b05910..544ded12e7 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -28,7 +28,8 @@ class Manager
         'getUserSelect',
         'getInputFieldsIncidenceType',
         'getDownloadIncidenceAttachment',
-        'checkConncetionApi',
+        'checkConnectionApi',
+        'checkConnectionApiITSMToPandora',
     ];
 
     /**
@@ -1444,7 +1445,7 @@ class Manager
      *
      * @return void
      */
-    public function checkConncetionApi()
+    public function checkConnectionApi()
     {
         $pass = (string) get_parameter('pass', '');
         $host = (string) get_parameter('host', '');
@@ -1462,4 +1463,27 @@ class Manager
     }
 
 
+    /**
+     * Ping API, check connection pandora ITSM to pandora.
+     *
+     * @return void
+     */
+    public function checkConnectionApiITSMToPandora()
+    {
+        $path = (string) get_parameter('path', '');
+        try {
+            $ITSM = new ITSM();
+            $result = $ITSM->pingItsmtoPandora($path);
+        } catch (Throwable $e) {
+            echo $e->getMessage();
+            hd($e->getMessage(), true);
+            $result = false;
+            exit;
+        }
+
+        echo json_encode(['valid' => ($result !== false) ? 1 : 0]);
+        exit;
+    }
+
+
 }

From 8e29973128cee8a1c9f3a1a0d4a56330467b7dd0 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Tue, 12 Sep 2023 13:10:23 +0200
Subject: [PATCH 032/116] ITSM pandora_enterprise#11471

---
 .../include/lib/Dashboard/Widgets/ITSMIncidences.php          | 2 +-
 pandora_console/include/styles/pandoraitsm.css                | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php b/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php
index 722389ffa3..13a899fe41 100644
--- a/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php
+++ b/pandora_console/include/lib/Dashboard/Widgets/ITSMIncidences.php
@@ -388,7 +388,7 @@ class ITSMIncidences extends Widget
             ui_print_datatable(
                 [
                     'id'                 => $tableId,
-                    'class'              => 'info_table',
+                    'class'              => 'info_table table-widget-itsm',
                     'style'              => 'width: 99%',
                     'columns'            => $columns,
                     'column_names'       => $column_names,
diff --git a/pandora_console/include/styles/pandoraitsm.css b/pandora_console/include/styles/pandoraitsm.css
index d6375c1459..8c7c95c35d 100644
--- a/pandora_console/include/styles/pandoraitsm.css
+++ b/pandora_console/include/styles/pandoraitsm.css
@@ -138,3 +138,7 @@ div.container-statistics > div {
   max-width: 46%;
   margin: 1%;
 }
+
+table.table-widget-itsm tr > td {
+  text-align: left;
+}

From f410f09745040ae6eb48cf4565563452cb14dfcb Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Thu, 14 Sep 2023 10:43:35 +0200
Subject: [PATCH 033/116] change mr

---
 pandora_console/extras/mr/65.sql | 12 ------------
 pandora_console/extras/mr/66.sql | 12 ++++++++++++
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/pandora_console/extras/mr/65.sql b/pandora_console/extras/mr/65.sql
index 3887862d3e..290c9a3972 100644
--- a/pandora_console/extras/mr/65.sql
+++ b/pandora_console/extras/mr/65.sql
@@ -62,14 +62,6 @@ CREATE TABLE IF NOT EXISTS `tnetwork_usage_filter` (
 PRIMARY KEY (`id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
 
-CREATE TABLE IF NOT EXISTS `tconfig_os_version` (
-  `id_os_version` INT UNSIGNED NOT NULL AUTO_INCREMENT,
-  `product` TEXT,
-  `version` TEXT,
-  `end_of_support` VARCHAR(10) DEFAULT NULL,
-  PRIMARY KEY  (`id_os_version`)
-) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
-
 ALTER TABLE `tlayout`
 ADD COLUMN `grid_color` VARCHAR(45) NOT NULL DEFAULT '#cccccc' AFTER `maintenance_mode`,
 ADD COLUMN `grid_size` VARCHAR(45) NOT NULL DEFAULT '10' AFTER `grid_color`;
@@ -86,10 +78,6 @@ ALTER TABLE `tmetaconsole_agent` ADD COLUMN `disabled_by_downtime` TINYINT NOT N
 
 DELETE FROM tconfig WHERE token = 'refr';
 
-INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES (1,'Windows.*','7.*','2020/01/14');
-INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES (2,'Cisco.*','IOS 3.4.3','2017/05/12');
-INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES (3,'Linux.*','Centos 7.*','2022/01/01');
-
 INSERT INTO `tmodule_inventory` (`id_module_inventory`, `id_os`, `name`, `description`, `interpreter`, `data_format`, `code`, `block_mode`,`script_mode`) VALUES (37,2,'CPU','CPU','','Brand;Clock;Model','',0,2);
 
 INSERT INTO `tmodule_inventory` (`id_module_inventory`, `id_os`, `name`, `description`, `interpreter`, `data_format`, `code`, `block_mode`,`script_mode`) VALUES (38,2,'RAM','RAM','','Size','',0,2);
diff --git a/pandora_console/extras/mr/66.sql b/pandora_console/extras/mr/66.sql
index 8161c4c2b6..173aedd395 100644
--- a/pandora_console/extras/mr/66.sql
+++ b/pandora_console/extras/mr/66.sql
@@ -13,6 +13,14 @@ CREATE TABLE IF NOT EXISTS `tgraph_analytics_filter` (
 PRIMARY KEY (`id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
 
+CREATE TABLE IF NOT EXISTS `tconfig_os_version` (
+  `id_os_version` INT UNSIGNED NOT NULL AUTO_INCREMENT,
+  `product` TEXT,
+  `version` TEXT,
+  `end_of_support` VARCHAR(10) DEFAULT NULL,
+  PRIMARY KEY  (`id_os_version`)
+) ENGINE=InnoDB DEFAULT CHARSET=UTF8MB4;
+
 UPDATE `twelcome_tip`
 	SET title = 'Scheduled&#x20;downtimes',
          url = 'https://pandorafms.com/manual/en/documentation/04_using/11_managing_and_administration#scheduled_downtimes'
@@ -44,4 +52,8 @@ ADD COLUMN `time_init` VARCHAR(45) NULL AFTER `date_init`,
 ADD COLUMN `date_end` VARCHAR(45) NULL AFTER `time_init`,
 ADD COLUMN `time_end` VARCHAR(45) NULL AFTER `date_end`;
 
+INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES (1,'Windows.*','7.*','2020/01/14');
+INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES (2,'Cisco.*','IOS 3.4.3','2017/05/12');
+INSERT INTO `tconfig_os_version` (`id_os_version`, `product`, `version`, `end_of_support`) VALUES (3,'Linux.*','Centos 7.*','2022/01/01');
+
 COMMIT;

From a2baea5710359f0a22d554717d19dd389423edf6 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Thu, 14 Sep 2023 12:24:12 +0200
Subject: [PATCH 034/116] Migration legacy apps to discovery 2.0

---
 .../DiscoveryApplicationsMigrateCodes.ini     |   11 +
 .../migration_scripts/insert.xenserver.sql    |   14 +
 .../migration_scripts/migrate.aws.ec2.sql     | 1620 +++++++++++++++++
 .../migration_scripts/migrate.aws.rds.sql     |  544 ++++++
 .../migration_scripts/migrate.aws.s3.sql      |  410 +++++
 .../migration_scripts/migrate.azure.sql       |  692 +++++++
 .../migration_scripts/migrate.db2.sql         |  161 ++
 .../migration_scripts/migrate.gcp.ce.sql      |  692 +++++++
 .../migration_scripts/migrate.mssql.sql       |  145 ++
 .../migration_scripts/migrate.mysql.sql       |  206 +++
 .../migration_scripts/migrate.oracle.sql      |  169 ++
 .../migration_scripts/migrate.sap.deset.sql   | 1272 +++++++++++++
 .../migration_scripts/migrate.vmware.sql      | 1010 ++++++++++
 pandora_console/godmode/menu.php              |   19 +-
 .../godmode/wizards/Applications.class.php    |   15 +
 .../godmode/wizards/Cloud.class.php           |   15 +
 .../wizards/ManageExtensions.class.php        |  241 ++-
 .../include/javascript/manage_extensions.js   |   58 +-
 18 files changed, 7280 insertions(+), 14 deletions(-)
 create mode 100644 pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/insert.xenserver.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.aws.ec2.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.aws.rds.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.aws.s3.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.azure.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.db2.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.gcp.ce.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.mssql.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.mysql.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.oracle.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.sap.deset.sql
 create mode 100644 pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql

diff --git a/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini b/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
new file mode 100644
index 0000000000..5eff8c47d0
--- /dev/null
+++ b/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
@@ -0,0 +1,11 @@
+pandorafms.vmware=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.mysql=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.mssql=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.oracle=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.db2=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.sap.deset=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.gcp.ce=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.aws.ec2=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.aws.s3=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.aws.rds=d41d8cd98f00b204e9800998ecf8427e
+pandorafms.azure.mc=d41d8cd98f00b204e9800998ecf8427e
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/insert.xenserver.sql b/pandora_console/attachment/discovery/migration_scripts/insert.xenserver.sql
new file mode 100644
index 0000000000..7a1160af50
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/insert.xenserver.sql
@@ -0,0 +1,14 @@
+-- Insert new XenServer APP
+SET @short_name = 'pandorafms.xenserver';
+SET @name = 'XenServer';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;hosts,&#x20;storages&#x20;and&#x20;VMs&#x20;from&#x20;a&#x20;specific&#x20;XenServer';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_xenserver');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;-c&#x20;&#039;_tempfileXenServer_&#039;&#x20;--as_discovery_plugin&#x20;1');
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.aws.ec2.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.aws.ec2.sql
new file mode 100644
index 0000000000..61a7e2ef4e
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.aws.ec2.sql
@@ -0,0 +1,1620 @@
+-- Insert new EC2 APP
+SET @current_app_type = 6;
+SET @short_name = 'pandorafms.aws.ec2';
+SET @name = 'Amazon&#x20;EC2';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;AWS&#x20;EC2&#x20;instances';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_aws_ec2');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/aws_ec2');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileEC2_&#039;');
+
+-- Migrate current EC2 tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleIP_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_ip')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentaclePort_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_port')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleExtraOpt_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_opts')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_credentials_', 'credentials.aws', `auth_strings`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+SET @position = 4;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        '_globalTotalCost_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_ec2InstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_ec2CpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_ec2IopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_ec2DiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_ec2NetworkPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        '_ec2StorageSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        '_ec2ElasticAddressesSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        '_globalCostInterval_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 5;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        '_globalTotalCost_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_ec2InstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_ec2CpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_ec2IopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_ec2DiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_ec2NetworkPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        '_ec2StorageSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        '_ec2ElasticAddressesSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        '_globalCostInterval_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 6;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        '_globalTotalCost_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_ec2InstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_ec2CpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_ec2IopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_ec2DiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_ec2NetworkPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        '_ec2StorageSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        '_ec2ElasticAddressesSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        '_globalCostInterval_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 7;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        '_globalTotalCost_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_ec2InstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_ec2CpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_ec2IopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_ec2DiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_ec2NetworkPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        '_ec2StorageSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        '_ec2ElasticAddressesSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        '_globalCostInterval_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 8;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        '_globalTotalCost_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_ec2InstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_ec2CpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_ec2IopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_ec2DiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_ec2NetworkPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        '_ec2StorageSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        '_ec2ElasticAddressesSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        '_globalCostInterval_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 9;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        '_globalTotalCost_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_ec2InstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_ec2CpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_ec2IopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_ec2DiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_ec2NetworkPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        '_ec2StorageSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        '_ec2ElasticAddressesSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        '_globalCostInterval_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 10;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        '_globalTotalCost_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_ec2InstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_ec2CpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_ec2IopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_ec2DiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_ec2NetworkPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        '_ec2StorageSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        '_ec2ElasticAddressesSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        '_globalCostInterval_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 11;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        '_globalTotalCost_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_ec2InstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_ec2CpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_ec2IopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_ec2DiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_ec2NetworkPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        '_ec2StorageSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        '_ec2ElasticAddressesSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        '_globalCostInterval_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 12;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        '_globalTotalCost_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_ec2InstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_ec2CpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_ec2IopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_ec2DiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_ec2NetworkPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        '_ec2StorageSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        '_ec2ElasticAddressesSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        '_globalCostInterval_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_total_cost',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_storage_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_elastic_addresses_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", 1) = 'global_cost_interval',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ), IF( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", 1 ) != SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), REPLACE( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONCAT( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ), IF( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", 1 ) != SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), REPLACE( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), CONCAT( SUBSTRING_INDEX( SUBSTRING_INDEX( CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "global_cost_region ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_instance ", -1 ), "\n",1 ), "\n" ), "" ), "" ) ), "ec2_zones ", -1 ), "\n",1 ), "\n" ), "" ), "" ) )
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgent_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgentName_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_globalTotalCost_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_ec2InstanceSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_ec2CpuPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_ec2IopsPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_ec2DiskPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_ec2NetworkPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_ec2StorageSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_ec2ElasticAddressesSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_globalCostInterval_', 'custom', 604800, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @param = 'global_cost_region';
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_globalCostRegion_',
+    'custom', 
+    REPLACE(
+        REPLACE(
+            CONCAT(
+                '["',
+                REPLACE(
+                    REPLACE(
+                        REPLACE(
+                            REPLACE(
+                                CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                SUBSTRING_INDEX(
+                                    CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                    CONCAT(@param, " "), 1
+                                ),
+                                ""
+                            ),
+                            REPLACE(
+                                SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ),
+                                SUBSTRING_INDEX(SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ), "\n", 1),
+                                ""
+                            ),
+                            "\n"
+                        ),
+                        CONCAT(@param, " "),
+                        ""
+                    ),
+                    "\n",
+                    '","'
+                ),
+                '"]'
+            ),
+            ',""]',
+            ']'
+        ),
+        '[""]',
+        '[]'
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @param = 'ec2_instance';
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_ec2Instance_',
+    'custom', 
+    REPLACE(
+        REPLACE(
+            CONCAT(
+                '["',
+                REPLACE(
+                    REPLACE(
+                        REPLACE(
+                            REPLACE(
+                                CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                SUBSTRING_INDEX(
+                                    CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                    CONCAT(@param, " "), 1
+                                ),
+                                ""
+                            ),
+                            REPLACE(
+                                SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ),
+                                SUBSTRING_INDEX(SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ), "\n", 1),
+                                ""
+                            ),
+                            "\n"
+                        ),
+                        CONCAT(@param, " "),
+                        ""
+                    ),
+                    "\n",
+                    '","'
+                ),
+                '"]'
+            ),
+            ',""]',
+            ']'
+        ),
+        '[""]',
+        '[]'
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @param = 'ec2_zones';
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_ec2Zones_',
+    'custom', 
+    REPLACE(
+        REPLACE(
+            CONCAT(
+                '["',
+                REPLACE(
+                    REPLACE(
+                        REPLACE(
+                            REPLACE(
+                                CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                SUBSTRING_INDEX(
+                                    CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                    CONCAT(@param, " "), 1
+                                ),
+                                ""
+                            ),
+                            REPLACE(
+                                SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ),
+                                SUBSTRING_INDEX(SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ), "\n", 1),
+                                ""
+                            ),
+                            "\n"
+                        ),
+                        CONCAT(@param, " "),
+                        ""
+                    ),
+                    "\n",
+                    '","'
+                ),
+                '"]'
+            ),
+            ',""]',
+            ']'
+        ),
+        '[""]',
+        '[]'
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_ec2ZonesInstance_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileEC2_', 'custom', 'interval=__taskInterval__&#x0d;&#x0a;agents_group_name=__taskGroup__&#x0d;&#x0a;storage=_ec2StorageSummary_&#x0d;&#x0a;elastic_ip_address=_ec2ElasticAddressesSummary_&#x0d;&#x0a;advance_monitoring=_ec2InstanceSummary_&#x0d;&#x0a;cpu_summary=_ec2CpuPerfSummary_&#x0d;&#x0a;iops_summary=_ec2IopsPerfSummary_&#x0d;&#x0a;disk_summary=_ec2DiskPerfSummary_&#x0d;&#x0a;network_summary=_ec2NetworkPerfSummary_&#x0d;&#x0a;total_cost=_globalTotalCost_&#x0d;&#x0a;interval_cost=_globalCostInterval_&#x0d;&#x0a;aws_instances=_ec2Instance_&#x0d;&#x0a;aws_regions=_ec2Zones_&#x0d;&#x0a;cost_regions=_globalCostRegion_&#x0d;&#x0a;creds_b64=_credentials_&#x0d;&#x0a;temporal=__temp__&#x0d;&#x0a;transfer_mode=tentacle&#x0d;&#x0a;tentacle_ip=_tentacleIP_&#x0d;&#x0a;tentacle_port=_tentaclePort_&#x0d;&#x0a;tentacle_opts=_tentacleExtraOpt_&#x0d;&#x0a;threads=_threads_&#x0d;&#x0a;stats_agent=_statsAgent_&#x0d;&#x0a;stats_agent=_statsAgentName_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Delete NULL macros
+DELETE FROM `tdiscovery_apps_tasks_macros` WHERE `macro` = '';
+
+-- Migrate current EC2 tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.aws.rds.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.aws.rds.sql
new file mode 100644
index 0000000000..466c5771f8
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.aws.rds.sql
@@ -0,0 +1,544 @@
+-- Insert new RDS APP
+SET @current_app_type = 7;
+SET @short_name = 'pandorafms.aws.rds';
+SET @name = 'Amazon&#x20;RDS';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;AWS&#x20;RDS&#x20;instances';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_aws_rds');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/aws_rds');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileRDS_&#039;');
+
+-- Insert new MySQL APP
+SET @short_name = 'pandorafms.mysql';
+SET @name = 'MySQL';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;MySQL&#x20;databases';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app_mysql := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_mysql');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES ('', @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--target_databases&#x20;&#039;_tempfileTargetDatabases_&#039;&#x20;--target_agents&#x20;&#039;_tempfileTargetAgents_&#039;&#x20;--custom_queries&#x20;&#039;_tempfileCustomQueries_&#039;');
+
+-- Insert new Oracle APP
+SET @short_name = 'pandorafms.oracle';
+SET @name = 'Oracle';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;Oracle&#x20;databases';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app_oracle := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_oracle');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES ('', @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--target_databases&#x20;&#039;_tempfileTargetDatabases_&#039;&#x20;--target_agents&#x20;&#039;_tempfileTargetAgents_&#039;&#x20;--custom_queries&#x20;&#039;_tempfileCustomQueries_&#039;');
+
+-- Migrate current RDS tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_credentials_', 'credentials.aws', `auth_strings`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_rdsInstance_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbtargets')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_rdsZones_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_rdsZonesInstance_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_rdsInstanceSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_rdsCpuPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_rdsIopsPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_rdsDiskPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_rdsNetworkPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileRDS_', 'custom', 'interval=__taskInterval__&#x0d;&#x0a;agents_group_name=__taskGroup__&#x0d;&#x0a;advance_monitoring=_rdsInstanceSummary_&#x0d;&#x0a;cpu_summary=_rdsCpuPerfSummary_&#x0d;&#x0a;iops_summary=_rdsIopsPerfSummary_&#x0d;&#x0a;disk_summary=_rdsDiskPerfSummary_&#x0d;&#x0a;network_summary=_rdsNetworkPerfSummary_&#x0d;&#x0a;aws_instances=_rdsInstance_&#x0d;&#x0a;aws_regions=_rdsZones_&#x0d;&#x0a;creds_b64=_credentials_&#x0d;&#x0a;temporal=__temp__&#x0d;&#x0a;transfer_mode=tentacle&#x0d;&#x0a;tentacle_ip=_tentacleIP_&#x0d;&#x0a;tentacle_port=_tentaclePort_&#x0d;&#x0a;tentacle_opts=_tentacleExtraOpt_&#x0d;&#x0a;threads=_threads_&#x0d;&#x0a;stats_agent=_statsAgent_&#x0d;&#x0a;stats_agent_name=_statsAgentName_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgent_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgentName_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Migrate current RDS tasks to MySQL tasks
+INSERT IGNORE INTO `trecon_task`
+    (
+        `id_rt`,
+        `name`,
+        `description`,
+        `id_group`,
+        `utimestamp`,
+        `status`,
+        `interval_sweep`,
+        `id_recon_server`,
+        `disabled`,
+        `summary`,
+        `type`,
+        `id_app`,
+        `setup_complete`,
+        `field1`
+    )
+    SELECT
+        '',
+        CONCAT('MySQL&#x20;-&#x20;', `name`),
+        CONCAT('Migrated&#x20;from&#x20;-&#x20;', `name`),
+        `id_group`,
+        `utimestamp`,
+        `status`,
+        `interval_sweep`,
+        `id_recon_server`,
+        `disabled`,
+        `summary`,
+        `type`,
+        @id_app_mysql,
+        0,
+        `field1`
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbengine')) = 'mysql'
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbstrings_', 'custom', REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbtargets')),'","',','),'["',''),'"]',''),'[',''),']',''), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbuser_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbuser')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbpass_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbpass')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', '1', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_engineAgent_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_prefixModuleName_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.prefix_module_name')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_scanDatabases_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.scan_databases')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_agentPerDatabase_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.agent_per_database')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_prefixAgent_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.prefix_agent')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkUptime_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_uptime')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_queryStats_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.query_stats')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkConnections_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_connections')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkInnodb_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_innodb')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkCache_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_cache')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_executeCustomQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.execute_custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_customQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileConf_', 'custom', 'agents_group_id&#x20;=&#x20;__taskGroupID__&#x0d;&#x0a;interval&#x20;=&#x20;__taskInterval__&#x0d;&#x0a;user&#x20;=&#x20;_dbuser_&#x0d;&#x0a;password&#x20;=&#x20;_dbpass_&#x0d;&#x0a;threads&#x20;=&#x20;_threads_&#x0d;&#x0a;modules_prefix&#x20;=&#x20;_prefixModuleName_&#x0d;&#x0a;execute_custom_queries&#x20;=&#x20;_executeCustomQueries_&#x0d;&#x0a;analyze_connections&#x20;=&#x20;_checkConnections_&#x0d;&#x0a;scan_databases&#x20;=&#x20;_scanDatabases_&#x0d;&#x0a;agent_per_database&#x20;=&#x20;_agentPerDatabase_&#x0d;&#x0a;db_agent_prefix&#x20;=&#x20;_prefixAgent_&#x0d;&#x0a;innodb_stats&#x20;=&#x20;_checkInnodb_&#x0d;&#x0a;engine_uptime&#x20;=&#x20;_checkUptime_&#x0d;&#x0a;query_stats&#x20;=&#x20;_queryStats_&#x0d;&#x0a;cache_stats&#x20;=&#x20;_checkCache_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetDatabases_', 'custom', '_dbstrings_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetAgents_', 'custom', '_engineAgent_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileCustomQueries_', 'custom', '_customQueries_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+-- Migrate current RDS tasks to Oracle tasks
+INSERT IGNORE INTO `trecon_task`
+    (
+        `id_rt`,
+        `name`,
+        `description`,
+        `id_group`,
+        `utimestamp`,
+        `status`,
+        `interval_sweep`,
+        `id_recon_server`,
+        `disabled`,
+        `summary`,
+        `type`,
+        `id_app`,
+        `setup_complete`,
+        `field1`
+    )
+    SELECT
+        '',
+        CONCAT('Oracle&#x20;-&#x20;', `name`),
+        CONCAT('Migrated&#x20;from&#x20;-&#x20;', `name`),
+        `id_group`,
+        `utimestamp`,
+        `status`,
+        `interval_sweep`,
+        `id_recon_server`,
+        `disabled`,
+        `summary`,
+        `type`,
+        @id_app_oracle,
+        0,
+        `field1`
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbengine')) = 'oracle'
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbstrings_', 'custom', REPLACE(REPLACE(REPLACE(REPLACE(REPLACE(JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbtargets')),'","',','),'["',''),'"]',''),'[',''),']',''), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbuser_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbuser')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbpass_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbpass')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', '1', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_engineAgent_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_prefixModuleName_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.prefix_module_name')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkUptime_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_uptime')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_queryStats_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.query_stats')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkConnections_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_connections')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkFragmentation_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_fragmentation')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkTablespaces_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_tablespaces')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkCache_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_cache')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_executeCustomQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.execute_custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_customQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileConf_', 'custom', 'agents_group_id&#x20;=&#x20;__taskGroupID__&#x0d;&#x0a;interval&#x20;=&#x20;__taskInterval__&#x0d;&#x0a;user&#x20;=&#x20;_dbuser_&#x0d;&#x0a;password&#x20;=&#x20;_dbpass_&#x0d;&#x0a;threads&#x20;=&#x20;_threads_&#x0d;&#x0a;modules_prefix&#x20;=&#x20;_prefixModuleName_&#x0d;&#x0a;execute_custom_queries&#x20;=&#x20;_executeCustomQueries_&#x0d;&#x0a;analyze_connections&#x20;=&#x20;_checkConnections_&#x0d;&#x0a;engine_uptime&#x20;=&#x20;_checkUptime_&#x0d;&#x0a;query_stats&#x20;=&#x20;_queryStats_&#x0d;&#x0a;cache_stats&#x20;=&#x20;_checkCache_&#x0d;&#x0a;fragmentation_ratio&#x20;=&#x20;_checkFragmentation_&#x0d;&#x0a;check_tablescpaces&#x20;=&#x20;_checkTablespaces_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetDatabases_', 'custom', '_dbstrings_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetAgents_', 'custom', '_engineAgent_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileCustomQueries_', 'custom', '_customQueries_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+-- Migrate current RDS tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
+
+UPDATE `trecon_task`
+    SET
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+;
+
+UPDATE `trecon_task`
+    SET
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.aws.s3.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.aws.s3.sql
new file mode 100644
index 0000000000..2da7bf28c9
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.aws.s3.sql
@@ -0,0 +1,410 @@
+-- Insert new S3 APP
+SET @current_app_type = 14;
+SET @short_name = 'pandorafms.aws.s3';
+SET @name = 'Amazon&#x20;S3';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;AWS&#x20;S3&#x20;buckets';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_aws_s3');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/aws_s3');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileS3_&#039;');
+
+-- Migrate current S3 tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleIP_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_ip')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentaclePort_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_port')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleExtraOpt_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_opts')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_credentials_', 'credentials.aws', `auth_strings`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+SET @position = 3;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_monitoring',
+        '_s3Monitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_size',
+        '_s3Size_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_items',
+        '_s3Items_',
+        NULL
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_monitoring',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_size',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_items',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 4;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_monitoring',
+        '_s3Monitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_size',
+        '_s3Size_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_items',
+        '_s3Items_',
+        NULL
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_monitoring',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_size',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_items',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 5;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_monitoring',
+        '_s3Monitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_size',
+        '_s3Size_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_items',
+        '_s3Items_',
+        NULL
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_monitoring',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_size',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 's3_items',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"s3_zone ",-1),"\n",1),"\n"),"")),"s3_bucket ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgent_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgentName_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_s3Monitoring_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_s3Size_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_s3Items_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @param = 's3_bucket';
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_s3Bucket_',
+    'custom', 
+    REPLACE(
+        REPLACE(
+            CONCAT(
+                '["',
+                REPLACE(
+                    REPLACE(
+                        REPLACE(
+                            REPLACE(
+                                CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                SUBSTRING_INDEX(
+                                    CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                    CONCAT(@param, " "), 1
+                                ),
+                                ""
+                            ),
+                            REPLACE(
+                                SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ),
+                                SUBSTRING_INDEX(SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ), "\n", 1),
+                                ""
+                            ),
+                            "\n"
+                        ),
+                        CONCAT(@param, " "),
+                        ""
+                    ),
+                    "\n",
+                    '","'
+                ),
+                '"]'
+            ),
+            ',""]',
+            ']'
+        ),
+        '[""]',
+        '[]'
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @param = 's3_zone';
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_s3Zone_',
+    'custom', 
+    REPLACE(
+        REPLACE(
+            CONCAT(
+                '["',
+                REPLACE(
+                    REPLACE(
+                        REPLACE(
+                            REPLACE(
+                                CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                SUBSTRING_INDEX(
+                                    CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                    CONCAT(@param, " "), 1
+                                ),
+                                ""
+                            ),
+                            REPLACE(
+                                SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ),
+                                SUBSTRING_INDEX(SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ), "\n", 1),
+                                ""
+                            ),
+                            "\n"
+                        ),
+                        CONCAT(@param, " "),
+                        ""
+                    ),
+                    "\n",
+                    '","'
+                ),
+                '"]'
+            ),
+            ',""]',
+            ']'
+        ),
+        '[""]',
+        '[]'
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileS3_', 'custom', 'interval=__taskInterval__&#x0d;&#x0a;agents_group_name=__taskGroup__&#x0d;&#x0a;aws_regions=_s3Zone_&#x0d;&#x0a;aws_buckets=_s3Bucket_&#x0d;&#x0a;s3_monitoring=_s3Monitoring_&#x0d;&#x0a;size_monitoring=_s3Size_&#x0d;&#x0a;items_monitoring=_s3Items_&#x0d;&#x0a;creds_b64=_credentials_&#x0d;&#x0a;temporal=__temp__&#x0d;&#x0a;transfer_mode=tentacle&#x0d;&#x0a;tentacle_ip=_tentacleIP_&#x0d;&#x0a;tentacle_port=_tentaclePort_&#x0d;&#x0a;tentacle_opts=_tentacleExtraOpt_&#x0d;&#x0a;threads=_threads_&#x0d;&#x0a;stats_agent=_statsAgent_&#x0d;&#x0a;stats_agent_name=_statsAgentName_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Delete NULL macros
+DELETE FROM `tdiscovery_apps_tasks_macros` WHERE `macro` = '';
+
+-- Migrate current S3 tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.azure.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.azure.sql
new file mode 100644
index 0000000000..a262188962
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.azure.sql
@@ -0,0 +1,692 @@
+-- Insert new Azure APP
+SET @current_app_type = 8;
+SET @short_name = 'pandorafms.azure.mc';
+SET @name = 'Azure&#x20;Microsoft&#x20;Compute';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;Azure&#x20;Microsoft&#x20;Compute&#x20;VMs';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_azure_mc');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/azure_vm');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileAzureMC_&#039;');
+
+-- Migrate current Azure tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleIP_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_ip')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentaclePort_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_port')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleExtraOpt_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_opts')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_credentials_', 'credentials.azure', `auth_strings`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+SET @position = 4;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_azureMCInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_azureMCCpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_azureMCIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_azureMCDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_azureMCNetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 5;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_azureMCInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_azureMCCpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_azureMCIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_azureMCDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_azureMCNetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 6;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_azureMCInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_azureMCCpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_azureMCIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_azureMCDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_azureMCNetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 7;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_azureMCInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_azureMCCpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_azureMCIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_azureMCDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_azureMCNetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 8;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_azureMCInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_azureMCCpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_azureMCIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_azureMCDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_azureMCNetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgent_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgentName_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_azureMCInstanceSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_azureMCCpuPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_azureMCIopsPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_azureMCDiskPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_azureMCNetworkPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @param = 'ec2_instance';
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_azureMCInstance_',
+    'custom', 
+    REPLACE(
+        REPLACE(
+            CONCAT(
+                '["',
+                REPLACE(
+                    REPLACE(
+                        REPLACE(
+                            REPLACE(
+                                CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                SUBSTRING_INDEX(
+                                    CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                    CONCAT(@param, " "), 1
+                                ),
+                                ""
+                            ),
+                            REPLACE(
+                                SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ),
+                                SUBSTRING_INDEX(SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ), "\n", 1),
+                                ""
+                            ),
+                            "\n"
+                        ),
+                        CONCAT(@param, " "),
+                        ""
+                    ),
+                    "\n",
+                    '","'
+                ),
+                '"]'
+            ),
+            ',""]',
+            ']'
+        ),
+        '[""]',
+        '[]'
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @param = 'ec2_zones';
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_azureMCZones_',
+    'custom',
+    REPLACE(
+        REPLACE(
+            CONCAT(
+                '["',
+                REPLACE(
+                    REPLACE(
+                        REPLACE(
+                            REPLACE(
+                                CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                SUBSTRING_INDEX(
+                                    CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                    CONCAT(@param, " "), 1
+                                ),
+                                ""
+                            ),
+                            REPLACE(
+                                SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ),
+                                SUBSTRING_INDEX(SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ), "\n", 1),
+                                ""
+                            ),
+                            "\n"
+                        ),
+                        CONCAT(@param, " "),
+                        ""
+                    ),
+                    "\n",
+                    '","'
+                ),
+                '"]'
+            ),
+            ',""]',
+            ']'
+        ),
+        '[""]',
+        '[]'
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_azureMCZonesInstance_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, 'agents_group_name=__taskGroup__&#x0d;&#x0a;threads=_threads_&#x0d;&#x0a;interval=__taskInterval__&#x0d;&#x0a;transfer_mode=tentacle&#x0d;&#x0a;tentacle_ip=_tentacleIP_&#x0d;&#x0a;tentacle_port=_tentaclePort_&#x0d;&#x0a;tentacle_opts=_tentacleExtraOpt_&#x0d;&#x0a;advance_monitoring=_azureMCInstanceSummary_&#x0d;&#x0a;cpu_summary=_azureMCCpuPerfSummary_&#x0d;&#x0a;iops_summary=_azureMCIopsPerfSummary_&#x0d;&#x0a;disk_summary=_azureMCDiskPerfSummary_&#x0d;&#x0a;network_summary=_azureMCNetworkPerfSummary_&#x0d;&#x0a;azure_zones=_azureMCZones_&#x0d;&#x0a;azure_instances=_azureMCInstance_&#x0d;&#x0a;creds_b64=_credentials_&#x0d;&#x0a;stats_agent=_statsAgent_&#x0d;&#x0a;stats_agent_name=_statsAgentName_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Delete NULL macros
+DELETE FROM `tdiscovery_apps_tasks_macros` WHERE `macro` = '';
+
+-- Migrate current Azure tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.db2.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.db2.sql
new file mode 100644
index 0000000000..15de07377b
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.db2.sql
@@ -0,0 +1,161 @@
+-- Insert new DB2 APP
+SET @current_app_type = 11;
+SET @short_name = 'pandorafms.db2';
+SET @name = 'DB2';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;DB2&#x20;databases';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_db2');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--target_databases&#x20;&#039;_tempfileTargetDatabases_&#039;&#x20;--target_agents&#x20;&#039;_tempfileTargetAgents_&#039;&#x20;--custom_queries&#x20;&#039;_tempfileCustomQueries_&#039;');
+
+-- Migrate current DB2 tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbstrings_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbstrings')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbuser_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbuser')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbpass_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbpass')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_engineAgent_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.engine_agent')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_prefixModuleName_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.prefix_module_name')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkDbSummary_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_db_summary')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkTransactionalLogUtilization_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_transactional_log_utilization')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkConnections_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_connections')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkDbSize_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_db_size')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkCache_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_cache')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_executeCustomQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.execute_custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_customQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileConf_', 'custom', 'agents_group_id&#x20;=&#x20;__taskGroupID__&#x0d;&#x0a;interval&#x20;=&#x20;__taskInterval__&#x0d;&#x0a;user&#x20;=&#x20;_dbuser_&#x0d;&#x0a;password&#x20;=&#x20;_dbpass_&#x0d;&#x0a;threads&#x20;=&#x20;_threads_&#x0d;&#x0a;modules_prefix&#x20;=&#x20;_prefixModuleName_&#x0d;&#x0a;execute_custom_queries&#x20;=&#x20;_executeCustomQueries_&#x0d;&#x0a;analyze_connections&#x20;=&#x20;_checkConnections_&#x0d;&#x0a;cache_stats&#x20;=&#x20;_checkCache_&#x0d;&#x0a;database_summary&#x20;=&#x20;_checkDbSummary_&#x0d;&#x0a;transactional_log&#x20;=&#x20;_checkTransactionalLogUtilization_&#x0d;&#x0a;db_size&#x20;=&#x20;_checkDbSize_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetDatabases_', 'custom', '_dbstrings_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetAgents_', 'custom', '_engineAgent_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileCustomQueries_', 'custom', '_customQueries_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Migrate current DB2 tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.gcp.ce.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.gcp.ce.sql
new file mode 100644
index 0000000000..18e0ddf97e
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.gcp.ce.sql
@@ -0,0 +1,692 @@
+-- Insert new Google APP
+SET @current_app_type = 13;
+SET @short_name = 'pandorafms.gcp.ce';
+SET @name = 'Google&#x20;Cloud&#x20;Compute&#x20;Engine';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;Google&#x20;Cloud&#x20;Platform&#x20;Compute&#x20;Engine&#x20;VMs';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_gcp_ce');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/google_instances');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileGoogleCE_&#039;');
+
+-- Migrate current Google tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleIP_', 'custom', '127.0.0.1', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentaclePort_', 'custom', '41121', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleExtraOpt_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_credentials_', 'credentials.gcp', `auth_strings`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+SET @position = 4;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_googleCEInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_googleCECpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_googleCEIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_googleCEDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_googleCENetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 5;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_googleCEInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_googleCECpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_googleCEIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_googleCEDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_googleCENetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 6;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_googleCEInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_googleCECpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_googleCEIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_googleCEDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_googleCENetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 7;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_googleCEInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_googleCECpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_googleCEIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_googleCEDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_googleCENetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 8;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        '_googleCEInstanceSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        '_googleCECpuPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        '_googleCEIopsPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        '_googleCEDiskPerfSummary_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        '_googleCENetworkPerfSummary_',
+        NULL
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_instance_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_cpu_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_iops_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_disk_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", 1) = 'ec2_network_perf_summary',
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(
+            CONCAT(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",1),REPLACE(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONCAT(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",1),REPLACE(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),CONCAT(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(field1) USING UTF8MB4),"ec2_zones ",-1),"\n",1),"\n"),"")),"ec2_instance ",-1),"\n",1),"\n"),""))
+        , "\n", @position), "\n", -1), " ", -1),
+        "0"
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgent_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_statsAgentName_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_googleCEInstanceSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_googleCECpuPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_googleCEIopsPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_googleCEDiskPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_googleCENetworkPerfSummary_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @param = 'ec2_instance';
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_googleCEInstance_',
+    'custom', 
+    REPLACE(
+        REPLACE(
+            CONCAT(
+                '["',
+                REPLACE(
+                    REPLACE(
+                        REPLACE(
+                            REPLACE(
+                                CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                SUBSTRING_INDEX(
+                                    CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                    CONCAT(@param, " "), 1
+                                ),
+                                ""
+                            ),
+                            REPLACE(
+                                SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ),
+                                SUBSTRING_INDEX(SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ), "\n", 1),
+                                ""
+                            ),
+                            "\n"
+                        ),
+                        CONCAT(@param, " "),
+                        ""
+                    ),
+                    "\n",
+                    '","'
+                ),
+                '"]'
+            ),
+            ',""]',
+            ']'
+        ),
+        '[""]',
+        '[]'
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @param = 'ec2_zones';
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_googleCEZones_',
+    'custom',
+    REPLACE(
+        REPLACE(
+            CONCAT(
+                '["',
+                REPLACE(
+                    REPLACE(
+                        REPLACE(
+                            REPLACE(
+                                CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                SUBSTRING_INDEX(
+                                    CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                    CONCAT(@param, " "), 1
+                                ),
+                                ""
+                            ),
+                            REPLACE(
+                                SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ),
+                                SUBSTRING_INDEX(SUBSTRING_INDEX(
+                                    REPLACE(
+                                        CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                        SUBSTRING_INDEX(
+                                            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+                                            CONCAT(@param, " "), 1
+                                        ),
+                                        ""
+                                    ),
+                                    CONCAT(@param, " "), -1
+                                ), "\n", 1),
+                                ""
+                            ),
+                            "\n"
+                        ),
+                        CONCAT(@param, " "),
+                        ""
+                    ),
+                    "\n",
+                    '","'
+                ),
+                '"]'
+            ),
+            ',""]',
+            ']'
+        ),
+        '[""]',
+        '[]'
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_googleCEZonesInstance_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileGoogleCE_', 'custom', 'agents_group_name=__taskGroup__&#x0d;&#x0a;interval=__taskInterval__&#x0d;&#x0a;threads=_threads_&#x0d;&#x0a;temporal=__temp__&#x0d;&#x0a;transfer_mode=tentacle&#x0d;&#x0a;tentacle_ip=_tentacleIP_&#x0d;&#x0a;tentacle_port=_tentaclePort_&#x0d;&#x0a;tentacle_opts=_tentacleExtraOpt_&#x0d;&#x0a;advance_monitoring=_googleCEInstanceSummary_&#x0d;&#x0a;cpu_summary=_googleCECpuPerfSummary_&#x0d;&#x0a;iops_summary=_googleCEIopsPerfSummary_&#x0d;&#x0a;disk_summary=_googleCEDiskPerfSummary_&#x0d;&#x0a;network_summary=_googleCENetworkPerfSummary_&#x0d;&#x0a;creds_b64=_credentials_&#x0d;&#x0a;gcp_zones=_googleCEZones_&#x0d;&#x0a;gcp_instances=_googleCEInstances_&#x0d;&#x0a;stats_agent=_statsAgent_&#x0d;&#x0a;stats_agent_name=_statsAgentName_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Delete NULL macros
+DELETE FROM `tdiscovery_apps_tasks_macros` WHERE `macro` = '';
+
+-- Migrate current Google tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.mssql.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.mssql.sql
new file mode 100644
index 0000000000..42a245a2bd
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.mssql.sql
@@ -0,0 +1,145 @@
+-- Insert new MSSQL APP
+SET @current_app_type = 12;
+SET @short_name = 'pandorafms.mssql';
+SET @name = 'Microsoft&#x20;SQL&#x20;Server';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;Microsoft&#x20;SQL&#x20;Server&#x20;databases';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_mssql');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--target_databases&#x20;&#039;_tempfileTargetDatabases_&#039;&#x20;--target_agents&#x20;&#039;_tempfileTargetAgents_&#039;&#x20;--custom_queries&#x20;&#039;_tempfileCustomQueries_&#039;');
+
+-- Migrate current MSSQL tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbstrings_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbstrings')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbuser_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbuser')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbpass_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbpass')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_engineAgent_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.engine_agent')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_prefixModuleName_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.prefix_module_name')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkUptime_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_uptime')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_queryStats_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.query_stats')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkConnections_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_connections')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_executeCustomQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.execute_custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_customQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileConf_', 'custom', 'agents_group_id&#x20;=&#x20;__taskGroupID__&#x0d;&#x0a;interval&#x20;=&#x20;__taskInterval__&#x0d;&#x0a;user&#x20;=&#x20;_dbuser_&#x0d;&#x0a;password&#x20;=&#x20;_dbpass_&#x0d;&#x0a;threads&#x20;=&#x20;_threads_&#x0d;&#x0a;modules_prefix&#x20;=&#x20;_prefixModuleName_&#x0d;&#x0a;execute_custom_queries&#x20;=&#x20;_executeCustomQueries_&#x0d;&#x0a;analyze_connections&#x20;=&#x20;_checkConnections_&#x0d;&#x0a;engine_uptime&#x20;=&#x20;_checkUptime_&#x0d;&#x0a;query_stats&#x20;=&#x20;_queryStats_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetDatabases_', 'custom', '_dbstrings_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetAgents_', 'custom', '_engineAgent_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileCustomQueries_', 'custom', '_customQueries_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Migrate current MSSQL tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.mysql.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.mysql.sql
new file mode 100644
index 0000000000..41470fd41c
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.mysql.sql
@@ -0,0 +1,206 @@
+-- Insert new MySQL APP
+SET @current_app_type = 4;
+SET @short_name = 'pandorafms.mysql';
+SET @name = 'MySQL';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;MySQL&#x20;databases';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_mysql');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--target_databases&#x20;&#039;_tempfileTargetDatabases_&#039;&#x20;--target_agents&#x20;&#039;_tempfileTargetAgents_&#039;&#x20;--custom_queries&#x20;&#039;_tempfileCustomQueries_&#039;');
+
+-- Migrate current MySQL tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    WITH RECURSIVE `cte` AS (
+        SELECT
+            `id_rt`,
+            REPLACE(JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbport')), '&#x20;', '') AS `port`,
+            1 AS `pos`,
+            SUBSTRING_INDEX(
+                REPLACE(JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbhost')), '&#x20;', ''),
+                ',', 1
+            ) AS `host`,
+            SUBSTRING(
+                REPLACE(JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbhost')), '&#x20;', ''),
+                LENGTH(SUBSTRING_INDEX(
+                    REPLACE(JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbhost')), '&#x20;', ''),
+                    ',', 1
+                )) + 2
+            ) AS `remaining`
+        FROM `trecon_task` WHERE `type` = @current_app_type
+        UNION ALL
+        SELECT `id_rt`, `port`, `pos` + 1, SUBSTRING_INDEX(`remaining`, ',', 1) AS `host`, SUBSTRING(`remaining`, LENGTH(SUBSTRING_INDEX(`remaining`, ',', 1)) + 2)
+        FROM `cte`
+        WHERE `remaining` != ''
+    )
+    SELECT `id_rt`, '_dbstrings_', 'custom', GROUP_CONCAT(CONCAT(`host`, ':', `port`) SEPARATOR ','), 0
+    FROM `cte`
+    GROUP BY `id_rt`
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbuser_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbuser')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbpass_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbpass')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_engineAgent_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.engine_agent')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_prefixModuleName_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.prefix_module_name')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_scanDatabases_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.scan_databases')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_agentPerDatabase_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.agent_per_database')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_prefixAgent_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.prefix_agent')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkUptime_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_uptime')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_queryStats_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.query_stats')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkConnections_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_connections')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkInnodb_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_innodb')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkCache_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_cache')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_executeCustomQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.execute_custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_customQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileConf_', 'custom', 'agents_group_id&#x20;=&#x20;__taskGroupID__&#x0d;&#x0a;interval&#x20;=&#x20;__taskInterval__&#x0d;&#x0a;user&#x20;=&#x20;_dbuser_&#x0d;&#x0a;password&#x20;=&#x20;_dbpass_&#x0d;&#x0a;threads&#x20;=&#x20;_threads_&#x0d;&#x0a;modules_prefix&#x20;=&#x20;_prefixModuleName_&#x0d;&#x0a;execute_custom_queries&#x20;=&#x20;_executeCustomQueries_&#x0d;&#x0a;analyze_connections&#x20;=&#x20;_checkConnections_&#x0d;&#x0a;scan_databases&#x20;=&#x20;_scanDatabases_&#x0d;&#x0a;agent_per_database&#x20;=&#x20;_agentPerDatabase_&#x0d;&#x0a;db_agent_prefix&#x20;=&#x20;_prefixAgent_&#x0d;&#x0a;innodb_stats&#x20;=&#x20;_checkInnodb_&#x0d;&#x0a;engine_uptime&#x20;=&#x20;_checkUptime_&#x0d;&#x0a;query_stats&#x20;=&#x20;_queryStats_&#x0d;&#x0a;cache_stats&#x20;=&#x20;_checkCache_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetDatabases_', 'custom', '_dbstrings_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetAgents_', 'custom', '_engineAgent_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileCustomQueries_', 'custom', '_customQueries_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Migrate current MySQL tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.oracle.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.oracle.sql
new file mode 100644
index 0000000000..4f5343e028
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.oracle.sql
@@ -0,0 +1,169 @@
+-- Insert new Oracle APP
+SET @current_app_type = 5;
+SET @short_name = 'pandorafms.oracle';
+SET @name = 'Oracle';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;Oracle&#x20;databases';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_oracle');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--target_databases&#x20;&#039;_tempfileTargetDatabases_&#039;&#x20;--target_agents&#x20;&#039;_tempfileTargetAgents_&#039;&#x20;--custom_queries&#x20;&#039;_tempfileCustomQueries_&#039;');
+
+-- Migrate current Oracle tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbstrings_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbstrings')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbuser_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbuser')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_dbpass_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.dbpass')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_engineAgent_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.engine_agent')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_prefixModuleName_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.prefix_module_name')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkUptime_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_uptime')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_queryStats_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.query_stats')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkConnections_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_connections')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkFragmentation_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_fragmentation')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkTablespaces_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_tablespaces')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_checkCache_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.check_cache')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_executeCustomQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.execute_custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_customQueries_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), '$.custom_queries')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileConf_', 'custom', 'agents_group_id&#x20;=&#x20;__taskGroupID__&#x0d;&#x0a;interval&#x20;=&#x20;__taskInterval__&#x0d;&#x0a;user&#x20;=&#x20;_dbuser_&#x0d;&#x0a;password&#x20;=&#x20;_dbpass_&#x0d;&#x0a;threads&#x20;=&#x20;_threads_&#x0d;&#x0a;modules_prefix&#x20;=&#x20;_prefixModuleName_&#x0d;&#x0a;execute_custom_queries&#x20;=&#x20;_executeCustomQueries_&#x0d;&#x0a;analyze_connections&#x20;=&#x20;_checkConnections_&#x0d;&#x0a;engine_uptime&#x20;=&#x20;_checkUptime_&#x0d;&#x0a;query_stats&#x20;=&#x20;_queryStats_&#x0d;&#x0a;cache_stats&#x20;=&#x20;_checkCache_&#x0d;&#x0a;fragmentation_ratio&#x20;=&#x20;_checkFragmentation_&#x0d;&#x0a;check_tablescpaces&#x20;=&#x20;_checkTablespaces_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetDatabases_', 'custom', '_dbstrings_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileTargetAgents_', 'custom', '_engineAgent_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileCustomQueries_', 'custom', '_customQueries_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Migrate current Oracle tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.sap.deset.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.sap.deset.sql
new file mode 100644
index 0000000000..354f4c3aba
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.sap.deset.sql
@@ -0,0 +1,1272 @@
+-- Insert new SAP APP
+SET @current_app_type = 10;
+SET @short_name = 'pandorafms.sap.deset';
+SET @name = 'SAP&#x20;R3&#x20;-&#x20;Deset';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;SAP&#x20;R3&#x20;environments';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_sap_deset');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_java_', 'bin/lib/jre/bin/java');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--custom_modules&#x20;&#039;_tempfileCustomModules_&#039;');
+
+-- Migrate current SAP tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_group_', 'agent_groups', `id_group`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_server_', 'custom', `subnet`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_sapClient_', 'custom', `field3`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_sapSystem_', 'custom', `field2`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_sapLicense_', 'custom', `field4`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_credentials_', 'credentials.sap', `auth_strings`, 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', '1', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_customModules_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_targetAgent_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `trecon_task`.`type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    '_customModulesDefinition_',
+    'custom',
+    JSON_UNQUOTE(
+      JSON_EXTRACT(
+        REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            REPLACE(
+            CONVERT(FROM_BASE64(`field1`) USING UTF8MB4),
+            '"160"',
+            '""'
+            ),
+            '"109"',
+            '""'
+            ),
+            '"111"',
+            '""'
+            ),
+            '"113"',
+            '""'
+            ),
+            '"121"',
+            '""'
+            ),
+            '"104"',
+            '""'
+            ),
+            '"105"',
+            '""'
+            ),
+            '"150"',
+            '""'
+            ),
+            '"151"',
+            '""'
+            ),
+            '"102"',
+            '""'
+            ),
+            '"103"',
+            '""'
+            ),
+            '"192"',
+            '""'
+            ),
+            '"195"',
+            '""'
+            ),
+            '"116"',
+            '""'
+            ),
+            '","',
+            ""
+        ),
+        '$[0]'
+      )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = -1;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -2;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -3;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -4;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -5;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -6;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -7;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -8;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -9;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -10;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -11;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -12;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -13;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+SET @position = -14;
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
+        `value`,
+        (
+            SELECT
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '160',
+                    '"160"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '109',
+                    '"109"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '111',
+                    '"111"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '113',
+                    '"113"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '121',
+                    '"121"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '104',
+                    '"104"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '105',
+                    '"105"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '150',
+                    '"150"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '151',
+                    '"151"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '102',
+                    '"102"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '103',
+                    '"103"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '192',
+                    '"192"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '195',
+                    '"195"',
+                IF(
+                    SUBSTRING_INDEX(SUBSTRING_INDEX(REPLACE(SUBSTRING(SUBSTRING(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4), 1, LENGTH(CONVERT(FROM_BASE64(`trecon_task`.`field1`) USING UTF8MB4))-2), 3), '","', "\n"), "\n", @position), "\n", 1) = '116',
+                    '"116"',
+                    '""'
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+                )
+            FROM `trecon_task`
+            WHERE
+                `trecon_task`.`type` = @current_app_type AND
+                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+        )
+    )
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET
+    `tdiscovery_apps_tasks_macros`.`value` = REPLACE(REPLACE(REPLACE(`value`, '"", ', ''), '""', ''), ', ]', ']')
+    WHERE 
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
+;
+
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET
+    `tdiscovery_apps_tasks_macros`.`value` = (
+        SELECT `tconfig`.`value` FROM `tconfig` WHERE `tconfig`.`token` = 'sap_license'
+    )
+    WHERE
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_sapLicense_' AND
+    `tdiscovery_apps_tasks_macros`.`value` = ''
+;
+
+UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+    SET
+    `tdiscovery_apps_tasks_macros`.`value` = 'trial'
+    WHERE
+    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
+    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`macro` = '_sapLicense_' AND
+    `tdiscovery_apps_tasks_macros`.`value` = ''
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileConf_', 'custom', 'agents_group_id&#x20;=&#x20;__taskGroupID__&#x0d;&#x0a;threads&#x20;=&#x20;_threads_&#x0d;&#x0a;interval&#x20;=&#x20;__taskInterval__&#x0d;&#x0a;server&#x20;=&#x20;_server_&#x0d;&#x0a;client&#x20;=&#x20;_sapClient_&#x0d;&#x0a;system&#x20;=&#x20;_sapSystem_&#x0d;&#x0a;license&#x20;=&#x20;_sapLicense_&#x0d;&#x0a;credentials&#x20;=&#x20;_credentials_&#x0d;&#x0a;agent&#x20;=&#x20;_targetAgent_&#x0d;&#x0a;modules&#x20;=&#x20;_customModules_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileCustomModules_', 'custom', '_customModulesDefinition_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Migrate current SAP tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql
new file mode 100644
index 0000000000..f7ebeef09b
--- /dev/null
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql
@@ -0,0 +1,1010 @@
+-- Insert new VMware APP
+SET @current_app_type = 3;
+SET @short_name = 'pandorafms.vmware';
+SET @name = 'VMware';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;ESXi&#x20;hosts,&#x20;datastores&#x20;and&#x20;VMs&#x20;from&#x20;a&#x20;specific&#x20;datacenter';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_vmware');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/vmware_instances');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;&#039;_tempfileVMware_&#039;&#x20;--as_discovery_plugin&#x20;1');
+
+-- Migrate current VMware tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleIP_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_ip')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentaclePort_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_port')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleExtraOpt_', 'custom', JSON_UNQUOTE(JSON_EXTRACT(`field2`, '$.tentacle_opts')), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 2;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_server_', 'custom', SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 8), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 3;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_datacenter_', 'custom', SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 12), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 4;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_user_', 'custom', SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 6;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_useEncryptedPassword_', 'custom', SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 24), 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 7;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        '_pass_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        '_threads_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        '_reconInterval_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        '_virtualNetworkMonitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        '_retrySend_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        '_eventMode_',
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        '_extraSettings_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 9),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 16),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        "1",
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        SUBSTRING(SUBSTRING_INDEX(REPLACE(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position - 1), ""), "Reject", 1), 22),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 8;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        '_pass_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        '_threads_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        '_reconInterval_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        '_virtualNetworkMonitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        '_retrySend_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        '_eventMode_',
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        '_extraSettings_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 9),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 16),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        "1",
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        SUBSTRING(SUBSTRING_INDEX(REPLACE(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position - 1), ""), "Reject", 1), 22),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 9;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        '_pass_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        '_threads_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        '_reconInterval_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        '_virtualNetworkMonitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        '_retrySend_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        '_eventMode_',
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        '_extraSettings_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 9),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 16),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        "1",
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        SUBSTRING(SUBSTRING_INDEX(REPLACE(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position - 1), ""), "Reject", 1), 22),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 10;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        '_pass_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        '_threads_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        '_reconInterval_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        '_virtualNetworkMonitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        '_retrySend_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        '_eventMode_',
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        '_extraSettings_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 9),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 16),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        "1",
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        SUBSTRING(SUBSTRING_INDEX(REPLACE(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position - 1), ""), "Reject", 1), 22),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 11;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        '_pass_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        '_threads_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        '_reconInterval_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        '_virtualNetworkMonitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        '_retrySend_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        '_eventMode_',
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        '_extraSettings_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 9),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 16),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        "1",
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        SUBSTRING(SUBSTRING_INDEX(REPLACE(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position - 1), ""), "Reject", 1), 22),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 12;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        '_pass_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        '_threads_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        '_reconInterval_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        '_virtualNetworkMonitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        '_retrySend_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        '_eventMode_',
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        '_extraSettings_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 9),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 16),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        "1",
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        SUBSTRING(SUBSTRING_INDEX(REPLACE(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position - 1), ""), "Reject", 1), 22),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 13;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        '_pass_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        '_threads_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        '_reconInterval_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        '_virtualNetworkMonitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        '_retrySend_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        '_eventMode_',
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        '_extraSettings_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 9),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 16),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        "1",
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        SUBSTRING(SUBSTRING_INDEX(REPLACE(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position - 1), ""), "Reject", 1), 22),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 14;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        '_pass_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        '_threads_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        '_reconInterval_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        '_virtualNetworkMonitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        '_retrySend_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        '_eventMode_',
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        '_extraSettings_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 9),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 16),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        "1",
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        SUBSTRING(SUBSTRING_INDEX(REPLACE(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position - 1), ""), "Reject", 1), 22),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 15;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        '_pass_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        '_threads_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        '_reconInterval_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        '_virtualNetworkMonitoring_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        '_retrySend_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        '_eventMode_',
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        '_extraSettings_',
+        NULL
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "pass",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 6),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "threads",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 9),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "recon_interval",
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), 16),
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "virtual_network_monitoring",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "retry_send",
+        "1",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1) = "event_mode",
+        "1",
+    IF(
+        SUBSTRING(SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position), "\n", -1), " ", 1), 1, 20) = "#__EXTRA__SETTINGS__",
+        SUBSTRING(SUBSTRING_INDEX(REPLACE(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "\n", @position - 1), ""), "Reject", 1), 22),
+        "0"
+    )
+    )
+    )
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 2;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datastore",
+        '_scanDatastore_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datacenter",
+        '_scanDatacenter_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_esx",
+        '_scanESX_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_vm",
+        '_scanVM_',
+        NULL
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datastore",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datacenter",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_esx",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_vm",
+        "0",
+        ""
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 3;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datastore",
+        '_scanDatastore_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datacenter",
+        '_scanDatacenter_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_esx",
+        '_scanESX_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_vm",
+        '_scanVM_',
+        NULL
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datastore",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datacenter",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_esx",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_vm",
+        "0",
+        ""
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 4;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datastore",
+        '_scanDatastore_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datacenter",
+        '_scanDatacenter_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_esx",
+        '_scanESX_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_vm",
+        '_scanVM_',
+        NULL
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datastore",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datacenter",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_esx",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_vm",
+        "0",
+        ""
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+SET @position = 5;
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`,
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datastore",
+        '_scanDatastore_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datacenter",
+        '_scanDatacenter_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_esx",
+        '_scanESX_',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_vm",
+        '_scanVM_',
+        NULL
+    )
+    )
+    )
+    ),
+    'custom',
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datastore",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_datacenter",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_esx",
+        "0",
+    IF(
+        SUBSTRING_INDEX(SUBSTRING_INDEX(SUBSTRING_INDEX(CONVERT(FROM_BASE64(`field1`) USING UTF8MB4), "Reject", -1), "\n", @position), "\n", -1) = "all_vm",
+        "0",
+        ""
+    )
+    )
+    )
+    ),
+    0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 5, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_virtualNetworkMonitoring_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_retrySend_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_eventMode_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_extraSettings_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_scanDatastore_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_scanDatacenter_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_scanESX_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_scanVM_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_monitorExclusiveAgents_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_exclusiveAgents_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_exclusiveESXi_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_exclusiveDatastores_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_exclusiveVMs_', 'custom', '[]', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tempfileVMware_', 'custom', 'Configuration&#x0d;&#x0a;server _server_&#x0d;&#x0a;datacenter _datacenter_&#x0d;&#x0a;user _user_&#x0d;&#x0a;group __taskGroup__&#x0d;&#x0a;use_encrypted_password _useEncryptedPassword_&#x0d;&#x0a;interval __taskInterval__&#x0d;&#x0a;pass _pass_&#x0d;&#x0a;threads _threads_&#x0d;&#x0a;event_mode _eventMode_&#x0d;&#x0a;retry_send _retrySend_&#x0d;&#x0a;virtual_network_monitoring _virtualNetworkMonitoring_&#x0d;&#x0a;recon_interval _reconInterval_&#x0d;&#x0a;&#x0d;&#x0a;scan_datastore _scanDatastore_&#x0d;&#x0a;scan_datacenter _scanDatacenter_&#x0d;&#x0a;scan_esx _scanESX_&#x0d;&#x0a;scan_vm _scanVM_&#x0d;&#x0a;&#x0d;&#x0a;logfile __temp__/tmp_discovery.__taskMD5__.log&#x0d;&#x0a;entities_list __temp__/tmp_discovery.__taskMD5__.entities&#x0d;&#x0a;event_pointer_file __temp__/tmp_discovery.__taskMD5__.events&#x0d;&#x0a;temporal __temp__&#x0d;&#x0a;transfer_mode tentacle&#x0d;&#x0a;tentacle_ip _tentacleIP_&#x0d;&#x0a;tentacle_port _tentaclePort_&#x0d;&#x0a;tentacle_opts _tentacleExtraOpt_&#x0d;&#x0a;local_folder __incomingDir__&#x0d;&#x0a;pandora_url __consoleAPIURL__&#x0d;&#x0a;api_pass __consoleAPIPass__&#x0d;&#x0a;api_user __consoleUser__&#x0d;&#x0a;api_user_pass __consolePass__&#x0d;&#x0a;&#x0d;&#x0a;_extraSettings_', 1
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+-- Delete NULL macros
+DELETE FROM `tdiscovery_apps_tasks_macros` WHERE `macro` = '';
+
+-- Migrate current VMware tasks
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type
+;
\ No newline at end of file
diff --git a/pandora_console/godmode/menu.php b/pandora_console/godmode/menu.php
index 7cd504c8ac..d597af1627 100644
--- a/pandora_console/godmode/menu.php
+++ b/pandora_console/godmode/menu.php
@@ -81,13 +81,14 @@ if ((bool) check_acl($config['id_user'], 0, 'AR') === true
         if ((bool) check_acl($config['id_user'], 0, 'AW') === true) {
             // Applications.
             $sub2 = [];
+            // Check if app has been migrated.
             if (enterprise_installed() === true) {
-                $sub2['godmode/servers/discovery&wiz=app&mode=MicrosoftSQLServer']['text'] = __('Microsoft SQL Server (legacy)');
-                $sub2['godmode/servers/discovery&wiz=app&mode=mysql']['text'] = __('Mysql (legacy)');
-                $sub2['godmode/servers/discovery&wiz=app&mode=oracle']['text'] = __('Oracle (legacy)');
-                $sub2['godmode/servers/discovery&wiz=app&mode=vmware']['text'] = __('VMware (legacy)');
-                $sub2['godmode/servers/discovery&wiz=app&mode=SAP']['text'] = __('SAP (legacy)');
-                $sub2['godmode/servers/discovery&wiz=app&mode=DB2']['text'] = __('DB2 (legacy)');
+                (ManageExtensions::isMigrated('pandorafms.mssql') === true) ?: ($sub2['godmode/servers/discovery&wiz=app&mode=MicrosoftSQLServer']['text'] = __('Microsoft SQL Server (legacy)'));
+                (ManageExtensions::isMigrated('pandorafms.mysql') === true) ?: ($sub2['godmode/servers/discovery&wiz=app&mode=mysql']['text'] = __('Mysql (legacy)'));
+                (ManageExtensions::isMigrated('pandorafms.oracle') === true) ?: ($sub2['godmode/servers/discovery&wiz=app&mode=oracle']['text'] = __('Oracle (legacy)'));
+                (ManageExtensions::isMigrated('pandorafms.vmware') === true) ?: ($sub2['godmode/servers/discovery&wiz=app&mode=vmware']['text'] = __('VMware (legacy)'));
+                (ManageExtensions::isMigrated('pandorafms.sap.desert') === true) ?: ($sub2['godmode/servers/discovery&wiz=app&mode=SAP']['text'] = __('SAP (legacy)'));
+                (ManageExtensions::isMigrated('pandorafms.db2') === true) ?: ($sub2['godmode/servers/discovery&wiz=app&mode=DB2']['text'] = __('DB2 (legacy)'));
             }
 
             $extensions = ManageExtensions::getExtensionBySection('app');
@@ -112,9 +113,9 @@ if ((bool) check_acl($config['id_user'], 0, 'AR') === true
             // Cloud.
             $sub2 = [];
             if (enterprise_installed() === true) {
-                $sub2['godmode/servers/discovery&wiz=cloud&mode=amazonws']['text'] = __('Amazon Web Services (legacy)');
-                $sub2['godmode/servers/discovery&wiz=cloud&mode=azure']['text'] = __('Microsoft Azure (legacy)');
-                $sub2['godmode/servers/discovery&wiz=cloud&mode=gcp']['text'] = __('Google Compute Platform (legacy)');
+                 (ManageExtensions::isMigrated('pandorafms.aws.ec2') === true) ?: (ManageExtensions::isMigrated('pandorafms.aws.s3') === true) ?: (ManageExtensions::isMigrated('pandorafms.aws.rds') === true) ?: ($sub2['godmode/servers/discovery&wiz=cloud&mode=amazonws']['text'] = __('Amazon Web Services (legacy)'));
+                 (ManageExtensions::isMigrated('pandorafms.azure.mc') === true) ?: ($sub2['godmode/servers/discovery&wiz=cloud&mode=azure']['text'] = __('Microsoft Azure (legacy)'));
+                 (ManageExtensions::isMigrated('pandorafms.azure.gcp.ce') === true) ?: ($sub2['godmode/servers/discovery&wiz=cloud&mode=gcp']['text'] = __('Google Compute Platform (legacy)'));
             }
 
 
diff --git a/pandora_console/godmode/wizards/Applications.class.php b/pandora_console/godmode/wizards/Applications.class.php
index 107550c261..7458aea872 100644
--- a/pandora_console/godmode/wizards/Applications.class.php
+++ b/pandora_console/godmode/wizards/Applications.class.php
@@ -139,6 +139,14 @@ class Applications extends Wizard
         // Else: class not found pseudo exception.
         if ($classname_selected !== null) {
             $wiz = new $classname_selected($this->page);
+            // Check if app has been migrated.
+            if (method_exists($wiz, 'isMigrated') === true) {
+                if ($wiz->isMigrated() === true) {
+                    ui_print_info_message(__('This legacy app has been migrated to new discovery 2.0 system'));
+                    return false;
+                }
+            }
+
             $result = $wiz->run();
             if (is_array($result) === true) {
                 return $result;
@@ -157,6 +165,13 @@ class Applications extends Wizard
             foreach ($enterprise_classes as $classpath) {
                 $classname = basename($classpath, '.app.php');
                 $obj = new $classname();
+
+                if (method_exists($obj, 'isMigrated') === true) {
+                    if ($obj->isMigrated() === true) {
+                        continue;
+                    }
+                }
+
                 $wiz_data[] = $obj->load();
             }
 
diff --git a/pandora_console/godmode/wizards/Cloud.class.php b/pandora_console/godmode/wizards/Cloud.class.php
index 4c5074cd3c..2492322f3b 100644
--- a/pandora_console/godmode/wizards/Cloud.class.php
+++ b/pandora_console/godmode/wizards/Cloud.class.php
@@ -160,6 +160,14 @@ class Cloud extends Wizard
         // Else: class not found pseudo exception.
         if ($classname_selected !== null) {
             $wiz = new $classname_selected($this->page);
+            // Check if app has been migrated.
+            if (method_exists($wiz, 'isMigrated') === true) {
+                if ($wiz->isMigrated() === true) {
+                    ui_print_info_message(__('This legacy app has been migrated to new discovery 2.0 system'));
+                    return false;
+                }
+            }
+
             $result = $wiz->run();
             if (is_array($result) === true) {
                 return $result;
@@ -178,6 +186,13 @@ class Cloud extends Wizard
             foreach ($enterprise_classes as $classpath) {
                 $classname = basename($classpath, '.cloud.php');
                 $obj = new $classname();
+                // Check if legacy has been migrated.
+                if (method_exists($obj, 'isMigrated') === true) {
+                    if ($obj->isMigrated() === true) {
+                        continue;
+                    }
+                }
+
                 $wiz_data[] = $obj->load();
             }
 
diff --git a/pandora_console/godmode/wizards/ManageExtensions.class.php b/pandora_console/godmode/wizards/ManageExtensions.class.php
index e39f09fa80..c6c0814873 100644
--- a/pandora_console/godmode/wizards/ManageExtensions.class.php
+++ b/pandora_console/godmode/wizards/ManageExtensions.class.php
@@ -38,6 +38,7 @@ class ManageExtensions extends HTML
         'getExtensionsInstalled',
         'validateIniName',
         'loadMigrateModal',
+        'migrateApp',
     ];
 
     /**
@@ -217,6 +218,54 @@ class ManageExtensions extends HTML
             }
         }
 
+        // Checsk XenServer is on DB.
+        $xenInstalled = db_get_value(
+            'id_app',
+            'tdiscovery_apps',
+            'short_name',
+            'pandorafms.xenserver'
+        );
+
+        if ($xenInstalled === false) {
+            db_get_lock('migrate_working');
+            try {
+                $res = db_process_file($config['attachment_store'].'/discovery/migration_scripts/insert.xenserver.sql', true);
+            } catch (\Exception $e) {
+                $res = false;
+                $error = e->getMessage();
+            } finally {
+                db_release_lock('migrate_working');
+            }
+        }
+
+        // Check config migrated apps and create it if neccesary.
+        $migratedAppsJson = db_get_value('value', 'tconfig', 'token', 'migrated_discovery_apps');
+        if ($migratedAppsJson === false || empty($migratedAppsJson) === true) {
+              // If does't exists it means is not migrated yet, insert it.
+            $migratedApps = [
+                'pandorafms.vmware'    => 0,
+                'pandorafms.mysql'     => 0,
+                'pandorafms.mssql'     => 0,
+                'pandorafms.oracle'    => 0,
+                'pandorafms.db2'       => 0,
+                'pandorafms.sap.deset' => 0,
+                'pandorafms.gcp.ce'    => 0,
+                'pandorafms.aws.ec2'   => 0,
+                'pandorafms.aws.s3'    => 0,
+                'pandorafms.aws.rds'   => 0,
+                'pandorafms.azure.mc'  => 0,
+            ];
+
+            $migratedAppsJson = json_encode($migratedApps);
+
+            if (json_last_error() === JSON_ERROR_NONE) {
+                config_create_value(
+                    'migrated_discovery_apps',
+                    io_safe_input($migratedAppsJson)
+                );
+            }
+        }
+
         $this->prepareBreadcrum(
             [
                 [
@@ -286,6 +335,8 @@ class ManageExtensions extends HTML
         html_print_table($table);
          // Auxiliar div ant string for migrate modal.
         $modal = '<div id="migrate_modal" class="invisible"></div>';
+        $modal .= '<div class="invisible" id="msg"></div>';
+
         echo $modal;
 
         echo '<div class="action-buttons w700px">';
@@ -303,6 +354,7 @@ class ManageExtensions extends HTML
                     "Ok": "'.__('Ok').'",
                     "Failed to upload extension": "'.__('Failed to upload extension').'",
                     "Migrate": "'.__('Migrate').'",
+                    "migrationSuccess": "'.__('Migration Suceeded').'",
                 };
                 var url = "'.ui_get_full_url('ajax.php', false, false, false).'";
             </script>';
@@ -727,13 +779,16 @@ class ManageExtensions extends HTML
                 if ($migrationHash !== false && empty($migrationHash) !== true) {
                     // Migrate button
                     $data[$key]['actions'] .= html_print_input_image(
-                        'button_migrate',
+                        'button_migrate-'.$row['short_name'],
                         'images/reset.png',
                         '',
                         '',
                         true,
                         [
                             'onclick' => 'show_migration_form(\''.$row['short_name'].'\',\''.$migrationHash.'\')',
+                            'title'   => __('Migrate old discovery tasks.'),
+                            'alt'     => __('Migrate old discovery tasks.'),
+                            'class'   => 'main_menu_icon invert_filter',
                         ]
                     );
                 }
@@ -1094,12 +1149,13 @@ class ManageExtensions extends HTML
         // 1. Check if app is already migrated:
         // Get migrated Discovery Apps from config.
         $migratedAppsJson = db_get_value('value', 'tconfig', 'token', 'migrated_discovery_apps');
-        if ($migratedAppsJson === false) {
+
+        if ($migratedAppsJson === false || empty($migratedAppsJson) === true) {
             return false;
         }
 
         // Decode JSON migrated apps.
-        $migrateApps = json_decode($migratedAppsJson, true);
+        $migrateApps = json_decode(io_safe_output($migratedAppsJson), true);
 
         if (json_last_error() !== JSON_ERROR_NONE) {
             return false;
@@ -1107,7 +1163,7 @@ class ManageExtensions extends HTML
 
         // Check app migrated.
         if (array_key_exists($shortName, $migrateApps)) {
-            if (defined($migrateApps[$shortName]) === true && (bool) $migrateApps[$shortName] === true) {
+            if (empty($migrateApps[$shortName]) === false && (bool) $migrateApps[$shortName] === true) {
                 // Already migrated.
                 return false;
             }
@@ -1201,4 +1257,181 @@ class ManageExtensions extends HTML
     }
 
 
+    /**
+     * Migrate app to new .disco system
+     *
+     * @return true if success, false in case of error.
+     */
+    public function migrateApp()
+    {
+        global $config;
+
+        $hash = get_parameter('hash', false);
+        $shortName = get_parameter('shortName', false);
+
+        if ($hash === false || $shortName === false) {
+            return false;
+        }
+
+        $serverPath = $config['remote_config'].'/discovery/'.$shortName;
+        $consolePath = $config['homedir'].'/'.$this->path.'/'.$shortName;
+        // 1. Gets md5
+        $console_md5 = $this->calculateDirectoryMD5($consolePath);
+        // $server_md5 = $this->calculateDirectoryMD5($serverPath);
+        if ($console_md5 === false) {
+            return false;
+        }
+
+        // 2. Checks MD5
+        if ($hash === $console_md5) {
+            // Init migration script
+            $return = $this->executeMigrationScript($shortName);
+        } else {
+            $return = [
+                'error' => __('App hash does not match.'),
+            ];
+        }
+
+        // Add shotrname to return for showing messages.
+        $return['shortname'] = $shortName;
+
+        echo json_encode($return);
+    }
+
+
+    /**
+     * Calculates directory MD% and saves it into array
+     *
+     * @param  string $directory
+     * @return $md5 Array of md5 of filess.
+     */
+    function calculateDirectoryMD5($directory)
+    {
+        $md5List = [];
+
+        $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($directory));
+
+        foreach ($iterator as $file) {
+            if ($file->isFile()) {
+                $md5List[] = md5_file($file->getPathname());
+            }
+        }
+
+        sort($md5List);
+        $concatenatedChecksums = implode('', $md5List);
+        return md5($concatenatedChecksums);
+    }
+
+
+    /**
+     * Executed migration script for app
+     *
+     * @param string $shortName Shortname of the app.
+     *
+     * @return true on success, false in case of error.
+     */
+    private function executeMigrationScript(string $shortName)
+    {
+        global $config;
+
+        $dblock = db_get_lock('migrate-working');
+              // Try to get a lock from DB.
+        if ($dblock !== 1) {
+            // Locked!
+            return false;
+        }
+
+        $scriptName = preg_replace('/^pandorafms\.(\w+)$/m', 'migrate.$1.sql', $shortName);
+
+        $script_path = $config['attachment_store'].'/discovery/migration_scripts/'.$scriptName;
+        try {
+            $res = db_process_file($script_path, true);
+        } catch (\Exception $e) {
+            $return = [
+                'error' => $e->getMessage(),
+            ];
+        } finally {
+            db_release_lock('migrate_working');
+        }
+
+        if ($res === true) {
+            $migrateAppsJson = io_safe_output(
+                db_get_value(
+                    'value',
+                    'tconfig',
+                    'token',
+                    'migrated_discovery_apps'
+                )
+            );
+
+            $migrateApps = json_decode(
+                $migrateAppsJson,
+                true
+            );
+
+            $migrateApps[$shortName] = 1;
+
+            $migratedAppsJson = json_encode($migrateApps);
+
+            if (json_last_error() === JSON_ERROR_NONE) {
+                config_update_value(
+                    'migrated_discovery_apps',
+                    $migratedAppsJson
+                );
+            } else {
+                $return = [
+                    'error' => __('Error decoding migrated apps json.'),
+                ];
+            }
+
+                $return = [
+                    'result'    => __('App migrated successfully'),
+                    'shortName' => $shortName,
+                ];
+        } else {
+            $return = [
+                'error' => __('Error migrating app'),
+            ];
+        }
+
+        return $return;
+
+    }
+
+
+    /**
+     * Check if legacy app has been migrated.
+     *
+     * @param string $shortName
+     *
+     * @return boolean
+     */
+    static public function isMigrated($shortName)
+    {
+        global $config;
+
+        $migrateAppsJson = io_safe_output(
+            db_get_value(
+                'value',
+                'tconfig',
+                'token',
+                'migrated_discovery_apps'
+            )
+        );
+
+        $migratedApps = json_decode($migrateAppsJson, true);
+
+        if (json_last_error() !== JSON_ERROR_NONE) {
+            return false;
+        }
+
+        if (array_key_exists($shortName, $migratedApps) === true && empty($migratedApps[$shortName] === false)) {
+            return (bool) $migratedApps[$shortName];
+        } else {
+            return false;
+        }
+
+    }
+
+
 }
diff --git a/pandora_console/include/javascript/manage_extensions.js b/pandora_console/include/javascript/manage_extensions.js
index 969a9c4ce2..0685c868f1 100644
--- a/pandora_console/include/javascript/manage_extensions.js
+++ b/pandora_console/include/javascript/manage_extensions.js
@@ -78,12 +78,13 @@ function show_migration_form(shortName, hash) {
   var btn_ok_text = textsToTranslate["Migrate"];
   var btn_cancel_text = textsToTranslate["Cancel"];
   var title = textsToTranslate["Migrate"];
-  var method = "migrate";
+  var method = "migrateApp";
 
   load_modal({
     target: $("#migrate_modal"),
     form: "modal_migrate_form",
     url: url,
+    ajax_callback: showMsg,
     modal: {
       title: title,
       ok: btn_ok_text,
@@ -109,3 +110,58 @@ function show_migration_form(shortName, hash) {
     }
   });
 }
+
+/**
+ * Process ajax responses and shows a dialog with results.
+ */
+function showMsg(data) {
+  var title = textsToTranslate["migrationSuccess"];
+  var text = "";
+  var failed = 0;
+  try {
+    data = JSON.parse(data);
+    text = data["result"];
+  } catch (err) {
+    title = textsToTranslate["Error"];
+    text = err.message;
+    failed = 1;
+  }
+  if (!failed && data["error"] != undefined) {
+    title = textsToTranslate["Error"];
+    text = data["error"];
+    failed = 1;
+  }
+  if (data["report"] != undefined) {
+    data["report"].forEach(function(item) {
+      text += "<br>" + item;
+    });
+  }
+
+  $("#msg").empty();
+  $("#msg").html(text);
+  $("#msg").dialog({
+    width: 450,
+    position: {
+      my: "center",
+      at: "center",
+      of: window,
+      collision: "fit"
+    },
+    title: title,
+    buttons: [
+      {
+        class:
+          "ui-widget ui-state-default ui-corner-all ui-button-text-only sub ok submit-next",
+        text: "OK",
+        click: function(e) {
+          if (!failed) {
+            $(".ui-dialog-content").dialog("close");
+            $(".info").hide();
+          } else {
+            $(this).dialog("close");
+          }
+        }
+      }
+    ]
+  });
+}

From c101389a26bc50c77cd1e2b3a4048038476fc21a Mon Sep 17 00:00:00 2001
From: Daniel Cebrian <daniel.cebrian@pandorafms.com>
Date: Thu, 14 Sep 2023 12:44:03 +0200
Subject: [PATCH 035/116] #12050 new widget security hardening

---
 pandora_console/include/functions_html.php    |  14 +
 .../include/lib/Dashboard/Widget.php          |   4 +
 .../Dashboard/Widgets/security_hardening.php  | 828 ++++++++++++++++++
 3 files changed, 846 insertions(+)
 create mode 100644 pandora_console/include/lib/Dashboard/Widgets/security_hardening.php

diff --git a/pandora_console/include/functions_html.php b/pandora_console/include/functions_html.php
index ab8df7ef09..611cc8a535 100644
--- a/pandora_console/include/functions_html.php
+++ b/pandora_console/include/functions_html.php
@@ -6280,6 +6280,20 @@ function html_print_input($data, $wrapper='div', $input_only=false)
             );
         break;
 
+        case 'date_range':
+            $output .= html_print_select_date_range(
+                $data['name'],
+                true,
+                (isset($data['selected']) === true) ? $data['selected'] : SECONDS_1DAY,
+                (isset($data['date_init']) === true) ? $data['date_init'] : '',
+                (isset($data['time_init']) === true) ? $data['time_init'] : '',
+                (isset($data['date_end']) === true) ? $data['date_end'] : '',
+                (isset($data['time_end']) === true) ? $data['time_end'] : '',
+                (isset($data['date_text']) === true) ? $data['date_text'] : SECONDS_1DAY,
+                (isset($data['class']) === true) ? $data['class'] : 'w100p',
+            );
+        break;
+
         default:
             // Ignore.
         break;
diff --git a/pandora_console/include/lib/Dashboard/Widget.php b/pandora_console/include/lib/Dashboard/Widget.php
index 9bedc71f50..f5e6a2f0cc 100644
--- a/pandora_console/include/lib/Dashboard/Widget.php
+++ b/pandora_console/include/lib/Dashboard/Widget.php
@@ -444,6 +444,10 @@ class Widget
                     $className .= '\HeatmapWidget';
                 break;
 
+                case 'security_hardening':
+                    $className .= '\SecurityHardening';
+                break;
+
                 default:
                     $className = false;
                 break;
diff --git a/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php b/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php
new file mode 100644
index 0000000000..ee7aff00a8
--- /dev/null
+++ b/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php
@@ -0,0 +1,828 @@
+<?php
+/**
+ * Widget Security hardening Pandora FMS Console
+ *
+ * @category   Console Class
+ * @package    Pandora FMS
+ * @subpackage Widget Security hardening
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ *   |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ *  |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2021 Artica Soluciones Tecnologicas
+ * Please see http://pandorafms.org for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+namespace PandoraFMS\Dashboard;
+
+/**
+ * Security hardening.
+ */
+class SecurityHardening extends Widget
+{
+
+    /**
+     * Name widget.
+     *
+     * @var string
+     */
+    protected $name;
+
+    /**
+     * Title widget.
+     *
+     * @var string
+     */
+    protected $title;
+
+    /**
+     * Page widget;
+     *
+     * @var string
+     */
+    protected $page;
+
+    /**
+     * Class name widget.
+     *
+     * @var [type]
+     */
+    protected $className;
+
+    /**
+     * Values options for each widget.
+     *
+     * @var [type]
+     */
+    protected $values;
+
+    /**
+     * Configuration required.
+     *
+     * @var boolean
+     */
+    protected $configurationRequired;
+
+    /**
+     * Error load widget.
+     *
+     * @var boolean
+     */
+    protected $loadError;
+
+    /**
+     * Width.
+     *
+     * @var integer
+     */
+    protected $width;
+
+    /**
+     * Heigth.
+     *
+     * @var integer
+     */
+    protected $height;
+
+    /**
+     * Grid Width.
+     *
+     * @var integer
+     */
+    protected $gridWidth;
+
+    /**
+     * List elements of hardening.
+     *
+     * @var array
+     */
+    private $elements;
+
+
+    /**
+     * Construct.
+     *
+     * @param integer      $cellId      Cell ID.
+     * @param integer      $dashboardId Dashboard ID.
+     * @param integer      $widgetId    Widget ID.
+     * @param integer|null $width       New width.
+     * @param integer|null $height      New height.
+     * @param integer|null $gridWidth   Grid width.
+     */
+    public function __construct(
+        int $cellId,
+        int $dashboardId=0,
+        int $widgetId=0,
+        ?int $width=0,
+        ?int $height=0,
+        ?int $gridWidth=0
+    ) {
+        global $config;
+
+        // Includes.
+        include_once ENTERPRISE_DIR.'/include/functions_security_hardening.php';
+        // WARNING: Do not edit. This chunk must be in the constructor.
+        parent::__construct(
+            $cellId,
+            $dashboardId,
+            $widgetId
+        );
+
+        // Width.
+        $this->width = $width;
+
+        // Height.
+        $this->height = $height;
+
+        // Grid Width.
+        $this->gridWidth = $gridWidth;
+
+        // Options.
+        $this->values = $this->getOptionsWidget();
+
+        // Positions.
+        $this->position = $this->getPositionWidget();
+
+        // Page.
+        $this->page = basename(__FILE__);
+
+        // ClassName.
+        $class = new \ReflectionClass($this);
+        $this->className = $class->getShortName();
+
+        // Title.
+        $this->title = __('Security Hardening');
+
+        // Name.
+        if (empty($this->name) === true) {
+            $this->name = 'security_hardening';
+        }
+
+        $this->elements = [
+            'top_n_agents_sh'         => __('Top-N agents with the worst score'),
+            'top_n_checks_failed'     => __('Top-N most frequent failed checks'),
+            'top_n_categories_checks' => __('Top-N checks failed by category'),
+            'vul_by_cat'              => __('Vulnerabilities by category'),
+            'scoring'                 => __('Scoring by date'),
+            'evolution'               => __('Evolution'),
+        ];
+    }
+
+
+    /**
+     * Generates inputs for form (specific).
+     *
+     * @return array Of inputs.
+     *
+     * @throws Exception On error.
+     */
+    public function getFormInputs(): array
+    {
+        $values = $this->values;
+
+        // Retrieve global - common inputs.
+        $inputs = parent::getFormInputs();
+        $categories = categories_of_cis();
+        foreach ($categories as $id => $cat) {
+            $categories[$id] = implode(' ', $cat);
+        }
+
+        $inputs[] = [
+            'label'     => __('Data type'),
+            'id'        => 'row_data_type',
+            'arguments' => [
+                'id'       => 'select_data_type',
+                'name'     => 'data_type',
+                'type'     => 'select',
+                'script'   => 'selectData(this)',
+                'fields'   => $this->elements,
+                'selected' => $values['data_type'],
+            ],
+        ];
+
+        $inputs[] = [
+            'label'     => __('Group'),
+            'id'        => 'row_group',
+            'class'     => 'row_input',
+            'arguments' => [
+                'id'       => 'select_groups',
+                'name'     => 'group',
+                'type'     => 'select_groups',
+                'selected' => (empty($values['group']) === false) ? $values['group'] : 0,
+            ],
+        ];
+
+        $inputs[] = [
+            'label'     => __('Limit'),
+            'id'        => 'row_limit',
+            'class'     => 'row_input',
+            'arguments' => [
+                'id'    => 'limit',
+                'name'  => 'limit',
+                'type'  => 'number',
+                'value' => (empty($values['limit']) === false) ? $values['limit'] : 10,
+            ],
+        ];
+
+        $inputs[] = [
+            'label'     => __('Category'),
+            'id'        => 'row_category',
+            'class'     => 'row_input',
+            'arguments' => [
+                'id'       => 'select_categories',
+                'name'     => 'category',
+                'type'     => 'select',
+                'fields'   => $categories,
+                'selected' => (empty($values['category']) === false) ? $values['category'] : 6,
+            ],
+        ];
+
+        $inputs[] = [
+            'label'     => __('Ingore skipped'),
+            'id'        => 'row_ignore_skipped',
+            'class'     => 'row_input',
+            'arguments' => [
+                'id'     => 'ignore_skipped',
+                'name'   => 'ignore_skipped',
+                'type'   => 'switch',
+                'class'  => 'invisible',
+                'value'  => ($values['ignore_skipped'] === null) ? 1 : $values['ignore_skipped'],
+                'return' => true,
+            ],
+        ];
+
+        $inputs[] = [
+            'label'     => __('Date'),
+            'id'        => 'row_date',
+            'class'     => 'row_input',
+            'arguments' => [
+                'id'        => 'range',
+                'name'      => 'range',
+                'type'      => 'date_range',
+                'selected'  => 'chose_range',
+                'date_init' => date('Y-m-d', $values['date_init']),
+                'time_init' => date('H:i:s', $values['date_init']),
+                'date_end'  => date('Y-m-d', $values['date_end']),
+                'time_end'  => date('H:i:s', $values['date_end']),
+                'return'    => true,
+            ],
+        ];
+
+        return $inputs;
+    }
+
+
+    /**
+     * Get Post for widget.
+     *
+     * @return array
+     */
+    public function getPost():array
+    {
+        // Retrieve global - common inputs.
+        $values = parent::getPost();
+
+        $values['data_type'] = \get_parameter('data_type', '');
+        $values['group'] = \get_parameter('group', 0);
+        $values['limit'] = \get_parameter('limit', 10);
+        $values['category'] = \get_parameter('category', 6);
+        $values['ignore_skipped'] = \get_parameter_switch('ignore_skipped', 0);
+        $date = $this->getDateParameter();
+        $values['date_init'] = $date['date_init'];
+        $values['date_end'] = $date['date_end'];
+        return $values;
+    }
+
+
+    /**
+     * Draw widget.
+     *
+     * @return string
+     */
+    public function load()
+    {
+        global $config;
+
+        $output = '';
+
+        $size = parent::getSize();
+        $values = $this->values;
+        $data_type = $this->values['data_type'];
+        $id_groups = $this->checkAcl($values['group']);
+        $output .= '<b>'.$this->elements[$data_type].'</b>';
+
+        switch ($data_type) {
+            case 'top_n_agents_sh':
+                $output .= $this->loadTopNAgentsSh($id_groups, $values['limit']);
+            break;
+
+            case 'top_n_checks_failed':
+                $output .= $this->topNChecksFailed($id_groups, $values['limit']);
+            break;
+
+            case 'top_n_categories_checks':
+                $output .= $this->topNCategoriesChecks($id_groups, $values['limit']);
+            break;
+
+            case 'vul_by_cat':
+                $output .= $this->vulnerabilitiesByCategory($id_groups, $values['category'], (bool) $values['ignore_skipped']);
+            break;
+
+            case 'scoring':
+                $output .= $this->scoring($id_groups, $values['date_init'], $values['date_end']);
+            break;
+
+            case 'evolution':
+                $output .= $this->evolution($id_groups, $values['date_init'], $values['date_end']);
+            break;
+
+            default:
+                $output .= \ui_print_info_message(_('Please, configure this widget before use'), '', true);
+            break;
+        }
+
+        return $output;
+
+    }
+
+
+    private function getDateParameter()
+    {
+        $date_end = get_parameter('date_end', 0);
+        $time_end = get_parameter('time_end');
+        $datetime_end = strtotime($date_end.' '.$time_end);
+
+        $custom_date = get_parameter('custom_date', 0);
+        $range = get_parameter('range', SECONDS_1DAY);
+        $date_text = get_parameter('range_text', SECONDS_1DAY);
+        $date_init_less = (strtotime(date('Y/m/d')) - SECONDS_1DAY);
+        $date_init = get_parameter('date_init', date(DATE_FORMAT, $date_init_less));
+        $time_init = get_parameter('time_init', date(TIME_FORMAT, $date_init_less));
+        $datetime_init = strtotime($date_init.' '.$time_init);
+        if ($custom_date === '1') {
+            if ($datetime_init >= $datetime_end) {
+                $datetime_init = $date_init_less;
+            }
+
+            $date_init = date('Y/m/d H:i:s', $datetime_init);
+            $date_end = date('Y/m/d H:i:s', $datetime_end);
+            $period = ($datetime_end - $datetime_init);
+        } else if ($custom_date === '2') {
+            $date_units = get_parameter('range_units');
+            $date_end = date('Y/m/d H:i:s');
+            $date_init = date('Y/m/d H:i:s', (strtotime($date_end) - ((int) $date_text * (int) $date_units)));
+            $period = (strtotime($date_end) - strtotime($date_init));
+        } else if (in_array($range, ['this_week', 'this_month', 'past_week', 'past_month'])) {
+            if ($range === 'this_week') {
+                $monday = date('Y/m/d', strtotime('last monday'));
+
+                $sunday = date('Y/m/d', strtotime($monday.' +6 days'));
+                $period = (strtotime($sunday) - strtotime($monday));
+                $date_init = $monday;
+                $date_end = $sunday;
+            } else if ($range === 'this_month') {
+                $date_end = date('Y/m/d', strtotime('last day of this month'));
+                $first_of_month = date('Y/m/d', strtotime('first day of this month'));
+                $date_init = $first_of_month;
+                $period = (strtotime($date_end) - strtotime($first_of_month));
+            } else if ($range === 'past_month') {
+                $date_end = date('Y/m/d', strtotime('last day of previous month'));
+                $first_of_month = date('Y/m/d', strtotime('first day of previous month'));
+                $date_init = $first_of_month;
+                $period = (strtotime($date_end) - strtotime($first_of_month));
+            } else if ($range === 'past_week') {
+                $date_end = date('Y/m/d', strtotime('sunday', strtotime('last week')));
+                $first_of_week = date('Y/m/d', strtotime('monday', strtotime('last week')));
+                $date_init = $first_of_week;
+                $period = (strtotime($date_end) - strtotime($first_of_week));
+            }
+        } else {
+            $date_end = date('Y/m/d H:i:s');
+            $date_init = date('Y/m/d H:i:s', (strtotime($date_end) - $range));
+            $period = (strtotime($date_end) - strtotime($date_init));
+        }
+
+        return [
+            'date_init' => strtotime($date_init),
+            'date_end'  => strtotime($date_end),
+            'period'    => $period,
+        ];
+    }
+
+
+    private function checkAcl($group)
+    {
+        global $config;
+
+        $id_groups = explode(',', $group);
+        if (in_array(0, $id_groups) === true) {
+            $id_groups = array_keys(users_get_groups($config['id_user'], 'AR', false));
+        }
+
+        foreach ($id_groups as $key => $id_group) {
+            if ((bool) check_acl_restricted_all($config['id_user'], $id_group, 'AR') === false) {
+                unset($id_groups[$key]);
+            }
+        }
+
+        $id_groups = implode(',', $id_groups);
+        if ($id_groups === '') {
+            $id_groups = -1;
+        }
+
+        return $id_groups;
+    }
+
+
+    private function evolution($group, $date_init, $date_end)
+    {
+        $time_line = get_hardening_evolution($group, $date_init, $date_end, false);
+        $dates = [];
+        $dataset_passed = [];
+        $dataset_failed = [];
+        foreach ($time_line['passed'] as $key => $raw_data) {
+            $dates[] = date('Y-m-d', $raw_data['utimestamp']);
+            $dataset_passed[] = $raw_data['datos'];
+        }
+
+        foreach ($time_line['failed'] as $key => $raw_data) {
+            $dataset_failed[] = $raw_data['datos'];
+        }
+
+        $options = ['labels' => $dates];
+
+        $data = [
+            [
+                'label'                     => 'Passed',
+                'backgroundColor'           => '#82b92e',
+                'borderColor'               => '#82b92e',
+                'pointBackgroundColor'      => '#82b92e',
+                'pointBorderColor'          => '#fff',
+                'pointHoverBackgroundColor' => '#fff',
+                'pointHoverBorderColor'     => '#82b92e',
+                'data'                      => $dataset_passed,
+            ],
+            [
+                'label'                     => 'Failed',
+                'backgroundColor'           => '#e63c52',
+                'borderColor'               => '#e63c52',
+                'pointBackgroundColor'      => '#e63c52',
+                'pointBorderColor'          => '#fff',
+                'pointHoverBackgroundColor' => '#fff',
+                'pointHoverBorderColor'     => '#e63c52',
+                'data'                      => $dataset_failed,
+            ],
+        ];
+
+        $graph_area = line_graph($data, $options);
+
+        return html_print_div(
+            [
+                'content' => $graph_area,
+                'class'   => 'flex',
+                'style'   => 'width: 90%; height: 90%;',
+            ],
+            true
+        );
+    }
+
+
+    private function scoring($group, $date_init, $date_end)
+    {
+        global $config;
+        $data = get_scoring_by_agent($group, $date_init, $date_end);
+        if (count($data) === 0) {
+            return ui_print_info_message(__('No data found'), '', true);
+        }
+
+        $table = new \stdClass();
+
+        $table->class = 'info_table';
+        $table->width = '100%';
+        $table->cellpadding = 0;
+        $table->cellspacing = 0;
+        $table->size = [];
+        $table->size[0] = '30%';
+        $table->size[1] = '30%';
+        $table->size[2] = '30%';
+
+        $table->align = [];
+        $table->align[0] = 'center';
+        $table->align[1] = 'center';
+
+        $table->head = [];
+        $table->head[0] = __('Date');
+        $table->head[1] = __('Agent');
+        $table->head[2] = __('Scoring');
+
+        $table->headstyle = [];
+        $table->headstyle[0] = 'text-align:center;background-color: '.$this->values['background'];
+        $table->headstyle[1] = 'text-align:center; background-color: '.$this->values['background'];
+        $table->headstyle[2] = 'text-align:center; background-color: '.$this->values['background'];
+
+        $table->style = [];
+        $table->style[0] = 'padding: 0px 20px; background-color: '.$this->values['background'].';';
+        $table->style[1] = 'background-color: '.$this->values['background'].';';
+        $table->style[2] = 'background-color: '.$this->values['background'].'; font-weight: bolder;';
+
+        foreach ($data as $id => $agent) {
+            $row = [];
+            $row[0] = date($config['date_format'], $agent['date']);
+            $row[1] = $agent['agent'];
+            $row[2] = $agent['scoring'].' %';
+
+            $table->data[] = $row;
+        }
+
+        $output = html_print_table($table, true);
+
+        return $output;
+    }
+
+
+    private function vulnerabilitiesByCategory($group, $category, $ignore_skipped=true)
+    {
+        $labels = [
+            __('Passed'),
+            __('Failed'),
+        ];
+        $vulnerabilities = vulnerability_by_category($group, $category, $ignore_skipped);
+        $data = [
+            count($vulnerabilities['pass']),
+            count($vulnerabilities['fail']),
+        ];
+
+        $total = (count($vulnerabilities['pass']) + count($vulnerabilities['fail']));
+
+        if ($ignore_skipped === false) {
+            $data[] = count($vulnerabilities['skipped']);
+            $total += count($vulnerabilities['skipped']);
+            $labels[] = __('Skipped');
+        }
+
+        $pie = ring_graph(
+            $data,
+            [
+                'legend'   => [
+                    'display'  => true,
+                    'position' => 'right',
+                    'align'    => 'center',
+                ],
+                'elements' => [
+                    'center' => [
+                        'text'  => $total,
+                        'color' => '#2c3e50',
+                    ],
+                ],
+                'labels'   => $labels,
+                'colors'   => [
+                    '#82b92e',
+                    '#e63c52',
+                    '#E4E4E4',
+                ],
+            ]
+        );
+
+        return html_print_div(
+            [
+                'content' => $pie,
+                'class'   => 'flex',
+                'style'   => 'width: 80%; height: 90%;',
+            ],
+            true
+        );
+    }
+
+
+    private function topNCategoriesChecks($group, $limit=10)
+    {
+        $data = top_n_categories_checks($group, $limit);
+        if (count($data) === 0) {
+            return ui_print_info_message(__('No data found'), '', true);
+        }
+
+        $table = new \stdClass();
+
+        $table->class = 'info_table';
+        $table->width = '100%';
+        $table->cellpadding = 0;
+        $table->cellspacing = 0;
+        $table->size = [];
+        $table->size[0] = '70%';
+        $table->size[1] = '30%';
+
+        $table->align = [];
+        $table->align[0] = 'center';
+        $table->align[1] = 'center';
+
+        $table->head = [];
+        $table->head[0] = __('Category');
+        $table->head[1] = __('Total Failed');
+
+        $table->headstyle = [];
+        $table->headstyle[0] = 'text-align:center;background-color: '.$this->values['background'];
+        $table->headstyle[1] = 'text-align:center; background-color: '.$this->values['background'];
+
+        $table->style = [];
+        $table->style[0] = 'padding: 0px 20px; background-color: '.$this->values['background'].';';
+        $table->style[1] = 'background-color: '.$this->values['background'].'; font-weight: bolder;';
+
+        foreach ($data as $id => $agent) {
+            $row = [];
+            $row[0] = $agent['category'];
+            $row[1] = $agent['total'];
+
+            $table->data[] = $row;
+        }
+
+        $output = html_print_table($table, true);
+
+        return $output;
+    }
+
+
+    private function topNChecksFailed($group, $limit=10)
+    {
+        $data = top_n_checks_failed($group, $limit);
+        if (count($data) === 0) {
+            return ui_print_info_message(__('No data found'), '', true);
+        }
+
+        $table = new \stdClass();
+
+        $table->class = 'info_table';
+        $table->width = '100%';
+        $table->cellpadding = 0;
+        $table->cellspacing = 0;
+        $table->size = [];
+        $table->size[0] = '70%';
+        $table->size[1] = '30%';
+
+        $table->align = [];
+        $table->align[0] = 'center';
+        $table->align[1] = 'center';
+
+        $table->head = [];
+        $table->head[0] = __('Title');
+        $table->head[1] = __('Total Failed');
+
+        $table->headstyle = [];
+        $table->headstyle[0] = 'text-align:center;background-color: '.$this->values['background'];
+        $table->headstyle[1] = 'text-align:center; background-color: '.$this->values['background'];
+
+        $table->style = [];
+        $table->style[0] = 'padding: 0px 20px; background-color: '.$this->values['background'].';';
+        $table->style[1] = 'background-color: '.$this->values['background'].'; font-weight: bolder;';
+
+        foreach ($data as $id => $agent) {
+            $row = [];
+            $row[0] = $agent['title'];
+            $row[1] = $agent['total'];
+
+            $table->data[] = $row;
+        }
+
+        $output = html_print_table($table, true);
+
+        return $output;
+    }
+
+
+    private function loadTopNAgentsSh($group, $limit=10)
+    {
+        global $config;
+
+        $data = top_n_agents_worses_by_group($group, $limit);
+        if (count($data) === 0) {
+            return ui_print_info_message(__('No data found'), '', true);
+        }
+
+        $table = new \stdClass();
+
+        $table->class = 'info_table';
+        $table->width = '100%';
+        $table->cellpadding = 0;
+        $table->cellspacing = 0;
+        $table->size = [];
+        $table->size[0] = '35%';
+        $table->size[1] = '32%';
+        $table->size[2] = '32%';
+
+        $table->align = [];
+        $table->align[0] = 'center';
+        $table->align[1] = 'center';
+        $table->align[2] = 'center';
+
+        $table->head = [];
+        $table->head[0] = __('Alias');
+        $table->head[1] = __('Last audit scan');
+        $table->head[2] = __('Score');
+
+        $table->headstyle = [];
+        $table->headstyle[0] = 'text-align:center;background-color: '.$this->values['background'];
+        $table->headstyle[1] = 'text-align:center; background-color: '.$this->values['background'];
+        $table->headstyle[2] = 'text-align:center;background-color: '.$this->values['background'];
+
+        $table->style = [];
+        $table->style[0] = 'padding: 0px 20px; background-color: '.$this->values['background'].';';
+        $table->style[1] = 'background-color: '.$this->values['background'].';';
+        $table->style[2] = 'background-color: '.$this->values['background'].'; font-size: 1em; font-weight: bolder;';
+
+        foreach ($data as $id => $agent) {
+            $row = [];
+            $row[0] = $agent['alias'];
+            $row[1] = date($config['date_format'], $agent['utimestamp']);
+            $row[2] = $agent['datos'].' %';
+
+            $table->data[] = $row;
+        }
+
+        $output = html_print_table($table, true);
+
+        return $output;
+    }
+
+
+    /**
+     * Return aux javascript code for forms.
+     *
+     * @return string
+     */
+    public function getFormJS()
+    {
+        $id = uniqid();
+        return '
+        const dataTypes_'.$id.' = {
+            "top_n_agents_sh": ["#row_group", "#row_limit"],
+            "top_n_checks_failed": ["#row_group", "#row_limit"],
+            "top_n_categories_checks": ["#row_group", "#row_limit"],
+            "vul_by_cat": ["#row_group", "#row_category", "#row_ignore_skipped"],
+            "scoring": ["#row_group", "#row_date"],
+            "evolution": ["#row_group", "#row_date"],
+        }
+        function selectData(e){
+            $(".row_input").hide();
+            dataTypes_'.$id.'[e.value].forEach(element => {
+                console.log(element);
+                $(element).show();
+            });
+        }
+        $(document).ready(function() {
+            const input = $("#data_type")[0];
+            selectData(input);
+        });
+    ';
+    }
+
+
+    /**
+     * Get description.
+     *
+     * @return string.
+     */
+    public static function getDescription()
+    {
+        return __('Security Hardening');
+    }
+
+
+    /**
+     * Get Name.
+     *
+     * @return string.
+     */
+    public static function getName()
+    {
+        return 'security_hardening';
+    }
+
+
+    /**
+     * Get size Modal Configuration.
+     *
+     * @return array
+     */
+    public function getSizeModalConfiguration(): array
+    {
+        $size = [
+            'width'  => 400,
+            'height' => 530,
+        ];
+
+        return $size;
+    }
+
+
+}

From 09bcedde62c9fa7b0dbc169c909bbc5ff53ffe62 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Thu, 14 Sep 2023 16:36:52 +0200
Subject: [PATCH 036/116] ITSM pandora_enterprise#11471

---
 .../godmode/alerts/alert_commands.php         |  12 +-
 pandora_console/include/lib/ITSM/ITSM.php     |   7 +-
 pandora_console/include/lib/ITSM/Manager.php  | 135 ++++++++++--------
 pandora_console/include/styles/pandora.css    |   4 +
 .../agentes/estado_generalagente.php          |   2 +-
 .../views/ITSM/ITSMTicketDetailView.php       |  12 ++
 .../views/ITSM/ITSMTicketListView.php         |  14 +-
 pandora_server/lib/PandoraFMS/Core.pm         |  47 +++---
 8 files changed, 149 insertions(+), 84 deletions(-)

diff --git a/pandora_console/godmode/alerts/alert_commands.php b/pandora_console/godmode/alerts/alert_commands.php
index f4262b4e8e..a59de7f5e2 100644
--- a/pandora_console/godmode/alerts/alert_commands.php
+++ b/pandora_console/godmode/alerts/alert_commands.php
@@ -377,8 +377,8 @@ if (is_ajax()) {
                         'field'.$i.'_value[]',
                         '',
                         '',
-                        10,
-                        10,
+                        50,
+                        50,
                         true,
                         false,
                         false,
@@ -387,7 +387,7 @@ if (is_ajax()) {
                         '',
                         'off',
                         false,
-                        false,
+                        '',
                         '',
                         '',
                         $management_is_not_allowed
@@ -396,8 +396,8 @@ if (is_ajax()) {
                         'field'.$i.'_recovery_value[]',
                         '',
                         '',
-                        10,
-                        10,
+                        50,
+                        50,
                         true,
                         false,
                         false,
@@ -406,7 +406,7 @@ if (is_ajax()) {
                         '',
                         'off',
                         false,
-                        false,
+                        '',
                         '',
                         '',
                         $management_is_not_allowed || $recovery_disabled
diff --git a/pandora_console/include/lib/ITSM/ITSM.php b/pandora_console/include/lib/ITSM/ITSM.php
index b3ba547dbb..4879ac9f39 100644
--- a/pandora_console/include/lib/ITSM/ITSM.php
+++ b/pandora_console/include/lib/ITSM/ITSM.php
@@ -459,7 +459,7 @@ class ITSM
      *
      * @return array list Incidences.
      */
-    public function listIncidenceAgents(int $idAgent): array
+    public function listIncidenceAgents(int $idAgent, ?bool $blocked=null): array
     {
         global $config;
         $listIncidences = $this->callApi(
@@ -468,7 +468,10 @@ class ITSM
                 'page'     => 0,
                 'sizePage' => 0,
             ],
-            ['externalIdLike' => $config['metaconsole_node_id'].'-'.$idAgent]
+            [
+                'externalIdLike' => $config['metaconsole_node_id'].'-'.$idAgent,
+                'blocked'        => $blocked,
+            ]
         );
 
         return $listIncidences['data'];
diff --git a/pandora_console/include/lib/ITSM/Manager.php b/pandora_console/include/lib/ITSM/Manager.php
index 544ded12e7..3e98ca4307 100644
--- a/pandora_console/include/lib/ITSM/Manager.php
+++ b/pandora_console/include/lib/ITSM/Manager.php
@@ -145,6 +145,7 @@ class Manager
         $successfullyMsg = '';
         $groups = [];
         $status = [];
+        $priorities = [];
 
         $headerTabs = $this->headersTabs('list');
 
@@ -152,6 +153,7 @@ class Manager
             $ITSM = new ITSM();
             $groups = $ITSM->getGroups();
             $status = $ITSM->getStatus();
+            $priorities = $ITSM->getPriorities();
             if (empty($idIncidence) === false) {
                 $this->deleteIncidence($ITSM, $idIncidence);
                 $successfullyMsg = __('Delete ticket successfully');
@@ -169,6 +171,7 @@ class Manager
                 'successfullyMsg' => $successfullyMsg,
                 'groups'          => $groups,
                 'status'          => $status,
+                'priorities'      => $priorities,
                 'headerTabs'      => $headerTabs,
             ]
         );
@@ -315,6 +318,9 @@ class Manager
         $headerTabs = $this->headersTabs('detail', $idIncidence);
 
         $error = '';
+        $error_upload = '';
+        $error_comment = '';
+        $error_delete_attachment = '';
         $successfullyMsg = null;
         $incidence = null;
         $objectTypes = null;
@@ -328,46 +334,60 @@ class Manager
         $priorityDiv = null;
         $inventories = null;
         $ITSM = new ITSM();
+
+        try {
+            if ($uploadFile === true) {
+                $attachment = [
+                    'description' => get_parameter('file_description', ''),
+                ];
+
+                $incidenceAttachment = $this->createIncidenceAttachment(
+                    $ITSM,
+                    $idIncidence,
+                    $attachment,
+                    get_parameter('userfile')
+                );
+
+                if ($incidenceAttachment !== false) {
+                    $successfullyMsg = __('File added succesfully');
+                }
+            }
+        } catch (\Exception $e) {
+            hd($e->getMessage());
+            $error_upload = $e->getMessage();
+        }
+
+        try {
+            if ($addComment === true) {
+                $wu = [
+                    'description' => get_parameter('comment_description', ''),
+                ];
+
+                $incidenceAttachment = $this->createIncidenceWu(
+                    $ITSM,
+                    $idIncidence,
+                    $wu
+                );
+
+                if ($incidenceAttachment !== false) {
+                    $successfullyMsg = __('Comment added succesfully');
+                }
+            }
+        } catch (\Exception $e) {
+            $error_comment = $e->getMessage();
+        }
+
+        try {
+            if (empty($idAttachment) === false) {
+                $this->deleteIncidenceAttachment($ITSM, $idIncidence, $idAttachment);
+                $successfullyMsg = __('Delete File successfully');
+            }
+        } catch (\Exception $e) {
+            $error_delete_attachment = $e->getMessage();
+        }
+
         try {
             if (empty($idIncidence) === false) {
-                if ($uploadFile === true) {
-                    $attachment = [
-                        'description' => get_parameter('file_description', ''),
-                    ];
-
-                    $incidenceAttachment = $this->createIncidenceAttachment(
-                        $ITSM,
-                        $idIncidence,
-                        $attachment,
-                        get_parameter('userfile')
-                    );
-
-                    if ($incidenceAttachment !== false) {
-                        $successfullyMsg = __('File added succesfully');
-                    }
-                }
-
-                if ($addComment === true) {
-                    $wu = [
-                        'description' => get_parameter('comment_description', ''),
-                    ];
-
-                    $incidenceAttachment = $this->createIncidenceWu(
-                        $ITSM,
-                        $idIncidence,
-                        $wu
-                    );
-
-                    if ($incidenceAttachment !== false) {
-                        $successfullyMsg = __('Comment added succesfully');
-                    }
-                }
-
-                if (empty($idAttachment) === false) {
-                    $this->deleteIncidenceAttachment($ITSM, $idIncidence, $idAttachment);
-                    $successfullyMsg = __('Delete File successfully');
-                }
-
                 $incidence = $this->getIncidence($ITSM, $idIncidence);
                 $objectTypes = $ITSM->getObjectypes();
                 $groups = $ITSM->getGroups();
@@ -403,29 +423,32 @@ class Manager
                     }
                 }
             }
-        } catch (\Throwable $th) {
-            $error = $th->getMessage();
+        } catch (\Exception $e) {
+            $error = $e->getMessage();
         }
 
         View::render(
             'ITSM/ITSMTicketDetailView',
             [
-                'ajaxController'  => $this->ajaxController,
-                'urlAjax'         => \ui_get_full_url('ajax.php'),
-                'error'           => $error,
-                'successfullyMsg' => $successfullyMsg,
-                'incidence'       => $incidence,
-                'objectTypes'     => $objectTypes,
-                'groups'          => $groups,
-                'resolutions'     => $resolutions,
-                'status'          => $status,
-                'wus'             => $wus,
-                'files'           => $files,
-                'users'           => $users,
-                'priorities'      => $priorities,
-                'priorityDiv'     => $priorityDiv,
-                'headerTabs'      => $headerTabs,
-                'inventories'     => $inventories,
+                'ajaxController'          => $this->ajaxController,
+                'urlAjax'                 => \ui_get_full_url('ajax.php'),
+                'error'                   => $error,
+                'error_upload'            => $error_upload,
+                'error_comment'           => $error_comment,
+                'error_delete_attachment' => $error_delete_attachment,
+                'successfullyMsg'         => $successfullyMsg,
+                'incidence'               => $incidence,
+                'objectTypes'             => $objectTypes,
+                'groups'                  => $groups,
+                'resolutions'             => $resolutions,
+                'status'                  => $status,
+                'wus'                     => $wus,
+                'files'                   => $files,
+                'users'                   => $users,
+                'priorities'              => $priorities,
+                'priorityDiv'             => $priorityDiv,
+                'headerTabs'              => $headerTabs,
+                'inventories'             => $inventories,
             ]
         );
     }
diff --git a/pandora_console/include/styles/pandora.css b/pandora_console/include/styles/pandora.css
index 612540a512..5afe930d3a 100644
--- a/pandora_console/include/styles/pandora.css
+++ b/pandora_console/include/styles/pandora.css
@@ -12566,3 +12566,7 @@ tr[id^="network_component-plugin-snmp-fields-dynamicMacroRow-"] input {
 .ui-date-range-in > a {
   background-color: #81b92e3b !important;
 }
+
+.ui-datepicker-title > span {
+  color: #82b92e !important;
+}
diff --git a/pandora_console/operation/agentes/estado_generalagente.php b/pandora_console/operation/agentes/estado_generalagente.php
index ab71c2b944..c038703ef4 100755
--- a/pandora_console/operation/agentes/estado_generalagente.php
+++ b/pandora_console/operation/agentes/estado_generalagente.php
@@ -950,7 +950,7 @@ if ((bool) $config['ITSM_enabled'] === true) {
     $show_tab_issue = false;
     try {
         $ITSM = new ITSM();
-        $list = $ITSM->listIncidenceAgents($id_agente);
+        $list = $ITSM->listIncidenceAgents($id_agente, false);
         if (empty($list) === false) {
             $show_tab_issue = true;
         }
diff --git a/pandora_console/views/ITSM/ITSMTicketDetailView.php b/pandora_console/views/ITSM/ITSMTicketDetailView.php
index 709f28ce9f..670531bfb2 100644
--- a/pandora_console/views/ITSM/ITSMTicketDetailView.php
+++ b/pandora_console/views/ITSM/ITSMTicketDetailView.php
@@ -56,6 +56,18 @@ if (empty($error) === false) {
     ui_print_error_message($error);
 }
 
+if (empty($error_upload) === false) {
+    ui_print_error_message($error_upload);
+}
+
+if (empty($error_comment) === false) {
+    ui_print_error_message($error_comment);
+}
+
+if (empty($error_delete_attachment) === false) {
+    ui_print_error_message($error_delete_attachment);
+}
+
 if (empty($successfullyMsg) === false) {
     ui_print_success_message($successfullyMsg);
 }
diff --git a/pandora_console/views/ITSM/ITSMTicketListView.php b/pandora_console/views/ITSM/ITSMTicketListView.php
index 50ba2dbe0d..38457a6693 100644
--- a/pandora_console/views/ITSM/ITSMTicketListView.php
+++ b/pandora_console/views/ITSM/ITSMTicketListView.php
@@ -121,7 +121,15 @@ try {
                         'type'          => 'select',
                         'name'          => 'status',
                         'fields'        => $status,
-                        'nothing'       => 'None',
+                        'nothing'       => __('Any'),
+                        'nothing_value' => null,
+                    ],
+                    [
+                        'label'         => __('Priorities'),
+                        'type'          => 'select',
+                        'name'          => 'priority',
+                        'fields'        => $priorities,
+                        'nothing'       => __('Any'),
                         'nothing_value' => null,
                     ],
                     [
@@ -129,7 +137,7 @@ try {
                         'type'          => 'select',
                         'name'          => 'idGroup',
                         'fields'        => $groups,
-                        'nothing'       => 'None',
+                        'nothing'       => __('Any'),
                         'nothing_value' => null,
                     ],
                     [
@@ -137,7 +145,7 @@ try {
                         'type'          => 'interval',
                         'name'          => 'fromDate',
                         'value'         => 0,
-                        'nothing'       => __('None'),
+                        'nothing'       => __('Any'),
                         'nothing_value' => 0,
                     ],
                 ],
diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index b182914d81..e019f43c33 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -3897,32 +3897,47 @@ sub pandora_get_custom_field_for_itsm ($$) {
 
 	my $agent_custom_field_data = pandora_get_agent_custom_field_data($dbh,$id_agent);
 	my %agent_custom_field_data_reducer = ();
-	my $type = 'text';
+	
 	foreach my $data (@{$agent_custom_field_data}) {
-		if ($data->{'is_password_type'}) {
-			$type = 'password';
-		} elsif ($data->{'is_link_enabled'}) {
-			$type = 'link';
-		} else {
-			$type = 'text';
-		}
-
-		my %test = (
-			'data' => safe_output($data->{'description'}),
-			'type' => $type
-		);
-
-		$agent_custom_field_data_reducer{$data->{'name'}} = \%test;
+		my $array_data = pandora_check_type_custom_field_for_itsm($data);
+		$agent_custom_field_data_reducer{$data->{'name'}} = $array_data;
 	}
 
 	my %result = ();
 	foreach my $custom_field (@{$custom_fields}) {
-		$result{safe_output($custom_field->{'name'})} = $agent_custom_field_data_reducer{$custom_field->{'name'}};
+		if($agent_custom_field_data_reducer{$custom_field->{'name'}}) {
+			$result{safe_output($custom_field->{'name'})} = $agent_custom_field_data_reducer{$custom_field->{'name'}};
+		} else {
+			$result{safe_output($custom_field->{'name'})} = pandora_check_type_custom_field_for_itsm($custom_field);
+		}
 	}
 
 	return \%result;
 }
 
+##########################################################################
+## Check type custom field and data for agent.
+##########################################################################
+sub pandora_check_type_custom_field_for_itsm ($) {
+	my ($data) = @_;
+
+	my $type = 'text';
+	if ($data->{'is_password_type'}) {
+		$type = 'password';
+	} elsif ($data->{'is_link_enabled'}) {
+		$type = 'link';
+	} else {
+		$type = 'text';
+	}
+
+	my %data_type = (
+		'data' => safe_output($data->{'description'}),
+		'type' => $type
+	);
+
+	return \%data_type;
+}
+
 ##########################################################################
 ## Update a custom field from agent of tagent_custom_data 
 ##########################################################################

From 9394446a1eba54466e12f93f173d01d144faf96e Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Fri, 15 Sep 2023 13:46:29 +0200
Subject: [PATCH 037/116] Fix inventory view agent secondary groups

---
 pandora_console/operation/inventory/inventory.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pandora_console/operation/inventory/inventory.php b/pandora_console/operation/inventory/inventory.php
index c753bd599b..84d10a9dd6 100755
--- a/pandora_console/operation/inventory/inventory.php
+++ b/pandora_console/operation/inventory/inventory.php
@@ -31,6 +31,7 @@ use PandoraFMS\Enterprise\Metaconsole\Node;
 // Begin.
 require_once $config['homedir'].'/include/functions_users.php';
 require_once $config['homedir'].'/include/functions_inventory.php';
+enterprise_include('/include/functions_agents.php');
 
 // Get different date to search the report.
 $utimestamp = (int) get_parameter('date_end', 0);

From 67ebf73bc0ddbd528861ea145be99003b01691b5 Mon Sep 17 00:00:00 2001
From: Daniel Cebrian <daniel.cebrian@pandorafms.com>
Date: Mon, 18 Sep 2023 15:57:09 +0200
Subject: [PATCH 038/116] #12050 widget security hardening

---
 .../Dashboard/Widgets/security_hardening.php  | 351 +++++++++++++++++-
 1 file changed, 334 insertions(+), 17 deletions(-)

diff --git a/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php b/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php
index ee7aff00a8..eaca4115a5 100644
--- a/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php
+++ b/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php
@@ -25,6 +25,7 @@
  * GNU General Public License for more details.
  * ============================================================================
  */
+
 namespace PandoraFMS\Dashboard;
 
 /**
@@ -320,6 +321,7 @@ class SecurityHardening extends Widget
         $size = parent::getSize();
         $values = $this->values;
         $data_type = $this->values['data_type'];
+        // If it is metaconsole we need to check it in the node.
         $id_groups = $this->checkAcl($values['group']);
         $output .= '<b>'.$this->elements[$data_type].'</b>';
 
@@ -358,6 +360,11 @@ class SecurityHardening extends Widget
     }
 
 
+    /**
+     * Returns the date in an object obtained by parameter.
+     *
+     * @return object Object with date_init, date_end and period.
+     */
     private function getDateParameter()
     {
         $date_end = get_parameter('date_end', 0);
@@ -422,6 +429,13 @@ class SecurityHardening extends Widget
     }
 
 
+    /**
+     * Check user's acl using group.
+     *
+     * @param string $group Group to check your acl.
+     *
+     * @return string Groups to which the user has access.
+     */
     private function checkAcl($group)
     {
         global $config;
@@ -446,18 +460,99 @@ class SecurityHardening extends Widget
     }
 
 
+    /**
+     * Get the hardening evolution.
+     *
+     * @param integer $group     Id of group for filter.
+     * @param integer $date_init Date from which the data starts.
+     * @param integer $date_end  Date from which the data finish.
+     *
+     * @return array $return html graph.
+     */
     private function evolution($group, $date_init, $date_end)
     {
-        $time_line = get_hardening_evolution($group, $date_init, $date_end, false);
+        if (is_metaconsole() === true) {
+            $servers = metaconsole_get_servers();
+            if (isset($servers) === true
+                && is_array($servers) === true
+            ) {
+                $calculate = [
+                    'passed' => [],
+                    'failed' => [],
+                ];
+                foreach ($servers as $server) {
+                    if (metaconsole_connect($server) == NOERR) {
+                        $evolution_node = get_hardening_evolution($group, $date_init, $date_end, true);
+                        foreach ($evolution_node['passed'] as $key => $passed) {
+                            if (key_exists($passed['utimestamp'], $calculate['passed'])) {
+                                $calculate['passed'][$passed['utimestamp']] = [
+                                    'sum'   => ($calculate['passed'][$passed['utimestamp']]['sum'] + $passed['sum']),
+                                    'count' => ($calculate['passed'][$passed['utimestamp']]['count'] + $passed['count']),
+                                ];
+                            } else {
+                                $calculate['passed'][$passed['utimestamp']] = [
+                                    'sum'   => $passed['sum'],
+                                    'count' => $passed['count'],
+                                ];
+                            }
+                        }
+
+                        foreach ($evolution_node['failed'] as $key => $failed) {
+                            if (key_exists($failed['utimestamp'], $calculate['failed'])) {
+                                $calculate['failed'][$failed['utimestamp']] = [
+                                    'sum'   => ($calculate['failed'][$failed['utimestamp']]['sum'] + $failed['sum']),
+                                    'count' => ($calculate['failed'][$failed['utimestamp']]['count'] + $failed['count']),
+                                ];
+                            } else {
+                                $calculate['failed'][$failed['utimestamp']] = [
+                                    'sum'   => $failed['sum'],
+                                    'count' => $failed['count'],
+                                ];
+                            }
+                        }
+                    }
+
+                    metaconsole_restore_db();
+                }
+
+                $evolution = [
+                    'passed' => [],
+                    'failed' => [],
+                ];
+                foreach ($calculate['passed'] as $key => $day) {
+                    if (key_exists('count', $day) === true && $day['count'] > 0) {
+                        $evolution['passed'][] = [
+                            'utimestamp' => $key,
+                            'datos'      => round(($day['sum'] / $day['count'])),
+                        ];
+                    }
+                }
+
+                foreach ($calculate['failed'] as $key => $day) {
+                    if (key_exists('count', $day) === true && $day['count'] > 0) {
+                        $evolution['failed'][] = [
+                            'utimestamp' => $key,
+                            'datos'      => round(($day['sum'] / $day['count'])),
+                        ];
+                    }
+                }
+
+                usort($evolution['passed'], fn($a, $b) => ($a['utimestamp'] - $b['utimestamp']));
+                usort($evolution['failed'], fn($a, $b) => ($a['utimestamp'] - $b['utimestamp']));
+            }
+        } else {
+            $evolution = get_hardening_evolution($group, $date_init, $date_end, false);
+        }
+
         $dates = [];
         $dataset_passed = [];
         $dataset_failed = [];
-        foreach ($time_line['passed'] as $key => $raw_data) {
+        foreach ($evolution['passed'] as $key => $raw_data) {
             $dates[] = date('Y-m-d', $raw_data['utimestamp']);
             $dataset_passed[] = $raw_data['datos'];
         }
 
-        foreach ($time_line['failed'] as $key => $raw_data) {
+        foreach ($evolution['failed'] as $key => $raw_data) {
             $dataset_failed[] = $raw_data['datos'];
         }
 
@@ -499,10 +594,38 @@ class SecurityHardening extends Widget
     }
 
 
+    /**
+     * Return all scoring of agents in range time.
+     *
+     * @param integer $group     Id of group for filter.
+     * @param integer $date_init Date from which the data starts.
+     * @param integer $date_end  Date from which the data finish.
+     *
+     * @return string Html table with scoring agents.
+     */
     private function scoring($group, $date_init, $date_end)
     {
         global $config;
-        $data = get_scoring_by_agent($group, $date_init, $date_end);
+        if (is_metaconsole() === true) {
+            $servers = metaconsole_get_servers();
+            if (isset($servers) === true
+                && is_array($servers) === true
+            ) {
+                $scoring_agents = [];
+                foreach ($servers as $server) {
+                    if (metaconsole_connect($server) == NOERR) {
+                        $scoring_agents = array_merge($scoring_agents, get_scoring_by_agent($group, $date_init, $date_end));
+                    }
+
+                    metaconsole_restore_db();
+                }
+
+                $data = $scoring_agents;
+            }
+        } else {
+            $data = get_scoring_by_agent($group, $date_init, $date_end);
+        }
+
         if (count($data) === 0) {
             return ui_print_info_message(__('No data found'), '', true);
         }
@@ -552,24 +675,79 @@ class SecurityHardening extends Widget
     }
 
 
+    /**
+     * Get all vunerabilties of category.
+     *
+     * @param integer $group          Id group for filter.
+     * @param string  $category       Category Cis for filter.
+     * @param boolean $ignore_skipped Boolean for ignore skipped elements.
+     *
+     * @return string Html ring graph.
+     */
     private function vulnerabilitiesByCategory($group, $category, $ignore_skipped=true)
     {
         $labels = [
             __('Passed'),
             __('Failed'),
         ];
-        $vulnerabilities = vulnerability_by_category($group, $category, $ignore_skipped);
-        $data = [
-            count($vulnerabilities['pass']),
-            count($vulnerabilities['fail']),
-        ];
 
-        $total = (count($vulnerabilities['pass']) + count($vulnerabilities['fail']));
+        if (is_metaconsole() === true) {
+            $servers = metaconsole_get_servers();
+            if (isset($servers) === true
+                && is_array($servers) === true
+            ) {
+                $vulnerabilities = [
+                    'fail'    => [],
+                    'pass'    => [],
+                    'skipped' => [],
+                ];
+                foreach ($servers as $server) {
+                    if (metaconsole_connect($server) == NOERR) {
+                        $vulnerabilities_node = vulnerability_by_category($group, $category, (bool) $ignore_skipped);
+                        if (key_exists('fail', $vulnerabilities_node) === true && count($vulnerabilities_node['fail']) > 0) {
+                            $vulnerabilities['fail'] = ($vulnerabilities['fail'] + $vulnerabilities_node['fail']);
+                        }
 
-        if ($ignore_skipped === false) {
-            $data[] = count($vulnerabilities['skipped']);
-            $total += count($vulnerabilities['skipped']);
-            $labels[] = __('Skipped');
+                        if (key_exists('pass', $vulnerabilities_node) === true && count($vulnerabilities_node['pass']) > 0) {
+                            $vulnerabilities['pass'] = ($vulnerabilities['pass'] + $vulnerabilities_node['pass']);
+                        }
+
+                        if (key_exists('skipped', $vulnerabilities_node) === true && count($vulnerabilities_node['skipped']) > 0) {
+                            $vulnerabilities['skipped'] = ($vulnerabilities['skipped'] + $vulnerabilities_node['skipped']);
+                        }
+                    }
+
+                    metaconsole_restore_db();
+                }
+
+                if (count($vulnerabilities) > 0) {
+                    $data = [
+                        count($vulnerabilities['pass']),
+                        count($vulnerabilities['fail']),
+                    ];
+                    $total = (count($vulnerabilities['pass']) + count($vulnerabilities['fail']));
+
+                    if ((bool) $ignore_skipped === false && key_exists('skipped', $vulnerabilities) === true) {
+                        $data[] = count($vulnerabilities['skipped']);
+                        $total += count($vulnerabilities['skipped']);
+                        $labels[] = __('Skipped');
+                    }
+                }
+            }
+        } else {
+            $vulnerabilities = vulnerability_by_category($group, $category, $ignore_skipped);
+            $data = [
+                count($vulnerabilities['pass']),
+                count($vulnerabilities['fail']),
+            ];
+
+            $total = (count($vulnerabilities['pass']) + count($vulnerabilities['fail']));
+
+            if ($ignore_skipped === false) {
+                $data[] = count($vulnerabilities['skipped']);
+                $total += count($vulnerabilities['skipped']);
+                $labels[] = __('Skipped');
+            }
         }
 
         $pie = ring_graph(
@@ -606,9 +784,53 @@ class SecurityHardening extends Widget
     }
 
 
+    /**
+     * Get top cheks failed by category.
+     *
+     * @param integer $group Id of group for filter.
+     * @param integer $limit Limit of agents for show.
+     *
+     * @return string Html table with top n categories checks.
+     */
     private function topNCategoriesChecks($group, $limit=10)
     {
-        $data = top_n_categories_checks($group, $limit);
+        if (is_metaconsole() === true) {
+            $servers = metaconsole_get_servers();
+            $top_category = [];
+            if (isset($servers) === true
+                && is_array($servers) === true
+            ) {
+                foreach ($servers as $server) {
+                    if (metaconsole_connect($server) == NOERR) {
+                        $top_n_category_fail_in_node = top_n_categories_checks($group, $limit);
+                        foreach ($top_n_category_fail_in_node as $id => $check) {
+                            if (array_key_exists($id, $top_category) === true) {
+                                $top_category[$id]['total'] = ($top_category[$id]['total'] + $check['total']);
+                            } else {
+                                $top_category[$id] = $check;
+                            }
+                        }
+                    }
+
+                    metaconsole_restore_db();
+                }
+
+                usort(
+                    $top_category,
+                    function ($a, $b) {
+                        if ($a['total'] == $b['total']) {
+                            return 0;
+                        }
+
+                        return ($a['total'] > $b['total']) ? -1 : 1;
+                    }
+                );
+                $data  = array_slice($top_category, 0, $limit);
+            }
+        } else {
+            $data = top_n_categories_checks($group, $limit);
+        }
+
         if (count($data) === 0) {
             return ui_print_info_message(__('No data found'), '', true);
         }
@@ -653,9 +875,61 @@ class SecurityHardening extends Widget
     }
 
 
+    /**
+     * Get top checks with more failed.
+     *
+     * @param integer $group Id of group for filter.
+     * @param integer $limit Limit of agents for show.
+     *
+     * @return string Html table.
+     */
     private function topNChecksFailed($group, $limit=10)
     {
-        $data = top_n_checks_failed($group, $limit);
+        if (is_metaconsole() === true) {
+            $servers = metaconsole_get_servers();
+            $top_checks = [];
+            if (isset($servers) === true
+                && is_array($servers) === true
+            ) {
+                $numbers_of_nodes = count($servers);
+                if ($limit > $numbers_of_nodes && $numbers_of_nodes > 0) {
+                    $limit_in_node = ceil(($limit / $numbers_of_nodes));
+                } else {
+                    $limit_in_node = 1;
+                }
+
+                foreach ($servers as $server) {
+                    if (metaconsole_connect($server) == NOERR) {
+                        $top_n_checks_in_node = top_n_checks_failed($group, $limit_in_node);
+                        foreach ($top_n_checks_in_node as $id => $check) {
+                            if (array_key_exists($id, $top_checks) === true) {
+                                $top_checks[$id]['total'] = ($top_checks[$id]['total'] + $check['total']);
+                            } else {
+                                $top_checks[$id] = $check;
+                            }
+                        }
+                    }
+
+                    metaconsole_restore_db();
+                }
+
+                usort(
+                    $top_checks,
+                    function ($a, $b) {
+                        if ($a['total'] == $b['total']) {
+                            return 0;
+                        }
+
+                        return ($a['total'] < $b['total']) ? (-1) : 1;
+                    }
+                );
+
+                $data  = array_slice($top_checks, 0, $limit);
+            }
+        } else {
+            $data = top_n_checks_failed($group, $limit);
+        }
+
         if (count($data) === 0) {
             return ui_print_info_message(__('No data found'), '', true);
         }
@@ -700,11 +974,54 @@ class SecurityHardening extends Widget
     }
 
 
+    /**
+     * Get top agents with worst score.
+     *
+     * @param integer $group Id of group for filter.
+     * @param integer $limit Limit of agents for show.
+     *
+     * @return string Html table.
+     */
     private function loadTopNAgentsSh($group, $limit=10)
     {
         global $config;
+        if (is_metaconsole() === true) {
+            $servers = metaconsole_get_servers();
+            $top_agents = [];
+            if (isset($servers) === true
+                && is_array($servers) === true
+            ) {
+                $numbers_of_nodes = count($servers);
+                if ($limit > $numbers_of_nodes && $numbers_of_nodes > 0) {
+                    $limit_in_node = ceil(($limit / $numbers_of_nodes));
+                } else {
+                    $limit_in_node = 1;
+                }
+
+                foreach ($servers as $server) {
+                    if (metaconsole_connect($server) == NOERR) {
+                        $top_agents = array_merge($top_agents, top_n_agents_worses_by_group($group, $limit_in_node));
+                    }
+
+                    metaconsole_restore_db();
+                }
+
+                usort(
+                    $top_agents,
+                    function ($a, $b) {
+                        if ($a['datos'] == $b['datos']) {
+                            return 0;
+                        }
+
+                        return ($a['datos'] < $b['datos']) ? (-1) : 1;
+                    }
+                );
+                $data  = array_slice($top_agents, 0, $limit);
+            }
+        } else {
+            $data = top_n_agents_worses_by_group($group, $limit);
+        }
 
-        $data = top_n_agents_worses_by_group($group, $limit);
         if (count($data) === 0) {
             return ui_print_info_message(__('No data found'), '', true);
         }

From 5491feb845602892651c3ccffd67ee891c3fb4a4 Mon Sep 17 00:00:00 2001
From: Daniel Cebrian <daniel.cebrian@pandorafms.com>
Date: Mon, 18 Sep 2023 16:09:23 +0200
Subject: [PATCH 039/116] #12050 control widget installed only in interprise

---
 pandora_console/include/lib/Dashboard/Widget.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pandora_console/include/lib/Dashboard/Widget.php b/pandora_console/include/lib/Dashboard/Widget.php
index f5e6a2f0cc..ebf3f8a9bf 100644
--- a/pandora_console/include/lib/Dashboard/Widget.php
+++ b/pandora_console/include/lib/Dashboard/Widget.php
@@ -445,6 +445,10 @@ class Widget
                 break;
 
                 case 'security_hardening':
+                    if (\enterprise_installed() === false) {
+                        $not_installed = true;
+                    }
+
                     $className .= '\SecurityHardening';
                 break;
 

From 7a16163371e361c30937bacd3ac3820d68f907e7 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Mon, 18 Sep 2023 17:34:28 +0200
Subject: [PATCH 040/116] WIP: Automonitorization modules

---
 pandora_server/lib/PandoraFMS/Core.pm | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index e9c40b0b72..841cbc86f0 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -6153,7 +6153,6 @@ sub pandora_self_monitoring ($$) {
 		$pandoradb = 1;
 	}
 
-	my $elasticsearch_perfomance = enterprise_hook("elasticsearch_performance", [$pa_config, $dbh]);
 	my $num_threads = 0;
 	$num_threads = get_db_value ($dbh, "SELECT SUM(threads) FROM tserver WHERE name = '".$pa_config->{"servername"}."'");
 	my $cpu_load = 0;
@@ -6186,7 +6185,6 @@ sub pandora_self_monitoring ($$) {
 	}
 
 
-	$xml_output .= $elasticsearch_perfomance if defined($elasticsearch_perfomance);
 	
 	$xml_output .=" <module>";
 	$xml_output .=" <name>Database Maintenance</name>";
@@ -6513,7 +6511,6 @@ sub pandora_installation_monitoring($$) {
 
 	# Mysql process list
 	my $command = 'mysql -u '.$pa_config->{'dbuser'}.' -p"'.$pa_config->{'dbpass'}.'" -e "show processlist"';
-	print Dumper($command);
 	my $process_list = `$command 2>$DEVNULL`;		
 	$module->{'name'} = 'mysql_transactions_list';
 	$module->{'description'} = 'MySQL: Transactions list';
@@ -6549,6 +6546,11 @@ sub pandora_installation_monitoring($$) {
 		$xml_output .=" </module>";
 	}
 
+	# Opensearch monitoring
+	my $elasticsearch_perfomance = enterprise_hook("elasticsearch_performance", [$pa_config, $dbh]);
+	$xml_output .= $elasticsearch_perfomance if defined($elasticsearch_perfomance);
+
+
 	$xml_output .= "</agent_data>";
 
 	my $filename = $pa_config->{"incomingdir"}."/pandora.internals.".$utimestamp.".data";

From 4302cbce58eedeff04a68de6e7e49007677dc473 Mon Sep 17 00:00:00 2001
From: Rafael <rafael.ameijeiras@artica.es>
Date: Mon, 18 Sep 2023 18:10:43 +0200
Subject: [PATCH 041/116] 11830 adding package preparation for rpm gotty

---
 extras/pandora_gotty/.gitattributes           |  1 +
 extras/pandora_gotty/.gitignore               |  1 +
 extras/pandora_gotty/Dockerfile               |  8 ++++
 extras/pandora_gotty/build.sh                 | 12 ++++++
 extras/pandora_gotty/build_docker.sh          |  2 +
 extras/pandora_gotty/pandora_gotty.spec       | 41 +++++++++++++++++++
 extras/pandora_gotty/src/.gitignore           |  1 +
 extras/pandora_gotty/src/pandora_gotty        |  3 ++
 .../pandora_gotty/src/pandora_gotty_ssh.conf  |  4 ++
 .../src/pandora_gotty_telnet.conf             |  4 ++
 10 files changed, 77 insertions(+)
 create mode 100644 extras/pandora_gotty/.gitattributes
 create mode 100644 extras/pandora_gotty/.gitignore
 create mode 100644 extras/pandora_gotty/Dockerfile
 create mode 100755 extras/pandora_gotty/build.sh
 create mode 100755 extras/pandora_gotty/build_docker.sh
 create mode 100644 extras/pandora_gotty/pandora_gotty.spec
 create mode 100644 extras/pandora_gotty/src/.gitignore
 create mode 100755 extras/pandora_gotty/src/pandora_gotty
 create mode 100644 extras/pandora_gotty/src/pandora_gotty_ssh.conf
 create mode 100644 extras/pandora_gotty/src/pandora_gotty_telnet.conf

diff --git a/extras/pandora_gotty/.gitattributes b/extras/pandora_gotty/.gitattributes
new file mode 100644
index 0000000000..ca0a55fe2e
--- /dev/null
+++ b/extras/pandora_gotty/.gitattributes
@@ -0,0 +1 @@
+src/pandora_gotty filter=lfs diff=lfs merge=lfs -text
diff --git a/extras/pandora_gotty/.gitignore b/extras/pandora_gotty/.gitignore
new file mode 100644
index 0000000000..8d5bedc36a
--- /dev/null
+++ b/extras/pandora_gotty/.gitignore
@@ -0,0 +1 @@
+*.rpm
\ No newline at end of file
diff --git a/extras/pandora_gotty/Dockerfile b/extras/pandora_gotty/Dockerfile
new file mode 100644
index 0000000000..f708a6f4a7
--- /dev/null
+++ b/extras/pandora_gotty/Dockerfile
@@ -0,0 +1,8 @@
+FROM rockylinux:8
+
+RUN dnf install -y rpm-build rpmdevtools
+RUN rpmdev-setuptree
+RUN mkdir /root/pandora_gotty
+WORKDIR /root/pandora_gotty
+
+#CMD bash build.sh
diff --git a/extras/pandora_gotty/build.sh b/extras/pandora_gotty/build.sh
new file mode 100755
index 0000000000..e3be2587ca
--- /dev/null
+++ b/extras/pandora_gotty/build.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+VERSION=$(grep '%define version' pandora_gotty.spec | awk '{print $3}')
+mkdir -p pandora_gotty-${VERSION} 
+cp src/* pandora_gotty-${VERSION}/
+tar -cvzf pandora_gotty-${VERSION}.tar.gz pandora_gotty-${VERSION}/*
+mv pandora_gotty-${VERSION}.tar.gz ${HOME}/rpmbuild/SOURCES/
+rm -rf ${HOME}/rpmbuild/RPMS/x86_64/pandora_gotty*
+rpmbuild -ba pandora_gotty.spec 
+rm -rf pandora_gotty-${VERSION}
+mv ${HOME}/rpmbuild/RPMS/x86_64/pandora_gotty* .
+
diff --git a/extras/pandora_gotty/build_docker.sh b/extras/pandora_gotty/build_docker.sh
new file mode 100755
index 0000000000..cc2c81caa3
--- /dev/null
+++ b/extras/pandora_gotty/build_docker.sh
@@ -0,0 +1,2 @@
+docker build -t pandora_gotty_builder .
+docker run --rm -it -v `pwd`:/root/pandora_gotty pandora_gotty_builder /root/pandora_gotty/build.sh
\ No newline at end of file
diff --git a/extras/pandora_gotty/pandora_gotty.spec b/extras/pandora_gotty/pandora_gotty.spec
new file mode 100644
index 0000000000..5b0bde5d8e
--- /dev/null
+++ b/extras/pandora_gotty/pandora_gotty.spec
@@ -0,0 +1,41 @@
+%define name        pandora_gotty
+%define version     1.0
+%define release     1%{?dist}
+Summary:            pandora_gptty for Pandora FMS
+Name:               %{name}
+Version:            %{version}
+Release:            %{release}
+License:            GPL
+Vendor:             PandoraFMS
+Source0:            %{name}-%{version}.tar.gz
+URL:                https://pandorafms.com
+Group:              System/Monitoring
+Packager:           PandoraFMS
+BuildArch:          x86_64
+Provides:           %{name}-%{version}
+
+%description
+pandora_gotty for Pandora FMS.
+
+%prep
+%setup -q
+
+%install
+rm -rf $RPM_BUILD_ROOT
+mkdir -p $RPM_BUILD_ROOT/%{_bindir}
+mkdir -p %{buildroot}/etc/pandora_gotty/
+cp %{name} $RPM_BUILD_ROOT/%{_bindir}
+cp pandora_gotty_ssh.conf %{buildroot}/etc/pandora_gotty/
+cp pandora_gotty_telnet.conf %{buildroot}/etc/pandora_gotty/
+%clean
+rm -Rf $RPM_BUILD_ROOT
+
+%files
+%defattr(-,root,root,-)
+%config(noreplace) /etc/pandora_gotty/pandora_gotty_ssh.conf
+%config(noreplace) /etc/pandora_gotty/pandora_gotty_telnet.conf
+%{_bindir}/%{name}
+
+%changelog
+* Mon Sep 18 2023  PandoraFMS  - 1.0-1
+- Initial RPM release
diff --git a/extras/pandora_gotty/src/.gitignore b/extras/pandora_gotty/src/.gitignore
new file mode 100644
index 0000000000..423058ca29
--- /dev/null
+++ b/extras/pandora_gotty/src/.gitignore
@@ -0,0 +1 @@
+*rpm
\ No newline at end of file
diff --git a/extras/pandora_gotty/src/pandora_gotty b/extras/pandora_gotty/src/pandora_gotty
new file mode 100755
index 0000000000..dc71d46eaf
--- /dev/null
+++ b/extras/pandora_gotty/src/pandora_gotty
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:3758eddb64db79c6ea1dac4cb200ee8ec86ef3f51723dad5be4365a1315b952b
+size 13642854
diff --git a/extras/pandora_gotty/src/pandora_gotty_ssh.conf b/extras/pandora_gotty/src/pandora_gotty_ssh.conf
new file mode 100644
index 0000000000..b00ca51e4b
--- /dev/null
+++ b/extras/pandora_gotty/src/pandora_gotty_ssh.conf
@@ -0,0 +1,4 @@
+#to be fill
+lkdslkds
+sdjkfhasjdf
+kdsjfslkjdhfa
\ No newline at end of file
diff --git a/extras/pandora_gotty/src/pandora_gotty_telnet.conf b/extras/pandora_gotty/src/pandora_gotty_telnet.conf
new file mode 100644
index 0000000000..9aac8c73d0
--- /dev/null
+++ b/extras/pandora_gotty/src/pandora_gotty_telnet.conf
@@ -0,0 +1,4 @@
+#to be fill
+dlksdlkfjs
+sldjfslkjdf
+kjdfhksjhdkjlfsh
\ No newline at end of file

From 0a7152f3fa44ae5e13faa37dec780c911febb6a7 Mon Sep 17 00:00:00 2001
From: Daniel Cebrian <daniel.cebrian@pandorafms.com>
Date: Tue, 19 Sep 2023 09:44:46 +0200
Subject: [PATCH 042/116] #12050 align text left in widget

---
 .../Dashboard/Widgets/security_hardening.php  | 50 +++++++++----------
 1 file changed, 25 insertions(+), 25 deletions(-)

diff --git a/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php b/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php
index eaca4115a5..2c936728ed 100644
--- a/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php
+++ b/pandora_console/include/lib/Dashboard/Widgets/security_hardening.php
@@ -642,8 +642,8 @@ class SecurityHardening extends Widget
         $table->size[2] = '30%';
 
         $table->align = [];
-        $table->align[0] = 'center';
-        $table->align[1] = 'center';
+        $table->align[0] = 'left';
+        $table->align[1] = 'left';
 
         $table->head = [];
         $table->head[0] = __('Date');
@@ -651,14 +651,14 @@ class SecurityHardening extends Widget
         $table->head[2] = __('Scoring');
 
         $table->headstyle = [];
-        $table->headstyle[0] = 'text-align:center;background-color: '.$this->values['background'];
-        $table->headstyle[1] = 'text-align:center; background-color: '.$this->values['background'];
-        $table->headstyle[2] = 'text-align:center; background-color: '.$this->values['background'];
+        $table->headstyle[0] = 'text-align:left;background-color: '.$this->values['background'];
+        $table->headstyle[1] = 'text-align:left; background-color: '.$this->values['background'];
+        $table->headstyle[2] = 'text-align:left; background-color: '.$this->values['background'];
 
         $table->style = [];
-        $table->style[0] = 'padding: 0px 20px; background-color: '.$this->values['background'].';';
-        $table->style[1] = 'background-color: '.$this->values['background'].';';
-        $table->style[2] = 'background-color: '.$this->values['background'].'; font-weight: bolder;';
+        $table->style[0] = 'padding: 0px 10px; background-color: '.$this->values['background'].';';
+        $table->style[1] = 'padding: 0px 5px; background-color: '.$this->values['background'].';';
+        $table->style[2] = 'text-align:left; background-color: '.$this->values['background'].'; font-weight: bolder;';
 
         foreach ($data as $id => $agent) {
             $row = [];
@@ -846,19 +846,19 @@ class SecurityHardening extends Widget
         $table->size[1] = '30%';
 
         $table->align = [];
-        $table->align[0] = 'center';
-        $table->align[1] = 'center';
+        $table->align[0] = 'left';
+        $table->align[1] = 'left';
 
         $table->head = [];
         $table->head[0] = __('Category');
         $table->head[1] = __('Total Failed');
 
         $table->headstyle = [];
-        $table->headstyle[0] = 'text-align:center;background-color: '.$this->values['background'];
-        $table->headstyle[1] = 'text-align:center; background-color: '.$this->values['background'];
+        $table->headstyle[0] = 'text-align:left;background-color: '.$this->values['background'];
+        $table->headstyle[1] = 'text-align:left; background-color: '.$this->values['background'];
 
         $table->style = [];
-        $table->style[0] = 'padding: 0px 20px; background-color: '.$this->values['background'].';';
+        $table->style[0] = 'padding: 0px 10px; background-color: '.$this->values['background'].';';
         $table->style[1] = 'background-color: '.$this->values['background'].'; font-weight: bolder;';
 
         foreach ($data as $id => $agent) {
@@ -945,19 +945,19 @@ class SecurityHardening extends Widget
         $table->size[1] = '30%';
 
         $table->align = [];
-        $table->align[0] = 'center';
-        $table->align[1] = 'center';
+        $table->align[0] = 'left';
+        $table->align[1] = 'left';
 
         $table->head = [];
         $table->head[0] = __('Title');
         $table->head[1] = __('Total Failed');
 
         $table->headstyle = [];
-        $table->headstyle[0] = 'text-align:center;background-color: '.$this->values['background'];
-        $table->headstyle[1] = 'text-align:center; background-color: '.$this->values['background'];
+        $table->headstyle[0] = 'text-align:left;background-color: '.$this->values['background'];
+        $table->headstyle[1] = 'text-align:left; background-color: '.$this->values['background'];
 
         $table->style = [];
-        $table->style[0] = 'padding: 0px 20px; background-color: '.$this->values['background'].';';
+        $table->style[0] = 'padding: 0px 10px; background-color: '.$this->values['background'].';';
         $table->style[1] = 'background-color: '.$this->values['background'].'; font-weight: bolder;';
 
         foreach ($data as $id => $agent) {
@@ -1038,9 +1038,9 @@ class SecurityHardening extends Widget
         $table->size[2] = '32%';
 
         $table->align = [];
-        $table->align[0] = 'center';
-        $table->align[1] = 'center';
-        $table->align[2] = 'center';
+        $table->align[0] = 'left';
+        $table->align[1] = 'left';
+        $table->align[2] = 'left';
 
         $table->head = [];
         $table->head[0] = __('Alias');
@@ -1048,12 +1048,12 @@ class SecurityHardening extends Widget
         $table->head[2] = __('Score');
 
         $table->headstyle = [];
-        $table->headstyle[0] = 'text-align:center;background-color: '.$this->values['background'];
-        $table->headstyle[1] = 'text-align:center; background-color: '.$this->values['background'];
-        $table->headstyle[2] = 'text-align:center;background-color: '.$this->values['background'];
+        $table->headstyle[0] = 'text-align:left;background-color: '.$this->values['background'];
+        $table->headstyle[1] = 'text-align:left; background-color: '.$this->values['background'];
+        $table->headstyle[2] = 'text-align:left;background-color: '.$this->values['background'];
 
         $table->style = [];
-        $table->style[0] = 'padding: 0px 20px; background-color: '.$this->values['background'].';';
+        $table->style[0] = 'padding: 0px 10px; background-color: '.$this->values['background'].';';
         $table->style[1] = 'background-color: '.$this->values['background'].';';
         $table->style[2] = 'background-color: '.$this->values['background'].'; font-size: 1em; font-weight: bolder;';
 

From 7d09ed7503f9a10c33b09df1f0bd9d4c6dc7a8f4 Mon Sep 17 00:00:00 2001
From: rafael <rafael.ameijeiras@pandorafms.com>
Date: Tue, 19 Sep 2023 10:44:41 +0200
Subject: [PATCH 043/116] 11830 changes on pandora_gotty packages

---
 .../{Dockerfile => Dockerfile-RPM}            |  0
 extras/pandora_gotty/build_all_docker.sh      |  3 ++
 extras/pandora_gotty/build_docker.sh          |  2 --
 .../pandora_gotty/{build.sh => build_rpm.sh}  |  3 +-
 extras/pandora_gotty/pandora_gotty.spec       |  6 ++--
 extras/pandora_gotty/src/pandora_gotty.conf   | 36 +++++++++++++++++++
 .../pandora_gotty/src/pandora_gotty_ssh.conf  |  4 ---
 .../src/pandora_gotty_telnet.conf             |  4 ---
 8 files changed, 43 insertions(+), 15 deletions(-)
 rename extras/pandora_gotty/{Dockerfile => Dockerfile-RPM} (100%)
 create mode 100755 extras/pandora_gotty/build_all_docker.sh
 delete mode 100755 extras/pandora_gotty/build_docker.sh
 rename extras/pandora_gotty/{build.sh => build_rpm.sh} (98%)
 create mode 100644 extras/pandora_gotty/src/pandora_gotty.conf
 delete mode 100644 extras/pandora_gotty/src/pandora_gotty_ssh.conf
 delete mode 100644 extras/pandora_gotty/src/pandora_gotty_telnet.conf

diff --git a/extras/pandora_gotty/Dockerfile b/extras/pandora_gotty/Dockerfile-RPM
similarity index 100%
rename from extras/pandora_gotty/Dockerfile
rename to extras/pandora_gotty/Dockerfile-RPM
diff --git a/extras/pandora_gotty/build_all_docker.sh b/extras/pandora_gotty/build_all_docker.sh
new file mode 100755
index 0000000000..e4da1a7558
--- /dev/null
+++ b/extras/pandora_gotty/build_all_docker.sh
@@ -0,0 +1,3 @@
+#Build RPM
+docker build -t pandora_gotty_builder -f Dockerfile-RPM .
+docker run --rm -it -v `pwd`:/root/pandora_gotty pandora_gotty_builder /root/pandora_gotty/build_rpm.sh
\ No newline at end of file
diff --git a/extras/pandora_gotty/build_docker.sh b/extras/pandora_gotty/build_docker.sh
deleted file mode 100755
index cc2c81caa3..0000000000
--- a/extras/pandora_gotty/build_docker.sh
+++ /dev/null
@@ -1,2 +0,0 @@
-docker build -t pandora_gotty_builder .
-docker run --rm -it -v `pwd`:/root/pandora_gotty pandora_gotty_builder /root/pandora_gotty/build.sh
\ No newline at end of file
diff --git a/extras/pandora_gotty/build.sh b/extras/pandora_gotty/build_rpm.sh
similarity index 98%
rename from extras/pandora_gotty/build.sh
rename to extras/pandora_gotty/build_rpm.sh
index e3be2587ca..f257f6ae57 100755
--- a/extras/pandora_gotty/build.sh
+++ b/extras/pandora_gotty/build_rpm.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-
+#RPM
 VERSION=$(grep '%define version' pandora_gotty.spec | awk '{print $3}')
 mkdir -p pandora_gotty-${VERSION} 
 cp src/* pandora_gotty-${VERSION}/
@@ -10,3 +10,4 @@ rpmbuild -ba pandora_gotty.spec
 rm -rf pandora_gotty-${VERSION}
 mv ${HOME}/rpmbuild/RPMS/x86_64/pandora_gotty* .
 
+#DEB
\ No newline at end of file
diff --git a/extras/pandora_gotty/pandora_gotty.spec b/extras/pandora_gotty/pandora_gotty.spec
index 5b0bde5d8e..005dfd945f 100644
--- a/extras/pandora_gotty/pandora_gotty.spec
+++ b/extras/pandora_gotty/pandora_gotty.spec
@@ -25,15 +25,13 @@ rm -rf $RPM_BUILD_ROOT
 mkdir -p $RPM_BUILD_ROOT/%{_bindir}
 mkdir -p %{buildroot}/etc/pandora_gotty/
 cp %{name} $RPM_BUILD_ROOT/%{_bindir}
-cp pandora_gotty_ssh.conf %{buildroot}/etc/pandora_gotty/
-cp pandora_gotty_telnet.conf %{buildroot}/etc/pandora_gotty/
+cp pandora_gotty.conf %{buildroot}/etc/pandora_gotty/
 %clean
 rm -Rf $RPM_BUILD_ROOT
 
 %files
 %defattr(-,root,root,-)
-%config(noreplace) /etc/pandora_gotty/pandora_gotty_ssh.conf
-%config(noreplace) /etc/pandora_gotty/pandora_gotty_telnet.conf
+%config(noreplace) /etc/pandora_gotty/pandora_gotty.conf
 %{_bindir}/%{name}
 
 %changelog
diff --git a/extras/pandora_gotty/src/pandora_gotty.conf b/extras/pandora_gotty/src/pandora_gotty.conf
new file mode 100644
index 0000000000..01a037dd72
--- /dev/null
+++ b/extras/pandora_gotty/src/pandora_gotty.conf
@@ -0,0 +1,36 @@
+//Pandora Gotty
+
+// [bool] Permit clients to write to the TTY
+permit_write = true
+
+// [bool] Enable basic authentication
+enable_basic_auth = true
+
+// [string] Default username and password of basic authentication (user:pass)
+//          To enable basic authentication, set `true` to `enable_basic_auth`
+credential = "pandora:Pandor4!"
+
+// [bool] Permit clients to send command line arguments in URL (e.g. http://example.com:8080/?arg=AAA&arg=BBB)
+permit_arguments = true
+
+// [bool] Enable random URL generation
+enable_random_url = true
+
+// [int] Default length of random strings appended to URL
+//       To enable random URL generation, set `true` to `enable_random_url`
+random_url_length = 32
+
+// [bool] Enable TLS/SSL
+// enable_tls = false
+
+// [string] Default TLS certificate file path
+// tls_crt_file = "~/.gotty.crt"
+
+// [string] Default TLS key file path
+// tls_key_file = "~/.gotty.key"
+
+// [bool] Enable client certificate authentication
+// enable_tls_client_auth = false
+
+// [string] Certificate file of CA for client certificates
+// tls_ca_crt_file = "~/.gotty.ca.crt"
\ No newline at end of file
diff --git a/extras/pandora_gotty/src/pandora_gotty_ssh.conf b/extras/pandora_gotty/src/pandora_gotty_ssh.conf
deleted file mode 100644
index b00ca51e4b..0000000000
--- a/extras/pandora_gotty/src/pandora_gotty_ssh.conf
+++ /dev/null
@@ -1,4 +0,0 @@
-#to be fill
-lkdslkds
-sdjkfhasjdf
-kdsjfslkjdhfa
\ No newline at end of file
diff --git a/extras/pandora_gotty/src/pandora_gotty_telnet.conf b/extras/pandora_gotty/src/pandora_gotty_telnet.conf
deleted file mode 100644
index 9aac8c73d0..0000000000
--- a/extras/pandora_gotty/src/pandora_gotty_telnet.conf
+++ /dev/null
@@ -1,4 +0,0 @@
-#to be fill
-dlksdlkfjs
-sldjfslkjdf
-kjdfhksjhdkjlfsh
\ No newline at end of file

From 951cfa0863f5c10abec2282b36262c4c3669be28 Mon Sep 17 00:00:00 2001
From: rafael <rafael.ameijeiras@pandorafms.com>
Date: Tue, 19 Sep 2023 11:56:15 +0200
Subject: [PATCH 044/116] 11830 finish builder for rpm and deb

---
 extras/pandora_gotty/.gitignore                   |  3 ++-
 extras/pandora_gotty/Dockerfile-deb               |  6 ++++++
 extras/pandora_gotty/README.md                    |  1 +
 extras/pandora_gotty/build_all_docker.sh          | 12 ++++++++++--
 extras/pandora_gotty/build_deb.sh                 | 15 +++++++++++++++
 extras/pandora_gotty/build_rpm.sh                 |  3 +--
 extras/pandora_gotty/deb/.gitignore               |  3 +++
 .../deb/pandora_gotty/DEBIAN/changelog            |  5 +++++
 .../deb/pandora_gotty/DEBIAN/control              |  9 +++++++++
 9 files changed, 52 insertions(+), 5 deletions(-)
 create mode 100644 extras/pandora_gotty/Dockerfile-deb
 create mode 100644 extras/pandora_gotty/README.md
 create mode 100755 extras/pandora_gotty/build_deb.sh
 create mode 100644 extras/pandora_gotty/deb/.gitignore
 create mode 100644 extras/pandora_gotty/deb/pandora_gotty/DEBIAN/changelog
 create mode 100644 extras/pandora_gotty/deb/pandora_gotty/DEBIAN/control

diff --git a/extras/pandora_gotty/.gitignore b/extras/pandora_gotty/.gitignore
index 8d5bedc36a..db388678f7 100644
--- a/extras/pandora_gotty/.gitignore
+++ b/extras/pandora_gotty/.gitignore
@@ -1 +1,2 @@
-*.rpm
\ No newline at end of file
+*.rpm
+*.deb
\ No newline at end of file
diff --git a/extras/pandora_gotty/Dockerfile-deb b/extras/pandora_gotty/Dockerfile-deb
new file mode 100644
index 0000000000..02a30a43d3
--- /dev/null
+++ b/extras/pandora_gotty/Dockerfile-deb
@@ -0,0 +1,6 @@
+FROM ubuntu:22.04
+
+RUN apt-get update
+RUN apt-get install -y dh-make debhelper build-essential
+RUN mkdir /root/pandora_gotty
+WORKDIR /root/pandora_gotty
\ No newline at end of file
diff --git a/extras/pandora_gotty/README.md b/extras/pandora_gotty/README.md
new file mode 100644
index 0000000000..2e261c2e53
--- /dev/null
+++ b/extras/pandora_gotty/README.md
@@ -0,0 +1 @@
+To create the .deb and .rpm package need to hace docker installed on main system and execit `build_all_docker.sh`
\ No newline at end of file
diff --git a/extras/pandora_gotty/build_all_docker.sh b/extras/pandora_gotty/build_all_docker.sh
index e4da1a7558..cb280999ba 100755
--- a/extras/pandora_gotty/build_all_docker.sh
+++ b/extras/pandora_gotty/build_all_docker.sh
@@ -1,3 +1,11 @@
 #Build RPM
-docker build -t pandora_gotty_builder -f Dockerfile-RPM .
-docker run --rm -it -v `pwd`:/root/pandora_gotty pandora_gotty_builder /root/pandora_gotty/build_rpm.sh
\ No newline at end of file
+docker build -t pandora_gotty_builder_rpm -f Dockerfile-RPM . || exit 1
+docker run --rm -it -v `pwd`:/root/pandora_gotty pandora_gotty_builder_rpm /root/pandora_gotty/build_rpm.sh || exit 1
+
+#Buikd DEB
+docker build -t pandora_gotty_builder_deb -f Dockerfile-deb . || exit 1
+docker run --rm -it -v `pwd`:/root/pandora_gotty pandora_gotty_builder_deb /root/pandora_gotty/build_deb.sh || exit 1
+
+echo " - Done"
+pwd
+ls -l | grep -E "(\.deb|\.rpm)"
\ No newline at end of file
diff --git a/extras/pandora_gotty/build_deb.sh b/extras/pandora_gotty/build_deb.sh
new file mode 100755
index 0000000000..483ab35076
--- /dev/null
+++ b/extras/pandora_gotty/build_deb.sh
@@ -0,0 +1,15 @@
+#!/bin/bash
+#DEB
+cd deb
+VERSION=$(grep 'Version:' pandora_gotty/DEBIAN/control | awk '{print $2}')
+mkdir -p pandora_gotty/usr/bin
+mkdir -p pandora_gotty/etc/pandora_gotty
+cp -a ../src/pandora_gotty pandora_gotty/usr/bin
+cp -a ../src/pandora_gotty.conf pandora_gotty/etc/pandora_gotty
+dpkg-deb --build pandora_gotty
+mv pandora_gotty.deb ../
+rm -rf pandora_gotty/usr/ 
+rm -rf pandora_gotty/etc/
+cd ..
+mv pandora_gotty.deb pandora_gotty_${VERSION}.deb
+chmod 777 pandora_gotty_${VERSION}.deb
diff --git a/extras/pandora_gotty/build_rpm.sh b/extras/pandora_gotty/build_rpm.sh
index f257f6ae57..64a43fa099 100755
--- a/extras/pandora_gotty/build_rpm.sh
+++ b/extras/pandora_gotty/build_rpm.sh
@@ -9,5 +9,4 @@ rm -rf ${HOME}/rpmbuild/RPMS/x86_64/pandora_gotty*
 rpmbuild -ba pandora_gotty.spec 
 rm -rf pandora_gotty-${VERSION}
 mv ${HOME}/rpmbuild/RPMS/x86_64/pandora_gotty* .
-
-#DEB
\ No newline at end of file
+chmod 777 *.rpm
\ No newline at end of file
diff --git a/extras/pandora_gotty/deb/.gitignore b/extras/pandora_gotty/deb/.gitignore
new file mode 100644
index 0000000000..92a9f94179
--- /dev/null
+++ b/extras/pandora_gotty/deb/.gitignore
@@ -0,0 +1,3 @@
+*.deb
+**/usr
+**/etc
diff --git a/extras/pandora_gotty/deb/pandora_gotty/DEBIAN/changelog b/extras/pandora_gotty/deb/pandora_gotty/DEBIAN/changelog
new file mode 100644
index 0000000000..5d7e7f2ab6
--- /dev/null
+++ b/extras/pandora_gotty/deb/pandora_gotty/DEBIAN/changelog
@@ -0,0 +1,5 @@
+pandora_gotty (1.0-1) stable; urgency=low
+
+  * Initial release.
+
+ -- PandoraFMS  Mon, 18 Sep 2023 00:00:00 +0000
\ No newline at end of file
diff --git a/extras/pandora_gotty/deb/pandora_gotty/DEBIAN/control b/extras/pandora_gotty/deb/pandora_gotty/DEBIAN/control
new file mode 100644
index 0000000000..f715ee1b49
--- /dev/null
+++ b/extras/pandora_gotty/deb/pandora_gotty/DEBIAN/control
@@ -0,0 +1,9 @@
+Source: pandora_gotty
+Section: utils
+Version: 1.0.0
+Priority: optional
+Maintainer: PandoraFMS
+Build-Depends: debhelper (>= 12)
+Package: pandora-gotty
+Architecture: amd64
+Description: pandora_gotty for Pandora FMS.

From 940447d2b0e9bbfc50acce8c6c7fd35994e6ad63 Mon Sep 17 00:00:00 2001
From: Daniel Cebrian <daniel.cebrian@pandorafms.com>
Date: Tue, 19 Sep 2023 16:43:55 +0200
Subject: [PATCH 045/116] #12050 new icon security hardening widget

---
 .../images/widgets/security_hardening.png        | Bin 0 -> 6970 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 pandora_console/images/widgets/security_hardening.png

diff --git a/pandora_console/images/widgets/security_hardening.png b/pandora_console/images/widgets/security_hardening.png
new file mode 100644
index 0000000000000000000000000000000000000000..73b4a4957eb5c95453a2f7c66d0f61a377d20a6c
GIT binary patch
literal 6970
zcmV-A8^z>_P)<h;3K|Lk000e1NJLTq003tI003tQ1^@s7YDR2t00004XF*Lt006O%
z3;baP0000uWmrjOO-%qQ0000800D<-00aO40096102%-Q00002paK8{000010001I
zpaTE|000010001I000007)jkP000`TNkl<ZcmeG_33wDm)~}~$CJ7+{0wjc6E(Hw8
z3aqdM2!e<wAPFD{vVt7Ka)^8j{H*(Vu<kCq2qMTOil7iY76n!WxrJqkoDx{B<&YyF
zgxs0T^z>h^Ce^9#>Fzl)6ON_6Z>C<odiAPay{@k7RkZ**Zs8X@5<!w{xZL0Zi~GVW
zX({<UnZN?`S8jQj!DjxLLEV0&iCBVpGbhY8OE7lYyAv_q`oYTYnz{*q33lz=mMqJ%
zVY=1d9-?tpH&|mCRfi58pjE3@EJ*##%uGOhWL#Zn(YmuI5l@kvoD7Q>FXmA&V#ElF
zOM78BN#u#Ls3^FA<C}FL=jL*lGEm?vVRy#C<gzG$vp3c9?cTDzEyk;Inmq1hs1hl_
z_%S1>KWS(mXkE(!KWyFsZ@>1k!cUcmVM`={#*G_8wdN-vBO`;M72g_B*?z*2U((EC
z5eTWrktYF8pFYik(3TWx+r|}2SfyMA>jO|8qYu(|v~W9JQD*d`pHJB@2!gC6;)$1}
zZ*3yE#aOp2-55PE<t!hEFio`Z)2$CkvK+0A)Q0h4rHPoHc5V8i>A`(F$7l&zm_4lY
zDQAiLKi=A_Zb|t8A7JK_2bL<=$~cLYs=<gM{aKLuEnBsLpU<74@YpvODsf68#H6RE
zD-lO7uZO=){|ef78w?HVR9El_=spn`(deU}NQ+0v+o^KODK4XOPnZIebIQVeQdOdr
zpKqr{`NyYoVdw6xU>7UFs3~(Pu5R;|N;*~X#tiNXPo^Z%$U(EC;qc+Z3Ly`ua^fRq
zJmz^HAR}~#u8^m=)CtSBZjCIuB$wsQVhnuc6^8Ll$p*9(tvp70L<^R0jF&}QJ-s-8
zaEv)mtF#P%O2;Sk7Zz=?r$(l=&7m3bnP3B1xoqBN{xUM6Tkz>t+8$WEmCpo`8GF8e
z{l(u7XYm31MNR;GTvK`tQl<5JgsfKkwK?+_KY(vqZAWnU(l^km_S2NXfs0?loEaOy
zCJNA|%OJo<ZT;3G@bQOpVESJd0eO9^GEzO@su&WuoSO+hUhp*J%&d({CP>$&PG2p#
zY1lNQ#Ml<_aJ@9jphZGYFGhu=n$WR^!&;#StN!<@Iu^ZW&mP)mvT%H2U0D0&8rtzP
z9Cl*puy189p|*ajFw6*ha;$rF_`X~7$sC%=-o1Mvb(R1-W;cRO|NII{N=m?Px3hcz
zJ90f|5p80LUW69MstI3A1vg~qJn;-X^y{WHlld#QQF443jGR|HLc%`1ew`5&6$M33
z8L|qDk{aXZzcXEasQqK@7=<VZ1)fSKn7JEHMp&~iJjfzL<+In3l93+cg{!`AEJ;FD
zy*NFbY!m*Y9eFZ3(~KC=`{`RNTO_FA7A#R#5TYb^iOX&k3nfu382Mc1%Z$#<*Ud=#
zS~6pxjT0p2h0#NLUiHHBi1K8>^FbINfRWFq9A|hc(ZckMDv~p|2}6d`S3L|`Nj~_?
z<hNWdm(M|%UV)-xVvi3S_eR+eh!A0BUfo2jd@1A5K{|-j<Kqu5nGBJKPkwWW(vC2Z
z*DI)3uU>HD#tmgaXU3Tg`WOuhck0wh^^oC=$19^rlc%tB0sA<1$3g$8W5?hT?q!d&
zB(H9Qbb5fl!u(vHKcvHskNu)-0`2sgG*?fzu*6;xF){d&E5mI)^&X@&8ApQ~j=e>F
z?1k}VdhX(N+Ar~gIhGE6!;E+$glBJm6ef20p7`A$-*Fvqw8#%`we;GsVMfj$cEjfC
z+aTloYRYs%=kI9RiCwm6dH5Cf(h*DbseLi@dSDvO1aaBDo}p2>6JCXz{hz1s&$;@;
za~i4nGn8m(yJafUxNq0faO}H(Q}Fndp)(sRcqmMCWLE#b6v~ia+AkX^pJl*&Ly2%)
z$GchYEdni$k7qDH0b@Ay4Kva{wkRRuHgDbx>(5VwUv~F^PnP_h@?v8K9CjH=X!tN7
z2W%V6Ib0rSkNZ`Kt80PXTi3$expOHJGhkyoMz8e^B|<_z@#TCO;wzWE!X{3f2;I7M
zqx^V@v>C9lsYJ+tF<}XozfwrS>}HGM(xpoj*3NSoE%R|m=eI;G(aDo18L0T$$J^yB
zQ8h4Ygm~79T`s@U@T-<h<o!oa38?&wq(M4M+X`|uQnZp|Dd3g_)g$}Tvz_v2rE7aw
zZNl<|qiPFBhoz(xE7}c5X0B@We)`=LO&wTJB_j-wr4oTm34eufd7Q;&EgF^9Ig{t1
z%7~A^L8IW5@8@x5uqetmM-F(jY-vnGY?zUTP8GyLSl#Y~K!(dI20j8<XqUy3Wi-4t
zOKvI<s%+t!oy~o%=9y&>$~aX0$kgOxWU!@brhFb=0)=aq#Ag~Rm~T9cry@|GYg~-M
z?clRl50-@r<ZJnM-pp~IPn$Zm;h;h4wVjF*#_4oIn>KBv{==tssS#hhSTA2T7ZaAQ
z-4%mt?0Q6q!)em~AOHRMsZ*z5*REaAu3bAgaNq#6Y}pd9TS`mwtlqHnIGI4F-5v=P
z&-n3v@7}%LPYj&Yp2zVp?iW~H4yhrJ)WXF@1<iAEa-e3-n$V|DA39^ISFau|aHB?z
z0ORyrc?Hl*9~T#AI_N-Itddi*>lKLMthR{rWVyZp3s;n1K-PtBkO2_CSYPC}nP!i&
zm`bddnr$-S8eMsQxJiZ1h+pj(3p|)$QEgo5l}C#USRgF}y)e!^nZt=8@Am)vIUfu;
z92SA9M%7gcs-1xTs%}3eE*yaAfZHs?b${;;k0t${EZIeYbnYB%ytWulH!gs_={2Fv
zC!V>dS$d4iSC7kmk^2=Nlt6_gH{hvBo0SY~oqhw)f@gLPPkYevjckyMi@;L5wnB%1
z`|4FF*|r^u$z<*q(&$6&0v0GTItE@CG%Bca;Lbg+61a&!W#;>o2kyWdt-~Y1gg?v*
zD6fD8dh4CCC5%9Fx=|!UE}gQdQw^UuLyahBDBzcZ(QB5y!i`?X_f@li^XL6=e&2d%
z9_OO=1ZY#>>&M$0_#<n;8uEuJPm`6E1<wsjhMp5V_5?fTH-ZZ}G4Qw7UxMgp<85S~
zM<8&(8uG;)+ea2zRAH`T$Bv3Hh&yxQFkOH_dkoxU`{tW(7->lSkPC!wuOjkeu7Cgj
zbia&+UtCZb`b}sK^XAQ?8+T7XUHV#N1m*NC7I5X3lZR>YnKNg?I|B|w(Y7byqtW^F
zcVdeTQd3h6trkofnnc=dLXLIRpvO*{EydKTQ~$g3=gubAZ_tpk!o63vZ!VEna0&VG
zhE(h|tM@v7xMPY^oN<$<E3g^B_#w@Y#NI=@-_EBUo|bY-nX#G)g^3o;nldXl=SEka
zK}Er$C_1}8Ik-<!yW}fId8+ol7*RMk+gKi<_L;2*<Ev<hA(-!LTF&Thh0mtjdU+cP
zq$Mt|sg9OkAYr4;Vm%&y3#6A=i=zvWq8Q^Yks@p&SRHPQO>jGHqQy=-aNJ6lEjDL_
z#qD%T;Ii07hf9+3f>}`1=FP$(6KLVW44YW3B*q~*qfrPT!dQt=PFWy3ma<3;@+6xe
zJ6%K&AVNhFp$bc!g|_0Vxg$rmb+Q7L#}8N-TuGh3W?O>blH!3>b$K$^O-pJ*wu)EB
zq;}0BizH>k4P9b2(l24K)}?C2jlfw_S)IHBLN<H8m>qe>AMKe6L*8yR$WBg!3MjH)
zS&%o{IbzK5ixIJ|Fw2*3jLsKr4;Ur7)%ePi^Z1Y<Jqxtu@Dk?zRoj~jl2l1cc)NvV
zQ7n9AK$l~Dxm3a|_-uO{*)4^9q|Ij-N?5Rn?$HCg9AG>ZVHU02`jCsfLRrL};uCW)
z>E%Hw2eG_Vn1$(^>Pt?srkMcC-uuJIg1p=cZ%0<Ewcx=v9X{^V<2mmQ>Cys=HtE{P
zv>xX@y|alRzg)c(xq8W;wv*ii(Pj&Mw_;X-EN<n>m5<MyIqvM(Y47Q-K$a@vys+T2
ztqo<jthQliT!=qw#_)Y)8mv5yTvUaEL?GC(dCx#24G9+Ey2VToENzPxEo4cOV9}yQ
z)K(RJ7Diw1=XSdRf7-Y}@qGFL0|vlP2lfm#szH>)=PC~FvEZIgzkdB7KR=)Px#U0$
zPKk~7dW<sE;`R1)cp7cIFMC6u!tl%kg|&rY>5cF#-pF@39rcak5bsl%%*<m@9&<vo
z%+2C(go$Q|xc;CxK`2sS9l)nBEt6VNb48uBVMF2i94`MdV>Fi0^WEEAW3Zm@Qy4zc
z?7#jAGLO*yiAM(vqiy=$gU8@6Gv9!#mwz@)j|+(_Hy<{P*G2>+%-R2*QJqlIGV?dg
zjtN}+`2u|O;S$4SjLwii6A_kin9J>ewLeXV>>}@4fAhQ21B6^b(72VEy74ea;ujc@
zX8htvi2il%6L|K)w;|7Q6|UqRhgvb7QP8LR$58Xr5o<h~yo?`jCdb1p-d{iDnz>nY
z5jx#BoaP@B5f5MgGz0#9{!{pD|10qL1HacT7q1N-)+IJUhFmk-PQ4GklV&PezT9CA
zh1=IJ-Ck5;$^c#)JX}WM9~7`=ia-B?a{lv{4uHp|{&{>RY(7zT3K$<Pe;r%9=C#4Y
z{_<gT0c$3*-*fQoKSsc~tYKh_OoW!j)gXJ>2e9OcWVjNS2UG0tGTx>>c81Ivl-C9i
zn=;Ue3|JWCQQWvDRO(%3VVck_1w5^UY}j7D49<V=16%ucr2CerZMn5o66wxMKz6wx
z<{i%?c$1j7GBa@01~b*?VV&}tq5>A?;Ki?0Z9>c4l9&jV8Z|*Wa|XmZb)f3!t5qZ=
zo4=>wyi!wh4Dj0EVO2su0s*&~hwAk4&DLfGkyubcM1&Wuz5AnHxKJSi(#-2`z5~yt
zs%_Q+DG0U`{M95IS?F+s$;@uR=n$b%o&gCHSG_uX_=)<lF=DL6>zQwnb4~QzjFvXo
zaKMjQFd5;7ZVoYW<n7Rc;o~b!K$`Jql>0-*5uc-BUxi}vVI4L5JId9g!?Ug%H*SPP
z^0sS>mo@m|0v$C6q#2e!-xu&Oi`V*ibw|?_CtUll1l>B%fER`gh4<#pf$rVAQ&Pr*
zPsg85;qhj0P{Qzi0T1hCgo5B{WB@yCo?is<wdz4a?fc;Ex8H`Oq$Eg4NKo}NdOZBa
z1tpBHnq<Qie6&y_C<t@uAI*Y(y&s3MW5?3VR*bG{VDy3bK?!4~ja&ygfkPG|&|w>C
z*}ZHPH2=B`!}@y!!T5p#uU!d52kn9q#w@p+oSiu~_PoO~Iqv0I5bZsq63iYwn`(vU
z;Y-sztr;A0VQ^)IIecpk9$Ex=^9OTiD1=wn?AWmb(1-|~nWkAffBc|?38W_H&G`WS
z`1dg?Q?AsvqoHfpuGFL-3(5H58;pnj5rC%&N|-=u5?{YbNjsrOj~+@JL5-X|SvDKx
z`SCDcP=8>b!jO{}_~4Xl7XV+sp?GWYmnP{6XT_}mvz>r{?cSvbg2t)LYzrmCw-%dV
zA#*m$^)(vSD~KMB@x!>w7tTU_Vm;4fNQW5ZpanHE+1mKkM{SziS9{TnH)bkAAul8A
zS)F{!jdBpX>Vc28lC_8VdB*e>0Yu<7n$b33&pt06II?f&)9qV7@DH-3;PbKMGYAzN
z6I*2)5oEFvKP*4SDYbpqY|t`^@0zW1CeU4D)W8I~Ys^iUK<M8UhCsYPR48Ji1u=Pz
z`LpU;ny`gKWum25z&qY}PERN;4h`&_kvC&2*=?1IiAf_6(?+XkCuWUKU9(1+m^I3`
z+N@D4M6lt78RXGD1C`uXM}*tqiXh{n2x7?@Aqt}XR#;Y{g_I;qC4wY4z-n<=BCHOJ
zE5ZSdpm1c{(Aba$T35;-Akc)q=+o1W+ONR%DiLmHtRPup?nDbPBN@>$OcvdFHj6E{
zGE~n=OKZvP1Q?|X93K+p%w4e|R+OXS1&drI@FLt@DP*^hBMC)Ue>eDvav$~yN;&ga
z?yM$=t~#<Ld+)^DU3Fb<X#`Pl$ddKqm_f<efim+;IXD8Cw`x<O=(Z*Xn!!DKbqz=s
z*X6MTdR!(ZYuo~znudi;m4h>bLc6VrTk>tD#u(o7{i^|s2(C&c&Qp4Z^o)b9a_}k=
zSCPA^B)N3sS>k(s`D;KFt+F-BauP4^(sEN(KDiZ9%q~f2AqnQUkZ76Q3zxqJL|H7U
zX3xqbckGnz5^?Kk%a<P_XKAhneFgx{@4s64-q@TQ*ZLE?ez{q*W>BjZIcNVr;I3S`
z;y!WW1dzp3p-NoM)qMtyn`d-WlCSEhELA6GhFa6zIofjmO8S=QavXA6JbUWolA`?7
zufP79Skn-5n*U*UhS)|u^UO1nJ*x7W5flFu*cBY5^;SR*b-hLoby@x>%a&Nd>i30u
z+Ipv_ZgR8J@W2Wx2JhQlv0?>$`|Y=s^eVX{W%=^uuw}~@8oqe(B7FSu$Mo7PEw8&F
zjCFu@Q9$Yh>n0ePP#>rlYvPwX6C_LN<zYc^!sAenJo1PoFVEAT;klFh@4p{nV`HhJ
zkR^u6aS$3NuRI!#kB?X4gUI%_Pl9!l@#Ddux(U<=>cuJ-l~e;EbX|jmT!ew!=ggrp
znl^39f`G@tus>oBkEq~<a{N&hhGR6m&*J>0=hNOvFzUrhzTOc5WFix+D{&OH!0!;@
zb-DLkSq)&FVBM5q0)tR5*7B|Z+asbfTPC$m#v9K67aSUK;s+<ts1v`D!W-i7^5bPs
zM-S}F<Z*$(sF$$rn->-q!t!N{0c|302Un+VJs2`<1XQZzIkcWfjzBJ$_paaNL&c!o
zGb#jsXrVE1_;^5*;c&RHDrf5C@$_2(+7If4LlA#>qQNVciM8_o`~9o5d}c?>%=jX|
zci)&CQd@35zpyHY&*)ad7juq~4<Q}Bl|=|D?>k00ZrKHY-qI0j$F`(jmAaC54ECN|
z2~W0|0Y*21qEbHGI~c|#Z-BP-2Ealvv<st^$7~ld(6DZGc%mygEkv9Vo<@f8?~YN<
z2fLqx7s=N)5{YuqwIVl!K6d{U*mL${n7i|F_+7GR(#z@!@1(`JsonRIUFS%KHua5c
zF^%x1%t8=(M=0merM0BRv``eo%iW>jP{1F48152zbrm~vp=zZ%@SBFeHEdCQdLA}v
zAx3yUZ8+dtq8z+3_aLe8?7|CR5v&j$5eLm`c2!Ot^McB<1Y1tdfnn`G;n7|&ezA{z
zwa+WkPlQnmF~a-FHfXX6QBKj~rQjl~w)vGMSkhq=;KzVEHXNoZbV12=z%%U)t2_*y
ztENGuI|}|I9e}-8*T9hW%b;ph9Tk0f184+|KXNsl;*45|5nf3cCZIx;6E)%`VijHl
z3wQK{arHlf$nVcU!TB8^lX(z2Au<vy<hbIrj_DwhbvWh{pbK=mlm<EdM?q0qDnt!^
zfkmnPq9SmeJqPm5oAju!K;|*lh7CX<JhhHYPoRL@x{Z@aJS@b2&ey1g7~!?NLmjRV
z<*Ye45sqKo0<U%31(DVm^4aA!e#?P3fmd7qHMkBPhMeDy0NGItmTJ|=E#bxBzJ3F&
z&6+~=Yp;T}xn_-#tk)H<`5cN@rGxE}UsL5{rsQrzz_UWA7<PJ|6~?HA7~xsEaQPLY
zoYaTPt{w<h5NqpJQ02n_mWarLYGi6Z`cv}U^8-~1J6@;YO97)6VuaVG4|O=K%85^?
z1>gO19Za5Vc)}sn@|g15w{IVGeDo=W2A5y9u3w}2Uab=82Y}~=Q=UxqgEBahuqtQz
z>u&=7D%u$>PQIXdM)2zW@?5_^Hq3&BRXJfUyBB-x?D-XA9F5({F09H4bk$c|k+_OH
zdh7&<A-k&R%=qCdF}4`85gYcq8CW^*=vC=ZtokC4P^}`fN)45NZ&f;gn#7NX%$YL>
z)~#EooNH#u@#7&+J@pifA3vVn*1+($vme&inpSY5`GOH%o8Bml-^v{|Y82FJW`Rya
zA|bUaT6|Te*J#)sEuqh#@ib{}&UNVaXb;>zh6M{2D0hS~zI-_tPV4il)!MjFhbvS$
zM)L(DyjEE3Q_Aki@Wf7=HVwX9n-2Znsszz-Dg#zka=aeo!herZTL=93AAU9+TM~XZ
zg*kuA!RW*7SEzD=eKH+nR$ol^?X{z?jEoFey?Qk~JKb0@=T0A`-$X(Kl(A#iDfPK(
z)hfU*@bvB5*YB%?l*APTRH$--c`{KU__b#=rojDs-d!fw>7lD!Q@_PTMq9`&drsO~
z@IoElHE7U)1{n`N?skDIR5`&2jY}<sL@|1<XV0GWD`7`BJK>=x?Or6EhDHGXwrzMH
zW;dR#Qqt0;OKDo<!CbH{o23u6PwpQP-Q_ip3U#4)e%i%JKF)5p!=_D}=&dtZCyP{9
z>F{)|pRfb|n3C$(uMgL+U#Dr22Xn!+Y?e0EKI+9vzW3vh1q;7&9_oA)e&KjB*)2La
zVw*H+61nfYkY2CVptV(b-Q``A;rt;NU<<<`_4Mh}y+&$SNWOghsLTkj2o?qa^<ovG
z?Ahc?oE4&+a6XxMcN4qn2rqL(nDr-#trDTt;8wu5621B~DxVQvk4LC*s2A(yzR6jM
zE4CyCYs?-I5pgy1=uc#jTXuI2D<Cevto<@{tG?x3MP}s+m2b8xefszj3F{`9yhukQ
zqh9DRr#$C#=r>E2{`t!XlagvI{BVU&i+I!`U7RGHJnlwnhsVJPbGxOPF?Nu2D)aEQ
zfiF+%7tA3lc0NZLgO>MX+p491c`EDT*{L<-<84p(?rUk@;z9DY_jpyk;e5qGW|9uv
zA|~+N;<B$_h135z3R~8H;kxllmMgJtqjv_pG^K1(6@Z{#C)-%sP@M@S1&laz;!r|C
z&P|U|GRxpD^`om)Eo{`Rbyi%B1f35y`zN&NnNXg^z0=fuZG;#0`!uz-829cW(AG%k
z!a?6dpe@3^8$7f%5_~vhH+UEo;ojXhMm6J&5BuFW-dU<K^wualxi!jp@7AbWeruFk
zHTogEZ!MqPx8}Te-<o~}`GHmDIeyTFl*H?%LXq55=(=}PAz#V=4~8?eA=eWv%>V!Z
M07*qoM6N<$f`x-%_y7O^

literal 0
HcmV?d00001


From dbd418d6dc376b404830c3a7893909c53ede1a65 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 20 Sep 2023 16:01:23 +0200
Subject: [PATCH 046/116] remove trace

---
 .../godmode/reporting/reporting_builder.item_editor.php         | 2 +-
 pandora_console/include/functions_html.php                      | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/pandora_console/godmode/reporting/reporting_builder.item_editor.php b/pandora_console/godmode/reporting/reporting_builder.item_editor.php
index 2a58c0601d..e350204930 100755
--- a/pandora_console/godmode/reporting/reporting_builder.item_editor.php
+++ b/pandora_console/godmode/reporting/reporting_builder.item_editor.php
@@ -6635,7 +6635,7 @@ function loadGeneralAgents(agent_group) {
     if (group < 0) {
         return;
     }
-    console.log("!!!!!!!!!!!!!!!!!!!!!!!!",group);
+
     group = agent_group || group;
 
     params.push("get_agents=1");
diff --git a/pandora_console/include/functions_html.php b/pandora_console/include/functions_html.php
index 382aaffc5b..235d5f2bba 100644
--- a/pandora_console/include/functions_html.php
+++ b/pandora_console/include/functions_html.php
@@ -4920,7 +4920,6 @@ function html_print_input_file($name, $return=false, $options=false, $inline_upl
         $output .= '<script>';
         $output .= 'function submitForm(formID) {
                         var form = $("#"+formID);
-                        console.log(form);
                         form.submit();
                     }';
         $output .= '</script>';

From 438393ed99260d4a39061ad774a883971bf3d248 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Wed, 20 Sep 2023 18:33:15 +0200
Subject: [PATCH 047/116] WIP: Automonitorization modules. WUX and Alerts

---
 pandora_server/lib/PandoraFMS/Core.pm | 236 +++++++++++++++++++++++++-
 1 file changed, 228 insertions(+), 8 deletions(-)

diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 021bb5d7c2..e917626d58 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -104,6 +104,8 @@ Exported Functions:
 
 =item * C<pandora_installation_monitoring>
 
+=item * C<snmp_traps_monitoring>
+
 =back
 
 =head1 METHODS
@@ -6419,6 +6421,7 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_agents";
 	$module->{'description'} = 'Total amount of agents';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_agente)) FROM tagente');
+	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
@@ -6426,6 +6429,7 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_modules";
 	$module->{'description'} = 'Total modules';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_agente_modulo)) FROM tagente_modulo');
+	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
@@ -6433,28 +6437,73 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_groups";
 	$module->{'description'} = 'Total groups';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_grupo)) FROM tgrupo');
+	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
 	# Total module data records
 	$module->{'name'} = "total_data";
 	$module->{'description'} = 'Total module data records';
-	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(*) FROM tagente_datos');
-	$module->{'interval'} = '86400';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_agente_modulo) FROM tagente_datos');
+	$module->{'module_interval'} = '86400';
+	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
+
 	# Total module strimg data records
 	$module->{'name'} = "total_string_data";
 	$module->{'description'} = 'Total module string data records';
-	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(*) FROM tagente_datos_string');
-	$module->{'interval'} = '86400';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_agente_modulo) FROM tagente_datos_string');
+	$module->{'module_interval'} = '86400';
+	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
 	# Total agent access record
 	$module->{'name'} = "total_access_data";
 	$module->{'description'} = 'Total agent access records';
-	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(*) FROM tagent_access');
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_agent) FROM tagent_access');
+	$module->{'module_group'} = 'Database';
+	push(@modules, $module);
+	undef $module;
+
+	# Total users
+	$module->{'name'} = "total_users";
+	$module->{'description'} = 'Total users';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_user) FROM tusuario');
+	$module->{'module_group'} = 'Database';
+	push(@modules, $module);
+	undef $module;
+
+	# Total sessions
+	$module->{'name'} = "total_users";
+	$module->{'description'} = 'Total users';
+	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_session) FROM tsessions_php');
+	$module->{'module_group'} = 'Database';
+	push(@modules, $module);
+	undef $module;
+
+	# Total unknown agents
+	$module->{'name'} = "total_unknown";
+	$module->{'description'} = 'Total unknown agents';
+	$module->{'data'} = get_db_value (
+		$dbh,
+		"SELECT COUNT(DISTINCT tagente_estado.id_agente)
+			FROM tagente_estado, tagente, tagente_modulo
+			WHERE tagente.disabled = 0 AND tagente.id_agente = tagente_estado.id_agente
+			AND tagente_estado.id_agente_modulo = tagente_modulo.id_agente_modulo
+			AND tagente_modulo.disabled = 0
+			AND estado = 3"
+	);
+	$module->{'module_group'} = 'Database';
+	push(@modules, $module);
+	undef $module;
+
+	# Total notinit modules
+	$module->{'name'} = "total_notinit";
+	$module->{'description'} = 'Total not init modules';
+	$module->{'data'} = get_db_value($dbh, "SELECT COUNT(DISTINCT(id_agente_modulo)) FROM tagente_estado WHERE estado = 4");
+	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
@@ -6472,6 +6521,7 @@ sub pandora_installation_monitoring($$) {
 				AND table_name NOT IN ('tagent_access, tevento')"
 	);
 	$module->{'unit'} = '%';
+	$module->{'module_group'} = 'Database';
 	push(@modules, $module); 
 	undef $module;
 
@@ -6544,7 +6594,70 @@ sub pandora_installation_monitoring($$) {
 	push(@modules, $module); 
 	undef $module;
 
-	# Build xml modules.
+	# Log monitoring
+	my $log_files = {
+		'server_log' 		=> $pa_config->{'log_file'},
+		'server_error' 	=> $pa_config->{'errorlog_file'},
+	};
+
+	if(pandora_get_tconfig_token($dbh,'console_log_enabled', 0) == 1) {
+		$log_files->{'console_log'} = '/var/www/html/pandora_consle/log/console.log';
+	} 
+
+	if(pandora_get_tconfig_token($dbh,'audit_log_enabled', 0) == 1) {
+		$log_files->{'audit_log'} = '/var/www/html/pandora_consle/log/audit.log';
+	} 
+
+	foreach my $log_source (keys %{$log_files}) {
+		my $log_name = $log_source ;
+		my $size = -s $log_files->{$log_source};
+		my $size_in_mb;
+
+		if(defined($size) && $size != 0) {
+			$size_in_mb = $size / (1024 * 1024);
+		} else {
+			$size_in_mb = 0;
+		}
+	
+	$module->{'name'} = $log_name.'_size';
+	$module->{'description'} = 'Size of '.$log_name.' (MB): Size of '.$log_name.' in megabytes';
+	$module->{'data'} = $size_in_mb;
+	$module->{'unit'} = 'MB';
+	$module->{'min_critical'} = 1024;
+	$module->{'max_critical'} = 0;
+	push(@modules, $module); 
+	undef $module;
+
+	# Alert monitoring
+	# Defined alerts
+	my $total_alerts = get_db_value(
+		$dbh,
+		'SELECT 
+			(SELECT COUNT(id) FROM talert_template_modules WHERE disabled = 0 AND standby = 0 AND disabled_by_downtime = 0) +
+			(SELECT COUNT(id) FROM tevent_alert WHERE disabled = 0 AND standby = 0)  AS Total'
+		);
+	$module->{'name'} = "defined_alers";
+	$module->{'description'} = 'Number of defined (and active) alerts';
+	$module->{'data'} = $total_alerts;
+	push(@modules, $module); 
+	undef $module;
+
+	# Last 24 hours triggered alerts.
+	my $triggered_alerts = get_db_value(
+		$dbh,
+		'SELECT COUNT(id)
+		FROM talert_template_modules
+		WHERE last_fired >=UNIX_TIMESTAMP(NOW() - INTERVAL 1 DAY)'
+	);
+	$module->{'name'} = "triggered_alerts";
+	$module->{'description'} = 'Last 24h triggered alerts';
+	$module->{'data'} = $triggered_alerts;
+	push(@modules, $module); 
+	undef $module;
+
+
+	}
+
 	foreach my $module_data (@modules) {
 		$xml_output .=" <module>";
 		$xml_output .=" <name>" .$module_data->{'name'}. "</name>";
@@ -6564,8 +6677,23 @@ sub pandora_installation_monitoring($$) {
 		if(defined($module_data->{'module_parent'})) {
 			$xml_output .=" <module_parent>" .$module_data->{'module_parent'}. "</module_parent>";
 		}
-		if(defined($module_data->{'interval'})) {
-			$xml_output .=" <interval>" .$module_data->{'interval'}. "</interval>";
+		if(defined($module_data->{'module_interval'})) {
+			$xml_output .=" <module_interval>" .$module_data->{'module_interval'}. "</module_interval>";
+		}
+		if(defined($module_data->{'max_critical'})) {
+			$xml_output .=" <max_critical>" .$module_data->{'max_critical'}. "</max_critical>";
+		}
+		if(defined($module_data->{'min_critical'})) {
+			$xml_output .=" <min_critical>" .$module_data->{'min_critical'}. "</min_critical>";
+		}
+		if(defined($module_data->{'max_warning'})) {
+			$xml_output .=" <max_warning>" .$module_data->{'max_warning'}. "</max_warning>";
+		}
+		if(defined($module_data->{'min_warning'})) {
+			$xml_output .=" <min_warning>" .$module_data->{'min_warning'}. "</min_warning>";
+		}
+		if(defined($module_data->{'module_group'})) {
+			$xml_output .=" <module_group>" .$module_data->{'module_group'}. "</module_group>";
 		}
 
 		$xml_output .=" </module>";
@@ -6575,6 +6703,13 @@ sub pandora_installation_monitoring($$) {
 	my $elasticsearch_perfomance = enterprise_hook("elasticsearch_performance", [$pa_config, $dbh]);
 	$xml_output .= $elasticsearch_perfomance if defined($elasticsearch_perfomance);
 
+	# SNMPTrapd monitoting
+	my $snmp_traps_monitoring = snmp_traps_monitoring($pa_config, $dbh);
+	$xml_output .= $snmp_traps_monitoring if defined($snmp_traps_monitoring);
+
+	# Wux nobitoring
+	my $wux_performance = enterprise_hook("wux_performance", [$pa_config, $dbh]);
+	$xml_output .= $wux_performance if defined($wux_performance);
 
 	$xml_output .= "</agent_data>";
 
@@ -8165,6 +8300,91 @@ sub exec_cluster_ap_module ($$$$) {
 	pandora_update_agent ($pa_config, $timestamp, $module->{'id_agente'}, undef, undef, -1, $dbh);
 }
 
+
+################################################################################
+# SNMP Log Monitoring
+################################################################################
+sub snmp_traps_monitoring ($$)  {
+	my ($pa_config, $dbh) = @_;
+
+	return undef unless $pa_config->{'snmpconsole'} == 1;
+	my $xml_output =  '';	
+
+	my $filename = $pa_config->{'snmp_logfile'};
+	my $size = -s $filename;
+	my $size_in_mb;
+
+	if(defined($size) && $size != 0) {
+		$size_in_mb = $size / (1024 * 1024);
+	} else {
+			$size_in_mb = 0;
+	}
+	
+	my @modules;
+	my $module;
+
+	# SNMP Trap log size
+	$module->{'name'} = "SNMP Trap queue";
+	$module->{'description'} = 'Size of snmp_logfile (MB): Size of snmp trap log in megabytes';
+	$module->{'data'} = $size_in_mb;
+	$module->{'unit'} = 'MB';
+	$module->{'min_critical'} = 1024;
+	$module->{'max_critical'} = 0;
+	push(@modules, $module); 
+	undef $module;
+	
+	# Total traps
+	my $count = get_db_value($dbh, 'SELECT COUNT(id_trap) FROM ttrap');
+	$count = 0 unless defined($count);
+
+	$module->{'name'} = "total_traps";
+	$module->{'description'} = 'Total number of traps';
+	$module->{'data'} = $count;
+	$module->{'module_interval'} = 720;
+	push(@modules, $module); 
+	undef $module;
+
+	foreach my $module_data (@modules) {
+		$xml_output .=" <module>";
+		$xml_output .=" <name>" .$module_data->{'name'}. "</name>";
+		$xml_output .=" <data>" . $module_data->{'data'} . "</data>";
+
+		if(defined($module_data->{'description'})) {
+			$xml_output .=" <description>" .$module_data->{'description'}. "</description>";
+		}
+		if(defined($module_data->{'type'})) {
+			$xml_output .=" <type>" .$module_data->{'type'}. "</type>";
+		} else {
+			$xml_output .=" <type>generic_data</type>";
+		}
+		if(defined($module_data->{'unit'})) {
+			$xml_output .=" <unit>" .$module_data->{'unit'}. "</unit>";
+		}
+		if(defined($module_data->{'module_parent'})) {
+			$xml_output .=" <module_parent>" .$module_data->{'module_parent'}. "</module_parent>";
+		}
+		if(defined($module_data->{'module_interval'})) {
+			$xml_output .=" <module_interval>" .$module_data->{'module_interval'}. "</module_interval>";
+		}
+		if(defined($module_data->{'max_critical'})) {
+			$xml_output .=" <max_critical>" .$module_data->{'max_critical'}. "</max_critical>";
+		}
+		if(defined($module_data->{'min_critical'})) {
+			$xml_output .=" <min_critical>" .$module_data->{'min_critical'}. "</min_critical>";
+		}
+		if(defined($module_data->{'max_warning'})) {
+			$xml_output .=" <max_warning>" .$module_data->{'max_warning'}. "</max_warning>";
+		}
+		if(defined($module_data->{'min_warning'})) {
+			$xml_output .=" <min_warning>" .$module_data->{'min_warning'}. "</min_warning>";
+		}
+
+		$xml_output .=" </module>";
+	}
+
+	return $xml_output;
+}
+
 # End of function declaration
 # End of defined Code
 

From f46626e120d341c13652146c7032165b19f8b8fc Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Thu, 21 Sep 2023 10:21:45 +0200
Subject: [PATCH 048/116] refactor cluster view pandora_enterprise#12032

---
 .../godmode/agentes/configurar_agente.php     |   3 -
 .../godmode/agentes/modificar_agente.php      |  16 +-
 .../godmode/alerts/alert_list.builder.php     |   3 +-
 .../godmode/alerts/alert_list.list.php        |  16 +-
 pandora_console/godmode/alerts/alert_list.php |   5 +
 pandora_console/include/ajax/module.php       | 132 +++++-
 pandora_console/include/class/HTML.class.php  |  47 ++
 pandora_console/include/functions_agents.php  | 338 ++++++++++++++-
 pandora_console/include/functions_events.php  |   3 -
 pandora_console/include/functions_ui.php      |  52 +++
 .../include/javascript/datatablesFunction.js  |   9 +-
 pandora_console/include/lib/Cluster.php       |  86 ++++
 .../lib/ClusterViewer/ClusterManager.php      |  87 +++-
 .../lib/ClusterViewer/ClusterWizard.php       |  34 +-
 pandora_console/include/styles/pandora.css    |  87 +++-
 .../operation/agentes/alerts_status.php       |  12 +-
 .../operation/agentes/estado_agente.php       |   7 +-
 .../agentes/estado_generalagente.php          | 409 ++----------------
 .../operation/agentes/estado_monitores.php    |  29 ++
 pandora_console/views/cluster/edit.php        |   3 +
 pandora_console/views/cluster/view.php        | 383 ++++------------
 21 files changed, 1001 insertions(+), 760 deletions(-)

diff --git a/pandora_console/godmode/agentes/configurar_agente.php b/pandora_console/godmode/agentes/configurar_agente.php
index de42b8b6c3..96837b876d 100644
--- a/pandora_console/godmode/agentes/configurar_agente.php
+++ b/pandora_console/godmode/agentes/configurar_agente.php
@@ -2092,7 +2092,6 @@ if ($create_module) {
 
     if ($disable_module) {
 
-    hd($disable_module, true);
     $result = modules_change_disabled($disable_module, 1);
     $module_name = modules_get_agentmodule_name($disable_module);
 
@@ -2116,13 +2115,11 @@ if ($create_module) {
 
 
     if ($result === NOERR) {
-        hd($disable_module, true);
         db_pandora_audit(
             AUDIT_LOG_MODULE_MANAGEMENT,
             'Disable #'.$disable_module.' | '.$module_name.' | '.io_safe_output($agent['alias'])
         );
     } else {
-        hd($disable_module, true);
         db_pandora_audit(
             AUDIT_LOG_MODULE_MANAGEMENT,
             'Fail to disable #'.$disable_module.' | '.$module_name.' | '.io_safe_output($agent['alias'])
diff --git a/pandora_console/godmode/agentes/modificar_agente.php b/pandora_console/godmode/agentes/modificar_agente.php
index a14bff4b92..487fe54e07 100644
--- a/pandora_console/godmode/agentes/modificar_agente.php
+++ b/pandora_console/godmode/agentes/modificar_agente.php
@@ -751,6 +751,10 @@ if ($agents !== false) {
                 'index.php?sec=reporting&sec2=operation/cluster/cluster&op=view&id=%s',
                 $cluster->id()
             );
+            $agentAlertUrl = sprintf(
+                'index.php?sec=estado&sec2=operation/cluster/cluster&op=update&id=%s&page=6',
+                $cluster->id()
+            );
         } else {
             $main_tab = ($check_aw === true) ? 'main' : 'module';
             $agentNameUrl = sprintf(
@@ -762,6 +766,10 @@ if ($agents !== false) {
                 'index.php?sec=estado&sec2=operation/agentes/ver_agente&id_agente=%s',
                 $agent['id_agente']
             );
+            $agentAlertUrl = sprintf(
+                'index.php?sec=gagente&sec2=godmode/agentes/configurar_agente&tab=alert&id_agente=%s',
+                $agent['id_agente']
+            );
         }
 
         if (empty($agent['alias']) === true) {
@@ -825,7 +833,7 @@ if ($agents !== false) {
             );
         }
 
-        if ((int) $agent['id_os'] !== 100) {
+        if ((int) $agent['id_os'] != CLUSTER_OS_ID) {
             $additionalOptionsAgentName[] = html_print_anchor(
                 [
                     'href'    => ui_get_full_url('index.php?sec=gagente&sec2=godmode/agentes/configurar_agente&tab=module&id_agente='.$agent['id_agente']),
@@ -837,7 +845,7 @@ if ($agents !== false) {
 
         $additionalOptionsAgentName[] = html_print_anchor(
             [
-                'href'    => ui_get_full_url('index.php?sec=gagente&sec2=godmode/agentes/configurar_agente&tab=alert&id_agente='.$agent['id_agente']),
+                'href'    => ui_get_full_url($agentAlertUrl),
                 'content' => __('Alerts'),
             ],
             true
@@ -942,7 +950,7 @@ if ($agents !== false) {
                         $os
                     )
                 ),
-                'onClick' => ($agent['id_os'] === CLUSTER_OS_ID) ? sprintf('if (!confirm(\'%s\')) return false', $agentDisableEnableCaption) : 'return true;',
+                'onClick' => ($agent['id_os'] == CLUSTER_OS_ID) ? sprintf('if (!confirm(\'%s\')) return false', $agentDisableEnableCaption) : 'return true;',
                 'image'   => sprintf('images/%s', $agentDisableEnableIcon),
                 'title'   => $agentDisableEnableTitle,
             ],
@@ -950,7 +958,7 @@ if ($agents !== false) {
         );
 
         if ($check_aw === true && is_management_allowed() === true) {
-            if ($agent['id_os'] !== CLUSTER_OS_ID) {
+            if ($agent['id_os'] != CLUSTER_OS_ID) {
                 $onClickActionDeleteAgent = 'if (!confirm(\' '.__('Are you sure?').'\')) return false;';
             } else {
                 $onClickActionDeleteAgent = 'if (!confirm(\' '.__('WARNING! - You are going to delete a cluster agent. Are you sure?').'\')) return false;';
diff --git a/pandora_console/godmode/alerts/alert_list.builder.php b/pandora_console/godmode/alerts/alert_list.builder.php
index de07bce961..34242a8fa3 100644
--- a/pandora_console/godmode/alerts/alert_list.builder.php
+++ b/pandora_console/godmode/alerts/alert_list.builder.php
@@ -206,9 +206,10 @@ $table->data[2][0] = html_print_label_input_block(
 
 if (isset($step) === false) {
     echo '<form id="form_alerts" class="add_alert_form max_floating_element_size" method="post">';
-    html_print_table($table);
 }
 
+html_print_table($table);
+
 if (isset($step) === false) {
     $output = '';
 
diff --git a/pandora_console/godmode/alerts/alert_list.list.php b/pandora_console/godmode/alerts/alert_list.list.php
index fa848c845d..5d71895ecd 100644
--- a/pandora_console/godmode/alerts/alert_list.list.php
+++ b/pandora_console/godmode/alerts/alert_list.list.php
@@ -620,7 +620,21 @@ foreach ($simple_alerts as $alert) {
             $main_tab = 'module';
         }
 
-        $data[0] = '<a href="index.php?sec=gagente&sec2=godmode/agentes/configurar_agente&tab='.$main_tab.'&id_agente='.$id_agent.'">';
+        if ((int) agents_get_os($id_agent) === CLUSTER_OS_ID) {
+            $cluster = PandoraFMS\Cluster::loadFromAgentId($id_agent);
+            $agentAlertUrl = sprintf(
+                'index.php?sec=estado&sec2=operation/cluster/cluster&op=update&id=%s&page=6',
+                $cluster->id()
+            );
+        } else {
+            $agentAlertUrl = sprintf(
+                'index.php?sec=gagente&sec2=godmode/agentes/configurar_agente&tab=%s&id_agente=%s',
+                $main_tab,
+                $id_agent
+            );
+        }
+
+        $data[0] = '<a href="'.$agentAlertUrl.'">';
 
         if ($alert['disabled']) {
             $data[0] .= '<span class="italic_a">';
diff --git a/pandora_console/godmode/alerts/alert_list.php b/pandora_console/godmode/alerts/alert_list.php
index 17669ab248..1dc32ba086 100644
--- a/pandora_console/godmode/alerts/alert_list.php
+++ b/pandora_console/godmode/alerts/alert_list.php
@@ -650,6 +650,11 @@ if ($id_agente) {
     echo $messageAction;
 
     include_once 'godmode/alerts/alert_list.list.php';
+
+    if (isset($step) === true && $step === true) {
+        return;
+    }
+
     $all_groups = agents_get_all_groups_agent($id_agente, $agent['id_grupo']);
     if (check_acl_one_of_groups($config['id_user'], $all_groups, 'LW') || check_acl_one_of_groups($config['id_user'], $all_groups, 'LM')) {
         include_once 'godmode/alerts/alert_list.builder.php';
diff --git a/pandora_console/include/ajax/module.php b/pandora_console/include/ajax/module.php
index 1e529c487c..78daacb0a0 100755
--- a/pandora_console/include/ajax/module.php
+++ b/pandora_console/include/ajax/module.php
@@ -80,6 +80,7 @@ if (check_login()) {
     $save_monitor_filter = get_parameter('save_monitor_filter', 0);
     $update_monitor_filter = get_parameter('update_monitor_filter', 0);
     $delete_monitor_filter = get_parameter('delete_monitor_filter', 0);
+    $get_cluster_module_detail = (bool) get_parameter('get_cluster_module_detail', 0);
 
     if ($get_agent_modules_json_by_name === true) {
         $agent_name = get_parameter('agent_name');
@@ -742,13 +743,6 @@ if (check_login()) {
         include_once $config['homedir'].'/include/functions_tags.php';
         include_once $config['homedir'].'/include/functions_clippy.php';
 
-
-        // Disable module edition in cluster module list.
-        $cluster_view = (bool) preg_match(
-            '/operation\/cluster\/cluster/',
-            $_SERVER['HTTP_REFERER']
-        );
-
         $agent_a = (bool) check_acl($config['id_user'], 0, 'AR');
         $agent_w = (bool) check_acl($config['id_user'], 0, 'AW');
         $access = ($agent_a === true) ? 'AR' : (($agent_w === true) ? 'AW' : 'AR');
@@ -758,7 +752,19 @@ if (check_login()) {
         $cluster_list = (int) get_parameter('cluster_list');
         $sortField = (string) get_parameter('sort_field');
         $sort = (string) get_parameter('sort', 'none');
+
+        // Disable module edition in cluster module list.
+        $cluster_view = false;
         $url = 'index.php?sec=estado&amp;sec2=operation/agentes/ver_agente&amp;id_agente='.$id_agent;
+        if ((int) agents_get_os($id_agent) === CLUSTER_OS_ID) {
+            $cluster = PandoraFMS\Cluster::loadFromAgentId($id_agent);
+            $url = sprintf(
+                'index.php?sec=estado&sec2=operation/cluster/cluster&op=view&id=%s',
+                $cluster->id()
+            );
+            $cluster_view = true;
+        }
+
         $selectTypeUp = false;
         $selectTypeDown = false;
         $selectNameUp = false;
@@ -1248,7 +1254,6 @@ if (check_login()) {
                 $graph_type = return_graphtype($module['id_tipo_modulo']);
                 $nombre_tipo_modulo = modules_get_moduletype_name($module['id_tipo_modulo']);
                 $handle = 'stat'.$nombre_tipo_modulo.'_'.$module['id_agente_modulo'];
-                $url = 'include/procesos.php?agente='.$module['id_agente_modulo'];
                 $win_handle = dechex(crc32($module['id_agente_modulo'].$module['nombre']));
                 // Show events for boolean modules by default.
                 $draw_events = ($graph_type === 'boolean') ? 1 : 0;
@@ -1314,6 +1319,23 @@ if (check_login()) {
                     true
                 );
 
+                if ($cluster_view === true) {
+                    $graphButtons[] = html_print_anchor(
+                        [
+                            'href'    => 'javascript: show_cluster_module_detail('.$cluster->id().', \''.$modules_get_agentmodule_name.'\')',
+                            'content' => html_print_image(
+                                'images/plus@svg.svg',
+                                true,
+                                [
+                                    'title' => __('Module cluster detail'),
+                                    'class' => 'main_menu_icon forced_title',
+                                ]
+                            ),
+                        ],
+                        true
+                    );
+                }
+
                 $data[8] = html_print_div(
                     [
                         'class'   => 'table_action_buttons',
@@ -1340,7 +1362,7 @@ if (check_login()) {
 
                     $moduleActionButtons[] = html_print_anchor(
                         [
-                            'href'    => 'index.php?sec=estado&amp;sec2=operation/agentes/ver_agente&amp;id_agente='.$id_agente.'&amp;id_agente_modulo='.$module['id_agente_modulo'].'&amp;refr=60'.$additionalLinkAction.'"',
+                            'href'    => $url.'&amp;id_agente_modulo='.$module['id_agente_modulo'].'&amp;refr=60'.$additionalLinkAction.'"',
                             'content' => html_print_image(
                                 $imgaction,
                                 true,
@@ -1756,14 +1778,75 @@ if (check_login()) {
         return;
     }
 
+    if ($get_cluster_module_detail === true) {
+        global $config;
+        $data = [];
+
+        $cluster_id = get_parameter('cluster_id', 0);
+        $cluster = new PandoraFMS\Cluster($cluster_id);
+        $modules_ids = $cluster->getIdsModulesInvolved();
+        $module_name = get_parameter('module_name', '');
+
+        try {
+            $column_names = [
+                __('Module name'),
+                __('Agent'),
+                __('Last status change'),
+                __('Status'),
+            ];
+
+            $columns = [
+                'nombre',
+                'alias',
+                'last_status_change',
+                'estado',
+            ];
+
+            $tableId = 'ModuleByStatus';
+            // Load datatables user interface.
+            ui_print_datatable(
+                [
+                    'id'                         => $tableId,
+                    'class'                      => 'info_table align-left-important',
+                    'style'                      => 'width: 100%',
+                    'columns'                    => $columns,
+                    'column_names'               => $column_names,
+                    'ajax_url'                   => 'include/ajax/module',
+                    'ajax_data'                  => [
+                        'get_data_ModulesByStatus' => 1,
+                        'table_id'                 => $tableId,
+                        'module_name'              => $module_name,
+                        'modules_ids'              => $modules_ids,
+                        'search'                   => '',
+                    ],
+                    'default_pagination'         => 5,
+                    'order'                      => [
+                        'field'     => 'last_status_change',
+                        'direction' => 'desc',
+                    ],
+                    'csv'                        => 0,
+                    'dom_elements'               => 'frtip',
+                    'no_move_elements_to_action' => true,
+                    'mini_pagination'            => true,
+                ]
+            );
+        } catch (\Exception $e) {
+            echo $e->getMessage();
+        }
+
+        return;
+    }
+
     if ($get_data_ModulesByStatus === true) {
         global $config;
         $data = [];
 
         $table_id = get_parameter('table_id', '');
         $search = get_parameter('search', '');
+        $module_name = get_parameter('module_name', '');
         $status = get_parameter('status', '');
         $start = get_parameter('start', 0);
+        $modules_ids = get_parameter('modules_ids', []);
         $length = get_parameter('length', $config['block_size']);
         // There is a limit of (2^32)^2 (18446744073709551615) rows in a MyISAM table, show for show all use max nrows.
         $length = ($length != '-1') ? $length : '18446744073709551615';
@@ -1771,12 +1854,11 @@ if (check_login()) {
         $nodes = get_parameter('nodes', 0);
         $disabled_modules = (bool) get_parameter('disabled_modules', false);
 
-        $where = '';
+        $where = '1=1';
         $recordsTotal = 0;
 
-
         if (empty($search) === false) {
-            $where = 'tagente_modulo.nombre LIKE "%%'.$search.'%%" AND ';
+            $where .= ' AND tagente_modulo.nombre LIKE "%%'.$search.'%%"';
         }
 
         if (str_contains($status, '6') === true) {
@@ -1791,16 +1873,32 @@ if (check_login()) {
             $status = implode(',', $expl);
         }
 
-        $where .= sprintf(
-            'tagente_estado.estado IN (%s)
-            AND tagente_modulo.delete_pending = 0',
-            $status,
-        );
+        if (empty($status) === false) {
+            $where .= sprintf(
+                ' AND tagente_estado.estado IN (%s)
+                AND tagente_modulo.delete_pending = 0',
+                $status,
+            );
+        }
 
         if ($disabled_modules === false) {
             $where .= ' AND tagente_modulo.disabled = 0';
         }
 
+        if (empty($modules_ids) === false && is_array($modules_ids) === true) {
+            $where .= sprintf(
+                ' AND tagente_modulo.id_agente_modulo IN (%s)',
+                implode(',', $modules_ids)
+            );
+        }
+
+        if (empty($module_name) === false) {
+            $where .= sprintf(
+                ' AND tagente_modulo.nombre = "%s"',
+                $module_name
+            );
+        }
+
         if (is_metaconsole() === false) {
             $order_by = '';
             switch ($order['field']) {
diff --git a/pandora_console/include/class/HTML.class.php b/pandora_console/include/class/HTML.class.php
index cb04097f33..5020538e26 100644
--- a/pandora_console/include/class/HTML.class.php
+++ b/pandora_console/include/class/HTML.class.php
@@ -1261,4 +1261,51 @@ var simTree_'.$target.';
     }
 
 
+    /**
+     * Build Steps.
+     *
+     * @param array        $steps  Steps.
+     * @param null|boolean $return Output mode.
+     *
+     * @return string.
+     */
+    public static function printSteps(array $steps, ?bool $return=false)
+    {
+        $i = 1;
+
+        $count = count($steps);
+        $output = '<ol class="steps">';
+        foreach ($steps as $step) {
+            $class = '';
+            if ((int) $step['selected'] === 1) {
+                $class = 'current';
+            }
+
+            if ($i === 1) {
+                $class .= ' first';
+            }
+
+            if ($i === $count) {
+                $class .= ' last';
+            }
+
+            $output .= '<li class="'.$class.'">';
+            $output .= '<a href="'.$step['link'].'">';
+            $output .= __('Step').' '.$i.' &raquo; ';
+            $output .= '<span>'.$step['label'].'</span>';
+            $output .= '</a>';
+            $output .= '</li>';
+            $i++;
+        }
+
+        $output .= '</ol>';
+
+        if ($return === true) {
+            return $output;
+        }
+
+        echo $output;
+    }
+
+
 }
diff --git a/pandora_console/include/functions_agents.php b/pandora_console/include/functions_agents.php
index 2a14579bc6..f74e9dbaaf 100644
--- a/pandora_console/include/functions_agents.php
+++ b/pandora_console/include/functions_agents.php
@@ -3179,6 +3179,38 @@ function agents_detail_view_status_img($critical, $warning, $unknown, $total, $n
 }
 
 
+// Returns the status div to display agent detail view
+function agents_detail_view_status_div($critical, $warning, $unknown, $total, $notinit)
+{
+    if ($total == 0 || $total == $notinit) {
+        return ui_print_status_agent_div(
+            AGENT_STATUS_NOT_INIT,
+            __('No Monitors')
+        );
+    } else if ($critical > 0) {
+        return ui_print_status_agent_div(
+            AGENT_STATUS_CRITICAL,
+            __('At least one module in CRITICAL status')
+        );
+    } else if ($warning > 0) {
+        return ui_print_status_agent_div(
+            AGENT_STATUS_WARNING,
+            __('At least one module in WARNING status')
+        );
+    } else if ($unknown > 0) {
+        return ui_print_status_agent_div(
+            AGENT_STATUS_UNKNOWN,
+            __('At least one module is in UKNOWN status')
+        );
+    } else {
+        return ui_print_status_agent_div(
+            AGENT_STATUS_NORMAL,
+            __('All Monitors OK')
+        );
+    }
+}
+
+
 function agents_update_gis(
     $idAgente,
     $latitude,
@@ -4386,23 +4418,26 @@ function agents_get_offspring(int $id_agent)
 }
 
 
-function agents_get_starmap(int $id_agent, float $width=0, float $height=0)
-{
+function agents_get_starmap(
+    int $id_agent,
+    float $width=0,
+    float $height=0,
+    ?array $all_modules=null
+) {
     ui_require_css_file('heatmap');
 
-    $all_modules = agents_get_modules($id_agent, 'id_agente_modulo', ['disabled' => 0]);
-    if (empty($all_modules)) {
-        return null;
+    if (empty($all_modules) === true) {
+        $all_modules = agents_get_modules($id_agent, 'id_agente_modulo', ['disabled' => 0]);
+        if (empty($all_modules)) {
+            return null;
+        }
     }
 
     $total_modules = count($all_modules);
 
     if ($width !== 0 && $height !== 0) {
-        $measuresProvided = false;
         $width = 200;
         $height = 50;
-    } else {
-        $measuresProvided = true;
     }
 
     // Best square.
@@ -4421,7 +4456,6 @@ function agents_get_starmap(int $id_agent, float $width=0, float $height=0)
 
     $square_length = min(($width / floor($width / $low)), ($height / floor($height / $low)));
 
-    // $measureSymbol = ($measuresProvided === true) ? '' : '%';
     // Print starmap.
     $html = sprintf(
         '<svg id="svg_%s" style="width: %spx; height: %spx;">',
@@ -4544,4 +4578,290 @@ function agents_get_starmap(int $id_agent, float $width=0, float $height=0)
 function hash_agent_name(string $alias, string $nombre_agente)
 {
     return hash('sha256', $alias.'|'.$nombre_agente.'|'.time().'|'.sprintf('%04d', rand(0, 10000)));
+}
+
+
+function get_resume_agent_status_header($agent)
+{
+    global $config;
+
+    $agentCaptionAddedMessage = [];
+    $agentCaption = '<span class="subsection_header_title">'.ucfirst(agents_get_alias($agent['id_agente'])).'</span>';
+    $in_planned_downtime = (bool) db_get_sql(
+        'SELECT executed FROM tplanned_downtime 
+	INNER JOIN tplanned_downtime_agents 
+	ON tplanned_downtime.id = tplanned_downtime_agents.id_downtime
+	WHERE tplanned_downtime_agents.id_agent = '.$agent['id_agente'].' AND tplanned_downtime.executed = 1'
+    );
+
+    if ((bool) $agent['disabled'] === true) {
+        $agentCaptionAddedMessage[] = __('Disabled');
+    } else if ((bool) $agent['quiet'] === true) {
+        $agentCaptionAddedMessage[] = __('Quiet');
+    }
+
+    if ($in_planned_downtime === true) {
+        $agentCaptionAddedMessage[] = __('In scheduled downtime');
+    }
+
+    if (empty($agentCaptionAddedMessage) === false) {
+        $agentCaption .= '&nbsp;<span class="result_info_text">('.implode(' - ', $agentCaptionAddedMessage).')</span>';
+    }
+
+    $agentIconGroup = ((bool) $config['show_group_name'] === false) ? ui_print_group_icon(
+        $agent['id_grupo'],
+        true,
+        '',
+        'padding-right: 6px;',
+        true,
+        false,
+        false,
+        '',
+        true
+    ) : '';
+
+    $agentIconStatus = agents_detail_view_status_img(
+        $agent['critical_count'],
+        $agent['warning_count'],
+        $agent['unknown_count'],
+        $agent['total_count'],
+        $agent['notinit_count']
+    );
+
+    $agent_details_agent_caption = html_print_div(
+        [
+            'class'   => 'agent_details_agent_caption',
+            'content' => $agentCaption,
+        ],
+        true
+    );
+
+    $agent_details_agent_data = html_print_div(
+        [
+            'class'   => 'agent_details_agent_data',
+            'content' => $agentIconGroup,
+        ],
+        true
+    );
+
+    $agent_details_agent_status_image = html_print_div(
+        [
+            'class'   => 'icono_right',
+            'content' => $agentIconStatus,
+        ],
+        true
+    );
+
+    $agentStatusHeader = html_print_div(
+        [
+            'class'   => 'agent_details_header',
+            'content' => $agent_details_agent_caption.$agent_details_agent_data.$agent_details_agent_status_image,
+        ],
+        true
+    );
+
+    return $agentStatusHeader;
+}
+
+
+function get_status_agent_chart_pie($id_agente, $graph_width, $data=null)
+{
+    // Fixed width non interactive charts.
+    $agentStatusGraph = html_print_div(
+        [
+            'id'      => 'status_pie',
+            'style'   => 'width: '.$graph_width.'px;',
+            'content' => graph_agent_status(
+                $id_agente,
+                $graph_width,
+                $graph_width,
+                true,
+                true,
+                (empty($data) === true) ? false : $data,
+                true
+            ),
+        ],
+        true
+    );
+
+    return $agentStatusGraph;
+}
+
+
+function get_resume_agent_concat($id_agente, $all_groups, $agent)
+{
+    global $config;
+
+    $table_contact = new stdClass();
+    $table_contact->id = 'agent_contact_main';
+    $table_contact->width = '100%';
+    $table_contact->cellspacing = 0;
+    $table_contact->cellpadding = 0;
+    $table_contact->class = 'floating_form';
+    $table_contact->style[0] = 'height: 32px; width: 30%; padding-right: 5px; text-align: end; vertical-align: top';
+    $table_contact->style[1] = 'height: 32px; width: 70%; padding-left: 5px; font-weight: lighter; vertical-align: top';
+
+    $agentContactCaption = html_print_div(
+        [
+            'class'   => 'agent_details_agent_caption',
+            'content' => '<span class="subsection_header_title">'.__('Agent contact').'</span>',
+        ],
+        true
+    );
+
+    if ($agent['id_os'] == CLUSTER_OS_ID) {
+        $cluster = PandoraFMS\Cluster::loadFromAgentId(
+            $agent['id_agente']
+        );
+        $url = 'index.php?sec=reporting&sec2=';
+        $url .= 'operation/cluster/cluster';
+        $url .= '&op=view&id='.$cluster->id();
+    } else {
+        $url = 'index.php?sec=estado&amp;sec2=operation/agentes/ver_agente&amp;id_agente='.$agent['id_agente'];
+    }
+
+    $buttonsRefreshAgent = html_print_button(
+        __('Refresh data'),
+        'refresh_data',
+        false,
+        'window.location.assign("'.$url.'&amp;refr=60")',
+        [ 'mode' => 'link' ],
+        true
+    );
+
+    if (check_acl_one_of_groups($config['id_user'], $all_groups, 'AW') === true) {
+        $buttonsRefreshAgent .= html_print_button(
+            __('Force checks'),
+            'force_checks',
+            false,
+            'window.location.assign("'.$url.'&amp;flag_agent=1")',
+            [ 'mode' => 'link' ],
+            true
+        );
+    }
+
+    $buttons_refresh_agent_view = html_print_div(
+        [
+            'class'   => 'buttons_agent_view',
+            'content' => $buttonsRefreshAgent,
+        ],
+        true
+    );
+
+    // Data for agent contact.
+    $intervalHumanTime = human_time_description_raw($agent['intervalo']);
+    $lastContactDate = ui_print_timestamp($agent['ultimo_contacto'], true);
+    $remoteContactDate = ($agent['ultimo_contacto_remoto'] === '01-01-1970 00:00:00') ? __('Never') : date_w_fixed_tz($agent['ultimo_contacto_remoto']);
+    $lastAndRemoteContact = sprintf('%s / %s', $lastContactDate, $remoteContactDate);
+    $progress = agents_get_next_contact($id_agente);
+    $tempTimeToShow = ($agent['intervalo'] - (strtotime('now') - strtotime($agent['ultimo_contacto'])));
+    $progressCaption = ($tempTimeToShow >= 0) ? sprintf('%d s', $tempTimeToShow) : __('Out of bounds');
+    $ajaxNextContactInterval = (empty($agent['intervalo']) === true) ? 0 : (100 / $agent['intervalo']);
+    $secondary_groups = enterprise_hook('agents_get_secondary_groups', [$id_agente]);
+    $secondaryLinks = [];
+    if (empty($secondary_groups['for_select']) === true) {
+        $secondaryLinks[] = '<em>'.__('N/A').'</em>';
+    } else {
+        foreach ($secondary_groups['for_select'] as $id => $name) {
+            $secondaryLinks[] = html_print_anchor(
+                [
+                    'href'    => 'index.php?sec=estado&amp;sec2=operation/agentes/estado_agente&amp;refr=60&amp;group_id='.$id,
+                    'content' => $name,
+                ],
+                true
+            );
+        }
+    }
+
+    $last_status_change_agent = agents_get_last_status_change($agent['id_agente']);
+    $time_elapsed = (empty($last_status_change_agent) === false) ? human_time_comparation($last_status_change_agent) : '<em>'.__('N/A').'</em>';
+
+    // Agent Interval.
+    $data = [];
+    $data[0] = __('Interval');
+    $data[1] = $intervalHumanTime;
+    $table_contact->data[] = $data;
+
+    // Last & Remote contact.
+    $data = [];
+    $data[0] = __('Last contact').' / '.__('Remote');
+    $data[1] = $lastAndRemoteContact;
+    $table_contact->data[] = $data;
+
+    // Next contact progress.
+    $data = [];
+    $data[0] = __('Next contact');
+    $data[1] = ui_progress(
+        $progress,
+        '80%',
+        '1.2',
+        '#ececec',
+        true,
+        $progressCaption,
+        [
+            'page'     => 'operation/agentes/ver_agente',
+            'interval' => $ajaxNextContactInterval,
+            'data'     => [
+                'id_agente'       => $id_agente,
+                'refresh_contact' => 1,
+            ],
+
+        ]
+    );
+    $table_contact->data[] = $data;
+
+    // Group line.
+    $data = [];
+    $data[0] = '<b>'.__('Group').'</b>';
+    $data[1] = html_print_anchor(
+        [
+            'href'    => 'index.php?sec=gagente&sec2=godmode/groups/tactical&id_group='.$agent['id_grupo'],
+            'content' => groups_get_name($agent['id_grupo']),
+        ],
+        true
+    );
+    $table_contact->data[] = $data;
+
+    // Secondary groups.
+    $data = [];
+    $data[0] = '<b>'.__('Secondary groups').'</b>';
+    $data[1] = implode(', ', $secondaryLinks);
+    $table_contact->data[] = $data;
+
+    // Parent agent line.
+    if (enterprise_installed() === true) {
+        $data = [];
+        $data[0] = '<b>'.__('Parent').'</b>';
+        if ((int) $agent['id_parent'] === 0) {
+            $data[1] = '<em>'.__('N/A').'</em>';
+        } else {
+            $data[1] = html_print_anchor(
+                [
+                    'href'    => 'index.php?sec=estado&amp;sec2=operation/agentes/ver_agente&amp;id_agente='.$agent['id_parent'],
+                    'content' => agents_get_alias($agent['id_parent']),
+                ],
+                true
+            );
+        }
+
+        $table_contact->data[] = $data;
+    }
+
+    // Last status change line.
+    $data = [];
+    $data[0] = '<b>'.__('Last status change').'</b>';
+    $data[1] = $time_elapsed;
+    $table_contact->data[] = $data;
+
+    $agent_contact = html_print_div(
+        [
+            'class'   => 'agent_details_header',
+            'content' => $agentContactCaption.$buttons_refresh_agent_view,
+        ],
+        true
+    );
+
+    $agent_contact .= html_print_table($table_contact, true);
+
+    return $agent_contact;
 }
\ No newline at end of file
diff --git a/pandora_console/include/functions_events.php b/pandora_console/include/functions_events.php
index 7068d554e6..069b91f125 100644
--- a/pandora_console/include/functions_events.php
+++ b/pandora_console/include/functions_events.php
@@ -5019,9 +5019,6 @@ function events_page_general($event)
         }
 
         $data[1] = $user_ack.'&nbsp;(&nbsp;';
-        // hd($config['date_format'], true);
-        // hd($event['ack_utimestamp_raw'], true);
-        // TODO: mirar en el manage y en la api que este ack de venir vacio lo herede del anterior que hubiera.
         if ($event['ack_utimestamp_raw'] !== false
             && $event['ack_utimestamp_raw'] !== 'false'
             && empty($event['ack_utimestamp_raw']) === false
diff --git a/pandora_console/include/functions_ui.php b/pandora_console/include/functions_ui.php
index 6e5aaef69a..ce7a548f4b 100755
--- a/pandora_console/include/functions_ui.php
+++ b/pandora_console/include/functions_ui.php
@@ -4011,6 +4011,10 @@ function ui_print_datatable(array $parameters)
         $parameters['csv'] = 1;
     }
 
+    if (isset($parameters['no_move_elements_to_action']) === false) {
+        $parameters['no_move_elements_to_action'] = false;
+    }
+
     $filter = '';
     // Datatable filter.
     if (isset($parameters['form']) && is_array($parameters['form'])) {
@@ -7981,6 +7985,54 @@ function ui_print_status_div($status)
 }
 
 
+function ui_print_div(?string $class='', ?string $title='')
+{
+    $return = '<div class="'.$class.'" title="'.$title.'" data-title="'.$title.'" data-use_title_for_force_title="1">';
+    $return .= '&nbsp';
+    $return .= '</div>';
+
+    return $return;
+}
+
+
+function ui_print_status_agent_div(int $status, ?string $title=null)
+{
+    $return = '';
+    $class = 'status_rounded_rectangles forced_title';
+    switch ((int) $status) {
+        case AGENT_STATUS_CRITICAL:
+            $return = ui_print_div('group_view_crit '.$class, $title);
+        break;
+
+        case AGENT_STATUS_NORMAL:
+            $return = ui_print_div('group_view_ok '.$class, $title);
+        break;
+
+        case AGENT_STATUS_NOT_INIT:
+            $return = ui_print_div('group_view_not_init '.$class, $title);
+        break;
+
+        case AGENT_STATUS_UNKNOWN:
+            $return = ui_print_div('group_view_unk '.$class, $title);
+        break;
+
+        case AGENT_STATUS_WARNING:
+            $return = ui_print_div('group_view_warn '.$class, $title);
+        break;
+
+        case AGENT_STATUS_ALERT_FIRED:
+            $return = ui_print_div('group_view_alrm '.$class, $title);
+        break;
+
+        default:
+            // Not posible.
+        break;
+    }
+
+    return $return;
+}
+
+
 function ui_print_fav_menu($id_element, $url, $label, $section)
 {
     global $config;
diff --git a/pandora_console/include/javascript/datatablesFunction.js b/pandora_console/include/javascript/datatablesFunction.js
index 6c9dc6a3f4..34fe301f41 100644
--- a/pandora_console/include/javascript/datatablesFunction.js
+++ b/pandora_console/include/javascript/datatablesFunction.js
@@ -131,6 +131,11 @@ if (dt.startDisabled === true) {
   startDisabled = true;
 }
 
+var noMoveElementsToAction = false;
+if (dt.no_move_elements_to_action === true) {
+  noMoveElementsToAction = true;
+}
+
 $(document).ready(function() {
   function checkPages() {
     if (dt_table.page.info().pages > 1) {
@@ -226,7 +231,9 @@ $(document).ready(function() {
           ]
         : [],
     initComplete: function(settings, json) {
-      moveElementsToActionButtons();
+      if (noMoveElementsToAction === false) {
+        moveElementsToActionButtons();
+      }
 
       checkPages();
 
diff --git a/pandora_console/include/lib/Cluster.php b/pandora_console/include/lib/Cluster.php
index 9a01eea428..b7bd21d929 100644
--- a/pandora_console/include/lib/Cluster.php
+++ b/pandora_console/include/lib/Cluster.php
@@ -205,6 +205,92 @@ class Cluster extends Entity
     }
 
 
+    /**
+     * Counters modules involved status.
+     *
+     * @return array
+     */
+    public function getCounters() :array
+    {
+        $id_agent_modules = $this->getIdsModulesInvolved();
+        $sql = sprintf(
+            'SELECT SUM( IF(estado = 1, 1, 0) ) AS critical,
+                SUM( IF(estado = 2, 1, 0) ) AS warning,
+                SUM( IF(estado = 0, 1, 0) ) AS normal,
+                SUM( IF(estado = 3, 1, 0) ) AS unknown,
+                SUM( IF(estado = 4 OR estado = 5, 1, 0) ) AS not_init,
+                COUNT(id_agente_modulo) AS total
+            FROM tagente_estado
+            WHERE id_agente_modulo IN (%s)',
+            implode(',', $id_agent_modules)
+        );
+
+        $counters = db_get_row_sql($sql);
+        if ($counters === false) {
+            $counters = [];
+        }
+
+        return $counters;
+    }
+
+
+    /**
+     * Return Ids modules involved.
+     *
+     * @return array
+     */
+    public function getIdsModulesInvolved(): array
+    {
+        $members = $this->getMembers();
+        $modules_ids = [];
+        $modules_names = $this->getItemNames();
+        if (empty($members) === false) {
+            foreach ($members as $agent) {
+                $modules_filtered = $agent->searchModules(['nombre' => $modules_names], 0);
+                if (empty($modules_filtered) === false) {
+                    foreach ($modules_filtered as $idAgent => $module) {
+                        $modules_ids[] = $module->id_agente_modulo();
+                    }
+                }
+            }
+        }
+
+        return $modules_ids;
+    }
+
+
+    /**
+     * Return names modules involved.
+     *
+     * @return array
+     */
+    public function getItemNames(): array
+    {
+        $result = [];
+        if (empty($this->getItems()) === false) {
+            $result = array_keys($this->getItems());
+        }
+
+        return $result;
+    }
+
+
+    /**
+     * Return name type.
+     *
+     * @return string
+     */
+    public function getStringTypeName(): string
+    {
+        $result = __('Active').' / '.__('Active');
+        if ($this->cluster_type() === 'AP') {
+            $result = __('Active').' / '.__('Pasive');
+        }
+
+        return $result;
+    }
+
+
     /**
      * Cleans members from cluster object.
      *
diff --git a/pandora_console/include/lib/ClusterViewer/ClusterManager.php b/pandora_console/include/lib/ClusterViewer/ClusterManager.php
index 3afff1adb3..7ee9a96ba1 100644
--- a/pandora_console/include/lib/ClusterViewer/ClusterManager.php
+++ b/pandora_console/include/lib/ClusterViewer/ClusterManager.php
@@ -216,15 +216,27 @@ class ClusterManager
 
         $err = '';
         $id = get_parameter('id', null);
-
-        try {
-            $cluster = new Cluster($id);
-        } catch (\Exception $e) {
-            $err = ui_print_error_message(
-                __('Cluster not found: '.$e->getMessage()),
-                '',
-                true
-            );
+        if (empty($id) === true) {
+            $id_agente = get_parameter('id_agente', null);
+            try {
+                $cluster = Cluster::loadFromAgentId($id_agente, true);
+            } catch (\Exception $e) {
+                $err = ui_print_error_message(
+                    __('Cluster not found: '.$e->getMessage()),
+                    '',
+                    true
+                );
+            }
+        } else {
+            try {
+                $cluster = new Cluster($id);
+            } catch (\Exception $e) {
+                $err = ui_print_error_message(
+                    __('Cluster not found: '.$e->getMessage()),
+                    '',
+                    true
+                );
+            }
         }
 
         if ($cluster->agent()->id_agente() === null) {
@@ -237,15 +249,60 @@ class ClusterManager
             $critical = true;
         }
 
+        $allGroups = agents_get_all_groups_agent(
+            $cluster->agent()->id_agente(),
+            $cluster->agent()->id_grupo()
+        );
+
+        $flag = (int) get_parameter('flag', 0);
+        if ($flag === 1 && check_acl_one_of_groups($config['id_user'], $allGroups, 'AW') === true) {
+            $id_agent_module = get_parameter('id_agente_modulo');
+            db_process_sql_update(
+                'tagente_modulo',
+                ['flag' => 1],
+                ['id_agente_modulo' => $id_agent_module]
+            );
+        }
+
+        $flag_agent = (int) get_parameter('flag_agent', 0);
+        if ($flag_agent === 1 && check_acl_one_of_groups($config['id_user'], $allGroups, 'AW') === true) {
+            db_process_sql_update(
+                'tagente_modulo',
+                ['flag' => 1],
+                ['id_agente' => $cluster->agent()->id_agente()]
+            );
+        }
+
+        $counters = $cluster->getCounters();
+        $counters_chart = [];
+        $counters_bullet = [];
+        foreach ($counters as $key => $value) {
+            if ($key === 'not_init') {
+                $counters_chart['Not init'] = $value;
+            } else {
+                $counters_chart[ucfirst($key)] = $value;
+            }
+
+            $counters_bullet[$key.'_count'] = $value;
+        }
+
+        unset($counters_chart['Total']);
+
+        $module_involved_ids = $cluster->getIdsModulesInvolved();
+
         View::render(
             'cluster/view',
             [
-                'message'  => $msg,
-                'error'    => $err,
-                'config'   => $config,
-                'model'    => $this,
-                'cluster'  => $cluster,
-                'critical' => $critical,
+                'message'             => $msg,
+                'error'               => $err,
+                'config'              => $config,
+                'model'               => $this,
+                'cluster'             => $cluster,
+                'critical'            => $critical,
+                'allGroups'           => $allGroups,
+                'counters_chart'      => $counters_chart,
+                'counters_bullet'     => $counters_bullet,
+                'module_involved_ids' => array_combine($module_involved_ids, $module_involved_ids),
             ]
         );
     }
diff --git a/pandora_console/include/lib/ClusterViewer/ClusterWizard.php b/pandora_console/include/lib/ClusterViewer/ClusterWizard.php
index 03e13d0f36..3c4c4eb293 100644
--- a/pandora_console/include/lib/ClusterViewer/ClusterWizard.php
+++ b/pandora_console/include/lib/ClusterViewer/ClusterWizard.php
@@ -725,14 +725,11 @@ class ClusterWizard extends \HTML
         }
 
         if ($this->page === 7) {
-            /*
-             *
-             * PARSE ALERTS
-             *
-             */
-
-            // There is no need to parse anything. Already managed by alert
-            // builder.
+            global $config;
+            $step = true;
+            $id_agente = $this->cluster->agent()->id_agente();
+            $dont_display_alert_create_bttn = true;
+            include_once $config['homedir'].'/godmode/alerts/alert_list.php';
             header('Location: '.$this->url.'&op=view&id='.$this->cluster->id());
         }
 
@@ -1212,26 +1209,15 @@ class ClusterWizard extends \HTML
                 'block_content' => $inputs,
             ];
         } else if ($this->page === 6) {
-            /*
-             *
-             * Page: Alerts.
-             *
-             */
-
-            ob_start();
             global $config;
-
+            $step = true;
             $id_agente = $this->cluster->agent()->id_agente();
             $dont_display_alert_create_bttn = true;
-            include_once $config['homedir'].'/godmode/alerts/alert_list.php';
+            ob_start();
             include_once $config['homedir'].'/godmode/alerts/alert_list.builder.php';
-
-            // XXX: Please do not use this kind of thing never more.
-            $hack = ob_get_clean();
-
-            // TODO: Alert form.
-            $form['pre-content'] = $hack;
-
+            html_print_input_hidden('create_alert', 1);
+            $hack_form = ob_get_clean();
+            $form['inputs'][] = ['extra' => $hack_form];
             $final = true;
         }
 
diff --git a/pandora_console/include/styles/pandora.css b/pandora_console/include/styles/pandora.css
index 8d6fa524d4..5a8beaa6ab 100644
--- a/pandora_console/include/styles/pandora.css
+++ b/pandora_console/include/styles/pandora.css
@@ -6215,19 +6215,18 @@ div#status_pie {
   padding: 15px;
 }
 
-/*
 .agent_details_content {
   display: flex;
   align-items: flex-start;
   padding: 20px;
   padding-bottom: 0;
 }
-*/
-.agent_details_content {
+
+.agent_details_content_cluster {
   display: flex;
+  flex-direction: row;
+  justify-content: space-between;
   align-items: flex-start;
-  padding: 20px;
-  padding-bottom: 0;
 }
 
 .agent_details_content .agent_details_graph {
@@ -6240,10 +6239,69 @@ div#status_pie {
   justify-content: center;
 }
 
-.agent_details_content .agent_details_info {
-  flex: 1 1 70%;
-  overflow: hidden;
-  padding-left: 15px;
+.agent_details_content_cluster .agent_details_graph {
+  display: flex;
+  flex-direction: column;
+  margin-left: 10px;
+  min-width: 35%;
+  max-width: 50%;
+}
+
+.agent_details_content_cluster .agent_details_graph > div {
+  display: flex;
+  flex-direction: row;
+  justify-content: space-around;
+  align-items: center;
+  width: 100%;
+  margin-bottom: 5px;
+}
+
+.agent_details_content_cluster div#status_pie {
+  margin: 0px;
+}
+
+.agent_details_content_cluster .agent_details_info {
+  display: flex;
+  flex-direction: column;
+  margin-right: 10px;
+  min-width: 35%;
+  max-width: 50%;
+  justify-content: space-between;
+  align-items: center;
+  height: 180px;
+}
+
+.agent_details_content_cluster .agent_details_info > div {
+  display: flex;
+  flex-direction: column;
+  justify-content: space-around;
+  align-items: flex-end;
+  width: 100%;
+  margin-bottom: 5px;
+}
+
+.agent_details_content_cluster .agent_details_info {
+  display: flex;
+  flex-direction: column;
+  margin-left: 10px;
+  min-width: 35%;
+  max-width: 50%;
+  justify-content: space-around;
+  align-items: flex-end;
+  margin-right: 20px;
+}
+
+.agent_event_chart_cluster {
+  margin-left: 10px;
+  margin-bottom: 10px;
+}
+
+.agent_event_chart_cluster div b {
+  margin-left: 0px;
+}
+
+.agent_event_chart_cluster .white-table-graph-content {
+  height: auto;
 }
 
 .agent_details_info {
@@ -6280,6 +6338,17 @@ div#status_pie {
   justify-content: flex-start;
 }
 
+.agent_details_bullets_cluster #bullets_modules {
+  display: flex;
+  justify-content: flex-start;
+  flex-direction: column;
+}
+
+.agent_details_bullets_cluster #bullets_modules > div {
+  padding: 0px;
+  margin-bottom: 10px;
+}
+
 .agent_details_bullets #bullets_modules > div {
   display: flex;
   align-items: center;
diff --git a/pandora_console/operation/agentes/alerts_status.php b/pandora_console/operation/agentes/alerts_status.php
index 176ac6bce8..a7ce53646c 100755
--- a/pandora_console/operation/agentes/alerts_status.php
+++ b/pandora_console/operation/agentes/alerts_status.php
@@ -109,6 +109,7 @@ $sec = safe_url_extraclean($sec);
 $flag_alert = (bool) get_parameter('force_execution', 0);
 $alert_validate = (bool) get_parameter('alert_validate', 0);
 $tab = get_parameter_get('tab', null);
+$op = get_parameter('op', null);
 
 $refr = (int) get_parameter('refr', 0);
 $pure = get_parameter('pure', 0);
@@ -119,8 +120,11 @@ if ($flag_alert == 1 && check_acl($config['id_user'], $id_group, 'AW')) {
     forceExecution($id_group);
 }
 
-
-$idAgent = get_parameter_get('id_agente', 0);
+if (isset($id_agente) === false || empty($id_agente) === true) {
+    $idAgent = get_parameter_get('id_agente', 0);
+} else {
+    $idAgent = $id_agente;
+}
 
 // Show alerts for specific agent.
 if ($idAgent != 0) {
@@ -207,6 +211,10 @@ if ($idAgent != 0) {
 
 $alerts = [];
 
+if ($op != null) {
+    $url = $url.'&op='.$op;
+}
+
 if ($tab != null) {
     $url = $url.'&tab='.$tab;
 }
diff --git a/pandora_console/operation/agentes/estado_agente.php b/pandora_console/operation/agentes/estado_agente.php
index 44d64fddaf..75b1c6222a 100644
--- a/pandora_console/operation/agentes/estado_agente.php
+++ b/pandora_console/operation/agentes/estado_agente.php
@@ -1153,11 +1153,8 @@ foreach ($agents as $agent) {
         $cluster = PandoraFMS\Cluster::loadFromAgentId(
             $agent['id_agente']
         );
-        $url = 'index.php?sec=reporting&sec2=';
-        $url .= 'operation/cluster/cluster';
-        $url = ui_get_full_url(
-            $url.'&op=view&id='.$cluster->id()
-        );
+        $url_cluster = 'index.php?sec=reporting&sec2=operation/cluster/cluster';
+        $url = $url_cluster.'&op=view&id='.$cluster->id();
     } else {
         $url = 'index.php?sec=estado&sec2=operation/agentes/ver_agente&id_agente='.$agent['id_agente'];
     }
diff --git a/pandora_console/operation/agentes/estado_generalagente.php b/pandora_console/operation/agentes/estado_generalagente.php
index 641f58c714..e51d53597f 100755
--- a/pandora_console/operation/agentes/estado_generalagente.php
+++ b/pandora_console/operation/agentes/estado_generalagente.php
@@ -79,215 +79,11 @@ $alive_animation = agents_get_starmap($id_agente, 200, 50);
 /*
  * START: TABLE AGENT BUILD.
  */
-$agentCaptionAddedMessage = [];
-$agentCaption = '<span class="subsection_header_title">'.ucfirst(agents_get_alias($agent['id_agente'])).'</span>';
-$in_planned_downtime = (bool) db_get_sql(
-    'SELECT executed FROM tplanned_downtime 
-	INNER JOIN tplanned_downtime_agents 
-	ON tplanned_downtime.id = tplanned_downtime_agents.id_downtime
-	WHERE tplanned_downtime_agents.id_agent = '.$agent['id_agente'].' AND tplanned_downtime.executed = 1'
-);
 
-if ((bool) $agent['disabled'] === true) {
-    $agentCaptionAddedMessage[] = __('Disabled');
-} else if ((bool) $agent['quiet'] === true) {
-    $agentCaptionAddedMessage[] = __('Quiet');
-}
-
-if ($in_planned_downtime === true) {
-    $agentCaptionAddedMessage[] = __('In scheduled downtime');
-}
-
-if (empty($agentCaptionAddedMessage) === false) {
-    $agentCaption .= '&nbsp;<span class="result_info_text">('.implode(' - ', $agentCaptionAddedMessage).')</span>';
-}
-
-$agentIconGroup = ((bool) $config['show_group_name'] === false) ? ui_print_group_icon(
-    $agent['id_grupo'],
-    true,
-    '',
-    'padding-right: 6px;',
-    true,
-    false,
-    false,
-    '',
-    true
-) : '';
-
-$agentIconStatus = agents_detail_view_status_img(
-    $agent['critical_count'],
-    $agent['warning_count'],
-    $agent['unknown_count'],
-    $agent['total_count'],
-    $agent['notinit_count']
-);
-
-$agent_details_agent_caption = html_print_div(
-    [
-        'class'   => 'agent_details_agent_caption',
-        'content' => $agentCaption,
-    ],
-    true
-);
-
-$agent_details_agent_data = html_print_div(
-    [
-        'class'   => 'agent_details_agent_data',
-        'content' => $agentIconGroup,
-    ],
-    true
-);
-
-$agent_details_agent_status_image = html_print_div(
-    [
-        'class'   => 'icono_right',
-        'content' => $agentIconStatus,
-    ],
-    true
-);
-
-$agentStatusHeader = html_print_div(
-    [
-        'class'   => 'agent_details_header',
-        'content' => $agent_details_agent_caption.$agent_details_agent_data.$agent_details_agent_status_image,
-    ],
-    true
-);
+$agentStatusHeader = get_resume_agent_status_header($agent);
 
 // Fixed width non interactive charts.
-$status_chart_width = 150;
-$graph_width = 150;
-
-$table_status = new stdClass();
-$table_status->id = 'agent_status_main';
-$table_status->width = '100%';
-$table_status->cellspacing = 0;
-$table_status->cellpadding = 0;
-$table_status->class = 'floating_form';
-$table_status->style[0] = 'height: 32px; width: 30%; padding-right: 5px; text-align: end; vertical-align: top';
-$table_status->style[1] = 'height: 32px; width: 70%; padding-left: 5px; font-weight: lighter; vertical-align: top';
-
-$agentStatusGraph = html_print_div(
-    [
-        'id'      => 'status_pie',
-        'style'   => 'width: '.$graph_width.'px;',
-        'content' => graph_agent_status(
-            $id_agente,
-            $graph_width,
-            $graph_width,
-            true,
-            false,
-            false,
-            true
-        ),
-    ],
-    true
-);
-
-/*
-    $table_agent_graph = '<div id="status_pie" style="width: '.$graph_width.'px;">';
-    $table_agent_graph .= graph_agent_status(
-    $id_agente,
-    $graph_width,
-    $graph_width,
-    true,
-    false,
-    false,
-    true
-    );
-$table_agent_graph .= '</div>';*/
-
-/*
-    $table_agent_os = '<p>'.ui_print_os_icon(
-    $agent['id_os'],
-    false,
-    true,
-    true,
-    false,
-    false,
-    false,
-    [
-        'title' => get_os_name($agent['id_os']),
-        'width' => '20px;',
-    ]
-    );
-*/
-
-$table_status->data['agent_os'][0] = __('OS');
-$agentOS = [];
-$agentOS[] = html_print_div([ 'content' => (empty($agent['os_version']) === true) ? get_os_name((int) $agent['id_os']) : $agent['os_version']], true);
-$agentOS[] = html_print_div([ 'style' => 'width: 16px;padding-left: 5px', 'content' => ui_print_os_icon($agent['id_os'], false, true, true, false, false, false, ['width' => '16px'])], true);
-$table_status->data['agent_os'][1] = html_print_div(['class' => 'agent_details_agent_data', 'content' => implode('', $agentOS)], true);
-
-// $table_agent_os .= (empty($agent['os_version']) === true) ? get_os_name((int) $agent['id_os']) : $agent['os_version'].'</p>';
-$addresses = agents_get_addresses($id_agente);
-$address = agents_get_address($id_agente);
-
-foreach ($addresses as $k => $add) {
-    if ($add == $address) {
-        unset($addresses[$k]);
-    }
-}
-
-if (empty($address) === false) {
-    $table_status->data['ip_address'][0] = __('IP address');
-    $table_status->data['ip_address'][1] = (empty($address) === true) ? '<em>'.__('N/A').'</em>' : $address;
-    /*
-        $table_agent_ip = '<p>'.html_print_image(
-        'images/world.png',
-        true,
-        [
-            'title' => __('IP address'),
-            'class' => 'invert_filter',
-        ]
-        );
-        $table_agent_ip .= '<span class="align-top inline">';
-        $table_agent_ip .= (empty($address) === true) ? '<em>'.__('N/A').'</em>' : $address;
-        $table_agent_ip .= '</span></p>';
-    */
-}
-
-$table_status->data['agent_version'][0] = __('Agent Version');
-$table_status->data['agent_version'][1] = (empty($agent['agent_version']) === true) ? '<i>'.__('N/A').'</i>' : $agent['agent_version'];
-
-$table_status->data['description'][0] = __('Description');
-$table_status->data['description'][1] = (empty($agent['comentarios']) === true) ? '<em>'.__('N/A').'</em>' : $agent['comentarios'];
-
-/*
-    $table_agent_version = '<p>'.html_print_image(
-    'images/version.png',
-    true,
-    [
-        'title' => __('Agent Version'),
-        'class' => 'invert_filter',
-    ]
-    );
-    $table_agent_version .= '<span class="align-top inline">';
-    $table_agent_version .= (empty($agent['agent_version']) === true) ? '<i>'.__('N/A').'</i>' : $agent['agent_version'];
-    $table_agent_version .= '</span></p>';
-
-    $table_agent_description = '<p>'.html_print_image(
-    'images/list.png',
-    true,
-    [
-        'title' => __('Description'),
-        'class' => 'invert_filter',
-    ]
-    );
-    $table_agent_description .= '<span class="align-top inline">';
-    $table_agent_description .= (empty($agent['comentarios']) === true) ? '<em>'.__('N/A').'</em>' : $agent['comentarios'];
-    $table_agent_description .= '</span></p>';
-*/
-
-/*
-    $table_agent_count_modules = reporting_tiny_stats(
-    $agent,
-    true,
-    'agent',
-    // Useless.
-    ':',
-    true
-);*/
+$agentStatusGraph = get_status_agent_chart_pie($id_agente, 150);
 
 $agentCountModules = html_print_div(
     [
@@ -304,6 +100,40 @@ $agentCountModules = html_print_div(
     true
 );
 
+$table_status = new stdClass();
+$table_status->id = 'agent_status_main';
+$table_status->width = '100%';
+$table_status->cellspacing = 0;
+$table_status->cellpadding = 0;
+$table_status->class = 'floating_form';
+$table_status->style[0] = 'height: 32px; width: 30%; padding-right: 5px; text-align: end; vertical-align: top';
+$table_status->style[1] = 'height: 32px; width: 70%; padding-left: 5px; font-weight: lighter; vertical-align: top';
+$table_status->data['agent_os'][0] = __('OS');
+$agentOS = [];
+$agentOS[] = html_print_div([ 'content' => (empty($agent['os_version']) === true) ? get_os_name((int) $agent['id_os']) : $agent['os_version']], true);
+$agentOS[] = html_print_div([ 'style' => 'width: 16px;padding-left: 5px', 'content' => ui_print_os_icon($agent['id_os'], false, true, true, false, false, false, ['width' => '16px'])], true);
+$table_status->data['agent_os'][1] = html_print_div(['class' => 'agent_details_agent_data', 'content' => implode('', $agentOS)], true);
+
+$addresses = agents_get_addresses($id_agente);
+$address = agents_get_address($id_agente);
+
+foreach ($addresses as $k => $add) {
+    if ($add == $address) {
+        unset($addresses[$k]);
+    }
+}
+
+if (empty($address) === false) {
+    $table_status->data['ip_address'][0] = __('IP address');
+    $table_status->data['ip_address'][1] = (empty($address) === true) ? '<em>'.__('N/A').'</em>' : $address;
+}
+
+$table_status->data['agent_version'][0] = __('Agent Version');
+$table_status->data['agent_version'][1] = (empty($agent['agent_version']) === true) ? '<i>'.__('N/A').'</i>' : $agent['agent_version'];
+
+$table_status->data['description'][0] = __('Description');
+$table_status->data['description'][1] = (empty($agent['comentarios']) === true) ? '<em>'.__('N/A').'</em>' : $agent['comentarios'];
+
 $has_remote_conf = enterprise_hook(
     'config_agents_has_remote_configuration',
     [$agent['id_agente']]
@@ -347,163 +177,6 @@ $table_agent = $agentStatusHeader.'
  * END: TABLE AGENT BUILD.
  */
 
-/*
- *START: TABLE CONTACT BUILD.
- */
-
-$table_contact = new stdClass();
-$table_contact->id = 'agent_contact_main';
-$table_contact->width = '100%';
-$table_contact->cellspacing = 0;
-$table_contact->cellpadding = 0;
-$table_contact->class = 'floating_form';
-$table_contact->style[0] = 'height: 32px; width: 30%; padding-right: 5px; text-align: end; vertical-align: top';
-$table_contact->style[1] = 'height: 32px; width: 70%; padding-left: 5px; font-weight: lighter; vertical-align: top';
-
-$agentContactCaption = html_print_div(
-    [
-        'class'   => 'agent_details_agent_caption',
-        'content' => '<span class="subsection_header_title">'.__('Agent contact').'</span>',
-    ],
-    true
-);
-
-$buttonsRefreshAgent = html_print_button(
-    __('Refresh data'),
-    'refresh_data',
-    false,
-    'window.location.assign("index.php?sec=estado&amp;sec2=operation/agentes/ver_agente&amp;id_agente='.$id_agente.'&amp;refr=60")',
-    [ 'mode' => 'link' ],
-    true
-);
-
-if (check_acl_one_of_groups($config['id_user'], $all_groups, 'AW') === true) {
-    $buttonsRefreshAgent .= html_print_button(
-        __('Force checks'),
-        'force_checks',
-        false,
-        'window.location.assign("index.php?sec=estado&amp;sec2=operation/agentes/ver_agente&amp;flag_agent=1&amp;id_agente='.$id_agente.'")',
-        [ 'mode' => 'link' ],
-        true
-    );
-}
-
-$buttons_refresh_agent_view = html_print_div(
-    [
-        'class'   => 'buttons_agent_view',
-        'content' => $buttonsRefreshAgent,
-    ],
-    true
-);
-
-// Data for agent contact.
-$intervalHumanTime = human_time_description_raw($agent['intervalo']);
-$lastContactDate = ui_print_timestamp($agent['ultimo_contacto'], true);
-$remoteContactDate = ($agent['ultimo_contacto_remoto'] === '01-01-1970 00:00:00') ? __('Never') : date_w_fixed_tz($agent['ultimo_contacto_remoto']);
-$lastAndRemoteContact = sprintf('%s / %s', $lastContactDate, $remoteContactDate);
-$progress = agents_get_next_contact($id_agente);
-$tempTimeToShow = ($agent['intervalo'] - (strtotime('now') - strtotime($agent['ultimo_contacto'])));
-$progressCaption = ($tempTimeToShow >= 0) ? sprintf('%d s', $tempTimeToShow) : __('Out of bounds');
-$ajaxNextContactInterval = (empty($agent['intervalo']) === true) ? 0 : (100 / $agent['intervalo']);
-$secondary_groups = enterprise_hook('agents_get_secondary_groups', [$id_agente]);
-$secondaryLinks = [];
-if (empty($secondary_groups['for_select']) === true) {
-    $secondaryLinks[] = '<em>'.__('N/A').'</em>';
-} else {
-    foreach ($secondary_groups['for_select'] as $id => $name) {
-        $secondaryLinks[] = html_print_anchor(
-            [
-                'href'    => 'index.php?sec=estado&amp;sec2=operation/agentes/estado_agente&amp;refr=60&amp;group_id='.$id,
-                'content' => $name,
-            ],
-            true
-        );
-    }
-}
-
-$last_status_change_agent = agents_get_last_status_change($agent['id_agente']);
-$time_elapsed = (empty($last_status_change_agent) === false) ? human_time_comparation($last_status_change_agent) : '<em>'.__('N/A').'</em>';
-
-// Agent Interval.
-$data = [];
-$data[0] = __('Interval');
-$data[1] = $intervalHumanTime;
-$table_contact->data[] = $data;
-
-// Last & Remote contact.
-$data = [];
-$data[0] = __('Last contact').' / '.__('Remote');
-$data[1] = $lastAndRemoteContact;
-$table_contact->data[] = $data;
-
-// Next contact progress.
-$data = [];
-$data[0] = __('Next contact');
-$data[1] = ui_progress(
-    $progress,
-    '80%',
-    '1.2',
-    '#ececec',
-    true,
-    $progressCaption,
-    [
-        'page'     => 'operation/agentes/ver_agente',
-        'interval' => $ajaxNextContactInterval,
-        'data'     => [
-            'id_agente'       => $id_agente,
-            'refresh_contact' => 1,
-        ],
-
-    ]
-);
-$table_contact->data[] = $data;
-
-// Group line.
-$data = [];
-$data[0] = '<b>'.__('Group').'</b>';
-$data[1] = html_print_anchor(
-    [
-        'href'    => 'index.php?sec=gagente&sec2=godmode/groups/tactical&id_group='.$agent['id_grupo'],
-        'content' => groups_get_name($agent['id_grupo']),
-    ],
-    true
-);
-$table_contact->data[] = $data;
-
-// Secondary groups.
-$data = [];
-$data[0] = '<b>'.__('Secondary groups').'</b>';
-$data[1] = implode(', ', $secondaryLinks);
-$table_contact->data[] = $data;
-
-// Parent agent line.
-if (enterprise_installed() === true) {
-    $data = [];
-    $data[0] = '<b>'.__('Parent').'</b>';
-    if ((int) $agent['id_parent'] === 0) {
-        $data[1] = '<em>'.__('N/A').'</em>';
-    } else {
-        $data[1] = html_print_anchor(
-            [
-                'href'    => 'index.php?sec=estado&amp;sec2=operation/agentes/ver_agente&amp;id_agente='.$agent['id_parent'],
-                'content' => agents_get_alias($agent['id_parent']),
-            ],
-            true
-        );
-    }
-
-    $table_contact->data[] = $data;
-}
-
-// Last status change line.
-$data = [];
-$data[0] = '<b>'.__('Last status change').'</b>';
-$data[1] = $time_elapsed;
-$table_contact->data[] = $data;
-
-/*
- * END: TABLE CONTACT BUILD
- */
 
 /*
  * START: TABLE DATA BUILD
@@ -881,15 +554,7 @@ if (empty($network_interfaces) === false) {
         });
     </script>
 <?php
-$agent_contact = html_print_div(
-    [
-        'class'   => 'agent_details_header',
-        'content' => $agentContactCaption.$buttons_refresh_agent_view,
-    ],
-    true
-);
-
-$agent_contact .= html_print_table($table_contact, true);
+$agent_contact = get_resume_agent_concat($id_agente, $all_groups, $agent);
 
 $agentDetails = html_print_div(
     [
diff --git a/pandora_console/operation/agentes/estado_monitores.php b/pandora_console/operation/agentes/estado_monitores.php
index 43255d226f..372a636044 100755
--- a/pandora_console/operation/agentes/estado_monitores.php
+++ b/pandora_console/operation/agentes/estado_monitores.php
@@ -371,6 +371,7 @@ ui_require_css_file('cluetip', 'include/styles/js/');
 ui_require_jquery_file('cluetip');
 
 echo "<div id='module_details_dialog' class='display:none'></div>";
+echo "<div id='cluster_module_detail' class='display:none'></div>";
 
 ui_include_time_picker();
 ui_require_jquery_file('ui.datepicker-'.get_user_language(), 'include/javascript/i18n/');
@@ -453,6 +454,34 @@ ui_require_jquery_file('ui.datepicker-'.get_user_language(), 'include/javascript
             }
         });
     }
+
+    // Show the modal window of an module
+    function show_cluster_module_detail(cluster_id, module_name) {        
+        title = <?php echo '"'.__('Modules: ').'"'; ?>;
+        $.ajax({
+            type: "POST",
+            url: "<?php echo ui_get_full_url('ajax.php', false, false, false); ?>",
+            data: "page=include/ajax/module&get_cluster_module_detail=1&cluster_id="+cluster_id+"&module_name="+module_name,
+            dataType: "html",
+            success: function(data) {
+                $("#cluster_module_detail").hide ()
+                    .empty ()
+                    .append (data)
+                    .dialog ({
+                        resizable: true,
+                        draggable: true,
+                        modal: true,
+                        title: title + module_name,
+                        overlay: {
+                            opacity: 0.5,
+                            background: "black"
+                        },
+                        width: "auto"
+                    }).css({"min-width": "650px"})
+                    .show ();
+            }
+        });
+    }
     function datetime_picker_callback() {
         
         $("#text-time_from, #text-time_to").timepicker({
diff --git a/pandora_console/views/cluster/edit.php b/pandora_console/views/cluster/edit.php
index 03c9d27bcd..2c417b0f75 100644
--- a/pandora_console/views/cluster/edit.php
+++ b/pandora_console/views/cluster/edit.php
@@ -126,6 +126,9 @@ if (empty($form) === false) {
     $submit = $form['submit-external-input'];
     unset($form['submit-external-input']);
 
+    unset($bc[0]);
+    $wizard->printSteps($bc);
+
     HTML::printForm($form, false, ($wizard->page < 6));
     $buttons_input .= HTML::printInput($submit);
 }
diff --git a/pandora_console/views/cluster/view.php b/pandora_console/views/cluster/view.php
index af33475c4a..32bcdb0736 100644
--- a/pandora_console/views/cluster/view.php
+++ b/pandora_console/views/cluster/view.php
@@ -115,260 +115,17 @@ if ($critical === true) {
     return;
 }
 
-
-/*
- *
- * All this block has been retrieved from 'estado_generalagente.php' as
- * described in issue #5755.
- *
- */
-
-
-
-/*
- *
- *
- * CLUSTER AGENT DETAILS.
- *
- */
-
-// Prepare information for view.
-$alive_animation = agents_get_status_animation(
-    agents_get_interval_status($cluster->agent()->toArray(), false)
-);
-
-
-$agent_name = ui_print_agent_name(
-    $cluster->agent()->id_agente(),
-    true,
-    500,
-    'font-size: medium;font-weight:bold',
-    true,
-    '',
-    '',
-    false,
-    false
-);
-$in_planned_downtime = db_get_sql(
-    'SELECT executed FROM tplanned_downtime 
-	INNER JOIN tplanned_downtime_agents 
-	ON tplanned_downtime.id = tplanned_downtime_agents.id_downtime
-	WHERE tplanned_downtime_agents.id_agent = '.$cluster->agent()->id_agente().' AND tplanned_downtime.executed = 1'
-);
-
-if ($cluster->agent()->disabled()) {
-    if ($in_planned_downtime) {
-        $agent_name = '<em>'.$agent_name.ui_print_help_tip(__('Disabled'), true);
-    } else {
-        $agent_name = '<em>'.$agent_name.'</em>'.ui_print_help_tip(__('Disabled'), true);
-    }
-} else if ($cluster->agent()->quiet()) {
-    if ($in_planned_downtime) {
-        $agent_name = "<em'>".$agent_name.'&nbsp;'.html_print_image('images/dot_blue.png', true, ['border' => '0', 'title' => __('Quiet'), 'alt' => '']);
-    } else {
-        $agent_name = "<em'>".$agent_name.'&nbsp;'.html_print_image('images/dot_blue.png', true, ['border' => '0', 'title' => __('Quiet'), 'alt' => '']).'</em>';
-    }
-} else {
-    $agent_name = $agent_name;
-}
-
-if ($in_planned_downtime && !$cluster->agent()->disabled() && !$cluster->agent()->quiet()) {
-    $agent_name .= '<em>&nbsp;'.ui_print_help_tip(
-        __('Agent in scheduled downtime'),
-        true,
-        'images/minireloj-16.png'
-    ).'</em>';
-} else if (($in_planned_downtime && !$cluster->agent()->disabled())
-    || ($in_planned_downtime && !$cluster->agent()->quiet())
-) {
-    $agent_name .= '&nbsp;'.ui_print_help_tip(
-        __('Agent in scheduled downtime'),
-        true,
-        'images/clock.svg'
-    ).'</em>';
-}
-
-
-$table_agent_header = '<div class="agent_details_agent_alias">';
-$table_agent_header .= $agent_name;
-$table_agent_header .= '</div>';
-$table_agent_header .= '<div class="agent_details_agent_name mrgn_lft_10px">';
-if (!$config['show_group_name']) {
-    $table_agent_header .= ui_print_group_icon(
-        $cluster->agent()->id_grupo(),
-        true,
-        'groups_small',
-        'padding-right: 6px;'
-    );
-}
-
-$table_agent_header .= '</div>';
-
-$status_img = agents_detail_view_status_img(
-    $cluster->agent()->critical_count(),
-    $cluster->agent()->warning_count(),
-    $cluster->agent()->unknown_count(),
-    $cluster->agent()->total_count(),
-    $cluster->agent()->notinit_count()
-);
-
-$table_agent_header .= '<div class="icono_right">'.$status_img.'</div>';
-$table_agent_header .= '&nbsp;&nbsp;';
-$table_agent_header .= '<a href="'.$model->url.'&op=force&id='.$cluster->id();
-$table_agent_header .= '">'.html_print_image(
-    'images/force@svg.svg',
-    true,
-    [
-        'title' => __('Force cluster status calculation'),
-        'alt'   => '',
-        'class' => 'main_menu_icon invert_filter',
-
-    ]
-).'</a>';
-// Fixed width non interactive charts.
-$status_chart_width = 180;
-$graph_width = 180;
-
-$table_agent_graph = '<div id="status_pie" style="width: '.$status_chart_width.'px;">';
-$table_agent_graph .= graph_agent_status(
-    $cluster->agent()->id_agente(),
-    $graph_width,
-    $graph_width,
-    true,
-    false,
-    false,
-    true
-);
-$table_agent_graph .= '</div>';
-
-$table_agent_os = '<p>'.ui_print_os_icon(
-    $cluster->agent()->id_os(),
-    false,
-    true,
-    true,
-    false,
-    false,
-    false,
-    ['title' => __('OS').': '.get_os_name($cluster->agent()->id_os())]
-);
-$table_agent_os .= (empty($cluster->agent()->os_version()) === true) ? get_os_name((int) $cluster->agent()->id_os()) : $cluster->agent()->os_version().'</p>';
-
-
-
-$addresses = agents_get_addresses($cluster->agent()->id_agente());
-$address = agents_get_address($cluster->agent()->id_agente());
-
-foreach ($addresses as $k => $add) {
-    if ($add == $address) {
-        unset($addresses[$k]);
-    }
-}
-
-if (empty($address) === false) {
-    $table_agent_ip = '<p>'.html_print_image(
-        'images/web@groups.svg',
-        true,
-        [
-            'title' => __('IP address'),
-            'class' => 'main_menu_icon invert_filter',
-        ]
-    );
-    $table_agent_ip .= '<span class="align-top inline">';
-    $table_agent_ip .= empty($address) ? '<em>'.__('N/A').'</em>' : $address;
-    $table_agent_ip .= '</span></p>';
-}
-
-$table_agent_description = '<p>'.html_print_image(
-    'images/logs@svg.svg',
-    true,
-    [
-        'title' => __('Description'),
-        'class' => 'main_menu_icon invert_filter',
-    ]
-);
-$table_agent_description .= '<span class="align-top inline">';
-$table_agent_description .= empty(
-    $cluster->description()
-) ? '<em>'.__('N/A').'</em>' : $cluster->description();
-$table_agent_description .= '</span></p>';
-
-$table_agent_count_modules = reporting_tiny_stats(
-    $cluster->agent()->toArray(),
-    true,
-    'agent',
-    // Useless.
-    ':',
-    true
-);
-
-$table_agent_version = '<p>'.html_print_image(
-    'images/version.png',
-    true,
-    [
-        'title' => __('Agent Version'),
-        'class' => 'invert_filter',
-    ]
-);
-$table_agent_version .= '<span class="align-top inline">';
-$table_agent_version .= empty($cluster->agent()->agent_version()) ? '<i>'.__('Cluster agent').'</i>' : $cluster->agent()->agent_version();
-$table_agent_version .= '</span></p>';
-
-/*
- *
- *  MAP
- *
- */
-
-$nodes = $cluster->getNodes();
-
-$font_size = 20;
-$width = '45%';
-$height = '500';
-$node_radius = 40;
-
-// Generate map.
-$map_manager = new NetworkMap(
-    [
-        'nodes'           => $nodes,
-        'no_pandora_node' => 1,
-        'pure'            => 1,
-        'map_options'     => [
-            'generation_method' => LAYOUT_SPRING1,
-            'font_size'         => $font_size,
-            'node_radius'       => $node_radius,
-            'height'            => $height,
-            'width'             => '100%',
-            'tooltip'           => true,
-            'size_image'        => 50,
-            'z_dash'            => 0.5,
-            'map_filter'        => [
-                'node_sep'    => 7,
-                'node_radius' => 50,
-                'x_offs'      => 130,
-                'y_offs'      => -70,
-            ],
-        ],
-    ]
-);
-
-
-/*
- *
- * EVENTS 24h
- *
- */
-
-$table_events = '<div class="white_table_graph" id="table_events" style="width:100%">';
-$table_events .= '<div class="agent_details_header">';
-$table_events .= '<b><span style="font-size: medium;font-weight:bold">';
+$table_events = '<div class="agent_event_chart_cluster">';
+$table_events .= '<div>';
+$table_events .= '<b>';
 $table_events .= __('Events (Last 24h)');
-$table_events .= '</span></b>';
+$table_events .= '</b>';
 $table_events .= '</div>';
 $table_events .= '<div class="white-table-graph-content">';
 $table_events .= graph_graphic_agentevents(
     $cluster->agent()->id_agente(),
     95,
-    70,
+    50,
     SECONDS_1DAY,
     '',
     true,
@@ -378,53 +135,89 @@ $table_events .= graph_graphic_agentevents(
 $table_events .= '</div>';
 $table_events .= '</div>';
 
-?>
-<div id="agent_details_first_row" class="w100p cluster-agent-data">
-    <div class="flex">
-        <div class="box-flat agent_details_col agent_details_col_left" style="width:50%">
-            <div class="agent_details_header">
-                <?php echo $table_agent_header; ?>
-            </div>
-            <div class="agent_details_content pdd_l_50px">
-                <div class="agent_details_graph">
-                    <?php echo $table_agent_graph; ?>
-                    <div class="agent_details_bullets">
-                        <?php echo $table_agent_count_modules; ?>
-                    </div>
-                </div>
-                <div class="agent_details_info">
-                    <?php
-                    echo $alive_animation;
-                    echo $table_agent_os;
-                    echo $table_agent_ip;
-                    echo $table_agent_version;
-                    echo $table_agent_description;
-                    ?>
-                </div>
-            </div>
-        </div>
 
-        <div class="box-flat agent_details_col" style="width:50%">
-            <?php echo $table_events; ?>
-        </div>
-    </div>
-    <div class="box-flat agent_details_col agent_details_col_right">
-        <div class="cluster-map">
-            <?php $map_manager->printMap(); ?>
-        </div>
-    </div>
-</div>
+$agentCountModules = html_print_div(
+    [
+        'class'   => 'agent_details_bullets_cluster',
+        'content' => reporting_tiny_stats(
+            $counters_bullet,
+            true,
+            'modules',
+            // Useless.
+            ':',
+            true
+        ),
+    ],
+    true
+);
 
-<div id='cluster-modules' class="w100p modules">
-<?php
+$alive_animation = agents_get_starmap(0, 180, 30, $module_involved_ids);
+$output = '<div id="agent_details_first_row" class="w100p cluster-agent-data">';
+
+$output .= '<div class="flex">';
+$output .= '<div class="box-flat agent_details_col">';
+$output .= get_resume_agent_status_header($cluster->agent()->toArray());
+$output .= '<div class="agent_details_content_cluster">';
+$output .= '<div class="agent_details_graph">';
+$output .= '<div>';
+$output .= get_status_agent_chart_pie($cluster->agent()->id_agente(), 150, $counters_chart);
+$output .= $agentCountModules;
+$output .= '</div>';
+$output .= '<div>';
+$output .= '<div><b>'.__('Cluster Status').'</b></div>';
+$output .= '<div>';
+$output .= agents_detail_view_status_div(
+    $cluster->agent()->critical_count(),
+    $cluster->agent()->warning_count(),
+    $cluster->agent()->unknown_count(),
+    $cluster->agent()->total_count(),
+    $cluster->agent()->notinit_count()
+);
+$output .= '</div>';
+$output .= '</div>';
+$output .= '</div>';
+$output .= '<div class="agent_details_info">';
+$output .= $alive_animation;
+$output .= '<div>';
+$output .= '<div><b>'.__('Cluster Mode').' : '.$cluster->getStringTypeName().'</b></div>';
+$output .= '<div><b>'.$cluster->name().'</b></div>';
+$output .= '</div>';
+$output .= '</div>';
+$output .= '</div>';
+
+$output .= $table_events;
+
+$output .= '</div>';
+
+$output .= '<div class="box-flat agent_details_col">';
+$output .= get_resume_agent_concat(
+    $cluster->agent()->id_agente(),
+    $allGroups,
+    $cluster->agent()->toArray()
+);
+$output .= '</div>';
+
+$output .= '</div>';
+$output .= '</div>';
+echo $output;
+
+echo '<div id="cluster-modules" class="w100p modules">';
 $id_agente = $cluster->agent()->id_agente();
+$id_cluster = $cluster->id();
+$agent = $cluster->agent()->toArray();
 require_once $config['homedir'].'/operation/agentes/estado_monitores.php';
-?>
-</div>
+echo '</div>';
 
+require_once $config['homedir'].'/operation/agentes/alerts_status.php';
 
-<?php
-$buttons[] = html_print_submit_button(
+// Check permissions to read events.
+if (check_acl($config['id_user'], 0, 'ER')) {
+    include_once $config['homedir'].'/operation/agentes/status_events.php';
+}
+
+$buttons = [];
+$reload = '<form action="'.$model->url.'&op=view&id='.$cluster->id().'" method="POST">';
+$reload .= html_print_submit_button(
     __('Reload'),
     'submit',
     false,
@@ -434,12 +227,14 @@ $buttons[] = html_print_submit_button(
     ],
     true
 );
-echo '<form action="'.$model->url.'&op=view&id='.$cluster->id().'" method="POST">';
+$reload .= '</form>';
+
+$buttons[] = $reload;
+
+// Print always go back button.
+$buttons[] = HTML::printForm($model->getGoBackForm(), true);
+
 html_print_action_buttons(
     implode('', $buttons),
     ['type' => 'form_action']
 );
-echo '</form>';
-
-// Print always go back button.
-HTML::printForm($model->getGoBackForm(), false);

From efb2a3a314d7ae9c132c53cec8a8d04b0ddead65 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Thu, 21 Sep 2023 15:53:13 +0200
Subject: [PATCH 049/116] Automonitorization

---
 pandora_server/lib/PandoraFMS/Core.pm | 84 ++++++++++++++++++---------
 1 file changed, 58 insertions(+), 26 deletions(-)

diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index e917626d58..f3115ad641 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -6421,7 +6421,6 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_agents";
 	$module->{'description'} = 'Total amount of agents';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_agente)) FROM tagente');
-	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
@@ -6429,7 +6428,6 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_modules";
 	$module->{'description'} = 'Total modules';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_agente_modulo)) FROM tagente_modulo');
-	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
@@ -6437,7 +6435,6 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_groups";
 	$module->{'description'} = 'Total groups';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(DISTINCT(id_grupo)) FROM tgrupo');
-	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
@@ -6445,8 +6442,7 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_data";
 	$module->{'description'} = 'Total module data records';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_agente_modulo) FROM tagente_datos');
-	$module->{'module_interval'} = '86400';
-	$module->{'module_group'} = 'Database';
+	$module->{'module_interval'} = '288';
 	push(@modules, $module);
 	undef $module;
 
@@ -6454,8 +6450,7 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_string_data";
 	$module->{'description'} = 'Total module string data records';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_agente_modulo) FROM tagente_datos_string');
-	$module->{'module_interval'} = '86400';
-	$module->{'module_group'} = 'Database';
+	$module->{'module_interval'} = '288';
 	push(@modules, $module);
 	undef $module;
 
@@ -6463,7 +6458,6 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_access_data";
 	$module->{'description'} = 'Total agent access records';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_agent) FROM tagent_access');
-	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
@@ -6471,15 +6465,13 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_users";
 	$module->{'description'} = 'Total users';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_user) FROM tusuario');
-	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
 	# Total sessions
-	$module->{'name'} = "total_users";
-	$module->{'description'} = 'Total users';
+	$module->{'name'} = "total_sessions";
+	$module->{'description'} = 'Total sessions';
 	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_session) FROM tsessions_php');
-	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
@@ -6495,7 +6487,6 @@ sub pandora_installation_monitoring($$) {
 			AND tagente_modulo.disabled = 0
 			AND estado = 3"
 	);
-	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
@@ -6503,12 +6494,11 @@ sub pandora_installation_monitoring($$) {
 	$module->{'name'} = "total_notinit";
 	$module->{'description'} = 'Total not init modules';
 	$module->{'data'} = get_db_value($dbh, "SELECT COUNT(DISTINCT(id_agente_modulo)) FROM tagente_estado WHERE estado = 4");
-	$module->{'module_group'} = 'Database';
 	push(@modules, $module);
 	undef $module;
 
 	# Tables fragmentation
-	$module->{'name'} = "tables_fragmentation";
+	$module->{'name'} = "table_fragmentation";
 	$module->{'description'} = 'Tables fragmentation';
 	$module->{'data'} = get_db_value(
 		$dbh,
@@ -6521,7 +6511,6 @@ sub pandora_installation_monitoring($$) {
 				AND table_name NOT IN ('tagent_access, tevento')"
 	);
 	$module->{'unit'} = '%';
-	$module->{'module_group'} = 'Database';
 	push(@modules, $module); 
 	undef $module;
 
@@ -6632,29 +6621,72 @@ sub pandora_installation_monitoring($$) {
 	# Defined alerts
 	my $total_alerts = get_db_value(
 		$dbh,
-		'SELECT 
-			(SELECT COUNT(id) FROM talert_template_modules WHERE disabled = 0 AND standby = 0 AND disabled_by_downtime = 0) +
-			(SELECT COUNT(id) FROM tevent_alert WHERE disabled = 0 AND standby = 0)  AS Total'
-		);
-	$module->{'name'} = "defined_alers";
+		'SELECT COUNT(id) FROM talert_template_modules WHERE disabled = 0 AND standby = 0 AND disabled_by_downtime = 0'
+	);
+	$module->{'name'} = "defined_alerts";
 	$module->{'description'} = 'Number of defined (and active) alerts';
 	$module->{'data'} = $total_alerts;
 	push(@modules, $module); 
 	undef $module;
 
-	# Last 24 hours triggered alerts.
+	# Defined correlative alerts
+	my $total_correlative_alerts = get_db_value(
+		$dbh,
+		'SELECT COUNT(id) FROM tevent_alert WHERE disabled = 0 AND standby = 0'
+	);
+	$module->{'name'} = "defined_correlative_alerts";
+	$module->{'description'} = 'Number of defined correlative  alerts';
+	$module->{'data'} = $total_alerts;
+	push(@modules, $module); 
+	undef $module;
+
+	# Alertas disparadas actualmente.
 	my $triggered_alerts = get_db_value(
+		$dbh,
+		'SELECT COUNT(id) FROM talert_template_modules WHERE times_fired != 0 AND disabled = 0 AND standby = 0 AND disabled_by_downtime = 0'
+	);
+	$module->{'name'} = "triggered_alerts";
+	$module->{'description'} = 'Number of active alerts';
+	$module->{'data'} = $triggered_alerts;
+	push(@modules, $module); 
+	undef $module;
+
+	# Alertas correladivas activas
+	my $triggered_correlative_alerts = get_db_value(
+		$dbh,
+		'SELECT COUNT(id) FROM tevent_alert WHERE times_fired != 0 AND disabled = 0 AND standby = 0'
+	);
+	$module->{'name'} = "triggered_correlative_alerts";
+	$module->{'description'} = 'Number of active correlative alerts';
+	$module->{'data'} = $triggered_correlative_alerts;
+	push(@modules, $module); 
+	undef $module;
+
+
+	# Last 24 hours triggered alerts.
+	my $triggered_alerts_24h = get_db_value(
 		$dbh,
 		'SELECT COUNT(id)
 		FROM talert_template_modules
 		WHERE last_fired >=UNIX_TIMESTAMP(NOW() - INTERVAL 1 DAY)'
 	);
-	$module->{'name'} = "triggered_alerts";
+	$module->{'name'} = "triggered_alerts_24h";
 	$module->{'description'} = 'Last 24h triggered alerts';
-	$module->{'data'} = $triggered_alerts;
+	$module->{'data'} = $triggered_alerts_24h;
 	push(@modules, $module); 
 	undef $module;
 
+	my $triggered_correlative_alerts_24h = get_db_value(
+		$dbh,
+		'SELECT COUNT(id)
+		FROM tevent_alert
+		WHERE last_fired >=UNIX_TIMESTAMP(NOW() - INTERVAL 1 DAY)'
+	);
+	$module->{'name'} = "triggered_correlative_alerts_24h";
+	$module->{'description'} = 'Last 24h triggered correlative alerts';
+	$module->{'data'} = $triggered_correlative_alerts_24h;
+	push(@modules, $module); 
+	undef $module;
 
 	}
 
@@ -8324,7 +8356,7 @@ sub snmp_traps_monitoring ($$)  {
 	my $module;
 
 	# SNMP Trap log size
-	$module->{'name'} = "SNMP Trap queue";
+	$module->{'name'} = "snmp_trap_queue";
 	$module->{'description'} = 'Size of snmp_logfile (MB): Size of snmp trap log in megabytes';
 	$module->{'data'} = $size_in_mb;
 	$module->{'unit'} = 'MB';
@@ -8340,7 +8372,7 @@ sub snmp_traps_monitoring ($$)  {
 	$module->{'name'} = "total_traps";
 	$module->{'description'} = 'Total number of traps';
 	$module->{'data'} = $count;
-	$module->{'module_interval'} = 720;
+	$module->{'module_interval'} = 288;
 	push(@modules, $module); 
 	undef $module;
 

From c6a04d5d8fb5df86e7d8eb6dba85a2031a3a6382 Mon Sep 17 00:00:00 2001
From: daniel <daniel.barbero@artica.es>
Date: Fri, 22 Sep 2023 12:56:01 +0200
Subject: [PATCH 050/116] fix show comment events ticket
 pandora_enterprise#12066

---
 .../include/javascript/pandora_events.js            |  2 +-
 pandora_console/operation/events/events.php         | 13 +++++--------
 2 files changed, 6 insertions(+), 9 deletions(-)

diff --git a/pandora_console/include/javascript/pandora_events.js b/pandora_console/include/javascript/pandora_events.js
index 940fd3ce5d..5e272ee0e7 100644
--- a/pandora_console/include/javascript/pandora_events.js
+++ b/pandora_console/include/javascript/pandora_events.js
@@ -52,7 +52,7 @@ function show_event_dialog(event, dialog_page) {
         .empty()
         .append(data)
         .dialog({
-          title: event.evento,
+          title: event.event_title,
           resizable: true,
           draggable: true,
           modal: false,
diff --git a/pandora_console/operation/events/events.php b/pandora_console/operation/events/events.php
index 059c8f90ec..5300bf109a 100644
--- a/pandora_console/operation/events/events.php
+++ b/pandora_console/operation/events/events.php
@@ -511,8 +511,10 @@ if (is_ajax() === true) {
                             );
                         }
 
-                        $tmp->evento = str_replace('"', '', io_safe_output($tmp->evento));
-                        $event_text = $tmp->evento;
+                        $output_event_name = str_replace('"', '', io_safe_output($tmp->evento));
+                        $tmp->event_title = $output_event_name;
+                        $tmp->b64 = base64_encode(json_encode($tmp));
+                        $tmp->evento = $output_event_name;
 
                         $tmp->evento = ui_print_truncate_text(
                             $tmp->evento,
@@ -623,7 +625,7 @@ if (is_ajax() === true) {
 
                                 $total_sec = strtotime($tmp->timestamp);
                                 $total_sec += $dif;
-                                $last_contact = date($confb64ig['date_format'], $total_sec);
+                                $last_contact = date($config['date_format'], $total_sec);
                                 $last_contact_value = ui_print_timestamp($last_contact, true);
                             } else {
                                 $title = date($config['date_format'], strtotime($tmp->timestamp));
@@ -662,11 +664,6 @@ if (is_ajax() === true) {
                             );
                         }
 
-                        $aux_event = $tmp->evento;
-                        $tmp->evento = $event_text;
-                        $tmp->b64 = base64_encode(json_encode($tmp));
-                        $tmp->evento = $aux_event;
-
                         $tmp->user_comment = ui_print_comments(
                             event_get_last_comment(
                                 $item,

From db7a5e121d68d7eba8092dbd8203ac182e187a0c Mon Sep 17 00:00:00 2001
From: Jorge Rincon <jorge.rincon@pandorafms.com>
Date: Mon, 25 Sep 2023 17:10:43 +0200
Subject: [PATCH 051/116] Add the None option to the date filter to prioritize
 the period of the report items.

---
 pandora_console/include/functions_html.php             |  1 +
 .../operation/reporting/reporting_viewer.php           | 10 ++++++----
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/pandora_console/include/functions_html.php b/pandora_console/include/functions_html.php
index 8458dcfcc8..1c908b50d1 100644
--- a/pandora_console/include/functions_html.php
+++ b/pandora_console/include/functions_html.php
@@ -7286,6 +7286,7 @@ function html_print_select_date_range(
     $fields[SECONDS_1MONTH] = __('Last 30 days');
     $fields['custom'] = __('Custom');
     $fields['chose_range'] = __('Chose start/end date period');
+    $fields['none'] = __('None');
 
     $output = html_print_input_hidden('custom_date', $custom_date, true);
     $output .= '<div id="'.$name.'_default" class="wauto inline_flex" '.$display_default.'>';
diff --git a/pandora_console/operation/reporting/reporting_viewer.php b/pandora_console/operation/reporting/reporting_viewer.php
index e3e07590ba..cc42d7e6ac 100755
--- a/pandora_console/operation/reporting/reporting_viewer.php
+++ b/pandora_console/operation/reporting/reporting_viewer.php
@@ -58,7 +58,7 @@ $datetime_end = strtotime($date_end.' '.$time_end);
 
 // Calculate new inteval for all reports.
 $custom_date = get_parameter('custom_date', 0);
-$date = get_parameter('date', SECONDS_1DAY);
+$date = get_parameter('date', 'none');
 $date_text = get_parameter('date_text', SECONDS_1DAY);
 
 $custom_date_end = '';
@@ -111,6 +111,9 @@ if ($custom_date === '1') {
         $first_of_week = date('Y-m-d', strtotime('monday', strtotime('last week')));
         $period = (strtotime($date_end) - strtotime($first_of_week));
     }
+} else if ($date === 'none') {
+    // Prioritize the report item period based on the current local date/time.
+    $date_end = date('Y/m/d H:i:s');
 } else {
     $date_end = date('Y/m/d H:i:s');
     $date_start = date('Y/m/d H:i:s', (strtotime($date_end) - $date));
@@ -315,12 +318,12 @@ if ($html_menu_export === ENTERPRISE_NOT_HOOK) {
 if ((bool) is_metaconsole() === true) {
     $table2->data[0][2] = html_print_label_input_block(
         __('Date').' ',
-        html_print_select_date_range('date', true, get_parameter('date', SECONDS_1DAY), $date_init, $time_init, date('Y/m/d'), date('H:i:s'), $date_text),
+        html_print_select_date_range('date', true, get_parameter('date', 'none'), $date_init, $time_init, date('Y/m/d'), date('H:i:s'), $date_text),
     );
 } else {
     $table2->data[0][2] = html_print_label_input_block(
         __('Date').' ',
-        html_print_select_date_range('date', true, get_parameter('date', SECONDS_1DAY), $date_init, $time_init, date('Y/m/d'), date('H:i:s'), $date_text),
+        html_print_select_date_range('date', true, get_parameter('date', 'none'), $date_init, $time_init, date('Y/m/d'), date('H:i:s'), $date_text),
         ['label_class' => 'filter_label_position_before']
     );
 }
@@ -451,7 +454,6 @@ $(document).ready (function () {
             $("#string_to").show();
             $('#string_from').show();
             $("#string_items").hide();
-            console.log($(".filter_label_position_before").html());
         } else {
             $("#string_to").hide();
             $('#string_from').hide();

From 19a9f82fe1b740bc9f4aeeae1ac67dcac32d4fac Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Mon, 25 Sep 2023 19:08:24 +0200
Subject: [PATCH 052/116] gotty changes

---
 pandora_console/extensions/quick_shell.php    | 692 +++++++++++-------
 .../extras/delete_files/delete_files.txt      |   3 +-
 pandora_console/godmode/menu.php              |   2 +-
 pandora_console/godmode/setup/setup.php       |   4 +-
 .../godmode/setup/setup_websocket_engine.php  |  96 +--
 pandora_console/pandora_websocket_engine      | 175 -----
 6 files changed, 442 insertions(+), 530 deletions(-)
 delete mode 100755 pandora_console/pandora_websocket_engine

diff --git a/pandora_console/extensions/quick_shell.php b/pandora_console/extensions/quick_shell.php
index 7e6db3271e..cd863f6b10 100644
--- a/pandora_console/extensions/quick_shell.php
+++ b/pandora_console/extensions/quick_shell.php
@@ -84,84 +84,38 @@ function quickShell()
     $method_port = get_parameter('port', null);
 
     // Retrieve main IP Address.
-    $address = agents_get_address($agent_id);
+    $agent_address = agents_get_address($agent_id);
 
     ui_require_css_file('wizard');
     ui_require_css_file('discovery');
 
-    // Settings.
-    // WebSocket host, where client should connect.
-    if (isset($config['ws_port']) === false) {
-        config_update_value('ws_port', 8080);
+    // Initialize Gotty Client.
+    if ($method === 'ssh') {
+        // SSH.
+        $args = '?arg='.$username.'@'.$agent_address;
+        //$args = '?arg='.$username.'@172.16.0.1';
+        $args .= '&arg=-p%20'.$method_port;
+    } else if ($method == 'telnet') {
+        // Telnet.
+        $username = preg_replace('/[^a-zA-Z0-9\-\.]/', '', $username);
+        $args = '?arg=-l%20'.$username;
+        $args .= '&arg='.$agent_address;
+        $args .= '&arg='.$method_port.'&arg=-E';
     }
 
-    if (empty($config['ws_proxy_url']) === true) {
-        $ws_url = 'http://'.$_SERVER['SERVER_ADDR'].':'.$config['ws_port'];
-    } else {
-        preg_match('/\/\/(.*)/', $config['ws_proxy_url'], $matches);
-        if (isset($_SERVER['HTTPS']) === true) {
-            $ws_url = 'https://'.$matches[1];
-        } else {
-            $ws_url = 'http://'.$matches[1];
-        }
-    }
-
-    // Gotty settings. Internal communication (WS).
-    if (isset($config['gotty_host']) === false) {
-        config_update_value('gotty_host', '127.0.0.1');
-    }
-
-    if (isset($config['gotty_telnet_port']) === false) {
-        config_update_value('gotty_telnet_port', 8082);
-    }
-
-    if (isset($config['gotty_ssh_port']) === false) {
-        config_update_value('gotty_ssh_port', 8081);
-    }
-
-    // Context to allow self-signed certs.
-    $context = stream_context_create(
-        [
-            'http' => [ 'method' => 'GET'],
-            'ssl'  => [
-                'verify_peer'      => false,
-                'verify_peer_name' => false,
-            ],
-        ]
-    );
+    $method_addr = ($method === 'ssh') ? $config['gotty_ssh_addr'] : $config['gotty_telnet_addr'];
+    $address = (empty($method_addr) === true) ? $_SERVER['SERVER_ADDR'] : $method_addr;
+    $use_ssl = ($method === 'ssh') ? $config['gotty_ssh_use_ssl'] : $config['gotty_telnet_use_ssl'];
+    $protocol = ((bool) $use_ssl === true) ? 'https://' : 'http://';
+    $port = ($method === 'ssh') ? $config['gotty_ssh_port'] : $config['gotty_telnet_port'];
+    $connection_hash = ($method === 'ssh') ? $config['gotty_ssh_connection_hash'] : $config['gotty_telnet_connection_hash'];
+    $gotty_addr = $protocol.$address.':'.$port.'/'.$connection_hash.'/'.$args;
 
     // Username. Retrieve from form.
     if (empty($username) === true) {
         // No username provided, ask for it.
         $wiz = new Wizard();
 
-        $test = curl($ws_url, []);
-        if ($test === false) {
-            ui_print_error_message(__('WebService engine has not been started, please check documentation.'));
-            $wiz->printForm(
-                [
-                    'form' => [
-                        'method' => 'POST',
-                        'action' => '#',
-                        'id'     => 'retry_form',
-                    ],
-                ]
-            );
-
-            html_print_action_buttons(
-                html_print_submit_button(
-                    __('Retry'),
-                    'submit',
-                    false,
-                    [
-                        'icon' => 'next',
-                        'form' => 'retry_form',
-                    ],
-                    true
-                )
-            );
-            return;
-        }
 
         $wiz->printForm(
             [
@@ -221,114 +175,25 @@ function quickShell()
         return;
     }
 
-    // Initialize Gotty Client.
-    $host = $config['gotty_host'];
-    if ($method == 'ssh') {
-        // SSH.
-        $port = $config['gotty_ssh_port'];
-        $command_arguments = "var args = '?arg=".$username.'@'.$address;
-        $command_arguments .= '&arg=-p '.$method_port."';";
-    } else if ($method == 'telnet') {
-        // Telnet.
-        $port = $config['gotty_telnet_port'];
-        $username = preg_replace('/[^a-zA-Z0-9\-\.]/', '', $username);
-        $command_arguments = "var args = '?arg=-l ".$username;
-        $command_arguments .= '&arg='.$address;
-        $command_arguments .= '&arg='.$method_port."&arg=-E';";
-    } else {
-        ui_print_error_message(__('Please use SSH or Telnet.'));
-        return;
-    }
-
-    // If rediretion is enabled, we will try to connect using
-    // http:// or https:// endpoint.
-    $test = get_headers($ws_url, false, $context);
-    if ($test === false) {
-        if (empty($wiz) === true) {
-            $wiz = new Wizard();
-        }
-
-        ui_print_error_message(__('WebService engine has not been started, please check documentation.'));
-        echo $wiz->printGoBackButton('#');
-        return;
-    }
-
-    // Check credentials.
-    $auth_str = '';
-    $gotty_url = $host.':'.$port;
-    if (empty($config['gotty_user']) === false
-        && empty($config['gotty_pass']) === false
-    ) {
-        $auth_str = io_safe_output($config['gotty_user']);
-        $auth_str .= ':'.io_output_password($config['gotty_pass']);
-        $gotty_url = $auth_str.'@'.$host.':'.$port;
-    }
-
-    $r = file_get_contents('http://'.$gotty_url.'/js/hterm.js');
-    if (empty($r) === true) {
-        if (empty($wiz) === true) {
-            $wiz = new Wizard();
-        }
-
-        ui_print_error_message(__('WebService engine is not working properly, please check documentation.'));
-        echo $wiz->printGoBackButton('#');
-        return;
-    }
-
-    // Override gotty client settings.
-    if (empty($auth_str) === true) {
-        $r .= "var gotty_auth_token = '';";
-    } else {
-        $r .= "var gotty_auth_token = '";
-        $r .= $auth_str."';";
-    }
-
-    // Set websocket target and method.
-    $gotty = file_get_contents('http://'.$gotty_url.'/js/gotty.js');
-    $url = "var url = (httpsEnabled ? 'wss://' : 'ws://') + window.location.host + window.location.pathname + 'ws';";
-    if (empty($config['ws_proxy_url']) === true) {
-        $new = "var url = (httpsEnabled ? 'wss://' : 'ws://')";
-        $new .= " + window.location.host + ':";
-        $new .= $config['ws_port'].'/'.$method."';";
-    } else {
-        $new = "var url = '";
-        $new .= $config['ws_proxy_url'].'/'.$method."';";
-    }
-
-    // Update firefox issue.
-    $original = '    this.iframe_.src = \'#\';';
-    $trick = 'this.iframe_.src = \'javascript:\';';
-
-    $r = str_replace($original, $trick, $r);
-
-    // Update url.
-    $gotty = str_replace($url, $new, $gotty);
-
-    // Update websocket arguments.
-    $args = 'var args = window.location.search;';
-    $new = $command_arguments;
-
-    // Update arguments.
-    $gotty = str_replace($args, $new, $gotty);
-
     ?>
     <style>#terminal {
-        height: 650px;
         width: 100%;
         margin: 0px;
         padding: 0;
+        display: flex;
+        flex-direction: column;
+        min-height: calc(100vh - 205px);
       }
       #terminal > iframe {
+        width:100%;
+        height:100%;
         position: relative!important;
+        flex-grow: 1;
       }
     </style>
-    <div id="terminal"></div>
-    <script type="text/javascript">
-    <?php echo $r; ?>
-    </script>
-    <script type="text/javascript">
-    <?php echo $gotty; ?>
-    </script>
+
+    <div id="terminal"><iframe id="gotty-iframe" src="<?php echo $gotty_addr; ?>"></iframe></div>
+
     <?php
 
 }
@@ -359,17 +224,37 @@ function quickShellSettings()
         config_update_value('gotty_ssh_port', 8081);
     }
 
+    if (isset($config['gotty_ssh_user']) === false) {
+        config_update_value('gotty_ssh_user', 'pandora');
+    }
+
+    if (isset($config['gotty_telnet_user']) === false) {
+        config_update_value('gotty_telnet_user', 'pandora');
+    }
+
+    if (isset($config['gotty_ssh_pass']) === false) {
+        config_update_value('gotty_ssh_pass', 'Pandor4!');
+    }
+
+    if (isset($config['gotty_telnet_pass']) === false) {
+        config_update_value('gotty_telnet_pass', 'Pandor4!');
+    }
+
+    $changes = 0;
+    $critical = 0;
+
     // Parser.
     if (get_parameter('update_config', false) !== false) {
-        // Gotty settings. Internal communication (WS).
-        $gotty = get_parameter(
-            'gotty',
+        $gotty_ssh_addr = get_parameter(
+            'gotty_ssh_addr',
             ''
         );
-        $gotty_host = get_parameter(
-            'gotty_host',
+
+        $gotty_telnet_addr = get_parameter(
+            'gotty_telnet_addr',
             ''
         );
+
         $gotty_ssh_port = get_parameter(
             'gotty_ssh_port',
             ''
@@ -379,84 +264,116 @@ function quickShellSettings()
             ''
         );
 
-        $gotty_user = get_parameter(
-            'gotty_user',
-            ''
+        $gotty_ssh_user = get_parameter(
+            'gotty_ssh_user',
+            'pandora'
         );
 
-        $gotty_pass = get_parameter(
-            'gotty_pass',
-            ''
+        $gotty_telnet_user = get_parameter(
+            'gotty_telnet_user',
+            'pandora'
         );
 
-        $gotty_pass = io_input_password($gotty_pass);
+        $gotty_ssh_use_ssl = get_parameter(
+            'gotty_ssh_use_ssl',
+            false
+        );
 
-        $changes = 0;
-        $critical = 0;
-        if ($config['gotty'] != $gotty) {
-            config_update_value('gotty', $gotty);
-            $changes++;
-            $critical++;
+        $gotty_telnet_use_ssl = get_parameter(
+            'gotty_telnet_use_ssl',
+            false
+        );
+
+        $gotty_ssh_pass = get_parameter(
+            'gotty_ssh_pass',
+            'Pandor4!'
+        );
+
+        $gotty_ssh_pass = io_input_password($gotty_ssh_pass);
+
+        $gotty_telnet_pass = get_parameter(
+            'gotty_telnet_pass',
+            'Pandor4!'
+        );
+
+        $gotty_telnet_pass = io_input_password($gotty_telnet_pass);
+
+        if ($config['gotty_ssh_addr'] != $gotty_ssh_addr) {
+            config_update_value('gotty_ssh_addr', $gotty_ssh_addr);
         }
 
-        if ($config['gotty_host'] != $gotty_host) {
-            config_update_value('gotty_host', $gotty_host);
-            $changes++;
-        }
-
-        if ($config['gotty_telnet_port'] != $gotty_telnet_port) {
-            config_update_value('gotty_telnet_port', $gotty_telnet_port);
-            $changes++;
+        if ($config['gotty_telnet_addr'] != $gotty_telnet_addr) {
+            config_update_value('gotty_telnet_addr', $gotty_telnet_addr);
         }
 
         if ($config['gotty_ssh_port'] != $gotty_ssh_port) {
+            // Mark ssh gotty for restart (should kill the process in the current port).
+            if ($config['restart_gotty_ssh_next_cron_port'] === ''
+                || $config['restart_gotty_ssh_next_cron_port'] === null
+            ) {
+                config_update_value('restart_gotty_ssh_next_cron_port', $config['gotty_ssh_port']);
+            }
+
             config_update_value('gotty_ssh_port', $gotty_ssh_port);
-            $changes++;
         }
 
-        if ($config['gotty_user'] != $gotty_user) {
-            config_update_value('gotty_user', $gotty_user);
-            $changes++;
-            $critical++;
+        if ($config['gotty_telnet_port'] != $gotty_telnet_port) {
+            // Mark telnet gotty for restart (should kill the process in the current port).
+            if ($config['restart_gotty_telnet_next_cron_port'] === ''
+                || $config['restart_gotty_telnet_next_cron_port'] === null
+            ) {
+                config_update_value('restart_gotty_telnet_next_cron_port', $config['gotty_telnet_port']);
+            }
+
+            config_update_value('gotty_telnet_port', $gotty_telnet_port);
         }
 
-        if ($config['gotty_pass'] != $gotty_pass) {
-            $gotty_pass = io_input_password($gotty_pass);
-            config_update_value('gotty_pass', $gotty_pass);
-            $changes++;
-            $critical++;
+        if ($config['gotty_ssh_user'] != $gotty_ssh_user) {
+            config_update_value('gotty_ssh_user', $gotty_ssh_user);
+        }
+
+        if ($config['gotty_telnet_user'] != $gotty_telnet_user) {
+            config_update_value('gotty_telnet_user', $gotty_telnet_user);
+        }
+
+        if ($config['gotty_ssh_use_ssl'] != $gotty_ssh_use_ssl) {
+            config_update_value('gotty_ssh_use_ssl', $gotty_ssh_use_ssl);
+        }
+
+        if ($config['gotty_telnet_use_ssl'] != $gotty_telnet_use_ssl) {
+            config_update_value('gotty_telnet_use_ssl', $gotty_telnet_use_ssl);
+        }
+
+        if ($config['gotty_ssh_pass'] != $gotty_ssh_pass) {
+            $gotty_ssh_pass = io_input_password($gotty_ssh_pass);
+            config_update_value('gotty_ssh_pass', $gotty_ssh_pass);
+        }
+
+        if ($config['gotty_telnet_pass'] != $gotty_telnet_pass) {
+            $gotty_telnet_pass = io_input_password($gotty_telnet_pass);
+            config_update_value('gotty_telnet_pass', $gotty_telnet_pass);
         }
     }
 
-    if ($changes > 0) {
-        $msg = __('%d Updated', $changes);
-        if ($critical > 0) {
-            $msg = __(
-                '%d Updated, please restart WebSocket engine service',
-                $changes
-            );
-        }
-
-        ui_print_success_message($msg);
-    }
-
-    // Form. Using old style.
     echo '<fieldset class="margin-bottom-10">';
-    echo '<legend>'.__('Quickshell').'</legend>';
+    echo '<legend>'.__('SSH connection parameters').'</legend>';
 
-    $t = new StdClass();
-    $t->data = [];
-    $t->width = '100%';
-    $t->class = 'filter-table-adv';
-    $t->data = [];
-    $t->style = [];
-    $t->style[0] = 'width: 50%;';
+    $test_start = '<span id="test-gotty-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
+    $test_start .= '&nbsp;<span id="test-gotty-message" class="invisible"></span>';
 
-    $t->data[0][] = html_print_label_input_block(
-        __('Gotty path'),
+    $ssh_table = new StdClass();
+    $ssh_table->data = [];
+    $ssh_table->width = '100%';
+    $ssh_table->class = 'filter-table-adv';
+    $ssh_table->data = [];
+    $ssh_table->style = [];
+    $ssh_table->style[0] = 'width: 50%;';
+
+    $ssh_table->data[0][] = html_print_label_input_block(
+        __('Gotty address'),
         html_print_input_text(
-            'gotty',
-            $config['gotty'],
+            'gotty_ssh_addr',
+            $config['gotty_ssh_addr'],
             '',
             30,
             100,
@@ -464,20 +381,8 @@ function quickShellSettings()
         )
     );
 
-    $t->data[0][] = html_print_label_input_block(
-        __('Gotty host'),
-        html_print_input_text(
-            'gotty_host',
-            $config['gotty_host'],
-            '',
-            30,
-            100,
-            true
-        )
-    );
-
-    $t->data[1][] = html_print_label_input_block(
-        __('Gotty ssh port'),
+    $ssh_table->data[0][] = html_print_label_input_block(
+        __('Gotty port'),
         html_print_input_text(
             'gotty_ssh_port',
             $config['gotty_ssh_port'],
@@ -488,8 +393,88 @@ function quickShellSettings()
         )
     );
 
-    $t->data[1][] = html_print_label_input_block(
-        __('Gotty telnet port'),
+    $ssh_table->data[1][] = html_print_label_input_block(
+        __('Gotty user'),
+        html_print_input_text(
+            'gotty_ssh_user',
+            $config['gotty_ssh_user'],
+            '',
+            30,
+            100,
+            true
+        )
+    );
+
+    $ssh_table->data[1][] = html_print_label_input_block(
+        __('Gotty password'),
+        html_print_input_password(
+            'gotty_ssh_pass',
+            io_output_password($config['gotty_ssh_pass']),
+            '',
+            30,
+            100,
+            true
+        )
+    );
+
+    $ssh_table->data[2][] = html_print_label_input_block(
+        __('Use SSL'),
+        html_print_checkbox_switch(
+            'gotty_ssh_use_ssl',
+            1,
+            $config['gotty_ssh_use_ssl'],
+            true,
+            $disable_agentaccess
+        )
+    );
+
+    // Test.
+    $row = [];
+    $test_start = '<span id="test-gotty-spinner-ssh" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
+    $test_start .= '&nbsp;<span id="test-gotty-message-ssh" class="invisible"></span>';
+
+    $ssh_table->data[2][] = html_print_button(
+        __('Test'),
+        'test-gotty-ssh',
+        false,
+        'handleTestSSH()',
+        [
+            'icon'  => 'cog',
+            'mode'  => 'secondary',
+            'style' => 'width: 115px;',
+        ],
+        true
+    ).$test_start;
+
+    html_print_table($ssh_table);
+
+    echo '</fieldset>';
+
+    echo '<fieldset class="margin-bottom-10">';
+    echo '<legend>'.__('Telnet connection parameters').'</legend>';
+
+    $telnet_table = new StdClass();
+    $telnet_table->data = [];
+    $telnet_table->width = '100%';
+    $telnet_table->class = 'filter-table-adv';
+    $telnet_table->data = [];
+    $telnet_table->style = [];
+    $telnet_table->style[0] = 'width: 50%;';
+
+    $telnet_table->data[0][] = html_print_label_input_block(
+        __('Gotty address'),
+        html_print_input_text(
+            'gotty_telnet_addr',
+            $config['gotty_telnet_addr'],
+            '',
+            30,
+            100,
+            true
+        )
+    );
+
+    $telnet_table->data[0][] = html_print_label_input_block(
+        __('Gotty port'),
         html_print_input_text(
             'gotty_telnet_port',
             $config['gotty_telnet_port'],
@@ -500,18 +485,11 @@ function quickShellSettings()
         )
     );
 
-    $hidden = new stdClass();
-    $hidden->data = [];
-    $hidden->width = '100%';
-    $hidden->class = 'filter-table-adv';
-    $hidden->data = [];
-    $hidden->style[0] = 'width: 50%;';
-
-    $hidden->data[0][] = html_print_label_input_block(
+    $telnet_table->data[1][] = html_print_label_input_block(
         __('Gotty user'),
         html_print_input_text(
-            'gotty_user',
-            $config['gotty_user'],
+            'gotty_telnet_user',
+            $config['gotty_telnet_user'],
             '',
             30,
             100,
@@ -519,11 +497,11 @@ function quickShellSettings()
         )
     );
 
-    $hidden->data[0][] = html_print_label_input_block(
+    $telnet_table->data[1][] = html_print_label_input_block(
         __('Gotty password'),
         html_print_input_password(
-            'gotty_pass',
-            io_output_password($config['gotty_pass']),
+            'gotty_telnet_pass',
+            io_output_password($config['gotty_telnet_pass']),
             '',
             30,
             100,
@@ -531,24 +509,71 @@ function quickShellSettings()
         )
     );
 
-    html_print_table($t);
-
-    ui_print_toggle(
-        [
-            'content'         => html_print_table($hidden, true),
-            'name'            => __('Advanced options'),
-            'clean'           => false,
-            'main_class'      => 'no-border-imp',
-            'container_class' => 'no-border-imp',
-        ]
+    $telnet_table->data[2][] = html_print_label_input_block(
+        __('Use SSL'),
+        html_print_checkbox_switch(
+            'gotty_telnet_use_ssl',
+            1,
+            $config['gotty_telnet_use_ssl'],
+            true
+        )
     );
 
-    echo '</fieldset>';
+    // Test.
+    $row = [];
+    $test_start = '<span id="test-gotty-spinner-telnet" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
+    $test_start .= '&nbsp;<span id="test-gotty-message-telnet" class="invisible"></span>';
 
+    $telnet_table->data[2][] = html_print_button(
+        __('Test'),
+        'test-gotty-telnet',
+        false,
+        'handleTestTelnet()',
+        [
+            'icon'  => 'cog',
+            'mode'  => 'secondary',
+            'style' => 'width: 115px;',
+        ],
+        true
+    ).$test_start;
+
+    html_print_table($telnet_table);
+    html_print_input_hidden('update_config', 1);
+
+    echo '</fieldset>';
 }
 
 
-// This extension is usefull only if the agent has associated IP.
+if (is_ajax() === true) {
+    $address = get_parameter('address');
+
+    if (isset($address) === true) {
+        $ch = curl_init($address);
+
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+
+        // Maximum time for the entire request.
+        curl_setopt($ch, CURLOPT_TIMEOUT, 2);
+
+        // Maximum time to establish a connection.
+        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 1);
+
+        curl_exec($ch);
+        $response_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        curl_close($ch);
+
+        if ($response_code === 200 || $response_code === 401) {
+            $result = ['status' => 'success'];
+        } else {
+            $result = ['status' => 'error'];
+        }
+
+        echo json_encode($result);
+        return;
+    }
+}
+
+// This extension is useful only if the agent has associated IP.
 $agent_id = get_parameter('id_agente');
 if (empty($agent_id) === false
     && get_parameter('sec2', '') == 'operation/agentes/ver_agente'
@@ -573,4 +598,139 @@ if (empty($agent_id) === false
     }
 }
 
+echo '<script>';
+echo 'var server_addr = "'.$_SERVER['SERVER_ADDR'].'";';
+echo "function checkAddressReachability(address, callback) {
+    $.ajax({
+        url: 'ajax.php',
+        data: {
+            page: 'extensions/quick_shell',
+            address
+        },
+        type: 'GET',
+        async: false,
+        dataType: 'json',
+        success: function (data) {
+            if (data.status === 'success') {
+                callback(true);
+            } else {
+                callback(false);
+            }
+        },
+        error: function () {
+            callback(false);
+        }
+    });
+}";
+
+$handle_test_telnet = "var handleTestTelnet = function (event) {
+    var gotty_telnet_addr = $('input#text-gotty_telnet_addr').val();
+    var gotty_telnet_port = $('input#text-gotty_telnet_port').val();
+    var gotty_telnet_user = $('input#text-gotty_telnet_user').val();
+    var gotty_telnet_password = $('input#password-gotty_telnet_pass').val();
+    var gotty_telnet_use_ssl = $('input#checkbox-gotty_telnet_use_ssl').is(':checked');
+
+    if (gotty_telnet_addr === '') {
+        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_telnet_port;    
+    } else {
+        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + gotty_telnet_addr + ':' + gotty_telnet_port;
+    }
+
+    var showLoadingImage = function () {
+        $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon cog rotation secondary mini');
+    }
+
+    var showSuccessImage = function () {
+        $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon tick secondary mini');
+    }
+
+    var showFailureImage = function () {
+        $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon fail secondary mini');
+    }
+
+    var hideMessage = function () {
+        $('span#test-gotty-message-telnet').hide();
+    }
+    var showMessage = function () {
+        $('span#test-gotty-message-telnet').show();
+    }
+    var changeTestMessage = function (message) {
+        $('span#test-gotty-message-telnet').text(message);
+    }
+
+    var errorMessage = '".__('Unable to connect.')."';
+
+    hideMessage();
+    showLoadingImage();
+
+    checkAddressReachability(url, function(isReachable) {
+        if (isReachable) {
+            showSuccessImage();
+            hideMessage();
+        } else {
+            showFailureImage();
+            changeTestMessage(errorMessage);
+            showMessage();
+        }
+    });
+
+};";
+
+$handle_test_ssh = "var handleTestSSH = function (event) {
+    var gotty_ssh_addr = $('input#text-gotty_ssh_addr').val();
+    var gotty_ssh_port = $('input#text-gotty_ssh_port').val();
+    var gotty_ssh_user = $('input#text-gotty_ssh_user').val();
+    var gotty_ssh_password = $('input#password-gotty_ssh_pass').val();
+    var gotty_ssh_use_ssl = $('input#checkbox-gotty_ssh_use_ssl').is(':checked');
+
+    if (gotty_ssh_addr === '') {
+        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_ssh_port;    
+    } else {
+        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + gotty_ssh_addr + ':' + gotty_ssh_port;
+    }
+
+    var showLoadingImage = function () {
+        $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon cog rotation secondary mini');
+    }
+
+    var showSuccessImage = function () {
+        $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon tick secondary mini');
+    }
+
+    var showFailureImage = function () {
+        $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon fail secondary mini');
+    }
+
+    var hideMessage = function () {
+        $('span#test-gotty-message-ssh').hide();
+    }
+    var showMessage = function () {
+        $('span#test-gotty-message-ssh').show();
+    }
+    var changeTestMessage = function (message) {
+        $('span#test-gotty-message-ssh').text(message);
+    }
+
+    var errorMessage = '".__('Unable to connect.')."';
+
+
+    hideMessage();
+    showLoadingImage();
+
+    checkAddressReachability(url, function(isReachable) {
+        if (isReachable) {
+            showSuccessImage();
+            hideMessage();
+        } else {
+            showFailureImage();
+            changeTestMessage(errorMessage);
+            showMessage();
+        }
+    });
+};";
+
+echo $handle_test_ssh;
+echo $handle_test_telnet;
+echo '</script>';
+
 extensions_add_godmode_function('quickShellSettings');
diff --git a/pandora_console/extras/delete_files/delete_files.txt b/pandora_console/extras/delete_files/delete_files.txt
index 26eaa93392..d94207a4c9 100644
--- a/pandora_console/extras/delete_files/delete_files.txt
+++ b/pandora_console/extras/delete_files/delete_files.txt
@@ -1707,4 +1707,5 @@ enterprise/godmode/wizards/Applications.class.php
 enterprise/godmode/wizards/Cloud.class.php
 enterprise/images/wizard/applications.png
 enterprise/images/wizard/cloud.png
-enterprise/images/wizard/consoletasks.png
\ No newline at end of file
+enterprise/images/wizard/consoletasks.png
+pandora_websocket_engine
\ No newline at end of file
diff --git a/pandora_console/godmode/menu.php b/pandora_console/godmode/menu.php
index 7cd504c8ac..da06372b8a 100644
--- a/pandora_console/godmode/menu.php
+++ b/pandora_console/godmode/menu.php
@@ -485,7 +485,7 @@ if ($access_console_node === true) {
         $sub2['godmode/setup/setup&section=notifications']['text'] = __('Notifications');
         $sub2['godmode/setup/setup&section=notifications']['refr'] = 0;
 
-        $sub2['godmode/setup/setup&section=websocket_engine']['text'] = __('Websocket Engine');
+        $sub2['godmode/setup/setup&section=websocket_engine']['text'] = __('QuickShell');
         $sub2['godmode/setup/setup&section=websocket_engine']['refr'] = 0;
 
         $sub2['godmode/setup/setup&section=external_tools']['text'] = __('External Tools');
diff --git a/pandora_console/godmode/setup/setup.php b/pandora_console/godmode/setup/setup.php
index 7e17f9fe4c..c1cf635d28 100644
--- a/pandora_console/godmode/setup/setup.php
+++ b/pandora_console/godmode/setup/setup.php
@@ -227,7 +227,7 @@ $buttons['websocket_engine'] = [
         'images/websocket_small.png',
         true,
         [
-            'title' => __('Websocket engine'),
+            'title' => __('QuickShell'),
             'class' => 'invert_filter',
         ]
     ).'</a>',
@@ -327,7 +327,7 @@ switch ($section) {
 
     case 'websocket_engine':
         $buttons['websocket_engine']['active'] = true;
-        $subpage = __('Pandora Websocket Engine');
+        $subpage = __('QuickShell');
         $help_header = 'quickshell_settings';
     break;
 
diff --git a/pandora_console/godmode/setup/setup_websocket_engine.php b/pandora_console/godmode/setup/setup_websocket_engine.php
index 5ee134e558..bed6a01ee9 100644
--- a/pandora_console/godmode/setup/setup_websocket_engine.php
+++ b/pandora_console/godmode/setup/setup_websocket_engine.php
@@ -34,92 +34,20 @@ $url = ui_get_full_url(
 
 echo '<form class="max_floating_element_size" id="form_setup" method="post" action="'.$url.'">';
 
-echo '<fieldset class="margin-bottom-10">';
-echo '<legend>'.__('WebSocket settings').'</legend>';
-
-$t = new StdClass();
-$t->data = [];
-$t->width = '100%';
-$t->class = 'databox filter-table-adv';
-$t->data = [];
-
-$t->data[0][] = html_print_label_input_block(
-    __('Bind address'),
-    html_print_input_text(
-        'ws_bind_address',
-        $config['ws_bind_address'],
-        '',
-        30,
-        100,
-        true
-    )
-);
-
-$t->data[0][] = html_print_label_input_block(
-    __('Bind port'),
-    html_print_input_text(
-        'ws_port',
-        $config['ws_port'],
-        '',
-        30,
-        100,
-        true
-    )
-);
-
-$t->data[1][] = html_print_label_input_block(
-    __('WebSocket proxy url'),
-    html_print_input_text(
-        'ws_proxy_url',
-        $config['ws_proxy_url'],
-        '',
-        30,
-        100,
-        true
-    )
-);
-
-html_print_input_hidden('update_config', 1);
-
-// Test.
-$row = [];
-$test_start = '<span id="test-gotty-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
-$test_start .= '&nbsp;<span id="test-gotty-message" class="invisible"></span>';
-$row['gotty_test'] = html_print_label_input_block(
-    __('Test connection'),
-    html_print_button(
-        __('Test'),
-        'test-gotty',
-        false,
-        'handleTest()',
-        [
-            'icon'  => 'cog',
-            'mode'  => 'secondary mini',
-            'style' => 'width: 115px;',
-        ],
-        true
-    ).$test_start,
-    ['div_class' => 'inline_flex row']
-);
-
-$t->data['gotty_test'] = $row;
-
-html_print_table($t);
-
-echo '</fieldset>';
-
 if (function_exists('quickShellSettings') === true) {
     quickShellSettings();
 }
 
+$action_btns = html_print_submit_button(
+    __('Update'),
+    'update_button',
+    false,
+    [ 'icon' => 'update' ],
+    true
+);
+
 html_print_action_buttons(
-    html_print_submit_button(
-        __('Update'),
-        'update_button',
-        false,
-        [ 'icon' => 'update' ],
-        true
-    )
+    $action_btns
 );
 
 echo '</form>';
@@ -186,10 +114,8 @@ $handle_test_js = "var handleTest = function (event) {
         hideLoadingImage();
         showMessage();
     };
-}
-
-
-$('#button-test-ehorus').click(handleTest);";
+}";
 
 echo $handle_test_js;
 echo '</script>';
+
diff --git a/pandora_console/pandora_websocket_engine b/pandora_console/pandora_websocket_engine
deleted file mode 100755
index 2d4536aae0..0000000000
--- a/pandora_console/pandora_websocket_engine
+++ /dev/null
@@ -1,175 +0,0 @@
-#!/bin/bash
-# Copyright (c) 2005-2023 Pandora FMS
-#
-# /etc/init.d/websocket
-#
-# System startup script for Pandora FMS Console websocket engine
-#
-# Comments to support chkconfig on RedHat Linux
-# chkconfig: 2345 90 10
-# description: Pandora FMS Console webscoket engine startup script
-#
-# Comments to support LSB init script conventions
-### BEGIN INIT INFO
-# Provides:       websocket
-# Required-Start: $syslog cron
-# Should-Start:   $network cron mysql
-# Required-Stop:  $syslog 
-# Should-Stop:    $network 
-# Default-Start:  2 3 5
-# Default-Stop:   0 1 6
-# Short-Description: Pandora FMS Console websocket engine startup script
-# Description:    Pandora FMS Console websocket engine startup script
-### END INIT INFO
-
-if [ -x /lib/lsb/init-functions ]; then
-. /lib/lsb/init-functions
-fi
-
-# If you want to run several pandora Console Websocket engines in this machine, just copy 
-# this script to another name, editing PANDORA_HOME to the new .conf 
-
-export WS_ENGINE="/var/www/html/pandora_console/ws.php"
-export PHP=/usr/bin/php
-export WS_LOG="/var/log/pandora/web_socket.log"
-export GOTTY="/tmp/"
-
-# Environment variables
-if [[ -z ${PANDORA_RB_PRODUCT_NAME} ]]; then
-	PANDORA_RB_PRODUCT_NAME="Pandora FMS"
-fi
-if [[ -z ${PANDORA_RB_COPYRIGHT_NOTICE} ]]; then
-	PANDORA_RB_COPYRIGHT_NOTICE="Pandora FMS"
-fi
-
-export PANDORA_RB_PRODUCT_NAME=$PANDORA_RB_PRODUCT_NAME
-export PANDORA_RB_COPYRIGHT_NOTICE=$PANDORA_RB_COPYRIGHT_NOTICE
-
-# Uses a wait limit before sending a KILL signal, before trying to stop
-# Pandora FMS Console Websocket engine nicely. Some big systems need some time before close
-# all pending tasks / threads.
-
-export MAXWAIT=60
-
-# Check for SUSE status scripts
-if [ -f /etc/rc.status ]
-then
-	. /etc/rc.status
-	rc_reset
-else
-	# Define part of rc functions for non-suse systems
-	function rc_status () {
-		RETVAL=$?
-		case $1 in
-			-v) RETVAL=0;;
-		esac
-	}
-	function rc_exit () { exit $RETVAL; }
-	function rc_failed () { RETVAL=${1:-1}; }
-	RETVAL=0
-fi
-	
-# This function replace pidof, not working in the same way in different linux distros
-
-function pidof_pandora () {
-	# This sets COLUMNS to XXX chars, because if command is run 
-	# in a "strech" term, ps aux don't report more than COLUMNS
-	# characters and this will not work. 
-	COLUMNS=300
-	PANDORA_PID=`ps aux | grep "$PHP $WS_ENGINE" | grep -v grep | tail -1 | awk '{ print $2 }'`
-	echo $PANDORA_PID
-}
-
-# Main script
-
-if [ ! -x $GOTTY ]
-then
-	echo "Gotty not found in $GOTTY"
-	rc_failed 5 # program is not installed
-	rc_exit
-fi
-
-if [ ! -f $PHP ]
-then
-	echo "$PHP not found, please install version >= 7.0"
-	rc_failed 5 # program is not installed
-	rc_exit
-fi
-
-case "$1" in
-	start)
-		PANDORA_PID=`pidof_pandora`
-		if [ ! -z "$PANDORA_PID" ]
-		then
-			echo "$PANDORA_RB_PRODUCT_NAME Console Websocket engine is currently running on this machine with PID ($PANDORA_PID)."
-			rc_exit # running start on a service already running
-		fi
-
-		export PERL_LWP_SSL_VERIFY_HOSTNAME=0
-		$PHP $WS_ENGINE >> $WS_LOG 2>&1 &
-		sleep 1
-
-		PANDORA_PID=`pidof_pandora`
-		
-		if [ ! -z "$PANDORA_PID" ]
-		then
-			echo "$PANDORA_RB_PRODUCT_NAME Console Websocket engine is now running with PID $PANDORA_PID"
-			rc_status -v
-		else
-			echo "Cannot start $PANDORA_RB_PRODUCT_NAME Console Websocket engine. Aborted."
-			echo "Check $PANDORA_RB_PRODUCT_NAME log files at $WS_LOG"
-			rc_failed 7 # program is not running
-		fi
-	;;
-		
-	stop)
-		PANDORA_PID=`pidof_pandora`
-		if [ -z "$PANDORA_PID" ]
-		then
-			echo "$PANDORA_RB_PRODUCT_NAME Console Websocket engine is not running, cannot stop it."
-			rc_exit # running stop on a service already stopped or not running
-		else
-			echo "Stopping $PANDORA_RB_PRODUCT_NAME Console Websocket engine"
-			kill $PANDORA_PID > /dev/null 2>&1
-			COUNTER=0
-
-			while [ $COUNTER -lt $MAXWAIT ]
-	 		do
- 				_PID=`pidof_pandora`
-				if [ "$_PID" != "$PANDORA_PID" ]
- 				then
-					COUNTER=$MAXWAIT
-				fi
-				COUNTER=`expr $COUNTER + 1`
-				sleep 1
-			done
-		
-			# Send a KILL -9 signal to process, if it's alive after 60secs, we need
-			# to be sure is really dead, and not pretending...
-			if [ "$_PID" = "$PANDORA_PID" ]
-			then
-				kill -9 $PANDORA_PID   > /dev/null 2>&1
-			fi
-			rc_status -v
-		fi
-	;;
-	status)
-		PANDORA_PID=`pidof_pandora`
-		if [ -z "$PANDORA_PID" ]
-		then
-			echo "$PANDORA_RB_PRODUCT_NAME Console Websocket engine is not running."
-			rc_failed 7 # program is not running
-		else
-			echo "$PANDORA_RB_PRODUCT_NAME Console Websocket engine is running with PID $PANDORA_PID."
-			rc_status
-		fi
-	;;
-	force-reload|restart)
-		$0 stop
-		$0 start
-		;;
-	*)
-		echo "Usage: $0 { start | stop | restart | status }"
-		exit 1
-esac
-rc_exit

From da935b65693ca2d4b8421907c421ebd4de7a743e Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Wed, 27 Sep 2023 01:00:22 +0200
Subject: [PATCH 053/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index c2e5cb923b..fbb8dd0e9e 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-230926
+Version: 7.0NG.773.3-230927
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 8fc2bbd9cb..59671d9de9 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230926"
+pandora_version="7.0NG.773.3-230927"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 0afba1df79..5597d3a0d2 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '230926';
+use constant AGENT_BUILD => '230927';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 7fd12f28fd..2d9ebcd93e 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230926
+%define release     230927
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index 249fa36ecb..c9f04a6e4f 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230926
+%define release     230927
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index 9f0024d9e5..25e02b9458 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230926
+%define release     230927
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 15c51e721d..83970e9651 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230926"
+PI_BUILD="230927"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 5fa1172c13..ed5c067325 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{230926}
+{230927}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index f9f3145ba3..54f9b204c8 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 230926")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 230927")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 56d3d19859..8ac7f546d4 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 230926))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 230927))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index 6babfff6ac..b47cee7ca7 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-230926
+Version: 7.0NG.773.3-230927
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 2a6f1f436f..a1fb087198 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230926"
+pandora_version="7.0NG.773.3-230927"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 2a50a37336..d12dd3f52c 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC230926';
+$build_version = 'PC230927';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index 6727ae67c2..60c5bcf2e3 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '230926';
+            $build = '230927';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 1f56c35554..d2be6c2729 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230926
+%define release     230927
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 3ec7cf8b25..a8760d6535 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230926
+%define release     230927
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index 9585f783f9..0fe045f42f 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230926
+%define release     230927
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 2bacb7763a..8c1159fb51 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-230926
+Version: 7.0NG.773.3-230927
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index d3d723cd0a..e14707733c 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230926"
+pandora_version="7.0NG.773.3-230927"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index e378fd1e61..147896cdb3 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230926";
+my $pandora_build = "230927";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index f6f1cc3b34..db08bef3c9 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230926";
+my $pandora_build = "230927";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index f2faa8ffaa..6de6274317 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230926
+%define release     230927
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index ef07546bf1..c2851ba96b 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230926
+%define release     230927
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index e0c3c02662..b72e213cc1 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230926"
+PI_BUILD="230927"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index bf2c4f7c5f..13d1fea493 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230926";
+my $version = "7.0NG.773.3 Build 230927";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index 64d0079bf3..b5fafb3136 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230926";
+my $version = "7.0NG.773.3 Build 230927";
 
 # save program name for logging
 my $progname = basename($0);

From 0b4ee357804b47c116d8bca7460e445011f61e53 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Wed, 27 Sep 2023 11:01:21 +0200
Subject: [PATCH 054/116] Fix query agent events

---
 pandora_console/include/ajax/events.php             | 2 +-
 pandora_console/include/functions_events.php        | 5 +----
 pandora_console/operation/agentes/status_events.php | 2 +-
 3 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/pandora_console/include/ajax/events.php b/pandora_console/include/ajax/events.php
index ddf36ee912..be8b095d25 100644
--- a/pandora_console/include/ajax/events.php
+++ b/pandora_console/include/ajax/events.php
@@ -2000,7 +2000,7 @@ if ($table_events) {
     include_once 'include/functions_graph.php';
 
     $id_agente = (int) get_parameter('id_agente');
-    $all_events_24h = (int) get_parameter('all_events_24h', 1);
+    $all_events_24h = (int) get_parameter('all_events_24h', 0);
 
     // Fix: for tag functionality groups have to be all user_groups
     // (propagate ACL funct!).
diff --git a/pandora_console/include/functions_events.php b/pandora_console/include/functions_events.php
index 32113327b8..64a2f2b84e 100644
--- a/pandora_console/include/functions_events.php
+++ b/pandora_console/include/functions_events.php
@@ -2404,14 +2404,11 @@ function events_print_event_table(
         $filter = '1 = 1';
     }
 
-    $secondary_join = 'LEFT JOIN tagent_secondary_group tasg ON tevento.id_agente = tasg.id_agent';
-
     $sql = sprintf(
         'SELECT DISTINCT tevento.*
-		FROM tevento %s
+		FROM tevento
 		WHERE %s %s
 		ORDER BY utimestamp DESC LIMIT %d',
-        $secondary_join,
         $agent_condition,
         $filter,
         $limit
diff --git a/pandora_console/operation/agentes/status_events.php b/pandora_console/operation/agentes/status_events.php
index 30df1fb897..39b8b9edf0 100755
--- a/pandora_console/operation/agentes/status_events.php
+++ b/pandora_console/operation/agentes/status_events.php
@@ -43,7 +43,7 @@ html_print_div(
 ?>
 <script type="text/javascript">
     $(document).ready(function() {
-        events_table(1);
+        events_table(0);
     });
 
     function events_table(all_events_24h){

From 831ed2570de98793ca73291bfea6c26364a3e013 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 27 Sep 2023 11:35:57 +0200
Subject: [PATCH 055/116] implemented cron in open

---
 .../wizards/DiscoveryTaskList.class.php       |  5 ++--
 .../include/class/ConsoleSupervisor.php       | 26 +++++++++++--------
 pandora_console/include/functions_cron.php    |  1 -
 3 files changed, 17 insertions(+), 15 deletions(-)

diff --git a/pandora_console/godmode/wizards/DiscoveryTaskList.class.php b/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
index 347458ff62..1230661550 100644
--- a/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
+++ b/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
@@ -160,10 +160,9 @@ class DiscoveryTaskList extends HTML
             return $this->enableTask();
         }
 
-        if (enterprise_installed()) {
-            // This check only applies to enterprise users.
-            enterprise_hook('tasklist_checkrunning');
+        enterprise_hook('tasklist_checkrunning');
 
+        if (enterprise_installed()) {
             $ret = $this->showListConsoleTask();
         } else {
             $ret = false;
diff --git a/pandora_console/include/class/ConsoleSupervisor.php b/pandora_console/include/class/ConsoleSupervisor.php
index a434a30e7f..26e3014edc 100644
--- a/pandora_console/include/class/ConsoleSupervisor.php
+++ b/pandora_console/include/class/ConsoleSupervisor.php
@@ -200,9 +200,7 @@ class ConsoleSupervisor
          *  NOTIF.CRON.CONFIGURED
          */
 
-        if (enterprise_installed()) {
-            $this->checkCronRunning();
-        }
+        $this->checkCronRunning();
 
         /*
          * Check if instance is registered.
@@ -2651,14 +2649,20 @@ class ConsoleSupervisor
             if (strtoupper(substr(PHP_OS, 0, 3)) != 'WIN') {
                 $message_conf_cron .= __('Discovery relies on an appropriate cron setup.');
                 $message_conf_cron .= '. '.__('Please, add the following line to your crontab file:');
-                $message_conf_cron .= '<b><pre class=""ui-dialog>* * * * * &lt;user&gt; wget -q -O - --no-check-certificate --load-cookies /tmp/cron-session-cookies --save-cookies /tmp/cron-session-cookies --keep-session-cookies ';
-                $message_conf_cron .= str_replace(
-                    ENTERPRISE_DIR.'/meta/',
-                    '',
-                    ui_get_full_url(false)
-                );
-                $message_conf_cron .= ENTERPRISE_DIR.'/'.EXTENSIONS_DIR;
-                $message_conf_cron .= '/cron/cron.php &gt;&gt; </pre>';
+                if (enterprise_installed()) {
+                    $message_conf_cron .= '<b><pre class=""ui-dialog>* * * * * &lt;user&gt; wget -q -O - --no-check-certificate --load-cookies /tmp/cron-session-cookies --save-cookies /tmp/cron-session-cookies --keep-session-cookies ';
+                    $message_conf_cron .= str_replace(
+                        ENTERPRISE_DIR.'/meta/',
+                        '',
+                        ui_get_full_url(false)
+                    );
+                    $message_conf_cron .= ENTERPRISE_DIR.'/'.EXTENSIONS_DIR;
+                    $message_conf_cron .= '/cron/cron.php &gt;&gt; </pre>';
+                } else {
+                    $message_conf_cron .= '<b><pre class=""ui-dialog>* * * * * &lt;user&gt; wget -q -O - --no-check-certificate --load-cookies /tmp/cron-session-cookies --save-cookies /tmp/cron-session-cookies --keep-session-cookies ';
+                    $message_conf_cron .= ui_get_full_url(false).'cron.php &gt;&gt; </pre>';
+                }
+
                 $message_conf_cron .= $config['homedir'].'/log/cron.log</pre>';
             }
 
diff --git a/pandora_console/include/functions_cron.php b/pandora_console/include/functions_cron.php
index 2eafd8dccb..711ed7f6ba 100644
--- a/pandora_console/include/functions_cron.php
+++ b/pandora_console/include/functions_cron.php
@@ -463,7 +463,6 @@ function cron_list_table()
     );
 
     $defined_tasks = db_get_all_rows_sql($sql);
-
     if (!check_acl($config['id_user'], 0, 'PM')) {
         $read_tasks = [];
         foreach ($defined_tasks as $task) {

From 57a02499829e5d253ad20acb4eee099c62a29526 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 27 Sep 2023 11:38:00 +0200
Subject: [PATCH 056/116] implmented cron in open

---
 .../include/class/DiscoveryConsoleTask.php    | 331 ++++++++++
 .../include/functions_cron_task.php           | 623 ++++++++++++++++++
 2 files changed, 954 insertions(+)
 create mode 100644 pandora_console/include/class/DiscoveryConsoleTask.php
 create mode 100644 pandora_console/include/functions_cron_task.php

diff --git a/pandora_console/include/class/DiscoveryConsoleTask.php b/pandora_console/include/class/DiscoveryConsoleTask.php
new file mode 100644
index 0000000000..f9bd6ed877
--- /dev/null
+++ b/pandora_console/include/class/DiscoveryConsoleTask.php
@@ -0,0 +1,331 @@
+<?php
+/**
+ * Extension to schedule tasks on Pandora FMS Console
+ *
+ * @category   Extensions
+ * @package    Pandora FMS
+ * @subpackage Enterprise
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+if (enterprise_installed() === true) {
+    enterprise_include_once('/include/functions_cron.php');
+} else {
+    include_once $config['homedir'].'/include/functions_cron_task.php';
+}
+
+/**
+ * Base class to run scheduled tasks in cron extension
+ */
+class DiscoveryConsoleTask
+{
+    public const SCHEDULES = [
+        'no',
+        'hourly',
+        'daily',
+        'weekly',
+        'monthly',
+        'yearly',
+        'custom',
+    ];
+
+
+    /**
+     * Retrieve scheduled tasks given filters.
+     *
+     * @param array $filter Tasks filtered.
+     *
+     * @return array List of scheduled tasks.
+     */
+    public function list(array $filter)
+    {
+        $tasks = db_get_all_rows_filter(
+            'tuser_task_scheduled INNER JOIN tuser_task ON tuser_task.id = tuser_task_scheduled.id_user_task',
+            $filter,
+            'tuser_task_scheduled.*'
+        );
+
+        if ($tasks === false) {
+            return [];
+        }
+
+        $tasks = array_map(
+            function ($item) {
+                $item['args'] = unserialize($item['args']);
+                return $item;
+            },
+            $tasks
+        );
+
+        return $tasks;
+    }
+
+
+    /**
+     * Should execute task.
+     *
+     * @param array $task Info task.
+     *
+     * @return boolean
+     */
+    private function shouldTaskRun($task)
+    {
+        global $config;
+
+        if (isset($config['reporting_console_enable']) === true
+            && (bool) $config['reporting_console_enable'] === true
+        ) {
+            $task_info = db_get_row('tuser_task', 'id', $task['id_user_task']);
+
+            if (isset($config['reporting_console_node']) === true
+                && (bool) $config['reporting_console_node'] === true
+            ) {
+                if (($task_info['function_name'] !== 'cron_task_generate_report_by_template'
+                    && $task_info['function_name'] !== 'cron_task_generate_report'
+                    && $task_info['function_name'] !== 'cron_task_save_report_to_disk')
+                ) {
+                    return false;
+                }
+            } else {
+                if (($task_info['function_name'] === 'cron_task_generate_report_by_template'
+                    || $task_info['function_name'] === 'cron_task_generate_report'
+                    || $task_info['function_name'] === 'cron_task_save_report_to_disk')
+                ) {
+                    return false;
+                }
+            }
+        }
+
+        return true;
+    }
+
+
+    /**
+     * Manage scheduled tasks.
+     *
+     * @return void
+     */
+    public function run()
+    {
+        global $config;
+        global $pandora_version;
+
+        // Maintenance tasks for tconsole table.
+        // Must do at every Cron execution.
+        if (isset($config['id_console']) === true && $config['id_console'] > 0) {
+            $console_exists = db_get_row('tconsole', 'id_console', $config['id_console']);
+            if ($console_exists === false) {
+                db_process_sql_insert(
+                    'tconsole',
+                    [
+                        'id_console'   => $config['id_console'],
+                        'description'  => $config['console_description'],
+                        'version'      => $pandora_version,
+                        'console_type' => ($config['reporting_console_node'] === true) ? 1 : 0,
+                        'timezone'     => $config['timezone'],
+                        'public_url'   => $config['public_url'],
+                    ]
+                );
+            } else {
+                db_process_sql_update(
+                    'tconsole',
+                    [
+                        'description'  => $config['console_description'],
+                        'timezone'     => $config['timezone'],
+                        'public_url'   => $config['public_url'],
+                        'console_type' => (int) $config['reporting_console_node'],
+                        'version'      => $pandora_version,
+                    ],
+                    [
+                        'id_console' => $config['id_console'],
+                    ]
+                );
+            }
+        }
+
+        // Maintenance task: schedule task 'cron_task_start_gotty' if not defined yet.
+        // Must do at every Cron execution.
+        $user_function_task_id = db_get_value_sql('SELECT id FROM `tuser_task_scheduled` WHERE `args` LIKE "%cron_task_start_gotty%"');
+
+        if ($user_function_task_id === false) {
+            $this->schedule(
+                'cron_task_call_user_function',
+                [
+                    0               => 'cron_task_start_gotty',
+                    'function_name' => 'cron_task_start_gotty',
+                    'internal'      => 1,
+                ],
+                'daily',
+                0,
+                0,
+                strtotime('tomorrow')
+            );
+        }
+
+        // Maintenance task: check whether start GoTTY SSH and Telnet processes are running and start otherwise.
+        // Must do at every Cron execution.
+        cron_task_start_gotty(false);
+
+        // Do not output anything until is completed. There're session
+        // operations inside cron_task_run function.
+        ob_start();
+
+        if (cron_task_lock() === false) {
+            // Cannot continue. Locked.
+            echo ob_get_clean();
+            exit;
+        }
+
+        $time = get_system_time();
+        $scheduled_tasks = db_get_all_rows_in_table('tuser_task_scheduled');
+        if (!$scheduled_tasks) {
+            $scheduled_tasks = [];
+        }
+
+        /*
+            Watch out! First_execution corresponds to next_execution the name
+            of the bbdd is maintained to ensure integrity.
+        */
+
+        foreach ($scheduled_tasks as $task) {
+            $params = unserialize($task['args']);
+            if ($this->shouldTaskRun($task) === false) {
+                continue;
+            }
+
+            if ($task['scheduled'] == 'no') {
+                if (($params['first_execution']) < $time) {
+                    echo date('Y/m/d H:i:s').' Execute once time cron task: ';
+                    echo $task['id'];
+                    echo "\n\n";
+                    cron_task_run($task['id']);
+                    // The task was not scheduled and was executed once.
+                    db_process_sql_delete(
+                        'tuser_task_scheduled',
+                        ['id' => $task['id']]
+                    );
+                }
+            } else {
+                if (($params['first_execution']) < $time) {
+                    echo date('Y/m/d H:i:s').' EXECUTED CRON TASK: '.$task['id'];
+                    echo "\n";
+                    echo "\n";
+                    cron_task_run($task['id']);
+                }
+            }
+        }
+
+        // Dump to output.
+        echo ob_get_clean();
+
+        // Release the lock.
+        cron_task_release_lock();
+
+    }
+
+
+    /**
+     * Schedules a discovery console task to be executed by cron.
+     *
+     * @param string       $function_name Name of the function:
+     *        cron_task_generate_report
+     *        cron_task_generate_report_by_template
+     *        cron_task_save_report_to_disk
+     *        cron_task_do_backup
+     *        cron_task_execute_custom_script
+     *        cron_task_save_xml_report_to_disk
+     *        cron_task_feedback_send_mail
+     *        cron_task_generate_csv_log.
+     * @param array        $arguments     Task execution arguments (if needed).
+     * @param string       $schedule      Task schedule options:
+     *        'no',
+     *        'hourly',
+     *        'daily',
+     *        'weekly',
+     *        'monthly',
+     *        'yearly',
+     *        'custom'.
+     * @param integer      $group_id      Group id (0 => all).
+     * @param string|null  $id_user       User id, if null, current user.
+     * @param integer|null $time_start    When to start, if null, now.
+     *
+     * @return boolean Sucessfully scheduled or not.
+     */
+    public function schedule(
+        string $function_name,
+        array $arguments=[],
+        string $schedule='no',
+        int $group_id=0,
+        ?string $id_user=null,
+        ?int $time_start=null
+    ) {
+        global $config;
+
+        if ($id_user === null) {
+            $id_user = $config['id_user'];
+        }
+
+        $idUserTask = db_get_value(
+            'id',
+            'tuser_task',
+            'function_name',
+            $function_name
+        );
+
+        if ($idUserTask === false) {
+            // Failed to identify function.
+            return false;
+        }
+
+        if (in_array($schedule, self::SCHEDULES) === false) {
+            // Failed to schedule. Not a valid schedule option.
+            return false;
+        }
+
+        if ($time_start === null) {
+            $time_start = strtotime('now');
+        }
+
+        // Params for send mail with cron.
+        $parameters = array_merge(
+            $arguments,
+            [ 'first_execution' => $time_start ]
+        );
+
+        // Values insert task cron.
+        $task = [
+            'id_usuario'   => $id_user,
+            'id_user_task' => $idUserTask,
+            'args'         => serialize($parameters),
+            'scheduled'    => $schedule,
+            'id_grupo'     => $group_id,
+        ];
+
+        $result = db_process_sql_insert(
+            'tuser_task_scheduled',
+            $task
+        );
+
+        return ($result !== false);
+    }
+
+
+}
diff --git a/pandora_console/include/functions_cron_task.php b/pandora_console/include/functions_cron_task.php
new file mode 100644
index 0000000000..69586a17b6
--- /dev/null
+++ b/pandora_console/include/functions_cron_task.php
@@ -0,0 +1,623 @@
+<?php
+/**
+ * Schedule tasks on Pandora FMS Console
+ *
+ * @category   library
+ * @package    Pandora FMS
+ * @subpackage cron
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+
+/**
+ * Generate a lock system to avoid multiple executions.
+ *
+ * @param string $lockfile Filename to use as lock.
+ *
+ * @return boolean
+ */
+function cron_lock(string $lockfile)
+{
+    global $config;
+
+    if (empty($lockfile) === true) {
+        $lockfile = 'cron.lock';
+    }
+
+    $ignore_lock = 0;
+    // Lock to prevent multiple instances of the cron extension.
+    $lock = $config['attachment_store'].'/'.$lockfile;
+    if (file_exists($lock) === true) {
+        // Lock file exists.
+        $read_PID = file_get_contents($lock);
+        if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
+            // Windows check.
+            $processes = explode("\n", shell_exec('tasklist.exe'));
+            $ignore_lock = 1;
+            foreach ($processes as $process) {
+                if (empty($process) === true
+                    || strpos('===', $process) === 0
+                ) {
+                    continue;
+                }
+
+                $matches = false;
+                preg_match('/(.*?)\s+(\d+).*$/', $process, $matches);
+                $pid = $matches[2];
+
+                if ((int) $pid === (int) $read_PID) {
+                    $ignore_lock = 0;
+                    break;
+                }
+            }
+        } else {
+            // Linux check.
+            if (file_exists('/proc/'.$read_PID) === true) {
+                // Process with a pid = $pid is running.
+                // CRON already running: [$read_PID].
+                $ignore_lock = 0;
+            } else {
+                // CRON process [$read_PID] does not exist.
+                // process not found, ignore $lock.
+                $ignore_lock = 1;
+            }
+        }
+
+        // The lock automatically expires after 24 hours.
+        $lock_mtime = filemtime($lock);
+        if (($ignore_lock === 0 )
+            && ($lock_mtime !== false && $lock_mtime + SECONDS_1DAY > time())
+        ) {
+            // Locked!
+            return false;
+        }
+    }
+
+    // Try to get a lock from DB.
+    $dblock = db_get_lock($config['dbname'].'.'.$lockfile);
+    if ($dblock !== 1) {
+        // Locked!
+        return false;
+    }
+
+    // Store PID in lock file.
+    $PID = getmypid();
+    echo 'CRON running ['.$PID."]\n";
+    file_put_contents($lock, $PID);
+    return true;
+}
+
+
+/**
+ * Check if CRON.task is available to start.
+ *
+ * @return boolean True, available. False not available.
+ */
+function cron_task_lock()
+{
+    return cron_lock('cron.lock');
+}
+
+/**
+ * Release CRON.task lock
+ *
+ * @return void
+ */
+function cron_task_release_lock()
+{
+    global $config;
+
+    // Release DB lock.
+    $dblock = db_release_lock($config['dbname'].'.cron.lock');
+    unlink($config['attachment_store'].'/cron.lock');
+}
+
+/**
+ * Calculates target schedule time
+ *
+ * @param string       $scheduled_time Desired scheduled time.
+ * @param integer      $custom_data    Custom scheduled time.
+ * @param integer|null $timestamp      Custom timestamp.
+ *
+ * @return integer amount of time.
+ */
+function cron_get_scheduled_time(
+    string $scheduled_time,
+    int $custom_data=0,
+    $timestamp=null
+) {
+    if ($scheduled_time == 'no') {
+        return 0;
+    }
+
+    if ($scheduled_time == 'hourly') {
+        return SECONDS_1HOUR;
+    }
+
+    if ($scheduled_time == 'daily') {
+        return SECONDS_1DAY;
+    }
+
+    if ($scheduled_time == 'weekly') {
+        return SECONDS_1WEEK;
+    }
+
+    if ($scheduled_time == 'monthly') {
+        $month = (($timestamp === null) ? date('m') : date('m', $timestamp));
+        $year = (($timestamp === null) ? date('Y') : date('Y', $timestamp));
+
+        $days_month = (cal_days_in_month(
+            CAL_GREGORIAN,
+            $month,
+            $year
+        ) * SECONDS_1DAY);
+
+        return $days_month;
+    }
+
+    if ($scheduled_time == 'yearly') {
+        return SECONDS_1YEAR;
+    }
+
+    if ($scheduled_time == 'custom') {
+        return $custom_data;
+    }
+
+    return 0;
+}
+
+/**
+ * Run scheduled task.
+ *
+ * @param integer $id_user_task Task to be run.
+ * @param boolean $force_run    Force run.
+ *
+ * @return void
+ */
+function cron_task_run(
+    int $id_user_task,
+    bool $force_run=false
+) {
+    global $config;
+
+    if (isset($config['id_console']) === true && $config['id_console'] > 0) {
+        $sql = sprintf(
+            'SELECT *
+            FROM tuser_task_scheduled
+            WHERE id=%d AND id_console IN (0, %d)',
+            $id_user_task,
+            $config['id_console']
+        );
+
+        $task_scheduled = db_get_row_sql($sql);
+
+        if ($task_scheduled !== false) {
+            db_process_sql_update(
+                'tconsole',
+                ['last_execution' => time()],
+                ['id_console' => $config['id_console']]
+            );
+        }
+    } else {
+        $filter = [
+            'id'         => $id_user_task,
+            'id_console' => 0,
+        ];
+
+        $task_scheduled = db_get_row_filter('tuser_task_scheduled', $filter, false);
+    }
+
+    $args = unserialize($task_scheduled['args']);
+
+    if (enterprise_installed() === false
+        && isset($args['function_name']) === true
+        && $args['function_name'] !== 'cron_task_start_gotty'
+    ) {
+        // Only cron_task_start_gotty is allowed to run in non enterprise environments.
+        return;
+    }
+
+    if (enterprise_installed() === true) {
+        $task = db_get_row('tuser_task', 'id', $task_scheduled['id_user_task']);
+    } else {
+        $task = [
+            'name'          => 'Call PHP function',
+            'function_name' => 'cron_task_call_user_function',
+        ];
+    }
+
+    // Register shutdown function in case of fatal error, like.
+    register_shutdown_function('cron_task_handle_error', $task_scheduled, $task, $force_run);
+
+    if (is_metaconsole() && !defined('METACONSOLE')) {
+        define('METACONSOLE', 1);
+    }
+
+    if (! function_exists($task['function_name'])) {
+        return;
+    }
+
+    // If the task is disable, not run.
+    if ((bool) $task_scheduled['enabled'] === false) {
+        return;
+    }
+
+    if (session_status() === PHP_SESSION_DISABLED) {
+        return;
+    }
+
+    $old_user = '';
+    if (isset($config['id_user']) === false) {
+        $config['id_user'] = $task_scheduled['id_usuario'];
+    }
+
+    $old_user = $config['id_user'];
+
+    $old_session_id = session_id();
+    $new_session_id = 'cron-'.uniqid();
+
+    // Simulate user login.
+    session_id($new_session_id);
+    session_start();
+    $_SESSION['id_usuario'] = $config['id_user'];
+    session_write_close();
+
+    set_time_limit(0);
+
+    
+    if ($task['function_name'] == 'cron_task_generate_report_by_template'
+        || $task['function_name'] == 'cron_task_generate_report'
+    ) {
+        // If empty agent position, add it.
+        if (!isset($args[1])) {
+            array_splice($args, 1, 0, '');
+        }
+
+        $args[] = $task_scheduled['scheduled'];
+    }
+
+    call_user_func_array(
+        $task['function_name'],
+        array_merge(array_values(($args ?? [])), [$id_user_task])
+    );
+
+    if (session_status() === PHP_SESSION_ACTIVE) {
+        @session_destroy();
+    }
+
+    session_id($old_session_id);
+    session_start();
+
+    $config['id_user'] = $old_user;
+    $sql = '';
+    $sql2 = '';
+
+    if (!$force_run) {
+        $period = cron_get_scheduled_time(
+            $task_scheduled['scheduled'],
+            $task_scheduled['custom_data']
+        );
+        $old_args = unserialize($task_scheduled['args']);
+        if ($period > 3600) {
+            $array_explode = explode(
+                ':',
+                date('H:i', $old_args['first_execution'])
+            );
+            $hora_en_segundos = (($array_explode[0] * 3600 ) + ($array_explode[1] * 60));
+
+            $array_explode_period = explode(
+                ':',
+                date('H:i', ($old_args['first_execution'] + $period))
+            );
+            $hora_en_segundos2 = (($array_explode_period[0] * 3600 ) + ($array_explode_period[1] * 60));
+
+            if ($hora_en_segundos !== $hora_en_segundos2) {
+                $period = ($period + ($hora_en_segundos - $hora_en_segundos2));
+            }
+        }
+
+        try {
+            /*
+                Calculate the number of periods between last execution and
+                current time.
+            */
+
+            $num_of_periods = 0;
+            if ($period !== 0) {
+                $num_of_periods = ceil(
+                    (time() - $old_args['first_execution']) / $period
+                );
+            }
+
+            if ($task_scheduled['scheduled'] == 'monthly') {
+                $updated_time = $old_args['first_execution'];
+
+                // Update updated_time adding the period for each month individually since it is a variable value depending on the number of days a month has.
+                while ($num_of_periods > 0) {
+                    // Get days of current month.
+                    $monthly_period = cron_get_scheduled_time(
+                        'monthly',
+                        $task_scheduled['custom_data'],
+                        $updated_time
+                    );
+                    $updated_time += $monthly_period;
+                    $num_of_periods--;
+                }
+
+                $old_args['first_execution'] = $updated_time;
+            } else if ($task_scheduled['scheduled'] == 'weekly') {
+                $weekly_schedule = json_decode(io_safe_output($old_args['weekly_schedule']), true);
+                if (empty($weekly_schedule) !== true) {
+                    $datetime = new DateTime('tomorrow');
+                    $nameday = strtolower($datetime->format('l'));
+                    $continue = true;
+                    while ($continue === true) {
+                        if (isset($weekly_schedule[$nameday]) === true) {
+                            $weekly_date = $datetime->format('Y-m-d');
+                            $weekly_time = $weekly_schedule[$nameday][0]['start'];
+                            $old_args['first_execution'] = strtotime($weekly_date.' '.$weekly_time);
+
+                            $continue = false;
+                        } else {
+                            $datetime->modify('+1 day');
+                            $nameday = strtolower($datetime->format('l'));
+                        }
+                    }
+                }
+            } else {
+                // Add it to next execution.
+                $old_args['first_execution'] += ($period * $num_of_periods);
+            }
+        } catch (Exception $e) {
+            // If some error (ex $period=0) next execution=current time+period.
+            $old_args['first_execution'] = (time() + $period);
+        }
+
+        $new_args = serialize($old_args);
+    }
+
+    if ($config['timesource'] == 'sql') {
+        $sql = sprintf(
+            'UPDATE tuser_task_scheduled
+            SET last_run=UNIX_TIMESTAMP()
+            WHERE id=%d',
+            $id_user_task
+        );
+    } else {
+        $sql = sprintf(
+            'UPDATE tuser_task_scheduled
+						SET last_run= %d
+						WHERE id=%d',
+            time(),
+            $id_user_task
+        );
+    }
+
+    if (!$force_run) {
+        $sql2 = "UPDATE tuser_task_scheduled
+			SET args = '".$new_args."'
+			WHERE id=".$id_user_task;
+    }
+
+    db_process_sql($sql);
+    db_process_sql($sql2);
+}
+
+
+/**
+ * Execuytes custom function defined in PHP.
+ *
+ * @param string $function_name Name to execute.
+ *
+ * @return void
+ */
+function cron_task_call_user_function(string $function_name)
+{
+    global $config;
+    include_once $config['homedir'].'/vendor/autoload.php';
+
+    call_user_func($function_name);
+}
+
+
+/**
+ * Check whether GoTTY SSH and Telnet processes are running and start otherwise.
+ *
+ * @param boolean $restart_mode Restart the processes if running.
+ *
+ * @return void
+ */
+function cron_task_start_gotty(bool $restart_mode=true)
+{
+    global $config;
+
+    if (empty($config['gotty_ssh_addr']) === true
+        && empty($config['gotty_telnet_addr']) === true
+    ) {
+        return;
+    }
+
+    include_once $config['homedir'].'/include/functions_config.php';
+
+    // Check prev SSH process running and kill it.
+    if (empty($config['restart_gotty_ssh_next_cron_port']) === false) {
+        config_update_value('restart_gotty_ssh_next_cron_port', '');
+
+        $prevProcessRunningSSH = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['restart_gotty_ssh_next_cron_port']."'");
+
+        if (!empty($prevProcessRunningSSH)) {
+            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['restart_gotty_ssh_next_cron_port']."'");
+        }
+    }
+
+    // Check if prev Telnet process running and kill it.
+    if (empty($config['restart_gotty_telnet_next_cron_port']) === false) {
+        config_update_value('restart_gotty_telnet_next_cron_port', '');
+
+        $prevProcessRunningTelnet = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['restart_gotty_telnet_next_cron_port']."'");
+
+        if (!empty($prevProcessRunningTelnet)) {
+            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['restart_gotty_telnet_next_cron_port']."'");
+        }
+    }
+
+    // Check if pandora_gotty is running on the configured port.
+    $processRunningSSH = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['gotty_ssh_port']."'");
+    $processRunningTelnet = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['gotty_telnet_port']."'");
+
+    $start_ssh_proc = true;
+    $start_telnet_proc = true;
+
+    if (empty($config['gotty_ssh_addr']) === true) {
+        $start_ssh_proc = false;
+    }
+
+    if (empty($config['gotty_telnet_addr']) === true) {
+        $start_telnet_proc = false;
+    }
+
+    if (!empty($processRunningSSH)) {
+        // Process is running.
+        if ($restart_mode === true || $start_ssh_proc === false) {
+            // Stop the process for restarting.
+            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['gotty_ssh_port']."'");
+        } else {
+            // Prevent starting if already running and must not be restarted.
+            $start_ssh_proc = false;
+        }
+    }
+
+    if (!empty($processRunningTelnet)) {
+        // Process is running.
+        if ($restart_mode === true
+            || empty($config['restart_gotty_telnet_next_cron_port']) === false
+            || $start_telnet_proc === false
+        ) {
+            // Restart GoTTY if it is intended to be restarted specifically, port has changed, or address was changed to an empty value.
+            if (empty($config['restart_gotty_telnet_next_cron_port']) === false) {
+                $telnet_port_kill = $config['restart_gotty_telnet_next_cron_port'];
+                config_update_value('restart_gotty_telnet_next_cron_port', '');
+            } else {
+                $telnet_port_kill = $config['gotty_telnet_port'];
+            }
+
+            // Stop the process for restarting.
+            shell_exec("pkill -f 'pandora_gotty.*-p ".$telnet_port_kill."'");
+        } else {
+            // Prevent starting if already running and must not be restarted.
+            $start_telnet_proc = false;
+        }
+    }
+
+    if ($start_ssh_proc === false && $start_telnet_proc === false) {
+        // Nothing to do.
+        return;
+    }
+
+    if ($start_ssh_proc === true) {
+        $logFilePathSSH = $config['homedir'].'/log/gotty_ssh_cron_tmp.log';
+        shell_exec('touch '.$logFilePathSSH);
+
+        // Start pandora_gotty and capture the output.
+        $command_ssh = '/usr/bin/nohup /usr/bin/pandora_gotty --config /etc/pandora_gotty/pandora_gotty.conf -p '.$config['gotty_ssh_port'].' ssh > '.$logFilePathSSH.' 2>&1 &';
+        shell_exec($command_ssh);
+    }
+
+    if ($start_telnet_proc === true) {
+        $logFilePathTelnet = $config['homedir'].'/log/gotty_telnet_cron_tmp.log';
+        shell_exec('touch '.$logFilePathTelnet);
+
+        // Start pandora_gotty and capture the output.
+        $command_telnet = '/usr/bin/nohup /usr/bin/pandora_gotty --config /etc/pandora_gotty/pandora_gotty.conf -p '.$config['gotty_telnet_port'].' telnet > '.$logFilePathTelnet.' 2>&1 &';
+        shell_exec($command_telnet);
+    }
+
+    $ssh_hash_read = false;
+    $telnet_hash_read = false;
+
+    // Maximum wait time (seconds).
+    $maxWaitTime = 2;
+
+    // Wait for content to appear in the log file.
+    $startTime = time();
+
+    // Workaround to wait until process inputs data in the log.
+    while (time() - $startTime < $maxWaitTime) {
+        if ($start_ssh_proc === true) {
+            // Read command output.
+            $log_content_ssh = file_get_contents($logFilePathSSH);
+        }
+
+        if ($start_ssh_proc === true
+            && !empty($log_content_ssh)
+            && $ssh_hash_read === false
+        ) {
+            // Extract the URL from the output.
+            if (preg_match('/.*?HTTP server is listening at:\s+(\S+)/', $log_content_ssh, $matches)) {
+                $url = $matches[1];
+
+                // Extract the hash.
+                $parts = explode('/', $url);
+                $hash = array_slice($parts, -2, 1)[0];
+
+                config_update_value('gotty_ssh_connection_hash', $hash);
+            }
+
+            unlink($logFilePathSSH);
+
+            $ssh_hash_read = true;
+        }
+
+        if ($start_telnet_proc === true) {
+            // Read command output.
+            $log_content_telnet = file_get_contents($logFilePathTelnet);
+        }
+
+        if ($start_telnet_proc === true
+            && !empty($log_content_telnet)
+            && $telnet_hash_read === false
+        ) {
+            // Extract the URL from the output.
+            if (preg_match('/.*?HTTP server is listening at:\s+(\S+)/', $log_content_telnet, $matches)) {
+                $url = $matches[1];
+
+                // Extract the hash.
+                $parts = explode('/', $url);
+                $hash = array_slice($parts, -2, 1)[0];
+
+                config_update_value('gotty_telnet_connection_hash', $hash);
+            }
+
+            unlink($logFilePathTelnet);
+
+            $telnet_hash_read = true;
+        }
+
+        if (($start_ssh_proc === false || $ssh_hash_read === true)
+            && ($start_telnet_proc === false || $telnet_hash_read === true)
+        ) {
+            break;
+        }
+
+        // Sleep for a short interval before checking again.
+        usleep(100000);
+    }
+}

From f5be4cf17c4ad15fefb7039e5e9755acc6d4f8e5 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 27 Sep 2023 11:42:21 +0200
Subject: [PATCH 057/116] implemented cron in open

---
 pandora_console/cron.php | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)
 create mode 100644 pandora_console/cron.php

diff --git a/pandora_console/cron.php b/pandora_console/cron.php
new file mode 100644
index 0000000000..80d9485cce
--- /dev/null
+++ b/pandora_console/cron.php
@@ -0,0 +1,31 @@
+<?php
+
+require_once 'include/config.php';
+require_once 'include/auth/mysql.php';
+require_once 'include/functions.php';
+require_once 'include/functions_db.php';
+
+if (enterprise_installed() === true) {
+    return;
+}
+hd("ENTRA EN CRON OPEN", true);
+// Load classes.
+require_once 'include/class/DiscoveryConsoleTask.php';
+require_once 'include/class/ConsoleSupervisor.php';
+
+global $config;
+
+db_process_sql_update(
+    'tconfig',
+    ['value' => get_system_time()],
+    ['token' => 'cron_last_run']
+);
+
+$tasks = new DiscoveryConsoleTask();
+
+$tasks->run();
+
+if (is_reporting_console_node() === true) {
+    $supervisor = new ConsoleSupervisor();
+    $supervisor->run();
+}
\ No newline at end of file

From 00c48c1c7d793edf20ba646b4a54b1300bc62738 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 27 Sep 2023 11:44:26 +0200
Subject: [PATCH 058/116] implemented cron in open

---
 pandora_console/cron.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pandora_console/cron.php b/pandora_console/cron.php
index 80d9485cce..c6a3439403 100644
--- a/pandora_console/cron.php
+++ b/pandora_console/cron.php
@@ -8,7 +8,7 @@ require_once 'include/functions_db.php';
 if (enterprise_installed() === true) {
     return;
 }
-hd("ENTRA EN CRON OPEN", true);
+
 // Load classes.
 require_once 'include/class/DiscoveryConsoleTask.php';
 require_once 'include/class/ConsoleSupervisor.php';

From 5b52fc2385cb6222e01f38878d9a1c9d516b986e Mon Sep 17 00:00:00 2001
From: Ramon Novoa <ramon.novoa@pandorafms.com>
Date: Tue, 26 Sep 2023 16:46:39 +0200
Subject: [PATCH 059/116] Add support for critical_on_error.

The critical_on_error option adds improved error detection capabilities
to the Pandora FMS Enterprise ICMP Server (and maybe other servers in
the future).
---
 pandora_server/conf/pandora_server.conf.new   | 3 +++
 pandora_server/lib/PandoraFMS/Config.pm       | 4 ++++
 pandora_server/lib/PandoraFMS/PluginServer.pm | 1 +
 3 files changed, 8 insertions(+)

diff --git a/pandora_server/conf/pandora_server.conf.new b/pandora_server/conf/pandora_server.conf.new
index 816fcc4244..7aba09011f 100644
--- a/pandora_server/conf/pandora_server.conf.new
+++ b/pandora_server/conf/pandora_server.conf.new
@@ -220,6 +220,9 @@ icmp_checks 1
 # Number of ICMP packets to send per request.
 icmp_packets 2
 
+# If set to 1 (the default), when the executions of certain checks fail (not the checks themselves) the modules go to critical. If set to 0, they will end up going to unknown.
+critical_on_error 1
+
 # tcp specific options :
 # tcp_checks: number of tcp retries if first attempt fails.
 # tcp_timeout: specific timeout for tcp connections
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index e378fd1e61..32bf401eba 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -265,6 +265,7 @@ sub pandora_load_config {
 	$pa_config->{"keepalive_orig"} = $pa_config->{"keepalive"};
 	$pa_config->{"icmp_checks"} = 1; # Introduced on 1.3.1
 	$pa_config->{"icmp_packets"} = 1; # > 5.1SP2
+	$pa_config->{"critical_on_error"} = 1; # > 7.0.774
 	$pa_config->{"alert_recovery"} = 0; # Introduced on 1.3.1
 	$pa_config->{"snmp_checks"} = 1; # Introduced on 1.3.1
 	$pa_config->{"snmp_timeout"} = 8; # Introduced on 1.3.1
@@ -830,6 +831,9 @@ sub pandora_load_config {
 		elsif ($parametro =~ m/^icmp_packets\s+([0-9]*)/i) {
 			$pa_config->{"icmp_packets"} = clean_blank($1); 
 		}
+		elsif ($parametro =~ m/^critical_on_error\s+([0-1])/i) {
+			$pa_config->{"critical_on_error"} = clean_blank($1); 
+		}
 		elsif ($parametro =~ m/^snmpconsole\s+([0-9]*)/i) {
 			$pa_config->{"snmpconsole"} = clean_blank($1);
 		}
diff --git a/pandora_server/lib/PandoraFMS/PluginServer.pm b/pandora_server/lib/PandoraFMS/PluginServer.pm
index 370cd2c2b9..9751372d04 100644
--- a/pandora_server/lib/PandoraFMS/PluginServer.pm
+++ b/pandora_server/lib/PandoraFMS/PluginServer.pm
@@ -272,6 +272,7 @@ sub data_consumer ($$) {
 		$module_data = `$command`;
 		if ($? < 0) {
 			logger($pa_config, "Error executing command from module # $module_id. Probably out of memory.", 10);
+			pandora_timed_event(300, $pa_config, "Cannot process monitoring data. plug-in module \#$module_id failed to execute on server " . $pa_config->{'servername'}, 0, 0, 6, 0, 0, 'system', 0, $dbh);
 		}
 	};
 

From 85658af2ca64f5c18c04c6576c7b4a0bf1fb3af3 Mon Sep 17 00:00:00 2001
From: Enrique Martin <enrique.martin@pandorafms.com>
Date: Wed, 27 Sep 2023 12:57:35 +0200
Subject: [PATCH 060/116] Added windows restart service update

---
 pandora_agents/pc/Win32/scripts/install_service_restart.bat      | 1 +
 .../win32/installer/scripts/install_service_restart.bat          | 1 +
 2 files changed, 2 insertions(+)

diff --git a/pandora_agents/pc/Win32/scripts/install_service_restart.bat b/pandora_agents/pc/Win32/scripts/install_service_restart.bat
index 78d2b5e2cd..de06c2178a 100644
--- a/pandora_agents/pc/Win32/scripts/install_service_restart.bat
+++ b/pandora_agents/pc/Win32/scripts/install_service_restart.bat
@@ -1,2 +1,3 @@
 @at 00:00 /every:1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 "%CD%\restart_pandora_agent.bat"
 
+schtasks /change /tn pandora_agent_restart /tr "%CD%\restart_pandora_agent.bat"
\ No newline at end of file
diff --git a/pandora_agents/win32/installer/scripts/install_service_restart.bat b/pandora_agents/win32/installer/scripts/install_service_restart.bat
index 78d2b5e2cd..de06c2178a 100644
--- a/pandora_agents/win32/installer/scripts/install_service_restart.bat
+++ b/pandora_agents/win32/installer/scripts/install_service_restart.bat
@@ -1,2 +1,3 @@
 @at 00:00 /every:1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 "%CD%\restart_pandora_agent.bat"
 
+schtasks /change /tn pandora_agent_restart /tr "%CD%\restart_pandora_agent.bat"
\ No newline at end of file

From 83dacdbe45226e5f0b851902d44646626cfda731 Mon Sep 17 00:00:00 2001
From: Enrique Martin <enrique.martin@pandorafms.com>
Date: Wed, 27 Sep 2023 15:02:16 +0200
Subject: [PATCH 061/116] Added windows restart service update

---
 pandora_agents/pc/Win32/scripts/install_service_restart.bat   | 4 ++--
 .../win32/installer/scripts/install_service_restart.bat       | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/pandora_agents/pc/Win32/scripts/install_service_restart.bat b/pandora_agents/pc/Win32/scripts/install_service_restart.bat
index de06c2178a..a3cd46191e 100644
--- a/pandora_agents/pc/Win32/scripts/install_service_restart.bat
+++ b/pandora_agents/pc/Win32/scripts/install_service_restart.bat
@@ -1,3 +1,3 @@
-@at 00:00 /every:1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 "%CD%\restart_pandora_agent.bat"
+@at 00:00 /every:1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 "'%CD%\restart_pandora_agent.bat'"
 
-schtasks /change /tn pandora_agent_restart /tr "%CD%\restart_pandora_agent.bat"
\ No newline at end of file
+schtasks /change /tn pandora_agent_restart /tr "'%CD%\restart_pandora_agent.bat'"
\ No newline at end of file
diff --git a/pandora_agents/win32/installer/scripts/install_service_restart.bat b/pandora_agents/win32/installer/scripts/install_service_restart.bat
index de06c2178a..a3cd46191e 100644
--- a/pandora_agents/win32/installer/scripts/install_service_restart.bat
+++ b/pandora_agents/win32/installer/scripts/install_service_restart.bat
@@ -1,3 +1,3 @@
-@at 00:00 /every:1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 "%CD%\restart_pandora_agent.bat"
+@at 00:00 /every:1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 "'%CD%\restart_pandora_agent.bat'"
 
-schtasks /change /tn pandora_agent_restart /tr "%CD%\restart_pandora_agent.bat"
\ No newline at end of file
+schtasks /change /tn pandora_agent_restart /tr "'%CD%\restart_pandora_agent.bat'"
\ No newline at end of file

From 3f2caf94044cc3b835a30f4c98041e40bdde8a0e Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 27 Sep 2023 18:28:12 +0200
Subject: [PATCH 062/116] some gotty changes

---
 pandora_console/cron.php                      |   8 +-
 pandora_console/godmode/menu.php              |   4 +-
 pandora_console/godmode/setup/setup.php       |  12 +-
 .../godmode/setup/setup_quickshell.php        |  53 ++++++++
 .../godmode/setup/setup_websocket_engine.php  | 121 ------------------
 .../include/class/ConsoleSupervisor.php       |   4 +-
 .../include/class/DiscoveryConsoleTask.php    |   9 +-
 pandora_console/include/functions_config.php  |  14 --
 .../include/functions_cron_task.php           |   6 +-
 9 files changed, 77 insertions(+), 154 deletions(-)
 create mode 100644 pandora_console/godmode/setup/setup_quickshell.php
 delete mode 100644 pandora_console/godmode/setup/setup_websocket_engine.php

diff --git a/pandora_console/cron.php b/pandora_console/cron.php
index c6a3439403..0811a9ef40 100644
--- a/pandora_console/cron.php
+++ b/pandora_console/cron.php
@@ -5,7 +5,9 @@ require_once 'include/auth/mysql.php';
 require_once 'include/functions.php';
 require_once 'include/functions_db.php';
 
-if (enterprise_installed() === true) {
+global $config;
+
+if ((bool) $config['enterprise_installed'] === true) {
     return;
 }
 
@@ -13,8 +15,6 @@ if (enterprise_installed() === true) {
 require_once 'include/class/DiscoveryConsoleTask.php';
 require_once 'include/class/ConsoleSupervisor.php';
 
-global $config;
-
 db_process_sql_update(
     'tconfig',
     ['value' => get_system_time()],
@@ -28,4 +28,4 @@ $tasks->run();
 if (is_reporting_console_node() === true) {
     $supervisor = new ConsoleSupervisor();
     $supervisor->run();
-}
\ No newline at end of file
+}
diff --git a/pandora_console/godmode/menu.php b/pandora_console/godmode/menu.php
index da06372b8a..b6f7b1a3b7 100644
--- a/pandora_console/godmode/menu.php
+++ b/pandora_console/godmode/menu.php
@@ -485,8 +485,8 @@ if ($access_console_node === true) {
         $sub2['godmode/setup/setup&section=notifications']['text'] = __('Notifications');
         $sub2['godmode/setup/setup&section=notifications']['refr'] = 0;
 
-        $sub2['godmode/setup/setup&section=websocket_engine']['text'] = __('QuickShell');
-        $sub2['godmode/setup/setup&section=websocket_engine']['refr'] = 0;
+        $sub2['godmode/setup/setup&section=quickshell']['text'] = __('QuickShell');
+        $sub2['godmode/setup/setup&section=quickshell']['refr'] = 0;
 
         $sub2['godmode/setup/setup&section=external_tools']['text'] = __('External Tools');
         $sub2['godmode/setup/setup&section=external_tools']['refr'] = 0;
diff --git a/pandora_console/godmode/setup/setup.php b/pandora_console/godmode/setup/setup.php
index c1cf635d28..18a9b1db78 100644
--- a/pandora_console/godmode/setup/setup.php
+++ b/pandora_console/godmode/setup/setup.php
@@ -221,9 +221,9 @@ $buttons['notifications'] = [
     ).'</a>',
 ];
 
-$buttons['websocket_engine'] = [
+$buttons['quickshell'] = [
     'active' => false,
-    'text'   => '<a href="'.ui_get_full_url('index.php?sec=gsetup&sec2=godmode/setup/setup&section=websocket_engine').'">'.html_print_image(
+    'text'   => '<a href="'.ui_get_full_url('index.php?sec=gsetup&sec2=godmode/setup/setup&section=quickshell').'">'.html_print_image(
         'images/websocket_small.png',
         true,
         [
@@ -325,8 +325,8 @@ switch ($section) {
         $subpage = __('Notifications');
     break;
 
-    case 'websocket_engine':
-        $buttons['websocket_engine']['active'] = true;
+    case 'quickshell':
+        $buttons['quickshell']['active'] = true;
         $subpage = __('QuickShell');
         $help_header = 'quickshell_settings';
     break;
@@ -454,8 +454,8 @@ switch ($section) {
         include_once $config['homedir'].'/godmode/setup/setup_notifications.php';
     break;
 
-    case 'websocket_engine':
-        include_once $config['homedir'].'/godmode/setup/setup_websocket_engine.php';
+    case 'quickshell':
+        include_once $config['homedir'].'/godmode/setup/setup_quickshell.php';
     break;
 
     case 'external_tools':
diff --git a/pandora_console/godmode/setup/setup_quickshell.php b/pandora_console/godmode/setup/setup_quickshell.php
new file mode 100644
index 0000000000..84b3fad1d0
--- /dev/null
+++ b/pandora_console/godmode/setup/setup_quickshell.php
@@ -0,0 +1,53 @@
+<?php
+/**
+ * Settings for Pandora Websocket engine.
+ *
+ * @category   UI file
+ * @package    Pandora FMS
+ * @subpackage Community
+ * @version    1.0.0
+ * @license    See below
+ *
+ *    ______                 ___                    _______ _______ ________
+ * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
+ * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
+ * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
+ *
+ * ============================================================================
+ * Copyright (c) 2005-2023 Pandora FMS
+ * Please see https://pandorafms.com/community/ for full contribution list
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation for version 2.
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * ============================================================================
+ */
+
+global $config;
+
+$url = ui_get_full_url(
+    'index.php?sec=gsetup&sec2=godmode/setup/setup&amp;section=quickshell&amp;pure='.$config['pure']
+);
+
+echo '<form class="max_floating_element_size" id="form_setup" method="post" action="'.$url.'">';
+
+if (function_exists('quickShellSettings') === true) {
+    quickShellSettings();
+}
+
+$action_btns = html_print_submit_button(
+    __('Update'),
+    'update_button',
+    false,
+    [ 'icon' => 'update' ],
+    true
+);
+
+html_print_action_buttons(
+    $action_btns
+);
+
+echo '</form>';
diff --git a/pandora_console/godmode/setup/setup_websocket_engine.php b/pandora_console/godmode/setup/setup_websocket_engine.php
deleted file mode 100644
index bed6a01ee9..0000000000
--- a/pandora_console/godmode/setup/setup_websocket_engine.php
+++ /dev/null
@@ -1,121 +0,0 @@
-<?php
-/**
- * Settings for Pandora Websocket engine.
- *
- * @category   UI file
- * @package    Pandora FMS
- * @subpackage Community
- * @version    1.0.0
- * @license    See below
- *
- *    ______                 ___                    _______ _______ ________
- * |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
- * |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
- * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
- *
- * ============================================================================
- * Copyright (c) 2005-2023 Pandora FMS
- * Please see https://pandorafms.com/community/ for full contribution list
- * This program is free software; you can redistribute it and/or
- * modify it under the terms of the GNU General Public License
- * as published by the Free Software Foundation for version 2.
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- * ============================================================================
- */
-
-global $config;
-
-$url = ui_get_full_url(
-    'index.php?sec=gsetup&sec2=godmode/setup/setup&amp;section=websocket_engine&amp;pure='.$config['pure']
-);
-
-echo '<form class="max_floating_element_size" id="form_setup" method="post" action="'.$url.'">';
-
-if (function_exists('quickShellSettings') === true) {
-    quickShellSettings();
-}
-
-$action_btns = html_print_submit_button(
-    __('Update'),
-    'update_button',
-    false,
-    [ 'icon' => 'update' ],
-    true
-);
-
-html_print_action_buttons(
-    $action_btns
-);
-
-echo '</form>';
-
-echo '<script>';
-echo 'var server_addr = "'.$_SERVER['SERVER_ADDR'].'";';
-$handle_test_js = "var handleTest = function (event) {
-    
-    var ws_proxy_url = $('input#text-ws_proxy_url').val();
-    var ws_port = $('input#text-ws_port').val();
-    var httpsEnabled = window.location.protocol == 'https' ? true : false;
-    if (ws_proxy_url == '') {
-        ws_url = (httpsEnabled ? 'wss://' : 'ws://')  + window.location.host + ':' + ws_port;    
-    } else {
-        ws_url = ws_proxy_url;
-    }
-
-    var showLoadingImage = function () {
-        $('#button-test-gotty').children('div').attr('class', 'subIcon cog rotation secondary mini');
-    }
-
-    var showSuccessImage = function () {
-        $('#button-test-gotty').children('div').attr('class', 'subIcon tick secondary mini');
-    }
-
-    var showFailureImage = function () {
-        $('#button-test-gotty').children('div').attr('class', 'subIcon fail secondary mini');
-    }
-
-    var hideMessage = function () {
-        $('span#test-gotty-message').hide();
-    }
-    var showMessage = function () {
-        $('span#test-gotty-message').show();
-    }
-    var changeTestMessage = function (message) {
-        $('span#test-gotty-message').text(message);
-    }
-
-    var errorMessage = '".__('WebService engine has not been started, please check documentation.')."';
-
-
-    hideMessage();
-    showLoadingImage();
-    
-    var ws = new WebSocket(ws_url);
-    // Catch errors.
-
-    ws.onerror = () => {
-        showFailureImage();
-        changeTestMessage(errorMessage);
-        showMessage();
-        ws.close();
-    };
-      
-    ws.onopen = () => {
-        showSuccessImage();
-        hideMessage();   
-        ws.close();
-    };
-
-    ws.onclose = (event) => {
-        changeTestMessage(errorMessage);
-        hideLoadingImage();
-        showMessage();
-    };
-}";
-
-echo $handle_test_js;
-echo '</script>';
-
diff --git a/pandora_console/include/class/ConsoleSupervisor.php b/pandora_console/include/class/ConsoleSupervisor.php
index 26e3014edc..b4320b1a4d 100644
--- a/pandora_console/include/class/ConsoleSupervisor.php
+++ b/pandora_console/include/class/ConsoleSupervisor.php
@@ -499,9 +499,7 @@ class ConsoleSupervisor
          *  NOTIF.CRON.CONFIGURED
          */
 
-        if (enterprise_installed()) {
-            $this->checkCronRunning();
-        }
+        $this->checkCronRunning();
 
         /*
          * Check if instance is registered.
diff --git a/pandora_console/include/class/DiscoveryConsoleTask.php b/pandora_console/include/class/DiscoveryConsoleTask.php
index f9bd6ed877..129bc93435 100644
--- a/pandora_console/include/class/DiscoveryConsoleTask.php
+++ b/pandora_console/include/class/DiscoveryConsoleTask.php
@@ -26,7 +26,7 @@
  * ============================================================================
  */
 
-if (enterprise_installed() === true) {
+if ((bool) $config['enterprise_installed'] === true) {
     enterprise_include_once('/include/functions_cron.php');
 } else {
     include_once $config['homedir'].'/include/functions_cron_task.php';
@@ -163,6 +163,13 @@ class DiscoveryConsoleTask
 
         // Maintenance task: schedule task 'cron_task_start_gotty' if not defined yet.
         // Must do at every Cron execution.
+        if ((bool) $config['enterprise_installed'] === false) {
+            $call_func_user_task_id = db_get_value_sql('SELECT id FROM `tuser_task` WHERE `function_name` = "cron_task_call_user_function"');
+            if ($call_func_user_task_id === false) {
+                db_process_sql("INSERT INTO `tuser_task` (`function_name`, `parameters`, `name`) VALUES ('cron_task_call_user_function','a:1:{i:0;a:2:{s:11:\"description\";s:13:\"Function name\";s:4:\"type\";s:4:\"text\";}}','Call PHP function')");
+            }
+        }
+
         $user_function_task_id = db_get_value_sql('SELECT id FROM `tuser_task_scheduled` WHERE `args` LIKE "%cron_task_start_gotty%"');
 
         if ($user_function_task_id === false) {
diff --git a/pandora_console/include/functions_config.php b/pandora_console/include/functions_config.php
index 393c6a2610..3be80ad923 100644
--- a/pandora_console/include/functions_config.php
+++ b/pandora_console/include/functions_config.php
@@ -2030,20 +2030,6 @@ function config_update_config()
                     }
                 break;
 
-                case 'websocket_engine':
-                    if (config_update_value('ws_bind_address', get_parameter('ws_bind_address'), true) === false) {
-                        $error_update[] = __('WebSocket bind address');
-                    }
-
-                    if (config_update_value('ws_port', get_parameter('ws_port'), true) === false) {
-                        $error_update[] = __('WebSocket port');
-                    }
-
-                    if (config_update_value('ws_proxy_url', get_parameter('ws_proxy_url'), true) === false) {
-                        $error_update[] = __('WebSocket proxy url');
-                    }
-                break;
-
                 default:
                     // Ignore.
                 break;
diff --git a/pandora_console/include/functions_cron_task.php b/pandora_console/include/functions_cron_task.php
index 69586a17b6..0cc9cb08cd 100644
--- a/pandora_console/include/functions_cron_task.php
+++ b/pandora_console/include/functions_cron_task.php
@@ -227,7 +227,7 @@ function cron_task_run(
 
     $args = unserialize($task_scheduled['args']);
 
-    if (enterprise_installed() === false
+    if ((bool) $config['enterprise_installed'] === false
         && isset($args['function_name']) === true
         && $args['function_name'] !== 'cron_task_start_gotty'
     ) {
@@ -235,7 +235,7 @@ function cron_task_run(
         return;
     }
 
-    if (enterprise_installed() === true) {
+    if ((bool) $config['enterprise_installed'] === true) {
         $task = db_get_row('tuser_task', 'id', $task_scheduled['id_user_task']);
     } else {
         $task = [
@@ -282,7 +282,6 @@ function cron_task_run(
 
     set_time_limit(0);
 
-    
     if ($task['function_name'] == 'cron_task_generate_report_by_template'
         || $task['function_name'] == 'cron_task_generate_report'
     ) {
@@ -432,6 +431,7 @@ function cron_task_run(
 function cron_task_call_user_function(string $function_name)
 {
     global $config;
+
     include_once $config['homedir'].'/vendor/autoload.php';
 
     call_user_func($function_name);

From 52f63a6f124f19dccf366ed7a7f91293f45aca7a Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Thu, 28 Sep 2023 01:00:23 +0200
Subject: [PATCH 063/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index fbb8dd0e9e..483710b13a 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-230927
+Version: 7.0NG.773.3-230928
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 59671d9de9..d28b3ee47f 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230927"
+pandora_version="7.0NG.773.3-230928"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 5597d3a0d2..8179796429 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '230927';
+use constant AGENT_BUILD => '230928';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 2d9ebcd93e..775c7b6de2 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230927
+%define release     230928
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index c9f04a6e4f..e79f77124f 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230927
+%define release     230928
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index 25e02b9458..027ac1e8fa 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230927
+%define release     230928
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 83970e9651..094d35b842 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230927"
+PI_BUILD="230928"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index ed5c067325..0048e27d18 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{230927}
+{230928}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index 54f9b204c8..b28df08cd0 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 230927")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 230928")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 8ac7f546d4..88007e38d9 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 230927))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 230928))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index b47cee7ca7..c628b00d4b 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-230927
+Version: 7.0NG.773.3-230928
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index a1fb087198..01f25b1bd7 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230927"
+pandora_version="7.0NG.773.3-230928"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index d12dd3f52c..90b4673dd5 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC230927';
+$build_version = 'PC230928';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index 60c5bcf2e3..e181906a0b 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '230927';
+            $build = '230928';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index d2be6c2729..eb0de7ef8c 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230927
+%define release     230928
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index a8760d6535..f1d8475905 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230927
+%define release     230928
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index 0fe045f42f..e3ecb23633 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230927
+%define release     230928
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 8c1159fb51..5cd86fd5b6 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-230927
+Version: 7.0NG.773.3-230928
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index e14707733c..3c1b457f85 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230927"
+pandora_version="7.0NG.773.3-230928"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 147896cdb3..f1a3490fa7 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230927";
+my $pandora_build = "230928";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index db08bef3c9..fd3b4da7fc 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230927";
+my $pandora_build = "230928";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index 6de6274317..d9274cb126 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230927
+%define release     230928
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index c2851ba96b..ba7c1d7fca 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230927
+%define release     230928
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index b72e213cc1..e20b5fb78e 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230927"
+PI_BUILD="230928"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index 13d1fea493..e64491cbab 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230927";
+my $version = "7.0NG.773.3 Build 230928";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index b5fafb3136..09dcd450f9 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230927";
+my $version = "7.0NG.773.3 Build 230928";
 
 # save program name for logging
 my $progname = basename($0);

From 59024fa8469044e8f3cf4a5bcab0b2c4fac369ff Mon Sep 17 00:00:00 2001
From: Enrique Martin <enrique.martin@pandorafms.com>
Date: Thu, 28 Sep 2023 09:18:36 +0200
Subject: [PATCH 064/116] Added SAP plugin to MR

---
 pandora_console/extras/mr/66.sql   | 16 ++++++++++++++++
 pandora_console/pandoradb_data.sql | 16 ++++++++++++++++
 2 files changed, 32 insertions(+)

diff --git a/pandora_console/extras/mr/66.sql b/pandora_console/extras/mr/66.sql
index 0671d66c56..0bbe7c1dcb 100644
--- a/pandora_console/extras/mr/66.sql
+++ b/pandora_console/extras/mr/66.sql
@@ -68,6 +68,22 @@ INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES
 -- Insert into tdiscovery_apps_executions
 INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;-g&#x20;&#039;__taskGroup__&#039;&#x20;--host&#x20;&#039;_host_&#039;&#x20;--port&#x20;&#039;_port_&#039;&#x20;--user&#x20;&#039;_user_&#039;&#x20;--password&#x20;&#039;_password_&#039;&#x20;--vm&#x20;&#039;_scanVM_&#039;&#x20;--lxc&#x20;&#039;_scanLXC_&#039;&#x20;--backups&#x20;&#039;_scanBackups_&#039;&#x20;--nodes&#x20;&#039;_scanNodes_&#039;&#x20;--transfer_mode&#x20;tentacle&#x20;--tentacle_address&#x20;&#039;_tentacleIP_&#039;&#x20;--tentacle_port&#x20;&#039;_tentaclePort_&#039;&#x20;--as_discovery_plugin&#x20;1');
 
+-- Insert new SAP APP
+SET @short_name = 'pandorafms.sap.deset';
+SET @name = 'SAP&#x20;R3&#x20;-&#x20;Deset';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;SAP&#x20;R3&#x20;environments';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_sap_deset');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_java_', 'bin/lib/jre/bin/java');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--custom_modules&#x20;&#039;_tempfileCustomModules_&#039;');
+
 ALTER TABLE `treport_content`  ADD COLUMN `cat_security_hardening` INT NOT NULL DEFAULT 0;
 ALTER TABLE `treport_content`  ADD COLUMN `ignore_skipped` INT NOT NULL DEFAULT 0;
 ALTER TABLE `treport_content`  ADD COLUMN `status_of_check` TINYTEXT;
diff --git a/pandora_console/pandoradb_data.sql b/pandora_console/pandoradb_data.sql
index ff9df1610f..1a16d772ee 100644
--- a/pandora_console/pandoradb_data.sql
+++ b/pandora_console/pandoradb_data.sql
@@ -2728,6 +2728,22 @@ INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES
 -- Insert into tdiscovery_apps_executions
 INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;-g&#x20;&#039;__taskGroup__&#039;&#x20;--host&#x20;&#039;_host_&#039;&#x20;--port&#x20;&#039;_port_&#039;&#x20;--user&#x20;&#039;_user_&#039;&#x20;--password&#x20;&#039;_password_&#039;&#x20;--vm&#x20;&#039;_scanVM_&#039;&#x20;--lxc&#x20;&#039;_scanLXC_&#039;&#x20;--backups&#x20;&#039;_scanBackups_&#039;&#x20;--nodes&#x20;&#039;_scanNodes_&#039;&#x20;--transfer_mode&#x20;tentacle&#x20;--tentacle_address&#x20;&#039;_tentacleIP_&#039;&#x20;--tentacle_port&#x20;&#039;_tentaclePort_&#039;&#x20;--as_discovery_plugin&#x20;1');
 
+-- Insert new SAP APP
+SET @short_name = 'pandorafms.sap.deset';
+SET @name = 'SAP&#x20;R3&#x20;-&#x20;Deset';
+SET @section = 'app';
+SET @description = 'Monitor&#x20;SAP&#x20;R3&#x20;environments';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_sap_deset');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_java_', 'bin/lib/jre/bin/java');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--custom_modules&#x20;&#039;_tempfileCustomModules_&#039;');
+
 INSERT INTO `tsca` VALUES (1000,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate&#x20;or&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;umask&#x20;tmp.mount;&#x20;systemctl&#x20;enable&#x20;tmp.mount.&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount.','[{\"cis\": [\"2.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1001,'Set&#x20;nodev&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"2.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1002,'Set&#x20;nosuid&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"2.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1003,'Set&#x20;noexec&#x20;option&#x20;for&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"2.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1004,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"2.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1005,'Bind&#x20;mount&#x20;the&#x20;/var/tmp&#x20;directory&#x20;to&#x20;/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;normally&#x20;a&#x20;standalone&#x20;directory&#x20;in&#x20;the&#x20;/var&#x20;file&#x20;system.&#x20;Binding&#x20;/var/tmp&#x20;to&#x20;/tmp&#x20;establishes&#x20;an&#x20;unbreakable&#x20;link&#x20;to&#x20;/tmp&#x20;that&#x20;cannot&#x20;be&#x20;removed&#x20;&#40;even&#x20;by&#x20;the&#x20;root&#x20;user&#41;.&#x20;It&#x20;also&#x20;allows&#x20;/var/tmp&#x20;to&#x20;inherit&#x20;the&#x20;same&#x20;mount&#x20;options&#x20;that&#x20;/tmp&#x20;owns,&#x20;allowing&#x20;/var/tmp&#x20;to&#x20;be&#x20;protected&#x20;in&#x20;the&#x20;same&#x20;manner&#x20;/tmp&#x20;is&#x20;protected.&#x20;It&#x20;will&#x20;also&#x20;prevent&#x20;/var&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;temporary&#x20;files&#x20;as&#x20;the&#x20;contents&#x20;of&#x20;/var/tmp&#x20;will&#x20;actually&#x20;reside&#x20;in&#x20;the&#x20;file&#x20;system&#x20;containing&#x20;/tmp.','All&#x20;programs&#x20;that&#x20;use&#x20;/var/tmp&#x20;and&#x20;/tmp&#x20;to&#x20;read/write&#x20;temporary&#x20;files&#x20;will&#x20;always&#x20;be&#x20;write&#x20;to&#x20;tmp&#x20;file&#x20;system,&#x20;preventing&#x20;a&#x20;user&#x20;from&#x20;running&#x20;the&#x20;/var&#x20;file&#x20;system&#x20;out&#x20;of&#x20;space&#x20;or&#x20;trying&#x20;to&#x20;perform&#x20;operations&#x20;that&#x20;have&#x20;been&#x20;blocked&#x20;in&#x20;the&#x20;/tmp&#x20;filesystem.','','#&#x20;mount&#x20;--bind&#x20;/tmp&#x20;/var/tmp&#x20;&#x20;and&#x20;edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;to&#x20;contain&#x20;the&#x20;following&#x20;line:&#x20;/tmp&#x20;/var/tmp&#x20;none&#x20;bind&#x20;0&#x20;0','[{\"cis\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1006,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"2.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1007,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"2.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1008,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"2.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1009,'Add&#x20;nodev&#x20;Option&#x20;to&#x20;/home','When&#x20;set&#x20;on&#x20;a&#x20;file&#x20;system,&#x20;this&#x20;option&#x20;prevents&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices&#x20;from&#x20;being&#x20;defined,&#x20;or&#x20;if&#x20;they&#x20;exist,&#x20;from&#x20;being&#x20;used&#x20;as&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.&#x20;&#x20;Note:&#x20;The&#x20;actions&#x20;in&#x20;the&#x20;item&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined&#x20;in&#x20;many&#x20;distributions.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"2.10\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1010,'Add&#x20;nodev&#x20;Option&#x20;to&#x20;/run/shm&#x20;Partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;/run/shm&#x20;&#40;temporary&#x20;filesystem&#x20;stored&#x20;in&#x20;memory&#41;&#x20;cannot&#x20;contain&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','Since&#x20;the&#x20;/run/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/run/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#x20;of&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/run/shm.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/run/shm','[{\"cis\": [\"2.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1011,'Add&#x20;nosuid&#x20;Option&#x20;to&#x20;/run/shm&#x20;Partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;/run/shm&#x20;&#40;temporary&#x20;filesystem&#x20;stored&#x20;in&#x20;memory&#41;&#x20;will&#x20;not&#x20;execute&#x20;setuid&#x20;and&#x20;setgid&#x20;on&#x20;executable&#x20;programs&#x20;as&#x20;such,&#x20;but&#x20;rather&#x20;execute&#x20;them&#x20;with&#x20;the&#x20;uid&#x20;and&#x20;gid&#x20;of&#x20;the&#x20;user&#x20;executing&#x20;the&#x20;program.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;Look&#x20;for&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/run/shm.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/run/shm','[{\"cis\": [\"2.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1012,'Add&#x20;noexec&#x20;Option&#x20;to&#x20;/run/shm&#x20;Partition','Set&#x20;noexec&#x20;on&#x20;the&#x20;shared&#x20;memory&#x20;partition&#x20;to&#x20;prevent&#x20;programs&#x20;from&#x20;executing&#x20;from&#x20;there.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;Look&#x20;for&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/run/shm.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/run/shm','[{\"cis\": [\"2.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1013,'Disable&#x20;Mounting&#x20;of&#x20;cramfs&#x20;Filesystems','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true','[{\"cis\": [\"2.18\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1014,'Disable&#x20;Mounting&#x20;of&#x20;freevxfs&#x20;Filesystems','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true','[{\"cis\": [\"2.19\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1015,'Disable&#x20;Mounting&#x20;of&#x20;jffs2&#x20;Filesystems','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true','[{\"cis\": [\"2.20\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1016,'Disable&#x20;Mounting&#x20;of&#x20;hfs&#x20;Filesystems','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true','[{\"cis\": [\"2.21\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1017,'Disable&#x20;Mounting&#x20;of&#x20;hfsplus&#x20;Filesystems','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true','[{\"cis\": [\"2.22\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1018,'Disable&#x20;Mounting&#x20;of&#x20;squashfs&#x20;Filesystems','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true','[{\"cis\": [\"2.23\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1019,'Disable&#x20;Mounting&#x20;of&#x20;udf&#x20;Filesystems','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true','[{\"cis\": [\"2.24\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1020,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;it&#039;s&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Disable&#x20;autofs:&#x20;#&#x20;update-rc.d&#x20;autofs&#x20;disable','[{\"cis\": [\"2.25\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1021,'Set&#x20;User/Group&#x20;Owner&#x20;on&#x20;bootloader&#x20;config','Set&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;your&#x20;boot&#x20;loaders&#x20;config&#x20;file&#x20;to&#x20;the&#x20;root&#x20;user.&#x20;These&#x20;instructions&#x20;default&#x20;to&#x20;GRUB&#x20;stored&#x20;at&#x20;/boot/grub/grub.cfg&#x20;.','Setting&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;to&#x20;root&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;changing&#x20;the&#x20;file.','','Run&#x20;the&#x20;following&#x20;to&#x20;change&#x20;ownership&#x20;of&#x20;/boot/grub/grub.cfg&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"3.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1022,'Set&#x20;Permissions&#x20;on&#x20;bootloader&#x20;config','Set&#x20;permission&#x20;on&#x20;the&#x20;your&#x20;boot&#x20;loaders&#x20;config&#x20;file&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;to&#x20;set&#x20;the&#x20;permissions&#x20;fro&#x20;/boot/grub/grub.cfg&#x20;:&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"3.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1023,'Set&#x20;Boot&#x20;Loader&#x20;Password','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt:&#x20;#&#x20;grub-mkpasswd-pbkdf2&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;Your&#x20;PBKDF2&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;/etc/grub.d/00_header&#x20;or&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;cat&#x20;&lt;&lt;EOF&#x20;set&#x20;superusers=&quot;&lt;user-list&gt;&quot;&#x20;password_pbkdf2&#x20;&lt;user&gt;&#x20;&lt;encrypted-password&gt;&#x20;EOF&#x20;Unless&#x20;the&#x20;--unrestricted&#x20;option&#x20;is&#x20;added&#x20;to&#x20;CLASS&#x20;in&#x20;/etc/grub.d/10_linux&#x20;a&#x20;password&#x20;will&#x20;be&#x20;required&#x20;to&#x20;boot&#x20;in&#x20;addition&#x20;to&#x20;editing&#x20;boot&#x20;parameters:&#x20;CLASS=&quot;--class&#x20;gnu-linux&#x20;--class&#x20;gnu&#x20;--class&#x20;os&#x20;--unrestricted&quot;&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;grub&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"3.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1024,'Require&#x20;authentication&#x20;for&#x20;Single-User&#x20;mode','Setting&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user&#x20;will&#x20;force&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Run&#x20;the&#x20;following&#x20;command&#x20;and&#x20;follow&#x20;the&#x20;prompts&#x20;to&#x20;set&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;passwd&#x20;root','[{\"cis\": [\"3.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1025,'Restrict&#x20;Core&#x20;Dumps','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/security/limits.conf&#x20;file.&#x20;&#x20;*&#x20;hard&#x20;core&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;&#x20;fs.suid_dumpable&#x20;=&#x20;0','[{\"cis\": [\"4.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1026,'Enable&#x20;XD/NX&#x20;Support&#x20;on&#x20;32-bit&#x20;x86&#x20;Systems','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"4.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1027,'Enable&#x20;Randomized&#x20;Virtual&#x20;Memory&#x20;Region&#x20;Placement','Set&#x20;the&#x20;system&#x20;flag&#x20;to&#x20;force&#x20;randomized&#x20;virtual&#x20;memory&#x20;region&#x20;placement.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;&#x20;kernel.randomize_va_space&#x20;=&#x20;2','[{\"cis\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1028,'Disable&#x20;Prelink','The&#x20;prelinking&#x20;feature&#x20;changes&#x20;binaries&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;decrease&#x20;their&#x20;startup&#x20;time.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;command:&#x20;#&#x20;/usr/sbin/prelink&#x20;-ua&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;a&#x20;normal,&#x20;non-prelinked&#x20;state,&#x20;then&#x20;remove&#x20;prelink:&#x20;#&#x20;apt-get&#x20;purge&#x20;prelink','[{\"cis\": [\"4.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1029,'Activate&#x20;AppArmor','AppArmor&#x20;provides&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;&#40;MAC&#41;&#x20;system&#x20;that&#x20;greatly&#x20;augments&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;&#40;DAC&#41;&#x20;model.','For&#x20;an&#x20;action&#x20;to&#x20;occur,&#x20;both&#x20;the&#x20;traditional&#x20;DAC&#x20;permissions&#x20;must&#x20;be&#x20;satisfied&#x20;as&#x20;well&#x20;as&#x20;the&#x20;AppArmor&#x20;MAC&#x20;rules.&#x20;The&#x20;action&#x20;will&#x20;not&#x20;be&#x20;allowed&#x20;if&#x20;either&#x20;one&#x20;of&#x20;these&#x20;models&#x20;does&#x20;not&#x20;permit&#x20;the&#x20;action.&#x20;In&#x20;this&#x20;way,&#x20;AppArmor&#x20;rules&#x20;can&#x20;only&#x20;make&#x20;a&#x20;system&#039;s&#x20;permissions&#x20;more&#x20;restrictive&#x20;and&#x20;secure.','','Install&#x20;apparmor&#x20;and&#x20;apparmor-utils&#x20;if&#x20;missing&#x20;&#40;additional&#x20;profiles&#x20;can&#x20;be&#x20;found&#x20;in&#x20;the&#x20;apparmor-profiles&#x20;package&#41;:&#x20;#&#x20;apt-get&#x20;install&#x20;apparmor&#x20;apparmor-profiles&#x20;apparmor-utils&#x20;Add&#x20;apparmor=1&#x20;and&#x20;security=apparmor&#x20;to&#x20;GRUB_CMDLINE_LINUX&#x20;in&#x20;/etc/default/grub:&#x20;GRUB_CMDLINE_LINUX=&quot;apparmor=1&#x20;security=apparmor&quot;Update&#x20;grub&#x20;configuration&#x20;&#40;reboot&#x20;will&#x20;be&#x20;required&#x20;to&#x20;apply&#x20;changes&#41;:&#x20;#&#x20;update-grub&#x20;Set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"4.5\"]}]'),(1030,'Ensure&#x20;NIS&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Uninstall&#x20;the&#x20;nis&#x20;package:&#x20;#&#x20;apt-get&#x20;purge&#x20;nis','[{\"cis\": [\"5.1.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1031,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;rsh,&#x20;rlogin,&#x20;rcp&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;service&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;shell,&#x20;login,&#x20;or&#x20;exec&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#shell&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;/usr/sbin/tcpd&#x20;/usr/sbin/in.rshd&#x20;&#x20;&#x20;&#x20;#login&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;/usr/sbin/tcpd&#x20;/usr/sbin/in.rlogind&#x20;&#x20;&#x20;&#x20;#exec&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;/usr/sbin/tcpd&#x20;/usr/sbin/in.rexecd','[{\"cis\": [\"5.1.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1032,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh&#x20;,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Uninstall&#x20;the&#x20;rsh-client&#x20;and&#x20;rsh-reload-client&#x20;packages:&#x20;#&#x20;apt-get&#x20;purge&#x20;rsh-client&#x20;rsh-reload-client','[{\"cis\": [\"5.1.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1033,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;talk&#x20;or&#x20;ntalk&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#talk&#x20;dgram&#x20;udp&#x20;wait&#x20;nobody.tty&#x20;/usr/sbin/in.talkd&#x20;in.talkd&#x20;&#x20;&#x20;&#x20;#ntalk&#x20;dgram&#x20;udp&#x20;wait&#x20;nobody.tty&#x20;/usr/sbin/in.ntalkd&#x20;in.ntalkd','[{\"cis\": [\"5.1.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1034,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Uninstall&#x20;the&#x20;talk&#x20;package:&#x20;#&#x20;apt-get&#x20;purge&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1035,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;telnet&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#telnet&#x20;stream&#x20;tcp&#x20;nowait&#x20;telnetd&#x20;/usr/sbin/tcpd&#x20;/usr/sbin/in.telnetd','[{\"cis\": [\"5.1.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1036,'Ensure&#x20;tftp-server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;packages&#x20;tftp&#x20;and&#x20;atftp&#x20;are&#x20;both&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;tftp&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#tftp&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.1.7\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1037,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;xinetd&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.&#x20;&#x20;Note:&#x20;Several&#x20;other&#x20;services&#x20;recommended&#x20;to&#x20;be&#x20;disabled&#x20;in&#x20;this&#x20;benchmark&#x20;have&#x20;xinetd&#x20;versions&#x20;as&#x20;well,&#x20;if&#x20;xinetd&#x20;is&#x20;required&#x20;in&#x20;your&#x20;environment&#x20;ensure&#x20;they&#x20;are&#x20;disabled&#x20;in&#x20;xinetd&#x20;configuration&#x20;as&#x20;well.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Disable&#x20;xinetd:&#x20;#&#x20;update-rc.d&#x20;xinetd&#x20;disable','[{\"cis\": [\"5.1.8\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1038,'Ensure&#x20;chargen&#x20;is&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;chargen&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#chargen&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1039,'Ensure&#x20;daytime&#x20;is&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;daytime&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#daytime&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.3\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1040,'Ensure&#x20;echo&#x20;is&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;echo&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#echo&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1041,'Ensure&#x20;discard&#x20;is&#x20;not&#x20;enabled','discard&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;discard&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#discard&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1042,'Ensure&#x20;time&#x20;is&#x20;not&#x20;enabled','time&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;time&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#time&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1043,'Ensure&#x20;the&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;system&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;desktops&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Uninstall&#x20;X&#x20;Windows:&#x20;#&#x20;apt-get&#x20;purge&#x20;xserver-xorg-core*','[{\"cis\": [\"6.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1044,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Since&#x20;servers&#x20;are&#x20;not&#x20;normally&#x20;used&#x20;for&#x20;printing,&#x20;this&#x20;service&#x20;is&#x20;not&#x20;needed&#x20;unless&#x20;dependencies&#x20;require&#x20;it.&#x20;If&#x20;this&#x20;is&#x20;the&#x20;case,&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;avahi-daemon:&#x20;#&#x20;update-rc.d&#x20;avahi-daemon&#x20;disable','[{\"cis\": [\"6.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1045,'Ensure&#x20;print&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;cups:&#x20;#&#x20;update-rc.d&#x20;cups&#x20;disable','[{\"cis\": [\"6.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1046,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;server&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;isc-dhcp-server:&#x20;#&#x20;update-rc.d&#x20;isc-dhcp-server&#x20;disable','[{\"cis\": [\"6.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1047,'Configure&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;','The&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://www.ntp.org.&#x20;NTP&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','It&#x20;is&#x20;recommended&#x20;that&#x20;physical&#x20;systems&#x20;and&#x20;virtual&#x20;guests&#x20;lacking&#x20;direct&#x20;access&#x20;to&#x20;the&#x20;physical&#x20;host&#039;s&#x20;clock&#x20;be&#x20;configured&#x20;as&#x20;NTP&#x20;clients&#x20;to&#x20;synchronize&#x20;their&#x20;clocks&#x20;&#40;especially&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#41;.&#x20;This&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','Install&#x20;ntp:&#x20;#&#x20;apt-get&#x20;install&#x20;ntp&#x20;&#x20;&#x20;&#x20;Ensure&#x20;the&#x20;following&#x20;lines&#x20;are&#x20;in&#x20;/etc/ntp.conf:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;Also,&#x20;make&#x20;sure&#x20;/etc/ntp.conf&#x20;has&#x20;at&#x20;least&#x20;one&#x20;NTP&#x20;server&#x20;specified:&#x20;server&#x20;&lt;ntp-server&gt;&#x20;&#x20;&#x20;&#x20;Note:&#x20;&lt;ntp-server&gt;&#x20;is&#x20;the&#x20;IP&#x20;address&#x20;or&#x20;hostname&#x20;of&#x20;a&#x20;trusted&#x20;time&#x20;server.&#x20;Configuring&#x20;an&#x20;NTP&#x20;server&#x20;is&#x20;outside&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;benchmark.','[{\"cis\": [\"6.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1048,'Ensure&#x20;LDAP&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;server&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client&#x20;or&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Uninstall&#x20;the&#x20;slapd&#x20;package:&#x20;#&#x20;apt-get&#x20;purge&#x20;slapd','[{\"cis\": [\"6.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1049,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;server&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Disable&#x20;rpcbind:&#x20;#&#x20;update-rc.d&#x20;rpcbind&#x20;disable&#x20;&#x20;&#x20;&#x20;Disable&#x20;nfs-kernel-server:&#x20;#&#x20;update-rc.d&#x20;nfs-kernel-server&#x20;disable','[{\"cis\": [\"6.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1050,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;server&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;bind9:&#x20;#&#x20;update-rc.d&#x20;bind9&#x20;disable','[{\"cis\": [\"6.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1051,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;vsftpd:&#x20;#&#x20;update-rc.d&#x20;vsftpd&#x20;disable','[{\"cis\": [\"6.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1052,'Ensure&#x20;HTTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;apache2:&#x20;#&#x20;update-rc.d&#x20;apache2&#x20;disable','[{\"cis\": [\"6.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1053,'Ensure&#x20;IMAP&#x20;and&#x20;POP&#x20;server&#x20;is&#x20;not&#x20;enabled','Dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;to&#x20;this&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;dovecot:&#x20;#&#x20;update-rc.d&#x20;dovecot&#x20;disable','[{\"cis\": [\"6.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1054,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;samba:&#x20;#&#x20;update-rc.d&#x20;samba&#x20;disable','[{\"cis\": [\"6.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1055,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;squid3:&#x20;#&#x20;update-rc.d&#x20;squid3&#x20;disable','[{\"cis\": [\"6.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1056,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;communicates&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.','','Disable&#x20;snmpd:&#x20;#&#x20;update-rc.d&#x20;snmpd&#x20;disable','[{\"cis\": [\"6.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1057,'Configure&#x20;Mail&#x20;Transfer&#x20;Agent&#x20;for&#x20;Local-Only&#x20;Mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.&#x20;Note:&#x20;The&#x20;remediation&#x20;given&#x20;here&#x20;provides&#x20;instructions&#x20;for&#x20;configuring&#x20;the&#x20;postfix&#x20;mail&#x20;server,&#x20;depending&#x20;on&#x20;your&#x20;environment&#x20;you&#x20;may&#x20;have&#x20;an&#x20;alternative&#x20;MTA&#x20;installed&#x20;such&#x20;as&#x20;sendmail.&#x20;&#x20;If&#x20;this&#x20;is&#x20;the&#x20;case&#x20;consult&#x20;the&#x20;documentation&#x20;for&#x20;your&#x20;installed&#x20;MTA&#x20;to&#x20;configure&#x20;the&#x20;recommended&#x20;state.','','Edit&#x20;/etc/exim4/update-exim4.conf.conf&#x20;and&#x20;edit&#x20;the&#x20;dc_local_interfaces&#x20;line&#x20;to&#x20;remove&#x20;non&#x20;loopback&#x20;addresses:&#x20;dc_local_interfaces=&#039;127.0.0.1&#x20;;&#x20;::1&#039;&#x20;&#x20;&#x20;&#x20;Run&#x20;update-exim4.conf:&#x20;#&#x20;update-exim4.conf&#x20;&#x20;&#x20;&#x20;Reload&#x20;exim4&#x20;configuration:&#x20;#&#x20;service&#x20;exim4&#x20;reload','[{\"cis\": [\"6.15\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1058,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Set&#x20;RSYNC_ENABLE&#x20;to&#x20;false&#x20;in&#x20;/etc/default/rsync:&#x20;RSYNC_ENABLE=false','[{\"cis\": [\"6.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1059,'Disable&#x20;IP&#x20;Forwarding','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;server&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.&#x20;If&#x20;the&#x20;server&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used&#x20;as&#x20;a&#x20;router,&#x20;set&#x20;the&#x20;flag&#x20;to&#x20;0.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;server&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;net.ipv4.ip_forward&#x20;parameter&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.ip_forward=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1060,'Disable&#x20;Send&#x20;Packet&#x20;Redirects','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;net.ipv4.conf.all.send_redirects&#x20;and&#x20;net.ipv4.conf.default.send_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1061,'Disable&#x20;Source&#x20;Routed&#x20;Packet&#x20;Acceptance','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;server&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;server&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;servers.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1062,'Disable&#x20;ICMP&#x20;Redirect&#x20;Acceptance','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv4.conf.default.accept_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1063,'Disable&#x20;Secure&#x20;ICMP&#x20;Redirect&#x20;Acceptance','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;net.ipv4.conf.all.secure_redirects&#x20;and&#x20;net.ipv4.conf.default.secure_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1064,'Log&#x20;Suspicious&#x20;Packets','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;net.ipv4.conf.all.log_martians&#x20;and&#x20;net.ipv4.conf.default.log_martians&#x20;parameters&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.log_martians=1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.log_martians=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1065,'Enable&#x20;Ignore&#x20;Broadcast&#x20;Requests','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1066,'Enable&#x20;Bad&#x20;Error&#x20;Message&#x20;Protection','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1067,'Enable&#x20;RFC-recommended&#x20;Source&#x20;Route&#x20;Validation','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;server,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;parameters&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.rp_filter=1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.rp_filter=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1068,'Enable&#x20;TCP&#x20;SYN&#x20;Cookies','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;server&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;server&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;server&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;net.ipv4.tcp_syncookies&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.tcp_syncookies=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1069,'Disable&#x20;IPv6&#x20;Router&#x20;Advertisements','This&#x20;setting&#x20;disables&#x20;the&#x20;systems&#x20;ability&#x20;to&#x20;accept&#x20;router&#x20;advertisements','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;net.ipv6.conf.all.accept_ra&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;parameter&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv6.conf.all.accept_ra=0&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.accept_ra=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"7.3.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1070,'Disable&#x20;IPv6&#x20;Redirect&#x20;Acceptance','This&#x20;setting&#x20;prevents&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;ICMP&#x20;redirects.&#x20;ICMP&#x20;redirects&#x20;tell&#x20;the&#x20;system&#x20;about&#x20;alternate&#x20;routes&#x20;for&#x20;sending&#x20;traffic.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;ICMP&#x20;redirects&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;net.ipv6.conf.all.accept_redirects&#x20;and&#x20;net.ipv6.conf.default.accept_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"7.3.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1071,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;few&#x20;organizations&#x20;have&#x20;implemented&#x20;IPv6.','If&#x20;IPv6&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;/etc/sysctl.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;net.ipv6.conf.all.disable_ipv6=1&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.disable_ipv6=1&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.lo.disable_ipv6=1&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;or&#x20;reboot&#x20;to&#x20;apply&#x20;the&#x20;changes:&#x20;#&#x20;sysctl&#x20;-p','[{\"cis\": [\"7.3.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1072,'Install&#x20;TCP&#x20;Wrappers','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Install&#x20;tcpd&#x20;:&#x20;#&#x20;apt-get&#x20;install&#x20;tcpd&#x20;To&#x20;verify&#x20;if&#x20;a&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;ldd&#x20;&lt;path-to-daemon&gt;&#x20;|&#x20;grep&#x20;libwrap.so&#x20;If&#x20;there&#x20;is&#x20;any&#x20;output,&#x20;then&#x20;the&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers.','[{\"cis\": [\"7.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1073,'Create&#x20;/etc/hosts.allow','The&#x20;/etc/hosts.allow&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.deny&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;server.','','Create&#x20;/etc/hosts.allow:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;...&quot;&#x20;&gt;/etc/hosts.allow&#x20;&#x20;where&#x20;each&#x20;&lt;net&gt;/&lt;mask&gt;&#x20;combination&#x20;&#x20;&#40;for&#x20;example,&#x20;&quot;192.168.1.0/255.255.255.0&quot;&#41;&#x20;represents&#x20;one&#x20;network&#x20;block&#x20;in&#x20;use&#x20;by&#x20;your&#x20;organization&#x20;that&#x20;requires&#x20;access&#x20;to&#x20;this&#x20;system.','[{\"cis\": [\"7.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1074,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.allow','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"7.4.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1075,'Create&#x20;/etc/hosts.deny','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.deny&#x20;file&#x20;serves&#x20;as&#x20;a&#x20;failsafe&#x20;so&#x20;that&#x20;any&#x20;host&#x20;not&#x20;specified&#x20;in&#x20;/etc/hosts.allow&#x20;is&#x20;denied&#x20;access&#x20;to&#x20;the&#x20;server.','','Create&#x20;/etc/hosts.deny:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;ALL&quot;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"7.4.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1076,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.deny','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"7.4.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1077,'Disable&#x20;DCCP','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;echo&#x20;&quot;install&#x20;dccp&#x20;/bin/true&quot;&#x20;&gt;&gt;&#x20;/etc/modprobe.d/CIS.conf','[{\"cis\": [\"7.5.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1078,'Disable&#x20;SCTP','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;echo&#x20;&quot;install&#x20;sctp&#x20;/bin/true&quot;&#x20;&gt;&gt;&#x20;/etc/modprobe.d/CIS.conf','[{\"cis\": [\"7.5.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1079,'Disable&#x20;RDS','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;echo&#x20;&quot;install&#x20;rds&#x20;/bin/true&quot;&#x20;&gt;&gt;&#x20;/etc/modprobe.d/CIS.conf','[{\"cis\": [\"7.5.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1080,'Disable&#x20;TIPC','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;echo&#x20;&quot;install&#x20;tipc&#x20;/bin/true&quot;&#x20;&gt;&gt;&#x20;/etc/modprobe.d/CIS.conf','[{\"cis\": [\"7.5.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1081,'Deactivate&#x20;Wireless&#x20;Interfaces','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.&#x20;Debian&#x20;provides&#x20;the&#x20;nmcli&#x20;interface&#x20;which&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;and&#x20;use&#x20;wireless&#x20;networks.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Use&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;wireless:&#x20;#&#x20;nmcli&#x20;nm&#x20;wifi&#x20;off','[{\"cis\": [\"7.6\"]}, {\"pci_dss\": [\"1.2.3\"]}, {\"tsc\": [\"CC6.6\"]}]'),(1082,'Ensure&#x20;Firewall&#x20;is&#x20;active','IPtables&#x20;is&#x20;an&#x20;application&#x20;that&#x20;allows&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;configure&#x20;the&#x20;IPv4&#x20;tables,&#x20;chains&#x20;and&#x20;rules&#x20;provided&#x20;by&#x20;the&#x20;Linux&#x20;kernel&#x20;firewall.&#x20;&#x20;The&#x20;iptables-persistent&#x20;package&#x20;in&#x20;Debian&#x20;provides&#x20;one&#x20;way&#x20;to&#x20;ensure&#x20;iptables&#x20;rules&#x20;are&#x20;reapplied&#x20;on&#x20;reboot.&#x20;Note:&#x20;the&#x20;audit&#x20;and&#x20;remediation&#x20;included&#x20;provide&#x20;instructions&#x20;for&#x20;using&#x20;iptables-persistent&#x20;to&#x20;reapply&#x20;iptables&#x20;rules.&#x20;&#x20;Other&#x20;methods&#x20;are&#x20;available&#x20;which&#x20;may&#x20;be&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;and&#x20;may&#x20;conflict&#x20;with&#x20;these&#x20;steps.','IPtables&#x20;provides&#x20;extra&#x20;protection&#x20;for&#x20;the&#x20;Linux&#x20;system&#x20;by&#x20;limiting&#x20;communications&#x20;in&#x20;and&#x20;out&#x20;of&#x20;the&#x20;box&#x20;to&#x20;specific&#x20;IPv4&#x20;addresses&#x20;and&#x20;ports.','','Install&#x20;the&#x20;iptables&#x20;and&#x20;iptables-persistent&#x20;packages:&#x20;#&#x20;apt-get&#x20;install&#x20;iptables&#x20;iptables-persistent&#x20;&#x20;&#x20;&#x20;Enable&#x20;the&#x20;iptables-persistent&#x20;service:&#x20;#&#x20;update-rc.d&#x20;iptables-persistent&#x20;enable','[{\"cis\": [\"7.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.1\"]}]'),(1083,'Configure&#x20;Audit&#x20;Log&#x20;Storage&#x20;Size','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;max_log_file&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;&#x20;Note:&#x20;MB&#x20;is&#x20;the&#x20;number&#x20;of&#x20;MegaBytes&#x20;the&#x20;file&#x20;can&#x20;be.','[{\"cis\": [\"8.1.1.1\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(1084,'Disable&#x20;System&#x20;on&#x20;Audit&#x20;Log&#x20;Full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/auditd.conf&#x20;file.&#x20;space_left_action&#x20;=&#x20;email&#x20;action_mail_acct&#x20;=&#x20;root&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"8.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(1085,'Keep&#x20;All&#x20;Auditing&#x20;Information','Normally,&#x20;auditd&#x20;will&#x20;hold&#x20;4&#x20;logs&#x20;of&#x20;maximum&#x20;log&#x20;file&#x20;size&#x20;before&#x20;deleting&#x20;older&#x20;log&#x20;files.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/auditd.conf&#x20;file.&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"8.1.1.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(1086,'Install&#x20;and&#x20;Enable&#x20;auditd&#x20;Service','Install&#x20;and&#x20;turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Install&#x20;auditd:&#x20;#&#x20;apt-get&#x20;install&#x20;auditd&#x20;If&#x20;needed&#x20;enable&#x20;auditd&#x20;in&#x20;/etc/rc*.d:&#x20;#&#x20;update-rc.d&#x20;auditd&#x20;enable','[{\"cis\": [\"8.1.2\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1087,'Enable&#x20;Auditing&#x20;for&#x20;Processes&#x20;That&#x20;Start&#x20;Prior&#x20;to&#x20;auditd','Configure&#x20;grub&#x20;or&#x20;lilo&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','Edit&#x20;/etc/default/grub&#x20;to&#x20;include&#x20;audit=1&#x20;as&#x20;part&#x20;of&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;And&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"8.1.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}]'),(1088,'Record&#x20;Events&#x20;That&#x20;Modify&#x20;Date&#x20;and&#x20;Time&#x20;Information','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.4\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1089,'Record&#x20;Events&#x20;That&#x20;Modify&#x20;User/Group&#x20;Information','Record&#x20;events&#x20;affecting&#x20;the&#x20;group,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.5\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1090,'Record&#x20;Events&#x20;That&#x20;Modify&#x20;the&#x20;System&#039;s&#x20;Network&#x20;Environment','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;prelogin&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;&#x20;and&#x20;/etc/network&#x20;&#40;directory&#x20;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;&#x20;files.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/network&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;exit,always&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;-a&#x20;exit,always&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;exit,always&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.6\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1091,'Record&#x20;Events&#x20;That&#x20;Modify&#x20;the&#x20;System&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;directory.','Changes&#x20;to&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;/etc/audit/audit.rules&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.7\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1092,'Collect&#x20;Login&#x20;and&#x20;Logout&#x20;Events','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.&amp;&amp;&#x20;r:rules&#x20;file.&#x20;-w&#x20;/var/log/faillog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1093,'Collect&#x20;Session&#x20;Initiation&#x20;Information','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown&#x20;and&#x20;reboot&#x20;events.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;Note:&#x20;Use&#x20;the&#x20;last&#x20;command&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;last&#x20;-f&#x20;/var/run/utmp&#41;','[{\"cis\": [\"8.1.9\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.3\"]}]'),(1094,'Collect&#x20;Discretionary&#x20;Access&#x20;Control&#x20;Permission&#x20;Modification&#x20;Events','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permis&amp;&amp;&#x20;r:sions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown,&#x20;fchown,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr,&#x20;lsetxattr,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr,&#x20;lremovexattr,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;userids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.10\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1095,'Collect&#x20;Unsuccessful&#x20;Unauthorized&#x20;Access&#x20;Attempts&#x20;to&#x20;Files','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;creat&#41;,&#x20;opening&#x20;&#40;open,&#x20;openat&#41;&#x20;and&#x20;truncation&#x20;&#40;truncate,&#x20;ftruncate&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;nonprivileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;500&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.11\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1096,'Collect&#x20;Successful&#x20;File&#x20;System&#x20;Mounts','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1097,'Collect&#x20;File&#x20;Deletion&#x20;Events&#x20;by&#x20;User','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.14\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(1098,'Collect&#x20;Changes&#x20;to&#x20;System&#x20;Administration&#x20;Scope&#x20;&#40;sudoers&#41;','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.15\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1099,'Collect&#x20;System&#x20;Administrator&#x20;Actions&#x20;&#40;sudolog&#41;','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;Note:&#x20;The&#x20;system&#x20;must&#x20;be&#x20;configured&#x20;with&#x20;su&#x20;disabled&#x20;&#40;See&#x20;Item&#x20;9.5&#x20;Restrict&#x20;Access&#x20;to&#x20;the&#x20;su&#x20;Command&#41;&#x20;to&#x20;force&#x20;all&#x20;command&#x20;execution&#x20;through&#x20;sudo.&#x20;This&#x20;will&#x20;not&#x20;be&#x20;effective&#x20;on&#x20;the&#x20;console,&#x20;as&#x20;administrators&#x20;can&#x20;log&#x20;in&#x20;as&#x20;root','[{\"cis\": [\"8.1.16\"]}, {\"cis_csc\": [\"5.1\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.3\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1100,'Collect&#x20;Kernel&#x20;Module&#x20;Loading&#x20;and&#x20;Unloading','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules','[{\"cis\": [\"8.1.17\"]}, {\"cis_csc\": [\"3\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1101,'Make&#x20;the&#x20;Audit&#x20;Configuration&#x20;Immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-e&#x20;2&#x20;Note:&#x20;This&#x20;must&#x20;be&#x20;the&#x20;last&#x20;line&#x20;in&#x20;the&#x20;/etc/audit/audit.rules&#x20;file','[{\"cis\": [\"8.1.18\"]}, {\"cis_csc\": [\"3\", \"6\"]}, {\"pci_dss\": [\"10.5\"]}]'),(1102,'Install&#x20;the&#x20;rsyslog&#x20;package','The&#x20;rsyslog&#x20;package&#x20;is&#x20;a&#x20;third&#x20;party&#x20;package&#x20;that&#x20;provides&#x20;many&#x20;enhancements&#x20;to&#x20;syslog,&#x20;such&#x20;as&#x20;multi-threading,&#x20;TCP&#x20;communication,&#x20;message&#x20;filtering&#x20;and&#x20;data&#x20;base&#x20;support.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;the&#x20;rsyslog&#x20;package:&#x20;#&#x20;apt-get&#x20;install&#x20;rsyslog','[{\"cis\": [\"8.2.2\"]}, {\"cis_csc\": [\"6.2\"]}]'),(1103,'Ensure&#x20;the&#x20;rsyslog&#x20;Service&#x20;is&#x20;activated','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;will&#x20;not&#x20;have&#x20;a&#x20;syslog&#x20;service&#x20;running.','','Enable&#x20;rsyslog:&#x20;#&#x20;update-rc.d&#x20;rsyslog&#x20;enable','[{\"cis\": [\"8.2.2\"]}, {\"cis_csc\": [\"6.2\"]}]'),(1104,'Configure&#x20;rsyslog&#x20;to&#x20;Send&#x20;Logs&#x20;to&#x20;a&#x20;Remote&#x20;Log&#x20;Host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;rsyslogd&#x20;&#x20;&#x20;&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd&#x20;&#x20;&#x20;&#x20;Note:&#x20;The&#x20;double&#x20;&quot;at&quot;&#x20;sign&#x20;&#40;@@&#41;&#x20;directs&#x20;rsyslog&#x20;to&#x20;use&#x20;TCP&#x20;to&#x20;send&#x20;log&#x20;messages&#x20;to&#x20;the&#x20;server,&#x20;which&#x20;is&#x20;a&#x20;more&#x20;reliable&#x20;transport&#x20;mechanism&#x20;than&#x20;the&#x20;default&#x20;UDP&#x20;protocol.','[{\"cis\": [\"8.2.5\"]}, {\"cis_csc\": [\"6.6\"]}]'),(1105,'Accept&#x20;Remote&#x20;rsyslog&#x20;Messages&#x20;Only&#x20;on&#x20;Designated&#x20;Log&#x20;Hosts','By&#x20;default,&#x20;rsyslog&#x20;does&#x20;not&#x20;listen&#x20;for&#x20;log&#x20;messages&#x20;coming&#x20;in&#x20;from&#x20;remote&#x20;systems.&#x20;The&#x20;ModLoad&#x20;tells&#x20;rsyslog&#x20;to&#x20;load&#x20;the&#x20;imtcp.so&#x20;module&#x20;so&#x20;it&#x20;can&#x20;listen&#x20;over&#x20;a&#x20;network&#x20;via&#x20;TCP.&#x20;The&#x20;InputTCPServerRun&#x20;option&#x20;instructs&#x20;rsyslogd&#x20;to&#x20;listen&#x20;on&#x20;the&#x20;specified&#x20;TCP&#x20;port.','The&#x20;guidance&#x20;in&#x20;the&#x20;section&#x20;ensures&#x20;that&#x20;remote&#x20;log&#x20;hosts&#x20;are&#x20;configured&#x20;to&#x20;only&#x20;accept&#x20;rsyslog&#x20;data&#x20;from&#x20;hosts&#x20;within&#x20;the&#x20;specified&#x20;domain&#x20;and&#x20;that&#x20;those&#x20;systems&#x20;that&#x20;are&#x20;not&#x20;designed&#x20;to&#x20;be&#x20;log&#x20;hosts&#x20;do&#x20;not&#x20;accept&#x20;any&#x20;remote&#x20;rsyslog&#x20;messages.&#x20;This&#x20;provides&#x20;protection&#x20;from&#x20;spoofed&#x20;log&#x20;data&#x20;and&#x20;ensures&#x20;that&#x20;system&#x20;administrators&#x20;are&#x20;reviewing&#x20;reasonably&#x20;complete&#x20;syslog&#x20;data&#x20;in&#x20;a&#x20;central&#x20;location.','','For&#x20;hosts&#x20;that&#x20;are&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;un-comment&#x20;the&#x20;following&#x20;lines:&#x20;$ModLoad&#x20;imtcp.so&#x20;&#x20;&#x20;&#x20;$InputTCPServerRun&#x20;514&#x20;&#x20;&#x20;&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;rsyslogd:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"8.2.6\"]}, {\"cis_csc\": [\"9.1\"]}]'),(1106,'Install&#x20;AIDE','In&#x20;some&#x20;installations,&#x20;AIDE&#x20;is&#x20;not&#x20;installed&#x20;automatically','Install&#x20;AIDE&#x20;to&#x20;make&#x20;use&#x20;of&#x20;the&#x20;file&#x20;integrity&#x20;features&#x20;to&#x20;monitor&#x20;critical&#x20;files&#x20;for&#x20;changes&#x20;that&#x20;could&#x20;affect&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','Install&#x20;AIDE:&#x20;#&#x20;apt-get&#x20;install&#x20;aide&#x20;Initialize&#x20;AIDE:&#x20;#&#x20;aideinit&#x20;#&#x20;cp&#x20;/var/lib/aide/aide.db.new&#x20;/var/lib/aide/aide.db&#x20;Note:&#x20;The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;AIDE&#x20;because&#x20;it&#x20;alters&#x20;binaries&#x20;to&#x20;speed&#x20;up&#x20;their&#x20;start&#x20;up&#x20;times.&#x20;Run&#x20;/usr/sbin/prelink&#x20;-ua&#x20;to&#x20;restore&#x20;the&#x20;binaries&#x20;to&#x20;their&#x20;prelinked&#x20;state,&#x20;thus&#x20;avoiding&#x20;false&#x20;positives&#x20;from&#x20;AIDE.','[{\"cis\": [\"8.3.1\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}]'),(1107,'Implement&#x20;Periodic&#x20;Execution&#x20;of&#x20;File&#x20;Integrity','Implement&#x20;periodic&#x20;file&#x20;checking,&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Execute&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;Note:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;instance&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.','[{\"cis\": [\"8.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1108,'Enable&#x20;cron&#x20;Daemon','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Enable&#x20;cron:&#x20;#&#x20;update-rc.d&#x20;cron&#x20;enable&#x20;&#x20;&#x20;&#x20;Enable&#x20;anacron:&#x20;#&#x20;update-rc.d&#x20;anacron&#x20;enable','[{\"cis\": [\"9.1.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1109,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/crontab','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"9.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1110,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.hourly','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"9.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1111,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.daily','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"9.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1112,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.weekly','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"9.1.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1113,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.monthly','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"9.1.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1114,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.d','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"9.1.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1115,'Restrict&#x20;at/cron&#x20;to&#x20;Authorized&#x20;Users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','#&#x20;/bin/rm&#x20;/etc/cron.deny&#x20;&#x20;&#x20;&#x20;#&#x20;/bin/rm&#x20;/etc/at.deny&#x20;&#x20;&#x20;&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;&#x20;&#x20;&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"9.1.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1116,'Set&#x20;Password&#x20;Creation&#x20;Requirement&#x20;Parameters&#x20;Using&#x20;pam_cracklib','The&#x20;pam_cracklib&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_cracklib.so&#x20;options.&#x20;&#x20;#&#x20;retry=3&#x20;-&#x20;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure.&#x20;&#x20;#&#x20;minlen=14&#x20;-&#x20;password&#x20;must&#x20;be&#x20;14&#x20;characters&#x20;or&#x20;more&#x20;#&#x20;dcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;digit&#x20;#&#x20;ucredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;uppercase&#x20;character&#x20;#&#x20;ocredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;special&#x20;character&#x20;#&#x20;lcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;lowercase&#x20;character&#x20;&#x20;&#x20;&#x20;The&#x20;setting&#x20;shown&#x20;above&#x20;is&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','1&#41;&#x20;Install&#x20;the&#x20;libpam-cracklib&#x20;package:&#x20;#&#x20;apt-get&#x20;install&#x20;libpam-cracklib&#x20;2&#41;&#x20;Set&#x20;the&#x20;pam_cracklib.so&#x20;parameters&#x20;as&#x20;follows&#x20;in&#x20;/etc/pam.d/common-password:&#x20;password&#x20;required&#x20;pam_cracklib.so&#x20;retry=3&#x20;minlen=14&#x20;dcredit=-1&#x20;ucredit=-1&#x20;ocredit=-1&#x20;lcredit=-1','[{\"cis\": [\"9.2.1\"]}, {\"pci_dss\": [\"8.2.3\"]}]'),(1117,'Set&#x20;Lockout&#x20;for&#x20;Failed&#x20;Password&#x20;Attempts','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;file&#x20;/etc/pam.d/login.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.&#x20;&#x20;Check&#x20;the&#x20;documentation&#x20;for&#x20;each&#x20;secondary&#x20;program&#x20;for&#x20;instructions&#x20;on&#x20;how&#x20;to&#x20;configure&#x20;them&#x20;to&#x20;work&#x20;with&#x20;PAM.&#x20;&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;to&#x20;the&#x20;policy&#x20;in&#x20;effect&#x20;at&#x20;your&#x20;site.','Locking&#x20;out&#x20;userIDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/login&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900&#x20;&#x20;&#x20;&#x20;Note:&#x20;If&#x20;a&#x20;user&#x20;has&#x20;been&#x20;locked&#x20;out&#x20;because&#x20;they&#x20;have&#x20;reached&#x20;the&#x20;maximum&#x20;consecutive&#x20;failure&#x20;count&#x20;defined&#x20;by&#x20;deny=&#x20;in&#x20;the&#x20;pam_tally2.so&#x20;module,&#x20;the&#x20;user&#x20;can&#x20;be&#x20;unlocked&#x20;by&#x20;issuing&#x20;the&#x20;command&#x20;/sbin/pam_tally2&#x20;-u&#x20;&lt;username&gt;&#x20;--reset.&#x20;This&#x20;command&#x20;sets&#x20;the&#x20;failed&#x20;count&#x20;to&#x20;0,&#x20;effectively&#x20;unlocking&#x20;the&#x20;user.','[{\"cis\": [\"9.2.2\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(1118,'Limit&#x20;Password&#x20;Reuse','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;the&#x20;pam_unix.so&#x20;remember&#x20;parameter&#x20;to&#x20;5&#x20;in&#x20;/etc/pam.d/common-password:&#x20;password&#x20;[success=1&#x20;default=ignore]&#x20;&#x20;pam_unix.so&#x20;obscure&#x20;sha512&#x20;remember=5&#x20;&#x20;&#x20;&#x20;Note:&#x20;The&#x20;default&#x20;password&#x20;setting&#x20;in&#x20;this&#x20;document&#x20;is&#x20;the&#x20;last&#x20;5&#x20;passwords.&#x20;Change&#x20;this&#x20;number&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;site&#039;s&#x20;password&#x20;policy.','[{\"cis\": [\"9.2.3\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(1119,'Set&#x20;SSH&#x20;Protocol&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"9.3.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1120,'Set&#x20;LogLevel&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifices&#x20;that&#x20;record&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.&#x20;INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"9.3.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1121,'Set&#x20;Permissions&#x20;on&#x20;/etc/ssh/sshd_config','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','If&#x20;the&#x20;user&#x20;and&#x20;group&#x20;ownership&#x20;of&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;If&#x20;the&#x20;permissions&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;chmod&#x20;600&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"9.3.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1122,'Disable&#x20;SSH&#x20;X11&#x20;Forwarding','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"9.3.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1123,'Set&#x20;SSH&#x20;MaxAuthTries&#x20;to&#x20;4&#x20;or&#x20;Less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;it&#x20;is&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"9.3.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1124,'Set&#x20;SSH&#x20;IgnoreRhosts&#x20;to&#x20;Yes','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"9.3.6\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1125,'Set&#x20;SSH&#x20;HostbasedAuthentication&#x20;to&#x20;No','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"9.3.7\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1126,'Disable&#x20;SSH&#x20;Root&#x20;Login','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"9.3.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1127,'Set&#x20;SSH&#x20;PermitEmptyPasswords&#x20;to&#x20;No','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"9.3.9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1128,'Do&#x20;Not&#x20;Allow&#x20;Users&#x20;to&#x20;Set&#x20;Environment&#x20;Options','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"9.3.10\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1129,'Use&#x20;Only&#x20;Approved&#x20;Cipher&#x20;in&#x20;Counter&#x20;Mode','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Based&#x20;on&#x20;research&#x20;conducted&#x20;at&#x20;various&#x20;institutions,&#x20;it&#x20;was&#x20;determined&#x20;that&#x20;the&#x20;symmetric&#x20;portion&#x20;of&#x20;the&#x20;SSH&#x20;Transport&#x20;Protocol&#x20;&#40;as&#x20;described&#x20;in&#x20;RFC&#x20;4253&#41;&#x20;has&#x20;security&#x20;weaknesses&#x20;that&#x20;allowed&#x20;recovery&#x20;of&#x20;up&#x20;to&#x20;32&#x20;bits&#x20;of&#x20;plaintext&#x20;from&#x20;a&#x20;block&#x20;of&#x20;ciphertext&#x20;that&#x20;was&#x20;encrypted&#x20;with&#x20;the&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBD&#41;&#x20;method.&#x20;From&#x20;that&#x20;research,&#x20;new&#x20;Counter&#x20;mode&#x20;algorithms&#x20;&#40;as&#x20;described&#x20;in&#x20;RFC4344&#41;&#x20;were&#x20;designed&#x20;that&#x20;are&#x20;not&#x20;vulnerable&#x20;to&#x20;these&#x20;types&#x20;of&#x20;attacks&#x20;and&#x20;these&#x20;algorithms&#x20;are&#x20;now&#x20;recommended&#x20;for&#x20;standard&#x20;use.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Ciphers&#x20;aes128-ctr,aes192-ctr,aes256-ctr','[{\"cis\": [\"9.3.11\"]}]'),(1130,'Set&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;for&#x20;User&#x20;Login','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening..&#x20;&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;ClientAliveInterval&#x20;300&#x20;&#x20;&#x20;&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"9.3.12\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(1131,'Limit&#x20;Access&#x20;via&#x20;SSH','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers,&#x20;AllowGroups,&#x20;DenyUsers,&#x20;DenyGroups.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;AllowGroups&#x20;&lt;grouplist&gt;&#x20;&#x20;&#x20;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"9.3.13\"]}, {\"pci_dss\": [\"8.1\"]}]'),(1132,'Set&#x20;SSH&#x20;Banner','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Consult&#x20;with&#x20;your&#x20;legal&#x20;department&#x20;for&#x20;the&#x20;appropriate&#x20;warning&#x20;banner&#x20;for&#x20;your&#x20;site.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"9.3.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1133,'Restrict&#x20;Access&#x20;to&#x20;the&#x20;su&#x20;Command','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','1&#41;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid&#x20;2&#41;&#x20;Once&#x20;this&#x20;is&#x20;done,&#x20;create&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;statement&#x20;in&#x20;the&#x20;/etc/group&#x20;file.','[{\"cis\": [\"9.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1134,'Set&#x20;Password&#x20;Expiration&#x20;Days','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;90&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;90&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MAX_DAYS&#x20;90&#x20;&#x20;&#x20;&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"10.1.1\"]}, {\"pci_dss\": [\"8.2.4\"]}]'),(1135,'Set&#x20;Password&#x20;Change&#x20;Minimum&#x20;Number&#x20;of&#x20;Days','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;&#x20;&#x20;&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"10.1.2\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1136,'Set&#x20;Password&#x20;Expiring&#x20;Warning&#x20;Days','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;&#x20;&#x20;&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"10.1.3\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1137,'Set&#x20;Default&#x20;Group&#x20;for&#x20;root&#x20;Account','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','#&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"10.3\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1138,'Set&#x20;Default&#x20;umask&#x20;for&#x20;Users','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;.profile,&#x20;.bashrc,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;&#x20;Note:&#x20;The&#x20;directives&#x20;in&#x20;this&#x20;section&#x20;apply&#x20;to&#x20;bash&#x20;and&#x20;shell.&#x20;If&#x20;other&#x20;shells&#x20;are&#x20;supported&#x20;on&#x20;the&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;their&#x20;configuration&#x20;files&#x20;also&#x20;are&#x20;checked.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;and&#x20;/etc/profile.d/cis.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;the&#x20;UMASK&#x20;parameter&#x20;as&#x20;shown:&#x20;umask&#x20;077','[{\"cis\": [\"10.4\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1139,'Lock&#x20;Inactive&#x20;User&#x20;Accounts','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;35&#x20;or&#x20;more&#x20;days&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','#&#x20;useradd&#x20;-D&#x20;-f&#x20;35','[{\"cis\": [\"10.5\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1140,'Set&#x20;Warning&#x20;Banner&#x20;for&#x20;Standard&#x20;Login&#x20;Services','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;prior&#x20;to&#x20;the&#x20;login&#x20;prompt&#x20;on&#x20;the&#x20;system&#039;s&#x20;console&#x20;and&#x20;serial&#x20;devices,&#x20;and&#x20;also&#x20;prior&#x20;to&#x20;logins&#x20;via&#x20;telnet.&#x20;The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;is&#x20;generally&#x20;displayed&#x20;after&#x20;all&#x20;successful&#x20;logins,&#x20;no&#x20;matter&#x20;where&#x20;the&#x20;user&#x20;is&#x20;logging&#x20;in&#x20;from,&#x20;but&#x20;is&#x20;thought&#x20;to&#x20;be&#x20;less&#x20;useful&#x20;because&#x20;it&#x20;only&#x20;provides&#x20;notification&#x20;to&#x20;the&#x20;user&#x20;after&#x20;the&#x20;machine&#x20;has&#x20;been&#x20;accessed.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Consult&#x20;with&#x20;your&#x20;organization&#039;s&#x20;legal&#x20;counsel&#x20;for&#x20;the&#x20;appropriate&#x20;wording&#x20;for&#x20;your&#x20;specific&#x20;organization.','','#&#x20;touch&#x20;/etc/motd&#x20;&#x20;&#x20;&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"11.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1141,'Remove&#x20;OS&#x20;Information&#x20;from&#x20;Login&#x20;Warning&#x20;Banners','Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.','Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;uname&#x20;-a&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd,&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;and&#x20;remove&#x20;any&#x20;lines&#x20;containing&#x20;m,&#x20;&#x0d;,&#x20;s&#x20;or&#x20;v.','[{\"cis\": [\"11.2\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1142,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','Debian&#x20;defaults&#x20;to&#x20;using&#x20;GNOME&#x20;Display&#x20;Manager&#x20;for&#x20;graphical&#x20;login&#x20;session&#x20;management.&#x20;KDM&#x20;is&#x20;also&#x20;available&#x20;as&#x20;well&#x20;as&#x20;lightdm.&#x20;Instructions&#x20;are&#x20;provided&#x20;for&#x20;GDM&#x20;only,&#x20;if&#x20;you&#x20;are&#x20;using&#x20;another&#x20;display&#x20;manager&#x20;you&#x20;will&#x20;need&#x20;to&#x20;follow&#x20;different&#x20;procedures&#x20;to&#x20;audit&#x20;and&#x20;remediate&#x20;this&#x20;setting.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Consult&#x20;with&#x20;your&#x20;organization&#039;s&#x20;legal&#x20;counsel&#x20;for&#x20;the&#x20;appropriate&#x20;wording&#x20;for&#x20;your&#x20;specific&#x20;organization.','','Uncomment&#x20;or&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;/etc/gdm3/greeter.gsettings&#x20;:&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;&lt;banner-text&gt;&#039;','[{\"cis\": [\"11.3\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(1143,'Verify&#x20;permissions&#x20;on&#x20;/etc/passwd','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/passwd&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"12.1\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1144,'Verify&#x20;permissions&#x20;on&#x20;/etc/shadow','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/shadow&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/shadow','[{\"cis\": [\"12.2\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1145,'Verify&#x20;permissions&#x20;on&#x20;/etc/group','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/group&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"12.3\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1146,'Verify&#x20;User/Group&#x20;Ownership&#x20;on&#x20;/etc/passwd','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;userIDs&#x20;defined&#x20;in&#x20;the&#x20;system,&#x20;but&#x20;not&#x20;the&#x20;passwords.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/passwd&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','If&#x20;the&#x20;user&#x20;and&#x20;group&#x20;ownership&#x20;of&#x20;the&#x20;/etc/passwd&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chown&#x20;root:root&#x20;/etc/passwd','[{\"cis\": [\"12.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1147,'Verify&#x20;User/Group&#x20;Ownership&#x20;on&#x20;/etc/shadow','The&#x20;/etc/shadow&#x20;file&#x20;contains&#x20;the&#x20;one-way&#x20;cipher&#x20;text&#x20;passwords&#x20;for&#x20;each&#x20;user&#x20;defined&#x20;in&#x20;the&#x20;/etc/passwd&#x20;file.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;user&#x20;and&#x20;group&#x20;ownership&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','If&#x20;the&#x20;ownership&#x20;of&#x20;the&#x20;/etc/shadow&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chown&#x20;root:shadow&#x20;/etc/shadow','[{\"cis\": [\"12.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1148,'Verify&#x20;User/Group&#x20;Ownership&#x20;on&#x20;/etc/group','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','If&#x20;the&#x20;ownership&#x20;of&#x20;the&#x20;/etc/group&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chown&#x20;root:root&#x20;/etc/group','[{\"cis\": [\"12.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1149,'Ensure&#x20;Password&#x20;Fields&#x20;are&#x20;Not&#x20;Empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;/usr/bin/passwd&#x20;-l&#x20;&lt;username&gt;&#x20;&#x20;&#x20;&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"13.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}]'),(1150,'Verify&#x20;No&#x20;Legacy&#x20;&quot;+&quot;&#x20;Entries&#x20;Exist&#x20;in&#x20;/etc/passwd&#x20;File','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Delete&#x20;these&#x20;entries&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"13.2\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1151,'Verify&#x20;No&#x20;Legacy&#x20;&quot;+&quot;&#x20;Entries&#x20;Exist&#x20;in&#x20;/etc/shadow&#x20;File','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Delete&#x20;these&#x20;entries&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"13.3\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1152,'Verify&#x20;No&#x20;Legacy&#x20;&quot;+&quot;&#x20;Entries&#x20;Exist&#x20;in&#x20;/etc/group&#x20;File','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Delete&#x20;these&#x20;entries&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"13.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1153,'Verify&#x20;No&#x20;UID&#x20;0&#x20;Accounts&#x20;Exist&#x20;Other&#x20;Than&#x20;root','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;9.4&#x20;Restrict&#x20;root&#x20;Login&#x20;to&#x20;System&#x20;Console.','','Delete&#x20;any&#x20;other&#x20;entries&#x20;that&#x20;are&#x20;displayed.','[{\"cis\": [\"13.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\", \"CC8.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1154,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group.','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;all&#x20;users&#x20;from&#x20;the&#x20;shadow&#x20;group,&#x20;and&#x20;change&#x20;the&#x20;primary&#x20;group&#x20;of&#x20;any&#x20;users&#x20;with&#x20;shadow&#x20;as&#x20;their&#x20;primary&#x20;group.','[{\"cis\": [\"13.20\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1500,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;#&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1501,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;#&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1502,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;#&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1503,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;#&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1504,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;#&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1505,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;#&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.6\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1506,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.7\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1507,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate&#x20;or&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;umask&#x20;tmp.mount;&#x20;systemctl&#x20;enable&#x20;tmp.mount.&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount.','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1508,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1509,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1510,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1511,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1512,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1513,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1514,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1515,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1516,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1517,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1518,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','When&#x20;set&#x20;on&#x20;a&#x20;file&#x20;system,&#x20;this&#x20;option&#x20;prevents&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices&#x20;from&#x20;being&#x20;defined,&#x20;or&#x20;if&#x20;they&#x20;exist,&#x20;from&#x20;being&#x20;used&#x20;as&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.&#x20;&#x20;Note:&#x20;The&#x20;actions&#x20;in&#x20;the&#x20;item&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined&#x20;in&#x20;many&#x20;distributions.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"13\", \"15.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1519,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/run/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1520,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1521,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/run/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1522,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;it&#039;s&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Disable&#x20;autofs:&#x20;#&#x20;update-rc.d&#x20;autofs&#x20;disable','[{\"cis\": [\"1.1.21\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1523,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Install&#x20;AIDE:&#x20;#&#x20;apt-get&#x20;install&#x20;aide&#x20;aide-common.&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#&#x20;aideinit','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1524,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Execute&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check.&#x20;Note:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;instance&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1525,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;stored&#x20;in&#x20;/boot/grub.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.cfg,&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1526,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','1&#41;&#x20;Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt:&#x20;#&#x20;grub-mkpasswd-pbkdf2&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;Your&#x20;PBKDF2&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;2&#41;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;/etc/grub.d/00_header&#x20;or&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;cat&#x20;&lt;&lt;EOF&#x20;set&#x20;superusers=&quot;&lt;user-list&gt;&quot;&#x20;password_pbkdf2&#x20;&lt;user&gt;&#x20;&lt;encrypted-password&gt;&#x20;EOF&#x20;Unless&#x20;the&#x20;--unrestricted&#x20;option&#x20;is&#x20;added&#x20;to&#x20;CLASS&#x20;in&#x20;/etc/grub.d/10_linux&#x20;a&#x20;password&#x20;will&#x20;be&#x20;required&#x20;to&#x20;boot&#x20;in&#x20;addition&#x20;to&#x20;editing&#x20;boot&#x20;parameters:&#x20;CLASS=&quot;--class&#x20;gnu-linux&#x20;--class&#x20;gnu&#x20;--class&#x20;os&#x20;--unrestricted&quot;&#x20;3&#41;&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;grub&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1527,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Run&#x20;the&#x20;following&#x20;command&#x20;and&#x20;follow&#x20;the&#x20;prompts&#x20;to&#x20;set&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;passwd&#x20;root','[{\"cis\": [\"1.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1528,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/security/limits.conf&#x20;file.&#x20;&#x20;*&#x20;hard&#x20;core&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1529,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1530,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;and&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1531,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal&#x20;and&#x20;uninstall&#x20;prelink:&#x20;prelink&#x20;-ua&#x20;&amp;&amp;&#x20;apt-get&#x20;remove&#x20;prelink','[{\"cis\": [\"1.5.4\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1532,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.6.1.1\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1533,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.6.1.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1534,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.6.1.3\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1535,'Ensure&#x20;no&#x20;unconfined&#x20;daemons&#x20;exist','Daemons&#x20;that&#x20;are&#x20;not&#x20;defined&#x20;in&#x20;SELinux&#x20;policy&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;of&#x20;their&#x20;parent&#x20;process.','Since&#x20;daemons&#x20;are&#x20;launched&#x20;and&#x20;descend&#x20;from&#x20;the&#x20;init&#x20;process,&#x20;they&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;label&#x20;initrc_t&#x20;.&#x20;This&#x20;could&#x20;cause&#x20;the&#x20;unintended&#x20;consequence&#x20;of&#x20;giving&#x20;the&#x20;process&#x20;more&#x20;permission&#x20;than&#x20;it&#x20;requires.','','Investigate&#x20;any&#x20;unconfined&#x20;daemons&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.6.1.4\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1536,'Ensure&#x20;AppArmor&#x20;is&#x20;enabled&#x20;in&#x20;the&#x20;bootloader&#x20;configuration','Configure&#x20;AppArmor&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwrittenby&#x20;the&#x20;bootloader&#x20;boot&#x20;parameters.','AppArmor&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;appermor=1&#x20;and&#x20;security=apparmor&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;apparmor=1&#x20;security=apparmor&quot;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;update&#x20;the&#x20;grub&#x20;configuration&#x20;#&#x20;update-grub&#x20;&#x20;&#x20;&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"1.6.2.1\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1537,'Ensure&#x20;all&#x20;AppArmor&#x20;Profiles&#x20;are&#x20;enforcing','AppArmor&#x20;profiles&#x20;define&#x20;what&#x20;resources&#x20;applicatons&#x20;are&#x20;able&#x20;to&#x20;access.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;any&#x20;policies&#x20;that&#x20;exist&#x20;on&#x20;the&#x20;system&#x20;are&#x20;activated..','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"1.6.2.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1538,'Ensure&#x20;SELinux&#x20;or&#x20;AppArmor&#x20;are&#x20;installed','SELinux&#x20;and&#x20;AppArmor&#x20;provide&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;SELinux&#x20;or&#x20;apparmor:&#x20;#&#x20;apt-get&#x20;install&#x20;selinux-basics&#x20;Or:&#x20;#&#x20;apt-get&#x20;install&#x20;apparmor&#x20;apparmor-profiles&#x20;apparmor-utils','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1539,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v.','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"7.1\"]}]'),(1540,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x0d;,s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"7.1\"]}]'),(1541,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"7.1\"]}]'),(1542,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1543,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1544,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1545,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add:&#x20;[org/gnome/login-screen],&#x20;banner-message-enable=true,&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.7.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1546,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;Notes:&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.','[{\"cis\": [\"1.8\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(1547,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;xinetd&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;xinetd:&#x20;#&#x20;apt-get&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1548,'Ensure&#x20;inetd&#x20;is&#x20;not&#x20;installed','The&#x20;inetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;inetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;uninstall&#x20;openbsd-inetd&#x20;and&#x20;inetutils-inetd:&#x20;#&#x20;apt-get&#x20;remove&#x20;openbsd-inetd&#x20;#&#x20;apt-get&#x20;remove&#x20;inetutils-inetd','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1549,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;install&#x20;NTP&#x20;or&#x20;chrony&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;apt-get&#x20;install&#x20;ntp&#x20;#&#x20;apt-get&#x20;install&#x20;chrony&#x20;&#x20;&#x20;&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;setup&#x20;host&#x20;based&#x20;synchronization.','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1550,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;&#x20;&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;.&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;&#x20;&#x20;server&#x20;&lt;remote-server&gt;&#x20;.&#x20;Configure&#x20;ntp&#x20;to&#x20;run&#x20;as&#x20;the&#x20;ntp&#x20;user&#x20;by&#x20;adding&#x20;or&#x20;editing&#x20;the&#x20;/etc/init.d/ntp&#x20;file:&#x20;&#x20;&#x20;RUNASUSER=ntp','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1551,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1552,'Ensure&#x20;the&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;apt-get&#x20;remove&#x20;xserver-xorg*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1553,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attach&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1554,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups:&#x20;#&#x20;systemctl&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1555,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;isc-dhcp-server&#x20;#&#x20;systemctl&#x20;disable&#x20;isc-dhcp-server6','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1556,'Ensure&#x20;LDAP&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1557,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind:&#x20;#&#x20;systemctl&#x20;disable&#x20;nfs-server&#x20;#&#x20;systemctl&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1558,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;systemctl&#x20;disable&#x20;bind9','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1559,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1560,'Ensure&#x20;HTTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2:&#x20;#&#x20;systemctl&#x20;disable&#x20;apache2','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1561,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','exim&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;exim:&#x20;#&#x20;apt-get&#x20;remove&#x20;exim4;&#x20;#&#x20;apt-get&#x20;purge&#x20;exim4','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1562,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smbd:&#x20;#&#x20;systemctl&#x20;disable&#x20;smbd','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1563,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1564,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1565,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(1566,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;disable&#x20;rsync','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1567,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;nis:&#x20;#&#x20;systemctl&#x20;disable&#x20;nis','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1568,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Uninstall&#x20;the&#x20;nis&#x20;package:&#x20;#&#x20;apt-get&#x20;remove&#x20;nis','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1569,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rshpackage&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh,&#x20;rcpand&#x20;rlogin.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh:&#x20;apt-get&#x20;remove&#x20;rsh-client&#x20;rsh-redone-client','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1570,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talkclient,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk:&#x20;apt-get&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1571,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet:&#x20;#&#x20;apt-get&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1572,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Uninstall&#x20;ldap-utils&#x20;using&#x20;the&#x20;appropriate&#x20;package&#x20;manager&#x20;or&#x20;manual&#x20;installation:&#x20;&#x20;&#x20;#&#x20;apt-get&#x20;remove&#x20;ldap-utils','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1573,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0&#x20;net.ipv6.conf.all.forwarding&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1574,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;net.ipv4.conf.all.send_redirects&#x20;and&#x20;net.ipv4.conf.default.send_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1575,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1576,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1577,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1578,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1579,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1580,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1581,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1582,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1583,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;systems&#x20;ability&#x20;to&#x20;accept&#x20;router&#x20;advertisements','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.9\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1584,'Install&#x20;TCP&#x20;Wrappers','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Install&#x20;tcpd&#x20;:&#x20;#&#x20;apt-get&#x20;install&#x20;tcpd&#x20;&#x20;&#x20;&#x20;Notes:&#x20;To&#x20;verify&#x20;if&#x20;a&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;ldd&#x20;&lt;path-to-daemon&gt;&#x20;|&#x20;grep&#x20;libwrap.so&#x20;If&#x20;there&#x20;is&#x20;any&#x20;output,&#x20;then&#x20;the&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers.','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1585,'Ensure&#x20;/etc/hosts.allow&#x20;is&#x20;configured','The&#x20;/etc/hosts.allow&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.deny&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.allow:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;...&quot;&#x20;&gt;/etc/hosts.allow.&#x20;Where&#x20;each&#x20;&lt;net&gt;/&lt;mask&gt;&#x20;combination&#x20;&#x20;&#40;for&#x20;example,&#x20;&quot;192.168.1.0/255.255.255.0&quot;&#41;&#x20;represents&#x20;one&#x20;network&#x20;block&#x20;in&#x20;use&#x20;by&#x20;your&#x20;organization&#x20;that&#x20;requires&#x20;access&#x20;to&#x20;this&#x20;system.','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1586,'Ensure&#x20;/etc/hosts.deny&#x20;is&#x20;configured','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.deny&#x20;file&#x20;serves&#x20;as&#x20;a&#x20;failsafe&#x20;so&#x20;that&#x20;any&#x20;host&#x20;not&#x20;specified&#x20;in&#x20;/etc/hosts.allow&#x20;is&#x20;denied&#x20;access&#x20;to&#x20;the&#x20;server.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.deny:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;ALL&quot;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1587,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.allow','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;:&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/hosts.allow&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1588,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.deny','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/hosts.deny&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1589,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-&#x20;sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1590,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1591,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1592,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1593,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1594,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1595,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.2.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1596,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.2.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1597,'Ensure&#x20;iptables&#x20;is&#x20;installed','iptables&#x20;allows&#x20;configuration&#x20;of&#x20;the&#x20;IPv4&#x20;tables&#x20;in&#x20;the&#x20;linux&#x20;kernel&#x20;and&#x20;the&#x20;rules&#x20;stored&#x20;within&#x20;them.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;iptables.','iptables&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;iptables:&#x20;#&#x20;apt-get&#x20;install&#x20;iptables','[{\"cis\": [\"3.5.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1598,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;few&#x20;organizations&#x20;have&#x20;implemented&#x20;IPv6.','If&#x20;IPv6&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;&#x20;#&#x20;update-grub','[{\"cis\": [\"3.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1599,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;&#x20;Notes:&#x20;The&#x20;max_log_file&#x20;parameter&#x20;is&#x20;measured&#x20;in&#x20;megabytes.','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.3\"]}]'),(1600,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;action_mail_acct&#x20;=&#x20;root&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}]'),(1601,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.3\"]}]'),(1602,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\"\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1603,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;or&#x20;lilo&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','1&#41;&#x20;Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1604,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-&#x20;change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.3\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1605,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1606,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-&#x20;login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;&#x20;and&#x20;/etc/sysconfig/network&#x20;&#40;directory&#x20;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;&#x20;files.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;Notes:&#x20;/etc/sysconfig/network&#x20;is&#x20;common&#x20;to&#x20;Red&#x20;Hat&#x20;and&#x20;SUSE&#x20;based&#x20;distributions.&#x20;You&#x20;should&#x20;expand&#x20;or&#x20;replace&#x20;this&#x20;coverage&#x20;to&#x20;any&#x20;network&#x20;configuration&#x20;files&#x20;on&#x20;your&#x20;system&#x20;such&#x20;as&#x20;/etc/network&#x20;on&#x20;Debian&#x20;based&#x20;distributions.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1607,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux/AppArmor&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','On&#x20;systems&#x20;using&#x20;SELinux&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;&#x20;|&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;On&#x20;systems&#x20;using&#x20;AppArmor&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/apparmor/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;|&#x20;-w&#x20;/etc/apparmor.d/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1608,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/log/faillog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1609,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;|&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;last&#x20;-f&#x20;/var/run/utmp&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1610,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1611,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1612,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1613,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1614,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;|&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1615,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions.&#x20;Notes:&#x20;The&#x20;system&#x20;must&#x20;be&#x20;configured&#x20;with&#x20;sudisabled&#x20;&#40;See&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted&#41;&#x20;to&#x20;force&#x20;all&#x20;command&#x20;execution&#x20;through&#x20;sudo.&#x20;This&#x20;will&#x20;not&#x20;be&#x20;effective&#x20;on&#x20;the&#x20;console,&#x20;as&#x20;administrators&#x20;can&#x20;log&#x20;in&#x20;as&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1616,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"3\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1617,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;end&#x20;of&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-e&#x20;2.&#x20;Notes:&#x20;This&#x20;setting&#x20;will&#x20;ensure&#x20;reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;requires&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.18\"]}, {\"cis_csc\": [\"3\", \"6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\"]}]'),(1618,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;will&#x20;not&#x20;have&#x20;a&#x20;syslog&#x20;service&#x20;running.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;#&#x20;systemctl&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1619,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(1620,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;:&#x20;*.*&#x20;@@loghost.example.com.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1621,'Ensure&#x20;remote&#x20;rsyslog&#x20;messages&#x20;are&#x20;only&#x20;accepted&#x20;on&#x20;designated&#x20;log&#x20;hosts','By&#x20;default,&#x20;rsyslog&#x20;does&#x20;not&#x20;listen&#x20;for&#x20;log&#x20;messages&#x20;coming&#x20;in&#x20;from&#x20;remote&#x20;systems.&#x20;The&#x20;ModLoad&#x20;tells&#x20;rsyslog&#x20;to&#x20;load&#x20;the&#x20;imtcp.so&#x20;module&#x20;so&#x20;it&#x20;can&#x20;listen&#x20;over&#x20;a&#x20;network&#x20;via&#x20;TCP.&#x20;The&#x20;InputTCPServerRun&#x20;option&#x20;instructs&#x20;rsyslogd&#x20;to&#x20;listen&#x20;on&#x20;the&#x20;specified&#x20;TCP&#x20;port.','The&#x20;guidance&#x20;in&#x20;the&#x20;section&#x20;ensures&#x20;that&#x20;remote&#x20;log&#x20;hosts&#x20;are&#x20;configured&#x20;to&#x20;only&#x20;accept&#x20;rsyslog&#x20;data&#x20;from&#x20;hosts&#x20;within&#x20;the&#x20;specified&#x20;domain&#x20;and&#x20;that&#x20;those&#x20;systems&#x20;that&#x20;are&#x20;not&#x20;designed&#x20;to&#x20;be&#x20;log&#x20;hosts&#x20;do&#x20;not&#x20;accept&#x20;any&#x20;remote&#x20;rsyslog&#x20;messages.&#x20;This&#x20;provides&#x20;protection&#x20;from&#x20;spoofed&#x20;log&#x20;data&#x20;and&#x20;ensures&#x20;that&#x20;system&#x20;administrators&#x20;are&#x20;reviewing&#x20;reasonably&#x20;complete&#x20;syslog&#x20;data&#x20;in&#x20;a&#x20;central&#x20;location.','','For&#x20;hosts&#x20;that&#x20;are&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;un-comment&#x20;or&#x20;add&#x20;the&#x20;following&#x20;lines:$ModLoad&#x20;imtcp&#x20;&amp;&#x20;$InputTCPServerRun&#x20;514.&#x20;For&#x20;hosts&#x20;that&#x20;are&#x20;not&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;comment&#x20;or&#x20;remove&#x20;the&#x20;following&#x20;lines:&#x20;#&#x20;$ModLoad&#x20;imtcp&#x20;#&#x20;$InputTCPServerRun&#x20;514.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"10.5.1\"]}]'),(1622,'Ensure&#x20;syslog-ng&#x20;service&#x20;is&#x20;enabled','Once&#x20;the&#x20;syslog-ng&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;syslog-ng&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;syslog-ng','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1623,'Ensure&#x20;syslog-ng&#x20;default&#x20;file&#x20;permissions&#x20;configured','syslog-ng&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;syslog-ng&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;and&#x20;set&#x20;perm&#x20;option&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;&#x20;&#x20;options&#x20;{&#x20;chain_hostnames&#40;off&#41;;&#x20;flush_lines&#40;0&#41;;&#x20;perm&#40;0640&#41;;&#x20;stats_freq&#40;3600&#41;;&#x20;threaded&#40;yes&#41;;&#x20;};','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(1624,'Ensure&#x20;syslog-ng&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;syslog-ng&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;&#x20;destination&#x20;logserver&#x20;{&#x20;tcp&#40;&quot;logfile.example.com&quot;&#x20;port&#40;514&#41;&#41;;&#x20;};&#x20;&#x20;&#x20;&#x20;log&#x20;{&#x20;source&#40;src&#41;;&#x20;destination&#40;logserver&#41;;&#x20;};&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;syslog-ng','[{\"cis\": [\"4.2.2.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1625,'Ensure&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;apt-get&#x20;install&#x20;rsyslog&#x20;#&#x20;apt-get&#x20;install&#x20;syslog-ng','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1626,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron:&#x20;systemctl&#x20;enable&#x20;cron','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1627,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1628,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1629,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1630,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1631,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1632,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1633,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1634,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-&#x20;privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1635,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1636,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1637,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1638,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1639,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhostsand&#x20;.shostsfiles&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthenticationor&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1640,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1641,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1642,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1643,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(1644,'Ensure&#x20;only&#x20;strong&#x20;ciphers&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&quot;Sweet32&quot;&#x20;attack&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involving&#x20;LSB&#x20;values,&#x20;aka&#x20;the&#x20;&quot;Bar&#x20;Mitzvah&quot;&#x20;issue&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;Ciphers&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphers&#x20;Example:&#x20;Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(1645,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:&#x20;MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-&#x20;512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(1646,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms&#x20;Example:&#x20;KexAlgorithms&#x20;curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(1647,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;&#x20;&#x20;&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(1648,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.1\"]}]'),(1649,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers,&#x20;AllowGroups,&#x20;DenyUsers,&#x20;DenyGroups.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;AllowGroups&#x20;&lt;grouplist&gt;&#x20;&#x20;&#x20;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"5.1\", \"5.8\"]}, {\"pci_dss\": [\"8.1\"]}]'),(1650,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1651,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options:&#x20;-&#x20;retry=3&#x20;&#40;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure&#41;.&#x20;The&#x20;following&#x20;options&#x20;are&#x20;set&#x20;in&#x20;the&#x20;/etc/security/pwquality.conf&#x20;file:&#x20;-&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#40;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies.&#41;','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','1&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;the&#x20;pam_pwquality&#x20;module:&#x20;apt-get&#x20;install&#x20;libpam-pwquality&#x20;2&#41;&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_pwquality.so&#x20;retry=3&#x20;3&#41;&#x20;Edit&#x20;/etc/security/pwquality.conf&#x20;to&#x20;add&#x20;or&#x20;update&#x20;the&#x20;following&#x20;settings&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;requirements&#x20;only&#x20;cover&#x20;including&#x20;try_first_pass&#x20;and&#x20;minlen&#x20;set&#x20;to&#x20;14&#x20;or&#x20;more.&#x20;Settings&#x20;in&#x20;/etc/security/pwquality.conf&#x20;must&#x20;use&#x20;spaces&#x20;around&#x20;the&#x20;=&#x20;symbol.','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"5.7\", \"16.12\"]}, {\"pci_dss\": [\"8.2.3\"]}]'),(1652,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;files.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.&#x20;Check&#x20;the&#x20;documentation&#x20;for&#x20;each&#x20;secondary&#x20;program&#x20;for&#x20;instructions&#x20;on&#x20;how&#x20;to&#x20;configure&#x20;them&#x20;to&#x20;work&#x20;with&#x20;PAM.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;to&#x20;the&#x20;policy&#x20;in&#x20;effect&#x20;at&#x20;your&#x20;site.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/common-auth&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900.&#x20;Note:&#x20;If&#x20;a&#x20;user&#x20;has&#x20;been&#x20;locked&#x20;out&#x20;because&#x20;they&#x20;have&#x20;reached&#x20;the&#x20;maximum&#x20;consecutive&#x20;failure&#x20;count&#x20;defined&#x20;by&#x20;deny=&#x20;in&#x20;the&#x20;pam_tally2.so&#x20;module,&#x20;the&#x20;user&#x20;can&#x20;be&#x20;unlocked&#x20;by&#x20;issuing&#x20;the&#x20;command&#x20;/sbin/pam_tally2&#x20;-u&#x20;&lt;username&gt;&#x20;--reset.&#x20;This&#x20;command&#x20;sets&#x20;the&#x20;failed&#x20;count&#x20;to&#x20;0,&#x20;effectively&#x20;unlocking&#x20;the&#x20;user.&#x20;Notes:&#x20;Use&#x20;of&#x20;the&#x20;&quot;audit&quot;&#x20;keyword&#x20;may&#x20;log&#x20;credentials&#x20;in&#x20;the&#x20;case&#x20;of&#x20;user&#x20;error&#x20;during&#x20;authentication.&#x20;This&#x20;risk&#x20;should&#x20;be&#x20;evaluated&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;site&#x20;policies&#x20;of&#x20;your&#x20;organization.','[{\"cis\": [\"5.3.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(1653,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;only&#x20;covers&#x20;those&#x20;listed&#x20;here.','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(1654,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;[success=1&#x20;default=ignore]&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1655,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MAX_DAYS&#x20;90.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;5th&#x20;field&#x20;should&#x20;be&#x20;365&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;will&#x20;disable&#x20;password&#x20;expiration.&#x20;Additionally&#x20;the&#x20;password&#x20;expiration&#x20;must&#x20;be&#x20;greater&#x20;than&#x20;the&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;or&#x20;users&#x20;will&#x20;be&#x20;unable&#x20;to&#x20;change&#x20;their&#x20;password.','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.4\"]}]'),(1656,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;4th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1657,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;6th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1658,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;#&#x20;useradd&#x20;-D&#x20;-f&#x20;30.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;7th&#x20;field&#x20;should&#x20;be&#x20;30&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;would&#x20;disable&#x20;this&#x20;setting.','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1659,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;#&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1660,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1661,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc,&#x20;/etc/profile&#x20;files,&#x20;and&#x20;/etc/profile.d*.sh&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(1662,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;group&#x20;to&#x20;execute&#x20;su.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','1&#41;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;2&#41;&#x20;Create&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;statement&#x20;in&#x20;the&#x20;/etc/group&#x20;file:&#x20;sudo:x:10:root,&lt;user&#x20;list&gt;&#x20;Notes:&#x20;The&#x20;use_uid&#x20;option&#x20;to&#x20;pam_wheel.so&#x20;is&#x20;a&#x20;no-op&#x20;on&#x20;debian&#x20;based&#x20;systems.&#x20;It&#x20;is&#x20;acceptable&#x20;but&#x20;not&#x20;required&#x20;as&#x20;these&#x20;systems&#x20;use&#x20;its&#x20;behavior&#x20;as&#x20;default.','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1663,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1664,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1665,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1666,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1667,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1668,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1669,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1670,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1671,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;em&gt;&lt;username&gt;&lt;/em&gt;.&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}]'),(1672,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1673,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1674,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1675,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1676,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group.','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;all&#x20;users&#x20;from&#x20;the&#x20;shadow&#x20;group,&#x20;and&#x20;change&#x20;the&#x20;primary&#x20;group&#x20;of&#x20;any&#x20;users&#x20;with&#x20;shadow&#x20;as&#x20;their&#x20;primary&#x20;group.','[{\"cis\": [\"6.2.20\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2000,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/freevxfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;#&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2001,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/jffs2.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;#&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2002,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/hfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;#&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2003,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.confExample:&#x20;vim&#x20;/etc/modprobe.d/hfsplus.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;#&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2004,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/udf.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2005,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;Example:&#x20;tmpfs&#x20;/tmp&#x20;tmpfs&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;0&#x20;0&#x20;or&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;systemctl&#x20;enable&#x20;tmp.mount&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2006,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount:&#x20;[Mount]&#x20;What=tmpfs&#x20;&#x20;Where=/tmp&#x20;&#x20;Type=tmpfs&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;and&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;systemctl&#x20;enable&#x20;tmp.mount','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2007,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2008,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp&#x20;.','','Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2.6\", \"8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2009,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2010,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2011,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2012,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2013,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2014,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2015,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2016,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2017,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','When&#x20;set&#x20;on&#x20;a&#x20;file&#x20;system,&#x20;this&#x20;option&#x20;prevents&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices&#x20;from&#x20;being&#x20;defined,&#x20;or&#x20;if&#x20;they&#x20;exist,&#x20;from&#x20;being&#x20;used&#x20;as&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.&#x20;&#x20;Note:&#x20;The&#x20;actions&#x20;in&#x20;the&#x20;item&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined&#x20;in&#x20;many&#x20;distributions.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2018,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/run/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2019,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2020,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2.6\", \"8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2021,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;it&#039;s&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;#&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2022,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;AIDE:&#x20;#&#x20;apt-get&#x20;install&#x20;aide&#x20;aide-common.&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#&#x20;aideinit','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2023,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;&#x20;&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/bin/aide.wrapper&#x20;--config&#x20;/etc/aide/aide.conf&#x20;--check','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2024,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;stored&#x20;in&#x20;/boot/grub.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.cfg,&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2025,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-mkpasswd-pbkdf2&#x20;Create&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;If&#x20;there&#x20;is&#x20;a&#x20;requirement&#x20;to&#x20;be&#x20;able&#x20;to&#x20;boot/reboot&#x20;without&#x20;entering&#x20;the&#x20;password,&#x20;edit&#x20;/etc/grub.d/10_linux&#x20;and&#x20;add&#x20;--unrestricted&#x20;to&#x20;the&#x20;line&#x20;CLASS=&#x20;Example:&#x20;CLASS=&quot;--class&#x20;gnu-linux&#x20;--class&#x20;gnu&#x20;--class&#x20;os&#x20;--unrestricted&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2026,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Run&#x20;the&#x20;following&#x20;command&#x20;and&#x20;follow&#x20;the&#x20;prompts&#x20;to&#x20;set&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;passwd&#x20;root','[{\"cis\": [\"1.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2027,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2028,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2029,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2030,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal&#x20;and&#x20;uninstall&#x20;prelink:&#x20;prelink&#x20;-ua&#x20;&amp;&amp;&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.5.4\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2031,'Ensure&#x20;SELinux&#x20;is&#x20;enabled&#x20;in&#x20;the&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;configure&#x20;GRUB&#x20;and&#x20;PAM&#x20;and&#x20;to&#x20;create&#x20;/.autorelabel:&#x20;&#x20;#&#x20;selinux-activate&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;following&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line:&#x20;&#x20;&#x20;&#x20;&#x20;selinux=1&#x20;&#x20;security=selinux&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;example:&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;&#x20;&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;selinux=1&#x20;security=selinux&#x20;enforcing=1&#x20;audit=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2configuration:&#x20;&#x20;&#x20;&#x20;#&#x20;update-grub','[{\"cis\": [\"1.6.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2032,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing&#x20;&#x20;&#x20;Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;following&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line:&#x20;enforcing=1&#x20;&#x20;&#x20;&#x20;Example:&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;selinux=1&#x20;security=selinux&#x20;enforcing=1&#x20;audit=1&quot;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.6.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2033,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.6.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2034,'Ensure&#x20;no&#x20;unconfined&#x20;daemons&#x20;exist','Daemons&#x20;that&#x20;are&#x20;not&#x20;defined&#x20;in&#x20;SELinux&#x20;policy&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;of&#x20;their&#x20;parent&#x20;process.','Since&#x20;daemons&#x20;are&#x20;launched&#x20;and&#x20;descend&#x20;from&#x20;the&#x20;init&#x20;process,&#x20;they&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;label&#x20;initrc_t&#x20;.&#x20;This&#x20;could&#x20;cause&#x20;the&#x20;unintended&#x20;consequence&#x20;of&#x20;giving&#x20;the&#x20;process&#x20;more&#x20;permission&#x20;than&#x20;it&#x20;requires.','','Investigate&#x20;any&#x20;unconfined&#x20;daemons&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.6.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2035,'Ensure&#x20;AppArmor&#x20;is&#x20;enabled&#x20;in&#x20;the&#x20;bootloader&#x20;configuration','Configure&#x20;AppArmor&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwrittenby&#x20;the&#x20;bootloader&#x20;boot&#x20;parameters.','AppArmor&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;appermor=1&#x20;and&#x20;security=apparmor&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;apparmor=1&#x20;security=apparmor&quot;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;update&#x20;the&#x20;grub&#x20;configuration&#x20;#&#x20;update-grub&#x20;&#x20;&#x20;&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"1.6.2.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2036,'Ensure&#x20;all&#x20;AppArmor&#x20;Profiles&#x20;are&#x20;enforcing','AppArmor&#x20;profiles&#x20;define&#x20;what&#x20;resources&#x20;applicatons&#x20;are&#x20;able&#x20;to&#x20;access.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;any&#x20;policies&#x20;that&#x20;exist&#x20;on&#x20;the&#x20;system&#x20;are&#x20;activated..','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"1.6.2.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2037,'Ensure&#x20;SELinux&#x20;or&#x20;AppArmor&#x20;are&#x20;installed','SELinux&#x20;and&#x20;AppArmor&#x20;provide&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;SELinux&#x20;or&#x20;apparmor:&#x20;#&#x20;apt-get&#x20;install&#x20;selinux-basics&#x20;Or:&#x20;#&#x20;apt-get&#x20;install&#x20;apparmor&#x20;apparmor-profiles&#x20;apparmor-utils','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2038,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v.','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}]'),(2039,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v&#x20;,&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"5.1\"]}]'),(2040,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}]'),(2041,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2042,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2043,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2044,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add:&#x20;[org/gnome/login-screen],&#x20;banner-message-enable=true,&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.7.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2045,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;Notes:&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.','[{\"cis\": [\"1.8\"]}, {\"cis_csc\": [\"3.4\", \"3.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(2046,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;xinetd&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetddaemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;apt-get&#x20;remove&#x20;xinetd&#x20;#&#x20;apt-get&#x20;purge&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2047,'Ensure&#x20;openbsd-inetd&#x20;is&#x20;not&#x20;installed','The&#x20;inetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;inetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openbsd-inetd:&#x20;apt-get&#x20;remove&#x20;openbsd-inetd','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2048,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;install&#x20;NTP&#x20;or&#x20;chrony&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;apt-get&#x20;install&#x20;ntp&#x20;#&#x20;apt-get&#x20;install&#x20;chrony&#x20;&#x20;&#x20;&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;setup&#x20;host&#x20;based&#x20;synchronization.','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2049,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;Configure&#x20;ntp&#x20;to&#x20;run&#x20;as&#x20;the&#x20;ntp&#x20;user&#x20;by&#x20;adding&#x20;or&#x20;editing&#x20;the&#x20;/etc/init.d/ntp&#x20;file:&#x20;RUNASUSER=ntp','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2050,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2051,'Ensure&#x20;the&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;apt-get&#x20;remove&#x20;xserver-xorg*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(2052,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attach&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2053,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups:&#x20;#&#x20;systemctl&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2054,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;isc-dhcp-server&#x20;#&#x20;systemctl&#x20;disable&#x20;isc-dhcp-server6','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2055,'Ensure&#x20;LDAP&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2056,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind:&#x20;#&#x20;systemctl&#x20;disable&#x20;nfs-server&#x20;#&#x20;systemctl&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2057,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;systemctl&#x20;disable&#x20;bind9','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2058,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2059,'Ensure&#x20;HTTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2:&#x20;#&#x20;systemctl&#x20;disable&#x20;apache2','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2060,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','exim&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;exim:&#x20;#&#x20;apt-get&#x20;remove&#x20;exim4;&#x20;#&#x20;apt-get&#x20;purge&#x20;exim4','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2061,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smbd:&#x20;#&#x20;systemctl&#x20;disable&#x20;smbd','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2062,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2063,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2064,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(2065,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;disable&#x20;rsync','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(2066,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;nis:&#x20;#&#x20;systemctl&#x20;disable&#x20;nis','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2067,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Uninstall&#x20;the&#x20;nis&#x20;package:&#x20;#&#x20;apt-get&#x20;remove&#x20;nis','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2068,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rshpackage&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rshpackage&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh,&#x20;rcpand&#x20;rlogin.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh:&#x20;apt-get&#x20;remove&#x20;rsh-client&#x20;rsh-redone-client','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2.6\", \"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2069,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talksoftware&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talkclient,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk:&#x20;apt-get&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2070,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet:&#x20;#&#x20;apt-get&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2.6\", \"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2071,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;apt-get&#x20;remove&#x20;ldap-utils','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2072,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0&#x20;net.ipv6.conf.all.forwarding&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2073,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;net.ipv4.conf.all.send_redirects&#x20;and&#x20;net.ipv4.conf.default.send_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2074,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2075,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv6.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2076,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2077,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2078,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2079,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2080,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2081,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2082,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;systems&#x20;ability&#x20;to&#x20;accept&#x20;router&#x20;advertisements','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2083,'Install&#x20;TCP&#x20;Wrappers','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Install&#x20;tcpd&#x20;:&#x20;#&#x20;apt-get&#x20;install&#x20;tcpd&#x20;To&#x20;verify&#x20;if&#x20;a&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;ldd&#x20;&lt;path-to-daemon&gt;&#x20;|&#x20;grep&#x20;libwrap.so&#x20;If&#x20;there&#x20;is&#x20;any&#x20;output,&#x20;then&#x20;the&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers.','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(2084,'Ensure&#x20;/etc/hosts.allow&#x20;is&#x20;configured','The&#x20;/etc/hosts.allow&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.deny&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.allow:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;...&quot;&#x20;&gt;/etc/hosts.allow.&#x20;Where&#x20;each&#x20;&lt;net&gt;/&lt;mask&gt;&#x20;combination&#x20;&#x20;&#40;for&#x20;example,&#x20;&quot;192.168.1.0/255.255.255.0&quot;&#41;&#x20;represents&#x20;one&#x20;network&#x20;block&#x20;in&#x20;use&#x20;by&#x20;your&#x20;organization&#x20;that&#x20;requires&#x20;access&#x20;to&#x20;this&#x20;system.','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(2085,'Ensure&#x20;/etc/hosts.deny&#x20;is&#x20;configured','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.deny&#x20;file&#x20;serves&#x20;as&#x20;a&#x20;failsafe&#x20;so&#x20;that&#x20;any&#x20;host&#x20;not&#x20;specified&#x20;in&#x20;/etc/hosts.allow&#x20;is&#x20;denied&#x20;access&#x20;to&#x20;the&#x20;server.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.deny:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;ALL&quot;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(2086,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.allow','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;:&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/hosts.allow&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2087,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.deny','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/hosts.deny&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2088,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-&#x20;sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2089,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2090,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2091,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2092,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2093,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2094,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2095,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2096,'Ensure&#x20;iptables&#x20;is&#x20;installed','iptables&#x20;allows&#x20;configuration&#x20;of&#x20;the&#x20;IPv4&#x20;tables&#x20;in&#x20;the&#x20;linux&#x20;kernel&#x20;and&#x20;the&#x20;rules&#x20;stored&#x20;within&#x20;them.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;iptables.','iptables&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;iptables:&#x20;#&#x20;apt-get&#x20;install&#x20;iptables','[{\"cis\": [\"3.5.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2097,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;&#x20;Notes:&#x20;The&#x20;max_log_file&#x20;parameter&#x20;is&#x20;measured&#x20;in&#x20;megabytes.','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.4\"]}]'),(2098,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;action_mail_acct&#x20;=&#x20;root&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.4\"]}]'),(2099,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.4\"]}]'),(2100,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\"\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2101,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;or&#x20;lilo&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','1&#41;&#x20;Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2102,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-&#x20;change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.3\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2103,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2104,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-&#x20;login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;&#x20;and&#x20;/etc/sysconfig/network&#x20;&#40;directory&#x20;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;&#x20;files.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;Notes:&#x20;/etc/sysconfig/network&#x20;is&#x20;common&#x20;to&#x20;Red&#x20;Hat&#x20;and&#x20;SUSE&#x20;based&#x20;distributions.&#x20;You&#x20;should&#x20;expand&#x20;or&#x20;replace&#x20;this&#x20;coverage&#x20;to&#x20;any&#x20;network&#x20;configuration&#x20;files&#x20;on&#x20;your&#x20;system&#x20;such&#x20;as&#x20;/etc/network&#x20;on&#x20;Debian&#x20;based&#x20;distributions.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2105,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux/AppArmor&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','On&#x20;systems&#x20;using&#x20;SELinux&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;&#x20;|&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;On&#x20;systems&#x20;using&#x20;AppArmor&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/apparmor/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;|&#x20;-w&#x20;/etc/apparmor.d/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2106,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/log/faillog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2107,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;|&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;last&#x20;-f&#x20;/var/run/utmp&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2108,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2109,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2110,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2111,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"6,2\", \"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2112,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;|&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2113,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions.&#x20;Notes:&#x20;The&#x20;system&#x20;must&#x20;be&#x20;configured&#x20;with&#x20;sudisabled&#x20;&#40;See&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted&#41;&#x20;to&#x20;force&#x20;all&#x20;command&#x20;execution&#x20;through&#x20;sudo.&#x20;This&#x20;will&#x20;not&#x20;be&#x20;effective&#x20;on&#x20;the&#x20;console,&#x20;as&#x20;administrators&#x20;can&#x20;log&#x20;in&#x20;as&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"4.9\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2114,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2115,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;end&#x20;of&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-e&#x20;2.&#x20;Notes:&#x20;This&#x20;setting&#x20;will&#x20;ensure&#x20;reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;requires&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.18\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\"]}]'),(2116,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;will&#x20;not&#x20;have&#x20;a&#x20;syslog&#x20;service&#x20;running.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;#&#x20;systemctl&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2117,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(2118,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;:&#x20;*.*&#x20;@@loghost.example.com.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2119,'Ensure&#x20;remote&#x20;rsyslog&#x20;messages&#x20;are&#x20;only&#x20;accepted&#x20;on&#x20;designated&#x20;log&#x20;hosts','By&#x20;default,&#x20;rsyslog&#x20;does&#x20;not&#x20;listen&#x20;for&#x20;log&#x20;messages&#x20;coming&#x20;in&#x20;from&#x20;remote&#x20;systems.&#x20;The&#x20;ModLoad&#x20;tells&#x20;rsyslog&#x20;to&#x20;load&#x20;the&#x20;imtcp.so&#x20;module&#x20;so&#x20;it&#x20;can&#x20;listen&#x20;over&#x20;a&#x20;network&#x20;via&#x20;TCP.&#x20;The&#x20;InputTCPServerRun&#x20;option&#x20;instructs&#x20;rsyslogd&#x20;to&#x20;listen&#x20;on&#x20;the&#x20;specified&#x20;TCP&#x20;port.','The&#x20;guidance&#x20;in&#x20;the&#x20;section&#x20;ensures&#x20;that&#x20;remote&#x20;log&#x20;hosts&#x20;are&#x20;configured&#x20;to&#x20;only&#x20;accept&#x20;rsyslog&#x20;data&#x20;from&#x20;hosts&#x20;within&#x20;the&#x20;specified&#x20;domain&#x20;and&#x20;that&#x20;those&#x20;systems&#x20;that&#x20;are&#x20;not&#x20;designed&#x20;to&#x20;be&#x20;log&#x20;hosts&#x20;do&#x20;not&#x20;accept&#x20;any&#x20;remote&#x20;rsyslog&#x20;messages.&#x20;This&#x20;provides&#x20;protection&#x20;from&#x20;spoofed&#x20;log&#x20;data&#x20;and&#x20;ensures&#x20;that&#x20;system&#x20;administrators&#x20;are&#x20;reviewing&#x20;reasonably&#x20;complete&#x20;syslog&#x20;data&#x20;in&#x20;a&#x20;central&#x20;location.','','For&#x20;hosts&#x20;that&#x20;are&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;un-comment&#x20;or&#x20;add&#x20;the&#x20;following&#x20;lines:$ModLoad&#x20;imtcp&#x20;&amp;&#x20;$InputTCPServerRun&#x20;514.&#x20;For&#x20;hosts&#x20;that&#x20;are&#x20;not&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;comment&#x20;or&#x20;remove&#x20;the&#x20;following&#x20;lines:&#x20;#&#x20;$ModLoad&#x20;imtcp&#x20;#&#x20;$InputTCPServerRun&#x20;514.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"10.5.1\"]}]'),(2120,'Ensure&#x20;syslog-ng&#x20;service&#x20;is&#x20;enabled','Once&#x20;the&#x20;syslog-ng&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;syslog-ng&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;syslog-ng','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2121,'Ensure&#x20;syslog-ng&#x20;default&#x20;file&#x20;permissions&#x20;configured','syslog-ng&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;syslog-ng&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;and&#x20;set&#x20;perm&#x20;option&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;&#x20;&#x20;options&#x20;{&#x20;chain_hostnames&#40;off&#41;;&#x20;flush_lines&#40;0&#41;;&#x20;perm&#40;0640&#41;;&#x20;stats_freq&#40;3600&#41;;&#x20;threaded&#40;yes&#41;;&#x20;};','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(2122,'Ensure&#x20;syslog-ng&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;syslog-ng&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;&#x20;destination&#x20;logserver&#x20;{&#x20;tcp&#40;&quot;logfile.example.com&quot;&#x20;port&#40;514&#41;&#41;;&#x20;};&#x20;&#x20;&#x20;&#x20;log&#x20;{&#x20;source&#40;src&#41;;&#x20;destination&#40;logserver&#41;;&#x20;};&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;syslog-ng','[{\"cis\": [\"4.2.2.4\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2123,'Ensure&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;apt-get&#x20;install&#x20;rsyslog&#x20;#&#x20;apt-get&#x20;install&#x20;syslog-ng','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2124,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron:&#x20;systemctl&#x20;enable&#x20;cron','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2125,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2126,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2127,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2128,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2129,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2130,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2131,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2132,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-&#x20;privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2133,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','Older&#x20;versions&#x20;of&#x20;SSH&#x20;support&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.&#x20;Notes:&#x20;This&#x20;command&#x20;not&#x20;longer&#x20;exists&#x20;in&#x20;newer&#x20;versions&#x20;of&#x20;SSH.&#x20;This&#x20;check&#x20;is&#x20;still&#x20;being&#x20;included&#x20;for&#x20;systems&#x20;that&#x20;may&#x20;be&#x20;running&#x20;an&#x20;older&#x20;version&#x20;of&#x20;SSH.&#x20;As&#x20;of&#x20;openSSH&#x20;version&#x20;7.4&#x20;this&#x20;parameter&#x20;will&#x20;not&#x20;cause&#x20;an&#x20;issue&#x20;when&#x20;included.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2134,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2135,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2136,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2137,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhostsand&#x20;.shostsfiles&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthenticationor&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2138,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2139,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2140,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2141,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2142,'Ensure&#x20;only&#x20;strong&#x20;ciphers&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&quot;Sweet32&quot;&#x20;attack&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involving&#x20;LSB&#x20;values,&#x20;aka&#x20;the&#x20;&quot;Bar&#x20;Mitzvah&quot;&#x20;issue&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;Ciphers&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphers&#x20;Example:&#x20;Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2143,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:&#x20;MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-&#x20;512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"14.4\", \"16.5\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2144,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms&#x20;Example:&#x20;KexAlgorithms&#x20;curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-&#x20;group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-&#x20;sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-&#x20;hellman-group-exchange-sha256','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2145,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;&#x20;&#x20;&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(2146,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}]'),(2147,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers,&#x20;AllowGroups,&#x20;DenyUsers,&#x20;DenyGroups.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;AllowGroups&#x20;&lt;grouplist&gt;&#x20;&#x20;&#x20;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}]'),(2148,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2149,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options:&#x20;-&#x20;retry=3&#x20;&#40;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure&#41;.&#x20;The&#x20;following&#x20;options&#x20;are&#x20;set&#x20;in&#x20;the&#x20;/etc/security/pwquality.conf&#x20;file:&#x20;-&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#40;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies.&#41;','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','1&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;the&#x20;pam_pwquality&#x20;module:&#x20;apt-get&#x20;install&#x20;libpam-pwquality&#x20;2&#41;&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_pwquality.so&#x20;retry=3&#x20;3&#41;&#x20;Edit&#x20;/etc/security/pwquality.conf&#x20;to&#x20;add&#x20;or&#x20;update&#x20;the&#x20;following&#x20;settings&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;requirements&#x20;only&#x20;cover&#x20;including&#x20;try_first_pass&#x20;and&#x20;minlen&#x20;set&#x20;to&#x20;14&#x20;or&#x20;more.&#x20;Settings&#x20;in&#x20;/etc/security/pwquality.conf&#x20;must&#x20;use&#x20;spaces&#x20;around&#x20;the&#x20;=&#x20;symbol.','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}]'),(2150,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;files.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.&#x20;Check&#x20;the&#x20;documentation&#x20;for&#x20;each&#x20;secondary&#x20;program&#x20;for&#x20;instructions&#x20;on&#x20;how&#x20;to&#x20;configure&#x20;them&#x20;to&#x20;work&#x20;with&#x20;PAM.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;to&#x20;the&#x20;policy&#x20;in&#x20;effect&#x20;at&#x20;your&#x20;site.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/common-auth&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900.&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-account&#x20;file&#x20;and&#x20;add&#x20;the&#x20;account&#x20;line&#x20;bellow:&#x20;account&#x20;&#x20;&#x20;&#x20;required&#x20;&#x20;&#x20;&#x20;pam_tally2.so.&#x20;Note:&#x20;If&#x20;a&#x20;user&#x20;has&#x20;been&#x20;locked&#x20;out&#x20;because&#x20;they&#x20;have&#x20;reached&#x20;the&#x20;maximum&#x20;consecutive&#x20;failure&#x20;count&#x20;defined&#x20;by&#x20;deny=&#x20;in&#x20;the&#x20;pam_tally2.so&#x20;module,&#x20;the&#x20;user&#x20;can&#x20;be&#x20;unlocked&#x20;by&#x20;issuing&#x20;the&#x20;command&#x20;/sbin/pam_tally2&#x20;-u&#x20;&lt;username&gt;&#x20;--reset.&#x20;This&#x20;command&#x20;sets&#x20;the&#x20;failed&#x20;count&#x20;to&#x20;0,&#x20;effectively&#x20;unlocking&#x20;the&#x20;user.&#x20;Notes:BUG&#x20;In&#x20;pam_tally2.so&#x20;To&#x20;work&#x20;around&#x20;this&#x20;issue&#x20;the&#x20;addition&#x20;of&#x20;pam_tally2.so&#x20;in&#x20;the&#x20;accounts&#x20;section&#x20;of&#x20;the&#x20;/etc/pam.d/common-account&#x20;file&#x20;has&#x20;been&#x20;added&#x20;to&#x20;the&#x20;audit&#x20;and&#x20;remediation&#x20;sections.&#x20;pam_tally2&#x20;line&#x20;must&#x20;be&#x20;added&#x20;for&#x20;the&#x20;counter&#x20;to&#x20;reset&#x20;to&#x20;0&#x20;when&#x20;using&#x20;sudo.&#x20;&#x20;&#x20;&#x20;&#x20;Use&#x20;of&#x20;the&#x20;&quot;audit&quot;&#x20;keyword&#x20;may&#x20;log&#x20;credentials&#x20;in&#x20;the&#x20;case&#x20;of&#x20;user&#x20;error&#x20;during&#x20;authentication.&#x20;This&#x20;risk&#x20;should&#x20;be&#x20;evaluated&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;site&#x20;policies&#x20;of&#x20;your&#x20;organization.','[{\"cis\": [\"5.3.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(2151,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;only&#x20;covers&#x20;those&#x20;listed&#x20;here.','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(2152,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;[success=1&#x20;default=ignore]&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2153,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MAX_DAYS&#x20;90.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;5th&#x20;field&#x20;should&#x20;be&#x20;365&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;will&#x20;disable&#x20;password&#x20;expiration.&#x20;Additionally&#x20;the&#x20;password&#x20;expiration&#x20;must&#x20;be&#x20;greater&#x20;than&#x20;the&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;or&#x20;users&#x20;will&#x20;be&#x20;unable&#x20;to&#x20;change&#x20;their&#x20;password.','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"8.2.4\"]}]'),(2154,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;4th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2155,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;6th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2156,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;#&#x20;useradd&#x20;-D&#x20;-f&#x20;30.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;7th&#x20;field&#x20;should&#x20;be&#x20;30&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;would&#x20;disable&#x20;this&#x20;setting.','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2157,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;#&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2158,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2159,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc,&#x20;/etc/profile&#x20;files,&#x20;and&#x20;/etc/profile.d*.sh&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(2160,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;group&#x20;to&#x20;execute&#x20;su.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','1&#41;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;2&#41;&#x20;Create&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;statement&#x20;in&#x20;the&#x20;/etc/group&#x20;file:&#x20;sudo:x:10:root,&lt;user&#x20;list&gt;&#x20;Notes:&#x20;The&#x20;use_uid&#x20;option&#x20;to&#x20;pam_wheel.so&#x20;is&#x20;a&#x20;no-op&#x20;on&#x20;debian&#x20;based&#x20;systems.&#x20;It&#x20;is&#x20;acceptable&#x20;but&#x20;not&#x20;required&#x20;as&#x20;these&#x20;systems&#x20;use&#x20;its&#x20;behavior&#x20;as&#x20;default.','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2161,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2162,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/shadow-','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2163,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2164,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2165,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;one&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2166,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2167,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2168,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2169,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;em&gt;&lt;username&gt;&lt;/em&gt;.&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}]'),(2170,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2171,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2172,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2173,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2174,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group.','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;all&#x20;users&#x20;from&#x20;the&#x20;shadow&#x20;group,&#x20;and&#x20;change&#x20;the&#x20;primary&#x20;group&#x20;of&#x20;any&#x20;users&#x20;with&#x20;shadow&#x20;as&#x20;their&#x20;primary&#x20;group.','[{\"cis\": [\"6.2.20\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2500,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/freevxfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;#&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2501,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/jffs2.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;#&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2502,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/hfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;#&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2503,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.confExample:&#x20;vi&#x20;/etc/modprobe.d/hfsplus.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;#&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2504,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/squashfs.confand&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfsmodule:&#x20;#&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2505,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/udf.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2506,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/vfat.conf:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2507,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.&#x20;This&#x20;can&#x20;be&#x20;accomplished&#x20;by&#x20;either&#x20;mounting&#x20;tmpfs&#x20;to&#x20;/tmp,&#x20;or&#x20;creating&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;Example:&#x20;tmpfs&#x20;/tmp&#x20;tmpfs&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;0&#x20;0&#x20;or&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;systemctl&#x20;enable&#x20;tmp.mount&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount:&#x20;[Mount]&#x20;What=tmpfs&#x20;Where=/tmp&#x20;Type=tmpfs&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2508,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodevto&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2509,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuidto&#x20;the&#x20;/tmp&#x20;mount&#x20;options:[Mount]&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2510,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexecto&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexecto&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;[Mount]&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2511,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2512,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2513,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2514,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2515,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2516,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2517,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2518,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2519,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.&#x20;&#x20;Note:&#x20;The&#x20;actions&#x20;in&#x20;the&#x20;item&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined&#x20;in&#x20;many&#x20;distributions.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2520,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2521,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2522,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2.6\", \"8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2523,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;it&#039;s&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;autofs&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;autofs:&#x20;&#x20;#&#x20;apt&#x20;purge&#x20;autofs','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2524,'Disable&#x20;USB&#x20;Storage','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/usb_storage.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;#&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;#&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2525,'Ensure&#x20;sudo&#x20;is&#x20;installed','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Install&#x20;sudo&#x20;using&#x20;the&#x20;following&#x20;command.&#x20;#&#x20;apt&#x20;install&#x20;sudo&#x20;OR&#x20;#&#x20;apt&#x20;install&#x20;sudo-ldap','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2526,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;froma&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo,&#x20;which&#x20;would&#x20;again&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2527,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Defaults&#x20;logfile=&quot;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&quot;&#x20;&#x20;&#x20;Example&#x20;&#x20;&#x20;&#x20;Defaults&#x20;logfile=&quot;/var/log/sudo.log&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2528,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Install&#x20;AIDE:&#x20;#&#x20;apt&#x20;install&#x20;aide&#x20;aide-common.&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#&#x20;aideinit&#x20;.&#x20;&#x20;Notes:&#x20;The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;AIDE&#x20;because&#x20;it&#x20;alters&#x20;binaries&#x20;to&#x20;speed&#x20;up&#x20;their&#x20;start&#x20;up&#x20;times.&#x20;Run&#x20;prelink&#x20;-ua&#x20;to&#x20;restore&#x20;the&#x20;binaries&#x20;to&#x20;their&#x20;prelinked&#x20;state,&#x20;thus&#x20;avoiding&#x20;false&#x20;positives&#x20;from&#x20;AIDE.','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2529,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','If&#x20;cron&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;&#x20;&#x20;&#x20;#&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;&#x20;&#x20;&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/bin/aide.wrapper&#x20;--config&#x20;/etc/aide/aide.conf&#x20;--check','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2530,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;stored&#x20;in&#x20;/boot/grub.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.cfg,&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2531,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-mkpasswd-pbkdf2&#x20;:&#x20;#&#x20;grub-mkpasswd-pbkdf2&#x20;&#x20;&#x20;&#x20;&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;PBKDF2&#x20;hash&#x20;of&#x20;your&#x20;password&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;cat&#x20;&lt;&lt;EOF&#x20;&#x20;&#x20;&#x20;&#x20;set&#x20;superusers=&quot;&lt;username&gt;&quot;&#x20;&#x20;&#x20;password_pbkdf2&#x20;&lt;username&gt;&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;EOF&#x20;&#x20;&#x20;&#x20;&#x20;The&#x20;superuser/user&#x20;information&#x20;and&#x20;password&#x20;should&#x20;not&#x20;be&#x20;contained&#x20;in&#x20;the&#x20;/etc/grub.d/00_header&#x20;file&#x20;as&#x20;this&#x20;file&#x20;could&#x20;be&#x20;overwritten&#x20;in&#x20;a&#x20;package&#x20;update.&#x20;If&#x20;there&#x20;is&#x20;a&#x20;requirement&#x20;to&#x20;be&#x20;able&#x20;to&#x20;boot/reboot&#x20;without&#x20;entering&#x20;the&#x20;password,&#x20;edit&#x20;/etc/grub.d/10_linux&#x20;and&#x20;add&#x20;--unrestricted&#x20;to&#x20;the&#x20;line&#x20;CLASS=&#x20;&#x20;Example:&#x20;CLASS=&quot;--class&#x20;gnu-linux&#x20;--class&#x20;gnu&#x20;--class&#x20;os&#x20;--unrestricted&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2532,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Run&#x20;the&#x20;following&#x20;command&#x20;and&#x20;follow&#x20;the&#x20;prompts&#x20;to&#x20;set&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;passwd&#x20;root','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2533,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2534,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2535,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal:&#x20;#&#x20;prelink&#x20;-ua&#x20;Uninstall&#x20;prelink&#x20;using&#x20;the&#x20;appropriate&#x20;package&#x20;manager&#x20;or&#x20;manual&#x20;installation:&#x20;#&#x20;apt&#x20;purge&#x20;prelink','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2536,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.6.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2537,'Ensure&#x20;AppArmor&#x20;is&#x20;installed','AppArmor&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Install&#x20;Apparmor.&#x20;#&#x20;apt&#x20;install&#x20;apparmor&#x20;#&#x20;apt&#x20;install&#x20;apparmor-utils','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2538,'Ensure&#x20;AppArmor&#x20;is&#x20;enabled&#x20;in&#x20;the&#x20;bootloader&#x20;configuration','Configure&#x20;AppArmor&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwrittenby&#x20;the&#x20;bootloader&#x20;boot&#x20;parameters.','AppArmor&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;apparmor=1&#x20;and&#x20;security=apparmor&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;apparmor=1&#x20;security=apparmor&quot;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration&#x20;#&#x20;update-grub&#x20;&#x20;&#x20;&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2539,'Ensure&#x20;all&#x20;AppArmor&#x20;Profiles&#x20;are&#x20;in&#x20;enforce&#x20;or&#x20;complain&#x20;mode','AppArmor&#x20;profiles&#x20;define&#x20;what&#x20;resources&#x20;applicatons&#x20;are&#x20;able&#x20;to&#x20;access.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;any&#x20;policies&#x20;that&#x20;exist&#x20;on&#x20;the&#x20;system&#x20;are&#x20;activated..','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;complain&#x20;mode:&#x20;#&#x20;aa-complain&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2540,'Ensure&#x20;all&#x20;AppArmor&#x20;Profiles&#x20;are&#x20;enforcing','AppArmor&#x20;profiles&#x20;define&#x20;what&#x20;resources&#x20;applicatons&#x20;are&#x20;able&#x20;to&#x20;access.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;any&#x20;policies&#x20;that&#x20;exist&#x20;on&#x20;the&#x20;system&#x20;are&#x20;activated..','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2541,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;OR&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(2542,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v&#x20;,&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(2543,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(2544,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2545,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2546,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2547,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add:&#x20;[org/gnome/login-screen],&#x20;banner-message-enable=true,&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.8.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2548,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;Notes:&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\", \"3.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(2549,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;xinetd&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetddaemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;apt&#x20;purge&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2550,'Ensure&#x20;openbsd-inetd&#x20;is&#x20;not&#x20;installed','The&#x20;inetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;inetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openbsd-inetd:&#x20;apt&#x20;purge&#x20;openbsd-inetd','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2551,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available,&#x20;configure&#x20;systemd-timesyncd.&#x20;If&#x20;&quot;full&#x20;featured&quot;&#x20;and/or&#x20;encrypted&#x20;time&#x20;synchronization&#x20;is&#x20;required,&#x20;install&#x20;chrony&#x20;or&#x20;NTP.&#x20;To&#x20;install&#x20;chrony:&#x20;#&#x20;apt&#x20;install&#x20;chrony&#x20;To&#x20;install&#x20;ntp:&#x20;#&#x20;apt&#x20;install&#x20;ntp&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;setup&#x20;host&#x20;based&#x20;synchronization.','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2552,'Ensure&#x20;systemd-timesyncd&#x20;is&#x20;configured','systemd-timesyncd&#x20;is&#x20;a&#x20;daemon&#x20;that&#x20;has&#x20;been&#x20;added&#x20;for&#x20;synchronizing&#x20;the&#x20;system&#x20;clock&#x20;across&#x20;the&#x20;network.&#x20;It&#x20;implements&#x20;an&#x20;SNTP&#x20;client.&#x20;In&#x20;contrast&#x20;to&#x20;NTP&#x20;implementations&#x20;such&#x20;as&#x20;chrony&#x20;or&#x20;the&#x20;NTP&#x20;reference&#x20;server&#x20;this&#x20;only&#x20;implements&#x20;a&#x20;client&#x20;side,&#x20;and&#x20;does&#x20;not&#x20;bother&#x20;with&#x20;the&#x20;full&#x20;NTP&#x20;complexity,&#x20;focusing&#x20;only&#x20;on&#x20;querying&#x20;time&#x20;from&#x20;one&#x20;remote&#x20;server&#x20;and&#x20;synchronizing&#x20;the&#x20;local&#x20;clock&#x20;to&#x20;it.&#x20;The&#x20;daemon&#x20;runs&#x20;with&#x20;minimal&#x20;privileges,&#x20;and&#x20;has&#x20;been&#x20;hooked&#x20;up&#x20;with&#x20;networkd&#x20;to&#x20;only&#x20;operate&#x20;when&#x20;network&#x20;connectivity&#x20;is&#x20;available.&#x20;The&#x20;daemon&#x20;saves&#x20;the&#x20;current&#x20;clock&#x20;to&#x20;disk&#x20;every&#x20;time&#x20;a&#x20;new&#x20;NTP&#x20;sync&#x20;has&#x20;been&#x20;acquired,&#x20;and&#x20;uses&#x20;this&#x20;to&#x20;possibly&#x20;correct&#x20;the&#x20;system&#x20;clock&#x20;early&#x20;at&#x20;bootup,&#x20;in&#x20;order&#x20;to&#x20;accommodate&#x20;for&#x20;systems&#x20;that&#x20;lack&#x20;an&#x20;RTC&#x20;such&#x20;as&#x20;the&#x20;Raspberry&#x20;Pi&#x20;and&#x20;embedded&#x20;devices,&#x20;and&#x20;make&#x20;sure&#x20;that&#x20;time&#x20;monotonically&#x20;progresses&#x20;on&#x20;these&#x20;systems,&#x20;even&#x20;if&#x20;it&#x20;is&#x20;not&#x20;always&#x20;correct.&#x20;To&#x20;make&#x20;use&#x20;of&#x20;this&#x20;daemon&#x20;a&#x20;new&#x20;system&#x20;user&#x20;and&#x20;group&#x20;&quot;systemd-&#x20;timesync&quot;&#x20;needs&#x20;to&#x20;be&#x20;created&#x20;on&#x20;installation&#x20;of&#x20;systemd.&#x20;Note:&#x20;The&#x20;systemd-timesyncd&#x20;service&#x20;specifically&#x20;implements&#x20;only&#x20;SNTP.&#x20;This&#x20;minimalistic&#x20;service&#x20;will&#x20;set&#x20;the&#x20;system&#x20;clock&#x20;for&#x20;large&#x20;offsets&#x20;or&#x20;slowly&#x20;adjust&#x20;it&#x20;for&#x20;smaller&#x20;deltas.&#x20;More&#x20;complex&#x20;use&#x20;cases&#x20;are&#x20;not&#x20;covered&#x20;by&#x20;systemd-timesyncd.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;timesyncd&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','Proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;timesyncd&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;systemd-timesyncd&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;systemd-timesyncd.service&#x20;&#x20;||&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/systemd/timesyncd.conf&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;NTP=0.debian.pool.ntp.org&#x20;1.debian.pool.ntp.org&#x20;&#x20;&#x20;FallbackNTP=2.debian.pool.ntp.org&#x20;3.debian.pool.ntp.org&#x20;&#x20;&#x20;&#x20;RootDistanceMax=1&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;start&#x20;systemd-timesyncd.service&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;start&#x20;systemd-timesyncd.service&#x20;&#x20;&#x20;#&#x20;timedatectl&#x20;set-ntp&#x20;true&#x20;&#x20;||&#x20;Notes:&#x20;Servers&#x20;listed&#x20;and&#x20;RootDistanceMax&#x20;should&#x20;be&#x20;In&#x20;Accordance&#x20;With&#x20;Local&#x20;Policy&#x20;some&#x20;versions&#x20;of&#x20;systemd&#x20;have&#x20;been&#x20;compiled&#x20;without&#x20;systemd-timesycnd.&#x20;On&#x20;these&#x20;distributions,&#x20;chrony&#x20;or&#x20;NTP&#x20;should&#x20;be&#x20;used&#x20;instead&#x20;of&#x20;systemd-timesycnd.&#x20;Not&#x20;all&#x20;options&#x20;are&#x20;available&#x20;on&#x20;all&#x20;versions&#x20;of&#x20;systemd-timesyncd','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2553,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;Configure&#x20;chrony&#x20;to&#x20;run&#x20;as&#x20;the&#x20;chrony&#x20;user&#x20;by&#x20;configuring&#x20;the&#x20;appropriate&#x20;startup&#x20;script&#x20;for&#x20;your&#x20;distribution.&#x20;Startup&#x20;scripts&#x20;are&#x20;typically&#x20;stored&#x20;in&#x20;/etc/init.d&#x20;or&#x20;/etc/systemd&#x20;.','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2554,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;Configure&#x20;ntp&#x20;to&#x20;run&#x20;as&#x20;the&#x20;ntp&#x20;user&#x20;by&#x20;adding&#x20;or&#x20;editing&#x20;the&#x20;/etc/init.d/ntp&#x20;file:&#x20;RUNASUSER=ntp','[{\"cis\": [\"2.2.1.4\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2555,'Ensure&#x20;the&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;apt&#x20;purge&#x20;xserver-xorg*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(2556,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attach&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2557,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2558,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;isc-dhcp-server&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;isc-dhcp-server6','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2559,'Ensure&#x20;LDAP&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2560,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;nfs-server&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2561,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;bind9','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2562,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2563,'Ensure&#x20;HTTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;apache2','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2564,'Ensure&#x20;email&#x20;services&#x20;are&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;mail&#x20;submission&#x20;and&#x20;transport&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;mail&#x20;transport&#x20;services&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;or&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;dovecot&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dovecot','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2565,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smbd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;smbd','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2566,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2567,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2568,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/exim4/update-exim4.conf.conf&#x20;and&#x20;and&#x20;or&#x20;modify&#x20;following&#x20;lines&#x20;to&#x20;look&#x20;like&#x20;the&#x20;lines&#x20;below:&#x20;dc_eximconfig_configtype=&#039;local&#039;&#x20;dc_local_interfaces=&#039;127.0.0.1&#x20;;&#x20;::1&#039;&#x20;dc_readhost=&#039;&#039;&#x20;dc_relay_domains=&#039;&#039;&#x20;dc_minimaldns=&#039;false&#039;&#x20;dc_relay_nets=&#039;&#039;&#x20;dc_smarthost=&#039;&#039;&#x20;dc_use_split_config=&#039;false&#039;&#x20;dc_hide_mailname=&#039;&#039;&#x20;dc_mailname_in_oh=&#039;true&#039;&#x20;dc_localdelivery=&#039;mail_spool&#039;&#x20;Restart&#x20;exim4:&#x20;#&#x20;systemctl&#x20;restart&#x20;exim4','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(2569,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rsync','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(2570,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;nis:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;nis','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2571,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Uninstall&#x20;nis&#x20;:&#x20;apt&#x20;purge&#x20;nis','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2572,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh-client&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh&#x20;,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Uninstall&#x20;rsh&#x20;:&#x20;apt&#x20;purge&#x20;rsh-client','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2573,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talkclient,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Uninstall&#x20;talk&#x20;:&#x20;apt&#x20;purge&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2574,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Uninstall&#x20;telnet&#x20;:&#x20;#&#x20;apt&#x20;purge&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2575,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Uninstall&#x20;ldap-utils&#x20;:&#x20;#&#x20;apt&#x20;purge&#x20;ldap-utils','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2576,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.6\", \"CC5.2\"]}]'),(2577,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.&#x20;Debian&#x20;contains&#x20;a&#x20;wireless&#x20;tool&#x20;kit&#x20;to&#x20;allow&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;and&#x20;use&#x20;wireless&#x20;networks.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;nmcli&#x20;radio&#x20;all&#x20;off','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"1.2.3\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2578,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2579,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.ip_forwards*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv6.conf.all.forwardings*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv6.conf.all.forwardings*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2580,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2581,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2582,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2583,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2584,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2585,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2586,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2587,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2588,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;systems&#x20;ability&#x20;to&#x20;accept&#x20;router&#x20;advertisements','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2589,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-&#x20;sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2590,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2591,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2592,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2593,'Ensure&#x20;a&#x20;Firewall&#x20;package&#x20;is&#x20;installed','A&#x20;Firewall&#x20;package&#x20;should&#x20;be&#x20;selected.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;nftables&#x20;or&#x20;iptables.','A&#x20;Firewall&#x20;package&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;the&#x20;Firewall&#x20;package&#x20;that&#x20;follows&#x20;local&#x20;site&#x20;policy:&#x20;To&#x20;install&#x20;UFW&#x20;,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;apt&#x20;install&#x20;ufw&#x20;To&#x20;install&#x20;nftables&#x20;,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;apt&#x20;install&#x20;nftables&#x20;To&#x20;install&#x20;iptables&#x20;,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;apt&#x20;install&#x20;iptables','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2594,'Ensure&#x20;ufw&#x20;service&#x20;is&#x20;enabled','UncomplicatedFirewall&#x20;&#40;ufw&#41;&#x20;is&#x20;a&#x20;frontend&#x20;for&#x20;iptables.&#x20;ufw&#x20;provides&#x20;a&#x20;framework&#x20;for&#x20;managing&#x20;netfilter,&#x20;as&#x20;well&#x20;as&#x20;a&#x20;command-line&#x20;and&#x20;available&#x20;graphical&#x20;user&#x20;interface&#x20;for&#x20;manipulating&#x20;the&#x20;firewall.&#x20;Ensure&#x20;that&#x20;the&#x20;ufw&#x20;service&#x20;is&#x20;enabled&#x20;to&#x20;protect&#x20;your&#x20;system.','The&#x20;ufw&#x20;service&#x20;must&#x20;be&#x20;enabled&#x20;and&#x20;running&#x20;in&#x20;order&#x20;for&#x20;ufw&#x20;to&#x20;protect&#x20;the&#x20;system','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;ufw:&#x20;#&#x20;ufw&#x20;enable','[{\"cis\": [\"3.5.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2595,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;deny&#x20;policy:&#x20;#&#x20;ufw&#x20;default&#x20;deny&#x20;incoming&#x20;#&#x20;ufw&#x20;default&#x20;deny&#x20;outgoing&#x20;#&#x20;ufw&#x20;default&#x20;deny&#x20;routed','[{\"cis\": [\"3.5.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2596,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#x20;for&#x20;IPv4&#x20;and&#x20;::1/128&#x20;for&#x20;IPv6&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ufw&#x20;allow&#x20;in&#x20;on&#x20;lo&#x20;#&#x20;ufw&#x20;allow&#x20;out&#x20;on&#x20;lo&#x20;#&#x20;sudo&#x20;ufw&#x20;deny&#x20;in&#x20;from&#x20;127.0.0.0/8&#x20;#&#x20;sudo&#x20;ufw&#x20;deny&#x20;in&#x20;from&#x20;::1','[{\"cis\": [\"3.5.2.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2597,'Ensure&#x20;a&#x20;table&#x20;exists','Tables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;.Example:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;filter','[{\"cis\": [\"3.5.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2598,'Ensure&#x20;base&#x20;chains&#x20;exist','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;input&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;forward&#x20;priority&#x20;0;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;output&#x20;priority&#x20;0&#x20;;&#x20;}','[{\"cis\": [\"3.5.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2599,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept&#x20;,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;transversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;;&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;and&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.5.3.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2600,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conf&#x20;file&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.3.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2601,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.5.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2602,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.4.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2603,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2604,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.4.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2605,'Ensure&#x20;auditd&#x20;is&#x20;installed','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;apt&#x20;install&#x20;auditd&#x20;audispd-plugins','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2606,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Enable&#x20;and&#x20;start&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2607,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2608,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;&#x20;Notes:&#x20;The&#x20;max_log_file&#x20;parameter&#x20;is&#x20;measured&#x20;in&#x20;megabytes.','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2609,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2610,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;action_mail_acct&#x20;=&#x20;root&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.2.3\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}]'),(2611,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-&#x20;change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2612,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2613,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-&#x20;login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;&#x20;and&#x20;/etc/sysconfig/network&#x20;&#40;directory&#x20;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;&#x20;files.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/network&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale-w&#x20;/etc/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2614,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;AppArmor&#x20;mandatory&#x20;access&#x20;control.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','On&#x20;systems&#x20;using&#x20;AppArmor&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/apparmor/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;|&#x20;-w&#x20;/etc/apparmor.d/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2615,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/var/log/faillog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2616,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;|&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;last&#x20;-f&#x20;/var/run/utmp&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2617,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2618,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/directory&#x20;ending&#x20;in&#x20;.rules&#x20;&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/audit.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;|&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/directory&#x20;ending&#x20;in&#x20;.rules&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;&#x20;|&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;&#x20;|&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;|&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;toset&#x20;active&#x20;settings&#x20;requires&#x20;the&#x20;auditd&#x20;service&#x20;to&#x20;be&#x20;restarted,&#x20;and&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2619,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.12\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2620,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"6.2\", \"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(2621,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;|&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(2622,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;&lt;Path&#x20;to&#x20;sudo&#x20;logfile&gt;&#x20;-p&#x20;wa&#x20;-k&#x20;actions.&#x20;Notes:&#x20;The&#x20;system&#x20;must&#x20;be&#x20;configured&#x20;with&#x20;sudisabled&#x20;&#40;See&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted&#41;&#x20;to&#x20;force&#x20;all&#x20;command&#x20;execution&#x20;through&#x20;sudo.&#x20;This&#x20;will&#x20;not&#x20;be&#x20;effective&#x20;on&#x20;the&#x20;console,&#x20;as&#x20;administrators&#x20;can&#x20;log&#x20;in&#x20;as&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.9\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2623,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2624,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rules&#x20;and&#x20;add&#x20;the&#x20;line:&#x20;-e&#x20;2.&#x20;Notes:&#x20;This&#x20;setting&#x20;will&#x20;ensure&#x20;reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;requires&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2625,'Ensure&#x20;rsyslog&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslogsuch&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog:&#x20;#&#x20;apt&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2626,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;will&#x20;not&#x20;have&#x20;a&#x20;syslog&#x20;service&#x20;running.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2627,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(2628,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;one&#x20;of&#x20;the&#x20;following&#x20;lines:&#x20;Newer&#x20;syntax:&#x20;&lt;files&#x20;to&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;log&#x20;server&gt;&#x20;action&#40;type=&quot;omfwd&quot;&#x20;target=&quot;&lt;FQDN&#x20;or&#x20;ip&#x20;of&#x20;loghost&gt;&quot;&#x20;port=&quot;&lt;port&#x20;number&gt;&quot;&#x20;protocol=&quot;tcp&quot;&#x20;ction.resumeRetryCount=&quot;&lt;number&#x20;of&#x20;re-tries&gt;&quot;&#x20;&#x20;queue.type=&quot;linkList&quot;&#x20;queue.size=&lt;number&#x20;of&#x20;messages&#x20;to&#x20;queue&gt;&quot;&#41;&#x20;Example:&#x20;*.*&#x20;action&#40;type=&quot;omfwd&quot;&#x20;target=&quot;192.168.2.100&quot;&#x20;port&quot;514&quot;&#x20;protocol=&quot;tcp&quot;&#x20;action.resumeRetryCount=&quot;100&quot;&#x20;queue.type=&quot;linkList&quot;&#x20;queue.size=&quot;1000&quot;&#41;&#x20;Older&#x20;syntax:&#x20;*.*&#x20;@@&lt;FQDN&#x20;or&#x20;ip&#x20;of&#x20;loghost&gt;','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2629,'Ensure&#x20;remote&#x20;rsyslog&#x20;messages&#x20;are&#x20;only&#x20;accepted&#x20;on&#x20;designated&#x20;log&#x20;hosts','By&#x20;default,&#x20;rsyslog&#x20;does&#x20;not&#x20;listen&#x20;for&#x20;log&#x20;messages&#x20;coming&#x20;in&#x20;from&#x20;remote&#x20;systems.&#x20;The&#x20;ModLoad&#x20;tells&#x20;rsyslog&#x20;to&#x20;load&#x20;the&#x20;imtcp.so&#x20;module&#x20;so&#x20;it&#x20;can&#x20;listen&#x20;over&#x20;a&#x20;network&#x20;via&#x20;TCP.&#x20;The&#x20;InputTCPServerRun&#x20;option&#x20;instructs&#x20;rsyslogd&#x20;to&#x20;listen&#x20;on&#x20;the&#x20;specified&#x20;TCP&#x20;port.','The&#x20;guidance&#x20;in&#x20;the&#x20;section&#x20;ensures&#x20;that&#x20;remote&#x20;log&#x20;hosts&#x20;are&#x20;configured&#x20;to&#x20;only&#x20;accept&#x20;rsyslog&#x20;data&#x20;from&#x20;hosts&#x20;within&#x20;the&#x20;specified&#x20;domain&#x20;and&#x20;that&#x20;those&#x20;systems&#x20;that&#x20;are&#x20;not&#x20;designed&#x20;to&#x20;be&#x20;log&#x20;hosts&#x20;do&#x20;not&#x20;accept&#x20;any&#x20;remote&#x20;rsyslog&#x20;messages.&#x20;This&#x20;provides&#x20;protection&#x20;from&#x20;spoofed&#x20;log&#x20;data&#x20;and&#x20;ensures&#x20;that&#x20;system&#x20;administrators&#x20;are&#x20;reviewing&#x20;reasonably&#x20;complete&#x20;syslog&#x20;data&#x20;in&#x20;a&#x20;central&#x20;location.','','For&#x20;hosts&#x20;that&#x20;are&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;un-comment&#x20;or&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;$ModLoad&#x20;imtcp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;$InputTCPServerRun&#x20;514.&#x20;For&#x20;hosts&#x20;that&#x20;are&#x20;not&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;comment&#x20;or&#x20;remove&#x20;the&#x20;following&#x20;lines:&#x20;#&#x20;$ModLoad&#x20;imtcp&#x20;#&#x20;$InputTCPServerRun&#x20;514.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"10.5.1\"]}]'),(2630,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(2631,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2632,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;write&#x20;logfiles&#x20;to&#x20;persistent&#x20;disk','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Storage=persistent','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2633,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitivebdata&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+&#x20;-o&#x20;-type&#x20;d&#x20;-exec&#x20;chmod&#x20;g-w,o-rwx&#x20;&quot;{}&quot;&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(2634,'Ensure&#x20;logrotate&#x20;assigns&#x20;appropriate&#x20;permissions','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;/etc/logrotate.conf&#x20;and&#x20;update&#x20;the&#x20;create&#x20;line&#x20;to&#x20;read&#x20;0640&#x20;or&#x20;more&#x20;restrictive,&#x20;following&#x20;local&#x20;site&#x20;policy&#x20;&#x20;&#x20;Example:&#x20;create&#x20;0640&#x20;root&#x20;utmp','[{\"cis\": [\"4.4\"]}, {\"cis_csc\": [\"14.6\"]}]'),(2635,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron:&#x20;systemctl&#x20;--now&#x20;enable&#x20;cron','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2636,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2637,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2638,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2639,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2640,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2641,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2642,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2643,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-&#x20;privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2644,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;0600&#x20;{}&#x20;;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2645,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;public&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;0644&#x20;{}&#x20;;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2646,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;not&#x20;set&#x20;to&#x20;1','Older&#x20;versions&#x20;of&#x20;SSH&#x20;support&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.&#x20;Notes:&#x20;This&#x20;command&#x20;not&#x20;longer&#x20;exists&#x20;in&#x20;newer&#x20;versions&#x20;of&#x20;SSH.&#x20;This&#x20;check&#x20;is&#x20;still&#x20;being&#x20;included&#x20;for&#x20;systems&#x20;that&#x20;may&#x20;be&#x20;running&#x20;an&#x20;older&#x20;version&#x20;of&#x20;SSH.&#x20;As&#x20;of&#x20;openSSH&#x20;version&#x20;7.4&#x20;this&#x20;parameter&#x20;will&#x20;not&#x20;cause&#x20;an&#x20;issue&#x20;when&#x20;included.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"4.5\", \"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2647,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2648,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2649,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2650,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhostsand&#x20;.shostsfiles&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthenticationor&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2651,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2652,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2653,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2654,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2655,'Ensure&#x20;only&#x20;strong&#x20;ciphers&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&quot;Sweet32&quot;&#x20;attack&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involving&#x20;LSB&#x20;values,&#x20;aka&#x20;the&#x20;&quot;Bar&#x20;Mitzvah&quot;&#x20;issue&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;Ciphers&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphers&#x20;Example:&#x20;Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2656,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:&#x20;MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"14.4\", \"16.5\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2657,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms&#x20;Example:&#x20;KexAlgorithms&#x20;curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2658,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;&#x20;&#x20;&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(2659,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2660,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers,&#x20;AllowGroups,&#x20;DenyUsers,&#x20;DenyGroups.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;AllowGroups&#x20;&lt;grouplist&gt;&#x20;&#x20;&#x20;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2661,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2662,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthentication&#x20;and&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types.','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2663,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines.','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.&#x20;SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.21\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(2664,'Ensure&#x20;SSH&#x20;MaxStartups&#x20;is&#x20;configured','The&#x20;MaxStartups&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;to&#x20;the&#x20;SSH&#x20;daemon.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;maxstartups&#x20;10:30:60','[{\"cis\": [\"5.2.22\"]}, {\"cis_csc\": [\"5.1\"]}]'),(2665,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;limited','The&#x20;MaxSessions&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;concurrent&#x20;sessions,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxSessions&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;10','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2666,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options:&#x20;-&#x20;retry=3&#x20;&#40;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure&#41;.&#x20;The&#x20;following&#x20;options&#x20;are&#x20;set&#x20;in&#x20;the&#x20;/etc/security/pwquality.conf&#x20;file:&#x20;-&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#40;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies.&#41;','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','1&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;the&#x20;pam_pwquality&#x20;module:&#x20;apt&#x20;install&#x20;libpam-pwquality&#x20;2&#41;&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_pwquality.so&#x20;retry=3&#x20;3&#41;&#x20;Edit&#x20;/etc/security/pwquality.conf&#x20;to&#x20;add&#x20;or&#x20;update&#x20;the&#x20;following&#x20;settings&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;requirements&#x20;only&#x20;cover&#x20;including&#x20;try_first_pass&#x20;and&#x20;minlen&#x20;set&#x20;to&#x20;14&#x20;or&#x20;more.&#x20;Settings&#x20;in&#x20;/etc/security/pwquality.conf&#x20;must&#x20;use&#x20;spaces&#x20;around&#x20;the&#x20;=&#x20;symbol.','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2667,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;files.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.&#x20;Check&#x20;the&#x20;documentation&#x20;for&#x20;each&#x20;secondary&#x20;program&#x20;for&#x20;instructions&#x20;on&#x20;how&#x20;to&#x20;configure&#x20;them&#x20;to&#x20;work&#x20;with&#x20;PAM.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;to&#x20;the&#x20;policy&#x20;in&#x20;effect&#x20;at&#x20;your&#x20;site.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/common-auth&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900.&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-account&#x20;file&#x20;and&#x20;add&#x20;the&#x20;account&#x20;lines&#x20;below:&#x20;account&#x20;&#x20;&#x20;&#x20;requisite&#x20;&#x20;&#x20;&#x20;pam_deny.so&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;account&#x20;&#x20;&#x20;&#x20;required&#x20;&#x20;&#x20;&#x20;pam_tally2.so.&#x20;Note:&#x20;If&#x20;a&#x20;user&#x20;has&#x20;been&#x20;locked&#x20;out&#x20;because&#x20;they&#x20;have&#x20;reached&#x20;the&#x20;maximum&#x20;consecutive&#x20;failure&#x20;count&#x20;defined&#x20;by&#x20;deny=&#x20;in&#x20;the&#x20;pam_tally2.so&#x20;module,&#x20;the&#x20;user&#x20;can&#x20;be&#x20;unlocked&#x20;by&#x20;issuing&#x20;the&#x20;command&#x20;/sbin/pam_tally2&#x20;-u&#x20;&lt;username&gt;&#x20;--reset.&#x20;This&#x20;command&#x20;sets&#x20;the&#x20;failed&#x20;count&#x20;to&#x20;0,&#x20;effectively&#x20;unlocking&#x20;the&#x20;user.&#x20;Notes:BUG&#x20;In&#x20;pam_tally2.so&#x20;To&#x20;work&#x20;around&#x20;this&#x20;issue&#x20;the&#x20;addition&#x20;of&#x20;pam_tally2.so&#x20;in&#x20;the&#x20;accounts&#x20;section&#x20;of&#x20;the&#x20;/etc/pam.d/common-account&#x20;file&#x20;has&#x20;been&#x20;added&#x20;to&#x20;the&#x20;audit&#x20;and&#x20;remediation&#x20;sections.&#x20;pam_tally2&#x20;line&#x20;must&#x20;be&#x20;added&#x20;for&#x20;the&#x20;counter&#x20;to&#x20;reset&#x20;to&#x20;0&#x20;when&#x20;using&#x20;sudo.&#x20;&#x20;&#x20;&#x20;&#x20;Use&#x20;of&#x20;the&#x20;&quot;audit&quot;&#x20;keyword&#x20;may&#x20;log&#x20;credentials&#x20;in&#x20;the&#x20;case&#x20;of&#x20;user&#x20;error&#x20;during&#x20;authentication.&#x20;This&#x20;risk&#x20;should&#x20;be&#x20;evaluated&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;site&#x20;policies&#x20;of&#x20;your&#x20;organization.','[{\"cis\": [\"5.3.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2668,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;only&#x20;covers&#x20;those&#x20;listed&#x20;here.','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2669,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;[success=1&#x20;default=ignore]&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(2670,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MAX_DAYS&#x20;90.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;5th&#x20;field&#x20;should&#x20;be&#x20;365&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;will&#x20;disable&#x20;password&#x20;expiration.&#x20;Additionally&#x20;the&#x20;password&#x20;expiration&#x20;must&#x20;be&#x20;greater&#x20;than&#x20;the&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;or&#x20;users&#x20;will&#x20;be&#x20;unable&#x20;to&#x20;change&#x20;their&#x20;password.','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2671,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;4th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2672,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;6th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2673,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;#&#x20;useradd&#x20;-D&#x20;-f&#x20;30.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;7th&#x20;field&#x20;should&#x20;be&#x20;30&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;would&#x20;disable&#x20;this&#x20;setting.','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2674,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;#&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2675,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2676,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;readonly&#x20;TMOUT=900&#x20;;&#x20;export&#x20;TMOUT&#x20;.&#x20;Note&#x20;that&#x20;setting&#x20;the&#x20;value&#x20;to&#x20;readonly&#x20;prevents&#x20;unwanted&#x20;modification&#x20;during&#x20;runtime.','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(2677,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;group&#x20;to&#x20;execute&#x20;su.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Create&#x20;an&#x20;empty&#x20;group&#x20;that&#x20;will&#x20;be&#x20;specified&#x20;for&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command.&#x20;The&#x20;group&#x20;should&#x20;be&#x20;named&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;Example&#x20;#&#x20;groupadd&#x20;sugroup&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file,&#x20;specifying&#x20;the&#x20;empty&#x20;group:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid&#x20;group=sugroup','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2678,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2679,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2680,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;one&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2681,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2682,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2683,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2684,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2685,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2686,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;em&gt;&lt;username&gt;&lt;/em&gt;.&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2687,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2688,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2689,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2690,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2691,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group.','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;all&#x20;users&#x20;from&#x20;the&#x20;shadow&#x20;group,&#x20;and&#x20;change&#x20;the&#x20;primary&#x20;group&#x20;of&#x20;any&#x20;users&#x20;with&#x20;shadow&#x20;as&#x20;their&#x20;primary&#x20;group.','[{\"cis\": [\"6.2.20\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(3000,'SSH&#x20;Hardening:&#x20;Port&#x20;should&#x20;not&#x20;be&#x20;22','The&#x20;ssh&#x20;daemon&#x20;should&#x20;not&#x20;be&#x20;listening&#x20;on&#x20;port&#x20;22&#x20;&#40;the&#x20;default&#x20;value&#41;&#x20;for&#x20;incoming&#x20;connections.','Changing&#x20;the&#x20;default&#x20;port&#x20;you&#x20;may&#x20;reduce&#x20;the&#x20;number&#x20;of&#x20;successful&#x20;attacks&#x20;from&#x20;zombie&#x20;bots,&#x20;an&#x20;attacker&#x20;or&#x20;bot&#x20;doing&#x20;port-scanning&#x20;can&#x20;quickly&#x20;identify&#x20;your&#x20;SSH&#x20;port.','','Change&#x20;the&#x20;Port&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3001,'SSH&#x20;Hardening:&#x20;Protocol&#x20;should&#x20;be&#x20;set&#x20;to&#x20;2','The&#x20;SSH&#x20;protocol&#x20;should&#x20;not&#x20;be&#x20;1.','The&#x20;Protocol&#x20;parameter&#x20;dictates&#x20;which&#x20;version&#x20;of&#x20;the&#x20;SSH&#x20;communication&#x20;and&#x20;encryption&#x20;protocols&#x20;are&#x20;in&#x20;use.&#x20;Version&#x20;1&#x20;of&#x20;the&#x20;SSH&#x20;protocol&#x20;has&#x20;weaknesses.','','Change&#x20;the&#x20;Protocol&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3002,'SSH&#x20;Hardening:&#x20;Root&#x20;account&#x20;should&#x20;not&#x20;be&#x20;able&#x20;to&#x20;log&#x20;in','The&#x20;option&#x20;PermitRootLogin&#x20;should&#x20;be&#x20;set&#x20;to&#x20;no.','The&#x20;option&#x20;PermitRootLogin&#x20;specifies&#x20;whether&#x20;root&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;If&#x20;you&#x20;want&#x20;log&#x20;in&#x20;as&#x20;root,&#x20;you&#x20;should&#x20;use&#x20;the&#x20;option&#x20;&quot;Match&quot;&#x20;and&#x20;restrict&#x20;it&#x20;to&#x20;a&#x20;few&#x20;IP&#x20;addresses.','','Change&#x20;the&#x20;PermitRootLogin&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','\"\"'),(3003,'SSH&#x20;Hardening:&#x20;No&#x20;Public&#x20;Key&#x20;authentication','The&#x20;option&#x20;PubkeyAuthentication&#x20;should&#x20;be&#x20;set&#x20;yes.','Access&#x20;only&#x20;by&#x20;public&#x20;key.&#x20;Generally&#x20;people&#x20;will&#x20;use&#x20;weak&#x20;passwords&#x20;and&#x20;have&#x20;poor&#x20;password&#x20;practices.&#x20;Keys&#x20;are&#x20;considered&#x20;stronger&#x20;than&#x20;password.','','Change&#x20;the&#x20;PubkeyAuthentication&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3004,'SSH&#x20;Hardening:&#x20;Password&#x20;Authentication&#x20;should&#x20;be&#x20;disabled','The&#x20;option&#x20;PasswordAuthentication&#x20;should&#x20;be&#x20;set&#x20;to&#x20;no.','The&#x20;option&#x20;PasswordAuthentication&#x20;specifies&#x20;whether&#x20;we&#x20;should&#x20;use&#x20;password-based&#x20;authentication.&#x20;Use&#x20;public&#x20;key&#x20;authentication&#x20;instead&#x20;of&#x20;passwords.','','Change&#x20;the&#x20;PasswordAuthentication&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3005,'SSH&#x20;Hardening:&#x20;Empty&#x20;passwords&#x20;should&#x20;not&#x20;be&#x20;allowed','The&#x20;option&#x20;PermitEmptyPasswords&#x20;should&#x20;be&#x20;set&#x20;to&#x20;no.','The&#x20;option&#x20;PermitEmptyPasswords&#x20;specifies&#x20;whether&#x20;the&#x20;server&#x20;allows&#x20;logging&#x20;in&#x20;to&#x20;accounts&#x20;with&#x20;a&#x20;null&#x20;password.&#x20;Accounts&#x20;with&#x20;null&#x20;passwords&#x20;are&#x20;a&#x20;bad&#x20;practice.','','Change&#x20;the&#x20;PermitEmptyPasswords&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3006,'SSH&#x20;Hardening:&#x20;Rhost&#x20;or&#x20;shost&#x20;should&#x20;not&#x20;be&#x20;used&#x20;for&#x20;authentication','The&#x20;option&#x20;IgnoreRhosts&#x20;should&#x20;be&#x20;set&#x20;to&#x20;yes.','The&#x20;option&#x20;IgnoreRhosts&#x20;specifies&#x20;whether&#x20;rhosts&#x20;or&#x20;shosts&#x20;files&#x20;should&#x20;not&#x20;be&#x20;used&#x20;in&#x20;authentication.&#x20;For&#x20;security&#x20;reasons&#x20;it&#x20;is&#x20;recommended&#x20;to&#x20;no&#x20;use&#x20;rhosts&#x20;or&#x20;shosts&#x20;files&#x20;for&#x20;authentication.','','Change&#x20;the&#x20;IgnoreRhosts&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3007,'SSH&#x20;Hardening:&#x20;Grace&#x20;Time&#x20;should&#x20;be&#x20;one&#x20;minute&#x20;or&#x20;less.','The&#x20;option&#x20;LoginGraceTime&#x20;should&#x20;be&#x20;set&#x20;to&#x20;60&#x20;or&#x20;less.','The&#x20;option&#x20;LoginGraceTime&#x20;specifies&#x20;how&#x20;long&#x20;in&#x20;seconds&#x20;after&#x20;a&#x20;connection&#x20;request&#x20;the&#x20;server&#x20;will&#x20;wait&#x20;before&#x20;disconnecting&#x20;if&#x20;the&#x20;user&#x20;has&#x20;not&#x20;successfully&#x20;logged&#x20;in.&#x20;30&#x20;seconds&#x20;is&#x20;the&#x20;recommended&#x20;time&#x20;for&#x20;avoiding&#x20;open&#x20;connections&#x20;without&#x20;authenticate.','','Change&#x20;the&#x20;LoginGraceTime&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3008,'SSH&#x20;Hardening:&#x20;Wrong&#x20;Maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts','The&#x20;option&#x20;MaxAuthTries&#x20;should&#x20;be&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less.','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;Once&#x20;the&#x20;number&#x20;of&#x20;failures&#x20;reaches&#x20;half&#x20;this&#x20;value,&#x20;additional&#x20;failures&#x20;are&#x20;logged.&#x20;This&#x20;should&#x20;be&#x20;set&#x20;to&#x20;4.','','Change&#x20;the&#x20;MaxAuthTries&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3009,'SSH&#x20;Hardening:&#x20;Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv&#x20;,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3010,'Ensure&#x20;retry&#x20;option&#x20;for&#x20;passwords&#x20;is&#x20;less&#x20;than&#x20;3','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3011,'Ensure&#x20;passwords&#x20;are&#x20;longer&#x20;than&#x20;14&#x20;characters','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3012,'Ensure&#x20;passwords&#x20;contain&#x20;at&#x20;least&#x20;one&#x20;digit','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3013,'Ensure&#x20;passwords&#x20;contain&#x20;at&#x20;least&#x20;one&#x20;lowercase&#x20;character','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3014,'Ensure&#x20;passwords&#x20;contain&#x20;at&#x20;least&#x20;one&#x20;uppercase&#x20;character','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3015,'Ensure&#x20;passwords&#x20;contain&#x20;at&#x20;least&#x20;one&#x20;special&#x20;character','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3016,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;files.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/common-auth&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;#auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900','\"\"'),(3017,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;required&#x20;pam_unix.so&#x20;sha512','[{\"cis_csc\": [\"16.14\"]}]'),(3018,'Ensure&#x20;passwords&#x20;in&#x20;/etc/shadow&#x20;are&#x20;hashed&#x20;with&#x20;SHA-512&#x20;or&#x20;SHA-256','SHA-512&#x20;and&#x20;SHA-256&#x20;are&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithms&#x20;than&#x20;MD5.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.','','Set&#x20;the&#x20;default&#x20;algorithm&#x20;for&#x20;password&#x20;hashing&#x20;in&#x20;/etc/shadow&#x20;to&#x20;SHA-512&#x20;or&#x20;SHA-256.','\"\"'),(3019,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs.','[{\"cis_csc\": [\"4.4\", \"16\"]}]'),(3020,'Ensure&#x20;SELinux&#x20;or&#x20;AppArmor&#x20;are&#x20;installed','SELinux&#x20;and&#x20;AppArmor&#x20;provide&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;SELinux&#x20;or&#x20;apparmor:&#x20;#&#x20;apt-get&#x20;install&#x20;selinux-basics&#x20;Or:&#x20;#&#x20;apt-get&#x20;install&#x20;apparmor&#x20;apparmor-profiles&#x20;apparmor-utils','[{\"cis_csc\": [\"14.4\", \"14.6\"]}]'),(3021,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups:&#x20;#&#x20;systemctl&#x20;disable&#x20;cups','[{\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(3022,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;enable&#x20;auditd','[{\"cis_csc\": [\"6.2\", \"6.3\"]}]'),(3500,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp&#x20;.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.1\"]}]'),(3501,'Set&#x20;nodev&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3502,'Set&#x20;nosuid&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3503,'Set&#x20;noexec&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3504,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.5\"]}]'),(3505,'Bind&#x20;Mount&#x20;the&#x20;/var/tmp&#x20;directory&#x20;to&#x20;/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;normally&#x20;a&#x20;standalone&#x20;directory&#x20;in&#x20;the&#x20;/var&#x20;file&#x20;system.&#x20;Binding&#x20;/var/tmp&#x20;to&#x20;/tmp&#x20;establishes&#x20;an&#x20;unbreakable&#x20;link&#x20;to&#x20;/tmp&#x20;that&#x20;cannot&#x20;be&#x20;removed&#x20;&#40;even&#x20;by&#x20;the&#x20;root&#x20;user&#41;.&#x20;It&#x20;also&#x20;allows&#x20;/var/tmp&#x20;to&#x20;inherit&#x20;the&#x20;same&#x20;mount&#x20;options&#x20;that&#x20;/tmp&#x20;owns,&#x20;allowing&#x20;/var/tmp&#x20;to&#x20;be&#x20;protected&#x20;in&#x20;the&#x20;same&#x20;/tmp&#x20;is&#x20;protected.','All&#x20;programs&#x20;that&#x20;use&#x20;/var/tmp&#x20;and&#x20;/tmp&#x20;to&#x20;read/write&#x20;temporary&#x20;files&#x20;will&#x20;always&#x20;be&#x20;written&#x20;to&#x20;the&#x20;/tmp&#x20;file&#x20;system,&#x20;preventing&#x20;a&#x20;user&#x20;from&#x20;running&#x20;the&#x20;/var&#x20;file&#x20;system&#x20;out&#x20;of&#x20;space&#x20;or&#x20;trying&#x20;to&#x20;perform&#x20;operations&#x20;that&#x20;have&#x20;been&#x20;blocked&#x20;in&#x20;the&#x20;/tmp&#x20;filesystem.','','#&#x20;mount&#x20;--bind&#x20;/tmp&#x20;/var/tmp&#x20;and&#x20;edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;to&#x20;contain&#x20;the&#x20;following&#x20;line:&#x20;/tmp&#x20;/var/tmp&#x20;none&#x20;bind&#x20;0&#x20;0','[{\"cis\": [\"1.1.6\"]}]'),(3506,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.7\"]}]'),(3507,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit&#x20;.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.8\"]}]'),(3508,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.9\"]}]'),(3509,'Add&#x20;nodev&#x20;Option&#x20;to&#x20;/home','When&#x20;set&#x20;on&#x20;a&#x20;file&#x20;system,&#x20;this&#x20;option&#x20;prevents&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices&#x20;from&#x20;being&#x20;defined,&#x20;or&#x20;if&#x20;they&#x20;exist,&#x20;from&#x20;being&#x20;used&#x20;as&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.10\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3510,'Add&#x20;nodev&#x20;Option&#x20;to&#x20;/dev/shm&#x20;Partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;/dev/shm&#x20;&#40;temporary&#x20;filesystem&#x20;stored&#x20;in&#x20;memory&#41;&#x20;cannot&#x20;contain&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#x20;of&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/dev/shm&#41;.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3511,'Add&#x20;nosuid&#x20;Option&#x20;to&#x20;/dev/shm&#x20;Partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;/dev/shm&#x20;&#40;temporary&#x20;filesystem&#x20;stored&#x20;in&#x20;memory&#41;&#x20;will&#x20;not&#x20;execute&#x20;setuid&#x20;and&#x20;setgid&#x20;on&#x20;executable&#x20;programs&#x20;as&#x20;such,&#x20;but&#x20;rather&#x20;execute&#x20;them&#x20;with&#x20;the&#x20;uid&#x20;and&#x20;gid&#x20;of&#x20;the&#x20;user&#x20;executing&#x20;the&#x20;program.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;Look&#x20;for&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/dev/shm.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]');
 INSERT INTO `tsca` VALUES (3512,'Add&#x20;noexec&#x20;Option&#x20;to&#x20;/dev/shm&#x20;Partition','Set&#x20;noexec&#x20;on&#x20;the&#x20;shared&#x20;memory&#x20;partition&#x20;to&#x20;prevent&#x20;programs&#x20;from&#x20;executing&#x20;from&#x20;there.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;Look&#x20;for&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/dev/shm.&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3513,'Disable&#x20;yum-updatesd','The&#x20;yum-updatesd&#x20;utility&#x20;provides&#x20;notification&#x20;of&#x20;updates&#x20;that&#x20;are&#x20;available&#x20;for&#x20;your&#x20;system.','The&#x20;yum-updatesd&#x20;service&#x20;may&#x20;introduce&#x20;unnecessary&#x20;overhead&#x20;and&#x20;prevent&#x20;other&#x20;programs&#x20;from&#x20;running.&#x20;When&#x20;possible,&#x20;replace&#x20;this&#x20;service&#x20;with&#x20;a&#x20;cron&#x20;job&#x20;that&#x20;calls&#x20;yum&#x20;directly.','','Disable&#x20;the&#x20;yum-updatesd&#x20;daemon&#x20;by&#x20;running&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;chkconfig&#x20;yum-updatesd&#x20;off','[{\"cis\": [\"1.2.5\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(3514,'Enable&#x20;SELinux&#x20;in&#x20;/etc/grub.conf','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;/etc/grub.conf&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overwritten.','','Remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;/etc/grub.conf.','[{\"cis\": [\"1.4.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3515,'Set&#x20;the&#x20;SELinux&#x20;State','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.4.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3516,'Set&#x20;the&#x20;SELinux&#x20;Policy','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3517,'Remove&#x20;SETroubleshoot','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','rpm&#x20;-qa&#x20;setroubleshoot','[{\"cis\": [\"1.4.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3518,'Disable&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;disable&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','#&#x20;chkconfig&#x20;mctrans&#x20;off','[{\"cis\": [\"1.4.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3519,'Set&#x20;Boot&#x20;Loader&#x20;Password','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;the&#x20;person&#x20;who&#x20;is&#x20;rebooting&#x20;system&#x20;the&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Set&#x20;a&#x20;bootloader&#x20;password','[{\"cis\": [\"1.5.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3520,'Require&#x20;Authentication&#x20;for&#x20;Single-User&#x20;Mode','Since&#x20;/etc/init&#x20;determines&#x20;what&#x20;run&#x20;state&#x20;the&#x20;system&#x20;is&#x20;in,&#x20;setting&#x20;the&#x20;entry&#x20;in&#x20;/etc/inittab&#x20;will&#x20;force&#x20;single&#x20;user&#x20;authentication.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Add&#x20;the&#x20;following&#x20;to&#x20;/etc/inittab&#x20;:&#x20;~:S:wait:/sbin/sulogin','[{\"cis\": [\"1.5.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3521,'Disable&#x20;Interactive&#x20;Boot','The&#x20;PROMPT&#x20;option&#x20;provides&#x20;console&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;interactively&#x20;boot&#x20;the&#x20;system&#x20;and&#x20;select&#x20;which&#x20;services&#x20;to&#x20;start&#x20;on&#x20;boot&#x20;.','Turn&#x20;off&#x20;the&#x20;PROMPT&#x20;option&#x20;on&#x20;the&#x20;console&#x20;to&#x20;prevent&#x20;console&#x20;users&#x20;from&#x20;potentially&#x20;overriding&#x20;established&#x20;security&#x20;settings.','','Set&#x20;the&#x20;PROMPT&#x20;parameter&#x20;in&#x20;/etc/sysconfig/init&#x20;to&#x20;no&#x20;.','[{\"cis\": [\"1.5.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3522,'Restrict&#x20;Core&#x20;Dumps','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid.dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;file.&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;fs.suid_dumpable&#x20;=&#x20;0','[{\"cis\": [\"1.6.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3523,'Enable&#x20;Randomized&#x20;Virtual&#x20;Memory&#x20;Region&#x20;Placement','Set&#x20;the&#x20;system&#x20;flag&#x20;to&#x20;force&#x20;randomized&#x20;virtual&#x20;memory&#x20;region&#x20;placement.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;for&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;kernel.randomize_va_space&#x20;=&#x20;2','[{\"cis\": [\"1.6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3524,'Configure&#x20;ExecShield','Execshield&#x20;is&#x20;made&#x20;up&#x20;of&#x20;a&#x20;number&#x20;of&#x20;kernel&#x20;features&#x20;to&#x20;provide&#x20;protection&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks.&#x20;These&#x20;features&#x20;include&#x20;prevention&#x20;of&#x20;execution&#x20;in&#x20;memory&#x20;data&#x20;space,&#x20;and&#x20;special&#x20;handling&#x20;of&#x20;text&#x20;buffers.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;kernel.exec-shield&#x20;=&#x20;1','[{\"cis\": [\"1.6.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3525,'Disable&#x20;Prelink','Prelinking&#x20;is&#x20;a&#x20;performance&#x20;enhancing&#x20;feature&#x20;that&#x20;decreases&#x20;process&#x20;start&#x20;up&#x20;time.&#x20;It&#x20;loads&#x20;shared&#x20;libraries&#x20;into&#x20;addresses&#x20;for&#x20;which&#x20;the&#x20;linking&#x20;of&#x20;required&#x20;symbols&#x20;has&#x20;already&#x20;been&#x20;performed.&#x20;After&#x20;a&#x20;binary&#x20;has&#x20;been&#x20;prelinked,&#x20;the&#x20;addresses&#x20;at&#x20;which&#x20;shared&#x20;libraries&#x20;is&#x20;not&#x20;changed,&#x20;even&#x20;if&#x20;kernel.randomize_va_space&#x20;is&#x20;set&#x20;to&#x20;1.','There&#x20;is&#x20;a&#x20;bug&#x20;in&#x20;prelink&#x20;that&#x20;interferes&#x20;with&#x20;AIDE,&#x20;the&#x20;Linux&#x20;file&#x20;integrity&#x20;checker.&#x20;This&#x20;has&#x20;been&#x20;fixed&#x20;in&#x20;RHEL6&#x20;&#40;so&#x20;prelink&#x20;does&#x20;not&#x20;need&#x20;to&#x20;be&#x20;disabled&#x20;in&#x20;RHEL6&#x20;systems&#41;.','','Edit&#x20;/etc/sysconfig/prelink&#x20;and&#x20;set&#x20;PRELINKING=no','[{\"cis\": [\"1.6.5\"]}]'),(3526,'Remove&#x20;telnet-server','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnetd&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Red&#x20;Hat&#x20;Linux&#x20;distributions.','','#&#x20;yum&#x20;erase&#x20;telnet-server','[{\"cis\": [\"2.1.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3527,'Remove&#x20;rsh-server','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;rcp&#x20;&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;service&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','#&#x20;yum&#x20;erase&#x20;rsh-server','[{\"cis\": [\"2.1.3\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3528,'Remove&#x20;NIS&#x20;Client','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;ypbind&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','#&#x20;yum&#x20;erase&#x20;ypbind','[{\"cis\": [\"2.1.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3529,'Remove&#x20;NIS&#x20;Server','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used.','','#&#x20;yum&#x20;erase&#x20;ypserv','[{\"cis\": [\"2.1.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3530,'Remove&#x20;tftp-server','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;tftp-server&#x20;is&#x20;the&#x20;server&#x20;package&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;of&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','#&#x20;yum&#x20;erase&#x20;tftp-server','[{\"cis\": [\"2.1.8\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3531,'Remove&#x20;talk-server','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','#&#x20;yum&#x20;erase&#x20;talk-server','[{\"cis\": [\"2.1.10\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3532,'Set&#x20;Daemon&#x20;umask','Set&#x20;the&#x20;default&#x20;umask&#x20;for&#x20;all&#x20;processes&#x20;started&#x20;at&#x20;boot&#x20;time.&#x20;The&#x20;settings&#x20;in&#x20;umask&#x20;selectively&#x20;turn&#x20;off&#x20;default&#x20;permission&#x20;when&#x20;a&#x20;file&#x20;is&#x20;created&#x20;by&#x20;a&#x20;daemon&#x20;process.','Setting&#x20;the&#x20;umask&#x20;to&#x20;027&#x20;will&#x20;make&#x20;sure&#x20;that&#x20;files&#x20;created&#x20;by&#x20;daemons&#x20;will&#x20;not&#x20;be&#x20;readable,&#x20;writable&#x20;or&#x20;executable&#x20;by&#x20;any&#x20;other&#x20;than&#x20;the&#x20;group&#x20;and&#x20;owner&#x20;of&#x20;the&#x20;daemon&#x20;process&#x20;and&#x20;will&#x20;not&#x20;be&#x20;writable&#x20;by&#x20;the&#x20;group&#x20;of&#x20;the&#x20;daemon&#x20;process.&#x20;The&#x20;daemon&#x20;process&#x20;can&#x20;manually&#x20;override&#x20;these&#x20;settings&#x20;if&#x20;these&#x20;files&#x20;need&#x20;additional&#x20;permission.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysconfig/init&#x20;file.&#x20;umask&#x20;027','[{\"cis\": [\"3.2\"]}]'),(3533,'Remove&#x20;X&#x20;Windows','The&#x20;X&#x20;Windows&#x20;system&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;/etc/inittab&#x20;set&#x20;default&#x20;runlevel&#x20;as&#x20;follows:&#x20;s/:5:/:3:/&#x20;Uninstall&#x20;the&#x20;X&#x20;Windows&#x20;System:&#x20;#&#x20;yum&#x20;groupremove&#x20;&#039;X&#x20;Window&#x20;System&#039;','[{\"cis\": [\"3.3\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3534,'Disable&#x20;Avahi&#x20;Server','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.','Since&#x20;servers&#x20;are&#x20;not&#x20;normally&#x20;used&#x20;for&#x20;printing,&#x20;this&#x20;service&#x20;is&#x20;not&#x20;needed&#x20;unless&#x20;dependencies&#x20;require&#x20;it.&#x20;If&#x20;this&#x20;is&#x20;the&#x20;case,&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.&#x20;If&#x20;for&#x20;some&#x20;reason&#x20;the&#x20;service&#x20;is&#x20;required&#x20;on&#x20;the&#x20;server,&#x20;follow&#x20;the&#x20;recommendations&#x20;in&#x20;sub-sections&#x20;3.2.1&#x20;-&#x20;3.2.5&#x20;to&#x20;secure&#x20;it.','','#&#x20;chkconfig&#x20;avahi-daemon&#x20;off&#x20;In&#x20;addition,&#x20;edit&#x20;the&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;remove&#x20;zeroconf.','[{\"cis\": [\"3.1.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3535,'Disable&#x20;NFS&#x20;and&#x20;RPC','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;server&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','#&#x20;chkconfig&#x20;nfslock&#x20;off;&#x20;#chkconfig&#x20;rpcgssd&#x20;off;&#x20;#chkconfig&#x20;rpcidmapd&#x20;off;&#x20;#&#x20;chkconfig&#x20;portmap&#x20;off;','[{\"cis\": [\"3.8\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3536,'Remove&#x20;FTP&#x20;Server','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;vsftpd','[{\"cis\": [\"3.10\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3537,'Remove&#x20;HTTP&#x20;Server','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.&#x20;The&#x20;default&#x20;HTTP&#x20;server&#x20;shipped&#x20;with&#x20;Red&#x20;Hat&#x20;Linux&#x20;is&#x20;Apache.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;httpd','[{\"cis\": [\"3.11\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3538,'Remove&#x20;Dovecot','Dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;to&#x20;this&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;dovecot','[{\"cis\": [\"3.12\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3539,'Remove&#x20;Samba','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;samba','[{\"cis\": [\"3.13\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3540,'Remove&#x20;HTTP&#x20;Proxy&#x20;Server','The&#x20;default&#x20;HTTP&#x20;proxy&#x20;package&#x20;shipped&#x20;with&#x20;Red&#x20;Hat&#x20;Linux&#x20;is&#x20;squid.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;squid','[{\"cis\": [\"3.14\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3541,'Remove&#x20;SNMP&#x20;Server','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;communicates&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.','','#&#x20;yum&#x20;erase&#x20;net-snmp','[{\"cis\": [\"3.15\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3542,'Disable&#x20;IP&#x20;Forwarding','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;server&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.&#x20;If&#x20;the&#x20;server&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used&#x20;as&#x20;a&#x20;router,&#x20;set&#x20;the&#x20;flag&#x20;to&#x20;0.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;server&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;net.ipv4.ip_forward&#x20;parameter&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:','[{\"cis\": [\"4.1.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3543,'Disable&#x20;Send&#x20;Packet&#x20;Redirects','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;net.ipv4.conf.all.send_redirects&#x20;and&#x20;net.ipv4.conf.default.send_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf','[{\"cis\": [\"4.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3544,'Disable&#x20;Source&#x20;Routed&#x20;Packet&#x20;Acceptance','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;server&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.','','Set&#x20;the&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3545,'Disable&#x20;ICMP&#x20;Redirect&#x20;Acceptance','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv4.conf.default.accept_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3546,'Disable&#x20;Secure&#x20;ICMP&#x20;Redirect&#x20;Acceptance','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;net.ipv4.conf.all.secure_redirects&#x20;and&#x20;net.ipv4.conf.default.secure_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3547,'Log&#x20;Suspicious&#x20;Packets','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;net.ipv4.conf.all.log_martians&#x20;and&#x20;net.ipv4.conf.default.log_martians&#x20;parameters&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3548,'Enable&#x20;Ignore&#x20;Broadcast&#x20;Requests','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.','','Set&#x20;the&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3549,'Enable&#x20;Bad&#x20;Error&#x20;Message&#x20;Protection','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3550,'Enable&#x20;RFC-recommended&#x20;Source&#x20;Route&#x20;Validation','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.','','Set&#x20;the&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;parameters&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3551,'Enable&#x20;TCP&#x20;SYN&#x20;Cookies','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;server&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.','','Set&#x20;the&#x20;net.ipv4.tcp_syncookies&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.tcp_syncookies=1&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3552,'Set&#x20;SSH&#x20;Protocol&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"6.2.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3553,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3554,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3555,'Set&#x20;SSH&#x20;IgnoreRhosts&#x20;to&#x20;Yes','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication&#x20;.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh&#x20;.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"6.2.6\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3556,'Set&#x20;SSH&#x20;HostbasedAuthentication&#x20;to&#x20;No','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv&#x20;,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf&#x20;,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"6.2.7\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3557,'Disable&#x20;SSH&#x20;Root&#x20;Login','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;&#x20;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"6.2.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3558,'Set&#x20;SSH&#x20;PermitEmptyPasswords&#x20;to&#x20;No','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"6.2.9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3559,'Verify&#x20;No&#x20;UID&#x20;0&#x20;Accounts&#x20;Exist&#x20;Other&#x20;Than&#x20;root','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;7.5&#x20;Restrict&#x20;root&#x20;Login&#x20;to&#x20;System&#x20;Console.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"9.2.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4000,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4001,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4002,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4003,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4004,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4005,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.6\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4006,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.7\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4007,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.8\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4008,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4009,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstabfile&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4010,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4011,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4012,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4013,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4014,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4015,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4016,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4017,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4018,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4019,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4020,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4021,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4022,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4023,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4024,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;#&#x20;chkconfig&#x20;autofs&#x20;off','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4025,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.3\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(4026,'Disable&#x20;the&#x20;rhnsd&#x20;Daemon','The&#x20;rhnsd&#x20;daemon&#x20;polls&#x20;the&#x20;Red&#x20;Hat&#x20;Network&#x20;web&#x20;site&#x20;for&#x20;scheduled&#x20;actions&#x20;and,&#x20;if&#x20;there&#x20;are,&#x20;executes&#x20;those&#x20;actions.','Patch&#x20;management&#x20;policies&#x20;may&#x20;require&#x20;that&#x20;organizations&#x20;test&#x20;the&#x20;impact&#x20;of&#x20;a&#x20;patch&#x20;before&#x20;it&#x20;is&#x20;deployed&#x20;in&#x20;a&#x20;production&#x20;environment.&#x20;Having&#x20;patches&#x20;automatically&#x20;deployed&#x20;could&#x20;have&#x20;a&#x20;negative&#x20;impact&#x20;on&#x20;the&#x20;environment.&#x20;It&#x20;is&#x20;best&#x20;to&#x20;not&#x20;allow&#x20;an&#x20;action&#x20;by&#x20;default&#x20;but&#x20;only&#x20;after&#x20;appropriate&#x20;consideration&#x20;has&#x20;been&#x20;made.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;unless&#x20;the&#x20;risk&#x20;is&#x20;understood&#x20;and&#x20;accepted&#x20;or&#x20;you&#x20;are&#x20;running&#x20;your&#x20;own&#x20;satellite&#x20;.&#x20;This&#x20;item&#x20;is&#x20;not&#x20;scored&#x20;because&#x20;organizations&#x20;may&#x20;have&#x20;addressed&#x20;the&#x20;risk.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rhnsd&#x20;:&#x20;#&#x20;chkconfig&#x20;rhnsd&#x20;off','[{\"cis\": [\"1.2.5\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4027,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;aide:&#x20;yum&#x20;install&#x20;aide&#x20;//&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4028,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;//&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4029,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;located&#x20;at&#x20;/boot/grub/grub.conf&#x20;and&#x20;linked&#x20;as&#x20;/boot/grub/menu.lst&#x20;and&#x20;/etc/grub.conf&#x20;.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.conf&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.conf','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4030,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt:&#x20;#&#x20;grub-md5-crypt&#x20;Password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Retype&#x20;Password:&#x20;&lt;password&gt;&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Copy&#x20;and&#x20;paste&#x20;the&#x20;&lt;encrypted-password&gt;&#x20;into&#x20;the&#x20;global&#x20;section&#x20;of&#x20;/boot/grub/grub.conf&#x20;:&#x20;password&#x20;--md5&#x20;&lt;encrypted-password&gt;','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4031,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/etc/sysconfig/init&#x20;and&#x20;set&#x20;SINGLE&#x20;to&#x20;&#039;&#x20;/sbin/sulogin&#039;:&#x20;&#x20;SINGLE=/sbin/sulogin','[{\"cis\": [\"1.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4032,'Ensure&#x20;interactive&#x20;boot&#x20;is&#x20;not&#x20;enabled','Interactive&#x20;boot&#x20;allows&#x20;console&#x20;users&#x20;to&#x20;interactively&#x20;select&#x20;which&#x20;services&#x20;start&#x20;on&#x20;boot.&#x20;The&#x20;PROMPT&#x20;option&#x20;provides&#x20;console&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;interactively&#x20;boot&#x20;the&#x20;system&#x20;and&#x20;select&#x20;which&#x20;services&#x20;to&#x20;start&#x20;on&#x20;boot&#x20;.&#x20;','Turn&#x20;off&#x20;the&#x20;PROMPT&#x20;option&#x20;on&#x20;the&#x20;console&#x20;to&#x20;prevent&#x20;console&#x20;users&#x20;from&#x20;potentially&#x20;overriding&#x20;established&#x20;security&#x20;settings.&#x20;','','Edit&#x20;the&#x20;/etc/sysconfig/init&#x20;file&#x20;and&#x20;set&#x20;PROMPT&#x20;to&#x20;&#039;&#x20;no&#x20;&#039;:&#x20;PROMPT=no','[{\"cis\": [\"1.4.4\"]}, {\"cis_csc\": [\"5.1\"]}]'),(4033,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4034,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4035,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4036,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal&#x20;and&#x20;uninstall&#x20;prelink:&#x20;prelink&#x20;-ua&#x20;&amp;&amp;&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.5.4\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4037,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/boot/grub/grub.conf&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;on&#x20;all&#x20;kernel&#x20;lines','[{\"cis\": [\"1.6.1.1\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4038,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.6.1.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4039,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.6.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4040,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;yum&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.6.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4041,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;yum&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.6.1.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4042,'Ensure&#x20;no&#x20;unconfined&#x20;daemons&#x20;exist','Daemons&#x20;that&#x20;are&#x20;not&#x20;defined&#x20;in&#x20;SELinux&#x20;policy&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;of&#x20;their&#x20;parent&#x20;process.','Since&#x20;daemons&#x20;are&#x20;launched&#x20;and&#x20;descend&#x20;from&#x20;the&#x20;init&#x20;process,&#x20;they&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;label&#x20;initrc_t&#x20;.&#x20;This&#x20;could&#x20;cause&#x20;the&#x20;unintended&#x20;consequence&#x20;of&#x20;giving&#x20;the&#x20;process&#x20;more&#x20;permission&#x20;than&#x20;it&#x20;requires.','','Investigate&#x20;any&#x20;unconfined&#x20;daemons&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.6.1.6\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4043,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;libselinux:&#x20;yum&#x20;install&#x20;libselinux','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4044,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v.','[{\"cis\": [\"1.7.1.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4045,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.7.1.2\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4046,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.3\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4047,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4048,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4049,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4050,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Create&#x20;the&#x20;/etc/dconf/profile/gdm&#x20;file&#x20;with&#x20;the&#x20;following&#x20;contents:&#x20;&#x20;user-db:user&#x20;&#x20;&#x20;system-db:gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;file-db:/usr/share/gdm/greeter-dconf-defaults&#x20;&#x20;&#x20;&#x20;&#x20;||&#x20;&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;banner-message-enable&#x20;and&#x20;banner-message-text&#x20;options&#x20;in&#x20;/etc/dconf/db/gdm.d/01-banner-message&#x20;:&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;&#x20;&#x20;&#x20;||&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;system&#x20;databases:&#x20;dconf&#x20;update','[{\"cis\": [\"1.7.2\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4051,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;and&#x20;comparing&#x20;against&#x20;site&#x20;policy:&#x20;#&#x20;yum&#x20;check-update','[{\"cis\": [\"1.8\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(4052,'Ensure&#x20;chargen&#x20;services&#x20;are&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;chargen-dgram&#x20;and&#x20;chargen-stream:&#x20;#&#x20;chkconfig&#x20;chargen-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;chargen-stream&#x20;off','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4053,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;daytime-dgram&#x20;and&#x20;daytime-stream:&#x20;#&#x20;chkconfig&#x20;daytime-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;daytime-stream&#x20;off','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4054,'Ensure&#x20;discard&#x20;services&#x20;are&#x20;not&#x20;enabled','discardis&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;discard-dgram&#x20;and&#x20;discard-stream:&#x20;#&#x20;chkconfig&#x20;discard-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;discard-stream&#x20;off','[{\"cis\": [\"2.1.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4055,'Ensure&#x20;echo&#x20;services&#x20;are&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;echo-dgram&#x20;and&#x20;echo-stream:&#x20;#&#x20;chkconfig&#x20;echo-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;echo-stream&#x20;off','[{\"cis\": [\"2.1.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4056,'Ensure&#x20;time&#x20;services&#x20;are&#x20;not&#x20;enabled','time&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;time-dgram&#x20;and&#x20;time-stream:&#x20;#&#x20;chkconfig&#x20;time-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;time-stream&#x20;off','[{\"cis\": [\"2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4057,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;rexec&#x20;&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;services&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;rsh,&#x20;rlogin,&#x20;and&#x20;rexec:&#x20;#&#x20;chkconfig&#x20;rsh&#x20;off&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;rlogin&#x20;off&#x20;&#x20;#&#x20;chkconfig&#x20;rexec&#x20;off','[{\"cis\": [\"2.1.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4058,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;talk:&#x20;#&#x20;chkconfig&#x20;talk&#x20;off','[{\"cis\": [\"2.1.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4059,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;chkconfig&#x20;telnet&#x20;off','[{\"cis\": [\"2.1.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4060,'Ensure&#x20;tftp&#x20;server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;tftp-server&#x20;is&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;tftp:&#x20;#&#x20;chkconfig&#x20;tftp&#x20;off','[{\"cis\": [\"2.1.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4061,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;chkconfig&#x20;rsyncd&#x20;off','[{\"cis\": [\"2.1.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4062,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;xinetd:&#x20;#&#x20;chkconfig&#x20;xinetd&#x20;off','[{\"cis\": [\"2.1.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4063,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;and&#x20;verify&#x20;either&#x20;ntp&#x20;or&#x20;chrony&#x20;is&#x20;installed:&#x20;#&#x20;rpm&#x20;-q&#x20;ntp&#x20;#&#x20;rpm&#x20;-q&#x20;chrony&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;verify&#x20;that&#x20;host&#x20;based&#x20;synchronization&#x20;is&#x20;in&#x20;use.','[{\"cis\": [\"2.2.2.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4064,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;and&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/ntpd&#x20;to&#x20;include&#x20;&#039;&#x20;-u&#x20;ntp:ntp&#x20;&#039;:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4065,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/chrony.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/chronyd&#x20;to&#x20;include:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;chronyd&#039;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4066,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;yum&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4067,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;chkconfig&#x20;avahi-daemon&#x20;off','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4068,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups&#x20;:&#x20;#&#x20;chkconfig&#x20;cups&#x20;off','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4069,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;chkconfig&#x20;dhcpd&#x20;off','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4070,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;chkconfig&#x20;slapd&#x20;off','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4071,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs,&#x20;nfs-server&#x20;and&#x20;rpcbind:&#x20;#&#x20;chkconfig&#x20;nfs&#x20;off;&#x20;#&#x20;chkconfig&#x20;rpcbind&#x20;off','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4072,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;chkconfig&#x20;named&#x20;off','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4073,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;chkconfig&#x20;vsftpd&#x20;off','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4074,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;chkconfig&#x20;httpd&#x20;off','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4075,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;chkconfig&#x20;dovecot&#x20;off','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4076,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;chkconfig&#x20;smb&#x20;off','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4077,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;chkconfig&#x20;squid&#x20;off','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4078,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;chkconfig&#x20;snmpd&#x20;off','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4079,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;Restart&#x20;postfix:&#x20;#&#x20;service&#x20;postfix&#x20;restart','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(4080,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;chkconfig&#x20;ypserv&#x20;off','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4081,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;yum&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4082,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh&#x20;,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;rsh','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4083,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4084,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4085,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4086,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4087,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4088,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4089,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4090,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4091,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4092,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4093,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4094,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4095,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4096,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4097,'Ensure&#x20;IPv6&#x20;redirects&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;prevents&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;ICMP&#x20;redirects.&#x20;ICMP&#x20;redirects&#x20;tell&#x20;the&#x20;system&#x20;about&#x20;alternate&#x20;routes&#x20;for&#x20;sending&#x20;traffic.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;ICMP&#x20;redirects&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;||&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4098,'Ensure&#x20;IPv6&#x20;is&#x20;disabled','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;few&#x20;organizations&#x20;have&#x20;implemented&#x20;IPv6.','If&#x20;IPv6&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/boot/grub/grub.conf&#x20;to&#x20;include&#x20;ipv6.disable=1&#x20;on&#x20;all&#x20;kernel&#x20;lines.','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4099,'Ensure&#x20;TCP&#x20;Wrappers&#x20;is&#x20;installed','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;tcp_wrappers:&#x20;yum&#x20;install&#x20;tcp_wrappers','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(4100,'Ensure&#x20;/etc/hosts.deny&#x20;is&#x20;configured','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.deny:&#x20;echo&#x20;&#039;ALL:&#x20;ALL&#039;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(4101,'Ensure&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;are&#x20;configured.','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;networking&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/hosts.allow&#x20;and&#x20;chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(4102,'Ensure&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;are&#x20;configured.','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/hosts.deny&#x20;and&#x20;chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"3.4.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4103,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.5.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4104,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.5.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4105,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.5.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4106,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.5.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4107,'Ensure&#x20;iptables&#x20;is&#x20;installed','iptables&#x20;allows&#x20;configuration&#x20;of&#x20;the&#x20;IPv4&#x20;tables&#x20;in&#x20;the&#x20;linux&#x20;kernel&#x20;and&#x20;the&#x20;rules&#x20;stored&#x20;within&#x20;them.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;iptables&#x20;.','iptables&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;iptables&#x20;:&#x20;yum&#x20;install&#x20;iptables','[{\"cis\": [\"3.6.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.1\"]}]'),(4108,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;and&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.6.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4109,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.6.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4110,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4111,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4112,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4113,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd&#x20;:&#x20;#&#x20;chkconfig&#x20;auditd&#x20;on','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4114,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','Edit&#x20;/boot/grub/grub.conf&#x20;to&#x20;include&#x20;audit=1&#x20;on&#x20;all&#x20;kernel&#x20;lines.&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4115,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4116,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4117,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4118,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;directory.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4119,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;/var/run/failock&#x20;directory&#x20;maintains&#x20;records&#x20;of&#x20;login&#x20;failures&#x20;via&#x20;the&#x20;pam_faillock&#x20;module.','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4120,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.3\"]}]'),(4121,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;500&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4122,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;500&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4123,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4124,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete','[{\"cis\": [\"4.1.14\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(4125,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4126,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4127,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod&#x20;,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"3\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4128,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;end&#x20;of&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;&#x20;&#x20;-e&#x20;2','[{\"cis\": [\"4.1.18\"]}, {\"cis_csc\": [\"3\", \"6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4129,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lackblogging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;rsyslog&#x20;on','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4130,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}]'),(4131,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4132,'Ensure&#x20;syslog-ng&#x20;service&#x20;is&#x20;enabled','Once&#x20;the&#x20;syslog-ng&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;syslog-ng&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;syslog-ng&#x20;:&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;syslog-ng&#x20;on','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4133,'Ensure&#x20;syslog-ng&#x20;default&#x20;file&#x20;permissions&#x20;configured','syslog-ng&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;syslog-ng&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;and&#x20;set&#x20;perm&#x20;option&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;&#x20;&#x20;options&#x20;{&#x20;chain_hostnames&#40;off&#41;;&#x20;flush_lines&#40;0&#41;;&#x20;perm&#40;0640&#41;;&#x20;stats_freq&#40;3600&#41;;&#x20;threaded&#40;yes&#41;;&#x20;};','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4134,'Ensure&#x20;syslog-ng&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;syslog-ng&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;&#x20;destination&#x20;logserver&#x20;{&#x20;tcp&#40;&quot;logfile.example.com&quot;&#x20;port&#40;514&#41;&#41;;&#x20;};&#x20;&#x20;&#x20;&#x20;log&#x20;{&#x20;source&#40;src&#41;;&#x20;destination&#40;logserver&#41;;&#x20;};&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;syslog-ng','[{\"cis\": [\"4.2.2.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4135,'Ensure&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;&#x20;#&#x20;yum&#x20;install&#x20;rsyslog&#x20;&#x20;&#x20;#&#x20;yum&#x20;install&#x20;syslog-ng','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4136,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitivebdata&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;{}&#x20;+','[{\"cis\": [\"4.2.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4137,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;chkconfig&#x20;crond&#x20;on','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4138,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4139,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4140,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4141,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4142,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4143,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4144,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4145,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4146,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4147,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4148,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4149,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4150,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4151,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4152,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4153,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4154,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4155,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.13\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4156,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;and&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"5.1\", \"5.8\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4157,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4158,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_cracklib.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_cracklib.so&#x20;try_first_pass&#x20;retry=3&#x20;minlen=14&#x20;dcredit=-1&#x20;ucredit=-1&#x20;ocredit=-1&#x20;lcredit=-1','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"5.7\", \"16.12\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4159,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;remember=5&#x20;&#x20;&#x20;or&#x20;&#x20;&#x20;&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4160,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(4161,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4162,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4163,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4164,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4165,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4166,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4167,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;and&#x20;/etc/profile&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4168,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo&#x20;,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su&#x20;,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su&#x20;,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo&#x20;,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4169,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4170,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4171,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4172,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4173,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4174,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4175,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4176,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4177,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4178,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4179,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4180,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4181,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4500,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/cramfs.confand&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4501,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4502,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4503,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12,&#x20;FAT16,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','If&#x20;utilizing&#x20;UEFI&#x20;the&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;required.&#x20;If&#x20;this&#x20;case,&#x20;ensure&#x20;that&#x20;the&#x20;FAT&#x20;filesystem&#x20;is&#x20;only&#x20;used&#x20;where&#x20;appropriate.&#x20;Run&#x20;the&#x20;following&#x20;command:&#x20;grep&#x20;-E&#x20;-i&#x20;&#039;svfats&#039;&#x20;/etc/fstab&#x20;And&#x20;review&#x20;that&#x20;any&#x20;output&#x20;is&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;&#x20;If&#x20;not&#x20;utilizing&#x20;UEFI:&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/fat.conf&#x20;&#x20;&#x20;&#x20;install&#x20;fat&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;install&#x20;vfat&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;install&#x20;msdos&#x20;/bin/true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;unload&#x20;the&#x20;msdos,&#x20;vfat,&#x20;and&#x20;fatmodules:&#x20;&#x20;#&#x20;rmmod&#x20;msdos&#x20;&#x20;&#x20;#&#x20;rmmod&#x20;vfat&#x20;&#x20;#&#x20;rmmod&#x20;fat&#x20;','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4504,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Create&#x20;or&#x20;update&#x20;an&#x20;entry&#x20;for&#x20;/tmp&#x20;in&#x20;either&#x20;/etc/fstab&#x20;&#x20;OR&#x20;&#x20;&#x20;in&#x20;a&#x20;systemd&#x20;tmp.mount&#x20;file:&#x20;&#x20;If&#x20;/etc/fstab&#x20;is&#x20;used:&#x20;&#x20;Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;Example:&#x20;tmpfs&#x20;/tmp&#x20;tmpfs&#x20;&#x20;&#x20;&#x20;&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;&#x20;0&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec,nodev,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;systemd&#x20;tmp.mount&#x20;file&#x20;is&#x20;used:&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;file&#x20;/etc/systemd/system/tmp.mount&#x20;if&#x20;it&#x20;doesn&#039;t&#x20;exist:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;[&#x20;!&#x20;-f&#x20;/etc/systemd/system/tmp.mount&#x20;]&#x20;&amp;&amp;&#x20;cp&#x20;-v&#x20;/usr/lib/systemd/system/tmp.mount&#x20;/etc/systemd/system/&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/systemd/system/tmp.mount:&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;What=tmpfs&#x20;&#x20;&#x20;&#x20;Where=/tmp&#x20;&#x20;&#x20;&#x20;Type=tmpfs&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;systemd&#x20;daemon:#&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unmask&#x20;tmp.mount:&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;unmask&#x20;tmp.mpunt&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;tmp.mount:&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;--now&#x20;tmp.mount','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"9.4\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4505,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;OR&#x20;&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstabfile&#x20;and&#x20;add&#x20;noexecto&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4506,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;&#x20;&#x20;file&#x20;OR&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4507,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;&#x20;&#x20;file&#x20;OR&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nosuid,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4508,'Ensure&#x20;/dev/shm&#x20;is&#x20;configured&#x20;','/dev/shm&#x20;is&#x20;a&#x20;traditional&#x20;shared&#x20;memory&#x20;concept.&#x20;One&#x20;program&#x20;will&#x20;create&#x20;a&#x20;memory&#x20;portion,&#x20;which&#x20;other&#x20;processes&#x20;&#40;if&#x20;permitted&#41;&#x20;can&#x20;access.&#x20;Mounting&#x20;tmpfs&#x20;at&#x20;/dev/shm&#x20;is&#x20;handled&#x20;automatically&#x20;by&#x20;systemd.','Any&#x20;user&#x20;can&#x20;upload&#x20;and&#x20;execute&#x20;files&#x20;inside&#x20;the&#x20;/dev/shm&#x20;similar&#x20;to&#x20;the&#x20;/tmp&#x20;partition.&#x20;Configuring&#x20;/dev/shm&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/dev/shm&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Edit&#x20;/etc/fstab&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;the&#x20;following&#x20;line:&#x20;tmpfs&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;tmpfs&#x20;&#x20;&#x20;defaults,noexec,nodev,nosuid,seclabel&#x20;&#x20;&#x20;0&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec,nodev,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4509,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"2.6\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4510,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4511,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4512,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4513,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications&#x20;and&#x20;is&#x20;intended&#x20;for&#x20;temporary&#x20;files&#x20;that&#x20;are&#x20;preserved&#x20;across&#x20;reboots.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4514,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;un&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4515,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4516,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4517,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4518,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4519,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4520,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.18\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4521,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4522,'Disable&#x20;USB&#x20;Storage','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/usb_storage.conf&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4523,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.3\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(4524,'Disable&#x20;the&#x20;rhnsd&#x20;Daemon','The&#x20;rhnsd&#x20;daemon&#x20;polls&#x20;the&#x20;Red&#x20;Hat&#x20;Network&#x20;web&#x20;site&#x20;for&#x20;scheduled&#x20;actions&#x20;and,&#x20;if&#x20;there&#x20;are,&#x20;executes&#x20;those&#x20;actions.','Patch&#x20;management&#x20;policies&#x20;may&#x20;require&#x20;that&#x20;organizations&#x20;test&#x20;the&#x20;impact&#x20;of&#x20;a&#x20;patch&#x20;before&#x20;it&#x20;is&#x20;deployed&#x20;in&#x20;a&#x20;production&#x20;environment.&#x20;Having&#x20;patches&#x20;automatically&#x20;deployed&#x20;could&#x20;have&#x20;a&#x20;negative&#x20;impact&#x20;on&#x20;the&#x20;environment.&#x20;It&#x20;is&#x20;best&#x20;to&#x20;not&#x20;allow&#x20;an&#x20;action&#x20;by&#x20;default&#x20;but&#x20;only&#x20;after&#x20;appropriate&#x20;consideration&#x20;has&#x20;been&#x20;made.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;unless&#x20;the&#x20;risk&#x20;is&#x20;understood&#x20;and&#x20;accepted&#x20;or&#x20;you&#x20;are&#x20;running&#x20;your&#x20;own&#x20;satellite&#x20;.&#x20;This&#x20;item&#x20;is&#x20;not&#x20;scored&#x20;because&#x20;organizations&#x20;may&#x20;have&#x20;addressed&#x20;the&#x20;risk.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;rhnsd:&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;rhnsd','[{\"cis\": [\"1.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4525,'Ensure&#x20;sudo&#x20;is&#x20;installed','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;sudo.&#x20;#&#x20;yum&#x20;install&#x20;sudo','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4526,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo,&#x20;which&#x20;would&#x20;again&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.&#x20;This&#x20;can&#x20;be&#x20;mitigated&#x20;by&#x20;configuring&#x20;sudo&#x20;to&#x20;run&#x20;other&#x20;commands&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty,&#x20;whether&#x20;I/O&#x20;logging&#x20;is&#x20;turned&#x20;on&#x20;or&#x20;not.','','Edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;or&#x20;visudo&#x20;-f&#x20;&lt;PATH&#x20;TO&#x20;FILE&gt;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4527,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','Edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;or&#x20;visudo&#x20;-f&#x20;&lt;PATH&#x20;TO&#x20;FILE&gt;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;logfile=&#039;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&#039;&#x20;&#x20;&#x20;Example:Defaults&#x20;&#x20;logfile=&quot;/var/log/sudo.log&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4528,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;AIDE:&#x20;yum&#x20;install&#x20;aide&#x20;//&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4529,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','If&#x20;cron&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;aidecheck.service&#x20;and&#x20;aidecheck.timer&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check:&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;/etc/systemd/system/aidecheck.service&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;[Unit]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Description=Aide&#x20;Check&#x20;&#x20;&#x20;&#x20;[Service]&#x20;&#x20;&#x20;&#x20;&#x20;Type=simpleExecStart=/usr/sbin/aide&#x20;--check&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Install]&#x20;&#x20;&#x20;&#x20;&#x20;WantedBy=multi-user.target&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;&#x20;/etc/systemd/system/aidecheck.timer&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;[Unit]&#x20;&#x20;&#x20;Description=Aide&#x20;check&#x20;every&#x20;day&#x20;at&#x20;5AM&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Timer]&#x20;&#x20;&#x20;&#x20;&#x20;OnCalendar=*-*-*&#x20;05:00:00&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Unit=aidecheck.service&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Install]&#x20;&#x20;&#x20;&#x20;&#x20;WantedBy=multi-user.target&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;0644&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;aidecheck.service&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;aidecheck.timer&#x20;','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4530,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','For&#x20;newergrub2based&#x20;systems&#x20;&#40;centOS/RHEL&#x20;7.2&#x20;and&#x20;newer&#41;:&#x20;Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-setpassword:&#x20;#&#x20;grub2-setpassword&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;older&#x20;&#x20;grub2based&#x20;systems:&#x20;create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-mkpasswd-pbkdf2:&#x20;&#x20;&#x20;#&#x20;grub2-mkpasswd-pbkdf2&#x20;&#x20;&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;Your&#x20;PBKDF2&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;/etc/grub.d/01_users&#x20;or&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;&#x20;cat&#x20;&lt;&lt;EOFset&#x20;superusers=&quot;&lt;username&gt;&quot;password_pbkdf2&#x20;&lt;username&gt;&#x20;&lt;encrypted-password&gt;EOF&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4531,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;located&#x20;at&#x20;/boot/grub2/grub.cfg&#x20;and&#x20;linked&#x20;as&#x20;/etc/grub2.cfg&#x20;.&#x20;&#x20;On&#x20;newer&#x20;grub2&#x20;systems&#x20;the&#x20;encrypted&#x20;bootloader&#x20;password&#x20;is&#x20;contained&#x20;in&#x20;/boot/grub2/user.cfg','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grub.cfg&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grub.cfg&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/user.cfg&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/user.cfg','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4532,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/usr/lib/systemd/system/rescue.service&#x20;and&#x20;/usr/lib/systemd/system/emergency.service&#x20;and&#x20;set&#x20;ExecStart&#x20;to&#x20;use&#x20;/sbin/sulogin&#x20;or&#x20;/usr/sbin/sulogin:&#x20;ExecStart=-/bin/sh&#x20;-c&#x20;&quot;/sbin/sulogin;&#x20;/usr/bin/systemctl&#x20;--fail&#x20;--no-block&#x20;default&quot;&#x20;','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4533,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4534,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4535,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4536,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal:&#x20;#&#x20;prelink&#x20;-ua&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;prelink:&#x20;#&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.6.4\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4537,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;libselinux:&#x20;#&#x20;yum&#x20;install&#x20;libselinux','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4538,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4539,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4540,'Ensure&#x20;the&#x20;SELinux&#x20;mode&#x20;is&#x20;enforcing&#x20;or&#x20;permissive','SELinux&#x20;can&#x20;run&#x20;in&#x20;one&#x20;of&#x20;three&#x20;modes:&#x20;disabled,&#x20;permissive,&#x20;or&#x20;enforcing:&#x20;&#x20;Enforcing&#x20;-&#x20;Is&#x20;the&#x20;default,&#x20;and&#x20;recommended,&#x20;mode&#x20;of&#x20;operation;&#x20;in&#x20;enforcing&#x20;mode&#x20;SELinux&#x20;operates&#x20;normally,&#x20;enforcing&#x20;the&#x20;loaded&#x20;security&#x20;policy&#x20;on&#x20;the&#x20;entire&#x20;system.&#x20;&#x20;Permissive&#x20;-&#x20;The&#x20;system&#x20;acts&#x20;as&#x20;if&#x20;SELinux&#x20;is&#x20;enforcing&#x20;the&#x20;loaded&#x20;security&#x20;policy,&#x20;including&#x20;labeling&#x20;objects&#x20;and&#x20;emitting&#x20;access&#x20;denial&#x20;entries&#x20;in&#x20;the&#x20;logs,&#x20;but&#x20;it&#x20;does&#x20;not&#x20;actually&#x20;deny&#x20;any&#x20;operations.&#x20;While&#x20;not&#x20;recommended&#x20;for&#x20;production&#x20;systems,&#x20;permissive&#x20;mode&#x20;can&#x20;be&#x20;helpful&#x20;for&#x20;SELinux&#x20;policy&#x20;development.&#x20;&#x20;&#x20;Disabled&#x20;-Is&#x20;strongly&#x20;discouraged;&#x20;not&#x20;only&#x20;does&#x20;the&#x20;system&#x20;avoid&#x20;enforcing&#x20;the&#x20;SELinux&#x20;policy,&#x20;it&#x20;also&#x20;avoids&#x20;labeling&#x20;any&#x20;persistent&#x20;objects&#x20;such&#x20;as&#x20;files,&#x20;making&#x20;it&#x20;difficult&#x20;to&#x20;enable&#x20;SELinux&#x20;in&#x20;the&#x20;future','Running&#x20;SELinux&#x20;in&#x20;disabled&#x20;modeis&#x20;strongly&#x20;discouraged;&#x20;not&#x20;only&#x20;does&#x20;the&#x20;system&#x20;avoid&#x20;enforcing&#x20;the&#x20;SELinux&#x20;policy,&#x20;it&#x20;also&#x20;avoids&#x20;labeling&#x20;any&#x20;persistent&#x20;objects&#x20;such&#x20;as&#x20;files,&#x20;making&#x20;it&#x20;difficult&#x20;to&#x20;enable&#x20;SELinux&#x20;in&#x20;the&#x20;future.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;SELinux&#039;s&#x20;running&#x20;mode:&#x20;To&#x20;set&#x20;SELinux&#x20;mode&#x20;to&#x20;Enforcing:&#x20;#&#x20;setenforce&#x20;1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;set&#x20;SELinux&#x20;mode&#x20;to&#x20;Permissive:&#x20;#&#x20;setenforce&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/selinux/config&#x20;&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;For&#x20;Enforcing&#x20;mode:&#x20;SELINUX=enforcing&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;Permissive&#x20;mode:&#x20;&#x20;SELINUX=permissive','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4541,'Ensure&#x20;no&#x20;unconfined&#x20;services&#x20;exist','Unconfined&#x20;processes&#x20;run&#x20;in&#x20;unconfined&#x20;domains','For&#x20;unconfined&#x20;processes,&#x20;SELinux&#x20;policy&#x20;rules&#x20;are&#x20;applied,&#x20;but&#x20;policy&#x20;rules&#x20;exist&#x20;that&#x20;allow&#x20;processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;almost&#x20;all&#x20;access.&#x20;Processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;fall&#x20;back&#x20;to&#x20;using&#x20;DAC&#x20;rules&#x20;exclusively.&#x20;If&#x20;an&#x20;unconfined&#x20;process&#x20;is&#x20;compromised,&#x20;SELinux&#x20;does&#x20;not&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;system&#x20;resources&#x20;and&#x20;data,&#x20;but&#x20;of&#x20;course,&#x20;DAC&#x20;rules&#x20;are&#x20;still&#x20;used.&#x20;SELinux&#x20;is&#x20;a&#x20;security&#x20;enhancement&#x20;on&#x20;top&#x20;of&#x20;DAC&#x20;rules&#x20;&ndash;&#x20;it&#x20;does&#x20;not&#x20;replace&#x20;them','','Investigate&#x20;any&#x20;unconfined&#x20;processes&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4542,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;yum&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.7.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4543,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;yum&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.7.1.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4544,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;v&#x20;&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4545,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version&#x20;-or&#x20;the&#x20;operating&#x20;system&#039;s&#x20;name.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4546,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4547,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4548,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4549,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4550,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;command&#x20;will&#x20;install&#x20;all&#x20;available&#x20;packages&#x20;#&#x20;yum&#x20;update&#x20;--security&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Note:&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;the&#x20;following&#x20;command&#x20;and&#x20;comparing&#x20;the&#x20;output&#x20;against&#x20;site&#x20;policy:&#x20;&#x20;#&#x20;yum&#x20;check-update','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\", \"3.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(4551,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','If&#x20;a&#x20;graphical&#x20;login&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;a&#x20;graphical&#x20;login&#x20;is&#x20;required,&#x20;last&#x20;logged&#x20;in&#x20;user&#x20;display&#x20;should&#x20;be&#x20;disabled,&#x20;and&#x20;a&#x20;warning&#x20;banner&#x20;should&#x20;be&#x20;configured.&#x20;Displaying&#x20;the&#x20;last&#x20;logged&#x20;in&#x20;user&#x20;eliminates&#x20;half&#x20;of&#x20;the&#x20;Userid/Password&#x20;equation&#x20;that&#x20;an&#x20;unauthorized&#x20;person&#x20;would&#x20;need&#x20;to&#x20;log&#x20;on.&#x20;Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;gdm:&#x20;#&#x20;yum&#x20;remove&#x20;gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;GDM&#x20;is&#x20;required:&#x20;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/profile/gdm&#x20;and&#x20;add&#x20;the&#x20;following:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;user-db:user&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;system-db:gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;file-db:/usr/share/gdm/greeter-dconf-defaults&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/db/gdm.d/&#x20;&#x20;and&#x20;add&#x20;the&#x20;following:&#x20;&#40;This&#x20;is&#x20;typically&#x20;/etc/dconf/db/gdm.d/01-banner-message&#41;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;&lt;banner&#x20;message&gt;&#039;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Example&#x20;Banner&#x20;Text:&#x20;&#x20;&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#x20;&#039;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/db/gdm.d/and&#x20;add&#x20;the&#x20;following:&#x20;&#40;This&#x20;is&#x20;typically&#x20;/etc/dconf/db/gdm.d/00-login-screen&#41;&#x20;&#x20;&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;Do&#x20;not&#x20;show&#x20;the&#x20;user&#x20;list&#x20;&#x20;&#x20;&#x20;&#x20;disable-user-list=true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;system&#x20;databases:&#x20;&#x20;#&#x20;dconf&#x20;update','[{\"cis\": [\"1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4552,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;area&#x20;of&#x20;the&#x20;system.&#x20;Note:&#x20;If&#x20;an&#x20;xinetd&#x20;service&#x20;or&#x20;services&#x20;are&#x20;required,&#x20;ensure&#x20;that&#x20;any&#x20;xinetd&#x20;service&#x20;not&#x20;required&#x20;is&#x20;stopped&#x20;and&#x20;disabled','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;yum&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4553,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available,&#x20;install&#x20;chrony&#x20;or&#x20;NTP:&#x20;to&#x20;install&#x20;chrony&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;yum&#x20;install&#x20;chrony&#x20;OR&#x20;to&#x20;install&#x20;ntp:&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;yum&#x20;install&#x20;ntp','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4554,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;and&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;Note:&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/chronyd&#x20;to&#x20;include&#x20;&#039;-u&#x20;chrony&#039;:OPTIONS=&quot;-u&#x20;chrony&quot;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4555,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;and&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/ntpd&#x20;to&#x20;include&#x20;&#039;&#x20;-u&#x20;ntp:ntp&#x20;&#039;:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4556,'&#x20;Ensure&#x20;X11&#x20;Server&#x20;components&#x20;are&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;yum&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4557,'&#x20;Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;installed','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;remove&#x20;this&#x20;package&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;stop,&#x20;mask&#x20;and&#x20;remove&#x20;avahi-autoipd&#x20;and&#x20;avahi:&#x20;#&#x20;systemctl&#x20;stop&#x20;avahi-daemon.socket&#x20;avahi-daemon.service;&#x20;#&#x20;yum&#x20;remove&#x20;avahi-autoipd&#x20;avahi','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4558,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;installed','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.&#x20;Disabling&#x20;CUPS&#x20;will&#x20;prevent&#x20;printing&#x20;from&#x20;the&#x20;system,&#x20;a&#x20;common&#x20;task&#x20;for&#x20;workstation&#x20;systems.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cups:&#x20;#&#x20;yum&#x20;remove&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4559,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;installed','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;the&#x20;dhcp&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;dhcpd:&#x20;#&#x20;yum&#x20;remove&#x20;dhcp','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4560,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;slapd:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-servers','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4561,'Ensure&#x20;nfs-utils&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;nfs-server&#x20;service&#x20;is&#x20;masked','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;require&#x20;network&#x20;shares,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;nfs-utils&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nfs-utils:&#x20;#&#x20;yum&#x20;remove&#x20;nfs-utils;&#x20;OR&#x20;if&#x20;the&#x20;nfs-package&#x20;is&#x20;required&#x20;as&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;nfs-server&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nfs-server','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4562,'Ensure&#x20;nfs-utils&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;nfs-server&#x20;service&#x20;is&#x20;masked','The&#x20;rpcbind&#x20;utility&#x20;maps&#x20;RPC&#x20;services&#x20;to&#x20;the&#x20;ports&#x20;on&#x20;which&#x20;they&#x20;listen.&#x20;RPC&#x20;processes&#x20;notify&#x20;rpcbind&#x20;when&#x20;they&#x20;start,&#x20;registering&#x20;the&#x20;ports&#x20;they&#x20;are&#x20;listening&#x20;on&#x20;and&#x20;the&#x20;RPC&#x20;program&#x20;numbers&#x20;they&#x20;expect&#x20;to&#x20;serve.&#x20;The&#x20;client&#x20;system&#x20;then&#x20;contacts&#x20;rpcbind&#x20;on&#x20;the&#x20;server&#x20;with&#x20;a&#x20;particular&#x20;RPC&#x20;program&#x20;number.&#x20;The&#x20;rpcbind&#x20;service&#x20;redirects&#x20;the&#x20;client&#x20;to&#x20;the&#x20;proper&#x20;port&#x20;number&#x20;so&#x20;it&#x20;can&#x20;communicate&#x20;with&#x20;the&#x20;requested&#x20;service&#x20;Portmapper&#x20;is&#x20;an&#x20;RPC&#x20;service,&#x20;which&#x20;always&#x20;listens&#x20;on&#x20;tcp&#x20;and&#x20;udp&#x20;111,&#x20;and&#x20;is&#x20;used&#x20;to&#x20;map&#x20;other&#x20;RPC&#x20;services&#x20;&#40;such&#x20;as&#x20;nfs,&#x20;nlockmgr,&#x20;quotad,&#x20;mountd,&#x20;etc.&#41;&#x20;to&#x20;their&#x20;corresponding&#x20;port&#x20;number&#x20;on&#x20;the&#x20;server.&#x20;When&#x20;a&#x20;remote&#x20;host&#x20;makes&#x20;an&#x20;RPC&#x20;call&#x20;to&#x20;that&#x20;server,&#x20;it&#x20;first&#x20;consults&#x20;with&#x20;portmap&#x20;to&#x20;determine&#x20;where&#x20;the&#x20;RPC&#x20;server&#x20;is&#x20;listening','A&#x20;small&#x20;request&#x20;&#40;~82&#x20;bytes&#x20;via&#x20;UDP&#41;&#x20;sent&#x20;to&#x20;the&#x20;Portmapper&#x20;generates&#x20;a&#x20;large&#x20;response&#x20;&#40;7x&#x20;to&#x20;28x&#x20;amplification&#41;,&#x20;which&#x20;makes&#x20;it&#x20;a&#x20;suitable&#x20;tool&#x20;for&#x20;DDoS&#x20;attacks.&#x20;If&#x20;rpcbind&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;rpcbind&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nfs-utils:&#x20;#&#x20;yum&#x20;remove&#x20;nfs-utils;&#x20;OR&#x20;if&#x20;the&#x20;nfs-package&#x20;is&#x20;required&#x20;as&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;nfs-server&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nfs-server','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4563,'&#x20;Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;installed&#x20;','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;yum&#x20;remove&#x20;bind','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4564,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;installed','FTP&#x20;&#40;File&#x20;Transfer&#x20;Protocol&#41;&#x20;is&#x20;a&#x20;traditional&#x20;and&#x20;widely&#x20;used&#x20;standard&#x20;tool&#x20;for&#x20;transferring&#x20;files&#x20;between&#x20;a&#x20;server&#x20;and&#x20;clients&#x20;over&#x20;a&#x20;network,&#x20;especially&#x20;where&#x20;no&#x20;authentication&#x20;is&#x20;necessary&#x20;&#40;permits&#x20;anonymous&#x20;users&#x20;to&#x20;connect&#x20;to&#x20;a&#x20;server&#41;','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;yum&#x20;remove&#x20;vsftpd','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4565,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;installed','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;yum&#x20;remove&#x20;httpd','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4566,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;installed','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;yum&#x20;remove&#x20;dovecot','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4567,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;installed','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;package&#x20;can&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;yum&#x20;remove&#x20;samba','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4568,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;installed','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;yum&#x20;remove&#x20;squid','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4569,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;installed','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMPv1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;SNMPv3replaces&#x20;the&#x20;simple/clear&#x20;text&#x20;password&#x20;sharing&#x20;used&#x20;in&#x20;SNMPv2with&#x20;more&#x20;securely&#x20;encoded&#x20;parameters.&#x20;If&#x20;the&#x20;SNMP&#x20;service&#x20;is&#x20;not&#x20;required,&#x20;the&#x20;net-snmp&#x20;package&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;#&#x20;yum&#x20;remove&#x20;net-snmp','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4570,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(4571,'Ensure&#x20;rsync&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;rsyncd&#x20;service&#x20;is&#x20;masked','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','Unless&#x20;required,&#x20;the&#x20;rsync&#x20;package&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;area&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;rsync&#x20;package:&#x20;#&#x20;yum&#x20;remove&#x20;rsync;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;mask&#x20;the&#x20;rsyncd&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;rsyncd','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(4572,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;installed','The&#x20;ypserv&#x20;package&#x20;provides&#x20;the&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;.&#x20;This&#x20;service,&#x20;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;ypservpackage&#x20;be&#x20;removed,&#x20;and&#x20;if&#x20;required&#x20;a&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;yum&#x20;remove&#x20;ypserv','[{\"cis\": [\"2.2.18\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4573,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;installed','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;yum&#x20;remove&#x20;telnet-server','[{\"cis\": [\"2.2.19\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4574,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;yum&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4575,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh:&#x20;#&#x20;yum&#x20;remove&#x20;rsh','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4576,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk:&#x20;#&#x20;yum&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4577,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet:&#x20;#&#x20;yum&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4578,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4579,'Ensure&#x20;nonessential&#x20;services&#x20;are&#x20;removed&#x20;or&#x20;masked','A&#x20;network&#x20;port&#x20;is&#x20;identified&#x20;by&#x20;its&#x20;number,&#x20;the&#x20;associated&#x20;IP&#x20;address,&#x20;and&#x20;the&#x20;type&#x20;of&#x20;the&#x20;communication&#x20;protocol&#x20;such&#x20;as&#x20;TCP&#x20;or&#x20;UDP.A&#x20;listening&#x20;port&#x20;is&#x20;a&#x20;network&#x20;port&#x20;on&#x20;which&#x20;an&#x20;application&#x20;or&#x20;process&#x20;listens&#x20;on,&#x20;acting&#x20;as&#x20;a&#x20;communication&#x20;endpoint.&#x20;Each&#x20;listening&#x20;port&#x20;can&#x20;be&#x20;open&#x20;or&#x20;closed&#x20;&#40;filtered&#41;&#x20;using&#x20;a&#x20;firewall.&#x20;In&#x20;general&#x20;terms,&#x20;an&#x20;open&#x20;port&#x20;is&#x20;a&#x20;network&#x20;port&#x20;that&#x20;accepts&#x20;incoming&#x20;packets&#x20;from&#x20;remote&#x20;locations','Services&#x20;listening&#x20;on&#x20;the&#x20;system&#x20;pose&#x20;a&#x20;potential&#x20;risk&#x20;as&#x20;an&#x20;attack&#x20;vector.&#x20;These&#x20;services&#x20;should&#x20;be&#x20;reviewed,&#x20;and&#x20;if&#x20;not&#x20;required,&#x20;the&#x20;service&#x20;should&#x20;be&#x20;stopped,&#x20;and&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service&#x20;should&#x20;be&#x20;removed.&#x20;If&#x20;required&#x20;packages&#x20;have&#x20;a&#x20;dependency,&#x20;the&#x20;service&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Review&#x20;the&#x20;output&#x20;of:&#x20;#&#x20;lsof&#x20;-i&#x20;-P&#x20;-n&#x20;|&#x20;grep&#x20;-v&#x20;&#039;&#40;ESTABLISHED&#41;&#039;;&#x20;to&#x20;ensure&#x20;that&#x20;all&#x20;services&#x20;listed&#x20;are&#x20;required&#x20;on&#x20;the&#x20;system.&#x20;If&#x20;a&#x20;listed&#x20;service&#x20;is&#x20;not&#x20;required,&#x20;remove&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service.&#x20;If&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service&#x20;is&#x20;required,&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;service.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service:#&#x20;yum&#x20;remove&#x20;&lt;package_name&gt;&#x20;OR&#x20;if&#x20;required&#x20;packages&#x20;have&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;service:#&#x20;systemctl&#x20;--now&#x20;mask&#x20;&lt;service_name&gt;','[{\"cis\": [\"2.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4580,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','To&#x20;disable&#x20;IPv6&#x20;through&#x20;the&#x20;GRUB2&#x20;config:&#x20;edit&#x20;/etc/default/gruband&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:#&#x20;grub2-mkconfig&#x20;&ndash;o&#x20;/boot/grub2/grub.cfg;&#x20;OR&#x20;to&#x20;disable&#x20;IPv6&#x20;through&#x20;sysctl&#x20;settings:&#x20;set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;#&#x20;net.ipv6.conf.all.disable_ipv6&#x20;=&#x20;1;&#x20;#&#x20;net.ipv6.conf.default.disable_ipv6&#x20;=&#x20;1;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.disable_ipv6=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.disable_ipv6=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4581,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;should&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;ip&#x20;link&#x20;set&#x20;&lt;interface&gt;&#x20;down','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4582,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&#039;^s*net.ipv4.ip_forwards*=s*1&#039;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&#039;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4583,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4584,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4585,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4586,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4587,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4588,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4589,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4590,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4591,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4592,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;and&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4593,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4594,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4595,'Ensure&#x20;FirewallD&#x20;or&#x20;nftables&#x20;or&#x20;iptables-services&#x20;is&#x20;installed','firewalld&#x20;is&#x20;a&#x20;firewall&#x20;management&#x20;tool&#x20;for&#x20;Linux&#x20;operating&#x20;systems.&#x20;It&#x20;provides&#x20;firewall&#x20;features&#x20;by&#x20;acting&#x20;as&#x20;a&#x20;front-end&#x20;for&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;net&#x20;filter&#x20;framework&#x20;via&#x20;the&#x20;iptables&#x20;backend&#x20;or&#x20;provides&#x20;firewall&#x20;features&#x20;by&#x20;acting&#x20;as&#x20;a&#x20;front-end&#x20;for&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;via&#x20;the&#x20;nftables&#x20;utility.&#x20;FirewallD&#x20;replaces&#x20;iptables&#x20;as&#x20;the&#x20;default&#x20;firewall&#x20;management&#x20;tool.&#x20;Use&#x20;the&#x20;firewalld&#x20;utility&#x20;to&#x20;configure&#x20;a&#x20;firewall&#x20;for&#x20;less&#x20;complex&#x20;firewalls.&#x20;The&#x20;utility&#x20;is&#x20;easy&#x20;to&#x20;use&#x20;and&#x20;covers&#x20;the&#x20;typical&#x20;use&#x20;cases&#x20;scenario.&#x20;FirewallD&#x20;supports&#x20;both&#x20;IPv4&#x20;and&#x20;IPv6&#x20;networks&#x20;and&#x20;can&#x20;administer&#x20;separate&#x20;firewall&#x20;zones&#x20;with&#x20;varying&#x20;degrees&#x20;of&#x20;trust&#x20;as&#x20;defined&#x20;in&#x20;zone&#x20;profiles.','A&#x20;firewall&#x20;utility&#x20;is&#x20;required&#x20;to&#x20;configure&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;via&#x20;the&#x20;iptables&#x20;or&#x20;nftables&#x20;back-end.&#x20;The&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;host-based&#x20;firewall&#x20;can&#x20;protect&#x20;against&#x20;threats&#x20;originating&#x20;from&#x20;within&#x20;a&#x20;corporate&#x20;network&#x20;to&#x20;include&#x20;malicious&#x20;mobile&#x20;code&#x20;and&#x20;poorly&#x20;configured&#x20;software&#x20;on&#x20;a&#x20;host.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;firewalld:&#x20;#&#x20;yum&#x20;install&#x20;firewalld&#x20;iptables;&#x20;OR&#x20;to&#x20;&#x20;install&#x20;nftables:&#x20;#&#x20;yum&#x20;install&#x20;nftables;&#x20;OR&#x20;to&#x20;install&#x20;&#x20;iptables-services:&#x20;#&#x20;yum&#x20;install&#x20;iptables-services&#x20;iptables','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4596,'Ensure&#x20;iptables-services&#x20;and&#x20;FirewallD&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time','The&#x20;iptables-services&#x20;package&#x20;contains&#x20;the&#x20;iptables.service&#x20;and&#x20;ip6tables.service.&#x20;These&#x20;services&#x20;allow&#x20;for&#x20;management&#x20;of&#x20;the&#x20;Host&#x20;Based&#x20;Firewall&#x20;provided&#x20;by&#x20;the&#x20;iptables&#x20;package.','iptables.service&#x20;and&#x20;ip6tables.service&#x20;are&#x20;still&#x20;supported&#x20;and&#x20;can&#x20;be&#x20;installed&#x20;with&#x20;the&#x20;iptables-services&#x20;package.&#x20;Running&#x20;both&#x20;firewalld&#x20;and&#x20;the&#x20;services&#x20;included&#x20;in&#x20;the&#x20;iptables-services&#x20;package&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;stop&#x20;the&#x20;services&#x20;included&#x20;in&#x20;the&#x20;iptables-services&#x20;package&#x20;and&#x20;remove&#x20;the&#x20;iptables-services&#x20;package:&#x20;#&#x20;systemctl&#x20;stop&#x20;iptables;&#x20;#&#x20;systemctl&#x20;stop&#x20;ip6tables;&#x20;#&#x20;yum&#x20;remove&#x20;iptables-services.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;firewalld:&#x20;#&#x20;yum&#x20;remove&#x20;firewalld&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;firewalld','[{\"cis\": [\"3.5.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4597,'Ensure&#x20;nftables&#x20;and&#x20;FirewallD&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time&#x20;or&#x20;ensure&#x20;one&#x20;of&#x20;them&#x20;is&#x20;stopped&#x20;and&#x20;masked','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.Note:&#x20;Support&#x20;for&#x20;using&#x20;nftables&#x20;as&#x20;the&#x20;back-end&#x20;for&#x20;firewalld&#x20;was&#x20;added&#x20;in&#x20;release&#x20;v0.6.0.&#x20;In&#x20;Fedora&#x20;19&#x20;Linux&#x20;derivatives,&#x20;firewalld&#x20;utilizes&#x20;iptables&#x20;as&#x20;its&#x20;back-end&#x20;by&#x20;default.','Running&#x20;both&#x20;firewalld&#x20;and&#x20;nftables&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nftables:#&#x20;yum&#x20;remove&#x20;nftables;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;nftables:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;firewalld:&#x20;#&#x20;yum&#x20;remove&#x20;firewalld&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;firewalld','[{\"cis\": [\"3.5.1.3\", \"3.5.3.1.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4598,'Ensure&#x20;nftables&#x20;and&#x20;iptables-services&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time&#x20;or&#x20;ensure&#x20;one&#x20;of&#x20;them&#x20;is&#x20;stopped&#x20;and&#x20;masked','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.Note:&#x20;Support&#x20;for&#x20;using&#x20;nftables&#x20;as&#x20;the&#x20;back-end&#x20;for&#x20;firewalld&#x20;was&#x20;added&#x20;in&#x20;release&#x20;v0.6.0.&#x20;In&#x20;Fedora&#x20;19&#x20;Linux&#x20;derivatives,&#x20;firewalld&#x20;utilizes&#x20;iptables&#x20;as&#x20;its&#x20;back-end&#x20;by&#x20;default.','Running&#x20;both&#x20;nftables&#x20;and&#x20;nftables&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nftables:#&#x20;yum&#x20;remove&#x20;nftables;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;nftables:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;iptables#&#x20;#&#x20;systemctl&#x20;stop&#x20;iptables;&#x20;#&#x20;systemctl&#x20;stop&#x20;ip6tables;&#x20;#&#x20;yum&#x20;remove&#x20;iptables-services','[{\"cis\": [\"3.5.1.3\", \"3.5.3.1.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4599,'Ensure&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running','firewalld.serviceenables&#x20;the&#x20;enforcement&#x20;of&#x20;firewall&#x20;rules&#x20;configured&#x20;through&#x20;firewalld','Ensure&#x20;that&#x20;the&#x20;firewalld.service&#x20;is&#x20;enabled&#x20;and&#x20;running&#x20;to&#x20;enforce&#x20;firewall&#x20;rules&#x20;configured&#x20;through&#x20;firewalld','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unmask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;unmask&#x20;firewalld;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;firewalld','[{\"cis\": [\"3.5.1.4\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4600,'Ensure&#x20;a&#x20;table&#x20;exists','nTables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;','[{\"cis\": [\"3.5.2.5\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4601,'Ensure&#x20;base&#x20;chains&#x20;exist','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;createchain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;','[{\"cis\": [\"3.5.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4602,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;iif&#x20;lo&#x20;accept;&#x20;&#x20;&#x20;#&#x20;nft&#x20;create&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;saddr&#x20;127.0.0.0/8&#x20;counter&#x20;drop;&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;implement&#x20;the&#x20;IPv6&#x20;loopback&#x20;rules:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip6&#x20;saddr::1&#x20;counter&#x20;drop','[{\"cis\": [\"3.5.2.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4603,'Ensure&#x20;outbound&#x20;and&#x20;established&#x20;connections&#x20;are&#x20;configured','Configure&#x20;the&#x20;firewall&#x20;rules&#x20;for&#x20;new&#x20;outbound&#x20;and&#x20;established&#x20;connections.','If&#x20;rules&#x20;are&#x20;not&#x20;in&#x20;place&#x20;for&#x20;new&#x20;outbound&#x20;and&#x20;established&#x20;connections,&#x20;all&#x20;packets&#x20;will&#x20;be&#x20;dropped&#x20;by&#x20;the&#x20;default&#x20;policy&#x20;preventing&#x20;network&#x20;usage.','','Configure&#x20;nftables&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;commands&#x20;will&#x20;implement&#x20;a&#x20;policy&#x20;to&#x20;allow&#x20;all&#x20;outbound&#x20;connections&#x20;and&#x20;all&#x20;established&#x20;connections:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;tcp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;udp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;icmp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;tcp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;udp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept;&#x20;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;icmp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept','[{\"cis\": [\"3.5.2.8\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4604,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;traversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.5.2.9\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4605,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;on&#x20;the&#x20;nftables&#x20;service','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conffile&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.2.10\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4606,'Ensure&#x20;nftables&#x20;rules&#x20;are&#x20;permanent','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames.&#x20;The&#x20;nftables&#x20;service&#x20;reads&#x20;the&#x20;/etc/sysconfig/nftables.conffile&#x20;for&#x20;a&#x20;nftables&#x20;file&#x20;or&#x20;files&#x20;to&#x20;include&#x20;in&#x20;the&#x20;nftables&#x20;ruleset.&#x20;A&#x20;nftables&#x20;ruleset&#x20;containing&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;base&#x20;chains&#x20;allow&#x20;network&#x20;traffic&#x20;to&#x20;be&#x20;filtered.','Changes&#x20;made&#x20;to&#x20;nftables&#x20;ruleset&#x20;only&#x20;affect&#x20;the&#x20;live&#x20;system,&#x20;you&#x20;will&#x20;also&#x20;need&#x20;to&#x20;configure&#x20;the&#x20;nftables&#x20;ruleset&#x20;to&#x20;apply&#x20;on&#x20;boot','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.2.11\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4607,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4608,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.3.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4609,'Ensure&#x20;iptables&#x20;is&#x20;enabled&#x20;and&#x20;running','iptables.service&#x20;is&#x20;a&#x20;utility&#x20;for&#x20;configuring&#x20;and&#x20;maintaining&#x20;iptables.','iptables.service&#x20;willload&#x20;the&#x20;iptables&#x20;rules&#x20;saved&#x20;in&#x20;the&#x20;file&#x20;/etc/sysconfig/iptablesat&#x20;boot,&#x20;otherwise&#x20;the&#x20;iptables&#x20;rules&#x20;will&#x20;be&#x20;cleared&#x20;during&#x20;a&#x20;re-boot&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-PFORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4610,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-PFORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4611,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;tothe&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.3.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4612,'Ensure&#x20;IPv6&#x20;outbound&#x20;and&#x20;established&#x20;connections&#x20;are&#x20;configured','Configure&#x20;the&#x20;firewall&#x20;rules&#x20;for&#x20;new&#x20;outbound,&#x20;and&#x20;established&#x20;IPv6&#x20;connections.','If&#x20;rules&#x20;are&#x20;not&#x20;in&#x20;place&#x20;for&#x20;new&#x20;outbound,&#x20;and&#x20;established&#x20;connections&#x20;all&#x20;packets&#x20;will&#x20;be&#x20;dropped&#x20;by&#x20;the&#x20;default&#x20;policy&#x20;preventing&#x20;network&#x20;usage','','Configure&#x20;iptables&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;commands&#x20;will&#x20;implement&#x20;a&#x20;policy&#x20;to&#x20;allow&#x20;all&#x20;outbound&#x20;connections&#x20;and&#x20;all&#x20;established&#x20;connections:#&#x20;ip6tables&#x20;-AOUTPUT&#x20;-p&#x20;tcp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-p&#x20;udp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-p&#x20;icmp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;tcp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;udp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;icmp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT','[{\"cis\": [\"3.5.3.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4613,'Ensure&#x20;ip6tables&#x20;is&#x20;enabled&#x20;and&#x20;running','ip6tables.service&#x20;is&#x20;a&#x20;utility&#x20;for&#x20;configuring&#x20;and&#x20;maintaining&#x20;ip6tables.','ip6tables.service&#x20;will&#x20;load&#x20;the&#x20;iptables&#x20;rules&#x20;saved&#x20;in&#x20;the&#x20;file&#x20;/etc/sysconfig/ip6tables&#x20;at&#x20;boot,&#x20;otherwise&#x20;the&#x20;ip6tables&#x20;rules&#x20;will&#x20;be&#x20;cleared&#x20;during&#x20;a&#x20;re-boot&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;ip6tables:&#x20;#&#x20;systemctl&#x20;--now&#x20;start&#x20;ip6tables','[{\"cis\": [\"3.5.3.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4614,'Ensure&#x20;auditd&#x20;is&#x20;installed','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;Install&#x20;auditd&#x20;&#x20;#&#x20;yum&#x20;install&#x20;audit&#x20;audit-libs','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4615,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4616,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.&#x20;Note:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub2&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4617,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4618,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.2\", \"6.4\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4619,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.4\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4620,'Ensure&#x20;audit_backlog_limit&#x20;is&#x20;sufficient','The&#x20;backlog&#x20;limit&#x20;has&#x20;a&#x20;default&#x20;setting&#x20;of&#x20;64','During&#x20;boot&#x20;if&#x20;audit=1,&#x20;then&#x20;the&#x20;backlog&#x20;will&#x20;hold&#x20;64&#x20;records.&#x20;If&#x20;more&#x20;than&#x20;64&#x20;records&#x20;are&#x20;created&#x20;during&#x20;boot,&#x20;auditd&#x20;records&#x20;will&#x20;be&#x20;lost&#x20;and&#x20;potential&#x20;malicious&#x20;activity&#x20;could&#x20;go&#x20;undetected','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit_backlog_limit=&lt;BACKLOG&#x20;SIZE&gt;&#x20;&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;&#x20;&#x20;Example:&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;audit_backlog_limit=8192&quot;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4621,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/time-change.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/time-change.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4622,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/identity.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4623,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.5\", \"6.2\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4624,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;&#x20;the&#x20;/etc/selinux/&#x20;and&#x20;/usr/share/selinux/&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;the&#x20;/etc/selinux/&#x20;and&#x20;/usr/share/selinux/&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/MAC-policy.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4625,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;/var/run/faillock/&#x20;directory&#x20;maintains&#x20;records&#x20;of&#x20;login&#x20;failures&#x20;via&#x20;the&#x20;pam_faillock&#x20;module.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/logins.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillog/&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;IF&#x20;&#x20;&#x20;the&#x20;pam_faillock.so&#x20;module&#x20;is&#x20;used:&#x20;Also&#x20;include&#x20;the&#x20;line:&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;OR&#x20;IF&#x20;the&#x20;pam_tally2.so&#x20;module&#x20;is&#x20;used:&#x20;Also&#x20;include&#x20;the&#x20;line:&#x20;&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4626,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/logins.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;&#x20;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;&#x20;last&#x20;-f&#x20;/var/run/utmp&#x20;&#41;&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}]'),(4627,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown,&#x20;fchown,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr,&#x20;lsetxattr,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr,&#x20;lremovexattr,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/perm_mod.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/perm_mod.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4628,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4629,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/mount.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/mounts.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4630,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;ollowing&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;:&#x20;unlink&#x20;-remove&#x20;a&#x20;file&#x20;&#x20;&#x20;&#x20;&#x20;unlinkat&#x20;-&#x20;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#x20;and&#x20;renameat&#x20;-&#x20;rename&#x20;a&#x20;file&#x20;attribute.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/delete.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/delete.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"6.2\", \"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(4631,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrators.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/sudoers.d&#x20;directory&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file,&#x20;or&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/sudoers.d/&#x20;directory&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/scope.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines::&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4632,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;The&#x20;sudo&#x20;log&#x20;file&#x20;is&#x20;configured&#x20;in&#x20;/etc/sudoersor&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;sudo&#x20;log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/action.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions&#x20;.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.9\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4633,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/modules.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/directory&#x20;ending&#x20;in&#x20;.rules&#x20;&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/modules.rules&#x20;Add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4634,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rulesand&#x20;add&#x20;the&#x20;following&#x20;line&#x20;at&#x20;the&#x20;end&#x20;of&#x20;the&#x20;file:&#x20;&#x20;-e&#x20;2','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4635,'Ensure&#x20;rsyslog&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;software&#x20;is&#x20;a&#x20;recommended&#x20;replacement&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon.&#x20;rsyslog&#x20;provides&#x20;improvements&#x20;over&#x20;syslogd,&#x20;including:&#x20;&#x20;&#x20;-&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs&#x20;&#x20;&#x20;&#x20;&#x20;-&#x20;The&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats&#x20;&#x20;&#x20;&#x20;-&#x20;Encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;rsyslog:&#x20;#&#x20;yum&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4636,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled&#x20;and&#x20;running','rsyslogneeds&#x20;to&#x20;be&#x20;enabled&#x20;and&#x20;running&#x20;to&#x20;perform&#x20;logging','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lackblogging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4637,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4638,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;&#x20;systemctl&#x20;restart&#x20;rsyslog','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4639,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog&#x20;','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4640,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4641,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Storage=persistent','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4642,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.&#x20;&#x20;Other/world&#x20;should&#x20;not&#x20;have&#x20;the&#x20;ability&#x20;to&#x20;view&#x20;this&#x20;information.&#x20;Group&#x20;should&#x20;not&#x20;have&#x20;the&#x20;ability&#x20;to&#x20;modify&#x20;this&#x20;information.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+&#x20;-o&#x20;-type&#x20;d&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4643,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;systemctl&#x20;enable&#x20;crond;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4644,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/crontab;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4645,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4646,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4647,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4648,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4649,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','The&#x20;/etc/cron.d/directory&#x20;contains&#x20;system&#x20;cronjobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;in&#x20;a&#x20;similar&#x20;manner&#x20;to&#x20;the&#x20;hourly,&#x20;daily&#x20;weekly&#x20;and&#x20;monthly&#x20;jobs&#x20;from&#x20;/etc/crontab,&#x20;but&#x20;require&#x20;more&#x20;granular&#x20;control&#x20;as&#x20;to&#x20;when&#x20;they&#x20;run.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;:&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.d;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.d;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4650,'Ensure&#x20;cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','If&#x20;cronis&#x20;installed&#x20;in&#x20;the&#x20;system,&#x20;configure&#x20;/etc/cron.allowto&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allowdoes&#x20;not&#x20;exist,&#x20;then&#x20;/etc/cron.denyis&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;file,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.alloware&#x20;allowed&#x20;to&#x20;use&#x20;cron.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allowfile&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cronjobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4651,'Ensure&#x20;at&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','If&#x20;atis&#x20;installed&#x20;in&#x20;the&#x20;system,&#x20;configure&#x20;/etc/at.allowto&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/at.allowdoes&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.denyis&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at.&#x20;By&#x20;removing&#x20;the&#x20;file,&#x20;only&#x20;users&#x20;in&#x20;/etc/at.alloware&#x20;allowed&#x20;to&#x20;use&#x20;at.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;atjobs.&#x20;Using&#x20;the&#x20;at.allowfile&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;atjobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4652,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4653,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions,&#x20;ownership,&#x20;and&#x20;group&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;u-x,g-wx,o-rwx&#x20;{}&#x20;;&#x20;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:ssh_keys&#x20;{}&#x20;;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4654,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;u-x,go-wx&#x20;{}&#x20;;&#x20;&#x20;&#x20;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4655,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;#&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;#&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;#&#x20;DenyUsers&#x20;&lt;userlist&gt;;&#x20;#&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4656,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4657,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"pci_dss\": [\"9.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4658,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4659,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4660,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4661,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4662,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4663,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4664,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised.:&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&#039;Sweet32&#039;&#x20;attack;&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involvingLSB&#x20;values,&#x20;aka&#x20;the&#x20;&#039;Bar&#x20;Mitzvah&#039;&#x20;issue;&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session;&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors;&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;add/modify&#x20;the&#x20;Ciphersline&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphersExample:Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4665,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"14.4\", \"16.5\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4666,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms.Example:&#039;KexAlgorithms&#x20;curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256&#039;','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4667,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4668,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4669,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4670,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthenticationand&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4671,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4672,'Ensure&#x20;SSH&#x20;MaxStartups&#x20;is&#x20;configured','The&#x20;MaxStartupsparameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;to&#x20;the&#x20;SSH&#x20;daemon','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;maxstartups&#x20;10:30:60','[{\"cis\": [\"5.2.21\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4673,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;limited','The&#x20;MaxSessionsparameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;10','[{\"cis\": [\"5.2.22\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4674,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;length&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;complexity&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minclass&#x20;=&#x20;4&#x20;&#x20;&#x20;&#x20;OR&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:password&#x20;requisite&#x20;pam_pwquality.so&#x20;try_first_pass&#x20;retry=3','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4675,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;changes&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(4676,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;changes&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;remember=5&#x20;&#x20;&#x20;or&#x20;&#x20;&#x20;&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4677,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4678,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;configured','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;1&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;1&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;1&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4679,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4680,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4681,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4682,'&#x20;Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;configured','TMOUT&#x20;is&#x20;an&#x20;environmental&#x20;setting&#x20;that&#x20;determines&#x20;the&#x20;timeout&#x20;of&#x20;a&#x20;shell&#x20;in&#x20;seconds.','Setting&#x20;a&#x20;timeout&#x20;value&#x20;reduces&#x20;the&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;that&#x20;has&#x20;been&#x20;left&#x20;unattended.&#x20;It&#x20;also&#x20;ends&#x20;the&#x20;inactive&#x20;session&#x20;and&#x20;releases&#x20;the&#x20;resources&#x20;associated&#x20;with&#x20;that&#x20;session.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;and&#x20;/etc/profile&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4683,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;configured','The&#x20;user&#x20;file-creation&#x20;mode&#x20;mask&#x20;&#40;umask&#41;&#x20;is&#x20;use&#x20;to&#x20;determine&#x20;the&#x20;file&#x20;permission&#x20;for&#x20;newly&#x20;created&#x20;directories&#x20;and&#x20;files.&#x20;In&#x20;Linux,&#x20;the&#x20;default&#x20;permissions&#x20;for&#x20;any&#x20;newly&#x20;created&#x20;directory&#x20;is&#x20;0777&#x20;&#40;rwxrwxrwx&#41;,&#x20;and&#x20;for&#x20;any&#x20;newly&#x20;created&#x20;file&#x20;it&#x20;is&#x20;0666&#x20;&#40;rw-rw-rw-&#41;.&#x20;The&#x20;umask&#x20;modifies&#x20;the&#x20;default&#x20;Linux&#x20;permissions&#x20;by&#x20;restricting&#x20;&#40;masking&#41;&#x20;these&#x20;permissions.&#x20;The&#x20;umask&#x20;is&#x20;not&#x20;simply&#x20;subtracted,&#x20;but&#x20;is&#x20;processed&#x20;bitwise.&#x20;Bits&#x20;set&#x20;in&#x20;the&#x20;umaskare&#x20;cleared&#x20;in&#x20;the&#x20;resulting&#x20;file&#x20;mode.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4684,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4685,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;&#x20;&#x20;#&#x20;chmod&#x20;u-x,g-wx,o-wx&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4686,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(4687,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;u-x,g-wx,o-wx&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4688,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4689,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4690,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4691,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4692,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4693,'Ensure&#x20;accounts&#x20;in&#x20;/etc/passwd&#x20;use&#x20;shadowed&#x20;passwords','Local&#x20;accounts&#x20;can&#x20;uses&#x20;shadowed&#x20;passwords.&#x20;With&#x20;shadowed&#x20;passwords,&#x20;The&#x20;passwords&#x20;are&#x20;saved&#x20;in&#x20;shadow&#x20;password&#x20;file,&#x20;/etc/shadow,&#x20;encrypted&#x20;by&#x20;a&#x20;salted&#x20;one-way&#x20;hash.&#x20;Accounts&#x20;with&#x20;a&#x20;shadowed&#x20;password&#x20;have&#x20;an&#x20;xin&#x20;the&#x20;second&#x20;field&#x20;in&#x20;/etc/passwd.','The&#x20;/etc/passwd&#x20;file&#x20;also&#x20;contains&#x20;information&#x20;like&#x20;user&#x20;ID&#039;s&#x20;and&#x20;group&#x20;ID&#039;s&#x20;that&#x20;are&#x20;used&#x20;by&#x20;many&#x20;system&#x20;programs.&#x20;Therefore,&#x20;the&#x20;/etc/passwd&#x20;file&#x20;must&#x20;remain&#x20;world&#x20;readable.&#x20;In&#x20;spite&#x20;of&#x20;encoding&#x20;the&#x20;password&#x20;with&#x20;a&#x20;randomly-generated&#x20;one-way&#x20;hash&#x20;function,&#x20;an&#x20;attacker&#x20;could&#x20;still&#x20;break&#x20;the&#x20;system&#x20;if&#x20;they&#x20;got&#x20;access&#x20;to&#x20;the&#x20;/etc/passwd&#x20;file.&#x20;This&#x20;can&#x20;be&#x20;mitigated&#x20;by&#x20;using&#x20;shadowed&#x20;passwords,&#x20;thus&#x20;moving&#x20;the&#x20;passwords&#x20;in&#x20;the&#x20;/etc/passwd&#x20;file&#x20;to&#x20;/etc/shadow.&#x20;The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;set&#x20;so&#x20;only&#x20;root&#x20;will&#x20;be&#x20;able&#x20;to&#x20;read&#x20;and&#x20;write.&#x20;This&#x20;helps&#x20;mitigate&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;encoded&#x20;passwords&#x20;with&#x20;which&#x20;to&#x20;perform&#x20;a&#x20;dictionary&#x20;attack.','','f&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/passwdfile&#x20;do&#x20;not&#x20;have&#x20;a&#x20;single&#x20;x&#x20;in&#x20;the&#x20;password&#x20;field,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;these&#x20;accounts&#x20;to&#x20;use&#x20;shadowed&#x20;passwords:#&#x20;sed&#x20;-e&#x20;&#039;s/^&#40;[a-zA-Z0-9_]*&#41;:[^:]*:/1:x:/&#039;&#x20;-i&#x20;/etc/passwdInvestigate&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for,&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4694,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4695,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4696,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;runa&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5000,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/cramfs.conf:&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;#&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5001,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;limited','The&#x20;VFAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/vfat.conf:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;#&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5002,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/squashfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5003,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/udf.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5004,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.&#x20;This&#x20;can&#x20;be&#x20;accomplished&#x20;by&#x20;either&#x20;mounting&#x20;tmpfs&#x20;to&#x20;/tmp,&#x20;or&#x20;creating&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;example:&#x20;&quot;tmpfs&#x20;&#x20;/tmp&#x20;&#x20;tmpfs&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;&#x20;0&#x20;0&quot;&#x20;&#x20;OR&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;#&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;#&#x20;systemctl&#x20;enable&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount:&#x20;&#x20;&#x20;[Mount]&#x20;What=tmpfs&#x20;Where=/tmp&#x20;Type=tmpfs&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5005,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;OR&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5006,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5007,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5008,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5009,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5010,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5011,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5012,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5013,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5014,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5015,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5016,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5017,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5018,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5019,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5020,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs&#x20;:&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5021,'Disable&#x20;USB&#x20;Storage','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/usb-storage.conf&#x20;&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;&#x20;#&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5022,'Disable&#x20;the&#x20;rhnsd&#x20;Daemon','The&#x20;rhnsd&#x20;daemon&#x20;polls&#x20;the&#x20;Red&#x20;Hat&#x20;Network&#x20;web&#x20;site&#x20;for&#x20;scheduled&#x20;actions&#x20;and,&#x20;if&#x20;there&#x20;are,&#x20;executes&#x20;those&#x20;actions.','Patch&#x20;management&#x20;policies&#x20;may&#x20;require&#x20;that&#x20;organizations&#x20;test&#x20;the&#x20;impact&#x20;of&#x20;a&#x20;patch&#x20;before&#x20;it&#x20;is&#x20;deployed&#x20;in&#x20;a&#x20;production&#x20;environment.&#x20;Having&#x20;patches&#x20;automatically&#x20;deployed&#x20;could&#x20;have&#x20;a&#x20;negative&#x20;impact&#x20;on&#x20;the&#x20;environment.&#x20;It&#x20;is&#x20;best&#x20;to&#x20;not&#x20;allow&#x20;an&#x20;action&#x20;by&#x20;default&#x20;but&#x20;only&#x20;after&#x20;appropriate&#x20;consideration&#x20;has&#x20;been&#x20;made.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;unless&#x20;the&#x20;risk&#x20;is&#x20;understood&#x20;and&#x20;accepted&#x20;or&#x20;you&#x20;are&#x20;running&#x20;your&#x20;own&#x20;satellite&#x20;.&#x20;This&#x20;item&#x20;is&#x20;not&#x20;scored&#x20;because&#x20;organizations&#x20;may&#x20;have&#x20;addressed&#x20;the&#x20;risk.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rhnsd&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rhnsd','[{\"cis\": [\"1.2.2\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5023,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.4\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(5024,'Ensure&#x20;sudo&#x20;is&#x20;installed','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;sudo:&#x20;#&#x20;dnf&#x20;install&#x20;sudo','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5025,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo&#x20;which&#x20;would&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5026,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;logfile=&quot;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5027,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;aide:&#x20;#&#x20;dnf&#x20;install&#x20;aide&#x20;&#x20;||&#x20;&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5028,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','&#x20;Run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;cp&#x20;./config/aidecheck.service&#x20;/etc/systemd/system/aidecheck.service&#x20;&#x20;#&#x20;cp&#x20;./config/aidecheck.timer&#x20;/etc/systemd/system/aidecheck.timer&#x20;&#x20;&#x20;#&#x20;chmod&#x20;0644&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;#&#x20;systemctl&#x20;reenable&#x20;aidecheck.timer&#x20;#&#x20;systemctl&#x20;restart&#x20;aidecheck.timer&#x20;#&#x20;systemctl&#x20;daemon-reload.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;//&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5029,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;and&#x20;grubenv&#x20;stored&#x20;in&#x20;/boot/grub2/','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grub.cfg&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grub.cfg&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grubenv&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grubenv','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5030,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-setpassword:&#x20;#&#x20;grub2-setpassword&#x20;&#x20;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5031,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/usr/lib/systemd/system/rescue.service&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;line:&#x20;ExecStart=-/usr/lib/systemd/systemd-sulogin-shell&#x20;rescue&#x20;Edit&#x20;/usr/lib/systemd/system/emergency.service&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;line:&#x20;ExecStart=-/usr/lib/systemd/systemd-sulogin-shell&#x20;emergency','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5032,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0.&#x20;If&#x20;systemd-coredump&#x20;is&#x20;installed:&#x20;&#x20;edit&#x20;/etc/systemd/coredump.conf&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;lines:&#x20;Storage=none&#x20;ProcessSizeMax=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;command:&#x20;#&#x20;systemctl&#x20;daemon-reload','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5033,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5034,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Control.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;SELinux&#x20;:&#x20;#&#x20;dnf&#x20;install&#x20;libselinux','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5035,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5036,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5037,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5038,'Ensure&#x20;no&#x20;unconfined&#x20;services&#x20;exist','Unconfined&#x20;processes&#x20;run&#x20;in&#x20;unconfined&#x20;domains','For&#x20;unconfined&#x20;processes,&#x20;SELinux&#x20;policy&#x20;rules&#x20;are&#x20;applied,&#x20;but&#x20;policy&#x20;rules&#x20;exist&#x20;that&#x20;allow&#x20;processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;almost&#x20;all&#x20;access.&#x20;Processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;fall&#x20;back&#x20;to&#x20;using&#x20;DAC&#x20;rules&#x20;exclusively.&#x20;If&#x20;an&#x20;unconfined&#x20;process&#x20;is&#x20;compromised,&#x20;SELinux&#x20;does&#x20;not&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;system&#x20;resources&#x20;and&#x20;data,&#x20;but&#x20;of&#x20;course,&#x20;DAC&#x20;rules&#x20;are&#x20;still&#x20;used.&#x20;SELinux&#x20;is&#x20;a&#x20;security&#x20;enhancement&#x20;on&#x20;top&#x20;of&#x20;DAC&#x20;rules&#x20;&ndash;&#x20;it&#x20;does&#x20;not&#x20;replace&#x20;them','','Investigate&#x20;any&#x20;unconfined&#x20;processes&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.&#x20;Notes:&#x20;Occasionally&#x20;certain&#x20;daemons&#x20;such&#x20;as&#x20;backup&#x20;or&#x20;centralized&#x20;management&#x20;software&#x20;may&#x20;require&#x20;running&#x20;unconfined.&#x20;Any&#x20;such&#x20;software&#x20;should&#x20;be&#x20;carefully&#x20;analyzed&#x20;and&#x20;documented&#x20;before&#x20;such&#x20;an&#x20;exception&#x20;is&#x20;made.','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5039,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;dnf&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5040,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;dnf&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5041,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5042,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5043,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5044,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5045,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5046,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5047,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add&#x20;the&#x20;following&#x20;in&#x20;3&#x20;lines:&#x20;&#40;1&#41;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#40;2&#41;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#40;3&#41;&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.8.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5048,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;command&#x20;will&#x20;install&#x20;all&#x20;available&#x20;security&#x20;updates:&#x20;#&#x20;dnf&#x20;update&#x20;--security&#x20;.&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;and&#x20;comparing&#x20;against&#x20;site&#x20;policy:&#x20;#&#x20;dnf&#x20;check-update','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(5049,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;not&#x20;legacy','The&#x20;system-wide&#x20;crypto-policies&#x20;followed&#x20;by&#x20;the&#x20;crypto&#x20;core&#x20;components&#x20;allow&#x20;consistently&#x20;deprecating&#x20;and&#x20;disabling&#x20;algorithms&#x20;system-wide.&#x20;The&#x20;individual&#x20;policy&#x20;levels&#x20;&#40;DEFAULT,&#x20;LEGACY,&#x20;FUTURE,&#x20;and&#x20;FIPS&#41;&#x20;are&#x20;included&#x20;in&#x20;the&#x20;crypto-policies&#40;7&#41;&#x20;package.','If&#x20;the&#x20;Legacy&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;selected,&#x20;it&#x20;includes&#x20;support&#x20;for&#x20;TLS&#x20;1.0,&#x20;TLS&#x20;1.1,&#x20;and&#x20;SSH2&#x20;protocols&#x20;or&#x20;later.&#x20;The&#x20;algorithms&#x20;DSA,&#x20;3DES,&#x20;and&#x20;RC4&#x20;are&#x20;allowed,&#x20;while&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;1023-bits.&#x20;These&#x20;legacy&#x20;protocols&#x20;and&#x20;algorithms&#x20;can&#x20;make&#x20;the&#x20;system&#x20;vulnerable&#x20;to&#x20;attacks,&#x20;including&#x20;those&#x20;listed&#x20;in&#x20;RFC&#x20;7457','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;change&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;&lt;CRYPTO&#x20;POLICY&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Example:&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;DEFAULT&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;make&#x20;the&#x20;updated&#x20;system-wide&#x20;crypto&#x20;policy&#x20;active&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;update-crypto-policies','[{\"cis\": [\"1.10\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5050,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;FUTURE&#x20;or&#x20;FIPS','The&#x20;system-wide&#x20;crypto-policies&#x20;followed&#x20;by&#x20;the&#x20;crypto&#x20;core&#x20;components&#x20;allow&#x20;consistently&#x20;deprecating&#x20;and&#x20;disabling&#x20;algorithms&#x20;system-wide.&#x20;The&#x20;individual&#x20;policy&#x20;levels&#x20;&#40;DEFAULT,&#x20;LEGACY,&#x20;FUTURE,&#x20;and&#x20;FIPS&#41;&#x20;are&#x20;included&#x20;in&#x20;the&#x20;crypto-policies&#40;7&#41;&#x20;package.','If&#x20;the&#x20;Legacy&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;selected,&#x20;it&#x20;includes&#x20;support&#x20;for&#x20;TLS&#x20;1.0,&#x20;TLS&#x20;1.1,&#x20;and&#x20;SSH2&#x20;protocols&#x20;or&#x20;later.&#x20;The&#x20;algorithms&#x20;DSA,&#x20;3DES,&#x20;and&#x20;RC4&#x20;are&#x20;allowed,&#x20;while&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;1023-bits.&#x20;These&#x20;legacy&#x20;protocols&#x20;and&#x20;algorithms&#x20;can&#x20;make&#x20;the&#x20;system&#x20;vulnerable&#x20;to&#x20;attacks,&#x20;including&#x20;those&#x20;listed&#x20;in&#x20;RFC&#x20;7457&#x20;FUTURE:&#x20;Is&#x20;a&#x20;conservative&#x20;security&#x20;level&#x20;that&#x20;is&#x20;believed&#x20;to&#x20;withstand&#x20;any&#x20;near-term&#x20;future&#x20;attacks.&#x20;This&#x20;level&#x20;does&#x20;not&#x20;allow&#x20;the&#x20;use&#x20;of&#x20;SHA-1&#x20;in&#x20;signature&#x20;algorithms.&#x20;The&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;3071&#x20;bits.&#x20;The&#x20;level&#x20;provides&#x20;at&#x20;least&#x20;128-bit&#x20;security&#x20;FIPS:&#x20;Conforms&#x20;to&#x20;the&#x20;FIPS&#x20;140-2&#x20;requirements.&#x20;This&#x20;policy&#x20;is&#x20;used&#x20;internally&#x20;by&#x20;the&#x20;fips-mode-setup&#40;8&#41;&#x20;tool&#x20;which&#x20;can&#x20;switch&#x20;the&#x20;system&#x20;into&#x20;the&#x20;FIPS&#x20;140-2&#x20;compliance&#x20;mode.&#x20;The&#x20;level&#x20;provides&#x20;at&#x20;least&#x20;112-bit&#x20;security','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;change&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;FUTURE&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;switch&#x20;the&#x20;system&#x20;to&#x20;FIPS&#x20;mode,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;fips-mode-setup&#x20;--enable','[{\"cis\": [\"1.11\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5051,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;dnf&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5052,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;install&#x20;chrony:&#x20;#&#x20;dnf&#x20;install&#x20;chrony&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;verify&#x20;that&#x20;host&#x20;based&#x20;synchronization&#x20;is&#x20;in&#x20;use.','[{\"cis\": [\"2.2.2.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5053,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;&#x20;&#x20;Configure&#x20;chrony&#x20;to&#x20;run&#x20;as&#x20;the&#x20;chrony&#x20;user','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5054,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;dnf&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5055,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rsyncd','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5056,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5057,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5058,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5059,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;smb','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5060,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dovecot','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5061,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;httpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5062,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5063,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;named','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5064,'Ensure&#x20;NFS&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;NFS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;nfs','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5065,'Ensure&#x20;RPC&#x20;is&#x20;not&#x20;enabled','The&#x20;rpcbind&#x20;service&#x20;maps&#x20;Remote&#x20;Procedure&#x20;Call&#x20;&#40;RPC&#41;&#x20;services&#x20;to&#x20;the&#x20;ports&#x20;on&#x20;which&#x20;they&#x20;listen.&#x20;RPC&#x20;processes&#x20;notify&#x20;rpcbind&#x20;when&#x20;they&#x20;start,&#x20;registering&#x20;the&#x20;ports&#x20;they&#x20;are&#x20;listening&#x20;on&#x20;and&#x20;the&#x20;RPC&#x20;program&#x20;numbers&#x20;they&#x20;expect&#x20;to&#x20;serve.&#x20;The&#x20;client&#x20;system&#x20;then&#x20;contacts&#x20;rpcbind&#x20;on&#x20;the&#x20;server&#x20;with&#x20;a&#x20;particular&#x20;RPC&#x20;program&#x20;number.&#x20;The&#x20;rpcbind&#x20;service&#x20;redirects&#x20;the&#x20;client&#x20;to&#x20;the&#x20;proper&#x20;port&#x20;number&#x20;so&#x20;it&#x20;can&#x20;communicate&#x20;with&#x20;the&#x20;requested&#x20;service.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;require&#x20;rpc&#x20;based&#x20;services,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;rpcbind&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5066,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5067,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dhcpd','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5068,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5069,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;ypserv','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5070,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.18\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(5071,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;dnf&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5072,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet&#x20;:&#x20;#&#x20;dnf&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5073,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;dnf&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5074,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.ip_forwards*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;&#x20;&#x20;&#x20;&amp;&amp;&#x20;&#x20;&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv6.conf.all.forwardings*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv6.conf.all.forwardings*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5075,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;.Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5076,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5077,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv6.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;and&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5078,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;and&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5079,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;and&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5080,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.icmp_echo_ignore_broadcastss*=s*0&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;&quot;s/^s*&#40;net.ipv4.icmp_echo_ignore_broadcastss*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.icmp_echo_ignore_broadcasts=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5081,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.icmp_ignore_bogus_error_responsess*=s*0&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.icmp_ignore_bogus_error_responsess*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&quot;','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5082,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.conf.all.rp_filters*=s*0&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.net.ipv4.conf.all.rp_filters*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;.Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.default.rp_filter=1&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5083,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.tcp_syncookiess*=s*[02]*&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.tcp_syncookiess*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5084,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;do&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1;','[{\"cis\": [\"3.2.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5085,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5086,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5087,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5088,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5089,'Ensure&#x20;a&#x20;Firewall&#x20;package&#x20;is&#x20;installed','A&#x20;Firewall&#x20;package&#x20;should&#x20;be&#x20;selected.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;nftables&#x20;or&#x20;iptables.','A&#x20;Firewall&#x20;package&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;a&#x20;Firewall&#x20;package.&#x20;For&#x20;firewalld:&#x20;dnf&#x20;install&#x20;firewalld&#x20;.For&#x20;nftables:&#x20;#&#x20;dnf&#x20;install&#x20;nftables.&#x20;For&#x20;iptables:&#x20;#&#x20;dnf&#x20;install&#x20;iptables','[{\"cis\": [\"3.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5090,'Ensure&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running','Ensure&#x20;that&#x20;the&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;to&#x20;protect&#x20;your&#x20;system','firewalld&#x20;&#40;Dynamic&#x20;Firewall&#x20;Manager&#41;&#x20;tool&#x20;provides&#x20;a&#x20;dynamically&#x20;managed&#x20;firewall.&#x20;The&#x20;tool&#x20;enables&#x20;network/firewall&#x20;zones&#x20;to&#x20;define&#x20;the&#x20;trust&#x20;level&#x20;of&#x20;network&#x20;connections&#x20;and/or&#x20;interfaces.&#x20;It&#x20;has&#x20;support&#x20;both&#x20;for&#x20;IPv4&#x20;and&#x20;IPv6&#x20;firewall&#x20;settings.&#x20;Also,&#x20;it&#x20;supports&#x20;Ethernet&#x20;bridges&#x20;and&#x20;allow&#x20;you&#x20;to&#x20;separate&#x20;between&#x20;runtime&#x20;and&#x20;permanent&#x20;configuration&#x20;options.&#x20;Finally,&#x20;it&#x20;supports&#x20;an&#x20;interface&#x20;for&#x20;services&#x20;or&#x20;applications&#x20;to&#x20;add&#x20;firewall&#x20;rules&#x20;directly','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;firewalld','[{\"cis\": [\"3.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5091,'Ensure&#x20;iptables&#x20;is&#x20;not&#x20;enabled','IPtables&#x20;is&#x20;an&#x20;application&#x20;that&#x20;allows&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;configure&#x20;the&#x20;IPv4&#x20;and&#x20;IPv6&#x20;tables,&#x20;chains&#x20;and&#x20;rules&#x20;provided&#x20;by&#x20;the&#x20;Linux&#x20;kernel&#x20;firewall.&#x20;IPtables&#x20;is&#x20;installed&#x20;as&#x20;a&#x20;dependency&#x20;with&#x20;firewalld.','Running&#x20;firewalld&#x20;and&#x20;IPtables&#x20;concurrently&#x20;may&#x20;lead&#x20;to&#x20;conflict,&#x20;therefore&#x20;IPtables&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;when&#x20;using&#x20;firewalld.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;iptables:&#x20;systemctl&#x20;--now&#x20;mask&#x20;iptables','[{\"cis\": [\"3.4.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5092,'Ensure&#x20;nftables&#x20;is&#x20;not&#x20;enabled','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.&#x20;nftables&#x20;are&#x20;installed&#x20;as&#x20;a&#x20;dependency&#x20;with&#x20;firewalld.','Running&#x20;firewalld&#x20;and&#x20;nftables&#x20;concurrently&#x20;may&#x20;lead&#x20;to&#x20;conflict,&#x20;therefore&#x20;nftables&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;when&#x20;using&#x20;firewalld.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;mask&#x20;and&#x20;stop&#x20;nftables:&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables','[{\"cis\": [\"3.4.2.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5093,'Ensure&#x20;iptables&#x20;are&#x20;flushed','nftables&#x20;is&#x20;a&#x20;replacement&#x20;for&#x20;iptables,&#x20;ip6tables,&#x20;ebtables&#x20;and&#x20;arptables','It&#x20;is&#x20;possible&#x20;to&#x20;mix&#x20;iptables&#x20;and&#x20;nftables.&#x20;However,&#x20;this&#x20;increases&#x20;complexity&#x20;and&#x20;also&#x20;the&#x20;chance&#x20;to&#x20;introduce&#x20;errors.&#x20;For&#x20;simplicity&#x20;flush&#x20;out&#x20;all&#x20;iptables&#x20;rules,&#x20;and&#x20;ensure&#x20;it&#x20;is&#x20;not&#x20;loaded.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;flush&#x20;iptables:&#x20;For&#x20;iptables:&#x20;#&#x20;iptables&#x20;-F&#x20;and&#x20;For&#x20;ip6tables:&#x20;#&#x20;ip6tables&#x20;-F','[{\"cis\": [\"3.4.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5094,'Ensure&#x20;a&#x20;table&#x20;exists','Tables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;.Example:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;filter','[{\"cis\": [\"3.4.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5095,'Ensure&#x20;base&#x20;chains&#x20;exist','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;input&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;forward&#x20;priority&#x20;0;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;output&#x20;priority&#x20;0&#x20;;&#x20;}','[{\"cis\": [\"3.4.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5096,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept&#x20;,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;transversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;;&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;and&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.4.3.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5097,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conf&#x20;file&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;nftables','[{\"cis\": [\"3.4.3.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5098,'Ensure&#x20;iptables&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.4.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5099,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.4.4.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5100,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.4.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5101,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.4.4.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5102,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.&#x20;Red&#x20;Hat&#x20;Enterprise&#x20;Linux&#x20;contains&#x20;a&#x20;wireless&#x20;tool&#x20;kit&#x20;to&#x20;allow&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;and&#x20;use&#x20;wireless&#x20;networks.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;nmcli&#x20;radio&#x20;all&#x20;off&#x20;.&#x20;Disable&#x20;any&#x20;wireless&#x20;interfaces&#x20;in&#x20;your&#x20;network&#x20;configuration.','[{\"cis\": [\"3.5\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"1.2.3\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5103,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;.Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"3.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.6\", \"CC5.2\"]}]'),(5104,'Ensure&#x20;rsyslog&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;software&#x20;is&#x20;a&#x20;recommended&#x20;replacement&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;rsyslog:&#x20;&#x20;&#x20;#&#x20;dnf&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5105,'Ensure&#x20;auditd&#x20;is&#x20;installed','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;Install&#x20;auditd&#x20;#&#x20;dnf&#x20;install&#x20;audit&#x20;audit-libs','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5106,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5107,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub2&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX&#x20;:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5108,'Ensure&#x20;audit_backlog_limit&#x20;is&#x20;sufficient','The&#x20;backlog&#x20;limit&#x20;has&#x20;a&#x20;default&#x20;setting&#x20;of&#x20;64.','During&#x20;boot&#x20;if&#x20;audit=1,&#x20;then&#x20;the&#x20;backlog&#x20;will&#x20;hold&#x20;64&#x20;records.&#x20;If&#x20;more&#x20;than&#x20;64&#x20;records&#x20;are&#x20;created&#x20;during&#x20;boot,&#x20;auditd&#x20;records&#x20;will&#x20;be&#x20;lost&#x20;and&#x20;potential&#x20;malicious&#x20;activity&#x20;could&#x20;go&#x20;undetected.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit_backlog_limit=&lt;BACKLOG&#x20;SIZE&gt;&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5109,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5110,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5111,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(5112,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5113,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.9\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5114,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"4.9\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5115,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5116,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5117,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5118,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5119,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5120,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5121,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts','[{\"cis\": [\"4.1.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5122,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(5123,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod&#x20;,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5124,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"4.9\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5125,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rules&#x20;and&#x20;add&#x20;the&#x20;line:&#x20;&#x20;&#x20;-e&#x20;2&#x20;&#x20;&#x20;&#x20;at&#x20;the&#x20;end&#x20;of&#x20;the&#x20;file','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5126,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5127,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(5128,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5129,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(5130,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5131,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;write&#x20;logfiles&#x20;to&#x20;persistent&#x20;disk','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5132,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;{}&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(5133,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;crond','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5134,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5135,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5136,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5137,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5138,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5139,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.d&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.d','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5140,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5141,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5142,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;and&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5143,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;0600&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5144,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;public&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;0644&#x20;{}&#x20;;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5145,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5146,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5147,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5148,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Ignorerhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5149,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5150,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5151,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5152,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5153,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(5154,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5155,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5156,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthentication&#x20;and&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types.','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5157,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines.','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.&#x20;SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5158,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxSessions&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;concurrent&#x20;sessions,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxSessions&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;4','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5159,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;not&#x20;over-ridden','System-wide&#x20;Crypto&#x20;policy&#x20;can&#x20;be&#x20;over-ridden&#x20;or&#x20;opted&#x20;out&#x20;of&#x20;for&#x20;openSSH','Over-riding&#x20;or&#x20;opting&#x20;out&#x20;of&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;could&#x20;allow&#x20;for&#x20;the&#x20;use&#x20;of&#x20;less&#x20;secure&#x20;Ciphers,&#x20;MACs,&#x20;KexAlgoritms&#x20;and&#x20;GSSAPIKexAlgorithsm','','Run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;CRYPTO_POLICYs*=.*&#41;$/#&#x20;1/&quot;&#x20;/etc/sysconfig/sshd;&#x20;#&#x20;systemctl&#x20;reload&#x20;sshd','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5160,'Create&#x20;custom&#x20;authselect&#x20;profile','A&#x20;custom&#x20;profile&#x20;can&#x20;be&#x20;created&#x20;by&#x20;copying&#x20;and&#x20;customizing&#x20;one&#x20;of&#x20;the&#x20;default&#x20;profiles.&#x20;The&#x20;default&#x20;profiles&#x20;include:&#x20;sssd,&#x20;winbind,&#x20;or&#x20;the&#x20;nis.','A&#x20;custom&#x20;profile&#x20;is&#x20;required&#x20;to&#x20;customize&#x20;many&#x20;of&#x20;the&#x20;pam&#x20;options','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;custom&#x20;authselect&#x20;profile:&#x20;#&#x20;authselect&#x20;create-profile&#x20;&lt;custom-profile&#x20;name&gt;&#x20;-b&#x20;&lt;default&#x20;profile&#x20;to&#x20;copy&gt;&#x20;.Example:&#x20;#&#x20;authselect&#x20;create-profile&#x20;custom-profile&#x20;-b&#x20;sssd&#x20;--symlink-meta','[{\"cis\": [\"5.3.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5161,'Ensure&#x20;authselect&#x20;includes&#x20;with-faillock','The&#x20;pam_faillock.so&#x20;module&#x20;maintains&#x20;a&#x20;list&#x20;of&#x20;failed&#x20;authentication&#x20;attempts&#x20;per&#x20;user&#x20;during&#x20;a&#x20;specified&#x20;interval&#x20;and&#x20;locks&#x20;the&#x20;account&#x20;in&#x20;case&#x20;there&#x20;were&#x20;more&#x20;than&#x20;deny&#x20;consecutive&#x20;failed&#x20;authentications.&#x20;It&#x20;stores&#x20;the&#x20;failure&#x20;records&#x20;into&#x20;per-user&#x20;files&#x20;in&#x20;the&#x20;tally&#x20;directory.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;include&#x20;the&#x20;with-faillock&#x20;option:&#x20;#&#x20;authselect&#x20;select&#x20;&lt;PROFILE&#x20;NAME&gt;&#x20;with-faillock&#x20;&#x20;&#x20;&#x20;Example:&#x20;#&#x20;authselect&#x20;select&#x20;custom/custom-profile&#x20;with-sudo&#x20;with-faillock&#x20;without-nullok','[{\"cis\": [\"5.3.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5162,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options.&#x20;try_first_pass&#x20;-&#x20;retrieve&#x20;the&#x20;password&#x20;from&#x20;a&#x20;previous&#x20;stacked&#x20;PAM&#x20;module.&#x20;If&#x20;not&#x20;available,&#x20;then&#x20;prompt&#x20;the&#x20;user&#x20;for&#x20;a&#x20;password.&#x20;retry=3&#x20;-&#x20;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure.&#x20;minlen=14&#x20;-&#x20;password&#x20;must&#x20;be&#x20;14&#x20;characters&#x20;or&#x20;more&#x20;Either&#x20;of&#x20;the&#x20;following&#x20;can&#x20;be&#x20;used&#x20;to&#x20;enforce&#x20;complex&#x20;passwords:&#x20;minclass=4&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;four&#x20;classes&#x20;of&#x20;characters&#x20;for&#x20;the&#x20;new&#x20;password&#x20;OR&#x20;dcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;digit&#x20;ucredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;uppercase&#x20;character&#x20;ocredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;special&#x20;character&#x20;lcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;lowercase&#x20;character&#x20;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;length&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;complexity&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minclass&#x20;=&#x20;4&#x20;OR&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;-1&#x20;=&#x20;-1&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;system-auth&#x20;and&#x20;password-auth&#x20;files:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&#039;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&#039;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/$FN&#x20;||&#x20;PTF=/etc/authselect/$FN&#x20;[[&#x20;-z&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+requisites+pam_pwquality.sos+.*enforce-for-roots*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+requisites+pam_pwquality.sos+&#41;&#40;.*&#41;$/12&#x20;enforce-for-root/&#039;&#x20;$PTF&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+requisites+pam_pwquality.sos+.*s+retry=S+s*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;/pwquality/s/retry=S+/retry=3/&#039;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+requisites+pam_pwquality.sos+&#41;&#40;.*&#41;$/12&#x20;retry=3/&#039;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5163,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;deny=&#x20;-&#x20;Number&#x20;of&#x20;attempts&#x20;before&#x20;the&#x20;account&#x20;is&#x20;locked.&#x20;unlock_time=&#x20;-&#x20;Time&#x20;in&#x20;seconds&#x20;before&#x20;the&#x20;account&#x20;is&#x20;unlocked.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;and&#x20;unlock&#x20;time&#x20;to&#x20;follow&#x20;local&#x20;site&#x20;policy.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Set&#x20;password&#x20;lockouts&#x20;and&#x20;unlock&#x20;times&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;system-auth&#x20;and&#x20;password-auth&#x20;files.&#x20;This&#x20;script&#x20;will&#x20;update/add&#x20;the&#x20;deny=5&#x20;and&#x20;unlock_time=900&#x20;options.&#x20;This&#x20;script&#x20;should&#x20;be&#x20;modified&#x20;as&#x20;needed&#x20;to&#x20;follow&#x20;local&#x20;site&#x20;policy.CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&quot;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&quot;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/$FN&#x20;||&#x20;PTF=/etc/authselect/$FN&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*auths+requireds+pam_faillock.sos+.*deny=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;/pam_faillock.so/s/deny=S+/deny=5/g&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^^s*&#40;auths+requireds+pam_faillock.sos+&#41;&#40;.*[^{}]&#41;&#40;{.*}|&#41;$/12&#x20;deny=5&#x20;3/&quot;&#x20;$PTF&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*auths+requireds+pam_faillock.sos+.*unlock_time=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;/pam_faillock.so/s/unlock_time=S+/unlock_time=900/g&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;auths+requireds+pam_faillock.sos+&#41;&#40;.*[^{}]&#41;&#40;{.*}|&#41;$/12&#x20;unlock_time=900&#x20;3/&quot;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5164,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&quot;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.&#x20;remember=&lt;5&gt;&#x20;-&#x20;Number&#x20;of&#x20;old&#x20;passwords&#x20;to&#x20;remember','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;remembered&#x20;password&#x20;history&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.&#x20;Run&#x20;the&#x20;following&#x20;script&#x20;to&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;pam_pwhistory.so&#x20;and&#x20;pam_unix.so&#x20;lines&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&quot;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&quot;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/system-auth&#x20;||&#x20;PTF=/etc/authselect/system-auth&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*passwords+&#40;sufficients+pam_unix|requi&#40;red|site&#41;s+pam_pwhistory&#41;.sos+&#x20;&#40;[^#]+s+&#41;*remember=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;passwords+&#40;requisite|sufficient&#41;s+&#40;pam_pwquality.so|pam_unix.so&#41;s+&#41;&#40;.*&#41;&#40;remember=S+s*&#41;&#40;.*&#41;$/14&#x20;remember=5&#x20;6/&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;passwords+&#40;requisite|sufficient&#41;s+&#40;pam_pwquality.so|pam_unix.so&#41;s+&#41;&#40;.*&#41;$/14&#x20;remember=5/&quot;&#x20;$PTF&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5165,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;password&#x20;hashing&#x20;algorithm&#x20;to&#x20;sha512.&#x20;Run&#x20;the&#x20;following&#x20;script&#x20;to&#x20;dd&#x20;or&#x20;modify&#x20;the&#x20;pam_unix.so&#x20;lines&#x20;in&#x20;the&#x20;password-auth&#x20;and&#x20;system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&#039;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&#039;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-z&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+sufficients+pam_unix.sos+.*sha512s*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+sufficients+pam_unix.sos+&#41;&#40;.*&#41;$/12&#x20;sha512/&#039;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(5166,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5167,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5168,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5169,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5170,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;readonly&#x20;TMOUT=900&#x20;;&#x20;export&#x20;TMOUT&#x20;.&#x20;Note&#x20;that&#x20;setting&#x20;the&#x20;value&#x20;to&#x20;readonly&#x20;prevents&#x20;unwanted&#x20;modification&#x20;during&#x20;runtime.','[{\"cis\": [\"5.5.3\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(5171,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.5.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5172,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.5.5\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5173,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo&#x20;,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su&#x20;,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su&#x20;,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo&#x20;,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5174,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5175,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/&#x20;shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5176,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5177,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5178,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;600&#x20;/etc/passwd-','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5179,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/shadow-','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5180,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5181,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5182,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5183,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5184,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5185,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5186,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5500,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5501,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5502,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5503,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5504,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5505,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.6\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5506,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.7\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5507,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.8\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5508,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5509,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstabfile&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5510,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5511,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5512,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5513,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5514,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5515,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5516,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5517,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5518,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5519,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5520,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5521,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5522,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5523,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5524,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;#&#x20;chkconfig&#x20;autofs&#x20;off','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5525,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.3\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(5526,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;aide:&#x20;yum&#x20;install&#x20;aide&#x20;//&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5527,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;//&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5528,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;located&#x20;at&#x20;/boot/grub/grub.conf&#x20;and&#x20;linked&#x20;as&#x20;/boot/grub/menu.lst&#x20;and&#x20;/etc/grub.conf&#x20;.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.conf&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.conf','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5529,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt:&#x20;#&#x20;grub-md5-crypt&#x20;Password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Retype&#x20;Password:&#x20;&lt;password&gt;&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Copy&#x20;and&#x20;paste&#x20;the&#x20;&lt;encrypted-password&gt;&#x20;into&#x20;the&#x20;global&#x20;section&#x20;of&#x20;/boot/grub/grub.conf&#x20;:&#x20;password&#x20;--md5&#x20;&lt;encrypted-password&gt;','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5530,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/etc/sysconfig/init&#x20;and&#x20;set&#x20;SINGLE&#x20;to&#x20;&#039;&#x20;/sbin/sulogin&#039;:&#x20;&#x20;SINGLE=/sbin/sulogin','[{\"cis\": [\"1.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5531,'Ensure&#x20;interactive&#x20;boot&#x20;is&#x20;not&#x20;enabled','Interactive&#x20;boot&#x20;allows&#x20;console&#x20;users&#x20;to&#x20;interactively&#x20;select&#x20;which&#x20;services&#x20;start&#x20;on&#x20;boot.&#x20;The&#x20;PROMPT&#x20;option&#x20;provides&#x20;console&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;interactively&#x20;boot&#x20;the&#x20;system&#x20;and&#x20;select&#x20;which&#x20;services&#x20;to&#x20;start&#x20;on&#x20;boot&#x20;.&#x20;','Turn&#x20;off&#x20;the&#x20;PROMPT&#x20;option&#x20;on&#x20;the&#x20;console&#x20;to&#x20;prevent&#x20;console&#x20;users&#x20;from&#x20;potentially&#x20;overriding&#x20;established&#x20;security&#x20;settings.&#x20;','','Edit&#x20;the&#x20;/etc/sysconfig/init&#x20;file&#x20;and&#x20;set&#x20;PROMPT&#x20;to&#x20;&#039;&#x20;no&#x20;&#039;:&#x20;PROMPT=no','[{\"cis\": [\"1.4.4\"]}, {\"cis_csc\": [\"5.1\"]}]'),(5532,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5533,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5534,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5535,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal&#x20;and&#x20;uninstall&#x20;prelink:&#x20;prelink&#x20;-ua&#x20;&amp;&amp;&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.5.4\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5536,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/boot/grub/grub.conf&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;on&#x20;all&#x20;kernel&#x20;lines','[{\"cis\": [\"1.6.1.1\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5537,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.6.1.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5538,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.6.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5539,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;yum&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.6.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5540,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;yum&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.6.1.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5541,'Ensure&#x20;no&#x20;unconfined&#x20;daemons&#x20;exist','Daemons&#x20;that&#x20;are&#x20;not&#x20;defined&#x20;in&#x20;SELinux&#x20;policy&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;of&#x20;their&#x20;parent&#x20;process.','Since&#x20;daemons&#x20;are&#x20;launched&#x20;and&#x20;descend&#x20;from&#x20;the&#x20;init&#x20;process,&#x20;they&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;label&#x20;initrc_t&#x20;.&#x20;This&#x20;could&#x20;cause&#x20;the&#x20;unintended&#x20;consequence&#x20;of&#x20;giving&#x20;the&#x20;process&#x20;more&#x20;permission&#x20;than&#x20;it&#x20;requires.','','Investigate&#x20;any&#x20;unconfined&#x20;daemons&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.6.1.6\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5542,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;libselinux:&#x20;yum&#x20;install&#x20;libselinux','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5543,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v.','[{\"cis\": [\"1.7.1.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5544,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.7.1.2\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5545,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.3\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5546,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5547,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5548,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5549,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Create&#x20;the&#x20;/etc/dconf/profile/gdm&#x20;file&#x20;with&#x20;the&#x20;following&#x20;contents:&#x20;&#x20;user-db:user&#x20;&#x20;&#x20;system-db:gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;file-db:/usr/share/gdm/greeter-dconf-defaults&#x20;&#x20;&#x20;&#x20;&#x20;||&#x20;&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;banner-message-enable&#x20;and&#x20;banner-message-text&#x20;options&#x20;in&#x20;/etc/dconf/db/gdm.d/01-banner-message&#x20;:&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;&#x20;&#x20;&#x20;||&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;system&#x20;databases:&#x20;dconf&#x20;update','[{\"cis\": [\"1.7.2\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5550,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;and&#x20;comparing&#x20;against&#x20;site&#x20;policy:&#x20;#&#x20;yum&#x20;check-update','[{\"cis\": [\"1.8\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(5551,'Ensure&#x20;chargen&#x20;services&#x20;are&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;chargen-dgram&#x20;and&#x20;chargen-stream:&#x20;#&#x20;chkconfig&#x20;chargen-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;chargen-stream&#x20;off','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5552,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;daytime-dgram&#x20;and&#x20;daytime-stream:&#x20;#&#x20;chkconfig&#x20;daytime-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;daytime-stream&#x20;off','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5553,'Ensure&#x20;discard&#x20;services&#x20;are&#x20;not&#x20;enabled','discardis&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;discard-dgram&#x20;and&#x20;discard-stream:&#x20;#&#x20;chkconfig&#x20;discard-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;discard-stream&#x20;off','[{\"cis\": [\"2.1.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5554,'Ensure&#x20;echo&#x20;services&#x20;are&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;echo-dgram&#x20;and&#x20;echo-stream:&#x20;#&#x20;chkconfig&#x20;echo-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;echo-stream&#x20;off','[{\"cis\": [\"2.1.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5555,'Ensure&#x20;time&#x20;services&#x20;are&#x20;not&#x20;enabled','time&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;time-dgram&#x20;and&#x20;time-stream:&#x20;#&#x20;chkconfig&#x20;time-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;time-stream&#x20;off','[{\"cis\": [\"2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5556,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;rexec&#x20;&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;services&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;rsh,&#x20;rlogin,&#x20;and&#x20;rexec:&#x20;#&#x20;chkconfig&#x20;rsh&#x20;off&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;rlogin&#x20;off&#x20;&#x20;#&#x20;chkconfig&#x20;rexec&#x20;off','[{\"cis\": [\"2.1.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5557,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;talk:&#x20;#&#x20;chkconfig&#x20;talk&#x20;off','[{\"cis\": [\"2.1.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5558,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;chkconfig&#x20;telnet&#x20;off','[{\"cis\": [\"2.1.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5559,'Ensure&#x20;tftp&#x20;server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;tftp-server&#x20;is&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;tftp:&#x20;#&#x20;chkconfig&#x20;tftp&#x20;off','[{\"cis\": [\"2.1.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5560,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;chkconfig&#x20;rsyncd&#x20;off','[{\"cis\": [\"2.1.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5561,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;xinetd:&#x20;#&#x20;chkconfig&#x20;xinetd&#x20;off','[{\"cis\": [\"2.1.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5562,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;and&#x20;verify&#x20;either&#x20;ntp&#x20;or&#x20;chrony&#x20;is&#x20;installed:&#x20;#&#x20;rpm&#x20;-q&#x20;ntp&#x20;#&#x20;rpm&#x20;-q&#x20;chrony&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;verify&#x20;that&#x20;host&#x20;based&#x20;synchronization&#x20;is&#x20;in&#x20;use.','[{\"cis\": [\"2.2.2.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5563,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;and&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/ntpd&#x20;to&#x20;include&#x20;&#039;&#x20;-u&#x20;ntp:ntp&#x20;&#039;:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5564,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/chrony.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/chronyd&#x20;to&#x20;include:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;chronyd&#039;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5565,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;yum&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5566,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;chkconfig&#x20;avahi-daemon&#x20;off','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5567,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups&#x20;:&#x20;#&#x20;chkconfig&#x20;cups&#x20;off','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5568,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;chkconfig&#x20;dhcpd&#x20;off','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5569,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;chkconfig&#x20;slapd&#x20;off','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5570,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs,&#x20;nfs-server&#x20;and&#x20;rpcbind:&#x20;#&#x20;chkconfig&#x20;nfs&#x20;off;&#x20;#&#x20;chkconfig&#x20;rpcbind&#x20;off','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5571,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;chkconfig&#x20;named&#x20;off','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5572,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;chkconfig&#x20;vsftpd&#x20;off','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5573,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;chkconfig&#x20;httpd&#x20;off','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5574,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;chkconfig&#x20;dovecot&#x20;off','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5575,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;chkconfig&#x20;smb&#x20;off','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5576,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;chkconfig&#x20;squid&#x20;off','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5577,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;chkconfig&#x20;snmpd&#x20;off','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5578,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;Restart&#x20;postfix:&#x20;#&#x20;service&#x20;postfix&#x20;restart','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(5579,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;chkconfig&#x20;ypserv&#x20;off','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5580,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;yum&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5581,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh&#x20;,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;rsh','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5582,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5583,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5584,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5585,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5586,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5587,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5588,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5589,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5590,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5591,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5592,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5593,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5594,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5595,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5596,'Ensure&#x20;IPv6&#x20;redirects&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;prevents&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;ICMP&#x20;redirects.&#x20;ICMP&#x20;redirects&#x20;tell&#x20;the&#x20;system&#x20;about&#x20;alternate&#x20;routes&#x20;for&#x20;sending&#x20;traffic.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;ICMP&#x20;redirects&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;||&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5597,'Ensure&#x20;IPv6&#x20;is&#x20;disabled','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;few&#x20;organizations&#x20;have&#x20;implemented&#x20;IPv6.','If&#x20;IPv6&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/boot/grub/grub.conf&#x20;to&#x20;include&#x20;ipv6.disable=1&#x20;on&#x20;all&#x20;kernel&#x20;lines.','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5598,'Ensure&#x20;TCP&#x20;Wrappers&#x20;is&#x20;installed','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;tcp_wrappers:&#x20;yum&#x20;install&#x20;tcp_wrappers','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(5599,'Ensure&#x20;/etc/hosts.deny&#x20;is&#x20;configured','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.deny:&#x20;echo&#x20;&#039;ALL:&#x20;ALL&#039;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(5600,'Ensure&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;are&#x20;configured.','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;networking&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/hosts.allow&#x20;and&#x20;chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(5601,'Ensure&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;are&#x20;configured.','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/hosts.deny&#x20;and&#x20;chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"3.4.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5602,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.5.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5603,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.5.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5604,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.5.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5605,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.5.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5606,'Ensure&#x20;iptables&#x20;is&#x20;installed','iptables&#x20;allows&#x20;configuration&#x20;of&#x20;the&#x20;IPv4&#x20;tables&#x20;in&#x20;the&#x20;linux&#x20;kernel&#x20;and&#x20;the&#x20;rules&#x20;stored&#x20;within&#x20;them.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;iptables&#x20;.','iptables&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;iptables&#x20;:&#x20;yum&#x20;install&#x20;iptables','[{\"cis\": [\"3.6.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.1\"]}]'),(5607,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;and&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.6.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(5608,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.6.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(5609,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(5610,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(5611,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(5612,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd&#x20;:&#x20;#&#x20;chkconfig&#x20;auditd&#x20;on','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5613,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','Edit&#x20;/boot/grub/grub.conf&#x20;to&#x20;include&#x20;audit=1&#x20;on&#x20;all&#x20;kernel&#x20;lines.&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5614,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5615,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5616,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5617,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;directory.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5618,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;/var/run/failock&#x20;directory&#x20;maintains&#x20;records&#x20;of&#x20;login&#x20;failures&#x20;via&#x20;the&#x20;pam_faillock&#x20;module.','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5619,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.3\"]}]'),(5620,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;500&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5621,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;500&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5622,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5623,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete','[{\"cis\": [\"4.1.14\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(5624,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5625,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5626,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod&#x20;,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"3\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5627,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;end&#x20;of&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;&#x20;&#x20;-e&#x20;2','[{\"cis\": [\"4.1.18\"]}, {\"cis_csc\": [\"3\", \"6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5628,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lackblogging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;rsyslog&#x20;on','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5629,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}]'),(5630,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5631,'Ensure&#x20;syslog-ng&#x20;service&#x20;is&#x20;enabled','Once&#x20;the&#x20;syslog-ng&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;syslog-ng&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;syslog-ng&#x20;:&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;syslog-ng&#x20;on','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5632,'Ensure&#x20;syslog-ng&#x20;default&#x20;file&#x20;permissions&#x20;configured','syslog-ng&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;syslog-ng&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;and&#x20;set&#x20;perm&#x20;option&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;&#x20;&#x20;options&#x20;{&#x20;chain_hostnames&#40;off&#41;;&#x20;flush_lines&#40;0&#41;;&#x20;perm&#40;0640&#41;;&#x20;stats_freq&#40;3600&#41;;&#x20;threaded&#40;yes&#41;;&#x20;};','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5633,'Ensure&#x20;syslog-ng&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;syslog-ng&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;&#x20;destination&#x20;logserver&#x20;{&#x20;tcp&#40;&quot;logfile.example.com&quot;&#x20;port&#40;514&#41;&#41;;&#x20;};&#x20;&#x20;&#x20;&#x20;log&#x20;{&#x20;source&#40;src&#41;;&#x20;destination&#40;logserver&#41;;&#x20;};&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;syslog-ng','[{\"cis\": [\"4.2.2.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5634,'Ensure&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;&#x20;#&#x20;yum&#x20;install&#x20;rsyslog&#x20;&#x20;&#x20;#&#x20;yum&#x20;install&#x20;syslog-ng','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5635,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitivebdata&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;{}&#x20;+','[{\"cis\": [\"4.2.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5636,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;chkconfig&#x20;crond&#x20;on','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5637,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5638,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5639,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5640,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]');
 INSERT INTO `tsca` VALUES (5641,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5642,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5643,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5644,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5645,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5646,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5647,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5648,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(5649,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5650,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5651,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5652,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5653,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(5654,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.13\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5655,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;and&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"5.1\", \"5.8\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5656,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5657,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_cracklib.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_cracklib.so&#x20;try_first_pass&#x20;retry=3&#x20;minlen=14&#x20;dcredit=-1&#x20;ucredit=-1&#x20;ocredit=-1&#x20;lcredit=-1','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"5.7\", \"16.12\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5658,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;remember=5&#x20;&#x20;&#x20;or&#x20;&#x20;&#x20;&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5659,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(5660,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5661,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5662,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5663,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5664,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5665,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5666,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;and&#x20;/etc/profile&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(5667,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo&#x20;,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su&#x20;,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su&#x20;,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo&#x20;,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5668,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5669,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5670,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5671,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5672,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5673,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5674,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5675,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5676,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5677,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5678,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5679,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5680,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6000,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled.','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/cramfs.confand&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}, {\"cis_level\": [\"1\"]}]'),(6001,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled.','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}, {\"cis_level\": [\"2\"]}]'),(6002,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled.','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}, {\"cis_level\": [\"1\"]}]'),(6003,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled.','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12,&#x20;FAT16,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','If&#x20;utilizing&#x20;UEFI&#x20;the&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;required.&#x20;If&#x20;this&#x20;case,&#x20;ensure&#x20;that&#x20;the&#x20;FAT&#x20;filesystem&#x20;is&#x20;only&#x20;used&#x20;where&#x20;appropriate.&#x20;Run&#x20;the&#x20;following&#x20;command:&#x20;grep&#x20;-E&#x20;-i&#x20;&#039;svfats&#039;&#x20;/etc/fstab&#x20;And&#x20;review&#x20;that&#x20;any&#x20;output&#x20;is&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;&#x20;If&#x20;not&#x20;utilizing&#x20;UEFI:&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/fat.conf&#x20;&#x20;&#x20;&#x20;install&#x20;fat&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;install&#x20;vfat&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;install&#x20;msdos&#x20;/bin/true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;unload&#x20;the&#x20;msdos,&#x20;vfat,&#x20;and&#x20;fatmodules:&#x20;&#x20;#&#x20;rmmod&#x20;msdos&#x20;&#x20;&#x20;#&#x20;rmmod&#x20;vfat&#x20;&#x20;#&#x20;rmmod&#x20;fat&#x20;','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}, {\"cis_level\": [\"2\"]}]'),(6004,'Ensure&#x20;/tmp&#x20;is&#x20;configured.','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Create&#x20;or&#x20;update&#x20;an&#x20;entry&#x20;for&#x20;/tmp&#x20;in&#x20;either&#x20;/etc/fstab&#x20;&#x20;OR&#x20;&#x20;&#x20;in&#x20;a&#x20;systemd&#x20;tmp.mount&#x20;file:&#x20;&#x20;If&#x20;/etc/fstab&#x20;is&#x20;used:&#x20;&#x20;Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;Example:&#x20;tmpfs&#x20;/tmp&#x20;tmpfs&#x20;&#x20;&#x20;&#x20;&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;&#x20;0&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec,nodev,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;systemd&#x20;tmp.mount&#x20;file&#x20;is&#x20;used:&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;file&#x20;/etc/systemd/system/tmp.mount&#x20;if&#x20;it&#x20;doesn&#039;t&#x20;exist:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;[&#x20;!&#x20;-f&#x20;/etc/systemd/system/tmp.mount&#x20;]&#x20;&amp;&amp;&#x20;cp&#x20;-v&#x20;/usr/lib/systemd/system/tmp.mount&#x20;/etc/systemd/system/&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/systemd/system/tmp.mount:&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;What=tmpfs&#x20;&#x20;&#x20;&#x20;Where=/tmp&#x20;&#x20;&#x20;&#x20;Type=tmpfs&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;systemd&#x20;daemon:#&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unmask&#x20;tmp.mount:&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;unmask&#x20;tmp.mpunt&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;tmp.mount:&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;--now&#x20;tmp.mount','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"9.4\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6005,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition.','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;OR&#x20;&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstabfile&#x20;and&#x20;add&#x20;noexecto&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6006,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition.','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;&#x20;&#x20;file&#x20;OR&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6007,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition.','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;&#x20;&#x20;file&#x20;OR&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nosuid,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6008,'Ensure&#x20;/dev/shm&#x20;is&#x20;configured&#x20;.','/dev/shm&#x20;is&#x20;a&#x20;traditional&#x20;shared&#x20;memory&#x20;concept.&#x20;One&#x20;program&#x20;will&#x20;create&#x20;a&#x20;memory&#x20;portion,&#x20;which&#x20;other&#x20;processes&#x20;&#40;if&#x20;permitted&#41;&#x20;can&#x20;access.&#x20;Mounting&#x20;tmpfs&#x20;at&#x20;/dev/shm&#x20;is&#x20;handled&#x20;automatically&#x20;by&#x20;systemd.','Any&#x20;user&#x20;can&#x20;upload&#x20;and&#x20;execute&#x20;files&#x20;inside&#x20;the&#x20;/dev/shm&#x20;similar&#x20;to&#x20;the&#x20;/tmp&#x20;partition.&#x20;Configuring&#x20;/dev/shm&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/dev/shm&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Edit&#x20;/etc/fstab&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;the&#x20;following&#x20;line:&#x20;tmpfs&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;tmpfs&#x20;&#x20;&#x20;defaults,noexec,nodev,nosuid,seclabel&#x20;&#x20;&#x20;0&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec,nodev,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6009,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition.','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"2.6\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6010,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition.','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6011,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition.','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6012,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var.','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6013,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp.','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications&#x20;and&#x20;is&#x20;intended&#x20;for&#x20;temporary&#x20;files&#x20;that&#x20;are&#x20;preserved&#x20;across&#x20;reboots.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6014,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition.','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;un&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6015,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition.','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6016,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition.','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6017,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log.','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6018,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit.','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6019,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home.','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6020,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition.','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.18\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6021,'Disable&#x20;Automounting.','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6022,'Disable&#x20;USB&#x20;Storage.','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/usb_storage.conf&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.24\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6023,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated.','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.3\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}, {\"cis_level\": [\"1\"]}]'),(6024,'Ensure&#x20;sudo&#x20;is&#x20;installed.','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;sudo.&#x20;#&#x20;yum&#x20;install&#x20;sudo','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6025,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty.','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo,&#x20;which&#x20;would&#x20;again&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.&#x20;This&#x20;can&#x20;be&#x20;mitigated&#x20;by&#x20;configuring&#x20;sudo&#x20;to&#x20;run&#x20;other&#x20;commands&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty,&#x20;whether&#x20;I/O&#x20;logging&#x20;is&#x20;turned&#x20;on&#x20;or&#x20;not.','','Edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;or&#x20;visudo&#x20;-f&#x20;&lt;PATH&#x20;TO&#x20;FILE&gt;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6026,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists.','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','Edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;or&#x20;visudo&#x20;-f&#x20;&lt;PATH&#x20;TO&#x20;FILE&gt;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;logfile=&#039;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&#039;&#x20;&#x20;&#x20;Example:Defaults&#x20;&#x20;logfile=&quot;/var/log/sudo.log&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6027,'Ensure&#x20;AIDE&#x20;is&#x20;installed.','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;AIDE:&#x20;yum&#x20;install&#x20;aide&#x20;//&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6028,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked.','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','If&#x20;cron&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;aidecheck.service&#x20;and&#x20;aidecheck.timer&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check:&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;/etc/systemd/system/aidecheck.service&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;[Unit]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Description=Aide&#x20;Check&#x20;&#x20;&#x20;&#x20;[Service]&#x20;&#x20;&#x20;&#x20;&#x20;Type=simpleExecStart=/usr/sbin/aide&#x20;--check&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Install]&#x20;&#x20;&#x20;&#x20;&#x20;WantedBy=multi-user.target&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;&#x20;/etc/systemd/system/aidecheck.timer&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;[Unit]&#x20;&#x20;&#x20;Description=Aide&#x20;check&#x20;every&#x20;day&#x20;at&#x20;5AM&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Timer]&#x20;&#x20;&#x20;&#x20;&#x20;OnCalendar=*-*-*&#x20;05:00:00&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Unit=aidecheck.service&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Install]&#x20;&#x20;&#x20;&#x20;&#x20;WantedBy=multi-user.target&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;0644&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;aidecheck.service&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;aidecheck.timer&#x20;','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6029,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set.','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','For&#x20;newergrub2based&#x20;systems&#x20;&#40;centOS/RHEL&#x20;7.2&#x20;and&#x20;newer&#41;:&#x20;Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-setpassword:&#x20;#&#x20;grub2-setpassword&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;older&#x20;&#x20;grub2based&#x20;systems:&#x20;create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-mkpasswd-pbkdf2:&#x20;&#x20;&#x20;#&#x20;grub2-mkpasswd-pbkdf2&#x20;&#x20;&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;Your&#x20;PBKDF2&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;/etc/grub.d/01_users&#x20;or&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;&#x20;cat&#x20;&lt;&lt;EOFset&#x20;superusers=&quot;&lt;username&gt;&quot;password_pbkdf2&#x20;&lt;username&gt;&#x20;&lt;encrypted-password&gt;EOF&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6030,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured.','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;located&#x20;at&#x20;/boot/grub2/grub.cfg&#x20;and&#x20;linked&#x20;as&#x20;/etc/grub2.cfg&#x20;.&#x20;&#x20;On&#x20;newer&#x20;grub2&#x20;systems&#x20;the&#x20;encrypted&#x20;bootloader&#x20;password&#x20;is&#x20;contained&#x20;in&#x20;/boot/grub2/user.cfg','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grub.cfg&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grub.cfg&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/user.cfg&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/user.cfg','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6031,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode.','Single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/usr/lib/systemd/system/rescue.service&#x20;and&#x20;/usr/lib/systemd/system/emergency.service&#x20;and&#x20;set&#x20;ExecStart&#x20;to&#x20;use&#x20;/sbin/sulogin&#x20;or&#x20;/usr/sbin/sulogin:&#x20;ExecStart=-/bin/sh&#x20;-c&#x20;&quot;/sbin/sulogin;&#x20;/usr/bin/systemctl&#x20;--fail&#x20;--no-block&#x20;default&quot;&#x20;','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6032,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted.','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6033,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled.','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6034,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled.','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6035,'Ensure&#x20;prelink&#x20;is&#x20;disabled.','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal:&#x20;#&#x20;prelink&#x20;-ua&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;prelink:&#x20;#&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.6.4\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6036,'Ensure&#x20;SELinux&#x20;is&#x20;installed.','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;libselinux:&#x20;#&#x20;yum&#x20;install&#x20;libselinux','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6037,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration.','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6038,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured.','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6039,'Ensure&#x20;the&#x20;SELinux&#x20;mode&#x20;is&#x20;enforcing&#x20;or&#x20;permissive.','SELinux&#x20;can&#x20;run&#x20;in&#x20;one&#x20;of&#x20;three&#x20;modes:&#x20;disabled,&#x20;permissive,&#x20;or&#x20;enforcing:&#x20;&#x20;Enforcing&#x20;-&#x20;Is&#x20;the&#x20;default,&#x20;and&#x20;recommended,&#x20;mode&#x20;of&#x20;operation;&#x20;in&#x20;enforcing&#x20;mode&#x20;SELinux&#x20;operates&#x20;normally,&#x20;enforcing&#x20;the&#x20;loaded&#x20;security&#x20;policy&#x20;on&#x20;the&#x20;entire&#x20;system.&#x20;&#x20;Permissive&#x20;-&#x20;The&#x20;system&#x20;acts&#x20;as&#x20;if&#x20;SELinux&#x20;is&#x20;enforcing&#x20;the&#x20;loaded&#x20;security&#x20;policy,&#x20;including&#x20;labeling&#x20;objects&#x20;and&#x20;emitting&#x20;access&#x20;denial&#x20;entries&#x20;in&#x20;the&#x20;logs,&#x20;but&#x20;it&#x20;does&#x20;not&#x20;actually&#x20;deny&#x20;any&#x20;operations.&#x20;While&#x20;not&#x20;recommended&#x20;for&#x20;production&#x20;systems,&#x20;permissive&#x20;mode&#x20;can&#x20;be&#x20;helpful&#x20;for&#x20;SELinux&#x20;policy&#x20;development.&#x20;&#x20;&#x20;Disabled&#x20;-Is&#x20;strongly&#x20;discouraged;&#x20;not&#x20;only&#x20;does&#x20;the&#x20;system&#x20;avoid&#x20;enforcing&#x20;the&#x20;SELinux&#x20;policy,&#x20;it&#x20;also&#x20;avoids&#x20;labeling&#x20;any&#x20;persistent&#x20;objects&#x20;such&#x20;as&#x20;files,&#x20;making&#x20;it&#x20;difficult&#x20;to&#x20;enable&#x20;SELinux&#x20;in&#x20;the&#x20;future','Running&#x20;SELinux&#x20;in&#x20;disabled&#x20;modeis&#x20;strongly&#x20;discouraged;&#x20;not&#x20;only&#x20;does&#x20;the&#x20;system&#x20;avoid&#x20;enforcing&#x20;the&#x20;SELinux&#x20;policy,&#x20;it&#x20;also&#x20;avoids&#x20;labeling&#x20;any&#x20;persistent&#x20;objects&#x20;such&#x20;as&#x20;files,&#x20;making&#x20;it&#x20;difficult&#x20;to&#x20;enable&#x20;SELinux&#x20;in&#x20;the&#x20;future.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;SELinux&#039;s&#x20;running&#x20;mode:&#x20;To&#x20;set&#x20;SELinux&#x20;mode&#x20;to&#x20;Enforcing:&#x20;#&#x20;setenforce&#x20;1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;set&#x20;SELinux&#x20;mode&#x20;to&#x20;Permissive:&#x20;#&#x20;setenforce&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/selinux/config&#x20;&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;For&#x20;Enforcing&#x20;mode:&#x20;SELINUX=enforcing&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;Permissive&#x20;mode:&#x20;&#x20;SELINUX=permissive','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6040,'Ensure&#x20;no&#x20;unconfined&#x20;services&#x20;exist.','Unconfined&#x20;processes&#x20;run&#x20;in&#x20;unconfined&#x20;domains','For&#x20;unconfined&#x20;processes,&#x20;SELinux&#x20;policy&#x20;rules&#x20;are&#x20;applied,&#x20;but&#x20;policy&#x20;rules&#x20;exist&#x20;that&#x20;allow&#x20;processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;almost&#x20;all&#x20;access.&#x20;Processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;fall&#x20;back&#x20;to&#x20;using&#x20;DAC&#x20;rules&#x20;exclusively.&#x20;If&#x20;an&#x20;unconfined&#x20;process&#x20;is&#x20;compromised,&#x20;SELinux&#x20;does&#x20;not&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;system&#x20;resources&#x20;and&#x20;data,&#x20;but&#x20;of&#x20;course,&#x20;DAC&#x20;rules&#x20;are&#x20;still&#x20;used.&#x20;SELinux&#x20;is&#x20;a&#x20;security&#x20;enhancement&#x20;on&#x20;top&#x20;of&#x20;DAC&#x20;rules&#x20;&ndash;&#x20;it&#x20;does&#x20;not&#x20;replace&#x20;them','','Investigate&#x20;any&#x20;unconfined&#x20;processes&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6041,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed.','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;yum&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.7.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6042,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed.','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;yum&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.7.1.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6043,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;v&#x20;&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}, {\"cis_level\": [\"1\"]}]'),(6044,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version&#x20;-or&#x20;the&#x20;operating&#x20;system&#039;s&#x20;name.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}, {\"cis_level\": [\"1\"]}]'),(6045,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}, {\"cis_level\": [\"1\"]}]'),(6046,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6047,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6048,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6049,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed.','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;command&#x20;will&#x20;install&#x20;all&#x20;available&#x20;packages&#x20;#&#x20;yum&#x20;update&#x20;&#x20;','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\", \"3.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}, {\"cis_level\": [\"1\"]}]'),(6050,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured.','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','If&#x20;a&#x20;graphical&#x20;login&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;a&#x20;graphical&#x20;login&#x20;is&#x20;required,&#x20;last&#x20;logged&#x20;in&#x20;user&#x20;display&#x20;should&#x20;be&#x20;disabled,&#x20;and&#x20;a&#x20;warning&#x20;banner&#x20;should&#x20;be&#x20;configured.&#x20;Displaying&#x20;the&#x20;last&#x20;logged&#x20;in&#x20;user&#x20;eliminates&#x20;half&#x20;of&#x20;the&#x20;Userid/Password&#x20;equation&#x20;that&#x20;an&#x20;unauthorized&#x20;person&#x20;would&#x20;need&#x20;to&#x20;log&#x20;on.&#x20;Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;gdm:&#x20;#&#x20;yum&#x20;remove&#x20;gdm&#x20;OR&#x20;If&#x20;GDM&#x20;is&#x20;required:&#x20;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/profile/gdm&#x20;and&#x20;add&#x20;the&#x20;following:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;user-db:user&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;system-db:gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;file-db:/usr/share/gdm/greeter-dconf-defaults&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/db/gdm.d/&#x20;&#x20;and&#x20;add&#x20;the&#x20;following:&#x20;&#40;This&#x20;is&#x20;typically&#x20;/etc/dconf/db/gdm.d/01-banner-message&#41;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;&lt;banner&#x20;message&gt;&#039;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Example&#x20;Banner&#x20;Text:&#x20;&#x20;&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#x20;&#039;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/db/gdm.d/and&#x20;add&#x20;the&#x20;following:&#x20;&#40;This&#x20;is&#x20;typically&#x20;/etc/dconf/db/gdm.d/00-login-screen&#41;&#x20;&#x20;&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;Do&#x20;not&#x20;show&#x20;the&#x20;user&#x20;list&#x20;&#x20;&#x20;&#x20;&#x20;disable-user-list=true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;system&#x20;databases:&#x20;&#x20;#&#x20;dconf&#x20;update','[{\"cis\": [\"1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}, {\"cis_level\": [\"1\"]}]'),(6051,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled.','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;area&#x20;of&#x20;the&#x20;system.&#x20;Note:&#x20;If&#x20;an&#x20;xinetd&#x20;service&#x20;or&#x20;services&#x20;are&#x20;required,&#x20;ensure&#x20;that&#x20;any&#x20;xinetd&#x20;service&#x20;not&#x20;required&#x20;is&#x20;stopped&#x20;and&#x20;disabled','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;yum&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6052,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use.','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','Run&#x20;One&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;chrony&#x20;or&#x20;NTP:&#x20;to&#x20;install&#x20;chrony&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;yum&#x20;install&#x20;chrony&#x20;OR&#x20;to&#x20;install&#x20;ntp:&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;yum&#x20;install&#x20;ntp','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6053,'Ensure&#x20;chrony&#x20;is&#x20;configured.','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;and&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;Note:&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/chronyd&#x20;to&#x20;include&#x20;&#039;-u&#x20;chrony&#039;:OPTIONS=&quot;-u&#x20;chrony&quot;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6054,'Ensure&#x20;ntp&#x20;is&#x20;configured.','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;and&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/ntpd&#x20;to&#x20;include&#x20;&#039;&#x20;-u&#x20;ntp:ntp&#x20;&#039;:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6055,'&#x20;Ensure&#x20;X11&#x20;Server&#x20;components&#x20;are&#x20;not&#x20;installed.','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;yum&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6056,'&#x20;Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;installed.','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;remove&#x20;this&#x20;package&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;stop,&#x20;mask&#x20;and&#x20;remove&#x20;avahi-autoipd&#x20;and&#x20;avahi:&#x20;#&#x20;systemctl&#x20;stop&#x20;avahi-daemon.socket&#x20;avahi-daemon.service;&#x20;#&#x20;yum&#x20;remove&#x20;avahi-autoipd&#x20;avahi','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6057,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;installed.','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.&#x20;Disabling&#x20;CUPS&#x20;will&#x20;prevent&#x20;printing&#x20;from&#x20;the&#x20;system,&#x20;a&#x20;common&#x20;task&#x20;for&#x20;workstation&#x20;systems.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cups:&#x20;#&#x20;yum&#x20;remove&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6058,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;installed.','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;the&#x20;dhcp&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;dhcpd:&#x20;#&#x20;yum&#x20;remove&#x20;dhcp','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6059,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;installed.','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;slapd:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-servers','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6060,'Ensure&#x20;nfs-utils&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;nfs-server&#x20;service&#x20;is&#x20;masked.','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;require&#x20;network&#x20;shares,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;nfs-utils&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nfs-utils:&#x20;#&#x20;yum&#x20;remove&#x20;nfs-utils;&#x20;OR&#x20;if&#x20;the&#x20;nfs-package&#x20;is&#x20;required&#x20;as&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;nfs-server&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nfs-server','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6061,'Ensure&#x20;rpcbind&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;rpcbind&#x20;services&#x20;are&#x20;masked.','The&#x20;rpcbind&#x20;utility&#x20;maps&#x20;RPC&#x20;services&#x20;to&#x20;the&#x20;ports&#x20;on&#x20;which&#x20;they&#x20;listen.&#x20;RPC&#x20;processes&#x20;notify&#x20;rpcbind&#x20;when&#x20;they&#x20;start,&#x20;registering&#x20;the&#x20;ports&#x20;they&#x20;are&#x20;listening&#x20;on&#x20;and&#x20;the&#x20;RPC&#x20;program&#x20;numbers&#x20;they&#x20;expect&#x20;to&#x20;serve.&#x20;The&#x20;client&#x20;system&#x20;then&#x20;contacts&#x20;rpcbind&#x20;on&#x20;the&#x20;server&#x20;with&#x20;a&#x20;particular&#x20;RPC&#x20;program&#x20;number.&#x20;The&#x20;rpcbind&#x20;service&#x20;redirects&#x20;the&#x20;client&#x20;to&#x20;the&#x20;proper&#x20;port&#x20;number&#x20;so&#x20;it&#x20;can&#x20;communicate&#x20;with&#x20;the&#x20;requested&#x20;service&#x20;Portmapper&#x20;is&#x20;an&#x20;RPC&#x20;service,&#x20;which&#x20;always&#x20;listens&#x20;on&#x20;tcp&#x20;and&#x20;udp&#x20;111,&#x20;and&#x20;is&#x20;used&#x20;to&#x20;map&#x20;other&#x20;RPC&#x20;services&#x20;&#40;such&#x20;as&#x20;nfs,&#x20;nlockmgr,&#x20;quotad,&#x20;mountd,&#x20;etc.&#41;&#x20;to&#x20;their&#x20;corresponding&#x20;port&#x20;number&#x20;on&#x20;the&#x20;server.&#x20;When&#x20;a&#x20;remote&#x20;host&#x20;makes&#x20;an&#x20;RPC&#x20;call&#x20;to&#x20;that&#x20;server,&#x20;it&#x20;first&#x20;consults&#x20;with&#x20;portmap&#x20;to&#x20;determine&#x20;where&#x20;the&#x20;RPC&#x20;server&#x20;is&#x20;listening','A&#x20;small&#x20;request&#x20;&#40;~82&#x20;bytes&#x20;via&#x20;UDP&#41;&#x20;sent&#x20;to&#x20;the&#x20;Portmapper&#x20;generates&#x20;a&#x20;large&#x20;response&#x20;&#40;7x&#x20;to&#x20;28x&#x20;amplification&#41;,&#x20;which&#x20;makes&#x20;it&#x20;a&#x20;suitable&#x20;tool&#x20;for&#x20;DDoS&#x20;attacks.&#x20;If&#x20;rpcbind&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;rpcbind&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nfs-utils:&#x20;#&#x20;yum&#x20;remove&#x20;nfs-utils;&#x20;OR&#x20;if&#x20;the&#x20;nfs-package&#x20;is&#x20;required&#x20;as&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;nfs-server&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nfs-server','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6062,'&#x20;Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;installed&#x20;.','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;yum&#x20;remove&#x20;bind','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6063,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;installed.','FTP&#x20;&#40;File&#x20;Transfer&#x20;Protocol&#41;&#x20;is&#x20;a&#x20;traditional&#x20;and&#x20;widely&#x20;used&#x20;standard&#x20;tool&#x20;for&#x20;transferring&#x20;files&#x20;between&#x20;a&#x20;server&#x20;and&#x20;clients&#x20;over&#x20;a&#x20;network,&#x20;especially&#x20;where&#x20;no&#x20;authentication&#x20;is&#x20;necessary&#x20;&#40;permits&#x20;anonymous&#x20;users&#x20;to&#x20;connect&#x20;to&#x20;a&#x20;server&#41;','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;yum&#x20;remove&#x20;vsftpd','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6064,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;installed.','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;yum&#x20;remove&#x20;httpd','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6065,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;installed.','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;yum&#x20;remove&#x20;dovecot','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6066,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;installed.','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;package&#x20;can&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;yum&#x20;remove&#x20;samba','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6067,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;installed.','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;yum&#x20;remove&#x20;squid','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6068,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;installed.','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMPv1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;SNMPv3replaces&#x20;the&#x20;simple/clear&#x20;text&#x20;password&#x20;sharing&#x20;used&#x20;in&#x20;SNMPv2with&#x20;more&#x20;securely&#x20;encoded&#x20;parameters.&#x20;If&#x20;the&#x20;SNMP&#x20;service&#x20;is&#x20;not&#x20;required,&#x20;the&#x20;net-snmp&#x20;package&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;#&#x20;yum&#x20;remove&#x20;net-snmp','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6069,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}, {\"cis_level\": [\"1\"]}]'),(6070,'Ensure&#x20;rsync&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;rsyncd&#x20;service&#x20;is&#x20;masked.','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','Unless&#x20;required,&#x20;the&#x20;rsync&#x20;package&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;area&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;rsync&#x20;package:&#x20;#&#x20;yum&#x20;remove&#x20;rsync;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;mask&#x20;the&#x20;rsyncd&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;rsyncd','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}, {\"cis_level\": [\"1\"]}]'),(6071,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;installed.','The&#x20;ypserv&#x20;package&#x20;provides&#x20;the&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;.&#x20;This&#x20;service,&#x20;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;ypservpackage&#x20;be&#x20;removed,&#x20;and&#x20;if&#x20;required&#x20;a&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;yum&#x20;remove&#x20;ypserv','[{\"cis\": [\"2.2.18\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6072,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;installed.','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;yum&#x20;remove&#x20;telnet-server','[{\"cis\": [\"2.2.19\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"cis_level\": [\"1\"]}]'),(6073,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed.','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;yum&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6074,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed.','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh:&#x20;#&#x20;yum&#x20;remove&#x20;rsh','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6075,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed.','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk:&#x20;#&#x20;yum&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6076,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed.','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet:&#x20;#&#x20;yum&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6077,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed.','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6078,'Ensure&#x20;nonessential&#x20;services&#x20;are&#x20;removed&#x20;or&#x20;masked.','A&#x20;network&#x20;port&#x20;is&#x20;identified&#x20;by&#x20;its&#x20;number,&#x20;the&#x20;associated&#x20;IP&#x20;address,&#x20;and&#x20;the&#x20;type&#x20;of&#x20;the&#x20;communication&#x20;protocol&#x20;such&#x20;as&#x20;TCP&#x20;or&#x20;UDP.A&#x20;listening&#x20;port&#x20;is&#x20;a&#x20;network&#x20;port&#x20;on&#x20;which&#x20;an&#x20;application&#x20;or&#x20;process&#x20;listens&#x20;on,&#x20;acting&#x20;as&#x20;a&#x20;communication&#x20;endpoint.&#x20;Each&#x20;listening&#x20;port&#x20;can&#x20;be&#x20;open&#x20;or&#x20;closed&#x20;&#40;filtered&#41;&#x20;using&#x20;a&#x20;firewall.&#x20;In&#x20;general&#x20;terms,&#x20;an&#x20;open&#x20;port&#x20;is&#x20;a&#x20;network&#x20;port&#x20;that&#x20;accepts&#x20;incoming&#x20;packets&#x20;from&#x20;remote&#x20;locations','Services&#x20;listening&#x20;on&#x20;the&#x20;system&#x20;pose&#x20;a&#x20;potential&#x20;risk&#x20;as&#x20;an&#x20;attack&#x20;vector.&#x20;These&#x20;services&#x20;should&#x20;be&#x20;reviewed,&#x20;and&#x20;if&#x20;not&#x20;required,&#x20;the&#x20;service&#x20;should&#x20;be&#x20;stopped,&#x20;and&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service&#x20;should&#x20;be&#x20;removed.&#x20;If&#x20;required&#x20;packages&#x20;have&#x20;a&#x20;dependency,&#x20;the&#x20;service&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Review&#x20;the&#x20;output&#x20;of:&#x20;#&#x20;lsof&#x20;-i&#x20;-P&#x20;-n&#x20;|&#x20;grep&#x20;-v&#x20;&#039;&#40;ESTABLISHED&#41;&#039;;&#x20;to&#x20;ensure&#x20;that&#x20;all&#x20;services&#x20;listed&#x20;are&#x20;required&#x20;on&#x20;the&#x20;system.&#x20;If&#x20;a&#x20;listed&#x20;service&#x20;is&#x20;not&#x20;required,&#x20;remove&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service.&#x20;If&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service&#x20;is&#x20;required,&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;service.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service:#&#x20;yum&#x20;remove&#x20;&lt;package_name&gt;&#x20;OR&#x20;if&#x20;required&#x20;packages&#x20;have&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;service:#&#x20;systemctl&#x20;--now&#x20;mask&#x20;&lt;service_name&gt;','[{\"cis\": [\"2.4\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6079,'Disable&#x20;IPv6.','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','To&#x20;disable&#x20;IPv6&#x20;through&#x20;the&#x20;GRUB2&#x20;config:&#x20;edit&#x20;/etc/default/gruband&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:#&#x20;grub2-mkconfig&#x20;&ndash;o&#x20;/boot/grub2/grub.cfg;&#x20;OR&#x20;to&#x20;disable&#x20;IPv6&#x20;through&#x20;sysctl&#x20;settings:&#x20;set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;#&#x20;net.ipv6.conf.all.disable_ipv6&#x20;=&#x20;1;&#x20;#&#x20;net.ipv6.conf.default.disable_ipv6&#x20;=&#x20;1;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.disable_ipv6=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.disable_ipv6=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6080,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled.','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;should&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;ip&#x20;link&#x20;set&#x20;&lt;interface&gt;&#x20;down','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6081,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled.','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&#039;^s*net.ipv4.ip_forwards*=s*1&#039;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&#039;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6082,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled.','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6083,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted.','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6084,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted.','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6085,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted.','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6086,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged.','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6087,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored.','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6088,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored.','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6089,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled.','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6090,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled.','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6091,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted.','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;and&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6092,'Ensure&#x20;DCCP&#x20;is&#x20;disabled.','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6093,'Ensure&#x20;SCTP&#x20;is&#x20;disabled.','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6094,'Ensure&#x20;FirewallD&#x20;or&#x20;nftables&#x20;or&#x20;iptables-services&#x20;is&#x20;installed.','firewalld&#x20;is&#x20;a&#x20;firewall&#x20;management&#x20;tool&#x20;for&#x20;Linux&#x20;operating&#x20;systems.&#x20;It&#x20;provides&#x20;firewall&#x20;features&#x20;by&#x20;acting&#x20;as&#x20;a&#x20;front-end&#x20;for&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;net&#x20;filter&#x20;framework&#x20;via&#x20;the&#x20;iptables&#x20;backend&#x20;or&#x20;provides&#x20;firewall&#x20;features&#x20;by&#x20;acting&#x20;as&#x20;a&#x20;front-end&#x20;for&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;via&#x20;the&#x20;nftables&#x20;utility.&#x20;FirewallD&#x20;replaces&#x20;iptables&#x20;as&#x20;the&#x20;default&#x20;firewall&#x20;management&#x20;tool.&#x20;Use&#x20;the&#x20;firewalld&#x20;utility&#x20;to&#x20;configure&#x20;a&#x20;firewall&#x20;for&#x20;less&#x20;complex&#x20;firewalls.&#x20;The&#x20;utility&#x20;is&#x20;easy&#x20;to&#x20;use&#x20;and&#x20;covers&#x20;the&#x20;typical&#x20;use&#x20;cases&#x20;scenario.&#x20;FirewallD&#x20;supports&#x20;both&#x20;IPv4&#x20;and&#x20;IPv6&#x20;networks&#x20;and&#x20;can&#x20;administer&#x20;separate&#x20;firewall&#x20;zones&#x20;with&#x20;varying&#x20;degrees&#x20;of&#x20;trust&#x20;as&#x20;defined&#x20;in&#x20;zone&#x20;profiles.','A&#x20;firewall&#x20;utility&#x20;is&#x20;required&#x20;to&#x20;configure&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;via&#x20;the&#x20;iptables&#x20;or&#x20;nftables&#x20;back-end.&#x20;The&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;host-based&#x20;firewall&#x20;can&#x20;protect&#x20;against&#x20;threats&#x20;originating&#x20;from&#x20;within&#x20;a&#x20;corporate&#x20;network&#x20;to&#x20;include&#x20;malicious&#x20;mobile&#x20;code&#x20;and&#x20;poorly&#x20;configured&#x20;software&#x20;on&#x20;a&#x20;host.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;firewalld:&#x20;#&#x20;yum&#x20;install&#x20;firewalld&#x20;iptables;&#x20;OR&#x20;to&#x20;&#x20;install&#x20;nftables:&#x20;#&#x20;yum&#x20;install&#x20;nftables;&#x20;OR&#x20;to&#x20;install&#x20;&#x20;iptables-services:&#x20;#&#x20;yum&#x20;install&#x20;iptables-services&#x20;iptables','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6095,'Ensure&#x20;iptables-services&#x20;and&#x20;FirewallD&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time.','The&#x20;iptables-services&#x20;package&#x20;contains&#x20;the&#x20;iptables.service&#x20;and&#x20;ip6tables.service.&#x20;These&#x20;services&#x20;allow&#x20;for&#x20;management&#x20;of&#x20;the&#x20;Host&#x20;Based&#x20;Firewall&#x20;provided&#x20;by&#x20;the&#x20;iptables&#x20;package.','iptables.service&#x20;and&#x20;ip6tables.service&#x20;are&#x20;still&#x20;supported&#x20;and&#x20;can&#x20;be&#x20;installed&#x20;with&#x20;the&#x20;iptables-services&#x20;package.&#x20;Running&#x20;both&#x20;firewalld&#x20;and&#x20;the&#x20;services&#x20;included&#x20;in&#x20;the&#x20;iptables-services&#x20;package&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;stop&#x20;the&#x20;services&#x20;included&#x20;in&#x20;the&#x20;iptables-services&#x20;package&#x20;and&#x20;remove&#x20;the&#x20;iptables-services&#x20;package:&#x20;#&#x20;systemctl&#x20;stop&#x20;iptables;&#x20;#&#x20;systemctl&#x20;stop&#x20;ip6tables;&#x20;#&#x20;yum&#x20;remove&#x20;iptables-services.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;firewalld:&#x20;#&#x20;yum&#x20;remove&#x20;firewalld&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;firewalld','[{\"cis\": [\"3.5.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6096,'Ensure&#x20;nftables&#x20;and&#x20;FirewallD&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time&#x20;or&#x20;ensure&#x20;one&#x20;of&#x20;them&#x20;is&#x20;stopped&#x20;and&#x20;masked.','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.Note:&#x20;Support&#x20;for&#x20;using&#x20;nftables&#x20;as&#x20;the&#x20;back-end&#x20;for&#x20;firewalld&#x20;was&#x20;added&#x20;in&#x20;release&#x20;v0.6.0.&#x20;In&#x20;Fedora&#x20;19&#x20;Linux&#x20;derivatives,&#x20;firewalld&#x20;utilizes&#x20;iptables&#x20;as&#x20;its&#x20;back-end&#x20;by&#x20;default.','Running&#x20;both&#x20;firewalld&#x20;and&#x20;nftables&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nftables:#&#x20;yum&#x20;remove&#x20;nftables;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;nftables:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;firewalld:&#x20;#&#x20;yum&#x20;remove&#x20;firewalld&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;firewalld','[{\"cis\": [\"3.5.1.3\", \"3.5.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6097,'Ensure&#x20;nftables&#x20;and&#x20;iptables-services&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time&#x20;or&#x20;ensure&#x20;one&#x20;of&#x20;them&#x20;is&#x20;stopped&#x20;and&#x20;masked.','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.Note:&#x20;Support&#x20;for&#x20;using&#x20;nftables&#x20;as&#x20;the&#x20;back-end&#x20;for&#x20;firewalld&#x20;was&#x20;added&#x20;in&#x20;release&#x20;v0.6.0.&#x20;In&#x20;Fedora&#x20;19&#x20;Linux&#x20;derivatives,&#x20;firewalld&#x20;utilizes&#x20;iptables&#x20;as&#x20;its&#x20;back-end&#x20;by&#x20;default.','Running&#x20;both&#x20;nftables&#x20;and&#x20;nftables&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nftables:#&#x20;yum&#x20;remove&#x20;nftables;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;nftables:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;iptables#&#x20;#&#x20;systemctl&#x20;stop&#x20;iptables;&#x20;#&#x20;systemctl&#x20;stop&#x20;ip6tables;&#x20;#&#x20;yum&#x20;remove&#x20;iptables-services','[{\"cis\": [\"3.5.2.3\", \"3.5.3.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6098,'Ensure&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running.','firewalld.serviceenables&#x20;the&#x20;enforcement&#x20;of&#x20;firewall&#x20;rules&#x20;configured&#x20;through&#x20;firewalld','Ensure&#x20;that&#x20;the&#x20;firewalld.service&#x20;is&#x20;enabled&#x20;and&#x20;running&#x20;to&#x20;enforce&#x20;firewall&#x20;rules&#x20;configured&#x20;through&#x20;firewalld','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unmask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;unmask&#x20;firewalld;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;firewalld','[{\"cis\": [\"3.5.1.4\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6099,'Ensure&#x20;a&#x20;table&#x20;exists.','nTables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;','[{\"cis\": [\"3.5.2.5\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6100,'Ensure&#x20;base&#x20;chains&#x20;exist.','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;createchain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;','[{\"cis\": [\"3.5.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6101,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured.','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;iif&#x20;lo&#x20;accept;&#x20;&#x20;&#x20;#&#x20;nft&#x20;create&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;saddr&#x20;127.0.0.0/8&#x20;counter&#x20;drop;&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;implement&#x20;the&#x20;IPv6&#x20;loopback&#x20;rules:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip6&#x20;saddr::1&#x20;counter&#x20;drop','[{\"cis\": [\"3.5.2.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6102,'Ensure&#x20;outbound&#x20;and&#x20;established&#x20;connections&#x20;are&#x20;configured.','Configure&#x20;the&#x20;firewall&#x20;rules&#x20;for&#x20;new&#x20;outbound&#x20;and&#x20;established&#x20;connections.','If&#x20;rules&#x20;are&#x20;not&#x20;in&#x20;place&#x20;for&#x20;new&#x20;outbound&#x20;and&#x20;established&#x20;connections,&#x20;all&#x20;packets&#x20;will&#x20;be&#x20;dropped&#x20;by&#x20;the&#x20;default&#x20;policy&#x20;preventing&#x20;network&#x20;usage.','','Configure&#x20;nftables&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;commands&#x20;will&#x20;implement&#x20;a&#x20;policy&#x20;to&#x20;allow&#x20;all&#x20;outbound&#x20;connections&#x20;and&#x20;all&#x20;established&#x20;connections:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;tcp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;udp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;icmp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;tcp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;udp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept;&#x20;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;icmp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept','[{\"cis\": [\"3.5.2.8\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6103,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy.','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;traversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.5.2.9\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6104,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled.','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;on&#x20;the&#x20;nftables&#x20;service','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conffile&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.2.10\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6105,'Ensure&#x20;nftables&#x20;rules&#x20;are&#x20;permanent.','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames.&#x20;The&#x20;nftables&#x20;service&#x20;reads&#x20;the&#x20;/etc/sysconfig/nftables.conffile&#x20;for&#x20;a&#x20;nftables&#x20;file&#x20;or&#x20;files&#x20;to&#x20;include&#x20;in&#x20;the&#x20;nftables&#x20;ruleset.&#x20;A&#x20;nftables&#x20;ruleset&#x20;containing&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;base&#x20;chains&#x20;allow&#x20;network&#x20;traffic&#x20;to&#x20;be&#x20;filtered.','Changes&#x20;made&#x20;to&#x20;nftables&#x20;ruleset&#x20;only&#x20;affect&#x20;the&#x20;live&#x20;system,&#x20;you&#x20;will&#x20;also&#x20;need&#x20;to&#x20;configure&#x20;the&#x20;nftables&#x20;ruleset&#x20;to&#x20;apply&#x20;on&#x20;boot','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.2.11\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6106,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy.','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6107,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured.','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.3.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6108,'Ensure&#x20;iptables&#x20;is&#x20;enabled&#x20;and&#x20;running.','iptables.service&#x20;is&#x20;a&#x20;utility&#x20;for&#x20;configuring&#x20;and&#x20;maintaining&#x20;iptables.','iptables.service&#x20;willload&#x20;the&#x20;iptables&#x20;rules&#x20;saved&#x20;in&#x20;the&#x20;file&#x20;/etc/sysconfig/iptablesat&#x20;boot,&#x20;otherwise&#x20;the&#x20;iptables&#x20;rules&#x20;will&#x20;be&#x20;cleared&#x20;during&#x20;a&#x20;re-boot&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-PFORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6109,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy.','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-PFORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6110,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured.','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;tothe&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.3.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6111,'Ensure&#x20;IPv6&#x20;outbound&#x20;and&#x20;established&#x20;connections&#x20;are&#x20;configured.','Configure&#x20;the&#x20;firewall&#x20;rules&#x20;for&#x20;new&#x20;outbound,&#x20;and&#x20;established&#x20;IPv6&#x20;connections.','If&#x20;rules&#x20;are&#x20;not&#x20;in&#x20;place&#x20;for&#x20;new&#x20;outbound,&#x20;and&#x20;established&#x20;connections&#x20;all&#x20;packets&#x20;will&#x20;be&#x20;dropped&#x20;by&#x20;the&#x20;default&#x20;policy&#x20;preventing&#x20;network&#x20;usage','','Configure&#x20;iptables&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;commands&#x20;will&#x20;implement&#x20;a&#x20;policy&#x20;to&#x20;allow&#x20;all&#x20;outbound&#x20;connections&#x20;and&#x20;all&#x20;established&#x20;connections:#&#x20;ip6tables&#x20;-AOUTPUT&#x20;-p&#x20;tcp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-p&#x20;udp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-p&#x20;icmp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;tcp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;udp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;icmp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT','[{\"cis\": [\"3.5.3.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6112,'Ensure&#x20;ip6tables&#x20;is&#x20;enabled&#x20;and&#x20;running.','ip6tables.service&#x20;is&#x20;a&#x20;utility&#x20;for&#x20;configuring&#x20;and&#x20;maintaining&#x20;ip6tables.','ip6tables.service&#x20;will&#x20;load&#x20;the&#x20;iptables&#x20;rules&#x20;saved&#x20;in&#x20;the&#x20;file&#x20;/etc/sysconfig/ip6tables&#x20;at&#x20;boot,&#x20;otherwise&#x20;the&#x20;ip6tables&#x20;rules&#x20;will&#x20;be&#x20;cleared&#x20;during&#x20;a&#x20;re-boot&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;ip6tables:&#x20;#&#x20;systemctl&#x20;--now&#x20;start&#x20;ip6tables','[{\"cis\": [\"3.5.3.3.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6113,'Ensure&#x20;auditd&#x20;is&#x20;installed.','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;Install&#x20;auditd&#x20;&#x20;#&#x20;yum&#x20;install&#x20;audit&#x20;audit-libs','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6114,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running.','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6115,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled.','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.&#x20;Note:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub2&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6116,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured.','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"cis_level\": [\"2\"]}]'),(6117,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted.','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.2\", \"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"cis_level\": [\"2\"]}]'),(6118,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full.','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"cis_level\": [\"2\"]}]'),(6119,'Ensure&#x20;audit_backlog_limit&#x20;is&#x20;sufficient.','The&#x20;backlog&#x20;limit&#x20;has&#x20;a&#x20;default&#x20;setting&#x20;of&#x20;64','During&#x20;boot&#x20;if&#x20;audit=1,&#x20;then&#x20;the&#x20;backlog&#x20;will&#x20;hold&#x20;64&#x20;records.&#x20;If&#x20;more&#x20;than&#x20;64&#x20;records&#x20;are&#x20;created&#x20;during&#x20;boot,&#x20;auditd&#x20;records&#x20;will&#x20;be&#x20;lost&#x20;and&#x20;potential&#x20;malicious&#x20;activity&#x20;could&#x20;go&#x20;undetected','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit_backlog_limit=&lt;BACKLOG&#x20;SIZE&gt;&#x20;&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;&#x20;&#x20;Example:&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;audit_backlog_limit=8192&quot;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"cis_level\": [\"2\"]}]'),(6120,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected.','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/time-change.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/time-change.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6121,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected.','Record&#x20;events&#x20;affecting&#x20;the&#x20;group,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/identity.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6122,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected.','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.5\", \"6.2\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6123,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected.','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;&#x20;the&#x20;/etc/selinux/&#x20;and&#x20;/usr/share/selinux/&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;the&#x20;/etc/selinux/&#x20;and&#x20;/usr/share/selinux/&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/MAC-policy.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6124,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected.','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;/var/run/faillock/&#x20;directory&#x20;maintains&#x20;records&#x20;of&#x20;login&#x20;failures&#x20;via&#x20;the&#x20;pam_faillock&#x20;module.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/logins.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillog/&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;IF&#x20;&#x20;&#x20;the&#x20;pam_faillock.so&#x20;module&#x20;is&#x20;used:&#x20;Also&#x20;include&#x20;the&#x20;line:&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;OR&#x20;IF&#x20;the&#x20;pam_tally2.so&#x20;module&#x20;is&#x20;used:&#x20;Also&#x20;include&#x20;the&#x20;line:&#x20;&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6125,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected.','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/logins.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;&#x20;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;&#x20;last&#x20;-f&#x20;/var/run/utmp&#x20;&#41;&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"cis_level\": [\"2\"]}]'),(6126,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected.','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown,&#x20;fchown,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr,&#x20;lsetxattr,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr,&#x20;lremovexattr,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/perm_mod.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/perm_mod.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6127,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected.','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6128,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected.','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/mount.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/mounts.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.12\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6129,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected.','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;ollowing&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;:&#x20;unlink&#x20;-remove&#x20;a&#x20;file&#x20;&#x20;&#x20;&#x20;&#x20;unlinkat&#x20;-&#x20;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#x20;and&#x20;renameat&#x20;-&#x20;rename&#x20;a&#x20;file&#x20;attribute.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/delete.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/delete.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"6.2\", \"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}, {\"cis_level\": [\"2\"]}]'),(6130,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected.','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrators.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/sudoers.d&#x20;directory&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file,&#x20;or&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/sudoers.d/&#x20;directory&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/scope.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines::&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6131,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected.','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;The&#x20;sudo&#x20;log&#x20;file&#x20;is&#x20;configured&#x20;in&#x20;/etc/sudoersor&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;sudo&#x20;log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/action.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions&#x20;.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.9\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6132,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected.','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/modules.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/directory&#x20;ending&#x20;in&#x20;.rules&#x20;&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/modules.rules&#x20;Add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6133,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable.','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rulesand&#x20;add&#x20;the&#x20;following&#x20;line&#x20;at&#x20;the&#x20;end&#x20;of&#x20;the&#x20;file:&#x20;&#x20;-e&#x20;2','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6134,'Ensure&#x20;rsyslog&#x20;is&#x20;installed.','The&#x20;rsyslog&#x20;software&#x20;is&#x20;a&#x20;recommended&#x20;replacement&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon.&#x20;rsyslog&#x20;provides&#x20;improvements&#x20;over&#x20;syslogd,&#x20;including:&#x20;&#x20;&#x20;-&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs&#x20;&#x20;&#x20;&#x20;&#x20;-&#x20;The&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats&#x20;&#x20;&#x20;&#x20;-&#x20;Encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;rsyslog:&#x20;#&#x20;yum&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6135,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled&#x20;and&#x20;running.','rsyslogneeds&#x20;to&#x20;be&#x20;enabled&#x20;and&#x20;running&#x20;to&#x20;perform&#x20;logging','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lackblogging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6136,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured.','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6137,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host.','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;&#x20;systemctl&#x20;restart&#x20;rsyslog','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6138,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog&#x20;.','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6139,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files.','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6140,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;write&#x20;logfiles&#x20;to&#x20;persistent&#x20;disk.','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Storage=persistent','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6141,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured.','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.&#x20;&#x20;Other/world&#x20;should&#x20;not&#x20;have&#x20;the&#x20;ability&#x20;to&#x20;view&#x20;this&#x20;information.&#x20;Group&#x20;should&#x20;not&#x20;have&#x20;the&#x20;ability&#x20;to&#x20;modify&#x20;this&#x20;information.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+&#x20;-o&#x20;-type&#x20;d&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6142,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled.','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;systemctl&#x20;enable&#x20;crond;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6143,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured.','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/crontab;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6144,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured.','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6145,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured.','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6146,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured.','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6147,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured.','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6148,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured.','The&#x20;/etc/cron.d/directory&#x20;contains&#x20;system&#x20;cronjobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;in&#x20;a&#x20;similar&#x20;manner&#x20;to&#x20;the&#x20;hourly,&#x20;daily&#x20;weekly&#x20;and&#x20;monthly&#x20;jobs&#x20;from&#x20;/etc/crontab,&#x20;but&#x20;require&#x20;more&#x20;granular&#x20;control&#x20;as&#x20;to&#x20;when&#x20;they&#x20;run.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;:&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.d;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.d;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6149,'Ensure&#x20;cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users.','If&#x20;cronis&#x20;installed&#x20;in&#x20;the&#x20;system,&#x20;configure&#x20;/etc/cron.allowto&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allowdoes&#x20;not&#x20;exist,&#x20;then&#x20;/etc/cron.denyis&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;file,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.alloware&#x20;allowed&#x20;to&#x20;use&#x20;cron.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allowfile&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cronjobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6150,'Ensure&#x20;at&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users.','If&#x20;atis&#x20;installed&#x20;in&#x20;the&#x20;system,&#x20;configure&#x20;/etc/at.allowto&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/at.allowdoes&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.denyis&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at.&#x20;By&#x20;removing&#x20;the&#x20;file,&#x20;only&#x20;users&#x20;in&#x20;/etc/at.alloware&#x20;allowed&#x20;to&#x20;use&#x20;at.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;atjobs.&#x20;Using&#x20;the&#x20;at.allowfile&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;atjobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6151,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6152,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured.','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions,&#x20;ownership,&#x20;and&#x20;group&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;u-x,g-wx,o-rwx&#x20;{}&#x20;;&#x20;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:ssh_keys&#x20;{}&#x20;;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6153,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;public&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured.','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;u-x,go-wx&#x20;{}&#x20;;&#x20;&#x20;&#x20;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6154,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited.','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;#&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;#&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;#&#x20;DenyUsers&#x20;&lt;userlist&gt;;&#x20;#&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6155,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate.','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6156,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled.','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"pci_dss\": [\"9.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6157,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less.','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6158,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled.','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6159,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled.','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6160,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled.','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6161,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled.','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6162,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled.','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6163,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured.','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised.:&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&#039;Sweet32&#039;&#x20;attack;&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involvingLSB&#x20;values,&#x20;aka&#x20;the&#x20;&#039;Bar&#x20;Mitzvah&#039;&#x20;issue;&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session;&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors;&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;add/modify&#x20;the&#x20;Ciphersline&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphersExample:Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6164,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used.','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"14.4\", \"16.5\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6165,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used.','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms.Example:&#039;KexAlgorithms&#x20;curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256&#039;','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6166,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured.','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6167,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less.','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6168,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured.','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6169,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled.','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthenticationand&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6170,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled.','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6171,'Ensure&#x20;SSH&#x20;MaxStartups&#x20;is&#x20;configured.','The&#x20;MaxStartupsparameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;to&#x20;the&#x20;SSH&#x20;daemon','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;maxstartups&#x20;10:30:60','[{\"cis\": [\"5.2.21\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6172,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;limited.','The&#x20;MaxSessionsparameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;10','[{\"cis\": [\"5.2.22\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6173,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured.','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;length&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;complexity&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minclass&#x20;=&#x20;4&#x20;&#x20;&#x20;&#x20;OR&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:password&#x20;requisite&#x20;pam_pwquality.so&#x20;try_first_pass&#x20;retry=3','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6174,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512.','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;changes&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}, {\"cis_level\": [\"1\"]}]'),(6175,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited.','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;changes&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;remember=5&#x20;&#x20;&#x20;or&#x20;&#x20;&#x20;&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6176,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less.','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6177,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;configured.','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;1&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;1&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;1&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6178,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more.','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6179,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less.','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6180,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0.','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6181,'&#x20;Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;configured.','TMOUT&#x20;is&#x20;an&#x20;environmental&#x20;setting&#x20;that&#x20;determines&#x20;the&#x20;timeout&#x20;of&#x20;a&#x20;shell&#x20;in&#x20;seconds.','Setting&#x20;a&#x20;timeout&#x20;value&#x20;reduces&#x20;the&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;that&#x20;has&#x20;been&#x20;left&#x20;unattended.&#x20;It&#x20;also&#x20;ends&#x20;the&#x20;inactive&#x20;session&#x20;and&#x20;releases&#x20;the&#x20;resources&#x20;associated&#x20;with&#x20;that&#x20;session.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;and&#x20;/etc/profile&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6182,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;configured.','The&#x20;user&#x20;file-creation&#x20;mode&#x20;mask&#x20;&#40;umask&#41;&#x20;is&#x20;use&#x20;to&#x20;determine&#x20;the&#x20;file&#x20;permission&#x20;for&#x20;newly&#x20;created&#x20;directories&#x20;and&#x20;files.&#x20;In&#x20;Linux,&#x20;the&#x20;default&#x20;permissions&#x20;for&#x20;any&#x20;newly&#x20;created&#x20;directory&#x20;is&#x20;0777&#x20;&#40;rwxrwxrwx&#41;,&#x20;and&#x20;for&#x20;any&#x20;newly&#x20;created&#x20;file&#x20;it&#x20;is&#x20;0666&#x20;&#40;rw-rw-rw-&#41;.&#x20;The&#x20;umask&#x20;modifies&#x20;the&#x20;default&#x20;Linux&#x20;permissions&#x20;by&#x20;restricting&#x20;&#40;masking&#41;&#x20;these&#x20;permissions.&#x20;The&#x20;umask&#x20;is&#x20;not&#x20;simply&#x20;subtracted,&#x20;but&#x20;is&#x20;processed&#x20;bitwise.&#x20;Bits&#x20;set&#x20;in&#x20;the&#x20;umaskare&#x20;cleared&#x20;in&#x20;the&#x20;resulting&#x20;file&#x20;mode.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6183,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted..','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6184,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured.','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;&#x20;&#x20;#&#x20;chmod&#x20;u-x,g-wx,o-wx&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6185,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured.','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"cis_level\": [\"1\"]}]'),(6186,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured.','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;u-x,g-wx,o-wx&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6187,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured.','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6188,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured.','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6189,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured.','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6190,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured.','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6191,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured.','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6192,'Ensure&#x20;accounts&#x20;in&#x20;/etc/passwd&#x20;use&#x20;shadowed&#x20;passwords.','Local&#x20;accounts&#x20;can&#x20;uses&#x20;shadowed&#x20;passwords.&#x20;With&#x20;shadowed&#x20;passwords,&#x20;The&#x20;passwords&#x20;are&#x20;saved&#x20;in&#x20;shadow&#x20;password&#x20;file,&#x20;/etc/shadow,&#x20;encrypted&#x20;by&#x20;a&#x20;salted&#x20;one-way&#x20;hash.&#x20;Accounts&#x20;with&#x20;a&#x20;shadowed&#x20;password&#x20;have&#x20;an&#x20;xin&#x20;the&#x20;second&#x20;field&#x20;in&#x20;/etc/passwd.','The&#x20;/etc/passwd&#x20;file&#x20;also&#x20;contains&#x20;information&#x20;like&#x20;user&#x20;ID&#039;s&#x20;and&#x20;group&#x20;ID&#039;s&#x20;that&#x20;are&#x20;used&#x20;by&#x20;many&#x20;system&#x20;programs.&#x20;Therefore,&#x20;the&#x20;/etc/passwd&#x20;file&#x20;must&#x20;remain&#x20;world&#x20;readable.&#x20;In&#x20;spite&#x20;of&#x20;encoding&#x20;the&#x20;password&#x20;with&#x20;a&#x20;randomly-generated&#x20;one-way&#x20;hash&#x20;function,&#x20;an&#x20;attacker&#x20;could&#x20;still&#x20;break&#x20;the&#x20;system&#x20;if&#x20;they&#x20;got&#x20;access&#x20;to&#x20;the&#x20;/etc/passwd&#x20;file.&#x20;This&#x20;can&#x20;be&#x20;mitigated&#x20;by&#x20;using&#x20;shadowed&#x20;passwords,&#x20;thus&#x20;moving&#x20;the&#x20;passwords&#x20;in&#x20;the&#x20;/etc/passwd&#x20;file&#x20;to&#x20;/etc/shadow.&#x20;The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;set&#x20;so&#x20;only&#x20;root&#x20;will&#x20;be&#x20;able&#x20;to&#x20;read&#x20;and&#x20;write.&#x20;This&#x20;helps&#x20;mitigate&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;encoded&#x20;passwords&#x20;with&#x20;which&#x20;to&#x20;perform&#x20;a&#x20;dictionary&#x20;attack.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/passwd&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;single&#x20;x&#x20;in&#x20;the&#x20;password&#x20;field,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;these&#x20;accounts&#x20;to&#x20;use&#x20;shadowed&#x20;passwords:#&#x20;sed&#x20;-e&#x20;&#039;s/^&#40;[a-zA-Z0-9_]*&#41;:[^:]*:/1:x:/&#039;&#x20;-i&#x20;/etc/passwdInvestigate&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for,&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6193,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty.','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6194,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account.','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6195,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty.','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;runa&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6500,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/cramfs.conf:&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;#&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(6501,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;limited','The&#x20;VFAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/vfat.conf:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;#&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(6502,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/squashfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(6503,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/udf.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(6504,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.&#x20;This&#x20;can&#x20;be&#x20;accomplished&#x20;by&#x20;either&#x20;mounting&#x20;tmpfs&#x20;to&#x20;/tmp,&#x20;or&#x20;creating&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;example:&#x20;&quot;tmpfs&#x20;&#x20;/tmp&#x20;&#x20;tmpfs&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;&#x20;0&#x20;0&quot;&#x20;&#x20;OR&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;#&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;#&#x20;systemctl&#x20;enable&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount:&#x20;&#x20;&#x20;[Mount]&#x20;What=tmpfs&#x20;Where=/tmp&#x20;Type=tmpfs&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6505,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;OR&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6506,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6507,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6508,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6509,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6510,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6511,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6512,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6513,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6514,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6515,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6516,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6517,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6518,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6519,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6520,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs&#x20;:&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6521,'Disable&#x20;USB&#x20;Storage','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/usb-storage.conf&#x20;&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;&#x20;#&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6522,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(6523,'Ensure&#x20;sudo&#x20;is&#x20;installed','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;sudo:&#x20;#&#x20;dnf&#x20;install&#x20;sudo','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6524,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo&#x20;which&#x20;would&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6525,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;logfile=&quot;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6526,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;aide:&#x20;#&#x20;dnf&#x20;install&#x20;aide&#x20;&#x20;||&#x20;&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6527,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','&#x20;Run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;cp&#x20;./config/aidecheck.service&#x20;/etc/systemd/system/aidecheck.service&#x20;&#x20;#&#x20;cp&#x20;./config/aidecheck.timer&#x20;/etc/systemd/system/aidecheck.timer&#x20;&#x20;&#x20;#&#x20;chmod&#x20;0644&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;#&#x20;systemctl&#x20;reenable&#x20;aidecheck.timer&#x20;#&#x20;systemctl&#x20;restart&#x20;aidecheck.timer&#x20;#&#x20;systemctl&#x20;daemon-reload.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;//&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6528,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;and&#x20;grubenv&#x20;stored&#x20;in&#x20;/boot/grub2/','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grub.cfg&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grub.cfg&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grubenv&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grubenv','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6529,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-setpassword:&#x20;#&#x20;grub2-setpassword&#x20;&#x20;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6530,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/usr/lib/systemd/system/rescue.service&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;line:&#x20;ExecStart=-/usr/lib/systemd/systemd-sulogin-shell&#x20;rescue&#x20;Edit&#x20;/usr/lib/systemd/system/emergency.service&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;line:&#x20;ExecStart=-/usr/lib/systemd/systemd-sulogin-shell&#x20;emergency','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6531,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0.&#x20;If&#x20;systemd-coredump&#x20;is&#x20;installed:&#x20;&#x20;edit&#x20;/etc/systemd/coredump.conf&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;lines:&#x20;Storage=none&#x20;ProcessSizeMax=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;command:&#x20;#&#x20;systemctl&#x20;daemon-reload','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6532,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6533,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Control.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;SELinux&#x20;:&#x20;#&#x20;dnf&#x20;install&#x20;libselinux','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6534,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6535,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6536,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6537,'Ensure&#x20;no&#x20;unconfined&#x20;services&#x20;exist','Unconfined&#x20;processes&#x20;run&#x20;in&#x20;unconfined&#x20;domains','For&#x20;unconfined&#x20;processes,&#x20;SELinux&#x20;policy&#x20;rules&#x20;are&#x20;applied,&#x20;but&#x20;policy&#x20;rules&#x20;exist&#x20;that&#x20;allow&#x20;processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;almost&#x20;all&#x20;access.&#x20;Processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;fall&#x20;back&#x20;to&#x20;using&#x20;DAC&#x20;rules&#x20;exclusively.&#x20;If&#x20;an&#x20;unconfined&#x20;process&#x20;is&#x20;compromised,&#x20;SELinux&#x20;does&#x20;not&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;system&#x20;resources&#x20;and&#x20;data,&#x20;but&#x20;of&#x20;course,&#x20;DAC&#x20;rules&#x20;are&#x20;still&#x20;used.&#x20;SELinux&#x20;is&#x20;a&#x20;security&#x20;enhancement&#x20;on&#x20;top&#x20;of&#x20;DAC&#x20;rules&#x20;&ndash;&#x20;it&#x20;does&#x20;not&#x20;replace&#x20;them','','Investigate&#x20;any&#x20;unconfined&#x20;processes&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.&#x20;Notes:&#x20;Occasionally&#x20;certain&#x20;daemons&#x20;such&#x20;as&#x20;backup&#x20;or&#x20;centralized&#x20;management&#x20;software&#x20;may&#x20;require&#x20;running&#x20;unconfined.&#x20;Any&#x20;such&#x20;software&#x20;should&#x20;be&#x20;carefully&#x20;analyzed&#x20;and&#x20;documented&#x20;before&#x20;such&#x20;an&#x20;exception&#x20;is&#x20;made.','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6538,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;dnf&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6539,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;dnf&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6540,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;FUTURE&#x20;or&#x20;FIPS','The&#x20;system-wide&#x20;crypto-policies&#x20;followed&#x20;by&#x20;the&#x20;crypto&#x20;core&#x20;components&#x20;allow&#x20;consistently&#x20;deprecating&#x20;and&#x20;disabling&#x20;algorithms&#x20;system-wide.&#x20;The&#x20;individual&#x20;policy&#x20;levels&#x20;&#40;DEFAULT,&#x20;LEGACY,&#x20;FUTURE,&#x20;and&#x20;FIPS&#41;&#x20;are&#x20;included&#x20;in&#x20;the&#x20;crypto-policies&#40;7&#41;&#x20;package.','If&#x20;the&#x20;Legacy&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;selected,&#x20;it&#x20;includes&#x20;support&#x20;for&#x20;TLS&#x20;1.0,&#x20;TLS&#x20;1.1,&#x20;and&#x20;SSH2&#x20;protocols&#x20;or&#x20;later.&#x20;The&#x20;algorithms&#x20;DSA,&#x20;3DES,&#x20;and&#x20;RC4&#x20;are&#x20;allowed,&#x20;while&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;1023-bits.&#x20;These&#x20;legacy&#x20;protocols&#x20;and&#x20;algorithms&#x20;can&#x20;make&#x20;the&#x20;system&#x20;vulnerable&#x20;to&#x20;attacks,&#x20;including&#x20;those&#x20;listed&#x20;in&#x20;RFC&#x20;7457&#x20;FUTURE:&#x20;Is&#x20;a&#x20;conservative&#x20;security&#x20;level&#x20;that&#x20;is&#x20;believed&#x20;to&#x20;withstand&#x20;any&#x20;near-term&#x20;future&#x20;attacks.&#x20;This&#x20;level&#x20;does&#x20;not&#x20;allow&#x20;the&#x20;use&#x20;of&#x20;SHA-1&#x20;in&#x20;signature&#x20;algorithms.&#x20;The&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;3071&#x20;bits.&#x20;The&#x20;level&#x20;provides&#x20;at&#x20;least&#x20;128-bit&#x20;security&#x20;FIPS:&#x20;Conforms&#x20;to&#x20;the&#x20;FIPS&#x20;140-2&#x20;requirements.&#x20;This&#x20;policy&#x20;is&#x20;used&#x20;internally&#x20;by&#x20;the&#x20;fips-mode-setup&#40;8&#41;&#x20;tool&#x20;which&#x20;can&#x20;switch&#x20;the&#x20;system&#x20;into&#x20;the&#x20;FIPS&#x20;140-2&#x20;compliance&#x20;mode.&#x20;The&#x20;level&#x20;provides&#x20;at&#x20;least&#x20;112-bit&#x20;security','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;change&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;FUTURE&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;switch&#x20;the&#x20;system&#x20;to&#x20;FIPS&#x20;mode,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;fips-mode-setup&#x20;--enable','[{\"cis\": [\"1.11\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6541,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(6542,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(6543,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(6544,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6545,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6546,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6547,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add&#x20;the&#x20;following&#x20;in&#x20;3&#x20;lines:&#x20;&#40;1&#41;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#40;2&#41;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#40;3&#41;&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.8.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(6548,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;command&#x20;will&#x20;install&#x20;all&#x20;available&#x20;security&#x20;updates:&#x20;#&#x20;dnf&#x20;update&#x20;--security&#x20;.&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;and&#x20;comparing&#x20;against&#x20;site&#x20;policy:&#x20;#&#x20;dnf&#x20;check-update','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(6549,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;not&#x20;legacy','The&#x20;system-wide&#x20;crypto-policies&#x20;followed&#x20;by&#x20;the&#x20;crypto&#x20;core&#x20;components&#x20;allow&#x20;consistently&#x20;deprecating&#x20;and&#x20;disabling&#x20;algorithms&#x20;system-wide.&#x20;The&#x20;individual&#x20;policy&#x20;levels&#x20;&#40;DEFAULT,&#x20;LEGACY,&#x20;FUTURE,&#x20;and&#x20;FIPS&#41;&#x20;are&#x20;included&#x20;in&#x20;the&#x20;crypto-policies&#40;7&#41;&#x20;package.','If&#x20;the&#x20;Legacy&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;selected,&#x20;it&#x20;includes&#x20;support&#x20;for&#x20;TLS&#x20;1.0,&#x20;TLS&#x20;1.1,&#x20;and&#x20;SSH2&#x20;protocols&#x20;or&#x20;later.&#x20;The&#x20;algorithms&#x20;DSA,&#x20;3DES,&#x20;and&#x20;RC4&#x20;are&#x20;allowed,&#x20;while&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;1023-bits.&#x20;These&#x20;legacy&#x20;protocols&#x20;and&#x20;algorithms&#x20;can&#x20;make&#x20;the&#x20;system&#x20;vulnerable&#x20;to&#x20;attacks,&#x20;including&#x20;those&#x20;listed&#x20;in&#x20;RFC&#x20;7457','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;change&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;&lt;CRYPTO&#x20;POLICY&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Example:&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;DEFAULT&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;make&#x20;the&#x20;updated&#x20;system-wide&#x20;crypto&#x20;policy&#x20;active&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;update-crypto-policies','[{\"cis\": [\"1.10\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6550,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;dnf&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6551,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;install&#x20;chrony:&#x20;#&#x20;dnf&#x20;install&#x20;chrony&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;verify&#x20;that&#x20;host&#x20;based&#x20;synchronization&#x20;is&#x20;in&#x20;use.','[{\"cis\": [\"2.2.2.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6552,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;&#x20;&#x20;Configure&#x20;chrony&#x20;to&#x20;run&#x20;as&#x20;the&#x20;chrony&#x20;user','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6553,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;dnf&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6554,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rsyncd','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6555,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6556,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6557,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6558,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;smb','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6559,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dovecot','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6560,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;httpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6561,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6562,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;named','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6563,'Ensure&#x20;NFS&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;NFS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;nfs','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6564,'Ensure&#x20;RPC&#x20;is&#x20;not&#x20;enabled','The&#x20;rpcbind&#x20;service&#x20;maps&#x20;Remote&#x20;Procedure&#x20;Call&#x20;&#40;RPC&#41;&#x20;services&#x20;to&#x20;the&#x20;ports&#x20;on&#x20;which&#x20;they&#x20;listen.&#x20;RPC&#x20;processes&#x20;notify&#x20;rpcbind&#x20;when&#x20;they&#x20;start,&#x20;registering&#x20;the&#x20;ports&#x20;they&#x20;are&#x20;listening&#x20;on&#x20;and&#x20;the&#x20;RPC&#x20;program&#x20;numbers&#x20;they&#x20;expect&#x20;to&#x20;serve.&#x20;The&#x20;client&#x20;system&#x20;then&#x20;contacts&#x20;rpcbind&#x20;on&#x20;the&#x20;server&#x20;with&#x20;a&#x20;particular&#x20;RPC&#x20;program&#x20;number.&#x20;The&#x20;rpcbind&#x20;service&#x20;redirects&#x20;the&#x20;client&#x20;to&#x20;the&#x20;proper&#x20;port&#x20;number&#x20;so&#x20;it&#x20;can&#x20;communicate&#x20;with&#x20;the&#x20;requested&#x20;service.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;require&#x20;rpc&#x20;based&#x20;services,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;rpcbind&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6565,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6566,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dhcpd','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6567,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6568,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;ypserv','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6569,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.18\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(6570,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;dnf&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6571,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet&#x20;:&#x20;#&#x20;dnf&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6572,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;dnf&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6573,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.ip_forwards*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;&#x20;&#x20;&#x20;&amp;&amp;&#x20;&#x20;&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv6.conf.all.forwardings*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv6.conf.all.forwardings*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6574,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;.Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6575,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6576,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv6.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;and&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6577,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;and&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6578,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;and&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6579,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.icmp_echo_ignore_broadcastss*=s*0&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;&quot;s/^s*&#40;net.ipv4.icmp_echo_ignore_broadcastss*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.icmp_echo_ignore_broadcasts=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6580,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.icmp_ignore_bogus_error_responsess*=s*0&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.icmp_ignore_bogus_error_responsess*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&quot;','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6581,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.conf.all.rp_filters*=s*0&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.net.ipv4.conf.all.rp_filters*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;.Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.default.rp_filter=1&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6582,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.tcp_syncookiess*=s*[02]*&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.tcp_syncookiess*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6583,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;do&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1;','[{\"cis\": [\"3.2.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6584,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6585,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6586,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6587,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6588,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;.Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"3.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.6\", \"CC5.2\"]}]'),(6589,'Ensure&#x20;a&#x20;Firewall&#x20;package&#x20;is&#x20;installed','A&#x20;Firewall&#x20;package&#x20;should&#x20;be&#x20;selected.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;nftables&#x20;or&#x20;iptables.','A&#x20;Firewall&#x20;package&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;a&#x20;Firewall&#x20;package.&#x20;For&#x20;firewalld:&#x20;dnf&#x20;install&#x20;firewalld&#x20;.For&#x20;nftables:&#x20;#&#x20;dnf&#x20;install&#x20;nftables.&#x20;For&#x20;iptables:&#x20;#&#x20;dnf&#x20;install&#x20;iptables','[{\"cis\": [\"3.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6590,'Ensure&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running','Ensure&#x20;that&#x20;the&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;to&#x20;protect&#x20;your&#x20;system','firewalld&#x20;&#40;Dynamic&#x20;Firewall&#x20;Manager&#41;&#x20;tool&#x20;provides&#x20;a&#x20;dynamically&#x20;managed&#x20;firewall.&#x20;The&#x20;tool&#x20;enables&#x20;network/firewall&#x20;zones&#x20;to&#x20;define&#x20;the&#x20;trust&#x20;level&#x20;of&#x20;network&#x20;connections&#x20;and/or&#x20;interfaces.&#x20;It&#x20;has&#x20;support&#x20;both&#x20;for&#x20;IPv4&#x20;and&#x20;IPv6&#x20;firewall&#x20;settings.&#x20;Also,&#x20;it&#x20;supports&#x20;Ethernet&#x20;bridges&#x20;and&#x20;allow&#x20;you&#x20;to&#x20;separate&#x20;between&#x20;runtime&#x20;and&#x20;permanent&#x20;configuration&#x20;options.&#x20;Finally,&#x20;it&#x20;supports&#x20;an&#x20;interface&#x20;for&#x20;services&#x20;or&#x20;applications&#x20;to&#x20;add&#x20;firewall&#x20;rules&#x20;directly','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;firewalld','[{\"cis\": [\"3.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6591,'Ensure&#x20;nftables&#x20;is&#x20;not&#x20;enabled','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.&#x20;nftables&#x20;are&#x20;installed&#x20;as&#x20;a&#x20;dependency&#x20;with&#x20;firewalld.','Running&#x20;firewalld&#x20;and&#x20;nftables&#x20;concurrently&#x20;may&#x20;lead&#x20;to&#x20;conflict,&#x20;therefore&#x20;nftables&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;when&#x20;using&#x20;firewalld.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;mask&#x20;and&#x20;stop&#x20;nftables:&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables','[{\"cis\": [\"3.4.2.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6592,'Ensure&#x20;iptables&#x20;is&#x20;not&#x20;enabled','IPtables&#x20;is&#x20;an&#x20;application&#x20;that&#x20;allows&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;configure&#x20;the&#x20;IPv4&#x20;and&#x20;IPv6&#x20;tables,&#x20;chains&#x20;and&#x20;rules&#x20;provided&#x20;by&#x20;the&#x20;Linux&#x20;kernel&#x20;firewall.&#x20;IPtables&#x20;is&#x20;installed&#x20;as&#x20;a&#x20;dependency&#x20;with&#x20;firewalld.','Running&#x20;firewalld&#x20;and&#x20;IPtables&#x20;concurrently&#x20;may&#x20;lead&#x20;to&#x20;conflict,&#x20;therefore&#x20;IPtables&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;when&#x20;using&#x20;firewalld.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;iptables:&#x20;systemctl&#x20;--now&#x20;mask&#x20;iptables','[{\"cis\": [\"3.4.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6593,'Ensure&#x20;iptables&#x20;are&#x20;flushed','nftables&#x20;is&#x20;a&#x20;replacement&#x20;for&#x20;iptables,&#x20;ip6tables,&#x20;ebtables&#x20;and&#x20;arptables','It&#x20;is&#x20;possible&#x20;to&#x20;mix&#x20;iptables&#x20;and&#x20;nftables.&#x20;However,&#x20;this&#x20;increases&#x20;complexity&#x20;and&#x20;also&#x20;the&#x20;chance&#x20;to&#x20;introduce&#x20;errors.&#x20;For&#x20;simplicity&#x20;flush&#x20;out&#x20;all&#x20;iptables&#x20;rules,&#x20;and&#x20;ensure&#x20;it&#x20;is&#x20;not&#x20;loaded.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;flush&#x20;iptables:&#x20;For&#x20;iptables:&#x20;#&#x20;iptables&#x20;-F&#x20;and&#x20;For&#x20;ip6tables:&#x20;#&#x20;ip6tables&#x20;-F','[{\"cis\": [\"3.4.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6594,'Ensure&#x20;a&#x20;table&#x20;exists','Tables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;.Example:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;filter','[{\"cis\": [\"3.4.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6595,'Ensure&#x20;base&#x20;chains&#x20;exist','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;input&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;forward&#x20;priority&#x20;0;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;output&#x20;priority&#x20;0&#x20;;&#x20;}','[{\"cis\": [\"3.4.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6596,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept&#x20;,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;transversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;;&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;and&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.4.3.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6597,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conf&#x20;file&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;nftables','[{\"cis\": [\"3.4.3.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6598,'Configure&#x20;IPv4&#x20;iptables','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.4.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6599,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.4.4.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6600,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.4.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6601,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.4.4.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6602,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.&#x20;CentOS&#x20;Linux&#x20;contains&#x20;a&#x20;wireless&#x20;tool&#x20;kit&#x20;to&#x20;allow&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;and&#x20;use&#x20;wireless&#x20;networks.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;nmcli&#x20;radio&#x20;all&#x20;off&#x20;.&#x20;Disable&#x20;any&#x20;wireless&#x20;interfaces&#x20;in&#x20;your&#x20;network&#x20;configuration.','[{\"cis\": [\"3.5\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"1.2.3\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6603,'Ensure&#x20;auditd&#x20;is&#x20;installed','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;Install&#x20;auditd&#x20;#&#x20;dnf&#x20;install&#x20;audit&#x20;audit-libs','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6604,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6605,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub2&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX&#x20;:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6606,'Ensure&#x20;audit_backlog_limit&#x20;is&#x20;sufficient','The&#x20;backlog&#x20;limit&#x20;has&#x20;a&#x20;default&#x20;setting&#x20;of&#x20;64.','During&#x20;boot&#x20;if&#x20;audit=1,&#x20;then&#x20;the&#x20;backlog&#x20;will&#x20;hold&#x20;64&#x20;records.&#x20;If&#x20;more&#x20;than&#x20;64&#x20;records&#x20;are&#x20;created&#x20;during&#x20;boot,&#x20;auditd&#x20;records&#x20;will&#x20;be&#x20;lost&#x20;and&#x20;potential&#x20;malicious&#x20;activity&#x20;could&#x20;go&#x20;undetected.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit_backlog_limit=&lt;BACKLOG&#x20;SIZE&gt;&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6607,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6608,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6609,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(6610,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6611,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.9\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6612,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"4.9\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6613,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6614,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6615,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6616,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6617,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6618,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6619,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts','[{\"cis\": [\"4.1.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6620,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(6621,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod&#x20;,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6622,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"4.9\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6623,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rules&#x20;and&#x20;add&#x20;the&#x20;line:&#x20;&#x20;&#x20;-e&#x20;2&#x20;&#x20;&#x20;&#x20;at&#x20;the&#x20;end&#x20;of&#x20;the&#x20;file','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6624,'Ensure&#x20;rsyslog&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;software&#x20;is&#x20;a&#x20;recommended&#x20;replacement&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;rsyslog:&#x20;&#x20;&#x20;#&#x20;dnf&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6625,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6626,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(6627,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6628,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(6629,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6630,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;write&#x20;logfiles&#x20;to&#x20;persistent&#x20;disk','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6631,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitivebdata&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;{}&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(6632,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;crond','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6633,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6634,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6635,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6636,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6637,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6638,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.d&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.d','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6639,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6640,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6641,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;and&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6642,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;0600&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6643,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;public&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;0644&#x20;{}&#x20;;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6644,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6645,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6646,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6647,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Ignorerhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6648,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6649,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6650,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6651,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6652,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(6653,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6654,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6655,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthentication&#x20;and&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types.','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6656,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines.','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.&#x20;SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6657,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxSessions&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;concurrent&#x20;sessions,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxSessions&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;4','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6658,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;not&#x20;over-ridden','System-wide&#x20;Crypto&#x20;policy&#x20;can&#x20;be&#x20;over-ridden&#x20;or&#x20;opted&#x20;out&#x20;of&#x20;for&#x20;openSSH','Over-riding&#x20;or&#x20;opting&#x20;out&#x20;of&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;could&#x20;allow&#x20;for&#x20;the&#x20;use&#x20;of&#x20;less&#x20;secure&#x20;Ciphers,&#x20;MACs,&#x20;KexAlgoritms&#x20;and&#x20;GSSAPIKexAlgorithsm','','Run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;CRYPTO_POLICYs*=.*&#41;$/#&#x20;1/&quot;&#x20;/etc/sysconfig/sshd;&#x20;#&#x20;systemctl&#x20;reload&#x20;sshd','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6659,'Create&#x20;custom&#x20;authselect&#x20;profile','A&#x20;custom&#x20;profile&#x20;can&#x20;be&#x20;created&#x20;by&#x20;copying&#x20;and&#x20;customizing&#x20;one&#x20;of&#x20;the&#x20;default&#x20;profiles.&#x20;The&#x20;default&#x20;profiles&#x20;include:&#x20;sssd,&#x20;winbind,&#x20;or&#x20;the&#x20;nis.','A&#x20;custom&#x20;profile&#x20;is&#x20;required&#x20;to&#x20;customize&#x20;many&#x20;of&#x20;the&#x20;pam&#x20;options','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;custom&#x20;authselect&#x20;profile:&#x20;#&#x20;authselect&#x20;create-profile&#x20;&lt;custom-profile&#x20;name&gt;&#x20;-b&#x20;&lt;default&#x20;profile&#x20;to&#x20;copy&gt;&#x20;.Example:&#x20;#&#x20;authselect&#x20;create-profile&#x20;custom-profile&#x20;-b&#x20;sssd&#x20;--symlink-meta','[{\"cis\": [\"5.3.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6660,'Ensure&#x20;authselect&#x20;includes&#x20;with-faillock','The&#x20;pam_faillock.so&#x20;module&#x20;maintains&#x20;a&#x20;list&#x20;of&#x20;failed&#x20;authentication&#x20;attempts&#x20;per&#x20;user&#x20;during&#x20;a&#x20;specified&#x20;interval&#x20;and&#x20;locks&#x20;the&#x20;account&#x20;in&#x20;case&#x20;there&#x20;were&#x20;more&#x20;than&#x20;deny&#x20;consecutive&#x20;failed&#x20;authentications.&#x20;It&#x20;stores&#x20;the&#x20;failure&#x20;records&#x20;into&#x20;per-user&#x20;files&#x20;in&#x20;the&#x20;tally&#x20;directory.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;include&#x20;the&#x20;with-faillock&#x20;option:&#x20;#&#x20;authselect&#x20;select&#x20;&lt;PROFILE&#x20;NAME&gt;&#x20;with-faillock&#x20;&#x20;&#x20;&#x20;Example:&#x20;#&#x20;authselect&#x20;select&#x20;custom/custom-profile&#x20;with-sudo&#x20;with-faillock&#x20;without-nullok','[{\"cis\": [\"5.3.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6661,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options.&#x20;try_first_pass&#x20;-&#x20;retrieve&#x20;the&#x20;password&#x20;from&#x20;a&#x20;previous&#x20;stacked&#x20;PAM&#x20;module.&#x20;If&#x20;not&#x20;available,&#x20;then&#x20;prompt&#x20;the&#x20;user&#x20;for&#x20;a&#x20;password.&#x20;retry=3&#x20;-&#x20;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure.&#x20;minlen=14&#x20;-&#x20;password&#x20;must&#x20;be&#x20;14&#x20;characters&#x20;or&#x20;more&#x20;Either&#x20;of&#x20;the&#x20;following&#x20;can&#x20;be&#x20;used&#x20;to&#x20;enforce&#x20;complex&#x20;passwords:&#x20;minclass=4&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;four&#x20;classes&#x20;of&#x20;characters&#x20;for&#x20;the&#x20;new&#x20;password&#x20;OR&#x20;dcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;digit&#x20;ucredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;uppercase&#x20;character&#x20;ocredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;special&#x20;character&#x20;lcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;lowercase&#x20;character&#x20;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;length&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;complexity&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minclass&#x20;=&#x20;4&#x20;OR&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;-1&#x20;=&#x20;-1&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;system-auth&#x20;and&#x20;password-auth&#x20;files:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&#039;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&#039;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/$FN&#x20;||&#x20;PTF=/etc/authselect/$FN&#x20;[[&#x20;-z&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+requisites+pam_pwquality.sos+.*enforce-for-roots*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+requisites+pam_pwquality.sos+&#41;&#40;.*&#41;$/12&#x20;enforce-for-root/&#039;&#x20;$PTF&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+requisites+pam_pwquality.sos+.*s+retry=S+s*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;/pwquality/s/retry=S+/retry=3/&#039;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+requisites+pam_pwquality.sos+&#41;&#40;.*&#41;$/12&#x20;retry=3/&#039;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6662,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;deny=&#x20;-&#x20;Number&#x20;of&#x20;attempts&#x20;before&#x20;the&#x20;account&#x20;is&#x20;locked.&#x20;unlock_time=&#x20;-&#x20;Time&#x20;in&#x20;seconds&#x20;before&#x20;the&#x20;account&#x20;is&#x20;unlocked.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;and&#x20;unlock&#x20;time&#x20;to&#x20;follow&#x20;local&#x20;site&#x20;policy.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Set&#x20;password&#x20;lockouts&#x20;and&#x20;unlock&#x20;times&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;system-auth&#x20;and&#x20;password-auth&#x20;files.&#x20;This&#x20;script&#x20;will&#x20;update/add&#x20;the&#x20;deny=5&#x20;and&#x20;unlock_time=900&#x20;options.&#x20;This&#x20;script&#x20;should&#x20;be&#x20;modified&#x20;as&#x20;needed&#x20;to&#x20;follow&#x20;local&#x20;site&#x20;policy.CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&quot;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&quot;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/$FN&#x20;||&#x20;PTF=/etc/authselect/$FN&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*auths+requireds+pam_faillock.sos+.*deny=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;/pam_faillock.so/s/deny=S+/deny=5/g&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^^s*&#40;auths+requireds+pam_faillock.sos+&#41;&#40;.*[^{}]&#41;&#40;{.*}|&#41;$/12&#x20;deny=5&#x20;3/&quot;&#x20;$PTF&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*auths+requireds+pam_faillock.sos+.*unlock_time=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;/pam_faillock.so/s/unlock_time=S+/unlock_time=900/g&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;auths+requireds+pam_faillock.sos+&#41;&#40;.*[^{}]&#41;&#40;{.*}|&#41;$/12&#x20;unlock_time=900&#x20;3/&quot;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6663,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&quot;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.&#x20;remember=&lt;5&gt;&#x20;-&#x20;Number&#x20;of&#x20;old&#x20;passwords&#x20;to&#x20;remember','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;remembered&#x20;password&#x20;history&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.&#x20;Run&#x20;the&#x20;following&#x20;script&#x20;to&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;pam_pwhistory.so&#x20;and&#x20;pam_unix.so&#x20;lines&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&quot;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&quot;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/system-auth&#x20;||&#x20;PTF=/etc/authselect/system-auth&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*passwords+&#40;sufficients+pam_unix|requi&#40;red|site&#41;s+pam_pwhistory&#41;.sos+&#x20;&#40;[^#]+s+&#41;*remember=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;passwords+&#40;requisite|sufficient&#41;s+&#40;pam_pwquality.so|pam_unix.so&#41;s+&#41;&#40;.*&#41;&#40;remember=S+s*&#41;&#40;.*&#41;$/14&#x20;remember=5&#x20;6/&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;passwords+&#40;requisite|sufficient&#41;s+&#40;pam_pwquality.so|pam_unix.so&#41;s+&#41;&#40;.*&#41;$/14&#x20;remember=5/&quot;&#x20;$PTF&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6664,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;password&#x20;hashing&#x20;algorithm&#x20;to&#x20;sha512.&#x20;Run&#x20;the&#x20;following&#x20;script&#x20;to&#x20;dd&#x20;or&#x20;modify&#x20;the&#x20;pam_unix.so&#x20;lines&#x20;in&#x20;the&#x20;password-auth&#x20;and&#x20;system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&#039;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&#039;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-z&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+sufficients+pam_unix.sos+.*sha512s*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+sufficients+pam_unix.sos+&#41;&#40;.*&#41;$/12&#x20;sha512/&#039;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(6665,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6666,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6667,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6668,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6669,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;readonly&#x20;TMOUT=900&#x20;;&#x20;export&#x20;TMOUT&#x20;.&#x20;Note&#x20;that&#x20;setting&#x20;the&#x20;value&#x20;to&#x20;readonly&#x20;prevents&#x20;unwanted&#x20;modification&#x20;during&#x20;runtime.','[{\"cis\": [\"5.5.3\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(6670,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.5.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6671,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.5.5\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6672,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo&#x20;,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su&#x20;,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su&#x20;,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo&#x20;,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6673,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6674,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/&#x20;shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6675,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6676,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6677,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;600&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6678,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6679,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6680,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6681,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6682,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6683,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6684,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6685,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(7000,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.2\"]}]'),(7001,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7002,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7003,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7004,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}]'),(7005,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}]'),(7006,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#x20;&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.3\"]}]'),(7007,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}]'),(7008,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home.&#x20;Notes:&#x20;The&#x20;actions&#x20;in&#x20;this&#x20;recommendation&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7009,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7010,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7011,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7012,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt&#x20;:&#x20;#&#x20;grub-md5-crypt.&#x20;The&#x20;result&#x20;is&#x20;an&#x20;&lt;encrypted-password&gt;.&#x20;Copy&#x20;and&#x20;paste&#x20;the&#x20;&lt;encrypted-password&gt;&#x20;into&#x20;the&#x20;global&#x20;section&#x20;of&#x20;/boot/grub/menu.lst:&#x20;password&#x20;--md5&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7013,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/security/limits.conf&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0.','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}]'),(7014,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}]'),(7015,'Ensure&#x20;chargen&#x20;services&#x20;are&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;chargen&#x20;and&#x20;chargen-udp&#x20;:&#x20;#&#x20;chkconfig&#x20;chargen&#x20;off&#x20;#&#x20;chkconfig&#x20;chargen-udp&#x20;off','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7016,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;daytime&#x20;-&#x20;and&#x20;daytime-udp:&#x20;#&#x20;chkconfig&#x20;daytime-off&#x20;#&#x20;chkconfig&#x20;daytime-udp&#x20;off','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7017,'Ensure&#x20;discard&#x20;services&#x20;are&#x20;not&#x20;enabled','discard&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;discard&#x20;and&#x20;discard-udp:&#x20;#&#x20;chkconfig&#x20;discard&#x20;off&#x20;#&#x20;chkconfig&#x20;discard-udp&#x20;off','[{\"cis\": [\"2.1.3\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7018,'Ensure&#x20;echo&#x20;services&#x20;are&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;echo&#x20;and&#x20;echo-udp:&#x20;#&#x20;chkconfig&#x20;echo&#x20;off&#x20;#&#x20;chkconfig&#x20;echo-udp&#x20;off','[{\"cis\": [\"2.1.4\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7019,'Ensure&#x20;time&#x20;services&#x20;are&#x20;not&#x20;enabled','timeis&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;time&#x20;and&#x20;time-udp:&#x20;#&#x20;chkconfig&#x20;time&#x20;off&#x20;#&#x20;chkconfig&#x20;time-udp&#x20;off','[{\"cis\": [\"2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7020,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;rexec&#x20;&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;services&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;and&#x20;rexec&#x20;:&#x20;#&#x20;chkconfig&#x20;rexec&#x20;off&#x20;#&#x20;chkconfig&#x20;rlogin&#x20;off&#x20;#&#x20;chkconfig&#x20;rsh&#x20;off','[{\"cis\": [\"2.1.6\"]}, {\"cis_csc\": [\"3.4\", \"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7021,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;talk:&#x20;#&#x20;chkconfig&#x20;talk&#x20;off','[{\"cis\": [\"2.1.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7022,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;chkconfig&#x20;telnet&#x20;off','[{\"cis\": [\"2.1.8\"]}, {\"cis_csc\": [\"3.4\", \"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7023,'Ensure&#x20;tftp&#x20;server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;atftp&#x20;is&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;tftp:&#x20;#&#x20;chkconfig&#x20;tftp&#x20;off','[{\"cis\": [\"2.1.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7024,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsyncd&#x20;:&#x20;#&#x20;chkconfig&#x20;rsyncd&#x20;off','[{\"cis\": [\"2.1.10\", \"2.2.17\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7025,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://tools.ietf.org/html/rfc958.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;limited&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;limited&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;&#x20;&#x20;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;NTPD_OPTIONS&#x20;in&#x20;/etc/sysconfig/ntp&#x20;to&#x20;include&#x20;&#039;-u&#x20;ntp:ntp&#039;:&#x20;NTPD_OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7026,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;zypper&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7027,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon&#x20;:&#x20;#&#x20;chkconfig&#x20;avahi-daemon&#x20;off','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7028,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd&#x20;:&#x20;#&#x20;chkconfig&#x20;dhcpd&#x20;off','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7029,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind&#x20;:&#x20;#&#x20;chkconfig&#x20;nfs&#x20;off&#x20;#&#x20;chkconfig&#x20;rpcbind&#x20;off','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7030,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;chkconfig&#x20;named&#x20;off','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7031,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd&#x20;:&#x20;#&#x20;chkconfig&#x20;vsftpd&#x20;off&#x20;&#x20;Notes:&#x20;Additional&#x20;FTP&#x20;servers&#x20;also&#x20;exist&#x20;and&#x20;should&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7032,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.&#x20;&#x20;Notes:&#x20;Several&#x20;httpd&#x20;servers&#x20;exist&#x20;and&#x20;can&#x20;use&#x20;other&#x20;service&#x20;names.&#x20;apache,&#x20;apache2,&#x20;lighttpd,&#x20;and&#x20;nginx&#x20;are&#x20;example&#x20;services&#x20;that&#x20;provide&#x20;an&#x20;HTTP&#x20;server.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;also&#x20;be&#x20;audited.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2&#x20;:&#x20;#&#x20;chkconfig&#x20;apache2&#x20;off','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7033,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','cyrus&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cyrus&#x20;:&#x20;#&#x20;chkconfig&#x20;cyrus&#x20;off&#x20;&#x20;&#x20;Notes:&#x20;Several&#x20;IMAP/POP3&#x20;servers&#x20;exist&#x20;and&#x20;can&#x20;use&#x20;other&#x20;service&#x20;names.&#x20;dovecot&#x20;is&#x20;an&#x20;example&#x20;service&#x20;that&#x20;provides&#x20;an&#x20;IMAP/POP3&#x20;server.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;also&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7034,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb&#x20;:&#x20;#&#x20;chkconfig&#x20;smb&#x20;off','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7035,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid&#x20;:&#x20;#&#x20;chkconfig&#x20;squid&#x20;off','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7036,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;chkconfig&#x20;snmpd&#x20;off&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Additional&#x20;methods&#x20;of&#x20;disabling&#x20;a&#x20;service&#x20;exist.&#x20;Consult&#x20;your&#x20;distribution&#x20;documentation&#x20;for&#x20;appropriate&#x20;methods.','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7037,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv&#x20;:&#x20;#&#x20;chkconfig&#x20;ypserv&#x20;off','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7038,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind&#x20;:&#x20;#&#x20;zypper&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7039,'Ensure&#x20;IPv4&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7040,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7041,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7042,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7043,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7044,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7045,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7046,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7047,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7048,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7049,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7050,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.&#x20;INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7051,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7052,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7053,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv&#x20;,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7054,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.&#x20;&#x20;Rationale:&#x20;Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7055,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7056,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(7057,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;username&gt;.&#x20;&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(7500,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;or&#x20;the&#x20;systemd&#x20;tmp.mount&#x20;service&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.2\"]}]'),(7501,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7502,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7503,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7504,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}]'),(7505,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}]'),(7506,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#x20;&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.3\"]}]'),(7507,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}]'),(7508,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home.&#x20;Notes:&#x20;The&#x20;actions&#x20;in&#x20;this&#x20;recommendation&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7509,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0.&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7510,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0.&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7511,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0.&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7512,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:fs.suid_dumpable&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}]'),(7513,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}]'),(7514,'Ensure&#x20;chargen&#x20;services&#x20;are&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;chargen&#x20;and&#x20;chargen-udp&#x20;:&#x20;#&#x20;chkconfig&#x20;chargen&#x20;off&#x20;#&#x20;chkconfig&#x20;chargen-udp&#x20;off','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7515,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;daytime&#x20;and&#x20;daytime-udp:&#x20;#&#x20;chkconfig&#x20;daytime&#x20;off&#x20;#&#x20;chkconfig&#x20;daytime-udp&#x20;off','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7516,'Ensure&#x20;discard&#x20;services&#x20;are&#x20;not&#x20;enabled','discard&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;discard&#x20;and&#x20;discard-udp:&#x20;#&#x20;chkconfig&#x20;discard&#x20;off&#x20;#&#x20;chkconfig&#x20;discard-udp&#x20;off','[{\"cis\": [\"2.1.3\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7517,'Ensure&#x20;echo&#x20;services&#x20;are&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;echo&#x20;and&#x20;echo-udp:&#x20;#&#x20;chkconfig&#x20;echo&#x20;off&#x20;#&#x20;chkconfig&#x20;echo-udp&#x20;off','[{\"cis\": [\"2.1.4\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7518,'Ensure&#x20;time&#x20;services&#x20;are&#x20;not&#x20;enabled','timeis&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;time&#x20;and&#x20;time-udp:&#x20;#&#x20;chkconfig&#x20;time&#x20;off&#x20;#&#x20;chkconfig&#x20;time-udp&#x20;off','[{\"cis\": [\"2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7519,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;rsh,&#x20;rlogin,&#x20;rexec&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;services&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;and&#x20;rexec&#x20;:&#x20;#&#x20;chkconfig&#x20;rexec&#x20;off&#x20;#&#x20;chkconfig&#x20;rlogin&#x20;off&#x20;#&#x20;chkconfig&#x20;rsh&#x20;off','[{\"cis\": [\"2.1.6\"]}, {\"cis_csc\": [\"3.4\", \"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7520,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;talk:&#x20;#&#x20;chkconfig&#x20;talk&#x20;off','[{\"cis\": [\"2.1.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7521,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;chkconfig&#x20;telnet&#x20;off','[{\"cis\": [\"2.1.8\"]}, {\"cis_csc\": [\"3.4\", \"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7522,'Ensure&#x20;tftp&#x20;server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;atftp&#x20;is&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;tftp:&#x20;#&#x20;systemctl&#x20;disable&#x20;atftpd','[{\"cis\": [\"2.1.9\", \"2.2.17\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7523,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsyncd:&#x20;#&#x20;systemctl&#x20;disable&#x20;rsyncd','[{\"cis\": [\"2.1.10\", \"2.2.18\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7524,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;xinetd&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;xinetd','[{\"cis\": [\"2.1.11\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7525,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://tools.ietf.org/html/rfc958.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;limited&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;limited&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;&#x20;&#x20;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;NTPD_OPTIONS&#x20;in&#x20;/etc/sysconfig/ntp&#x20;to&#x20;include&#x20;&#039;-u&#x20;ntp:ntp&#039;:&#x20;NTPD_OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7526,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;zypper&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7527,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7528,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;dhcpd','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7529,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;nfs&#x20;#&#x20;systemctl&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7530,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;named','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7531,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;vsftpd&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Additional&#x20;FTP&#x20;servers&#x20;also&#x20;exist&#x20;and&#x20;should&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7532,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;apache2&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Several&#x20;httpd&#x20;servers&#x20;exist&#x20;and&#x20;can&#x20;use&#x20;other&#x20;service&#x20;names.&#x20;apache,&#x20;apache2,&#x20;lighttpd,&#x20;and&#x20;nginx&#x20;are&#x20;example&#x20;services&#x20;that&#x20;provide&#x20;an&#x20;HTTP&#x20;server.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;also&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7533,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;dovecot&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Several&#x20;IMAP/POP3&#x20;servers&#x20;exist&#x20;and&#x20;can&#x20;use&#x20;other&#x20;service&#x20;names.&#x20;cyrus-imap&#x20;is&#x20;an&#x20;example&#x20;service&#x20;that&#x20;provides&#x20;an&#x20;IMAP/POP3&#x20;server.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;also&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7534,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;smb','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7535,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;squid&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Several&#x20;HTTP&#x20;proxy&#x20;servers&#x20;exist.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;be&#x20;checked.','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7536,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;snmpd&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Additional&#x20;methods&#x20;of&#x20;disabling&#x20;a&#x20;service&#x20;exist.&#x20;Consult&#x20;your&#x20;distribution&#x20;documentation&#x20;for&#x20;appropriate&#x20;methods.','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7537,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;ypserv','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7538,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind&#x20;:&#x20;#&#x20;zypper&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7539,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7540,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7541,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7542,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7543,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7544,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7545,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7546,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7547,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7548,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7549,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7550,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.&#x20;INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7551,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7552,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7553,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv&#x20;,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7554,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7555,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7556,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(7557,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;username&gt;.&#x20;&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(8000,'Disable&#x20;Local-only&#x20;Graphical&#x20;Login&#x20;Environment','The&#x20;graphical&#x20;login&#x20;service&#x20;provides&#x20;the&#x20;capability&#x20;of&#x20;logging&#x20;into&#x20;the&#x20;system&#x20;using&#x20;an&#x20;X-&#x20;windows&#x20;type&#x20;interface&#x20;from&#x20;the&#x20;console.&#x20;If&#x20;graphical&#x20;login&#x20;access&#x20;for&#x20;the&#x20;console&#x20;is&#x20;required,&#x20;leave&#x20;the&#x20;service&#x20;in&#x20;local-only&#x20;mode.','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/application/graphical-login/gdm:default','[{\"cis\": [\"2.1\"]}]'),(8001,'Configure&#x20;sendmail&#x20;Service&#x20;for&#x20;Local-Only&#x20;Mode','In&#x20;Solaris&#x20;11,&#x20;the&#x20;sendmail&#x20;service&#x20;is&#x20;set&#x20;to&#x20;local&#x20;only&#x20;mode&#x20;by&#x20;default.&#x20;This&#x20;means&#x20;that&#x20;users&#x20;on&#x20;remote&#x20;systems&#x20;cannot&#x20;connect&#x20;to&#x20;the&#x20;sendmail&#x20;service,&#x20;eliminating&#x20;the&#x20;possibility&#x20;of&#x20;a&#x20;remote&#x20;exploit&#x20;attack&#x20;against&#x20;some&#x20;future&#x20;sendmail&#x20;vulnerability.&#x20;Leaving&#x20;sendmail&#x20;in&#x20;local-only&#x20;mode&#x20;permits&#x20;mail&#x20;to&#x20;be&#x20;sent&#x20;out&#x20;from&#x20;the&#x20;local&#x20;system.&#x20;If&#x20;the&#x20;local&#x20;system&#x20;will&#x20;not&#x20;be&#x20;processing&#x20;or&#x20;sending&#x20;any&#x20;mail,&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled.&#x20;However,&#x20;if&#x20;sendmail&#x20;is&#x20;disabled&#x20;completely,&#x20;email&#x20;messages&#x20;sent&#x20;to&#x20;the&#x20;root&#x20;account&#x20;&#40;such&#x20;as&#x20;cron&#x20;job&#x20;output&#x20;or&#x20;audit&#x20;service&#x20;warnings&#41;&#x20;will&#x20;fail&#x20;to&#x20;be&#x20;delivered.&#x20;An&#x20;alternative&#x20;approach&#x20;is&#x20;to&#x20;disable&#x20;the&#x20;sendmail&#x20;service&#x20;and&#x20;create&#x20;a&#x20;cron&#x20;job&#x20;to&#x20;process&#x20;all&#x20;mail&#x20;that&#x20;is&#x20;queued&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;sending&#x20;it&#x20;to&#x20;a&#x20;relay&#x20;host&#x20;defined&#x20;in&#x20;the&#x20;sendmail.cf&#x20;file.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;sendmail&#x20;be&#x20;left&#x20;in&#x20;local-only&#x20;mode&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;requirement&#x20;to&#x20;completely&#x20;disable&#x20;it.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Run&#x20;the&#x20;following&#x20;to&#x20;set&#x20;sendmail&#x20;to&#x20;listen&#x20;only&#x20;local&#x20;interfaces:&#x20;#&#x20;svccfg&#x20;-v&#x20;-s&#x20;svc:/network/smtp:sendmail&#x20;setprop&#x20;config/local_only=false&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;refresh&#x20;sendmail&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;sendmail','[{\"cis\": [\"2.2\"]}]'),(8002,'Disable&#x20;RPC&#x20;Encryption&#x20;Key','The&#x20;keyserv&#x20;service&#x20;is&#x20;only&#x20;required&#x20;for&#x20;sites&#x20;that&#x20;are&#x20;using&#x20;the&#x20;Secure&#x20;RPC&#x20;mechanism.&#x20;The&#x20;most&#x20;common&#x20;use&#x20;for&#x20;Secure&#x20;RPC&#x20;on&#x20;Solaris&#x20;machines&#x20;is&#x20;&quot;secure&#x20;NFS&quot;,&#x20;which&#x20;uses&#x20;the&#x20;Secure&#x20;RPC&#x20;mechanism&#x20;to&#x20;provide&#x20;higher&#x20;levels&#x20;of&#x20;security&#x20;than&#x20;the&#x20;standard&#x20;NFS&#x20;protocols.&#x20;&#40;&quot;Secure&#x20;NFS&quot;&#x20;is&#x20;unrelated&#x20;to&#x20;Kerberos&#x20;authentication&#x20;as&#x20;a&#x20;mechanism&#x20;for&#x20;providing&#x20;higher&#x20;levels&#x20;of&#x20;NFS&#x20;security.&#x20;&quot;Kerberized&quot;&#x20;NFS&#x20;does&#x20;not&#x20;require&#x20;the&#x20;keyserv&#x20;service&#x20;to&#x20;be&#x20;running.&#41;','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/rpc/keyserv','[{\"cis\": [\"2.3\"]}]'),(8003,'Disable&#x20;NIS&#x20;Server&#x20;Services','The&#x20;NIS&#x20;server&#x20;software&#x20;is&#x20;not&#x20;installed&#x20;by&#x20;default&#x20;and&#x20;is&#x20;only&#x20;required&#x20;on&#x20;systems&#x20;that&#x20;are&#x20;acting&#x20;as&#x20;an&#x20;NIS&#x20;server&#x20;for&#x20;the&#x20;local&#x20;site.&#x20;Typically&#x20;there&#x20;are&#x20;only&#x20;a&#x20;small&#x20;number&#x20;of&#x20;NIS&#x20;servers&#x20;on&#x20;any&#x20;given&#x20;network.&#x20;These&#x20;services&#x20;are&#x20;disabled&#x20;by&#x20;default&#x20;unless&#x20;the&#x20;system&#x20;has&#x20;been&#x20;previously&#x20;configured&#x20;to&#x20;act&#x20;as&#x20;a&#x20;NIS&#x20;server.','As&#x20;RPC-based&#x20;services&#x20;such&#x20;as&#x20;NIS&#x20;may&#x20;use&#x20;non-secure&#x20;authentication&#x20;and&#x20;share&#x20;sensitive&#x20;network&#x20;object&#x20;information&#x20;with&#x20;systems&#x20;and&#x20;applications&#x20;using&#x20;RPC-based&#x20;services,&#x20;this&#x20;service&#x20;should&#x20;be&#x20;disabled.&#x20;Users&#x20;are&#x20;encouraged&#x20;to&#x20;use&#x20;LDAP&#x20;as&#x20;a&#x20;name&#x20;service&#x20;in&#x20;place&#x20;of&#x20;NIS.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/nis/server&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/nis/domain','[{\"cis\": [\"2.4\"]}]'),(8004,'Disable&#x20;NIS&#x20;Client&#x20;Services','If&#x20;the&#x20;local&#x20;site&#x20;is&#x20;not&#x20;using&#x20;the&#x20;NIS&#x20;naming&#x20;service&#x20;to&#x20;distribute&#x20;system&#x20;and&#x20;user&#x20;configuration&#x20;information,&#x20;this&#x20;service&#x20;may&#x20;be&#x20;disabled.&#x20;This&#x20;service&#x20;is&#x20;disabled&#x20;by&#x20;default&#x20;unless&#x20;the&#x20;NIS&#x20;service&#x20;has&#x20;been&#x20;installed&#x20;and&#x20;configured&#x20;on&#x20;the&#x20;system.','As&#x20;RPC-based&#x20;services&#x20;such&#x20;as&#x20;NIS&#x20;may&#x20;use&#x20;non-secure&#x20;authentication&#x20;and&#x20;share&#x20;sensitive&#x20;network&#x20;object&#x20;information&#x20;with&#x20;systems&#x20;and&#x20;applications&#x20;using&#x20;RPC-based&#x20;service,&#x20;NIS&#x20;client&#x20;daemons&#x20;should&#x20;be&#x20;disabled.&#x20;Users&#x20;are&#x20;encouraged&#x20;to&#x20;use&#x20;LDAP&#x20;as&#x20;a&#x20;name&#x20;service&#x20;in&#x20;place&#x20;of&#x20;NIS.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/nis/client&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/nis/domain','[{\"cis\": [\"2.5\"]}]'),(8005,'Disable&#x20;Kerberos&#x20;TGT&#x20;Expiration&#x20;Warning','The&#x20;Kerberos&#x20;TGT&#x20;warning&#x20;service&#x20;is&#x20;used&#x20;to&#x20;warn&#x20;users&#x20;when&#x20;their&#x20;Kerberos&#x20;tickets&#x20;are&#x20;about&#x20;expire&#x20;or&#x20;to&#x20;renew&#x20;those&#x20;tickets&#x20;before&#x20;they&#x20;expire.&#x20;This&#x20;service&#x20;is&#x20;not&#x20;used&#x20;if&#x20;Kerberos&#x20;has&#x20;not&#x20;been&#x20;configured.&#x20;This&#x20;service&#x20;is&#x20;configured&#x20;to&#x20;be&#x20;&quot;local&#x20;only&quot;&#x20;by&#x20;default.','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/security/ktkt_warn','[{\"cis\": [\"2.6\"]}]'),(8006,'Disable&#x20;Generic&#x20;Security&#x20;Services&#x20;&#40;GSS&#41;','The&#x20;GSS&#x20;API&#x20;is&#x20;a&#x20;security&#x20;abstraction&#x20;layer&#x20;that&#x20;is&#x20;designed&#x20;to&#x20;make&#x20;it&#x20;easier&#x20;for&#x20;developers&#x20;to&#x20;integrate&#x20;with&#x20;different&#x20;authentication&#x20;schemes.&#x20;It&#x20;is&#x20;most&#x20;commonly&#x20;used&#x20;in&#x20;applications&#x20;for&#x20;sites&#x20;that&#x20;use&#x20;Kerberos&#x20;for&#x20;network&#x20;authentication,&#x20;though&#x20;it&#x20;can&#x20;also&#x20;allow&#x20;applications&#x20;to&#x20;interoperate&#x20;with&#x20;other&#x20;authentication&#x20;schemes.','GSS&#x20;does&#x20;not&#x20;expose&#x20;anything&#x20;external&#x20;to&#x20;the&#x20;system&#x20;as&#x20;it&#x20;is&#x20;configured&#x20;to&#x20;use&#x20;TLI&#x20;&#40;protocol&#x20;=&#x20;ticotsord&#41;&#x20;by&#x20;default.&#x20;This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/rpc/gss','[{\"cis\": [\"2.7\"]}]'),(8007,'Disable&#x20;Removable&#x20;Volume&#x20;Manager','The&#x20;HAL-aware&#x20;removable&#x20;volume&#x20;manager&#x20;in&#x20;the&#x20;Solaris&#x20;11&#x20;OS&#x20;automatically&#x20;mounts&#x20;external&#x20;devices&#x20;for&#x20;users&#x20;whenever&#x20;the&#x20;device&#x20;is&#x20;attached&#x20;to&#x20;the&#x20;system.&#x20;These&#x20;devices&#x20;include&#x20;CD-R,&#x20;CD-RW,&#x20;floppies,&#x20;DVD,&#x20;USB&#x20;and&#x20;1394&#x20;mass&#x20;storage&#x20;devices.&#x20;See&#x20;the&#x20;rmvolmgr&#40;1M&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;details.','Allowing&#x20;users&#x20;to&#x20;mount&#x20;and&#x20;access&#x20;data&#x20;from&#x20;removable&#x20;media&#x20;devices&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;malicious&#x20;programs&#x20;and&#x20;data&#x20;to&#x20;be&#x20;imported&#x20;onto&#x20;the&#x20;network.&#x20;It&#x20;also&#x20;introduces&#x20;the&#x20;risk&#x20;that&#x20;sensitive&#x20;data&#x20;may&#x20;be&#x20;transferred&#x20;off&#x20;the&#x20;system&#x20;without&#x20;a&#x20;log&#x20;record.&#x20;By&#x20;adding&#x20;rmvolmgr&#x20;to&#x20;the&#x20;.xinitrc&#x20;file,&#x20;user-isolated&#x20;instances&#x20;of&#x20;rmvolmgr&#x20;can&#x20;be&#x20;run&#x20;via&#x20;a&#x20;session&#x20;startup&#x20;script.&#x20;In&#x20;such&#x20;cases,&#x20;the&#x20;rmvolmgr&#x20;instance&#x20;will&#x20;not&#x20;allow&#x20;management&#x20;of&#x20;volumes&#x20;that&#x20;belong&#x20;to&#x20;other&#x20;than&#x20;the&#x20;owner&#x20;of&#x20;the&#x20;startup&#x20;script.&#x20;When&#x20;a&#x20;user&#x20;logs&#x20;onto&#x20;the&#x20;workstation&#x20;console&#x20;&#40;/dev/console&#41;,&#x20;any&#x20;instance&#x20;of&#x20;user-initiated&#x20;rmvolmgr&#x20;will&#x20;only&#x20;own&#x20;locally&#x20;connected&#x20;devices,&#x20;such&#x20;as&#x20;CD-ROMs&#x20;or&#x20;flash&#x20;memory&#x20;hardware,&#x20;locally&#x20;connected&#x20;to&#x20;USB&#x20;or&#x20;FireWire&#x20;ports.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/system/filesystem/rmvolmgr&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/rpc/smserver','[{\"cis\": [\"2.8\"]}]'),(8008,'Disable&#x20;automount&#x20;Service','The&#x20;automount&#x20;daemon&#x20;is&#x20;normally&#x20;used&#x20;to&#x20;automatically&#x20;mount&#x20;NFS&#x20;file&#x20;systems&#x20;from&#x20;remote&#x20;file&#x20;servers&#x20;when&#x20;needed.&#x20;However,&#x20;the&#x20;automount&#x20;daemon&#x20;can&#x20;also&#x20;be&#x20;configured&#x20;to&#x20;mount&#x20;local&#x20;&#40;loopback&#41;&#x20;file&#x20;systems&#x20;as&#x20;well,&#x20;which&#x20;may&#x20;include&#x20;local&#x20;user&#x20;home&#x20;directories,&#x20;depending&#x20;on&#x20;the&#x20;system&#x20;configuration.','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/system/filesystem/autofs','[{\"cis\": [\"2.9\"]}]'),(8009,'Disable&#x20;Apache&#x20;Service','The&#x20;Apache&#x20;service&#x20;provides&#x20;an&#x20;instance&#x20;of&#x20;the&#x20;Apache&#x20;web&#x20;server.','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/http:apache22','[{\"cis\": [\"2.10\"]}]'),(8010,'Disable&#x20;Local-only&#x20;RPC&#x20;Port&#x20;Mapping&#x20;Service','Remote&#x20;Procedure&#x20;Call&#x20;&#40;RPC&#41;&#x20;is&#x20;used&#x20;by&#x20;many&#x20;services&#x20;within&#x20;the&#x20;Solaris&#x20;11&#x20;operating&#x20;system.&#x20;Some&#x20;of&#x20;these&#x20;services&#x20;allow&#x20;external&#x20;connections&#x20;to&#x20;use&#x20;the&#x20;service&#x20;&#40;e.g.&#x20;NFS,&#x20;NIS&#41;.&#x20;By&#x20;default,&#x20;the&#x20;Solaris&#x20;11&#x20;OS&#x20;configures&#x20;this&#x20;service&#x20;to&#x20;be&#x20;local&#x20;only.','RPC-based&#x20;services&#x20;typically&#x20;have&#x20;weak&#x20;or&#x20;non-existent&#x20;authentication&#x20;and&#x20;yet&#x20;may&#x20;share&#x20;very&#x20;sensitive&#x20;information,&#x20;which&#x20;is&#x20;vulnerable&#x20;to&#x20;network&#x20;traffic&#x20;sniffers.&#x20;Unless&#x20;one&#x20;of&#x20;these&#x20;services&#x20;is&#x20;required&#x20;on&#x20;this&#x20;host,&#x20;RPC-based&#x20;tools&#x20;should&#x20;be&#x20;fully&#x20;disabled.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/rpc/bind.&#x20;If&#x20;the&#x20;goal&#x20;is&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;this&#x20;service,&#x20;but&#x20;not&#x20;disable&#x20;it&#x20;completely,&#x20;consider&#x20;using&#x20;a&#x20;host-based&#x20;firewall&#x20;such&#x20;as&#x20;ipfilter&#40;5&#41;&#x20;to&#x20;control&#x20;what&#x20;hosts&#x20;are&#x20;allowed&#x20;to&#x20;access&#x20;this&#x20;service.&#x20;Alternatively,&#x20;TCP&#x20;Wrappers&#x20;support,&#x20;which&#x20;controls&#x20;host&#x20;access&#x20;and&#x20;connection&#x20;auditing,&#x20;can&#x20;be&#x20;enabled.&#x20;TCP&#x20;Wrappers&#x20;is&#x20;discussed&#x20;in&#x20;the&#x20;next&#x20;section.','[{\"cis\": [\"2.11\"]}]'),(8011,'Configure&#x20;TCP&#x20;Wrappers','TCP&#x20;Wrappers&#x20;is&#x20;a&#x20;host-based&#x20;access&#x20;control&#x20;system&#x20;that&#x20;allows&#x20;administrators&#x20;to&#x20;control&#x20;who&#x20;has&#x20;access&#x20;to&#x20;various&#x20;network&#x20;services&#x20;based&#x20;on&#x20;the&#x20;IP&#x20;address&#x20;of&#x20;the&#x20;remote&#x20;end&#x20;of&#x20;the&#x20;connection.&#x20;TCP&#x20;Wrappers&#x20;also&#x20;provide&#x20;logging&#x20;information&#x20;via&#x20;syslog&#x20;about&#x20;both&#x20;successful&#x20;and&#x20;unsuccessful&#x20;connections.','TCP&#x20;Wrappers&#x20;provides&#x20;granular&#x20;control&#x20;over&#x20;what&#x20;services&#x20;can&#x20;be&#x20;accessed&#x20;over&#x20;the&#x20;network.&#x20;Its&#x20;logs&#x20;show&#x20;attempted&#x20;access&#x20;to&#x20;services&#x20;from&#x20;non-authorized&#x20;systems,&#x20;which&#x20;can&#x20;help&#x20;identify&#x20;unauthorized&#x20;access&#x20;attempts.','','To&#x20;enable&#x20;TCP&#x20;Wrappers,&#x20;run&#x20;the&#x20;following&#x20;commands:&#x20;1.&#x20;Create&#x20;and&#x20;customize&#x20;your&#x20;policy&#x20;in&#x20;/etc/hosts.allow:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;&lt;net/&lt;mask&gt;,&#x20;...&quot;&#x20;&gt;&#x20;/etc/hosts.allow.&#x20;Where&#x20;each&#x20;&lt;net&gt;/&lt;mask&gt;&#x20;combination&#x20;&#40;for&#x20;example,&#x20;the&#x20;Class&#x20;C&#x20;address&#x20;block&#x20;&quot;192.168.1.0/255.255.255.0&quot;&#41;&#x20;can&#x20;represent&#x20;one&#x20;network&#x20;block&#x20;in&#x20;use&#x20;by&#x20;your&#x20;organization&#x20;that&#x20;requires&#x20;access&#x20;to&#x20;this&#x20;system.&#x20;2&#41;&#x20;Create&#x20;a&#x20;default&#x20;deny&#x20;policy&#x20;in&#x20;/etc/hosts.deny:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;ALL&quot;&#x20;&gt;/etc/hosts.deny.&#x20;3&#41;&#x20;Enable&#x20;TCP&#x20;Wrappers&#x20;for&#x20;all&#x20;services&#x20;started&#x20;by&#x20;inetd:&#x20;#&#x20;inetadm&#x20;-M&#x20;tcp_wrappers=TRUE&#x20;-&#x20;To&#x20;protect&#x20;only&#x20;specific&#x20;inetd&#x20;services,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;inetadm&#x20;-m&#x20;[FMRI]&#x20;tcp_wrappers=TRUE.&#x20;To&#x20;enable&#x20;TCP&#x20;Wrappers&#x20;for&#x20;the&#x20;RPC&#x20;port&#x20;mapping&#x20;service,&#x20;use&#x20;the&#x20;commands:&#x20;#&#x20;svccfg&#x20;-s&#x20;rpc/bind&#x20;setprop&#x20;config/enable_tcpwrappers=true&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;refresh&#x20;rpc/bind.&#x20;The&#x20;versions&#x20;of&#x20;SSH&#x20;and&#x20;sendmail&#x20;that&#x20;ship&#x20;with&#x20;Solaris&#x20;11&#x20;will&#x20;automatically&#x20;use&#x20;TCP&#x20;Wrappers&#x20;to&#x20;filter&#x20;access&#x20;if&#x20;a&#x20;hosts.allow&#x20;or&#x20;hosts.deny&#x20;file&#x20;exists.&#x20;To&#x20;protect&#x20;UDP&#x20;and&#x20;RPC-based&#x20;services&#x20;that&#x20;are&#x20;spawned&#x20;from&#x20;inetd,&#x20;consider&#x20;implementing&#x20;a&#x20;host-based&#x20;firewall&#x20;such&#x20;as&#x20;Solaris&#x20;IP&#x20;Filter.&#x20;See&#x20;ipfilter&#40;5&#41;&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"2.12\"]}]'),(8012,'Disable&#x20;Telnet&#x20;Service','The&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol&#x20;and&#x20;can&#x20;be&#x20;used&#x20;for&#x20;remote&#x20;shell&#x20;access.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;protocol&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Disable&#x20;telnet&#x20;server&#x20;if&#x20;enabled:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/telnet','[{\"cis\": [\"2.13\"]}]'),(8013,'Restrict&#x20;Core&#x20;Dumps&#x20;to&#x20;Protected&#x20;Directory','The&#x20;action&#x20;described&#x20;in&#x20;this&#x20;section&#x20;creates&#x20;a&#x20;protected&#x20;directory&#x20;to&#x20;store&#x20;core&#x20;dumps&#x20;and&#x20;also&#x20;causes&#x20;the&#x20;system&#x20;to&#x20;create&#x20;a&#x20;log&#x20;entry&#x20;whenever&#x20;a&#x20;regular&#x20;process&#x20;dumps&#x20;core.','Core&#x20;dumps,&#x20;particularly&#x20;those&#x20;from&#x20;set-UID&#x20;and&#x20;set-GID&#x20;processes,&#x20;may&#x20;contain&#x20;sensitive&#x20;data.','','To&#x20;implement&#x20;the&#x20;recommendation,&#x20;run&#x20;the&#x20;commands:&#x20;#&#x20;chmod&#x20;700&#x20;/var/cores&#x20;&#x20;&#x20;&#x20;#&#x20;coreadm&#x20;-g&#x20;/var/cores/core_%n_%f_%u_%g_%t_%p&#x20;-e&#x20;log&#x20;-e&#x20;global&#x20;-e&#x20;global-setid&#x20;-d&#x20;process&#x20;-d&#x20;proc-setid&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;local&#x20;site&#x20;chooses,&#x20;dumping&#x20;of&#x20;core&#x20;files&#x20;can&#x20;be&#x20;completely&#x20;disabled&#x20;with&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;coreadm&#x20;-d&#x20;global&#x20;-d&#x20;global-setid&#x20;-d&#x20;process&#x20;-d&#x20;proc-setid','[{\"cis\": [\"3.1\"]}]'),(8014,'Enable&#x20;Stack&#x20;Protection','Buffer&#x20;overflow&#x20;exploits&#x20;have&#x20;been&#x20;the&#x20;basis&#x20;for&#x20;many&#x20;highly&#x20;publicized&#x20;compromises&#x20;and&#x20;defacements&#x20;of&#x20;large&#x20;numbers&#x20;of&#x20;Internet&#x20;connected&#x20;systems.&#x20;Many&#x20;of&#x20;the&#x20;automated&#x20;tools&#x20;in&#x20;use&#x20;by&#x20;system&#x20;attackers&#x20;exploit&#x20;well-known&#x20;buffer&#x20;overflow&#x20;problems&#x20;in&#x20;vendor-&#x20;supplied&#x20;and&#x20;third&#x20;party&#x20;software.','Enabling&#x20;stack&#x20;protection&#x20;prevents&#x20;certain&#x20;classes&#x20;of&#x20;buffer&#x20;overflow&#x20;attacks&#x20;and&#x20;is&#x20;a&#x20;significant&#x20;security&#x20;enhancement.&#x20;However,&#x20;this&#x20;does&#x20;not&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;that&#x20;do&#x20;not&#x20;execute&#x20;code&#x20;on&#x20;the&#x20;stack&#x20;&#40;such&#x20;as&#x20;return-to-libc&#x20;exploits&#41;.&#x20;While&#x20;most&#x20;of&#x20;the&#x20;Solaris&#x20;OS&#x20;is&#x20;already&#x20;configured&#x20;to&#x20;employ&#x20;a&#x20;non-executable&#x20;stack,&#x20;this&#x20;setting&#x20;is&#x20;still&#x20;recommended&#x20;to&#x20;provide&#x20;a&#x20;more&#x20;comprehensive&#x20;solution&#x20;for&#x20;both&#x20;Solaris&#x20;and&#x20;other&#x20;software&#x20;that&#x20;may&#x20;be&#x20;installed.','','To&#x20;enable&#x20;stack&#x20;protection&#x20;and&#x20;block&#x20;stack-smashing&#x20;attacks,&#x20;run&#x20;the&#x20;following&#x20;to&#x20;edit&#x20;the&#x20;/etc/system&#x20;file:&#x20;#&#x20;if&#x20;[&#x20;!&#x20;&quot;`grep&#x20;noexec_user_stack=&#x20;/etc/system`&quot;&#x20;];&#x20;then&#x20;cat&#x20;&lt;&lt;END_CFG&#x20;&gt;&gt;/etc/system&#x20;set&#x20;noexec_user_stack=1&#x20;set&#x20;noexec_user_stack_log=1&#x20;END_CFG&#x20;fi','[{\"cis\": [\"3.2\"]}]'),(8015,'Enable&#x20;Strong&#x20;TCP&#x20;Sequence&#x20;Number&#x20;Generation','The&#x20;variable&#x20;TCP_STRONG_ISS&#x20;defines&#x20;the&#x20;mechanism&#x20;used&#x20;for&#x20;TCP&#x20;initial&#x20;sequence&#x20;number&#x20;generation.&#x20;If&#x20;an&#x20;attacker&#x20;can&#x20;predict&#x20;the&#x20;next&#x20;sequence&#x20;number,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;inject&#x20;fraudulent&#x20;packets&#x20;into&#x20;the&#x20;data&#x20;stream&#x20;to&#x20;hijack&#x20;the&#x20;session.','The&#x20;RFC&#x20;1948&#x20;method&#x20;is&#x20;widely&#x20;accepted&#x20;as&#x20;the&#x20;strongest&#x20;mechanism&#x20;for&#x20;TCP&#x20;packet&#x20;generation.&#x20;This&#x20;makes&#x20;remote&#x20;session&#x20;hijacking&#x20;attacks&#x20;more&#x20;difficult,&#x20;as&#x20;well&#x20;as&#x20;any&#x20;other&#x20;network-based&#x20;attack&#x20;that&#x20;relies&#x20;on&#x20;predicting&#x20;TCP&#x20;sequence&#x20;number&#x20;information.&#x20;It&#x20;is&#x20;theoretically&#x20;possible&#x20;that&#x20;there&#x20;may&#x20;be&#x20;a&#x20;small&#x20;performance&#x20;hit&#x20;in&#x20;connection&#x20;setup&#x20;time&#x20;when&#x20;this&#x20;setting&#x20;is&#x20;used,&#x20;but&#x20;there&#x20;are&#x20;no&#x20;publicly&#x20;available&#x20;benchmarks&#x20;that&#x20;establish&#x20;this.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;TCP_STRONG_ISS&#x20;parameter&#x20;to&#x20;use&#x20;RFC&#x20;1948&#x20;sequence&#x20;number&#x20;generation&#x20;in&#x20;the&#x20;/etc/default/inetinit&#x20;file:&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/TCP_STRONG_ISS=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;TCP_STRONG_ISS=2&quot;&#x20;};&#x20;{&#x20;print&#x20;}&#039;&#x20;inetinit&#x20;&gt;&#x20;inetinit.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;inetinit.CIS&#x20;inetinit&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;set&#x20;the&#x20;TCP_STRONG_ISS&#x20;parameter&#x20;on&#x20;a&#x20;running&#x20;system,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;ipadm&#x20;set-prop&#x20;-p&#x20;_strong_iss=2&#x20;tcp','[{\"cis\": [\"3.3\"]}]'),(8016,'Create&#x20;CIS&#x20;Audit&#x20;Class','To&#x20;group&#x20;a&#x20;set&#x20;of&#x20;related&#x20;audit&#x20;events,&#x20;the&#x20;Solaris&#x20;Audit&#x20;service&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;sites&#x20;to&#x20;define&#x20;their&#x20;own&#x20;audit&#x20;classes&#x20;that&#x20;contain&#x20;just&#x20;those&#x20;events&#x20;that&#x20;the&#x20;site&#x20;wants&#x20;to&#x20;audit.','To&#x20;simplify&#x20;administration,&#x20;a&#x20;CIS&#x20;specific&#x20;audit&#x20;class&#x20;should&#x20;be&#x20;created.','','To&#x20;create&#x20;the&#x20;CIS&#x20;audit&#x20;class,&#x20;edit&#x20;the&#x20;/etc/security/audit_class&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;entry&#x20;before&#x20;the&#x20;last&#x20;line&#x20;of&#x20;the&#x20;file:&#x20;0x0100000000000000:cis:CIS&#x20;Solaris&#x20;Benchmark','[{\"cis\": [\"4.1\"]}]'),(8017,'Enable&#x20;Auditing&#x20;of&#x20;Incoming&#x20;Network&#x20;Connections','The&#x20;Solaris&#x20;Audit&#x20;service&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;record&#x20;incoming&#x20;network&#x20;connections&#x20;to&#x20;any&#x20;listening&#x20;service&#x20;running&#x20;on&#x20;the&#x20;system.','This&#x20;recommendation&#x20;will&#x20;provide&#x20;an&#x20;audit&#x20;trail&#x20;that&#x20;contains&#x20;information&#x20;related&#x20;to&#x20;incoming&#x20;network&#x20;connections.&#x20;While&#x20;this&#x20;functionality&#x20;can&#x20;be&#x20;enabled&#x20;using&#x20;service-&#x20;specific&#x20;mechanisms,&#x20;using&#x20;the&#x20;Solaris&#x20;Audit&#x20;service&#x20;provides&#x20;a&#x20;more&#x20;centralized&#x20;and&#x20;complete&#x20;window&#x20;into&#x20;incoming&#x20;network&#x20;activity.','','To&#x20;enforce&#x20;this&#x20;setting,&#x20;edit&#x20;the&#x20;/etc/security/audit_event&#x20;file&#x20;and&#x20;add&#x20;the&#x20;cis&#x20;audit&#x20;class&#x20;to&#x20;the&#x20;following&#x20;audit&#x20;events:&#x20;AUE_ACCEPT&#x20;&#x20;&#x20;&#x20;AUE_CONNECT&#x20;&#x20;&#x20;&#x20;AUE_SOCKACCEPT&#x20;&#x20;&#x20;&#x20;AUE_SOCKCONNECT&#x20;&#x20;&#x20;&#x20;AUE_inetd_connect','[{\"cis\": [\"4.2\"]}]'),(8018,'Enable&#x20;Auditing&#x20;of&#x20;File&#x20;Metadata&#x20;Modification&#x20;Events','The&#x20;Solaris&#x20;Audit&#x20;service&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;record&#x20;file&#x20;metadata&#x20;modification&#x20;events&#x20;for&#x20;every&#x20;process&#x20;running&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;will&#x20;allow&#x20;the&#x20;auditing&#x20;service&#x20;to&#x20;determine&#x20;when&#x20;file&#x20;ownership,&#x20;permissions&#x20;and&#x20;related&#x20;information&#x20;is&#x20;changed.','This&#x20;recommendation&#x20;will&#x20;provide&#x20;an&#x20;audit&#x20;trail&#x20;that&#x20;contains&#x20;information&#x20;related&#x20;to&#x20;changes&#x20;of&#x20;file&#x20;metadata.&#x20;The&#x20;Solaris&#x20;Audit&#x20;service&#x20;is&#x20;used&#x20;to&#x20;provide&#x20;a&#x20;more&#x20;centralized&#x20;and&#x20;complete&#x20;window&#x20;into&#x20;activities&#x20;such&#x20;as&#x20;these.','','To&#x20;enforce&#x20;this&#x20;setting,&#x20;edit&#x20;the&#x20;/etc/security/audit_event&#x20;file&#x20;and&#x20;add&#x20;the&#x20;cis&#x20;audit&#x20;class&#x20;to&#x20;the&#x20;following&#x20;audit&#x20;events:&#x20;AUE_CHMOD&#x20;&#x20;&#x20;&#x20;AUE_CHOWN&#x20;&#x20;&#x20;&#x20;AUE_FCHOWN&#x20;&#x20;&#x20;&#x20;AUE_FCHMOD&#x20;&#x20;&#x20;&#x20;AUE_LCHOWN&#x20;&#x20;&#x20;&#x20;AUE_ACLSET&#x20;&#x20;&#x20;&#x20;AUE_FACLSET','[{\"cis\": [\"4.3\"]}]'),(8019,'Enable&#x20;Auditing&#x20;of&#x20;Process&#x20;and&#x20;Privilege&#x20;Events','The&#x20;Solaris&#x20;Audit&#x20;service&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;record&#x20;the&#x20;use&#x20;of&#x20;privileges&#x20;by&#x20;processes&#x20;running&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;will&#x20;capture&#x20;events&#x20;such&#x20;as&#x20;the&#x20;setting&#x20;of&#x20;UID&#x20;and&#x20;GID&#x20;values,&#x20;setting&#x20;of&#x20;privileges,&#x20;as&#x20;well&#x20;as&#x20;the&#x20;use&#x20;of&#x20;functionality&#x20;such&#x20;as&#x20;chroot&#40;2&#41;.','This&#x20;recommendation&#x20;will&#x20;provide&#x20;an&#x20;audit&#x20;trail&#x20;that&#x20;contains&#x20;information&#x20;related&#x20;to&#x20;the&#x20;use&#x20;of&#x20;privileges&#x20;by&#x20;processes&#x20;running&#x20;on&#x20;the&#x20;system.&#x20;The&#x20;Solaris&#x20;Audit&#x20;service&#x20;is&#x20;used&#x20;to&#x20;provide&#x20;a&#x20;more&#x20;centralized&#x20;and&#x20;complete&#x20;window&#x20;into&#x20;activities&#x20;such&#x20;as&#x20;these.','','To&#x20;enforce&#x20;this&#x20;setting,&#x20;edit&#x20;the&#x20;/etc/security/audit_event&#x20;file&#x20;and&#x20;add&#x20;the&#x20;cis&#x20;audit&#x20;class&#x20;to&#x20;the&#x20;following&#x20;audit&#x20;events:&#x20;AUE_CHROOT&#x20;&#x20;&#x20;&#x20;AUE_SETREUID&#x20;&#x20;&#x20;&#x20;AUE_SETREGID&#x20;&#x20;&#x20;&#x20;AUE_FCHROOT&#x20;&#x20;&#x20;&#x20;AUE_PFEXEC&#x20;&#x20;&#x20;&#x20;AUE_SETUID&#x20;&#x20;&#x20;&#x20;AUE_NICE&#x20;&#x20;&#x20;&#x20;AUE_SETGID&#x20;&#x20;&#x20;&#x20;AUE_PRIOCNTLSYS&#x20;&#x20;&#x20;&#x20;AUE_SETEGID&#x20;&#x20;&#x20;&#x20;AUE_SETEUID&#x20;&#x20;&#x20;&#x20;AUE_SETPPRIV&#x20;&#x20;&#x20;&#x20;AUE_SETSID&#x20;&#x20;&#x20;&#x20;AUE_SETPGID','[{\"cis\": [\"4.4\"]}]'),(8020,'Configure&#x20;Solaris&#x20;Auditing','Solaris&#x20;auditing&#x20;service&#x20;keeps&#x20;a&#x20;record&#x20;of&#x20;how&#x20;a&#x20;system&#x20;is&#x20;being&#x20;used.&#x20;Solaris&#x20;auditing&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;record&#x20;different&#x20;classes&#x20;of&#x20;events&#x20;based&#x20;upon&#x20;site&#x20;policy.&#x20;This&#x20;recommendation&#x20;will&#x20;set&#x20;and&#x20;verify&#x20;a&#x20;consensus-developed&#x20;auditing&#x20;policy.&#x20;That&#x20;said,&#x20;all&#x20;organizations&#x20;are&#x20;encouraged&#x20;to&#x20;tailor&#x20;this&#x20;policy&#x20;based&#x20;upon&#x20;their&#x20;specific&#x20;needs.&#x20;For&#x20;more&#x20;information&#x20;on&#x20;the&#x20;Solaris&#x20;auditing&#x20;service&#x20;including&#x20;how&#x20;to&#x20;filter&#x20;and&#x20;view&#x20;events,&#x20;see&#x20;the&#x20;Oracle&#x20;Solaris&#x20;product&#x20;documentation.&#x20;The&#x20;&quot;cis&quot;&#x20;class&#x20;is&#x20;a&#x20;&quot;custom&#x20;class&quot;&#x20;that&#x20;CIS&#x20;recommends&#x20;creating&#x20;that&#x20;includes&#x20;specifically&#x20;those&#x20;events&#x20;that&#x20;are&#x20;of&#x20;interest&#x20;&#40;defined&#x20;in&#x20;the&#x20;sections&#x20;above&#41;.&#x20;In&#x20;addition&#x20;to&#x20;those&#x20;events,&#x20;this&#x20;recommendation&#x20;also&#x20;includes&#x20;auditing&#x20;of&#x20;login&#x20;and&#x20;logout&#x20;&#40;lo&#41;&#x20;events,&#x20;administrative&#x20;&#40;ad&#41;&#x20;events,&#x20;file&#x20;transfer&#x20;&#40;ft&#41;&#x20;events,&#x20;and&#x20;command&#x20;execution&#x20;&#40;ex&#41;&#x20;events.&#x20;This&#x20;recommendation&#x20;also&#x20;configures&#x20;the&#x20;Solaris&#x20;auditing&#x20;service&#x20;to&#x20;capture&#x20;and&#x20;report&#x20;command&#x20;line&#x20;arguments&#x20;&#40;for&#x20;command&#x20;execution&#x20;events&#41;&#x20;and&#x20;the&#x20;zone&#x20;name&#x20;in&#x20;which&#x20;a&#x20;command&#x20;was&#x20;executed&#x20;&#40;for&#x20;global&#x20;and&#x20;non-global&#x20;zones&#41;.&#x20;Further,&#x20;this&#x20;recommendation&#x20;sets&#x20;a&#x20;disk&#x20;utilization&#x20;threshold&#x20;of&#x20;1%.&#x20;If&#x20;this&#x20;threshold&#x20;is&#x20;crossed&#x20;&#40;for&#x20;the&#x20;volume&#x20;that&#x20;includes&#x20;/var/audit&#41;,&#x20;then&#x20;a&#x20;warning&#x20;e-mail&#x20;will&#x20;be&#x20;sent&#x20;to&#x20;advise&#x20;the&#x20;system&#x20;administrators&#x20;that&#x20;audit&#x20;events&#x20;may&#x20;be&#x20;lost&#x20;if&#x20;the&#x20;disk&#x20;becomes&#x20;full.&#x20;Finally,&#x20;this&#x20;recommendation&#x20;will&#x20;also&#x20;ensure&#x20;that&#x20;new&#x20;audit&#x20;trails&#x20;are&#x20;created&#x20;at&#x20;the&#x20;start&#x20;of&#x20;each&#x20;new&#x20;day&#x20;&#40;to&#x20;help&#x20;keep&#x20;the&#x20;size&#x20;of&#x20;the&#x20;files&#x20;small&#x20;to&#x20;facilitate&#x20;analysis&#41;.','The&#x20;consensus&#x20;settings&#x20;described&#x20;in&#x20;this&#x20;section&#x20;are&#x20;an&#x20;effort&#x20;to&#x20;log&#x20;interesting&#x20;system&#x20;events&#x20;without&#x20;consuming&#x20;excessive&#x20;amounts&#x20;of&#x20;resources&#x20;logging&#x20;significant&#x20;but&#x20;usually&#x20;uninteresting&#x20;system&#x20;calls.','','To&#x20;enforce&#x20;this&#x20;setting,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;auditconfig&#x20;-conf&#x20;&#x20;&#x20;&#x20;#&#x20;auditconfig&#x20;-setflags&#x20;lo,ad,ft,ex,cis&#x20;&#x20;&#x20;&#x20;#&#x20;auditconfig&#x20;-setnaflags&#x20;lo&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;auditconfig&#x20;-setpolicy&#x20;cnt,argv,zonename&#x20;&#x20;&#x20;&#x20;#&#x20;auditconfig&#x20;-setplugin&#x20;audit_binfile&#x20;active&#x20;p_minfree=1&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;audit&#x20;-s&#x20;&#x20;&#x20;&#x20;#&#x20;rolemod&#x20;-K&#x20;audit_flags=lo,ad,ft,ex,cis:no&#x20;root&#x20;&#x20;&#x20;&#x20;#&#x20;EDITOR=ed&#x20;crontab&#x20;-e&#x20;root&#x20;&lt;&lt;&#x20;END_CRON&#x20;$&#x20;a&#x20;0&#x20;*&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/audit&#x20;-n&#x20;.&#x20;&#x20;w&#x20;q&#x20;END_CRON&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/var/audit&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;750&#x20;/var/audit','[{\"cis\": [\"4.5\"]}]'),(8021,'Default&#x20;Service&#x20;File&#x20;Creation&#x20;Mask','The&#x20;default&#x20;system&#x20;file&#x20;creation&#x20;mask&#x20;applies&#x20;to&#x20;processes&#x20;that&#x20;are&#x20;started&#x20;by&#x20;init&#x20;-&#x20;including&#x20;most&#x20;system&#x20;services.&#x20;To&#x20;ensure&#x20;that&#x20;files&#x20;are&#x20;not&#x20;created&#x20;with&#x20;write&#x20;access&#x20;to&#x20;anyone&#x20;other&#x20;than&#x20;their&#x20;owner,&#x20;the&#x20;default&#x20;file&#x20;creation&#x20;mask&#x20;should&#x20;be&#x20;set&#x20;to&#x20;022.&#x20;Some&#x20;sites&#x20;with&#x20;more&#x20;stringent&#x20;security&#x20;requirements&#x20;may&#x20;prefer&#x20;to&#x20;set&#x20;this&#x20;value&#x20;to&#x20;077&#x20;to&#x20;eliminate&#x20;all&#x20;permissions&#x20;for&#x20;group&#x20;and&#x20;world.&#x20;Note&#x20;that&#x20;changing&#x20;this&#x20;value&#x20;from&#x20;the&#x20;Solaris&#x20;default&#x20;of&#x20;022&#x20;may&#x20;negatively&#x20;impact&#x20;services&#x20;that&#x20;may&#x20;not&#x20;be&#x20;able&#x20;to&#x20;operate&#x20;with&#x20;a&#x20;stricter&#x20;setting.','The&#x20;default&#x20;file&#x20;creation&#x20;mask&#x20;should&#x20;be&#x20;set&#x20;to&#x20;022&#x20;to&#x20;avoid&#x20;unnecessarily&#x20;giving&#x20;files&#x20;write&#x20;access&#x20;to&#x20;group&#x20;or&#x20;world.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;&#x20;#&#x20;svccfg&#x20;-s&#x20;svc:/system/environment:init&#x20;setprop&#x20;umask/umask&#x20;=&#x20;astring:&#x20;&quot;022&quot;','[{\"cis\": [\"5.1\"]}]'),(8022,'Disable&#x20;&quot;nobody&quot;&#x20;Access&#x20;for&#x20;RPC&#x20;Encryption&#x20;Key&#x20;Storage&#x20;Service','This&#x20;action&#x20;listed&#x20;prevents&#x20;keyserv&#x20;from&#x20;using&#x20;default&#x20;keys&#x20;for&#x20;the&#x20;nobody&#x20;user,&#x20;effectively&#x20;stopping&#x20;the&#x20;nobody&#x20;user&#x20;from&#x20;accessing&#x20;information&#x20;via&#x20;Secure&#x20;RPC.','If&#x20;login&#x20;by&#x20;the&#x20;user&#x20;nobody&#x20;is&#x20;allowed&#x20;for&#x20;secure&#x20;RPC,&#x20;there&#x20;is&#x20;an&#x20;increased&#x20;risk&#x20;of&#x20;system&#x20;compromise.&#x20;If&#x20;keyserv&#x20;holds&#x20;a&#x20;private&#x20;key&#x20;for&#x20;the&#x20;nobody&#x20;user,&#x20;it&#x20;will&#x20;be&#x20;used&#x20;by&#x20;key_encryptsession&#x20;to&#x20;compute&#x20;a&#x20;magic&#x20;phrase&#x20;which&#x20;can&#x20;be&#x20;easily&#x20;recovered&#x20;by&#x20;a&#x20;malicious&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;#&#x20;awk&#x20;&#039;/ENABLE_NOBODY_KEYS=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;ENABLE_NOBODY_KEYS=NO&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;keyserv&#x20;&gt;&#x20;keyserv.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;keyserv.CIS&#x20;keyserv','[{\"cis\": [\"6.2\"]}]'),(8023,'Disable&#x20;X11&#x20;Forwarding&#x20;for&#x20;SSH','The&#x20;&#039;X11&#x20;Forwarding&#039;&#x20;parameter&#x20;defined&#x20;within&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;specifies&#x20;whether&#x20;or&#x20;not&#x20;X11&#x20;Forwarding&#x20;via&#x20;SSH&#x20;is&#x20;enabled&#x20;on&#x20;the&#x20;server:&#x20;The&#x20;Secure&#x20;Shell&#x20;service&#x20;provides&#x20;an&#x20;encrypted&#x20;&#039;tunnel&#039;&#x20;for&#x20;the&#x20;data&#x20;traffic&#x20;passing&#x20;through&#x20;it.&#x20;While&#x20;commonly&#x20;used&#x20;to&#x20;substitute&#x20;for&#x20;clear-text,&#x20;CLI-based&#x20;remote&#x20;connections&#x20;such&#x20;as&#x20;telnet,&#x20;Secure&#x20;Shell&#x20;can&#x20;be&#x20;used&#x20;to&#x20;forward&#x20;an&#x20;&#039;X&#x20;Window&#039;&#x20;session&#x20;through&#x20;the&#x20;encrypted&#x20;tunnel,&#x20;allowing&#x20;the&#x20;remote&#x20;user&#x20;to&#x20;have&#x20;a&#x20;GUI&#x20;interface.','As&#x20;enabling&#x20;X11Forwarding&#x20;on&#x20;the&#x20;host&#x20;can&#x20;permit&#x20;a&#x20;malicious&#x20;user&#x20;to&#x20;secretly&#x20;open&#x20;another&#x20;X11&#x20;connection&#x20;to&#x20;another&#x20;remote&#x20;client&#x20;during&#x20;the&#x20;session&#x20;and&#x20;perform&#x20;unobtrusive&#x20;activities&#x20;such&#x20;as&#x20;keystroke&#x20;monitoring,&#x20;if&#x20;the&#x20;X11&#x20;services&#x20;are&#x20;not&#x20;required&#x20;for&#x20;the&#x20;system&#039;s&#x20;intended&#x20;function,&#x20;it&#x20;should&#x20;be&#x20;disabled&#x20;or&#x20;restricted&#x20;as&#x20;appropriate&#x20;to&#x20;the&#x20;user&#039;s&#x20;needs.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^X11Forwarding&#x20;/&#x20;{&#x20;$2&#x20;=&#x20;&quot;no&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"6.3\"]}]'),(8024,'Limit&#x20;Consecutive&#x20;Login&#x20;Attempts&#x20;for&#x20;SSH','The&#x20;&#039;MaxAuthTries&#039;&#x20;parameter&#x20;in&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;By&#x20;restricting&#x20;the&#x20;number&#x20;of&#x20;failed&#x20;authentication&#x20;attempts&#x20;before&#x20;the&#x20;server&#x20;terminates&#x20;the&#x20;connection,&#x20;malicious&#x20;users&#x20;are&#x20;blocked&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;host&#x20;by&#x20;using&#x20;repetitive&#x20;brute-force&#x20;login&#x20;exploits.','By&#x20;setting&#x20;the&#x20;authentication&#x20;login&#x20;limit&#x20;to&#x20;a&#x20;low&#x20;value&#x20;this&#x20;will&#x20;disconnect&#x20;the&#x20;attacker&#x20;and&#x20;force&#x20;a&#x20;reconnect,&#x20;which&#x20;severely&#x20;limits&#x20;the&#x20;speed&#x20;of&#x20;such&#x20;brute&#x20;force&#x20;attacks.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^MaxAuthTries/&#x20;{&#x20;$2&#x20;=&#x20;&quot;3&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"6.4\"]}]'),(8025,'Disable&#x20;Rhost-based&#x20;Authentication&#x20;for&#x20;SSH','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;existing&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files,&#x20;which&#x20;may&#x20;apply&#x20;to&#x20;application&#x20;rather&#x20;than&#x20;user&#x20;logins,&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;SSH.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^IgnoreRhosts/&#x20;{&#x20;$2&#x20;=&#x20;&quot;yes&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh&#x20;&#x20;&#x20;&#x20;This&#x20;action&#x20;will&#x20;only&#x20;set&#x20;the&#x20;IgnoreRhosts&#x20;line&#x20;if&#x20;it&#x20;already&#x20;exists&#x20;in&#x20;the&#x20;file&#x20;to&#x20;ensure&#x20;that&#x20;it&#x20;is&#x20;set&#x20;to&#x20;the&#x20;proper&#x20;value.&#x20;If&#x20;the&#x20;IgnoreRhosts&#x20;line&#x20;does&#x20;not&#x20;exist&#x20;in&#x20;the&#x20;file,&#x20;the&#x20;default&#x20;setting&#x20;of&#x20;Yes&#x20;is&#x20;automatically&#x20;used,&#x20;so&#x20;no&#x20;additional&#x20;changes&#x20;are&#x20;needed.','[{\"cis\": [\"6.5\"]}]'),(8026,'Disable&#x20;root&#x20;login&#x20;for&#x20;SSH','The&#x20;PermitRootLogin&#x20;value&#x20;&#40;in&#x20;/etc/ssh/sshd_config&#41;&#x20;allows&#x20;for&#x20;direct&#x20;root&#x20;login&#x20;by&#x20;a&#x20;remote&#x20;user/application&#x20;to&#x20;resources&#x20;on&#x20;the&#x20;local&#x20;host.','By&#x20;default,&#x20;it&#x20;is&#x20;not&#x20;possible&#x20;for&#x20;the&#x20;root&#x20;account&#x20;to&#x20;log&#x20;directly&#x20;into&#x20;the&#x20;system&#x20;console&#x20;because&#x20;the&#x20;account&#x20;is&#x20;configured&#x20;as&#x20;a&#x20;role.&#x20;This&#x20;setting&#x20;therefore&#x20;does&#x20;not&#x20;significantly&#x20;alter&#x20;the&#x20;security&#x20;posture&#x20;of&#x20;the&#x20;system&#x20;unless&#x20;the&#x20;root&#x20;account&#x20;is&#x20;changed&#x20;from&#x20;this&#x20;default&#x20;and&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;normal&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^PermitRootLogin/&#x20;{&#x20;$2&#x20;=&#x20;&quot;no&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"6.6\"]}]'),(8027,'Blocking&#x20;Authentication&#x20;Using&#x20;Empty/Null&#x20;Passwords&#x20;for&#x20;SSH','The&#x20;PermitEmptyPasswords&#x20;value&#x20;allows&#x20;for&#x20;direct&#x20;login&#x20;through&#x20;SSH&#x20;without&#x20;a&#x20;password&#x20;by&#x20;a&#x20;remote&#x20;user/application&#x20;to&#x20;resources&#x20;on&#x20;the&#x20;local&#x20;host&#x20;in&#x20;the&#x20;same&#x20;way&#x20;a&#x20;standard&#x20;remote&#x20;login&#x20;would.','Permitting&#x20;login&#x20;without&#x20;a&#x20;password&#x20;is&#x20;inherently&#x20;risky.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^PermitEmptyPasswords/&#x20;{&#x20;$2&#x20;=&#x20;&quot;no&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"6.7\"]}]'),(8028,'Disable&#x20;Host-based&#x20;Authentication&#x20;for&#x20;Login-based&#x20;Services','The&#x20;.rhosts&#x20;files&#x20;are&#x20;used&#x20;for&#x20;automatic&#x20;login&#x20;to&#x20;remote&#x20;hosts&#x20;and&#x20;contain&#x20;username&#x20;and&#x20;hostname&#x20;combinations.&#x20;The&#x20;.rhosts&#x20;files&#x20;are&#x20;unencrypted&#x20;&#40;usually&#x20;group-&#x20;or&#x20;world-&#x20;readable&#41;&#x20;and&#x20;present&#x20;a&#x20;serious&#x20;risk&#x20;in&#x20;that&#x20;a&#x20;malicious&#x20;user&#x20;could&#x20;use&#x20;the&#x20;information&#x20;within&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;a&#x20;remote&#x20;host&#x20;with&#x20;the&#x20;privileges&#x20;of&#x20;the&#x20;original&#x20;application&#x20;or&#x20;user.','The&#x20;use&#x20;of&#x20;.rhosts&#x20;authentication&#x20;is&#x20;an&#x20;old&#x20;and&#x20;insecure&#x20;protocol&#x20;and&#x20;can&#x20;be&#x20;replaced&#x20;with&#x20;public-key&#x20;authentication&#x20;using&#x20;Secure&#x20;Shell.&#x20;As&#x20;automatic&#x20;authentication&#x20;settings&#x20;in&#x20;the&#x20;.rhosts&#x20;files&#x20;can&#x20;provide&#x20;a&#x20;malicious&#x20;user&#x20;with&#x20;sensitive&#x20;system&#x20;credentials,&#x20;the&#x20;use&#x20;of&#x20;.rhosts&#x20;files&#x20;should&#x20;be&#x20;disabled.&#x20;It&#x20;should&#x20;be&#x20;noted&#x20;that&#x20;by&#x20;default&#x20;the&#x20;Solaris&#x20;services&#x20;that&#x20;use&#x20;this&#x20;file,&#x20;including&#x20;rsh&#x20;and&#x20;rlogin,&#x20;are&#x20;disabled&#x20;by&#x20;default.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc&#x20;&#x20;&#x20;&#x20;#&#x20;cp&#x20;pam.conf&#x20;pam.conf.pre-CIS&#x20;&#x20;&#x20;&#x20;#&#x20;sed&#x20;-e&#x20;&#039;s/^.*pam_rhosts_auth/#&amp;/&#039;&#x20;&lt;&#x20;/etc/pam.conf&#x20;&gt;&#x20;pam.conf.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;pam.conf.CIS&#x20;pam.conf','[{\"cis\": [\"6.8\"]}]'),(8029,'Set&#x20;Delay&#x20;between&#x20;Failed&#x20;Login&#x20;Attempts&#x20;to&#x20;4','The&#x20;SLEEPTIME&#x20;variable&#x20;in&#x20;the&#x20;/etc/default/login&#x20;file&#x20;controls&#x20;the&#x20;number&#x20;of&#x20;seconds&#x20;to&#x20;wait&#x20;before&#x20;printing&#x20;the&#x20;&quot;login&#x20;incorrect&quot;&#x20;message&#x20;when&#x20;a&#x20;bad&#x20;password&#x20;is&#x20;provided.','As&#x20;an&#x20;immediate&#x20;return&#x20;of&#x20;an&#x20;error&#x20;message,&#x20;coupled&#x20;with&#x20;the&#x20;capability&#x20;to&#x20;try&#x20;again&#x20;may&#x20;facilitate&#x20;automatic&#x20;and&#x20;rapid-fire&#x20;brute-force&#x20;password&#x20;attacks&#x20;by&#x20;a&#x20;malicious&#x20;user,&#x20;this&#x20;delay&#x20;time&#x20;should&#x20;be&#x20;set&#x20;as&#x20;appropriate&#x20;to&#x20;the&#x20;needs&#x20;of&#x20;the&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;#&#x20;awk&#x20;&#039;/SLEEPTIME=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;SLEEPTIME=4&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;login&#x20;&gt;&#x20;login.CIS&#x20;#&#x20;mv&#x20;login.CIS&#x20;login','[{\"cis\": [\"6.10\"]}]'),(8030,'Remove&#x20;Autologin&#x20;Capabilities&#x20;from&#x20;the&#x20;GNOME&#x20;desktop','The&#x20;GNOME&#x20;Display&#x20;Manager&#x20;is&#x20;used&#x20;for&#x20;login&#x20;session&#x20;management.&#x20;See&#x20;the&#x20;manual&#x20;page&#x20;gdm&#40;1&#41;&#x20;for&#x20;more&#x20;information.&#x20;By&#x20;default,&#x20;GNOME&#x20;automatic&#x20;login&#x20;is&#x20;defined&#x20;in&#x20;pam.conf&#40;4&#41;&#x20;to&#x20;allow&#x20;users&#x20;to&#x20;access&#x20;the&#x20;system&#x20;without&#x20;a&#x20;password.','As&#x20;automatic&#x20;logins&#x20;are&#x20;a&#x20;known&#x20;security&#x20;risk&#x20;for&#x20;other&#x20;than&#x20;&quot;kiosk&quot;&#x20;types&#x20;of&#x20;systems,&#x20;GNOME&#x20;automatic&#x20;login&#x20;should&#x20;be&#x20;disabled&#x20;in&#x20;pam.conf&#40;4&#41;.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/^gdm-autologin/&#x20;{&#x20;$1=&quot;&#x20;&#x20;&#x20;#gdm-autologin&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/pam.conf&#x20;&gt;&#x20;/etc/pam.conf.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;pam.conf.CIS&#x20;pam.conf','[{\"cis\": [\"6.11\"]}]'),(8031,'Set&#x20;Default&#x20;Screen&#x20;Lock&#x20;for&#x20;GNOME&#x20;Users','The&#x20;timeout&#x20;parameter&#x20;dictates&#x20;the&#x20;invocation&#x20;of&#x20;a&#x20;password-protected&#x20;screen&#x20;saver&#x20;after&#x20;a&#x20;specified&#x20;time&#x20;of&#x20;keyboard&#x20;and&#x20;mouse&#x20;inactivity,&#x20;specific&#x20;to&#x20;the&#x20;xscreensaver&#x20;application&#x20;used&#x20;in&#x20;the&#x20;GNOME&#x20;windowing&#x20;environment.','As&#x20;a&#x20;screensaver&#x20;timeout&#x20;provides&#x20;protection&#x20;for&#x20;a&#x20;desktop&#x20;that&#x20;has&#x20;not&#x20;been&#x20;locked&#x20;by&#x20;the&#x20;user&#x20;upon&#x20;his/her&#x20;departure,&#x20;to&#x20;help&#x20;prevent&#x20;session&#x20;hijacking,&#x20;this&#x20;value&#x20;should&#x20;be&#x20;set&#x20;as&#x20;appropriate&#x20;to&#x20;the&#x20;needs&#x20;of&#x20;the&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/usr/share/X11/app-defaults&#x20;&#x20;&#x20;&#x20;#&#x20;cp&#x20;XScreenSaver&#x20;XScreenSaver.orig&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/^*timeout:/&#x20;{&#x20;$2&#x20;=&#x20;&quot;0:10:00&quot;&#x20;}&#x20;/^*lockTimeout:/&#x20;{&#x20;$2&#x20;=&#x20;&quot;0:00:00&quot;&#x20;}&#x20;/^*lock:/&#x20;{&#x20;$2&#x20;=&#x20;&quot;True&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;xScreenSaver&#x20;&gt;&#x20;xScreenSaver.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;xScreenSaver.CIS&#x20;xScreenSaver','[{\"cis\": [\"6.12\"]}]'),(8032,'Restrict&#x20;at/cron&#x20;to&#x20;Authorized&#x20;Users','The&#x20;cron.allow&#x20;and&#x20;at.allow&#x20;files&#x20;contain&#x20;a&#x20;list&#x20;of&#x20;users&#x20;who&#x20;are&#x20;allowed&#x20;to&#x20;run&#x20;the&#x20;crontab&#x20;and&#x20;at&#x20;commands&#x20;to&#x20;submit&#x20;jobs&#x20;to&#x20;be&#x20;run&#x20;at&#x20;scheduled&#x20;intervals.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;needs&#x20;the&#x20;ability&#x20;to&#x20;schedule&#x20;jobs.&#x20;Even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.&#x20;Much&#x20;more&#x20;effective&#x20;access&#x20;controls&#x20;for&#x20;the&#x20;cron&#x20;system&#x20;can&#x20;be&#x20;obtained&#x20;by&#x20;using&#x20;Role-Based&#x20;Access&#x20;Controls&#x20;&#40;RBAC&#41;.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/cron.d&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;cron.deny&#x20;cron.deny.cis&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;at.deny&#x20;at.deny.cis&#x20;&#x20;&#x20;&#x20;#&#x20;echo&#x20;root&#x20;&gt;&#x20;cron.allow&#x20;&#x20;&#x20;&#x20;#&#x20;cp&#x20;/dev/null&#x20;at.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;cron.allow&#x20;at.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;400&#x20;cron.allow&#x20;at.allow','[{\"cis\": [\"6.13\"]}]'),(8033,'Restrict&#x20;root&#x20;Login&#x20;to&#x20;System&#x20;Console','Privileged&#x20;access&#x20;to&#x20;the&#x20;system&#x20;via&#x20;root&#x20;must&#x20;be&#x20;accountable&#x20;to&#x20;a&#x20;particular&#x20;user.','Use&#x20;an&#x20;authorized&#x20;mechanism&#x20;such&#x20;as&#x20;RBAC&#x20;and&#x20;the&#x20;su&#x20;command&#x20;to&#x20;provide&#x20;administrative&#x20;access&#x20;to&#x20;unprivileged&#x20;accounts.&#x20;These&#x20;mechanisms&#x20;provide&#x20;an&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;problems.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;#&#x20;awk&#x20;&#039;/CONSOLE=/&#x20;{&#x20;print&#x20;&quot;CONSOLE=/dev/console&quot;;&#x20;next&#x20;};&#x20;{&#x20;print&#x20;}&#039;&#x20;login&#x20;&gt;&#x20;login.CIS&#x20;#&#x20;mv&#x20;login.CIS&#x20;login','[{\"cis\": [\"6.14\"]}]'),(8034,'Set&#x20;Retry&#x20;Limit&#x20;for&#x20;Account&#x20;Lockout','The&#x20;RETRIES&#x20;parameter&#x20;is&#x20;the&#x20;number&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;a&#x20;user&#x20;is&#x20;allowed&#x20;before&#x20;being&#x20;disconnected&#x20;from&#x20;the&#x20;system&#x20;and&#x20;forced&#x20;to&#x20;reconnect.&#x20;When&#x20;LOCK_AFTER_RETRIES&#x20;is&#x20;set&#x20;in&#x20;/etc/security/policy.conf,&#x20;then&#x20;the&#x20;user&#039;s&#x20;account&#x20;is&#x20;locked&#x20;after&#x20;this&#x20;many&#x20;failed&#x20;retries&#x20;&#40;the&#x20;account&#x20;can&#x20;only&#x20;be&#x20;unlocked&#x20;by&#x20;the&#x20;administrator&#x20;using&#x20;the&#x20;command:&#x20;passwd&#x20;-u&#x20;&lt;username&gt;&#41;.&#x20;The&#x20;account&#x20;lockout&#x20;threshold&#x20;&#40;RETRIES&#x20;parameter&#41;&#x20;restricts&#x20;the&#x20;number&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;allowed&#x20;before&#x20;requiring&#x20;the&#x20;offending&#x20;account&#x20;be&#x20;locked.&#x20;The&#x20;lockout&#x20;requirement&#x20;will&#x20;help&#x20;block&#x20;malicious&#x20;users&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;host&#x20;via&#x20;automated,&#x20;repetitive&#x20;brute-force&#x20;login&#x20;exploits--trying&#x20;different&#x20;passwords&#x20;until&#x20;one&#x20;fits&#x20;a&#x20;user&#x20;name.','Setting&#x20;the&#x20;failed&#x20;login&#x20;limit&#x20;to&#x20;an&#x20;appropriate&#x20;value&#x20;locks&#x20;the&#x20;user&#x20;account,&#x20;which&#x20;will&#x20;severely&#x20;limit&#x20;the&#x20;speed&#x20;of&#x20;such&#x20;attacks,&#x20;making&#x20;it&#x20;much&#x20;more&#x20;likely&#x20;that&#x20;the&#x20;attacker&#039;s&#x20;pattern&#x20;will&#x20;be&#x20;noticed&#x20;and&#x20;the&#x20;offending&#x20;source&#x20;address&#x20;and/or&#x20;port&#x20;blocked,&#x20;so&#x20;this&#x20;should&#x20;be&#x20;set&#x20;according&#x20;to&#x20;the&#x20;needs&#x20;of&#x20;the&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/RETRIES=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;RETRIES=3&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;login&#x20;&gt;login.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;login.CIS&#x20;login&#x20;&#x20;&#x20;&#x20;#&#x20;cd&#x20;/etc/security&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/LOCK_AFTER_RETRIES=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;LOCK_AFTER_RETRIES=YES&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;policy.conf&#x20;&gt;&#x20;policy.conf.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;policy.conf.CIS&#x20;policy.conf&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/system/name-service/cache&#x20;&#x20;&#x20;&#x20;&#x20;Be&#x20;careful&#x20;when&#x20;enabling&#x20;these&#x20;settings&#x20;as&#x20;they&#x20;can&#x20;create&#x20;a&#x20;denial-of-service&#x20;situation&#x20;for&#x20;legitimate&#x20;users&#x20;and&#x20;applications.&#x20;Account&#x20;lockout&#x20;can&#x20;be&#x20;disabled&#x20;for&#x20;specific&#x20;users&#x20;via&#x20;the&#x20;usermod&#x20;command.&#x20;For&#x20;example,&#x20;the&#x20;following&#x20;command&#x20;disables&#x20;account&#x20;lock&#x20;specifically&#x20;for&#x20;the&#x20;oracle&#x20;account:&#x20;#&#x20;usermod&#x20;-K&#x20;lock_after_retries=no&#x20;oracle','[{\"cis\": [\"6.15\"]}]'),(8035,'Secure&#x20;the&#x20;GRUB&#x20;Menu&#x20;&#40;Intel&#41;','GRUB&#x20;is&#x20;a&#x20;boot&#x20;loader&#x20;for&#x20;x64&#x20;based&#x20;systems&#x20;that&#x20;permits&#x20;loading&#x20;an&#x20;OS&#x20;image&#x20;from&#x20;any&#x20;location.&#x20;Oracle&#x20;x64&#x20;systems&#x20;support&#x20;the&#x20;use&#x20;of&#x20;a&#x20;GRUB&#x20;Menu&#x20;password&#x20;for&#x20;the&#x20;console.','The&#x20;flexibility&#x20;that&#x20;GRUB&#x20;provides&#x20;creates&#x20;a&#x20;security&#x20;risk&#x20;if&#x20;its&#x20;configuration&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user.&#x20;The&#x20;failsafe&#x20;menu&#x20;entry&#x20;needs&#x20;to&#x20;be&#x20;secured&#x20;in&#x20;the&#x20;same&#x20;environments&#x20;that&#x20;require&#x20;securing&#x20;the&#x20;systems&#x20;firmware&#x20;to&#x20;avoid&#x20;unauthorized&#x20;removable&#x20;media&#x20;boots.&#x20;Setting&#x20;the&#x20;GRUB&#x20;Menu&#x20;password&#x20;helps&#x20;prevent&#x20;attackers&#x20;with&#x20;physical&#x20;access&#x20;to&#x20;the&#x20;system&#x20;console&#x20;from&#x20;booting&#x20;off&#x20;some&#x20;external&#x20;device&#x20;&#40;such&#x20;as&#x20;a&#x20;CD-&#x20;ROM&#x20;or&#x20;floppy&#41;&#x20;and&#x20;subverting&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;actions&#x20;described&#x20;in&#x20;this&#x20;section&#x20;will&#x20;ensure&#x20;you&#x20;cannot&#x20;get&#x20;to&#x20;failsafe&#x20;or&#x20;any&#x20;of&#x20;the&#x20;GRUB&#x20;command&#x20;line&#x20;options&#x20;without&#x20;first&#x20;entering&#x20;the&#x20;password.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;/boot/grub/bin/grub&#x20;&#x20;&#x20;&#x20;grub&gt;&#x20;md5crypt&#x20;&#x20;&#x20;&#x20;Password:&#x20;[enter&#x20;desired&#x20;boot&#x20;loader&#x20;password]&#x20;&#x20;&#x20;&#x20;Encrypted:&#x20;[enter&#x20;md5&#x20;password&#x20;string]&#x20;&#x20;&#x20;&#x20;grub&gt;&#x20;[enter&#x20;control-C&#x20;&#40;^C&#41;]&#x20;&#x20;&#x20;&#x20;The&#x20;actual&#x20;menu.lst&#x20;file&#x20;for&#x20;Solaris&#x20;11&#x20;x64&#x20;is&#x20;the&#x20;/rpool/boot/grub/menu.lst.&#x20;First,&#x20;ensure&#x20;the&#x20;menu.lst&#x20;file&#x20;can&#x20;only&#x20;be&#x20;read&#x20;by&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;chmod&#x20;600&#x20;/rpool/boot/grub/menu.lst&#x20;&#x20;&#x20;&#x20;Next,&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;menu.lst&#x20;file&#x20;above&#x20;the&#x20;entries&#x20;added&#x20;by&#x20;bootadm:&#x20;password&#x20;--md5&#x20;[enter&#x20;md5&#x20;password&#x20;string&#x20;generated&#x20;above]&#x20;&#x20;&#x20;&#x20;Finally,&#x20;add&#x20;the&#x20;keyword&#x20;lock&#x20;to&#x20;the&#x20;Solaris&#x20;failsafe&#x20;boot&#x20;entry&#x20;as&#x20;in&#x20;the&#x20;following&#x20;example&#x20;&#40;as&#x20;well&#x20;as&#x20;to&#x20;any&#x20;other&#x20;entries&#x20;that&#x20;you&#x20;want&#x20;to&#x20;protect&#41;:&#x20;title&#x20;Solaris&#x20;failsafe&#x20;&#x20;&#x20;&#x20;lock','[{\"cis\": [\"6.17\"]}]'),(8036,'Set&#x20;Password&#x20;Expiration&#x20;Parameters&#x20;on&#x20;Active&#x20;Accounts','The&#x20;characteristics&#x20;of&#x20;an&#x20;operating&#x20;system&#x20;that&#x20;make&#x20;&#039;user&#x20;identification&#039;&#x20;via&#x20;password&#x20;a&#x20;secure&#x20;and&#x20;workable&#x20;solution&#x20;is&#x20;the&#x20;combination&#x20;of&#x20;settings&#x20;chosen.&#x20;By&#x20;requiring&#x20;that&#x20;a&#x20;series&#x20;of&#x20;password-choices&#x20;be&#x20;security-centric,&#x20;it&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;a&#x20;malicious&#x20;user&#x20;breaking&#x20;the&#x20;password&#x20;through&#x20;dictionary/brute&#x20;force&#x20;attacks&#x20;or&#x20;fortuitous&#x20;guessing&#x20;based&#x20;upon&#x20;&#039;social&#x20;engineering.&#039;&#x20;A&#x20;basic&#x20;password&#x20;security&#x20;strategy&#x20;is&#x20;requiring&#x20;a&#x20;new&#x20;password&#x20;to&#x20;be&#x20;chosen&#x20;every&#x20;45-90&#x20;days,&#x20;so&#x20;that&#x20;repeated&#x20;attempts&#x20;to&#x20;gain&#x20;entry&#x20;by&#x20;brute-force&#x20;tactics&#x20;will&#x20;fail&#x20;when&#x20;a&#x20;new&#x20;password&#x20;is&#x20;chosen,&#x20;which&#x20;requires&#x20;starting&#x20;over&#x20;again&#x20;to&#x20;break&#x20;the&#x20;new&#x20;password.','The&#x20;commands&#x20;for&#x20;this&#x20;item&#x20;set&#x20;all&#x20;active&#x20;accounts&#x20;&#40;except&#x20;the&#x20;root&#x20;account&#41;&#x20;to&#x20;force&#x20;password&#x20;changes&#x20;every&#x20;91&#x20;days&#x20;&#40;13&#x20;weeks&#41;,&#x20;and&#x20;then&#x20;prevent&#x20;password&#x20;changes&#x20;for&#x20;seven&#x20;days&#x20;&#40;one&#x20;week&#41;,&#x20;thereafter.&#x20;Users&#x20;will&#x20;begin&#x20;receiving&#x20;warnings&#x20;28&#x20;days&#x20;&#40;4&#x20;weeks&#41;&#x20;before&#x20;their&#x20;password&#x20;expires.&#x20;Sites&#x20;also&#x20;have&#x20;the&#x20;option&#x20;of&#x20;expiring&#x20;idle&#x20;accounts&#x20;after&#x20;a&#x20;certain&#x20;number&#x20;of&#x20;days&#x20;&#40;see&#x20;the&#x20;on-line&#x20;manual&#x20;page&#x20;for&#x20;the&#x20;usermod&#x20;command,&#x20;particularly&#x20;the&#x20;-f&#x20;option&#41;.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;logins&#x20;-ox&#x20;|&#x20;awk&#x20;-F:&#x20;&#039;&#40;$1&#x20;==&#x20;&quot;root&quot;&#x20;||&#x20;$8&#x20;==&#x20;&quot;LK&quot;&#x20;||&#x20;$8&#x20;==&#x20;&quot;NL&quot;&#41;&#x20;&#x20;{&#x20;next&#x20;}&#x20;;&#x20;&#x20;{&#x20;$cmd&#x20;=&#x20;&quot;passwd&quot;&#x20;}&#x20;;&#x20;&#40;$11&#x20;91&#41;&#x20;{&#x20;$cmd&#x20;=&#x20;$cmd&#x20;&quot;&#x20;-x&#x20;91&quot;&#x20;}&#x20;&#x20;&#40;$10&#x20;&lt;&#x20;7&#41;&#x20;{&#x20;$cmd&#x20;=&#x20;$cmd&#x20;&quot;&#x20;-n&#x20;7&quot;&#x20;}&#x20;&#x20;&#40;$12&#x20;&lt;&#x20;28&#41;&#x20;{&#x20;$cmd&#x20;=&#x20;$cmd&#x20;&quot;&#x20;-w&#x20;28&quot;&#x20;}&#x20;&#x20;&#40;$cmd&#x20;!=&#x20;&quot;passwd&quot;&#41;&#x20;{&#x20;print&#x20;$cmd&#x20;&quot;&#x20;&quot;&#x20;$1&#x20;}&#039;&#x20;&#x20;&gt;&#x20;/etc/CISupd_accounts&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sh&#x20;/etc/CISupd_accounts&#x20;&#x20;&#x20;&#x20;#&#x20;rm&#x20;-f&#x20;/etc/CISupd_accounts&#x20;&#x20;&#x20;&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;grep&#x20;-v&#x20;WEEKS&#x20;passwd&#x20;&gt;&#x20;passwd.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;cat&#x20;&lt;&lt;EODefaults&#x20;&gt;&gt;&#x20;passwd.CIS&#x20;MAXWEEKS=13&#x20;MINWEEKS=1&#x20;WARNWEEKS=4&#x20;EODefaults&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;passwd.CIS&#x20;passwd','[{\"cis\": [\"7.1\"]}]'),(8037,'Set&#x20;Strong&#x20;Password&#x20;Creation&#x20;Policies','The&#x20;variables&#x20;in&#x20;the&#x20;/etc/default/passwd&#x20;file&#x20;indicate&#x20;various&#x20;strategies&#x20;for&#x20;creating&#x20;differences&#x20;required&#x20;between&#x20;an&#x20;old&#x20;and&#x20;a&#x20;new&#x20;password.&#x20;As&#x20;requiring&#x20;users&#x20;to&#x20;select&#x20;a&#x20;specific&#x20;numbers&#x20;of&#x20;differences&#x20;between&#x20;the&#x20;characters&#x20;in&#x20;the&#x20;existing&#x20;password&#x20;and&#x20;the&#x20;new&#x20;one&#x20;can&#x20;strengthen&#x20;the&#x20;password&#x20;by&#x20;increasing&#x20;the&#x20;symbol-set&#x20;space,&#x20;to&#x20;further&#x20;increase&#x20;the&#x20;difficulty&#x20;of&#x20;breaking&#x20;any&#x20;password&#x20;by&#x20;brute-force&#x20;attacks,&#x20;these&#x20;values&#x20;should&#x20;be&#x20;set&#x20;as&#x20;appropriate&#x20;to&#x20;the&#x20;needs&#x20;of&#x20;the&#x20;user.','Administrators&#x20;may&#x20;wish&#x20;to&#x20;add&#x20;site-specific&#x20;dictionaries&#x20;to&#x20;the&#x20;DICTIONLIST&#x20;parameter.&#x20;Warning:&#x20;Sites&#x20;often&#x20;have&#x20;differing&#x20;opinions&#x20;on&#x20;the&#x20;optimal&#x20;value&#x20;of&#x20;the&#x20;HISTORY&#x20;parameter&#x20;&#40;how&#x20;many&#x20;previous&#x20;passwords&#x20;to&#x20;remember&#x20;per&#x20;user&#x20;in&#x20;order&#x20;to&#x20;prevent&#x20;re-&#x20;use&#41;.&#x20;The&#x20;values&#x20;specified&#x20;here&#x20;are&#x20;in&#x20;compliance&#x20;with&#x20;NSA/DISA&#x20;requirements.&#x20;If&#x20;this&#x20;is&#x20;too&#x20;restrictive&#x20;for&#x20;your&#x20;site,&#x20;you&#x20;may&#x20;wish&#x20;to&#x20;set&#x20;a&#x20;HISTORY&#x20;value&#x20;of&#x20;4&#x20;and&#x20;a&#x20;MAXREPEATS&#x20;of&#x20;2.&#x20;Consult&#x20;your&#x20;local&#x20;security&#x20;rules&#x20;for&#x20;guidance.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/PASSLENGTH=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;PASSLENGTH=8&quot;&#x20;};&#x20;/NAMECHECK=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;NAMECHECK=YES&quot;&#x20;};&#x20;/HISTORY=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;HISTORY=10&quot;&#x20;};&#x20;/MINDIFF=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINDIFF=3&quot;&#x20;};&#x20;/MINALPHA=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINALPHA=2&quot;&#x20;};&#x20;/MINUPPER=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINUPPER=1&quot;&#x20;};&#x20;/MINLOWER=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINLOWER=1&quot;&#x20;};&#x20;/MINNONALPHA=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINNONALPHA=1&quot;&#x20;};&#x20;/MAXREPEATS=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MAXREPEATS=0&quot;&#x20;};&#x20;/WHITESPACE=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;WHITESPACE=YES&quot;&#x20;};&#x20;/DICTIONDBDIR=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;DICTIONDBDIR=/var/passwd&quot;&#x20;};&#x20;/DICTIONLIST=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;DICTIONLIST=/usr/share/lib/dict/words&quot;&#x20;};&#x20;{&#x20;print&#x20;}&#039;&#x20;passwd&#x20;&gt;&#x20;passwd.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;passwd.CIS&#x20;passwd','[{\"cis\": [\"7.2\"]}]'),(8038,'Set&#x20;Default&#x20;umask&#x20;for&#x20;users','The&#x20;default&#x20;umask&#40;1&#41;&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#40;1&#41;&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;.profile,&#x20;.cshrc,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;allow&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/#UMASK=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;UMASK=027&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;login&#x20;&gt;&#x20;login.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;login.CIS&#x20;login','[{\"cis\": [\"7.3\"]}]'),(8039,'Set&#x20;Default&#x20;File&#x20;Creation&#x20;Mask&#x20;for&#x20;FTP&#x20;Users','If&#x20;FTP&#x20;is&#x20;permitted,&#x20;set&#x20;a&#x20;strong,&#x20;default&#x20;file&#x20;creation&#x20;mask&#x20;to&#x20;apply&#x20;to&#x20;files&#x20;created&#x20;by&#x20;the&#x20;FTP&#x20;server.','Many&#x20;users&#x20;assume&#x20;that&#x20;the&#x20;FTP&#x20;server&#x20;will&#x20;use&#x20;their&#x20;system&#x20;file&#x20;creation&#x20;mask;&#x20;generally&#x20;it&#x20;does&#x20;not.&#x20;This&#x20;setting&#x20;ensures&#x20;that&#x20;files&#x20;transmitted&#x20;over&#x20;FTP&#x20;use&#x20;a&#x20;strong&#x20;file&#x20;creation&#x20;mask.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc&#x20;&#x20;&#x20;&#x20;#&#x20;if&#x20;[&#x20;&quot;`grep&#x20;&#039;^Umask&#039;&#x20;proftpd.conf`&quot;&#x20;];&#x20;then&#x20;awk&#x20;&#039;/^Umask/&#x20;{&#x20;$2&#x20;=&#x20;&quot;027&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;proftpd.conf&#x20;&gt;&#x20;proftpd.conf.CIS&#x20;mv&#x20;proftpd.conf.CIS&#x20;proftpd.conf&#x20;else&#x20;echo&#x20;&quot;Umask&#x20;027&quot;&#x20;&gt;&gt;&#x20;proftpd.conf&#x20;fi','[{\"cis\": [\"7.4\"]}]'),(8040,'Set&#x20;&quot;mesg&#x20;n&quot;&#x20;as&#x20;Default&#x20;for&#x20;All&#x20;Users','The&#x20;&quot;mesg&#x20;n&quot;&#x20;command&#x20;blocks&#x20;attempts&#x20;to&#x20;use&#x20;the&#x20;write&#x20;or&#x20;talk&#x20;commands&#x20;to&#x20;contact&#x20;users&#x20;at&#x20;their&#x20;terminals,&#x20;but&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;slightly&#x20;strengthening&#x20;permissions&#x20;on&#x20;the&#x20;user&#039;s&#x20;tty&#x20;device.','Since&#x20;write&#x20;and&#x20;talk&#x20;are&#x20;no&#x20;longer&#x20;widely&#x20;used&#x20;at&#x20;most&#x20;sites,&#x20;the&#x20;incremental&#x20;security&#x20;increase&#x20;is&#x20;worth&#x20;the&#x20;loss&#x20;of&#x20;functionality.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc&#x20;&#x20;&#x20;&#x20;#&#x20;for&#x20;file&#x20;in&#x20;profile&#x20;.login&#x20;;&#x20;do&#x20;if&#x20;[&#x20;&quot;`grep&#x20;mesg&#x20;$file`&quot;&#x20;];&#x20;then&#x20;awk&#x20;&#039;$1&#x20;==&#x20;&quot;mesg&quot;&#x20;{&#x20;$2&#x20;=&#x20;&quot;n&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;$file&#x20;&gt;&#x20;$file.CIS&#x20;mv&#x20;$file.CIS&#x20;$file&#x20;else&#x20;echo&#x20;mesg&#x20;n&#x20;&gt;&gt;&#x20;$file&#x20;fi&#x20;done','[{\"cis\": [\"7.5\"]}]'),(8041,'Create&#x20;Warnings&#x20;for&#x20;Standard&#x20;Login&#x20;Services','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;prior&#x20;to&#x20;the&#x20;login&#x20;prompt&#x20;on&#x20;the&#x20;system&#039;s&#x20;console&#x20;and&#x20;serial&#x20;devices&#x20;and&#x20;also&#x20;prior&#x20;to&#x20;logins&#x20;via&#x20;telnet&#x20;and&#x20;Secure&#x20;Shell.&#x20;The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;generally&#x20;displayed&#x20;after&#x20;all&#x20;successful&#x20;logins,&#x20;regardless&#x20;from&#x20;where&#x20;the&#x20;user&#x20;is&#x20;logging&#x20;in.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;As&#x20;implementing&#x20;a&#x20;logon&#x20;banner&#x20;to&#x20;deter&#x20;inappropriate&#x20;use&#x20;and&#x20;can&#x20;provide&#x20;a&#x20;foundation&#x20;for&#x20;legal&#x20;action&#x20;against&#x20;abuse,&#x20;this&#x20;warning&#x20;content&#x20;should&#x20;be&#x20;set&#x20;as&#x20;appropriate.&#x20;Consult&#x20;with&#x20;your&#x20;organization&#039;s&#x20;legal&#x20;counsel&#x20;for&#x20;the&#x20;appropriate&#x20;wording&#x20;as&#x20;the&#x20;examples&#x20;below&#x20;are&#x20;for&#x20;demonstration&#x20;purposes&#x20;only.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;users&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/motd&#x20;&#x20;&#x20;&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;users&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"8.1\"]}]'),(8042,'Enable&#x20;a&#x20;Warning&#x20;Banner&#x20;for&#x20;the&#x20;SSH&#x20;Service','The&#x20;contents&#x20;of&#x20;the&#x20;Banner&#x20;string&#x20;in&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;are&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;allowed,&#x20;requiring&#x20;that&#x20;the&#x20;user&#x20;read&#x20;the&#x20;legal&#x20;caution.','','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^#Banner/&#x20;{&#x20;$1&#x20;=&#x20;&quot;Banner&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"8.2\"]}]'),(8043,'Enable&#x20;a&#x20;Warning&#x20;Banner&#x20;for&#x20;the&#x20;GNOME&#x20;Service','The&#x20;GNOME&#x20;Display&#x20;Manager&#x20;is&#x20;used&#x20;for&#x20;login&#x20;session&#x20;management.&#x20;See&#x20;the&#x20;manual&#x20;page&#x20;gdm&#40;1&#41;&#x20;for&#x20;more&#x20;information&#x20;on&#x20;configuration&#x20;of&#x20;the&#x20;settings,&#x20;which&#x20;can&#x20;be&#x20;user-&#x20;or&#x20;group&#x20;specific.','The&#x20;remediation&#x20;action&#x20;for&#x20;this&#x20;item&#x20;sets&#x20;a&#x20;pre-login&#x20;warning&#x20;message&#x20;for&#x20;GDM&#x20;users.&#x20;Additional&#x20;methods&#x20;can&#x20;be&#x20;employed&#x20;to&#x20;display&#x20;a&#x20;similar&#x20;message&#x20;to&#x20;a&#x20;user&#x20;post-&#x20;authentication.&#x20;For&#x20;more&#x20;information,&#x20;see&#x20;the&#x20;Oracle&#x20;Solaris&#x20;11&#x20;Security&#x20;Guidelines&#x20;document.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Edit&#x20;the&#x20;/etc/gdm/Init/Default&#x20;file&#x20;to&#x20;add&#x20;the&#x20;following&#x20;content&#x20;before&#x20;the&#x20;last&#x20;line&#x20;of&#x20;the&#x20;file.&#x20;&#x20;/usr/bin/zenity&#x20;--text-info&#x20;--width=800&#x20;--height=300&#x20;--title=&quot;Security&#x20;Message&quot;&#x20;--filename=/etc/issue','[{\"cis\": [\"8.3\"]}]'),(8044,'Enable&#x20;a&#x20;Warning&#x20;Banner&#x20;for&#x20;the&#x20;FTP&#x20;service','The&#x20;action&#x20;for&#x20;this&#x20;item&#x20;sets&#x20;a&#x20;warning&#x20;message&#x20;for&#x20;FTP&#x20;users&#x20;before&#x20;they&#x20;log&#x20;in.','Warning&#x20;Banners&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;access&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;using&#x20;the&#x20;system.&#x20;The&#x20;text&#x20;below&#x20;is&#x20;a&#x20;generic&#x20;sample&#x20;only,&#x20;so&#x20;consult&#x20;with&#x20;your&#x20;organization&#039;s&#x20;legal&#x20;counsel&#x20;for&#x20;the&#x20;appropriate&#x20;wording.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;echo&#x20;&quot;DisplayConnect&#x20;/etc/issue&quot;&#x20;&gt;&gt;&#x20;/etc/proftpd.conf&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;ftp','[{\"cis\": [\"8.4\"]}]'),(8045,'Check&#x20;that&#x20;the&#x20;Banner&#x20;Setting&#x20;for&#x20;telnet&#x20;is&#x20;Null','The&#x20;BANNER&#x20;variable&#x20;in&#x20;the&#x20;file&#x20;/etc/default/telnetd&#x20;can&#x20;be&#x20;used&#x20;to&#x20;display&#x20;text&#x20;before&#x20;the&#x20;telnet&#x20;login&#x20;prompt.&#x20;Traditionally,&#x20;it&#x20;has&#x20;been&#x20;used&#x20;to&#x20;display&#x20;the&#x20;OS&#x20;level&#x20;of&#x20;the&#x20;target&#x20;system.','The&#x20;warning&#x20;banner&#x20;provides&#x20;information&#x20;that&#x20;can&#x20;be&#x20;used&#x20;in&#x20;reconnaissance&#x20;for&#x20;an&#x20;attack.&#x20;By&#x20;default,&#x20;this&#x20;file&#x20;is&#x20;distributed&#x20;with&#x20;the&#x20;BANNER&#x20;variable&#x20;set&#x20;to&#x20;null.&#x20;It&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;create&#x20;a&#x20;separate&#x20;warning&#x20;banner&#x20;for&#x20;telnet&#x20;if&#x20;a&#x20;warning&#x20;is&#x20;set&#x20;in&#x20;the&#x20;/etc/issue&#x20;file.&#x20;As&#x20;telnet&#x20;is&#x20;an&#x20;insecure&#x20;protocol,&#x20;it&#x20;is&#x20;strongly&#x20;recommend&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;and&#x20;all&#x20;remote&#x20;administrative/user&#x20;connections&#x20;take&#x20;place&#x20;by&#x20;Secure&#x20;Shell.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;#&#x20;awk&#x20;&#039;/^BANNER=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;BANNER=&quot;&#x20;};&#x20;{&#x20;print&#x20;}&#039;&#x20;telnetd&#x20;&gt;&#x20;telnetd.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;telnetd.CIS&#x20;telnetd','[{\"cis\": [\"8.5\"]}]'),(8046,'Verify&#x20;System&#x20;Account&#x20;Default&#x20;Passwords','There&#x20;are&#x20;a&#x20;number&#x20;of&#x20;accounts&#x20;provided&#x20;with&#x20;the&#x20;Solaris&#x20;OS&#x20;that&#x20;are&#x20;used&#x20;to&#x20;manage&#x20;applications&#x20;and&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;provide&#x20;an&#x20;interactive&#x20;shell.&#x20;These&#x20;accounts&#x20;are&#x20;delivered&#x20;either&#x20;in&#x20;a&#x20;locked&#x20;or&#x20;non-login&#x20;state.&#x20;Oracle&#x20;does&#x20;not&#x20;support&#x20;nor&#x20;recommend&#x20;changing&#x20;the&#x20;passwords&#x20;associated&#x20;with&#x20;these&#x20;accounts.','System&#x20;accounts,&#x20;such&#x20;as&#x20;bin,&#x20;lpd,&#x20;and&#x20;sys&#x20;have&#x20;special&#x20;purposes&#x20;and&#x20;privileges.&#x20;By&#x20;default,&#x20;these&#x20;accounts&#x20;are&#x20;configured&#x20;as&#x20;either&#x20;locked&#x20;or&#x20;non-login.&#x20;This&#x20;status&#x20;should&#x20;be&#x20;verified&#x20;to&#x20;ensure&#x20;that&#x20;these&#x20;accounts&#x20;have&#x20;not&#x20;accidentally&#x20;or&#x20;intentionally&#x20;been&#x20;enabled.','','To&#x20;lock&#x20;a&#x20;single&#x20;account,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;passwd&#x20;-d&#x20;[username]&#x20;&#x20;&#x20;&#x20;#&#x20;passwd&#x20;-l&#x20;[username]&#x20;&#x20;&#x20;&#x20;To&#x20;configure&#x20;a&#x20;single&#x20;account&#x20;to&#x20;be&#x20;non-login,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;passwd&#x20;-d&#x20;[username]&#x20;&#x20;&#x20;&#x20;#&#x20;passwd&#x20;-N&#x20;[username]','[{\"cis\": [\"9.3\"]}]'),(8047,'Ensure&#x20;Password&#x20;Fields&#x20;are&#x20;Not&#x20;Empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password&#x20;at&#x20;all&#x20;&#40;assuming&#x20;that&#x20;the&#x20;value&#x20;PASSREQ=NO&#x20;is&#x20;set&#x20;in&#x20;/etc/default/login&#41;.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords,&#x20;be&#x20;configured&#x20;as&#x20;&quot;Non-login,&quot;&#x20;or&#x20;be&#x20;locked.','','Use&#x20;the&#x20;passwd&#x20;-l&#x20;command&#x20;to&#x20;lock&#x20;accounts&#x20;that&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;execute&#x20;commands&#x20;.&#x20;Use&#x20;the&#x20;passwd&#x20;-N&#x20;command&#x20;to&#x20;set&#x20;accounts&#x20;to&#x20;be&#x20;non-logini.','[{\"cis\": [\"9.4\"]}]'),(8048,'Verify&#x20;No&#x20;UID&#x20;0&#x20;Accounts&#x20;Exist&#x20;Other&#x20;than&#x20;root','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;rights&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;role&#x20;and&#x20;be&#x20;made&#x20;accessible&#x20;from&#x20;the&#x20;system&#x20;console&#x20;only.&#x20;Administrative&#x20;access&#x20;granted&#x20;to&#x20;an&#x20;unprivileged&#x20;account&#x20;should&#x20;use&#x20;an&#x20;approved&#x20;mechanism&#x20;such&#x20;as&#x20;RBAC.','','Disable&#x20;or&#x20;delete&#x20;any&#x20;other&#x20;0&#x20;UID&#x20;entries&#x20;that&#x20;are&#x20;displayed;&#x20;there&#x20;should&#x20;be&#x20;only&#x20;one&#x20;root&#x20;account.&#x20;Finer&#x20;granularity&#x20;access&#x20;control&#x20;for&#x20;administrative&#x20;access&#x20;can&#x20;be&#x20;obtained&#x20;by&#x20;using&#x20;the&#x20;Solaris&#x20;Role-Based&#x20;Access&#x20;Control&#x20;&#40;RBAC&#41;&#x20;mechanism.&#x20;RBAC&#x20;configurations&#x20;should&#x20;be&#x20;monitored&#x20;via&#x20;user_attr&#40;4&#41;&#x20;to&#x20;make&#x20;sure&#x20;that&#x20;privileges&#x20;are&#x20;managed&#x20;appropriately.','[{\"cis\": [\"9.5\"]}]'),(8049,'Ensure&#x20;root&#x20;PATH&#x20;Integrity','The&#x20;root&#x20;user&#x20;can&#x20;execute&#x20;any&#x20;command&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;executing&#x20;programs&#x20;if&#x20;the&#x20;PATH&#x20;is&#x20;not&#x20;set&#x20;correctly.','Including&#x20;the&#x20;current&#x20;working&#x20;directory&#x20;&#40;.&#41;&#x20;or&#x20;any&#x20;other&#x20;writable&#x20;directory&#x20;in&#x20;root&#039;s&#x20;executable&#x20;path&#x20;makes&#x20;it&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;can&#x20;gain&#x20;superuser&#x20;access&#x20;by&#x20;forcing&#x20;an&#x20;administrator&#x20;operating&#x20;as&#x20;root&#x20;to&#x20;execute&#x20;a&#x20;malcode,&#x20;such&#x20;as&#x20;a&#x20;Trojan&#x20;horse&#x20;program.','','Correct&#x20;or&#x20;justify&#x20;any&#x20;items&#x20;discovered&#x20;in&#x20;the&#x20;Audit&#x20;step.','[{\"cis\": [\"9.6\"]}]'),(8050,'Check&#x20;That&#x20;Users&#x20;Are&#x20;Assigned&#x20;Home&#x20;Directories','passwd&#40;4&#41;&#x20;defines&#x20;a&#x20;home&#x20;directory&#x20;that&#x20;each&#x20;user&#x20;is&#x20;placed&#x20;in&#x20;upon&#x20;login.&#x20;If&#x20;there&#x20;is&#x20;no&#x20;defined&#x20;home&#x20;directory,&#x20;a&#x20;user&#x20;will&#x20;be&#x20;placed&#x20;in&#x20;/&#x20;and&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;write&#x20;any&#x20;files&#x20;or&#x20;have&#x20;local&#x20;environment&#x20;variables&#x20;set.','All&#x20;users&#x20;must&#x20;be&#x20;assigned&#x20;a&#x20;home&#x20;directory&#x20;in&#x20;passwd&#40;4&#41;.','','Correct&#x20;or&#x20;justify&#x20;any&#x20;items&#x20;discovered&#x20;in&#x20;the&#x20;Audit&#x20;step.&#x20;Determine&#x20;if&#x20;there&#x20;exists&#x20;any&#x20;users&#x20;who&#x20;are&#x20;in&#x20;passwd&#40;4&#41;&#x20;but&#x20;do&#x20;not&#x20;have&#x20;a&#x20;home&#x20;directory,&#x20;and&#x20;work&#x20;with&#x20;those&#x20;users&#x20;to&#x20;determine&#x20;the&#x20;best&#x20;course&#x20;of&#x20;action&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.','[{\"cis\": [\"9.12\"]}]'),(8500,'Verify&#x20;all&#x20;Apple&#x20;provided&#x20;software&#x20;is&#x20;current','Software&#x20;vendors&#x20;release&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates&#x20;for&#x20;their&#x20;products&#x20;when&#x20;security&#x20;vulnerabilities&#x20;are&#x20;discovered.&#x20;There&#x20;is&#x20;no&#x20;simple&#x20;way&#x20;to&#x20;complete&#x20;this&#x20;action&#x20;without&#x20;a&#x20;network&#x20;connection&#x20;to&#x20;an&#x20;Apple&#x20;software&#x20;repository.&#x20;Please&#x20;ensure&#x20;appropriate&#x20;access&#x20;for&#x20;this&#x20;control.&#x20;This&#x20;check&#x20;is&#x20;only&#x20;for&#x20;what&#x20;Apple&#x20;provides&#x20;through&#x20;software&#x20;update.','It&#x20;is&#x20;important&#x20;that&#x20;these&#x20;updates&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;the&#x20;identified&#x20;vulnerabilities.','','1.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following:&#x20;softwareupdate&#x20;-l&#x20;&#x20;2.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following&#x20;for&#x20;any&#x20;packages&#x20;that&#x20;show&#x20;up&#x20;in&#x20;step&#x20;1:&#x20;sudo&#x20;softwareupdate&#x20;-i&#x20;packagename','[{\"cis\": [\"1.1\"]}]'),(8501,'Enable&#x20;Auto&#x20;Update','Auto&#x20;Update&#x20;verifies&#x20;that&#x20;your&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates.&#x20;If&#x20;&quot;Automatically&#x20;check&#x20;for&#x20;updates&quot;&#x20;is&#x20;not&#x20;selected&#x20;background&#x20;updates&#x20;for&#x20;new&#x20;malware&#x20;definition&#x20;files&#x20;from&#x20;Apple&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper&#x20;will&#x20;not&#x20;occur.','It&#x20;is&#x20;important&#x20;that&#x20;a&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;updates&#x20;applied&#x20;so&#x20;as&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;identified&#x20;vulnerabilities.','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;AutomaticCheckEnabled&#x20;-int&#x20;1','[{\"cis\": [\"1.2\"]}]'),(8502,'Enable&#x20;app&#x20;update&#x20;installs','Ensure&#x20;that&#x20;application&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;admin&#x20;privileges&#x20;for&#x20;end&#x20;users.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdate&#x20;-bool&#x20;TRUE&#x20;&#x20;&#x20;&#x20;The&#x20;remediation&#x20;requires&#x20;a&#x20;log&#x20;out&#x20;and&#x20;log&#x20;in&#x20;to&#x20;show&#x20;in&#x20;the&#x20;GUI.&#x20;Please&#x20;note&#x20;that.','[{\"cis\": [\"1.3\"]}]'),(8503,'Enable&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;update&#x20;installs','Ensure&#x20;that&#x20;system&#x20;and&#x20;security&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;&#x20;This&#x20;setting&#x20;enables&#x20;definition&#x20;updates&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper,&#x20;with&#x20;this&#x20;setting&#x20;in&#x20;place&#x20;new&#x20;malware&#x20;and&#x20;adware&#x20;that&#x20;Apple&#x20;has&#x20;added&#x20;to&#x20;the&#x20;list&#x20;of&#x20;malware&#x20;or&#x20;untrusted&#x20;software&#x20;will&#x20;not&#x20;execute.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;end&#x20;user&#x20;admin&#x20;rights.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;ConfigDataInstall&#x20;-bool&#x20;true&#x20;&amp;&amp;&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;CriticalUpdateInstall&#x20;-bool&#x20;true','[{\"cis\": [\"1.4\"]}]'),(8504,'Enable&#x20;OS&#x20;X&#x20;update&#x20;installs','Ensure&#x20;that&#x20;OS&#x20;X&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;This&#x20;setting&#x20;enables&#x20;OS&#x20;X&#x20;updates&#x20;to&#x20;be&#x20;automatically&#x20;installed.&#x20;Some&#x20;environments&#x20;will&#x20;want&#x20;to&#x20;approve&#x20;and&#x20;test&#x20;updates&#x20;before&#x20;they&#x20;are&#x20;delivered.&#x20;It&#x20;is&#x20;best&#x20;practice&#x20;to&#x20;test&#x20;first&#x20;where&#x20;updates&#x20;can&#x20;and&#x20;have&#x20;caused&#x20;disruptions&#x20;to&#x20;operations.&#x20;Automatic&#x20;updates&#x20;should&#x20;be&#x20;turned&#x20;off&#x20;where&#x20;changes&#x20;are&#x20;tightly&#x20;controlled&#x20;and&#x20;there&#x20;are&#x20;mature&#x20;testing&#x20;and&#x20;approval&#x20;processes.&#x20;Automatic&#x20;updates&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off&#x20;so&#x20;the&#x20;admin&#x20;can&#x20;call&#x20;the&#x20;users&#x20;first&#x20;to&#x20;let&#x20;them&#x20;know&#x20;it&#039;s&#x20;ok&#x20;to&#x20;install.&#x20;A&#x20;dependable&#x20;repeatable&#x20;process&#x20;involving&#x20;a&#x20;patch&#x20;agent&#x20;or&#x20;remote&#x20;management&#x20;tool&#x20;should&#x20;be&#x20;in&#x20;place&#x20;before&#x20;auto-updates&#x20;are&#x20;turned&#x20;off.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdateRestartRequired&#x20;-bool&#x20;TRUE','[{\"cis\": [\"1.5\"]}]'),(8505,'Enable&#x20;&quot;Set&#x20;time&#x20;and&#x20;date&#x20;automatically&quot;','Correct&#x20;date&#x20;and&#x20;time&#x20;settings&#x20;are&#x20;required&#x20;for&#x20;authentication&#x20;protocols,&#x20;file&#x20;creation,&#x20;modification&#x20;dates&#x20;and&#x20;log&#x20;entries.&#x20;Apple&#039;s&#x20;automatic&#x20;time&#x20;update&#x20;solution&#x20;will&#x20;enable&#x20;an&#x20;NTP&#x20;server&#x20;that&#x20;is&#x20;not&#x20;controlled&#x20;by&#x20;the&#x20;Application&#x20;Firewall.&#x20;Turning&#x20;on&#x20;&quot;Set&#x20;time&#x20;and&#x20;date&#x20;automatically&quot;&#x20;allows&#x20;other&#x20;computers&#x20;to&#x20;connect&#x20;to&#x20;set&#x20;their&#x20;time&#x20;and&#x20;allows&#x20;for&#x20;exploit&#x20;attempts&#x20;against&#x20;ntpd.&#x20;It&#x20;also&#x20;allows&#x20;for&#x20;more&#x20;accurate&#x20;network&#x20;detection&#x20;and&#x20;OS&#x20;fingerprinting.','Kerberos&#x20;may&#x20;not&#x20;operate&#x20;correctly&#x20;if&#x20;the&#x20;time&#x20;on&#x20;the&#x20;Mac&#x20;is&#x20;off&#x20;by&#x20;more&#x20;than&#x20;5&#x20;minutes.&#x20;&#x20;This&#x20;in&#x20;turn&#x20;can&#x20;affect&#x20;Apple&#039;s&#x20;single&#x20;sign-on&#x20;feature,&#x20;Active&#x20;Directory&#x20;logons,&#x20;and&#x20;other&#x20;features.','','Run&#x20;the&#x20;following&#x20;commands:&#x20;sudo&#x20;systemsetup&#x20;-setnetworktimeserver&#x20;&lt;timeserver&gt;&#x20;&#x20;&#x20;&#x20;sudo&#x20;systemsetup&#x20;-setusingnetworktime&#x20;on','[{\"cis\": [\"2.2.1\"]}]'),(8506,'Restrict&#x20;NTP&#x20;server&#x20;to&#x20;loopback&#x20;interface','The&#x20;Apple&#x20;System&#x20;Preference&#x20;setting&#x20;to&#x20;&quot;Set&#x20;date&#x20;and&#x20;time&#x20;automatically&quot;&#x20;enables&#x20;both&#x20;an&#x20;NTP&#x20;client&#x20;that&#x20;can&#x20;synchronize&#x20;the&#x20;time&#x20;from&#x20;known&#x20;time&#x20;server&#40;s&#41;&#x20;and&#x20;an&#x20;open&#x20;listening&#x20;NTP&#x20;server&#x20;that&#x20;can&#x20;be&#x20;used&#x20;by&#x20;any&#x20;other&#x20;computer&#x20;that&#x20;can&#x20;connect&#x20;to&#x20;port&#x20;123&#x20;on&#x20;the&#x20;time&#x20;syncing&#x20;computer.&#x20;This&#x20;open&#x20;listening&#x20;service&#x20;can&#x20;allow&#x20;for&#x20;both&#x20;exploits&#x20;of&#x20;future&#x20;NTP&#x20;vulnerabilities&#x20;and&#x20;allow&#x20;for&#x20;open&#x20;ports&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;fingerprinting&#x20;to&#x20;target&#x20;exploits.&#x20;Access&#x20;to&#x20;this&#x20;port&#x20;should&#x20;be&#x20;restricted.&#x20;&#x20;Editing&#x20;the&#x20;/etc/ntp-restrict.conf&#x20;file&#x20;by&#x20;adding&#x20;a&#x20;control&#x20;on&#x20;the&#x20;loopback&#x20;interface&#x20;limits&#x20;external&#x20;access.','Mobile&#x20;workstations&#x20;on&#x20;untrusted&#x20;networks&#x20;should&#x20;not&#x20;have&#x20;open&#x20;listening&#x20;services&#x20;available&#x20;to&#x20;other&#x20;nodes&#x20;on&#x20;the&#x20;network.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;&#x20;sudo&#x20;vim&#x20;/etc/ntp-restrict.conf&#x20;&#x20;2.&#x20;Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;file:&#x20;restrict&#x20;lo&#x20;interface&#x20;ignore&#x20;wildcard&#x20;interface&#x20;listen&#x20;lo','[{\"cis\": [\"2.2.3\"]}]'),(8507,'Disable&#x20;Remote&#x20;Apple&#x20;Events','Apple&#x20;Events&#x20;is&#x20;a&#x20;technology&#x20;that&#x20;allows&#x20;one&#x20;program&#x20;to&#x20;communicate&#x20;with&#x20;other&#x20;programs.&#x20;Remote&#x20;Apple&#x20;Events&#x20;allows&#x20;a&#x20;program&#x20;on&#x20;one&#x20;computer&#x20;to&#x20;communicate&#x20;with&#x20;a&#x20;program&#x20;on&#x20;a&#x20;different&#x20;computer.','Disabling&#x20;Remote&#x20;Apple&#x20;Events&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;program&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremoteappleevents&#x20;off','[{\"cis\": [\"2.4.1\"]}]'),(8508,'Disable&#x20;Printer&#x20;Sharing','By&#x20;enabling&#x20;Printer&#x20;sharing&#x20;the&#x20;computer&#x20;is&#x20;set&#x20;up&#x20;as&#x20;a&#x20;print&#x20;server&#x20;to&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;computers.&#x20;Dedicated&#x20;print&#x20;servers&#x20;or&#x20;direct&#x20;IP&#x20;printing&#x20;should&#x20;be&#x20;used&#x20;instead.','Disabling&#x20;Printer&#x20;Sharing&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;attackers&#x20;attempting&#x20;to&#x20;exploit&#x20;the&#x20;print&#x20;server&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;system.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Sharing&#x20;3.&#x20;Uncheck&#x20;Printer&#x20;Sharing','[{\"cis\": [\"2.4.4\"]}]'),(8509,'Disable&#x20;Remote&#x20;Login','Remote&#x20;Login&#x20;allows&#x20;an&#x20;interactive&#x20;terminal&#x20;connection&#x20;to&#x20;a&#x20;computer.','Disabling&#x20;Remote&#x20;Login&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system&#x20;via&#x20;Secure&#x20;Shell&#x20;&#40;SSH&#41;.&#x20;While&#x20;SSH&#x20;is&#x20;an&#x20;industry&#x20;standard&#x20;to&#x20;connect&#x20;to&#x20;posix&#x20;servers,&#x20;the&#x20;scope&#x20;of&#x20;the&#x20;benchmark&#x20;is&#x20;for&#x20;Apple&#x20;OSX&#x20;clients,&#x20;not&#x20;servers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremotelogin&#x20;off','[{\"cis\": [\"2.4.5\"]}]'),(8510,'Disable&#x20;File&#x20;Sharing','Apple&#039;s&#x20;File&#x20;Sharing&#x20;uses&#x20;a&#x20;combination&#x20;of&#x20;SMB&#x20;&#40;Windows&#x20;sharing&#41;&#x20;and&#x20;AFP&#x20;&#40;Mac&#x20;sharing&#41;','By&#x20;disabling&#x20;file&#x20;sharing,&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;and&#x20;risk&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;files&#x20;stored&#x20;on&#x20;the&#x20;system&#x20;is&#x20;reduced.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;AFP&#x20;from&#x20;the&#x20;command&#x20;line:&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.AppleFileServer.plist&#x20;&#x20;-&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;SMB&#x20;sharing&#x20;from&#x20;the&#x20;CLI:&#x20;&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.smbd.plist','[{\"cis\": [\"2.4.8\"]}]'),(8511,'Disable&#x20;&quot;Wake&#x20;for&#x20;network&#x20;access&quot;','This&#x20;feature&#x20;allows&#x20;other&#x20;users&#x20;to&#x20;be&#x20;able&#x20;to&#x20;access&#x20;your&#x20;computer&#039;s&#x20;shared&#x20;resources,&#x20;such&#x20;as&#x20;shared&#x20;printers&#x20;or&#x20;iTunes&#x20;playlists,&#x20;even&#x20;when&#x20;your&#x20;computer&#x20;is&#x20;in&#x20;sleep&#x20;mode.','Disabling&#x20;this&#x20;feature&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;remotely&#x20;waking&#x20;the&#x20;system&#x20;and&#x20;gaining&#x20;access.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;&#x20;sudo&#x20;pmset&#x20;-a&#x20;womp&#x20;0&#x20;&#x20;&#x20;Note:&#x20;The&#x20;-c&#x20;flag&#x20;means&#x20;&quot;wall&#x20;power.&quot;&#x20;Different&#x20;settings&#x20;must&#x20;be&#x20;used&#x20;for&#x20;other&#x20;power&#x20;sources.','[{\"cis\": [\"2.5.1\"]}]'),(8512,'Enable&#x20;FileVault','FileVault&#x20;secures&#x20;a&#x20;system&#039;s&#x20;data&#x20;by&#x20;automatically&#x20;encrypting&#x20;its&#x20;boot&#x20;volume&#x20;and&#x20;requiring&#x20;a&#x20;password&#x20;or&#x20;recovery&#x20;key&#x20;to&#x20;access&#x20;it.','Encrypting&#x20;sensitive&#x20;data&#x20;minimizes&#x20;the&#x20;likelihood&#x20;of&#x20;unauthorized&#x20;users&#x20;gaining&#x20;access&#x20;to&#x20;it.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Security&#x20;&amp;&#x20;Privacy&#x20;3.&#x20;Select&#x20;FileVault&#x20;4.&#x20;Select&#x20;Turn&#x20;on&#x20;FileVault','[{\"cis\": [\"2.6.1\"]}]'),(8513,'Enable&#x20;Gatekeeper','Gatekeeper&#x20;is&#x20;Apple&#039;s&#x20;application&#x20;white-listing&#x20;control&#x20;that&#x20;restricts&#x20;downloaded&#x20;applications&#x20;from&#x20;launching.&#x20;It&#x20;functions&#x20;as&#x20;a&#x20;control&#x20;to&#x20;limit&#x20;applications&#x20;from&#x20;unverified&#x20;sources&#x20;from&#x20;running&#x20;without&#x20;authorization.','Disallowing&#x20;unsigned&#x20;software&#x20;will&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;unauthorized&#x20;or&#x20;malicious&#x20;applications&#x20;from&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;spctl&#x20;--master-enable','[{\"cis\": [\"2.6.2\"]}]'),(8514,'Enable&#x20;Firewall','A&#x20;firewall&#x20;is&#x20;a&#x20;piece&#x20;of&#x20;software&#x20;that&#x20;blocks&#x20;unwanted&#x20;incoming&#x20;connections&#x20;to&#x20;a&#x20;system.&#x20;&#x20;Apple&#x20;has&#x20;posted&#x20;general&#x20;documentation&#x20;about&#x20;the&#x20;application&#x20;firewall.','A&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;unauthorized&#x20;users&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;your&#x20;system&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.alf&#x20;globalstate&#x20;-&#x20;int&#x20;&lt;value&gt;&#x20;&#x20;&#x20;&#x20;Where&#x20;&lt;value&gt;&#x20;is:&#x20;-&#x20;1&#x20;=&#x20;on&#x20;for&#x20;specific&#x20;services&#x20;-&#x20;2&#x20;=&#x20;on&#x20;for&#x20;essential&#x20;services','[{\"cis\": [\"2.6.3\"]}]'),(8515,'Enable&#x20;Firewall&#x20;Stealth&#x20;Mode','While&#x20;in&#x20;Stealth&#x20;mode&#x20;the&#x20;computer&#x20;will&#x20;not&#x20;respond&#x20;to&#x20;unsolicited&#x20;probes,&#x20;dropping&#x20;that&#x20;traffic.','Stealth&#x20;mode&#x20;on&#x20;the&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;system&#x20;discovery&#x20;tools&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;/usr/libexec/ApplicationFirewall/socketfilterfw&#x20;--setstealthmode&#x20;on','[{\"cis\": [\"2.6.4\"]}]'),(8516,'Enable&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;in&#x20;terminal.app','Secure&#x20;Keyboard&#x20;Entry&#x20;prevents&#x20;other&#x20;applications&#x20;on&#x20;the&#x20;system&#x20;and/or&#x20;network&#x20;from&#x20;detecting&#x20;and&#x20;recording&#x20;what&#x20;is&#x20;typed&#x20;into&#x20;Terminal.','Enabling&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;minimizes&#x20;the&#x20;risk&#x20;of&#x20;a&#x20;key&#x20;logger&#x20;from&#x20;detecting&#x20;what&#x20;is&#x20;entered&#x20;in&#x20;Terminal.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Terminal&#x20;2.&#x20;Select&#x20;Terminal&#x20;3.&#x20;Select&#x20;Secure&#x20;Keyboard&#x20;Entry','[{\"cis\": [\"2.10\"]}]'),(8517,'Java&#x20;6&#x20;is&#x20;not&#x20;the&#x20;default&#x20;Java&#x20;runtime','Apple&#x20;had&#x20;made&#x20;Java&#x20;part&#x20;of&#x20;the&#x20;core&#x20;Operating&#x20;System&#x20;for&#x20;OS&#x20;X.&#x20;Apple&#x20;is&#x20;no&#x20;longer&#x20;providing&#x20;Java&#x20;updates&#x20;for&#x20;OS&#x20;X&#x20;and&#x20;updated&#x20;JREs&#x20;and&#x20;JDK&#x20;are&#x20;made&#x20;available&#x20;by&#x20;Oracle.&#x20;&#x20;The&#x20;latest&#x20;version&#x20;of&#x20;Java&#x20;6&#x20;made&#x20;available&#x20;by&#x20;Apple&#x20;has&#x20;many&#x20;unpatched&#x20;vulnerabilities&#x20;and&#x20;should&#x20;not&#x20;be&#x20;the&#x20;default&#x20;runtime&#x20;for&#x20;Java&#x20;applets&#x20;that&#x20;request&#x20;one&#x20;from&#x20;the&#x20;Operating&#x20;System','Java&#x20;is&#x20;one&#x20;of&#x20;the&#x20;most&#x20;exploited&#x20;environments&#x20;and&#x20;is&#x20;no&#x20;longer&#x20;maintained&#x20;by&#x20;Apple,&#x20;old&#x20;versions&#x20;may&#x20;still&#x20;be&#x20;installed&#x20;and&#x20;should&#x20;be&#x20;removed&#x20;from&#x20;the&#x20;computer&#x20;or&#x20;not&#x20;be&#x20;in&#x20;the&#x20;default&#x20;path.','','Java&#x20;6&#x20;can&#x20;be&#x20;removed&#x20;completely&#x20;or,&#x20;if&#x20;necessary&#x20;Java&#x20;applications&#x20;will&#x20;only&#x20;work&#x20;with&#x20;Java&#x20;6,&#x20;a&#x20;custom&#x20;path&#x20;can&#x20;be&#x20;used.','[{\"cis\": [\"2.11\"]}]'),(8518,'Enable&#x20;security&#x20;auditing','OSX&#039;s&#x20;audit&#x20;facility,&#x20;auditd,&#x20;receives&#x20;notifications&#x20;from&#x20;the&#x20;kernel&#x20;when&#x20;certain&#x20;system&#x20;calls,&#x20;such&#x20;as&#x20;open,&#x20;fork,&#x20;and&#x20;exit,&#x20;are&#x20;made.&#x20;These&#x20;notifications&#x20;are&#x20;captured&#x20;and&#x20;written&#x20;to&#x20;an&#x20;audit&#x20;log.','Logs&#x20;generated&#x20;by&#x20;auditd&#x20;may&#x20;be&#x20;useful&#x20;when&#x20;investigating&#x20;a&#x20;security&#x20;incident&#x20;as&#x20;they&#x20;may&#x20;help&#x20;reveal&#x20;the&#x20;vulnerable&#x20;application&#x20;and&#x20;the&#x20;actions&#x20;taken&#x20;by&#x20;a&#x20;malicious&#x20;actor.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;launchctl&#x20;load&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.auditd.plist','[{\"cis\": [\"3.2\"]}]'),(8519,'Configure&#x20;Security&#x20;Auditing&#x20;Flags','Auditing&#x20;is&#x20;the&#x20;capture&#x20;and&#x20;maintenance&#x20;of&#x20;information&#x20;about&#x20;security-related&#x20;events.','Maintaining&#x20;an&#x20;audit&#x20;trail&#x20;of&#x20;system&#x20;activity&#x20;logs&#x20;can&#x20;help&#x20;identify&#x20;configuration&#x20;errors,&#x20;troubleshoot&#x20;service&#x20;disruptions,&#x20;and&#x20;analyze&#x20;compromises&#x20;or&#x20;attacks&#x20;that&#x20;have&#x20;occurred,&#x20;have&#x20;begun,&#x20;or&#x20;are&#x20;about&#x20;to&#x20;begin.&#x20;Audit&#x20;logs&#x20;are&#x20;necessary&#x20;to&#x20;provide&#x20;a&#x20;trail&#x20;of&#x20;evidence&#x20;in&#x20;case&#x20;the&#x20;system&#x20;or&#x20;network&#x20;is&#x20;compromised.','','1.&#x20;Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;edit&#x20;the&#x20;/etc/security/audit_control&#x20;file&#x20;2.&#x20;Find&#x20;the&#x20;line&#x20;beginning&#x20;with&#x20;&quot;flags&quot;&#x20;3.&#x20;Add&#x20;the&#x20;following&#x20;flags:&#x20;lo,&#x20;ad,&#x20;fd,&#x20;fm,&#x20;-all.&#x20;&#x20;4.&#x20;Save&#x20;the&#x20;file.','[{\"cis\": [\"3.3\"]}]'),(8520,'Disable&#x20;Bonjour&#x20;advertising&#x20;service','Bonjour&#x20;is&#x20;an&#x20;auto-discovery&#x20;mechanism&#x20;for&#x20;TCP/IP&#x20;devices&#x20;which&#x20;enumerate&#x20;devices&#x20;and&#x20;services&#x20;within&#x20;a&#x20;local&#x20;subnet.&#x20;DNS&#x20;on&#x20;Mac&#x20;OS&#x20;X&#x20;&#x20;is&#x20;integrated&#x20;with&#x20;Bonjour&#x20;and&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off,&#x20;but&#x20;the&#x20;Bonjour&#x20;advertising&#x20;service&#x20;can&#x20;be&#x20;disabled.','Bonjour&#x20;can&#x20;simplify&#x20;device&#x20;discovery&#x20;from&#x20;an&#x20;internal&#x20;rogue&#x20;or&#x20;compromised&#x20;host.&#x20;An&#x20;attacker&#x20;could&#x20;use&#x20;Bonjour&#039;s&#x20;multicast&#x20;DNS&#x20;feature&#x20;to&#x20;discover&#x20;a&#x20;vulnerable&#x20;or&#x20;poorly-&#x20;configured&#x20;service&#x20;or&#x20;additional&#x20;information&#x20;to&#x20;aid&#x20;a&#x20;targeted&#x20;attack.&#x20;Implementing&#x20;this&#x20;control&#x20;disables&#x20;the&#x20;continuous&#x20;broadcasting&#x20;of&#x20;&quot;I&#039;m&#x20;here!&quot;&#x20;messages.&#x20;Typical&#x20;end-user&#x20;endpoints&#x20;should&#x20;not&#x20;have&#x20;to&#x20;advertise&#x20;services&#x20;to&#x20;other&#x20;computers.&#x20;This&#x20;setting&#x20;does&#x20;not&#x20;stop&#x20;the&#x20;computer&#x20;from&#x20;sending&#x20;out&#x20;service&#x20;discovery&#x20;messages&#x20;when&#x20;looking&#x20;for&#x20;services&#x20;on&#x20;an&#x20;internal&#x20;subnet,&#x20;if&#x20;the&#x20;computer&#x20;is&#x20;looking&#x20;for&#x20;a&#x20;printer&#x20;or&#x20;server&#x20;and&#x20;using&#x20;service&#x20;discovery.&#x20;To&#x20;block&#x20;all&#x20;Bonjour&#x20;traffic&#x20;except&#x20;to&#x20;approved&#x20;devices&#x20;the&#x20;pf&#x20;or&#x20;other&#x20;firewall&#x20;would&#x20;be&#x20;needed.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.mDNSResponder.plist&#x20;NoMulticastAdvertisements','[{\"cis\": [\"4.1\"]}]'),(8521,'Ensure&#x20;http&#x20;server&#x20;is&#x20;not&#x20;running','Mac&#x20;OS&#x20;X&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;Apache&#x20;web&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;Personal&#x20;web&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Personal&#x20;web&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;Apache&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;&#x20;Web&#x20;sharing&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;web&#x20;servers&#x20;and&#x20;appropriate&#x20;cloud&#x20;services.','Web&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;webservers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Ensure&#x20;that&#x20;the&#x20;Web&#x20;Server&#x20;is&#x20;not&#x20;running&#x20;and&#x20;is&#x20;not&#x20;set&#x20;to&#x20;start&#x20;at&#x20;boot&#x20;&#x20;&#x20;&#x20;Stop&#x20;the&#x20;Web&#x20;Server:&#x20;sudo&#x20;apachectl&#x20;stop&#x20;&#x20;&#x20;&#x20;Ensure&#x20;that&#x20;the&#x20;web&#x20;server&#x20;will&#x20;not&#x20;auto-start&#x20;at&#x20;boot:&#x20;sudo&#x20;defaults&#x20;write&#x20;/System/Library/LaunchDaemons/org.apache.httpd&#x20;Disabled&#x20;-bool&#x20;true','[{\"cis\": [\"4.4\"]}]'),(8522,'Ensure&#x20;ftp&#x20;server&#x20;is&#x20;not&#x20;running','Mac&#x20;OS&#x20;X&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;ftp&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;Ftp&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Running&#x20;an&#x20;Ftp&#x20;server&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;The&#x20;Ftp&#x20;server&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;Ftp&#x20;servers&#x20;meet&#x20;a&#x20;specialized&#x20;need&#x20;to&#x20;distribute&#x20;files&#x20;without&#x20;strong&#x20;authentication&#x20;and&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;servers.&#x20;Cloud&#x20;services&#x20;or&#x20;other&#x20;distribution&#x20;methods&#x20;should&#x20;be&#x20;considered','Ftp&#x20;servers&#x20;should&#x20;not&#x20;be&#x20;run&#x20;on&#x20;an&#x20;end&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;servers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Ensure&#x20;that&#x20;the&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;running&#x20;and&#x20;is&#x20;not&#x20;set&#x20;to&#x20;start&#x20;at&#x20;boot.&#x20;Stop&#x20;the&#x20;ftp&#x20;Server:&#x20;sudo&#x20;-s&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/ftp.plist','[{\"cis\": [\"4.5\"]}]'),(8523,'Ensure&#x20;nfs&#x20;server&#x20;is&#x20;not&#x20;running','Mac&#x20;OS&#x20;X&#x20;can&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;fileserver.&#x20;NFS&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;mount&#x20;shares&#x20;and&#x20;gain&#x20;access&#x20;to&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;File&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;NFSD&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;export&#x20;shares&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.','File&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop,&#x20;dedicated&#x20;servers&#x20;should&#x20;be&#x20;used.&#x20;&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Stop&#x20;the&#x20;NFS&#x20;Server:&#x20;sudo&#x20;nfsd&#x20;disable&#x20;&#x20;&#x20;&#x20;Remove&#x20;the&#x20;exported&#x20;Directory&#x20;listing:&#x20;rm&#x20;/etc/export','[{\"cis\": [\"4.6\"]}]'),(8524,'Do&#x20;not&#x20;enable&#x20;the&#x20;&quot;root&quot;&#x20;account','The&#x20;root&#x20;account&#x20;is&#x20;a&#x20;superuser&#x20;account&#x20;that&#x20;has&#x20;access&#x20;privileges&#x20;to&#x20;perform&#x20;any&#x20;actions&#x20;and&#x20;read/write&#x20;to&#x20;any&#x20;file&#x20;on&#x20;the&#x20;computer.&#x20;In&#x20;the&#x20;UNIX/Linux&#x20;world,&#x20;the&#x20;system&#x20;administrator&#x20;commonly&#x20;uses&#x20;the&#x20;root&#x20;account&#x20;to&#x20;perform&#x20;administrative&#x20;functions.','Enabling&#x20;and&#x20;using&#x20;the&#x20;root&#x20;account&#x20;puts&#x20;the&#x20;system&#x20;at&#x20;risk&#x20;since&#x20;any&#x20;successful&#x20;exploit&#x20;or&#x20;mistake&#x20;while&#x20;the&#x20;root&#x20;account&#x20;is&#x20;in&#x20;use&#x20;could&#x20;have&#x20;unlimited&#x20;access&#x20;privileges&#x20;within&#x20;the&#x20;system.&#x20;Using&#x20;the&#x20;sudo&#x20;command&#x20;allows&#x20;users&#x20;to&#x20;perform&#x20;functions&#x20;as&#x20;a&#x20;root&#x20;user&#x20;while&#x20;limiting&#x20;and&#x20;password&#x20;protecting&#x20;the&#x20;access&#x20;privileges.&#x20;&#x20;By&#x20;default&#x20;the&#x20;root&#x20;account&#x20;is&#x20;not&#x20;enabled&#x20;on&#x20;a&#x20;Mac&#x20;OS&#x20;X&#x20;client&#x20;computer.&#x20;It&#x20;is&#x20;enabled&#x20;on&#x20;Mac&#x20;OS&#x20;X&#x20;Server.&#x20;An&#x20;administrator&#x20;can&#x20;escalate&#x20;privileges&#x20;using&#x20;the&#x20;sudo&#x20;command&#x20;&#40;use&#x20;-s&#x20;or&#x20;-i&#x20;to&#x20;get&#x20;a&#x20;root&#x20;shell&#41;.','','Open&#x20;System&#x20;Preferences,&#x20;Uses&#x20;&amp;&#x20;Groups.&#x20;&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;&#x20;In&#x20;the&#x20;Network&#x20;Account&#x20;Server&#x20;section,&#x20;click&#x20;Join&#x20;or&#x20;Edit.&#x20;&#x20;Click&#x20;Open&#x20;Directory&#x20;Utility.&#x20;&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;&#x20;Select&#x20;the&#x20;Edit&#x20;menu&#x20;&gt;&#x20;Disable&#x20;Root&#x20;User.','[{\"cis\": [\"5.7\"]}]'),(8525,'Disable&#x20;automatic&#x20;login','The&#x20;automatic&#x20;login&#x20;feature&#x20;saves&#x20;a&#x20;user&#039;s&#x20;system&#x20;access&#x20;credentials&#x20;and&#x20;bypasses&#x20;the&#x20;login&#x20;screen,&#x20;instead&#x20;the&#x20;system&#x20;automatically&#x20;loads&#x20;to&#x20;the&#x20;user&#039;s&#x20;desktop&#x20;screen.','Disabling&#x20;automatic&#x20;login&#x20;decreases&#x20;the&#x20;likelihood&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;a&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;delete&#x20;/Library/Preferences/com.apple.loginwindow&#x20;autoLoginUser','[{\"cis\": [\"5.8\"]}]'),(8526,'Require&#x20;a&#x20;password&#x20;to&#x20;wake&#x20;the&#x20;computer&#x20;from&#x20;sleep&#x20;or&#x20;screen&#x20;saver','Sleep&#x20;and&#x20;screensaver&#x20;modes&#x20;are&#x20;low&#x20;power&#x20;modes&#x20;that&#x20;reduces&#x20;electrical&#x20;consumption&#x20;while&#x20;the&#x20;system&#x20;is&#x20;not&#x20;in&#x20;use.','Prompting&#x20;for&#x20;a&#x20;password&#x20;when&#x20;waking&#x20;from&#x20;sleep&#x20;or&#x20;screensaver&#x20;mode&#x20;mitigates&#x20;the&#x20;threat&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;a&#x20;system&#x20;in&#x20;the&#x20;user&#039;s&#x20;absence.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;The&#x20;current&#x20;user&#x20;will&#x20;need&#x20;to&#x20;log&#x20;off&#x20;and&#x20;on&#x20;for&#x20;changes&#x20;to&#x20;take&#x20;effect.&#x20;&#x20;defaults&#x20;write&#x20;com.apple.screensaver&#x20;askForPassword&#x20;-int&#x20;1&#x20;&#x20;2.&#x20;&#x20;The&#x20;current&#x20;user&#x20;will&#x20;need&#x20;to&#x20;log&#x20;off&#x20;and&#x20;on&#x20;for&#x20;changes&#x20;to&#x20;take&#x20;effect.','[{\"cis\": [\"5.9\"]}]'),(8527,'Disable&#x20;ability&#x20;to&#x20;login&#x20;to&#x20;another&#x20;user&#039;s&#x20;active&#x20;and&#x20;locked&#x20;session','OSX&#x20;has&#x20;a&#x20;privilege&#x20;that&#x20;can&#x20;be&#x20;granted&#x20;to&#x20;any&#x20;user&#x20;that&#x20;will&#x20;allow&#x20;that&#x20;user&#x20;to&#x20;unlock&#x20;active&#x20;user&#039;s&#x20;sessions.','Disabling&#x20;the&#x20;admins&#x20;and/or&#x20;user&#039;s&#x20;ability&#x20;to&#x20;log&#x20;into&#x20;another&#x20;user&#039;s&#x20;active&#x20;and&#x20;locked&#x20;session&#x20;prevents&#x20;unauthorized&#x20;persons&#x20;from&#x20;viewing&#x20;potentially&#x20;sensitive&#x20;and/or&#x20;personal&#x20;information.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;&#x20;sudo&#x20;vi&#x20;/etc/pam.d/screensaver&#x20;2.&#x20;Locate&#x20;&#x20;&#x20;&quot;account&#x20;&#x20;&#x20;&#x20;required&#x20;&#x20;&#x20;&#x20;&#x20;pam_group.so&#x20;no_warn&#x20;group=admin,wheel&#x20;fail_safe&quot;&#x20;3.&#x20;Remove&#x20;&quot;admin,&quot;&#x20;4.&#x20;Save','[{\"cis\": [\"5.11\"]}]'),(8528,'System&#x20;Integrity&#x20;Protection&#x20;status','System&#x20;Integrity&#x20;Protection&#x20;is&#x20;a&#x20;new&#x20;security&#x20;feature&#x20;introduced&#x20;in&#x20;OS&#x20;X&#x20;10.11&#x20;El&#x20;Capitan.&#x20;&#x20;System&#x20;Integrity&#x20;Protection&#x20;restricts&#x20;access&#x20;to&#x20;System&#x20;domain&#x20;locations&#x20;and&#x20;restricts&#x20;runtime&#x20;attachment&#x20;to&#x20;system&#x20;processes.&#x20;Any&#x20;attempt&#x20;to&#x20;attempt&#x20;to&#x20;inspect&#x20;or&#x20;attach&#x20;to&#x20;a&#x20;system&#x20;process&#x20;will&#x20;fail.&#x20;Kernel&#x20;Extensions&#x20;are&#x20;now&#x20;restricted&#x20;to&#x20;/Library/Extensions&#x20;and&#x20;are&#x20;required&#x20;to&#x20;be&#x20;signed&#x20;with&#x20;a&#x20;Developer&#x20;ID.','Running&#x20;without&#x20;System&#x20;Integrity&#x20;Protection&#x20;on&#x20;a&#x20;production&#x20;system&#x20;runs&#x20;the&#x20;risk&#x20;of&#x20;the&#x20;modification&#x20;of&#x20;system&#x20;binaries&#x20;or&#x20;code&#x20;injection&#x20;of&#x20;system&#x20;processes&#x20;that&#x20;would&#x20;otherwise&#x20;be&#x20;protected&#x20;by&#x20;SIP.','','Perform&#x20;the&#x20;following&#x20;while&#x20;booted&#x20;in&#x20;OS&#x20;X&#x20;Recovery&#x20;Partition.&#x20;&#x20;1.&#x20;Select&#x20;Terminal&#x20;from&#x20;the&#x20;Utilities&#x20;menu&#x20;&#x20;&#x20;&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;/usr/bin/csrutil&#x20;enable&#x20;&#x20;&#x20;&#x20;3.&#x20;The&#x20;output&#x20;should&#x20;be:&#x20;Successfully&#x20;enabled&#x20;System&#x20;Integrity&#x20;Protection.&#x20;Please&#x20;restart&#x20;the&#x20;machine&#x20;for&#x20;the&#x20;changes&#x20;to&#x20;take&#x20;effect.&#x20;&#x20;&#x20;&#x20;4.&#x20;Reboot.','[{\"cis\": [\"5.18\"]}]'),(8529,'Disable&#x20;guest&#x20;account&#x20;login','The&#x20;guest&#x20;account&#x20;allows&#x20;users&#x20;access&#x20;to&#x20;the&#x20;system&#x20;without&#x20;having&#x20;to&#x20;create&#x20;an&#x20;account&#x20;or&#x20;password.&#x20;Guest&#x20;users&#x20;are&#x20;unable&#x20;to&#x20;make&#x20;setting&#x20;changes,&#x20;cannot&#x20;remotely&#x20;login&#x20;to&#x20;the&#x20;system&#x20;and&#x20;all&#x20;created&#x20;files,&#x20;caches,&#x20;and&#x20;passwords&#x20;are&#x20;deleted&#x20;upon&#x20;logging&#x20;out.','Disabling&#x20;the&#x20;guest&#x20;account&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;untrusted&#x20;user&#x20;doing&#x20;basic&#x20;reconnaissance&#x20;and&#x20;possibly&#x20;using&#x20;privilege&#x20;escalation&#x20;attacks&#x20;to&#x20;take&#x20;control&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.loginwindow&#x20;GuestEnabled&#x20;-&#x20;bool&#x20;NO','[{\"cis\": [\"6.1.3\"]}]'),(8530,'Remove&#x20;Guest&#x20;home&#x20;folder','The&#x20;guest&#x20;account&#x20;login&#x20;should&#x20;have&#x20;been&#x20;disabled,&#x20;so&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;the&#x20;legacy&#x20;Guest&#x20;home&#x20;folder&#x20;to&#x20;remain&#x20;in&#x20;the&#x20;file&#x20;system.&#x20;When&#x20;normal&#x20;user&#x20;accounts&#x20;are&#x20;removed&#x20;you&#x20;have&#x20;the&#x20;option&#x20;to&#x20;archive&#x20;it,&#x20;leave&#x20;it&#x20;in&#x20;place&#x20;or&#x20;delete.&#x20;In&#x20;the&#x20;case&#x20;of&#x20;the&#x20;guest&#x20;folder&#x20;the&#x20;folder&#x20;remains&#x20;in&#x20;place&#x20;without&#x20;a&#x20;GUI&#x20;option&#x20;to&#x20;remove&#x20;it.&#x20;If&#x20;at&#x20;some&#x20;point&#x20;in&#x20;the&#x20;future&#x20;a&#x20;Guest&#x20;account&#x20;is&#x20;needed&#x20;it&#x20;will&#x20;be&#x20;re-created.&#x20;The&#x20;presence&#x20;of&#x20;the&#x20;Guest&#x20;home&#x20;folder&#x20;can&#x20;cause&#x20;automated&#x20;audits&#x20;to&#x20;fail&#x20;when&#x20;looking&#x20;for&#x20;compliant&#x20;settings&#x20;within&#x20;all&#x20;User&#x20;folders&#x20;as&#x20;well.&#x20;Rather&#x20;than&#x20;ignoring&#x20;the&#x20;folders&#x20;continued&#x20;existence&#x20;it&#x20;is&#x20;best&#x20;removed.','The&#x20;Guest&#x20;home&#x20;folders&#x20;are&#x20;unneeded&#x20;after&#x20;the&#x20;Guest&#x20;account&#x20;is&#x20;disabled&#x20;and&#x20;could&#x20;be&#x20;used&#x20;inappropriately.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;rm&#x20;-R&#x20;/Users/Guest&#x20;&#x20;2.&#x20;Make&#x20;sure&#x20;there&#x20;is&#x20;no&#x20;output','[{\"cis\": [\"6.1.5\"]}]'),(8531,'Turn&#x20;on&#x20;filename&#x20;extensions','A&#x20;filename&#x20;extension&#x20;is&#x20;a&#x20;suffix&#x20;added&#x20;to&#x20;a&#x20;base&#x20;filename&#x20;that&#x20;indicates&#x20;the&#x20;base&#x20;filename&#039;s&#x20;file&#x20;format.','Visible&#x20;filename&#x20;extensions&#x20;allows&#x20;the&#x20;user&#x20;to&#x20;identify&#x20;the&#x20;file&#x20;type&#x20;and&#x20;the&#x20;application&#x20;it&#x20;is&#x20;associated&#x20;with&#x20;which&#x20;leads&#x20;to&#x20;quick&#x20;identification&#x20;of&#x20;misrepresented&#x20;malicious&#x20;files.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Select&#x20;Finder&#x20;2.&#x20;Select&#x20;Preferences&#x20;3.&#x20;Check&#x20;Show&#x20;all&#x20;filename&#x20;extensions&#x20;&#x20;&#x20;&#x20;Alternatively,&#x20;use&#x20;the&#x20;following&#x20;command:&#x20;defaults&#x20;write&#x20;NSGlobalDomain&#x20;AppleShowAllExtensions&#x20;-bool&#x20;true','[{\"cis\": [\"6.2\"]}]'),(8532,'Disable&#x20;the&#x20;automatic&#x20;run&#x20;of&#x20;safe&#x20;files&#x20;in&#x20;Safari','Safari&#x20;will&#x20;automatically&#x20;run&#x20;or&#x20;execute&#x20;what&#x20;it&#x20;considers&#x20;safe&#x20;files.&#x20;This&#x20;can&#x20;include&#x20;installers&#x20;and&#x20;other&#x20;files&#x20;that&#x20;execute&#x20;on&#x20;the&#x20;operating&#x20;system.&#x20;Safari&#x20;bases&#x20;file&#x20;safety&#x20;by&#x20;using&#x20;a&#x20;list&#x20;of&#x20;filetypes&#x20;maintained&#x20;by&#x20;Apple.&#x20;The&#x20;list&#x20;of&#x20;files&#x20;include&#x20;text,&#x20;image,&#x20;video&#x20;and&#x20;archive&#x20;formats&#x20;that&#x20;would&#x20;be&#x20;run&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;OS&#x20;rather&#x20;than&#x20;the&#x20;browser.','Hackers&#x20;have&#x20;taken&#x20;advantage&#x20;of&#x20;this&#x20;setting&#x20;via&#x20;drive-by&#x20;attacks.&#x20;These&#x20;attacks&#x20;occur&#x20;when&#x20;a&#x20;user&#x20;visits&#x20;a&#x20;legitimate&#x20;website&#x20;that&#x20;has&#x20;been&#x20;corrupted.&#x20;The&#x20;user&#x20;unknowingly&#x20;downloads&#x20;a&#x20;malicious&#x20;file&#x20;either&#x20;by&#x20;closing&#x20;an&#x20;infected&#x20;pop-up&#x20;or&#x20;hovering&#x20;over&#x20;a&#x20;malicious&#x20;banner.&#x20;An&#x20;attacker&#x20;can&#x20;create&#x20;a&#x20;malicious&#x20;file&#x20;that&#x20;will&#x20;fall&#x20;within&#x20;Safari&#039;s&#x20;safe&#x20;file&#x20;list&#x20;that&#x20;will&#x20;download&#x20;and&#x20;execute&#x20;without&#x20;user&#x20;input.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Safari&#x20;2.&#x20;Select&#x20;Safari&#x20;from&#x20;the&#x20;menu&#x20;bar&#x20;3.&#x20;Select&#x20;Preferences&#x20;4.&#x20;Select&#x20;General&#x20;5.&#x20;Uncheck&#x20;Open&#x20;&quot;safe&quot;&#x20;files&#x20;after&#x20;downloading&#x20;&#x20;&#x20;&#x20;Alternatively&#x20;run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;com.apple.Safari&#x20;AutoOpenSafeDownloads&#x20;-boolean&#x20;no','[{\"cis\": [\"6.3\"]}]'),(9000,'Verify&#x20;all&#x20;Apple&#x20;provided&#x20;software&#x20;is&#x20;current','Software&#x20;vendors&#x20;release&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates&#x20;for&#x20;their&#x20;products&#x20;when&#x20;security&#x20;vulnerabilities&#x20;are&#x20;discovered.&#x20;There&#x20;is&#x20;no&#x20;simple&#x20;way&#x20;to&#x20;complete&#x20;this&#x20;action&#x20;without&#x20;a&#x20;network&#x20;connection&#x20;to&#x20;an&#x20;Apple&#x20;software&#x20;repository.&#x20;Please&#x20;ensure&#x20;appropriate&#x20;access&#x20;for&#x20;this&#x20;control.&#x20;This&#x20;check&#x20;is&#x20;only&#x20;for&#x20;what&#x20;Apple&#x20;provides&#x20;through&#x20;software&#x20;update.','It&#x20;is&#x20;important&#x20;that&#x20;these&#x20;updates&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;the&#x20;identified&#x20;vulnerabilities.','','1.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following:&#x20;softwareupdate&#x20;-l&#x20;&#x20;2.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following&#x20;for&#x20;any&#x20;packages&#x20;that&#x20;show&#x20;up&#x20;in&#x20;step&#x20;1:&#x20;sudo&#x20;softwareupdate&#x20;-i&#x20;packagename','[{\"cis\": [\"1.1\"]}]'),(9001,'Enable&#x20;Auto&#x20;Update','Auto&#x20;Update&#x20;verifies&#x20;that&#x20;your&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates.&#x20;If&#x20;&quot;Automatically&#x20;check&#x20;for&#x20;updates&quot;&#x20;is&#x20;not&#x20;selected&#x20;background&#x20;updates&#x20;for&#x20;new&#x20;malware&#x20;definition&#x20;files&#x20;from&#x20;Apple&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper&#x20;will&#x20;not&#x20;occur.','It&#x20;is&#x20;important&#x20;that&#x20;a&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;updates&#x20;applied&#x20;so&#x20;as&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;identified&#x20;vulnerabilities.','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;AutomaticCheckEnabled&#x20;-int&#x20;1','[{\"cis\": [\"1.2\"]}]'),(9002,'Enable&#x20;app&#x20;update&#x20;installs','Ensure&#x20;that&#x20;application&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;admin&#x20;privileges&#x20;for&#x20;end&#x20;users.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdate&#x20;-bool&#x20;TRUE&#x20;&#x20;&#x20;&#x20;The&#x20;remediation&#x20;requires&#x20;a&#x20;log&#x20;out&#x20;and&#x20;log&#x20;in&#x20;to&#x20;show&#x20;in&#x20;the&#x20;GUI.&#x20;Please&#x20;note&#x20;that.','[{\"cis\": [\"1.3\"]}]'),(9003,'Enable&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;update&#x20;installs','Ensure&#x20;that&#x20;system&#x20;and&#x20;security&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;&#x20;This&#x20;setting&#x20;enables&#x20;definition&#x20;updates&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper,&#x20;with&#x20;this&#x20;setting&#x20;in&#x20;place&#x20;new&#x20;malware&#x20;and&#x20;adware&#x20;that&#x20;Apple&#x20;has&#x20;added&#x20;to&#x20;the&#x20;list&#x20;of&#x20;malware&#x20;or&#x20;untrusted&#x20;software&#x20;will&#x20;not&#x20;execute.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;end&#x20;user&#x20;admin&#x20;rights.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;ConfigDataInstall&#x20;-bool&#x20;true&#x20;&amp;&amp;&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;CriticalUpdateInstall&#x20;-bool&#x20;true','[{\"cis\": [\"1.4\"]}]'),(9004,'Enable&#x20;macOS&#x20;update&#x20;installs','Ensure&#x20;that&#x20;macOS&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;This&#x20;setting&#x20;enables&#x20;macOS&#x20;updates&#x20;to&#x20;be&#x20;automatically&#x20;installed.&#x20;Some&#x20;environments&#x20;will&#x20;want&#x20;to&#x20;approve&#x20;and&#x20;test&#x20;updates&#x20;before&#x20;they&#x20;are&#x20;delivered.&#x20;It&#x20;is&#x20;best&#x20;practice&#x20;to&#x20;test&#x20;first&#x20;where&#x20;updates&#x20;can&#x20;and&#x20;have&#x20;caused&#x20;disruptions&#x20;to&#x20;operations.&#x20;Automatic&#x20;updates&#x20;should&#x20;be&#x20;turned&#x20;off&#x20;where&#x20;changes&#x20;are&#x20;tightly&#x20;controlled&#x20;and&#x20;there&#x20;are&#x20;mature&#x20;testing&#x20;and&#x20;approval&#x20;processes.&#x20;Automatic&#x20;updates&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off&#x20;so&#x20;the&#x20;admin&#x20;can&#x20;call&#x20;the&#x20;users&#x20;first&#x20;to&#x20;let&#x20;them&#x20;know&#x20;it&#039;s&#x20;ok&#x20;to&#x20;install.&#x20;A&#x20;dependable&#x20;repeatable&#x20;process&#x20;involving&#x20;a&#x20;patch&#x20;agent&#x20;or&#x20;remote&#x20;management&#x20;tool&#x20;should&#x20;be&#x20;in&#x20;place&#x20;before&#x20;auto-updates&#x20;are&#x20;turned&#x20;off.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdateRestartRequired&#x20;-bool&#x20;TRUE','[{\"cis\": [\"1.5\"]}]'),(9005,'Enable&#x20;&quot;Set&#x20;time&#x20;and&#x20;date&#x20;automatically&quot;','Correct&#x20;date&#x20;and&#x20;time&#x20;settings&#x20;are&#x20;required&#x20;for&#x20;authentication&#x20;protocols,&#x20;file&#x20;creation,&#x20;modification&#x20;dates&#x20;and&#x20;log&#x20;entries.&#x20;&#x20;Note:&#x20;If&#x20;your&#x20;organization&#x20;has&#x20;internal&#x20;time&#x20;servers,&#x20;enter&#x20;them&#x20;here.&#x20;Enterprise&#x20;mobile&#x20;devices&#x20;may&#x20;need&#x20;to&#x20;use&#x20;a&#x20;mix&#x20;of&#x20;internal&#x20;and&#x20;external&#x20;time&#x20;servers.&#x20;If&#x20;multiple&#x20;servers&#x20;are&#x20;required&#x20;use&#x20;the&#x20;Date&#x20;&amp;&#x20;Time&#x20;System&#x20;Preference&#x20;with&#x20;each&#x20;server&#x20;separated&#x20;by&#x20;a&#x20;space.','Kerberos&#x20;may&#x20;not&#x20;operate&#x20;correctly&#x20;if&#x20;the&#x20;time&#x20;on&#x20;the&#x20;Mac&#x20;is&#x20;off&#x20;by&#x20;more&#x20;than&#x20;5&#x20;minutes.&#x20;&#x20;This&#x20;in&#x20;turn&#x20;can&#x20;affect&#x20;Apple&#039;s&#x20;single&#x20;sign-on&#x20;feature,&#x20;Active&#x20;Directory&#x20;logons,&#x20;and&#x20;other&#x20;features.','','Run&#x20;the&#x20;following&#x20;commands:&#x20;sudo&#x20;systemsetup&#x20;-setnetworktimeserver&#x20;&lt;timeserver&gt;&#x20;&#x20;&#x20;&#x20;sudo&#x20;systemsetup&#x20;-setusingnetworktime&#x20;on','[{\"cis\": [\"2.2.1\"]}]'),(9006,'Disable&#x20;Remote&#x20;Apple&#x20;Events','Apple&#x20;Events&#x20;is&#x20;a&#x20;technology&#x20;that&#x20;allows&#x20;one&#x20;program&#x20;to&#x20;communicate&#x20;with&#x20;other&#x20;programs.&#x20;Remote&#x20;Apple&#x20;Events&#x20;allows&#x20;a&#x20;program&#x20;on&#x20;one&#x20;computer&#x20;to&#x20;communicate&#x20;with&#x20;a&#x20;program&#x20;on&#x20;a&#x20;different&#x20;computer.','Disabling&#x20;Remote&#x20;Apple&#x20;Events&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;program&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremoteappleevents&#x20;off','[{\"cis\": [\"2.4.1\"]}]'),(9007,'Disable&#x20;Printer&#x20;Sharing','By&#x20;enabling&#x20;Printer&#x20;sharing&#x20;the&#x20;computer&#x20;is&#x20;set&#x20;up&#x20;as&#x20;a&#x20;print&#x20;server&#x20;to&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;computers.&#x20;Dedicated&#x20;print&#x20;servers&#x20;or&#x20;direct&#x20;IP&#x20;printing&#x20;should&#x20;be&#x20;used&#x20;instead.','Disabling&#x20;Printer&#x20;Sharing&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;attackers&#x20;attempting&#x20;to&#x20;exploit&#x20;the&#x20;print&#x20;server&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;system.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Sharing&#x20;3.&#x20;Uncheck&#x20;Printer&#x20;Sharing','[{\"cis\": [\"2.4.4\"]}]'),(9008,'Disable&#x20;Remote&#x20;Login','Remote&#x20;Login&#x20;allows&#x20;an&#x20;interactive&#x20;terminal&#x20;connection&#x20;to&#x20;a&#x20;computer.','Disabling&#x20;Remote&#x20;Login&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system&#x20;via&#x20;Secure&#x20;Shell&#x20;&#40;SSH&#41;.&#x20;While&#x20;SSH&#x20;is&#x20;an&#x20;industry&#x20;standard&#x20;to&#x20;connect&#x20;to&#x20;posix&#x20;servers,&#x20;the&#x20;scope&#x20;of&#x20;the&#x20;benchmark&#x20;is&#x20;for&#x20;Apple&#x20;macOS&#x20;clients,&#x20;not&#x20;servers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremotelogin&#x20;off','[{\"cis\": [\"2.4.5\"]}]'),(9009,'Disable&#x20;File&#x20;Sharing','Apple&#039;s&#x20;File&#x20;Sharing&#x20;uses&#x20;a&#x20;combination&#x20;of&#x20;SMB&#x20;&#40;Windows&#x20;sharing&#41;&#x20;and&#x20;AFP&#x20;&#40;Mac&#x20;sharing&#41;','By&#x20;disabling&#x20;file&#x20;sharing,&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;and&#x20;risk&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;files&#x20;stored&#x20;on&#x20;the&#x20;system&#x20;is&#x20;reduced.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;AFP&#x20;from&#x20;the&#x20;command&#x20;line:&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.AppleFileServer.plist&#x20;&#x20;-&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;SMB&#x20;sharing&#x20;from&#x20;the&#x20;CLI:&#x20;&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.smbd.plist','[{\"cis\": [\"2.4.8\"]}]'),(9010,'Disable&#x20;&quot;Wake&#x20;for&#x20;network&#x20;access&quot;','This&#x20;feature&#x20;allows&#x20;other&#x20;users&#x20;to&#x20;be&#x20;able&#x20;to&#x20;access&#x20;your&#x20;computer&#039;s&#x20;shared&#x20;resources,&#x20;such&#x20;as&#x20;shared&#x20;printers&#x20;or&#x20;iTunes&#x20;playlists,&#x20;even&#x20;when&#x20;your&#x20;computer&#x20;is&#x20;in&#x20;sleep&#x20;mode.&#x20;In&#x20;a&#x20;closed&#x20;network&#x20;when&#x20;only&#x20;authorized&#x20;devices&#x20;could&#x20;wake&#x20;a&#x20;computer&#x20;it&#x20;could&#x20;be&#x20;valuable&#x20;to&#x20;wake&#x20;computers&#x20;in&#x20;order&#x20;to&#x20;do&#x20;management&#x20;push&#x20;activity.&#x20;Where&#x20;mobile&#x20;workstations&#x20;and&#x20;agents&#x20;exist&#x20;the&#x20;device&#x20;will&#x20;more&#x20;likely&#x20;check&#x20;in&#x20;to&#x20;receive&#x20;updates&#x20;when&#x20;already&#x20;awake.&#x20;Mobile&#x20;devices&#x20;should&#x20;not&#x20;be&#x20;listening&#x20;for&#x20;signals&#x20;on&#x20;unmanaged&#x20;network&#x20;where&#x20;untrusted&#x20;devices&#x20;could&#x20;send&#x20;wake&#x20;signals.','Disabling&#x20;this&#x20;feature&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;remotely&#x20;waking&#x20;the&#x20;system&#x20;and&#x20;gaining&#x20;access.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;&#x20;sudo&#x20;pmset&#x20;-a&#x20;womp&#x20;0&#x20;&#x20;&#x20;Note:&#x20;The&#x20;-c&#x20;flag&#x20;means&#x20;&quot;wall&#x20;power.&quot;&#x20;Different&#x20;settings&#x20;must&#x20;be&#x20;used&#x20;for&#x20;other&#x20;power&#x20;sources.','[{\"cis\": [\"2.5.1\"]}]'),(9011,'Enable&#x20;FileVault','FileVault&#x20;secures&#x20;a&#x20;system&#039;s&#x20;data&#x20;by&#x20;automatically&#x20;encrypting&#x20;its&#x20;boot&#x20;volume&#x20;and&#x20;requiring&#x20;a&#x20;password&#x20;or&#x20;recovery&#x20;key&#x20;to&#x20;access&#x20;it.','Encrypting&#x20;sensitive&#x20;data&#x20;minimizes&#x20;the&#x20;likelihood&#x20;of&#x20;unauthorized&#x20;users&#x20;gaining&#x20;access&#x20;to&#x20;it.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Security&#x20;&amp;&#x20;Privacy&#x20;3.&#x20;Select&#x20;FileVault&#x20;4.&#x20;Select&#x20;Turn&#x20;on&#x20;FileVault','[{\"cis\": [\"2.6.1.1\"]}]'),(9012,'Enable&#x20;Gatekeeper','Gatekeeper&#x20;is&#x20;Apple&#039;s&#x20;application&#x20;white-listing&#x20;control&#x20;that&#x20;restricts&#x20;downloaded&#x20;applications&#x20;from&#x20;launching.&#x20;It&#x20;functions&#x20;as&#x20;a&#x20;control&#x20;to&#x20;limit&#x20;applications&#x20;from&#x20;unverified&#x20;sources&#x20;from&#x20;running&#x20;without&#x20;authorization.','Disallowing&#x20;unsigned&#x20;software&#x20;will&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;unauthorized&#x20;or&#x20;malicious&#x20;applications&#x20;from&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;spctl&#x20;--master-enable','[{\"cis\": [\"2.6.2\"]}]'),(9013,'Enable&#x20;Firewall','A&#x20;firewall&#x20;is&#x20;a&#x20;piece&#x20;of&#x20;software&#x20;that&#x20;blocks&#x20;unwanted&#x20;incoming&#x20;connections&#x20;to&#x20;a&#x20;system.&#x20;&#x20;Apple&#x20;has&#x20;posted&#x20;general&#x20;documentation&#x20;about&#x20;the&#x20;application&#x20;firewall.','A&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;unauthorized&#x20;users&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;your&#x20;system&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.alf&#x20;globalstate&#x20;-&#x20;int&#x20;&lt;value&gt;&#x20;&#x20;&#x20;&#x20;Where&#x20;&lt;value&gt;&#x20;is:&#x20;-&#x20;1&#x20;=&#x20;on&#x20;for&#x20;specific&#x20;services&#x20;-&#x20;2&#x20;=&#x20;on&#x20;for&#x20;essential&#x20;services','[{\"cis\": [\"2.6.3\"]}]'),(9014,'Enable&#x20;Firewall&#x20;Stealth&#x20;Mode','While&#x20;in&#x20;Stealth&#x20;mode&#x20;the&#x20;computer&#x20;will&#x20;not&#x20;respond&#x20;to&#x20;unsolicited&#x20;probes,&#x20;dropping&#x20;that&#x20;traffic.','Stealth&#x20;mode&#x20;on&#x20;the&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;system&#x20;discovery&#x20;tools&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;/usr/libexec/ApplicationFirewall/socketfilterfw&#x20;--setstealthmode&#x20;on','[{\"cis\": [\"2.6.4\"]}]'),(9015,'Enable&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;in&#x20;terminal.app','Secure&#x20;Keyboard&#x20;Entry&#x20;prevents&#x20;other&#x20;applications&#x20;on&#x20;the&#x20;system&#x20;and/or&#x20;network&#x20;from&#x20;detecting&#x20;and&#x20;recording&#x20;what&#x20;is&#x20;typed&#x20;into&#x20;Terminal.','Enabling&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;minimizes&#x20;the&#x20;risk&#x20;of&#x20;a&#x20;key&#x20;logger&#x20;from&#x20;detecting&#x20;what&#x20;is&#x20;entered&#x20;in&#x20;Terminal.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Terminal&#x20;2.&#x20;Select&#x20;Terminal&#x20;3.&#x20;Select&#x20;Secure&#x20;Keyboard&#x20;Entry','[{\"cis\": [\"2.10\"]}]'),(9016,'Java&#x20;6&#x20;is&#x20;not&#x20;the&#x20;default&#x20;Java&#x20;runtime','Apple&#x20;had&#x20;made&#x20;Java&#x20;part&#x20;of&#x20;the&#x20;core&#x20;Operating&#x20;System&#x20;for&#x20;macOS.&#x20;Apple&#x20;is&#x20;no&#x20;longer&#x20;providing&#x20;Java&#x20;updates&#x20;for&#x20;macOS&#x20;and&#x20;updated&#x20;JREs&#x20;and&#x20;JDK&#x20;are&#x20;made&#x20;available&#x20;by&#x20;Oracle.&#x20;&#x20;The&#x20;latest&#x20;version&#x20;of&#x20;Java&#x20;6&#x20;made&#x20;available&#x20;by&#x20;Apple&#x20;has&#x20;many&#x20;unpatched&#x20;vulnerabilities&#x20;and&#x20;should&#x20;not&#x20;be&#x20;the&#x20;default&#x20;runtime&#x20;for&#x20;Java&#x20;applets&#x20;that&#x20;request&#x20;one&#x20;from&#x20;the&#x20;Operating&#x20;System','Java&#x20;has&#x20;been&#x20;one&#x20;of&#x20;the&#x20;most&#x20;exploited&#x20;environments&#x20;and&#x20;Java&#x20;6,&#x20;which&#x20;was&#x20;provided&#x20;as&#x20;an&#x20;OS&#x20;component&#x20;by&#x20;Apple,&#x20;is&#x20;no&#x20;longer&#x20;maintained&#x20;by&#x20;Apple&#x20;or&#x20;Oracle.&#x20;The&#x20;old&#x20;versions&#x20;provided&#x20;by&#x20;Apple&#x20;are&#x20;both&#x20;unsupported&#x20;and&#x20;missing&#x20;the&#x20;more&#x20;modern&#x20;security&#x20;controls&#x20;that&#x20;have&#x20;limited&#x20;current&#x20;exploits.&#x20;The&#x20;EOL&#x20;version&#x20;may&#x20;still&#x20;be&#x20;installed&#x20;and&#x20;should&#x20;be&#x20;removed&#x20;from&#x20;the&#x20;computer&#x20;or&#x20;not&#x20;be&#x20;in&#x20;the&#x20;default&#x20;path.','','Java&#x20;6&#x20;can&#x20;be&#x20;removed&#x20;completely&#x20;or,&#x20;if&#x20;required&#x20;Java&#x20;applications&#x20;will&#x20;only&#x20;work&#x20;with&#x20;Java&#x20;6,&#x20;a&#x20;custom&#x20;path&#x20;can&#x20;be&#x20;used.&#x20;Apple&#x20;is&#x20;likely&#x20;to&#x20;finally&#x20;pull&#x20;the&#x20;plug&#x20;on&#x20;Java&#x20;6&#x20;in&#x20;upcoming&#x20;macOS&#x20;versions&#x20;so&#x20;any&#x20;applications&#x20;that&#x20;still&#x20;require&#x20;Java&#x20;6&#x20;will&#x20;likely&#x20;soon&#x20;be&#x20;unavailable.','[{\"cis\": [\"2.11\"]}]'),(9017,'Enable&#x20;security&#x20;auditing','macOS&#039;s&#x20;audit&#x20;facility,&#x20;auditd,&#x20;receives&#x20;notifications&#x20;from&#x20;the&#x20;kernel&#x20;when&#x20;certain&#x20;system&#x20;calls,&#x20;such&#x20;as&#x20;open,&#x20;fork,&#x20;and&#x20;exit,&#x20;are&#x20;made.&#x20;These&#x20;notifications&#x20;are&#x20;captured&#x20;and&#x20;written&#x20;to&#x20;an&#x20;audit&#x20;log.','Logs&#x20;generated&#x20;by&#x20;auditd&#x20;may&#x20;be&#x20;useful&#x20;when&#x20;investigating&#x20;a&#x20;security&#x20;incident&#x20;as&#x20;they&#x20;may&#x20;help&#x20;reveal&#x20;the&#x20;vulnerable&#x20;application&#x20;and&#x20;the&#x20;actions&#x20;taken&#x20;by&#x20;a&#x20;malicious&#x20;actor.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;launchctl&#x20;load&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.auditd.plist','[{\"cis\": [\"3.1\"]}]'),(9018,'Configure&#x20;Security&#x20;Auditing&#x20;Flags','Auditing&#x20;is&#x20;the&#x20;capture&#x20;and&#x20;maintenance&#x20;of&#x20;information&#x20;about&#x20;security-related&#x20;events.','Maintaining&#x20;an&#x20;audit&#x20;trail&#x20;of&#x20;system&#x20;activity&#x20;logs&#x20;can&#x20;help&#x20;identify&#x20;configuration&#x20;errors,&#x20;troubleshoot&#x20;service&#x20;disruptions,&#x20;and&#x20;analyze&#x20;compromises&#x20;or&#x20;attacks&#x20;that&#x20;have&#x20;occurred,&#x20;have&#x20;begun,&#x20;or&#x20;are&#x20;about&#x20;to&#x20;begin.&#x20;Audit&#x20;logs&#x20;are&#x20;necessary&#x20;to&#x20;provide&#x20;a&#x20;trail&#x20;of&#x20;evidence&#x20;in&#x20;case&#x20;the&#x20;system&#x20;or&#x20;network&#x20;is&#x20;compromised.','','1.&#x20;Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;edit&#x20;the&#x20;/etc/security/audit_control&#x20;file&#x20;2.&#x20;Find&#x20;the&#x20;line&#x20;beginning&#x20;with&#x20;&quot;flags&quot;&#x20;3.&#x20;Add&#x20;the&#x20;following&#x20;flags:&#x20;lo,&#x20;ad,&#x20;fd,&#x20;fm,&#x20;-all.&#x20;&#x20;4.&#x20;Save&#x20;the&#x20;file.','[{\"cis\": [\"3.2\"]}]'),(9019,'Disable&#x20;Bonjour&#x20;advertising&#x20;service','Bonjour&#x20;is&#x20;an&#x20;auto-discovery&#x20;mechanism&#x20;for&#x20;TCP/IP&#x20;devices&#x20;which&#x20;enumerate&#x20;devices&#x20;and&#x20;services&#x20;within&#x20;a&#x20;local&#x20;subnet.&#x20;DNS&#x20;on&#x20;macOS&#x20;is&#x20;integrated&#x20;with&#x20;Bonjour&#x20;and&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off,&#x20;but&#x20;the&#x20;Bonjour&#x20;advertising&#x20;service&#x20;can&#x20;be&#x20;disabled.','Bonjour&#x20;can&#x20;simplify&#x20;device&#x20;discovery&#x20;from&#x20;an&#x20;internal&#x20;rogue&#x20;or&#x20;compromised&#x20;host.&#x20;An&#x20;attacker&#x20;could&#x20;use&#x20;Bonjour&#039;s&#x20;multicast&#x20;DNS&#x20;feature&#x20;to&#x20;discover&#x20;a&#x20;vulnerable&#x20;or&#x20;poorly-&#x20;configured&#x20;service&#x20;or&#x20;additional&#x20;information&#x20;to&#x20;aid&#x20;a&#x20;targeted&#x20;attack.&#x20;Implementing&#x20;this&#x20;control&#x20;disables&#x20;the&#x20;continuous&#x20;broadcasting&#x20;of&#x20;&quot;I&#039;m&#x20;here!&quot;&#x20;messages.&#x20;Typical&#x20;end-user&#x20;endpoints&#x20;should&#x20;not&#x20;have&#x20;to&#x20;advertise&#x20;services&#x20;to&#x20;other&#x20;computers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.mDNSResponder.plist&#x20;NoMulticastAdvertisements','[{\"cis\": [\"4.1\"]}]'),(9020,'Ensure&#x20;http&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;Apache&#x20;web&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;Personal&#x20;web&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Personal&#x20;web&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;Apache&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;&#x20;Web&#x20;sharing&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;web&#x20;servers&#x20;and&#x20;appropriate&#x20;cloud&#x20;services.','Web&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;webservers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Stop&#x20;the&#x20;Web&#x20;Server&#x20;sudo&#x20;apachectl&#x20;stop&#x20;&#x20;&#x20;&#x20;Ensure&#x20;that&#x20;the&#x20;web&#x20;server&#x20;will&#x20;not&#x20;auto-start&#x20;at&#x20;boot&#x20;sudo&#x20;defaults&#x20;write&#x20;/System/Library/LaunchDaemons/org.apache.httpd&#x20;Disabled&#x20;-&#x20;bool&#x20;true','[{\"cis\": [\"4.4\"]}]'),(9021,'Ensure&#x20;FTP&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;FTP&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;FTP&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Running&#x20;an&#x20;FTP&#x20;server&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;The&#x20;FTP&#x20;server&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;FTP&#x20;servers&#x20;meet&#x20;a&#x20;specialized&#x20;need&#x20;to&#x20;distribute&#x20;files&#x20;without&#x20;strong&#x20;authentication&#x20;and&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;servers.&#x20;Cloud&#x20;services&#x20;or&#x20;other&#x20;distribution&#x20;methods&#x20;should&#x20;be&#x20;considered','FTP&#x20;servers&#x20;should&#x20;not&#x20;be&#x20;run&#x20;on&#x20;an&#x20;end&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;servers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Stop&#x20;the&#x20;ftp&#x20;Server&#x20;sudo&#x20;-s&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/ftp.plist','[{\"cis\": [\"4.5\"]}]'),(9022,'Ensure&#x20;nfs&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;can&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;fileserver.&#x20;NFS&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;mount&#x20;shares&#x20;and&#x20;gain&#x20;access&#x20;to&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;File&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;NFSD&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;export&#x20;shares&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.','File&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop,&#x20;dedicated&#x20;servers&#x20;should&#x20;be&#x20;used.&#x20;&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Stop&#x20;the&#x20;NFS&#x20;Server&#x20;sudo&#x20;nfsd&#x20;disable&#x20;&#x20;&#x20;&#x20;Remove&#x20;the&#x20;exported&#x20;Directory&#x20;listing&#x20;rm&#x20;/etc/export','[{\"cis\": [\"4.6\"]}]'),(9023,'Do&#x20;not&#x20;enable&#x20;the&#x20;&quot;root&quot;&#x20;account','The&#x20;root&#x20;account&#x20;is&#x20;a&#x20;superuser&#x20;account&#x20;that&#x20;has&#x20;access&#x20;privileges&#x20;to&#x20;perform&#x20;any&#x20;actions&#x20;and&#x20;read/write&#x20;to&#x20;any&#x20;file&#x20;on&#x20;the&#x20;computer.&#x20;With&#x20;some&#x20;Linux&#x20;distros&#x20;the&#x20;system&#x20;administrator&#x20;may&#x20;commonly&#x20;uses&#x20;the&#x20;root&#x20;account&#x20;to&#x20;perform&#x20;administrative&#x20;functions.','Enabling&#x20;and&#x20;using&#x20;the&#x20;root&#x20;account&#x20;puts&#x20;the&#x20;system&#x20;at&#x20;risk&#x20;since&#x20;any&#x20;successful&#x20;exploit&#x20;or&#x20;mistake&#x20;while&#x20;the&#x20;root&#x20;account&#x20;is&#x20;in&#x20;use&#x20;could&#x20;have&#x20;unlimited&#x20;access&#x20;privileges&#x20;within&#x20;the&#x20;system.&#x20;Using&#x20;the&#x20;sudo&#x20;command&#x20;allows&#x20;users&#x20;to&#x20;perform&#x20;functions&#x20;as&#x20;a&#x20;root&#x20;user&#x20;while&#x20;limiting&#x20;and&#x20;password&#x20;protecting&#x20;the&#x20;access&#x20;privileges.&#x20;By&#x20;default&#x20;the&#x20;root&#x20;account&#x20;is&#x20;not&#x20;enabled&#x20;on&#x20;a&#x20;macOS&#x20;computer.&#x20;An&#x20;administrator&#x20;can&#x20;escalate&#x20;privileges&#x20;using&#x20;the&#x20;sudo&#x20;command&#x20;&#40;use&#x20;-s&#x20;or&#x20;-i&#x20;to&#x20;get&#x20;a&#x20;root&#x20;shell&#41;.','','Open&#x20;System&#x20;Preferences,&#x20;Uses&#x20;&amp;&#x20;Groups.&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;In&#x20;the&#x20;Network&#x20;Account&#x20;Server&#x20;section,&#x20;click&#x20;Join&#x20;or&#x20;Edit.&#x20;Click&#x20;Open&#x20;Directory&#x20;Utility.&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;Select&#x20;the&#x20;Edit&#x20;menu&#x20;&gt;&#x20;Disable&#x20;Root&#x20;User.','[{\"cis\": [\"5.8\"]}]'),(9024,'Disable&#x20;automatic&#x20;login','The&#x20;automatic&#x20;login&#x20;feature&#x20;saves&#x20;a&#x20;user&#039;s&#x20;system&#x20;access&#x20;credentials&#x20;and&#x20;bypasses&#x20;the&#x20;login&#x20;screen,&#x20;instead&#x20;the&#x20;system&#x20;automatically&#x20;loads&#x20;to&#x20;the&#x20;user&#039;s&#x20;desktop&#x20;screen.','Disabling&#x20;automatic&#x20;login&#x20;decreases&#x20;the&#x20;likelihood&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;a&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;delete&#x20;/Library/Preferences/com.apple.loginwindow&#x20;autoLoginUser','[{\"cis\": [\"5.9\"]}]'),(9025,'System&#x20;Integrity&#x20;Protection&#x20;status','System&#x20;Integrity&#x20;Protection&#x20;is&#x20;a&#x20;security&#x20;feature&#x20;introduced&#x20;in&#x20;OS&#x20;X&#x20;10.11&#x20;El&#x20;Capitan.&#x20;&#x20;System&#x20;Integrity&#x20;Protection&#x20;restricts&#x20;access&#x20;to&#x20;System&#x20;domain&#x20;locations&#x20;and&#x20;restricts&#x20;runtime&#x20;attachment&#x20;to&#x20;system&#x20;processes.&#x20;Any&#x20;attempt&#x20;to&#x20;attempt&#x20;to&#x20;inspect&#x20;or&#x20;attach&#x20;to&#x20;a&#x20;system&#x20;process&#x20;will&#x20;fail.&#x20;Kernel&#x20;Extensions&#x20;are&#x20;now&#x20;restricted&#x20;to&#x20;/Library/Extensions&#x20;and&#x20;are&#x20;required&#x20;to&#x20;be&#x20;signed&#x20;with&#x20;a&#x20;Developer&#x20;ID.','Running&#x20;without&#x20;System&#x20;Integrity&#x20;Protection&#x20;on&#x20;a&#x20;production&#x20;system&#x20;runs&#x20;the&#x20;risk&#x20;of&#x20;the&#x20;modification&#x20;of&#x20;system&#x20;binaries&#x20;or&#x20;code&#x20;injection&#x20;of&#x20;system&#x20;processes&#x20;that&#x20;would&#x20;otherwise&#x20;be&#x20;protected&#x20;by&#x20;SIP.','','Perform&#x20;the&#x20;following&#x20;while&#x20;booted&#x20;in&#x20;macOS&#x20;Recovery&#x20;Partition.&#x20;&#x20;1.&#x20;Select&#x20;Terminal&#x20;from&#x20;the&#x20;Utilities&#x20;menu&#x20;&#x20;&#x20;&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;/usr/bin/csrutil&#x20;enable&#x20;&#x20;&#x20;&#x20;3.&#x20;The&#x20;output&#x20;should&#x20;be:&#x20;Successfully&#x20;enabled&#x20;System&#x20;Integrity&#x20;Protection.&#x20;Please&#x20;restart&#x20;the&#x20;machine&#x20;for&#x20;the&#x20;changes&#x20;to&#x20;take&#x20;effect.&#x20;&#x20;&#x20;&#x20;4.&#x20;Reboot.','[{\"cis\": [\"5.20\"]}]'),(9026,'Disable&#x20;guest&#x20;account&#x20;login','The&#x20;guest&#x20;account&#x20;allows&#x20;users&#x20;access&#x20;to&#x20;the&#x20;system&#x20;without&#x20;having&#x20;to&#x20;create&#x20;an&#x20;account&#x20;or&#x20;password.&#x20;Guest&#x20;users&#x20;are&#x20;unable&#x20;to&#x20;make&#x20;setting&#x20;changes,&#x20;cannot&#x20;remotely&#x20;login&#x20;to&#x20;the&#x20;system&#x20;and&#x20;all&#x20;created&#x20;files,&#x20;caches,&#x20;and&#x20;passwords&#x20;are&#x20;deleted&#x20;upon&#x20;logging&#x20;out.','Disabling&#x20;the&#x20;guest&#x20;account&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;untrusted&#x20;user&#x20;doing&#x20;basic&#x20;reconnaissance&#x20;and&#x20;possibly&#x20;using&#x20;privilege&#x20;escalation&#x20;attacks&#x20;to&#x20;take&#x20;control&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.loginwindow&#x20;GuestEnabled&#x20;-&#x20;bool&#x20;NO','[{\"cis\": [\"6.1.3\"]}]'),(9027,'Remove&#x20;Guest&#x20;home&#x20;folder','The&#x20;guest&#x20;account&#x20;login&#x20;should&#x20;have&#x20;been&#x20;disabled,&#x20;so&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;the&#x20;legacy&#x20;Guest&#x20;home&#x20;folder&#x20;to&#x20;remain&#x20;in&#x20;the&#x20;file&#x20;system.&#x20;When&#x20;normal&#x20;user&#x20;accounts&#x20;are&#x20;removed&#x20;you&#x20;have&#x20;the&#x20;option&#x20;to&#x20;archive&#x20;it,&#x20;leave&#x20;it&#x20;in&#x20;place&#x20;or&#x20;delete.&#x20;In&#x20;the&#x20;case&#x20;of&#x20;the&#x20;guest&#x20;folder&#x20;the&#x20;folder&#x20;remains&#x20;in&#x20;place&#x20;without&#x20;a&#x20;GUI&#x20;option&#x20;to&#x20;remove&#x20;it.&#x20;If&#x20;at&#x20;some&#x20;point&#x20;in&#x20;the&#x20;future&#x20;a&#x20;Guest&#x20;account&#x20;is&#x20;needed&#x20;it&#x20;will&#x20;be&#x20;re-created.&#x20;The&#x20;presence&#x20;of&#x20;the&#x20;Guest&#x20;home&#x20;folder&#x20;can&#x20;cause&#x20;automated&#x20;audits&#x20;to&#x20;fail&#x20;when&#x20;looking&#x20;for&#x20;compliant&#x20;settings&#x20;within&#x20;all&#x20;User&#x20;folders&#x20;as&#x20;well.&#x20;Rather&#x20;than&#x20;ignoring&#x20;the&#x20;folders&#x20;continued&#x20;existence&#x20;it&#x20;is&#x20;best&#x20;removed.','The&#x20;Guest&#x20;home&#x20;folders&#x20;are&#x20;unneeded&#x20;after&#x20;the&#x20;Guest&#x20;account&#x20;is&#x20;disabled&#x20;and&#x20;could&#x20;be&#x20;used&#x20;inappropriately.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;rm&#x20;-R&#x20;/Users/Guest&#x20;&#x20;2.&#x20;Make&#x20;sure&#x20;there&#x20;is&#x20;no&#x20;output','[{\"cis\": [\"6.1.5\"]}]'),(9028,'Turn&#x20;on&#x20;filename&#x20;extensions','A&#x20;filename&#x20;extension&#x20;is&#x20;a&#x20;suffix&#x20;added&#x20;to&#x20;a&#x20;base&#x20;filename&#x20;that&#x20;indicates&#x20;the&#x20;base&#x20;filename&#039;s&#x20;file&#x20;format.','Visible&#x20;filename&#x20;extensions&#x20;allows&#x20;the&#x20;user&#x20;to&#x20;identify&#x20;the&#x20;file&#x20;type&#x20;and&#x20;the&#x20;application&#x20;it&#x20;is&#x20;associated&#x20;with&#x20;which&#x20;leads&#x20;to&#x20;quick&#x20;identification&#x20;of&#x20;misrepresented&#x20;malicious&#x20;files.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Select&#x20;Finder&#x20;2.&#x20;Select&#x20;Preferences&#x20;3.&#x20;Check&#x20;Show&#x20;all&#x20;filename&#x20;extensions&#x20;&#x20;&#x20;&#x20;Alternatively,&#x20;use&#x20;the&#x20;following&#x20;command:&#x20;defaults&#x20;write&#x20;NSGlobalDomain&#x20;AppleShowAllExtensions&#x20;-bool&#x20;true','[{\"cis\": [\"6.2\"]}]'),(9029,'Disable&#x20;the&#x20;automatic&#x20;run&#x20;of&#x20;safe&#x20;files&#x20;in&#x20;Safari','Safari&#x20;will&#x20;automatically&#x20;run&#x20;or&#x20;execute&#x20;what&#x20;it&#x20;considers&#x20;safe&#x20;files.&#x20;This&#x20;can&#x20;include&#x20;installers&#x20;and&#x20;other&#x20;files&#x20;that&#x20;execute&#x20;on&#x20;the&#x20;operating&#x20;system.&#x20;Safari&#x20;bases&#x20;file&#x20;safety&#x20;by&#x20;using&#x20;a&#x20;list&#x20;of&#x20;filetypes&#x20;maintained&#x20;by&#x20;Apple.&#x20;The&#x20;list&#x20;of&#x20;files&#x20;include&#x20;text,&#x20;image,&#x20;video&#x20;and&#x20;archive&#x20;formats&#x20;that&#x20;would&#x20;be&#x20;run&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;OS&#x20;rather&#x20;than&#x20;the&#x20;browser.','Hackers&#x20;have&#x20;taken&#x20;advantage&#x20;of&#x20;this&#x20;setting&#x20;via&#x20;drive-by&#x20;attacks.&#x20;These&#x20;attacks&#x20;occur&#x20;when&#x20;a&#x20;user&#x20;visits&#x20;a&#x20;legitimate&#x20;website&#x20;that&#x20;has&#x20;been&#x20;corrupted.&#x20;The&#x20;user&#x20;unknowingly&#x20;downloads&#x20;a&#x20;malicious&#x20;file&#x20;either&#x20;by&#x20;closing&#x20;an&#x20;infected&#x20;pop-up&#x20;or&#x20;hovering&#x20;over&#x20;a&#x20;malicious&#x20;banner.&#x20;An&#x20;attacker&#x20;can&#x20;create&#x20;a&#x20;malicious&#x20;file&#x20;that&#x20;will&#x20;fall&#x20;within&#x20;Safari&#039;s&#x20;safe&#x20;file&#x20;list&#x20;that&#x20;will&#x20;download&#x20;and&#x20;execute&#x20;without&#x20;user&#x20;input.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Safari&#x20;2.&#x20;Select&#x20;Safari&#x20;from&#x20;the&#x20;menu&#x20;bar&#x20;3.&#x20;Select&#x20;Preferences&#x20;4.&#x20;Select&#x20;General&#x20;5.&#x20;Uncheck&#x20;Open&#x20;&quot;safe&quot;&#x20;files&#x20;after&#x20;downloading&#x20;&#x20;&#x20;&#x20;Alternatively&#x20;run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;com.apple.Safari&#x20;AutoOpenSafeDownloads&#x20;-boolean&#x20;no','[{\"cis\": [\"6.3\"]}]'),(9500,'Verify&#x20;all&#x20;Apple&#x20;provided&#x20;software&#x20;is&#x20;current','Software&#x20;vendors&#x20;release&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates&#x20;for&#x20;their&#x20;products&#x20;when&#x20;security&#x20;vulnerabilities&#x20;are&#x20;discovered.&#x20;There&#x20;is&#x20;no&#x20;simple&#x20;way&#x20;to&#x20;complete&#x20;this&#x20;action&#x20;without&#x20;a&#x20;network&#x20;connection&#x20;to&#x20;an&#x20;Apple&#x20;software&#x20;repository.&#x20;Please&#x20;ensure&#x20;appropriate&#x20;access&#x20;for&#x20;this&#x20;control.&#x20;This&#x20;check&#x20;is&#x20;only&#x20;for&#x20;what&#x20;Apple&#x20;provides&#x20;through&#x20;software&#x20;update.','It&#x20;is&#x20;important&#x20;that&#x20;these&#x20;updates&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;the&#x20;identified&#x20;vulnerabilities.','','1.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following:&#x20;softwareupdate&#x20;-l&#x20;&#x20;&#x20;&#x20;2.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following&#x20;for&#x20;any&#x20;packages&#x20;that&#x20;show&#x20;up&#x20;in&#x20;step&#x20;1:&#x20;sudo&#x20;softwareupdate&#x20;-i&#x20;packagename','[{\"cis\": [\"1.1\"]}]'),(9501,'Enable&#x20;Auto&#x20;Update','Auto&#x20;Update&#x20;verifies&#x20;that&#x20;your&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates.&#x20;If&#x20;&quot;Automatically&#x20;check&#x20;for&#x20;updates&quot;&#x20;is&#x20;not&#x20;selected&#x20;background&#x20;updates&#x20;for&#x20;new&#x20;malware&#x20;definition&#x20;files&#x20;from&#x20;Apple&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper&#x20;will&#x20;not&#x20;occur.','It&#x20;is&#x20;important&#x20;that&#x20;a&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;updates&#x20;applied&#x20;so&#x20;as&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;identified&#x20;vulnerabilities.','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;AutomaticCheckEnabled&#x20;-int&#x20;1','[{\"cis\": [\"1.2\"]}]'),(9502,'Enable&#x20;app&#x20;update&#x20;installs','Ensure&#x20;that&#x20;application&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;admin&#x20;privileges&#x20;for&#x20;end&#x20;users.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdate&#x20;-bool&#x20;TRUE&#x20;&#x20;&#x20;&#x20;The&#x20;remediation&#x20;requires&#x20;a&#x20;log&#x20;out&#x20;and&#x20;log&#x20;in&#x20;to&#x20;show&#x20;in&#x20;the&#x20;GUI.&#x20;Please&#x20;note&#x20;that.','[{\"cis\": [\"1.3\"]}]'),(9503,'Enable&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;update&#x20;installs','Ensure&#x20;that&#x20;system&#x20;and&#x20;security&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;&#x20;This&#x20;setting&#x20;enables&#x20;definition&#x20;updates&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper,&#x20;with&#x20;this&#x20;setting&#x20;in&#x20;place&#x20;new&#x20;malware&#x20;and&#x20;adware&#x20;that&#x20;Apple&#x20;has&#x20;added&#x20;to&#x20;the&#x20;list&#x20;of&#x20;malware&#x20;or&#x20;untrusted&#x20;software&#x20;will&#x20;not&#x20;execute.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;end&#x20;user&#x20;admin&#x20;rights.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;ConfigDataInstall&#x20;-bool&#x20;true&#x20;&amp;&amp;&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;CriticalUpdateInstall&#x20;-bool&#x20;true','[{\"cis\": [\"1.4\"]}]'),(9504,'Enable&#x20;macOS&#x20;update&#x20;installs','Ensure&#x20;that&#x20;macOS&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;This&#x20;setting&#x20;enables&#x20;macOS&#x20;updates&#x20;to&#x20;be&#x20;automatically&#x20;installed.&#x20;Some&#x20;environments&#x20;will&#x20;want&#x20;to&#x20;approve&#x20;and&#x20;test&#x20;updates&#x20;before&#x20;they&#x20;are&#x20;delivered.&#x20;It&#x20;is&#x20;best&#x20;practice&#x20;to&#x20;test&#x20;first&#x20;where&#x20;updates&#x20;can&#x20;and&#x20;have&#x20;caused&#x20;disruptions&#x20;to&#x20;operations.&#x20;Automatic&#x20;updates&#x20;should&#x20;be&#x20;turned&#x20;off&#x20;where&#x20;changes&#x20;are&#x20;tightly&#x20;controlled&#x20;and&#x20;there&#x20;are&#x20;mature&#x20;testing&#x20;and&#x20;approval&#x20;processes.&#x20;Automatic&#x20;updates&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off&#x20;so&#x20;the&#x20;admin&#x20;can&#x20;call&#x20;the&#x20;users&#x20;first&#x20;to&#x20;let&#x20;them&#x20;know&#x20;it&#039;s&#x20;ok&#x20;to&#x20;install.&#x20;A&#x20;dependable&#x20;repeatable&#x20;process&#x20;involving&#x20;a&#x20;patch&#x20;agent&#x20;or&#x20;remote&#x20;management&#x20;tool&#x20;should&#x20;be&#x20;in&#x20;place&#x20;before&#x20;auto-updates&#x20;are&#x20;turned&#x20;off.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdateRestartRequired&#x20;-bool&#x20;TRUE','[{\"cis\": [\"1.5\"]}]'),(9505,'Enable&#x20;&quot;Set&#x20;time&#x20;and&#x20;date&#x20;automatically&quot;','Correct&#x20;date&#x20;and&#x20;time&#x20;settings&#x20;are&#x20;required&#x20;for&#x20;authentication&#x20;protocols,&#x20;file&#x20;creation,&#x20;modification&#x20;dates&#x20;and&#x20;log&#x20;entries.','Kerberos&#x20;may&#x20;not&#x20;operate&#x20;correctly&#x20;if&#x20;the&#x20;time&#x20;on&#x20;the&#x20;Mac&#x20;is&#x20;off&#x20;by&#x20;more&#x20;than&#x20;5&#x20;minutes.&#x20;&#x20;This&#x20;in&#x20;turn&#x20;can&#x20;affect&#x20;Apple&#039;s&#x20;single&#x20;sign-on&#x20;feature,&#x20;Active&#x20;Directory&#x20;logons,&#x20;and&#x20;other&#x20;features.','','Run&#x20;the&#x20;following&#x20;commands:&#x20;sudo&#x20;systemsetup&#x20;-setnetworktimeserver&#x20;&lt;timeserver&gt;&#x20;&#x20;&#x20;&#x20;sudo&#x20;systemsetup&#x20;-setusingnetworktime&#x20;on','[{\"cis\": [\"2.2.1\"]}]'),(9506,'Disable&#x20;Remote&#x20;Apple&#x20;Events','Apple&#x20;Events&#x20;is&#x20;a&#x20;technology&#x20;that&#x20;allows&#x20;one&#x20;program&#x20;to&#x20;communicate&#x20;with&#x20;other&#x20;programs.&#x20;Remote&#x20;Apple&#x20;Events&#x20;allows&#x20;a&#x20;program&#x20;on&#x20;one&#x20;computer&#x20;to&#x20;communicate&#x20;with&#x20;a&#x20;program&#x20;on&#x20;a&#x20;different&#x20;computer.','Disabling&#x20;Remote&#x20;Apple&#x20;Events&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;program&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremoteappleevents&#x20;off','[{\"cis\": [\"2.4.1\"]}]'),(9507,'Disable&#x20;Printer&#x20;Sharing','By&#x20;enabling&#x20;Printer&#x20;sharing&#x20;the&#x20;computer&#x20;is&#x20;set&#x20;up&#x20;as&#x20;a&#x20;print&#x20;server&#x20;to&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;computers.&#x20;Dedicated&#x20;print&#x20;servers&#x20;or&#x20;direct&#x20;IP&#x20;printing&#x20;should&#x20;be&#x20;used&#x20;instead.','Disabling&#x20;Printer&#x20;Sharing&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;attackers&#x20;attempting&#x20;to&#x20;exploit&#x20;the&#x20;print&#x20;server&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;system.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Sharing&#x20;3.&#x20;Uncheck&#x20;Printer&#x20;Sharing','[{\"cis\": [\"2.4.4\"]}]'),(9508,'Disable&#x20;Remote&#x20;Login','Remote&#x20;Login&#x20;allows&#x20;an&#x20;interactive&#x20;terminal&#x20;connection&#x20;to&#x20;a&#x20;computer.','Disabling&#x20;Remote&#x20;Login&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system&#x20;via&#x20;Secure&#x20;Shell&#x20;&#40;SSH&#41;.&#x20;While&#x20;SSH&#x20;is&#x20;an&#x20;industry&#x20;standard&#x20;to&#x20;connect&#x20;to&#x20;posix&#x20;servers,&#x20;the&#x20;scope&#x20;of&#x20;the&#x20;benchmark&#x20;is&#x20;for&#x20;Apple&#x20;macOS&#x20;clients,&#x20;not&#x20;servers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremotelogin&#x20;off','[{\"cis\": [\"2.4.5\"]}]'),(9509,'Disable&#x20;File&#x20;Sharing','Apple&#039;s&#x20;File&#x20;Sharing&#x20;uses&#x20;a&#x20;combination&#x20;of&#x20;SMB&#x20;&#40;Windows&#x20;sharing&#41;&#x20;and&#x20;AFP&#x20;&#40;Mac&#x20;sharing&#41;','By&#x20;disabling&#x20;file&#x20;sharing,&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;and&#x20;risk&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;files&#x20;stored&#x20;on&#x20;the&#x20;system&#x20;is&#x20;reduced.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;AFP&#x20;from&#x20;the&#x20;command&#x20;line:&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.AppleFileServer.plist&#x20;&#x20;-&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;SMB&#x20;sharing&#x20;from&#x20;the&#x20;CLI:&#x20;&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.smbd.plist','[{\"cis\": [\"2.4.8\"]}]'),(9510,'Disable&#x20;&quot;Wake&#x20;for&#x20;network&#x20;access&quot;','This&#x20;feature&#x20;allows&#x20;other&#x20;users&#x20;to&#x20;be&#x20;able&#x20;to&#x20;access&#x20;your&#x20;computer&#039;s&#x20;shared&#x20;resources,&#x20;such&#x20;as&#x20;shared&#x20;printers&#x20;or&#x20;iTunes&#x20;playlists,&#x20;even&#x20;when&#x20;your&#x20;computer&#x20;is&#x20;in&#x20;sleep&#x20;mode.&#x20;In&#x20;a&#x20;closed&#x20;network&#x20;when&#x20;only&#x20;authorized&#x20;devices&#x20;could&#x20;wake&#x20;a&#x20;computer&#x20;it&#x20;could&#x20;be&#x20;valuable&#x20;to&#x20;wake&#x20;computers&#x20;in&#x20;order&#x20;to&#x20;do&#x20;management&#x20;push&#x20;activity.&#x20;Where&#x20;mobile&#x20;workstations&#x20;and&#x20;agents&#x20;exist&#x20;the&#x20;device&#x20;will&#x20;more&#x20;likely&#x20;check&#x20;in&#x20;to&#x20;receive&#x20;updates&#x20;when&#x20;already&#x20;awake.&#x20;Mobile&#x20;devices&#x20;should&#x20;not&#x20;be&#x20;listening&#x20;for&#x20;signals&#x20;on&#x20;unmanaged&#x20;network&#x20;where&#x20;untrusted&#x20;devices&#x20;could&#x20;send&#x20;wake&#x20;signals.','Disabling&#x20;this&#x20;feature&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;remotely&#x20;waking&#x20;the&#x20;system&#x20;and&#x20;gaining&#x20;access.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;pmset&#x20;-a&#x20;womp&#x20;0','[{\"cis\": [\"2.5.1\"]}]'),(9511,'Enable&#x20;FileVault','FileVault&#x20;secures&#x20;a&#x20;system&#039;s&#x20;data&#x20;by&#x20;automatically&#x20;encrypting&#x20;its&#x20;boot&#x20;volume&#x20;and&#x20;requiring&#x20;a&#x20;password&#x20;or&#x20;recovery&#x20;key&#x20;to&#x20;access&#x20;it.','Encrypting&#x20;sensitive&#x20;data&#x20;minimizes&#x20;the&#x20;likelihood&#x20;of&#x20;unauthorized&#x20;users&#x20;gaining&#x20;access&#x20;to&#x20;it.','','1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Security&#x20;&amp;&#x20;Privacy&#x20;3.&#x20;Select&#x20;FileVault&#x20;4.&#x20;Select&#x20;Turn&#x20;on&#x20;FileVault','[{\"cis\": [\"2.6.1.1\"]}]'),(9512,'Enable&#x20;Gatekeeper','Gatekeeper&#x20;is&#x20;Apple&#039;s&#x20;application&#x20;white-listing&#x20;control&#x20;that&#x20;restricts&#x20;downloaded&#x20;applications&#x20;from&#x20;launching.&#x20;It&#x20;functions&#x20;as&#x20;a&#x20;control&#x20;to&#x20;limit&#x20;applications&#x20;from&#x20;unverified&#x20;sources&#x20;from&#x20;running&#x20;without&#x20;authorization.','Disallowing&#x20;unsigned&#x20;software&#x20;will&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;unauthorized&#x20;or&#x20;malicious&#x20;applications&#x20;from&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;spctl&#x20;--master-enable','[{\"cis\": [\"2.6.2\"]}]'),(9513,'Enable&#x20;Firewall','A&#x20;firewall&#x20;is&#x20;a&#x20;piece&#x20;of&#x20;software&#x20;that&#x20;blocks&#x20;unwanted&#x20;incoming&#x20;connections&#x20;to&#x20;a&#x20;system.&#x20;&#x20;Apple&#x20;has&#x20;posted&#x20;general&#x20;documentation&#x20;about&#x20;the&#x20;application&#x20;firewall.','A&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;unauthorized&#x20;users&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;your&#x20;system&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.alf&#x20;globalstate&#x20;-&#x20;int&#x20;&lt;value&gt;&#x20;&#x20;&#x20;&#x20;Where&#x20;&lt;value&gt;&#x20;is:&#x20;-&#x20;1&#x20;=&#x20;on&#x20;for&#x20;specific&#x20;services&#x20;-&#x20;2&#x20;=&#x20;on&#x20;for&#x20;essential&#x20;services&#x20;','[{\"cis\": [\"2.6.3\"]}]'),(9514,'Enable&#x20;Firewall&#x20;Stealth&#x20;Mode','While&#x20;in&#x20;Stealth&#x20;mode&#x20;the&#x20;computer&#x20;will&#x20;not&#x20;respond&#x20;to&#x20;unsolicited&#x20;probes,&#x20;dropping&#x20;that&#x20;traffic.','Stealth&#x20;mode&#x20;on&#x20;the&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;system&#x20;discovery&#x20;tools&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;/usr/libexec/ApplicationFirewall/socketfilterfw&#x20;--setstealthmode&#x20;on','[{\"cis\": [\"2.6.4\"]}]'),(9515,'Enable&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;in&#x20;terminal.app','Secure&#x20;Keyboard&#x20;Entry&#x20;prevents&#x20;other&#x20;applications&#x20;on&#x20;the&#x20;system&#x20;and/or&#x20;network&#x20;from&#x20;detecting&#x20;and&#x20;recording&#x20;what&#x20;is&#x20;typed&#x20;into&#x20;Terminal.','Enabling&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;minimizes&#x20;the&#x20;risk&#x20;of&#x20;a&#x20;key&#x20;logger&#x20;from&#x20;detecting&#x20;what&#x20;is&#x20;entered&#x20;in&#x20;Terminal.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Terminal&#x20;2.&#x20;Select&#x20;Terminal&#x20;3.&#x20;Select&#x20;Secure&#x20;Keyboard&#x20;Entry','[{\"cis\": [\"2.10\"]}]'),(9516,'Java&#x20;6&#x20;is&#x20;not&#x20;the&#x20;default&#x20;Java&#x20;runtime','Apple&#x20;had&#x20;made&#x20;Java&#x20;part&#x20;of&#x20;the&#x20;core&#x20;Operating&#x20;System&#x20;for&#x20;macOS.&#x20;Apple&#x20;is&#x20;no&#x20;longer&#x20;providing&#x20;Java&#x20;updates&#x20;for&#x20;macOS&#x20;and&#x20;updated&#x20;JREs&#x20;and&#x20;JDK&#x20;are&#x20;made&#x20;available&#x20;by&#x20;Oracle.&#x20;&#x20;The&#x20;latest&#x20;version&#x20;of&#x20;Java&#x20;6&#x20;made&#x20;available&#x20;by&#x20;Apple&#x20;has&#x20;many&#x20;unpatched&#x20;vulnerabilities&#x20;and&#x20;should&#x20;not&#x20;be&#x20;the&#x20;default&#x20;runtime&#x20;for&#x20;Java&#x20;applets&#x20;that&#x20;request&#x20;one&#x20;from&#x20;the&#x20;Operating&#x20;System','Java&#x20;has&#x20;been&#x20;one&#x20;of&#x20;the&#x20;most&#x20;exploited&#x20;environments&#x20;and&#x20;Java&#x20;6,&#x20;which&#x20;was&#x20;provided&#x20;as&#x20;an&#x20;OS&#x20;component&#x20;by&#x20;Apple,&#x20;is&#x20;no&#x20;longer&#x20;maintained&#x20;by&#x20;Apple&#x20;or&#x20;Oracle.&#x20;The&#x20;old&#x20;versions&#x20;provided&#x20;by&#x20;Apple&#x20;are&#x20;both&#x20;unsupported&#x20;and&#x20;missing&#x20;the&#x20;more&#x20;modern&#x20;security&#x20;controls&#x20;that&#x20;have&#x20;limited&#x20;current&#x20;exploits.&#x20;The&#x20;EOL&#x20;version&#x20;may&#x20;still&#x20;be&#x20;installed&#x20;and&#x20;should&#x20;be&#x20;removed&#x20;from&#x20;the&#x20;computer&#x20;or&#x20;not&#x20;be&#x20;in&#x20;the&#x20;default&#x20;path.','','Java&#x20;6&#x20;can&#x20;be&#x20;removed&#x20;completely&#x20;or,&#x20;if&#x20;required&#x20;Java&#x20;applications&#x20;will&#x20;only&#x20;work&#x20;with&#x20;Java&#x20;6,&#x20;a&#x20;custom&#x20;path&#x20;can&#x20;be&#x20;used.&#x20;Apple&#x20;is&#x20;likely&#x20;to&#x20;finally&#x20;pull&#x20;the&#x20;plug&#x20;on&#x20;Java&#x20;6&#x20;in&#x20;upcoming&#x20;macOS&#x20;versions&#x20;so&#x20;any&#x20;applications&#x20;that&#x20;still&#x20;require&#x20;Java&#x20;6&#x20;will&#x20;likely&#x20;soon&#x20;be&#x20;unavailable.','[{\"cis\": [\"2.11\"]}]'),(9517,'Ensure&#x20;EFI&#x20;version&#x20;is&#x20;valid&#x20;and&#x20;being&#x20;regularly&#x20;checked','In&#x20;order&#x20;to&#x20;mitigate&#x20;firmware&#x20;attacks&#x20;Apple&#x20;has&#x20;created&#x20;a&#x20;automated&#x20;Firmware&#x20;check&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;EFI&#x20;version&#x20;running&#x20;is&#x20;a&#x20;known&#x20;good&#x20;version&#x20;from&#x20;Apple.&#x20;There&#x20;is&#x20;also&#x20;an&#x20;automated&#x20;process&#x20;to&#x20;check&#x20;it&#x20;every&#x20;seven&#x20;days.','If&#x20;the&#x20;Firmware&#x20;of&#x20;a&#x20;computer&#x20;has&#x20;been&#x20;compromised&#x20;the&#x20;Operating&#x20;System&#x20;that&#x20;the&#x20;Firmware&#x20;loads&#x20;cannot&#x20;be&#x20;trusted&#x20;either.','','If&#x20;EFI&#x20;does&#x20;not&#x20;pass&#x20;the&#x20;integrity&#x20;check&#x20;you&#x20;may&#x20;send&#x20;a&#x20;report&#x20;to&#x20;Apple.&#x20;Backing&#x20;up&#x20;files&#x20;and&#x20;clean&#x20;installing&#x20;a&#x20;known&#x20;good&#x20;Operating&#x20;System&#x20;and&#x20;Firmware&#x20;is&#x20;recommended.','[{\"cis\": [\"2.13\"]}]'),(9518,'Enable&#x20;security&#x20;auditing','macOS&#039;s&#x20;audit&#x20;facility,&#x20;auditd,&#x20;receives&#x20;notifications&#x20;from&#x20;the&#x20;kernel&#x20;when&#x20;certain&#x20;system&#x20;calls,&#x20;such&#x20;as&#x20;open,&#x20;fork,&#x20;and&#x20;exit,&#x20;are&#x20;made.&#x20;These&#x20;notifications&#x20;are&#x20;captured&#x20;and&#x20;written&#x20;to&#x20;an&#x20;audit&#x20;log.','Logs&#x20;generated&#x20;by&#x20;auditd&#x20;may&#x20;be&#x20;useful&#x20;when&#x20;investigating&#x20;a&#x20;security&#x20;incident&#x20;as&#x20;they&#x20;may&#x20;help&#x20;reveal&#x20;the&#x20;vulnerable&#x20;application&#x20;and&#x20;the&#x20;actions&#x20;taken&#x20;by&#x20;a&#x20;malicious&#x20;actor.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;launchctl&#x20;load&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.auditd.plist','[{\"cis\": [\"3.1\"]}]'),(9519,'Configure&#x20;Security&#x20;Auditing&#x20;Flags','Auditing&#x20;is&#x20;the&#x20;capture&#x20;and&#x20;maintenance&#x20;of&#x20;information&#x20;about&#x20;security-related&#x20;events.','Maintaining&#x20;an&#x20;audit&#x20;trail&#x20;of&#x20;system&#x20;activity&#x20;logs&#x20;can&#x20;help&#x20;identify&#x20;configuration&#x20;errors,&#x20;troubleshoot&#x20;service&#x20;disruptions,&#x20;and&#x20;analyze&#x20;compromises&#x20;or&#x20;attacks&#x20;that&#x20;have&#x20;occurred,&#x20;have&#x20;begun,&#x20;or&#x20;are&#x20;about&#x20;to&#x20;begin.&#x20;Audit&#x20;logs&#x20;are&#x20;necessary&#x20;to&#x20;provide&#x20;a&#x20;trail&#x20;of&#x20;evidence&#x20;in&#x20;case&#x20;the&#x20;system&#x20;or&#x20;network&#x20;is&#x20;compromised.','','1.&#x20;Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;edit&#x20;the&#x20;/etc/security/audit_control&#x20;file&#x20;&#x20;2.&#x20;Find&#x20;the&#x20;line&#x20;beginning&#x20;with&#x20;&quot;flags&quot;&#x20;&#x20;3.&#x20;Add&#x20;the&#x20;following&#x20;flags:&#x20;lo,&#x20;ad,&#x20;fd,&#x20;fm,&#x20;-all.&#x20;&#x20;4.&#x20;Save&#x20;the&#x20;file.','[{\"cis\": [\"3.2\"]}]'),(9520,'Disable&#x20;Bonjour&#x20;advertising&#x20;service','Bonjour&#x20;is&#x20;an&#x20;auto-discovery&#x20;mechanism&#x20;for&#x20;TCP/IP&#x20;devices&#x20;which&#x20;enumerate&#x20;devices&#x20;and&#x20;services&#x20;within&#x20;a&#x20;local&#x20;subnet.&#x20;DNS&#x20;on&#x20;macOS&#x20;is&#x20;integrated&#x20;with&#x20;Bonjour&#x20;and&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off,&#x20;but&#x20;the&#x20;Bonjour&#x20;advertising&#x20;service&#x20;can&#x20;be&#x20;disabled.','Bonjour&#x20;can&#x20;simplify&#x20;device&#x20;discovery&#x20;from&#x20;an&#x20;internal&#x20;rogue&#x20;or&#x20;compromised&#x20;host.&#x20;An&#x20;attacker&#x20;could&#x20;use&#x20;Bonjour&#039;s&#x20;multicast&#x20;DNS&#x20;feature&#x20;to&#x20;discover&#x20;a&#x20;vulnerable&#x20;or&#x20;poorly-&#x20;configured&#x20;service&#x20;or&#x20;additional&#x20;information&#x20;to&#x20;aid&#x20;a&#x20;targeted&#x20;attack.&#x20;Implementing&#x20;this&#x20;control&#x20;disables&#x20;the&#x20;continuous&#x20;broadcasting&#x20;of&#x20;&quot;I&#039;m&#x20;here!&quot;&#x20;messages.&#x20;Typical&#x20;end-user&#x20;endpoints&#x20;should&#x20;not&#x20;have&#x20;to&#x20;advertise&#x20;services&#x20;to&#x20;other&#x20;computers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.mDNSResponder.plist&#x20;NoMulticastAdvertisements','[{\"cis\": [\"4.1\"]}]'),(9521,'Ensure&#x20;http&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;Apache&#x20;web&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;Personal&#x20;web&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Personal&#x20;web&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;Apache&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;&#x20;Web&#x20;sharing&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;web&#x20;servers&#x20;and&#x20;appropriate&#x20;cloud&#x20;services.','Web&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;webservers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Ensure&#x20;that&#x20;the&#x20;Web&#x20;Server&#x20;is&#x20;not&#x20;running&#x20;and&#x20;is&#x20;not&#x20;set&#x20;to&#x20;start&#x20;at&#x20;boot&#x20;Stop&#x20;the&#x20;Web&#x20;Server:&#x20;sudo&#x20;apachectl&#x20;stop&#x20;&#x20;&#x20;&#x20;Ensure&#x20;that&#x20;the&#x20;web&#x20;server&#x20;will&#x20;not&#x20;auto-start&#x20;at&#x20;boot&#x20;sudo:&#x20;defaults&#x20;write&#x20;/System/Library/LaunchDaemons/org.apache.httpd&#x20;Disabled&#x20;-&#x20;bool&#x20;true','[{\"cis\": [\"4.4\"]}]'),(9522,'Ensure&#x20;nfs&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;can&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;fileserver.&#x20;NFS&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;mount&#x20;shares&#x20;and&#x20;gain&#x20;access&#x20;to&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;File&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;NFSD&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;export&#x20;shares&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.','File&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop,&#x20;dedicated&#x20;servers&#x20;should&#x20;be&#x20;used.&#x20;&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Ensure&#x20;that&#x20;the&#x20;NFS&#x20;Server&#x20;is&#x20;not&#x20;running&#x20;and&#x20;is&#x20;not&#x20;set&#x20;to&#x20;start&#x20;at&#x20;boot&#x20;Stop&#x20;the&#x20;NFS&#x20;Server:&#x20;sudo&#x20;nfsd&#x20;disable&#x20;&#x20;&#x20;&#x20;Remove&#x20;the&#x20;exported&#x20;Directory&#x20;listing:&#x20;rm&#x20;/etc/export','[{\"cis\": [\"4.5\"]}]'),(9523,'Do&#x20;not&#x20;enable&#x20;the&#x20;&quot;root&quot;&#x20;account','The&#x20;root&#x20;account&#x20;is&#x20;a&#x20;superuser&#x20;account&#x20;that&#x20;has&#x20;access&#x20;privileges&#x20;to&#x20;perform&#x20;any&#x20;actions&#x20;and&#x20;read/write&#x20;to&#x20;any&#x20;file&#x20;on&#x20;the&#x20;computer.&#x20;With&#x20;some&#x20;Linux&#x20;distros&#x20;the&#x20;system&#x20;administrator&#x20;may&#x20;commonly&#x20;uses&#x20;the&#x20;root&#x20;account&#x20;to&#x20;perform&#x20;administrative&#x20;functions.','Enabling&#x20;and&#x20;using&#x20;the&#x20;root&#x20;account&#x20;puts&#x20;the&#x20;system&#x20;at&#x20;risk&#x20;since&#x20;any&#x20;successful&#x20;exploit&#x20;or&#x20;mistake&#x20;while&#x20;the&#x20;root&#x20;account&#x20;is&#x20;in&#x20;use&#x20;could&#x20;have&#x20;unlimited&#x20;access&#x20;privileges&#x20;within&#x20;the&#x20;system.&#x20;Using&#x20;the&#x20;sudo&#x20;command&#x20;allows&#x20;users&#x20;to&#x20;perform&#x20;functions&#x20;as&#x20;a&#x20;root&#x20;user&#x20;while&#x20;limiting&#x20;and&#x20;password&#x20;protecting&#x20;the&#x20;access&#x20;privileges.&#x20;By&#x20;default&#x20;the&#x20;root&#x20;account&#x20;is&#x20;not&#x20;enabled&#x20;on&#x20;a&#x20;macOS&#x20;computer.&#x20;An&#x20;administrator&#x20;can&#x20;escalate&#x20;privileges&#x20;using&#x20;the&#x20;sudo&#x20;command&#x20;&#40;use&#x20;-s&#x20;or&#x20;-i&#x20;to&#x20;get&#x20;a&#x20;root&#x20;shell&#41;.','','Open&#x20;System&#x20;Preferences,&#x20;Uses&#x20;&amp;&#x20;Groups.&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;In&#x20;the&#x20;Network&#x20;Account&#x20;Server&#x20;section,&#x20;click&#x20;Join&#x20;or&#x20;Edit.&#x20;Click&#x20;Open&#x20;Directory&#x20;Utility.&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;Select&#x20;the&#x20;Edit&#x20;menu&#x20;&gt;&#x20;Disable&#x20;Root&#x20;User.','[{\"cis\": [\"5.11\"]}]'),(9524,'Disable&#x20;automatic&#x20;login','The&#x20;automatic&#x20;login&#x20;feature&#x20;saves&#x20;a&#x20;user&#039;s&#x20;system&#x20;access&#x20;credentials&#x20;and&#x20;bypasses&#x20;the&#x20;login&#x20;screen,&#x20;instead&#x20;the&#x20;system&#x20;automatically&#x20;loads&#x20;to&#x20;the&#x20;user&#039;s&#x20;desktop&#x20;screen.','Disabling&#x20;automatic&#x20;login&#x20;decreases&#x20;the&#x20;likelihood&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;a&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;delete&#x20;/Library/Preferences/com.apple.loginwindow&#x20;autoLoginUser','[{\"cis\": [\"5.12\"]}]'),(9525,'System&#x20;Integrity&#x20;Protection&#x20;status','System&#x20;Integrity&#x20;Protection&#x20;is&#x20;a&#x20;security&#x20;feature&#x20;introduced&#x20;in&#x20;OS&#x20;X&#x20;10.11&#x20;El&#x20;Capitan.&#x20;&#x20;System&#x20;Integrity&#x20;Protection&#x20;restricts&#x20;access&#x20;to&#x20;System&#x20;domain&#x20;locations&#x20;and&#x20;restricts&#x20;runtime&#x20;attachment&#x20;to&#x20;system&#x20;processes.&#x20;Any&#x20;attempt&#x20;to&#x20;attempt&#x20;to&#x20;inspect&#x20;or&#x20;attach&#x20;to&#x20;a&#x20;system&#x20;process&#x20;will&#x20;fail.&#x20;Kernel&#x20;Extensions&#x20;are&#x20;now&#x20;restricted&#x20;to&#x20;/Library/Extensions&#x20;and&#x20;are&#x20;required&#x20;to&#x20;be&#x20;signed&#x20;with&#x20;a&#x20;Developer&#x20;ID.','Running&#x20;without&#x20;System&#x20;Integrity&#x20;Protection&#x20;on&#x20;a&#x20;production&#x20;system&#x20;runs&#x20;the&#x20;risk&#x20;of&#x20;the&#x20;modification&#x20;of&#x20;system&#x20;binaries&#x20;or&#x20;code&#x20;injection&#x20;of&#x20;system&#x20;processes&#x20;that&#x20;would&#x20;otherwise&#x20;be&#x20;protected&#x20;by&#x20;SIP.','','Perform&#x20;the&#x20;following&#x20;while&#x20;booted&#x20;in&#x20;macOS&#x20;Recovery&#x20;Partition.&#x20;&#x20;1.&#x20;Select&#x20;Terminal&#x20;from&#x20;the&#x20;Utilities&#x20;menu&#x20;&#x20;&#x20;&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;/usr/bin/csrutil&#x20;enable&#x20;&#x20;&#x20;&#x20;3.&#x20;The&#x20;output&#x20;should&#x20;be:&#x20;Successfully&#x20;enabled&#x20;System&#x20;Integrity&#x20;Protection.&#x20;Please&#x20;restart&#x20;the&#x20;machine&#x20;for&#x20;the&#x20;changes&#x20;to&#x20;take&#x20;effect.&#x20;&#x20;&#x20;&#x20;4.&#x20;Reboot.','[{\"cis\": [\"5.23\"]}]'),(9526,'Disable&#x20;guest&#x20;account&#x20;login','The&#x20;guest&#x20;account&#x20;allows&#x20;users&#x20;access&#x20;to&#x20;the&#x20;system&#x20;without&#x20;having&#x20;to&#x20;create&#x20;an&#x20;account&#x20;or&#x20;password.&#x20;Guest&#x20;users&#x20;are&#x20;unable&#x20;to&#x20;make&#x20;setting&#x20;changes,&#x20;cannot&#x20;remotely&#x20;login&#x20;to&#x20;the&#x20;system&#x20;and&#x20;all&#x20;created&#x20;files,&#x20;caches,&#x20;and&#x20;passwords&#x20;are&#x20;deleted&#x20;upon&#x20;logging&#x20;out.','Disabling&#x20;the&#x20;guest&#x20;account&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;untrusted&#x20;user&#x20;doing&#x20;basic&#x20;reconnaissance&#x20;and&#x20;possibly&#x20;using&#x20;privilege&#x20;escalation&#x20;attacks&#x20;to&#x20;take&#x20;control&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.loginwindow&#x20;GuestEnabled&#x20;-&#x20;bool&#x20;NO','[{\"cis\": [\"6.1.3\"]}]'),(9527,'Remove&#x20;Guest&#x20;home&#x20;folder','The&#x20;guest&#x20;account&#x20;login&#x20;should&#x20;have&#x20;been&#x20;disabled,&#x20;so&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;the&#x20;legacy&#x20;Guest&#x20;home&#x20;folder&#x20;to&#x20;remain&#x20;in&#x20;the&#x20;file&#x20;system.&#x20;When&#x20;normal&#x20;user&#x20;accounts&#x20;are&#x20;removed&#x20;you&#x20;have&#x20;the&#x20;option&#x20;to&#x20;archive&#x20;it,&#x20;leave&#x20;it&#x20;in&#x20;place&#x20;or&#x20;delete.&#x20;In&#x20;the&#x20;case&#x20;of&#x20;the&#x20;guest&#x20;folder&#x20;the&#x20;folder&#x20;remains&#x20;in&#x20;place&#x20;without&#x20;a&#x20;GUI&#x20;option&#x20;to&#x20;remove&#x20;it.&#x20;If&#x20;at&#x20;some&#x20;point&#x20;in&#x20;the&#x20;future&#x20;a&#x20;Guest&#x20;account&#x20;is&#x20;needed&#x20;it&#x20;will&#x20;be&#x20;re-created.&#x20;The&#x20;presence&#x20;of&#x20;the&#x20;Guest&#x20;home&#x20;folder&#x20;can&#x20;cause&#x20;automated&#x20;audits&#x20;to&#x20;fail&#x20;when&#x20;looking&#x20;for&#x20;compliant&#x20;settings&#x20;within&#x20;all&#x20;User&#x20;folders&#x20;as&#x20;well.&#x20;Rather&#x20;than&#x20;ignoring&#x20;the&#x20;folders&#x20;continued&#x20;existence&#x20;it&#x20;is&#x20;best&#x20;removed.','The&#x20;Guest&#x20;home&#x20;folders&#x20;are&#x20;unneeded&#x20;after&#x20;the&#x20;Guest&#x20;account&#x20;is&#x20;disabled&#x20;and&#x20;could&#x20;be&#x20;used&#x20;inappropriately.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;rm&#x20;-R&#x20;/Users/Guest&#x20;&#x20;2.&#x20;Make&#x20;sure&#x20;there&#x20;is&#x20;no&#x20;output','[{\"cis\": [\"6.1.5\"]}]'),(9528,'Turn&#x20;on&#x20;filename&#x20;extensions','A&#x20;filename&#x20;extension&#x20;is&#x20;a&#x20;suffix&#x20;added&#x20;to&#x20;a&#x20;base&#x20;filename&#x20;that&#x20;indicates&#x20;the&#x20;base&#x20;filename&#039;s&#x20;file&#x20;format.','Visible&#x20;filename&#x20;extensions&#x20;allows&#x20;the&#x20;user&#x20;to&#x20;identify&#x20;the&#x20;file&#x20;type&#x20;and&#x20;the&#x20;application&#x20;it&#x20;is&#x20;associated&#x20;with&#x20;which&#x20;leads&#x20;to&#x20;quick&#x20;identification&#x20;of&#x20;misrepresented&#x20;malicious&#x20;files.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Select&#x20;Finder&#x20;2.&#x20;Select&#x20;Preferences&#x20;3.&#x20;Check&#x20;Show&#x20;all&#x20;filename&#x20;extensions&#x20;&#x20;&#x20;&#x20;Alternatively,&#x20;use&#x20;the&#x20;following&#x20;command:&#x20;defaults&#x20;write&#x20;NSGlobalDomain&#x20;AppleShowAllExtensions&#x20;-bool&#x20;true','[{\"cis\": [\"6.2\"]}]'),(9529,'Disable&#x20;the&#x20;automatic&#x20;run&#x20;of&#x20;safe&#x20;files&#x20;in&#x20;Safari','Safari&#x20;will&#x20;automatically&#x20;run&#x20;or&#x20;execute&#x20;what&#x20;it&#x20;considers&#x20;safe&#x20;files.&#x20;This&#x20;can&#x20;include&#x20;installers&#x20;and&#x20;other&#x20;files&#x20;that&#x20;execute&#x20;on&#x20;the&#x20;operating&#x20;system.&#x20;Safari&#x20;bases&#x20;file&#x20;safety&#x20;by&#x20;using&#x20;a&#x20;list&#x20;of&#x20;filetypes&#x20;maintained&#x20;by&#x20;Apple.&#x20;The&#x20;list&#x20;of&#x20;files&#x20;include&#x20;text,&#x20;image,&#x20;video&#x20;and&#x20;archive&#x20;formats&#x20;that&#x20;would&#x20;be&#x20;run&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;OS&#x20;rather&#x20;than&#x20;the&#x20;browser.','Hackers&#x20;have&#x20;taken&#x20;advantage&#x20;of&#x20;this&#x20;setting&#x20;via&#x20;drive-by&#x20;attacks.&#x20;These&#x20;attacks&#x20;occur&#x20;when&#x20;a&#x20;user&#x20;visits&#x20;a&#x20;legitimate&#x20;website&#x20;that&#x20;has&#x20;been&#x20;corrupted.&#x20;The&#x20;user&#x20;unknowingly&#x20;downloads&#x20;a&#x20;malicious&#x20;file&#x20;either&#x20;by&#x20;closing&#x20;an&#x20;infected&#x20;pop-up&#x20;or&#x20;hovering&#x20;over&#x20;a&#x20;malicious&#x20;banner.&#x20;An&#x20;attacker&#x20;can&#x20;create&#x20;a&#x20;malicious&#x20;file&#x20;that&#x20;will&#x20;fall&#x20;within&#x20;Safari&#039;s&#x20;safe&#x20;file&#x20;list&#x20;that&#x20;will&#x20;download&#x20;and&#x20;execute&#x20;without&#x20;user&#x20;input.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Safari&#x20;2.&#x20;Select&#x20;Safari&#x20;from&#x20;the&#x20;menu&#x20;bar&#x20;3.&#x20;Select&#x20;Preferences&#x20;4.&#x20;Select&#x20;General&#x20;5.&#x20;Uncheck&#x20;Open&#x20;&quot;safe&quot;&#x20;files&#x20;after&#x20;downloading&#x20;&#x20;&#x20;&#x20;Alternatively&#x20;run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;com.apple.Safari&#x20;AutoOpenSafeDownloads&#x20;-boolean&#x20;no','[{\"cis\": [\"6.3\"]}]'),(10000,'Ensure&#x20;the&#x20;WebDAV&#x20;Modules&#x20;Are&#x20;Disabled','The&#x20;Apache&#x20;mod_dav&#x20;and&#x20;mod_dav_fs&#x20;modules&#x20;support&#x20;WebDAV&#x20;&#40;Web-based&#x20;Distributed&#x20;Authoring&#x20;and&#x20;Versioning&#41;&#x20;functionality&#x20;for&#x20;Apache.&#x20;WebDAV&#x20;is&#x20;an&#x20;extension&#x20;to&#x20;the&#x20;HTTP&#x20;protocol&#x20;which&#x20;allows&#x20;clients&#x20;to&#x20;create,&#x20;move,&#x20;and&#x20;delete&#x20;files&#x20;and&#x20;resources&#x20;on&#x20;the&#x20;web&#x20;server.','Disabling&#x20;WebDAV&#x20;modules&#x20;will&#x20;improve&#x20;the&#x20;security&#x20;posture&#x20;of&#x20;the&#x20;web&#x20;server&#x20;by&#x20;reducing&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;paths&#x20;exposed&#x20;to&#x20;the&#x20;network&#x20;and&#x20;reducing&#x20;potential&#x20;for&#x20;unauthorized&#x20;access&#x20;to&#x20;files&#x20;via&#x20;misconfigured&#x20;WebDAV&#x20;access&#x20;controls.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;WebDAV&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;without&#x20;including&#x20;the&#x20;mod_dav,&#x20;and&#x20;mod_dav_fs&#x20;in&#x20;the&#x20;--enable-modules=configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;mod_dav,&#x20;and&#x20;mod_dav_fs&#x20;modules&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;dav_module&#x20;modules/mod_dav.so&#x20;##LoadModule&#x20;dav_fs_module&#x20;modules/mod_dav_fs.so','[{\"cis\": [\"2.3\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10001,'Ensure&#x20;the&#x20;Status&#x20;Module&#x20;Is&#x20;Disabled','The&#x20;Apache&#x20;mod_status&#x20;module&#x20;provides&#x20;current&#x20;server&#x20;performance&#x20;statistics.','When&#x20;mod_status&#x20;is&#x20;loaded&#x20;into&#x20;the&#x20;server,&#x20;its&#x20;handler&#x20;capability&#x20;is&#x20;available&#x20;in&#x20;all&#x20;configuration&#x20;files,&#x20;including&#x20;per-directory&#x20;files&#x20;&#40;e.g.,&#x20;.htaccess&#41;.&#x20;The&#x20;mod_status&#x20;module&#x20;may&#x20;provide&#x20;an&#x20;adversary&#x20;with&#x20;information&#x20;that&#x20;can&#x20;be&#x20;used&#x20;to&#x20;refine&#x20;exploits&#x20;that&#x20;depend&#x20;on&#x20;measuring&#x20;server&#x20;load.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;mod_status&#x20;module:&#x20;1&#41;&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;with&#x20;the&#x20;--disable-status&#x20;configure&#x20;script&#x20;options.&#x20;2&#41;&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;the&#x20;mod_status&#x20;module&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;status_module&#x20;modules/mod_status.so','[{\"cis\": [\"2.4\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10002,'Ensure&#x20;the&#x20;Autoindex&#x20;Module&#x20;Is&#x20;Disabled','The&#x20;Apache&#x20;mod_autoindex&#x20;module&#x20;automatically&#x20;generates&#x20;a&#x20;web&#x20;page&#x20;listing&#x20;the&#x20;contents&#x20;of&#x20;directories&#x20;on&#x20;the&#x20;server,&#x20;typically&#x20;used&#x20;so&#x20;an&#x20;index.html&#x20;does&#x20;not&#x20;have&#x20;to&#x20;be&#x20;generated.','Automated&#x20;directory&#x20;listings&#x20;should&#x20;not&#x20;be&#x20;enabled&#x20;because&#x20;they&#x20;will&#x20;reveal&#x20;information&#x20;helpful&#x20;to&#x20;an&#x20;attacker&#x20;such&#x20;as&#x20;naming&#x20;conventions&#x20;and&#x20;directory&#x20;paths.&#x20;They&#x20;may&#x20;also&#x20;reveal&#x20;files&#x20;that&#x20;were&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;revealed.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;mod_autoindex&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;with&#x20;the&#x20;--disable-autoindex&#x20;configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;-disable-autoindex.&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;mod_autoindex&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##&#x20;LoadModule&#x20;autoindex_module&#x20;modules/mod_autoindex.so','[{\"cis\": [\"2.5\"]}, {\"cis_csc\": [\"18\", \"5.1\"]}]'),(10003,'Ensure&#x20;the&#x20;Proxy&#x20;Modules&#x20;Are&#x20;Disabled','The&#x20;Apache&#x20;proxy&#x20;modules&#x20;allow&#x20;the&#x20;server&#x20;to&#x20;act&#x20;as&#x20;a&#x20;proxy&#x20;&#40;either&#x20;forward&#x20;or&#x20;reverse&#x20;proxy&#41;&#x20;of&#x20;HTTP&#x20;and&#x20;other&#x20;protocols&#x20;with&#x20;additional&#x20;proxy&#x20;modules&#x20;loaded.&#x20;If&#x20;the&#x20;Apache&#x20;installation&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;proxy&#x20;requests&#x20;to&#x20;or&#x20;from&#x20;another&#x20;network&#x20;then&#x20;the&#x20;proxy&#x20;module&#x20;should&#x20;not&#x20;be&#x20;loaded.','Proxy&#x20;servers&#x20;can&#x20;act&#x20;as&#x20;an&#x20;important&#x20;security&#x20;control&#x20;when&#x20;properly&#x20;configured,&#x20;however&#x20;a&#x20;secure&#x20;proxy&#x20;server&#x20;is&#x20;not&#x20;within&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;benchmark.&#x20;A&#x20;web&#x20;server&#x20;should&#x20;be&#x20;primarily&#x20;a&#x20;web&#x20;server&#x20;or&#x20;a&#x20;proxy&#x20;server&#x20;but&#x20;not&#x20;both,&#x20;for&#x20;the&#x20;same&#x20;reasons&#x20;that&#x20;other&#x20;multi-use&#x20;servers&#x20;are&#x20;not&#x20;recommended.&#x20;Scanning&#x20;for&#x20;web&#x20;servers&#x20;that&#x20;will&#x20;also&#x20;proxy&#x20;requests&#x20;is&#x20;a&#x20;very&#x20;common&#x20;attack,&#x20;as&#x20;proxy&#x20;servers&#x20;are&#x20;useful&#x20;for&#x20;anonymizing&#x20;attacks&#x20;on&#x20;other&#x20;servers,&#x20;or&#x20;possibly&#x20;proxying&#x20;requests&#x20;into&#x20;an&#x20;otherwise&#x20;protected&#x20;network.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;proxy&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;without&#x20;including&#x20;the&#x20;mod_proxy&#x20;in&#x20;the&#x20;--enable-modules=configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;mod_proxy&#x20;module&#x20;and&#x20;all&#x20;other&#x20;proxy&#x20;modules&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;proxy_module&#x20;modules/mod_proxy.so&#x20;##LoadModule&#x20;proxy_connect_module&#x20;modules/mod_proxy_connect.so&#x20;##LoadModule&#x20;proxy_ftp_module&#x20;modules/mod_proxy_ftp.so&#x20;##LoadModule&#x20;proxy_http_module&#x20;modules/mod_proxy_http.so&#x20;##LoadModule&#x20;proxy_fcgi_module&#x20;modules/mod_proxy_fcgi.so&#x20;##LoadModule&#x20;proxy_scgi_module&#x20;modules/mod_proxy_scgi.so&#x20;##LoadModule&#x20;proxy_ajp_module&#x20;modules/mod_proxy_ajp.so&#x20;##LoadModule&#x20;proxy_balancer_module&#x20;modules/mod_proxy_balancer.so&#x20;##LoadModule&#x20;proxy_express_module&#x20;modules/mod_proxy_express.so&#x20;##LoadModule&#x20;proxy_wstunnel_module&#x20;modules/mod_proxy_wstunnel.so&#x20;##LoadModule&#x20;proxy_fdpass_module&#x20;modules/mod_proxy_fdpass.so','[{\"cis\": [\"2.6\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10004,'Ensure&#x20;the&#x20;User&#x20;Directories&#x20;Module&#x20;Is&#x20;Disabled','The&#x20;UserDir&#x20;directive&#x20;must&#x20;be&#x20;disabled&#x20;so&#x20;that&#x20;user&#x20;home&#x20;directories&#x20;are&#x20;not&#x20;accessed&#x20;via&#x20;the&#x20;web&#x20;site&#x20;with&#x20;a&#x20;tilde&#x20;&#40;~&#41;&#x20;preceding&#x20;the&#x20;username.&#x20;The&#x20;directive&#x20;also&#x20;sets&#x20;the&#x20;path&#x20;name&#x20;of&#x20;the&#x20;directory&#x20;that&#x20;will&#x20;be&#x20;accessed.','The&#x20;user&#x20;directories&#x20;should&#x20;not&#x20;be&#x20;globally&#x20;enabled&#x20;since&#x20;that&#x20;allows&#x20;anonymous&#x20;access&#x20;to&#x20;anything&#x20;users&#x20;may&#x20;want&#x20;to&#x20;share&#x20;with&#x20;other&#x20;users&#x20;on&#x20;the&#x20;network.&#x20;Also&#x20;consider&#x20;that&#x20;every&#x20;time&#x20;a&#x20;new&#x20;account&#x20;is&#x20;created&#x20;on&#x20;the&#x20;system,&#x20;there&#x20;is&#x20;potentially&#x20;new&#x20;content&#x20;available&#x20;via&#x20;the&#x20;web&#x20;site.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;user&#x20;directories&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;with&#x20;the&#x20;--disable-userdir&#x20;configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;--disable-userdir&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;mod_userdir&#x20;module&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;userdir_module&#x20;modules/mod_userdir.so','[{\"cis\": [\"2.7\"]}, {\"cis_csc\": [\"18\", \"5.1\"]}]'),(10005,'Ensure&#x20;the&#x20;Info&#x20;Module&#x20;Is&#x20;Disabled','The&#x20;Apache&#x20;mod_info&#x20;module&#x20;provides&#x20;information&#x20;on&#x20;the&#x20;server&#x20;configuration&#x20;via&#x20;access&#x20;to&#x20;a&#x20;/server-info&#x20;URL&#x20;location.','While&#x20;having&#x20;server&#x20;configuration&#x20;information&#x20;available&#x20;as&#x20;a&#x20;web&#x20;page&#x20;may&#x20;be&#x20;convenient&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;module&#x20;NOT&#x20;be&#x20;enabled.&#x20;Once&#x20;mod_info&#x20;is&#x20;loaded&#x20;into&#x20;the&#x20;server,&#x20;its&#x20;handler&#x20;capability&#x20;is&#x20;available&#x20;in&#x20;per-directory&#x20;.htaccess&#x20;files&#x20;and&#x20;can&#x20;leak&#x20;sensitive&#x20;information&#x20;from&#x20;the&#x20;configuration&#x20;directives&#x20;of&#x20;other&#x20;Apache&#x20;modules&#x20;such&#x20;as&#x20;system&#x20;paths,&#x20;usernames/passwords,&#x20;database&#x20;names,&#x20;etc.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;mod_info&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;without&#x20;including&#x20;the&#x20;mod_info&#x20;in&#x20;the&#x20;--enable-modules=configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;the&#x20;mod_info&#x20;module&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;info_module&#x20;modules/mod_info.so','[{\"cis\": [\"2.8\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10006,'Ensure&#x20;the&#x20;Apache&#x20;User&#x20;Account&#x20;Has&#x20;an&#x20;Invalid&#x20;Shell','The&#x20;apache&#x20;account&#x20;must&#x20;not&#x20;be&#x20;used&#x20;as&#x20;a&#x20;regular&#x20;login&#x20;account,&#x20;so&#x20;it&#x20;should&#x20;be&#x20;assigned&#x20;an&#x20;invalid&#x20;or&#x20;nologin&#x20;shell&#x20;to&#x20;ensure&#x20;it&#x20;cannot&#x20;be&#x20;used&#x20;to&#x20;login.','Service&#x20;accounts&#x20;such&#x20;as&#x20;the&#x20;apache&#x20;account&#x20;are&#x20;a&#x20;risk&#x20;if&#x20;they&#x20;can&#x20;be&#x20;used&#x20;to&#x20;get&#x20;a&#x20;login&#x20;shell&#x20;to&#x20;the&#x20;system.','','Change&#x20;the&#x20;apache&#x20;account&#x20;to&#x20;use&#x20;the&#x20;nologin&#x20;shell&#x20;or&#x20;an&#x20;invalid&#x20;shell&#x20;such&#x20;as&#x20;/dev/null:&#x20;#&#x20;chsh&#x20;-s&#x20;/sbin/nologin&#x20;apache','[{\"cis\": [\"3.2\"]}, {\"cis_csc\": [\"16\", \"4.3\"]}]'),(10007,'Ensure&#x20;the&#x20;Apache&#x20;User&#x20;Account&#x20;Is&#x20;Locked','The&#x20;user&#x20;account&#x20;under&#x20;which&#x20;Apache&#x20;runs&#x20;should&#x20;not&#x20;have&#x20;a&#x20;valid&#x20;password,&#x20;but&#x20;should&#x20;be&#x20;locked.','As&#x20;a&#x20;defense-in-depth&#x20;measure&#x20;the&#x20;Apache&#x20;user&#x20;account&#x20;should&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;logins,&#x20;and&#x20;to&#x20;prevent&#x20;a&#x20;user&#x20;from&#x20;suing&#x20;to&#x20;apache&#x20;using&#x20;the&#x20;password.&#x20;In&#x20;general,&#x20;there&#x20;should&#x20;not&#x20;be&#x20;a&#x20;need&#x20;for&#x20;anyone&#x20;to&#x20;have&#x20;to&#x20;su&#x20;as&#x20;apache,&#x20;and&#x20;when&#x20;there&#x20;is&#x20;a&#x20;need,&#x20;then&#x20;sudo&#x20;should&#x20;be&#x20;used&#x20;instead,&#x20;which&#x20;would&#x20;not&#x20;require&#x20;the&#x20;apache&#x20;account&#x20;password.','','Use&#x20;the&#x20;passwd&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;apache&#x20;account:&#x20;#&#x20;passwd&#x20;-l&#x20;apache','[{\"cis\": [\"3.3\"]}, {\"cis_csc\": [\"16\", \"16.8\"]}]'),(10008,'Ensure&#x20;OverRide&#x20;Is&#x20;Disabled&#x20;for&#x20;All&#x20;Directories','The&#x20;Apache&#x20;AllowOverride&#x20;directive&#x20;and&#x20;the&#x20;new&#x20;AllowOverrideList&#x20;directive&#x20;allow&#x20;for&#x20;.htaccess&#x20;files&#x20;to&#x20;be&#x20;used&#x20;to&#x20;override&#x20;much&#x20;of&#x20;the&#x20;configuration,&#x20;including&#x20;authentication,&#x20;handling&#x20;of&#x20;document&#x20;types,&#x20;auto&#x20;generated&#x20;indexes,&#x20;access&#x20;control,&#x20;and&#x20;options.&#x20;When&#x20;the&#x20;server&#x20;finds&#x20;an&#x20;.htaccess&#x20;file&#x20;&#40;as&#x20;specified&#x20;by&#x20;AccessFileName&#41;&#x20;it&#x20;needs&#x20;to&#x20;know&#x20;which&#x20;directives&#x20;declared&#x20;in&#x20;that&#x20;file&#x20;can&#x20;override&#x20;earlier&#x20;access&#x20;information.&#x20;When&#x20;this&#x20;directive&#x20;is&#x20;set&#x20;to&#x20;None,&#x20;then&#x20;.htaccess&#x20;files&#x20;are&#x20;completely&#x20;ignored.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;server&#x20;will&#x20;not&#x20;even&#x20;attempt&#x20;to&#x20;read&#x20;.htaccess&#x20;files&#x20;in&#x20;the&#x20;filesystem.&#x20;When&#x20;this&#x20;directive&#x20;is&#x20;set&#x20;to&#x20;All,&#x20;then&#x20;any&#x20;directive&#x20;which&#x20;has&#x20;the&#x20;.htaccess&#x20;context&#x20;is&#x20;allowed&#x20;in&#x20;.htaccess&#x20;files.','.htaccess&#x20;files&#x20;decentralizes&#x20;access&#x20;control&#x20;and&#x20;increases&#x20;the&#x20;risk&#x20;of&#x20;server&#x20;configuration&#x20;being&#x20;changed&#x20;inappropriately.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Search&#x20;the&#x20;Apache&#x20;configuration&#x20;files&#x20;&#40;httpd.conf&#x20;and&#x20;any&#x20;included&#x20;configuration&#x20;files&#41;&#x20;to&#x20;find&#x20;AllowOverride&#x20;directives.&#x20;2.&#x20;Set&#x20;the&#x20;value&#x20;for&#x20;all&#x20;AllowOverride&#x20;directives&#x20;to&#x20;None.&#x20;3.&#x20;Remove&#x20;any&#x20;AllowOverrideList&#x20;directives&#x20;found.','[{\"cis\": [\"4.4\"]}, {\"cis_csc\": [\"14.4\", \"14.6\"]}]'),(10009,'Ensure&#x20;Options&#x20;for&#x20;Other&#x20;Directories&#x20;Are&#x20;Minimized','The&#x20;Apache&#x20;Options&#x20;directive&#x20;allows&#x20;for&#x20;specific&#x20;configuration&#x20;of&#x20;options,&#x20;including&#x20;execution&#x20;of&#x20;CGI,&#x20;following&#x20;symbolic&#x20;links,&#x20;server&#x20;side&#x20;includes,&#x20;and&#x20;content&#x20;negotiation.','Likewise,&#x20;the&#x20;options&#x20;for&#x20;other&#x20;directories&#x20;and&#x20;hosts&#x20;needs&#x20;to&#x20;be&#x20;restricted&#x20;to&#x20;the&#x20;minimal&#x20;options&#x20;required.&#x20;A&#x20;setting&#x20;of&#x20;None&#x20;is&#x20;recommended,&#x20;however&#x20;it&#x20;is&#x20;recognized&#x20;that&#x20;other&#x20;options&#x20;may&#x20;be&#x20;needed&#x20;in&#x20;some&#x20;cases:&#x20;Multiviews,&#x20;FollowSymbolicLinks&#x20;&amp;&#x20;SymLinksIfOwnerMatch,&#x20;ExecCGI,&#x20;Includes&#x20;&amp;&#x20;IncludesNOEXEC,&#x20;&amp;&#x20;Indexes.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Search&#x20;the&#x20;Apache&#x20;configuration&#x20;files&#x20;&#40;httpd.conf&#x20;and&#x20;any&#x20;included&#x20;configuration&#x20;files&#41;&#x20;to&#x20;find&#x20;all&#x20;&lt;Directory&gt;&#x20;elements.&#x20;2.&#x20;Add&#x20;or&#x20;modify&#x20;any&#x20;existing&#x20;Options&#x20;directive&#x20;to&#x20;NOT&#x20;have&#x20;a&#x20;value&#x20;of&#x20;Includes.&#x20;Other&#x20;options&#x20;may&#x20;be&#x20;set&#x20;if&#x20;necessary&#x20;and&#x20;appropriate&#x20;as&#x20;described&#x20;above.','[{\"cis\": [\"5.3\"]}, {\"cis_csc\": [\"18\", \"5.1\"]}]'),(10010,'Ensure&#x20;Default&#x20;HTML&#x20;Content&#x20;Is&#x20;Removed','Apache&#x20;installations&#x20;have&#x20;default&#x20;content&#x20;that&#x20;is&#x20;not&#x20;needed&#x20;or&#x20;appropriate&#x20;for&#x20;production&#x20;use.&#x20;The&#x20;primary&#x20;function&#x20;for&#x20;the&#x20;sample&#x20;content&#x20;is&#x20;to&#x20;provide&#x20;a&#x20;default&#x20;web&#x20;site,&#x20;provide&#x20;user&#x20;manuals,&#x20;or&#x20;demonstrate&#x20;special&#x20;features&#x20;of&#x20;the&#x20;web&#x20;server.&#x20;All&#x20;content&#x20;that&#x20;is&#x20;not&#x20;needed&#x20;should&#x20;be&#x20;removed.','Historically,&#x20;sample&#x20;content&#x20;and&#x20;features&#x20;have&#x20;been&#x20;remotely&#x20;exploited&#x20;and&#x20;can&#x20;provide&#x20;different&#x20;levels&#x20;of&#x20;access&#x20;to&#x20;the&#x20;server.&#x20;Usually&#x20;these&#x20;routines&#x20;are&#x20;not&#x20;written&#x20;for&#x20;production&#x20;use&#x20;and&#x20;consequently&#x20;little&#x20;thought&#x20;was&#x20;given&#x20;to&#x20;security&#x20;in&#x20;their&#x20;development.','','Review&#x20;all&#x20;pre-installed&#x20;content&#x20;and&#x20;remove&#x20;content&#x20;which&#x20;is&#x20;not&#x20;required.&#x20;In&#x20;particular&#x20;look&#x20;for&#x20;the&#x20;unnecessary&#x20;content&#x20;which&#x20;may&#x20;be&#x20;found&#x20;in&#x20;the&#x20;document&#x20;root&#x20;directory,&#x20;a&#x20;configuration&#x20;directory&#x20;such&#x20;as&#x20;conf/extra&#x20;directory,&#x20;or&#x20;as&#x20;a&#x20;Unix/Linux&#x20;package.&#x20;1.&#x20;Remove&#x20;the&#x20;default&#x20;index.html&#x20;or&#x20;welcome&#x20;page&#x20;if&#x20;it&#x20;is&#x20;a&#x20;separate&#x20;package.&#x20;If&#x20;it&#x20;is&#x20;part&#x20;of&#x20;main&#x20;Apache&#x20;httpd&#x20;package&#x20;such&#x20;as&#x20;it&#x20;is&#x20;on&#x20;Red&#x20;Hat&#x20;Linux,&#x20;then&#x20;comment&#x20;out&#x20;the&#x20;configuration&#x20;as&#x20;shown&#x20;below.&#x20;Removing&#x20;a&#x20;file&#x20;such&#x20;as&#x20;the&#x20;welcome.conf,&#x20;is&#x20;not&#x20;recommended&#x20;as&#x20;it&#x20;may&#x20;get&#x20;replaced&#x20;if&#x20;the&#x20;package&#x20;is&#x20;updated.&#x20;2.&#x20;Remove&#x20;the&#x20;Apache&#x20;user&#x20;manual&#x20;content&#x20;or&#x20;comment&#x20;out&#x20;configurations&#x20;referencing&#x20;the&#x20;manual.&#x20;#&#x20;yum&#x20;erase&#x20;httpd-manual&#x20;3.&#x20;Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;Server&#x20;Information&#x20;handler&#x20;configuration.&#x20;4.&#x20;Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;other&#x20;handler&#x20;configuration&#x20;such&#x20;as&#x20;perl-status.','[{\"cis\": [\"5.4\"]}, {\"cis_csc\": [\"18.9\", \"5.1\"]}]'),(10011,'Ensure&#x20;the&#x20;Default&#x20;CGI&#x20;Content&#x20;printenv&#x20;Script&#x20;Is&#x20;Removed','Most&#x20;Web&#x20;Servers,&#x20;including&#x20;Apache&#x20;installations&#x20;have&#x20;default&#x20;CGI&#x20;content&#x20;which&#x20;is&#x20;not&#x20;needed&#x20;or&#x20;appropriate&#x20;for&#x20;production&#x20;use.&#x20;The&#x20;primary&#x20;function&#x20;for&#x20;these&#x20;sample&#x20;programs&#x20;is&#x20;to&#x20;demonstrate&#x20;the&#x20;capabilities&#x20;of&#x20;the&#x20;web&#x20;server.&#x20;One&#x20;common&#x20;default&#x20;CGI&#x20;content&#x20;for&#x20;Apache&#x20;installations&#x20;is&#x20;the&#x20;script&#x20;printenv.&#x20;This&#x20;script&#x20;will&#x20;print&#x20;back&#x20;to&#x20;the&#x20;requester&#x20;all&#x20;of&#x20;the&#x20;CGI&#x20;environment&#x20;variables&#x20;which&#x20;includes&#x20;many&#x20;server&#x20;configuration&#x20;details&#x20;and&#x20;system&#x20;paths.','CGI&#x20;programs&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;bugs&#x20;and&#x20;problems&#x20;associated&#x20;with&#x20;improperly&#x20;accepting&#x20;user-input.&#x20;Since&#x20;these&#x20;programs&#x20;are&#x20;often&#x20;targets&#x20;of&#x20;attackers,&#x20;we&#x20;need&#x20;to&#x20;make&#x20;sure&#x20;that&#x20;there&#x20;are&#x20;no&#x20;unnecessary&#x20;CGI&#x20;programs&#x20;that&#x20;could&#x20;potentially&#x20;be&#x20;used&#x20;for&#x20;malicious&#x20;purposes.&#x20;Usually&#x20;these&#x20;programs&#x20;are&#x20;not&#x20;written&#x20;for&#x20;production&#x20;use&#x20;and&#x20;consequently&#x20;little&#x20;thought&#x20;was&#x20;given&#x20;to&#x20;security&#x20;in&#x20;their&#x20;development.&#x20;The&#x20;printenv&#x20;script&#x20;in&#x20;particular&#x20;will&#x20;disclose&#x20;inappropriate&#x20;information&#x20;about&#x20;the&#x20;web&#x20;server&#x20;including&#x20;directory&#x20;paths&#x20;and&#x20;detailed&#x20;version&#x20;and&#x20;configuration&#x20;information.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Locate&#x20;cgi-bin&#x20;files&#x20;and&#x20;directories&#x20;enabled&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;via&#x20;Script,&#x20;ScriptAlias,&#x20;ScriptAliasMatch,&#x20;or&#x20;ScriptInterpreterSource&#x20;directives.&#x20;2.&#x20;Remove&#x20;the&#x20;printenvdefault&#x20;CGI&#x20;in&#x20;cgi-bin&#x20;directory&#x20;if&#x20;it&#x20;is&#x20;installed.&#x20;#&#x20;rm&#x20;$APACHE_PREFIX/cgi-bin/printenv','[{\"cis\": [\"5.5\"]}, {\"cis_csc\": [\"18\", \"4.7\"]}]'),(10012,'Ensure&#x20;the&#x20;Default&#x20;CGI&#x20;Content&#x20;test-cgi&#x20;Script&#x20;Is&#x20;Removed','Most&#x20;Web&#x20;Servers,&#x20;including&#x20;Apache&#x20;installations&#x20;have&#x20;default&#x20;CGI&#x20;content&#x20;which&#x20;is&#x20;not&#x20;needed&#x20;or&#x20;appropriate&#x20;for&#x20;production&#x20;use.&#x20;The&#x20;primary&#x20;function&#x20;for&#x20;these&#x20;sample&#x20;programs&#x20;is&#x20;to&#x20;demonstrate&#x20;the&#x20;capabilities&#x20;of&#x20;the&#x20;web&#x20;server.&#x20;A&#x20;common&#x20;default&#x20;CGI&#x20;content&#x20;for&#x20;Apache&#x20;installations&#x20;is&#x20;the&#x20;script&#x20;test-cgi.&#x20;This&#x20;script&#x20;will&#x20;print&#x20;back&#x20;to&#x20;the&#x20;requester&#x20;CGI&#x20;environment&#x20;variables&#x20;which&#x20;includes&#x20;many&#x20;server&#x20;configuration&#x20;details.','CGI&#x20;programs&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;bugs&#x20;and&#x20;problems&#x20;associated&#x20;with&#x20;improperly&#x20;accepting&#x20;user-input.&#x20;Since&#x20;these&#x20;programs&#x20;are&#x20;often&#x20;targets&#x20;of&#x20;attackers,&#x20;we&#x20;need&#x20;to&#x20;make&#x20;sure&#x20;that&#x20;there&#x20;are&#x20;no&#x20;unnecessary&#x20;CGI&#x20;programs&#x20;that&#x20;could&#x20;potentially&#x20;be&#x20;used&#x20;for&#x20;malicious&#x20;purposes.&#x20;Usually&#x20;these&#x20;programs&#x20;are&#x20;not&#x20;written&#x20;for&#x20;production&#x20;use&#x20;and&#x20;consequently&#x20;little&#x20;thought&#x20;was&#x20;given&#x20;to&#x20;security&#x20;in&#x20;their&#x20;development.&#x20;The&#x20;test-cgi&#x20;script&#x20;in&#x20;particular&#x20;will&#x20;disclose&#x20;inappropriate&#x20;information&#x20;about&#x20;the&#x20;web&#x20;server&#x20;including&#x20;directory&#x20;paths&#x20;and&#x20;detailed&#x20;version&#x20;and&#x20;configuration&#x20;information.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Locate&#x20;cgi-bin&#x20;files&#x20;and&#x20;directories&#x20;enabled&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;via&#x20;Script,&#x20;ScriptAlias,&#x20;ScriptAliasMatch,&#x20;or&#x20;ScriptInterpreterSource&#x20;directives.&#x20;2.&#x20;Remove&#x20;the&#x20;test-cgi&#x20;default&#x20;CGI&#x20;in&#x20;cgi-bin&#x20;directory&#x20;if&#x20;it&#x20;is&#x20;installed.&#x20;#&#x20;rm&#x20;$APACHE_PREFIX/cgi-bin/test-cgi','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"18.9\", \"4.7\"]}]'),(10013,'Ensure&#x20;the&#x20;HTTP&#x20;TRACE&#x20;Method&#x20;Is&#x20;Disabled','Use&#x20;the&#x20;Apache&#x20;TraceEnable&#x20;directive&#x20;to&#x20;disable&#x20;the&#x20;HTTP&#x20;TRACE&#x20;request&#x20;method.','The&#x20;HTTP&#x20;1.1&#x20;protocol&#x20;requires&#x20;support&#x20;for&#x20;the&#x20;TRACE&#x20;request&#x20;method&#x20;which&#x20;reflects&#x20;the&#x20;request&#x20;back&#x20;as&#x20;a&#x20;response&#x20;and&#x20;was&#x20;intended&#x20;for&#x20;diagnostics&#x20;purposes.&#x20;The&#x20;TRACE&#x20;method&#x20;is&#x20;not&#x20;needed&#x20;and&#x20;is&#x20;easily&#x20;subjected&#x20;to&#x20;abuse&#x20;and&#x20;should&#x20;be&#x20;disabled.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Locate&#x20;the&#x20;main&#x20;Apache&#x20;configuration&#x20;file&#x20;such&#x20;as&#x20;httpd.conf.&#x20;2.&#x20;Add&#x20;a&#x20;TraceEnable&#x20;directive&#x20;to&#x20;the&#x20;server&#x20;level&#x20;configuration&#x20;with&#x20;a&#x20;value&#x20;of&#x20;off.&#x20;Server&#x20;level&#x20;configuration&#x20;is&#x20;the&#x20;top-level&#x20;configuration,&#x20;not&#x20;nested&#x20;within&#x20;any&#x20;other&#x20;directives&#x20;like&#x20;&lt;Directory&gt;&#x20;or&#x20;&lt;Location&gt;.','[{\"cis\": [\"5.8\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10014,'Ensure&#x20;the&#x20;IP&#x20;Addresses&#x20;for&#x20;Listening&#x20;for&#x20;Requests&#x20;Are&#x20;Specified','The&#x20;Apache&#x20;Listen&#x20;directive&#x20;specifies&#x20;the&#x20;IP&#x20;addresses&#x20;and&#x20;port&#x20;numbers&#x20;the&#x20;Apache&#x20;web&#x20;server&#x20;will&#x20;listen&#x20;for&#x20;requests.&#x20;Rather&#x20;than&#x20;be&#x20;unrestricted&#x20;to&#x20;listen&#x20;on&#x20;all&#x20;IP&#x20;addresses&#x20;available&#x20;to&#x20;the&#x20;system,&#x20;the&#x20;specific&#x20;IP&#x20;address&#x20;or&#x20;addresses&#x20;intended&#x20;should&#x20;be&#x20;explicitly&#x20;specified.&#x20;Specifically,&#x20;a&#x20;Listen&#x20;directive&#x20;with&#x20;no&#x20;IP&#x20;address&#x20;specified,&#x20;or&#x20;with&#x20;an&#x20;IP&#x20;address&#x20;of&#x20;zeros&#x20;should&#x20;not&#x20;be&#x20;used.','Having&#x20;multiple&#x20;interfaces&#x20;on&#x20;web&#x20;servers&#x20;is&#x20;fairly&#x20;common,&#x20;and&#x20;without&#x20;explicit&#x20;Listen&#x20;directives,&#x20;the&#x20;web&#x20;server&#x20;is&#x20;likely&#x20;to&#x20;be&#x20;listening&#x20;on&#x20;an&#x20;inappropriate&#x20;IP&#x20;address&#x20;/&#x20;interface&#x20;that&#x20;was&#x20;not&#x20;intended&#x20;for&#x20;the&#x20;web&#x20;server.&#x20;Single&#x20;homed&#x20;system&#x20;with&#x20;a&#x20;single&#x20;IP&#x20;addressed&#x20;are&#x20;also&#x20;required&#x20;to&#x20;have&#x20;an&#x20;explicit&#x20;IP&#x20;address&#x20;in&#x20;the&#x20;Listen&#x20;directive,&#x20;in&#x20;case&#x20;additional&#x20;interfaces&#x20;are&#x20;added&#x20;to&#x20;the&#x20;system&#x20;at&#x20;a&#x20;later&#x20;date.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Find&#x20;any&#x20;Listen&#x20;directives&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;file&#x20;with&#x20;no&#x20;IP&#x20;address&#x20;specified,&#x20;or&#x20;with&#x20;an&#x20;IP&#x20;address&#x20;of&#x20;all&#x20;zeros&#x20;similar&#x20;to&#x20;the&#x20;examples&#x20;below.&#x20;Keep&#x20;in&#x20;mind&#x20;there&#x20;may&#x20;be&#x20;both&#x20;IPv4&#x20;and&#x20;IPv6&#x20;addresses&#x20;on&#x20;the&#x20;system.&#x20;2.&#x20;Modify&#x20;the&#x20;Listen&#x20;directives&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;file&#x20;to&#x20;have&#x20;explicit&#x20;IP&#x20;addresses&#x20;according&#x20;to&#x20;the&#x20;intended&#x20;usage.&#x20;Multiple&#x20;Listen&#x20;directives&#x20;may&#x20;be&#x20;specified&#x20;for&#x20;each&#x20;IP&#x20;address&#x20;&amp;&#x20;Port.','[{\"cis\": [\"5.13\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10015,'Ensure&#x20;Browser&#x20;Framing&#x20;Is&#x20;Restricted','The&#x20;Header&#x20;directive&#x20;allows&#x20;server&#x20;HTTP&#x20;response&#x20;headers&#x20;to&#x20;be&#x20;added,&#x20;replaced&#x20;or&#x20;merged.&#x20;We&#x20;will&#x20;use&#x20;the&#x20;directive&#x20;to&#x20;add&#x20;a&#x20;server&#x20;HTTP&#x20;response&#x20;header&#x20;to&#x20;tell&#x20;browsers&#x20;to&#x20;restrict&#x20;all&#x20;of&#x20;the&#x20;web&#x20;pages&#x20;from&#x20;being&#x20;framed&#x20;by&#x20;other&#x20;web&#x20;sites.','Using&#x20;iframes&#x20;and&#x20;regular&#x20;web&#x20;frames&#x20;to&#x20;embed&#x20;malicious&#x20;content&#x20;along&#x20;with&#x20;expected&#x20;web&#x20;content&#x20;has&#x20;been&#x20;a&#x20;favored&#x20;attack&#x20;vector&#x20;for&#x20;attacking&#x20;web&#x20;clients&#x20;for&#x20;a&#x20;long&#x20;time.&#x20;This&#x20;can&#x20;happen&#x20;when&#x20;the&#x20;attacker&#x20;lures&#x20;the&#x20;victim&#x20;to&#x20;a&#x20;malicious&#x20;web&#x20;site,&#x20;which&#x20;using&#x20;frames&#x20;to&#x20;include&#x20;the&#x20;expected&#x20;content&#x20;from&#x20;the&#x20;legitimate&#x20;site.&#x20;The&#x20;attack&#x20;can&#x20;also&#x20;be&#x20;performed&#x20;via&#x20;XSS&#x20;&#40;either&#x20;reflected,&#x20;DOM&#x20;or&#x20;stored&#x20;XSS&#41;&#x20;to&#x20;add&#x20;the&#x20;malicious&#x20;content&#x20;to&#x20;the&#x20;legitimate&#x20;web&#x20;site.&#x20;To&#x20;combat&#x20;this&#x20;vector,&#x20;an&#x20;HTTP&#x20;Response&#x20;header,&#x20;X-Frame-Options,&#x20;has&#x20;been&#x20;introduced&#x20;that&#x20;allows&#x20;a&#x20;server&#x20;to&#x20;specify&#x20;whether&#x20;a&#x20;web&#x20;page&#x20;may&#x20;be&#x20;loaded&#x20;in&#x20;any&#x20;frame&#x20;&#40;DENY&#41;&#x20;or&#x20;those&#x20;frames&#x20;that&#x20;share&#x20;the&#x20;pages&#x20;origin&#x20;&#40;SAMEORIGIN&#41;.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;Header&#x20;directive&#x20;for&#x20;the&#x20;X-Frames-Options&#x20;header&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;the&#x20;condition&#x20;always,&#x20;an&#x20;action&#x20;of&#x20;append&#x20;and&#x20;a&#x20;value&#x20;of&#x20;SAMEORIGIN&#x20;or&#x20;DENY,&#x20;as&#x20;shown&#x20;below.&#x20;Header&#x20;always&#x20;append&#x20;X-Frame-Options&#x20;SAMEORIGIN','[{\"cis\": [\"5.14\"]}, {\"cis_csc\": [\"18\", \"5.1\"]}]'),(10016,'Ensure&#x20;Insecure&#x20;SSL&#x20;Renegotiation&#x20;Is&#x20;Not&#x20;Enabled','A&#x20;man-in-the-middle&#x20;renegotiation&#x20;attack&#x20;was&#x20;discovered&#x20;in&#x20;SSLv3&#x20;and&#x20;TLSv1&#x20;in&#x20;November,&#x20;2009&#x20;&#40;CVE-2009-3555&#41;.&#x20;First,&#x20;a&#x20;work&#x20;around&#x20;and&#x20;then&#x20;a&#x20;fix&#x20;was&#x20;approved&#x20;as&#x20;an&#x20;Internet&#x20;Standard&#x20;as&#x20;RFC&#x20;574,&#x20;Feb&#x20;2010.&#x20;The&#x20;work&#x20;around,&#x20;which&#x20;removes&#x20;the&#x20;renegotiation,&#x20;is&#x20;available&#x20;from&#x20;OpenSSL&#x20;as&#x20;of&#x20;version&#x20;0.9.8l&#x20;and&#x20;newer&#x20;versions.&#x20;For&#x20;details:&#x20;https://www.openssl.org/news/secadv_20091111.txt&#x20;The&#x20;SSLInsecureRenegotiation&#x20;directive&#x20;was&#x20;added&#x20;in&#x20;Apache&#x20;2.2.15,&#x20;for&#x20;web&#x20;servers&#x20;linked&#x20;with&#x20;OpenSSL&#x20;version&#x20;0.9.8m&#x20;or&#x20;later,&#x20;to&#x20;provide&#x20;backward&#x20;compatibility&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;older,&#x20;unpatched&#x20;SSL&#x20;implementations.','Enabling&#x20;the&#x20;SSLInsecureRenegotiation&#x20;directive&#x20;leaves&#x20;the&#x20;server&#x20;vulnerable&#x20;to&#x20;man-in-&#x20;the-middle&#x20;renegotiation&#x20;attack.&#x20;Therefore,&#x20;the&#x20;SSLInsecureRenegotiation&#x20;directive&#x20;should&#x20;not&#x20;be&#x20;enabled.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Search&#x20;the&#x20;Apache&#x20;configuration&#x20;files&#x20;for&#x20;the&#x20;SSLInsecureRenegotiation&#x20;directive.&#x20;If&#x20;the&#x20;directive&#x20;is&#x20;present&#x20;modify&#x20;the&#x20;value&#x20;to&#x20;be&#x20;off.&#x20;If&#x20;the&#x20;directive&#x20;is&#x20;not&#x20;present&#x20;then&#x20;no&#x20;action&#x20;is&#x20;required.&#x20;SSLInsecureRenegotiation&#x20;off','[{\"cis\": [\"7.6\"]}, {\"cis_csc\": [\"14.2\", \"14.4\"]}]'),(10017,'Ensure&#x20;SSL&#x20;Compression&#x20;is&#x20;Not&#x20;Enabled','The&#x20;SSLCompression&#x20;directive&#x20;controls&#x20;whether&#x20;SSL&#x20;compression&#x20;is&#x20;used&#x20;by&#x20;Apache&#x20;when&#x20;serving&#x20;content&#x20;over&#x20;HTTPS.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SSLCompression&#x20;directive&#x20;be&#x20;set&#x20;to&#x20;off.','If&#x20;SSL&#x20;compression&#x20;is&#x20;enabled,&#x20;HTTPS&#x20;communication&#x20;between&#x20;the&#x20;client&#x20;and&#x20;the&#x20;server&#x20;may&#x20;be&#x20;at&#x20;increased&#x20;risk&#x20;to&#x20;the&#x20;CRIME&#x20;attack.&#x20;The&#x20;CRIME&#x20;attack&#x20;increases&#x20;a&#x20;malicious&#x20;actor&#039;s&#x20;ability&#x20;to&#x20;derive&#x20;the&#x20;value&#x20;of&#x20;a&#x20;session&#x20;cookie,&#x20;which&#x20;commonly&#x20;contains&#x20;an&#x20;authenticator.&#x20;If&#x20;the&#x20;authenticator&#x20;in&#x20;a&#x20;session&#x20;cookie&#x20;is&#x20;derived,&#x20;it&#x20;can&#x20;be&#x20;used&#x20;to&#x20;impersonate&#x20;the&#x20;account&#x20;associated&#x20;with&#x20;the&#x20;authenticator.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Search&#x20;the&#x20;Apache&#x20;configuration&#x20;files&#x20;for&#x20;the&#x20;SSLCompression&#x20;directive.&#x20;2.&#x20;If&#x20;the&#x20;directive&#x20;is&#x20;present,&#x20;set&#x20;it&#x20;to&#x20;off.','[{\"cis\": [\"7.7\"]}, {\"cis_csc\": [\"14.2\", \"14.4\"]}]'),(10018,'Ensure&#x20;ServerTokens&#x20;is&#x20;Set&#x20;to&#x20;&#039;Prod&#039;&#x20;or&#x20;&#039;ProductOnly&#039;','Configure&#x20;the&#x20;Apache&#x20;ServerTokens&#x20;directive&#x20;to&#x20;provide&#x20;minimal&#x20;information.&#x20;By&#x20;setting&#x20;the&#x20;value&#x20;to&#x20;Prod&#x20;or&#x20;ProductOnly.&#x20;The&#x20;only&#x20;version&#x20;information&#x20;given&#x20;in&#x20;the&#x20;server&#x20;HTTP&#x20;response&#x20;header&#x20;will&#x20;be&#x20;Apache&#x20;rather&#x20;than&#x20;details&#x20;on&#x20;modules&#x20;and&#x20;versions&#x20;installed.','Information&#x20;is&#x20;power&#x20;and&#x20;identifying&#x20;web&#x20;server&#x20;details&#x20;greatly&#x20;increases&#x20;the&#x20;efficiency&#x20;of&#x20;any&#x20;attack,&#x20;as&#x20;security&#x20;vulnerabilities&#x20;are&#x20;extremely&#x20;dependent&#x20;upon&#x20;specific&#x20;software&#x20;versions&#x20;and&#x20;configurations.&#x20;Excessive&#x20;probing&#x20;and&#x20;requests&#x20;may&#x20;cause&#x20;too&#x20;much&#x20;&#039;noise&#039;&#x20;being&#x20;generated&#x20;and&#x20;may&#x20;tip&#x20;off&#x20;an&#x20;administrator.&#x20;If&#x20;an&#x20;attacker&#x20;can&#x20;accurately&#x20;target&#x20;their&#x20;exploits,&#x20;the&#x20;chances&#x20;of&#x20;successful&#x20;compromise&#x20;prior&#x20;to&#x20;detection&#x20;increase&#x20;dramatically.&#x20;Script&#x20;Kiddies&#x20;are&#x20;constantly&#x20;scanning&#x20;the&#x20;Internet&#x20;and&#x20;documenting&#x20;the&#x20;version&#x20;information&#x20;openly&#x20;provided&#x20;by&#x20;web&#x20;servers.&#x20;The&#x20;purpose&#x20;of&#x20;this&#x20;scanning&#x20;is&#x20;to&#x20;accumulate&#x20;a&#x20;database&#x20;of&#x20;software&#x20;installed&#x20;on&#x20;those&#x20;hosts,&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;when&#x20;new&#x20;vulnerabilities&#x20;are&#x20;released.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;ServerTokens&#x20;directive&#x20;as&#x20;shown&#x20;below&#x20;to&#x20;have&#x20;the&#x20;value&#x20;of&#x20;Prod&#x20;or&#x20;ProductOnly:&#x20;ServerTokens&#x20;Prod','[{\"cis\": [\"8.1\"]}, {\"cis_csc\": [\"18.9\", \"14.7\"]}]'),(10019,'Ensure&#x20;ServerSignature&#x20;Is&#x20;Not&#x20;Enabled','Disable&#x20;the&#x20;server&#x20;signatures&#x20;which&#x20;generates&#x20;a&#x20;signature&#x20;line&#x20;as&#x20;a&#x20;trailing&#x20;footer&#x20;at&#x20;the&#x20;bottom&#x20;of&#x20;server&#x20;generated&#x20;documents&#x20;such&#x20;as&#x20;error&#x20;pages.','Server&#x20;signatures&#x20;are&#x20;helpful&#x20;when&#x20;the&#x20;server&#x20;is&#x20;acting&#x20;as&#x20;a&#x20;proxy,&#x20;since&#x20;it&#x20;helps&#x20;the&#x20;user&#x20;distinguish&#x20;errors&#x20;from&#x20;the&#x20;proxy&#x20;rather&#x20;than&#x20;the&#x20;destination&#x20;server,&#x20;however&#x20;in&#x20;this&#x20;context&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;the&#x20;additional&#x20;information.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;ServerSignature&#x20;directive&#x20;to&#x20;have&#x20;the&#x20;value&#x20;of&#x20;Off:&#x20;ServerSignature&#x20;Off','[{\"cis\": [\"8.2\"]}, {\"cis_csc\": [\"18\", \"13.2\"]}]'),(10020,'Ensure&#x20;the&#x20;TimeOut&#x20;Is&#x20;Set&#x20;to&#x20;10&#x20;or&#x20;Less','Denial&#x20;of&#x20;Service&#x20;&#40;DoS&#41;&#x20;is&#x20;an&#x20;attack&#x20;technique&#x20;with&#x20;the&#x20;intent&#x20;of&#x20;preventing&#x20;a&#x20;web&#x20;site&#x20;from&#x20;serving&#x20;normal&#x20;user&#x20;activity.&#x20;DoS&#x20;attacks,&#x20;which&#x20;are&#x20;normally&#x20;applied&#x20;to&#x20;the&#x20;network&#x20;layer,&#x20;are&#x20;also&#x20;possible&#x20;at&#x20;the&#x20;application&#x20;layer.&#x20;These&#x20;malicious&#x20;attacks&#x20;can&#x20;succeed&#x20;by&#x20;starving&#x20;a&#x20;system&#x20;of&#x20;critical&#x20;resources,&#x20;vulnerability&#x20;exploit,&#x20;or&#x20;abuse&#x20;of&#x20;functionality.&#x20;Although&#x20;there&#x20;is&#x20;no&#x20;100%&#x20;solution&#x20;for&#x20;preventing&#x20;DoS&#x20;attacks,&#x20;the&#x20;following&#x20;recommendation&#x20;uses&#x20;the&#x20;Timeout&#x20;directive&#x20;to&#x20;mitigate&#x20;some&#x20;of&#x20;the&#x20;risk,&#x20;by&#x20;requiring&#x20;more&#x20;effort&#x20;for&#x20;a&#x20;successful&#x20;DoS&#x20;attack.&#x20;Of&#x20;course,&#x20;DoS&#x20;attacks&#x20;can&#x20;happen&#x20;in&#x20;rather&#x20;unintentional&#x20;ways&#x20;as&#x20;well&#x20;as&#x20;intentional&#x20;and&#x20;these&#x20;directives&#x20;will&#x20;help&#x20;in&#x20;many&#x20;of&#x20;those&#x20;situations&#x20;as&#x20;well.','One&#x20;common&#x20;technique&#x20;for&#x20;DoS&#x20;is&#x20;to&#x20;initiate&#x20;many&#x20;connections&#x20;to&#x20;the&#x20;server.&#x20;By&#x20;decreasing&#x20;the&#x20;timeout&#x20;for&#x20;old&#x20;connections&#x20;and&#x20;we&#x20;allow&#x20;the&#x20;server&#x20;to&#x20;free&#x20;up&#x20;resources&#x20;more&#x20;quickly&#x20;and&#x20;be&#x20;more&#x20;responsive.&#x20;By&#x20;making&#x20;the&#x20;server&#x20;more&#x20;efficient,&#x20;it&#x20;will&#x20;be&#x20;more&#x20;resilient&#x20;to&#x20;DoS&#x20;conditions.&#x20;The&#x20;Timeout&#x20;directive&#x20;affects&#x20;several&#x20;timeout&#x20;values&#x20;for&#x20;Apache,&#x20;so&#x20;review&#x20;the&#x20;Apache&#x20;document&#x20;carefully.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;Timeout&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;10&#x20;seconds&#x20;or&#x20;shorter.&#x20;Timeout&#x20;10','[{\"cis\": [\"9.1\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10021,'Ensure&#x20;KeepAlive&#x20;Is&#x20;Enabled','The&#x20;KeepAlive&#x20;directive&#x20;controls&#x20;whether&#x20;Apache&#x20;will&#x20;reuse&#x20;the&#x20;same&#x20;TCP&#x20;connection&#x20;per&#x20;client&#x20;to&#x20;process&#x20;subsequent&#x20;HTTP&#x20;requests&#x20;from&#x20;that&#x20;client.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;KeepAlive&#x20;directive&#x20;be&#x20;set&#x20;to&#x20;On.','Allowing&#x20;per-client&#x20;reuse&#x20;of&#x20;TCP&#x20;sockets&#x20;reduces&#x20;the&#x20;amount&#x20;of&#x20;system&#x20;and&#x20;network&#x20;resources&#x20;required&#x20;to&#x20;serve&#x20;requests.&#x20;This&#x20;efficiency&#x20;gain&#x20;may&#x20;improve&#x20;a&#x20;server&#x20;resiliency&#x20;to&#x20;DoS&#x20;attacks.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;KeepAlive&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;On,&#x20;so&#x20;that&#x20;KeepAlive&#x20;connections&#x20;are&#x20;enabled.&#x20;KeepAlive&#x20;On','[{\"cis\": [\"9.2\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10022,'Ensure&#x20;MaxKeepAliveRequests&#x20;is&#x20;Set&#x20;to&#x20;a&#x20;Value&#x20;of&#x20;100&#x20;or&#x20;Greater','The&#x20;MaxKeepAliveRequests&#x20;directive&#x20;limits&#x20;the&#x20;number&#x20;of&#x20;requests&#x20;allowed&#x20;per&#x20;connection&#x20;when&#x20;KeepAlive&#x20;is&#x20;on.&#x20;If&#x20;it&#x20;is&#x20;set&#x20;to&#x20;0,&#x20;unlimited&#x20;requests&#x20;will&#x20;be&#x20;allowed.','The&#x20;MaxKeepAliveRequests&#x20;directive&#x20;is&#x20;important&#x20;to&#x20;be&#x20;used&#x20;to&#x20;mitigate&#x20;the&#x20;risk&#x20;of&#x20;Denial&#x20;of&#x20;Service&#x20;&#40;DoS&#41;&#x20;attack&#x20;technique&#x20;by&#x20;reducing&#x20;the&#x20;overhead&#x20;imposed&#x20;on&#x20;the&#x20;server.&#x20;The&#x20;KeepAlive&#x20;directive&#x20;must&#x20;be&#x20;enabled&#x20;before&#x20;it&#x20;is&#x20;effective.&#x20;Enabling&#x20;KeepAlives&#x20;allows&#x20;for&#x20;multiple&#x20;HTTP&#x20;requests&#x20;to&#x20;be&#x20;sent&#x20;while&#x20;keeping&#x20;the&#x20;same&#x20;TCP&#x20;connection&#x20;alive.&#x20;This&#x20;reduces&#x20;the&#x20;overhead&#x20;of&#x20;having&#x20;to&#x20;setup&#x20;and&#x20;tear&#x20;down&#x20;TCP&#x20;connections&#x20;for&#x20;each&#x20;request.&#x20;By&#x20;making&#x20;the&#x20;server&#x20;more&#x20;efficient,&#x20;it&#x20;will&#x20;be&#x20;more&#x20;resilient&#x20;to&#x20;DoS&#x20;conditions.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;MaxKeepAliveRequests&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;100&#x20;or&#x20;more.&#x20;MaxKeepAliveRequests&#x20;100','[{\"cis\": [\"9.3\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10023,'Ensure&#x20;KeepAliveTimeout&#x20;is&#x20;Set&#x20;to&#x20;a&#x20;Value&#x20;of&#x20;15&#x20;or&#x20;Less','The&#x20;KeepAliveTimeout&#x20;directive&#x20;specifies&#x20;the&#x20;number&#x20;of&#x20;seconds&#x20;Apache&#x20;will&#x20;wait&#x20;for&#x20;a&#x20;subsequent&#x20;request&#x20;before&#x20;closing&#x20;a&#x20;connection&#x20;that&#x20;is&#x20;being&#x20;kept&#x20;alive.','The&#x20;KeepAliveTimeout&#x20;directive&#x20;is&#x20;used&#x20;mitigate&#x20;some&#x20;of&#x20;the&#x20;risk,&#x20;by&#x20;requiring&#x20;more&#x20;effort&#x20;for&#x20;a&#x20;successful&#x20;DoS&#x20;attack.&#x20;By&#x20;enabling&#x20;KeepAlive&#x20;and&#x20;keeping&#x20;the&#x20;timeout&#x20;relatively&#x20;low&#x20;for&#x20;old&#x20;connections&#x20;and&#x20;we&#x20;allow&#x20;the&#x20;server&#x20;to&#x20;free&#x20;up&#x20;resources&#x20;more&#x20;quickly&#x20;and&#x20;be&#x20;more&#x20;responsive.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;KeepAliveTimeout&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;15&#x20;or&#x20;less.&#x20;KeepAliveTimeout&#x20;15','[{\"cis\": [\"9.4\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10024,'Ensure&#x20;the&#x20;Timeout&#x20;Limits&#x20;for&#x20;Request&#x20;Headers&#x20;is&#x20;Set&#x20;to&#x20;40&#x20;or&#x20;Less','The&#x20;RequestReadTimeout&#x20;directive&#x20;allows&#x20;configuration&#x20;of&#x20;timeout&#x20;limits&#x20;for&#x20;client&#x20;requests.&#x20;The&#x20;header&#x20;portion&#x20;of&#x20;the&#x20;directive&#x20;provides&#x20;for&#x20;an&#x20;initial&#x20;timeout&#x20;value,&#x20;a&#x20;maximum&#x20;timeout&#x20;and&#x20;a&#x20;minimum&#x20;rate.&#x20;The&#x20;minimum&#x20;rate&#x20;specifies&#x20;that&#x20;after&#x20;the&#x20;initial&#x20;timeout,&#x20;the&#x20;server&#x20;will&#x20;wait&#x20;an&#x20;additional&#x20;1&#x20;second&#x20;for&#x20;each&#x20;N&#x20;bytes&#x20;received.&#x20;The&#x20;recommended&#x20;setting&#x20;is&#x20;to&#x20;have&#x20;a&#x20;maximum&#x20;timeout&#x20;of&#x20;40&#x20;seconds&#x20;or&#x20;less.&#x20;Keep&#x20;in&#x20;mind&#x20;that&#x20;for&#x20;SSL/TLS&#x20;virtual&#x20;hosts&#x20;the&#x20;time&#x20;for&#x20;the&#x20;TLS&#x20;handshake&#x20;must&#x20;fit&#x20;within&#x20;the&#x20;timeout.','Setting&#x20;a&#x20;request&#x20;header&#x20;timeout&#x20;is&#x20;vital&#x20;for&#x20;mitigating&#x20;Denial&#x20;of&#x20;Service&#x20;attacks&#x20;based&#x20;on&#x20;slow&#x20;requests.&#x20;The&#x20;slow&#x20;request&#x20;attacks&#x20;are&#x20;particularly&#x20;lethal&#x20;and&#x20;relative&#x20;easy&#x20;to&#x20;perform,&#x20;because&#x20;they&#x20;require&#x20;very&#x20;little&#x20;bandwidth&#x20;and&#x20;can&#x20;easily&#x20;be&#x20;done&#x20;through&#x20;anonymous&#x20;proxies.&#x20;Starting&#x20;in&#x20;June&#x20;2009&#x20;with&#x20;the&#x20;Slow&#x20;Loris&#x20;DoS&#x20;attack,&#x20;which&#x20;used&#x20;a&#x20;slow&#x20;GET&#x20;request&#x20;as&#x20;published&#x20;by&#x20;Robert&#x20;Hansen&#x20;&#40;RSnake&#41;&#x20;on&#x20;his&#x20;blog&#x20;http://ha.ckers.org/slowloris/.&#x20;Later&#x20;in&#x20;November&#x20;2010&#x20;at&#x20;the&#x20;OWASP&#x20;App&#x20;Sec&#x20;DC&#x20;conference&#x20;Wong&#x20;Onn&#x20;Chee&#x20;demonstrated&#x20;a&#x20;slow&#x20;POST&#x20;request&#x20;attack&#x20;which&#x20;was&#x20;even&#x20;more&#x20;effective.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Load&#x20;the&#x20;mod_requesttimeout&#x20;module&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;with&#x20;the&#x20;following&#x20;configuration.&#x20;LoadModule&#x20;reqtimeout_module&#x20;modules/mod_reqtimeout.so&#x20;2.&#x20;Add&#x20;a&#x20;RequestReadTimeout&#x20;directive&#x20;similar&#x20;to&#x20;the&#x20;one&#x20;below&#x20;with&#x20;the&#x20;maximum&#x20;request&#x20;header&#x20;timeout&#x20;value&#x20;of&#x20;40&#x20;seconds&#x20;or&#x20;less.&#x20;RequestReadTimeout&#x20;header=20-40,MinRate=500&#x20;body=20,MinRate=500','[{\"cis\": [\"9.5\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10025,'Ensure&#x20;Timeout&#x20;Limits&#x20;for&#x20;the&#x20;Request&#x20;Body&#x20;is&#x20;Set&#x20;to&#x20;20&#x20;or&#x20;Less','The&#x20;RequestReadTimeout&#x20;directive&#x20;also&#x20;allows&#x20;setting&#x20;timeout&#x20;values&#x20;for&#x20;the&#x20;body&#x20;portion&#x20;of&#x20;a&#x20;request.&#x20;The&#x20;directive&#x20;provides&#x20;for&#x20;an&#x20;initial&#x20;timeout&#x20;value,&#x20;and&#x20;a&#x20;maximum&#x20;timeout&#x20;and&#x20;minimum&#x20;rate.&#x20;The&#x20;minimum&#x20;rate&#x20;specifies&#x20;that&#x20;after&#x20;the&#x20;initial&#x20;timeout,&#x20;the&#x20;server&#x20;will&#x20;wait&#x20;an&#x20;additional&#x20;1&#x20;second&#x20;for&#x20;each&#x20;N&#x20;bytes&#x20;are&#x20;received.&#x20;The&#x20;recommended&#x20;setting&#x20;is&#x20;to&#x20;have&#x20;a&#x20;maximum&#x20;timeout&#x20;of&#x20;20&#x20;seconds&#x20;or&#x20;less.&#x20;The&#x20;default&#x20;value&#x20;is&#x20;body=20,MinRate=500.','It&#x20;is&#x20;not&#x20;sufficient&#x20;to&#x20;timeout&#x20;only&#x20;on&#x20;the&#x20;header&#x20;portion&#x20;of&#x20;the&#x20;request,&#x20;as&#x20;the&#x20;server&#x20;will&#x20;still&#x20;be&#x20;vulnerable&#x20;to&#x20;attacks&#x20;like&#x20;the&#x20;OWASP&#x20;Slow&#x20;POST&#x20;attack,&#x20;which&#x20;provide&#x20;the&#x20;body&#x20;of&#x20;the&#x20;request&#x20;very&#x20;slowly.&#x20;Therefore,&#x20;the&#x20;body&#x20;portion&#x20;of&#x20;the&#x20;request&#x20;must&#x20;have&#x20;a&#x20;timeout&#x20;as&#x20;well.&#x20;A&#x20;timeout&#x20;of&#x20;20&#x20;seconds&#x20;or&#x20;less&#x20;is&#x20;recommended.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Load&#x20;the&#x20;mod_requesttimeout&#x20;module&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;with&#x20;the&#x20;following&#x20;configuration.&#x20;LoadModule&#x20;reqtimeout_module&#x20;modules/mod_reqtimeout.so&#x20;2.&#x20;Add&#x20;a&#x20;RequestReadTimeout&#x20;directive&#x20;similar&#x20;to&#x20;the&#x20;one&#x20;below&#x20;with&#x20;the&#x20;maximum&#x20;request&#x20;body&#x20;timeout&#x20;value&#x20;of&#x20;20&#x20;seconds&#x20;or&#x20;less.&#x20;RequestReadTimeout&#x20;header=20-40,MinRate=500&#x20;body=20,MinRate=500','[{\"cis\": [\"9.6\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10026,'Ensure&#x20;the&#x20;LimitRequestLine&#x20;directive&#x20;is&#x20;Set&#x20;to&#x20;512&#x20;or&#x20;less','Buffer&#x20;Overflow&#x20;attacks&#x20;attempt&#x20;to&#x20;exploit&#x20;an&#x20;application&#x20;by&#x20;providing&#x20;more&#x20;data&#x20;than&#x20;the&#x20;application&#x20;buffer&#x20;can&#x20;contain.&#x20;If&#x20;the&#x20;application&#x20;allows&#x20;copying&#x20;data&#x20;to&#x20;the&#x20;buffer&#x20;to&#x20;overflow&#x20;the&#x20;boundaries&#x20;of&#x20;the&#x20;buffer,&#x20;then&#x20;the&#x20;application&#x20;is&#x20;vulnerable&#x20;to&#x20;a&#x20;buffer&#x20;overflow.&#x20;The&#x20;results&#x20;of&#x20;Buffer&#x20;overflow&#x20;vulnerabilities&#x20;vary,&#x20;and&#x20;may&#x20;result&#x20;in&#x20;the&#x20;application&#x20;crashing,&#x20;or&#x20;may&#x20;allow&#x20;the&#x20;attacker&#x20;to&#x20;execute&#x20;instructions&#x20;provided&#x20;in&#x20;the&#x20;data.&#x20;The&#x20;Apache&#x20;LimitRequest*&#x20;directives&#x20;allow&#x20;the&#x20;Apache&#x20;web&#x20;server&#x20;to&#x20;limit&#x20;the&#x20;sizes&#x20;of&#x20;requests&#x20;and&#x20;request&#x20;fields&#x20;and&#x20;can&#x20;be&#x20;used&#x20;to&#x20;help&#x20;protect&#x20;programs&#x20;and&#x20;applications&#x20;processing&#x20;those&#x20;requests.&#x20;Specifically,&#x20;the&#x20;LimitRequestLine&#x20;directive&#x20;limits&#x20;the&#x20;allowed&#x20;size&#x20;of&#x20;a&#x20;client&#039;s&#x20;HTTP&#x20;request-line,&#x20;which&#x20;consists&#x20;of&#x20;the&#x20;HTTP&#x20;method,&#x20;URI,&#x20;and&#x20;protocol&#x20;version.','The&#x20;limiting&#x20;of&#x20;the&#x20;size&#x20;of&#x20;the&#x20;request&#x20;line&#x20;is&#x20;helpful&#x20;so&#x20;that&#x20;the&#x20;web&#x20;server&#x20;can&#x20;prevent&#x20;an&#x20;unexpectedly&#x20;long&#x20;or&#x20;large&#x20;request&#x20;from&#x20;being&#x20;passed&#x20;to&#x20;a&#x20;potentially&#x20;vulnerable&#x20;CGI&#x20;program,&#x20;module&#x20;or&#x20;application&#x20;that&#x20;would&#x20;have&#x20;attempted&#x20;to&#x20;process&#x20;the&#x20;request.&#x20;Of&#x20;course,&#x20;the&#x20;underlying&#x20;dependency&#x20;is&#x20;that&#x20;we&#x20;need&#x20;to&#x20;set&#x20;the&#x20;limits&#x20;high&#x20;enough&#x20;to&#x20;not&#x20;interfere&#x20;with&#x20;any&#x20;one&#x20;application&#x20;on&#x20;the&#x20;server,&#x20;while&#x20;setting&#x20;them&#x20;low&#x20;enough&#x20;to&#x20;be&#x20;of&#x20;value&#x20;in&#x20;protecting&#x20;the&#x20;applications.&#x20;Since&#x20;the&#x20;configuration&#x20;directive&#x20;is&#x20;available&#x20;only&#x20;at&#x20;the&#x20;server&#x20;configuration&#x20;level,&#x20;it&#x20;is&#x20;not&#x20;possible&#x20;to&#x20;tune&#x20;the&#x20;value&#x20;for&#x20;different&#x20;portions&#x20;of&#x20;the&#x20;same&#x20;web&#x20;server.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;carefully,&#x20;as&#x20;these&#x20;requests&#x20;may&#x20;interfere&#x20;with&#x20;the&#x20;expected&#x20;functionality&#x20;of&#x20;some&#x20;web&#x20;applications.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;LimitRequestline&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;512&#x20;or&#x20;shorter.&#x20;LimitRequestline&#x20;512','[{\"cis\": [\"10.1\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10027,'Ensure&#x20;the&#x20;LimitRequestFields&#x20;Directive&#x20;is&#x20;Set&#x20;to&#x20;100&#x20;or&#x20;Less','The&#x20;LimitRequestFields&#x20;directive&#x20;limits&#x20;the&#x20;number&#x20;of&#x20;fields&#x20;allowed&#x20;in&#x20;an&#x20;HTTP&#x20;request.','The&#x20;limiting&#x20;of&#x20;the&#x20;number&#x20;of&#x20;fields&#x20;is&#x20;helpful&#x20;so&#x20;that&#x20;the&#x20;web&#x20;server&#x20;can&#x20;prevent&#x20;an&#x20;unexpectedly&#x20;high&#x20;number&#x20;of&#x20;fields&#x20;from&#x20;being&#x20;passed&#x20;to&#x20;a&#x20;potentially&#x20;vulnerable&#x20;CGI&#x20;program,&#x20;module&#x20;or&#x20;application&#x20;that&#x20;would&#x20;have&#x20;attempted&#x20;to&#x20;process&#x20;the&#x20;request.&#x20;Of&#x20;course,&#x20;the&#x20;underlying&#x20;dependency&#x20;is&#x20;that&#x20;we&#x20;need&#x20;to&#x20;set&#x20;the&#x20;limits&#x20;high&#x20;enough&#x20;to&#x20;not&#x20;interfere&#x20;with&#x20;any&#x20;one&#x20;application&#x20;on&#x20;the&#x20;server,&#x20;while&#x20;setting&#x20;them&#x20;low&#x20;enough&#x20;to&#x20;be&#x20;of&#x20;value&#x20;in&#x20;protecting&#x20;the&#x20;applications.&#x20;Since&#x20;the&#x20;configuration&#x20;directives&#x20;are&#x20;available&#x20;only&#x20;at&#x20;the&#x20;server&#x20;configuration&#x20;level,&#x20;it&#x20;is&#x20;not&#x20;possible&#x20;to&#x20;tune&#x20;the&#x20;value&#x20;for&#x20;different&#x20;portions&#x20;of&#x20;the&#x20;same&#x20;web&#x20;server.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;carefully,&#x20;as&#x20;these&#x20;requests&#x20;may&#x20;interfere&#x20;with&#x20;the&#x20;expected&#x20;functionality&#x20;of&#x20;some&#x20;web&#x20;applications.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;LimitRequestFields&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;100&#x20;or&#x20;less.&#x20;If&#x20;the&#x20;directive&#x20;is&#x20;not&#x20;present&#x20;the&#x20;default&#x20;depends&#x20;on&#x20;a&#x20;compile&#x20;time&#x20;configuration,&#x20;but&#x20;defaults&#x20;to&#x20;a&#x20;value&#x20;of&#x20;100.&#x20;LimitRequestFields&#x20;100','[{\"cis\": [\"10.2\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10028,'Ensure&#x20;the&#x20;LimitRequestFieldsize&#x20;Directive&#x20;is&#x20;Set&#x20;to&#x20;1024&#x20;or&#x20;Less','The&#x20;LimitRequestFieldSize&#x20;limits&#x20;the&#x20;number&#x20;of&#x20;bytes&#x20;that&#x20;will&#x20;be&#x20;allowed&#x20;in&#x20;an&#x20;HTTP&#x20;request&#x20;header.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;LimitRequestFieldSize&#x20;directive&#x20;be&#x20;set&#x20;to&#x20;1024&#x20;or&#x20;less.','By&#x20;limiting&#x20;of&#x20;the&#x20;size&#x20;of&#x20;request&#x20;headers&#x20;is&#x20;helpful&#x20;so&#x20;that&#x20;the&#x20;web&#x20;server&#x20;can&#x20;prevent&#x20;an&#x20;unexpectedly&#x20;long&#x20;or&#x20;large&#x20;value&#x20;from&#x20;being&#x20;passed&#x20;to&#x20;exploit&#x20;a&#x20;potentially&#x20;vulnerable&#x20;program.&#x20;Of&#x20;course,&#x20;the&#x20;underlying&#x20;dependency&#x20;is&#x20;that&#x20;we&#x20;need&#x20;to&#x20;set&#x20;the&#x20;limits&#x20;high&#x20;enough&#x20;to&#x20;not&#x20;interfere&#x20;with&#x20;any&#x20;one&#x20;application&#x20;on&#x20;the&#x20;server,&#x20;while&#x20;setting&#x20;them&#x20;low&#x20;enough&#x20;to&#x20;be&#x20;of&#x20;value&#x20;in&#x20;protecting&#x20;the&#x20;applications.&#x20;Since&#x20;the&#x20;configuration&#x20;directives&#x20;are&#x20;available&#x20;only&#x20;at&#x20;the&#x20;server&#x20;configuration&#x20;level,&#x20;it&#x20;is&#x20;not&#x20;possible&#x20;to&#x20;tune&#x20;the&#x20;value&#x20;for&#x20;different&#x20;portions&#x20;of&#x20;the&#x20;same&#x20;web&#x20;server.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;carefully,&#x20;as&#x20;these&#x20;requests&#x20;may&#x20;interfere&#x20;with&#x20;the&#x20;expected&#x20;functionality&#x20;of&#x20;some&#x20;web&#x20;applications.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;LimitRequestFieldsize&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;1024&#x20;or&#x20;less.&#x20;LimitRequestFieldsize&#x20;1024','[{\"cis\": [\"10.3\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10029,'Ensure&#x20;the&#x20;LimitRequestBody&#x20;Directive&#x20;is&#x20;Set&#x20;to&#x20;102400&#x20;or&#x20;Less','The&#x20;LimitRequestBody&#x20;directive&#x20;limits&#x20;the&#x20;number&#x20;of&#x20;bytes&#x20;that&#x20;are&#x20;allowed&#x20;in&#x20;a&#x20;request&#x20;body.&#x20;Size&#x20;of&#x20;requests&#x20;may&#x20;vary&#x20;greatly;&#x20;for&#x20;example,&#x20;during&#x20;a&#x20;file&#x20;upload&#x20;the&#x20;size&#x20;of&#x20;the&#x20;file&#x20;must&#x20;fit&#x20;within&#x20;this&#x20;limit.','The&#x20;limiting&#x20;of&#x20;the&#x20;size&#x20;of&#x20;the&#x20;request&#x20;body&#x20;is&#x20;helpful&#x20;so&#x20;that&#x20;the&#x20;web&#x20;server&#x20;can&#x20;prevent&#x20;an&#x20;unexpectedly&#x20;long&#x20;or&#x20;large&#x20;request&#x20;from&#x20;being&#x20;passed&#x20;to&#x20;a&#x20;potentially&#x20;vulnerable&#x20;program.&#x20;Of&#x20;course,&#x20;the&#x20;underlying&#x20;dependency&#x20;is&#x20;that&#x20;we&#x20;need&#x20;to&#x20;set&#x20;the&#x20;limits&#x20;high&#x20;enough&#x20;to&#x20;not&#x20;interfere&#x20;with&#x20;any&#x20;one&#x20;application&#x20;on&#x20;the&#x20;server,&#x20;while&#x20;setting&#x20;them&#x20;low&#x20;enough&#x20;to&#x20;be&#x20;of&#x20;value&#x20;in&#x20;protecting&#x20;the&#x20;applications.&#x20;The&#x20;LimitRequestBody&#x20;may&#x20;be&#x20;configured&#x20;on&#x20;a&#x20;per&#x20;directory,&#x20;or&#x20;per&#x20;location&#x20;context.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;carefully,&#x20;as&#x20;these&#x20;requests&#x20;may&#x20;interfere&#x20;with&#x20;the&#x20;expected&#x20;functionality&#x20;of&#x20;some&#x20;web&#x20;applications.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;LimitRequestBody&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;102400&#x20;&#40;100K&#41;&#x20;or&#x20;less.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;so&#x20;that&#x20;it&#x20;is&#x20;understood&#x20;that&#x20;this&#x20;directive&#x20;will&#x20;limit&#x20;the&#x20;size&#x20;of&#x20;file&#x20;up-loads&#x20;to&#x20;the&#x20;web&#x20;server.&#x20;LimitRequestBody&#x20;102400','[{\"cis\": [\"10.4\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10500,'Disable&#x20;MySQL&#x20;Command&#x20;History','On&#x20;Linux/UNIX,&#x20;the&#x20;MySQL&#x20;client&#x20;logs&#x20;statements&#x20;executed&#x20;interactively&#x20;to&#x20;a&#x20;history&#x20;file.&#x20;By&#x20;default,&#x20;this&#x20;file&#x20;is&#x20;named&#x20;.mysql_history&#x20;in&#x20;the&#x20;user&#039;s&#x20;home&#x20;directory.&#x20;Most&#x20;interactive&#x20;commands&#x20;run&#x20;in&#x20;the&#x20;MySQL&#x20;client&#x20;application&#x20;are&#x20;saved&#x20;to&#x20;a&#x20;history&#x20;file.&#x20;The&#x20;MySQL&#x20;command&#x20;history&#x20;should&#x20;be&#x20;disabled.','Disabling&#x20;the&#x20;MySQL&#x20;command&#x20;history&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;exposing&#x20;sensitive&#x20;information,&#x20;such&#x20;as&#x20;passwords&#x20;and&#x20;encryption&#x20;keys.','','Perform&#x20;the&#x20;following&#x20;steps:&#x20;1.&#x20;Remove&#x20;.mysql_history&#x20;if&#x20;it&#x20;exists.&#x20;And&#x20;2.&#x20;Set&#x20;the&#x20;MYSQL_HISTFILE&#x20;environment&#x20;variable&#x20;to&#x20;/dev/null.&#x20;This&#x20;will&#x20;need&#x20;to&#x20;be&#x20;placed&#x20;in&#x20;the&#x20;shell&#039;s&#x20;startup&#x20;script.&#x20;Or&#x20;Create&#x20;$HOME/.mysql_history&#x20;as&#x20;a&#x20;symbolic&#x20;to&#x20;/dev/null.','[{\"cis\": [\"1.3\"]}]'),(10501,'Disable&#x20;Interactive&#x20;Login','When&#x20;created,&#x20;the&#x20;MySQL&#x20;user&#x20;may&#x20;have&#x20;interactive&#x20;access&#x20;to&#x20;the&#x20;operating&#x20;system,&#x20;which&#x20;means&#x20;that&#x20;the&#x20;MySQL&#x20;user&#x20;could&#x20;login&#x20;to&#x20;the&#x20;host&#x20;as&#x20;any&#x20;other&#x20;user&#x20;would.','Preventing&#x20;the&#x20;MySQL&#x20;user&#x20;from&#x20;logging&#x20;in&#x20;interactively&#x20;may&#x20;reduce&#x20;the&#x20;impact&#x20;of&#x20;a&#x20;compromised&#x20;MySQL&#x20;account.&#x20;There&#x20;is&#x20;also&#x20;more&#x20;accountability&#x20;as&#x20;accessing&#x20;the&#x20;operating&#x20;system&#x20;where&#x20;the&#x20;MySQL&#x20;server&#x20;lies&#x20;will&#x20;require&#x20;the&#x20;user&#039;s&#x20;own&#x20;account.&#x20;Interactive&#x20;access&#x20;by&#x20;the&#x20;MySQL&#x20;user&#x20;is&#x20;unnecessary&#x20;and&#x20;should&#x20;be&#x20;disabled.','','Execute&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;in&#x20;a&#x20;terminal:&#x20;&#039;usermod&#x20;-s&#x20;/bin/false&#x20;mysql&#039;&#x20;or&#x20;&#039;usermod&#x20;-s&#x20;/sbin/nologin&#x20;mysql&#039;','[{\"cis\": [\"1.5\"]}]'),(10502,'Verify&#x20;That&#x20;&#039;MYSQL_PWD&#039;&#x20;Is&#x20;Not&#x20;Set&#x20;In&#x20;Users&#039;&#x20;Profiles','MySQL&#x20;can&#x20;read&#x20;a&#x20;default&#x20;database&#x20;password&#x20;from&#x20;an&#x20;environment&#x20;variable&#x20;called&#x20;MYSQL_PWD.','The&#x20;use&#x20;of&#x20;the&#x20;MYSQL_PWD&#x20;environment&#x20;variable&#x20;implies&#x20;the&#x20;clear&#x20;text&#x20;storage&#x20;of&#x20;MySQL&#x20;credentials.&#x20;Avoiding&#x20;this&#x20;may&#x20;increase&#x20;assurance&#x20;that&#x20;the&#x20;confidentiality&#x20;of&#x20;MySQL&#x20;credentials&#x20;is&#x20;preserved.','','Check&#x20;which&#x20;users&#x20;and/or&#x20;scripts&#x20;are&#x20;setting&#x20;MYSQL_PWD&#x20;and&#x20;change&#x20;them&#x20;to&#x20;use&#x20;a&#x20;more&#x20;secure&#x20;method.','[{\"cis\": [\"1.6\"]}]'),(10503,'Ensure&#x20;&#039;allow-suspicious-udfs&#039;&#x20;Is&#x20;Set&#x20;to&#x20;&#039;FALSE&#039;','This&#x20;option&#x20;prevents&#x20;attaching&#x20;arbitrary&#x20;shared&#x20;library&#x20;functions&#x20;as&#x20;user-defined&#x20;functions&#x20;by&#x20;checking&#x20;for&#x20;at&#x20;least&#x20;one&#x20;corresponding&#x20;method&#x20;named&#x20;_init,&#x20;_deinit,&#x20;_reset,&#x20;_clear,&#x20;or&#x20;_add.','Preventing&#x20;shared&#x20;libraries&#x20;that&#x20;do&#x20;not&#x20;contain&#x20;user-defined&#x20;functions&#x20;from&#x20;loading&#x20;will&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.','','Remove&#x20;&#039;--allow-suspicious-udfs&#039;&#x20;from&#x20;the&#x20;&#039;mysqld&#039;&#x20;start&#x20;up&#x20;command&#x20;line.&#x20;Or&#x20;Remove&#x20;&#039;allow-suspicious-udfs&#039;&#x20;from&#x20;the&#x20;MySQL&#x20;option&#x20;file.','[{\"cis\": [\"4.3\"]}]'),(10504,'Ensure&#x20;&#039;local_infile&#039;&#x20;is&#x20;Disabled','The&#x20;&#039;local_infile&#039;&#x20;parameter&#x20;dictates&#x20;whether&#x20;files&#x20;located&#x20;on&#x20;the&#x20;MySQL&#x20;client&#039;s&#x20;computer&#x20;can&#x20;be&#x20;loaded&#x20;or&#x20;selected&#x20;via&#x20;&#039;LOAD&#x20;DATA&#x20;INFILE&#039;&#x20;or&#x20;&#039;SELECT&#x20;local_file&#039;.','Disabling&#x20;&#039;local_infile&#039;&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;ability&#x20;to&#x20;read&#x20;sensitive&#x20;files&#x20;off&#x20;the&#x20;affected&#x20;server&#x20;via&#x20;a&#x20;SQL&#x20;injection&#x20;vulnerability.','','Add&#x20;a&#x20;line&#x20;local-infile=0&#x20;in&#x20;the&#x20;[mysqld]&#x20;section&#x20;of&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;and&#x20;restart&#x20;the&#x20;MySQL&#x20;service.','[{\"cis\": [\"4.4\"]}]'),(10505,'Ensure&#x20;&#039;mysqld&#039;&#x20;Is&#x20;Not&#x20;Started&#x20;with&#x20;&#039;--skip-grant-tables&#039;','This&#x20;option&#x20;causes&#x20;mysqld&#x20;to&#x20;start&#x20;without&#x20;using&#x20;the&#x20;privilege&#x20;system.','If&#x20;this&#x20;option&#x20;is&#x20;used,&#x20;all&#x20;clients&#x20;of&#x20;the&#x20;affected&#x20;server&#x20;will&#x20;have&#x20;unrestricted&#x20;access&#x20;to&#x20;all&#x20;databases.','','Open&#x20;the&#x20;MySQL&#x20;configuration&#x20;&#40;e.g.&#x20;my.cnf&#41;&#x20;file&#x20;and&#x20;set:&#x20;skip-grant-tables&#x20;=&#x20;FALSE','[{\"cis\": [\"4.5\"]}]'),(10506,'Ensure&#x20;&#039;--skip-symbolic-links&#039;&#x20;Is&#x20;Enabled','The&#x20;symbolic-links&#x20;and&#x20;skip-symbolic-links&#x20;options&#x20;for&#x20;MySQL&#x20;determine&#x20;whether&#x20;symbolic&#x20;link&#x20;support&#x20;is&#x20;available.&#x20;&#x20;When&#x20;use&#x20;of&#x20;symbolic&#x20;links&#x20;are&#x20;enabled,&#x20;they&#x20;have&#x20;different&#x20;effects&#x20;depending&#x20;on&#x20;the&#x20;host&#x20;platform.&#x20;&#x20;When&#x20;symbolic&#x20;links&#x20;are&#x20;disabled,&#x20;then&#x20;symbolic&#x20;links&#x20;stored&#x20;in&#x20;files&#x20;or&#x20;entries&#x20;in&#x20;tables&#x20;are&#x20;not&#x20;used&#x20;by&#x20;the&#x20;database.&#x20;','Prevents&#x20;sym&#x20;links&#x20;being&#x20;used&#x20;for&#x20;data&#x20;base&#x20;files.&#x20;This&#x20;is&#x20;especially&#x20;important&#x20;when&#x20;MySQL&#x20;is&#x20;executing&#x20;as&#x20;root&#x20;as&#x20;arbitrary&#x20;files&#x20;may&#x20;be&#x20;overwritten.&#x20;The&#x20;symbolic-links&#x20;option&#x20;might&#x20;allow&#x20;someone&#x20;to&#x20;direct&#x20;actions&#x20;by&#x20;to&#x20;MySQL&#x20;server&#x20;to&#x20;other&#x20;files&#x20;and/or&#x20;directories.','','Open&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#41;,&#x20;locate&#x20;&#039;skip_symbolic_links&#039;&#x20;and&#x20;set&#x20;it&#x20;to&#x20;YES.&#x20;If&#x20;the&#x20;option&#x20;does&#x20;not&#x20;exist,&#x20;create&#x20;it&#x20;in&#x20;the&#x20;&#039;mysqld&#039;&#x20;section.','[{\"cis\": [\"4.6\"]}]'),(10507,'Ensure&#x20;&#039;secure_file_priv&#039;&#x20;is&#x20;not&#x20;empty','The&#x20;secure_file_priv&#x20;option&#x20;restricts&#x20;to&#x20;paths&#x20;used&#x20;by&#x20;LOAD&#x20;DATA&#x20;INFILE&#x20;or&#x20;SELECT&#x20;local_file.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;option&#x20;be&#x20;set&#x20;to&#x20;a&#x20;file&#x20;system&#x20;location&#x20;that&#x20;contains&#x20;only&#x20;resources&#x20;expected&#x20;to&#x20;be&#x20;loaded&#x20;by&#x20;MySQL.','Setting&#x20;secure_file_priv&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;ability&#x20;to&#x20;read&#x20;sensitive&#x20;files&#x20;off&#x20;the&#x20;affected&#x20;server&#x20;via&#x20;a&#x20;SQL&#x20;injection&#x20;vulnerability.&#x20;','','Add&#x20;the&#x20;line&#x20;secure_file_priv=&lt;path_to_load_directory&gt;&#x20;to&#x20;the&#x20;[mysqld]&#x20;section&#x20;of&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;and&#x20;restart&#x20;the&#x20;MySQL&#x20;service.','[{\"cis\": [\"4.8\"]}]'),(10508,'Ensure&#x20;&#039;sql_mode&#039;&#x20;Contains&#x20;&#039;STRICT_ALL_TABLES&#039;','When&#x20;data&#x20;changing&#x20;statements&#x20;are&#x20;made&#x20;&#40;i.e.&#x20;INSERT,&#x20;UPDATE&#41;,&#x20;MySQL&#x20;can&#x20;handle&#x20;invalid&#x20;or&#x20;missing&#x20;values&#x20;differently&#x20;depending&#x20;on&#x20;whether&#x20;strict&#x20;SQL&#x20;mode&#x20;is&#x20;enabled.&#x20;When&#x20;strict&#x20;SQL&#x20;mode&#x20;is&#x20;enabled,&#x20;data&#x20;may&#x20;not&#x20;be&#x20;truncated&#x20;or&#x20;otherwise&#x20;&#039;adjusted&#039;&#x20;to&#x20;make&#x20;the&#x20;data&#x20;changing&#x20;statement&#x20;work.','Without&#x20;strict&#x20;mode&#x20;the&#x20;server&#x20;tries&#x20;to&#x20;do&#x20;proceed&#x20;with&#x20;the&#x20;action&#x20;when&#x20;an&#x20;error&#x20;might&#x20;have&#x20;been&#x20;a&#x20;more&#x20;secure&#x20;choice.&#x20;For&#x20;example,&#x20;by&#x20;default&#x20;MySQL&#x20;will&#x20;truncate&#x20;data&#x20;if&#x20;it&#x20;does&#x20;not&#x20;fit&#x20;in&#x20;a&#x20;field,&#x20;which&#x20;can&#x20;lead&#x20;to&#x20;unknown&#x20;behavior,&#x20;or&#x20;be&#x20;leveraged&#x20;by&#x20;an&#x20;attacker&#x20;to&#x20;circumvent&#x20;data&#x20;validation.&#x20;','','Add&#x20;STRICT_ALL_TABLES&#x20;to&#x20;the&#x20;sql_mode&#x20;in&#x20;the&#x20;server&#039;s&#x20;configuration&#x20;file.','[{\"cis\": [\"4.9\"]}]'),(10509,'Ensure&#x20;&#039;log_error&#039;&#x20;is&#x20;not&#x20;empty','The&#x20;error&#x20;log&#x20;contains&#x20;information&#x20;about&#x20;events&#x20;such&#x20;as&#x20;mysqld&#x20;starting&#x20;and&#x20;stopping,&#x20;when&#x20;a&#x20;table&#x20;needs&#x20;to&#x20;be&#x20;checked&#x20;or&#x20;repaired,&#x20;and,&#x20;depending&#x20;on&#x20;the&#x20;host&#x20;operating&#x20;system,&#x20;stack&#x20;traces&#x20;when&#x20;mysqld&#x20;fails','Enabling&#x20;error&#x20;logging&#x20;may&#x20;increase&#x20;the&#x20;ability&#x20;to&#x20;detect&#x20;malicious&#x20;attempts&#x20;against&#x20;MySQL,&#x20;and&#x20;other&#x20;critical&#x20;messages,&#x20;such&#x20;as&#x20;if&#x20;the&#x20;error&#x20;log&#x20;is&#x20;not&#x20;enabled&#x20;then&#x20;connection&#x20;error&#x20;might&#x20;go&#x20;unnoticed.','','Set&#x20;the&#x20;log-error&#x20;option&#x20;to&#x20;the&#x20;path&#x20;for&#x20;the&#x20;error&#x20;log&#x20;in&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#x20;or&#x20;my.ini&#41;.','[{\"cis\": [\"6.1\"]}]'),(10510,'Ensure&#x20;Log&#x20;Files&#x20;are&#x20;not&#x20;Stored&#x20;on&#x20;a&#x20;non-system&#x20;partition','MySQL&#x20;log&#x20;files&#x20;can&#x20;be&#x20;set&#x20;in&#x20;the&#x20;MySQL&#x20;configuration&#x20;to&#x20;exist&#x20;anywhere&#x20;on&#x20;the&#x20;filesystem.&#x20;&#x20;It&#x20;is&#x20;common&#x20;practice&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;filesystem&#x20;is&#x20;left&#x20;uncluttered&#x20;by&#x20;application&#x20;logs.&#x20;&#x20;System&#x20;filesystems&#x20;include&#x20;the&#x20;root,&#x20;/var,&#x20;or&#x20;/usr.','Moving&#x20;the&#x20;MySQL&#x20;logs&#x20;off&#x20;the&#x20;system&#x20;partition&#x20;will&#x20;reduce&#x20;the&#x20;probability&#x20;of&#x20;denial&#x20;of&#x20;service&#x20;via&#x20;the&#x20;exhaustion&#x20;of&#x20;available&#x20;disk&#x20;space&#x20;to&#x20;the&#x20;operating&#x20;system.','','In&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#41;,&#x20;locate&#x20;the&#x20;log-bin&#x20;entry&#x20;and&#x20;set&#x20;it&#x20;to&#x20;a&#x20;file&#x20;not&#x20;on&#x20;root&#x20;&#40;&#039;/&#039;&#41;,&#x20;/var,&#x20;or&#x20;/usr.','[{\"cis\": [\"6.2\"]}]'),(10511,'Ensure&#x20;&#039;log_warning&#039;&#x20;is&#x20;set&#x20;to&#x20;2','The&#x20;log_warnings&#x20;system&#x20;variable,&#x20;enabled&#x20;by&#x20;default,&#x20;provides&#x20;additional&#x20;information&#x20;to&#x20;the&#x20;MySQL&#x20;log.&#x20;&#x20;A&#x20;value&#x20;of&#x20;1&#x20;enables&#x20;logging&#x20;of&#x20;warning&#x20;messages,&#x20;and&#x20;higher&#x20;integer&#x20;values&#x20;tend&#x20;to&#x20;enable&#x20;more&#x20;logging.','This&#x20;might&#x20;help&#x20;to&#x20;detect&#x20;malicious&#x20;behavior&#x20;by&#x20;logging&#x20;communication&#x20;errors&#x20;and&#x20;aborted&#x20;connections.','','Ensure&#x20;a&#x20;line&#x20;containing&#x20;log-warnings&#x20;=&#x20;2&#x20;is&#x20;found&#x20;in&#x20;the&#x20;mysqld&#x20;section&#x20;of&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#41;.','[{\"cis\": [\"6.3\"]}]'),(10512,'Ensure&#x20;&#039;log_raw&#039;&#x20;is&#x20;set&#x20;to&#x20;&#039;OFF&#039;','The&#x20;log-raw&#x20;MySQL&#x20;option&#x20;determines&#x20;whether&#x20;passwords&#x20;are&#x20;rewritten&#x20;by&#x20;the&#x20;server&#x20;so&#x20;as&#x20;not&#x20;to&#x20;appear&#x20;in&#x20;log&#x20;files&#x20;as&#x20;plain&#x20;text.&#x20;&#x20;If&#x20;log-raw&#x20;is&#x20;enabled,&#x20;then&#x20;passwords&#x20;are&#x20;written&#x20;to&#x20;the&#x20;various&#x20;log&#x20;files&#x20;&#40;general&#x20;query&#x20;log,&#x20;slow&#x20;query&#x20;log,&#x20;and&#x20;binary&#x20;log&#41;&#x20;in&#x20;plain&#x20;text.&#x20;','With&#x20;raw&#x20;logging&#x20;of&#x20;passwords&#x20;enabled&#x20;someone&#x20;with&#x20;access&#x20;to&#x20;the&#x20;log&#x20;files&#x20;might&#x20;see&#x20;plain&#x20;text&#x20;passwords.','','IN&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#41;,&#x20;locate&#x20;and&#x20;set&#x20;the&#x20;value&#x20;of&#x20;this&#x20;option:&#x20;log-raw&#x20;=&#x20;OFF','[{\"cis\": [\"6.4\"]}]');

From 4e6bb657908d8366714879fcdf222a3ef09a4184 Mon Sep 17 00:00:00 2001
From: Enrique Martin <enrique.martin@pandorafms.com>
Date: Thu, 28 Sep 2023 10:42:39 +0200
Subject: [PATCH 065/116] Debugging rpm generation incompatibility with EL7
 binaries

---
 pandora_console/pandora_console.redhat.spec | 3 +++
 pandora_server/pandora_server.redhat.spec   | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index eb0de7ef8c..cc865a88f6 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -1,6 +1,9 @@
 #
 # Pandora FMS Console
 #
+%global _missing_build_ids_terminate_build 0
+%define __strip /bin/true
+%define debug_package %{nil}
 %define name        pandorafms_console
 %define version     7.0NG.773.3
 %define release     230928
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index d9274cb126..b7f54a8069 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -2,6 +2,9 @@
 # Pandora FMS Server 
 #
 %global __os_install_post %{nil}
+%global _missing_build_ids_terminate_build 0
+%define __strip /bin/true
+%define debug_package %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
 %define release     230928

From fd6757dbde3b46fbd576eab2925099f2f6687712 Mon Sep 17 00:00:00 2001
From: alejandro <alejandro.sanchez@pandorafms.com>
Date: Thu, 28 Sep 2023 11:08:38 +0200
Subject: [PATCH 066/116] added discovery cloud plugins in MR

---
 pandora_console/extras/mr/66.sql   | 80 ++++++++++++++++++++++++++++++
 pandora_console/pandoradb_data.sql | 80 ++++++++++++++++++++++++++++++
 2 files changed, 160 insertions(+)

diff --git a/pandora_console/extras/mr/66.sql b/pandora_console/extras/mr/66.sql
index 0671d66c56..4bc4079191 100644
--- a/pandora_console/extras/mr/66.sql
+++ b/pandora_console/extras/mr/66.sql
@@ -68,6 +68,86 @@ INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES
 -- Insert into tdiscovery_apps_executions
 INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;-g&#x20;&#039;__taskGroup__&#039;&#x20;--host&#x20;&#039;_host_&#039;&#x20;--port&#x20;&#039;_port_&#039;&#x20;--user&#x20;&#039;_user_&#039;&#x20;--password&#x20;&#039;_password_&#039;&#x20;--vm&#x20;&#039;_scanVM_&#039;&#x20;--lxc&#x20;&#039;_scanLXC_&#039;&#x20;--backups&#x20;&#039;_scanBackups_&#039;&#x20;--nodes&#x20;&#039;_scanNodes_&#039;&#x20;--transfer_mode&#x20;tentacle&#x20;--tentacle_address&#x20;&#039;_tentacleIP_&#039;&#x20;--tentacle_port&#x20;&#039;_tentaclePort_&#039;&#x20;--as_discovery_plugin&#x20;1');
 
+-- Insert new EC2 APP
+SET @short_name = 'pandorafms.aws.ec2';
+SET @name = 'Amazon&#x20;EC2';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;AWS&#x20;EC2&#x20;instances';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_aws_ec2');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/aws_ec2');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileEC2_&#039;');
+
+-- Insert new RDS APP
+SET @short_name = 'pandorafms.aws.rds';
+SET @name = 'Amazon&#x20;RDS';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;AWS&#x20;RDS&#x20;instances';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_aws_rds');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/aws_rds');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileRDS_&#039;');
+
+-- Insert new S3 APP
+SET @short_name = 'pandorafms.aws.s3';
+SET @name = 'Amazon&#x20;S3';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;AWS&#x20;S3&#x20;buckets';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_aws_s3');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/aws_s3');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileS3_&#039;');
+
+-- Insert new Azure APP
+SET @short_name = 'pandorafms.azure.mc';
+SET @name = 'Azure&#x20;Microsoft&#x20;Compute';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;Azure&#x20;Microsoft&#x20;Compute&#x20;VMs';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_azure_mc');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/azure_vm');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileAzureMC_&#039;');
+
+-- Insert new Google APP
+SET @short_name = 'pandorafms.gcp.ce';
+SET @name = 'Google&#x20;Cloud&#x20;Compute&#x20;Engine';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;Google&#x20;Cloud&#x20;Platform&#x20;Compute&#x20;Engine&#x20;VMs';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_gcp_ce');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/google_instances');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileGoogleCE_&#039;');
+
 ALTER TABLE `treport_content`  ADD COLUMN `cat_security_hardening` INT NOT NULL DEFAULT 0;
 ALTER TABLE `treport_content`  ADD COLUMN `ignore_skipped` INT NOT NULL DEFAULT 0;
 ALTER TABLE `treport_content`  ADD COLUMN `status_of_check` TINYTEXT;
diff --git a/pandora_console/pandoradb_data.sql b/pandora_console/pandoradb_data.sql
index ff9df1610f..d0a1d97a1b 100644
--- a/pandora_console/pandoradb_data.sql
+++ b/pandora_console/pandoradb_data.sql
@@ -2728,6 +2728,86 @@ INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES
 -- Insert into tdiscovery_apps_executions
 INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;-g&#x20;&#039;__taskGroup__&#039;&#x20;--host&#x20;&#039;_host_&#039;&#x20;--port&#x20;&#039;_port_&#039;&#x20;--user&#x20;&#039;_user_&#039;&#x20;--password&#x20;&#039;_password_&#039;&#x20;--vm&#x20;&#039;_scanVM_&#039;&#x20;--lxc&#x20;&#039;_scanLXC_&#039;&#x20;--backups&#x20;&#039;_scanBackups_&#039;&#x20;--nodes&#x20;&#039;_scanNodes_&#039;&#x20;--transfer_mode&#x20;tentacle&#x20;--tentacle_address&#x20;&#039;_tentacleIP_&#039;&#x20;--tentacle_port&#x20;&#039;_tentaclePort_&#039;&#x20;--as_discovery_plugin&#x20;1');
 
+-- Insert new EC2 APP
+SET @short_name = 'pandorafms.aws.ec2';
+SET @name = 'Amazon&#x20;EC2';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;AWS&#x20;EC2&#x20;instances';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_aws_ec2');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/aws_ec2');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileEC2_&#039;');
+
+-- Insert new RDS APP
+SET @short_name = 'pandorafms.aws.rds';
+SET @name = 'Amazon&#x20;RDS';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;AWS&#x20;RDS&#x20;instances';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_aws_rds');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/aws_rds');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileRDS_&#039;');
+
+-- Insert new S3 APP
+SET @short_name = 'pandorafms.aws.s3';
+SET @name = 'Amazon&#x20;S3';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;AWS&#x20;S3&#x20;buckets';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_aws_s3');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/aws_s3');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileS3_&#039;');
+
+-- Insert new Azure APP
+SET @short_name = 'pandorafms.azure.mc';
+SET @name = 'Azure&#x20;Microsoft&#x20;Compute';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;Azure&#x20;Microsoft&#x20;Compute&#x20;VMs';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_azure_mc');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/azure_vm');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileAzureMC_&#039;');
+
+-- Insert new Google APP
+SET @short_name = 'pandorafms.gcp.ce';
+SET @name = 'Google&#x20;Cloud&#x20;Compute&#x20;Engine';
+SET @section = 'cloud';
+SET @description = 'Monitor&#x20;Google&#x20;Cloud&#x20;Platform&#x20;Compute&#x20;Engine&#x20;VMs';
+SET @version = '1.0';
+INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
+SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
+
+-- Insert into tdiscovery_apps_scripts
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_gcp_ce');
+INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec2_', 'bin/google_instances');
+
+-- Insert into tdiscovery_apps_executions
+INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileGoogleCE_&#039;');
+
 INSERT INTO `tsca` VALUES (1000,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate&#x20;or&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;umask&#x20;tmp.mount;&#x20;systemctl&#x20;enable&#x20;tmp.mount.&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount.','[{\"cis\": [\"2.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1001,'Set&#x20;nodev&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"2.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1002,'Set&#x20;nosuid&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"2.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1003,'Set&#x20;noexec&#x20;option&#x20;for&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"2.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1004,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"2.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1005,'Bind&#x20;mount&#x20;the&#x20;/var/tmp&#x20;directory&#x20;to&#x20;/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;normally&#x20;a&#x20;standalone&#x20;directory&#x20;in&#x20;the&#x20;/var&#x20;file&#x20;system.&#x20;Binding&#x20;/var/tmp&#x20;to&#x20;/tmp&#x20;establishes&#x20;an&#x20;unbreakable&#x20;link&#x20;to&#x20;/tmp&#x20;that&#x20;cannot&#x20;be&#x20;removed&#x20;&#40;even&#x20;by&#x20;the&#x20;root&#x20;user&#41;.&#x20;It&#x20;also&#x20;allows&#x20;/var/tmp&#x20;to&#x20;inherit&#x20;the&#x20;same&#x20;mount&#x20;options&#x20;that&#x20;/tmp&#x20;owns,&#x20;allowing&#x20;/var/tmp&#x20;to&#x20;be&#x20;protected&#x20;in&#x20;the&#x20;same&#x20;manner&#x20;/tmp&#x20;is&#x20;protected.&#x20;It&#x20;will&#x20;also&#x20;prevent&#x20;/var&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;temporary&#x20;files&#x20;as&#x20;the&#x20;contents&#x20;of&#x20;/var/tmp&#x20;will&#x20;actually&#x20;reside&#x20;in&#x20;the&#x20;file&#x20;system&#x20;containing&#x20;/tmp.','All&#x20;programs&#x20;that&#x20;use&#x20;/var/tmp&#x20;and&#x20;/tmp&#x20;to&#x20;read/write&#x20;temporary&#x20;files&#x20;will&#x20;always&#x20;be&#x20;write&#x20;to&#x20;tmp&#x20;file&#x20;system,&#x20;preventing&#x20;a&#x20;user&#x20;from&#x20;running&#x20;the&#x20;/var&#x20;file&#x20;system&#x20;out&#x20;of&#x20;space&#x20;or&#x20;trying&#x20;to&#x20;perform&#x20;operations&#x20;that&#x20;have&#x20;been&#x20;blocked&#x20;in&#x20;the&#x20;/tmp&#x20;filesystem.','','#&#x20;mount&#x20;--bind&#x20;/tmp&#x20;/var/tmp&#x20;&#x20;and&#x20;edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;to&#x20;contain&#x20;the&#x20;following&#x20;line:&#x20;/tmp&#x20;/var/tmp&#x20;none&#x20;bind&#x20;0&#x20;0','[{\"cis\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1006,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"2.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1007,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"2.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1008,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"2.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1009,'Add&#x20;nodev&#x20;Option&#x20;to&#x20;/home','When&#x20;set&#x20;on&#x20;a&#x20;file&#x20;system,&#x20;this&#x20;option&#x20;prevents&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices&#x20;from&#x20;being&#x20;defined,&#x20;or&#x20;if&#x20;they&#x20;exist,&#x20;from&#x20;being&#x20;used&#x20;as&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.&#x20;&#x20;Note:&#x20;The&#x20;actions&#x20;in&#x20;the&#x20;item&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined&#x20;in&#x20;many&#x20;distributions.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"2.10\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1010,'Add&#x20;nodev&#x20;Option&#x20;to&#x20;/run/shm&#x20;Partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;/run/shm&#x20;&#40;temporary&#x20;filesystem&#x20;stored&#x20;in&#x20;memory&#41;&#x20;cannot&#x20;contain&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','Since&#x20;the&#x20;/run/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/run/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#x20;of&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/run/shm.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/run/shm','[{\"cis\": [\"2.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1011,'Add&#x20;nosuid&#x20;Option&#x20;to&#x20;/run/shm&#x20;Partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;/run/shm&#x20;&#40;temporary&#x20;filesystem&#x20;stored&#x20;in&#x20;memory&#41;&#x20;will&#x20;not&#x20;execute&#x20;setuid&#x20;and&#x20;setgid&#x20;on&#x20;executable&#x20;programs&#x20;as&#x20;such,&#x20;but&#x20;rather&#x20;execute&#x20;them&#x20;with&#x20;the&#x20;uid&#x20;and&#x20;gid&#x20;of&#x20;the&#x20;user&#x20;executing&#x20;the&#x20;program.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;Look&#x20;for&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/run/shm.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/run/shm','[{\"cis\": [\"2.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1012,'Add&#x20;noexec&#x20;Option&#x20;to&#x20;/run/shm&#x20;Partition','Set&#x20;noexec&#x20;on&#x20;the&#x20;shared&#x20;memory&#x20;partition&#x20;to&#x20;prevent&#x20;programs&#x20;from&#x20;executing&#x20;from&#x20;there.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;Look&#x20;for&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/run/shm.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/run/shm','[{\"cis\": [\"2.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1013,'Disable&#x20;Mounting&#x20;of&#x20;cramfs&#x20;Filesystems','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true','[{\"cis\": [\"2.18\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1014,'Disable&#x20;Mounting&#x20;of&#x20;freevxfs&#x20;Filesystems','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true','[{\"cis\": [\"2.19\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1015,'Disable&#x20;Mounting&#x20;of&#x20;jffs2&#x20;Filesystems','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true','[{\"cis\": [\"2.20\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1016,'Disable&#x20;Mounting&#x20;of&#x20;hfs&#x20;Filesystems','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true','[{\"cis\": [\"2.21\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1017,'Disable&#x20;Mounting&#x20;of&#x20;hfsplus&#x20;Filesystems','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true','[{\"cis\": [\"2.22\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1018,'Disable&#x20;Mounting&#x20;of&#x20;squashfs&#x20;Filesystems','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true','[{\"cis\": [\"2.23\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1019,'Disable&#x20;Mounting&#x20;of&#x20;udf&#x20;Filesystems','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true','[{\"cis\": [\"2.24\"]}, {\"pci_dss\": [\"2.2.5\"]}]'),(1020,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;it&#039;s&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Disable&#x20;autofs:&#x20;#&#x20;update-rc.d&#x20;autofs&#x20;disable','[{\"cis\": [\"2.25\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1021,'Set&#x20;User/Group&#x20;Owner&#x20;on&#x20;bootloader&#x20;config','Set&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;your&#x20;boot&#x20;loaders&#x20;config&#x20;file&#x20;to&#x20;the&#x20;root&#x20;user.&#x20;These&#x20;instructions&#x20;default&#x20;to&#x20;GRUB&#x20;stored&#x20;at&#x20;/boot/grub/grub.cfg&#x20;.','Setting&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;to&#x20;root&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;changing&#x20;the&#x20;file.','','Run&#x20;the&#x20;following&#x20;to&#x20;change&#x20;ownership&#x20;of&#x20;/boot/grub/grub.cfg&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"3.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1022,'Set&#x20;Permissions&#x20;on&#x20;bootloader&#x20;config','Set&#x20;permission&#x20;on&#x20;the&#x20;your&#x20;boot&#x20;loaders&#x20;config&#x20;file&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;to&#x20;set&#x20;the&#x20;permissions&#x20;fro&#x20;/boot/grub/grub.cfg&#x20;:&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"3.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1023,'Set&#x20;Boot&#x20;Loader&#x20;Password','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt:&#x20;#&#x20;grub-mkpasswd-pbkdf2&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;Your&#x20;PBKDF2&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;/etc/grub.d/00_header&#x20;or&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;cat&#x20;&lt;&lt;EOF&#x20;set&#x20;superusers=&quot;&lt;user-list&gt;&quot;&#x20;password_pbkdf2&#x20;&lt;user&gt;&#x20;&lt;encrypted-password&gt;&#x20;EOF&#x20;Unless&#x20;the&#x20;--unrestricted&#x20;option&#x20;is&#x20;added&#x20;to&#x20;CLASS&#x20;in&#x20;/etc/grub.d/10_linux&#x20;a&#x20;password&#x20;will&#x20;be&#x20;required&#x20;to&#x20;boot&#x20;in&#x20;addition&#x20;to&#x20;editing&#x20;boot&#x20;parameters:&#x20;CLASS=&quot;--class&#x20;gnu-linux&#x20;--class&#x20;gnu&#x20;--class&#x20;os&#x20;--unrestricted&quot;&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;grub&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"3.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1024,'Require&#x20;authentication&#x20;for&#x20;Single-User&#x20;mode','Setting&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user&#x20;will&#x20;force&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Run&#x20;the&#x20;following&#x20;command&#x20;and&#x20;follow&#x20;the&#x20;prompts&#x20;to&#x20;set&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;passwd&#x20;root','[{\"cis\": [\"3.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1025,'Restrict&#x20;Core&#x20;Dumps','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/security/limits.conf&#x20;file.&#x20;&#x20;*&#x20;hard&#x20;core&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;&#x20;fs.suid_dumpable&#x20;=&#x20;0','[{\"cis\": [\"4.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1026,'Enable&#x20;XD/NX&#x20;Support&#x20;on&#x20;32-bit&#x20;x86&#x20;Systems','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"4.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1027,'Enable&#x20;Randomized&#x20;Virtual&#x20;Memory&#x20;Region&#x20;Placement','Set&#x20;the&#x20;system&#x20;flag&#x20;to&#x20;force&#x20;randomized&#x20;virtual&#x20;memory&#x20;region&#x20;placement.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;&#x20;kernel.randomize_va_space&#x20;=&#x20;2','[{\"cis\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1028,'Disable&#x20;Prelink','The&#x20;prelinking&#x20;feature&#x20;changes&#x20;binaries&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;decrease&#x20;their&#x20;startup&#x20;time.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;command:&#x20;#&#x20;/usr/sbin/prelink&#x20;-ua&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;a&#x20;normal,&#x20;non-prelinked&#x20;state,&#x20;then&#x20;remove&#x20;prelink:&#x20;#&#x20;apt-get&#x20;purge&#x20;prelink','[{\"cis\": [\"4.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1029,'Activate&#x20;AppArmor','AppArmor&#x20;provides&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;&#40;MAC&#41;&#x20;system&#x20;that&#x20;greatly&#x20;augments&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;&#40;DAC&#41;&#x20;model.','For&#x20;an&#x20;action&#x20;to&#x20;occur,&#x20;both&#x20;the&#x20;traditional&#x20;DAC&#x20;permissions&#x20;must&#x20;be&#x20;satisfied&#x20;as&#x20;well&#x20;as&#x20;the&#x20;AppArmor&#x20;MAC&#x20;rules.&#x20;The&#x20;action&#x20;will&#x20;not&#x20;be&#x20;allowed&#x20;if&#x20;either&#x20;one&#x20;of&#x20;these&#x20;models&#x20;does&#x20;not&#x20;permit&#x20;the&#x20;action.&#x20;In&#x20;this&#x20;way,&#x20;AppArmor&#x20;rules&#x20;can&#x20;only&#x20;make&#x20;a&#x20;system&#039;s&#x20;permissions&#x20;more&#x20;restrictive&#x20;and&#x20;secure.','','Install&#x20;apparmor&#x20;and&#x20;apparmor-utils&#x20;if&#x20;missing&#x20;&#40;additional&#x20;profiles&#x20;can&#x20;be&#x20;found&#x20;in&#x20;the&#x20;apparmor-profiles&#x20;package&#41;:&#x20;#&#x20;apt-get&#x20;install&#x20;apparmor&#x20;apparmor-profiles&#x20;apparmor-utils&#x20;Add&#x20;apparmor=1&#x20;and&#x20;security=apparmor&#x20;to&#x20;GRUB_CMDLINE_LINUX&#x20;in&#x20;/etc/default/grub:&#x20;GRUB_CMDLINE_LINUX=&quot;apparmor=1&#x20;security=apparmor&quot;Update&#x20;grub&#x20;configuration&#x20;&#40;reboot&#x20;will&#x20;be&#x20;required&#x20;to&#x20;apply&#x20;changes&#41;:&#x20;#&#x20;update-grub&#x20;Set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"4.5\"]}]'),(1030,'Ensure&#x20;NIS&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Uninstall&#x20;the&#x20;nis&#x20;package:&#x20;#&#x20;apt-get&#x20;purge&#x20;nis','[{\"cis\": [\"5.1.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1031,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;rsh,&#x20;rlogin,&#x20;rcp&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;service&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;shell,&#x20;login,&#x20;or&#x20;exec&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#shell&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;/usr/sbin/tcpd&#x20;/usr/sbin/in.rshd&#x20;&#x20;&#x20;&#x20;#login&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;/usr/sbin/tcpd&#x20;/usr/sbin/in.rlogind&#x20;&#x20;&#x20;&#x20;#exec&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;/usr/sbin/tcpd&#x20;/usr/sbin/in.rexecd','[{\"cis\": [\"5.1.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1032,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh&#x20;,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Uninstall&#x20;the&#x20;rsh-client&#x20;and&#x20;rsh-reload-client&#x20;packages:&#x20;#&#x20;apt-get&#x20;purge&#x20;rsh-client&#x20;rsh-reload-client','[{\"cis\": [\"5.1.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1033,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;talk&#x20;or&#x20;ntalk&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#talk&#x20;dgram&#x20;udp&#x20;wait&#x20;nobody.tty&#x20;/usr/sbin/in.talkd&#x20;in.talkd&#x20;&#x20;&#x20;&#x20;#ntalk&#x20;dgram&#x20;udp&#x20;wait&#x20;nobody.tty&#x20;/usr/sbin/in.ntalkd&#x20;in.ntalkd','[{\"cis\": [\"5.1.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1034,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Uninstall&#x20;the&#x20;talk&#x20;package:&#x20;#&#x20;apt-get&#x20;purge&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1035,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;telnet&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#telnet&#x20;stream&#x20;tcp&#x20;nowait&#x20;telnetd&#x20;/usr/sbin/tcpd&#x20;/usr/sbin/in.telnetd','[{\"cis\": [\"5.1.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1036,'Ensure&#x20;tftp-server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;packages&#x20;tftp&#x20;and&#x20;atftp&#x20;are&#x20;both&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;tftp&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#tftp&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.1.7\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1037,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;xinetd&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.&#x20;&#x20;Note:&#x20;Several&#x20;other&#x20;services&#x20;recommended&#x20;to&#x20;be&#x20;disabled&#x20;in&#x20;this&#x20;benchmark&#x20;have&#x20;xinetd&#x20;versions&#x20;as&#x20;well,&#x20;if&#x20;xinetd&#x20;is&#x20;required&#x20;in&#x20;your&#x20;environment&#x20;ensure&#x20;they&#x20;are&#x20;disabled&#x20;in&#x20;xinetd&#x20;configuration&#x20;as&#x20;well.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Disable&#x20;xinetd:&#x20;#&#x20;update-rc.d&#x20;xinetd&#x20;disable','[{\"cis\": [\"5.1.8\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1038,'Ensure&#x20;chargen&#x20;is&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;chargen&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#chargen&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1039,'Ensure&#x20;daytime&#x20;is&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;daytime&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#daytime&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.3\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1040,'Ensure&#x20;echo&#x20;is&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;echo&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#echo&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1041,'Ensure&#x20;discard&#x20;is&#x20;not&#x20;enabled','discard&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;discard&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#discard&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1042,'Ensure&#x20;time&#x20;is&#x20;not&#x20;enabled','time&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;time&#x20;lines&#x20;in&#x20;/etc/inetd.conf:&#x20;#time&#x20;stream&#x20;tcp&#x20;nowait&#x20;root&#x20;internal','[{\"cis\": [\"5.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1043,'Ensure&#x20;the&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;system&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;desktops&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Uninstall&#x20;X&#x20;Windows:&#x20;#&#x20;apt-get&#x20;purge&#x20;xserver-xorg-core*','[{\"cis\": [\"6.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1044,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Since&#x20;servers&#x20;are&#x20;not&#x20;normally&#x20;used&#x20;for&#x20;printing,&#x20;this&#x20;service&#x20;is&#x20;not&#x20;needed&#x20;unless&#x20;dependencies&#x20;require&#x20;it.&#x20;If&#x20;this&#x20;is&#x20;the&#x20;case,&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;avahi-daemon:&#x20;#&#x20;update-rc.d&#x20;avahi-daemon&#x20;disable','[{\"cis\": [\"6.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1045,'Ensure&#x20;print&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;cups:&#x20;#&#x20;update-rc.d&#x20;cups&#x20;disable','[{\"cis\": [\"6.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1046,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;server&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;isc-dhcp-server:&#x20;#&#x20;update-rc.d&#x20;isc-dhcp-server&#x20;disable','[{\"cis\": [\"6.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1047,'Configure&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;','The&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://www.ntp.org.&#x20;NTP&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','It&#x20;is&#x20;recommended&#x20;that&#x20;physical&#x20;systems&#x20;and&#x20;virtual&#x20;guests&#x20;lacking&#x20;direct&#x20;access&#x20;to&#x20;the&#x20;physical&#x20;host&#039;s&#x20;clock&#x20;be&#x20;configured&#x20;as&#x20;NTP&#x20;clients&#x20;to&#x20;synchronize&#x20;their&#x20;clocks&#x20;&#40;especially&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#41;.&#x20;This&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','Install&#x20;ntp:&#x20;#&#x20;apt-get&#x20;install&#x20;ntp&#x20;&#x20;&#x20;&#x20;Ensure&#x20;the&#x20;following&#x20;lines&#x20;are&#x20;in&#x20;/etc/ntp.conf:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;Also,&#x20;make&#x20;sure&#x20;/etc/ntp.conf&#x20;has&#x20;at&#x20;least&#x20;one&#x20;NTP&#x20;server&#x20;specified:&#x20;server&#x20;&lt;ntp-server&gt;&#x20;&#x20;&#x20;&#x20;Note:&#x20;&lt;ntp-server&gt;&#x20;is&#x20;the&#x20;IP&#x20;address&#x20;or&#x20;hostname&#x20;of&#x20;a&#x20;trusted&#x20;time&#x20;server.&#x20;Configuring&#x20;an&#x20;NTP&#x20;server&#x20;is&#x20;outside&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;benchmark.','[{\"cis\": [\"6.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1048,'Ensure&#x20;LDAP&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;server&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client&#x20;or&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Uninstall&#x20;the&#x20;slapd&#x20;package:&#x20;#&#x20;apt-get&#x20;purge&#x20;slapd','[{\"cis\": [\"6.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1049,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;server&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Disable&#x20;rpcbind:&#x20;#&#x20;update-rc.d&#x20;rpcbind&#x20;disable&#x20;&#x20;&#x20;&#x20;Disable&#x20;nfs-kernel-server:&#x20;#&#x20;update-rc.d&#x20;nfs-kernel-server&#x20;disable','[{\"cis\": [\"6.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1050,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;server&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;bind9:&#x20;#&#x20;update-rc.d&#x20;bind9&#x20;disable','[{\"cis\": [\"6.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1051,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;vsftpd:&#x20;#&#x20;update-rc.d&#x20;vsftpd&#x20;disable','[{\"cis\": [\"6.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1052,'Ensure&#x20;HTTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;apache2:&#x20;#&#x20;update-rc.d&#x20;apache2&#x20;disable','[{\"cis\": [\"6.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1053,'Ensure&#x20;IMAP&#x20;and&#x20;POP&#x20;server&#x20;is&#x20;not&#x20;enabled','Dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;to&#x20;this&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;dovecot:&#x20;#&#x20;update-rc.d&#x20;dovecot&#x20;disable','[{\"cis\": [\"6.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1054,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;samba:&#x20;#&#x20;update-rc.d&#x20;samba&#x20;disable','[{\"cis\": [\"6.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1055,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Disable&#x20;squid3:&#x20;#&#x20;update-rc.d&#x20;squid3&#x20;disable','[{\"cis\": [\"6.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1056,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;communicates&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.','','Disable&#x20;snmpd:&#x20;#&#x20;update-rc.d&#x20;snmpd&#x20;disable','[{\"cis\": [\"6.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1057,'Configure&#x20;Mail&#x20;Transfer&#x20;Agent&#x20;for&#x20;Local-Only&#x20;Mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.&#x20;Note:&#x20;The&#x20;remediation&#x20;given&#x20;here&#x20;provides&#x20;instructions&#x20;for&#x20;configuring&#x20;the&#x20;postfix&#x20;mail&#x20;server,&#x20;depending&#x20;on&#x20;your&#x20;environment&#x20;you&#x20;may&#x20;have&#x20;an&#x20;alternative&#x20;MTA&#x20;installed&#x20;such&#x20;as&#x20;sendmail.&#x20;&#x20;If&#x20;this&#x20;is&#x20;the&#x20;case&#x20;consult&#x20;the&#x20;documentation&#x20;for&#x20;your&#x20;installed&#x20;MTA&#x20;to&#x20;configure&#x20;the&#x20;recommended&#x20;state.','','Edit&#x20;/etc/exim4/update-exim4.conf.conf&#x20;and&#x20;edit&#x20;the&#x20;dc_local_interfaces&#x20;line&#x20;to&#x20;remove&#x20;non&#x20;loopback&#x20;addresses:&#x20;dc_local_interfaces=&#039;127.0.0.1&#x20;;&#x20;::1&#039;&#x20;&#x20;&#x20;&#x20;Run&#x20;update-exim4.conf:&#x20;#&#x20;update-exim4.conf&#x20;&#x20;&#x20;&#x20;Reload&#x20;exim4&#x20;configuration:&#x20;#&#x20;service&#x20;exim4&#x20;reload','[{\"cis\": [\"6.15\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1058,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Set&#x20;RSYNC_ENABLE&#x20;to&#x20;false&#x20;in&#x20;/etc/default/rsync:&#x20;RSYNC_ENABLE=false','[{\"cis\": [\"6.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1059,'Disable&#x20;IP&#x20;Forwarding','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;server&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.&#x20;If&#x20;the&#x20;server&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used&#x20;as&#x20;a&#x20;router,&#x20;set&#x20;the&#x20;flag&#x20;to&#x20;0.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;server&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;net.ipv4.ip_forward&#x20;parameter&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.ip_forward=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1060,'Disable&#x20;Send&#x20;Packet&#x20;Redirects','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;net.ipv4.conf.all.send_redirects&#x20;and&#x20;net.ipv4.conf.default.send_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1061,'Disable&#x20;Source&#x20;Routed&#x20;Packet&#x20;Acceptance','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;server&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;server&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;servers.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1062,'Disable&#x20;ICMP&#x20;Redirect&#x20;Acceptance','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv4.conf.default.accept_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1063,'Disable&#x20;Secure&#x20;ICMP&#x20;Redirect&#x20;Acceptance','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;net.ipv4.conf.all.secure_redirects&#x20;and&#x20;net.ipv4.conf.default.secure_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1064,'Log&#x20;Suspicious&#x20;Packets','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;net.ipv4.conf.all.log_martians&#x20;and&#x20;net.ipv4.conf.default.log_martians&#x20;parameters&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.log_martians=1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.log_martians=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1065,'Enable&#x20;Ignore&#x20;Broadcast&#x20;Requests','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1066,'Enable&#x20;Bad&#x20;Error&#x20;Message&#x20;Protection','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1067,'Enable&#x20;RFC-recommended&#x20;Source&#x20;Route&#x20;Validation','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;server,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;parameters&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.rp_filter=1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.rp_filter=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1068,'Enable&#x20;TCP&#x20;SYN&#x20;Cookies','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;server&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;server&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;server&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;net.ipv4.tcp_syncookies&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.tcp_syncookies=1&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"7.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1069,'Disable&#x20;IPv6&#x20;Router&#x20;Advertisements','This&#x20;setting&#x20;disables&#x20;the&#x20;systems&#x20;ability&#x20;to&#x20;accept&#x20;router&#x20;advertisements','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;net.ipv6.conf.all.accept_ra&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;parameter&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv6.conf.all.accept_ra=0&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.accept_ra=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"7.3.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1070,'Disable&#x20;IPv6&#x20;Redirect&#x20;Acceptance','This&#x20;setting&#x20;prevents&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;ICMP&#x20;redirects.&#x20;ICMP&#x20;redirects&#x20;tell&#x20;the&#x20;system&#x20;about&#x20;alternate&#x20;routes&#x20;for&#x20;sending&#x20;traffic.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;ICMP&#x20;redirects&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;net.ipv6.conf.all.accept_redirects&#x20;and&#x20;net.ipv6.conf.default.accept_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"7.3.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1071,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;few&#x20;organizations&#x20;have&#x20;implemented&#x20;IPv6.','If&#x20;IPv6&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;/etc/sysctl.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;net.ipv6.conf.all.disable_ipv6=1&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.disable_ipv6=1&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.lo.disable_ipv6=1&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;or&#x20;reboot&#x20;to&#x20;apply&#x20;the&#x20;changes:&#x20;#&#x20;sysctl&#x20;-p','[{\"cis\": [\"7.3.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1072,'Install&#x20;TCP&#x20;Wrappers','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Install&#x20;tcpd&#x20;:&#x20;#&#x20;apt-get&#x20;install&#x20;tcpd&#x20;To&#x20;verify&#x20;if&#x20;a&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;ldd&#x20;&lt;path-to-daemon&gt;&#x20;|&#x20;grep&#x20;libwrap.so&#x20;If&#x20;there&#x20;is&#x20;any&#x20;output,&#x20;then&#x20;the&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers.','[{\"cis\": [\"7.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1073,'Create&#x20;/etc/hosts.allow','The&#x20;/etc/hosts.allow&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.deny&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;server.','','Create&#x20;/etc/hosts.allow:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;...&quot;&#x20;&gt;/etc/hosts.allow&#x20;&#x20;where&#x20;each&#x20;&lt;net&gt;/&lt;mask&gt;&#x20;combination&#x20;&#x20;&#40;for&#x20;example,&#x20;&quot;192.168.1.0/255.255.255.0&quot;&#41;&#x20;represents&#x20;one&#x20;network&#x20;block&#x20;in&#x20;use&#x20;by&#x20;your&#x20;organization&#x20;that&#x20;requires&#x20;access&#x20;to&#x20;this&#x20;system.','[{\"cis\": [\"7.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1074,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.allow','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"7.4.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1075,'Create&#x20;/etc/hosts.deny','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.deny&#x20;file&#x20;serves&#x20;as&#x20;a&#x20;failsafe&#x20;so&#x20;that&#x20;any&#x20;host&#x20;not&#x20;specified&#x20;in&#x20;/etc/hosts.allow&#x20;is&#x20;denied&#x20;access&#x20;to&#x20;the&#x20;server.','','Create&#x20;/etc/hosts.deny:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;ALL&quot;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"7.4.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1076,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.deny','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"7.4.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1077,'Disable&#x20;DCCP','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;echo&#x20;&quot;install&#x20;dccp&#x20;/bin/true&quot;&#x20;&gt;&gt;&#x20;/etc/modprobe.d/CIS.conf','[{\"cis\": [\"7.5.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1078,'Disable&#x20;SCTP','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;echo&#x20;&quot;install&#x20;sctp&#x20;/bin/true&quot;&#x20;&gt;&gt;&#x20;/etc/modprobe.d/CIS.conf','[{\"cis\": [\"7.5.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1079,'Disable&#x20;RDS','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;echo&#x20;&quot;install&#x20;rds&#x20;/bin/true&quot;&#x20;&gt;&gt;&#x20;/etc/modprobe.d/CIS.conf','[{\"cis\": [\"7.5.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1080,'Disable&#x20;TIPC','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;echo&#x20;&quot;install&#x20;tipc&#x20;/bin/true&quot;&#x20;&gt;&gt;&#x20;/etc/modprobe.d/CIS.conf','[{\"cis\": [\"7.5.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1081,'Deactivate&#x20;Wireless&#x20;Interfaces','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.&#x20;Debian&#x20;provides&#x20;the&#x20;nmcli&#x20;interface&#x20;which&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;and&#x20;use&#x20;wireless&#x20;networks.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Use&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;wireless:&#x20;#&#x20;nmcli&#x20;nm&#x20;wifi&#x20;off','[{\"cis\": [\"7.6\"]}, {\"pci_dss\": [\"1.2.3\"]}, {\"tsc\": [\"CC6.6\"]}]'),(1082,'Ensure&#x20;Firewall&#x20;is&#x20;active','IPtables&#x20;is&#x20;an&#x20;application&#x20;that&#x20;allows&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;configure&#x20;the&#x20;IPv4&#x20;tables,&#x20;chains&#x20;and&#x20;rules&#x20;provided&#x20;by&#x20;the&#x20;Linux&#x20;kernel&#x20;firewall.&#x20;&#x20;The&#x20;iptables-persistent&#x20;package&#x20;in&#x20;Debian&#x20;provides&#x20;one&#x20;way&#x20;to&#x20;ensure&#x20;iptables&#x20;rules&#x20;are&#x20;reapplied&#x20;on&#x20;reboot.&#x20;Note:&#x20;the&#x20;audit&#x20;and&#x20;remediation&#x20;included&#x20;provide&#x20;instructions&#x20;for&#x20;using&#x20;iptables-persistent&#x20;to&#x20;reapply&#x20;iptables&#x20;rules.&#x20;&#x20;Other&#x20;methods&#x20;are&#x20;available&#x20;which&#x20;may&#x20;be&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;and&#x20;may&#x20;conflict&#x20;with&#x20;these&#x20;steps.','IPtables&#x20;provides&#x20;extra&#x20;protection&#x20;for&#x20;the&#x20;Linux&#x20;system&#x20;by&#x20;limiting&#x20;communications&#x20;in&#x20;and&#x20;out&#x20;of&#x20;the&#x20;box&#x20;to&#x20;specific&#x20;IPv4&#x20;addresses&#x20;and&#x20;ports.','','Install&#x20;the&#x20;iptables&#x20;and&#x20;iptables-persistent&#x20;packages:&#x20;#&#x20;apt-get&#x20;install&#x20;iptables&#x20;iptables-persistent&#x20;&#x20;&#x20;&#x20;Enable&#x20;the&#x20;iptables-persistent&#x20;service:&#x20;#&#x20;update-rc.d&#x20;iptables-persistent&#x20;enable','[{\"cis\": [\"7.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.1\"]}]'),(1083,'Configure&#x20;Audit&#x20;Log&#x20;Storage&#x20;Size','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;max_log_file&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;&#x20;Note:&#x20;MB&#x20;is&#x20;the&#x20;number&#x20;of&#x20;MegaBytes&#x20;the&#x20;file&#x20;can&#x20;be.','[{\"cis\": [\"8.1.1.1\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(1084,'Disable&#x20;System&#x20;on&#x20;Audit&#x20;Log&#x20;Full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/auditd.conf&#x20;file.&#x20;space_left_action&#x20;=&#x20;email&#x20;action_mail_acct&#x20;=&#x20;root&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"8.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(1085,'Keep&#x20;All&#x20;Auditing&#x20;Information','Normally,&#x20;auditd&#x20;will&#x20;hold&#x20;4&#x20;logs&#x20;of&#x20;maximum&#x20;log&#x20;file&#x20;size&#x20;before&#x20;deleting&#x20;older&#x20;log&#x20;files.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/auditd.conf&#x20;file.&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"8.1.1.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(1086,'Install&#x20;and&#x20;Enable&#x20;auditd&#x20;Service','Install&#x20;and&#x20;turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Install&#x20;auditd:&#x20;#&#x20;apt-get&#x20;install&#x20;auditd&#x20;If&#x20;needed&#x20;enable&#x20;auditd&#x20;in&#x20;/etc/rc*.d:&#x20;#&#x20;update-rc.d&#x20;auditd&#x20;enable','[{\"cis\": [\"8.1.2\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1087,'Enable&#x20;Auditing&#x20;for&#x20;Processes&#x20;That&#x20;Start&#x20;Prior&#x20;to&#x20;auditd','Configure&#x20;grub&#x20;or&#x20;lilo&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','Edit&#x20;/etc/default/grub&#x20;to&#x20;include&#x20;audit=1&#x20;as&#x20;part&#x20;of&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;And&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"8.1.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}]'),(1088,'Record&#x20;Events&#x20;That&#x20;Modify&#x20;Date&#x20;and&#x20;Time&#x20;Information','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.4\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1089,'Record&#x20;Events&#x20;That&#x20;Modify&#x20;User/Group&#x20;Information','Record&#x20;events&#x20;affecting&#x20;the&#x20;group,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.5\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1090,'Record&#x20;Events&#x20;That&#x20;Modify&#x20;the&#x20;System&#039;s&#x20;Network&#x20;Environment','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;prelogin&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;&#x20;and&#x20;/etc/network&#x20;&#40;directory&#x20;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;&#x20;files.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/network&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;exit,always&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;-a&#x20;exit,always&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;exit,always&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;-w&#x20;/etc/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.6\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1091,'Record&#x20;Events&#x20;That&#x20;Modify&#x20;the&#x20;System&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;directory.','Changes&#x20;to&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;/etc/audit/audit.rules&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.7\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1092,'Collect&#x20;Login&#x20;and&#x20;Logout&#x20;Events','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.&amp;&amp;&#x20;r:rules&#x20;file.&#x20;-w&#x20;/var/log/faillog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1093,'Collect&#x20;Session&#x20;Initiation&#x20;Information','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown&#x20;and&#x20;reboot&#x20;events.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;Note:&#x20;Use&#x20;the&#x20;last&#x20;command&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;last&#x20;-f&#x20;/var/run/utmp&#41;','[{\"cis\": [\"8.1.9\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.3\"]}]'),(1094,'Collect&#x20;Discretionary&#x20;Access&#x20;Control&#x20;Permission&#x20;Modification&#x20;Events','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permis&amp;&amp;&#x20;r:sions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown,&#x20;fchown,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr,&#x20;lsetxattr,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr,&#x20;lremovexattr,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;userids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.10\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1095,'Collect&#x20;Unsuccessful&#x20;Unauthorized&#x20;Access&#x20;Attempts&#x20;to&#x20;Files','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;creat&#41;,&#x20;opening&#x20;&#40;open,&#x20;openat&#41;&#x20;and&#x20;truncation&#x20;&#40;truncate,&#x20;ftruncate&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;nonprivileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;500&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.11\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1096,'Collect&#x20;Successful&#x20;File&#x20;System&#x20;Mounts','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1097,'Collect&#x20;File&#x20;Deletion&#x20;Events&#x20;by&#x20;User','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;the&#x20;following&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-P&#x20;1-HUP&#x20;auditd','[{\"cis\": [\"8.1.14\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(1098,'Collect&#x20;Changes&#x20;to&#x20;System&#x20;Administration&#x20;Scope&#x20;&#40;sudoers&#41;','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd','[{\"cis\": [\"8.1.15\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1099,'Collect&#x20;System&#x20;Administrator&#x20;Actions&#x20;&#40;sudolog&#41;','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;auditd&#x20;#&#x20;pkill&#x20;-HUP&#x20;-P&#x20;1&#x20;auditd&#x20;Note:&#x20;The&#x20;system&#x20;must&#x20;be&#x20;configured&#x20;with&#x20;su&#x20;disabled&#x20;&#40;See&#x20;Item&#x20;9.5&#x20;Restrict&#x20;Access&#x20;to&#x20;the&#x20;su&#x20;Command&#41;&#x20;to&#x20;force&#x20;all&#x20;command&#x20;execution&#x20;through&#x20;sudo.&#x20;This&#x20;will&#x20;not&#x20;be&#x20;effective&#x20;on&#x20;the&#x20;console,&#x20;as&#x20;administrators&#x20;can&#x20;log&#x20;in&#x20;as&#x20;root','[{\"cis\": [\"8.1.16\"]}, {\"cis_csc\": [\"5.1\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.3\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1100,'Collect&#x20;Kernel&#x20;Module&#x20;Loading&#x20;and&#x20;Unloading','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;For&#x20;32&#x20;bit&#x20;systems,&#x20;add&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;For&#x20;64&#x20;bit&#x20;systems,&#x20;add&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules','[{\"cis\": [\"8.1.17\"]}, {\"cis_csc\": [\"3\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC7.3\", \"CC7.4\", \"CC6.8\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1101,'Make&#x20;the&#x20;Audit&#x20;Configuration&#x20;Immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;-e&#x20;2&#x20;Note:&#x20;This&#x20;must&#x20;be&#x20;the&#x20;last&#x20;line&#x20;in&#x20;the&#x20;/etc/audit/audit.rules&#x20;file','[{\"cis\": [\"8.1.18\"]}, {\"cis_csc\": [\"3\", \"6\"]}, {\"pci_dss\": [\"10.5\"]}]'),(1102,'Install&#x20;the&#x20;rsyslog&#x20;package','The&#x20;rsyslog&#x20;package&#x20;is&#x20;a&#x20;third&#x20;party&#x20;package&#x20;that&#x20;provides&#x20;many&#x20;enhancements&#x20;to&#x20;syslog,&#x20;such&#x20;as&#x20;multi-threading,&#x20;TCP&#x20;communication,&#x20;message&#x20;filtering&#x20;and&#x20;data&#x20;base&#x20;support.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;the&#x20;rsyslog&#x20;package:&#x20;#&#x20;apt-get&#x20;install&#x20;rsyslog','[{\"cis\": [\"8.2.2\"]}, {\"cis_csc\": [\"6.2\"]}]'),(1103,'Ensure&#x20;the&#x20;rsyslog&#x20;Service&#x20;is&#x20;activated','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;will&#x20;not&#x20;have&#x20;a&#x20;syslog&#x20;service&#x20;running.','','Enable&#x20;rsyslog:&#x20;#&#x20;update-rc.d&#x20;rsyslog&#x20;enable','[{\"cis\": [\"8.2.2\"]}, {\"cis_csc\": [\"6.2\"]}]'),(1104,'Configure&#x20;rsyslog&#x20;to&#x20;Send&#x20;Logs&#x20;to&#x20;a&#x20;Remote&#x20;Log&#x20;Host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;&#x20;#&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;rsyslogd&#x20;&#x20;&#x20;&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd&#x20;&#x20;&#x20;&#x20;Note:&#x20;The&#x20;double&#x20;&quot;at&quot;&#x20;sign&#x20;&#40;@@&#41;&#x20;directs&#x20;rsyslog&#x20;to&#x20;use&#x20;TCP&#x20;to&#x20;send&#x20;log&#x20;messages&#x20;to&#x20;the&#x20;server,&#x20;which&#x20;is&#x20;a&#x20;more&#x20;reliable&#x20;transport&#x20;mechanism&#x20;than&#x20;the&#x20;default&#x20;UDP&#x20;protocol.','[{\"cis\": [\"8.2.5\"]}, {\"cis_csc\": [\"6.6\"]}]'),(1105,'Accept&#x20;Remote&#x20;rsyslog&#x20;Messages&#x20;Only&#x20;on&#x20;Designated&#x20;Log&#x20;Hosts','By&#x20;default,&#x20;rsyslog&#x20;does&#x20;not&#x20;listen&#x20;for&#x20;log&#x20;messages&#x20;coming&#x20;in&#x20;from&#x20;remote&#x20;systems.&#x20;The&#x20;ModLoad&#x20;tells&#x20;rsyslog&#x20;to&#x20;load&#x20;the&#x20;imtcp.so&#x20;module&#x20;so&#x20;it&#x20;can&#x20;listen&#x20;over&#x20;a&#x20;network&#x20;via&#x20;TCP.&#x20;The&#x20;InputTCPServerRun&#x20;option&#x20;instructs&#x20;rsyslogd&#x20;to&#x20;listen&#x20;on&#x20;the&#x20;specified&#x20;TCP&#x20;port.','The&#x20;guidance&#x20;in&#x20;the&#x20;section&#x20;ensures&#x20;that&#x20;remote&#x20;log&#x20;hosts&#x20;are&#x20;configured&#x20;to&#x20;only&#x20;accept&#x20;rsyslog&#x20;data&#x20;from&#x20;hosts&#x20;within&#x20;the&#x20;specified&#x20;domain&#x20;and&#x20;that&#x20;those&#x20;systems&#x20;that&#x20;are&#x20;not&#x20;designed&#x20;to&#x20;be&#x20;log&#x20;hosts&#x20;do&#x20;not&#x20;accept&#x20;any&#x20;remote&#x20;rsyslog&#x20;messages.&#x20;This&#x20;provides&#x20;protection&#x20;from&#x20;spoofed&#x20;log&#x20;data&#x20;and&#x20;ensures&#x20;that&#x20;system&#x20;administrators&#x20;are&#x20;reviewing&#x20;reasonably&#x20;complete&#x20;syslog&#x20;data&#x20;in&#x20;a&#x20;central&#x20;location.','','For&#x20;hosts&#x20;that&#x20;are&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;un-comment&#x20;the&#x20;following&#x20;lines:&#x20;$ModLoad&#x20;imtcp.so&#x20;&#x20;&#x20;&#x20;$InputTCPServerRun&#x20;514&#x20;&#x20;&#x20;&#x20;Execute&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;rsyslogd:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"8.2.6\"]}, {\"cis_csc\": [\"9.1\"]}]'),(1106,'Install&#x20;AIDE','In&#x20;some&#x20;installations,&#x20;AIDE&#x20;is&#x20;not&#x20;installed&#x20;automatically','Install&#x20;AIDE&#x20;to&#x20;make&#x20;use&#x20;of&#x20;the&#x20;file&#x20;integrity&#x20;features&#x20;to&#x20;monitor&#x20;critical&#x20;files&#x20;for&#x20;changes&#x20;that&#x20;could&#x20;affect&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','Install&#x20;AIDE:&#x20;#&#x20;apt-get&#x20;install&#x20;aide&#x20;Initialize&#x20;AIDE:&#x20;#&#x20;aideinit&#x20;#&#x20;cp&#x20;/var/lib/aide/aide.db.new&#x20;/var/lib/aide/aide.db&#x20;Note:&#x20;The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;AIDE&#x20;because&#x20;it&#x20;alters&#x20;binaries&#x20;to&#x20;speed&#x20;up&#x20;their&#x20;start&#x20;up&#x20;times.&#x20;Run&#x20;/usr/sbin/prelink&#x20;-ua&#x20;to&#x20;restore&#x20;the&#x20;binaries&#x20;to&#x20;their&#x20;prelinked&#x20;state,&#x20;thus&#x20;avoiding&#x20;false&#x20;positives&#x20;from&#x20;AIDE.','[{\"cis\": [\"8.3.1\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}]'),(1107,'Implement&#x20;Periodic&#x20;Execution&#x20;of&#x20;File&#x20;Integrity','Implement&#x20;periodic&#x20;file&#x20;checking,&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Execute&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;Note:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;instance&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.','[{\"cis\": [\"8.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1108,'Enable&#x20;cron&#x20;Daemon','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Enable&#x20;cron:&#x20;#&#x20;update-rc.d&#x20;cron&#x20;enable&#x20;&#x20;&#x20;&#x20;Enable&#x20;anacron:&#x20;#&#x20;update-rc.d&#x20;anacron&#x20;enable','[{\"cis\": [\"9.1.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1109,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/crontab','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"9.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1110,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.hourly','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"9.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1111,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.daily','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"9.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1112,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.weekly','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"9.1.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1113,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.monthly','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"9.1.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1114,'Set&#x20;User/Group&#x20;Owner&#x20;and&#x20;Permission&#x20;on&#x20;/etc/cron.d','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"9.1.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1115,'Restrict&#x20;at/cron&#x20;to&#x20;Authorized&#x20;Users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','#&#x20;/bin/rm&#x20;/etc/cron.deny&#x20;&#x20;&#x20;&#x20;#&#x20;/bin/rm&#x20;/etc/at.deny&#x20;&#x20;&#x20;&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;&#x20;&#x20;&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"9.1.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1116,'Set&#x20;Password&#x20;Creation&#x20;Requirement&#x20;Parameters&#x20;Using&#x20;pam_cracklib','The&#x20;pam_cracklib&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_cracklib.so&#x20;options.&#x20;&#x20;#&#x20;retry=3&#x20;-&#x20;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure.&#x20;&#x20;#&#x20;minlen=14&#x20;-&#x20;password&#x20;must&#x20;be&#x20;14&#x20;characters&#x20;or&#x20;more&#x20;#&#x20;dcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;digit&#x20;#&#x20;ucredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;uppercase&#x20;character&#x20;#&#x20;ocredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;special&#x20;character&#x20;#&#x20;lcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;lowercase&#x20;character&#x20;&#x20;&#x20;&#x20;The&#x20;setting&#x20;shown&#x20;above&#x20;is&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','1&#41;&#x20;Install&#x20;the&#x20;libpam-cracklib&#x20;package:&#x20;#&#x20;apt-get&#x20;install&#x20;libpam-cracklib&#x20;2&#41;&#x20;Set&#x20;the&#x20;pam_cracklib.so&#x20;parameters&#x20;as&#x20;follows&#x20;in&#x20;/etc/pam.d/common-password:&#x20;password&#x20;required&#x20;pam_cracklib.so&#x20;retry=3&#x20;minlen=14&#x20;dcredit=-1&#x20;ucredit=-1&#x20;ocredit=-1&#x20;lcredit=-1','[{\"cis\": [\"9.2.1\"]}, {\"pci_dss\": [\"8.2.3\"]}]'),(1117,'Set&#x20;Lockout&#x20;for&#x20;Failed&#x20;Password&#x20;Attempts','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;file&#x20;/etc/pam.d/login.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.&#x20;&#x20;Check&#x20;the&#x20;documentation&#x20;for&#x20;each&#x20;secondary&#x20;program&#x20;for&#x20;instructions&#x20;on&#x20;how&#x20;to&#x20;configure&#x20;them&#x20;to&#x20;work&#x20;with&#x20;PAM.&#x20;&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;to&#x20;the&#x20;policy&#x20;in&#x20;effect&#x20;at&#x20;your&#x20;site.','Locking&#x20;out&#x20;userIDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/login&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900&#x20;&#x20;&#x20;&#x20;Note:&#x20;If&#x20;a&#x20;user&#x20;has&#x20;been&#x20;locked&#x20;out&#x20;because&#x20;they&#x20;have&#x20;reached&#x20;the&#x20;maximum&#x20;consecutive&#x20;failure&#x20;count&#x20;defined&#x20;by&#x20;deny=&#x20;in&#x20;the&#x20;pam_tally2.so&#x20;module,&#x20;the&#x20;user&#x20;can&#x20;be&#x20;unlocked&#x20;by&#x20;issuing&#x20;the&#x20;command&#x20;/sbin/pam_tally2&#x20;-u&#x20;&lt;username&gt;&#x20;--reset.&#x20;This&#x20;command&#x20;sets&#x20;the&#x20;failed&#x20;count&#x20;to&#x20;0,&#x20;effectively&#x20;unlocking&#x20;the&#x20;user.','[{\"cis\": [\"9.2.2\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(1118,'Limit&#x20;Password&#x20;Reuse','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;the&#x20;pam_unix.so&#x20;remember&#x20;parameter&#x20;to&#x20;5&#x20;in&#x20;/etc/pam.d/common-password:&#x20;password&#x20;[success=1&#x20;default=ignore]&#x20;&#x20;pam_unix.so&#x20;obscure&#x20;sha512&#x20;remember=5&#x20;&#x20;&#x20;&#x20;Note:&#x20;The&#x20;default&#x20;password&#x20;setting&#x20;in&#x20;this&#x20;document&#x20;is&#x20;the&#x20;last&#x20;5&#x20;passwords.&#x20;Change&#x20;this&#x20;number&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;site&#039;s&#x20;password&#x20;policy.','[{\"cis\": [\"9.2.3\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(1119,'Set&#x20;SSH&#x20;Protocol&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"9.3.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1120,'Set&#x20;LogLevel&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifices&#x20;that&#x20;record&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.&#x20;INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"9.3.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1121,'Set&#x20;Permissions&#x20;on&#x20;/etc/ssh/sshd_config','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','If&#x20;the&#x20;user&#x20;and&#x20;group&#x20;ownership&#x20;of&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;If&#x20;the&#x20;permissions&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;chmod&#x20;600&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"9.3.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1122,'Disable&#x20;SSH&#x20;X11&#x20;Forwarding','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"9.3.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1123,'Set&#x20;SSH&#x20;MaxAuthTries&#x20;to&#x20;4&#x20;or&#x20;Less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;it&#x20;is&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"9.3.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1124,'Set&#x20;SSH&#x20;IgnoreRhosts&#x20;to&#x20;Yes','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"9.3.6\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1125,'Set&#x20;SSH&#x20;HostbasedAuthentication&#x20;to&#x20;No','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"9.3.7\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1126,'Disable&#x20;SSH&#x20;Root&#x20;Login','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"9.3.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1127,'Set&#x20;SSH&#x20;PermitEmptyPasswords&#x20;to&#x20;No','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"9.3.9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1128,'Do&#x20;Not&#x20;Allow&#x20;Users&#x20;to&#x20;Set&#x20;Environment&#x20;Options','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"9.3.10\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(1129,'Use&#x20;Only&#x20;Approved&#x20;Cipher&#x20;in&#x20;Counter&#x20;Mode','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Based&#x20;on&#x20;research&#x20;conducted&#x20;at&#x20;various&#x20;institutions,&#x20;it&#x20;was&#x20;determined&#x20;that&#x20;the&#x20;symmetric&#x20;portion&#x20;of&#x20;the&#x20;SSH&#x20;Transport&#x20;Protocol&#x20;&#40;as&#x20;described&#x20;in&#x20;RFC&#x20;4253&#41;&#x20;has&#x20;security&#x20;weaknesses&#x20;that&#x20;allowed&#x20;recovery&#x20;of&#x20;up&#x20;to&#x20;32&#x20;bits&#x20;of&#x20;plaintext&#x20;from&#x20;a&#x20;block&#x20;of&#x20;ciphertext&#x20;that&#x20;was&#x20;encrypted&#x20;with&#x20;the&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBD&#41;&#x20;method.&#x20;From&#x20;that&#x20;research,&#x20;new&#x20;Counter&#x20;mode&#x20;algorithms&#x20;&#40;as&#x20;described&#x20;in&#x20;RFC4344&#41;&#x20;were&#x20;designed&#x20;that&#x20;are&#x20;not&#x20;vulnerable&#x20;to&#x20;these&#x20;types&#x20;of&#x20;attacks&#x20;and&#x20;these&#x20;algorithms&#x20;are&#x20;now&#x20;recommended&#x20;for&#x20;standard&#x20;use.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Ciphers&#x20;aes128-ctr,aes192-ctr,aes256-ctr','[{\"cis\": [\"9.3.11\"]}]'),(1130,'Set&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;for&#x20;User&#x20;Login','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening..&#x20;&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;ClientAliveInterval&#x20;300&#x20;&#x20;&#x20;&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"9.3.12\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(1131,'Limit&#x20;Access&#x20;via&#x20;SSH','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers,&#x20;AllowGroups,&#x20;DenyUsers,&#x20;DenyGroups.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;AllowGroups&#x20;&lt;grouplist&gt;&#x20;&#x20;&#x20;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"9.3.13\"]}, {\"pci_dss\": [\"8.1\"]}]'),(1132,'Set&#x20;SSH&#x20;Banner','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Consult&#x20;with&#x20;your&#x20;legal&#x20;department&#x20;for&#x20;the&#x20;appropriate&#x20;warning&#x20;banner&#x20;for&#x20;your&#x20;site.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"9.3.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1133,'Restrict&#x20;Access&#x20;to&#x20;the&#x20;su&#x20;Command','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','1&#41;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid&#x20;2&#41;&#x20;Once&#x20;this&#x20;is&#x20;done,&#x20;create&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;statement&#x20;in&#x20;the&#x20;/etc/group&#x20;file.','[{\"cis\": [\"9.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1134,'Set&#x20;Password&#x20;Expiration&#x20;Days','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;90&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;90&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MAX_DAYS&#x20;90&#x20;&#x20;&#x20;&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"10.1.1\"]}, {\"pci_dss\": [\"8.2.4\"]}]'),(1135,'Set&#x20;Password&#x20;Change&#x20;Minimum&#x20;Number&#x20;of&#x20;Days','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;&#x20;&#x20;&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"10.1.2\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1136,'Set&#x20;Password&#x20;Expiring&#x20;Warning&#x20;Days','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;&#x20;&#x20;&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"10.1.3\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1137,'Set&#x20;Default&#x20;Group&#x20;for&#x20;root&#x20;Account','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','#&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"10.3\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1138,'Set&#x20;Default&#x20;umask&#x20;for&#x20;Users','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;.profile,&#x20;.bashrc,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;&#x20;Note:&#x20;The&#x20;directives&#x20;in&#x20;this&#x20;section&#x20;apply&#x20;to&#x20;bash&#x20;and&#x20;shell.&#x20;If&#x20;other&#x20;shells&#x20;are&#x20;supported&#x20;on&#x20;the&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;their&#x20;configuration&#x20;files&#x20;also&#x20;are&#x20;checked.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;and&#x20;/etc/profile.d/cis.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;the&#x20;UMASK&#x20;parameter&#x20;as&#x20;shown:&#x20;umask&#x20;077','[{\"cis\": [\"10.4\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1139,'Lock&#x20;Inactive&#x20;User&#x20;Accounts','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;35&#x20;or&#x20;more&#x20;days&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','#&#x20;useradd&#x20;-D&#x20;-f&#x20;35','[{\"cis\": [\"10.5\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1140,'Set&#x20;Warning&#x20;Banner&#x20;for&#x20;Standard&#x20;Login&#x20;Services','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;prior&#x20;to&#x20;the&#x20;login&#x20;prompt&#x20;on&#x20;the&#x20;system&#039;s&#x20;console&#x20;and&#x20;serial&#x20;devices,&#x20;and&#x20;also&#x20;prior&#x20;to&#x20;logins&#x20;via&#x20;telnet.&#x20;The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;is&#x20;generally&#x20;displayed&#x20;after&#x20;all&#x20;successful&#x20;logins,&#x20;no&#x20;matter&#x20;where&#x20;the&#x20;user&#x20;is&#x20;logging&#x20;in&#x20;from,&#x20;but&#x20;is&#x20;thought&#x20;to&#x20;be&#x20;less&#x20;useful&#x20;because&#x20;it&#x20;only&#x20;provides&#x20;notification&#x20;to&#x20;the&#x20;user&#x20;after&#x20;the&#x20;machine&#x20;has&#x20;been&#x20;accessed.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Consult&#x20;with&#x20;your&#x20;organization&#039;s&#x20;legal&#x20;counsel&#x20;for&#x20;the&#x20;appropriate&#x20;wording&#x20;for&#x20;your&#x20;specific&#x20;organization.','','#&#x20;touch&#x20;/etc/motd&#x20;&#x20;&#x20;&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"11.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1141,'Remove&#x20;OS&#x20;Information&#x20;from&#x20;Login&#x20;Warning&#x20;Banners','Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.','Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;uname&#x20;-a&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd,&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;and&#x20;remove&#x20;any&#x20;lines&#x20;containing&#x20;m,&#x20;&#x0d;,&#x20;s&#x20;or&#x20;v.','[{\"cis\": [\"11.2\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1142,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','Debian&#x20;defaults&#x20;to&#x20;using&#x20;GNOME&#x20;Display&#x20;Manager&#x20;for&#x20;graphical&#x20;login&#x20;session&#x20;management.&#x20;KDM&#x20;is&#x20;also&#x20;available&#x20;as&#x20;well&#x20;as&#x20;lightdm.&#x20;Instructions&#x20;are&#x20;provided&#x20;for&#x20;GDM&#x20;only,&#x20;if&#x20;you&#x20;are&#x20;using&#x20;another&#x20;display&#x20;manager&#x20;you&#x20;will&#x20;need&#x20;to&#x20;follow&#x20;different&#x20;procedures&#x20;to&#x20;audit&#x20;and&#x20;remediate&#x20;this&#x20;setting.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Consult&#x20;with&#x20;your&#x20;organization&#039;s&#x20;legal&#x20;counsel&#x20;for&#x20;the&#x20;appropriate&#x20;wording&#x20;for&#x20;your&#x20;specific&#x20;organization.','','Uncomment&#x20;or&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;/etc/gdm3/greeter.gsettings&#x20;:&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;&lt;banner-text&gt;&#039;','[{\"cis\": [\"11.3\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(1143,'Verify&#x20;permissions&#x20;on&#x20;/etc/passwd','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/passwd&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"12.1\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1144,'Verify&#x20;permissions&#x20;on&#x20;/etc/shadow','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/shadow&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/shadow','[{\"cis\": [\"12.2\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1145,'Verify&#x20;permissions&#x20;on&#x20;/etc/group','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','If&#x20;the&#x20;permissions&#x20;of&#x20;the&#x20;/etc/group&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"12.3\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1146,'Verify&#x20;User/Group&#x20;Ownership&#x20;on&#x20;/etc/passwd','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;userIDs&#x20;defined&#x20;in&#x20;the&#x20;system,&#x20;but&#x20;not&#x20;the&#x20;passwords.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/passwd&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','If&#x20;the&#x20;user&#x20;and&#x20;group&#x20;ownership&#x20;of&#x20;the&#x20;/etc/passwd&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chown&#x20;root:root&#x20;/etc/passwd','[{\"cis\": [\"12.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1147,'Verify&#x20;User/Group&#x20;Ownership&#x20;on&#x20;/etc/shadow','The&#x20;/etc/shadow&#x20;file&#x20;contains&#x20;the&#x20;one-way&#x20;cipher&#x20;text&#x20;passwords&#x20;for&#x20;each&#x20;user&#x20;defined&#x20;in&#x20;the&#x20;/etc/passwd&#x20;file.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;user&#x20;and&#x20;group&#x20;ownership&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','If&#x20;the&#x20;ownership&#x20;of&#x20;the&#x20;/etc/shadow&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chown&#x20;root:shadow&#x20;/etc/shadow','[{\"cis\": [\"12.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1148,'Verify&#x20;User/Group&#x20;Ownership&#x20;on&#x20;/etc/group','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','If&#x20;the&#x20;ownership&#x20;of&#x20;the&#x20;/etc/group&#x20;file&#x20;are&#x20;incorrect,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;correct&#x20;them:&#x20;#&#x20;/bin/chown&#x20;root:root&#x20;/etc/group','[{\"cis\": [\"12.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1149,'Ensure&#x20;Password&#x20;Fields&#x20;are&#x20;Not&#x20;Empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;/usr/bin/passwd&#x20;-l&#x20;&lt;username&gt;&#x20;&#x20;&#x20;&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"13.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}]'),(1150,'Verify&#x20;No&#x20;Legacy&#x20;&quot;+&quot;&#x20;Entries&#x20;Exist&#x20;in&#x20;/etc/passwd&#x20;File','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Delete&#x20;these&#x20;entries&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"13.2\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1151,'Verify&#x20;No&#x20;Legacy&#x20;&quot;+&quot;&#x20;Entries&#x20;Exist&#x20;in&#x20;/etc/shadow&#x20;File','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Delete&#x20;these&#x20;entries&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"13.3\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1152,'Verify&#x20;No&#x20;Legacy&#x20;&quot;+&quot;&#x20;Entries&#x20;Exist&#x20;in&#x20;/etc/group&#x20;File','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Delete&#x20;these&#x20;entries&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"13.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1153,'Verify&#x20;No&#x20;UID&#x20;0&#x20;Accounts&#x20;Exist&#x20;Other&#x20;Than&#x20;root','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;9.4&#x20;Restrict&#x20;root&#x20;Login&#x20;to&#x20;System&#x20;Console.','','Delete&#x20;any&#x20;other&#x20;entries&#x20;that&#x20;are&#x20;displayed.','[{\"cis\": [\"13.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\", \"CC8.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1154,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group.','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;all&#x20;users&#x20;from&#x20;the&#x20;shadow&#x20;group,&#x20;and&#x20;change&#x20;the&#x20;primary&#x20;group&#x20;of&#x20;any&#x20;users&#x20;with&#x20;shadow&#x20;as&#x20;their&#x20;primary&#x20;group.','[{\"cis\": [\"13.20\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1500,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;#&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1501,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;#&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1502,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;#&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1503,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;#&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1504,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;#&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1505,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;#&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.6\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1506,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','1&#41;&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.7\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(1507,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate&#x20;or&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;umask&#x20;tmp.mount;&#x20;systemctl&#x20;enable&#x20;tmp.mount.&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount.','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1508,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1509,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1510,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1511,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1512,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1513,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1514,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1515,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1516,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1517,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1518,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','When&#x20;set&#x20;on&#x20;a&#x20;file&#x20;system,&#x20;this&#x20;option&#x20;prevents&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices&#x20;from&#x20;being&#x20;defined,&#x20;or&#x20;if&#x20;they&#x20;exist,&#x20;from&#x20;being&#x20;used&#x20;as&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.&#x20;&#x20;Note:&#x20;The&#x20;actions&#x20;in&#x20;the&#x20;item&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined&#x20;in&#x20;many&#x20;distributions.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"13\", \"15.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1519,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/run/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1520,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1521,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/run/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1522,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;it&#039;s&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Disable&#x20;autofs:&#x20;#&#x20;update-rc.d&#x20;autofs&#x20;disable','[{\"cis\": [\"1.1.21\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1523,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Install&#x20;AIDE:&#x20;#&#x20;apt-get&#x20;install&#x20;aide&#x20;aide-common.&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#&#x20;aideinit','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1524,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Execute&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check.&#x20;Note:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;instance&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1525,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;stored&#x20;in&#x20;/boot/grub.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.cfg,&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1526,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','1&#41;&#x20;Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt:&#x20;#&#x20;grub-mkpasswd-pbkdf2&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;Your&#x20;PBKDF2&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;2&#41;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;/etc/grub.d/00_header&#x20;or&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;cat&#x20;&lt;&lt;EOF&#x20;set&#x20;superusers=&quot;&lt;user-list&gt;&quot;&#x20;password_pbkdf2&#x20;&lt;user&gt;&#x20;&lt;encrypted-password&gt;&#x20;EOF&#x20;Unless&#x20;the&#x20;--unrestricted&#x20;option&#x20;is&#x20;added&#x20;to&#x20;CLASS&#x20;in&#x20;/etc/grub.d/10_linux&#x20;a&#x20;password&#x20;will&#x20;be&#x20;required&#x20;to&#x20;boot&#x20;in&#x20;addition&#x20;to&#x20;editing&#x20;boot&#x20;parameters:&#x20;CLASS=&quot;--class&#x20;gnu-linux&#x20;--class&#x20;gnu&#x20;--class&#x20;os&#x20;--unrestricted&quot;&#x20;3&#41;&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;grub&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1527,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Run&#x20;the&#x20;following&#x20;command&#x20;and&#x20;follow&#x20;the&#x20;prompts&#x20;to&#x20;set&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;passwd&#x20;root','[{\"cis\": [\"1.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1528,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/security/limits.conf&#x20;file.&#x20;&#x20;*&#x20;hard&#x20;core&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1529,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1530,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;and&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1531,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal&#x20;and&#x20;uninstall&#x20;prelink:&#x20;prelink&#x20;-ua&#x20;&amp;&amp;&#x20;apt-get&#x20;remove&#x20;prelink','[{\"cis\": [\"1.5.4\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1532,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.6.1.1\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1533,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.6.1.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1534,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.6.1.3\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1535,'Ensure&#x20;no&#x20;unconfined&#x20;daemons&#x20;exist','Daemons&#x20;that&#x20;are&#x20;not&#x20;defined&#x20;in&#x20;SELinux&#x20;policy&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;of&#x20;their&#x20;parent&#x20;process.','Since&#x20;daemons&#x20;are&#x20;launched&#x20;and&#x20;descend&#x20;from&#x20;the&#x20;init&#x20;process,&#x20;they&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;label&#x20;initrc_t&#x20;.&#x20;This&#x20;could&#x20;cause&#x20;the&#x20;unintended&#x20;consequence&#x20;of&#x20;giving&#x20;the&#x20;process&#x20;more&#x20;permission&#x20;than&#x20;it&#x20;requires.','','Investigate&#x20;any&#x20;unconfined&#x20;daemons&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.6.1.4\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1536,'Ensure&#x20;AppArmor&#x20;is&#x20;enabled&#x20;in&#x20;the&#x20;bootloader&#x20;configuration','Configure&#x20;AppArmor&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwrittenby&#x20;the&#x20;bootloader&#x20;boot&#x20;parameters.','AppArmor&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;appermor=1&#x20;and&#x20;security=apparmor&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;apparmor=1&#x20;security=apparmor&quot;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;update&#x20;the&#x20;grub&#x20;configuration&#x20;#&#x20;update-grub&#x20;&#x20;&#x20;&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"1.6.2.1\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1537,'Ensure&#x20;all&#x20;AppArmor&#x20;Profiles&#x20;are&#x20;enforcing','AppArmor&#x20;profiles&#x20;define&#x20;what&#x20;resources&#x20;applicatons&#x20;are&#x20;able&#x20;to&#x20;access.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;any&#x20;policies&#x20;that&#x20;exist&#x20;on&#x20;the&#x20;system&#x20;are&#x20;activated..','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"1.6.2.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1538,'Ensure&#x20;SELinux&#x20;or&#x20;AppArmor&#x20;are&#x20;installed','SELinux&#x20;and&#x20;AppArmor&#x20;provide&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;SELinux&#x20;or&#x20;apparmor:&#x20;#&#x20;apt-get&#x20;install&#x20;selinux-basics&#x20;Or:&#x20;#&#x20;apt-get&#x20;install&#x20;apparmor&#x20;apparmor-profiles&#x20;apparmor-utils','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1539,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v.','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"7.1\"]}]'),(1540,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x0d;,s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"7.1\"]}]'),(1541,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"7.1\"]}]'),(1542,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1543,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1544,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1545,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add:&#x20;[org/gnome/login-screen],&#x20;banner-message-enable=true,&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.7.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1546,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;Notes:&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.','[{\"cis\": [\"1.8\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(1547,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;xinetd&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;xinetd:&#x20;#&#x20;apt-get&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1548,'Ensure&#x20;inetd&#x20;is&#x20;not&#x20;installed','The&#x20;inetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;inetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;uninstall&#x20;openbsd-inetd&#x20;and&#x20;inetutils-inetd:&#x20;#&#x20;apt-get&#x20;remove&#x20;openbsd-inetd&#x20;#&#x20;apt-get&#x20;remove&#x20;inetutils-inetd','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1549,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;install&#x20;NTP&#x20;or&#x20;chrony&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;apt-get&#x20;install&#x20;ntp&#x20;#&#x20;apt-get&#x20;install&#x20;chrony&#x20;&#x20;&#x20;&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;setup&#x20;host&#x20;based&#x20;synchronization.','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1550,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;&#x20;&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;.&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;&#x20;&#x20;server&#x20;&lt;remote-server&gt;&#x20;.&#x20;Configure&#x20;ntp&#x20;to&#x20;run&#x20;as&#x20;the&#x20;ntp&#x20;user&#x20;by&#x20;adding&#x20;or&#x20;editing&#x20;the&#x20;/etc/init.d/ntp&#x20;file:&#x20;&#x20;&#x20;RUNASUSER=ntp','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1551,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1552,'Ensure&#x20;the&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;apt-get&#x20;remove&#x20;xserver-xorg*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(1553,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attach&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1554,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups:&#x20;#&#x20;systemctl&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1555,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;isc-dhcp-server&#x20;#&#x20;systemctl&#x20;disable&#x20;isc-dhcp-server6','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1556,'Ensure&#x20;LDAP&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1557,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind:&#x20;#&#x20;systemctl&#x20;disable&#x20;nfs-server&#x20;#&#x20;systemctl&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1558,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;systemctl&#x20;disable&#x20;bind9','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1559,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1560,'Ensure&#x20;HTTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2:&#x20;#&#x20;systemctl&#x20;disable&#x20;apache2','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1561,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','exim&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;exim:&#x20;#&#x20;apt-get&#x20;remove&#x20;exim4;&#x20;#&#x20;apt-get&#x20;purge&#x20;exim4','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1562,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smbd:&#x20;#&#x20;systemctl&#x20;disable&#x20;smbd','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1563,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1564,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1565,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(1566,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;disable&#x20;rsync','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(1567,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;nis:&#x20;#&#x20;systemctl&#x20;disable&#x20;nis','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1568,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Uninstall&#x20;the&#x20;nis&#x20;package:&#x20;#&#x20;apt-get&#x20;remove&#x20;nis','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1569,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rshpackage&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh,&#x20;rcpand&#x20;rlogin.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh:&#x20;apt-get&#x20;remove&#x20;rsh-client&#x20;rsh-redone-client','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1570,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talkclient,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk:&#x20;apt-get&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1571,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet:&#x20;#&#x20;apt-get&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1572,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Uninstall&#x20;ldap-utils&#x20;using&#x20;the&#x20;appropriate&#x20;package&#x20;manager&#x20;or&#x20;manual&#x20;installation:&#x20;&#x20;&#x20;#&#x20;apt-get&#x20;remove&#x20;ldap-utils','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1573,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0&#x20;net.ipv6.conf.all.forwarding&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1574,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;net.ipv4.conf.all.send_redirects&#x20;and&#x20;net.ipv4.conf.default.send_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1575,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1576,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1577,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1578,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1579,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1580,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1581,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1582,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1583,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;systems&#x20;ability&#x20;to&#x20;accept&#x20;router&#x20;advertisements','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.9\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1584,'Install&#x20;TCP&#x20;Wrappers','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Install&#x20;tcpd&#x20;:&#x20;#&#x20;apt-get&#x20;install&#x20;tcpd&#x20;&#x20;&#x20;&#x20;Notes:&#x20;To&#x20;verify&#x20;if&#x20;a&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;ldd&#x20;&lt;path-to-daemon&gt;&#x20;|&#x20;grep&#x20;libwrap.so&#x20;If&#x20;there&#x20;is&#x20;any&#x20;output,&#x20;then&#x20;the&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers.','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1585,'Ensure&#x20;/etc/hosts.allow&#x20;is&#x20;configured','The&#x20;/etc/hosts.allow&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.deny&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.allow:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;...&quot;&#x20;&gt;/etc/hosts.allow.&#x20;Where&#x20;each&#x20;&lt;net&gt;/&lt;mask&gt;&#x20;combination&#x20;&#x20;&#40;for&#x20;example,&#x20;&quot;192.168.1.0/255.255.255.0&quot;&#41;&#x20;represents&#x20;one&#x20;network&#x20;block&#x20;in&#x20;use&#x20;by&#x20;your&#x20;organization&#x20;that&#x20;requires&#x20;access&#x20;to&#x20;this&#x20;system.','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1586,'Ensure&#x20;/etc/hosts.deny&#x20;is&#x20;configured','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.deny&#x20;file&#x20;serves&#x20;as&#x20;a&#x20;failsafe&#x20;so&#x20;that&#x20;any&#x20;host&#x20;not&#x20;specified&#x20;in&#x20;/etc/hosts.allow&#x20;is&#x20;denied&#x20;access&#x20;to&#x20;the&#x20;server.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.deny:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;ALL&quot;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(1587,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.allow','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;:&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/hosts.allow&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1588,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.deny','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/hosts.deny&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1589,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-&#x20;sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1590,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1591,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1592,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1593,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1594,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1595,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.2.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1596,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.2.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1597,'Ensure&#x20;iptables&#x20;is&#x20;installed','iptables&#x20;allows&#x20;configuration&#x20;of&#x20;the&#x20;IPv4&#x20;tables&#x20;in&#x20;the&#x20;linux&#x20;kernel&#x20;and&#x20;the&#x20;rules&#x20;stored&#x20;within&#x20;them.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;iptables.','iptables&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;iptables:&#x20;#&#x20;apt-get&#x20;install&#x20;iptables','[{\"cis\": [\"3.5.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(1598,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;few&#x20;organizations&#x20;have&#x20;implemented&#x20;IPv6.','If&#x20;IPv6&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;&#x20;#&#x20;update-grub','[{\"cis\": [\"3.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1599,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;&#x20;Notes:&#x20;The&#x20;max_log_file&#x20;parameter&#x20;is&#x20;measured&#x20;in&#x20;megabytes.','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.3\"]}]'),(1600,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;action_mail_acct&#x20;=&#x20;root&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}]'),(1601,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.3\"]}]'),(1602,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\"\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1603,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;or&#x20;lilo&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','1&#41;&#x20;Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1604,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-&#x20;change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.3\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1605,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1606,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-&#x20;login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;&#x20;and&#x20;/etc/sysconfig/network&#x20;&#40;directory&#x20;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;&#x20;files.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;Notes:&#x20;/etc/sysconfig/network&#x20;is&#x20;common&#x20;to&#x20;Red&#x20;Hat&#x20;and&#x20;SUSE&#x20;based&#x20;distributions.&#x20;You&#x20;should&#x20;expand&#x20;or&#x20;replace&#x20;this&#x20;coverage&#x20;to&#x20;any&#x20;network&#x20;configuration&#x20;files&#x20;on&#x20;your&#x20;system&#x20;such&#x20;as&#x20;/etc/network&#x20;on&#x20;Debian&#x20;based&#x20;distributions.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1607,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux/AppArmor&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','On&#x20;systems&#x20;using&#x20;SELinux&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;&#x20;|&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;On&#x20;systems&#x20;using&#x20;AppArmor&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/apparmor/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;|&#x20;-w&#x20;/etc/apparmor.d/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1608,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/log/faillog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1609,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;|&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;last&#x20;-f&#x20;/var/run/utmp&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1610,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1611,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1612,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1613,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(1614,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;|&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1615,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions.&#x20;Notes:&#x20;The&#x20;system&#x20;must&#x20;be&#x20;configured&#x20;with&#x20;sudisabled&#x20;&#40;See&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted&#41;&#x20;to&#x20;force&#x20;all&#x20;command&#x20;execution&#x20;through&#x20;sudo.&#x20;This&#x20;will&#x20;not&#x20;be&#x20;effective&#x20;on&#x20;the&#x20;console,&#x20;as&#x20;administrators&#x20;can&#x20;log&#x20;in&#x20;as&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1616,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"3\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(1617,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;end&#x20;of&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-e&#x20;2.&#x20;Notes:&#x20;This&#x20;setting&#x20;will&#x20;ensure&#x20;reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;requires&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.18\"]}, {\"cis_csc\": [\"3\", \"6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\"]}]'),(1618,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;will&#x20;not&#x20;have&#x20;a&#x20;syslog&#x20;service&#x20;running.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;#&#x20;systemctl&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1619,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(1620,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;:&#x20;*.*&#x20;@@loghost.example.com.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1621,'Ensure&#x20;remote&#x20;rsyslog&#x20;messages&#x20;are&#x20;only&#x20;accepted&#x20;on&#x20;designated&#x20;log&#x20;hosts','By&#x20;default,&#x20;rsyslog&#x20;does&#x20;not&#x20;listen&#x20;for&#x20;log&#x20;messages&#x20;coming&#x20;in&#x20;from&#x20;remote&#x20;systems.&#x20;The&#x20;ModLoad&#x20;tells&#x20;rsyslog&#x20;to&#x20;load&#x20;the&#x20;imtcp.so&#x20;module&#x20;so&#x20;it&#x20;can&#x20;listen&#x20;over&#x20;a&#x20;network&#x20;via&#x20;TCP.&#x20;The&#x20;InputTCPServerRun&#x20;option&#x20;instructs&#x20;rsyslogd&#x20;to&#x20;listen&#x20;on&#x20;the&#x20;specified&#x20;TCP&#x20;port.','The&#x20;guidance&#x20;in&#x20;the&#x20;section&#x20;ensures&#x20;that&#x20;remote&#x20;log&#x20;hosts&#x20;are&#x20;configured&#x20;to&#x20;only&#x20;accept&#x20;rsyslog&#x20;data&#x20;from&#x20;hosts&#x20;within&#x20;the&#x20;specified&#x20;domain&#x20;and&#x20;that&#x20;those&#x20;systems&#x20;that&#x20;are&#x20;not&#x20;designed&#x20;to&#x20;be&#x20;log&#x20;hosts&#x20;do&#x20;not&#x20;accept&#x20;any&#x20;remote&#x20;rsyslog&#x20;messages.&#x20;This&#x20;provides&#x20;protection&#x20;from&#x20;spoofed&#x20;log&#x20;data&#x20;and&#x20;ensures&#x20;that&#x20;system&#x20;administrators&#x20;are&#x20;reviewing&#x20;reasonably&#x20;complete&#x20;syslog&#x20;data&#x20;in&#x20;a&#x20;central&#x20;location.','','For&#x20;hosts&#x20;that&#x20;are&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;un-comment&#x20;or&#x20;add&#x20;the&#x20;following&#x20;lines:$ModLoad&#x20;imtcp&#x20;&amp;&#x20;$InputTCPServerRun&#x20;514.&#x20;For&#x20;hosts&#x20;that&#x20;are&#x20;not&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;comment&#x20;or&#x20;remove&#x20;the&#x20;following&#x20;lines:&#x20;#&#x20;$ModLoad&#x20;imtcp&#x20;#&#x20;$InputTCPServerRun&#x20;514.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"10.5.1\"]}]'),(1622,'Ensure&#x20;syslog-ng&#x20;service&#x20;is&#x20;enabled','Once&#x20;the&#x20;syslog-ng&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;syslog-ng&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;syslog-ng','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1623,'Ensure&#x20;syslog-ng&#x20;default&#x20;file&#x20;permissions&#x20;configured','syslog-ng&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;syslog-ng&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;and&#x20;set&#x20;perm&#x20;option&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;&#x20;&#x20;options&#x20;{&#x20;chain_hostnames&#40;off&#41;;&#x20;flush_lines&#40;0&#41;;&#x20;perm&#40;0640&#41;;&#x20;stats_freq&#40;3600&#41;;&#x20;threaded&#40;yes&#41;;&#x20;};','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(1624,'Ensure&#x20;syslog-ng&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;syslog-ng&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;&#x20;destination&#x20;logserver&#x20;{&#x20;tcp&#40;&quot;logfile.example.com&quot;&#x20;port&#40;514&#41;&#41;;&#x20;};&#x20;&#x20;&#x20;&#x20;log&#x20;{&#x20;source&#40;src&#41;;&#x20;destination&#40;logserver&#41;;&#x20;};&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;syslog-ng','[{\"cis\": [\"4.2.2.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1625,'Ensure&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;apt-get&#x20;install&#x20;rsyslog&#x20;#&#x20;apt-get&#x20;install&#x20;syslog-ng','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1626,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron:&#x20;systemctl&#x20;enable&#x20;cron','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1627,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1628,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1629,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1630,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1631,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1632,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1633,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1634,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-&#x20;privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1635,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1636,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1637,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1638,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1639,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhostsand&#x20;.shostsfiles&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthenticationor&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1640,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1641,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1642,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(1643,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(1644,'Ensure&#x20;only&#x20;strong&#x20;ciphers&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&quot;Sweet32&quot;&#x20;attack&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involving&#x20;LSB&#x20;values,&#x20;aka&#x20;the&#x20;&quot;Bar&#x20;Mitzvah&quot;&#x20;issue&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;Ciphers&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphers&#x20;Example:&#x20;Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(1645,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:&#x20;MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-&#x20;512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(1646,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms&#x20;Example:&#x20;KexAlgorithms&#x20;curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(1647,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;&#x20;&#x20;&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(1648,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.1\"]}]'),(1649,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers,&#x20;AllowGroups,&#x20;DenyUsers,&#x20;DenyGroups.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;AllowGroups&#x20;&lt;grouplist&gt;&#x20;&#x20;&#x20;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"5.1\", \"5.8\"]}, {\"pci_dss\": [\"8.1\"]}]'),(1650,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1651,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options:&#x20;-&#x20;retry=3&#x20;&#40;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure&#41;.&#x20;The&#x20;following&#x20;options&#x20;are&#x20;set&#x20;in&#x20;the&#x20;/etc/security/pwquality.conf&#x20;file:&#x20;-&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#40;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies.&#41;','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','1&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;the&#x20;pam_pwquality&#x20;module:&#x20;apt-get&#x20;install&#x20;libpam-pwquality&#x20;2&#41;&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_pwquality.so&#x20;retry=3&#x20;3&#41;&#x20;Edit&#x20;/etc/security/pwquality.conf&#x20;to&#x20;add&#x20;or&#x20;update&#x20;the&#x20;following&#x20;settings&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;requirements&#x20;only&#x20;cover&#x20;including&#x20;try_first_pass&#x20;and&#x20;minlen&#x20;set&#x20;to&#x20;14&#x20;or&#x20;more.&#x20;Settings&#x20;in&#x20;/etc/security/pwquality.conf&#x20;must&#x20;use&#x20;spaces&#x20;around&#x20;the&#x20;=&#x20;symbol.','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"5.7\", \"16.12\"]}, {\"pci_dss\": [\"8.2.3\"]}]'),(1652,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;files.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.&#x20;Check&#x20;the&#x20;documentation&#x20;for&#x20;each&#x20;secondary&#x20;program&#x20;for&#x20;instructions&#x20;on&#x20;how&#x20;to&#x20;configure&#x20;them&#x20;to&#x20;work&#x20;with&#x20;PAM.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;to&#x20;the&#x20;policy&#x20;in&#x20;effect&#x20;at&#x20;your&#x20;site.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/common-auth&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900.&#x20;Note:&#x20;If&#x20;a&#x20;user&#x20;has&#x20;been&#x20;locked&#x20;out&#x20;because&#x20;they&#x20;have&#x20;reached&#x20;the&#x20;maximum&#x20;consecutive&#x20;failure&#x20;count&#x20;defined&#x20;by&#x20;deny=&#x20;in&#x20;the&#x20;pam_tally2.so&#x20;module,&#x20;the&#x20;user&#x20;can&#x20;be&#x20;unlocked&#x20;by&#x20;issuing&#x20;the&#x20;command&#x20;/sbin/pam_tally2&#x20;-u&#x20;&lt;username&gt;&#x20;--reset.&#x20;This&#x20;command&#x20;sets&#x20;the&#x20;failed&#x20;count&#x20;to&#x20;0,&#x20;effectively&#x20;unlocking&#x20;the&#x20;user.&#x20;Notes:&#x20;Use&#x20;of&#x20;the&#x20;&quot;audit&quot;&#x20;keyword&#x20;may&#x20;log&#x20;credentials&#x20;in&#x20;the&#x20;case&#x20;of&#x20;user&#x20;error&#x20;during&#x20;authentication.&#x20;This&#x20;risk&#x20;should&#x20;be&#x20;evaluated&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;site&#x20;policies&#x20;of&#x20;your&#x20;organization.','[{\"cis\": [\"5.3.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(1653,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;only&#x20;covers&#x20;those&#x20;listed&#x20;here.','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(1654,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;[success=1&#x20;default=ignore]&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1655,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MAX_DAYS&#x20;90.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;5th&#x20;field&#x20;should&#x20;be&#x20;365&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;will&#x20;disable&#x20;password&#x20;expiration.&#x20;Additionally&#x20;the&#x20;password&#x20;expiration&#x20;must&#x20;be&#x20;greater&#x20;than&#x20;the&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;or&#x20;users&#x20;will&#x20;be&#x20;unable&#x20;to&#x20;change&#x20;their&#x20;password.','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.4\"]}]'),(1656,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;4th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1657,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;6th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1658,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;#&#x20;useradd&#x20;-D&#x20;-f&#x20;30.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;7th&#x20;field&#x20;should&#x20;be&#x20;30&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;would&#x20;disable&#x20;this&#x20;setting.','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1659,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;#&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1660,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(1661,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc,&#x20;/etc/profile&#x20;files,&#x20;and&#x20;/etc/profile.d*.sh&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(1662,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;group&#x20;to&#x20;execute&#x20;su.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','1&#41;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;2&#41;&#x20;Create&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;statement&#x20;in&#x20;the&#x20;/etc/group&#x20;file:&#x20;sudo:x:10:root,&lt;user&#x20;list&gt;&#x20;Notes:&#x20;The&#x20;use_uid&#x20;option&#x20;to&#x20;pam_wheel.so&#x20;is&#x20;a&#x20;no-op&#x20;on&#x20;debian&#x20;based&#x20;systems.&#x20;It&#x20;is&#x20;acceptable&#x20;but&#x20;not&#x20;required&#x20;as&#x20;these&#x20;systems&#x20;use&#x20;its&#x20;behavior&#x20;as&#x20;default.','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1663,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1664,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1665,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1666,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1667,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1668,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1669,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1670,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(1671,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;em&gt;&lt;username&gt;&lt;/em&gt;.&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}]'),(1672,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1673,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1674,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(1675,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(1676,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group.','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;all&#x20;users&#x20;from&#x20;the&#x20;shadow&#x20;group,&#x20;and&#x20;change&#x20;the&#x20;primary&#x20;group&#x20;of&#x20;any&#x20;users&#x20;with&#x20;shadow&#x20;as&#x20;their&#x20;primary&#x20;group.','[{\"cis\": [\"6.2.20\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2000,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/freevxfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;#&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2001,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/jffs2.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;#&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2002,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/hfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;#&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2003,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.confExample:&#x20;vim&#x20;/etc/modprobe.d/hfsplus.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;#&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2004,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/udf.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2005,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;Example:&#x20;tmpfs&#x20;/tmp&#x20;tmpfs&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;0&#x20;0&#x20;or&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;systemctl&#x20;enable&#x20;tmp.mount&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2006,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount:&#x20;[Mount]&#x20;What=tmpfs&#x20;&#x20;Where=/tmp&#x20;&#x20;Type=tmpfs&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;and&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;systemctl&#x20;enable&#x20;tmp.mount','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2007,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2008,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp&#x20;.','','Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2.6\", \"8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2009,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2010,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2011,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2012,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2013,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2014,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2015,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2016,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2017,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','When&#x20;set&#x20;on&#x20;a&#x20;file&#x20;system,&#x20;this&#x20;option&#x20;prevents&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices&#x20;from&#x20;being&#x20;defined,&#x20;or&#x20;if&#x20;they&#x20;exist,&#x20;from&#x20;being&#x20;used&#x20;as&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.&#x20;&#x20;Note:&#x20;The&#x20;actions&#x20;in&#x20;the&#x20;item&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined&#x20;in&#x20;many&#x20;distributions.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2018,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/run/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2019,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2020,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2.6\", \"8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2021,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;it&#039;s&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;#&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2022,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;AIDE:&#x20;#&#x20;apt-get&#x20;install&#x20;aide&#x20;aide-common.&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#&#x20;aideinit','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2023,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;&#x20;&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/bin/aide.wrapper&#x20;--config&#x20;/etc/aide/aide.conf&#x20;--check','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2024,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;stored&#x20;in&#x20;/boot/grub.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.cfg,&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2025,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-mkpasswd-pbkdf2&#x20;Create&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;If&#x20;there&#x20;is&#x20;a&#x20;requirement&#x20;to&#x20;be&#x20;able&#x20;to&#x20;boot/reboot&#x20;without&#x20;entering&#x20;the&#x20;password,&#x20;edit&#x20;/etc/grub.d/10_linux&#x20;and&#x20;add&#x20;--unrestricted&#x20;to&#x20;the&#x20;line&#x20;CLASS=&#x20;Example:&#x20;CLASS=&quot;--class&#x20;gnu-linux&#x20;--class&#x20;gnu&#x20;--class&#x20;os&#x20;--unrestricted&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2026,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Run&#x20;the&#x20;following&#x20;command&#x20;and&#x20;follow&#x20;the&#x20;prompts&#x20;to&#x20;set&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;passwd&#x20;root','[{\"cis\": [\"1.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2027,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2028,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2029,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2030,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal&#x20;and&#x20;uninstall&#x20;prelink:&#x20;prelink&#x20;-ua&#x20;&amp;&amp;&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.5.4\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2031,'Ensure&#x20;SELinux&#x20;is&#x20;enabled&#x20;in&#x20;the&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;configure&#x20;GRUB&#x20;and&#x20;PAM&#x20;and&#x20;to&#x20;create&#x20;/.autorelabel:&#x20;&#x20;#&#x20;selinux-activate&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;following&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line:&#x20;&#x20;&#x20;&#x20;&#x20;selinux=1&#x20;&#x20;security=selinux&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;example:&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;&#x20;&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;selinux=1&#x20;security=selinux&#x20;enforcing=1&#x20;audit=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2configuration:&#x20;&#x20;&#x20;&#x20;#&#x20;update-grub','[{\"cis\": [\"1.6.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2032,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing&#x20;&#x20;&#x20;Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;following&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line:&#x20;enforcing=1&#x20;&#x20;&#x20;&#x20;Example:&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;selinux=1&#x20;security=selinux&#x20;enforcing=1&#x20;audit=1&quot;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.6.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2033,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.6.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2034,'Ensure&#x20;no&#x20;unconfined&#x20;daemons&#x20;exist','Daemons&#x20;that&#x20;are&#x20;not&#x20;defined&#x20;in&#x20;SELinux&#x20;policy&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;of&#x20;their&#x20;parent&#x20;process.','Since&#x20;daemons&#x20;are&#x20;launched&#x20;and&#x20;descend&#x20;from&#x20;the&#x20;init&#x20;process,&#x20;they&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;label&#x20;initrc_t&#x20;.&#x20;This&#x20;could&#x20;cause&#x20;the&#x20;unintended&#x20;consequence&#x20;of&#x20;giving&#x20;the&#x20;process&#x20;more&#x20;permission&#x20;than&#x20;it&#x20;requires.','','Investigate&#x20;any&#x20;unconfined&#x20;daemons&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.6.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2035,'Ensure&#x20;AppArmor&#x20;is&#x20;enabled&#x20;in&#x20;the&#x20;bootloader&#x20;configuration','Configure&#x20;AppArmor&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwrittenby&#x20;the&#x20;bootloader&#x20;boot&#x20;parameters.','AppArmor&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;appermor=1&#x20;and&#x20;security=apparmor&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;apparmor=1&#x20;security=apparmor&quot;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;update&#x20;the&#x20;grub&#x20;configuration&#x20;#&#x20;update-grub&#x20;&#x20;&#x20;&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"1.6.2.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2036,'Ensure&#x20;all&#x20;AppArmor&#x20;Profiles&#x20;are&#x20;enforcing','AppArmor&#x20;profiles&#x20;define&#x20;what&#x20;resources&#x20;applicatons&#x20;are&#x20;able&#x20;to&#x20;access.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;any&#x20;policies&#x20;that&#x20;exist&#x20;on&#x20;the&#x20;system&#x20;are&#x20;activated..','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"1.6.2.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2037,'Ensure&#x20;SELinux&#x20;or&#x20;AppArmor&#x20;are&#x20;installed','SELinux&#x20;and&#x20;AppArmor&#x20;provide&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;SELinux&#x20;or&#x20;apparmor:&#x20;#&#x20;apt-get&#x20;install&#x20;selinux-basics&#x20;Or:&#x20;#&#x20;apt-get&#x20;install&#x20;apparmor&#x20;apparmor-profiles&#x20;apparmor-utils','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2038,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v.','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}]'),(2039,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v&#x20;,&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"5.1\"]}]'),(2040,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}]'),(2041,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2042,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2043,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2044,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add:&#x20;[org/gnome/login-screen],&#x20;banner-message-enable=true,&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.7.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2045,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;Notes:&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.','[{\"cis\": [\"1.8\"]}, {\"cis_csc\": [\"3.4\", \"3.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(2046,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;xinetd&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetddaemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;apt-get&#x20;remove&#x20;xinetd&#x20;#&#x20;apt-get&#x20;purge&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2047,'Ensure&#x20;openbsd-inetd&#x20;is&#x20;not&#x20;installed','The&#x20;inetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;inetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openbsd-inetd:&#x20;apt-get&#x20;remove&#x20;openbsd-inetd','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2048,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;install&#x20;NTP&#x20;or&#x20;chrony&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;apt-get&#x20;install&#x20;ntp&#x20;#&#x20;apt-get&#x20;install&#x20;chrony&#x20;&#x20;&#x20;&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;setup&#x20;host&#x20;based&#x20;synchronization.','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2049,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;Configure&#x20;ntp&#x20;to&#x20;run&#x20;as&#x20;the&#x20;ntp&#x20;user&#x20;by&#x20;adding&#x20;or&#x20;editing&#x20;the&#x20;/etc/init.d/ntp&#x20;file:&#x20;RUNASUSER=ntp','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2050,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2051,'Ensure&#x20;the&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;apt-get&#x20;remove&#x20;xserver-xorg*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(2052,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attach&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2053,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups:&#x20;#&#x20;systemctl&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2054,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;isc-dhcp-server&#x20;#&#x20;systemctl&#x20;disable&#x20;isc-dhcp-server6','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2055,'Ensure&#x20;LDAP&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2056,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind:&#x20;#&#x20;systemctl&#x20;disable&#x20;nfs-server&#x20;#&#x20;systemctl&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2057,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;systemctl&#x20;disable&#x20;bind9','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2058,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2059,'Ensure&#x20;HTTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2:&#x20;#&#x20;systemctl&#x20;disable&#x20;apache2','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2060,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','exim&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;exim:&#x20;#&#x20;apt-get&#x20;remove&#x20;exim4;&#x20;#&#x20;apt-get&#x20;purge&#x20;exim4','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2061,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smbd:&#x20;#&#x20;systemctl&#x20;disable&#x20;smbd','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2062,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2063,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2064,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(2065,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;disable&#x20;rsync','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(2066,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;nis:&#x20;#&#x20;systemctl&#x20;disable&#x20;nis','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2067,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Uninstall&#x20;the&#x20;nis&#x20;package:&#x20;#&#x20;apt-get&#x20;remove&#x20;nis','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2068,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rshpackage&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rshpackage&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh,&#x20;rcpand&#x20;rlogin.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh:&#x20;apt-get&#x20;remove&#x20;rsh-client&#x20;rsh-redone-client','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2.6\", \"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2069,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talksoftware&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talkclient,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk:&#x20;apt-get&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2070,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet:&#x20;#&#x20;apt-get&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2.6\", \"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2071,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;apt-get&#x20;remove&#x20;ldap-utils','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2072,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0&#x20;net.ipv6.conf.all.forwarding&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2073,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;net.ipv4.conf.all.send_redirects&#x20;and&#x20;net.ipv4.conf.default.send_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2074,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2075,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv6.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2076,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2077,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2078,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2079,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2080,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2081,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2082,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;systems&#x20;ability&#x20;to&#x20;accept&#x20;router&#x20;advertisements','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2083,'Install&#x20;TCP&#x20;Wrappers','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Install&#x20;tcpd&#x20;:&#x20;#&#x20;apt-get&#x20;install&#x20;tcpd&#x20;To&#x20;verify&#x20;if&#x20;a&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;ldd&#x20;&lt;path-to-daemon&gt;&#x20;|&#x20;grep&#x20;libwrap.so&#x20;If&#x20;there&#x20;is&#x20;any&#x20;output,&#x20;then&#x20;the&#x20;service&#x20;supports&#x20;TCP&#x20;Wrappers.','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(2084,'Ensure&#x20;/etc/hosts.allow&#x20;is&#x20;configured','The&#x20;/etc/hosts.allow&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.deny&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.allow:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;...&quot;&#x20;&gt;/etc/hosts.allow.&#x20;Where&#x20;each&#x20;&lt;net&gt;/&lt;mask&gt;&#x20;combination&#x20;&#x20;&#40;for&#x20;example,&#x20;&quot;192.168.1.0/255.255.255.0&quot;&#41;&#x20;represents&#x20;one&#x20;network&#x20;block&#x20;in&#x20;use&#x20;by&#x20;your&#x20;organization&#x20;that&#x20;requires&#x20;access&#x20;to&#x20;this&#x20;system.','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(2085,'Ensure&#x20;/etc/hosts.deny&#x20;is&#x20;configured','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.deny&#x20;file&#x20;serves&#x20;as&#x20;a&#x20;failsafe&#x20;so&#x20;that&#x20;any&#x20;host&#x20;not&#x20;specified&#x20;in&#x20;/etc/hosts.allow&#x20;is&#x20;denied&#x20;access&#x20;to&#x20;the&#x20;server.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.deny:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;ALL&quot;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(2086,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.allow','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;:&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/hosts.allow&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2087,'Verify&#x20;permissions&#x20;on&#x20;/etc/hosts.deny','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/hosts.deny&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2088,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-&#x20;sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2089,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2090,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2091,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2092,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2093,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2094,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2095,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2096,'Ensure&#x20;iptables&#x20;is&#x20;installed','iptables&#x20;allows&#x20;configuration&#x20;of&#x20;the&#x20;IPv4&#x20;tables&#x20;in&#x20;the&#x20;linux&#x20;kernel&#x20;and&#x20;the&#x20;rules&#x20;stored&#x20;within&#x20;them.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;iptables.','iptables&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;iptables:&#x20;#&#x20;apt-get&#x20;install&#x20;iptables','[{\"cis\": [\"3.5.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2097,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;&#x20;Notes:&#x20;The&#x20;max_log_file&#x20;parameter&#x20;is&#x20;measured&#x20;in&#x20;megabytes.','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.4\"]}]'),(2098,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;action_mail_acct&#x20;=&#x20;root&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.4\"]}]'),(2099,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.4\"]}]'),(2100,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\"\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2101,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;or&#x20;lilo&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','1&#41;&#x20;Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;2&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2102,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-&#x20;change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.3\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2103,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2104,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-&#x20;login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;&#x20;and&#x20;/etc/sysconfig/network&#x20;&#40;directory&#x20;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;&#x20;files.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;|&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;Notes:&#x20;/etc/sysconfig/network&#x20;is&#x20;common&#x20;to&#x20;Red&#x20;Hat&#x20;and&#x20;SUSE&#x20;based&#x20;distributions.&#x20;You&#x20;should&#x20;expand&#x20;or&#x20;replace&#x20;this&#x20;coverage&#x20;to&#x20;any&#x20;network&#x20;configuration&#x20;files&#x20;on&#x20;your&#x20;system&#x20;such&#x20;as&#x20;/etc/network&#x20;on&#x20;Debian&#x20;based&#x20;distributions.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2105,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux/AppArmor&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','On&#x20;systems&#x20;using&#x20;SELinux&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;&#x20;|&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;On&#x20;systems&#x20;using&#x20;AppArmor&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/apparmor/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;|&#x20;-w&#x20;/etc/apparmor.d/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2106,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/log/faillog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2107,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;|&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;last&#x20;-f&#x20;/var/run/utmp&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2108,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2109,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2110,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2111,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"6,2\", \"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2112,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;|&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2113,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions.&#x20;Notes:&#x20;The&#x20;system&#x20;must&#x20;be&#x20;configured&#x20;with&#x20;sudisabled&#x20;&#40;See&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted&#41;&#x20;to&#x20;force&#x20;all&#x20;command&#x20;execution&#x20;through&#x20;sudo.&#x20;This&#x20;will&#x20;not&#x20;be&#x20;effective&#x20;on&#x20;the&#x20;console,&#x20;as&#x20;administrators&#x20;can&#x20;log&#x20;in&#x20;as&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"4.9\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2114,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}]'),(2115,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;end&#x20;of&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-e&#x20;2.&#x20;Notes:&#x20;This&#x20;setting&#x20;will&#x20;ensure&#x20;reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;requires&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.18\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC7.2\"]}]'),(2116,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;will&#x20;not&#x20;have&#x20;a&#x20;syslog&#x20;service&#x20;running.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;#&#x20;systemctl&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2117,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(2118,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;:&#x20;*.*&#x20;@@loghost.example.com.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2119,'Ensure&#x20;remote&#x20;rsyslog&#x20;messages&#x20;are&#x20;only&#x20;accepted&#x20;on&#x20;designated&#x20;log&#x20;hosts','By&#x20;default,&#x20;rsyslog&#x20;does&#x20;not&#x20;listen&#x20;for&#x20;log&#x20;messages&#x20;coming&#x20;in&#x20;from&#x20;remote&#x20;systems.&#x20;The&#x20;ModLoad&#x20;tells&#x20;rsyslog&#x20;to&#x20;load&#x20;the&#x20;imtcp.so&#x20;module&#x20;so&#x20;it&#x20;can&#x20;listen&#x20;over&#x20;a&#x20;network&#x20;via&#x20;TCP.&#x20;The&#x20;InputTCPServerRun&#x20;option&#x20;instructs&#x20;rsyslogd&#x20;to&#x20;listen&#x20;on&#x20;the&#x20;specified&#x20;TCP&#x20;port.','The&#x20;guidance&#x20;in&#x20;the&#x20;section&#x20;ensures&#x20;that&#x20;remote&#x20;log&#x20;hosts&#x20;are&#x20;configured&#x20;to&#x20;only&#x20;accept&#x20;rsyslog&#x20;data&#x20;from&#x20;hosts&#x20;within&#x20;the&#x20;specified&#x20;domain&#x20;and&#x20;that&#x20;those&#x20;systems&#x20;that&#x20;are&#x20;not&#x20;designed&#x20;to&#x20;be&#x20;log&#x20;hosts&#x20;do&#x20;not&#x20;accept&#x20;any&#x20;remote&#x20;rsyslog&#x20;messages.&#x20;This&#x20;provides&#x20;protection&#x20;from&#x20;spoofed&#x20;log&#x20;data&#x20;and&#x20;ensures&#x20;that&#x20;system&#x20;administrators&#x20;are&#x20;reviewing&#x20;reasonably&#x20;complete&#x20;syslog&#x20;data&#x20;in&#x20;a&#x20;central&#x20;location.','','For&#x20;hosts&#x20;that&#x20;are&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;un-comment&#x20;or&#x20;add&#x20;the&#x20;following&#x20;lines:$ModLoad&#x20;imtcp&#x20;&amp;&#x20;$InputTCPServerRun&#x20;514.&#x20;For&#x20;hosts&#x20;that&#x20;are&#x20;not&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;comment&#x20;or&#x20;remove&#x20;the&#x20;following&#x20;lines:&#x20;#&#x20;$ModLoad&#x20;imtcp&#x20;#&#x20;$InputTCPServerRun&#x20;514.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"10.5.1\"]}]'),(2120,'Ensure&#x20;syslog-ng&#x20;service&#x20;is&#x20;enabled','Once&#x20;the&#x20;syslog-ng&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;syslog-ng&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;syslog-ng','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2121,'Ensure&#x20;syslog-ng&#x20;default&#x20;file&#x20;permissions&#x20;configured','syslog-ng&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;syslog-ng&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;and&#x20;set&#x20;perm&#x20;option&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;&#x20;&#x20;options&#x20;{&#x20;chain_hostnames&#40;off&#41;;&#x20;flush_lines&#40;0&#41;;&#x20;perm&#40;0640&#41;;&#x20;stats_freq&#40;3600&#41;;&#x20;threaded&#40;yes&#41;;&#x20;};','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(2122,'Ensure&#x20;syslog-ng&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;syslog-ng&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;&#x20;destination&#x20;logserver&#x20;{&#x20;tcp&#40;&quot;logfile.example.com&quot;&#x20;port&#40;514&#41;&#41;;&#x20;};&#x20;&#x20;&#x20;&#x20;log&#x20;{&#x20;source&#40;src&#41;;&#x20;destination&#40;logserver&#41;;&#x20;};&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;syslog-ng','[{\"cis\": [\"4.2.2.4\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2123,'Ensure&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;apt-get&#x20;install&#x20;rsyslog&#x20;#&#x20;apt-get&#x20;install&#x20;syslog-ng','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2124,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron:&#x20;systemctl&#x20;enable&#x20;cron','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2125,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2126,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2127,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2128,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2129,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2130,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2131,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2132,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-&#x20;privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2133,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','Older&#x20;versions&#x20;of&#x20;SSH&#x20;support&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.&#x20;Notes:&#x20;This&#x20;command&#x20;not&#x20;longer&#x20;exists&#x20;in&#x20;newer&#x20;versions&#x20;of&#x20;SSH.&#x20;This&#x20;check&#x20;is&#x20;still&#x20;being&#x20;included&#x20;for&#x20;systems&#x20;that&#x20;may&#x20;be&#x20;running&#x20;an&#x20;older&#x20;version&#x20;of&#x20;SSH.&#x20;As&#x20;of&#x20;openSSH&#x20;version&#x20;7.4&#x20;this&#x20;parameter&#x20;will&#x20;not&#x20;cause&#x20;an&#x20;issue&#x20;when&#x20;included.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2134,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2135,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2136,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2137,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhostsand&#x20;.shostsfiles&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthenticationor&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2138,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2139,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2140,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2141,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2142,'Ensure&#x20;only&#x20;strong&#x20;ciphers&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&quot;Sweet32&quot;&#x20;attack&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involving&#x20;LSB&#x20;values,&#x20;aka&#x20;the&#x20;&quot;Bar&#x20;Mitzvah&quot;&#x20;issue&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;Ciphers&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphers&#x20;Example:&#x20;Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2143,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:&#x20;MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-&#x20;512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"14.4\", \"16.5\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2144,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms&#x20;Example:&#x20;KexAlgorithms&#x20;curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-&#x20;group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-&#x20;sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-&#x20;hellman-group-exchange-sha256','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2145,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;&#x20;&#x20;&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(2146,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}]'),(2147,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers,&#x20;AllowGroups,&#x20;DenyUsers,&#x20;DenyGroups.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;AllowGroups&#x20;&lt;grouplist&gt;&#x20;&#x20;&#x20;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}]'),(2148,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2149,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options:&#x20;-&#x20;retry=3&#x20;&#40;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure&#41;.&#x20;The&#x20;following&#x20;options&#x20;are&#x20;set&#x20;in&#x20;the&#x20;/etc/security/pwquality.conf&#x20;file:&#x20;-&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#40;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies.&#41;','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','1&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;the&#x20;pam_pwquality&#x20;module:&#x20;apt-get&#x20;install&#x20;libpam-pwquality&#x20;2&#41;&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_pwquality.so&#x20;retry=3&#x20;3&#41;&#x20;Edit&#x20;/etc/security/pwquality.conf&#x20;to&#x20;add&#x20;or&#x20;update&#x20;the&#x20;following&#x20;settings&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;requirements&#x20;only&#x20;cover&#x20;including&#x20;try_first_pass&#x20;and&#x20;minlen&#x20;set&#x20;to&#x20;14&#x20;or&#x20;more.&#x20;Settings&#x20;in&#x20;/etc/security/pwquality.conf&#x20;must&#x20;use&#x20;spaces&#x20;around&#x20;the&#x20;=&#x20;symbol.','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}]'),(2150,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;files.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.&#x20;Check&#x20;the&#x20;documentation&#x20;for&#x20;each&#x20;secondary&#x20;program&#x20;for&#x20;instructions&#x20;on&#x20;how&#x20;to&#x20;configure&#x20;them&#x20;to&#x20;work&#x20;with&#x20;PAM.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;to&#x20;the&#x20;policy&#x20;in&#x20;effect&#x20;at&#x20;your&#x20;site.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/common-auth&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900.&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-account&#x20;file&#x20;and&#x20;add&#x20;the&#x20;account&#x20;line&#x20;bellow:&#x20;account&#x20;&#x20;&#x20;&#x20;required&#x20;&#x20;&#x20;&#x20;pam_tally2.so.&#x20;Note:&#x20;If&#x20;a&#x20;user&#x20;has&#x20;been&#x20;locked&#x20;out&#x20;because&#x20;they&#x20;have&#x20;reached&#x20;the&#x20;maximum&#x20;consecutive&#x20;failure&#x20;count&#x20;defined&#x20;by&#x20;deny=&#x20;in&#x20;the&#x20;pam_tally2.so&#x20;module,&#x20;the&#x20;user&#x20;can&#x20;be&#x20;unlocked&#x20;by&#x20;issuing&#x20;the&#x20;command&#x20;/sbin/pam_tally2&#x20;-u&#x20;&lt;username&gt;&#x20;--reset.&#x20;This&#x20;command&#x20;sets&#x20;the&#x20;failed&#x20;count&#x20;to&#x20;0,&#x20;effectively&#x20;unlocking&#x20;the&#x20;user.&#x20;Notes:BUG&#x20;In&#x20;pam_tally2.so&#x20;To&#x20;work&#x20;around&#x20;this&#x20;issue&#x20;the&#x20;addition&#x20;of&#x20;pam_tally2.so&#x20;in&#x20;the&#x20;accounts&#x20;section&#x20;of&#x20;the&#x20;/etc/pam.d/common-account&#x20;file&#x20;has&#x20;been&#x20;added&#x20;to&#x20;the&#x20;audit&#x20;and&#x20;remediation&#x20;sections.&#x20;pam_tally2&#x20;line&#x20;must&#x20;be&#x20;added&#x20;for&#x20;the&#x20;counter&#x20;to&#x20;reset&#x20;to&#x20;0&#x20;when&#x20;using&#x20;sudo.&#x20;&#x20;&#x20;&#x20;&#x20;Use&#x20;of&#x20;the&#x20;&quot;audit&quot;&#x20;keyword&#x20;may&#x20;log&#x20;credentials&#x20;in&#x20;the&#x20;case&#x20;of&#x20;user&#x20;error&#x20;during&#x20;authentication.&#x20;This&#x20;risk&#x20;should&#x20;be&#x20;evaluated&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;site&#x20;policies&#x20;of&#x20;your&#x20;organization.','[{\"cis\": [\"5.3.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(2151,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;only&#x20;covers&#x20;those&#x20;listed&#x20;here.','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}]'),(2152,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;[success=1&#x20;default=ignore]&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2153,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MAX_DAYS&#x20;90.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;5th&#x20;field&#x20;should&#x20;be&#x20;365&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;will&#x20;disable&#x20;password&#x20;expiration.&#x20;Additionally&#x20;the&#x20;password&#x20;expiration&#x20;must&#x20;be&#x20;greater&#x20;than&#x20;the&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;or&#x20;users&#x20;will&#x20;be&#x20;unable&#x20;to&#x20;change&#x20;their&#x20;password.','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"8.2.4\"]}]'),(2154,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;4th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2155,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;6th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2156,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;#&#x20;useradd&#x20;-D&#x20;-f&#x20;30.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;7th&#x20;field&#x20;should&#x20;be&#x20;30&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;would&#x20;disable&#x20;this&#x20;setting.','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2157,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;#&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2158,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"3.6.1\"]}]'),(2159,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc,&#x20;/etc/profile&#x20;files,&#x20;and&#x20;/etc/profile.d*.sh&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(2160,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;group&#x20;to&#x20;execute&#x20;su.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','1&#41;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;2&#41;&#x20;Create&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;statement&#x20;in&#x20;the&#x20;/etc/group&#x20;file:&#x20;sudo:x:10:root,&lt;user&#x20;list&gt;&#x20;Notes:&#x20;The&#x20;use_uid&#x20;option&#x20;to&#x20;pam_wheel.so&#x20;is&#x20;a&#x20;no-op&#x20;on&#x20;debian&#x20;based&#x20;systems.&#x20;It&#x20;is&#x20;acceptable&#x20;but&#x20;not&#x20;required&#x20;as&#x20;these&#x20;systems&#x20;use&#x20;its&#x20;behavior&#x20;as&#x20;default.','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2161,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2162,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/shadow-','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2163,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2164,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2165,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;one&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2166,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2167,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2168,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2169,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;em&gt;&lt;username&gt;&lt;/em&gt;.&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}]'),(2170,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2171,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2172,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2173,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2174,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group.','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;all&#x20;users&#x20;from&#x20;the&#x20;shadow&#x20;group,&#x20;and&#x20;change&#x20;the&#x20;primary&#x20;group&#x20;of&#x20;any&#x20;users&#x20;with&#x20;shadow&#x20;as&#x20;their&#x20;primary&#x20;group.','[{\"cis\": [\"6.2.20\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2500,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/freevxfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;#&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2501,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/jffs2.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;#&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2502,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/hfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;#&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2503,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.confExample:&#x20;vi&#x20;/etc/modprobe.d/hfsplus.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;#&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2504,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/squashfs.confand&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfsmodule:&#x20;#&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2505,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/udf.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2506,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/vfat.conf:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2507,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.&#x20;This&#x20;can&#x20;be&#x20;accomplished&#x20;by&#x20;either&#x20;mounting&#x20;tmpfs&#x20;to&#x20;/tmp,&#x20;or&#x20;creating&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;Example:&#x20;tmpfs&#x20;/tmp&#x20;tmpfs&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;0&#x20;0&#x20;or&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;systemctl&#x20;enable&#x20;tmp.mount&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount:&#x20;[Mount]&#x20;What=tmpfs&#x20;Where=/tmp&#x20;Type=tmpfs&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2508,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodevto&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2509,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuidto&#x20;the&#x20;/tmp&#x20;mount&#x20;options:[Mount]&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2510,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexecto&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexecto&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;[Mount]&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2511,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2512,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2513,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2514,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2515,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2516,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2517,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2518,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2519,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.&#x20;&#x20;Note:&#x20;The&#x20;actions&#x20;in&#x20;the&#x20;item&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined&#x20;in&#x20;many&#x20;distributions.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2520,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2521,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2522,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2.6\", \"8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2523,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;it&#039;s&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;autofs&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;autofs:&#x20;&#x20;#&#x20;apt&#x20;purge&#x20;autofs','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2524,'Disable&#x20;USB&#x20;Storage','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vi&#x20;/etc/modprobe.d/usb_storage.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;#&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;#&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC6.3\"]}]'),(2525,'Ensure&#x20;sudo&#x20;is&#x20;installed','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Install&#x20;sudo&#x20;using&#x20;the&#x20;following&#x20;command.&#x20;#&#x20;apt&#x20;install&#x20;sudo&#x20;OR&#x20;#&#x20;apt&#x20;install&#x20;sudo-ldap','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2526,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;froma&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo,&#x20;which&#x20;would&#x20;again&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2527,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Defaults&#x20;logfile=&quot;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&quot;&#x20;&#x20;&#x20;Example&#x20;&#x20;&#x20;&#x20;Defaults&#x20;logfile=&quot;/var/log/sudo.log&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2528,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Install&#x20;AIDE:&#x20;#&#x20;apt&#x20;install&#x20;aide&#x20;aide-common.&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#&#x20;aideinit&#x20;.&#x20;&#x20;Notes:&#x20;The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;AIDE&#x20;because&#x20;it&#x20;alters&#x20;binaries&#x20;to&#x20;speed&#x20;up&#x20;their&#x20;start&#x20;up&#x20;times.&#x20;Run&#x20;prelink&#x20;-ua&#x20;to&#x20;restore&#x20;the&#x20;binaries&#x20;to&#x20;their&#x20;prelinked&#x20;state,&#x20;thus&#x20;avoiding&#x20;false&#x20;positives&#x20;from&#x20;AIDE.','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2529,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','If&#x20;cron&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;&#x20;&#x20;&#x20;#&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;&#x20;&#x20;&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/bin/aide.wrapper&#x20;--config&#x20;/etc/aide/aide.conf&#x20;--check','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2530,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;stored&#x20;in&#x20;/boot/grub.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.cfg,&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.cfg','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2531,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-mkpasswd-pbkdf2&#x20;:&#x20;#&#x20;grub-mkpasswd-pbkdf2&#x20;&#x20;&#x20;&#x20;&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;PBKDF2&#x20;hash&#x20;of&#x20;your&#x20;password&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;cat&#x20;&lt;&lt;EOF&#x20;&#x20;&#x20;&#x20;&#x20;set&#x20;superusers=&quot;&lt;username&gt;&quot;&#x20;&#x20;&#x20;password_pbkdf2&#x20;&lt;username&gt;&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;EOF&#x20;&#x20;&#x20;&#x20;&#x20;The&#x20;superuser/user&#x20;information&#x20;and&#x20;password&#x20;should&#x20;not&#x20;be&#x20;contained&#x20;in&#x20;the&#x20;/etc/grub.d/00_header&#x20;file&#x20;as&#x20;this&#x20;file&#x20;could&#x20;be&#x20;overwritten&#x20;in&#x20;a&#x20;package&#x20;update.&#x20;If&#x20;there&#x20;is&#x20;a&#x20;requirement&#x20;to&#x20;be&#x20;able&#x20;to&#x20;boot/reboot&#x20;without&#x20;entering&#x20;the&#x20;password,&#x20;edit&#x20;/etc/grub.d/10_linux&#x20;and&#x20;add&#x20;--unrestricted&#x20;to&#x20;the&#x20;line&#x20;CLASS=&#x20;&#x20;Example:&#x20;CLASS=&quot;--class&#x20;gnu-linux&#x20;--class&#x20;gnu&#x20;--class&#x20;os&#x20;--unrestricted&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2532,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Run&#x20;the&#x20;following&#x20;command&#x20;and&#x20;follow&#x20;the&#x20;prompts&#x20;to&#x20;set&#x20;a&#x20;password&#x20;for&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;passwd&#x20;root','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2533,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2534,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2535,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal:&#x20;#&#x20;prelink&#x20;-ua&#x20;Uninstall&#x20;prelink&#x20;using&#x20;the&#x20;appropriate&#x20;package&#x20;manager&#x20;or&#x20;manual&#x20;installation:&#x20;#&#x20;apt&#x20;purge&#x20;prelink','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2536,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.6.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2537,'Ensure&#x20;AppArmor&#x20;is&#x20;installed','AppArmor&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Install&#x20;Apparmor.&#x20;#&#x20;apt&#x20;install&#x20;apparmor&#x20;#&#x20;apt&#x20;install&#x20;apparmor-utils','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2538,'Ensure&#x20;AppArmor&#x20;is&#x20;enabled&#x20;in&#x20;the&#x20;bootloader&#x20;configuration','Configure&#x20;AppArmor&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwrittenby&#x20;the&#x20;bootloader&#x20;boot&#x20;parameters.','AppArmor&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;the&#x20;apparmor=1&#x20;and&#x20;security=apparmor&#x20;parameters&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX=&#x20;line&#x20;&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;apparmor=1&#x20;security=apparmor&quot;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration&#x20;#&#x20;update-grub&#x20;&#x20;&#x20;&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2539,'Ensure&#x20;all&#x20;AppArmor&#x20;Profiles&#x20;are&#x20;in&#x20;enforce&#x20;or&#x20;complain&#x20;mode','AppArmor&#x20;profiles&#x20;define&#x20;what&#x20;resources&#x20;applicatons&#x20;are&#x20;able&#x20;to&#x20;access.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;any&#x20;policies&#x20;that&#x20;exist&#x20;on&#x20;the&#x20;system&#x20;are&#x20;activated..','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;complain&#x20;mode:&#x20;#&#x20;aa-complain&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2540,'Ensure&#x20;all&#x20;AppArmor&#x20;Profiles&#x20;are&#x20;enforcing','AppArmor&#x20;profiles&#x20;define&#x20;what&#x20;resources&#x20;applicatons&#x20;are&#x20;able&#x20;to&#x20;access.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;any&#x20;policies&#x20;that&#x20;exist&#x20;on&#x20;the&#x20;system&#x20;are&#x20;activated..','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;all&#x20;profiles&#x20;to&#x20;enforce&#x20;mode:&#x20;#&#x20;aa-enforce&#x20;/etc/apparmor.d&#47;&#42;&#x20;Any&#x20;unconfined&#x20;processes&#x20;may&#x20;need&#x20;to&#x20;have&#x20;a&#x20;profile&#x20;created&#x20;or&#x20;activated&#x20;for&#x20;them&#x20;and&#x20;then&#x20;be&#x20;restarted.','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2541,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;OR&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(2542,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v&#x20;,&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(2543,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(2544,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2545,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2546,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;u-x,go-wx&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2547,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add:&#x20;[org/gnome/login-screen],&#x20;banner-message-enable=true,&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.8.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2548,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;Notes:&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\", \"3.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(2549,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;xinetd&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetddaemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;apt&#x20;purge&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2550,'Ensure&#x20;openbsd-inetd&#x20;is&#x20;not&#x20;installed','The&#x20;inetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;inetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openbsd-inetd:&#x20;apt&#x20;purge&#x20;openbsd-inetd','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2551,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available,&#x20;configure&#x20;systemd-timesyncd.&#x20;If&#x20;&quot;full&#x20;featured&quot;&#x20;and/or&#x20;encrypted&#x20;time&#x20;synchronization&#x20;is&#x20;required,&#x20;install&#x20;chrony&#x20;or&#x20;NTP.&#x20;To&#x20;install&#x20;chrony:&#x20;#&#x20;apt&#x20;install&#x20;chrony&#x20;To&#x20;install&#x20;ntp:&#x20;#&#x20;apt&#x20;install&#x20;ntp&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;setup&#x20;host&#x20;based&#x20;synchronization.','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2552,'Ensure&#x20;systemd-timesyncd&#x20;is&#x20;configured','systemd-timesyncd&#x20;is&#x20;a&#x20;daemon&#x20;that&#x20;has&#x20;been&#x20;added&#x20;for&#x20;synchronizing&#x20;the&#x20;system&#x20;clock&#x20;across&#x20;the&#x20;network.&#x20;It&#x20;implements&#x20;an&#x20;SNTP&#x20;client.&#x20;In&#x20;contrast&#x20;to&#x20;NTP&#x20;implementations&#x20;such&#x20;as&#x20;chrony&#x20;or&#x20;the&#x20;NTP&#x20;reference&#x20;server&#x20;this&#x20;only&#x20;implements&#x20;a&#x20;client&#x20;side,&#x20;and&#x20;does&#x20;not&#x20;bother&#x20;with&#x20;the&#x20;full&#x20;NTP&#x20;complexity,&#x20;focusing&#x20;only&#x20;on&#x20;querying&#x20;time&#x20;from&#x20;one&#x20;remote&#x20;server&#x20;and&#x20;synchronizing&#x20;the&#x20;local&#x20;clock&#x20;to&#x20;it.&#x20;The&#x20;daemon&#x20;runs&#x20;with&#x20;minimal&#x20;privileges,&#x20;and&#x20;has&#x20;been&#x20;hooked&#x20;up&#x20;with&#x20;networkd&#x20;to&#x20;only&#x20;operate&#x20;when&#x20;network&#x20;connectivity&#x20;is&#x20;available.&#x20;The&#x20;daemon&#x20;saves&#x20;the&#x20;current&#x20;clock&#x20;to&#x20;disk&#x20;every&#x20;time&#x20;a&#x20;new&#x20;NTP&#x20;sync&#x20;has&#x20;been&#x20;acquired,&#x20;and&#x20;uses&#x20;this&#x20;to&#x20;possibly&#x20;correct&#x20;the&#x20;system&#x20;clock&#x20;early&#x20;at&#x20;bootup,&#x20;in&#x20;order&#x20;to&#x20;accommodate&#x20;for&#x20;systems&#x20;that&#x20;lack&#x20;an&#x20;RTC&#x20;such&#x20;as&#x20;the&#x20;Raspberry&#x20;Pi&#x20;and&#x20;embedded&#x20;devices,&#x20;and&#x20;make&#x20;sure&#x20;that&#x20;time&#x20;monotonically&#x20;progresses&#x20;on&#x20;these&#x20;systems,&#x20;even&#x20;if&#x20;it&#x20;is&#x20;not&#x20;always&#x20;correct.&#x20;To&#x20;make&#x20;use&#x20;of&#x20;this&#x20;daemon&#x20;a&#x20;new&#x20;system&#x20;user&#x20;and&#x20;group&#x20;&quot;systemd-&#x20;timesync&quot;&#x20;needs&#x20;to&#x20;be&#x20;created&#x20;on&#x20;installation&#x20;of&#x20;systemd.&#x20;Note:&#x20;The&#x20;systemd-timesyncd&#x20;service&#x20;specifically&#x20;implements&#x20;only&#x20;SNTP.&#x20;This&#x20;minimalistic&#x20;service&#x20;will&#x20;set&#x20;the&#x20;system&#x20;clock&#x20;for&#x20;large&#x20;offsets&#x20;or&#x20;slowly&#x20;adjust&#x20;it&#x20;for&#x20;smaller&#x20;deltas.&#x20;More&#x20;complex&#x20;use&#x20;cases&#x20;are&#x20;not&#x20;covered&#x20;by&#x20;systemd-timesyncd.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;timesyncd&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','Proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;timesyncd&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;systemd-timesyncd&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;systemd-timesyncd.service&#x20;&#x20;||&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/systemd/timesyncd.conf&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;NTP=0.debian.pool.ntp.org&#x20;1.debian.pool.ntp.org&#x20;&#x20;&#x20;FallbackNTP=2.debian.pool.ntp.org&#x20;3.debian.pool.ntp.org&#x20;&#x20;&#x20;&#x20;RootDistanceMax=1&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;start&#x20;systemd-timesyncd.service&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;start&#x20;systemd-timesyncd.service&#x20;&#x20;&#x20;#&#x20;timedatectl&#x20;set-ntp&#x20;true&#x20;&#x20;||&#x20;Notes:&#x20;Servers&#x20;listed&#x20;and&#x20;RootDistanceMax&#x20;should&#x20;be&#x20;In&#x20;Accordance&#x20;With&#x20;Local&#x20;Policy&#x20;some&#x20;versions&#x20;of&#x20;systemd&#x20;have&#x20;been&#x20;compiled&#x20;without&#x20;systemd-timesycnd.&#x20;On&#x20;these&#x20;distributions,&#x20;chrony&#x20;or&#x20;NTP&#x20;should&#x20;be&#x20;used&#x20;instead&#x20;of&#x20;systemd-timesycnd.&#x20;Not&#x20;all&#x20;options&#x20;are&#x20;available&#x20;on&#x20;all&#x20;versions&#x20;of&#x20;systemd-timesyncd','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2553,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;Configure&#x20;chrony&#x20;to&#x20;run&#x20;as&#x20;the&#x20;chrony&#x20;user&#x20;by&#x20;configuring&#x20;the&#x20;appropriate&#x20;startup&#x20;script&#x20;for&#x20;your&#x20;distribution.&#x20;Startup&#x20;scripts&#x20;are&#x20;typically&#x20;stored&#x20;in&#x20;/etc/init.d&#x20;or&#x20;/etc/systemd&#x20;.','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2554,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;Configure&#x20;ntp&#x20;to&#x20;run&#x20;as&#x20;the&#x20;ntp&#x20;user&#x20;by&#x20;adding&#x20;or&#x20;editing&#x20;the&#x20;/etc/init.d/ntp&#x20;file:&#x20;RUNASUSER=ntp','[{\"cis\": [\"2.2.1.4\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2555,'Ensure&#x20;the&#x20;X&#x20;Window&#x20;system&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;apt&#x20;purge&#x20;xserver-xorg*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.8\", \"CC7.1\", \"CC7.2\", \"CC8.1\"]}]'),(2556,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attach&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2557,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2558,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;isc-dhcp-server&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;isc-dhcp-server6','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2559,'Ensure&#x20;LDAP&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2560,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;nfs-server&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2561,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;bind9','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2562,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2563,'Ensure&#x20;HTTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;apache2','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2564,'Ensure&#x20;email&#x20;services&#x20;are&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;mail&#x20;submission&#x20;and&#x20;transport&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;mail&#x20;transport&#x20;services&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;or&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;dovecot&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dovecot','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2565,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smbd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;smbd','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2566,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2567,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2568,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/exim4/update-exim4.conf.conf&#x20;and&#x20;and&#x20;or&#x20;modify&#x20;following&#x20;lines&#x20;to&#x20;look&#x20;like&#x20;the&#x20;lines&#x20;below:&#x20;dc_eximconfig_configtype=&#039;local&#039;&#x20;dc_local_interfaces=&#039;127.0.0.1&#x20;;&#x20;::1&#039;&#x20;dc_readhost=&#039;&#039;&#x20;dc_relay_domains=&#039;&#039;&#x20;dc_minimaldns=&#039;false&#039;&#x20;dc_relay_nets=&#039;&#039;&#x20;dc_smarthost=&#039;&#039;&#x20;dc_use_split_config=&#039;false&#039;&#x20;dc_hide_mailname=&#039;&#039;&#x20;dc_mailname_in_oh=&#039;true&#039;&#x20;dc_localdelivery=&#039;mail_spool&#039;&#x20;Restart&#x20;exim4:&#x20;#&#x20;systemctl&#x20;restart&#x20;exim4','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(2569,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rsync','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(2570,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;nis:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;nis','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2571,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Uninstall&#x20;nis&#x20;:&#x20;apt&#x20;purge&#x20;nis','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2572,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh-client&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh&#x20;,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Uninstall&#x20;rsh&#x20;:&#x20;apt&#x20;purge&#x20;rsh-client','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2573,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talkclient,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Uninstall&#x20;talk&#x20;:&#x20;apt&#x20;purge&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2574,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Uninstall&#x20;telnet&#x20;:&#x20;#&#x20;apt&#x20;purge&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2575,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Uninstall&#x20;ldap-utils&#x20;:&#x20;#&#x20;apt&#x20;purge&#x20;ldap-utils','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2576,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.6\", \"CC5.2\"]}]'),(2577,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.&#x20;Debian&#x20;contains&#x20;a&#x20;wireless&#x20;tool&#x20;kit&#x20;to&#x20;allow&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;and&#x20;use&#x20;wireless&#x20;networks.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;nmcli&#x20;radio&#x20;all&#x20;off','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"1.2.3\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2578,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2579,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.ip_forwards*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv6.conf.all.forwardings*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv6.conf.all.forwardings*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2580,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2581,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2582,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2583,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2584,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2585,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2586,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2587,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2588,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;systems&#x20;ability&#x20;to&#x20;accept&#x20;router&#x20;advertisements','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2589,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-&#x20;sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2590,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2591,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2592,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2593,'Ensure&#x20;a&#x20;Firewall&#x20;package&#x20;is&#x20;installed','A&#x20;Firewall&#x20;package&#x20;should&#x20;be&#x20;selected.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;nftables&#x20;or&#x20;iptables.','A&#x20;Firewall&#x20;package&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;the&#x20;Firewall&#x20;package&#x20;that&#x20;follows&#x20;local&#x20;site&#x20;policy:&#x20;To&#x20;install&#x20;UFW&#x20;,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;apt&#x20;install&#x20;ufw&#x20;To&#x20;install&#x20;nftables&#x20;,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;apt&#x20;install&#x20;nftables&#x20;To&#x20;install&#x20;iptables&#x20;,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;apt&#x20;install&#x20;iptables','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2594,'Ensure&#x20;ufw&#x20;service&#x20;is&#x20;enabled','UncomplicatedFirewall&#x20;&#40;ufw&#41;&#x20;is&#x20;a&#x20;frontend&#x20;for&#x20;iptables.&#x20;ufw&#x20;provides&#x20;a&#x20;framework&#x20;for&#x20;managing&#x20;netfilter,&#x20;as&#x20;well&#x20;as&#x20;a&#x20;command-line&#x20;and&#x20;available&#x20;graphical&#x20;user&#x20;interface&#x20;for&#x20;manipulating&#x20;the&#x20;firewall.&#x20;Ensure&#x20;that&#x20;the&#x20;ufw&#x20;service&#x20;is&#x20;enabled&#x20;to&#x20;protect&#x20;your&#x20;system.','The&#x20;ufw&#x20;service&#x20;must&#x20;be&#x20;enabled&#x20;and&#x20;running&#x20;in&#x20;order&#x20;for&#x20;ufw&#x20;to&#x20;protect&#x20;the&#x20;system','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;ufw:&#x20;#&#x20;ufw&#x20;enable','[{\"cis\": [\"3.5.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2595,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;deny&#x20;policy:&#x20;#&#x20;ufw&#x20;default&#x20;deny&#x20;incoming&#x20;#&#x20;ufw&#x20;default&#x20;deny&#x20;outgoing&#x20;#&#x20;ufw&#x20;default&#x20;deny&#x20;routed','[{\"cis\": [\"3.5.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2596,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#x20;for&#x20;IPv4&#x20;and&#x20;::1/128&#x20;for&#x20;IPv6&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ufw&#x20;allow&#x20;in&#x20;on&#x20;lo&#x20;#&#x20;ufw&#x20;allow&#x20;out&#x20;on&#x20;lo&#x20;#&#x20;sudo&#x20;ufw&#x20;deny&#x20;in&#x20;from&#x20;127.0.0.0/8&#x20;#&#x20;sudo&#x20;ufw&#x20;deny&#x20;in&#x20;from&#x20;::1','[{\"cis\": [\"3.5.2.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2597,'Ensure&#x20;a&#x20;table&#x20;exists','Tables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;.Example:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;filter','[{\"cis\": [\"3.5.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2598,'Ensure&#x20;base&#x20;chains&#x20;exist','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;input&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;forward&#x20;priority&#x20;0;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;output&#x20;priority&#x20;0&#x20;;&#x20;}','[{\"cis\": [\"3.5.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2599,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept&#x20;,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;transversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;;&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;and&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.5.3.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2600,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conf&#x20;file&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.3.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2601,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.5.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2602,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.4.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(2603,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP.&#x20;Notes:&#x20;Changing&#x20;firewall&#x20;settings&#x20;while&#x20;connected&#x20;over&#x20;network&#x20;can&#x20;result&#x20;in&#x20;being&#x20;locked&#x20;out&#x20;of&#x20;the&#x20;system.&#x20;Remediation&#x20;will&#x20;only&#x20;affect&#x20;the&#x20;active&#x20;system&#x20;firewall,&#x20;be&#x20;sure&#x20;to&#x20;configure&#x20;the&#x20;default&#x20;policy&#x20;in&#x20;your&#x20;firewall&#x20;management&#x20;to&#x20;apply&#x20;on&#x20;boot&#x20;as&#x20;well.','[{\"cis\": [\"3.5.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2604,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.4.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(2605,'Ensure&#x20;auditd&#x20;is&#x20;installed','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;apt&#x20;install&#x20;auditd&#x20;audispd-plugins','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2606,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Enable&#x20;and&#x20;start&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2607,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;update-grub&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2608,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;&#x20;Notes:&#x20;The&#x20;max_log_file&#x20;parameter&#x20;is&#x20;measured&#x20;in&#x20;megabytes.','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2609,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2610,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;action_mail_acct&#x20;=&#x20;root&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.2.3\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}]'),(2611,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-&#x20;change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;|&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2612,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;|&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2613,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-&#x20;login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;&#x20;and&#x20;/etc/sysconfig/network&#x20;&#40;directory&#x20;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;&#x20;files.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/network&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale-w&#x20;/etc/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2614,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;AppArmor&#x20;mandatory&#x20;access&#x20;control.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','On&#x20;systems&#x20;using&#x20;AppArmor&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/apparmor/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;|&#x20;-w&#x20;/etc/apparmor.d/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2615,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/var/log/faillog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2616,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;|&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;|&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;last&#x20;-f&#x20;/var/run/utmp&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2617,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2618,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/directory&#x20;ending&#x20;in&#x20;.rules&#x20;&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/audit.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;|&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/directory&#x20;ending&#x20;in&#x20;.rules&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;&#x20;|&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;&#x20;|&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;|&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;toset&#x20;active&#x20;settings&#x20;requires&#x20;the&#x20;auditd&#x20;service&#x20;to&#x20;be&#x20;restarted,&#x20;and&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2619,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.12\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2620,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"6.2\", \"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(2621,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;|&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(2622,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;&lt;Path&#x20;to&#x20;sudo&#x20;logfile&gt;&#x20;-p&#x20;wa&#x20;-k&#x20;actions.&#x20;Notes:&#x20;The&#x20;system&#x20;must&#x20;be&#x20;configured&#x20;with&#x20;sudisabled&#x20;&#40;See&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted&#41;&#x20;to&#x20;force&#x20;all&#x20;command&#x20;execution&#x20;through&#x20;sudo.&#x20;This&#x20;will&#x20;not&#x20;be&#x20;effective&#x20;on&#x20;the&#x20;console,&#x20;as&#x20;administrators&#x20;can&#x20;log&#x20;in&#x20;as&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.9\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2623,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules.&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;|&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(2624,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rules&#x20;and&#x20;add&#x20;the&#x20;line:&#x20;-e&#x20;2.&#x20;Notes:&#x20;This&#x20;setting&#x20;will&#x20;ensure&#x20;reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;requires&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2625,'Ensure&#x20;rsyslog&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslogsuch&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog:&#x20;#&#x20;apt&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2626,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;will&#x20;not&#x20;have&#x20;a&#x20;syslog&#x20;service&#x20;running.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2627,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC6.1\", \"CC7.2\", \"CC.7.3\", \"CC7.4\"]}]'),(2628,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;one&#x20;of&#x20;the&#x20;following&#x20;lines:&#x20;Newer&#x20;syntax:&#x20;&lt;files&#x20;to&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;log&#x20;server&gt;&#x20;action&#40;type=&quot;omfwd&quot;&#x20;target=&quot;&lt;FQDN&#x20;or&#x20;ip&#x20;of&#x20;loghost&gt;&quot;&#x20;port=&quot;&lt;port&#x20;number&gt;&quot;&#x20;protocol=&quot;tcp&quot;&#x20;ction.resumeRetryCount=&quot;&lt;number&#x20;of&#x20;re-tries&gt;&quot;&#x20;&#x20;queue.type=&quot;linkList&quot;&#x20;queue.size=&lt;number&#x20;of&#x20;messages&#x20;to&#x20;queue&gt;&quot;&#41;&#x20;Example:&#x20;*.*&#x20;action&#40;type=&quot;omfwd&quot;&#x20;target=&quot;192.168.2.100&quot;&#x20;port&quot;514&quot;&#x20;protocol=&quot;tcp&quot;&#x20;action.resumeRetryCount=&quot;100&quot;&#x20;queue.type=&quot;linkList&quot;&#x20;queue.size=&quot;1000&quot;&#41;&#x20;Older&#x20;syntax:&#x20;*.*&#x20;@@&lt;FQDN&#x20;or&#x20;ip&#x20;of&#x20;loghost&gt;','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2629,'Ensure&#x20;remote&#x20;rsyslog&#x20;messages&#x20;are&#x20;only&#x20;accepted&#x20;on&#x20;designated&#x20;log&#x20;hosts','By&#x20;default,&#x20;rsyslog&#x20;does&#x20;not&#x20;listen&#x20;for&#x20;log&#x20;messages&#x20;coming&#x20;in&#x20;from&#x20;remote&#x20;systems.&#x20;The&#x20;ModLoad&#x20;tells&#x20;rsyslog&#x20;to&#x20;load&#x20;the&#x20;imtcp.so&#x20;module&#x20;so&#x20;it&#x20;can&#x20;listen&#x20;over&#x20;a&#x20;network&#x20;via&#x20;TCP.&#x20;The&#x20;InputTCPServerRun&#x20;option&#x20;instructs&#x20;rsyslogd&#x20;to&#x20;listen&#x20;on&#x20;the&#x20;specified&#x20;TCP&#x20;port.','The&#x20;guidance&#x20;in&#x20;the&#x20;section&#x20;ensures&#x20;that&#x20;remote&#x20;log&#x20;hosts&#x20;are&#x20;configured&#x20;to&#x20;only&#x20;accept&#x20;rsyslog&#x20;data&#x20;from&#x20;hosts&#x20;within&#x20;the&#x20;specified&#x20;domain&#x20;and&#x20;that&#x20;those&#x20;systems&#x20;that&#x20;are&#x20;not&#x20;designed&#x20;to&#x20;be&#x20;log&#x20;hosts&#x20;do&#x20;not&#x20;accept&#x20;any&#x20;remote&#x20;rsyslog&#x20;messages.&#x20;This&#x20;provides&#x20;protection&#x20;from&#x20;spoofed&#x20;log&#x20;data&#x20;and&#x20;ensures&#x20;that&#x20;system&#x20;administrators&#x20;are&#x20;reviewing&#x20;reasonably&#x20;complete&#x20;syslog&#x20;data&#x20;in&#x20;a&#x20;central&#x20;location.','','For&#x20;hosts&#x20;that&#x20;are&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;un-comment&#x20;or&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;$ModLoad&#x20;imtcp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;$InputTCPServerRun&#x20;514.&#x20;For&#x20;hosts&#x20;that&#x20;are&#x20;not&#x20;designated&#x20;as&#x20;log&#x20;hosts,&#x20;edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;file&#x20;and&#x20;comment&#x20;or&#x20;remove&#x20;the&#x20;following&#x20;lines:&#x20;#&#x20;$ModLoad&#x20;imtcp&#x20;#&#x20;$InputTCPServerRun&#x20;514.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"10.5.1\"]}]'),(2630,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(2631,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2632,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;write&#x20;logfiles&#x20;to&#x20;persistent&#x20;disk','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Storage=persistent','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2633,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitivebdata&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+&#x20;-o&#x20;-type&#x20;d&#x20;-exec&#x20;chmod&#x20;g-w,o-rwx&#x20;&quot;{}&quot;&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(2634,'Ensure&#x20;logrotate&#x20;assigns&#x20;appropriate&#x20;permissions','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;/etc/logrotate.conf&#x20;and&#x20;update&#x20;the&#x20;create&#x20;line&#x20;to&#x20;read&#x20;0640&#x20;or&#x20;more&#x20;restrictive,&#x20;following&#x20;local&#x20;site&#x20;policy&#x20;&#x20;&#x20;Example:&#x20;create&#x20;0640&#x20;root&#x20;utmp','[{\"cis\": [\"4.4\"]}, {\"cis_csc\": [\"14.6\"]}]'),(2635,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron:&#x20;systemctl&#x20;--now&#x20;enable&#x20;cron','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2636,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2637,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2638,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2639,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2640,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2641,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2642,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2643,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-&#x20;privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2644,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;0600&#x20;{}&#x20;;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2645,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;public&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;0644&#x20;{}&#x20;;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2646,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;not&#x20;set&#x20;to&#x20;1','Older&#x20;versions&#x20;of&#x20;SSH&#x20;support&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.&#x20;Notes:&#x20;This&#x20;command&#x20;not&#x20;longer&#x20;exists&#x20;in&#x20;newer&#x20;versions&#x20;of&#x20;SSH.&#x20;This&#x20;check&#x20;is&#x20;still&#x20;being&#x20;included&#x20;for&#x20;systems&#x20;that&#x20;may&#x20;be&#x20;running&#x20;an&#x20;older&#x20;version&#x20;of&#x20;SSH.&#x20;As&#x20;of&#x20;openSSH&#x20;version&#x20;7.4&#x20;this&#x20;parameter&#x20;will&#x20;not&#x20;cause&#x20;an&#x20;issue&#x20;when&#x20;included.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"4.5\", \"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2647,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2648,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2649,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2650,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhostsand&#x20;.shostsfiles&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthenticationor&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2651,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2652,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2653,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\"]}]'),(2654,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2655,'Ensure&#x20;only&#x20;strong&#x20;ciphers&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&quot;Sweet32&quot;&#x20;attack&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involving&#x20;LSB&#x20;values,&#x20;aka&#x20;the&#x20;&quot;Bar&#x20;Mitzvah&quot;&#x20;issue&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;Ciphers&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphers&#x20;Example:&#x20;Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2656,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:&#x20;MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"14.4\", \"16.5\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2657,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms&#x20;Example:&#x20;KexAlgorithms&#x20;curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.7\", \"CC6.1\", \"CC7.2\"]}]'),(2658,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;&#x20;&#x20;&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(2659,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2660,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers,&#x20;AllowGroups,&#x20;DenyUsers,&#x20;DenyGroups.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;AllowGroups&#x20;&lt;grouplist&gt;&#x20;&#x20;&#x20;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;&#x20;&#x20;&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2661,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2662,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthentication&#x20;and&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types.','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2663,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines.','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.&#x20;SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.21\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(2664,'Ensure&#x20;SSH&#x20;MaxStartups&#x20;is&#x20;configured','The&#x20;MaxStartups&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;to&#x20;the&#x20;SSH&#x20;daemon.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;maxstartups&#x20;10:30:60','[{\"cis\": [\"5.2.22\"]}, {\"cis_csc\": [\"5.1\"]}]'),(2665,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;limited','The&#x20;MaxSessions&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;concurrent&#x20;sessions,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxSessions&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;10','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2666,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options:&#x20;-&#x20;retry=3&#x20;&#40;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure&#41;.&#x20;The&#x20;following&#x20;options&#x20;are&#x20;set&#x20;in&#x20;the&#x20;/etc/security/pwquality.conf&#x20;file:&#x20;-&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#40;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies.&#41;','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','1&#41;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;the&#x20;pam_pwquality&#x20;module:&#x20;apt&#x20;install&#x20;libpam-pwquality&#x20;2&#41;&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_pwquality.so&#x20;retry=3&#x20;3&#41;&#x20;Edit&#x20;/etc/security/pwquality.conf&#x20;to&#x20;add&#x20;or&#x20;update&#x20;the&#x20;following&#x20;settings&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;requirements&#x20;only&#x20;cover&#x20;including&#x20;try_first_pass&#x20;and&#x20;minlen&#x20;set&#x20;to&#x20;14&#x20;or&#x20;more.&#x20;Settings&#x20;in&#x20;/etc/security/pwquality.conf&#x20;must&#x20;use&#x20;spaces&#x20;around&#x20;the&#x20;=&#x20;symbol.','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2667,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;files.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.&#x20;Check&#x20;the&#x20;documentation&#x20;for&#x20;each&#x20;secondary&#x20;program&#x20;for&#x20;instructions&#x20;on&#x20;how&#x20;to&#x20;configure&#x20;them&#x20;to&#x20;work&#x20;with&#x20;PAM.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;to&#x20;the&#x20;policy&#x20;in&#x20;effect&#x20;at&#x20;your&#x20;site.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/common-auth&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900.&#x20;Edit&#x20;the&#x20;/etc/pam.d/common-account&#x20;file&#x20;and&#x20;add&#x20;the&#x20;account&#x20;lines&#x20;below:&#x20;account&#x20;&#x20;&#x20;&#x20;requisite&#x20;&#x20;&#x20;&#x20;pam_deny.so&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;account&#x20;&#x20;&#x20;&#x20;required&#x20;&#x20;&#x20;&#x20;pam_tally2.so.&#x20;Note:&#x20;If&#x20;a&#x20;user&#x20;has&#x20;been&#x20;locked&#x20;out&#x20;because&#x20;they&#x20;have&#x20;reached&#x20;the&#x20;maximum&#x20;consecutive&#x20;failure&#x20;count&#x20;defined&#x20;by&#x20;deny=&#x20;in&#x20;the&#x20;pam_tally2.so&#x20;module,&#x20;the&#x20;user&#x20;can&#x20;be&#x20;unlocked&#x20;by&#x20;issuing&#x20;the&#x20;command&#x20;/sbin/pam_tally2&#x20;-u&#x20;&lt;username&gt;&#x20;--reset.&#x20;This&#x20;command&#x20;sets&#x20;the&#x20;failed&#x20;count&#x20;to&#x20;0,&#x20;effectively&#x20;unlocking&#x20;the&#x20;user.&#x20;Notes:BUG&#x20;In&#x20;pam_tally2.so&#x20;To&#x20;work&#x20;around&#x20;this&#x20;issue&#x20;the&#x20;addition&#x20;of&#x20;pam_tally2.so&#x20;in&#x20;the&#x20;accounts&#x20;section&#x20;of&#x20;the&#x20;/etc/pam.d/common-account&#x20;file&#x20;has&#x20;been&#x20;added&#x20;to&#x20;the&#x20;audit&#x20;and&#x20;remediation&#x20;sections.&#x20;pam_tally2&#x20;line&#x20;must&#x20;be&#x20;added&#x20;for&#x20;the&#x20;counter&#x20;to&#x20;reset&#x20;to&#x20;0&#x20;when&#x20;using&#x20;sudo.&#x20;&#x20;&#x20;&#x20;&#x20;Use&#x20;of&#x20;the&#x20;&quot;audit&quot;&#x20;keyword&#x20;may&#x20;log&#x20;credentials&#x20;in&#x20;the&#x20;case&#x20;of&#x20;user&#x20;error&#x20;during&#x20;authentication.&#x20;This&#x20;risk&#x20;should&#x20;be&#x20;evaluated&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;site&#x20;policies&#x20;of&#x20;your&#x20;organization.','[{\"cis\": [\"5.3.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2668,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5.&#x20;Notes:&#x20;Additional&#x20;module&#x20;options&#x20;may&#x20;be&#x20;set,&#x20;recommendation&#x20;only&#x20;covers&#x20;those&#x20;listed&#x20;here.','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2669,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;[success=1&#x20;default=ignore]&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(2670,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MAX_DAYS&#x20;90.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;5th&#x20;field&#x20;should&#x20;be&#x20;365&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;will&#x20;disable&#x20;password&#x20;expiration.&#x20;Additionally&#x20;the&#x20;password&#x20;expiration&#x20;must&#x20;be&#x20;greater&#x20;than&#x20;the&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;or&#x20;users&#x20;will&#x20;be&#x20;unable&#x20;to&#x20;change&#x20;their&#x20;password.','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2671,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;4th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2672,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;6th&#x20;field&#x20;should&#x20;be&#x20;7&#x20;or&#x20;more&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2673,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;#&#x20;useradd&#x20;-D&#x20;-f&#x20;30.&#x20;Modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;#&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;.&#x20;Notes:&#x20;You&#x20;can&#x20;also&#x20;check&#x20;this&#x20;setting&#x20;in&#x20;/etc/shadow&#x20;directly.&#x20;The&#x20;7th&#x20;field&#x20;should&#x20;be&#x20;30&#x20;or&#x20;less&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password.&#x20;A&#x20;value&#x20;of&#x20;-1&#x20;would&#x20;disable&#x20;this&#x20;setting.','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"4.4\", \"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2674,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;#&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2675,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2676,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bash.bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;readonly&#x20;TMOUT=900&#x20;;&#x20;export&#x20;TMOUT&#x20;.&#x20;Note&#x20;that&#x20;setting&#x20;the&#x20;value&#x20;to&#x20;readonly&#x20;prevents&#x20;unwanted&#x20;modification&#x20;during&#x20;runtime.','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(2677,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;sudo&#x20;group&#x20;to&#x20;execute&#x20;su.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Create&#x20;an&#x20;empty&#x20;group&#x20;that&#x20;will&#x20;be&#x20;specified&#x20;for&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command.&#x20;The&#x20;group&#x20;should&#x20;be&#x20;named&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;Example&#x20;#&#x20;groupadd&#x20;sugroup&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file,&#x20;specifying&#x20;the&#x20;empty&#x20;group:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid&#x20;group=sugroup','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2678,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2679,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2680,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;one&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2681,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2682,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2683,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2684,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2685,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(2686,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;em&gt;&lt;username&gt;&lt;/em&gt;.&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(2687,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2688,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2689,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;+&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(2690,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(2691,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group.','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;all&#x20;users&#x20;from&#x20;the&#x20;shadow&#x20;group,&#x20;and&#x20;change&#x20;the&#x20;primary&#x20;group&#x20;of&#x20;any&#x20;users&#x20;with&#x20;shadow&#x20;as&#x20;their&#x20;primary&#x20;group.','[{\"cis\": [\"6.2.20\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC7.2\", \"CC6.1\", \"CC6.8\", \"CC7.3\", \"CC7.4\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}]'),(3000,'SSH&#x20;Hardening:&#x20;Port&#x20;should&#x20;not&#x20;be&#x20;22','The&#x20;ssh&#x20;daemon&#x20;should&#x20;not&#x20;be&#x20;listening&#x20;on&#x20;port&#x20;22&#x20;&#40;the&#x20;default&#x20;value&#41;&#x20;for&#x20;incoming&#x20;connections.','Changing&#x20;the&#x20;default&#x20;port&#x20;you&#x20;may&#x20;reduce&#x20;the&#x20;number&#x20;of&#x20;successful&#x20;attacks&#x20;from&#x20;zombie&#x20;bots,&#x20;an&#x20;attacker&#x20;or&#x20;bot&#x20;doing&#x20;port-scanning&#x20;can&#x20;quickly&#x20;identify&#x20;your&#x20;SSH&#x20;port.','','Change&#x20;the&#x20;Port&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3001,'SSH&#x20;Hardening:&#x20;Protocol&#x20;should&#x20;be&#x20;set&#x20;to&#x20;2','The&#x20;SSH&#x20;protocol&#x20;should&#x20;not&#x20;be&#x20;1.','The&#x20;Protocol&#x20;parameter&#x20;dictates&#x20;which&#x20;version&#x20;of&#x20;the&#x20;SSH&#x20;communication&#x20;and&#x20;encryption&#x20;protocols&#x20;are&#x20;in&#x20;use.&#x20;Version&#x20;1&#x20;of&#x20;the&#x20;SSH&#x20;protocol&#x20;has&#x20;weaknesses.','','Change&#x20;the&#x20;Protocol&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3002,'SSH&#x20;Hardening:&#x20;Root&#x20;account&#x20;should&#x20;not&#x20;be&#x20;able&#x20;to&#x20;log&#x20;in','The&#x20;option&#x20;PermitRootLogin&#x20;should&#x20;be&#x20;set&#x20;to&#x20;no.','The&#x20;option&#x20;PermitRootLogin&#x20;specifies&#x20;whether&#x20;root&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;If&#x20;you&#x20;want&#x20;log&#x20;in&#x20;as&#x20;root,&#x20;you&#x20;should&#x20;use&#x20;the&#x20;option&#x20;&quot;Match&quot;&#x20;and&#x20;restrict&#x20;it&#x20;to&#x20;a&#x20;few&#x20;IP&#x20;addresses.','','Change&#x20;the&#x20;PermitRootLogin&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','\"\"'),(3003,'SSH&#x20;Hardening:&#x20;No&#x20;Public&#x20;Key&#x20;authentication','The&#x20;option&#x20;PubkeyAuthentication&#x20;should&#x20;be&#x20;set&#x20;yes.','Access&#x20;only&#x20;by&#x20;public&#x20;key.&#x20;Generally&#x20;people&#x20;will&#x20;use&#x20;weak&#x20;passwords&#x20;and&#x20;have&#x20;poor&#x20;password&#x20;practices.&#x20;Keys&#x20;are&#x20;considered&#x20;stronger&#x20;than&#x20;password.','','Change&#x20;the&#x20;PubkeyAuthentication&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3004,'SSH&#x20;Hardening:&#x20;Password&#x20;Authentication&#x20;should&#x20;be&#x20;disabled','The&#x20;option&#x20;PasswordAuthentication&#x20;should&#x20;be&#x20;set&#x20;to&#x20;no.','The&#x20;option&#x20;PasswordAuthentication&#x20;specifies&#x20;whether&#x20;we&#x20;should&#x20;use&#x20;password-based&#x20;authentication.&#x20;Use&#x20;public&#x20;key&#x20;authentication&#x20;instead&#x20;of&#x20;passwords.','','Change&#x20;the&#x20;PasswordAuthentication&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3005,'SSH&#x20;Hardening:&#x20;Empty&#x20;passwords&#x20;should&#x20;not&#x20;be&#x20;allowed','The&#x20;option&#x20;PermitEmptyPasswords&#x20;should&#x20;be&#x20;set&#x20;to&#x20;no.','The&#x20;option&#x20;PermitEmptyPasswords&#x20;specifies&#x20;whether&#x20;the&#x20;server&#x20;allows&#x20;logging&#x20;in&#x20;to&#x20;accounts&#x20;with&#x20;a&#x20;null&#x20;password.&#x20;Accounts&#x20;with&#x20;null&#x20;passwords&#x20;are&#x20;a&#x20;bad&#x20;practice.','','Change&#x20;the&#x20;PermitEmptyPasswords&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3006,'SSH&#x20;Hardening:&#x20;Rhost&#x20;or&#x20;shost&#x20;should&#x20;not&#x20;be&#x20;used&#x20;for&#x20;authentication','The&#x20;option&#x20;IgnoreRhosts&#x20;should&#x20;be&#x20;set&#x20;to&#x20;yes.','The&#x20;option&#x20;IgnoreRhosts&#x20;specifies&#x20;whether&#x20;rhosts&#x20;or&#x20;shosts&#x20;files&#x20;should&#x20;not&#x20;be&#x20;used&#x20;in&#x20;authentication.&#x20;For&#x20;security&#x20;reasons&#x20;it&#x20;is&#x20;recommended&#x20;to&#x20;no&#x20;use&#x20;rhosts&#x20;or&#x20;shosts&#x20;files&#x20;for&#x20;authentication.','','Change&#x20;the&#x20;IgnoreRhosts&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3007,'SSH&#x20;Hardening:&#x20;Grace&#x20;Time&#x20;should&#x20;be&#x20;one&#x20;minute&#x20;or&#x20;less.','The&#x20;option&#x20;LoginGraceTime&#x20;should&#x20;be&#x20;set&#x20;to&#x20;60&#x20;or&#x20;less.','The&#x20;option&#x20;LoginGraceTime&#x20;specifies&#x20;how&#x20;long&#x20;in&#x20;seconds&#x20;after&#x20;a&#x20;connection&#x20;request&#x20;the&#x20;server&#x20;will&#x20;wait&#x20;before&#x20;disconnecting&#x20;if&#x20;the&#x20;user&#x20;has&#x20;not&#x20;successfully&#x20;logged&#x20;in.&#x20;30&#x20;seconds&#x20;is&#x20;the&#x20;recommended&#x20;time&#x20;for&#x20;avoiding&#x20;open&#x20;connections&#x20;without&#x20;authenticate.','','Change&#x20;the&#x20;LoginGraceTime&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3008,'SSH&#x20;Hardening:&#x20;Wrong&#x20;Maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts','The&#x20;option&#x20;MaxAuthTries&#x20;should&#x20;be&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less.','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;Once&#x20;the&#x20;number&#x20;of&#x20;failures&#x20;reaches&#x20;half&#x20;this&#x20;value,&#x20;additional&#x20;failures&#x20;are&#x20;logged.&#x20;This&#x20;should&#x20;be&#x20;set&#x20;to&#x20;4.','','Change&#x20;the&#x20;MaxAuthTries&#x20;option&#x20;value&#x20;in&#x20;the&#x20;sshd_config&#x20;file.','[{\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3009,'SSH&#x20;Hardening:&#x20;Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv&#x20;,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3010,'Ensure&#x20;retry&#x20;option&#x20;for&#x20;passwords&#x20;is&#x20;less&#x20;than&#x20;3','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3011,'Ensure&#x20;passwords&#x20;are&#x20;longer&#x20;than&#x20;14&#x20;characters','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3012,'Ensure&#x20;passwords&#x20;contain&#x20;at&#x20;least&#x20;one&#x20;digit','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3013,'Ensure&#x20;passwords&#x20;contain&#x20;at&#x20;least&#x20;one&#x20;lowercase&#x20;character','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3014,'Ensure&#x20;passwords&#x20;contain&#x20;at&#x20;least&#x20;one&#x20;uppercase&#x20;character','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3015,'Ensure&#x20;passwords&#x20;contain&#x20;at&#x20;least&#x20;one&#x20;special&#x20;character','The&#x20;pam_pwquality.so&#x20;module&#x20;and&#x20;pam_cracklib.so&#x20;module&#x20;&#40;depending&#x20;on&#x20;the&#x20;Linux&#x20;distribution&#x20;used&#41;&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;and&#x20;/etc/security/pwquality.conf&#x20;files,&#x20;or&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files,&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;or&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.','[{\"cis_csc\": [\"4.4\", \"5.7\", \"16.12\"]}]'),(3016,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;The&#x20;first&#x20;sets&#x20;of&#x20;changes&#x20;are&#x20;made&#x20;to&#x20;the&#x20;PAM&#x20;configuration&#x20;files.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;are&#x20;applied&#x20;to&#x20;the&#x20;program&#x20;specific&#x20;PAM&#x20;configuration&#x20;file.&#x20;The&#x20;second&#x20;set&#x20;of&#x20;changes&#x20;must&#x20;be&#x20;applied&#x20;to&#x20;each&#x20;program&#x20;that&#x20;will&#x20;lock&#x20;out&#x20;users.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Edit&#x20;the&#x20;/etc/pam.d/common-auth&#x20;file&#x20;and&#x20;add&#x20;the&#x20;auth&#x20;line&#x20;below:&#x20;#auth&#x20;required&#x20;pam_tally2.so&#x20;onerr=fail&#x20;audit&#x20;silent&#x20;deny=5&#x20;unlock_time=900','\"\"'),(3017,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/common-password&#x20;file&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;required&#x20;pam_unix.so&#x20;sha512','[{\"cis_csc\": [\"16.14\"]}]'),(3018,'Ensure&#x20;passwords&#x20;in&#x20;/etc/shadow&#x20;are&#x20;hashed&#x20;with&#x20;SHA-512&#x20;or&#x20;SHA-256','SHA-512&#x20;and&#x20;SHA-256&#x20;are&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithms&#x20;than&#x20;MD5.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.','','Set&#x20;the&#x20;default&#x20;algorithm&#x20;for&#x20;password&#x20;hashing&#x20;in&#x20;/etc/shadow&#x20;to&#x20;SHA-512&#x20;or&#x20;SHA-256.','\"\"'),(3019,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs.','[{\"cis_csc\": [\"4.4\", \"16\"]}]'),(3020,'Ensure&#x20;SELinux&#x20;or&#x20;AppArmor&#x20;are&#x20;installed','SELinux&#x20;and&#x20;AppArmor&#x20;provide&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;SELinux&#x20;or&#x20;apparmor:&#x20;#&#x20;apt-get&#x20;install&#x20;selinux-basics&#x20;Or:&#x20;#&#x20;apt-get&#x20;install&#x20;apparmor&#x20;apparmor-profiles&#x20;apparmor-utils','[{\"cis_csc\": [\"14.4\", \"14.6\"]}]'),(3021,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups:&#x20;#&#x20;systemctl&#x20;disable&#x20;cups','[{\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(3022,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;enable&#x20;auditd','[{\"cis_csc\": [\"6.2\", \"6.3\"]}]'),(3500,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp&#x20;.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.1\"]}]'),(3501,'Set&#x20;nodev&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3502,'Set&#x20;nosuid&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;set&#x20;userid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;set&#x20;userid&#x20;files&#x20;in&#x20;/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3503,'Set&#x20;noexec&#x20;option&#x20;for&#x20;/tmp&#x20;Partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3504,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.5\"]}]'),(3505,'Bind&#x20;Mount&#x20;the&#x20;/var/tmp&#x20;directory&#x20;to&#x20;/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;normally&#x20;a&#x20;standalone&#x20;directory&#x20;in&#x20;the&#x20;/var&#x20;file&#x20;system.&#x20;Binding&#x20;/var/tmp&#x20;to&#x20;/tmp&#x20;establishes&#x20;an&#x20;unbreakable&#x20;link&#x20;to&#x20;/tmp&#x20;that&#x20;cannot&#x20;be&#x20;removed&#x20;&#40;even&#x20;by&#x20;the&#x20;root&#x20;user&#41;.&#x20;It&#x20;also&#x20;allows&#x20;/var/tmp&#x20;to&#x20;inherit&#x20;the&#x20;same&#x20;mount&#x20;options&#x20;that&#x20;/tmp&#x20;owns,&#x20;allowing&#x20;/var/tmp&#x20;to&#x20;be&#x20;protected&#x20;in&#x20;the&#x20;same&#x20;/tmp&#x20;is&#x20;protected.','All&#x20;programs&#x20;that&#x20;use&#x20;/var/tmp&#x20;and&#x20;/tmp&#x20;to&#x20;read/write&#x20;temporary&#x20;files&#x20;will&#x20;always&#x20;be&#x20;written&#x20;to&#x20;the&#x20;/tmp&#x20;file&#x20;system,&#x20;preventing&#x20;a&#x20;user&#x20;from&#x20;running&#x20;the&#x20;/var&#x20;file&#x20;system&#x20;out&#x20;of&#x20;space&#x20;or&#x20;trying&#x20;to&#x20;perform&#x20;operations&#x20;that&#x20;have&#x20;been&#x20;blocked&#x20;in&#x20;the&#x20;/tmp&#x20;filesystem.','','#&#x20;mount&#x20;--bind&#x20;/tmp&#x20;/var/tmp&#x20;and&#x20;edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;to&#x20;contain&#x20;the&#x20;following&#x20;line:&#x20;/tmp&#x20;/var/tmp&#x20;none&#x20;bind&#x20;0&#x20;0','[{\"cis\": [\"1.1.6\"]}]'),(3506,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.7\"]}]'),(3507,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit&#x20;.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.8\"]}]'),(3508,'Create&#x20;Separate&#x20;Partition&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;check&#x20;the&#x20;box&#x20;to&#x20;&#039;Review&#x20;and&#x20;modify&#x20;partitioning&#039;&#x20;and&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;use&#x20;the&#x20;Logical&#x20;Volume&#x20;Manager&#x20;&#40;LVM&#41;&#x20;to&#x20;create&#x20;partitions.','[{\"cis\": [\"1.1.9\"]}]'),(3509,'Add&#x20;nodev&#x20;Option&#x20;to&#x20;/home','When&#x20;set&#x20;on&#x20;a&#x20;file&#x20;system,&#x20;this&#x20;option&#x20;prevents&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices&#x20;from&#x20;being&#x20;defined,&#x20;or&#x20;if&#x20;they&#x20;exist,&#x20;from&#x20;being&#x20;used&#x20;as&#x20;character&#x20;and&#x20;block&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.10\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3510,'Add&#x20;nodev&#x20;Option&#x20;to&#x20;/dev/shm&#x20;Partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;/dev/shm&#x20;&#40;temporary&#x20;filesystem&#x20;stored&#x20;in&#x20;memory&#41;&#x20;cannot&#x20;contain&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#x20;of&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/dev/shm&#41;.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3511,'Add&#x20;nosuid&#x20;Option&#x20;to&#x20;/dev/shm&#x20;Partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;/dev/shm&#x20;&#40;temporary&#x20;filesystem&#x20;stored&#x20;in&#x20;memory&#41;&#x20;will&#x20;not&#x20;execute&#x20;setuid&#x20;and&#x20;setgid&#x20;on&#x20;executable&#x20;programs&#x20;as&#x20;such,&#x20;but&#x20;rather&#x20;execute&#x20;them&#x20;with&#x20;the&#x20;uid&#x20;and&#x20;gid&#x20;of&#x20;the&#x20;user&#x20;executing&#x20;the&#x20;program.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;Look&#x20;for&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/dev/shm.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]');
 INSERT INTO `tsca` VALUES (3512,'Add&#x20;noexec&#x20;Option&#x20;to&#x20;/dev/shm&#x20;Partition','Set&#x20;noexec&#x20;on&#x20;the&#x20;shared&#x20;memory&#x20;partition&#x20;to&#x20;prevent&#x20;programs&#x20;from&#x20;executing&#x20;from&#x20;there.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;.&#x20;Look&#x20;for&#x20;entries&#x20;that&#x20;have&#x20;mount&#x20;points&#x20;that&#x20;contain&#x20;/dev/shm.&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3513,'Disable&#x20;yum-updatesd','The&#x20;yum-updatesd&#x20;utility&#x20;provides&#x20;notification&#x20;of&#x20;updates&#x20;that&#x20;are&#x20;available&#x20;for&#x20;your&#x20;system.','The&#x20;yum-updatesd&#x20;service&#x20;may&#x20;introduce&#x20;unnecessary&#x20;overhead&#x20;and&#x20;prevent&#x20;other&#x20;programs&#x20;from&#x20;running.&#x20;When&#x20;possible,&#x20;replace&#x20;this&#x20;service&#x20;with&#x20;a&#x20;cron&#x20;job&#x20;that&#x20;calls&#x20;yum&#x20;directly.','','Disable&#x20;the&#x20;yum-updatesd&#x20;daemon&#x20;by&#x20;running&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;chkconfig&#x20;yum-updatesd&#x20;off','[{\"cis\": [\"1.2.5\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(3514,'Enable&#x20;SELinux&#x20;in&#x20;/etc/grub.conf','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;/etc/grub.conf&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overwritten.','','Remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;/etc/grub.conf.','[{\"cis\": [\"1.4.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3515,'Set&#x20;the&#x20;SELinux&#x20;State','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.4.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3516,'Set&#x20;the&#x20;SELinux&#x20;Policy','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3517,'Remove&#x20;SETroubleshoot','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','rpm&#x20;-qa&#x20;setroubleshoot','[{\"cis\": [\"1.4.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3518,'Disable&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;disable&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','#&#x20;chkconfig&#x20;mctrans&#x20;off','[{\"cis\": [\"1.4.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3519,'Set&#x20;Boot&#x20;Loader&#x20;Password','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;the&#x20;person&#x20;who&#x20;is&#x20;rebooting&#x20;system&#x20;the&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Set&#x20;a&#x20;bootloader&#x20;password','[{\"cis\": [\"1.5.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3520,'Require&#x20;Authentication&#x20;for&#x20;Single-User&#x20;Mode','Since&#x20;/etc/init&#x20;determines&#x20;what&#x20;run&#x20;state&#x20;the&#x20;system&#x20;is&#x20;in,&#x20;setting&#x20;the&#x20;entry&#x20;in&#x20;/etc/inittab&#x20;will&#x20;force&#x20;single&#x20;user&#x20;authentication.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Add&#x20;the&#x20;following&#x20;to&#x20;/etc/inittab&#x20;:&#x20;~:S:wait:/sbin/sulogin','[{\"cis\": [\"1.5.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3521,'Disable&#x20;Interactive&#x20;Boot','The&#x20;PROMPT&#x20;option&#x20;provides&#x20;console&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;interactively&#x20;boot&#x20;the&#x20;system&#x20;and&#x20;select&#x20;which&#x20;services&#x20;to&#x20;start&#x20;on&#x20;boot&#x20;.','Turn&#x20;off&#x20;the&#x20;PROMPT&#x20;option&#x20;on&#x20;the&#x20;console&#x20;to&#x20;prevent&#x20;console&#x20;users&#x20;from&#x20;potentially&#x20;overriding&#x20;established&#x20;security&#x20;settings.','','Set&#x20;the&#x20;PROMPT&#x20;parameter&#x20;in&#x20;/etc/sysconfig/init&#x20;to&#x20;no&#x20;.','[{\"cis\": [\"1.5.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3522,'Restrict&#x20;Core&#x20;Dumps','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid.dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;file.&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;fs.suid_dumpable&#x20;=&#x20;0','[{\"cis\": [\"1.6.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3523,'Enable&#x20;Randomized&#x20;Virtual&#x20;Memory&#x20;Region&#x20;Placement','Set&#x20;the&#x20;system&#x20;flag&#x20;to&#x20;force&#x20;randomized&#x20;virtual&#x20;memory&#x20;region&#x20;placement.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;for&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;kernel.randomize_va_space&#x20;=&#x20;2','[{\"cis\": [\"1.6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3524,'Configure&#x20;ExecShield','Execshield&#x20;is&#x20;made&#x20;up&#x20;of&#x20;a&#x20;number&#x20;of&#x20;kernel&#x20;features&#x20;to&#x20;provide&#x20;protection&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks.&#x20;These&#x20;features&#x20;include&#x20;prevention&#x20;of&#x20;execution&#x20;in&#x20;memory&#x20;data&#x20;space,&#x20;and&#x20;special&#x20;handling&#x20;of&#x20;text&#x20;buffers.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysctl.conf&#x20;file.&#x20;kernel.exec-shield&#x20;=&#x20;1','[{\"cis\": [\"1.6.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3525,'Disable&#x20;Prelink','Prelinking&#x20;is&#x20;a&#x20;performance&#x20;enhancing&#x20;feature&#x20;that&#x20;decreases&#x20;process&#x20;start&#x20;up&#x20;time.&#x20;It&#x20;loads&#x20;shared&#x20;libraries&#x20;into&#x20;addresses&#x20;for&#x20;which&#x20;the&#x20;linking&#x20;of&#x20;required&#x20;symbols&#x20;has&#x20;already&#x20;been&#x20;performed.&#x20;After&#x20;a&#x20;binary&#x20;has&#x20;been&#x20;prelinked,&#x20;the&#x20;addresses&#x20;at&#x20;which&#x20;shared&#x20;libraries&#x20;is&#x20;not&#x20;changed,&#x20;even&#x20;if&#x20;kernel.randomize_va_space&#x20;is&#x20;set&#x20;to&#x20;1.','There&#x20;is&#x20;a&#x20;bug&#x20;in&#x20;prelink&#x20;that&#x20;interferes&#x20;with&#x20;AIDE,&#x20;the&#x20;Linux&#x20;file&#x20;integrity&#x20;checker.&#x20;This&#x20;has&#x20;been&#x20;fixed&#x20;in&#x20;RHEL6&#x20;&#40;so&#x20;prelink&#x20;does&#x20;not&#x20;need&#x20;to&#x20;be&#x20;disabled&#x20;in&#x20;RHEL6&#x20;systems&#41;.','','Edit&#x20;/etc/sysconfig/prelink&#x20;and&#x20;set&#x20;PRELINKING=no','[{\"cis\": [\"1.6.5\"]}]'),(3526,'Remove&#x20;telnet-server','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnetd&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Red&#x20;Hat&#x20;Linux&#x20;distributions.','','#&#x20;yum&#x20;erase&#x20;telnet-server','[{\"cis\": [\"2.1.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3527,'Remove&#x20;rsh-server','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;rcp&#x20;&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;service&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','#&#x20;yum&#x20;erase&#x20;rsh-server','[{\"cis\": [\"2.1.3\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3528,'Remove&#x20;NIS&#x20;Client','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;ypbind&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','#&#x20;yum&#x20;erase&#x20;ypbind','[{\"cis\": [\"2.1.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3529,'Remove&#x20;NIS&#x20;Server','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used.','','#&#x20;yum&#x20;erase&#x20;ypserv','[{\"cis\": [\"2.1.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3530,'Remove&#x20;tftp-server','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;tftp-server&#x20;is&#x20;the&#x20;server&#x20;package&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;of&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','#&#x20;yum&#x20;erase&#x20;tftp-server','[{\"cis\": [\"2.1.8\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3531,'Remove&#x20;talk-server','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','#&#x20;yum&#x20;erase&#x20;talk-server','[{\"cis\": [\"2.1.10\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3532,'Set&#x20;Daemon&#x20;umask','Set&#x20;the&#x20;default&#x20;umask&#x20;for&#x20;all&#x20;processes&#x20;started&#x20;at&#x20;boot&#x20;time.&#x20;The&#x20;settings&#x20;in&#x20;umask&#x20;selectively&#x20;turn&#x20;off&#x20;default&#x20;permission&#x20;when&#x20;a&#x20;file&#x20;is&#x20;created&#x20;by&#x20;a&#x20;daemon&#x20;process.','Setting&#x20;the&#x20;umask&#x20;to&#x20;027&#x20;will&#x20;make&#x20;sure&#x20;that&#x20;files&#x20;created&#x20;by&#x20;daemons&#x20;will&#x20;not&#x20;be&#x20;readable,&#x20;writable&#x20;or&#x20;executable&#x20;by&#x20;any&#x20;other&#x20;than&#x20;the&#x20;group&#x20;and&#x20;owner&#x20;of&#x20;the&#x20;daemon&#x20;process&#x20;and&#x20;will&#x20;not&#x20;be&#x20;writable&#x20;by&#x20;the&#x20;group&#x20;of&#x20;the&#x20;daemon&#x20;process.&#x20;The&#x20;daemon&#x20;process&#x20;can&#x20;manually&#x20;override&#x20;these&#x20;settings&#x20;if&#x20;these&#x20;files&#x20;need&#x20;additional&#x20;permission.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/sysconfig/init&#x20;file.&#x20;umask&#x20;027','[{\"cis\": [\"3.2\"]}]'),(3533,'Remove&#x20;X&#x20;Windows','The&#x20;X&#x20;Windows&#x20;system&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;/etc/inittab&#x20;set&#x20;default&#x20;runlevel&#x20;as&#x20;follows:&#x20;s/:5:/:3:/&#x20;Uninstall&#x20;the&#x20;X&#x20;Windows&#x20;System:&#x20;#&#x20;yum&#x20;groupremove&#x20;&#039;X&#x20;Window&#x20;System&#039;','[{\"cis\": [\"3.3\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3534,'Disable&#x20;Avahi&#x20;Server','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.','Since&#x20;servers&#x20;are&#x20;not&#x20;normally&#x20;used&#x20;for&#x20;printing,&#x20;this&#x20;service&#x20;is&#x20;not&#x20;needed&#x20;unless&#x20;dependencies&#x20;require&#x20;it.&#x20;If&#x20;this&#x20;is&#x20;the&#x20;case,&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.&#x20;If&#x20;for&#x20;some&#x20;reason&#x20;the&#x20;service&#x20;is&#x20;required&#x20;on&#x20;the&#x20;server,&#x20;follow&#x20;the&#x20;recommendations&#x20;in&#x20;sub-sections&#x20;3.2.1&#x20;-&#x20;3.2.5&#x20;to&#x20;secure&#x20;it.','','#&#x20;chkconfig&#x20;avahi-daemon&#x20;off&#x20;In&#x20;addition,&#x20;edit&#x20;the&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;remove&#x20;zeroconf.','[{\"cis\": [\"3.1.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3535,'Disable&#x20;NFS&#x20;and&#x20;RPC','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;server&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','#&#x20;chkconfig&#x20;nfslock&#x20;off;&#x20;#chkconfig&#x20;rpcgssd&#x20;off;&#x20;#chkconfig&#x20;rpcidmapd&#x20;off;&#x20;#&#x20;chkconfig&#x20;portmap&#x20;off;','[{\"cis\": [\"3.8\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3536,'Remove&#x20;FTP&#x20;Server','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;vsftpd','[{\"cis\": [\"3.10\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3537,'Remove&#x20;HTTP&#x20;Server','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.&#x20;The&#x20;default&#x20;HTTP&#x20;server&#x20;shipped&#x20;with&#x20;Red&#x20;Hat&#x20;Linux&#x20;is&#x20;Apache.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;httpd','[{\"cis\": [\"3.11\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3538,'Remove&#x20;Dovecot','Dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;to&#x20;this&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;dovecot','[{\"cis\": [\"3.12\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3539,'Remove&#x20;Samba','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;samba','[{\"cis\": [\"3.13\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3540,'Remove&#x20;HTTP&#x20;Proxy&#x20;Server','The&#x20;default&#x20;HTTP&#x20;proxy&#x20;package&#x20;shipped&#x20;with&#x20;Red&#x20;Hat&#x20;Linux&#x20;is&#x20;squid.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;deleted&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','#&#x20;yum&#x20;erase&#x20;squid','[{\"cis\": [\"3.14\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3541,'Remove&#x20;SNMP&#x20;Server','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;communicates&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.','','#&#x20;yum&#x20;erase&#x20;net-snmp','[{\"cis\": [\"3.15\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3542,'Disable&#x20;IP&#x20;Forwarding','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;server&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.&#x20;If&#x20;the&#x20;server&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used&#x20;as&#x20;a&#x20;router,&#x20;set&#x20;the&#x20;flag&#x20;to&#x20;0.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;server&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;net.ipv4.ip_forward&#x20;parameter&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match:','[{\"cis\": [\"4.1.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3543,'Disable&#x20;Send&#x20;Packet&#x20;Redirects','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;net.ipv4.conf.all.send_redirects&#x20;and&#x20;net.ipv4.conf.default.send_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf','[{\"cis\": [\"4.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3544,'Disable&#x20;Source&#x20;Routed&#x20;Packet&#x20;Acceptance','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;server&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.','','Set&#x20;the&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3545,'Disable&#x20;ICMP&#x20;Redirect&#x20;Acceptance','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv4.conf.default.accept_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3546,'Disable&#x20;Secure&#x20;ICMP&#x20;Redirect&#x20;Acceptance','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;net.ipv4.conf.all.secure_redirects&#x20;and&#x20;net.ipv4.conf.default.secure_redirects&#x20;parameters&#x20;to&#x20;0&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3547,'Log&#x20;Suspicious&#x20;Packets','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;server.','','Set&#x20;the&#x20;net.ipv4.conf.all.log_martians&#x20;and&#x20;net.ipv4.conf.default.log_martians&#x20;parameters&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3548,'Enable&#x20;Ignore&#x20;Broadcast&#x20;Requests','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.','','Set&#x20;the&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3549,'Enable&#x20;Bad&#x20;Error&#x20;Message&#x20;Protection','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3550,'Enable&#x20;RFC-recommended&#x20;Source&#x20;Route&#x20;Validation','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.','','Set&#x20;the&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;parameters&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf&#x20;and&#x20;modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3551,'Enable&#x20;TCP&#x20;SYN&#x20;Cookies','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;server&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.','','Set&#x20;the&#x20;net.ipv4.tcp_syncookies&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/sysctl.conf:&#x20;net.ipv4.tcp_syncookies=1&#x20;Modify&#x20;active&#x20;kernel&#x20;parameters&#x20;to&#x20;match.','[{\"cis\": [\"4.2.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3552,'Set&#x20;SSH&#x20;Protocol&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"6.2.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3553,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3554,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(3555,'Set&#x20;SSH&#x20;IgnoreRhosts&#x20;to&#x20;Yes','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication&#x20;.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh&#x20;.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"6.2.6\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3556,'Set&#x20;SSH&#x20;HostbasedAuthentication&#x20;to&#x20;No','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv&#x20;,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf&#x20;,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"6.2.7\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3557,'Disable&#x20;SSH&#x20;Root&#x20;Login','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;&#x20;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;server&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"6.2.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3558,'Set&#x20;SSH&#x20;PermitEmptyPasswords&#x20;to&#x20;No','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"6.2.9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(3559,'Verify&#x20;No&#x20;UID&#x20;0&#x20;Accounts&#x20;Exist&#x20;Other&#x20;Than&#x20;root','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;7.5&#x20;Restrict&#x20;root&#x20;Login&#x20;to&#x20;System&#x20;Console.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"9.2.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4000,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4001,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4002,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4003,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4004,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4005,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.6\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4006,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.7\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4007,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.8\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4008,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4009,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstabfile&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4010,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4011,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4012,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4013,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4014,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4015,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4016,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4017,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4018,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4019,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4020,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4021,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4022,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4023,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4024,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;#&#x20;chkconfig&#x20;autofs&#x20;off','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4025,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.3\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(4026,'Disable&#x20;the&#x20;rhnsd&#x20;Daemon','The&#x20;rhnsd&#x20;daemon&#x20;polls&#x20;the&#x20;Red&#x20;Hat&#x20;Network&#x20;web&#x20;site&#x20;for&#x20;scheduled&#x20;actions&#x20;and,&#x20;if&#x20;there&#x20;are,&#x20;executes&#x20;those&#x20;actions.','Patch&#x20;management&#x20;policies&#x20;may&#x20;require&#x20;that&#x20;organizations&#x20;test&#x20;the&#x20;impact&#x20;of&#x20;a&#x20;patch&#x20;before&#x20;it&#x20;is&#x20;deployed&#x20;in&#x20;a&#x20;production&#x20;environment.&#x20;Having&#x20;patches&#x20;automatically&#x20;deployed&#x20;could&#x20;have&#x20;a&#x20;negative&#x20;impact&#x20;on&#x20;the&#x20;environment.&#x20;It&#x20;is&#x20;best&#x20;to&#x20;not&#x20;allow&#x20;an&#x20;action&#x20;by&#x20;default&#x20;but&#x20;only&#x20;after&#x20;appropriate&#x20;consideration&#x20;has&#x20;been&#x20;made.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;unless&#x20;the&#x20;risk&#x20;is&#x20;understood&#x20;and&#x20;accepted&#x20;or&#x20;you&#x20;are&#x20;running&#x20;your&#x20;own&#x20;satellite&#x20;.&#x20;This&#x20;item&#x20;is&#x20;not&#x20;scored&#x20;because&#x20;organizations&#x20;may&#x20;have&#x20;addressed&#x20;the&#x20;risk.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rhnsd&#x20;:&#x20;#&#x20;chkconfig&#x20;rhnsd&#x20;off','[{\"cis\": [\"1.2.5\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4027,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;aide:&#x20;yum&#x20;install&#x20;aide&#x20;//&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4028,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;//&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4029,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;located&#x20;at&#x20;/boot/grub/grub.conf&#x20;and&#x20;linked&#x20;as&#x20;/boot/grub/menu.lst&#x20;and&#x20;/etc/grub.conf&#x20;.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.conf&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.conf','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4030,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt:&#x20;#&#x20;grub-md5-crypt&#x20;Password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Retype&#x20;Password:&#x20;&lt;password&gt;&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Copy&#x20;and&#x20;paste&#x20;the&#x20;&lt;encrypted-password&gt;&#x20;into&#x20;the&#x20;global&#x20;section&#x20;of&#x20;/boot/grub/grub.conf&#x20;:&#x20;password&#x20;--md5&#x20;&lt;encrypted-password&gt;','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4031,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/etc/sysconfig/init&#x20;and&#x20;set&#x20;SINGLE&#x20;to&#x20;&#039;&#x20;/sbin/sulogin&#039;:&#x20;&#x20;SINGLE=/sbin/sulogin','[{\"cis\": [\"1.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4032,'Ensure&#x20;interactive&#x20;boot&#x20;is&#x20;not&#x20;enabled','Interactive&#x20;boot&#x20;allows&#x20;console&#x20;users&#x20;to&#x20;interactively&#x20;select&#x20;which&#x20;services&#x20;start&#x20;on&#x20;boot.&#x20;The&#x20;PROMPT&#x20;option&#x20;provides&#x20;console&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;interactively&#x20;boot&#x20;the&#x20;system&#x20;and&#x20;select&#x20;which&#x20;services&#x20;to&#x20;start&#x20;on&#x20;boot&#x20;.&#x20;','Turn&#x20;off&#x20;the&#x20;PROMPT&#x20;option&#x20;on&#x20;the&#x20;console&#x20;to&#x20;prevent&#x20;console&#x20;users&#x20;from&#x20;potentially&#x20;overriding&#x20;established&#x20;security&#x20;settings.&#x20;','','Edit&#x20;the&#x20;/etc/sysconfig/init&#x20;file&#x20;and&#x20;set&#x20;PROMPT&#x20;to&#x20;&#039;&#x20;no&#x20;&#039;:&#x20;PROMPT=no','[{\"cis\": [\"1.4.4\"]}, {\"cis_csc\": [\"5.1\"]}]'),(4033,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4034,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4035,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4036,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal&#x20;and&#x20;uninstall&#x20;prelink:&#x20;prelink&#x20;-ua&#x20;&amp;&amp;&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.5.4\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4037,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/boot/grub/grub.conf&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;on&#x20;all&#x20;kernel&#x20;lines','[{\"cis\": [\"1.6.1.1\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4038,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.6.1.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4039,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.6.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4040,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;yum&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.6.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4041,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;yum&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.6.1.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4042,'Ensure&#x20;no&#x20;unconfined&#x20;daemons&#x20;exist','Daemons&#x20;that&#x20;are&#x20;not&#x20;defined&#x20;in&#x20;SELinux&#x20;policy&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;of&#x20;their&#x20;parent&#x20;process.','Since&#x20;daemons&#x20;are&#x20;launched&#x20;and&#x20;descend&#x20;from&#x20;the&#x20;init&#x20;process,&#x20;they&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;label&#x20;initrc_t&#x20;.&#x20;This&#x20;could&#x20;cause&#x20;the&#x20;unintended&#x20;consequence&#x20;of&#x20;giving&#x20;the&#x20;process&#x20;more&#x20;permission&#x20;than&#x20;it&#x20;requires.','','Investigate&#x20;any&#x20;unconfined&#x20;daemons&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.6.1.6\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4043,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;libselinux:&#x20;yum&#x20;install&#x20;libselinux','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4044,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v.','[{\"cis\": [\"1.7.1.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4045,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.7.1.2\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4046,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.3\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4047,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4048,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4049,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4050,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Create&#x20;the&#x20;/etc/dconf/profile/gdm&#x20;file&#x20;with&#x20;the&#x20;following&#x20;contents:&#x20;&#x20;user-db:user&#x20;&#x20;&#x20;system-db:gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;file-db:/usr/share/gdm/greeter-dconf-defaults&#x20;&#x20;&#x20;&#x20;&#x20;||&#x20;&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;banner-message-enable&#x20;and&#x20;banner-message-text&#x20;options&#x20;in&#x20;/etc/dconf/db/gdm.d/01-banner-message&#x20;:&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;&#x20;&#x20;&#x20;||&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;system&#x20;databases:&#x20;dconf&#x20;update','[{\"cis\": [\"1.7.2\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4051,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;and&#x20;comparing&#x20;against&#x20;site&#x20;policy:&#x20;#&#x20;yum&#x20;check-update','[{\"cis\": [\"1.8\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(4052,'Ensure&#x20;chargen&#x20;services&#x20;are&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;chargen-dgram&#x20;and&#x20;chargen-stream:&#x20;#&#x20;chkconfig&#x20;chargen-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;chargen-stream&#x20;off','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4053,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;daytime-dgram&#x20;and&#x20;daytime-stream:&#x20;#&#x20;chkconfig&#x20;daytime-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;daytime-stream&#x20;off','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4054,'Ensure&#x20;discard&#x20;services&#x20;are&#x20;not&#x20;enabled','discardis&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;discard-dgram&#x20;and&#x20;discard-stream:&#x20;#&#x20;chkconfig&#x20;discard-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;discard-stream&#x20;off','[{\"cis\": [\"2.1.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4055,'Ensure&#x20;echo&#x20;services&#x20;are&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;echo-dgram&#x20;and&#x20;echo-stream:&#x20;#&#x20;chkconfig&#x20;echo-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;echo-stream&#x20;off','[{\"cis\": [\"2.1.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4056,'Ensure&#x20;time&#x20;services&#x20;are&#x20;not&#x20;enabled','time&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;time-dgram&#x20;and&#x20;time-stream:&#x20;#&#x20;chkconfig&#x20;time-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;time-stream&#x20;off','[{\"cis\": [\"2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4057,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;rexec&#x20;&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;services&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;rsh,&#x20;rlogin,&#x20;and&#x20;rexec:&#x20;#&#x20;chkconfig&#x20;rsh&#x20;off&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;rlogin&#x20;off&#x20;&#x20;#&#x20;chkconfig&#x20;rexec&#x20;off','[{\"cis\": [\"2.1.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4058,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;talk:&#x20;#&#x20;chkconfig&#x20;talk&#x20;off','[{\"cis\": [\"2.1.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4059,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;chkconfig&#x20;telnet&#x20;off','[{\"cis\": [\"2.1.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4060,'Ensure&#x20;tftp&#x20;server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;tftp-server&#x20;is&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;tftp:&#x20;#&#x20;chkconfig&#x20;tftp&#x20;off','[{\"cis\": [\"2.1.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4061,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;chkconfig&#x20;rsyncd&#x20;off','[{\"cis\": [\"2.1.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4062,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;xinetd:&#x20;#&#x20;chkconfig&#x20;xinetd&#x20;off','[{\"cis\": [\"2.1.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4063,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;and&#x20;verify&#x20;either&#x20;ntp&#x20;or&#x20;chrony&#x20;is&#x20;installed:&#x20;#&#x20;rpm&#x20;-q&#x20;ntp&#x20;#&#x20;rpm&#x20;-q&#x20;chrony&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;verify&#x20;that&#x20;host&#x20;based&#x20;synchronization&#x20;is&#x20;in&#x20;use.','[{\"cis\": [\"2.2.2.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4064,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;and&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/ntpd&#x20;to&#x20;include&#x20;&#039;&#x20;-u&#x20;ntp:ntp&#x20;&#039;:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4065,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/chrony.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/chronyd&#x20;to&#x20;include:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;chronyd&#039;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4066,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;yum&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4067,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;chkconfig&#x20;avahi-daemon&#x20;off','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4068,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups&#x20;:&#x20;#&#x20;chkconfig&#x20;cups&#x20;off','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4069,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;chkconfig&#x20;dhcpd&#x20;off','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4070,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;chkconfig&#x20;slapd&#x20;off','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4071,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs,&#x20;nfs-server&#x20;and&#x20;rpcbind:&#x20;#&#x20;chkconfig&#x20;nfs&#x20;off;&#x20;#&#x20;chkconfig&#x20;rpcbind&#x20;off','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4072,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;chkconfig&#x20;named&#x20;off','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4073,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;chkconfig&#x20;vsftpd&#x20;off','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4074,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;chkconfig&#x20;httpd&#x20;off','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4075,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;chkconfig&#x20;dovecot&#x20;off','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4076,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;chkconfig&#x20;smb&#x20;off','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4077,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;chkconfig&#x20;squid&#x20;off','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4078,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;chkconfig&#x20;snmpd&#x20;off','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4079,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;Restart&#x20;postfix:&#x20;#&#x20;service&#x20;postfix&#x20;restart','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(4080,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;chkconfig&#x20;ypserv&#x20;off','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4081,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;yum&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4082,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh&#x20;,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;rsh','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4083,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4084,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4085,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4086,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4087,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4088,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4089,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4090,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4091,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4092,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4093,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4094,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4095,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4096,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4097,'Ensure&#x20;IPv6&#x20;redirects&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;prevents&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;ICMP&#x20;redirects.&#x20;ICMP&#x20;redirects&#x20;tell&#x20;the&#x20;system&#x20;about&#x20;alternate&#x20;routes&#x20;for&#x20;sending&#x20;traffic.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;ICMP&#x20;redirects&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;||&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4098,'Ensure&#x20;IPv6&#x20;is&#x20;disabled','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;few&#x20;organizations&#x20;have&#x20;implemented&#x20;IPv6.','If&#x20;IPv6&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/boot/grub/grub.conf&#x20;to&#x20;include&#x20;ipv6.disable=1&#x20;on&#x20;all&#x20;kernel&#x20;lines.','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4099,'Ensure&#x20;TCP&#x20;Wrappers&#x20;is&#x20;installed','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;tcp_wrappers:&#x20;yum&#x20;install&#x20;tcp_wrappers','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(4100,'Ensure&#x20;/etc/hosts.deny&#x20;is&#x20;configured','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.deny:&#x20;echo&#x20;&#039;ALL:&#x20;ALL&#039;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(4101,'Ensure&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;are&#x20;configured.','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;networking&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/hosts.allow&#x20;and&#x20;chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(4102,'Ensure&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;are&#x20;configured.','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/hosts.deny&#x20;and&#x20;chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"3.4.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4103,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.5.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4104,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.5.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4105,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.5.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4106,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.5.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4107,'Ensure&#x20;iptables&#x20;is&#x20;installed','iptables&#x20;allows&#x20;configuration&#x20;of&#x20;the&#x20;IPv4&#x20;tables&#x20;in&#x20;the&#x20;linux&#x20;kernel&#x20;and&#x20;the&#x20;rules&#x20;stored&#x20;within&#x20;them.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;iptables&#x20;.','iptables&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;iptables&#x20;:&#x20;yum&#x20;install&#x20;iptables','[{\"cis\": [\"3.6.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.1\"]}]'),(4108,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;and&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.6.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4109,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.6.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4110,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4111,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4112,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4113,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd&#x20;:&#x20;#&#x20;chkconfig&#x20;auditd&#x20;on','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4114,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','Edit&#x20;/boot/grub/grub.conf&#x20;to&#x20;include&#x20;audit=1&#x20;on&#x20;all&#x20;kernel&#x20;lines.&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4115,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4116,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4117,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4118,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;directory.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4119,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;/var/run/failock&#x20;directory&#x20;maintains&#x20;records&#x20;of&#x20;login&#x20;failures&#x20;via&#x20;the&#x20;pam_faillock&#x20;module.','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4120,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.3\"]}]'),(4121,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;500&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4122,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;500&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4123,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4124,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete','[{\"cis\": [\"4.1.14\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(4125,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4126,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4127,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod&#x20;,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"3\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4128,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;end&#x20;of&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;&#x20;&#x20;-e&#x20;2','[{\"cis\": [\"4.1.18\"]}, {\"cis_csc\": [\"3\", \"6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4129,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lackblogging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;rsyslog&#x20;on','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4130,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}]'),(4131,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4132,'Ensure&#x20;syslog-ng&#x20;service&#x20;is&#x20;enabled','Once&#x20;the&#x20;syslog-ng&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;syslog-ng&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;syslog-ng&#x20;:&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;syslog-ng&#x20;on','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4133,'Ensure&#x20;syslog-ng&#x20;default&#x20;file&#x20;permissions&#x20;configured','syslog-ng&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;syslog-ng&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;and&#x20;set&#x20;perm&#x20;option&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;&#x20;&#x20;options&#x20;{&#x20;chain_hostnames&#40;off&#41;;&#x20;flush_lines&#40;0&#41;;&#x20;perm&#40;0640&#41;;&#x20;stats_freq&#40;3600&#41;;&#x20;threaded&#40;yes&#41;;&#x20;};','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4134,'Ensure&#x20;syslog-ng&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;syslog-ng&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;&#x20;destination&#x20;logserver&#x20;{&#x20;tcp&#40;&quot;logfile.example.com&quot;&#x20;port&#40;514&#41;&#41;;&#x20;};&#x20;&#x20;&#x20;&#x20;log&#x20;{&#x20;source&#40;src&#41;;&#x20;destination&#40;logserver&#41;;&#x20;};&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;syslog-ng','[{\"cis\": [\"4.2.2.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4135,'Ensure&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;&#x20;#&#x20;yum&#x20;install&#x20;rsyslog&#x20;&#x20;&#x20;#&#x20;yum&#x20;install&#x20;syslog-ng','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4136,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitivebdata&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;{}&#x20;+','[{\"cis\": [\"4.2.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4137,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;chkconfig&#x20;crond&#x20;on','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4138,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4139,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4140,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4141,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4142,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4143,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4144,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4145,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4146,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4147,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4148,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4149,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4150,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4151,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4152,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4153,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4154,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4155,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.13\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4156,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;and&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"5.1\", \"5.8\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4157,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4158,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_cracklib.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_cracklib.so&#x20;try_first_pass&#x20;retry=3&#x20;minlen=14&#x20;dcredit=-1&#x20;ucredit=-1&#x20;ocredit=-1&#x20;lcredit=-1','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"5.7\", \"16.12\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4159,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;remember=5&#x20;&#x20;&#x20;or&#x20;&#x20;&#x20;&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4160,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(4161,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4162,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4163,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4164,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4165,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4166,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4167,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;and&#x20;/etc/profile&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4168,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo&#x20;,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su&#x20;,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su&#x20;,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo&#x20;,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4169,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4170,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4171,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4172,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4173,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4174,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4175,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4176,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4177,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4178,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4179,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4180,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4181,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4500,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/cramfs.confand&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4501,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4502,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4503,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12,&#x20;FAT16,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','If&#x20;utilizing&#x20;UEFI&#x20;the&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;required.&#x20;If&#x20;this&#x20;case,&#x20;ensure&#x20;that&#x20;the&#x20;FAT&#x20;filesystem&#x20;is&#x20;only&#x20;used&#x20;where&#x20;appropriate.&#x20;Run&#x20;the&#x20;following&#x20;command:&#x20;grep&#x20;-E&#x20;-i&#x20;&#039;svfats&#039;&#x20;/etc/fstab&#x20;And&#x20;review&#x20;that&#x20;any&#x20;output&#x20;is&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;&#x20;If&#x20;not&#x20;utilizing&#x20;UEFI:&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/fat.conf&#x20;&#x20;&#x20;&#x20;install&#x20;fat&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;install&#x20;vfat&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;install&#x20;msdos&#x20;/bin/true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;unload&#x20;the&#x20;msdos,&#x20;vfat,&#x20;and&#x20;fatmodules:&#x20;&#x20;#&#x20;rmmod&#x20;msdos&#x20;&#x20;&#x20;#&#x20;rmmod&#x20;vfat&#x20;&#x20;#&#x20;rmmod&#x20;fat&#x20;','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4504,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Create&#x20;or&#x20;update&#x20;an&#x20;entry&#x20;for&#x20;/tmp&#x20;in&#x20;either&#x20;/etc/fstab&#x20;&#x20;OR&#x20;&#x20;&#x20;in&#x20;a&#x20;systemd&#x20;tmp.mount&#x20;file:&#x20;&#x20;If&#x20;/etc/fstab&#x20;is&#x20;used:&#x20;&#x20;Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;Example:&#x20;tmpfs&#x20;/tmp&#x20;tmpfs&#x20;&#x20;&#x20;&#x20;&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;&#x20;0&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec,nodev,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;systemd&#x20;tmp.mount&#x20;file&#x20;is&#x20;used:&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;file&#x20;/etc/systemd/system/tmp.mount&#x20;if&#x20;it&#x20;doesn&#039;t&#x20;exist:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;[&#x20;!&#x20;-f&#x20;/etc/systemd/system/tmp.mount&#x20;]&#x20;&amp;&amp;&#x20;cp&#x20;-v&#x20;/usr/lib/systemd/system/tmp.mount&#x20;/etc/systemd/system/&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/systemd/system/tmp.mount:&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;What=tmpfs&#x20;&#x20;&#x20;&#x20;Where=/tmp&#x20;&#x20;&#x20;&#x20;Type=tmpfs&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;systemd&#x20;daemon:#&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unmask&#x20;tmp.mount:&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;unmask&#x20;tmp.mpunt&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;tmp.mount:&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;--now&#x20;tmp.mount','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"9.4\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4505,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;OR&#x20;&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstabfile&#x20;and&#x20;add&#x20;noexecto&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4506,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;&#x20;&#x20;file&#x20;OR&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4507,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;&#x20;&#x20;file&#x20;OR&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nosuid,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4508,'Ensure&#x20;/dev/shm&#x20;is&#x20;configured&#x20;','/dev/shm&#x20;is&#x20;a&#x20;traditional&#x20;shared&#x20;memory&#x20;concept.&#x20;One&#x20;program&#x20;will&#x20;create&#x20;a&#x20;memory&#x20;portion,&#x20;which&#x20;other&#x20;processes&#x20;&#40;if&#x20;permitted&#41;&#x20;can&#x20;access.&#x20;Mounting&#x20;tmpfs&#x20;at&#x20;/dev/shm&#x20;is&#x20;handled&#x20;automatically&#x20;by&#x20;systemd.','Any&#x20;user&#x20;can&#x20;upload&#x20;and&#x20;execute&#x20;files&#x20;inside&#x20;the&#x20;/dev/shm&#x20;similar&#x20;to&#x20;the&#x20;/tmp&#x20;partition.&#x20;Configuring&#x20;/dev/shm&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/dev/shm&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Edit&#x20;/etc/fstab&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;the&#x20;following&#x20;line:&#x20;tmpfs&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;tmpfs&#x20;&#x20;&#x20;defaults,noexec,nodev,nosuid,seclabel&#x20;&#x20;&#x20;0&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec,nodev,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4509,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"2.6\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4510,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4511,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4512,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4513,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications&#x20;and&#x20;is&#x20;intended&#x20;for&#x20;temporary&#x20;files&#x20;that&#x20;are&#x20;preserved&#x20;across&#x20;reboots.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4514,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;un&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4515,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4516,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4517,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4518,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4519,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4520,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.18\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4521,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4522,'Disable&#x20;USB&#x20;Storage','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/usb_storage.conf&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4523,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.3\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(4524,'Disable&#x20;the&#x20;rhnsd&#x20;Daemon','The&#x20;rhnsd&#x20;daemon&#x20;polls&#x20;the&#x20;Red&#x20;Hat&#x20;Network&#x20;web&#x20;site&#x20;for&#x20;scheduled&#x20;actions&#x20;and,&#x20;if&#x20;there&#x20;are,&#x20;executes&#x20;those&#x20;actions.','Patch&#x20;management&#x20;policies&#x20;may&#x20;require&#x20;that&#x20;organizations&#x20;test&#x20;the&#x20;impact&#x20;of&#x20;a&#x20;patch&#x20;before&#x20;it&#x20;is&#x20;deployed&#x20;in&#x20;a&#x20;production&#x20;environment.&#x20;Having&#x20;patches&#x20;automatically&#x20;deployed&#x20;could&#x20;have&#x20;a&#x20;negative&#x20;impact&#x20;on&#x20;the&#x20;environment.&#x20;It&#x20;is&#x20;best&#x20;to&#x20;not&#x20;allow&#x20;an&#x20;action&#x20;by&#x20;default&#x20;but&#x20;only&#x20;after&#x20;appropriate&#x20;consideration&#x20;has&#x20;been&#x20;made.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;unless&#x20;the&#x20;risk&#x20;is&#x20;understood&#x20;and&#x20;accepted&#x20;or&#x20;you&#x20;are&#x20;running&#x20;your&#x20;own&#x20;satellite&#x20;.&#x20;This&#x20;item&#x20;is&#x20;not&#x20;scored&#x20;because&#x20;organizations&#x20;may&#x20;have&#x20;addressed&#x20;the&#x20;risk.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;rhnsd:&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;rhnsd','[{\"cis\": [\"1.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(4525,'Ensure&#x20;sudo&#x20;is&#x20;installed','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;sudo.&#x20;#&#x20;yum&#x20;install&#x20;sudo','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4526,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo,&#x20;which&#x20;would&#x20;again&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.&#x20;This&#x20;can&#x20;be&#x20;mitigated&#x20;by&#x20;configuring&#x20;sudo&#x20;to&#x20;run&#x20;other&#x20;commands&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty,&#x20;whether&#x20;I/O&#x20;logging&#x20;is&#x20;turned&#x20;on&#x20;or&#x20;not.','','Edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;or&#x20;visudo&#x20;-f&#x20;&lt;PATH&#x20;TO&#x20;FILE&gt;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4527,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','Edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;or&#x20;visudo&#x20;-f&#x20;&lt;PATH&#x20;TO&#x20;FILE&gt;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;logfile=&#039;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&#039;&#x20;&#x20;&#x20;Example:Defaults&#x20;&#x20;logfile=&quot;/var/log/sudo.log&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4528,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;AIDE:&#x20;yum&#x20;install&#x20;aide&#x20;//&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4529,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','If&#x20;cron&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;aidecheck.service&#x20;and&#x20;aidecheck.timer&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check:&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;/etc/systemd/system/aidecheck.service&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;[Unit]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Description=Aide&#x20;Check&#x20;&#x20;&#x20;&#x20;[Service]&#x20;&#x20;&#x20;&#x20;&#x20;Type=simpleExecStart=/usr/sbin/aide&#x20;--check&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Install]&#x20;&#x20;&#x20;&#x20;&#x20;WantedBy=multi-user.target&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;&#x20;/etc/systemd/system/aidecheck.timer&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;[Unit]&#x20;&#x20;&#x20;Description=Aide&#x20;check&#x20;every&#x20;day&#x20;at&#x20;5AM&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Timer]&#x20;&#x20;&#x20;&#x20;&#x20;OnCalendar=*-*-*&#x20;05:00:00&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Unit=aidecheck.service&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Install]&#x20;&#x20;&#x20;&#x20;&#x20;WantedBy=multi-user.target&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;0644&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;aidecheck.service&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;aidecheck.timer&#x20;','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4530,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','For&#x20;newergrub2based&#x20;systems&#x20;&#40;centOS/RHEL&#x20;7.2&#x20;and&#x20;newer&#41;:&#x20;Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-setpassword:&#x20;#&#x20;grub2-setpassword&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;older&#x20;&#x20;grub2based&#x20;systems:&#x20;create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-mkpasswd-pbkdf2:&#x20;&#x20;&#x20;#&#x20;grub2-mkpasswd-pbkdf2&#x20;&#x20;&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;Your&#x20;PBKDF2&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;/etc/grub.d/01_users&#x20;or&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;&#x20;cat&#x20;&lt;&lt;EOFset&#x20;superusers=&quot;&lt;username&gt;&quot;password_pbkdf2&#x20;&lt;username&gt;&#x20;&lt;encrypted-password&gt;EOF&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4531,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;located&#x20;at&#x20;/boot/grub2/grub.cfg&#x20;and&#x20;linked&#x20;as&#x20;/etc/grub2.cfg&#x20;.&#x20;&#x20;On&#x20;newer&#x20;grub2&#x20;systems&#x20;the&#x20;encrypted&#x20;bootloader&#x20;password&#x20;is&#x20;contained&#x20;in&#x20;/boot/grub2/user.cfg','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grub.cfg&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grub.cfg&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/user.cfg&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/user.cfg','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4532,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/usr/lib/systemd/system/rescue.service&#x20;and&#x20;/usr/lib/systemd/system/emergency.service&#x20;and&#x20;set&#x20;ExecStart&#x20;to&#x20;use&#x20;/sbin/sulogin&#x20;or&#x20;/usr/sbin/sulogin:&#x20;ExecStart=-/bin/sh&#x20;-c&#x20;&quot;/sbin/sulogin;&#x20;/usr/bin/systemctl&#x20;--fail&#x20;--no-block&#x20;default&quot;&#x20;','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4533,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4534,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4535,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4536,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal:&#x20;#&#x20;prelink&#x20;-ua&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;prelink:&#x20;#&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.6.4\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4537,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;libselinux:&#x20;#&#x20;yum&#x20;install&#x20;libselinux','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4538,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4539,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4540,'Ensure&#x20;the&#x20;SELinux&#x20;mode&#x20;is&#x20;enforcing&#x20;or&#x20;permissive','SELinux&#x20;can&#x20;run&#x20;in&#x20;one&#x20;of&#x20;three&#x20;modes:&#x20;disabled,&#x20;permissive,&#x20;or&#x20;enforcing:&#x20;&#x20;Enforcing&#x20;-&#x20;Is&#x20;the&#x20;default,&#x20;and&#x20;recommended,&#x20;mode&#x20;of&#x20;operation;&#x20;in&#x20;enforcing&#x20;mode&#x20;SELinux&#x20;operates&#x20;normally,&#x20;enforcing&#x20;the&#x20;loaded&#x20;security&#x20;policy&#x20;on&#x20;the&#x20;entire&#x20;system.&#x20;&#x20;Permissive&#x20;-&#x20;The&#x20;system&#x20;acts&#x20;as&#x20;if&#x20;SELinux&#x20;is&#x20;enforcing&#x20;the&#x20;loaded&#x20;security&#x20;policy,&#x20;including&#x20;labeling&#x20;objects&#x20;and&#x20;emitting&#x20;access&#x20;denial&#x20;entries&#x20;in&#x20;the&#x20;logs,&#x20;but&#x20;it&#x20;does&#x20;not&#x20;actually&#x20;deny&#x20;any&#x20;operations.&#x20;While&#x20;not&#x20;recommended&#x20;for&#x20;production&#x20;systems,&#x20;permissive&#x20;mode&#x20;can&#x20;be&#x20;helpful&#x20;for&#x20;SELinux&#x20;policy&#x20;development.&#x20;&#x20;&#x20;Disabled&#x20;-Is&#x20;strongly&#x20;discouraged;&#x20;not&#x20;only&#x20;does&#x20;the&#x20;system&#x20;avoid&#x20;enforcing&#x20;the&#x20;SELinux&#x20;policy,&#x20;it&#x20;also&#x20;avoids&#x20;labeling&#x20;any&#x20;persistent&#x20;objects&#x20;such&#x20;as&#x20;files,&#x20;making&#x20;it&#x20;difficult&#x20;to&#x20;enable&#x20;SELinux&#x20;in&#x20;the&#x20;future','Running&#x20;SELinux&#x20;in&#x20;disabled&#x20;modeis&#x20;strongly&#x20;discouraged;&#x20;not&#x20;only&#x20;does&#x20;the&#x20;system&#x20;avoid&#x20;enforcing&#x20;the&#x20;SELinux&#x20;policy,&#x20;it&#x20;also&#x20;avoids&#x20;labeling&#x20;any&#x20;persistent&#x20;objects&#x20;such&#x20;as&#x20;files,&#x20;making&#x20;it&#x20;difficult&#x20;to&#x20;enable&#x20;SELinux&#x20;in&#x20;the&#x20;future.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;SELinux&#039;s&#x20;running&#x20;mode:&#x20;To&#x20;set&#x20;SELinux&#x20;mode&#x20;to&#x20;Enforcing:&#x20;#&#x20;setenforce&#x20;1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;set&#x20;SELinux&#x20;mode&#x20;to&#x20;Permissive:&#x20;#&#x20;setenforce&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/selinux/config&#x20;&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;For&#x20;Enforcing&#x20;mode:&#x20;SELINUX=enforcing&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;Permissive&#x20;mode:&#x20;&#x20;SELINUX=permissive','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4541,'Ensure&#x20;no&#x20;unconfined&#x20;services&#x20;exist','Unconfined&#x20;processes&#x20;run&#x20;in&#x20;unconfined&#x20;domains','For&#x20;unconfined&#x20;processes,&#x20;SELinux&#x20;policy&#x20;rules&#x20;are&#x20;applied,&#x20;but&#x20;policy&#x20;rules&#x20;exist&#x20;that&#x20;allow&#x20;processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;almost&#x20;all&#x20;access.&#x20;Processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;fall&#x20;back&#x20;to&#x20;using&#x20;DAC&#x20;rules&#x20;exclusively.&#x20;If&#x20;an&#x20;unconfined&#x20;process&#x20;is&#x20;compromised,&#x20;SELinux&#x20;does&#x20;not&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;system&#x20;resources&#x20;and&#x20;data,&#x20;but&#x20;of&#x20;course,&#x20;DAC&#x20;rules&#x20;are&#x20;still&#x20;used.&#x20;SELinux&#x20;is&#x20;a&#x20;security&#x20;enhancement&#x20;on&#x20;top&#x20;of&#x20;DAC&#x20;rules&#x20;&ndash;&#x20;it&#x20;does&#x20;not&#x20;replace&#x20;them','','Investigate&#x20;any&#x20;unconfined&#x20;processes&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4542,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;yum&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.7.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4543,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;yum&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.7.1.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4544,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;v&#x20;&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4545,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version&#x20;-or&#x20;the&#x20;operating&#x20;system&#039;s&#x20;name.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4546,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4547,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4548,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4549,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4550,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;command&#x20;will&#x20;install&#x20;all&#x20;available&#x20;packages&#x20;#&#x20;yum&#x20;update&#x20;--security&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Note:&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;the&#x20;following&#x20;command&#x20;and&#x20;comparing&#x20;the&#x20;output&#x20;against&#x20;site&#x20;policy:&#x20;&#x20;#&#x20;yum&#x20;check-update','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\", \"3.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(4551,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','If&#x20;a&#x20;graphical&#x20;login&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;a&#x20;graphical&#x20;login&#x20;is&#x20;required,&#x20;last&#x20;logged&#x20;in&#x20;user&#x20;display&#x20;should&#x20;be&#x20;disabled,&#x20;and&#x20;a&#x20;warning&#x20;banner&#x20;should&#x20;be&#x20;configured.&#x20;Displaying&#x20;the&#x20;last&#x20;logged&#x20;in&#x20;user&#x20;eliminates&#x20;half&#x20;of&#x20;the&#x20;Userid/Password&#x20;equation&#x20;that&#x20;an&#x20;unauthorized&#x20;person&#x20;would&#x20;need&#x20;to&#x20;log&#x20;on.&#x20;Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;gdm:&#x20;#&#x20;yum&#x20;remove&#x20;gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;GDM&#x20;is&#x20;required:&#x20;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/profile/gdm&#x20;and&#x20;add&#x20;the&#x20;following:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;user-db:user&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;system-db:gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;file-db:/usr/share/gdm/greeter-dconf-defaults&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/db/gdm.d/&#x20;&#x20;and&#x20;add&#x20;the&#x20;following:&#x20;&#40;This&#x20;is&#x20;typically&#x20;/etc/dconf/db/gdm.d/01-banner-message&#41;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;&lt;banner&#x20;message&gt;&#039;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Example&#x20;Banner&#x20;Text:&#x20;&#x20;&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#x20;&#039;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/db/gdm.d/and&#x20;add&#x20;the&#x20;following:&#x20;&#40;This&#x20;is&#x20;typically&#x20;/etc/dconf/db/gdm.d/00-login-screen&#41;&#x20;&#x20;&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;Do&#x20;not&#x20;show&#x20;the&#x20;user&#x20;list&#x20;&#x20;&#x20;&#x20;&#x20;disable-user-list=true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;system&#x20;databases:&#x20;&#x20;#&#x20;dconf&#x20;update','[{\"cis\": [\"1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(4552,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;area&#x20;of&#x20;the&#x20;system.&#x20;Note:&#x20;If&#x20;an&#x20;xinetd&#x20;service&#x20;or&#x20;services&#x20;are&#x20;required,&#x20;ensure&#x20;that&#x20;any&#x20;xinetd&#x20;service&#x20;not&#x20;required&#x20;is&#x20;stopped&#x20;and&#x20;disabled','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;yum&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4553,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available,&#x20;install&#x20;chrony&#x20;or&#x20;NTP:&#x20;to&#x20;install&#x20;chrony&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;yum&#x20;install&#x20;chrony&#x20;OR&#x20;to&#x20;install&#x20;ntp:&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;yum&#x20;install&#x20;ntp','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4554,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;and&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;Note:&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/chronyd&#x20;to&#x20;include&#x20;&#039;-u&#x20;chrony&#039;:OPTIONS=&quot;-u&#x20;chrony&quot;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4555,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;and&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/ntpd&#x20;to&#x20;include&#x20;&#039;&#x20;-u&#x20;ntp:ntp&#x20;&#039;:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4556,'&#x20;Ensure&#x20;X11&#x20;Server&#x20;components&#x20;are&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;yum&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4557,'&#x20;Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;installed','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;remove&#x20;this&#x20;package&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;stop,&#x20;mask&#x20;and&#x20;remove&#x20;avahi-autoipd&#x20;and&#x20;avahi:&#x20;#&#x20;systemctl&#x20;stop&#x20;avahi-daemon.socket&#x20;avahi-daemon.service;&#x20;#&#x20;yum&#x20;remove&#x20;avahi-autoipd&#x20;avahi','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4558,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;installed','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.&#x20;Disabling&#x20;CUPS&#x20;will&#x20;prevent&#x20;printing&#x20;from&#x20;the&#x20;system,&#x20;a&#x20;common&#x20;task&#x20;for&#x20;workstation&#x20;systems.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cups:&#x20;#&#x20;yum&#x20;remove&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4559,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;installed','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;the&#x20;dhcp&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;dhcpd:&#x20;#&#x20;yum&#x20;remove&#x20;dhcp','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4560,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;slapd:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-servers','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4561,'Ensure&#x20;nfs-utils&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;nfs-server&#x20;service&#x20;is&#x20;masked','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;require&#x20;network&#x20;shares,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;nfs-utils&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nfs-utils:&#x20;#&#x20;yum&#x20;remove&#x20;nfs-utils;&#x20;OR&#x20;if&#x20;the&#x20;nfs-package&#x20;is&#x20;required&#x20;as&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;nfs-server&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nfs-server','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4562,'Ensure&#x20;nfs-utils&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;nfs-server&#x20;service&#x20;is&#x20;masked','The&#x20;rpcbind&#x20;utility&#x20;maps&#x20;RPC&#x20;services&#x20;to&#x20;the&#x20;ports&#x20;on&#x20;which&#x20;they&#x20;listen.&#x20;RPC&#x20;processes&#x20;notify&#x20;rpcbind&#x20;when&#x20;they&#x20;start,&#x20;registering&#x20;the&#x20;ports&#x20;they&#x20;are&#x20;listening&#x20;on&#x20;and&#x20;the&#x20;RPC&#x20;program&#x20;numbers&#x20;they&#x20;expect&#x20;to&#x20;serve.&#x20;The&#x20;client&#x20;system&#x20;then&#x20;contacts&#x20;rpcbind&#x20;on&#x20;the&#x20;server&#x20;with&#x20;a&#x20;particular&#x20;RPC&#x20;program&#x20;number.&#x20;The&#x20;rpcbind&#x20;service&#x20;redirects&#x20;the&#x20;client&#x20;to&#x20;the&#x20;proper&#x20;port&#x20;number&#x20;so&#x20;it&#x20;can&#x20;communicate&#x20;with&#x20;the&#x20;requested&#x20;service&#x20;Portmapper&#x20;is&#x20;an&#x20;RPC&#x20;service,&#x20;which&#x20;always&#x20;listens&#x20;on&#x20;tcp&#x20;and&#x20;udp&#x20;111,&#x20;and&#x20;is&#x20;used&#x20;to&#x20;map&#x20;other&#x20;RPC&#x20;services&#x20;&#40;such&#x20;as&#x20;nfs,&#x20;nlockmgr,&#x20;quotad,&#x20;mountd,&#x20;etc.&#41;&#x20;to&#x20;their&#x20;corresponding&#x20;port&#x20;number&#x20;on&#x20;the&#x20;server.&#x20;When&#x20;a&#x20;remote&#x20;host&#x20;makes&#x20;an&#x20;RPC&#x20;call&#x20;to&#x20;that&#x20;server,&#x20;it&#x20;first&#x20;consults&#x20;with&#x20;portmap&#x20;to&#x20;determine&#x20;where&#x20;the&#x20;RPC&#x20;server&#x20;is&#x20;listening','A&#x20;small&#x20;request&#x20;&#40;~82&#x20;bytes&#x20;via&#x20;UDP&#41;&#x20;sent&#x20;to&#x20;the&#x20;Portmapper&#x20;generates&#x20;a&#x20;large&#x20;response&#x20;&#40;7x&#x20;to&#x20;28x&#x20;amplification&#41;,&#x20;which&#x20;makes&#x20;it&#x20;a&#x20;suitable&#x20;tool&#x20;for&#x20;DDoS&#x20;attacks.&#x20;If&#x20;rpcbind&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;rpcbind&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nfs-utils:&#x20;#&#x20;yum&#x20;remove&#x20;nfs-utils;&#x20;OR&#x20;if&#x20;the&#x20;nfs-package&#x20;is&#x20;required&#x20;as&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;nfs-server&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nfs-server','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4563,'&#x20;Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;installed&#x20;','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;yum&#x20;remove&#x20;bind','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4564,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;installed','FTP&#x20;&#40;File&#x20;Transfer&#x20;Protocol&#41;&#x20;is&#x20;a&#x20;traditional&#x20;and&#x20;widely&#x20;used&#x20;standard&#x20;tool&#x20;for&#x20;transferring&#x20;files&#x20;between&#x20;a&#x20;server&#x20;and&#x20;clients&#x20;over&#x20;a&#x20;network,&#x20;especially&#x20;where&#x20;no&#x20;authentication&#x20;is&#x20;necessary&#x20;&#40;permits&#x20;anonymous&#x20;users&#x20;to&#x20;connect&#x20;to&#x20;a&#x20;server&#41;','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;yum&#x20;remove&#x20;vsftpd','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4565,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;installed','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;yum&#x20;remove&#x20;httpd','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4566,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;installed','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;yum&#x20;remove&#x20;dovecot','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4567,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;installed','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;package&#x20;can&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;yum&#x20;remove&#x20;samba','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4568,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;installed','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;yum&#x20;remove&#x20;squid','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4569,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;installed','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMPv1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;SNMPv3replaces&#x20;the&#x20;simple/clear&#x20;text&#x20;password&#x20;sharing&#x20;used&#x20;in&#x20;SNMPv2with&#x20;more&#x20;securely&#x20;encoded&#x20;parameters.&#x20;If&#x20;the&#x20;SNMP&#x20;service&#x20;is&#x20;not&#x20;required,&#x20;the&#x20;net-snmp&#x20;package&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;#&#x20;yum&#x20;remove&#x20;net-snmp','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4570,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(4571,'Ensure&#x20;rsync&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;rsyncd&#x20;service&#x20;is&#x20;masked','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','Unless&#x20;required,&#x20;the&#x20;rsync&#x20;package&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;area&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;rsync&#x20;package:&#x20;#&#x20;yum&#x20;remove&#x20;rsync;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;mask&#x20;the&#x20;rsyncd&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;rsyncd','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(4572,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;installed','The&#x20;ypserv&#x20;package&#x20;provides&#x20;the&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;.&#x20;This&#x20;service,&#x20;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;ypservpackage&#x20;be&#x20;removed,&#x20;and&#x20;if&#x20;required&#x20;a&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;yum&#x20;remove&#x20;ypserv','[{\"cis\": [\"2.2.18\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4573,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;installed','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;yum&#x20;remove&#x20;telnet-server','[{\"cis\": [\"2.2.19\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4574,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;yum&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4575,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh:&#x20;#&#x20;yum&#x20;remove&#x20;rsh','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4576,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk:&#x20;#&#x20;yum&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4577,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet:&#x20;#&#x20;yum&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4578,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4579,'Ensure&#x20;nonessential&#x20;services&#x20;are&#x20;removed&#x20;or&#x20;masked','A&#x20;network&#x20;port&#x20;is&#x20;identified&#x20;by&#x20;its&#x20;number,&#x20;the&#x20;associated&#x20;IP&#x20;address,&#x20;and&#x20;the&#x20;type&#x20;of&#x20;the&#x20;communication&#x20;protocol&#x20;such&#x20;as&#x20;TCP&#x20;or&#x20;UDP.A&#x20;listening&#x20;port&#x20;is&#x20;a&#x20;network&#x20;port&#x20;on&#x20;which&#x20;an&#x20;application&#x20;or&#x20;process&#x20;listens&#x20;on,&#x20;acting&#x20;as&#x20;a&#x20;communication&#x20;endpoint.&#x20;Each&#x20;listening&#x20;port&#x20;can&#x20;be&#x20;open&#x20;or&#x20;closed&#x20;&#40;filtered&#41;&#x20;using&#x20;a&#x20;firewall.&#x20;In&#x20;general&#x20;terms,&#x20;an&#x20;open&#x20;port&#x20;is&#x20;a&#x20;network&#x20;port&#x20;that&#x20;accepts&#x20;incoming&#x20;packets&#x20;from&#x20;remote&#x20;locations','Services&#x20;listening&#x20;on&#x20;the&#x20;system&#x20;pose&#x20;a&#x20;potential&#x20;risk&#x20;as&#x20;an&#x20;attack&#x20;vector.&#x20;These&#x20;services&#x20;should&#x20;be&#x20;reviewed,&#x20;and&#x20;if&#x20;not&#x20;required,&#x20;the&#x20;service&#x20;should&#x20;be&#x20;stopped,&#x20;and&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service&#x20;should&#x20;be&#x20;removed.&#x20;If&#x20;required&#x20;packages&#x20;have&#x20;a&#x20;dependency,&#x20;the&#x20;service&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Review&#x20;the&#x20;output&#x20;of:&#x20;#&#x20;lsof&#x20;-i&#x20;-P&#x20;-n&#x20;|&#x20;grep&#x20;-v&#x20;&#039;&#40;ESTABLISHED&#41;&#039;;&#x20;to&#x20;ensure&#x20;that&#x20;all&#x20;services&#x20;listed&#x20;are&#x20;required&#x20;on&#x20;the&#x20;system.&#x20;If&#x20;a&#x20;listed&#x20;service&#x20;is&#x20;not&#x20;required,&#x20;remove&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service.&#x20;If&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service&#x20;is&#x20;required,&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;service.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service:#&#x20;yum&#x20;remove&#x20;&lt;package_name&gt;&#x20;OR&#x20;if&#x20;required&#x20;packages&#x20;have&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;service:#&#x20;systemctl&#x20;--now&#x20;mask&#x20;&lt;service_name&gt;','[{\"cis\": [\"2.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4580,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','To&#x20;disable&#x20;IPv6&#x20;through&#x20;the&#x20;GRUB2&#x20;config:&#x20;edit&#x20;/etc/default/gruband&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:#&#x20;grub2-mkconfig&#x20;&ndash;o&#x20;/boot/grub2/grub.cfg;&#x20;OR&#x20;to&#x20;disable&#x20;IPv6&#x20;through&#x20;sysctl&#x20;settings:&#x20;set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;#&#x20;net.ipv6.conf.all.disable_ipv6&#x20;=&#x20;1;&#x20;#&#x20;net.ipv6.conf.default.disable_ipv6&#x20;=&#x20;1;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.disable_ipv6=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.disable_ipv6=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4581,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;should&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;ip&#x20;link&#x20;set&#x20;&lt;interface&gt;&#x20;down','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4582,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&#039;^s*net.ipv4.ip_forwards*=s*1&#039;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&#039;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4583,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4584,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4585,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4586,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4587,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4588,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4589,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4590,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4591,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4592,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;and&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4593,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4594,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4595,'Ensure&#x20;FirewallD&#x20;or&#x20;nftables&#x20;or&#x20;iptables-services&#x20;is&#x20;installed','firewalld&#x20;is&#x20;a&#x20;firewall&#x20;management&#x20;tool&#x20;for&#x20;Linux&#x20;operating&#x20;systems.&#x20;It&#x20;provides&#x20;firewall&#x20;features&#x20;by&#x20;acting&#x20;as&#x20;a&#x20;front-end&#x20;for&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;net&#x20;filter&#x20;framework&#x20;via&#x20;the&#x20;iptables&#x20;backend&#x20;or&#x20;provides&#x20;firewall&#x20;features&#x20;by&#x20;acting&#x20;as&#x20;a&#x20;front-end&#x20;for&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;via&#x20;the&#x20;nftables&#x20;utility.&#x20;FirewallD&#x20;replaces&#x20;iptables&#x20;as&#x20;the&#x20;default&#x20;firewall&#x20;management&#x20;tool.&#x20;Use&#x20;the&#x20;firewalld&#x20;utility&#x20;to&#x20;configure&#x20;a&#x20;firewall&#x20;for&#x20;less&#x20;complex&#x20;firewalls.&#x20;The&#x20;utility&#x20;is&#x20;easy&#x20;to&#x20;use&#x20;and&#x20;covers&#x20;the&#x20;typical&#x20;use&#x20;cases&#x20;scenario.&#x20;FirewallD&#x20;supports&#x20;both&#x20;IPv4&#x20;and&#x20;IPv6&#x20;networks&#x20;and&#x20;can&#x20;administer&#x20;separate&#x20;firewall&#x20;zones&#x20;with&#x20;varying&#x20;degrees&#x20;of&#x20;trust&#x20;as&#x20;defined&#x20;in&#x20;zone&#x20;profiles.','A&#x20;firewall&#x20;utility&#x20;is&#x20;required&#x20;to&#x20;configure&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;via&#x20;the&#x20;iptables&#x20;or&#x20;nftables&#x20;back-end.&#x20;The&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;host-based&#x20;firewall&#x20;can&#x20;protect&#x20;against&#x20;threats&#x20;originating&#x20;from&#x20;within&#x20;a&#x20;corporate&#x20;network&#x20;to&#x20;include&#x20;malicious&#x20;mobile&#x20;code&#x20;and&#x20;poorly&#x20;configured&#x20;software&#x20;on&#x20;a&#x20;host.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;firewalld:&#x20;#&#x20;yum&#x20;install&#x20;firewalld&#x20;iptables;&#x20;OR&#x20;to&#x20;&#x20;install&#x20;nftables:&#x20;#&#x20;yum&#x20;install&#x20;nftables;&#x20;OR&#x20;to&#x20;install&#x20;&#x20;iptables-services:&#x20;#&#x20;yum&#x20;install&#x20;iptables-services&#x20;iptables','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4596,'Ensure&#x20;iptables-services&#x20;and&#x20;FirewallD&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time','The&#x20;iptables-services&#x20;package&#x20;contains&#x20;the&#x20;iptables.service&#x20;and&#x20;ip6tables.service.&#x20;These&#x20;services&#x20;allow&#x20;for&#x20;management&#x20;of&#x20;the&#x20;Host&#x20;Based&#x20;Firewall&#x20;provided&#x20;by&#x20;the&#x20;iptables&#x20;package.','iptables.service&#x20;and&#x20;ip6tables.service&#x20;are&#x20;still&#x20;supported&#x20;and&#x20;can&#x20;be&#x20;installed&#x20;with&#x20;the&#x20;iptables-services&#x20;package.&#x20;Running&#x20;both&#x20;firewalld&#x20;and&#x20;the&#x20;services&#x20;included&#x20;in&#x20;the&#x20;iptables-services&#x20;package&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;stop&#x20;the&#x20;services&#x20;included&#x20;in&#x20;the&#x20;iptables-services&#x20;package&#x20;and&#x20;remove&#x20;the&#x20;iptables-services&#x20;package:&#x20;#&#x20;systemctl&#x20;stop&#x20;iptables;&#x20;#&#x20;systemctl&#x20;stop&#x20;ip6tables;&#x20;#&#x20;yum&#x20;remove&#x20;iptables-services.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;firewalld:&#x20;#&#x20;yum&#x20;remove&#x20;firewalld&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;firewalld','[{\"cis\": [\"3.5.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4597,'Ensure&#x20;nftables&#x20;and&#x20;FirewallD&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time&#x20;or&#x20;ensure&#x20;one&#x20;of&#x20;them&#x20;is&#x20;stopped&#x20;and&#x20;masked','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.Note:&#x20;Support&#x20;for&#x20;using&#x20;nftables&#x20;as&#x20;the&#x20;back-end&#x20;for&#x20;firewalld&#x20;was&#x20;added&#x20;in&#x20;release&#x20;v0.6.0.&#x20;In&#x20;Fedora&#x20;19&#x20;Linux&#x20;derivatives,&#x20;firewalld&#x20;utilizes&#x20;iptables&#x20;as&#x20;its&#x20;back-end&#x20;by&#x20;default.','Running&#x20;both&#x20;firewalld&#x20;and&#x20;nftables&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nftables:#&#x20;yum&#x20;remove&#x20;nftables;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;nftables:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;firewalld:&#x20;#&#x20;yum&#x20;remove&#x20;firewalld&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;firewalld','[{\"cis\": [\"3.5.1.3\", \"3.5.3.1.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4598,'Ensure&#x20;nftables&#x20;and&#x20;iptables-services&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time&#x20;or&#x20;ensure&#x20;one&#x20;of&#x20;them&#x20;is&#x20;stopped&#x20;and&#x20;masked','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.Note:&#x20;Support&#x20;for&#x20;using&#x20;nftables&#x20;as&#x20;the&#x20;back-end&#x20;for&#x20;firewalld&#x20;was&#x20;added&#x20;in&#x20;release&#x20;v0.6.0.&#x20;In&#x20;Fedora&#x20;19&#x20;Linux&#x20;derivatives,&#x20;firewalld&#x20;utilizes&#x20;iptables&#x20;as&#x20;its&#x20;back-end&#x20;by&#x20;default.','Running&#x20;both&#x20;nftables&#x20;and&#x20;nftables&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nftables:#&#x20;yum&#x20;remove&#x20;nftables;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;nftables:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;iptables#&#x20;#&#x20;systemctl&#x20;stop&#x20;iptables;&#x20;#&#x20;systemctl&#x20;stop&#x20;ip6tables;&#x20;#&#x20;yum&#x20;remove&#x20;iptables-services','[{\"cis\": [\"3.5.1.3\", \"3.5.3.1.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4599,'Ensure&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running','firewalld.serviceenables&#x20;the&#x20;enforcement&#x20;of&#x20;firewall&#x20;rules&#x20;configured&#x20;through&#x20;firewalld','Ensure&#x20;that&#x20;the&#x20;firewalld.service&#x20;is&#x20;enabled&#x20;and&#x20;running&#x20;to&#x20;enforce&#x20;firewall&#x20;rules&#x20;configured&#x20;through&#x20;firewalld','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unmask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;unmask&#x20;firewalld;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;firewalld','[{\"cis\": [\"3.5.1.4\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4600,'Ensure&#x20;a&#x20;table&#x20;exists','nTables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;','[{\"cis\": [\"3.5.2.5\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4601,'Ensure&#x20;base&#x20;chains&#x20;exist','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;createchain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;','[{\"cis\": [\"3.5.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4602,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;iif&#x20;lo&#x20;accept;&#x20;&#x20;&#x20;#&#x20;nft&#x20;create&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;saddr&#x20;127.0.0.0/8&#x20;counter&#x20;drop;&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;implement&#x20;the&#x20;IPv6&#x20;loopback&#x20;rules:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip6&#x20;saddr::1&#x20;counter&#x20;drop','[{\"cis\": [\"3.5.2.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4603,'Ensure&#x20;outbound&#x20;and&#x20;established&#x20;connections&#x20;are&#x20;configured','Configure&#x20;the&#x20;firewall&#x20;rules&#x20;for&#x20;new&#x20;outbound&#x20;and&#x20;established&#x20;connections.','If&#x20;rules&#x20;are&#x20;not&#x20;in&#x20;place&#x20;for&#x20;new&#x20;outbound&#x20;and&#x20;established&#x20;connections,&#x20;all&#x20;packets&#x20;will&#x20;be&#x20;dropped&#x20;by&#x20;the&#x20;default&#x20;policy&#x20;preventing&#x20;network&#x20;usage.','','Configure&#x20;nftables&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;commands&#x20;will&#x20;implement&#x20;a&#x20;policy&#x20;to&#x20;allow&#x20;all&#x20;outbound&#x20;connections&#x20;and&#x20;all&#x20;established&#x20;connections:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;tcp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;udp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;icmp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;tcp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;udp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept;&#x20;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;icmp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept','[{\"cis\": [\"3.5.2.8\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4604,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;traversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.5.2.9\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4605,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;on&#x20;the&#x20;nftables&#x20;service','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conffile&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.2.10\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4606,'Ensure&#x20;nftables&#x20;rules&#x20;are&#x20;permanent','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames.&#x20;The&#x20;nftables&#x20;service&#x20;reads&#x20;the&#x20;/etc/sysconfig/nftables.conffile&#x20;for&#x20;a&#x20;nftables&#x20;file&#x20;or&#x20;files&#x20;to&#x20;include&#x20;in&#x20;the&#x20;nftables&#x20;ruleset.&#x20;A&#x20;nftables&#x20;ruleset&#x20;containing&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;base&#x20;chains&#x20;allow&#x20;network&#x20;traffic&#x20;to&#x20;be&#x20;filtered.','Changes&#x20;made&#x20;to&#x20;nftables&#x20;ruleset&#x20;only&#x20;affect&#x20;the&#x20;live&#x20;system,&#x20;you&#x20;will&#x20;also&#x20;need&#x20;to&#x20;configure&#x20;the&#x20;nftables&#x20;ruleset&#x20;to&#x20;apply&#x20;on&#x20;boot','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.2.11\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4607,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4608,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.3.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4609,'Ensure&#x20;iptables&#x20;is&#x20;enabled&#x20;and&#x20;running','iptables.service&#x20;is&#x20;a&#x20;utility&#x20;for&#x20;configuring&#x20;and&#x20;maintaining&#x20;iptables.','iptables.service&#x20;willload&#x20;the&#x20;iptables&#x20;rules&#x20;saved&#x20;in&#x20;the&#x20;file&#x20;/etc/sysconfig/iptablesat&#x20;boot,&#x20;otherwise&#x20;the&#x20;iptables&#x20;rules&#x20;will&#x20;be&#x20;cleared&#x20;during&#x20;a&#x20;re-boot&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-PFORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4610,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-PFORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4611,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;tothe&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.3.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4612,'Ensure&#x20;IPv6&#x20;outbound&#x20;and&#x20;established&#x20;connections&#x20;are&#x20;configured','Configure&#x20;the&#x20;firewall&#x20;rules&#x20;for&#x20;new&#x20;outbound,&#x20;and&#x20;established&#x20;IPv6&#x20;connections.','If&#x20;rules&#x20;are&#x20;not&#x20;in&#x20;place&#x20;for&#x20;new&#x20;outbound,&#x20;and&#x20;established&#x20;connections&#x20;all&#x20;packets&#x20;will&#x20;be&#x20;dropped&#x20;by&#x20;the&#x20;default&#x20;policy&#x20;preventing&#x20;network&#x20;usage','','Configure&#x20;iptables&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;commands&#x20;will&#x20;implement&#x20;a&#x20;policy&#x20;to&#x20;allow&#x20;all&#x20;outbound&#x20;connections&#x20;and&#x20;all&#x20;established&#x20;connections:#&#x20;ip6tables&#x20;-AOUTPUT&#x20;-p&#x20;tcp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-p&#x20;udp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-p&#x20;icmp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;tcp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;udp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;icmp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT','[{\"cis\": [\"3.5.3.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4613,'Ensure&#x20;ip6tables&#x20;is&#x20;enabled&#x20;and&#x20;running','ip6tables.service&#x20;is&#x20;a&#x20;utility&#x20;for&#x20;configuring&#x20;and&#x20;maintaining&#x20;ip6tables.','ip6tables.service&#x20;will&#x20;load&#x20;the&#x20;iptables&#x20;rules&#x20;saved&#x20;in&#x20;the&#x20;file&#x20;/etc/sysconfig/ip6tables&#x20;at&#x20;boot,&#x20;otherwise&#x20;the&#x20;ip6tables&#x20;rules&#x20;will&#x20;be&#x20;cleared&#x20;during&#x20;a&#x20;re-boot&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;ip6tables:&#x20;#&#x20;systemctl&#x20;--now&#x20;start&#x20;ip6tables','[{\"cis\": [\"3.5.3.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(4614,'Ensure&#x20;auditd&#x20;is&#x20;installed','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;Install&#x20;auditd&#x20;&#x20;#&#x20;yum&#x20;install&#x20;audit&#x20;audit-libs','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4615,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4616,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.&#x20;Note:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub2&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4617,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4618,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.2\", \"6.4\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4619,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.4\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4620,'Ensure&#x20;audit_backlog_limit&#x20;is&#x20;sufficient','The&#x20;backlog&#x20;limit&#x20;has&#x20;a&#x20;default&#x20;setting&#x20;of&#x20;64','During&#x20;boot&#x20;if&#x20;audit=1,&#x20;then&#x20;the&#x20;backlog&#x20;will&#x20;hold&#x20;64&#x20;records.&#x20;If&#x20;more&#x20;than&#x20;64&#x20;records&#x20;are&#x20;created&#x20;during&#x20;boot,&#x20;auditd&#x20;records&#x20;will&#x20;be&#x20;lost&#x20;and&#x20;potential&#x20;malicious&#x20;activity&#x20;could&#x20;go&#x20;undetected','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit_backlog_limit=&lt;BACKLOG&#x20;SIZE&gt;&#x20;&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;&#x20;&#x20;Example:&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;audit_backlog_limit=8192&quot;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(4621,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/time-change.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/time-change.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4622,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/identity.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4623,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.5\", \"6.2\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4624,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;&#x20;the&#x20;/etc/selinux/&#x20;and&#x20;/usr/share/selinux/&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;the&#x20;/etc/selinux/&#x20;and&#x20;/usr/share/selinux/&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/MAC-policy.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4625,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;/var/run/faillock/&#x20;directory&#x20;maintains&#x20;records&#x20;of&#x20;login&#x20;failures&#x20;via&#x20;the&#x20;pam_faillock&#x20;module.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/logins.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillog/&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;IF&#x20;&#x20;&#x20;the&#x20;pam_faillock.so&#x20;module&#x20;is&#x20;used:&#x20;Also&#x20;include&#x20;the&#x20;line:&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;OR&#x20;IF&#x20;the&#x20;pam_tally2.so&#x20;module&#x20;is&#x20;used:&#x20;Also&#x20;include&#x20;the&#x20;line:&#x20;&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4626,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/logins.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;&#x20;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;&#x20;last&#x20;-f&#x20;/var/run/utmp&#x20;&#41;&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}]'),(4627,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown,&#x20;fchown,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr,&#x20;lsetxattr,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr,&#x20;lremovexattr,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/perm_mod.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/perm_mod.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4628,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4629,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/mount.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/mounts.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4630,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;ollowing&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;:&#x20;unlink&#x20;-remove&#x20;a&#x20;file&#x20;&#x20;&#x20;&#x20;&#x20;unlinkat&#x20;-&#x20;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#x20;and&#x20;renameat&#x20;-&#x20;rename&#x20;a&#x20;file&#x20;attribute.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/delete.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/delete.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"6.2\", \"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(4631,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrators.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/sudoers.d&#x20;directory&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file,&#x20;or&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/sudoers.d/&#x20;directory&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/scope.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines::&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4632,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;The&#x20;sudo&#x20;log&#x20;file&#x20;is&#x20;configured&#x20;in&#x20;/etc/sudoersor&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;sudo&#x20;log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/action.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions&#x20;.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.9\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4633,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/modules.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/directory&#x20;ending&#x20;in&#x20;.rules&#x20;&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/modules.rules&#x20;Add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4634,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rulesand&#x20;add&#x20;the&#x20;following&#x20;line&#x20;at&#x20;the&#x20;end&#x20;of&#x20;the&#x20;file:&#x20;&#x20;-e&#x20;2','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4635,'Ensure&#x20;rsyslog&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;software&#x20;is&#x20;a&#x20;recommended&#x20;replacement&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon.&#x20;rsyslog&#x20;provides&#x20;improvements&#x20;over&#x20;syslogd,&#x20;including:&#x20;&#x20;&#x20;-&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs&#x20;&#x20;&#x20;&#x20;&#x20;-&#x20;The&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats&#x20;&#x20;&#x20;&#x20;-&#x20;Encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;rsyslog:&#x20;#&#x20;yum&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4636,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled&#x20;and&#x20;running','rsyslogneeds&#x20;to&#x20;be&#x20;enabled&#x20;and&#x20;running&#x20;to&#x20;perform&#x20;logging','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lackblogging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4637,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4638,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;&#x20;systemctl&#x20;restart&#x20;rsyslog','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4639,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog&#x20;','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4640,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4641,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Storage=persistent','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4642,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.&#x20;&#x20;Other/world&#x20;should&#x20;not&#x20;have&#x20;the&#x20;ability&#x20;to&#x20;view&#x20;this&#x20;information.&#x20;Group&#x20;should&#x20;not&#x20;have&#x20;the&#x20;ability&#x20;to&#x20;modify&#x20;this&#x20;information.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+&#x20;-o&#x20;-type&#x20;d&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4643,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;systemctl&#x20;enable&#x20;crond;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4644,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/crontab;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4645,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4646,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4647,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4648,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4649,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','The&#x20;/etc/cron.d/directory&#x20;contains&#x20;system&#x20;cronjobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;in&#x20;a&#x20;similar&#x20;manner&#x20;to&#x20;the&#x20;hourly,&#x20;daily&#x20;weekly&#x20;and&#x20;monthly&#x20;jobs&#x20;from&#x20;/etc/crontab,&#x20;but&#x20;require&#x20;more&#x20;granular&#x20;control&#x20;as&#x20;to&#x20;when&#x20;they&#x20;run.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;:&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.d;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.d;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4650,'Ensure&#x20;cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','If&#x20;cronis&#x20;installed&#x20;in&#x20;the&#x20;system,&#x20;configure&#x20;/etc/cron.allowto&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allowdoes&#x20;not&#x20;exist,&#x20;then&#x20;/etc/cron.denyis&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;file,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.alloware&#x20;allowed&#x20;to&#x20;use&#x20;cron.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allowfile&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cronjobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4651,'Ensure&#x20;at&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','If&#x20;atis&#x20;installed&#x20;in&#x20;the&#x20;system,&#x20;configure&#x20;/etc/at.allowto&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/at.allowdoes&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.denyis&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at.&#x20;By&#x20;removing&#x20;the&#x20;file,&#x20;only&#x20;users&#x20;in&#x20;/etc/at.alloware&#x20;allowed&#x20;to&#x20;use&#x20;at.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;atjobs.&#x20;Using&#x20;the&#x20;at.allowfile&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;atjobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4652,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4653,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions,&#x20;ownership,&#x20;and&#x20;group&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;u-x,g-wx,o-rwx&#x20;{}&#x20;;&#x20;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:ssh_keys&#x20;{}&#x20;;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4654,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;u-x,go-wx&#x20;{}&#x20;;&#x20;&#x20;&#x20;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4655,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;#&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;#&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;#&#x20;DenyUsers&#x20;&lt;userlist&gt;;&#x20;#&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4656,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4657,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"pci_dss\": [\"9.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4658,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4659,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4660,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4661,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4662,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4663,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(4664,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised.:&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&#039;Sweet32&#039;&#x20;attack;&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involvingLSB&#x20;values,&#x20;aka&#x20;the&#x20;&#039;Bar&#x20;Mitzvah&#039;&#x20;issue;&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session;&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors;&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;add/modify&#x20;the&#x20;Ciphersline&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphersExample:Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4665,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"14.4\", \"16.5\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4666,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms.Example:&#039;KexAlgorithms&#x20;curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256&#039;','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4667,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4668,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4669,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4670,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthenticationand&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4671,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4672,'Ensure&#x20;SSH&#x20;MaxStartups&#x20;is&#x20;configured','The&#x20;MaxStartupsparameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;to&#x20;the&#x20;SSH&#x20;daemon','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;maxstartups&#x20;10:30:60','[{\"cis\": [\"5.2.21\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4673,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;limited','The&#x20;MaxSessionsparameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;10','[{\"cis\": [\"5.2.22\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4674,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;length&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;complexity&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minclass&#x20;=&#x20;4&#x20;&#x20;&#x20;&#x20;OR&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:password&#x20;requisite&#x20;pam_pwquality.so&#x20;try_first_pass&#x20;retry=3','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4675,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;changes&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(4676,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;changes&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;remember=5&#x20;&#x20;&#x20;or&#x20;&#x20;&#x20;&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4677,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4678,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;configured','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;1&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;1&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;1&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4679,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4680,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4681,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4682,'&#x20;Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;configured','TMOUT&#x20;is&#x20;an&#x20;environmental&#x20;setting&#x20;that&#x20;determines&#x20;the&#x20;timeout&#x20;of&#x20;a&#x20;shell&#x20;in&#x20;seconds.','Setting&#x20;a&#x20;timeout&#x20;value&#x20;reduces&#x20;the&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;that&#x20;has&#x20;been&#x20;left&#x20;unattended.&#x20;It&#x20;also&#x20;ends&#x20;the&#x20;inactive&#x20;session&#x20;and&#x20;releases&#x20;the&#x20;resources&#x20;associated&#x20;with&#x20;that&#x20;session.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;and&#x20;/etc/profile&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(4683,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;configured','The&#x20;user&#x20;file-creation&#x20;mode&#x20;mask&#x20;&#40;umask&#41;&#x20;is&#x20;use&#x20;to&#x20;determine&#x20;the&#x20;file&#x20;permission&#x20;for&#x20;newly&#x20;created&#x20;directories&#x20;and&#x20;files.&#x20;In&#x20;Linux,&#x20;the&#x20;default&#x20;permissions&#x20;for&#x20;any&#x20;newly&#x20;created&#x20;directory&#x20;is&#x20;0777&#x20;&#40;rwxrwxrwx&#41;,&#x20;and&#x20;for&#x20;any&#x20;newly&#x20;created&#x20;file&#x20;it&#x20;is&#x20;0666&#x20;&#40;rw-rw-rw-&#41;.&#x20;The&#x20;umask&#x20;modifies&#x20;the&#x20;default&#x20;Linux&#x20;permissions&#x20;by&#x20;restricting&#x20;&#40;masking&#41;&#x20;these&#x20;permissions.&#x20;The&#x20;umask&#x20;is&#x20;not&#x20;simply&#x20;subtracted,&#x20;but&#x20;is&#x20;processed&#x20;bitwise.&#x20;Bits&#x20;set&#x20;in&#x20;the&#x20;umaskare&#x20;cleared&#x20;in&#x20;the&#x20;resulting&#x20;file&#x20;mode.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4684,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4685,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;&#x20;&#x20;#&#x20;chmod&#x20;u-x,g-wx,o-wx&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4686,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(4687,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;u-x,g-wx,o-wx&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4688,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4689,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4690,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4691,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4692,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(4693,'Ensure&#x20;accounts&#x20;in&#x20;/etc/passwd&#x20;use&#x20;shadowed&#x20;passwords','Local&#x20;accounts&#x20;can&#x20;uses&#x20;shadowed&#x20;passwords.&#x20;With&#x20;shadowed&#x20;passwords,&#x20;The&#x20;passwords&#x20;are&#x20;saved&#x20;in&#x20;shadow&#x20;password&#x20;file,&#x20;/etc/shadow,&#x20;encrypted&#x20;by&#x20;a&#x20;salted&#x20;one-way&#x20;hash.&#x20;Accounts&#x20;with&#x20;a&#x20;shadowed&#x20;password&#x20;have&#x20;an&#x20;xin&#x20;the&#x20;second&#x20;field&#x20;in&#x20;/etc/passwd.','The&#x20;/etc/passwd&#x20;file&#x20;also&#x20;contains&#x20;information&#x20;like&#x20;user&#x20;ID&#039;s&#x20;and&#x20;group&#x20;ID&#039;s&#x20;that&#x20;are&#x20;used&#x20;by&#x20;many&#x20;system&#x20;programs.&#x20;Therefore,&#x20;the&#x20;/etc/passwd&#x20;file&#x20;must&#x20;remain&#x20;world&#x20;readable.&#x20;In&#x20;spite&#x20;of&#x20;encoding&#x20;the&#x20;password&#x20;with&#x20;a&#x20;randomly-generated&#x20;one-way&#x20;hash&#x20;function,&#x20;an&#x20;attacker&#x20;could&#x20;still&#x20;break&#x20;the&#x20;system&#x20;if&#x20;they&#x20;got&#x20;access&#x20;to&#x20;the&#x20;/etc/passwd&#x20;file.&#x20;This&#x20;can&#x20;be&#x20;mitigated&#x20;by&#x20;using&#x20;shadowed&#x20;passwords,&#x20;thus&#x20;moving&#x20;the&#x20;passwords&#x20;in&#x20;the&#x20;/etc/passwd&#x20;file&#x20;to&#x20;/etc/shadow.&#x20;The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;set&#x20;so&#x20;only&#x20;root&#x20;will&#x20;be&#x20;able&#x20;to&#x20;read&#x20;and&#x20;write.&#x20;This&#x20;helps&#x20;mitigate&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;encoded&#x20;passwords&#x20;with&#x20;which&#x20;to&#x20;perform&#x20;a&#x20;dictionary&#x20;attack.','','f&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/passwdfile&#x20;do&#x20;not&#x20;have&#x20;a&#x20;single&#x20;x&#x20;in&#x20;the&#x20;password&#x20;field,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;these&#x20;accounts&#x20;to&#x20;use&#x20;shadowed&#x20;passwords:#&#x20;sed&#x20;-e&#x20;&#039;s/^&#40;[a-zA-Z0-9_]*&#41;:[^:]*:/1:x:/&#039;&#x20;-i&#x20;/etc/passwdInvestigate&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for,&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4694,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(4695,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(4696,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;runa&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5000,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/cramfs.conf:&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;#&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5001,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;limited','The&#x20;VFAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/vfat.conf:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;#&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5002,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/squashfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5003,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/udf.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5004,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.&#x20;This&#x20;can&#x20;be&#x20;accomplished&#x20;by&#x20;either&#x20;mounting&#x20;tmpfs&#x20;to&#x20;/tmp,&#x20;or&#x20;creating&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;example:&#x20;&quot;tmpfs&#x20;&#x20;/tmp&#x20;&#x20;tmpfs&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;&#x20;0&#x20;0&quot;&#x20;&#x20;OR&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;#&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;#&#x20;systemctl&#x20;enable&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount:&#x20;&#x20;&#x20;[Mount]&#x20;What=tmpfs&#x20;Where=/tmp&#x20;Type=tmpfs&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5005,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;OR&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5006,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5007,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5008,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5009,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5010,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5011,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5012,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5013,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5014,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5015,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5016,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5017,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5018,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5019,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5020,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs&#x20;:&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5021,'Disable&#x20;USB&#x20;Storage','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/usb-storage.conf&#x20;&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;&#x20;#&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5022,'Disable&#x20;the&#x20;rhnsd&#x20;Daemon','The&#x20;rhnsd&#x20;daemon&#x20;polls&#x20;the&#x20;Red&#x20;Hat&#x20;Network&#x20;web&#x20;site&#x20;for&#x20;scheduled&#x20;actions&#x20;and,&#x20;if&#x20;there&#x20;are,&#x20;executes&#x20;those&#x20;actions.','Patch&#x20;management&#x20;policies&#x20;may&#x20;require&#x20;that&#x20;organizations&#x20;test&#x20;the&#x20;impact&#x20;of&#x20;a&#x20;patch&#x20;before&#x20;it&#x20;is&#x20;deployed&#x20;in&#x20;a&#x20;production&#x20;environment.&#x20;Having&#x20;patches&#x20;automatically&#x20;deployed&#x20;could&#x20;have&#x20;a&#x20;negative&#x20;impact&#x20;on&#x20;the&#x20;environment.&#x20;It&#x20;is&#x20;best&#x20;to&#x20;not&#x20;allow&#x20;an&#x20;action&#x20;by&#x20;default&#x20;but&#x20;only&#x20;after&#x20;appropriate&#x20;consideration&#x20;has&#x20;been&#x20;made.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;unless&#x20;the&#x20;risk&#x20;is&#x20;understood&#x20;and&#x20;accepted&#x20;or&#x20;you&#x20;are&#x20;running&#x20;your&#x20;own&#x20;satellite&#x20;.&#x20;This&#x20;item&#x20;is&#x20;not&#x20;scored&#x20;because&#x20;organizations&#x20;may&#x20;have&#x20;addressed&#x20;the&#x20;risk.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rhnsd&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rhnsd','[{\"cis\": [\"1.2.2\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5023,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.4\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(5024,'Ensure&#x20;sudo&#x20;is&#x20;installed','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;sudo:&#x20;#&#x20;dnf&#x20;install&#x20;sudo','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5025,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo&#x20;which&#x20;would&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5026,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;logfile=&quot;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5027,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;aide:&#x20;#&#x20;dnf&#x20;install&#x20;aide&#x20;&#x20;||&#x20;&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5028,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','&#x20;Run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;cp&#x20;./config/aidecheck.service&#x20;/etc/systemd/system/aidecheck.service&#x20;&#x20;#&#x20;cp&#x20;./config/aidecheck.timer&#x20;/etc/systemd/system/aidecheck.timer&#x20;&#x20;&#x20;#&#x20;chmod&#x20;0644&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;#&#x20;systemctl&#x20;reenable&#x20;aidecheck.timer&#x20;#&#x20;systemctl&#x20;restart&#x20;aidecheck.timer&#x20;#&#x20;systemctl&#x20;daemon-reload.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;//&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5029,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;and&#x20;grubenv&#x20;stored&#x20;in&#x20;/boot/grub2/','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grub.cfg&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grub.cfg&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grubenv&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grubenv','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5030,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-setpassword:&#x20;#&#x20;grub2-setpassword&#x20;&#x20;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5031,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/usr/lib/systemd/system/rescue.service&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;line:&#x20;ExecStart=-/usr/lib/systemd/systemd-sulogin-shell&#x20;rescue&#x20;Edit&#x20;/usr/lib/systemd/system/emergency.service&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;line:&#x20;ExecStart=-/usr/lib/systemd/systemd-sulogin-shell&#x20;emergency','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5032,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0.&#x20;If&#x20;systemd-coredump&#x20;is&#x20;installed:&#x20;&#x20;edit&#x20;/etc/systemd/coredump.conf&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;lines:&#x20;Storage=none&#x20;ProcessSizeMax=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;command:&#x20;#&#x20;systemctl&#x20;daemon-reload','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5033,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5034,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Control.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;SELinux&#x20;:&#x20;#&#x20;dnf&#x20;install&#x20;libselinux','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5035,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5036,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5037,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5038,'Ensure&#x20;no&#x20;unconfined&#x20;services&#x20;exist','Unconfined&#x20;processes&#x20;run&#x20;in&#x20;unconfined&#x20;domains','For&#x20;unconfined&#x20;processes,&#x20;SELinux&#x20;policy&#x20;rules&#x20;are&#x20;applied,&#x20;but&#x20;policy&#x20;rules&#x20;exist&#x20;that&#x20;allow&#x20;processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;almost&#x20;all&#x20;access.&#x20;Processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;fall&#x20;back&#x20;to&#x20;using&#x20;DAC&#x20;rules&#x20;exclusively.&#x20;If&#x20;an&#x20;unconfined&#x20;process&#x20;is&#x20;compromised,&#x20;SELinux&#x20;does&#x20;not&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;system&#x20;resources&#x20;and&#x20;data,&#x20;but&#x20;of&#x20;course,&#x20;DAC&#x20;rules&#x20;are&#x20;still&#x20;used.&#x20;SELinux&#x20;is&#x20;a&#x20;security&#x20;enhancement&#x20;on&#x20;top&#x20;of&#x20;DAC&#x20;rules&#x20;&ndash;&#x20;it&#x20;does&#x20;not&#x20;replace&#x20;them','','Investigate&#x20;any&#x20;unconfined&#x20;processes&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.&#x20;Notes:&#x20;Occasionally&#x20;certain&#x20;daemons&#x20;such&#x20;as&#x20;backup&#x20;or&#x20;centralized&#x20;management&#x20;software&#x20;may&#x20;require&#x20;running&#x20;unconfined.&#x20;Any&#x20;such&#x20;software&#x20;should&#x20;be&#x20;carefully&#x20;analyzed&#x20;and&#x20;documented&#x20;before&#x20;such&#x20;an&#x20;exception&#x20;is&#x20;made.','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5039,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;dnf&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5040,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;dnf&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5041,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5042,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5043,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5044,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5045,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5046,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5047,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add&#x20;the&#x20;following&#x20;in&#x20;3&#x20;lines:&#x20;&#40;1&#41;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#40;2&#41;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#40;3&#41;&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.8.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5048,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;command&#x20;will&#x20;install&#x20;all&#x20;available&#x20;security&#x20;updates:&#x20;#&#x20;dnf&#x20;update&#x20;--security&#x20;.&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;and&#x20;comparing&#x20;against&#x20;site&#x20;policy:&#x20;#&#x20;dnf&#x20;check-update','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(5049,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;not&#x20;legacy','The&#x20;system-wide&#x20;crypto-policies&#x20;followed&#x20;by&#x20;the&#x20;crypto&#x20;core&#x20;components&#x20;allow&#x20;consistently&#x20;deprecating&#x20;and&#x20;disabling&#x20;algorithms&#x20;system-wide.&#x20;The&#x20;individual&#x20;policy&#x20;levels&#x20;&#40;DEFAULT,&#x20;LEGACY,&#x20;FUTURE,&#x20;and&#x20;FIPS&#41;&#x20;are&#x20;included&#x20;in&#x20;the&#x20;crypto-policies&#40;7&#41;&#x20;package.','If&#x20;the&#x20;Legacy&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;selected,&#x20;it&#x20;includes&#x20;support&#x20;for&#x20;TLS&#x20;1.0,&#x20;TLS&#x20;1.1,&#x20;and&#x20;SSH2&#x20;protocols&#x20;or&#x20;later.&#x20;The&#x20;algorithms&#x20;DSA,&#x20;3DES,&#x20;and&#x20;RC4&#x20;are&#x20;allowed,&#x20;while&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;1023-bits.&#x20;These&#x20;legacy&#x20;protocols&#x20;and&#x20;algorithms&#x20;can&#x20;make&#x20;the&#x20;system&#x20;vulnerable&#x20;to&#x20;attacks,&#x20;including&#x20;those&#x20;listed&#x20;in&#x20;RFC&#x20;7457','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;change&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;&lt;CRYPTO&#x20;POLICY&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Example:&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;DEFAULT&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;make&#x20;the&#x20;updated&#x20;system-wide&#x20;crypto&#x20;policy&#x20;active&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;update-crypto-policies','[{\"cis\": [\"1.10\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5050,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;FUTURE&#x20;or&#x20;FIPS','The&#x20;system-wide&#x20;crypto-policies&#x20;followed&#x20;by&#x20;the&#x20;crypto&#x20;core&#x20;components&#x20;allow&#x20;consistently&#x20;deprecating&#x20;and&#x20;disabling&#x20;algorithms&#x20;system-wide.&#x20;The&#x20;individual&#x20;policy&#x20;levels&#x20;&#40;DEFAULT,&#x20;LEGACY,&#x20;FUTURE,&#x20;and&#x20;FIPS&#41;&#x20;are&#x20;included&#x20;in&#x20;the&#x20;crypto-policies&#40;7&#41;&#x20;package.','If&#x20;the&#x20;Legacy&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;selected,&#x20;it&#x20;includes&#x20;support&#x20;for&#x20;TLS&#x20;1.0,&#x20;TLS&#x20;1.1,&#x20;and&#x20;SSH2&#x20;protocols&#x20;or&#x20;later.&#x20;The&#x20;algorithms&#x20;DSA,&#x20;3DES,&#x20;and&#x20;RC4&#x20;are&#x20;allowed,&#x20;while&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;1023-bits.&#x20;These&#x20;legacy&#x20;protocols&#x20;and&#x20;algorithms&#x20;can&#x20;make&#x20;the&#x20;system&#x20;vulnerable&#x20;to&#x20;attacks,&#x20;including&#x20;those&#x20;listed&#x20;in&#x20;RFC&#x20;7457&#x20;FUTURE:&#x20;Is&#x20;a&#x20;conservative&#x20;security&#x20;level&#x20;that&#x20;is&#x20;believed&#x20;to&#x20;withstand&#x20;any&#x20;near-term&#x20;future&#x20;attacks.&#x20;This&#x20;level&#x20;does&#x20;not&#x20;allow&#x20;the&#x20;use&#x20;of&#x20;SHA-1&#x20;in&#x20;signature&#x20;algorithms.&#x20;The&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;3071&#x20;bits.&#x20;The&#x20;level&#x20;provides&#x20;at&#x20;least&#x20;128-bit&#x20;security&#x20;FIPS:&#x20;Conforms&#x20;to&#x20;the&#x20;FIPS&#x20;140-2&#x20;requirements.&#x20;This&#x20;policy&#x20;is&#x20;used&#x20;internally&#x20;by&#x20;the&#x20;fips-mode-setup&#40;8&#41;&#x20;tool&#x20;which&#x20;can&#x20;switch&#x20;the&#x20;system&#x20;into&#x20;the&#x20;FIPS&#x20;140-2&#x20;compliance&#x20;mode.&#x20;The&#x20;level&#x20;provides&#x20;at&#x20;least&#x20;112-bit&#x20;security','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;change&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;FUTURE&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;switch&#x20;the&#x20;system&#x20;to&#x20;FIPS&#x20;mode,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;fips-mode-setup&#x20;--enable','[{\"cis\": [\"1.11\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5051,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;dnf&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5052,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;install&#x20;chrony:&#x20;#&#x20;dnf&#x20;install&#x20;chrony&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;verify&#x20;that&#x20;host&#x20;based&#x20;synchronization&#x20;is&#x20;in&#x20;use.','[{\"cis\": [\"2.2.2.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5053,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;&#x20;&#x20;Configure&#x20;chrony&#x20;to&#x20;run&#x20;as&#x20;the&#x20;chrony&#x20;user','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5054,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;dnf&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5055,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rsyncd','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5056,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5057,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5058,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5059,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;smb','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5060,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dovecot','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5061,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;httpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5062,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5063,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;named','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5064,'Ensure&#x20;NFS&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;NFS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;nfs','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5065,'Ensure&#x20;RPC&#x20;is&#x20;not&#x20;enabled','The&#x20;rpcbind&#x20;service&#x20;maps&#x20;Remote&#x20;Procedure&#x20;Call&#x20;&#40;RPC&#41;&#x20;services&#x20;to&#x20;the&#x20;ports&#x20;on&#x20;which&#x20;they&#x20;listen.&#x20;RPC&#x20;processes&#x20;notify&#x20;rpcbind&#x20;when&#x20;they&#x20;start,&#x20;registering&#x20;the&#x20;ports&#x20;they&#x20;are&#x20;listening&#x20;on&#x20;and&#x20;the&#x20;RPC&#x20;program&#x20;numbers&#x20;they&#x20;expect&#x20;to&#x20;serve.&#x20;The&#x20;client&#x20;system&#x20;then&#x20;contacts&#x20;rpcbind&#x20;on&#x20;the&#x20;server&#x20;with&#x20;a&#x20;particular&#x20;RPC&#x20;program&#x20;number.&#x20;The&#x20;rpcbind&#x20;service&#x20;redirects&#x20;the&#x20;client&#x20;to&#x20;the&#x20;proper&#x20;port&#x20;number&#x20;so&#x20;it&#x20;can&#x20;communicate&#x20;with&#x20;the&#x20;requested&#x20;service.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;require&#x20;rpc&#x20;based&#x20;services,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;rpcbind&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5066,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5067,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dhcpd','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5068,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5069,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;ypserv','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5070,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.18\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(5071,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;dnf&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5072,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet&#x20;:&#x20;#&#x20;dnf&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5073,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;dnf&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5074,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.ip_forwards*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;&#x20;&#x20;&#x20;&amp;&amp;&#x20;&#x20;&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv6.conf.all.forwardings*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv6.conf.all.forwardings*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5075,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;.Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5076,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5077,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv6.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;and&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5078,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;and&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5079,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;and&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5080,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.icmp_echo_ignore_broadcastss*=s*0&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;&quot;s/^s*&#40;net.ipv4.icmp_echo_ignore_broadcastss*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.icmp_echo_ignore_broadcasts=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5081,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.icmp_ignore_bogus_error_responsess*=s*0&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.icmp_ignore_bogus_error_responsess*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&quot;','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5082,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.conf.all.rp_filters*=s*0&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.net.ipv4.conf.all.rp_filters*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;.Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.default.rp_filter=1&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5083,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.tcp_syncookiess*=s*[02]*&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.tcp_syncookiess*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5084,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;do&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1;','[{\"cis\": [\"3.2.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5085,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5086,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5087,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5088,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5089,'Ensure&#x20;a&#x20;Firewall&#x20;package&#x20;is&#x20;installed','A&#x20;Firewall&#x20;package&#x20;should&#x20;be&#x20;selected.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;nftables&#x20;or&#x20;iptables.','A&#x20;Firewall&#x20;package&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;a&#x20;Firewall&#x20;package.&#x20;For&#x20;firewalld:&#x20;dnf&#x20;install&#x20;firewalld&#x20;.For&#x20;nftables:&#x20;#&#x20;dnf&#x20;install&#x20;nftables.&#x20;For&#x20;iptables:&#x20;#&#x20;dnf&#x20;install&#x20;iptables','[{\"cis\": [\"3.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5090,'Ensure&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running','Ensure&#x20;that&#x20;the&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;to&#x20;protect&#x20;your&#x20;system','firewalld&#x20;&#40;Dynamic&#x20;Firewall&#x20;Manager&#41;&#x20;tool&#x20;provides&#x20;a&#x20;dynamically&#x20;managed&#x20;firewall.&#x20;The&#x20;tool&#x20;enables&#x20;network/firewall&#x20;zones&#x20;to&#x20;define&#x20;the&#x20;trust&#x20;level&#x20;of&#x20;network&#x20;connections&#x20;and/or&#x20;interfaces.&#x20;It&#x20;has&#x20;support&#x20;both&#x20;for&#x20;IPv4&#x20;and&#x20;IPv6&#x20;firewall&#x20;settings.&#x20;Also,&#x20;it&#x20;supports&#x20;Ethernet&#x20;bridges&#x20;and&#x20;allow&#x20;you&#x20;to&#x20;separate&#x20;between&#x20;runtime&#x20;and&#x20;permanent&#x20;configuration&#x20;options.&#x20;Finally,&#x20;it&#x20;supports&#x20;an&#x20;interface&#x20;for&#x20;services&#x20;or&#x20;applications&#x20;to&#x20;add&#x20;firewall&#x20;rules&#x20;directly','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;firewalld','[{\"cis\": [\"3.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5091,'Ensure&#x20;iptables&#x20;is&#x20;not&#x20;enabled','IPtables&#x20;is&#x20;an&#x20;application&#x20;that&#x20;allows&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;configure&#x20;the&#x20;IPv4&#x20;and&#x20;IPv6&#x20;tables,&#x20;chains&#x20;and&#x20;rules&#x20;provided&#x20;by&#x20;the&#x20;Linux&#x20;kernel&#x20;firewall.&#x20;IPtables&#x20;is&#x20;installed&#x20;as&#x20;a&#x20;dependency&#x20;with&#x20;firewalld.','Running&#x20;firewalld&#x20;and&#x20;IPtables&#x20;concurrently&#x20;may&#x20;lead&#x20;to&#x20;conflict,&#x20;therefore&#x20;IPtables&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;when&#x20;using&#x20;firewalld.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;iptables:&#x20;systemctl&#x20;--now&#x20;mask&#x20;iptables','[{\"cis\": [\"3.4.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5092,'Ensure&#x20;nftables&#x20;is&#x20;not&#x20;enabled','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.&#x20;nftables&#x20;are&#x20;installed&#x20;as&#x20;a&#x20;dependency&#x20;with&#x20;firewalld.','Running&#x20;firewalld&#x20;and&#x20;nftables&#x20;concurrently&#x20;may&#x20;lead&#x20;to&#x20;conflict,&#x20;therefore&#x20;nftables&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;when&#x20;using&#x20;firewalld.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;mask&#x20;and&#x20;stop&#x20;nftables:&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables','[{\"cis\": [\"3.4.2.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5093,'Ensure&#x20;iptables&#x20;are&#x20;flushed','nftables&#x20;is&#x20;a&#x20;replacement&#x20;for&#x20;iptables,&#x20;ip6tables,&#x20;ebtables&#x20;and&#x20;arptables','It&#x20;is&#x20;possible&#x20;to&#x20;mix&#x20;iptables&#x20;and&#x20;nftables.&#x20;However,&#x20;this&#x20;increases&#x20;complexity&#x20;and&#x20;also&#x20;the&#x20;chance&#x20;to&#x20;introduce&#x20;errors.&#x20;For&#x20;simplicity&#x20;flush&#x20;out&#x20;all&#x20;iptables&#x20;rules,&#x20;and&#x20;ensure&#x20;it&#x20;is&#x20;not&#x20;loaded.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;flush&#x20;iptables:&#x20;For&#x20;iptables:&#x20;#&#x20;iptables&#x20;-F&#x20;and&#x20;For&#x20;ip6tables:&#x20;#&#x20;ip6tables&#x20;-F','[{\"cis\": [\"3.4.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5094,'Ensure&#x20;a&#x20;table&#x20;exists','Tables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;.Example:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;filter','[{\"cis\": [\"3.4.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5095,'Ensure&#x20;base&#x20;chains&#x20;exist','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;input&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;forward&#x20;priority&#x20;0;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;output&#x20;priority&#x20;0&#x20;;&#x20;}','[{\"cis\": [\"3.4.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5096,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept&#x20;,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;transversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;;&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;and&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.4.3.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5097,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conf&#x20;file&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;nftables','[{\"cis\": [\"3.4.3.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5098,'Ensure&#x20;iptables&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.4.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5099,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.4.4.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5100,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.4.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5101,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.4.4.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5102,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.&#x20;Red&#x20;Hat&#x20;Enterprise&#x20;Linux&#x20;contains&#x20;a&#x20;wireless&#x20;tool&#x20;kit&#x20;to&#x20;allow&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;and&#x20;use&#x20;wireless&#x20;networks.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;nmcli&#x20;radio&#x20;all&#x20;off&#x20;.&#x20;Disable&#x20;any&#x20;wireless&#x20;interfaces&#x20;in&#x20;your&#x20;network&#x20;configuration.','[{\"cis\": [\"3.5\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"1.2.3\"]}, {\"tsc\": [\"CC6.6\"]}]'),(5103,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;.Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"3.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.6\", \"CC5.2\"]}]'),(5104,'Ensure&#x20;rsyslog&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;software&#x20;is&#x20;a&#x20;recommended&#x20;replacement&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;rsyslog:&#x20;&#x20;&#x20;#&#x20;dnf&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5105,'Ensure&#x20;auditd&#x20;is&#x20;installed','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;Install&#x20;auditd&#x20;#&#x20;dnf&#x20;install&#x20;audit&#x20;audit-libs','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5106,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5107,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub2&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX&#x20;:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5108,'Ensure&#x20;audit_backlog_limit&#x20;is&#x20;sufficient','The&#x20;backlog&#x20;limit&#x20;has&#x20;a&#x20;default&#x20;setting&#x20;of&#x20;64.','During&#x20;boot&#x20;if&#x20;audit=1,&#x20;then&#x20;the&#x20;backlog&#x20;will&#x20;hold&#x20;64&#x20;records.&#x20;If&#x20;more&#x20;than&#x20;64&#x20;records&#x20;are&#x20;created&#x20;during&#x20;boot,&#x20;auditd&#x20;records&#x20;will&#x20;be&#x20;lost&#x20;and&#x20;potential&#x20;malicious&#x20;activity&#x20;could&#x20;go&#x20;undetected.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit_backlog_limit=&lt;BACKLOG&#x20;SIZE&gt;&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5109,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5110,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5111,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(5112,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5113,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.9\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5114,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"4.9\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5115,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5116,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5117,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5118,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5119,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5120,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5121,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts','[{\"cis\": [\"4.1.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5122,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(5123,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod&#x20;,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5124,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"4.9\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5125,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rules&#x20;and&#x20;add&#x20;the&#x20;line:&#x20;&#x20;&#x20;-e&#x20;2&#x20;&#x20;&#x20;&#x20;at&#x20;the&#x20;end&#x20;of&#x20;the&#x20;file','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(5126,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5127,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(5128,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5129,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(5130,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5131,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;write&#x20;logfiles&#x20;to&#x20;persistent&#x20;disk','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5132,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;{}&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(5133,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;crond','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5134,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5135,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5136,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5137,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5138,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5139,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.d&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.d','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5140,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5141,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5142,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;and&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5143,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;0600&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5144,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;public&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;0644&#x20;{}&#x20;;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5145,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5146,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5147,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5148,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Ignorerhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5149,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5150,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5151,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5152,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5153,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(5154,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5155,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5156,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthentication&#x20;and&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types.','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5157,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines.','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.&#x20;SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5158,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxSessions&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;concurrent&#x20;sessions,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxSessions&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;4','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5159,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;not&#x20;over-ridden','System-wide&#x20;Crypto&#x20;policy&#x20;can&#x20;be&#x20;over-ridden&#x20;or&#x20;opted&#x20;out&#x20;of&#x20;for&#x20;openSSH','Over-riding&#x20;or&#x20;opting&#x20;out&#x20;of&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;could&#x20;allow&#x20;for&#x20;the&#x20;use&#x20;of&#x20;less&#x20;secure&#x20;Ciphers,&#x20;MACs,&#x20;KexAlgoritms&#x20;and&#x20;GSSAPIKexAlgorithsm','','Run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;CRYPTO_POLICYs*=.*&#41;$/#&#x20;1/&quot;&#x20;/etc/sysconfig/sshd;&#x20;#&#x20;systemctl&#x20;reload&#x20;sshd','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5160,'Create&#x20;custom&#x20;authselect&#x20;profile','A&#x20;custom&#x20;profile&#x20;can&#x20;be&#x20;created&#x20;by&#x20;copying&#x20;and&#x20;customizing&#x20;one&#x20;of&#x20;the&#x20;default&#x20;profiles.&#x20;The&#x20;default&#x20;profiles&#x20;include:&#x20;sssd,&#x20;winbind,&#x20;or&#x20;the&#x20;nis.','A&#x20;custom&#x20;profile&#x20;is&#x20;required&#x20;to&#x20;customize&#x20;many&#x20;of&#x20;the&#x20;pam&#x20;options','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;custom&#x20;authselect&#x20;profile:&#x20;#&#x20;authselect&#x20;create-profile&#x20;&lt;custom-profile&#x20;name&gt;&#x20;-b&#x20;&lt;default&#x20;profile&#x20;to&#x20;copy&gt;&#x20;.Example:&#x20;#&#x20;authselect&#x20;create-profile&#x20;custom-profile&#x20;-b&#x20;sssd&#x20;--symlink-meta','[{\"cis\": [\"5.3.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5161,'Ensure&#x20;authselect&#x20;includes&#x20;with-faillock','The&#x20;pam_faillock.so&#x20;module&#x20;maintains&#x20;a&#x20;list&#x20;of&#x20;failed&#x20;authentication&#x20;attempts&#x20;per&#x20;user&#x20;during&#x20;a&#x20;specified&#x20;interval&#x20;and&#x20;locks&#x20;the&#x20;account&#x20;in&#x20;case&#x20;there&#x20;were&#x20;more&#x20;than&#x20;deny&#x20;consecutive&#x20;failed&#x20;authentications.&#x20;It&#x20;stores&#x20;the&#x20;failure&#x20;records&#x20;into&#x20;per-user&#x20;files&#x20;in&#x20;the&#x20;tally&#x20;directory.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;include&#x20;the&#x20;with-faillock&#x20;option:&#x20;#&#x20;authselect&#x20;select&#x20;&lt;PROFILE&#x20;NAME&gt;&#x20;with-faillock&#x20;&#x20;&#x20;&#x20;Example:&#x20;#&#x20;authselect&#x20;select&#x20;custom/custom-profile&#x20;with-sudo&#x20;with-faillock&#x20;without-nullok','[{\"cis\": [\"5.3.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5162,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options.&#x20;try_first_pass&#x20;-&#x20;retrieve&#x20;the&#x20;password&#x20;from&#x20;a&#x20;previous&#x20;stacked&#x20;PAM&#x20;module.&#x20;If&#x20;not&#x20;available,&#x20;then&#x20;prompt&#x20;the&#x20;user&#x20;for&#x20;a&#x20;password.&#x20;retry=3&#x20;-&#x20;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure.&#x20;minlen=14&#x20;-&#x20;password&#x20;must&#x20;be&#x20;14&#x20;characters&#x20;or&#x20;more&#x20;Either&#x20;of&#x20;the&#x20;following&#x20;can&#x20;be&#x20;used&#x20;to&#x20;enforce&#x20;complex&#x20;passwords:&#x20;minclass=4&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;four&#x20;classes&#x20;of&#x20;characters&#x20;for&#x20;the&#x20;new&#x20;password&#x20;OR&#x20;dcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;digit&#x20;ucredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;uppercase&#x20;character&#x20;ocredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;special&#x20;character&#x20;lcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;lowercase&#x20;character&#x20;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;length&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;complexity&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minclass&#x20;=&#x20;4&#x20;OR&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;-1&#x20;=&#x20;-1&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;system-auth&#x20;and&#x20;password-auth&#x20;files:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&#039;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&#039;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/$FN&#x20;||&#x20;PTF=/etc/authselect/$FN&#x20;[[&#x20;-z&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+requisites+pam_pwquality.sos+.*enforce-for-roots*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+requisites+pam_pwquality.sos+&#41;&#40;.*&#41;$/12&#x20;enforce-for-root/&#039;&#x20;$PTF&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+requisites+pam_pwquality.sos+.*s+retry=S+s*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;/pwquality/s/retry=S+/retry=3/&#039;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+requisites+pam_pwquality.sos+&#41;&#40;.*&#41;$/12&#x20;retry=3/&#039;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5163,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;deny=&#x20;-&#x20;Number&#x20;of&#x20;attempts&#x20;before&#x20;the&#x20;account&#x20;is&#x20;locked.&#x20;unlock_time=&#x20;-&#x20;Time&#x20;in&#x20;seconds&#x20;before&#x20;the&#x20;account&#x20;is&#x20;unlocked.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;and&#x20;unlock&#x20;time&#x20;to&#x20;follow&#x20;local&#x20;site&#x20;policy.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Set&#x20;password&#x20;lockouts&#x20;and&#x20;unlock&#x20;times&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;system-auth&#x20;and&#x20;password-auth&#x20;files.&#x20;This&#x20;script&#x20;will&#x20;update/add&#x20;the&#x20;deny=5&#x20;and&#x20;unlock_time=900&#x20;options.&#x20;This&#x20;script&#x20;should&#x20;be&#x20;modified&#x20;as&#x20;needed&#x20;to&#x20;follow&#x20;local&#x20;site&#x20;policy.CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&quot;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&quot;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/$FN&#x20;||&#x20;PTF=/etc/authselect/$FN&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*auths+requireds+pam_faillock.sos+.*deny=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;/pam_faillock.so/s/deny=S+/deny=5/g&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^^s*&#40;auths+requireds+pam_faillock.sos+&#41;&#40;.*[^{}]&#41;&#40;{.*}|&#41;$/12&#x20;deny=5&#x20;3/&quot;&#x20;$PTF&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*auths+requireds+pam_faillock.sos+.*unlock_time=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;/pam_faillock.so/s/unlock_time=S+/unlock_time=900/g&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;auths+requireds+pam_faillock.sos+&#41;&#40;.*[^{}]&#41;&#40;{.*}|&#41;$/12&#x20;unlock_time=900&#x20;3/&quot;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5164,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&quot;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.&#x20;remember=&lt;5&gt;&#x20;-&#x20;Number&#x20;of&#x20;old&#x20;passwords&#x20;to&#x20;remember','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;remembered&#x20;password&#x20;history&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.&#x20;Run&#x20;the&#x20;following&#x20;script&#x20;to&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;pam_pwhistory.so&#x20;and&#x20;pam_unix.so&#x20;lines&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&quot;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&quot;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/system-auth&#x20;||&#x20;PTF=/etc/authselect/system-auth&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*passwords+&#40;sufficients+pam_unix|requi&#40;red|site&#41;s+pam_pwhistory&#41;.sos+&#x20;&#40;[^#]+s+&#41;*remember=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;passwords+&#40;requisite|sufficient&#41;s+&#40;pam_pwquality.so|pam_unix.so&#41;s+&#41;&#40;.*&#41;&#40;remember=S+s*&#41;&#40;.*&#41;$/14&#x20;remember=5&#x20;6/&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;passwords+&#40;requisite|sufficient&#41;s+&#40;pam_pwquality.so|pam_unix.so&#41;s+&#41;&#40;.*&#41;$/14&#x20;remember=5/&quot;&#x20;$PTF&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5165,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;password&#x20;hashing&#x20;algorithm&#x20;to&#x20;sha512.&#x20;Run&#x20;the&#x20;following&#x20;script&#x20;to&#x20;dd&#x20;or&#x20;modify&#x20;the&#x20;pam_unix.so&#x20;lines&#x20;in&#x20;the&#x20;password-auth&#x20;and&#x20;system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&#039;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&#039;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-z&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+sufficients+pam_unix.sos+.*sha512s*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+sufficients+pam_unix.sos+&#41;&#40;.*&#41;$/12&#x20;sha512/&#039;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(5166,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5167,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5168,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5169,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5170,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;readonly&#x20;TMOUT=900&#x20;;&#x20;export&#x20;TMOUT&#x20;.&#x20;Note&#x20;that&#x20;setting&#x20;the&#x20;value&#x20;to&#x20;readonly&#x20;prevents&#x20;unwanted&#x20;modification&#x20;during&#x20;runtime.','[{\"cis\": [\"5.5.3\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(5171,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.5.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5172,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.5.5\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5173,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo&#x20;,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su&#x20;,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su&#x20;,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo&#x20;,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5174,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5175,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/&#x20;shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5176,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5177,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5178,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;600&#x20;/etc/passwd-','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5179,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/shadow-','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5180,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5181,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5182,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5183,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5184,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5185,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5186,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5500,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5501,'Ensure&#x20;mounting&#x20;of&#x20;freevxfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;freevxfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;free&#x20;version&#x20;of&#x20;the&#x20;Veritas&#x20;type&#x20;filesystem.&#x20;This&#x20;is&#x20;the&#x20;primary&#x20;filesystem&#x20;type&#x20;for&#x20;HP-UX&#x20;operating&#x20;systems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;freevxfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;freevxfs&#x20;module:&#x20;rmmod&#x20;freevxfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5502,'Ensure&#x20;mounting&#x20;of&#x20;jffs2&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;jffs2&#x20;&#40;journaling&#x20;flash&#x20;filesystem&#x20;2&#41;&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;log-structured&#x20;filesystem&#x20;used&#x20;in&#x20;flash&#x20;memory&#x20;devices.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;jffs2&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;jffs2&#x20;module:&#x20;rmmod&#x20;jffs2','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5503,'Ensure&#x20;mounting&#x20;of&#x20;hfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfs&#x20;module:&#x20;rmmod&#x20;hfs','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5504,'Ensure&#x20;mounting&#x20;of&#x20;hfsplus&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;hfsplus&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;hierarchical&#x20;filesystem&#x20;designed&#x20;to&#x20;replace&#x20;hfs&#x20;that&#x20;allows&#x20;you&#x20;to&#x20;mount&#x20;Mac&#x20;OS&#x20;filesystems.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;hfsplus&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;hfsplus&#x20;module:&#x20;rmmod&#x20;hfsplus','[{\"cis\": [\"1.1.1.5\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5505,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.6\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5506,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.7\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5507,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.8\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(5508,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5509,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstabfile&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5510,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5511,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5512,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5513,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5514,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.8\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5515,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5516,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5517,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5518,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5519,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5520,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5521,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5522,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5523,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5524,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;#&#x20;chkconfig&#x20;autofs&#x20;off','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5525,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.3\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(5526,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;aide:&#x20;yum&#x20;install&#x20;aide&#x20;//&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5527,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','Run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;//&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5528,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;located&#x20;at&#x20;/boot/grub/grub.conf&#x20;and&#x20;linked&#x20;as&#x20;/boot/grub/menu.lst&#x20;and&#x20;/etc/grub.conf&#x20;.','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub/grub.conf&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub/grub.conf','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5529,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt:&#x20;#&#x20;grub-md5-crypt&#x20;Password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Retype&#x20;Password:&#x20;&lt;password&gt;&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Copy&#x20;and&#x20;paste&#x20;the&#x20;&lt;encrypted-password&gt;&#x20;into&#x20;the&#x20;global&#x20;section&#x20;of&#x20;/boot/grub/grub.conf&#x20;:&#x20;password&#x20;--md5&#x20;&lt;encrypted-password&gt;','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5530,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/etc/sysconfig/init&#x20;and&#x20;set&#x20;SINGLE&#x20;to&#x20;&#039;&#x20;/sbin/sulogin&#039;:&#x20;&#x20;SINGLE=/sbin/sulogin','[{\"cis\": [\"1.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5531,'Ensure&#x20;interactive&#x20;boot&#x20;is&#x20;not&#x20;enabled','Interactive&#x20;boot&#x20;allows&#x20;console&#x20;users&#x20;to&#x20;interactively&#x20;select&#x20;which&#x20;services&#x20;start&#x20;on&#x20;boot.&#x20;The&#x20;PROMPT&#x20;option&#x20;provides&#x20;console&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;interactively&#x20;boot&#x20;the&#x20;system&#x20;and&#x20;select&#x20;which&#x20;services&#x20;to&#x20;start&#x20;on&#x20;boot&#x20;.&#x20;','Turn&#x20;off&#x20;the&#x20;PROMPT&#x20;option&#x20;on&#x20;the&#x20;console&#x20;to&#x20;prevent&#x20;console&#x20;users&#x20;from&#x20;potentially&#x20;overriding&#x20;established&#x20;security&#x20;settings.&#x20;','','Edit&#x20;the&#x20;/etc/sysconfig/init&#x20;file&#x20;and&#x20;set&#x20;PROMPT&#x20;to&#x20;&#039;&#x20;no&#x20;&#039;:&#x20;PROMPT=no','[{\"cis\": [\"1.4.4\"]}, {\"cis_csc\": [\"5.1\"]}]'),(5532,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5533,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5534,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5535,'Ensure&#x20;prelink&#x20;is&#x20;disabled','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal&#x20;and&#x20;uninstall&#x20;prelink:&#x20;prelink&#x20;-ua&#x20;&amp;&amp;&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.5.4\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5536,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/boot/grub/grub.conf&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;on&#x20;all&#x20;kernel&#x20;lines','[{\"cis\": [\"1.6.1.1\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5537,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.6.1.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5538,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.6.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5539,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;yum&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.6.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5540,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;yum&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.6.1.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5541,'Ensure&#x20;no&#x20;unconfined&#x20;daemons&#x20;exist','Daemons&#x20;that&#x20;are&#x20;not&#x20;defined&#x20;in&#x20;SELinux&#x20;policy&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;of&#x20;their&#x20;parent&#x20;process.','Since&#x20;daemons&#x20;are&#x20;launched&#x20;and&#x20;descend&#x20;from&#x20;the&#x20;init&#x20;process,&#x20;they&#x20;will&#x20;inherit&#x20;the&#x20;security&#x20;context&#x20;label&#x20;initrc_t&#x20;.&#x20;This&#x20;could&#x20;cause&#x20;the&#x20;unintended&#x20;consequence&#x20;of&#x20;giving&#x20;the&#x20;process&#x20;more&#x20;permission&#x20;than&#x20;it&#x20;requires.','','Investigate&#x20;any&#x20;unconfined&#x20;daemons&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.6.1.6\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5542,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;libselinux:&#x20;yum&#x20;install&#x20;libselinux','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5543,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v.','[{\"cis\": [\"1.7.1.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5544,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.7.1.2\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5545,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.3\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5546,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5547,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5548,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5549,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Create&#x20;the&#x20;/etc/dconf/profile/gdm&#x20;file&#x20;with&#x20;the&#x20;following&#x20;contents:&#x20;&#x20;user-db:user&#x20;&#x20;&#x20;system-db:gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;file-db:/usr/share/gdm/greeter-dconf-defaults&#x20;&#x20;&#x20;&#x20;&#x20;||&#x20;&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;banner-message-enable&#x20;and&#x20;banner-message-text&#x20;options&#x20;in&#x20;/etc/dconf/db/gdm.d/01-banner-message&#x20;:&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;&#x20;&#x20;&#x20;||&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;system&#x20;databases:&#x20;dconf&#x20;update','[{\"cis\": [\"1.7.2\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(5550,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;and&#x20;comparing&#x20;against&#x20;site&#x20;policy:&#x20;#&#x20;yum&#x20;check-update','[{\"cis\": [\"1.8\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(5551,'Ensure&#x20;chargen&#x20;services&#x20;are&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;chargen-dgram&#x20;and&#x20;chargen-stream:&#x20;#&#x20;chkconfig&#x20;chargen-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;chargen-stream&#x20;off','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5552,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;daytime-dgram&#x20;and&#x20;daytime-stream:&#x20;#&#x20;chkconfig&#x20;daytime-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;daytime-stream&#x20;off','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5553,'Ensure&#x20;discard&#x20;services&#x20;are&#x20;not&#x20;enabled','discardis&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;discard-dgram&#x20;and&#x20;discard-stream:&#x20;#&#x20;chkconfig&#x20;discard-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;discard-stream&#x20;off','[{\"cis\": [\"2.1.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5554,'Ensure&#x20;echo&#x20;services&#x20;are&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;echo-dgram&#x20;and&#x20;echo-stream:&#x20;#&#x20;chkconfig&#x20;echo-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;echo-stream&#x20;off','[{\"cis\": [\"2.1.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5555,'Ensure&#x20;time&#x20;services&#x20;are&#x20;not&#x20;enabled','time&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;time-dgram&#x20;and&#x20;time-stream:&#x20;#&#x20;chkconfig&#x20;time-dgram&#x20;off;&#x20;#&#x20;chkconfig&#x20;time-stream&#x20;off','[{\"cis\": [\"2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5556,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;rexec&#x20;&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;services&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;rsh,&#x20;rlogin,&#x20;and&#x20;rexec:&#x20;#&#x20;chkconfig&#x20;rsh&#x20;off&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;rlogin&#x20;off&#x20;&#x20;#&#x20;chkconfig&#x20;rexec&#x20;off','[{\"cis\": [\"2.1.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5557,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;talk:&#x20;#&#x20;chkconfig&#x20;talk&#x20;off','[{\"cis\": [\"2.1.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5558,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;chkconfig&#x20;telnet&#x20;off','[{\"cis\": [\"2.1.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5559,'Ensure&#x20;tftp&#x20;server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;tftp-server&#x20;is&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;tftp:&#x20;#&#x20;chkconfig&#x20;tftp&#x20;off','[{\"cis\": [\"2.1.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5560,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;chkconfig&#x20;rsyncd&#x20;off','[{\"cis\": [\"2.1.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5561,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;xinetd:&#x20;#&#x20;chkconfig&#x20;xinetd&#x20;off','[{\"cis\": [\"2.1.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5562,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;and&#x20;verify&#x20;either&#x20;ntp&#x20;or&#x20;chrony&#x20;is&#x20;installed:&#x20;#&#x20;rpm&#x20;-q&#x20;ntp&#x20;#&#x20;rpm&#x20;-q&#x20;chrony&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;verify&#x20;that&#x20;host&#x20;based&#x20;synchronization&#x20;is&#x20;in&#x20;use.','[{\"cis\": [\"2.2.2.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5563,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;and&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/ntpd&#x20;to&#x20;include&#x20;&#039;&#x20;-u&#x20;ntp:ntp&#x20;&#039;:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5564,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/chrony.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/chronyd&#x20;to&#x20;include:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;chronyd&#039;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5565,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;yum&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5566,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;chkconfig&#x20;avahi-daemon&#x20;off','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5567,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups&#x20;:&#x20;#&#x20;chkconfig&#x20;cups&#x20;off','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5568,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;chkconfig&#x20;dhcpd&#x20;off','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5569,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;chkconfig&#x20;slapd&#x20;off','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5570,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs,&#x20;nfs-server&#x20;and&#x20;rpcbind:&#x20;#&#x20;chkconfig&#x20;nfs&#x20;off;&#x20;#&#x20;chkconfig&#x20;rpcbind&#x20;off','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5571,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;chkconfig&#x20;named&#x20;off','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5572,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;chkconfig&#x20;vsftpd&#x20;off','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5573,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;chkconfig&#x20;httpd&#x20;off','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5574,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;chkconfig&#x20;dovecot&#x20;off','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5575,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;chkconfig&#x20;smb&#x20;off','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5576,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;chkconfig&#x20;squid&#x20;off','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5577,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;chkconfig&#x20;snmpd&#x20;off','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5578,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;Restart&#x20;postfix:&#x20;#&#x20;service&#x20;postfix&#x20;restart','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(5579,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;chkconfig&#x20;ypserv&#x20;off','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5580,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;yum&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5581,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh&#x20;,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;rsh','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5582,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5583,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5584,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5585,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5586,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5587,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5588,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5589,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5590,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5591,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5592,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5593,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5594,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5595,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5596,'Ensure&#x20;IPv6&#x20;redirects&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;prevents&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;ICMP&#x20;redirects.&#x20;ICMP&#x20;redirects&#x20;tell&#x20;the&#x20;system&#x20;about&#x20;alternate&#x20;routes&#x20;for&#x20;sending&#x20;traffic.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;ICMP&#x20;redirects&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;||&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5597,'Ensure&#x20;IPv6&#x20;is&#x20;disabled','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;few&#x20;organizations&#x20;have&#x20;implemented&#x20;IPv6.','If&#x20;IPv6&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/boot/grub/grub.conf&#x20;to&#x20;include&#x20;ipv6.disable=1&#x20;on&#x20;all&#x20;kernel&#x20;lines.','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5598,'Ensure&#x20;TCP&#x20;Wrappers&#x20;is&#x20;installed','TCP&#x20;Wrappers&#x20;provides&#x20;a&#x20;simple&#x20;access&#x20;list&#x20;and&#x20;standardized&#x20;logging&#x20;method&#x20;for&#x20;services&#x20;capable&#x20;of&#x20;supporting&#x20;it.&#x20;In&#x20;the&#x20;past,&#x20;services&#x20;that&#x20;were&#x20;called&#x20;from&#x20;inetd&#x20;and&#x20;xinetd&#x20;supported&#x20;the&#x20;use&#x20;of&#x20;tcp&#x20;wrappers.&#x20;As&#x20;inetd&#x20;and&#x20;xinetd&#x20;have&#x20;been&#x20;falling&#x20;in&#x20;disuse,&#x20;any&#x20;service&#x20;that&#x20;can&#x20;support&#x20;tcp&#x20;wrappers&#x20;will&#x20;have&#x20;the&#x20;libwrap.so&#x20;library&#x20;attached&#x20;to&#x20;it.','TCP&#x20;Wrappers&#x20;provide&#x20;a&#x20;good&#x20;simple&#x20;access&#x20;list&#x20;mechanism&#x20;to&#x20;services&#x20;that&#x20;may&#x20;not&#x20;have&#x20;that&#x20;support&#x20;built&#x20;in.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;all&#x20;services&#x20;that&#x20;can&#x20;support&#x20;TCP&#x20;Wrappers,&#x20;use&#x20;it.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;tcp_wrappers:&#x20;yum&#x20;install&#x20;tcp_wrappers','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(5599,'Ensure&#x20;/etc/hosts.deny&#x20;is&#x20;configured','The&#x20;/etc/hosts.deny&#x20;file&#x20;specifies&#x20;which&#x20;IP&#x20;addresses&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;connect&#x20;to&#x20;the&#x20;host.&#x20;It&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;used&#x20;in&#x20;conjunction&#x20;with&#x20;the&#x20;/etc/hosts.allow&#x20;file.','The&#x20;/etc/hosts.allow&#x20;file&#x20;supports&#x20;access&#x20;control&#x20;by&#x20;IP&#x20;and&#x20;helps&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;systems&#x20;can&#x20;connect&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;/etc/hosts.deny:&#x20;echo&#x20;&#039;ALL:&#x20;ALL&#039;&#x20;&gt;&gt;&#x20;/etc/hosts.deny','[{\"cis\": [\"3.4.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(5600,'Ensure&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;are&#x20;configured.','The&#x20;/etc/hosts.allow&#x20;file&#x20;contains&#x20;networking&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.allow&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.allow&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/hosts.allow&#x20;and&#x20;chmod&#x20;644&#x20;/etc/hosts.allow','[{\"cis\": [\"3.4.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"1.3.5\"]}]'),(5601,'Ensure&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;are&#x20;configured.','The&#x20;/etc/hosts.deny&#x20;file&#x20;contains&#x20;network&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;applications&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;applications&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/hosts.deny&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/hosts.deny&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/hosts.deny&#x20;and&#x20;chmod&#x20;644&#x20;/etc/hosts.deny','[{\"cis\": [\"3.4.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5602,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.5.1\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5603,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.5.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5604,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.5.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5605,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.5.4\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5606,'Ensure&#x20;iptables&#x20;is&#x20;installed','iptables&#x20;allows&#x20;configuration&#x20;of&#x20;the&#x20;IPv4&#x20;tables&#x20;in&#x20;the&#x20;linux&#x20;kernel&#x20;and&#x20;the&#x20;rules&#x20;stored&#x20;within&#x20;them.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;iptables&#x20;.','iptables&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;iptables&#x20;:&#x20;yum&#x20;install&#x20;iptables','[{\"cis\": [\"3.6.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.1\"]}]'),(5607,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;and&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.6.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(5608,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.6.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}]'),(5609,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(5610,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(5611,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(5612,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd&#x20;:&#x20;#&#x20;chkconfig&#x20;auditd&#x20;on','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5613,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.','','Edit&#x20;/boot/grub/grub.conf&#x20;to&#x20;include&#x20;audit=1&#x20;on&#x20;all&#x20;kernel&#x20;lines.&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5614,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5615,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5616,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5617,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;directory.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5618,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;/var/run/failock&#x20;directory&#x20;maintains&#x20;records&#x20;of&#x20;login&#x20;failures&#x20;via&#x20;the&#x20;pam_faillock&#x20;module.','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5619,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\", \"16.10\", \"16.4\"]}, {\"pci_dss\": [\"10.3\"]}]'),(5620,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;500&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"3.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5621,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;500&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5622,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5623,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=500&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete','[{\"cis\": [\"4.1.14\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(5624,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.4\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5625,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5626,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod&#x20;,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"3\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5627,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;end&#x20;of&#x20;the&#x20;/etc/audit/audit.rules&#x20;file.&#x20;&#x20;&#x20;-e&#x20;2','[{\"cis\": [\"4.1.18\"]}, {\"cis_csc\": [\"3\", \"6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5628,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lackblogging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;rsyslog&#x20;on','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5629,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}]'),(5630,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5631,'Ensure&#x20;syslog-ng&#x20;service&#x20;is&#x20;enabled','Once&#x20;the&#x20;syslog-ng&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;syslog-ng&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;syslog-ng&#x20;:&#x20;&#x20;&#x20;#&#x20;chkconfig&#x20;syslog-ng&#x20;on','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5632,'Ensure&#x20;syslog-ng&#x20;default&#x20;file&#x20;permissions&#x20;configured','syslog-ng&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;syslog-ng&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;and&#x20;set&#x20;perm&#x20;option&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;&#x20;&#x20;options&#x20;{&#x20;chain_hostnames&#40;off&#41;;&#x20;flush_lines&#40;0&#41;;&#x20;perm&#40;0640&#41;;&#x20;stats_freq&#40;3600&#41;;&#x20;threaded&#40;yes&#41;;&#x20;};','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5633,'Ensure&#x20;syslog-ng&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;syslog-ng&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/syslog-ng/syslog-ng.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;&#40;where&#x20;logfile.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;&#x20;destination&#x20;logserver&#x20;{&#x20;tcp&#40;&quot;logfile.example.com&quot;&#x20;port&#40;514&#41;&#41;;&#x20;};&#x20;&#x20;&#x20;&#x20;log&#x20;{&#x20;source&#40;src&#41;;&#x20;destination&#40;logserver&#41;;&#x20;};&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;syslog-ng','[{\"cis\": [\"4.2.2.4\"]}, {\"cis_csc\": [\"6.6\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5634,'Ensure&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;software&#x20;are&#x20;recommended&#x20;replacements&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Install&#x20;rsyslog&#x20;or&#x20;syslog-ng&#x20;using&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;&#x20;#&#x20;yum&#x20;install&#x20;rsyslog&#x20;&#x20;&#x20;#&#x20;yum&#x20;install&#x20;syslog-ng','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5635,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitivebdata&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;{}&#x20;+','[{\"cis\": [\"4.2.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5636,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;chkconfig&#x20;crond&#x20;on','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5637,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5638,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5639,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5640,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]');
 INSERT INTO `tsca` VALUES (5641,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5642,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5643,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5644,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5645,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5646,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5647,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5648,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}]'),(5649,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5650,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5651,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5652,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(5653,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(5654,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.13\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5655,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;and&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"5.1\", \"5.8\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5656,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5657,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_cracklib.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_cracklib.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;password&#x20;requisite&#x20;pam_cracklib.so&#x20;try_first_pass&#x20;retry=3&#x20;minlen=14&#x20;dcredit=-1&#x20;ucredit=-1&#x20;ocredit=-1&#x20;lcredit=-1','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"5.7\", \"16.12\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5658,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;remember=5&#x20;&#x20;&#x20;or&#x20;&#x20;&#x20;&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5659,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(5660,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5661,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5662,'Ensure&#x20;password&#x20;expiration&#x20;warning&#x20;days&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5663,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5664,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5665,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5666,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;and&#x20;/etc/profile&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.5\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(5667,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo&#x20;,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su&#x20;,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su&#x20;,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo&#x20;,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(5668,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5669,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5670,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5671,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5672,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5673,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5674,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5675,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5676,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(5677,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5678,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5679,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.9\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(5680,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6000,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled.','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/cramfs.confand&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}, {\"cis_level\": [\"1\"]}]'),(6001,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled.','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}, {\"cis_level\": [\"2\"]}]'),(6002,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled.','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}, {\"cis_level\": [\"1\"]}]'),(6003,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;disabled.','The&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12,&#x20;FAT16,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','If&#x20;utilizing&#x20;UEFI&#x20;the&#x20;FAT&#x20;filesystem&#x20;format&#x20;is&#x20;required.&#x20;If&#x20;this&#x20;case,&#x20;ensure&#x20;that&#x20;the&#x20;FAT&#x20;filesystem&#x20;is&#x20;only&#x20;used&#x20;where&#x20;appropriate.&#x20;Run&#x20;the&#x20;following&#x20;command:&#x20;grep&#x20;-E&#x20;-i&#x20;&#039;svfats&#039;&#x20;/etc/fstab&#x20;And&#x20;review&#x20;that&#x20;any&#x20;output&#x20;is&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;&#x20;If&#x20;not&#x20;utilizing&#x20;UEFI:&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/fat.conf&#x20;&#x20;&#x20;&#x20;install&#x20;fat&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;install&#x20;vfat&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;install&#x20;msdos&#x20;/bin/true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;unload&#x20;the&#x20;msdos,&#x20;vfat,&#x20;and&#x20;fatmodules:&#x20;&#x20;#&#x20;rmmod&#x20;msdos&#x20;&#x20;&#x20;#&#x20;rmmod&#x20;vfat&#x20;&#x20;#&#x20;rmmod&#x20;fat&#x20;','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}, {\"cis_level\": [\"2\"]}]'),(6004,'Ensure&#x20;/tmp&#x20;is&#x20;configured.','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Create&#x20;or&#x20;update&#x20;an&#x20;entry&#x20;for&#x20;/tmp&#x20;in&#x20;either&#x20;/etc/fstab&#x20;&#x20;OR&#x20;&#x20;&#x20;in&#x20;a&#x20;systemd&#x20;tmp.mount&#x20;file:&#x20;&#x20;If&#x20;/etc/fstab&#x20;is&#x20;used:&#x20;&#x20;Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;Example:&#x20;tmpfs&#x20;/tmp&#x20;tmpfs&#x20;&#x20;&#x20;&#x20;&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;&#x20;0&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec,nodev,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;systemd&#x20;tmp.mount&#x20;file&#x20;is&#x20;used:&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;file&#x20;/etc/systemd/system/tmp.mount&#x20;if&#x20;it&#x20;doesn&#039;t&#x20;exist:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;[&#x20;!&#x20;-f&#x20;/etc/systemd/system/tmp.mount&#x20;]&#x20;&amp;&amp;&#x20;cp&#x20;-v&#x20;/usr/lib/systemd/system/tmp.mount&#x20;/etc/systemd/system/&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/systemd/system/tmp.mount:&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;What=tmpfs&#x20;&#x20;&#x20;&#x20;Where=/tmp&#x20;&#x20;&#x20;&#x20;Type=tmpfs&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;systemd&#x20;daemon:#&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unmask&#x20;tmp.mount:&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;unmask&#x20;tmp.mpunt&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;tmp.mount:&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;--now&#x20;tmp.mount','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"9.4\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6005,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition.','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;OR&#x20;&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstabfile&#x20;and&#x20;add&#x20;noexecto&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6006,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition.','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;&#x20;&#x20;file&#x20;OR&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6007,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition.','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;&#x20;&#x20;file&#x20;OR&#x20;the&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;file:&#x20;&#x20;&#x20;IF&#x20;/etc/fstab&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp&#x20;&#x20;Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;IF&#x20;systemd&#x20;is&#x20;used&#x20;to&#x20;mount&#x20;/tmp:&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nosuid,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;the&#x20;systemd&#x20;daemon:&#x20;#&#x20;&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restart&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;restart&#x20;tmp.mount','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6008,'Ensure&#x20;/dev/shm&#x20;is&#x20;configured&#x20;.','/dev/shm&#x20;is&#x20;a&#x20;traditional&#x20;shared&#x20;memory&#x20;concept.&#x20;One&#x20;program&#x20;will&#x20;create&#x20;a&#x20;memory&#x20;portion,&#x20;which&#x20;other&#x20;processes&#x20;&#40;if&#x20;permitted&#41;&#x20;can&#x20;access.&#x20;Mounting&#x20;tmpfs&#x20;at&#x20;/dev/shm&#x20;is&#x20;handled&#x20;automatically&#x20;by&#x20;systemd.','Any&#x20;user&#x20;can&#x20;upload&#x20;and&#x20;execute&#x20;files&#x20;inside&#x20;the&#x20;/dev/shm&#x20;similar&#x20;to&#x20;the&#x20;/tmp&#x20;partition.&#x20;Configuring&#x20;/dev/shm&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/dev/shm&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','Edit&#x20;/etc/fstab&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;the&#x20;following&#x20;line:&#x20;tmpfs&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;tmpfs&#x20;&#x20;&#x20;defaults,noexec,nodev,nosuid,seclabel&#x20;&#x20;&#x20;0&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec,nodev,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6009,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition.','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"2.6\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6010,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition.','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6011,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition.','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6012,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var.','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6013,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp.','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications&#x20;and&#x20;is&#x20;intended&#x20;for&#x20;temporary&#x20;files&#x20;that&#x20;are&#x20;preserved&#x20;across&#x20;reboots.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6014,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition.','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;un&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/var/tmp','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6015,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition.','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/var/tmp','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6016,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition.','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/var/tmp:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/var/tmp','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6017,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log.','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6018,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit.','The&#x20;auditing&#x20;daemon,&#x20;auditd,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6019,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home.','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6020,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition.','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.18\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6021,'Disable&#x20;Automounting.','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs:&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6022,'Disable&#x20;USB&#x20;Storage.','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/usb_storage.conf&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.24\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6023,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated.','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.3\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}, {\"cis_level\": [\"1\"]}]'),(6024,'Ensure&#x20;sudo&#x20;is&#x20;installed.','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;sudo.&#x20;#&#x20;yum&#x20;install&#x20;sudo','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6025,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty.','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo,&#x20;which&#x20;would&#x20;again&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.&#x20;This&#x20;can&#x20;be&#x20;mitigated&#x20;by&#x20;configuring&#x20;sudo&#x20;to&#x20;run&#x20;other&#x20;commands&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty,&#x20;whether&#x20;I/O&#x20;logging&#x20;is&#x20;turned&#x20;on&#x20;or&#x20;not.','','Edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;or&#x20;visudo&#x20;-f&#x20;&lt;PATH&#x20;TO&#x20;FILE&gt;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6026,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists.','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','Edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;or&#x20;visudo&#x20;-f&#x20;&lt;PATH&#x20;TO&#x20;FILE&gt;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;logfile=&#039;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&#039;&#x20;&#x20;&#x20;Example:Defaults&#x20;&#x20;logfile=&quot;/var/log/sudo.log&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6027,'Ensure&#x20;AIDE&#x20;is&#x20;installed.','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;AIDE:&#x20;yum&#x20;install&#x20;aide&#x20;//&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.4.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6028,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked.','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','If&#x20;cron&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;If&#x20;aidecheck.service&#x20;and&#x20;aidecheck.timer&#x20;will&#x20;be&#x20;used&#x20;to&#x20;schedule&#x20;and&#x20;run&#x20;aide&#x20;check:&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;/etc/systemd/system/aidecheck.service&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;[Unit]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Description=Aide&#x20;Check&#x20;&#x20;&#x20;&#x20;[Service]&#x20;&#x20;&#x20;&#x20;&#x20;Type=simpleExecStart=/usr/sbin/aide&#x20;--check&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Install]&#x20;&#x20;&#x20;&#x20;&#x20;WantedBy=multi-user.target&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Create&#x20;or&#x20;edit&#x20;the&#x20;file&#x20;&#x20;/etc/systemd/system/aidecheck.timer&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;[Unit]&#x20;&#x20;&#x20;Description=Aide&#x20;check&#x20;every&#x20;day&#x20;at&#x20;5AM&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Timer]&#x20;&#x20;&#x20;&#x20;&#x20;OnCalendar=*-*-*&#x20;05:00:00&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Unit=aidecheck.service&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[Install]&#x20;&#x20;&#x20;&#x20;&#x20;WantedBy=multi-user.target&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;0644&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;daemon-reload&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;enable&#x20;aidecheck.service&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;aidecheck.timer&#x20;','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6029,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set.','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','For&#x20;newergrub2based&#x20;systems&#x20;&#40;centOS/RHEL&#x20;7.2&#x20;and&#x20;newer&#41;:&#x20;Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-setpassword:&#x20;#&#x20;grub2-setpassword&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;older&#x20;&#x20;grub2based&#x20;systems:&#x20;create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-mkpasswd-pbkdf2:&#x20;&#x20;&#x20;#&#x20;grub2-mkpasswd-pbkdf2&#x20;&#x20;&#x20;Enter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;Reenter&#x20;password:&#x20;&lt;password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;Your&#x20;PBKDF2&#x20;is&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;&#x20;Add&#x20;the&#x20;following&#x20;into&#x20;/etc/grub.d/01_users&#x20;or&#x20;a&#x20;custom&#x20;/etc/grub.d&#x20;configuration&#x20;file:&#x20;&#x20;cat&#x20;&lt;&lt;EOFset&#x20;superusers=&quot;&lt;username&gt;&quot;password_pbkdf2&#x20;&lt;username&gt;&#x20;&lt;encrypted-password&gt;EOF&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6030,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured.','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;located&#x20;at&#x20;/boot/grub2/grub.cfg&#x20;and&#x20;linked&#x20;as&#x20;/etc/grub2.cfg&#x20;.&#x20;&#x20;On&#x20;newer&#x20;grub2&#x20;systems&#x20;the&#x20;encrypted&#x20;bootloader&#x20;password&#x20;is&#x20;contained&#x20;in&#x20;/boot/grub2/user.cfg','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grub.cfg&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grub.cfg&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/user.cfg&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/user.cfg','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6031,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode.','Single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/usr/lib/systemd/system/rescue.service&#x20;and&#x20;/usr/lib/systemd/system/emergency.service&#x20;and&#x20;set&#x20;ExecStart&#x20;to&#x20;use&#x20;/sbin/sulogin&#x20;or&#x20;/usr/sbin/sulogin:&#x20;ExecStart=-/bin/sh&#x20;-c&#x20;&quot;/sbin/sulogin;&#x20;/usr/bin/systemctl&#x20;--fail&#x20;--no-block&#x20;default&quot;&#x20;','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6032,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted.','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6033,'Ensure&#x20;XD/NX&#x20;support&#x20;is&#x20;enabled.','Recent&#x20;processors&#x20;in&#x20;the&#x20;x86&#x20;family&#x20;support&#x20;the&#x20;ability&#x20;to&#x20;prevent&#x20;code&#x20;execution&#x20;on&#x20;a&#x20;per&#x20;memory&#x20;page&#x20;basis.&#x20;Generically&#x20;and&#x20;on&#x20;AMD&#x20;processors,&#x20;this&#x20;ability&#x20;is&#x20;called&#x20;No&#x20;Execute&#x20;&#40;NX&#41;,&#x20;while&#x20;on&#x20;Intel&#x20;processors&#x20;it&#x20;is&#x20;called&#x20;Execute&#x20;Disable&#x20;&#40;XD&#41;.&#x20;This&#x20;ability&#x20;can&#x20;help&#x20;prevent&#x20;exploitation&#x20;of&#x20;buffer&#x20;overflow&#x20;vulnerabilities&#x20;and&#x20;should&#x20;be&#x20;activated&#x20;whenever&#x20;possible.&#x20;Extra&#x20;steps&#x20;must&#x20;be&#x20;taken&#x20;to&#x20;ensure&#x20;that&#x20;this&#x20;protection&#x20;is&#x20;enabled,&#x20;particularly&#x20;on&#x20;32-bit&#x20;x86&#x20;systems.&#x20;Other&#x20;processors,&#x20;such&#x20;as&#x20;Itanium&#x20;and&#x20;POWER,&#x20;have&#x20;included&#x20;such&#x20;support&#x20;since&#x20;inception&#x20;and&#x20;the&#x20;standard&#x20;kernel&#x20;for&#x20;those&#x20;platforms&#x20;supports&#x20;the&#x20;feature.','Enabling&#x20;any&#x20;feature&#x20;that&#x20;can&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;enhances&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.','','On&#x20;32&#x20;bit&#x20;systems&#x20;install&#x20;a&#x20;kernel&#x20;with&#x20;PAE&#x20;support,&#x20;no&#x20;installation&#x20;is&#x20;required&#x20;on&#x20;64&#x20;bit&#x20;systems:&#x20;If&#x20;necessary&#x20;configure&#x20;your&#x20;bootloader&#x20;to&#x20;load&#x20;the&#x20;new&#x20;kernel&#x20;and&#x20;reboot&#x20;the&#x20;system.&#x20;You&#x20;may&#x20;need&#x20;to&#x20;enable&#x20;NX&#x20;or&#x20;XD&#x20;support&#x20;in&#x20;your&#x20;bios.','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6034,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled.','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.3\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6035,'Ensure&#x20;prelink&#x20;is&#x20;disabled.','prelink&#x20;is&#x20;a&#x20;program&#x20;that&#x20;modifies&#x20;ELF&#x20;shared&#x20;libraries&#x20;and&#x20;ELF&#x20;dynamically&#x20;linked&#x20;binaries&#x20;in&#x20;such&#x20;a&#x20;way&#x20;that&#x20;the&#x20;time&#x20;needed&#x20;for&#x20;the&#x20;dynamic&#x20;linker&#x20;to&#x20;perform&#x20;relocations&#x20;at&#x20;startup&#x20;significantly&#x20;decreases.','The&#x20;prelinking&#x20;feature&#x20;can&#x20;interfere&#x20;with&#x20;the&#x20;operation&#x20;of&#x20;AIDE,&#x20;because&#x20;it&#x20;changes&#x20;binaries.&#x20;Prelinking&#x20;can&#x20;also&#x20;increase&#x20;the&#x20;vulnerability&#x20;of&#x20;the&#x20;system&#x20;if&#x20;a&#x20;malicious&#x20;user&#x20;is&#x20;able&#x20;to&#x20;compromise&#x20;a&#x20;common&#x20;library&#x20;such&#x20;as&#x20;libc.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;binaries&#x20;to&#x20;normal:&#x20;#&#x20;prelink&#x20;-ua&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;prelink:&#x20;#&#x20;yum&#x20;remove&#x20;prelink','[{\"cis\": [\"1.6.4\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6036,'Ensure&#x20;SELinux&#x20;is&#x20;installed.','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Controls.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;libselinux:&#x20;#&#x20;yum&#x20;install&#x20;libselinux','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6037,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration.','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6038,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured.','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6039,'Ensure&#x20;the&#x20;SELinux&#x20;mode&#x20;is&#x20;enforcing&#x20;or&#x20;permissive.','SELinux&#x20;can&#x20;run&#x20;in&#x20;one&#x20;of&#x20;three&#x20;modes:&#x20;disabled,&#x20;permissive,&#x20;or&#x20;enforcing:&#x20;&#x20;Enforcing&#x20;-&#x20;Is&#x20;the&#x20;default,&#x20;and&#x20;recommended,&#x20;mode&#x20;of&#x20;operation;&#x20;in&#x20;enforcing&#x20;mode&#x20;SELinux&#x20;operates&#x20;normally,&#x20;enforcing&#x20;the&#x20;loaded&#x20;security&#x20;policy&#x20;on&#x20;the&#x20;entire&#x20;system.&#x20;&#x20;Permissive&#x20;-&#x20;The&#x20;system&#x20;acts&#x20;as&#x20;if&#x20;SELinux&#x20;is&#x20;enforcing&#x20;the&#x20;loaded&#x20;security&#x20;policy,&#x20;including&#x20;labeling&#x20;objects&#x20;and&#x20;emitting&#x20;access&#x20;denial&#x20;entries&#x20;in&#x20;the&#x20;logs,&#x20;but&#x20;it&#x20;does&#x20;not&#x20;actually&#x20;deny&#x20;any&#x20;operations.&#x20;While&#x20;not&#x20;recommended&#x20;for&#x20;production&#x20;systems,&#x20;permissive&#x20;mode&#x20;can&#x20;be&#x20;helpful&#x20;for&#x20;SELinux&#x20;policy&#x20;development.&#x20;&#x20;&#x20;Disabled&#x20;-Is&#x20;strongly&#x20;discouraged;&#x20;not&#x20;only&#x20;does&#x20;the&#x20;system&#x20;avoid&#x20;enforcing&#x20;the&#x20;SELinux&#x20;policy,&#x20;it&#x20;also&#x20;avoids&#x20;labeling&#x20;any&#x20;persistent&#x20;objects&#x20;such&#x20;as&#x20;files,&#x20;making&#x20;it&#x20;difficult&#x20;to&#x20;enable&#x20;SELinux&#x20;in&#x20;the&#x20;future','Running&#x20;SELinux&#x20;in&#x20;disabled&#x20;modeis&#x20;strongly&#x20;discouraged;&#x20;not&#x20;only&#x20;does&#x20;the&#x20;system&#x20;avoid&#x20;enforcing&#x20;the&#x20;SELinux&#x20;policy,&#x20;it&#x20;also&#x20;avoids&#x20;labeling&#x20;any&#x20;persistent&#x20;objects&#x20;such&#x20;as&#x20;files,&#x20;making&#x20;it&#x20;difficult&#x20;to&#x20;enable&#x20;SELinux&#x20;in&#x20;the&#x20;future.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;SELinux&#039;s&#x20;running&#x20;mode:&#x20;To&#x20;set&#x20;SELinux&#x20;mode&#x20;to&#x20;Enforcing:&#x20;#&#x20;setenforce&#x20;1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;set&#x20;SELinux&#x20;mode&#x20;to&#x20;Permissive:&#x20;#&#x20;setenforce&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/selinux/config&#x20;&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;For&#x20;Enforcing&#x20;mode:&#x20;SELINUX=enforcing&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;Permissive&#x20;mode:&#x20;&#x20;SELINUX=permissive','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6040,'Ensure&#x20;no&#x20;unconfined&#x20;services&#x20;exist.','Unconfined&#x20;processes&#x20;run&#x20;in&#x20;unconfined&#x20;domains','For&#x20;unconfined&#x20;processes,&#x20;SELinux&#x20;policy&#x20;rules&#x20;are&#x20;applied,&#x20;but&#x20;policy&#x20;rules&#x20;exist&#x20;that&#x20;allow&#x20;processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;almost&#x20;all&#x20;access.&#x20;Processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;fall&#x20;back&#x20;to&#x20;using&#x20;DAC&#x20;rules&#x20;exclusively.&#x20;If&#x20;an&#x20;unconfined&#x20;process&#x20;is&#x20;compromised,&#x20;SELinux&#x20;does&#x20;not&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;system&#x20;resources&#x20;and&#x20;data,&#x20;but&#x20;of&#x20;course,&#x20;DAC&#x20;rules&#x20;are&#x20;still&#x20;used.&#x20;SELinux&#x20;is&#x20;a&#x20;security&#x20;enhancement&#x20;on&#x20;top&#x20;of&#x20;DAC&#x20;rules&#x20;&ndash;&#x20;it&#x20;does&#x20;not&#x20;replace&#x20;them','','Investigate&#x20;any&#x20;unconfined&#x20;processes&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6041,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed.','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;yum&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.7.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6042,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed.','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;yum&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.7.1.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6043,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;v&#x20;&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}, {\"cis_level\": [\"1\"]}]'),(6044,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version&#x20;-or&#x20;the&#x20;operating&#x20;system&#039;s&#x20;name.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}, {\"cis_level\": [\"1\"]}]'),(6045,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m,&#x20;&#x0d;,&#x20;s,&#x20;or&#x20;v:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}, {\"cis_level\": [\"1\"]}]'),(6046,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6047,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6048,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured.','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6049,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed.','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;command&#x20;will&#x20;install&#x20;all&#x20;available&#x20;packages&#x20;#&#x20;yum&#x20;update&#x20;&#x20;','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\", \"3.5\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}, {\"cis_level\": [\"1\"]}]'),(6050,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured.','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','If&#x20;a&#x20;graphical&#x20;login&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;a&#x20;graphical&#x20;login&#x20;is&#x20;required,&#x20;last&#x20;logged&#x20;in&#x20;user&#x20;display&#x20;should&#x20;be&#x20;disabled,&#x20;and&#x20;a&#x20;warning&#x20;banner&#x20;should&#x20;be&#x20;configured.&#x20;Displaying&#x20;the&#x20;last&#x20;logged&#x20;in&#x20;user&#x20;eliminates&#x20;half&#x20;of&#x20;the&#x20;Userid/Password&#x20;equation&#x20;that&#x20;an&#x20;unauthorized&#x20;person&#x20;would&#x20;need&#x20;to&#x20;log&#x20;on.&#x20;Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;gdm:&#x20;#&#x20;yum&#x20;remove&#x20;gdm&#x20;OR&#x20;If&#x20;GDM&#x20;is&#x20;required:&#x20;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/profile/gdm&#x20;and&#x20;add&#x20;the&#x20;following:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;user-db:user&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;system-db:gdm&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;file-db:/usr/share/gdm/greeter-dconf-defaults&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/db/gdm.d/&#x20;&#x20;and&#x20;add&#x20;the&#x20;following:&#x20;&#40;This&#x20;is&#x20;typically&#x20;/etc/dconf/db/gdm.d/01-banner-message&#41;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;banner-message-text=&#039;&lt;banner&#x20;message&gt;&#039;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Example&#x20;Banner&#x20;Text:&#x20;&#x20;&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#x20;&#039;Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/dconf/db/gdm.d/and&#x20;add&#x20;the&#x20;following:&#x20;&#40;This&#x20;is&#x20;typically&#x20;/etc/dconf/db/gdm.d/00-login-screen&#41;&#x20;&#x20;&#x20;&#x20;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;Do&#x20;not&#x20;show&#x20;the&#x20;user&#x20;list&#x20;&#x20;&#x20;&#x20;&#x20;disable-user-list=true&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;system&#x20;databases:&#x20;&#x20;#&#x20;dconf&#x20;update','[{\"cis\": [\"1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}, {\"cis_level\": [\"1\"]}]'),(6051,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled.','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;area&#x20;of&#x20;the&#x20;system.&#x20;Note:&#x20;If&#x20;an&#x20;xinetd&#x20;service&#x20;or&#x20;services&#x20;are&#x20;required,&#x20;ensure&#x20;that&#x20;any&#x20;xinetd&#x20;service&#x20;not&#x20;required&#x20;is&#x20;stopped&#x20;and&#x20;disabled','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;yum&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6052,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use.','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','Run&#x20;One&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;chrony&#x20;or&#x20;NTP:&#x20;to&#x20;install&#x20;chrony&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;yum&#x20;install&#x20;chrony&#x20;OR&#x20;to&#x20;install&#x20;ntp:&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;yum&#x20;install&#x20;ntp','[{\"cis\": [\"2.2.1.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6053,'Ensure&#x20;chrony&#x20;is&#x20;configured.','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;&#x20;and&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;chrony&#x20;can&#x20;be&#x20;found&#x20;at&#x20;http://chrony.tuxfamily.org/.&#x20;chrony&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.&#x20;Note:&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/chronyd&#x20;to&#x20;include&#x20;&#039;-u&#x20;chrony&#039;:OPTIONS=&quot;-u&#x20;chrony&quot;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6054,'Ensure&#x20;ntp&#x20;is&#x20;configured.','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','1&#41;&#x20;Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;and&#x20;-&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery.&#x20;2&#41;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;.&#x20;3&#41;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;OPTIONS&#x20;in&#x20;/etc/sysconfig/ntpd&#x20;to&#x20;include&#x20;&#039;&#x20;-u&#x20;ntp:ntp&#x20;&#039;:&#x20;-&#x20;OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.3\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6055,'&#x20;Ensure&#x20;X11&#x20;Server&#x20;components&#x20;are&#x20;not&#x20;installed.','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;yum&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6056,'&#x20;Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;installed.','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;remove&#x20;this&#x20;package&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;stop,&#x20;mask&#x20;and&#x20;remove&#x20;avahi-autoipd&#x20;and&#x20;avahi:&#x20;#&#x20;systemctl&#x20;stop&#x20;avahi-daemon.socket&#x20;avahi-daemon.service;&#x20;#&#x20;yum&#x20;remove&#x20;avahi-autoipd&#x20;avahi','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6057,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;installed.','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.&#x20;Disabling&#x20;CUPS&#x20;will&#x20;prevent&#x20;printing&#x20;from&#x20;the&#x20;system,&#x20;a&#x20;common&#x20;task&#x20;for&#x20;workstation&#x20;systems.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cups:&#x20;#&#x20;yum&#x20;remove&#x20;cups','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6058,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;installed.','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;the&#x20;dhcp&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;dhcpd:&#x20;#&#x20;yum&#x20;remove&#x20;dhcp','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6059,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;installed.','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;slapd:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-servers','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6060,'Ensure&#x20;nfs-utils&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;nfs-server&#x20;service&#x20;is&#x20;masked.','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;require&#x20;network&#x20;shares,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;nfs-utils&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nfs-utils:&#x20;#&#x20;yum&#x20;remove&#x20;nfs-utils;&#x20;OR&#x20;if&#x20;the&#x20;nfs-package&#x20;is&#x20;required&#x20;as&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;nfs-server&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nfs-server','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6061,'Ensure&#x20;rpcbind&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;rpcbind&#x20;services&#x20;are&#x20;masked.','The&#x20;rpcbind&#x20;utility&#x20;maps&#x20;RPC&#x20;services&#x20;to&#x20;the&#x20;ports&#x20;on&#x20;which&#x20;they&#x20;listen.&#x20;RPC&#x20;processes&#x20;notify&#x20;rpcbind&#x20;when&#x20;they&#x20;start,&#x20;registering&#x20;the&#x20;ports&#x20;they&#x20;are&#x20;listening&#x20;on&#x20;and&#x20;the&#x20;RPC&#x20;program&#x20;numbers&#x20;they&#x20;expect&#x20;to&#x20;serve.&#x20;The&#x20;client&#x20;system&#x20;then&#x20;contacts&#x20;rpcbind&#x20;on&#x20;the&#x20;server&#x20;with&#x20;a&#x20;particular&#x20;RPC&#x20;program&#x20;number.&#x20;The&#x20;rpcbind&#x20;service&#x20;redirects&#x20;the&#x20;client&#x20;to&#x20;the&#x20;proper&#x20;port&#x20;number&#x20;so&#x20;it&#x20;can&#x20;communicate&#x20;with&#x20;the&#x20;requested&#x20;service&#x20;Portmapper&#x20;is&#x20;an&#x20;RPC&#x20;service,&#x20;which&#x20;always&#x20;listens&#x20;on&#x20;tcp&#x20;and&#x20;udp&#x20;111,&#x20;and&#x20;is&#x20;used&#x20;to&#x20;map&#x20;other&#x20;RPC&#x20;services&#x20;&#40;such&#x20;as&#x20;nfs,&#x20;nlockmgr,&#x20;quotad,&#x20;mountd,&#x20;etc.&#41;&#x20;to&#x20;their&#x20;corresponding&#x20;port&#x20;number&#x20;on&#x20;the&#x20;server.&#x20;When&#x20;a&#x20;remote&#x20;host&#x20;makes&#x20;an&#x20;RPC&#x20;call&#x20;to&#x20;that&#x20;server,&#x20;it&#x20;first&#x20;consults&#x20;with&#x20;portmap&#x20;to&#x20;determine&#x20;where&#x20;the&#x20;RPC&#x20;server&#x20;is&#x20;listening','A&#x20;small&#x20;request&#x20;&#40;~82&#x20;bytes&#x20;via&#x20;UDP&#41;&#x20;sent&#x20;to&#x20;the&#x20;Portmapper&#x20;generates&#x20;a&#x20;large&#x20;response&#x20;&#40;7x&#x20;to&#x20;28x&#x20;amplification&#41;,&#x20;which&#x20;makes&#x20;it&#x20;a&#x20;suitable&#x20;tool&#x20;for&#x20;DDoS&#x20;attacks.&#x20;If&#x20;rpcbind&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;rpcbind&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nfs-utils:&#x20;#&#x20;yum&#x20;remove&#x20;nfs-utils;&#x20;OR&#x20;if&#x20;the&#x20;nfs-package&#x20;is&#x20;required&#x20;as&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;nfs-server&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nfs-server','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6062,'&#x20;Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;installed&#x20;.','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named:&#x20;#&#x20;yum&#x20;remove&#x20;bind','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6063,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;installed.','FTP&#x20;&#40;File&#x20;Transfer&#x20;Protocol&#41;&#x20;is&#x20;a&#x20;traditional&#x20;and&#x20;widely&#x20;used&#x20;standard&#x20;tool&#x20;for&#x20;transferring&#x20;files&#x20;between&#x20;a&#x20;server&#x20;and&#x20;clients&#x20;over&#x20;a&#x20;network,&#x20;especially&#x20;where&#x20;no&#x20;authentication&#x20;is&#x20;necessary&#x20;&#40;permits&#x20;anonymous&#x20;users&#x20;to&#x20;connect&#x20;to&#x20;a&#x20;server&#41;','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;yum&#x20;remove&#x20;vsftpd','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6064,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;installed.','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;yum&#x20;remove&#x20;httpd','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6065,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;installed.','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;yum&#x20;remove&#x20;dovecot','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6066,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;installed.','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;package&#x20;can&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;yum&#x20;remove&#x20;samba','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6067,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;installed.','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;package&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;yum&#x20;remove&#x20;squid','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6068,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;installed.','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMPv1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;SNMPv3replaces&#x20;the&#x20;simple/clear&#x20;text&#x20;password&#x20;sharing&#x20;used&#x20;in&#x20;SNMPv2with&#x20;more&#x20;securely&#x20;encoded&#x20;parameters.&#x20;If&#x20;the&#x20;SNMP&#x20;service&#x20;is&#x20;not&#x20;required,&#x20;the&#x20;net-snmp&#x20;package&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;#&#x20;yum&#x20;remove&#x20;net-snmp','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6069,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}, {\"cis_level\": [\"1\"]}]'),(6070,'Ensure&#x20;rsync&#x20;is&#x20;not&#x20;installed&#x20;or&#x20;the&#x20;rsyncd&#x20;service&#x20;is&#x20;masked.','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','Unless&#x20;required,&#x20;the&#x20;rsync&#x20;package&#x20;should&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;area&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;rsync&#x20;package:&#x20;#&#x20;yum&#x20;remove&#x20;rsync;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;mask&#x20;the&#x20;rsyncd&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;rsyncd','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}, {\"cis_level\": [\"1\"]}]'),(6071,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;installed.','The&#x20;ypserv&#x20;package&#x20;provides&#x20;the&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;.&#x20;This&#x20;service,&#x20;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;ypservpackage&#x20;be&#x20;removed,&#x20;and&#x20;if&#x20;required&#x20;a&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;yum&#x20;remove&#x20;ypserv','[{\"cis\": [\"2.2.18\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6072,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;installed.','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;yum&#x20;remove&#x20;telnet-server','[{\"cis\": [\"2.2.19\"]}, {\"cis_csc\": [\"2.6\", \"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"cis_level\": [\"1\"]}]'),(6073,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed.','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;yum&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6074,'Ensure&#x20;rsh&#x20;client&#x20;is&#x20;not&#x20;installed.','The&#x20;rsh&#x20;package&#x20;contains&#x20;the&#x20;client&#x20;commands&#x20;for&#x20;the&#x20;rsh&#x20;services.','These&#x20;legacy&#x20;clients&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.&#x20;Even&#x20;if&#x20;the&#x20;server&#x20;is&#x20;removed,&#x20;it&#x20;is&#x20;best&#x20;to&#x20;ensure&#x20;the&#x20;clients&#x20;are&#x20;also&#x20;removed&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;inadvertently&#x20;attempting&#x20;to&#x20;use&#x20;these&#x20;commands&#x20;and&#x20;therefore&#x20;exposing&#x20;their&#x20;credentials.&#x20;Note&#x20;that&#x20;removing&#x20;the&#x20;rsh&#x20;package&#x20;removes&#x20;the&#x20;clients&#x20;for&#x20;rsh,&#x20;rcp&#x20;and&#x20;rlogin&#x20;.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;rsh:&#x20;#&#x20;yum&#x20;remove&#x20;rsh','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6075,'Ensure&#x20;talk&#x20;client&#x20;is&#x20;not&#x20;installed.','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client,&#x20;which&#x20;allows&#x20;initialization&#x20;of&#x20;talk&#x20;sessions,&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;talk:&#x20;#&#x20;yum&#x20;remove&#x20;talk','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6076,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed.','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet:&#x20;#&#x20;yum&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.4\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6077,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed.','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients:&#x20;#&#x20;yum&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6078,'Ensure&#x20;nonessential&#x20;services&#x20;are&#x20;removed&#x20;or&#x20;masked.','A&#x20;network&#x20;port&#x20;is&#x20;identified&#x20;by&#x20;its&#x20;number,&#x20;the&#x20;associated&#x20;IP&#x20;address,&#x20;and&#x20;the&#x20;type&#x20;of&#x20;the&#x20;communication&#x20;protocol&#x20;such&#x20;as&#x20;TCP&#x20;or&#x20;UDP.A&#x20;listening&#x20;port&#x20;is&#x20;a&#x20;network&#x20;port&#x20;on&#x20;which&#x20;an&#x20;application&#x20;or&#x20;process&#x20;listens&#x20;on,&#x20;acting&#x20;as&#x20;a&#x20;communication&#x20;endpoint.&#x20;Each&#x20;listening&#x20;port&#x20;can&#x20;be&#x20;open&#x20;or&#x20;closed&#x20;&#40;filtered&#41;&#x20;using&#x20;a&#x20;firewall.&#x20;In&#x20;general&#x20;terms,&#x20;an&#x20;open&#x20;port&#x20;is&#x20;a&#x20;network&#x20;port&#x20;that&#x20;accepts&#x20;incoming&#x20;packets&#x20;from&#x20;remote&#x20;locations','Services&#x20;listening&#x20;on&#x20;the&#x20;system&#x20;pose&#x20;a&#x20;potential&#x20;risk&#x20;as&#x20;an&#x20;attack&#x20;vector.&#x20;These&#x20;services&#x20;should&#x20;be&#x20;reviewed,&#x20;and&#x20;if&#x20;not&#x20;required,&#x20;the&#x20;service&#x20;should&#x20;be&#x20;stopped,&#x20;and&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service&#x20;should&#x20;be&#x20;removed.&#x20;If&#x20;required&#x20;packages&#x20;have&#x20;a&#x20;dependency,&#x20;the&#x20;service&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Review&#x20;the&#x20;output&#x20;of:&#x20;#&#x20;lsof&#x20;-i&#x20;-P&#x20;-n&#x20;|&#x20;grep&#x20;-v&#x20;&#039;&#40;ESTABLISHED&#41;&#039;;&#x20;to&#x20;ensure&#x20;that&#x20;all&#x20;services&#x20;listed&#x20;are&#x20;required&#x20;on&#x20;the&#x20;system.&#x20;If&#x20;a&#x20;listed&#x20;service&#x20;is&#x20;not&#x20;required,&#x20;remove&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service.&#x20;If&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service&#x20;is&#x20;required,&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;service.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;package&#x20;containing&#x20;the&#x20;service:#&#x20;yum&#x20;remove&#x20;&lt;package_name&gt;&#x20;OR&#x20;if&#x20;required&#x20;packages&#x20;have&#x20;a&#x20;dependency:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;the&#x20;service:#&#x20;systemctl&#x20;--now&#x20;mask&#x20;&lt;service_name&gt;','[{\"cis\": [\"2.4\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6079,'Disable&#x20;IPv6.','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','To&#x20;disable&#x20;IPv6&#x20;through&#x20;the&#x20;GRUB2&#x20;config:&#x20;edit&#x20;/etc/default/gruband&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:#&#x20;grub2-mkconfig&#x20;&ndash;o&#x20;/boot/grub2/grub.cfg;&#x20;OR&#x20;to&#x20;disable&#x20;IPv6&#x20;through&#x20;sysctl&#x20;settings:&#x20;set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;#&#x20;net.ipv6.conf.all.disable_ipv6&#x20;=&#x20;1;&#x20;#&#x20;net.ipv6.conf.default.disable_ipv6&#x20;=&#x20;1;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.disable_ipv6=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.disable_ipv6=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6080,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled.','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;should&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;ip&#x20;link&#x20;set&#x20;&lt;interface&gt;&#x20;down','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6081,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled.','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&#039;^s*net.ipv4.ip_forwards*=s*1&#039;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&#039;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6082,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled.','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6083,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted.','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6084,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted.','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6085,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted.','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6086,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged.','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6087,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored.','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6088,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored.','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6089,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled.','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;server&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6090,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled.','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.3.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6091,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted.','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;and&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Then,&#x20;run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.3.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6092,'Ensure&#x20;DCCP&#x20;is&#x20;disabled.','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.4.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6093,'Ensure&#x20;SCTP&#x20;is&#x20;disabled.','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/modprobe.d/CIS.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.4.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6094,'Ensure&#x20;FirewallD&#x20;or&#x20;nftables&#x20;or&#x20;iptables-services&#x20;is&#x20;installed.','firewalld&#x20;is&#x20;a&#x20;firewall&#x20;management&#x20;tool&#x20;for&#x20;Linux&#x20;operating&#x20;systems.&#x20;It&#x20;provides&#x20;firewall&#x20;features&#x20;by&#x20;acting&#x20;as&#x20;a&#x20;front-end&#x20;for&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;net&#x20;filter&#x20;framework&#x20;via&#x20;the&#x20;iptables&#x20;backend&#x20;or&#x20;provides&#x20;firewall&#x20;features&#x20;by&#x20;acting&#x20;as&#x20;a&#x20;front-end&#x20;for&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;via&#x20;the&#x20;nftables&#x20;utility.&#x20;FirewallD&#x20;replaces&#x20;iptables&#x20;as&#x20;the&#x20;default&#x20;firewall&#x20;management&#x20;tool.&#x20;Use&#x20;the&#x20;firewalld&#x20;utility&#x20;to&#x20;configure&#x20;a&#x20;firewall&#x20;for&#x20;less&#x20;complex&#x20;firewalls.&#x20;The&#x20;utility&#x20;is&#x20;easy&#x20;to&#x20;use&#x20;and&#x20;covers&#x20;the&#x20;typical&#x20;use&#x20;cases&#x20;scenario.&#x20;FirewallD&#x20;supports&#x20;both&#x20;IPv4&#x20;and&#x20;IPv6&#x20;networks&#x20;and&#x20;can&#x20;administer&#x20;separate&#x20;firewall&#x20;zones&#x20;with&#x20;varying&#x20;degrees&#x20;of&#x20;trust&#x20;as&#x20;defined&#x20;in&#x20;zone&#x20;profiles.','A&#x20;firewall&#x20;utility&#x20;is&#x20;required&#x20;to&#x20;configure&#x20;the&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;via&#x20;the&#x20;iptables&#x20;or&#x20;nftables&#x20;back-end.&#x20;The&#x20;Linux&#x20;kernel&#039;s&#x20;netfilter&#x20;framework&#x20;host-based&#x20;firewall&#x20;can&#x20;protect&#x20;against&#x20;threats&#x20;originating&#x20;from&#x20;within&#x20;a&#x20;corporate&#x20;network&#x20;to&#x20;include&#x20;malicious&#x20;mobile&#x20;code&#x20;and&#x20;poorly&#x20;configured&#x20;software&#x20;on&#x20;a&#x20;host.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;firewalld:&#x20;#&#x20;yum&#x20;install&#x20;firewalld&#x20;iptables;&#x20;OR&#x20;to&#x20;&#x20;install&#x20;nftables:&#x20;#&#x20;yum&#x20;install&#x20;nftables;&#x20;OR&#x20;to&#x20;install&#x20;&#x20;iptables-services:&#x20;#&#x20;yum&#x20;install&#x20;iptables-services&#x20;iptables','[{\"cis\": [\"3.5.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6095,'Ensure&#x20;iptables-services&#x20;and&#x20;FirewallD&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time.','The&#x20;iptables-services&#x20;package&#x20;contains&#x20;the&#x20;iptables.service&#x20;and&#x20;ip6tables.service.&#x20;These&#x20;services&#x20;allow&#x20;for&#x20;management&#x20;of&#x20;the&#x20;Host&#x20;Based&#x20;Firewall&#x20;provided&#x20;by&#x20;the&#x20;iptables&#x20;package.','iptables.service&#x20;and&#x20;ip6tables.service&#x20;are&#x20;still&#x20;supported&#x20;and&#x20;can&#x20;be&#x20;installed&#x20;with&#x20;the&#x20;iptables-services&#x20;package.&#x20;Running&#x20;both&#x20;firewalld&#x20;and&#x20;the&#x20;services&#x20;included&#x20;in&#x20;the&#x20;iptables-services&#x20;package&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;stop&#x20;the&#x20;services&#x20;included&#x20;in&#x20;the&#x20;iptables-services&#x20;package&#x20;and&#x20;remove&#x20;the&#x20;iptables-services&#x20;package:&#x20;#&#x20;systemctl&#x20;stop&#x20;iptables;&#x20;#&#x20;systemctl&#x20;stop&#x20;ip6tables;&#x20;#&#x20;yum&#x20;remove&#x20;iptables-services.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;firewalld:&#x20;#&#x20;yum&#x20;remove&#x20;firewalld&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;firewalld','[{\"cis\": [\"3.5.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6096,'Ensure&#x20;nftables&#x20;and&#x20;FirewallD&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time&#x20;or&#x20;ensure&#x20;one&#x20;of&#x20;them&#x20;is&#x20;stopped&#x20;and&#x20;masked.','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.Note:&#x20;Support&#x20;for&#x20;using&#x20;nftables&#x20;as&#x20;the&#x20;back-end&#x20;for&#x20;firewalld&#x20;was&#x20;added&#x20;in&#x20;release&#x20;v0.6.0.&#x20;In&#x20;Fedora&#x20;19&#x20;Linux&#x20;derivatives,&#x20;firewalld&#x20;utilizes&#x20;iptables&#x20;as&#x20;its&#x20;back-end&#x20;by&#x20;default.','Running&#x20;both&#x20;firewalld&#x20;and&#x20;nftables&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nftables:#&#x20;yum&#x20;remove&#x20;nftables;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;nftables:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;firewalld:&#x20;#&#x20;yum&#x20;remove&#x20;firewalld&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;firewalld','[{\"cis\": [\"3.5.1.3\", \"3.5.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6097,'Ensure&#x20;nftables&#x20;and&#x20;iptables-services&#x20;are&#x20;not&#x20;installed&#x20;at&#x20;the&#x20;same&#x20;time&#x20;or&#x20;ensure&#x20;one&#x20;of&#x20;them&#x20;is&#x20;stopped&#x20;and&#x20;masked.','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.Note:&#x20;Support&#x20;for&#x20;using&#x20;nftables&#x20;as&#x20;the&#x20;back-end&#x20;for&#x20;firewalld&#x20;was&#x20;added&#x20;in&#x20;release&#x20;v0.6.0.&#x20;In&#x20;Fedora&#x20;19&#x20;Linux&#x20;derivatives,&#x20;firewalld&#x20;utilizes&#x20;iptables&#x20;as&#x20;its&#x20;back-end&#x20;by&#x20;default.','Running&#x20;both&#x20;nftables&#x20;and&#x20;nftables&#x20;may&#x20;lead&#x20;to&#x20;conflict.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;nftables:#&#x20;yum&#x20;remove&#x20;nftables;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;nftables:&#x20;#&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;iptables#&#x20;#&#x20;systemctl&#x20;stop&#x20;iptables;&#x20;#&#x20;systemctl&#x20;stop&#x20;ip6tables;&#x20;#&#x20;yum&#x20;remove&#x20;iptables-services','[{\"cis\": [\"3.5.2.3\", \"3.5.3.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6098,'Ensure&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running.','firewalld.serviceenables&#x20;the&#x20;enforcement&#x20;of&#x20;firewall&#x20;rules&#x20;configured&#x20;through&#x20;firewalld','Ensure&#x20;that&#x20;the&#x20;firewalld.service&#x20;is&#x20;enabled&#x20;and&#x20;running&#x20;to&#x20;enforce&#x20;firewall&#x20;rules&#x20;configured&#x20;through&#x20;firewalld','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unmask&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;unmask&#x20;firewalld;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;firewalld','[{\"cis\": [\"3.5.1.4\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6099,'Ensure&#x20;a&#x20;table&#x20;exists.','nTables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;','[{\"cis\": [\"3.5.2.5\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6100,'Ensure&#x20;base&#x20;chains&#x20;exist.','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;createchain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;','[{\"cis\": [\"3.5.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6101,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured.','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;iif&#x20;lo&#x20;accept;&#x20;&#x20;&#x20;#&#x20;nft&#x20;create&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;saddr&#x20;127.0.0.0/8&#x20;counter&#x20;drop;&#x20;IF&#x20;IPv6&#x20;is&#x20;enabled:&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;implement&#x20;the&#x20;IPv6&#x20;loopback&#x20;rules:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip6&#x20;saddr::1&#x20;counter&#x20;drop','[{\"cis\": [\"3.5.2.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6102,'Ensure&#x20;outbound&#x20;and&#x20;established&#x20;connections&#x20;are&#x20;configured.','Configure&#x20;the&#x20;firewall&#x20;rules&#x20;for&#x20;new&#x20;outbound&#x20;and&#x20;established&#x20;connections.','If&#x20;rules&#x20;are&#x20;not&#x20;in&#x20;place&#x20;for&#x20;new&#x20;outbound&#x20;and&#x20;established&#x20;connections,&#x20;all&#x20;packets&#x20;will&#x20;be&#x20;dropped&#x20;by&#x20;the&#x20;default&#x20;policy&#x20;preventing&#x20;network&#x20;usage.','','Configure&#x20;nftables&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;commands&#x20;will&#x20;implement&#x20;a&#x20;policy&#x20;to&#x20;allow&#x20;all&#x20;outbound&#x20;connections&#x20;and&#x20;all&#x20;established&#x20;connections:&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;tcp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;udp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;input&#x20;ip&#x20;protocol&#x20;icmp&#x20;ct&#x20;state&#x20;established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;tcp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;udp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept;&#x20;&#x20;&#x20;#&#x20;nft&#x20;add&#x20;rule&#x20;inet&#x20;filter&#x20;output&#x20;ip&#x20;protocol&#x20;icmp&#x20;ct&#x20;state&#x20;new,related,established&#x20;accept','[{\"cis\": [\"3.5.2.8\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6103,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy.','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;traversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.5.2.9\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6104,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled.','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;on&#x20;the&#x20;nftables&#x20;service','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conffile&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.2.10\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6105,'Ensure&#x20;nftables&#x20;rules&#x20;are&#x20;permanent.','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames.&#x20;The&#x20;nftables&#x20;service&#x20;reads&#x20;the&#x20;/etc/sysconfig/nftables.conffile&#x20;for&#x20;a&#x20;nftables&#x20;file&#x20;or&#x20;files&#x20;to&#x20;include&#x20;in&#x20;the&#x20;nftables&#x20;ruleset.&#x20;A&#x20;nftables&#x20;ruleset&#x20;containing&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;base&#x20;chains&#x20;allow&#x20;network&#x20;traffic&#x20;to&#x20;be&#x20;filtered.','Changes&#x20;made&#x20;to&#x20;nftables&#x20;ruleset&#x20;only&#x20;affect&#x20;the&#x20;live&#x20;system,&#x20;you&#x20;will&#x20;also&#x20;need&#x20;to&#x20;configure&#x20;the&#x20;nftables&#x20;ruleset&#x20;to&#x20;apply&#x20;on&#x20;boot','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;enable&#x20;nftables','[{\"cis\": [\"3.5.2.11\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6106,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy.','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6107,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured.','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.3.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6108,'Ensure&#x20;iptables&#x20;is&#x20;enabled&#x20;and&#x20;running.','iptables.service&#x20;is&#x20;a&#x20;utility&#x20;for&#x20;configuring&#x20;and&#x20;maintaining&#x20;iptables.','iptables.service&#x20;willload&#x20;the&#x20;iptables&#x20;rules&#x20;saved&#x20;in&#x20;the&#x20;file&#x20;/etc/sysconfig/iptablesat&#x20;boot,&#x20;otherwise&#x20;the&#x20;iptables&#x20;rules&#x20;will&#x20;be&#x20;cleared&#x20;during&#x20;a&#x20;re-boot&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-PFORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6109,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy.','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-PFORWARD&#x20;DROP','[{\"cis\": [\"3.5.3.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6110,'Ensure&#x20;IPv6&#x20;loopback&#x20;traffic&#x20;is&#x20;configured.','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;tothe&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.5.3.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6111,'Ensure&#x20;IPv6&#x20;outbound&#x20;and&#x20;established&#x20;connections&#x20;are&#x20;configured.','Configure&#x20;the&#x20;firewall&#x20;rules&#x20;for&#x20;new&#x20;outbound,&#x20;and&#x20;established&#x20;IPv6&#x20;connections.','If&#x20;rules&#x20;are&#x20;not&#x20;in&#x20;place&#x20;for&#x20;new&#x20;outbound,&#x20;and&#x20;established&#x20;connections&#x20;all&#x20;packets&#x20;will&#x20;be&#x20;dropped&#x20;by&#x20;the&#x20;default&#x20;policy&#x20;preventing&#x20;network&#x20;usage','','Configure&#x20;iptables&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;commands&#x20;will&#x20;implement&#x20;a&#x20;policy&#x20;to&#x20;allow&#x20;all&#x20;outbound&#x20;connections&#x20;and&#x20;all&#x20;established&#x20;connections:#&#x20;ip6tables&#x20;-AOUTPUT&#x20;-p&#x20;tcp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-p&#x20;udp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-p&#x20;icmp&#x20;-m&#x20;state&#x20;--state&#x20;NEW,ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;tcp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;udp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-p&#x20;icmp&#x20;-m&#x20;state&#x20;--state&#x20;ESTABLISHED&#x20;-j&#x20;ACCEPT','[{\"cis\": [\"3.5.3.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6112,'Ensure&#x20;ip6tables&#x20;is&#x20;enabled&#x20;and&#x20;running.','ip6tables.service&#x20;is&#x20;a&#x20;utility&#x20;for&#x20;configuring&#x20;and&#x20;maintaining&#x20;ip6tables.','ip6tables.service&#x20;will&#x20;load&#x20;the&#x20;iptables&#x20;rules&#x20;saved&#x20;in&#x20;the&#x20;file&#x20;/etc/sysconfig/ip6tables&#x20;at&#x20;boot,&#x20;otherwise&#x20;the&#x20;ip6tables&#x20;rules&#x20;will&#x20;be&#x20;cleared&#x20;during&#x20;a&#x20;re-boot&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;ip6tables:&#x20;#&#x20;systemctl&#x20;--now&#x20;start&#x20;ip6tables','[{\"cis\": [\"3.5.3.3.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC8.1\"]}, {\"cis_level\": [\"1\"]}]'),(6113,'Ensure&#x20;auditd&#x20;is&#x20;installed.','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;Install&#x20;auditd&#x20;&#x20;#&#x20;yum&#x20;install&#x20;audit&#x20;audit-libs','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6114,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running.','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6115,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled.','Configure&#x20;grub&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','Audit&#x20;events&#x20;need&#x20;to&#x20;be&#x20;captured&#x20;on&#x20;processes&#x20;that&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd,&#x20;so&#x20;that&#x20;potential&#x20;malicious&#x20;activity&#x20;cannot&#x20;go&#x20;undetected.&#x20;Note:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub2&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6116,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured.','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"cis_level\": [\"2\"]}]'),(6117,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted.','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.2\", \"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"cis_level\": [\"2\"]}]'),(6118,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full.','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"cis_level\": [\"2\"]}]'),(6119,'Ensure&#x20;audit_backlog_limit&#x20;is&#x20;sufficient.','The&#x20;backlog&#x20;limit&#x20;has&#x20;a&#x20;default&#x20;setting&#x20;of&#x20;64','During&#x20;boot&#x20;if&#x20;audit=1,&#x20;then&#x20;the&#x20;backlog&#x20;will&#x20;hold&#x20;64&#x20;records.&#x20;If&#x20;more&#x20;than&#x20;64&#x20;records&#x20;are&#x20;created&#x20;during&#x20;boot,&#x20;auditd&#x20;records&#x20;will&#x20;be&#x20;lost&#x20;and&#x20;potential&#x20;malicious&#x20;activity&#x20;could&#x20;go&#x20;undetected','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit_backlog_limit=&lt;BACKLOG&#x20;SIZE&gt;&#x20;&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;&#x20;&#x20;Example:&#x20;&#x20;GRUB_CMDLINE_LINUX=&quot;audit_backlog_limit=8192&quot;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"cis_level\": [\"2\"]}]'),(6120,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected.','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/time-change.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/time-change.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.3\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6121,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected.','Record&#x20;events&#x20;affecting&#x20;the&#x20;group,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/identity.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6122,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected.','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/system-locale.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"5.5\", \"6.2\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6123,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected.','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;&#x20;the&#x20;/etc/selinux/&#x20;and&#x20;/usr/share/selinux/&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;the&#x20;/etc/selinux/&#x20;and&#x20;/usr/share/selinux/&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/MAC-policy.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;.','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6124,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected.','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.&#x20;The&#x20;/var/run/faillock/&#x20;directory&#x20;maintains&#x20;records&#x20;of&#x20;login&#x20;failures&#x20;via&#x20;the&#x20;pam_faillock&#x20;module.&#x20;The&#x20;file&#x20;/var/log/tallylog&#x20;maintains&#x20;records&#x20;of&#x20;failures&#x20;via&#x20;the&#x20;pam_tally2&#x20;module','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/logins.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillog/&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;IF&#x20;&#x20;&#x20;the&#x20;pam_faillock.so&#x20;module&#x20;is&#x20;used:&#x20;Also&#x20;include&#x20;the&#x20;line:&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;OR&#x20;IF&#x20;the&#x20;pam_tally2.so&#x20;module&#x20;is&#x20;used:&#x20;Also&#x20;include&#x20;the&#x20;line:&#x20;&#x20;-w&#x20;/var/log/tallylog&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6125,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected.','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/logins.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;.&#x20;Notes:&#x20;The&#x20;last&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;read&#x20;/var/log/wtmp&#x20;&#40;&#x20;last&#x20;with&#x20;no&#x20;parameters&#41;&#x20;and&#x20;/var/run/utmp&#x20;&#40;&#x20;last&#x20;-f&#x20;/var/run/utmp&#x20;&#41;&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"4.9\", \"16.11\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"cis_level\": [\"2\"]}]'),(6126,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected.','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown,&#x20;fchown,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr,&#x20;lsetxattr,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr,&#x20;lremovexattr,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/perm_mod.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/perm_mod.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6127,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected.','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/access.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6128,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected.','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/mount.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/mounts.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;.&#x20;Notes:&#x20;This&#x20;tracks&#x20;successful&#x20;and&#x20;unsuccessful&#x20;mount&#x20;commands.&#x20;File&#x20;system&#x20;mounts&#x20;do&#x20;not&#x20;have&#x20;to&#x20;come&#x20;from&#x20;external&#x20;media&#x20;and&#x20;this&#x20;action&#x20;still&#x20;does&#x20;not&#x20;verify&#x20;write&#x20;&#40;e.g.&#x20;CD&#x20;ROMS&#41;.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.12\"]}, {\"cis_csc\": [\"6.2\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6129,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected.','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;ollowing&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;:&#x20;unlink&#x20;-remove&#x20;a&#x20;file&#x20;&#x20;&#x20;&#x20;&#x20;unlinkat&#x20;-&#x20;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#x20;and&#x20;renameat&#x20;-&#x20;rename&#x20;a&#x20;file&#x20;attribute.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','For&#x20;32&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/delete.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/delete.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;.&#x20;Notes:&#x20;At&#x20;a&#x20;minimum,&#x20;configure&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;collect&#x20;file&#x20;deletion&#x20;events&#x20;for&#x20;all&#x20;users&#x20;and&#x20;root.&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.13\"]}, {\"cis_csc\": [\"6.2\", \"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}, {\"cis_level\": [\"2\"]}]'),(6130,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected.','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrators.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/sudoers.d&#x20;directory&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file,&#x20;or&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/sudoers.d/&#x20;directory&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/scope.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines::&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;.&#x20;Notes:&#x20;Reloading&#x20;the&#x20;auditd&#x20;config&#x20;to&#x20;set&#x20;active&#x20;settings&#x20;may&#x20;require&#x20;a&#x20;system&#x20;reboot.','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6131,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected.','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;The&#x20;sudo&#x20;log&#x20;file&#x20;is&#x20;configured&#x20;in&#x20;/etc/sudoersor&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;sudo&#x20;log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/action.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions&#x20;.','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.9\", \"5.5\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6132,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected.','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules.&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/modules.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/directory&#x20;ending&#x20;in&#x20;.rules&#x20;&#x20;Example:&#x20;vi&#x20;/etc/audit/rules.d/modules.rules&#x20;Add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6133,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable.','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rulesand&#x20;add&#x20;the&#x20;following&#x20;line&#x20;at&#x20;the&#x20;end&#x20;of&#x20;the&#x20;file:&#x20;&#x20;-e&#x20;2','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"2\"]}]'),(6134,'Ensure&#x20;rsyslog&#x20;is&#x20;installed.','The&#x20;rsyslog&#x20;software&#x20;is&#x20;a&#x20;recommended&#x20;replacement&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon.&#x20;rsyslog&#x20;provides&#x20;improvements&#x20;over&#x20;syslogd,&#x20;including:&#x20;&#x20;&#x20;-&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs&#x20;&#x20;&#x20;&#x20;&#x20;-&#x20;The&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats&#x20;&#x20;&#x20;&#x20;-&#x20;Encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;and&#x20;syslog-ng&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;rsyslog:&#x20;#&#x20;yum&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6135,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled&#x20;and&#x20;running.','rsyslogneeds&#x20;to&#x20;be&#x20;enabled&#x20;and&#x20;running&#x20;to&#x20;perform&#x20;logging','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lackblogging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6136,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured.','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6137,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host.','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;&#x20;systemctl&#x20;restart&#x20;rsyslog','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6138,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog&#x20;.','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6139,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files.','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6140,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;write&#x20;logfiles&#x20;to&#x20;persistent&#x20;disk.','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Storage=persistent','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6141,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured.','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.&#x20;&#x20;Other/world&#x20;should&#x20;not&#x20;have&#x20;the&#x20;ability&#x20;to&#x20;view&#x20;this&#x20;information.&#x20;Group&#x20;should&#x20;not&#x20;have&#x20;the&#x20;ability&#x20;to&#x20;modify&#x20;this&#x20;information.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+&#x20;-o&#x20;-type&#x20;d&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;&quot;{}&quot;&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5\"]}, {\"tsc\": [\"CC6.1\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6142,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled.','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;systemctl&#x20;enable&#x20;crond;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6143,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured.','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/crontab;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6144,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured.','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6145,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured.','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.daily;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6146,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured.','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6147,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured.','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6148,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured.','The&#x20;/etc/cron.d/directory&#x20;contains&#x20;system&#x20;cronjobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;in&#x20;a&#x20;similar&#x20;manner&#x20;to&#x20;the&#x20;hourly,&#x20;daily&#x20;weekly&#x20;and&#x20;monthly&#x20;jobs&#x20;from&#x20;/etc/crontab,&#x20;but&#x20;require&#x20;more&#x20;granular&#x20;control&#x20;as&#x20;to&#x20;when&#x20;they&#x20;run.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;:&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.d;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.d;&#x20;&#x20;&#x20;OR&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;cron:&#x20;#&#x20;yum&#x20;remove&#x20;cronie','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6149,'Ensure&#x20;cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users.','If&#x20;cronis&#x20;installed&#x20;in&#x20;the&#x20;system,&#x20;configure&#x20;/etc/cron.allowto&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allowdoes&#x20;not&#x20;exist,&#x20;then&#x20;/etc/cron.denyis&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;file,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.alloware&#x20;allowed&#x20;to&#x20;use&#x20;cron.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cronjobs.&#x20;Using&#x20;the&#x20;cron.allowfile&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cronjobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6150,'Ensure&#x20;at&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users.','If&#x20;atis&#x20;installed&#x20;in&#x20;the&#x20;system,&#x20;configure&#x20;/etc/at.allowto&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/at.allowdoes&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.denyis&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at.&#x20;By&#x20;removing&#x20;the&#x20;file,&#x20;only&#x20;users&#x20;in&#x20;/etc/at.alloware&#x20;allowed&#x20;to&#x20;use&#x20;at.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;atjobs.&#x20;Using&#x20;the&#x20;at.allowfile&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;atjobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow:&#x20;rm&#x20;/etc/cron.deny;rm&#x20;/etc/at.deny;touch&#x20;/etc/cron.allow;&#x20;touch&#x20;/etc/at.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow;&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow;&#x20;chown&#x20;root:root&#x20;/etc/cron.allow&#x20;and&#x20;chown&#x20;root:root&#x20;/etc/at.allow','[{\"cis\": [\"5.1.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6151,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config:&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;and&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6152,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured.','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions,&#x20;ownership,&#x20;and&#x20;group&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;u-x,g-wx,o-rwx&#x20;{}&#x20;;&#x20;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:ssh_keys&#x20;{}&#x20;;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6153,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;public&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured.','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;u-x,go-wx&#x20;{}&#x20;;&#x20;&#x20;&#x20;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6154,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited.','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;#&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;#&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;#&#x20;DenyUsers&#x20;&lt;userlist&gt;;&#x20;#&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6155,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate.','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6156,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled.','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"pci_dss\": [\"9.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6157,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less.','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6158,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled.','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6159,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled.','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6160,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled.','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6161,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled.','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6162,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled.','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}, {\"cis_level\": [\"1\"]}]'),(6163,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured.','This&#x20;variable&#x20;limits&#x20;the&#x20;ciphers&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','Weak&#x20;ciphers&#x20;that&#x20;are&#x20;used&#x20;for&#x20;authentication&#x20;to&#x20;the&#x20;cryptographic&#x20;module&#x20;cannot&#x20;be&#x20;relied&#x20;upon&#x20;to&#x20;provide&#x20;confidentiality&#x20;or&#x20;integrity,&#x20;and&#x20;system&#x20;data&#x20;may&#x20;be&#x20;compromised.:&#x20;The&#x20;DES,&#x20;Triple&#x20;DES,&#x20;and&#x20;Blowfish&#x20;ciphers,&#x20;as&#x20;used&#x20;in&#x20;SSH,&#x20;have&#x20;a&#x20;birthday&#x20;bound&#x20;of&#x20;approximately&#x20;four&#x20;billion&#x20;blocks,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;obtain&#x20;cleartext&#x20;data&#x20;via&#x20;a&#x20;birthday&#x20;attack&#x20;against&#x20;a&#x20;long-duration&#x20;encrypted&#x20;session,&#x20;aka&#x20;a&#x20;&#039;Sweet32&#039;&#x20;attack;&#x20;The&#x20;RC4&#x20;algorithm,&#x20;as&#x20;used&#x20;in&#x20;the&#x20;TLS&#x20;protocol&#x20;and&#x20;SSL&#x20;protocol,&#x20;does&#x20;not&#x20;properly&#x20;combine&#x20;state&#x20;data&#x20;with&#x20;key&#x20;data&#x20;during&#x20;the&#x20;initialization&#x20;phase,&#x20;which&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;conduct&#x20;plaintext-recovery&#x20;attacks&#x20;against&#x20;the&#x20;initial&#x20;bytes&#x20;of&#x20;a&#x20;stream&#x20;by&#x20;sniffing&#x20;network&#x20;traffic&#x20;that&#x20;occasionally&#x20;relies&#x20;on&#x20;keys&#x20;affected&#x20;by&#x20;the&#x20;Invariance&#x20;Weakness,&#x20;and&#x20;then&#x20;using&#x20;a&#x20;brute-force&#x20;approach&#x20;involvingLSB&#x20;values,&#x20;aka&#x20;the&#x20;&#039;Bar&#x20;Mitzvah&#039;&#x20;issue;&#x20;The&#x20;passwords&#x20;used&#x20;during&#x20;an&#x20;SSH&#x20;session&#x20;encrypted&#x20;with&#x20;RC4&#x20;can&#x20;be&#x20;recovered&#x20;by&#x20;an&#x20;attacker&#x20;who&#x20;is&#x20;able&#x20;to&#x20;capture&#x20;and&#x20;replay&#x20;the&#x20;session;&#x20;Error&#x20;handling&#x20;in&#x20;the&#x20;SSH&#x20;protocol;&#x20;Client&#x20;and&#x20;Server,&#x20;when&#x20;using&#x20;a&#x20;block&#x20;cipher&#x20;algorithm&#x20;in&#x20;Cipher&#x20;Block&#x20;Chaining&#x20;&#40;CBC&#41;&#x20;mode,&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;remote&#x20;attackers&#x20;to&#x20;recover&#x20;certain&#x20;plaintext&#x20;data&#x20;from&#x20;an&#x20;arbitrary&#x20;block&#x20;of&#x20;ciphertext&#x20;in&#x20;an&#x20;SSH&#x20;session&#x20;via&#x20;unknown&#x20;vectors;&#x20;The&#x20;mm_newkeys_from_blob&#x20;function&#x20;in&#x20;monitor_wrap.c,&#x20;when&#x20;an&#x20;AES-GCM&#x20;cipher&#x20;is&#x20;used,&#x20;does&#x20;not&#x20;properly&#x20;initialize&#x20;memory&#x20;for&#x20;a&#x20;MAC&#x20;context&#x20;data&#x20;structure,&#x20;which&#x20;allows&#x20;remote&#x20;authenticated&#x20;users&#x20;to&#x20;bypass&#x20;intended&#x20;ForceCommand&#x20;and&#x20;login-shell&#x20;restrictions&#x20;via&#x20;packet&#x20;data&#x20;that&#x20;provides&#x20;a&#x20;crafted&#x20;callback&#x20;address','','Edit&#x20;the&#x20;/etc/ssh/sshd_configfile&#x20;add/modify&#x20;the&#x20;Ciphersline&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;ciphersExample:Ciphers&#x20;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6164,'Ensure&#x20;only&#x20;strong&#x20;MAC&#x20;algorithms&#x20;are&#x20;used.','This&#x20;variable&#x20;limits&#x20;the&#x20;types&#x20;of&#x20;MAC&#x20;algorithms&#x20;that&#x20;SSH&#x20;can&#x20;use&#x20;during&#x20;communication.','MD5&#x20;and&#x20;96-bit&#x20;MAC&#x20;algorithms&#x20;are&#x20;considered&#x20;weak&#x20;and&#x20;have&#x20;been&#x20;shown&#x20;to&#x20;increase&#x20;exploitability&#x20;in&#x20;SSH&#x20;downgrade&#x20;attacks.&#x20;Weak&#x20;algorithms&#x20;continue&#x20;to&#x20;have&#x20;a&#x20;great&#x20;deal&#x20;of&#x20;attention&#x20;as&#x20;a&#x20;weak&#x20;spot&#x20;that&#x20;can&#x20;be&#x20;exploited&#x20;with&#x20;expanded&#x20;computing&#x20;power.&#x20;An&#x20;attacker&#x20;that&#x20;breaks&#x20;the&#x20;algorithm&#x20;could&#x20;take&#x20;advantage&#x20;of&#x20;a&#x20;MiTM&#x20;position&#x20;to&#x20;decrypt&#x20;the&#x20;SSH&#x20;tunnel&#x20;and&#x20;capture&#x20;credentials&#x20;and&#x20;information','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;and&#x20;add/modify&#x20;the&#x20;MACs&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;MACs&#x20;Example:MACs&#x20;hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"14.4\", \"16.5\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6165,'Ensure&#x20;only&#x20;strong&#x20;Key&#x20;Exchange&#x20;algorithms&#x20;are&#x20;used.','Key&#x20;exchange&#x20;is&#x20;any&#x20;method&#x20;in&#x20;cryptography&#x20;by&#x20;which&#x20;cryptographic&#x20;keys&#x20;are&#x20;exchanged&#x20;between&#x20;two&#x20;parties,&#x20;allowing&#x20;use&#x20;of&#x20;a&#x20;cryptographic&#x20;algorithm.&#x20;If&#x20;the&#x20;sender&#x20;and&#x20;receiver&#x20;wish&#x20;to&#x20;exchange&#x20;encrypted&#x20;messages,&#x20;each&#x20;must&#x20;be&#x20;equipped&#x20;to&#x20;encrypt&#x20;messages&#x20;to&#x20;be&#x20;sent&#x20;and&#x20;decrypt&#x20;messages&#x20;received','Key&#x20;exchange&#x20;methods&#x20;that&#x20;are&#x20;considered&#x20;weak&#x20;should&#x20;be&#x20;removed.&#x20;A&#x20;key&#x20;exchange&#x20;method&#x20;may&#x20;be&#x20;weak&#x20;because&#x20;too&#x20;few&#x20;bits&#x20;are&#x20;used,&#x20;or&#x20;the&#x20;hashing&#x20;algorithm&#x20;is&#x20;considered&#x20;too&#x20;weak.&#x20;Using&#x20;weak&#x20;algorithms&#x20;could&#x20;expose&#x20;connections&#x20;to&#x20;man-in-the-middle&#x20;attacks','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;add/modify&#x20;the&#x20;KexAlgorithms&#x20;line&#x20;to&#x20;contain&#x20;a&#x20;comma&#x20;separated&#x20;list&#x20;of&#x20;the&#x20;site&#x20;approved&#x20;key&#x20;exchange&#x20;algorithms.Example:&#039;KexAlgorithms&#x20;curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256&#039;','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6166,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured.','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6167,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less.','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6168,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured.','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6169,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled.','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthenticationand&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6170,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled.','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"2\"]}]'),(6171,'Ensure&#x20;SSH&#x20;MaxStartups&#x20;is&#x20;configured.','The&#x20;MaxStartupsparameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;to&#x20;the&#x20;SSH&#x20;daemon','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;maxstartups&#x20;10:30:60','[{\"cis\": [\"5.2.21\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6172,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;limited.','The&#x20;MaxSessionsparameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;pending&#x20;authentication&#x20;connection&#x20;attempts,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxStartups&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;10','[{\"cis\": [\"5.2.22\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6173,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured.','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;length&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;complexity&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minclass&#x20;=&#x20;4&#x20;&#x20;&#x20;&#x20;OR&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;lcredit&#x20;=&#x20;-1&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;appropriate&#x20;options&#x20;for&#x20;pam_pwquality.so&#x20;and&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:password&#x20;requisite&#x20;pam_pwquality.so&#x20;try_first_pass&#x20;retry=3','[{\"cis\": [\"5.3.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6174,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512.','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;changes&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option&#x20;for&#x20;pam_unix.so&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;sha512','[{\"cis\": [\"5.3.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}, {\"cis_level\": [\"1\"]}]'),(6175,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited.','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&#039;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;changes&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/pam.d/password-auth&#x20;and&#x20;/etc/pam.d/system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option&#x20;and&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;as&#x20;shown:&#x20;password&#x20;sufficient&#x20;pam_unix.so&#x20;remember=5&#x20;&#x20;&#x20;or&#x20;&#x20;&#x20;&#x20;password&#x20;required&#x20;pam_pwhistory.so&#x20;remember=5','[{\"cis\": [\"5.3.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6176,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less.','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6177,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;configured.','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;1&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;1&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;1&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;1&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6178,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more.','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6179,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less.','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6180,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0.','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6181,'&#x20;Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;configured.','TMOUT&#x20;is&#x20;an&#x20;environmental&#x20;setting&#x20;that&#x20;determines&#x20;the&#x20;timeout&#x20;of&#x20;a&#x20;shell&#x20;in&#x20;seconds.','Setting&#x20;a&#x20;timeout&#x20;value&#x20;reduces&#x20;the&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;that&#x20;has&#x20;been&#x20;left&#x20;unattended.&#x20;It&#x20;also&#x20;ends&#x20;the&#x20;inactive&#x20;session&#x20;and&#x20;releases&#x20;the&#x20;resources&#x20;associated&#x20;with&#x20;that&#x20;session.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;and&#x20;/etc/profile&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;TMOUT=600','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}, {\"cis_level\": [\"1\"]}]'),(6182,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;configured.','The&#x20;user&#x20;file-creation&#x20;mode&#x20;mask&#x20;&#40;umask&#41;&#x20;is&#x20;use&#x20;to&#x20;determine&#x20;the&#x20;file&#x20;permission&#x20;for&#x20;newly&#x20;created&#x20;directories&#x20;and&#x20;files.&#x20;In&#x20;Linux,&#x20;the&#x20;default&#x20;permissions&#x20;for&#x20;any&#x20;newly&#x20;created&#x20;directory&#x20;is&#x20;0777&#x20;&#40;rwxrwxrwx&#41;,&#x20;and&#x20;for&#x20;any&#x20;newly&#x20;created&#x20;file&#x20;it&#x20;is&#x20;0666&#x20;&#40;rw-rw-rw-&#41;.&#x20;The&#x20;umask&#x20;modifies&#x20;the&#x20;default&#x20;Linux&#x20;permissions&#x20;by&#x20;restricting&#x20;&#40;masking&#41;&#x20;these&#x20;permissions.&#x20;The&#x20;umask&#x20;is&#x20;not&#x20;simply&#x20;subtracted,&#x20;but&#x20;is&#x20;processed&#x20;bitwise.&#x20;Bits&#x20;set&#x20;in&#x20;the&#x20;umaskare&#x20;cleared&#x20;in&#x20;the&#x20;resulting&#x20;file&#x20;mode.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6183,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted..','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6184,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured.','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;&#x20;&#x20;#&#x20;chmod&#x20;u-x,g-wx,o-wx&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6185,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured.','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"cis_level\": [\"1\"]}]'),(6186,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured.','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;u-x,g-wx,o-wx&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6187,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured.','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6188,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured.','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6189,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured.','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6190,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured.','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6191,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured.','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;#&#x20;chmod&#x20;000&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6192,'Ensure&#x20;accounts&#x20;in&#x20;/etc/passwd&#x20;use&#x20;shadowed&#x20;passwords.','Local&#x20;accounts&#x20;can&#x20;uses&#x20;shadowed&#x20;passwords.&#x20;With&#x20;shadowed&#x20;passwords,&#x20;The&#x20;passwords&#x20;are&#x20;saved&#x20;in&#x20;shadow&#x20;password&#x20;file,&#x20;/etc/shadow,&#x20;encrypted&#x20;by&#x20;a&#x20;salted&#x20;one-way&#x20;hash.&#x20;Accounts&#x20;with&#x20;a&#x20;shadowed&#x20;password&#x20;have&#x20;an&#x20;xin&#x20;the&#x20;second&#x20;field&#x20;in&#x20;/etc/passwd.','The&#x20;/etc/passwd&#x20;file&#x20;also&#x20;contains&#x20;information&#x20;like&#x20;user&#x20;ID&#039;s&#x20;and&#x20;group&#x20;ID&#039;s&#x20;that&#x20;are&#x20;used&#x20;by&#x20;many&#x20;system&#x20;programs.&#x20;Therefore,&#x20;the&#x20;/etc/passwd&#x20;file&#x20;must&#x20;remain&#x20;world&#x20;readable.&#x20;In&#x20;spite&#x20;of&#x20;encoding&#x20;the&#x20;password&#x20;with&#x20;a&#x20;randomly-generated&#x20;one-way&#x20;hash&#x20;function,&#x20;an&#x20;attacker&#x20;could&#x20;still&#x20;break&#x20;the&#x20;system&#x20;if&#x20;they&#x20;got&#x20;access&#x20;to&#x20;the&#x20;/etc/passwd&#x20;file.&#x20;This&#x20;can&#x20;be&#x20;mitigated&#x20;by&#x20;using&#x20;shadowed&#x20;passwords,&#x20;thus&#x20;moving&#x20;the&#x20;passwords&#x20;in&#x20;the&#x20;/etc/passwd&#x20;file&#x20;to&#x20;/etc/shadow.&#x20;The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;set&#x20;so&#x20;only&#x20;root&#x20;will&#x20;be&#x20;able&#x20;to&#x20;read&#x20;and&#x20;write.&#x20;This&#x20;helps&#x20;mitigate&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;encoded&#x20;passwords&#x20;with&#x20;which&#x20;to&#x20;perform&#x20;a&#x20;dictionary&#x20;attack.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/passwd&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;single&#x20;x&#x20;in&#x20;the&#x20;password&#x20;field,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;these&#x20;accounts&#x20;to&#x20;use&#x20;shadowed&#x20;passwords:#&#x20;sed&#x20;-e&#x20;&#039;s/^&#40;[a-zA-Z0-9_]*&#41;:[^:]*:/1:x:/&#039;&#x20;-i&#x20;/etc/passwdInvestigate&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for,&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6193,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty.','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}, {\"cis_level\": [\"1\"]}]'),(6194,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account.','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}, {\"cis_level\": [\"1\"]}]'),(6195,'Ensure&#x20;shadow&#x20;group&#x20;is&#x20;empty.','The&#x20;shadow&#x20;group&#x20;allows&#x20;system&#x20;programs&#x20;which&#x20;require&#x20;access&#x20;the&#x20;ability&#x20;to&#x20;read&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;No&#x20;users&#x20;should&#x20;be&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group','Any&#x20;users&#x20;assigned&#x20;to&#x20;the&#x20;shadow&#x20;group&#x20;would&#x20;be&#x20;granted&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file.&#x20;If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;runa&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;passwords&#x20;to&#x20;break&#x20;them.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;additional&#x20;user&#x20;accounts.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.18\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}, {\"cis_level\": [\"1\"]}]'),(6500,'Ensure&#x20;mounting&#x20;of&#x20;cramfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;cramfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems.&#x20;A&#x20;cramfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/cramfs.conf:&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;cramfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;cramfs&#x20;module:&#x20;#&#x20;rmmod&#x20;cramfs','[{\"cis\": [\"1.1.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(6501,'Ensure&#x20;mounting&#x20;of&#x20;FAT&#x20;filesystems&#x20;is&#x20;limited','The&#x20;VFAT&#x20;filesystem&#x20;format&#x20;is&#x20;primarily&#x20;used&#x20;on&#x20;older&#x20;windows&#x20;systems&#x20;and&#x20;portable&#x20;USB&#x20;drives&#x20;or&#x20;flash&#x20;modules.&#x20;It&#x20;comes&#x20;in&#x20;three&#x20;types&#x20;FAT12&#x20;,&#x20;FAT16&#x20;,&#x20;and&#x20;FAT32&#x20;all&#x20;of&#x20;which&#x20;are&#x20;supported&#x20;by&#x20;the&#x20;vfat&#x20;kernel&#x20;module.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/vfat.conf:&#x20;install&#x20;vfat&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;vfat&#x20;module:&#x20;#&#x20;rmmod&#x20;vfat','[{\"cis\": [\"1.1.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(6502,'Ensure&#x20;mounting&#x20;of&#x20;squashfs&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;squashfs&#x20;filesystem&#x20;type&#x20;is&#x20;a&#x20;compressed&#x20;read-only&#x20;Linux&#x20;filesystem&#x20;embedded&#x20;in&#x20;small&#x20;footprint&#x20;systems&#x20;&#40;similar&#x20;to&#x20;cramfs&#x20;&#41;.&#x20;A&#x20;squashfs&#x20;image&#x20;can&#x20;be&#x20;used&#x20;without&#x20;having&#x20;to&#x20;first&#x20;decompress&#x20;the&#x20;image.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/squashfs.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;squashfs&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;squashfs&#x20;module:&#x20;rmmod&#x20;squashfs','[{\"cis\": [\"1.1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(6503,'Ensure&#x20;mounting&#x20;of&#x20;udf&#x20;filesystems&#x20;is&#x20;disabled','The&#x20;udf&#x20;filesystem&#x20;type&#x20;is&#x20;the&#x20;universal&#x20;disk&#x20;format&#x20;used&#x20;to&#x20;implement&#x20;ISO/IEC&#x20;13346&#x20;and&#x20;ECMA-167&#x20;specifications.&#x20;This&#x20;is&#x20;an&#x20;open&#x20;vendor&#x20;filesystem&#x20;type&#x20;for&#x20;data&#x20;storage&#x20;on&#x20;a&#x20;broad&#x20;range&#x20;of&#x20;media.&#x20;This&#x20;filesystem&#x20;type&#x20;is&#x20;necessary&#x20;to&#x20;support&#x20;writing&#x20;DVDs&#x20;and&#x20;newer&#x20;optical&#x20;disc&#x20;formats.','Removing&#x20;support&#x20;for&#x20;unneeded&#x20;filesystem&#x20;types&#x20;reduces&#x20;the&#x20;local&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.&#x20;If&#x20;this&#x20;filesystem&#x20;type&#x20;is&#x20;not&#x20;needed,&#x20;disable&#x20;it.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/udf.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;udf&#x20;/bin/true.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;udf&#x20;module:&#x20;#&#x20;rmmod&#x20;udf','[{\"cis\": [\"1.1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.5\"]}, {\"tsc\": [\"CC6.3\"]}]'),(6504,'Ensure&#x20;/tmp&#x20;is&#x20;configured','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.&#x20;This&#x20;can&#x20;be&#x20;accomplished&#x20;by&#x20;either&#x20;mounting&#x20;tmpfs&#x20;to&#x20;/tmp,&#x20;or&#x20;creating&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.','','Configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.&#x20;example:&#x20;&quot;tmpfs&#x20;&#x20;/tmp&#x20;&#x20;tmpfs&#x20;defaults,rw,nosuid,nodev,noexec,relatime&#x20;&#x20;0&#x20;0&quot;&#x20;&#x20;OR&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;enable&#x20;systemd&#x20;/tmp&#x20;mounting:&#x20;#&#x20;systemctl&#x20;unmask&#x20;tmp.mount&#x20;#&#x20;systemctl&#x20;enable&#x20;tmp.mount&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;configure&#x20;the&#x20;/tmp&#x20;mount:&#x20;&#x20;&#x20;[Mount]&#x20;What=tmpfs&#x20;Where=/tmp&#x20;Type=tmpfs&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid','[{\"cis\": [\"1.1.2\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6505,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp&#x20;&#x20;OR&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6506,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;&#x20;&#x20;&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6507,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Edit&#x20;/etc/systemd/system/local-fs.target.wants/tmp.mount&#x20;to&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;/tmp&#x20;mount&#x20;options:&#x20;[Mount]&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Options=mode=1777,strictatime,noexec,nodev,nosuid&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6508,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6509,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/tmp','The&#x20;/var/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/var/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/var/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/var/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/tmp.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6510,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/var/tmp&#x20;.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6511,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6512,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/var/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/var/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/var/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/var/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"1.1.10\"]}, {\"cis_csc\": [\"5.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6513,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data&#x20;.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6514,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"2.2.4\", \"10.7\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6515,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6516,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home','[{\"cis\": [\"1.1.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6517,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6518,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6519,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6520,'Disable&#x20;Automounting','autofs&#x20;allows&#x20;automatic&#x20;mounting&#x20;of&#x20;devices,&#x20;typically&#x20;including&#x20;CD/DVDs&#x20;and&#x20;USB&#x20;drives.','With&#x20;automounting&#x20;enabled&#x20;anyone&#x20;with&#x20;physical&#x20;access&#x20;could&#x20;attach&#x20;a&#x20;USB&#x20;drive&#x20;or&#x20;disc&#x20;and&#x20;have&#x20;its&#x20;contents&#x20;available&#x20;in&#x20;system&#x20;even&#x20;if&#x20;they&#x20;lacked&#x20;permissions&#x20;to&#x20;mount&#x20;it&#x20;themselves.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;autofs&#x20;:&#x20;systemctl&#x20;disable&#x20;autofs','[{\"cis\": [\"1.1.22\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6521,'Disable&#x20;USB&#x20;Storage','USB&#x20;storage&#x20;provides&#x20;a&#x20;means&#x20;to&#x20;transfer&#x20;and&#x20;store&#x20;files&#x20;insuring&#x20;persistence&#x20;and&#x20;availability&#x20;of&#x20;the&#x20;files&#x20;independent&#x20;of&#x20;network&#x20;connection&#x20;status.&#x20;Its&#x20;popularity&#x20;and&#x20;utility&#x20;has&#x20;led&#x20;to&#x20;USB-based&#x20;malware&#x20;being&#x20;a&#x20;simple&#x20;and&#x20;common&#x20;means&#x20;for&#x20;network&#x20;infiltration&#x20;and&#x20;a&#x20;first&#x20;step&#x20;to&#x20;establishing&#x20;a&#x20;persistent&#x20;threat&#x20;within&#x20;a&#x20;networked&#x20;environment.','Restricting&#x20;USB&#x20;access&#x20;on&#x20;the&#x20;system&#x20;will&#x20;decrease&#x20;the&#x20;physical&#x20;attack&#x20;surface&#x20;for&#x20;a&#x20;device&#x20;and&#x20;diminish&#x20;the&#x20;possible&#x20;vectors&#x20;to&#x20;introduce&#x20;malware.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/usb-storage.conf&#x20;&#x20;&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;usb-storage&#x20;/bin/true&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;unload&#x20;the&#x20;usb-storage&#x20;module:&#x20;&#x20;#&#x20;rmmod&#x20;usb-storage','[{\"cis\": [\"1.1.23\"]}, {\"cis_csc\": [\"8.4\", \"8.5\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6522,'Ensure&#x20;gpgcheck&#x20;is&#x20;globally&#x20;activated','The&#x20;gpgcheck&#x20;option,&#x20;found&#x20;in&#x20;the&#x20;main&#x20;section&#x20;of&#x20;the&#x20;/etc/yum.conf&#x20;and&#x20;individual&#x20;/etc/yum/repos.d&#47;&#42;&#x20;files&#x20;determines&#x20;if&#x20;an&#x20;RPM&#x20;package&#039;s&#x20;signature&#x20;is&#x20;checked&#x20;prior&#x20;to&#x20;its&#x20;installation.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;an&#x20;RPM&#039;s&#x20;package&#x20;signature&#x20;is&#x20;always&#x20;checked&#x20;prior&#x20;to&#x20;installation&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;software&#x20;is&#x20;obtained&#x20;from&#x20;a&#x20;trusted&#x20;source.','','Edit&#x20;/etc/yum.conf&#x20;and&#x20;set&#x20;&#039;&#x20;gpgcheck=1&#x20;&#039;&#x20;in&#x20;the&#x20;[main]&#x20;section.&#x20;Edit&#x20;any&#x20;failing&#x20;files&#x20;in&#x20;/etc/yum.repos.d&#47;&#42;&#x20;and&#x20;set&#x20;all&#x20;instances&#x20;of&#x20;gpgcheck&#x20;to&#x20;&#039;&#x20;1&#x20;&#039;.','[{\"cis\": [\"1.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"6.2\"]}, {\"nist_800_53\": [\"SI.2\", \"SA.11\", \"SI.4\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\", \"CC6.8\"]}]'),(6523,'Ensure&#x20;sudo&#x20;is&#x20;installed','sudo&#x20;allows&#x20;a&#x20;permitted&#x20;user&#x20;to&#x20;execute&#x20;a&#x20;command&#x20;as&#x20;the&#x20;superuser&#x20;or&#x20;another&#x20;user,&#x20;as&#x20;specified&#x20;by&#x20;the&#x20;security&#x20;policy.&#x20;The&#x20;invoking&#x20;user&#039;s&#x20;real&#x20;&#40;not&#x20;effective&#41;&#x20;user&#x20;ID&#x20;is&#x20;used&#x20;to&#x20;determine&#x20;the&#x20;user&#x20;name&#x20;with&#x20;which&#x20;to&#x20;query&#x20;the&#x20;security&#x20;policy.','sudo&#x20;supports&#x20;a&#x20;plugin&#x20;architecture&#x20;for&#x20;security&#x20;policies&#x20;and&#x20;input/output&#x20;logging.&#x20;Third&#x20;parties&#x20;can&#x20;develop&#x20;and&#x20;distribute&#x20;their&#x20;own&#x20;policy&#x20;and&#x20;I/O&#x20;logging&#x20;plugins&#x20;to&#x20;work&#x20;seamlessly&#x20;with&#x20;the&#x20;sudo&#x20;front&#x20;end.&#x20;The&#x20;default&#x20;security&#x20;policy&#x20;is&#x20;sudoers,&#x20;which&#x20;is&#x20;configured&#x20;via&#x20;the&#x20;file&#x20;/etc/sudoers.&#x20;The&#x20;security&#x20;policy&#x20;determines&#x20;what&#x20;privileges,&#x20;if&#x20;any,&#x20;a&#x20;user&#x20;has&#x20;to&#x20;run&#x20;sudo.&#x20;The&#x20;policy&#x20;may&#x20;require&#x20;that&#x20;users&#x20;authenticate&#x20;themselves&#x20;with&#x20;a&#x20;password&#x20;or&#x20;another&#x20;authentication&#x20;mechanism.&#x20;If&#x20;authentication&#x20;is&#x20;required,&#x20;sudo&#x20;will&#x20;exit&#x20;if&#x20;the&#x20;user&#039;s&#x20;password&#x20;is&#x20;not&#x20;entered&#x20;within&#x20;a&#x20;configurable&#x20;time&#x20;limit.&#x20;This&#x20;limit&#x20;is&#x20;policy-specific.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;sudo:&#x20;#&#x20;dnf&#x20;install&#x20;sudo','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6524,'Ensure&#x20;sudo&#x20;commands&#x20;use&#x20;pty','sudo&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;run&#x20;only&#x20;from&#x20;a&#x20;pseudo-pty','Attackers&#x20;can&#x20;run&#x20;a&#x20;malicious&#x20;program&#x20;using&#x20;sudo&#x20;which&#x20;would&#x20;fork&#x20;a&#x20;background&#x20;process&#x20;that&#x20;remains&#x20;even&#x20;when&#x20;the&#x20;main&#x20;program&#x20;has&#x20;finished&#x20;executing.','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;use_pty','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6525,'Ensure&#x20;sudo&#x20;log&#x20;file&#x20;exists','sudo&#x20;can&#x20;use&#x20;a&#x20;custom&#x20;log&#x20;file','A&#x20;sudo&#x20;log&#x20;file&#x20;simplifies&#x20;auditing&#x20;of&#x20;sudo&#x20;commands','','edit&#x20;the&#x20;file&#x20;/etc/sudoers&#x20;or&#x20;a&#x20;file&#x20;in&#x20;/etc/sudoers.d/&#x20;with&#x20;visudo&#x20;-f&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;Defaults&#x20;logfile=&quot;&lt;PATH&#x20;TO&#x20;CUSTOM&#x20;LOG&#x20;FILE&gt;&quot;','[{\"cis\": [\"1.3.3\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6526,'Ensure&#x20;AIDE&#x20;is&#x20;installed','AIDE&#x20;takes&#x20;a&#x20;snapshot&#x20;of&#x20;filesystem&#x20;state&#x20;including&#x20;modification&#x20;times,&#x20;permissions,&#x20;and&#x20;file&#x20;hashes&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;to&#x20;compare&#x20;against&#x20;the&#x20;current&#x20;state&#x20;of&#x20;the&#x20;filesystem&#x20;to&#x20;detect&#x20;modifications&#x20;to&#x20;the&#x20;system.','By&#x20;monitoring&#x20;the&#x20;filesystem&#x20;state&#x20;compromised&#x20;files&#x20;can&#x20;be&#x20;detected&#x20;to&#x20;prevent&#x20;or&#x20;limit&#x20;the&#x20;exposure&#x20;of&#x20;accidental&#x20;or&#x20;malicious&#x20;misconfigurations&#x20;or&#x20;modified&#x20;binaries.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;aide:&#x20;#&#x20;dnf&#x20;install&#x20;aide&#x20;&#x20;||&#x20;&#x20;Configure&#x20;AIDE&#x20;as&#x20;appropriate&#x20;for&#x20;your&#x20;environment.&#x20;Consult&#x20;the&#x20;AIDE&#x20;documentation&#x20;for&#x20;options.&#x20;Initialize&#x20;AIDE:&#x20;#aide&#x20;--init&#x20;&amp;&amp;&#x20;mv&#x20;/var/lib/aide/aide.db.new.gz&#x20;/var/lib/aide/aide.db.gz','[{\"cis\": [\"1.3.1\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6527,'Ensure&#x20;filesystem&#x20;integrity&#x20;is&#x20;regularly&#x20;checked','Periodic&#x20;checking&#x20;of&#x20;the&#x20;filesystem&#x20;integrity&#x20;is&#x20;needed&#x20;to&#x20;detect&#x20;changes&#x20;to&#x20;the&#x20;filesystem.','Periodic&#x20;file&#x20;checking&#x20;allows&#x20;the&#x20;system&#x20;administrator&#x20;to&#x20;determine&#x20;on&#x20;a&#x20;regular&#x20;basis&#x20;if&#x20;critical&#x20;files&#x20;have&#x20;been&#x20;changed&#x20;in&#x20;an&#x20;unauthorized&#x20;fashion.','','&#x20;Run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;cp&#x20;./config/aidecheck.service&#x20;/etc/systemd/system/aidecheck.service&#x20;&#x20;#&#x20;cp&#x20;./config/aidecheck.timer&#x20;/etc/systemd/system/aidecheck.timer&#x20;&#x20;&#x20;#&#x20;chmod&#x20;0644&#x20;/etc/systemd/system/aidecheck.*&#x20;&#x20;#&#x20;systemctl&#x20;reenable&#x20;aidecheck.timer&#x20;#&#x20;systemctl&#x20;restart&#x20;aidecheck.timer&#x20;#&#x20;systemctl&#x20;daemon-reload.&#x20;OR&#x20;Run&#x20;the&#x20;following&#x20;command:&#x20;crontab&#x20;-u&#x20;root&#x20;-e&#x20;//&#x20;Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;crontab:&#x20;0&#x20;5&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/aide&#x20;--check&#x20;&#x20;//&#x20;Notes:&#x20;The&#x20;checking&#x20;in&#x20;this&#x20;recommendation&#x20;occurs&#x20;every&#x20;day&#x20;at&#x20;5am.&#x20;Alter&#x20;the&#x20;frequency&#x20;and&#x20;time&#x20;of&#x20;the&#x20;checks&#x20;in&#x20;compliance&#x20;with&#x20;site&#x20;policy.&#x20;&#x20;','[{\"cis\": [\"1.3.2\"]}, {\"cis_csc\": [\"3.5\"]}, {\"pci_dss\": [\"11.5\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6528,'Ensure&#x20;permissions&#x20;on&#x20;bootloader&#x20;config&#x20;are&#x20;configured','The&#x20;grub&#x20;configuration&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;boot&#x20;settings&#x20;and&#x20;passwords&#x20;for&#x20;unlocking&#x20;boot&#x20;options.&#x20;The&#x20;grub&#x20;configuration&#x20;is&#x20;usually&#x20;grub.cfg&#x20;and&#x20;grubenv&#x20;stored&#x20;in&#x20;/boot/grub2/','Setting&#x20;the&#x20;permissions&#x20;to&#x20;read&#x20;and&#x20;write&#x20;for&#x20;root&#x20;only&#x20;prevents&#x20;non-root&#x20;users&#x20;from&#x20;seeing&#x20;the&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;them.&#x20;Non-root&#x20;users&#x20;who&#x20;read&#x20;the&#x20;boot&#x20;parameters&#x20;may&#x20;be&#x20;able&#x20;to&#x20;identify&#x20;weaknesses&#x20;in&#x20;security&#x20;upon&#x20;boot&#x20;and&#x20;be&#x20;able&#x20;to&#x20;exploit&#x20;them.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;your&#x20;grub&#x20;configuration:&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grub.cfg&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grub.cfg&#x20;#&#x20;chown&#x20;root:root&#x20;/boot/grub2/grubenv&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/boot/grub2/grubenv','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6529,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub2-setpassword:&#x20;#&#x20;grub2-setpassword&#x20;&#x20;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.5.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6530,'Ensure&#x20;authentication&#x20;required&#x20;for&#x20;single&#x20;user&#x20;mode','Single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;is&#x20;used&#x20;for&#x20;recovery&#x20;when&#x20;the&#x20;system&#x20;detects&#x20;an&#x20;issue&#x20;during&#x20;boot&#x20;or&#x20;by&#x20;manual&#x20;selection&#x20;from&#x20;the&#x20;bootloader.','Requiring&#x20;authentication&#x20;in&#x20;single&#x20;user&#x20;mode&#x20;&#40;rescue&#x20;mode&#41;&#x20;prevents&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;rebooting&#x20;the&#x20;system&#x20;into&#x20;single&#x20;user&#x20;to&#x20;gain&#x20;root&#x20;privileges&#x20;without&#x20;credentials.','','Edit&#x20;/usr/lib/systemd/system/rescue.service&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;line:&#x20;ExecStart=-/usr/lib/systemd/systemd-sulogin-shell&#x20;rescue&#x20;Edit&#x20;/usr/lib/systemd/system/emergency.service&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;line:&#x20;ExecStart=-/usr/lib/systemd/systemd-sulogin-shell&#x20;emergency','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6531,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0.&#x20;If&#x20;systemd-coredump&#x20;is&#x20;installed:&#x20;&#x20;edit&#x20;/etc/systemd/coredump.conf&#x20;and&#x20;add/modify&#x20;the&#x20;following&#x20;lines:&#x20;Storage=none&#x20;ProcessSizeMax=0&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;command:&#x20;#&#x20;systemctl&#x20;daemon-reload','[{\"cis\": [\"1.6.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6532,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.6.2\"]}, {\"cis_csc\": [\"8.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6533,'Ensure&#x20;SELinux&#x20;is&#x20;installed','SELinux&#x20;provides&#x20;Mandatory&#x20;Access&#x20;Control.','Without&#x20;a&#x20;Mandatory&#x20;Access&#x20;Control&#x20;system&#x20;installed&#x20;only&#x20;the&#x20;default&#x20;Discretionary&#x20;Access&#x20;Control&#x20;system&#x20;will&#x20;be&#x20;available.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;SELinux&#x20;:&#x20;#&#x20;dnf&#x20;install&#x20;libselinux','[{\"cis\": [\"1.7.1.1\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6534,'Ensure&#x20;SELinux&#x20;is&#x20;not&#x20;disabled&#x20;in&#x20;bootloader&#x20;configuration','Configure&#x20;SELINUX&#x20;to&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;and&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;not&#x20;been&#x20;overwritten&#x20;by&#x20;the&#x20;grub&#x20;boot&#x20;parameters.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;your&#x20;grub&#x20;configuration&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;not&#x20;overridden.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;remove&#x20;all&#x20;instances&#x20;of&#x20;selinux=0&#x20;and&#x20;enforcing=0&#x20;from&#x20;all&#x20;CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX_DEFAULT=&quot;quiet&quot;&#x20;GRUB_CMDLINE_LINUX=&quot;&quot;&#x20;&#x20;||&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"1.7.1.2\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6535,'Ensure&#x20;SELinux&#x20;policy&#x20;is&#x20;configured','Configure&#x20;SELinux&#x20;to&#x20;meet&#x20;or&#x20;exceed&#x20;the&#x20;default&#x20;targeted&#x20;policy,&#x20;which&#x20;constrains&#x20;daemons&#x20;and&#x20;system&#x20;software&#x20;only.','Security&#x20;configuration&#x20;requirements&#x20;vary&#x20;from&#x20;site&#x20;to&#x20;site.&#x20;Some&#x20;sites&#x20;may&#x20;mandate&#x20;a&#x20;policy&#x20;that&#x20;is&#x20;stricter&#x20;than&#x20;the&#x20;default&#x20;policy,&#x20;which&#x20;is&#x20;perfectly&#x20;acceptable.&#x20;This&#x20;item&#x20;is&#x20;intended&#x20;to&#x20;ensure&#x20;that&#x20;at&#x20;least&#x20;the&#x20;default&#x20;recommendations&#x20;are&#x20;met.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUXTYPE&#x20;parameter:&#x20;SELINUXTYPE=targeted','[{\"cis\": [\"1.7.1.3\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6536,'Ensure&#x20;the&#x20;SELinux&#x20;state&#x20;is&#x20;enforcing','Set&#x20;SELinux&#x20;to&#x20;enable&#x20;when&#x20;the&#x20;system&#x20;is&#x20;booted.','SELinux&#x20;must&#x20;be&#x20;enabled&#x20;at&#x20;boot&#x20;time&#x20;in&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;controls&#x20;it&#x20;provides&#x20;are&#x20;in&#x20;effect&#x20;at&#x20;all&#x20;times.','','Edit&#x20;the&#x20;/etc/selinux/config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;SELINUX&#x20;parameter:&#x20;SELINUX=enforcing','[{\"cis\": [\"1.7.1.4\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6537,'Ensure&#x20;no&#x20;unconfined&#x20;services&#x20;exist','Unconfined&#x20;processes&#x20;run&#x20;in&#x20;unconfined&#x20;domains','For&#x20;unconfined&#x20;processes,&#x20;SELinux&#x20;policy&#x20;rules&#x20;are&#x20;applied,&#x20;but&#x20;policy&#x20;rules&#x20;exist&#x20;that&#x20;allow&#x20;processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;almost&#x20;all&#x20;access.&#x20;Processes&#x20;running&#x20;in&#x20;unconfined&#x20;domains&#x20;fall&#x20;back&#x20;to&#x20;using&#x20;DAC&#x20;rules&#x20;exclusively.&#x20;If&#x20;an&#x20;unconfined&#x20;process&#x20;is&#x20;compromised,&#x20;SELinux&#x20;does&#x20;not&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;system&#x20;resources&#x20;and&#x20;data,&#x20;but&#x20;of&#x20;course,&#x20;DAC&#x20;rules&#x20;are&#x20;still&#x20;used.&#x20;SELinux&#x20;is&#x20;a&#x20;security&#x20;enhancement&#x20;on&#x20;top&#x20;of&#x20;DAC&#x20;rules&#x20;&ndash;&#x20;it&#x20;does&#x20;not&#x20;replace&#x20;them','','Investigate&#x20;any&#x20;unconfined&#x20;processes&#x20;found&#x20;during&#x20;the&#x20;audit&#x20;action.&#x20;They&#x20;may&#x20;need&#x20;to&#x20;have&#x20;an&#x20;existing&#x20;security&#x20;context&#x20;assigned&#x20;to&#x20;them&#x20;or&#x20;a&#x20;policy&#x20;built&#x20;for&#x20;them.&#x20;Notes:&#x20;Occasionally&#x20;certain&#x20;daemons&#x20;such&#x20;as&#x20;backup&#x20;or&#x20;centralized&#x20;management&#x20;software&#x20;may&#x20;require&#x20;running&#x20;unconfined.&#x20;Any&#x20;such&#x20;software&#x20;should&#x20;be&#x20;carefully&#x20;analyzed&#x20;and&#x20;documented&#x20;before&#x20;such&#x20;an&#x20;exception&#x20;is&#x20;made.','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6538,'Ensure&#x20;SETroubleshoot&#x20;is&#x20;not&#x20;installed','The&#x20;SETroubleshoot&#x20;service&#x20;notifies&#x20;desktop&#x20;users&#x20;of&#x20;SELinux&#x20;denials&#x20;through&#x20;a&#x20;user-friendly&#x20;interface.&#x20;The&#x20;service&#x20;provides&#x20;important&#x20;information&#x20;around&#x20;configuration&#x20;errors,&#x20;unauthorized&#x20;intrusions,&#x20;and&#x20;other&#x20;potential&#x20;errors.','The&#x20;SETroubleshoot&#x20;service&#x20;is&#x20;an&#x20;unnecessary&#x20;daemon&#x20;to&#x20;have&#x20;running&#x20;on&#x20;a&#x20;server,&#x20;especially&#x20;if&#x20;X&#x20;Windows&#x20;is&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;setroubleshoot:&#x20;#&#x20;dnf&#x20;remove&#x20;setroubleshoot','[{\"cis\": [\"1.7.1.6\"]}, {\"cis_csc\": [\"14.6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6539,'Ensure&#x20;the&#x20;MCS&#x20;Translation&#x20;Service&#x20;&#40;mcstrans&#41;&#x20;is&#x20;not&#x20;installed','The&#x20;mcstransd&#x20;daemon&#x20;provides&#x20;category&#x20;label&#x20;information&#x20;to&#x20;client&#x20;processes&#x20;requesting&#x20;information.&#x20;The&#x20;label&#x20;translations&#x20;are&#x20;defined&#x20;in&#x20;/etc/selinux/targeted/setrans.conf','Since&#x20;this&#x20;service&#x20;is&#x20;not&#x20;used&#x20;very&#x20;often,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;mcstrans:&#x20;#&#x20;dnf&#x20;remove&#x20;mcstrans','[{\"cis\": [\"1.7.1.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6540,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;FUTURE&#x20;or&#x20;FIPS','The&#x20;system-wide&#x20;crypto-policies&#x20;followed&#x20;by&#x20;the&#x20;crypto&#x20;core&#x20;components&#x20;allow&#x20;consistently&#x20;deprecating&#x20;and&#x20;disabling&#x20;algorithms&#x20;system-wide.&#x20;The&#x20;individual&#x20;policy&#x20;levels&#x20;&#40;DEFAULT,&#x20;LEGACY,&#x20;FUTURE,&#x20;and&#x20;FIPS&#41;&#x20;are&#x20;included&#x20;in&#x20;the&#x20;crypto-policies&#40;7&#41;&#x20;package.','If&#x20;the&#x20;Legacy&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;selected,&#x20;it&#x20;includes&#x20;support&#x20;for&#x20;TLS&#x20;1.0,&#x20;TLS&#x20;1.1,&#x20;and&#x20;SSH2&#x20;protocols&#x20;or&#x20;later.&#x20;The&#x20;algorithms&#x20;DSA,&#x20;3DES,&#x20;and&#x20;RC4&#x20;are&#x20;allowed,&#x20;while&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;1023-bits.&#x20;These&#x20;legacy&#x20;protocols&#x20;and&#x20;algorithms&#x20;can&#x20;make&#x20;the&#x20;system&#x20;vulnerable&#x20;to&#x20;attacks,&#x20;including&#x20;those&#x20;listed&#x20;in&#x20;RFC&#x20;7457&#x20;FUTURE:&#x20;Is&#x20;a&#x20;conservative&#x20;security&#x20;level&#x20;that&#x20;is&#x20;believed&#x20;to&#x20;withstand&#x20;any&#x20;near-term&#x20;future&#x20;attacks.&#x20;This&#x20;level&#x20;does&#x20;not&#x20;allow&#x20;the&#x20;use&#x20;of&#x20;SHA-1&#x20;in&#x20;signature&#x20;algorithms.&#x20;The&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;3071&#x20;bits.&#x20;The&#x20;level&#x20;provides&#x20;at&#x20;least&#x20;128-bit&#x20;security&#x20;FIPS:&#x20;Conforms&#x20;to&#x20;the&#x20;FIPS&#x20;140-2&#x20;requirements.&#x20;This&#x20;policy&#x20;is&#x20;used&#x20;internally&#x20;by&#x20;the&#x20;fips-mode-setup&#40;8&#41;&#x20;tool&#x20;which&#x20;can&#x20;switch&#x20;the&#x20;system&#x20;into&#x20;the&#x20;FIPS&#x20;140-2&#x20;compliance&#x20;mode.&#x20;The&#x20;level&#x20;provides&#x20;at&#x20;least&#x20;112-bit&#x20;security','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;change&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;FUTURE&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;switch&#x20;the&#x20;system&#x20;to&#x20;FIPS&#x20;mode,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;fips-mode-setup&#x20;--enable','[{\"cis\": [\"1.11\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6541,'Ensure&#x20;message&#x20;of&#x20;the&#x20;day&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/motd&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform&#x20;&#x20;&#x20;&#x20;OR&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;motd&#x20;is&#x20;not&#x20;used,&#x20;this&#x20;file&#x20;can&#x20;be&#x20;removed.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;motd&#x20;file:&#x20;#&#x20;rm&#x20;/etc/motd','[{\"cis\": [\"1.8.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(6542,'Ensure&#x20;local&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue','[{\"cis\": [\"1.8.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(6543,'Ensure&#x20;remote&#x20;login&#x20;warning&#x20;banner&#x20;is&#x20;configured&#x20;properly','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.&#x20;Unix-based&#x20;systems&#x20;have&#x20;typically&#x20;displayed&#x20;information&#x20;about&#x20;the&#x20;OS&#x20;release&#x20;and&#x20;patch&#x20;level&#x20;upon&#x20;logging&#x20;in&#x20;to&#x20;the&#x20;system.&#x20;This&#x20;information&#x20;can&#x20;be&#x20;useful&#x20;to&#x20;developers&#x20;who&#x20;are&#x20;developing&#x20;software&#x20;for&#x20;a&#x20;particular&#x20;OS&#x20;platform.&#x20;If&#x20;mingetty&#40;8&#41;&#x20;supports&#x20;the&#x20;following&#x20;options,&#x20;they&#x20;display&#x20;operating&#x20;system&#x20;information:&#x20;m&#x20;-&#x20;machine&#x20;architecture&#x20;&#x0d;&#x20;-&#x20;operating&#x20;system&#x20;release&#x20;s&#x20;-&#x20;operating&#x20;system&#x20;name&#x20;v&#x20;-&#x20;operating&#x20;system&#x20;version','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;Displaying&#x20;OS&#x20;and&#x20;patch&#x20;level&#x20;information&#x20;in&#x20;login&#x20;banners&#x20;also&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;providing&#x20;detailed&#x20;system&#x20;information&#x20;to&#x20;attackers&#x20;attempting&#x20;to&#x20;target&#x20;specific&#x20;exploits&#x20;of&#x20;a&#x20;system.&#x20;Authorized&#x20;users&#x20;can&#x20;easily&#x20;get&#x20;this&#x20;information&#x20;by&#x20;running&#x20;the&#x20;&quot;&#x20;uname&#x20;-a&#x20;&quot;&#x20;command&#x20;once&#x20;they&#x20;have&#x20;logged&#x20;in.','','Edit&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;with&#x20;the&#x20;appropriate&#x20;contents&#x20;according&#x20;to&#x20;your&#x20;site&#x20;policy,&#x20;remove&#x20;any&#x20;instances&#x20;of&#x20;m&#x20;,&#x20;&#x0d;&#x20;,&#x20;s&#x20;,&#x20;v&#x20;or&#x20;references&#x20;to&#x20;the&#x20;OS&#x20;platform:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(6544,'Ensure&#x20;permissions&#x20;on&#x20;/etc/motd&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;after&#x20;login&#x20;and&#x20;function&#x20;as&#x20;a&#x20;message&#x20;of&#x20;the&#x20;day&#x20;for&#x20;authenticated&#x20;users.','If&#x20;the&#x20;/etc/motd&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/motd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/motd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/motd','[{\"cis\": [\"1.8.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6545,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;local&#x20;terminals.','If&#x20;the&#x20;/etc/issue&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"1.8.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6546,'Ensure&#x20;permissions&#x20;on&#x20;/etc/issue.net&#x20;are&#x20;configured','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;are&#x20;displayed&#x20;to&#x20;users&#x20;prior&#x20;to&#x20;login&#x20;for&#x20;remote&#x20;connections&#x20;from&#x20;configured&#x20;services.','If&#x20;the&#x20;/etc/issue.net&#x20;file&#x20;does&#x20;not&#x20;have&#x20;the&#x20;correct&#x20;ownership&#x20;it&#x20;could&#x20;be&#x20;modified&#x20;by&#x20;unauthorized&#x20;users&#x20;with&#x20;incorrect&#x20;or&#x20;misleading&#x20;information.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/issue.net:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue.net&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue.net','[{\"cis\": [\"1.8.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6547,'Ensure&#x20;GDM&#x20;login&#x20;banner&#x20;is&#x20;configured','GDM&#x20;is&#x20;the&#x20;GNOME&#x20;Display&#x20;Manager&#x20;which&#x20;handles&#x20;graphical&#x20;login&#x20;for&#x20;GNOME&#x20;based&#x20;systems.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/gdm3/greeter.dconf-defaults&#x20;and&#x20;add&#x20;the&#x20;following&#x20;in&#x20;3&#x20;lines:&#x20;&#40;1&#41;&#x20;[org/gnome/login-screen]&#x20;&#x20;&#x20;&#x20;&#40;2&#41;&#x20;banner-message-enable=true&#x20;&#x20;&#x20;&#40;3&#41;&#x20;banner-message-text=&#039;Authorized&#x20;uses&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&#039;','[{\"cis\": [\"1.8.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"7.1\"]}, {\"tsc\": [\"CC6.4\"]}]'),(6548,'Ensure&#x20;updates,&#x20;patches,&#x20;and&#x20;additional&#x20;security&#x20;software&#x20;are&#x20;installed','Periodically&#x20;patches&#x20;are&#x20;released&#x20;for&#x20;included&#x20;software&#x20;either&#x20;due&#x20;to&#x20;security&#x20;flaws&#x20;or&#x20;to&#x20;include&#x20;additional&#x20;functionality.','Newer&#x20;patches&#x20;may&#x20;contain&#x20;security&#x20;enhancements&#x20;that&#x20;would&#x20;not&#x20;be&#x20;available&#x20;through&#x20;the&#x20;latest&#x20;full&#x20;update.&#x20;As&#x20;a&#x20;result,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;latest&#x20;software&#x20;patches&#x20;be&#x20;used&#x20;to&#x20;take&#x20;advantage&#x20;of&#x20;the&#x20;latest&#x20;functionality.&#x20;As&#x20;with&#x20;any&#x20;software&#x20;installation,&#x20;organizations&#x20;need&#x20;to&#x20;determine&#x20;if&#x20;a&#x20;given&#x20;update&#x20;meets&#x20;their&#x20;requirements&#x20;and&#x20;verify&#x20;the&#x20;compatibility&#x20;and&#x20;supportability&#x20;of&#x20;any&#x20;additional&#x20;software&#x20;against&#x20;the&#x20;update&#x20;revision&#x20;that&#x20;is&#x20;selected.','','Use&#x20;your&#x20;package&#x20;manager&#x20;to&#x20;update&#x20;all&#x20;packages&#x20;on&#x20;the&#x20;system&#x20;according&#x20;to&#x20;site&#x20;policy.&#x20;The&#x20;following&#x20;command&#x20;will&#x20;install&#x20;all&#x20;available&#x20;security&#x20;updates:&#x20;#&#x20;dnf&#x20;update&#x20;--security&#x20;.&#x20;Site&#x20;policy&#x20;may&#x20;mandate&#x20;a&#x20;testing&#x20;period&#x20;before&#x20;install&#x20;onto&#x20;production&#x20;systems&#x20;for&#x20;available&#x20;updates.&#x20;The&#x20;audit&#x20;and&#x20;remediation&#x20;here&#x20;only&#x20;cover&#x20;security&#x20;updates.&#x20;Non-security&#x20;updates&#x20;can&#x20;be&#x20;audited&#x20;with&#x20;and&#x20;comparing&#x20;against&#x20;site&#x20;policy:&#x20;#&#x20;dnf&#x20;check-update','[{\"cis\": [\"1.9\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"5.2\"]}, {\"nist_800_53\": [\"AU.6\", \"SI.4\"]}, {\"gpg_13\": [\"4.2\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"A1.2\"]}]'),(6549,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;not&#x20;legacy','The&#x20;system-wide&#x20;crypto-policies&#x20;followed&#x20;by&#x20;the&#x20;crypto&#x20;core&#x20;components&#x20;allow&#x20;consistently&#x20;deprecating&#x20;and&#x20;disabling&#x20;algorithms&#x20;system-wide.&#x20;The&#x20;individual&#x20;policy&#x20;levels&#x20;&#40;DEFAULT,&#x20;LEGACY,&#x20;FUTURE,&#x20;and&#x20;FIPS&#41;&#x20;are&#x20;included&#x20;in&#x20;the&#x20;crypto-policies&#40;7&#41;&#x20;package.','If&#x20;the&#x20;Legacy&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;selected,&#x20;it&#x20;includes&#x20;support&#x20;for&#x20;TLS&#x20;1.0,&#x20;TLS&#x20;1.1,&#x20;and&#x20;SSH2&#x20;protocols&#x20;or&#x20;later.&#x20;The&#x20;algorithms&#x20;DSA,&#x20;3DES,&#x20;and&#x20;RC4&#x20;are&#x20;allowed,&#x20;while&#x20;RSA&#x20;and&#x20;Diffie-Hellman&#x20;parameters&#x20;are&#x20;accepted&#x20;if&#x20;larger&#x20;than&#x20;1023-bits.&#x20;These&#x20;legacy&#x20;protocols&#x20;and&#x20;algorithms&#x20;can&#x20;make&#x20;the&#x20;system&#x20;vulnerable&#x20;to&#x20;attacks,&#x20;including&#x20;those&#x20;listed&#x20;in&#x20;RFC&#x20;7457','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;change&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;&lt;CRYPTO&#x20;POLICY&gt;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Example:&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;update-crypto-policies&#x20;--set&#x20;DEFAULT&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;make&#x20;the&#x20;updated&#x20;system-wide&#x20;crypto&#x20;policy&#x20;active&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;update-crypto-policies','[{\"cis\": [\"1.10\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6550,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;installed','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;xinetd:&#x20;#&#x20;dnf&#x20;remove&#x20;xinetd','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6551,'Ensure&#x20;time&#x20;synchronization&#x20;is&#x20;in&#x20;use','System&#x20;time&#x20;should&#x20;be&#x20;synchronized&#x20;between&#x20;all&#x20;systems&#x20;in&#x20;an&#x20;environment.&#x20;This&#x20;is&#x20;typically&#x20;done&#x20;by&#x20;establishing&#x20;an&#x20;authoritative&#x20;time&#x20;server&#x20;or&#x20;set&#x20;of&#x20;servers&#x20;and&#x20;having&#x20;all&#x20;systems&#x20;synchronize&#x20;their&#x20;clocks&#x20;to&#x20;them.','Time&#x20;synchronization&#x20;is&#x20;important&#x20;to&#x20;support&#x20;time&#x20;sensitive&#x20;security&#x20;mechanisms&#x20;like&#x20;Kerberos&#x20;and&#x20;also&#x20;ensures&#x20;log&#x20;files&#x20;have&#x20;consistent&#x20;time&#x20;records&#x20;across&#x20;the&#x20;enterprise,&#x20;which&#x20;aids&#x20;in&#x20;forensic&#x20;investigations.','','On&#x20;physical&#x20;systems&#x20;or&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;not&#x20;available&#x20;install&#x20;chrony:&#x20;#&#x20;dnf&#x20;install&#x20;chrony&#x20;&#x20;On&#x20;virtual&#x20;systems&#x20;where&#x20;host&#x20;based&#x20;time&#x20;synchronization&#x20;is&#x20;available&#x20;consult&#x20;your&#x20;virtualization&#x20;software&#x20;documentation&#x20;and&#x20;verify&#x20;that&#x20;host&#x20;based&#x20;synchronization&#x20;is&#x20;in&#x20;use.','[{\"cis\": [\"2.2.2.1\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"10.4\"]}, {\"nist_800_53\": [\"AU.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6552,'Ensure&#x20;chrony&#x20;is&#x20;configured','chrony&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://www.ntp.org.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.','If&#x20;chrony&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/chrony.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;&#x20;&#x20;Configure&#x20;chrony&#x20;to&#x20;run&#x20;as&#x20;the&#x20;chrony&#x20;user','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6553,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;dnf&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6554,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsync:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rsyncd','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6555,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6556,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;snmpd','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6557,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;squid','[{\"cis\": [\"2.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6558,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;smb','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6559,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dovecot','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6560,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;httpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;httpd','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6561,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;vsftpd','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6562,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;named','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6563,'Ensure&#x20;NFS&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;NFS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;nfs','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6564,'Ensure&#x20;RPC&#x20;is&#x20;not&#x20;enabled','The&#x20;rpcbind&#x20;service&#x20;maps&#x20;Remote&#x20;Procedure&#x20;Call&#x20;&#40;RPC&#41;&#x20;services&#x20;to&#x20;the&#x20;ports&#x20;on&#x20;which&#x20;they&#x20;listen.&#x20;RPC&#x20;processes&#x20;notify&#x20;rpcbind&#x20;when&#x20;they&#x20;start,&#x20;registering&#x20;the&#x20;ports&#x20;they&#x20;are&#x20;listening&#x20;on&#x20;and&#x20;the&#x20;RPC&#x20;program&#x20;numbers&#x20;they&#x20;expect&#x20;to&#x20;serve.&#x20;The&#x20;client&#x20;system&#x20;then&#x20;contacts&#x20;rpcbind&#x20;on&#x20;the&#x20;server&#x20;with&#x20;a&#x20;particular&#x20;RPC&#x20;program&#x20;number.&#x20;The&#x20;rpcbind&#x20;service&#x20;redirects&#x20;the&#x20;client&#x20;to&#x20;the&#x20;proper&#x20;port&#x20;number&#x20;so&#x20;it&#x20;can&#x20;communicate&#x20;with&#x20;the&#x20;requested&#x20;service.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;require&#x20;rpc&#x20;based&#x20;services,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;rpcbind&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6565,'Ensure&#x20;LDAP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;slapd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;slapd','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6566,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;dhcpd','[{\"cis\": [\"2.2.15\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6567,'Ensure&#x20;CUPS&#x20;is&#x20;not&#x20;enabled','The&#x20;Common&#x20;Unix&#x20;Print&#x20;System&#x20;&#40;CUPS&#41;&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;print&#x20;to&#x20;both&#x20;local&#x20;and&#x20;network&#x20;printers.&#x20;A&#x20;system&#x20;running&#x20;CUPS&#x20;can&#x20;also&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;remote&#x20;systems&#x20;and&#x20;print&#x20;them&#x20;to&#x20;local&#x20;printers.&#x20;It&#x20;also&#x20;provides&#x20;a&#x20;web&#x20;based&#x20;remote&#x20;administration&#x20;capability.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;need&#x20;to&#x20;print&#x20;jobs&#x20;or&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;systems,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;CUPS&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cups&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;cups','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6568,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv:&#x20;#&#x20;systemctl&#x20;--now&#x20;disable&#x20;ypserv','[{\"cis\": [\"2.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6569,'Ensure&#x20;mail&#x20;transfer&#x20;agent&#x20;is&#x20;configured&#x20;for&#x20;local-only&#x20;mode','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','Mail&#x20;Transfer&#x20;Agents&#x20;&#40;MTA&#41;,&#x20;such&#x20;as&#x20;sendmail&#x20;and&#x20;Postfix,&#x20;are&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;incoming&#x20;mail&#x20;and&#x20;transfer&#x20;the&#x20;messages&#x20;to&#x20;the&#x20;appropriate&#x20;user&#x20;or&#x20;mail&#x20;server.&#x20;If&#x20;the&#x20;system&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;MTA&#x20;be&#x20;configured&#x20;to&#x20;only&#x20;process&#x20;local&#x20;mail.','','Edit&#x20;/etc/postfix/main.cf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;RECEIVING&#x20;MAIL&#x20;section.&#x20;If&#x20;the&#x20;line&#x20;already&#x20;exists,&#x20;change&#x20;it&#x20;to&#x20;look&#x20;like&#x20;the&#x20;line&#x20;below:&#x20;inet_interfaces&#x20;=&#x20;loopback-only&#x20;.&#x20;Restart&#x20;postfix:&#x20;#&#x20;systemctl&#x20;restart&#x20;postfix','[{\"cis\": [\"2.2.18\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AC.4\", \"SC.7\"]}, {\"tsc\": [\"CC5.2\", \"CC6.4\", \"CC6.6\", \"CC6.7\"]}]'),(6570,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind:&#x20;#&#x20;dnf&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6571,'Ensure&#x20;telnet&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;telnet&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;client,&#x20;which&#x20;allows&#x20;users&#x20;to&#x20;start&#x20;connections&#x20;to&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security&#x20;and&#x20;is&#x20;included&#x20;in&#x20;most&#x20;Linux&#x20;distributions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;telnet&#x20;:&#x20;#&#x20;dnf&#x20;remove&#x20;telnet','[{\"cis\": [\"2.3.2\"]}, {\"cis_csc\": [\"4.5\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6572,'Ensure&#x20;LDAP&#x20;client&#x20;is&#x20;not&#x20;installed','The&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;&#x20;was&#x20;introduced&#x20;as&#x20;a&#x20;replacement&#x20;for&#x20;NIS/YP.&#x20;It&#x20;is&#x20;a&#x20;service&#x20;that&#x20;provides&#x20;a&#x20;method&#x20;for&#x20;looking&#x20;up&#x20;information&#x20;from&#x20;a&#x20;central&#x20;database.','If&#x20;the&#x20;system&#x20;will&#x20;not&#x20;need&#x20;to&#x20;act&#x20;as&#x20;an&#x20;LDAP&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;software&#x20;be&#x20;removed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;openldap-clients&#x20;:&#x20;#&#x20;dnf&#x20;remove&#x20;openldap-clients','[{\"cis\": [\"2.3.3\"]}, {\"cis_csc\": [\"2.6\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6573,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;and&#x20;net.ipv6.conf.all.forwarding&#x20;flags&#x20;are&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flags&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.ip_forwards*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;&#x20;&quot;s/^s*&#40;net.ipv4.ip_forwards*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;&#x20;&#x20;&#x20;&amp;&amp;&#x20;&#x20;&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv6.conf.all.forwardings*=s*1&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv6.conf.all.forwardings*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.forwarding=0;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6574,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0&#x20;.Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6575,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route,&#x20;net.ipv4.conf.default.accept_source_route,&#x20;net.ipv6.conf.all.accept_source_route&#x20;and&#x20;net.ipv6.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.default.accept_source_route&#x20;=&#x20;0&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_source_route=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6576,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;and&#x20;net.ipv6.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0&#x20;&#x20;net.ipv6.conf.all.accept_redirects&#x20;=&#x20;0&#x20;net.ipv6.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_redirects=0;&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;and&#x20;#&#x20;&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6577,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;and&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6578,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;and&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6579,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.icmp_echo_ignore_broadcastss*=s*0&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;&quot;s/^s*&#40;net.ipv4.icmp_echo_ignore_broadcastss*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.icmp_echo_ignore_broadcasts=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6580,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameters&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.icmp_ignore_bogus_error_responsess*=s*0&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.icmp_ignore_bogus_error_responsess*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&quot;','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6581,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.conf.all.rp_filters*=s*0&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.net.ipv4.conf.all.rp_filters*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1&#x20;.Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.default.rp_filter=1&#x20;and&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6582,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;restore&#x20;the&#x20;default&#x20;parameter&#x20;and&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;grep&#x20;-Els&#x20;&quot;^s*net.ipv4.tcp_syncookiess*=s*[02]*&quot;&#x20;/etc/sysctl.conf&#x20;/etc/sysctl.d&#47;&#42;.conf&#x20;/usr/lib/sysctl.d&#47;&#42;.conf&#x20;/run/sysctl.d&#47;&#42;.conf&#x20;|&#x20;while&#x20;read&#x20;filename;&#x20;do&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;net.ipv4.tcp_syncookiess*&#41;&#40;=&#41;&#40;s*S+&#x08;&#41;.*$/#&#x20;*REMOVED*&#x20;1/&quot;&#x20;$filename;&#x20;done;&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1;&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6583,'Ensure&#x20;IPv6&#x20;router&#x20;advertisements&#x20;are&#x20;not&#x20;accepted','This&#x20;setting&#x20;disables&#x20;the&#x20;system&#039;s&#x20;ability&#x20;to&#x20;accept&#x20;IPv6&#x20;router&#x20;advertisements.','It&#x20;is&#x20;recommended&#x20;that&#x20;systems&#x20;do&#x20;not&#x20;accept&#x20;router&#x20;advertisements&#x20;as&#x20;they&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;routing&#x20;traffic&#x20;to&#x20;compromised&#x20;machines.&#x20;Setting&#x20;hard&#x20;routes&#x20;within&#x20;the&#x20;system&#x20;&#40;usually&#x20;a&#x20;single&#x20;default&#x20;route&#x20;to&#x20;a&#x20;trusted&#x20;router&#41;&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;bad&#x20;routes.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv6.conf.all.accept_ra&#x20;=&#x20;0&#x20;and&#x20;net.ipv6.conf.default.accept_ra&#x20;=&#x20;0&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.all.accept_ra=0;&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.conf.default.accept_ra=0&#x20;and&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv6.route.flush=1;','[{\"cis\": [\"3.2.9\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6584,'Ensure&#x20;DCCP&#x20;is&#x20;disabled','The&#x20;Datagram&#x20;Congestion&#x20;Control&#x20;Protocol&#x20;&#40;DCCP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;that&#x20;supports&#x20;streaming&#x20;media&#x20;and&#x20;telephony.&#x20;DCCP&#x20;provides&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;congestion&#x20;control,&#x20;without&#x20;having&#x20;to&#x20;do&#x20;it&#x20;at&#x20;the&#x20;application&#x20;layer,&#x20;but&#x20;does&#x20;not&#x20;provide&#x20;in-sequence&#x20;delivery','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;drivers&#x20;not&#x20;be&#x20;installed&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf.&#x20;Example:&#x20;vim&#x20;/etc/modprobe.d/dccp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;dccp&#x20;/bin/true','[{\"cis\": [\"3.3.1\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6585,'Ensure&#x20;SCTP&#x20;is&#x20;disabled','The&#x20;Stream&#x20;Control&#x20;Transmission&#x20;Protocol&#x20;&#40;SCTP&#41;&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;used&#x20;to&#x20;support&#x20;message&#x20;oriented&#x20;communication,&#x20;with&#x20;several&#x20;streams&#x20;of&#x20;messages&#x20;in&#x20;one&#x20;connection.&#x20;It&#x20;serves&#x20;a&#x20;similar&#x20;function&#x20;as&#x20;TCP&#x20;and&#x20;UDP,&#x20;incorporating&#x20;features&#x20;of&#x20;both.&#x20;It&#x20;is&#x20;message-oriented&#x20;like&#x20;UDP,&#x20;and&#x20;ensures&#x20;reliable&#x20;in-sequence&#x20;transport&#x20;of&#x20;messages&#x20;with&#x20;congestion&#x20;control&#x20;like&#x20;TCP.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/sctp.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;sctp&#x20;/bin/true','[{\"cis\": [\"3.3.2\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6586,'Ensure&#x20;RDS&#x20;is&#x20;disabled','The&#x20;Reliable&#x20;Datagram&#x20;Sockets&#x20;&#40;RDS&#41;&#x20;protocol&#x20;is&#x20;a&#x20;transport&#x20;layer&#x20;protocol&#x20;designed&#x20;to&#x20;provide&#x20;low-latency,&#x20;high-bandwidth&#x20;communications&#x20;between&#x20;cluster&#x20;nodes.&#x20;It&#x20;was&#x20;developed&#x20;by&#x20;the&#x20;Oracle&#x20;Corporation.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/rds.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;rds&#x20;/bin/true','[{\"cis\": [\"3.3.3\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6587,'Ensure&#x20;TIPC&#x20;is&#x20;disabled','The&#x20;Transparent&#x20;Inter-Process&#x20;Communication&#x20;&#40;TIPC&#41;&#x20;protocol&#x20;is&#x20;designed&#x20;to&#x20;provide&#x20;communication&#x20;between&#x20;cluster&#x20;nodes.','If&#x20;the&#x20;protocol&#x20;is&#x20;not&#x20;being&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;kernel&#x20;module&#x20;not&#x20;be&#x20;loaded,&#x20;disabling&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/modprobe.d/&#x20;directory&#x20;ending&#x20;in&#x20;.conf&#x20;.Example:&#x20;vim&#x20;/etc/modprobe.d/tipc.conf&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;install&#x20;tipc&#x20;/bin/true','[{\"cis\": [\"3.3.4\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6588,'Disable&#x20;IPv6','Although&#x20;IPv6&#x20;has&#x20;many&#x20;advantages&#x20;over&#x20;IPv4,&#x20;not&#x20;all&#x20;organizations&#x20;have&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;configurations&#x20;implemented.','If&#x20;IPv6&#x20;or&#x20;dual&#x20;stack&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;IPv6&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;ipv6.disable=1&#x20;to&#x20;the&#x20;GRUB_CMDLINE_LINUX&#x20;parameters:&#x20;GRUB_CMDLINE_LINUX=&quot;ipv6.disable=1&quot;&#x20;.Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"3.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.6\", \"CC5.2\"]}]'),(6589,'Ensure&#x20;a&#x20;Firewall&#x20;package&#x20;is&#x20;installed','A&#x20;Firewall&#x20;package&#x20;should&#x20;be&#x20;selected.&#x20;Most&#x20;firewall&#x20;configuration&#x20;utilities&#x20;operate&#x20;as&#x20;a&#x20;front&#x20;end&#x20;to&#x20;nftables&#x20;or&#x20;iptables.','A&#x20;Firewall&#x20;package&#x20;is&#x20;required&#x20;for&#x20;firewall&#x20;management&#x20;and&#x20;configuration.','','Run&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;install&#x20;a&#x20;Firewall&#x20;package.&#x20;For&#x20;firewalld:&#x20;dnf&#x20;install&#x20;firewalld&#x20;.For&#x20;nftables:&#x20;#&#x20;dnf&#x20;install&#x20;nftables.&#x20;For&#x20;iptables:&#x20;#&#x20;dnf&#x20;install&#x20;iptables','[{\"cis\": [\"3.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6590,'Ensure&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;and&#x20;running','Ensure&#x20;that&#x20;the&#x20;firewalld&#x20;service&#x20;is&#x20;enabled&#x20;to&#x20;protect&#x20;your&#x20;system','firewalld&#x20;&#40;Dynamic&#x20;Firewall&#x20;Manager&#41;&#x20;tool&#x20;provides&#x20;a&#x20;dynamically&#x20;managed&#x20;firewall.&#x20;The&#x20;tool&#x20;enables&#x20;network/firewall&#x20;zones&#x20;to&#x20;define&#x20;the&#x20;trust&#x20;level&#x20;of&#x20;network&#x20;connections&#x20;and/or&#x20;interfaces.&#x20;It&#x20;has&#x20;support&#x20;both&#x20;for&#x20;IPv4&#x20;and&#x20;IPv6&#x20;firewall&#x20;settings.&#x20;Also,&#x20;it&#x20;supports&#x20;Ethernet&#x20;bridges&#x20;and&#x20;allow&#x20;you&#x20;to&#x20;separate&#x20;between&#x20;runtime&#x20;and&#x20;permanent&#x20;configuration&#x20;options.&#x20;Finally,&#x20;it&#x20;supports&#x20;an&#x20;interface&#x20;for&#x20;services&#x20;or&#x20;applications&#x20;to&#x20;add&#x20;firewall&#x20;rules&#x20;directly','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;and&#x20;start&#x20;firewalld:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;firewalld','[{\"cis\": [\"3.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6591,'Ensure&#x20;nftables&#x20;is&#x20;not&#x20;enabled','nftables&#x20;is&#x20;a&#x20;subsystem&#x20;of&#x20;the&#x20;Linux&#x20;kernel&#x20;providing&#x20;filtering&#x20;and&#x20;classification&#x20;of&#x20;network&#x20;packets/datagrams/frames&#x20;and&#x20;is&#x20;the&#x20;successor&#x20;to&#x20;iptables.&#x20;nftables&#x20;are&#x20;installed&#x20;as&#x20;a&#x20;dependency&#x20;with&#x20;firewalld.','Running&#x20;firewalld&#x20;and&#x20;nftables&#x20;concurrently&#x20;may&#x20;lead&#x20;to&#x20;conflict,&#x20;therefore&#x20;nftables&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;when&#x20;using&#x20;firewalld.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;mask&#x20;and&#x20;stop&#x20;nftables:&#x20;systemctl&#x20;--now&#x20;mask&#x20;nftables','[{\"cis\": [\"3.4.2.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6592,'Ensure&#x20;iptables&#x20;is&#x20;not&#x20;enabled','IPtables&#x20;is&#x20;an&#x20;application&#x20;that&#x20;allows&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;configure&#x20;the&#x20;IPv4&#x20;and&#x20;IPv6&#x20;tables,&#x20;chains&#x20;and&#x20;rules&#x20;provided&#x20;by&#x20;the&#x20;Linux&#x20;kernel&#x20;firewall.&#x20;IPtables&#x20;is&#x20;installed&#x20;as&#x20;a&#x20;dependency&#x20;with&#x20;firewalld.','Running&#x20;firewalld&#x20;and&#x20;IPtables&#x20;concurrently&#x20;may&#x20;lead&#x20;to&#x20;conflict,&#x20;therefore&#x20;IPtables&#x20;should&#x20;be&#x20;stopped&#x20;and&#x20;masked&#x20;when&#x20;using&#x20;firewalld.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;stop&#x20;and&#x20;mask&#x20;iptables:&#x20;systemctl&#x20;--now&#x20;mask&#x20;iptables','[{\"cis\": [\"3.4.2.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6593,'Ensure&#x20;iptables&#x20;are&#x20;flushed','nftables&#x20;is&#x20;a&#x20;replacement&#x20;for&#x20;iptables,&#x20;ip6tables,&#x20;ebtables&#x20;and&#x20;arptables','It&#x20;is&#x20;possible&#x20;to&#x20;mix&#x20;iptables&#x20;and&#x20;nftables.&#x20;However,&#x20;this&#x20;increases&#x20;complexity&#x20;and&#x20;also&#x20;the&#x20;chance&#x20;to&#x20;introduce&#x20;errors.&#x20;For&#x20;simplicity&#x20;flush&#x20;out&#x20;all&#x20;iptables&#x20;rules,&#x20;and&#x20;ensure&#x20;it&#x20;is&#x20;not&#x20;loaded.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;flush&#x20;iptables:&#x20;For&#x20;iptables:&#x20;#&#x20;iptables&#x20;-F&#x20;and&#x20;For&#x20;ip6tables:&#x20;#&#x20;ip6tables&#x20;-F','[{\"cis\": [\"3.4.3.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6594,'Ensure&#x20;a&#x20;table&#x20;exists','Tables&#x20;hold&#x20;chains.&#x20;Each&#x20;table&#x20;only&#x20;has&#x20;one&#x20;address&#x20;family&#x20;and&#x20;only&#x20;applies&#x20;to&#x20;packets&#x20;of&#x20;this&#x20;family.&#x20;Tables&#x20;can&#x20;have&#x20;one&#x20;of&#x20;five&#x20;families.','nftables&#x20;doesn&#039;t&#x20;have&#x20;any&#x20;default&#x20;tables.&#x20;Without&#x20;a&#x20;table&#x20;being&#x20;build,&#x20;nftables&#x20;will&#x20;not&#x20;filter&#x20;network&#x20;traffic.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;table&#x20;in&#x20;nftables:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;.Example:&#x20;#&#x20;nft&#x20;create&#x20;table&#x20;inet&#x20;filter','[{\"cis\": [\"3.4.3.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6595,'Ensure&#x20;base&#x20;chains&#x20;exist','Chains&#x20;are&#x20;containers&#x20;for&#x20;rules.&#x20;They&#x20;exist&#x20;in&#x20;two&#x20;kinds,&#x20;base&#x20;chains&#x20;and&#x20;regular&#x20;chains.&#x20;A&#x20;base&#x20;chain&#x20;is&#x20;an&#x20;entry&#x20;point&#x20;for&#x20;packets&#x20;from&#x20;the&#x20;networking&#x20;stack,&#x20;a&#x20;regular&#x20;chain&#x20;may&#x20;be&#x20;used&#x20;as&#x20;jump&#x20;target&#x20;and&#x20;is&#x20;used&#x20;for&#x20;better&#x20;rule&#x20;organization.','If&#x20;a&#x20;base&#x20;chain&#x20;doesn&#039;t&#x20;exist&#x20;with&#x20;a&#x20;hook&#x20;for&#x20;input,&#x20;forward,&#x20;and&#x20;delete,&#x20;packets&#x20;that&#x20;would&#x20;flow&#x20;through&#x20;those&#x20;chains&#x20;will&#x20;not&#x20;be&#x20;touched&#x20;by&#x20;nftables.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;the&#x20;base&#x20;chains:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;&lt;table&#x20;name&gt;&#x20;&lt;base&#x20;chain&#x20;name&gt;&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;&lt;&#40;input|forward|output&#41;&gt;&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;input&#x20;priority&#x20;0&#x20;;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;forward&#x20;priority&#x20;0;&#x20;}&#x20;#&#x20;nft&#x20;create&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;type&#x20;filter&#x20;hook&#x20;output&#x20;priority&#x20;0&#x20;;&#x20;}','[{\"cis\": [\"3.4.3.3\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6596,'Ensure&#x20;default&#x20;deny&#x20;firewall&#x20;policy','Base&#x20;chain&#x20;policy&#x20;is&#x20;the&#x20;default&#x20;verdict&#x20;that&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;packets&#x20;reaching&#x20;the&#x20;end&#x20;of&#x20;the&#x20;chain.','There&#x20;are&#x20;two&#x20;policies:&#x20;accept&#x20;&#40;Default&#41;&#x20;and&#x20;drop.&#x20;If&#x20;the&#x20;policy&#x20;is&#x20;set&#x20;to&#x20;accept&#x20;,&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied&#x20;and&#x20;the&#x20;packet&#x20;will&#x20;continue&#x20;transversing&#x20;the&#x20;network&#x20;stack.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;command&#x20;for&#x20;the&#x20;base&#x20;chains&#x20;with&#x20;the&#x20;input,&#x20;forward,&#x20;and&#x20;output&#x20;hooks&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;nft&#x20;chain&#x20;&lt;table&#x20;family&gt;&#x20;&lt;table&#x20;name&gt;&#x20;&lt;chain&#x20;name&gt;&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;.&#x20;Example:&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;input&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;;&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;forward&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}&#x20;and&#x20;#&#x20;nft&#x20;chain&#x20;inet&#x20;filter&#x20;output&#x20;{&#x20;policy&#x20;drop&#x20;;&#x20;}','[{\"cis\": [\"3.4.3.6\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6597,'Ensure&#x20;nftables&#x20;service&#x20;is&#x20;enabled','The&#x20;nftables&#x20;service&#x20;allows&#x20;for&#x20;the&#x20;loading&#x20;of&#x20;nftables&#x20;rulesets&#x20;during&#x20;boot,&#x20;or&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','The&#x20;nftables&#x20;service&#x20;restores&#x20;the&#x20;nftables&#x20;rules&#x20;from&#x20;the&#x20;rules&#x20;files&#x20;referenced&#x20;in&#x20;the&#x20;/etc/sysconfig/nftables.conf&#x20;file&#x20;during&#x20;boot&#x20;or&#x20;the&#x20;starting&#x20;of&#x20;the&#x20;nftables&#x20;service.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;nftables&#x20;service:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;nftables','[{\"cis\": [\"3.4.3.7\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6598,'Configure&#x20;IPv4&#x20;iptables','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;iptables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;iptables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.4.4.1.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6599,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;127.0.0.0/8&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;iptables&#x20;-A&#x20;INPUT&#x20;-s&#x20;127.0.0.0/8&#x20;-j&#x20;DROP','[{\"cis\": [\"3.4.4.1.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6600,'Ensure&#x20;IPv6&#x20;default&#x20;deny&#x20;firewall&#x20;policy','A&#x20;default&#x20;deny&#x20;all&#x20;policy&#x20;on&#x20;connections&#x20;ensures&#x20;that&#x20;any&#x20;unconfigured&#x20;network&#x20;usage&#x20;will&#x20;be&#x20;rejected.','With&#x20;a&#x20;default&#x20;accept&#x20;policy&#x20;the&#x20;firewall&#x20;will&#x20;accept&#x20;any&#x20;packet&#x20;that&#x20;is&#x20;not&#x20;configured&#x20;to&#x20;be&#x20;denied.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;white&#x20;list&#x20;acceptable&#x20;usage&#x20;than&#x20;to&#x20;black&#x20;list&#x20;unacceptable&#x20;usage.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;a&#x20;default&#x20;DROP&#x20;policy:&#x20;#&#x20;ip6tables&#x20;-P&#x20;INPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;OUTPUT&#x20;DROP;&#x20;#&#x20;ip6tables&#x20;-P&#x20;FORWARD&#x20;DROP','[{\"cis\": [\"3.4.4.2.1\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6601,'Ensure&#x20;loopback&#x20;traffic&#x20;is&#x20;configured','Configure&#x20;the&#x20;loopback&#x20;interface&#x20;to&#x20;accept&#x20;traffic.&#x20;Configure&#x20;all&#x20;other&#x20;interfaces&#x20;to&#x20;deny&#x20;traffic&#x20;to&#x20;the&#x20;loopback&#x20;network&#x20;&#40;::1&#41;.','Loopback&#x20;traffic&#x20;is&#x20;generated&#x20;between&#x20;processes&#x20;on&#x20;machine&#x20;and&#x20;is&#x20;typically&#x20;critical&#x20;to&#x20;operation&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;loopback&#x20;interface&#x20;is&#x20;the&#x20;only&#x20;place&#x20;that&#x20;loopback&#x20;network&#x20;&#40;::1&#41;&#x20;traffic&#x20;should&#x20;be&#x20;seen,&#x20;all&#x20;other&#x20;interfaces&#x20;should&#x20;ignore&#x20;traffic&#x20;on&#x20;this&#x20;network&#x20;as&#x20;an&#x20;anti-spoofing&#x20;measure.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;implement&#x20;the&#x20;loopback&#x20;rules:&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-i&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;OUTPUT&#x20;-o&#x20;lo&#x20;-j&#x20;ACCEPT&#x20;#&#x20;ip6tables&#x20;-A&#x20;INPUT&#x20;-s&#x20;::1&#x20;-j&#x20;DROP','[{\"cis\": [\"3.4.4.2.2\"]}, {\"cis_csc\": [\"9.4\"]}, {\"pci_dss\": [\"1.2.1\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6602,'Ensure&#x20;wireless&#x20;interfaces&#x20;are&#x20;disabled','Wireless&#x20;networking&#x20;is&#x20;used&#x20;when&#x20;wired&#x20;networks&#x20;are&#x20;unavailable.&#x20;CentOS&#x20;Linux&#x20;contains&#x20;a&#x20;wireless&#x20;tool&#x20;kit&#x20;to&#x20;allow&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;and&#x20;use&#x20;wireless&#x20;networks.','If&#x20;wireless&#x20;is&#x20;not&#x20;to&#x20;be&#x20;used,&#x20;wireless&#x20;devices&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;any&#x20;wireless&#x20;interfaces:&#x20;#&#x20;nmcli&#x20;radio&#x20;all&#x20;off&#x20;.&#x20;Disable&#x20;any&#x20;wireless&#x20;interfaces&#x20;in&#x20;your&#x20;network&#x20;configuration.','[{\"cis\": [\"3.5\"]}, {\"cis_csc\": [\"15.4\", \"15.5\"]}, {\"pci_dss\": [\"1.2.3\"]}, {\"tsc\": [\"CC6.6\"]}]'),(6603,'Ensure&#x20;auditd&#x20;is&#x20;installed','auditd&#x20;is&#x20;the&#x20;userspace&#x20;component&#x20;to&#x20;the&#x20;Linux&#x20;Auditing&#x20;System.&#x20;It&#039;s&#x20;responsible&#x20;for&#x20;writing&#x20;audit&#x20;records&#x20;to&#x20;the&#x20;disk.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;Install&#x20;auditd&#x20;#&#x20;dnf&#x20;install&#x20;audit&#x20;audit-libs','[{\"cis\": [\"4.1.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6604,'Ensure&#x20;auditd&#x20;service&#x20;is&#x20;enabled','Turn&#x20;on&#x20;the&#x20;auditd&#x20;daemon&#x20;to&#x20;record&#x20;system&#x20;events.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;auditd&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;auditd','[{\"cis\": [\"4.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6605,'Ensure&#x20;auditing&#x20;for&#x20;processes&#x20;that&#x20;start&#x20;prior&#x20;to&#x20;auditd&#x20;is&#x20;enabled','Configure&#x20;grub2&#x20;so&#x20;that&#x20;processes&#x20;that&#x20;are&#x20;capable&#x20;of&#x20;being&#x20;audited&#x20;can&#x20;be&#x20;audited&#x20;even&#x20;if&#x20;they&#x20;start&#x20;up&#x20;prior&#x20;to&#x20;auditd&#x20;startup.','The&#x20;capturing&#x20;of&#x20;system&#x20;events&#x20;provides&#x20;system&#x20;administrators&#x20;with&#x20;information&#x20;to&#x20;allow&#x20;them&#x20;to&#x20;determine&#x20;if&#x20;unauthorized&#x20;access&#x20;to&#x20;their&#x20;system&#x20;is&#x20;occurring.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit=1&#x20;to&#x20;GRUB_CMDLINE_LINUX&#x20;:&#x20;GRUB_CMDLINE_LINUX=&quot;audit=1&quot;&#x20;.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.2.6\", \"10.7\"]}, {\"nist_800_53\": [\"AU.2\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"35.7.d\", \"32.2\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6606,'Ensure&#x20;audit_backlog_limit&#x20;is&#x20;sufficient','The&#x20;backlog&#x20;limit&#x20;has&#x20;a&#x20;default&#x20;setting&#x20;of&#x20;64.','During&#x20;boot&#x20;if&#x20;audit=1,&#x20;then&#x20;the&#x20;backlog&#x20;will&#x20;hold&#x20;64&#x20;records.&#x20;If&#x20;more&#x20;than&#x20;64&#x20;records&#x20;are&#x20;created&#x20;during&#x20;boot,&#x20;auditd&#x20;records&#x20;will&#x20;be&#x20;lost&#x20;and&#x20;potential&#x20;malicious&#x20;activity&#x20;could&#x20;go&#x20;undetected.','','Edit&#x20;/etc/default/grub&#x20;and&#x20;add&#x20;audit_backlog_limit=&lt;BACKLOG&#x20;SIZE&gt;&#x20;to&#x20;GRUB_CMDLINE_LINUX:&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;update&#x20;the&#x20;grub2&#x20;configuration:&#x20;#&#x20;grub2-mkconfig&#x20;-o&#x20;/boot/grub2/grub.cfg','[{\"cis\": [\"4.1.1.4\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6607,'Ensure&#x20;audit&#x20;log&#x20;storage&#x20;size&#x20;is&#x20;configured','Configure&#x20;the&#x20;maximum&#x20;size&#x20;of&#x20;the&#x20;audit&#x20;log&#x20;file.&#x20;Once&#x20;the&#x20;log&#x20;reaches&#x20;the&#x20;maximum&#x20;size,&#x20;it&#x20;will&#x20;be&#x20;rotated&#x20;and&#x20;a&#x20;new&#x20;log&#x20;file&#x20;will&#x20;be&#x20;started.','It&#x20;is&#x20;important&#x20;that&#x20;an&#x20;appropriate&#x20;size&#x20;is&#x20;determined&#x20;for&#x20;log&#x20;files&#x20;so&#x20;that&#x20;they&#x20;do&#x20;not&#x20;impact&#x20;the&#x20;system&#x20;and&#x20;audit&#x20;data&#x20;is&#x20;not&#x20;lost.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy:&#x20;max_log_file&#x20;=&#x20;&lt;MB&gt;','[{\"cis\": [\"4.1.2.1\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.4\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6608,'Ensure&#x20;audit&#x20;logs&#x20;are&#x20;not&#x20;automatically&#x20;deleted','The&#x20;max_log_file_action&#x20;setting&#x20;determines&#x20;how&#x20;to&#x20;handle&#x20;the&#x20;audit&#x20;log&#x20;file&#x20;reaching&#x20;the&#x20;max&#x20;file&#x20;size.&#x20;A&#x20;value&#x20;of&#x20;keep_logs&#x20;will&#x20;rotate&#x20;the&#x20;logs&#x20;but&#x20;never&#x20;delete&#x20;old&#x20;logs.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;benefits&#x20;of&#x20;maintaining&#x20;a&#x20;long&#x20;audit&#x20;history&#x20;exceed&#x20;the&#x20;cost&#x20;of&#x20;storing&#x20;the&#x20;audit&#x20;history.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;max_log_file_action&#x20;=&#x20;keep_logs','[{\"cis\": [\"4.1.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6609,'Ensure&#x20;system&#x20;is&#x20;disabled&#x20;when&#x20;audit&#x20;logs&#x20;are&#x20;full','The&#x20;auditd&#x20;daemon&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;halt&#x20;the&#x20;system&#x20;when&#x20;the&#x20;audit&#x20;logs&#x20;are&#x20;full.','In&#x20;high&#x20;security&#x20;contexts,&#x20;the&#x20;risk&#x20;of&#x20;detecting&#x20;unauthorized&#x20;access&#x20;or&#x20;nonrepudiation&#x20;exceeds&#x20;the&#x20;benefit&#x20;of&#x20;the&#x20;system&#039;s&#x20;availability.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/audit/auditd.conf:&#x20;space_left_action&#x20;=&#x20;email&#x20;&#x20;&#x20;action_mail_acct&#x20;=&#x20;root&#x20;&#x20;&#x20;admin_space_left_action&#x20;=&#x20;halt','[{\"cis\": [\"4.1.1.2\"]}, {\"cis_csc\": [\"6.3\"]}, {\"pci_dss\": [\"10.7\"]}]'),(6610,'Ensure&#x20;changes&#x20;to&#x20;system&#x20;administration&#x20;scope&#x20;&#40;sudoers&#41;&#x20;is&#x20;collected','Monitor&#x20;scope&#x20;changes&#x20;for&#x20;system&#x20;administrations.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;force&#x20;system&#x20;administrators&#x20;to&#x20;log&#x20;in&#x20;as&#x20;themselves&#x20;first&#x20;and&#x20;then&#x20;use&#x20;the&#x20;sudo&#x20;command&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;monitor&#x20;changes&#x20;in&#x20;scope.&#x20;The&#x20;file&#x20;/etc/sudoers&#x20;will&#x20;be&#x20;written&#x20;to&#x20;when&#x20;the&#x20;file&#x20;or&#x20;its&#x20;attributes&#x20;have&#x20;changed.&#x20;The&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;scope.&quot;','Changes&#x20;in&#x20;the&#x20;/etc/sudoers&#x20;file&#x20;can&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;change&#x20;has&#x20;been&#x20;made&#x20;to&#x20;scope&#x20;of&#x20;system&#x20;administrator&#x20;activity.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers&#x20;-p&#x20;wa&#x20;-k&#x20;scope&#x20;&#x20;&#x20;-w&#x20;/etc/sudoers.d/&#x20;-p&#x20;wa&#x20;-k&#x20;scope','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6611,'Ensure&#x20;login&#x20;and&#x20;logout&#x20;events&#x20;are&#x20;collected','Monitor&#x20;login&#x20;and&#x20;logout&#x20;events.&#x20;The&#x20;parameters&#x20;below&#x20;track&#x20;changes&#x20;to&#x20;files&#x20;associated&#x20;with&#x20;login/logout&#x20;events.&#x20;The&#x20;file&#x20;/var/log/faillog&#x20;tracks&#x20;failed&#x20;events&#x20;from&#x20;login.&#x20;The&#x20;file&#x20;/var/log/lastlog&#x20;maintain&#x20;records&#x20;of&#x20;the&#x20;last&#x20;time&#x20;a&#x20;user&#x20;successfully&#x20;logged&#x20;in.','Monitoring&#x20;login/logout&#x20;events&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;information&#x20;associated&#x20;with&#x20;brute&#x20;force&#x20;attacks&#x20;against&#x20;user&#x20;logins.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;-w&#x20;/var/log/lastlog&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/run/faillock/&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.4\"]}, {\"cis_csc\": [\"4.9\", \"16.13\"]}, {\"pci_dss\": [\"10.2.1\", \"10.2.4\", \"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6612,'Ensure&#x20;session&#x20;initiation&#x20;information&#x20;is&#x20;collected','Monitor&#x20;session&#x20;initiation&#x20;events.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;to&#x20;the&#x20;files&#x20;associated&#x20;with&#x20;session&#x20;events.&#x20;The&#x20;file&#x20;/var/run/utmp&#x20;file&#x20;tracks&#x20;all&#x20;currently&#x20;logged&#x20;in&#x20;users.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;session.&quot;&#x20;The&#x20;/var/log/wtmp&#x20;file&#x20;tracks&#x20;logins,&#x20;logouts,&#x20;shutdown,&#x20;and&#x20;reboot&#x20;events.&#x20;The&#x20;file&#x20;/var/log/btmp&#x20;keeps&#x20;track&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;and&#x20;can&#x20;be&#x20;read&#x20;by&#x20;entering&#x20;the&#x20;command&#x20;/usr/bin/last&#x20;-f&#x20;/var/log/btmp&#x20;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;logins.&quot;.','Monitoring&#x20;these&#x20;files&#x20;for&#x20;changes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;logins&#x20;occurring&#x20;at&#x20;unusual&#x20;hours,&#x20;which&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;&#40;i.e.&#x20;a&#x20;user&#x20;logging&#x20;in&#x20;at&#x20;a&#x20;time&#x20;when&#x20;they&#x20;do&#x20;not&#x20;normally&#x20;log&#x20;in&#41;.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/run/utmp&#x20;-p&#x20;wa&#x20;-k&#x20;session&#x20;&#x20;&#x20;-w&#x20;/var/log/wtmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins&#x20;&#x20;&#x20;-w&#x20;/var/log/btmp&#x20;-p&#x20;wa&#x20;-k&#x20;logins','[{\"cis\": [\"4.1.5\"]}, {\"cis_csc\": [\"4.9\", \"16.13\"]}, {\"pci_dss\": [\"10.3\"]}, {\"nist_800_53\": [\"AC.7\", \"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6613,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;date&#x20;and&#x20;time&#x20;information&#x20;are&#x20;collected','Capture&#x20;events&#x20;where&#x20;the&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;has&#x20;been&#x20;modified.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;are&#x20;set&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;adjtimex&#x20;&#40;tune&#x20;kernel&#x20;clock&#41;,&#x20;settimeofday&#x20;&#40;Set&#x20;time,&#x20;using&#x20;timeval&#x20;and&#x20;timezone&#x20;structures&#41;&#x20;stime&#x20;&#40;using&#x20;seconds&#x20;since&#x20;1/1/1970&#41;&#x20;or&#x20;clock_settime&#x20;&#40;allows&#x20;for&#x20;the&#x20;setting&#x20;of&#x20;several&#x20;internal&#x20;clocks&#x20;and&#x20;timers&#41;&#x20;system&#x20;calls&#x20;have&#x20;been&#x20;executed&#x20;and&#x20;always&#x20;write&#x20;an&#x20;audit&#x20;record&#x20;to&#x20;the&#x20;/var/log/audit.log&#x20;file&#x20;upon&#x20;exit,&#x20;tagging&#x20;the&#x20;records&#x20;with&#x20;the&#x20;identifier&#x20;&quot;time-change&quot;.','Unexpected&#x20;changes&#x20;in&#x20;system&#x20;date&#x20;and/or&#x20;time&#x20;could&#x20;be&#x20;a&#x20;sign&#x20;of&#x20;malicious&#x20;activity&#x20;on&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;adjtimex&#x20;-S&#x20;settimeofday&#x20;-S&#x20;stime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-Farch=b32&#x20;-S&#x20;clock_settime&#x20;-k&#x20;time-change&#x20;&#x20;&#x20;-w&#x20;/etc/localtime&#x20;-p&#x20;wa&#x20;-k&#x20;time-change','[{\"cis\": [\"4.1.6\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.4.2\", \"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6614,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;Mandatory&#x20;Access&#x20;Controls&#x20;are&#x20;collected','Monitor&#x20;SELinux&#x20;mandatory&#x20;access&#x20;controls.&#x20;The&#x20;parameters&#x20;below&#x20;monitor&#x20;any&#x20;write&#x20;access&#x20;&#40;potential&#x20;additional,&#x20;deletion&#x20;or&#x20;modification&#x20;of&#x20;files&#x20;in&#x20;the&#x20;directory&#41;&#x20;or&#x20;attribute&#x20;changes&#x20;to&#x20;the&#x20;/etc/selinux&#x20;or&#x20;/etc/apparmor&#x20;and&#x20;/etc/apparmor.d&#x20;directories.','Changes&#x20;to&#x20;files&#x20;in&#x20;these&#x20;directories&#x20;could&#x20;indicate&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;modify&#x20;access&#x20;controls&#x20;and&#x20;change&#x20;security&#x20;contexts,&#x20;leading&#x20;to&#x20;a&#x20;compromise&#x20;of&#x20;the&#x20;system.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;-w&#x20;/etc/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy&#x20;-w&#x20;/usr/share/selinux/&#x20;-p&#x20;wa&#x20;-k&#x20;MAC-policy','[{\"cis\": [\"4.1.7\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6615,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;the&#x20;system&#039;s&#x20;network&#x20;environment&#x20;are&#x20;collected','Record&#x20;changes&#x20;to&#x20;network&#x20;environment&#x20;files&#x20;or&#x20;system&#x20;calls.&#x20;The&#x20;below&#x20;parameters&#x20;monitor&#x20;the&#x20;sethostname&#x20;&#40;set&#x20;the&#x20;systems&#x20;host&#x20;name&#41;&#x20;or&#x20;setdomainname&#x20;&#40;set&#x20;the&#x20;systems&#x20;domainname&#41;&#x20;system&#x20;calls,&#x20;and&#x20;write&#x20;an&#x20;audit&#x20;event&#x20;on&#x20;system&#x20;call&#x20;exit.&#x20;The&#x20;other&#x20;parameters&#x20;monitor&#x20;the&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;files&#x20;&#40;messages&#x20;displayed&#x20;pre-login&#41;,&#x20;/etc/hosts&#x20;&#40;file&#x20;containing&#x20;host&#x20;names&#x20;and&#x20;associated&#x20;IP&#x20;addresses&#41;,&#x20;/etc/sysconfig/network&#x20;file&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;directory&#x20;&#40;containing&#x20;network&#x20;interface&#x20;scripts&#x20;and&#x20;configurations&#41;.','Monitoring&#x20;sethostname&#x20;and&#x20;setdomainname&#x20;will&#x20;identify&#x20;potential&#x20;unauthorized&#x20;changes&#x20;to&#x20;host&#x20;and&#x20;domainname&#x20;of&#x20;a&#x20;system.&#x20;The&#x20;changing&#x20;of&#x20;these&#x20;names&#x20;could&#x20;potentially&#x20;break&#x20;security&#x20;parameters&#x20;that&#x20;are&#x20;set&#x20;based&#x20;on&#x20;those&#x20;names.&#x20;The&#x20;/etc/hosts&#x20;file&#x20;is&#x20;monitored&#x20;for&#x20;changes&#x20;in&#x20;the&#x20;file&#x20;that&#x20;can&#x20;indicate&#x20;an&#x20;unauthorized&#x20;intruder&#x20;is&#x20;trying&#x20;to&#x20;change&#x20;machine&#x20;associations&#x20;with&#x20;IP&#x20;addresses&#x20;and&#x20;trick&#x20;users&#x20;and&#x20;processes&#x20;into&#x20;connecting&#x20;to&#x20;unintended&#x20;machines.&#x20;Monitoring&#x20;/etc/issue&#x20;and&#x20;/etc/issue.net&#x20;is&#x20;important,&#x20;as&#x20;intruders&#x20;could&#x20;put&#x20;disinformation&#x20;into&#x20;those&#x20;files&#x20;and&#x20;trick&#x20;users&#x20;into&#x20;providing&#x20;information&#x20;to&#x20;the&#x20;intruder.&#x20;Monitoring&#x20;/etc/sysconfig/network&#x20;and&#x20;/etc/sysconfig/network-scripts/&#x20;is&#x20;important&#x20;as&#x20;it&#x20;can&#x20;show&#x20;if&#x20;network&#x20;interfaces&#x20;or&#x20;scripts&#x20;are&#x20;being&#x20;modified&#x20;in&#x20;a&#x20;way&#x20;that&#x20;can&#x20;lead&#x20;to&#x20;the&#x20;machine&#x20;becoming&#x20;unavailable&#x20;or&#x20;compromised.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;system-locale.&quot;','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;sethostname&#x20;-S&#x20;setdomainname&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/issue.net&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/hosts&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/sysconfig/network-scripts/&#x20;-p&#x20;wa&#x20;-k&#x20;system-locale','[{\"cis\": [\"4.1.8\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6616,'Ensure&#x20;discretionary&#x20;access&#x20;control&#x20;permission&#x20;modification&#x20;events&#x20;are&#x20;collected','Monitor&#x20;changes&#x20;to&#x20;file&#x20;permissions,&#x20;attributes,&#x20;ownership&#x20;and&#x20;group.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;track&#x20;changes&#x20;for&#x20;system&#x20;calls&#x20;that&#x20;affect&#x20;file&#x20;permissions&#x20;and&#x20;attributes.&#x20;The&#x20;chmod&#x20;,&#x20;fchmod&#x20;and&#x20;fchmodat&#x20;system&#x20;calls&#x20;affect&#x20;the&#x20;permissions&#x20;associated&#x20;with&#x20;a&#x20;file.&#x20;The&#x20;chown&#x20;,&#x20;fchown&#x20;,&#x20;fchownat&#x20;and&#x20;lchown&#x20;system&#x20;calls&#x20;affect&#x20;owner&#x20;and&#x20;group&#x20;attributes&#x20;on&#x20;a&#x20;file.&#x20;The&#x20;setxattr&#x20;,&#x20;lsetxattr&#x20;,&#x20;fsetxattr&#x20;&#40;set&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;and&#x20;removexattr&#x20;,&#x20;lremovexattr&#x20;,&#x20;fremovexattr&#x20;&#40;remove&#x20;extended&#x20;file&#x20;attributes&#41;&#x20;control&#x20;extended&#x20;file&#x20;attributes.&#x20;In&#x20;all&#x20;cases,&#x20;an&#x20;audit&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;for&#x20;non-system&#x20;user&#x20;ids&#x20;&#40;auid&#x20;&gt;=&#x20;1000&#41;&#x20;and&#x20;will&#x20;ignore&#x20;Daemon&#x20;events&#x20;&#40;auid&#x20;=&#x20;4294967295&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;with&#x20;the&#x20;identifier&#x20;&quot;perm_mod.&quot;','Monitoring&#x20;for&#x20;changes&#x20;in&#x20;file&#x20;attributes&#x20;could&#x20;alert&#x20;a&#x20;system&#x20;administrator&#x20;to&#x20;activity&#x20;that&#x20;could&#x20;indicate&#x20;intruder&#x20;activity&#x20;or&#x20;policy&#x20;violation.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chmod&#x20;-S&#x20;fchmod&#x20;-S&#x20;fchmodat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;chown&#x20;-S&#x20;fchown&#x20;-S&#x20;fchownat&#x20;-S&#x20;lchown&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lremovexattr&#x20;-S&#x20;fremovexattr&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;perm_mod&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;setxattr&#x20;-S&#x20;lsetxattr&#x20;-S&#x20;fsetxattr&#x20;-S&#x20;removexattr&#x20;-S&#x20;lrem','[{\"cis\": [\"4.1.9\"]}, {\"cis_csc\": [\"5.5\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6617,'Ensure&#x20;unsuccessful&#x20;unauthorized&#x20;file&#x20;access&#x20;attempts&#x20;are&#x20;collected','Monitor&#x20;for&#x20;unsuccessful&#x20;attempts&#x20;to&#x20;access&#x20;files.&#x20;The&#x20;parameters&#x20;below&#x20;are&#x20;associated&#x20;&#x20;with&#x20;system&#x20;calls&#x20;that&#x20;control&#x20;creation&#x20;&#40;&#x20;creat&#x20;&#41;,&#x20;opening&#x20;&#40;&#x20;open&#x20;,&#x20;openat&#x20;&#41;&#x20;and&#x20;truncation&#x20;&#40;&#x20;&#x20;truncate&#x20;,&#x20;ftruncate&#x20;&#41;&#x20;of&#x20;files.&#x20;An&#x20;audit&#x20;log&#x20;record&#x20;will&#x20;only&#x20;be&#x20;written&#x20;if&#x20;the&#x20;user&#x20;is&#x20;a&#x20;non-&#x20;&#x20;privileged&#x20;user&#x20;&#40;auid&#x20;&gt;&#x20;=&#x20;1000&#41;,&#x20;is&#x20;not&#x20;a&#x20;Daemon&#x20;event&#x20;&#40;auid=4294967295&#41;&#x20;and&#x20;if&#x20;the&#x20;&#x20;system&#x20;call&#x20;returned&#x20;EACCES&#x20;&#40;permission&#x20;denied&#x20;to&#x20;the&#x20;file&#41;&#x20;or&#x20;EPERM&#x20;&#40;some&#x20;other&#x20;&#x20;permanent&#x20;error&#x20;associated&#x20;with&#x20;the&#x20;specific&#x20;system&#x20;call&#41;.&#x20;All&#x20;audit&#x20;records&#x20;will&#x20;be&#x20;tagged&#x20;&#x20;with&#x20;the&#x20;identifier&#x20;&quot;access.&quot;','Failed&#x20;attempts&#x20;to&#x20;open,&#x20;create&#x20;or&#x20;truncate&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;an&#x20;individual&#x20;or&#x20;process&#x20;is&#x20;trying&#x20;to&#x20;gain&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','For&#x20;32&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;For&#x20;64&#x20;bit&#x20;systems&#x20;add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;/etc/audit/audit.rules&#x20;file:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EACCES&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;creat&#x20;-S&#x20;open&#x20;-S&#x20;openat&#x20;-S&#x20;truncate&#x20;-S&#x20;ftruncate&#x20;-F&#x20;exit=-EPERM&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;access','[{\"cis\": [\"4.1.10\"]}, {\"cis_csc\": [\"14.9\"]}, {\"pci_dss\": [\"10.2.4\"]}, {\"nist_800_53\": [\"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6618,'Ensure&#x20;events&#x20;that&#x20;modify&#x20;user/group&#x20;information&#x20;are&#x20;collected','Record&#x20;events&#x20;affecting&#x20;the&#x20;group&#x20;,&#x20;passwd&#x20;&#40;user&#x20;IDs&#41;,&#x20;shadow&#x20;and&#x20;gshadow&#x20;&#40;passwords&#41;&#x20;or&#x20;/etc/security/opasswd&#x20;&#40;old&#x20;passwords,&#x20;based&#x20;on&#x20;remember&#x20;parameter&#x20;in&#x20;the&#x20;PAM&#x20;configuration&#41;&#x20;files.&#x20;The&#x20;parameters&#x20;in&#x20;this&#x20;section&#x20;will&#x20;watch&#x20;the&#x20;files&#x20;to&#x20;see&#x20;if&#x20;they&#x20;have&#x20;been&#x20;opened&#x20;for&#x20;write&#x20;or&#x20;have&#x20;had&#x20;attribute&#x20;changes&#x20;&#40;e.g.&#x20;permissions&#41;&#x20;and&#x20;tag&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;identity&quot;&#x20;in&#x20;the&#x20;audit&#x20;log&#x20;file.','Unexpected&#x20;changes&#x20;to&#x20;these&#x20;files&#x20;could&#x20;be&#x20;an&#x20;indication&#x20;that&#x20;the&#x20;system&#x20;has&#x20;been&#x20;compromised&#x20;and&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;is&#x20;attempting&#x20;to&#x20;hide&#x20;their&#x20;activities&#x20;or&#x20;compromise&#x20;additional&#x20;accounts.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/group&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/passwd&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/gshadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/shadow&#x20;-p&#x20;wa&#x20;-k&#x20;identity&#x20;&#x20;&#x20;&#x20;-w&#x20;/etc/security/opasswd&#x20;-p&#x20;wa&#x20;-k&#x20;identity','[{\"cis\": [\"4.1.11\"]}, {\"cis_csc\": [\"4.8\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6619,'Ensure&#x20;successful&#x20;file&#x20;system&#x20;mounts&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;the&#x20;mount&#x20;system&#x20;call.&#x20;The&#x20;mount&#x20;&#40;and&#x20;umount&#x20;&#41;&#x20;system&#x20;call&#x20;controls&#x20;the&#x20;mounting&#x20;and&#x20;unmounting&#x20;of&#x20;file&#x20;systems.&#x20;The&#x20;parameters&#x20;below&#x20;configure&#x20;the&#x20;system&#x20;to&#x20;create&#x20;an&#x20;audit&#x20;record&#x20;when&#x20;the&#x20;mount&#x20;system&#x20;call&#x20;is&#x20;used&#x20;by&#x20;a&#x20;non-privileged&#x20;user.','It&#x20;is&#x20;highly&#x20;unusual&#x20;for&#x20;a&#x20;non&#x20;privileged&#x20;user&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;to&#x20;the&#x20;system.&#x20;While&#x20;tracking&#x20;mount&#x20;commands&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;evidence&#x20;that&#x20;external&#x20;media&#x20;may&#x20;have&#x20;been&#x20;mounted&#x20;&#40;based&#x20;on&#x20;a&#x20;review&#x20;of&#x20;the&#x20;source&#x20;of&#x20;the&#x20;mount&#x20;and&#x20;confirming&#x20;it&#039;s&#x20;an&#x20;external&#x20;media&#x20;type&#41;,&#x20;it&#x20;does&#x20;not&#x20;conclusively&#x20;indicate&#x20;that&#x20;data&#x20;was&#x20;exported&#x20;to&#x20;the&#x20;media.&#x20;System&#x20;administrators&#x20;who&#x20;wish&#x20;to&#x20;determine&#x20;if&#x20;data&#x20;were&#x20;exported,&#x20;would&#x20;also&#x20;have&#x20;to&#x20;track&#x20;successful&#x20;open&#x20;,&#x20;creat&#x20;and&#x20;truncate&#x20;system&#x20;calls&#x20;requiring&#x20;write&#x20;access&#x20;to&#x20;a&#x20;file&#x20;under&#x20;the&#x20;mount&#x20;point&#x20;of&#x20;the&#x20;external&#x20;media&#x20;file&#x20;system.&#x20;This&#x20;could&#x20;give&#x20;a&#x20;fair&#x20;indication&#x20;that&#x20;a&#x20;write&#x20;occurred.&#x20;The&#x20;only&#x20;way&#x20;to&#x20;truly&#x20;prove&#x20;it,&#x20;would&#x20;be&#x20;to&#x20;track&#x20;successful&#x20;writes&#x20;to&#x20;the&#x20;external&#x20;media.&#x20;Tracking&#x20;write&#x20;system&#x20;calls&#x20;could&#x20;quickly&#x20;fill&#x20;up&#x20;the&#x20;audit&#x20;log&#x20;and&#x20;is&#x20;not&#x20;recommended.&#x20;Recommendations&#x20;on&#x20;configuration&#x20;options&#x20;to&#x20;track&#x20;data&#x20;export&#x20;to&#x20;media&#x20;is&#x20;beyond&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;document.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;mount&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;mounts','[{\"cis\": [\"4.1.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6620,'Ensure&#x20;file&#x20;deletion&#x20;events&#x20;by&#x20;users&#x20;are&#x20;collected','Monitor&#x20;the&#x20;use&#x20;of&#x20;system&#x20;calls&#x20;associated&#x20;with&#x20;the&#x20;deletion&#x20;or&#x20;renaming&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes.&#x20;This&#x20;configuration&#x20;statement&#x20;sets&#x20;up&#x20;monitoring&#x20;for&#x20;the&#x20;unlink&#x20;&#40;remove&#x20;a&#x20;file&#41;,&#x20;unlinkat&#x20;&#40;remove&#x20;a&#x20;file&#x20;attribute&#41;,&#x20;rename&#x20;&#40;rename&#x20;a&#x20;file&#41;&#x20;and&#x20;renameat&#x20;&#40;rename&#x20;a&#x20;file&#x20;attribute&#41;&#x20;system&#x20;calls&#x20;and&#x20;tags&#x20;them&#x20;with&#x20;the&#x20;identifier&#x20;&quot;delete&quot;.','Monitoring&#x20;these&#x20;calls&#x20;from&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;a&#x20;system&#x20;administrator&#x20;with&#x20;evidence&#x20;that&#x20;inappropriate&#x20;removal&#x20;of&#x20;files&#x20;and&#x20;file&#x20;attributes&#x20;associated&#x20;with&#x20;protected&#x20;files&#x20;is&#x20;occurring.&#x20;While&#x20;this&#x20;audit&#x20;option&#x20;will&#x20;look&#x20;at&#x20;all&#x20;events,&#x20;system&#x20;administrators&#x20;will&#x20;want&#x20;to&#x20;look&#x20;for&#x20;specific&#x20;privileged&#x20;files&#x20;that&#x20;are&#x20;being&#x20;deleted&#x20;or&#x20;altered.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;unlink&#x20;-S&#x20;unlinkat&#x20;-S&#x20;rename&#x20;-S&#x20;renameat&#x20;-F&#x20;auid&gt;=1000&#x20;-F&#x20;auid!=4294967295&#x20;-k&#x20;delete','[{\"cis\": [\"4.1.14\"]}, {\"cis_csc\": [\"13\"]}, {\"pci_dss\": [\"10.5.5\"]}, {\"nist_800_53\": [\"AU.14\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"PI1.4\", \"PI1.5\", \"CC7.1\", \"CC7.2\", \"CC7.3\", \"CC8.1\"]}]'),(6621,'Ensure&#x20;kernel&#x20;module&#x20;loading&#x20;and&#x20;unloading&#x20;is&#x20;collected','Monitor&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;kernel&#x20;modules.&#x20;The&#x20;programs&#x20;insmod&#x20;&#40;install&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;rmmod&#x20;&#40;remove&#x20;a&#x20;kernel&#x20;module&#41;,&#x20;and&#x20;modprobe&#x20;&#40;a&#x20;more&#x20;sophisticated&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules,&#x20;as&#x20;well&#x20;as&#x20;some&#x20;other&#x20;features&#41;&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;The&#x20;init_module&#x20;&#40;load&#x20;a&#x20;module&#41;&#x20;and&#x20;delete_module&#x20;&#40;delete&#x20;a&#x20;module&#41;&#x20;system&#x20;calls&#x20;control&#x20;loading&#x20;and&#x20;unloading&#x20;of&#x20;modules.&#x20;Any&#x20;execution&#x20;of&#x20;the&#x20;loading&#x20;and&#x20;unloading&#x20;module&#x20;programs&#x20;and&#x20;system&#x20;calls&#x20;will&#x20;trigger&#x20;an&#x20;audit&#x20;record&#x20;with&#x20;an&#x20;identifier&#x20;of&#x20;&quot;modules&quot;.','Monitoring&#x20;the&#x20;use&#x20;of&#x20;insmod&#x20;,&#x20;rmmod&#x20;and&#x20;modprobe&#x20;could&#x20;provide&#x20;system&#x20;administrators&#x20;with&#x20;evidence&#x20;that&#x20;an&#x20;unauthorized&#x20;user&#x20;loaded&#x20;or&#x20;unloaded&#x20;a&#x20;kernel&#x20;module,&#x20;possibly&#x20;compromising&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;Monitoring&#x20;of&#x20;the&#x20;init_module&#x20;and&#x20;delete_module&#x20;system&#x20;calls&#x20;would&#x20;reflect&#x20;an&#x20;unauthorized&#x20;user&#x20;attempting&#x20;to&#x20;use&#x20;a&#x20;different&#x20;program&#x20;to&#x20;load&#x20;and&#x20;unload&#x20;modules.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/sbin/insmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-w&#x20;/sbin/rmmod&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-w&#x20;/sbin/modprobe&#x20;-p&#x20;x&#x20;-k&#x20;modules&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b32&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules&#x20;&#x20;&#x20;-a&#x20;always,exit&#x20;-F&#x20;arch=b64&#x20;-S&#x20;init_module&#x20;-S&#x20;delete_module&#x20;-k&#x20;modules','[{\"cis\": [\"4.1.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.7\"]}, {\"nist_800_53\": [\"AU.14\", \"AU.6\"]}, {\"gpg_13\": [\"7.9\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6622,'Ensure&#x20;system&#x20;administrator&#x20;actions&#x20;&#40;sudolog&#41;&#x20;are&#x20;collected','Monitor&#x20;the&#x20;sudo&#x20;log&#x20;file.&#x20;If&#x20;the&#x20;system&#x20;has&#x20;been&#x20;properly&#x20;configured&#x20;to&#x20;disable&#x20;the&#x20;use&#x20;of&#x20;the&#x20;su&#x20;command&#x20;and&#x20;force&#x20;all&#x20;administrators&#x20;to&#x20;have&#x20;to&#x20;log&#x20;in&#x20;first&#x20;and&#x20;then&#x20;use&#x20;sudo&#x20;to&#x20;execute&#x20;privileged&#x20;commands,&#x20;then&#x20;all&#x20;administrator&#x20;commands&#x20;will&#x20;be&#x20;logged&#x20;to&#x20;/var/log/sudo.log&#x20;.&#x20;Any&#x20;time&#x20;a&#x20;command&#x20;is&#x20;executed,&#x20;an&#x20;audit&#x20;event&#x20;will&#x20;be&#x20;triggered&#x20;as&#x20;the&#x20;/var/log/sudo.log&#x20;file&#x20;will&#x20;be&#x20;opened&#x20;for&#x20;write&#x20;and&#x20;the&#x20;executed&#x20;administration&#x20;command&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;log.','Changes&#x20;in&#x20;/var/log/sudo.log&#x20;indicate&#x20;that&#x20;an&#x20;administrator&#x20;has&#x20;executed&#x20;a&#x20;command&#x20;or&#x20;the&#x20;log&#x20;file&#x20;itself&#x20;has&#x20;been&#x20;tampered&#x20;with.&#x20;Administrators&#x20;will&#x20;want&#x20;to&#x20;correlate&#x20;the&#x20;events&#x20;written&#x20;to&#x20;the&#x20;audit&#x20;trail&#x20;with&#x20;the&#x20;records&#x20;written&#x20;to&#x20;/var/log/sudo.log&#x20;to&#x20;verify&#x20;if&#x20;unauthorized&#x20;commands&#x20;have&#x20;been&#x20;executed.','','Edit&#x20;or&#x20;create&#x20;a&#x20;file&#x20;in&#x20;the&#x20;/etc/audit/rules.d/&#x20;directory&#x20;ending&#x20;in&#x20;.rules&#x20;and&#x20;add&#x20;the&#x20;following&#x20;lines:&#x20;&#x20;&#x20;-w&#x20;/var/log/sudo.log&#x20;-p&#x20;wa&#x20;-k&#x20;actions','[{\"cis\": [\"4.1.16\"]}, {\"cis_csc\": [\"4.9\"]}, {\"pci_dss\": [\"10.2.2\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.6\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"32.2\", \"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6623,'Ensure&#x20;the&#x20;audit&#x20;configuration&#x20;is&#x20;immutable','Set&#x20;system&#x20;audit&#x20;so&#x20;that&#x20;audit&#x20;rules&#x20;cannot&#x20;be&#x20;modified&#x20;with&#x20;auditctl&#x20;.&#x20;Setting&#x20;the&#x20;flag&#x20;&quot;-e&#x20;2&quot;&#x20;forces&#x20;audit&#x20;to&#x20;be&#x20;put&#x20;in&#x20;immutable&#x20;mode.&#x20;Audit&#x20;changes&#x20;can&#x20;only&#x20;be&#x20;made&#x20;on&#x20;system&#x20;reboot.','In&#x20;immutable&#x20;mode,&#x20;unauthorized&#x20;users&#x20;cannot&#x20;execute&#x20;changes&#x20;to&#x20;the&#x20;audit&#x20;system&#x20;to&#x20;potentially&#x20;hide&#x20;malicious&#x20;activity&#x20;and&#x20;then&#x20;put&#x20;the&#x20;audit&#x20;rules&#x20;back.&#x20;Users&#x20;would&#x20;most&#x20;likely&#x20;notice&#x20;a&#x20;system&#x20;reboot&#x20;and&#x20;that&#x20;could&#x20;alert&#x20;administrators&#x20;of&#x20;an&#x20;attempt&#x20;to&#x20;make&#x20;unauthorized&#x20;audit&#x20;changes.','','Edit&#x20;or&#x20;create&#x20;the&#x20;file&#x20;/etc/audit/rules.d/99-finalize.rules&#x20;and&#x20;add&#x20;the&#x20;line:&#x20;&#x20;&#x20;-e&#x20;2&#x20;&#x20;&#x20;&#x20;at&#x20;the&#x20;end&#x20;of&#x20;the&#x20;file','[{\"cis\": [\"4.1.17\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.5\"]}, {\"nist_800_53\": [\"AU.9\"]}, {\"hipaa\": [\"164.312.b\"]}]'),(6624,'Ensure&#x20;rsyslog&#x20;is&#x20;installed','The&#x20;rsyslog&#x20;software&#x20;is&#x20;a&#x20;recommended&#x20;replacement&#x20;to&#x20;the&#x20;original&#x20;syslogd&#x20;daemon&#x20;which&#x20;provide&#x20;improvements&#x20;over&#x20;syslogd&#x20;,&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server.','The&#x20;security&#x20;enhancements&#x20;of&#x20;rsyslog&#x20;such&#x20;as&#x20;connection-oriented&#x20;&#40;i.e.&#x20;TCP&#41;&#x20;transmission&#x20;of&#x20;logs,&#x20;the&#x20;option&#x20;to&#x20;log&#x20;to&#x20;database&#x20;formats,&#x20;and&#x20;the&#x20;encryption&#x20;of&#x20;log&#x20;data&#x20;en&#x20;route&#x20;to&#x20;a&#x20;central&#x20;logging&#x20;server&#41;&#x20;justify&#x20;installing&#x20;and&#x20;configuring&#x20;the&#x20;package.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;install&#x20;rsyslog:&#x20;&#x20;&#x20;#&#x20;dnf&#x20;install&#x20;rsyslog','[{\"cis\": [\"4.2.1.1\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6625,'Ensure&#x20;rsyslog&#x20;Service&#x20;is&#x20;enabled','Once&#x20;the&#x20;rsyslog&#x20;package&#x20;is&#x20;installed&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;activated.','If&#x20;the&#x20;rsyslog&#x20;service&#x20;is&#x20;not&#x20;activated&#x20;the&#x20;system&#x20;may&#x20;default&#x20;to&#x20;the&#x20;syslogd&#x20;service&#x20;or&#x20;lack&#x20;logging&#x20;instead.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;rsyslog&#x20;:&#x20;&#x20;&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;rsyslog','[{\"cis\": [\"4.2.1.2\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.1\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC6.1\", \"CC6.2\", \"CC6.3\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6626,'Ensure&#x20;rsyslog&#x20;default&#x20;file&#x20;permissions&#x20;configured','rsyslog&#x20;will&#x20;create&#x20;logfiles&#x20;that&#x20;do&#x20;not&#x20;already&#x20;exist&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;setting&#x20;controls&#x20;what&#x20;permissions&#x20;will&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;newly&#x20;created&#x20;files.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitive&#x20;data&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;set&#x20;$FileCreateMode&#x20;to&#x20;0640&#x20;or&#x20;more&#x20;restrictive:&#x20;&#x20;&#x20;$FileCreateMode&#x20;0640','[{\"cis\": [\"4.2.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(6627,'Ensure&#x20;rsyslog&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host','The&#x20;rsyslog&#x20;utility&#x20;supports&#x20;the&#x20;ability&#x20;to&#x20;send&#x20;logs&#x20;it&#x20;gathers&#x20;to&#x20;a&#x20;remote&#x20;log&#x20;host&#x20;running&#x20;syslogd&#40;8&#41;&#x20;or&#x20;to&#x20;receive&#x20;messages&#x20;from&#x20;remote&#x20;hosts,&#x20;reducing&#x20;administrative&#x20;overhead.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/rsyslog.conf&#x20;and&#x20;/etc/rsyslog.d&#47;&#42;.conf&#x20;files&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line&#x20;&#40;where&#x20;loghost.example.com&#x20;is&#x20;the&#x20;name&#x20;of&#x20;your&#x20;central&#x20;log&#x20;host&#41;.&#x20;&#x20;&#x20;*.*&#x20;@@loghost.example.com&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;reload&#x20;the&#x20;rsyslogd&#x20;configuration:&#x20;#&#x20;pkill&#x20;-HUP&#x20;rsyslogd','[{\"cis\": [\"4.2.1.5\"]}, {\"cis_csc\": [\"6.6\", \"6.8\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6628,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;send&#x20;logs&#x20;to&#x20;rsyslog','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Utilities&#x20;exist&#x20;to&#x20;accept&#x20;remote&#x20;export&#x20;of&#x20;journald&#x20;logs,&#x20;however,&#x20;use&#x20;of&#x20;the&#x20;rsyslog&#x20;service&#x20;provides&#x20;a&#x20;consistent&#x20;means&#x20;of&#x20;log&#x20;collection&#x20;and&#x20;export.','Storing&#x20;log&#x20;data&#x20;on&#x20;a&#x20;remote&#x20;host&#x20;protects&#x20;log&#x20;integrity&#x20;from&#x20;local&#x20;attacks.&#x20;If&#x20;an&#x20;attacker&#x20;gains&#x20;root&#x20;access&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;they&#x20;could&#x20;tamper&#x20;with&#x20;or&#x20;remove&#x20;log&#x20;data&#x20;that&#x20;is&#x20;stored&#x20;on&#x20;the&#x20;local&#x20;system.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;ForwardToSyslog=yes','[{\"cis\": [\"4.2.2.1\"]}, {\"cis_csc\": [\"6.5\"]}, {\"pci_dss\": [\"10.5.3\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(6629,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;compress&#x20;large&#x20;log&#x20;files','The&#x20;journald&#x20;system&#x20;includes&#x20;the&#x20;capability&#x20;of&#x20;compressing&#x20;overly&#x20;large&#x20;files&#x20;to&#x20;avoid&#x20;filling&#x20;up&#x20;the&#x20;system&#x20;with&#x20;logs&#x20;or&#x20;making&#x20;the&#x20;logs&#x20;unmanageably&#x20;large.','Uncompressed&#x20;large&#x20;files&#x20;may&#x20;unexpectedly&#x20;fill&#x20;a&#x20;filesystem&#x20;leading&#x20;to&#x20;resource&#x20;unavailability.&#x20;Compressing&#x20;logs&#x20;prior&#x20;to&#x20;write&#x20;can&#x20;prevent&#x20;sudden,&#x20;unexpected&#x20;filesystem&#x20;impacts.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.2\"]}, {\"cis_csc\": [\"6.4\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6630,'Ensure&#x20;journald&#x20;is&#x20;configured&#x20;to&#x20;write&#x20;logfiles&#x20;to&#x20;persistent&#x20;disk','Data&#x20;from&#x20;journald&#x20;may&#x20;be&#x20;stored&#x20;in&#x20;volatile&#x20;memory&#x20;or&#x20;persisted&#x20;locally&#x20;on&#x20;the&#x20;server.&#x20;Logs&#x20;in&#x20;memory&#x20;will&#x20;be&#x20;lost&#x20;upon&#x20;a&#x20;system&#x20;reboot.&#x20;By&#x20;persisting&#x20;logs&#x20;to&#x20;local&#x20;disk&#x20;on&#x20;the&#x20;server&#x20;they&#x20;are&#x20;protected&#x20;from&#x20;loss.','Writing&#x20;log&#x20;data&#x20;to&#x20;disk&#x20;will&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;forensically&#x20;reconstruct&#x20;events&#x20;which&#x20;may&#x20;have&#x20;impacted&#x20;the&#x20;operations&#x20;or&#x20;security&#x20;of&#x20;a&#x20;system&#x20;even&#x20;after&#x20;a&#x20;system&#x20;crash&#x20;or&#x20;reboot.','','Edit&#x20;the&#x20;/etc/systemd/journald.conf&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;line:&#x20;&#x20;&#x20;Compress=yes','[{\"cis\": [\"4.2.2.3\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"10.7\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.4\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6631,'Ensure&#x20;permissions&#x20;on&#x20;all&#x20;logfiles&#x20;are&#x20;configured','Log&#x20;files&#x20;stored&#x20;in&#x20;/var/log/&#x20;contain&#x20;logged&#x20;information&#x20;from&#x20;many&#x20;services&#x20;on&#x20;the&#x20;system,&#x20;or&#x20;on&#x20;log&#x20;hosts&#x20;others&#x20;as&#x20;well.','It&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;log&#x20;files&#x20;have&#x20;the&#x20;correct&#x20;permissions&#x20;to&#x20;ensure&#x20;that&#x20;sensitivebdata&#x20;is&#x20;archived&#x20;and&#x20;protected.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;all&#x20;existing&#x20;log&#x20;files:&#x20;#&#x20;find&#x20;/var/log&#x20;-type&#x20;f&#x20;-exec&#x20;chmod&#x20;g-wx,o-rwx&#x20;{}&#x20;+','[{\"cis\": [\"4.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.5.1\", \"10.5.2\"]}, {\"nist_800_53\": [\"CM.1\", \"AU.9\"]}, {\"tsc\": [\"CC5.2\", \"CC7.2\"]}]'),(6632,'Ensure&#x20;cron&#x20;daemon&#x20;is&#x20;enabled','The&#x20;cron&#x20;daemon&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;batch&#x20;jobs&#x20;on&#x20;the&#x20;system.','While&#x20;there&#x20;may&#x20;not&#x20;be&#x20;user&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;be&#x20;run&#x20;on&#x20;the&#x20;system,&#x20;the&#x20;system&#x20;does&#x20;have&#x20;maintenance&#x20;jobs&#x20;that&#x20;may&#x20;include&#x20;security&#x20;monitoring&#x20;that&#x20;have&#x20;to&#x20;run,&#x20;and&#x20;cron&#x20;is&#x20;used&#x20;to&#x20;execute&#x20;them.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;cron&#x20;:&#x20;#&#x20;systemctl&#x20;--now&#x20;enable&#x20;crond','[{\"cis\": [\"5.1.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6633,'Ensure&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;are&#x20;configured','The&#x20;/etc/crontab&#x20;file&#x20;is&#x20;used&#x20;by&#x20;cron&#x20;to&#x20;control&#x20;its&#x20;own&#x20;jobs.&#x20;The&#x20;commands&#x20;in&#x20;this&#x20;item&#x20;make&#x20;sure&#x20;that&#x20;root&#x20;is&#x20;the&#x20;user&#x20;and&#x20;group&#x20;owner&#x20;of&#x20;the&#x20;file&#x20;and&#x20;that&#x20;only&#x20;the&#x20;owner&#x20;can&#x20;access&#x20;the&#x20;file.','This&#x20;file&#x20;contains&#x20;information&#x20;on&#x20;what&#x20;system&#x20;jobs&#x20;are&#x20;run&#x20;by&#x20;cron.&#x20;Write&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;unprivileged&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;elevate&#x20;their&#x20;privileges.&#x20;Read&#x20;access&#x20;to&#x20;these&#x20;files&#x20;could&#x20;provide&#x20;users&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;gain&#x20;insight&#x20;on&#x20;system&#x20;jobs&#x20;that&#x20;run&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;provide&#x20;them&#x20;a&#x20;way&#x20;to&#x20;gain&#x20;unauthorized&#x20;privileged&#x20;access.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/crontab&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/crontab&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/crontab','[{\"cis\": [\"5.1.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6634,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;are&#x20;configured','This&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;an&#x20;hourly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.hourly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.hourly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.hourly','[{\"cis\": [\"5.1.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6635,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;are&#x20;configured','The&#x20;/etc/cron.daily&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;daily&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.daily&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.daily&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.daily','[{\"cis\": [\"5.1.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6636,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;are&#x20;configured','The&#x20;/etc/cron.weekly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;weekly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.weekly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.weekly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.weekly','[{\"cis\": [\"5.1.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6637,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;are&#x20;configured','The&#x20;/etc/cron.monthly&#x20;directory&#x20;contains&#x20;system&#x20;cron&#x20;jobs&#x20;that&#x20;need&#x20;to&#x20;run&#x20;on&#x20;a&#x20;monthly&#x20;basis.&#x20;The&#x20;files&#x20;in&#x20;this&#x20;directory&#x20;cannot&#x20;be&#x20;manipulated&#x20;by&#x20;the&#x20;crontab&#x20;command,&#x20;but&#x20;are&#x20;instead&#x20;edited&#x20;by&#x20;system&#x20;administrators&#x20;using&#x20;a&#x20;text&#x20;editor.&#x20;The&#x20;commands&#x20;below&#x20;restrict&#x20;read/write&#x20;and&#x20;search&#x20;access&#x20;to&#x20;user&#x20;and&#x20;group&#x20;root,&#x20;preventing&#x20;regular&#x20;users&#x20;from&#x20;accessing&#x20;this&#x20;directory.','Granting&#x20;write&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;for&#x20;non-privileged&#x20;users&#x20;could&#x20;provide&#x20;them&#x20;the&#x20;means&#x20;for&#x20;gaining&#x20;unauthorized&#x20;elevated&#x20;privileges.&#x20;Granting&#x20;read&#x20;access&#x20;to&#x20;this&#x20;directory&#x20;could&#x20;give&#x20;an&#x20;unprivileged&#x20;user&#x20;insight&#x20;in&#x20;how&#x20;to&#x20;gain&#x20;elevated&#x20;privileges&#x20;or&#x20;circumvent&#x20;auditing&#x20;controls.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.monthly&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.monthly&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.monthly','[{\"cis\": [\"5.1.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6638,'Ensure&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;are&#x20;configured','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/cron.d&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.d&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.d','[{\"cis\": [\"5.1.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6639,'Ensure&#x20;at/cron&#x20;is&#x20;restricted&#x20;to&#x20;authorized&#x20;users','Configure&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;to&#x20;allow&#x20;specific&#x20;users&#x20;to&#x20;use&#x20;these&#x20;services.&#x20;If&#x20;/etc/cron.allow&#x20;or&#x20;/etc/at.allow&#x20;do&#x20;not&#x20;exist,&#x20;then&#x20;/etc/at.deny&#x20;and&#x20;/etc/cron.deny&#x20;are&#x20;checked.&#x20;Any&#x20;user&#x20;not&#x20;specifically&#x20;defined&#x20;in&#x20;those&#x20;files&#x20;is&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;By&#x20;removing&#x20;the&#x20;files,&#x20;only&#x20;users&#x20;in&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;are&#x20;allowed&#x20;to&#x20;use&#x20;at&#x20;and&#x20;cron.&#x20;Note&#x20;that&#x20;even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow&#x20;,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;is&#x20;authorized&#x20;to&#x20;schedule&#x20;cron&#x20;jobs.&#x20;Using&#x20;the&#x20;cron.allow&#x20;file&#x20;to&#x20;control&#x20;who&#x20;can&#x20;run&#x20;cron&#x20;jobs&#x20;enforces&#x20;this&#x20;policy.&#x20;It&#x20;is&#x20;easier&#x20;to&#x20;manage&#x20;an&#x20;allow&#x20;list&#x20;than&#x20;a&#x20;deny&#x20;list.&#x20;In&#x20;a&#x20;deny&#x20;list,&#x20;you&#x20;could&#x20;potentially&#x20;add&#x20;a&#x20;user&#x20;ID&#x20;to&#x20;the&#x20;system&#x20;and&#x20;forget&#x20;to&#x20;add&#x20;it&#x20;to&#x20;the&#x20;deny&#x20;files.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;remove&#x20;/etc/cron.deny&#x20;and&#x20;/etc/at.deny&#x20;and&#x20;create&#x20;and&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;for&#x20;/etc/cron.allow&#x20;and&#x20;/etc/at.allow&#x20;:&#x20;#&#x20;rm&#x20;/etc/cron.deny&#x20;#&#x20;rm&#x20;/etc/at.deny&#x20;#&#x20;touch&#x20;/etc/cron.allow&#x20;#&#x20;touch&#x20;/etc/at.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/cron.allow&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/at.allow&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/cron.allow','[{\"cis\": [\"5.1.8\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6640,'Ensure&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;are&#x20;configured','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;contains&#x20;configuration&#x20;specifications&#x20;for&#x20;sshd.&#x20;The&#x20;command&#x20;below&#x20;sets&#x20;the&#x20;owner&#x20;and&#x20;group&#x20;of&#x20;the&#x20;file&#x20;to&#x20;root.','The&#x20;/etc/ssh/sshd_config&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;/etc/ssh/sshd_config&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/ssh/sshd_config&#x20;#&#x20;chmod&#x20;og-rwx&#x20;/etc/ssh/sshd_config','[{\"cis\": [\"5.2.1\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6641,'Ensure&#x20;SSH&#x20;access&#x20;is&#x20;limited','There&#x20;are&#x20;several&#x20;options&#x20;available&#x20;to&#x20;limit&#x20;which&#x20;users&#x20;and&#x20;group&#x20;can&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;at&#x20;least&#x20;one&#x20;of&#x20;the&#x20;following&#x20;options&#x20;be&#x20;leveraged:&#x20;AllowUsers&#x20;The&#x20;AllowUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;only&#x20;allowing&#x20;the&#x20;allowed&#x20;users&#x20;to&#x20;log&#x20;in&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;AllowGroups&#x20;The&#x20;AllowGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;allowing&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;DenyUsers&#x20;The&#x20;DenyUsers&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;user&#x20;names.&#x20;Numeric&#x20;user&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.&#x20;If&#x20;a&#x20;system&#x20;administrator&#x20;wants&#x20;to&#x20;restrict&#x20;user&#x20;access&#x20;further&#x20;by&#x20;specifically&#x20;denying&#x20;a&#x20;user&#039;s&#x20;access&#x20;from&#x20;a&#x20;particular&#x20;host,&#x20;the&#x20;entry&#x20;can&#x20;be&#x20;specified&#x20;in&#x20;the&#x20;form&#x20;of&#x20;user@host.&#x20;DenyGroups&#x20;The&#x20;DenyGroups&#x20;variable&#x20;gives&#x20;the&#x20;system&#x20;administrator&#x20;the&#x20;option&#x20;of&#x20;denying&#x20;specific&#x20;groups&#x20;of&#x20;users&#x20;to&#x20;ssh&#x20;into&#x20;the&#x20;system.&#x20;The&#x20;list&#x20;consists&#x20;of&#x20;space&#x20;separated&#x20;group&#x20;names.&#x20;Numeric&#x20;group&#x20;IDs&#x20;are&#x20;not&#x20;recognized&#x20;with&#x20;this&#x20;variable.','Restricting&#x20;which&#x20;users&#x20;can&#x20;remotely&#x20;access&#x20;the&#x20;system&#x20;via&#x20;SSH&#x20;will&#x20;help&#x20;ensure&#x20;that&#x20;only&#x20;authorized&#x20;users&#x20;access&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;one&#x20;or&#x20;more&#x20;of&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowUsers&#x20;&lt;userlist&gt;;&#x20;AllowGroups&#x20;&lt;grouplist&gt;;&#x20;DenyUsers&#x20;&lt;userlist&gt;&#x20;and&#x20;DenyGroups&#x20;&lt;grouplist&gt;','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6642,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;private&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;private&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;The&#x20;possession&#x20;of&#x20;the&#x20;private&#x20;key&#x20;is&#x20;proof&#x20;of&#x20;identity.&#x20;Only&#x20;a&#x20;private&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;public&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.&#x20;The&#x20;private&#x20;keys&#x20;need&#x20;to&#x20;be&#x20;stored&#x20;and&#x20;handled&#x20;carefully,&#x20;and&#x20;no&#x20;copies&#x20;of&#x20;the&#x20;private&#x20;key&#x20;should&#x20;be&#x20;distributed.','If&#x20;an&#x20;unauthorized&#x20;user&#x20;obtains&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;file,&#x20;the&#x20;host&#x20;could&#x20;be&#x20;impersonated','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;ownership&#x20;and&#x20;permissions&#x20;on&#x20;the&#x20;private&#x20;SSH&#x20;host&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key&#039;&#x20;-exec&#x20;chmod&#x20;0600&#x20;{}&#x20;;','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6643,'Ensure&#x20;permissions&#x20;on&#x20;SSH&#x20;public&#x20;host&#x20;key&#x20;files&#x20;are&#x20;configured','An&#x20;SSH&#x20;public&#x20;key&#x20;is&#x20;one&#x20;of&#x20;two&#x20;files&#x20;used&#x20;in&#x20;SSH&#x20;public&#x20;key&#x20;authentication.&#x20;In&#x20;this&#x20;authentication&#x20;method,&#x20;a&#x20;public&#x20;key&#x20;is&#x20;a&#x20;key&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;verifying&#x20;digital&#x20;signatures&#x20;generated&#x20;using&#x20;a&#x20;corresponding&#x20;private&#x20;key.&#x20;Only&#x20;a&#x20;public&#x20;key&#x20;that&#x20;corresponds&#x20;to&#x20;a&#x20;private&#x20;key&#x20;will&#x20;be&#x20;able&#x20;to&#x20;authenticate&#x20;successfully.','If&#x20;a&#x20;public&#x20;host&#x20;key&#x20;file&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user,&#x20;the&#x20;SSH&#x20;service&#x20;may&#x20;be&#x20;compromised.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;permissions&#x20;and&#x20;ownership&#x20;on&#x20;the&#x20;SSH&#x20;host&#x20;public&#x20;key&#x20;files:&#x20;#&#x20;find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chmod&#x20;0644&#x20;{}&#x20;;&#x20;#find&#x20;/etc/ssh&#x20;-xdev&#x20;-type&#x20;f&#x20;-name&#x20;&#039;ssh_host_*_key.pub&#039;&#x20;-exec&#x20;chown&#x20;root:root&#x20;{}&#x20;;','[{\"cis\": [\"5.2.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6644,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;appropriate','INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.&#x20;VERBOSE&#x20;level&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;as&#x20;well&#x20;as&#x20;the&#x20;key&#x20;fingerprint&#x20;for&#x20;any&#x20;SSH&#x20;key&#x20;used&#x20;for&#x20;login&#x20;will&#x20;be&#x20;logged.&#x20;This&#x20;information&#x20;is&#x20;important&#x20;for&#x20;SSH&#x20;key&#x20;management,&#x20;especially&#x20;in&#x20;legacy&#x20;environments.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;VERBOSE&#x20;or&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"6.2\", \"6.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6645,'Ensure&#x20;SSH&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;X11Forwarding&#x20;parameter&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;tunnel&#x20;X11&#x20;traffic&#x20;through&#x20;the&#x20;connection&#x20;to&#x20;enable&#x20;remote&#x20;graphic&#x20;connections.','Disable&#x20;X11&#x20;forwarding&#x20;unless&#x20;there&#x20;is&#x20;an&#x20;operational&#x20;requirement&#x20;to&#x20;use&#x20;X11&#x20;applications&#x20;directly.&#x20;There&#x20;is&#x20;a&#x20;small&#x20;risk&#x20;that&#x20;the&#x20;remote&#x20;X11&#x20;servers&#x20;of&#x20;users&#x20;who&#x20;are&#x20;logged&#x20;in&#x20;via&#x20;SSH&#x20;with&#x20;X11&#x20;forwarding&#x20;could&#x20;be&#x20;compromised&#x20;by&#x20;other&#x20;users&#x20;on&#x20;the&#x20;X11&#x20;server.&#x20;Note&#x20;that&#x20;even&#x20;if&#x20;X11&#x20;forwarding&#x20;is&#x20;disabled,&#x20;users&#x20;can&#x20;always&#x20;install&#x20;their&#x20;own&#x20;forwarders.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;X11Forwarding&#x20;no','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6646,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"16.13\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6647,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Ignorerhosts&#x20;yes','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6648,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6649,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su&#x20;.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.10\"]}, {\"cis_csc\": [\"4.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6650,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.11\"]}, {\"cis_csc\": [\"16.3\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6651,'Ensure&#x20;SSH&#x20;PermitUserEnvironment&#x20;is&#x20;disabled','The&#x20;PermitUserEnvironment&#x20;option&#x20;allows&#x20;users&#x20;to&#x20;present&#x20;environment&#x20;options&#x20;to&#x20;the&#x20;ssh&#x20;daemon.','Permitting&#x20;users&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;environment&#x20;variables&#x20;through&#x20;the&#x20;SSH&#x20;daemon&#x20;could&#x20;potentially&#x20;allow&#x20;users&#x20;to&#x20;bypass&#x20;security&#x20;controls&#x20;&#40;e.g.&#x20;setting&#x20;an&#x20;execution&#x20;path&#x20;that&#x20;has&#x20;ssh&#x20;executing&#x20;trojan&#039;d&#x20;programs&#41;','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitUserEnvironment&#x20;no','[{\"cis\": [\"5.2.12\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6652,'Ensure&#x20;SSH&#x20;Idle&#x20;Timeout&#x20;Interval&#x20;is&#x20;configured','The&#x20;two&#x20;options&#x20;ClientAliveInterval&#x20;and&#x20;ClientAliveCountMax&#x20;control&#x20;the&#x20;timeout&#x20;of&#x20;ssh&#x20;sessions.&#x20;When&#x20;the&#x20;ClientAliveInterval&#x20;variable&#x20;is&#x20;set,&#x20;ssh&#x20;sessions&#x20;that&#x20;have&#x20;no&#x20;activity&#x20;for&#x20;the&#x20;specified&#x20;length&#x20;of&#x20;time&#x20;are&#x20;terminated.&#x20;When&#x20;the&#x20;ClientAliveCountMax&#x20;variable&#x20;is&#x20;set,&#x20;sshd&#x20;will&#x20;send&#x20;client&#x20;alive&#x20;messages&#x20;at&#x20;every&#x20;ClientAliveInterval&#x20;interval.&#x20;When&#x20;the&#x20;number&#x20;of&#x20;consecutive&#x20;client&#x20;alive&#x20;messages&#x20;are&#x20;sent&#x20;with&#x20;no&#x20;response&#x20;from&#x20;the&#x20;client,&#x20;the&#x20;ssh&#x20;session&#x20;is&#x20;terminated.&#x20;For&#x20;example,&#x20;if&#x20;the&#x20;ClientAliveInterval&#x20;is&#x20;set&#x20;to&#x20;15&#x20;seconds&#x20;and&#x20;the&#x20;ClientAliveCountMax&#x20;is&#x20;set&#x20;to&#x20;3,&#x20;the&#x20;client&#x20;ssh&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;45&#x20;seconds&#x20;of&#x20;idle&#x20;time.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;connection&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;ssh&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;300&#x20;seconds&#x20;&#40;5&#x20;minutes&#41;,&#x20;set&#x20;this&#x20;timeout&#x20;value&#x20;based&#x20;on&#x20;site&#x20;policy.&#x20;The&#x20;recommended&#x20;setting&#x20;for&#x20;ClientAliveCountMax&#x20;is&#x20;0.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;client&#x20;session&#x20;will&#x20;be&#x20;terminated&#x20;after&#x20;5&#x20;minutes&#x20;of&#x20;idle&#x20;time&#x20;and&#x20;no&#x20;keepalive&#x20;messages&#x20;will&#x20;be&#x20;sent.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameters&#x20;according&#x20;to&#x20;site&#x20;policy:&#x20;ClientAliveInterval&#x20;300&#x20;and&#x20;ClientAliveCountMax&#x20;0','[{\"cis\": [\"5.2.13\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(6653,'Ensure&#x20;SSH&#x20;LoginGraceTime&#x20;is&#x20;set&#x20;to&#x20;one&#x20;minute&#x20;or&#x20;less','The&#x20;LoginGraceTime&#x20;parameter&#x20;specifies&#x20;the&#x20;time&#x20;allowed&#x20;for&#x20;successful&#x20;authentication&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;The&#x20;longer&#x20;the&#x20;Grace&#x20;period&#x20;is&#x20;the&#x20;more&#x20;open&#x20;unauthenticated&#x20;connections&#x20;can&#x20;exist.&#x20;Like&#x20;other&#x20;session&#x20;controls&#x20;in&#x20;this&#x20;session&#x20;the&#x20;Grace&#x20;Period&#x20;should&#x20;be&#x20;limited&#x20;to&#x20;appropriate&#x20;organizational&#x20;limits&#x20;to&#x20;ensure&#x20;the&#x20;service&#x20;is&#x20;available&#x20;for&#x20;needed&#x20;access.','Setting&#x20;the&#x20;LoginGraceTime&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;It&#x20;will&#x20;also&#x20;limit&#x20;the&#x20;number&#x20;of&#x20;concurrent&#x20;unauthenticated&#x20;connections&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;60&#x20;seconds&#x20;&#40;1&#x20;Minute&#41;,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LoginGraceTime&#x20;60','[{\"cis\": [\"5.2.14\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6654,'Ensure&#x20;SSH&#x20;warning&#x20;banner&#x20;is&#x20;configured','The&#x20;Banner&#x20;parameter&#x20;specifies&#x20;a&#x20;file&#x20;whose&#x20;contents&#x20;must&#x20;be&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;permitted.&#x20;By&#x20;default,&#x20;no&#x20;banner&#x20;is&#x20;displayed.','Banners&#x20;are&#x20;used&#x20;to&#x20;warn&#x20;connecting&#x20;users&#x20;of&#x20;the&#x20;particular&#x20;site&#039;s&#x20;policy&#x20;regarding&#x20;connection.&#x20;Presenting&#x20;a&#x20;warning&#x20;message&#x20;prior&#x20;to&#x20;the&#x20;normal&#x20;user&#x20;login&#x20;may&#x20;assist&#x20;the&#x20;prosecution&#x20;of&#x20;trespassers&#x20;on&#x20;the&#x20;computer&#x20;system.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Banner&#x20;/etc/issue.net','[{\"cis\": [\"5.2.15\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6655,'Ensure&#x20;SSH&#x20;PAM&#x20;is&#x20;enabled','UsePAM&#x20;Enables&#x20;the&#x20;Pluggable&#x20;Authentication&#x20;Module&#x20;interface.&#x20;If&#x20;set&#x20;to&#x20;&ldquo;yes&rdquo;&#x20;this&#x20;will&#x20;enable&#x20;PAM&#x20;authentication&#x20;using&#x20;ChallengeResponseAuthentication&#x20;and&#x20;PasswordAuthentication&#x20;in&#x20;addition&#x20;to&#x20;PAM&#x20;account&#x20;and&#x20;session&#x20;module&#x20;processing&#x20;for&#x20;all&#x20;authentication&#x20;types.','When&#x20;usePAM&#x20;is&#x20;set&#x20;to&#x20;yes,&#x20;PAM&#x20;runs&#x20;through&#x20;account&#x20;and&#x20;session&#x20;types&#x20;properly.&#x20;This&#x20;is&#x20;important&#x20;if&#x20;you&#x20;want&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;services&#x20;based&#x20;off&#x20;of&#x20;IP,&#x20;time&#x20;or&#x20;other&#x20;factors&#x20;of&#x20;the&#x20;account.&#x20;Additionally,&#x20;you&#x20;can&#x20;make&#x20;sure&#x20;users&#x20;inherit&#x20;certain&#x20;environment&#x20;variables&#x20;on&#x20;login&#x20;or&#x20;disallow&#x20;access&#x20;to&#x20;the&#x20;server.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;UsePAM&#x20;yes','[{\"cis\": [\"5.2.16\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6656,'Ensure&#x20;SSH&#x20;AllowTcpForwarding&#x20;is&#x20;disabled','SSH&#x20;port&#x20;forwarding&#x20;is&#x20;a&#x20;mechanism&#x20;in&#x20;SSH&#x20;for&#x20;tunneling&#x20;application&#x20;ports&#x20;from&#x20;the&#x20;client&#x20;to&#x20;the&#x20;server,&#x20;or&#x20;servers&#x20;to&#x20;clients.&#x20;It&#x20;can&#x20;be&#x20;used&#x20;for&#x20;adding&#x20;encryption&#x20;to&#x20;legacy&#x20;applications,&#x20;going&#x20;through&#x20;firewalls,&#x20;and&#x20;some&#x20;system&#x20;administrators&#x20;and&#x20;IT&#x20;professionals&#x20;use&#x20;it&#x20;for&#x20;opening&#x20;backdoors&#x20;into&#x20;the&#x20;internal&#x20;network&#x20;from&#x20;their&#x20;home&#x20;machines.','Leaving&#x20;port&#x20;forwarding&#x20;enabled&#x20;can&#x20;expose&#x20;the&#x20;organization&#x20;to&#x20;security&#x20;risks&#x20;and&#x20;back-doors.&#x20;SSH&#x20;connections&#x20;are&#x20;protected&#x20;with&#x20;strong&#x20;encryption.&#x20;This&#x20;makes&#x20;their&#x20;contents&#x20;invisible&#x20;to&#x20;most&#x20;deployed&#x20;network&#x20;monitoring&#x20;and&#x20;traffic&#x20;filtering&#x20;solutions.&#x20;This&#x20;invisibility&#x20;carries&#x20;considerable&#x20;risk&#x20;potential&#x20;if&#x20;it&#x20;is&#x20;used&#x20;for&#x20;malicious&#x20;purposes&#x20;such&#x20;as&#x20;data&#x20;exfiltration.&#x20;Cybercriminals&#x20;or&#x20;malware&#x20;could&#x20;exploit&#x20;SSH&#x20;to&#x20;hide&#x20;their&#x20;unauthorized&#x20;communications,&#x20;or&#x20;to&#x20;exfiltrate&#x20;stolen&#x20;data&#x20;from&#x20;the&#x20;target&#x20;network.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;AllowTcpForwarding&#x20;no','[{\"cis\": [\"5.2.17\"]}, {\"cis_csc\": [\"9.2\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6657,'Ensure&#x20;SSH&#x20;MaxSessions&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxSessions&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;open&#x20;sessions&#x20;permitted&#x20;from&#x20;a&#x20;given&#x20;connection.','To&#x20;protect&#x20;a&#x20;system&#x20;from&#x20;denial&#x20;of&#x20;service&#x20;due&#x20;to&#x20;a&#x20;large&#x20;number&#x20;of&#x20;concurrent&#x20;sessions,&#x20;use&#x20;the&#x20;rate&#x20;limiting&#x20;function&#x20;of&#x20;MaxSessions&#x20;to&#x20;protect&#x20;availability&#x20;of&#x20;sshd&#x20;logins&#x20;and&#x20;prevent&#x20;overwhelming&#x20;the&#x20;daemon.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxSessions&#x20;4','[{\"cis\": [\"5.2.19\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6658,'Ensure&#x20;system-wide&#x20;crypto&#x20;policy&#x20;is&#x20;not&#x20;over-ridden','System-wide&#x20;Crypto&#x20;policy&#x20;can&#x20;be&#x20;over-ridden&#x20;or&#x20;opted&#x20;out&#x20;of&#x20;for&#x20;openSSH','Over-riding&#x20;or&#x20;opting&#x20;out&#x20;of&#x20;the&#x20;system-wide&#x20;crypto&#x20;policy&#x20;could&#x20;allow&#x20;for&#x20;the&#x20;use&#x20;of&#x20;less&#x20;secure&#x20;Ciphers,&#x20;MACs,&#x20;KexAlgoritms&#x20;and&#x20;GSSAPIKexAlgorithsm','','Run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;CRYPTO_POLICYs*=.*&#41;$/#&#x20;1/&quot;&#x20;/etc/sysconfig/sshd;&#x20;#&#x20;systemctl&#x20;reload&#x20;sshd','[{\"cis\": [\"5.2.20\"]}, {\"cis_csc\": [\"14.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(6659,'Create&#x20;custom&#x20;authselect&#x20;profile','A&#x20;custom&#x20;profile&#x20;can&#x20;be&#x20;created&#x20;by&#x20;copying&#x20;and&#x20;customizing&#x20;one&#x20;of&#x20;the&#x20;default&#x20;profiles.&#x20;The&#x20;default&#x20;profiles&#x20;include:&#x20;sssd,&#x20;winbind,&#x20;or&#x20;the&#x20;nis.','A&#x20;custom&#x20;profile&#x20;is&#x20;required&#x20;to&#x20;customize&#x20;many&#x20;of&#x20;the&#x20;pam&#x20;options','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;create&#x20;a&#x20;custom&#x20;authselect&#x20;profile:&#x20;#&#x20;authselect&#x20;create-profile&#x20;&lt;custom-profile&#x20;name&gt;&#x20;-b&#x20;&lt;default&#x20;profile&#x20;to&#x20;copy&gt;&#x20;.Example:&#x20;#&#x20;authselect&#x20;create-profile&#x20;custom-profile&#x20;-b&#x20;sssd&#x20;--symlink-meta','[{\"cis\": [\"5.3.1\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6660,'Ensure&#x20;authselect&#x20;includes&#x20;with-faillock','The&#x20;pam_faillock.so&#x20;module&#x20;maintains&#x20;a&#x20;list&#x20;of&#x20;failed&#x20;authentication&#x20;attempts&#x20;per&#x20;user&#x20;during&#x20;a&#x20;specified&#x20;interval&#x20;and&#x20;locks&#x20;the&#x20;account&#x20;in&#x20;case&#x20;there&#x20;were&#x20;more&#x20;than&#x20;deny&#x20;consecutive&#x20;failed&#x20;authentications.&#x20;It&#x20;stores&#x20;the&#x20;failure&#x20;records&#x20;into&#x20;per-user&#x20;files&#x20;in&#x20;the&#x20;tally&#x20;directory.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;include&#x20;the&#x20;with-faillock&#x20;option:&#x20;#&#x20;authselect&#x20;select&#x20;&lt;PROFILE&#x20;NAME&gt;&#x20;with-faillock&#x20;&#x20;&#x20;&#x20;Example:&#x20;#&#x20;authselect&#x20;select&#x20;custom/custom-profile&#x20;with-sudo&#x20;with-faillock&#x20;without-nullok','[{\"cis\": [\"5.3.3\"]}, {\"pci_dss\": [\"8.1\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6661,'Ensure&#x20;password&#x20;creation&#x20;requirements&#x20;are&#x20;configured','The&#x20;pam_pwquality.so&#x20;module&#x20;checks&#x20;the&#x20;strength&#x20;of&#x20;passwords.&#x20;It&#x20;performs&#x20;checks&#x20;such&#x20;as&#x20;making&#x20;sure&#x20;a&#x20;password&#x20;is&#x20;not&#x20;a&#x20;dictionary&#x20;word,&#x20;it&#x20;is&#x20;a&#x20;certain&#x20;length,&#x20;contains&#x20;a&#x20;mix&#x20;of&#x20;characters&#x20;&#40;e.g.&#x20;alphabet,&#x20;numeric,&#x20;other&#41;&#x20;and&#x20;more.&#x20;The&#x20;following&#x20;are&#x20;definitions&#x20;of&#x20;the&#x20;pam_pwquality.so&#x20;options.&#x20;try_first_pass&#x20;-&#x20;retrieve&#x20;the&#x20;password&#x20;from&#x20;a&#x20;previous&#x20;stacked&#x20;PAM&#x20;module.&#x20;If&#x20;not&#x20;available,&#x20;then&#x20;prompt&#x20;the&#x20;user&#x20;for&#x20;a&#x20;password.&#x20;retry=3&#x20;-&#x20;Allow&#x20;3&#x20;tries&#x20;before&#x20;sending&#x20;back&#x20;a&#x20;failure.&#x20;minlen=14&#x20;-&#x20;password&#x20;must&#x20;be&#x20;14&#x20;characters&#x20;or&#x20;more&#x20;Either&#x20;of&#x20;the&#x20;following&#x20;can&#x20;be&#x20;used&#x20;to&#x20;enforce&#x20;complex&#x20;passwords:&#x20;minclass=4&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;four&#x20;classes&#x20;of&#x20;characters&#x20;for&#x20;the&#x20;new&#x20;password&#x20;OR&#x20;dcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;digit&#x20;ucredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;uppercase&#x20;character&#x20;ocredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;special&#x20;character&#x20;lcredit=-1&#x20;-&#x20;provide&#x20;at&#x20;least&#x20;one&#x20;lowercase&#x20;character&#x20;The&#x20;settings&#x20;shown&#x20;above&#x20;are&#x20;one&#x20;possible&#x20;policy.&#x20;Alter&#x20;these&#x20;values&#x20;to&#x20;conform&#x20;to&#x20;your&#x20;own&#x20;organization&#039;s&#x20;password&#x20;policies','Strong&#x20;passwords&#x20;protect&#x20;systems&#x20;from&#x20;being&#x20;hacked&#x20;through&#x20;brute&#x20;force&#x20;methods.','','Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;length&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minlen&#x20;=&#x20;14&#x20;Edit&#x20;the&#x20;file&#x20;/etc/security/pwquality.conf&#x20;and&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;following&#x20;line&#x20;for&#x20;password&#x20;complexity&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy:&#x20;minclass&#x20;=&#x20;4&#x20;OR&#x20;dcredit&#x20;=&#x20;-1&#x20;ucredit&#x20;=&#x20;-1&#x20;ocredit&#x20;=&#x20;-1&#x20;-1&#x20;=&#x20;-1&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;system-auth&#x20;and&#x20;password-auth&#x20;files:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&#039;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&#039;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/$FN&#x20;||&#x20;PTF=/etc/authselect/$FN&#x20;[[&#x20;-z&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+requisites+pam_pwquality.sos+.*enforce-for-roots*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+requisites+pam_pwquality.sos+&#41;&#40;.*&#41;$/12&#x20;enforce-for-root/&#039;&#x20;$PTF&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+requisites+pam_pwquality.sos+.*s+retry=S+s*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;/pwquality/s/retry=S+/retry=3/&#039;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+requisites+pam_pwquality.sos+&#41;&#40;.*&#41;$/12&#x20;retry=3/&#039;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.3\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6662,'Ensure&#x20;lockout&#x20;for&#x20;failed&#x20;password&#x20;attempts&#x20;is&#x20;configured','Lock&#x20;out&#x20;users&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts.&#x20;deny=&#x20;-&#x20;Number&#x20;of&#x20;attempts&#x20;before&#x20;the&#x20;account&#x20;is&#x20;locked.&#x20;unlock_time=&#x20;-&#x20;Time&#x20;in&#x20;seconds&#x20;before&#x20;the&#x20;account&#x20;is&#x20;unlocked.&#x20;Set&#x20;the&#x20;lockout&#x20;number&#x20;and&#x20;unlock&#x20;time&#x20;to&#x20;follow&#x20;local&#x20;site&#x20;policy.','Locking&#x20;out&#x20;user&#x20;IDs&#x20;after&#x20;n&#x20;unsuccessful&#x20;consecutive&#x20;login&#x20;attempts&#x20;mitigates&#x20;brute&#x20;force&#x20;password&#x20;attacks&#x20;against&#x20;your&#x20;systems.','','Set&#x20;password&#x20;lockouts&#x20;and&#x20;unlock&#x20;times&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.&#x20;Run&#x20;the&#x20;following&#x20;to&#x20;update&#x20;the&#x20;system-auth&#x20;and&#x20;password-auth&#x20;files.&#x20;This&#x20;script&#x20;will&#x20;update/add&#x20;the&#x20;deny=5&#x20;and&#x20;unlock_time=900&#x20;options.&#x20;This&#x20;script&#x20;should&#x20;be&#x20;modified&#x20;as&#x20;needed&#x20;to&#x20;follow&#x20;local&#x20;site&#x20;policy.CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&quot;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&quot;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/$FN&#x20;||&#x20;PTF=/etc/authselect/$FN&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*auths+requireds+pam_faillock.sos+.*deny=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;/pam_faillock.so/s/deny=S+/deny=5/g&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^^s*&#40;auths+requireds+pam_faillock.sos+&#41;&#40;.*[^{}]&#41;&#40;{.*}|&#41;$/12&#x20;deny=5&#x20;3/&quot;&#x20;$PTF&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*auths+requireds+pam_faillock.sos+.*unlock_time=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;/pam_faillock.so/s/unlock_time=S+/unlock_time=900/g&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;auths+requireds+pam_faillock.sos+&#41;&#40;.*[^{}]&#41;&#40;{.*}|&#41;$/12&#x20;unlock_time=900&#x20;3/&quot;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.2\"]}, {\"cis_csc\": [\"16.7\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6663,'Ensure&#x20;password&#x20;reuse&#x20;is&#x20;limited','The&#x20;/etc/security/opasswd&#x20;file&#x20;stores&#x20;the&#x20;users&quot;&#x20;old&#x20;passwords&#x20;and&#x20;can&#x20;be&#x20;checked&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;are&#x20;not&#x20;recycling&#x20;recent&#x20;passwords.&#x20;remember=&lt;5&gt;&#x20;-&#x20;Number&#x20;of&#x20;old&#x20;passwords&#x20;to&#x20;remember','Forcing&#x20;users&#x20;not&#x20;to&#x20;reuse&#x20;their&#x20;past&#x20;5&#x20;passwords&#x20;make&#x20;it&#x20;less&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;will&#x20;be&#x20;able&#x20;to&#x20;guess&#x20;the&#x20;password.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;remembered&#x20;password&#x20;history&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy.&#x20;Run&#x20;the&#x20;following&#x20;script&#x20;to&#x20;add&#x20;or&#x20;modify&#x20;the&#x20;pam_pwhistory.so&#x20;and&#x20;pam_unix.so&#x20;lines&#x20;to&#x20;include&#x20;the&#x20;remember&#x20;option:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&quot;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&quot;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;[[&#x20;-n&#x20;$CP&#x20;]]&#x20;&amp;&amp;&#x20;PTF=/etc/authselect/$CP/system-auth&#x20;||&#x20;PTF=/etc/authselect/system-auth&#x20;[[&#x20;-n&#x20;$&#40;grep&#x20;-E&#x20;&quot;^s*passwords+&#40;sufficients+pam_unix|requi&#40;red|site&#41;s+pam_pwhistory&#41;.sos+&#x20;&#40;[^#]+s+&#41;*remember=S+s*.*$&quot;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;passwords+&#40;requisite|sufficient&#41;s+&#40;pam_pwquality.so|pam_unix.so&#41;s+&#41;&#40;.*&#41;&#40;remember=S+s*&#41;&#40;.*&#41;$/14&#x20;remember=5&#x20;6/&quot;&#x20;$PTF&#x20;||&#x20;sed&#x20;-ri&#x20;&quot;s/^s*&#40;passwords+&#40;requisite|sufficient&#41;s+&#40;pam_pwquality.so|pam_unix.so&#41;s+&#41;&#40;.*&#41;$/14&#x20;remember=5/&quot;&#x20;$PTF&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"8.2.5\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6664,'Ensure&#x20;password&#x20;hashing&#x20;algorithm&#x20;is&#x20;SHA-512','The&#x20;commands&#x20;below&#x20;change&#x20;password&#x20;encryption&#x20;from&#x20;md5&#x20;to&#x20;sha512&#x20;&#40;a&#x20;much&#x20;stronger&#x20;hashing&#x20;algorithm&#41;.&#x20;All&#x20;existing&#x20;accounts&#x20;will&#x20;need&#x20;to&#x20;perform&#x20;a&#x20;password&#x20;change&#x20;to&#x20;upgrade&#x20;the&#x20;stored&#x20;hashes&#x20;to&#x20;the&#x20;new&#x20;algorithm.','The&#x20;SHA-512&#x20;algorithm&#x20;provides&#x20;much&#x20;stronger&#x20;hashing&#x20;than&#x20;MD5,&#x20;thus&#x20;providing&#x20;additional&#x20;protection&#x20;to&#x20;the&#x20;system&#x20;by&#x20;increasing&#x20;the&#x20;level&#x20;of&#x20;effort&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;successfully&#x20;determine&#x20;passwords.&#x20;Note&#x20;that&#x20;these&#x20;change&#x20;only&#x20;apply&#x20;to&#x20;accounts&#x20;configured&#x20;on&#x20;the&#x20;local&#x20;system.','','Set&#x20;password&#x20;hashing&#x20;algorithm&#x20;to&#x20;sha512.&#x20;Run&#x20;the&#x20;following&#x20;script&#x20;to&#x20;dd&#x20;or&#x20;modify&#x20;the&#x20;pam_unix.so&#x20;lines&#x20;in&#x20;the&#x20;password-auth&#x20;and&#x20;system-auth&#x20;files&#x20;to&#x20;include&#x20;the&#x20;sha512&#x20;option:&#x20;CP=$&#40;authselect&#x20;current&#x20;|&#x20;awk&#x20;&#039;NR&#x20;==&#x20;1&#x20;{print&#x20;$3}&#039;&#x20;|&#x20;grep&#x20;custom/&#41;&#x20;for&#x20;FN&#x20;in&#x20;system-auth&#x20;password-auth;&#x20;do&#x20;[[&#x20;-z&#x20;$&#40;grep&#x20;-E&#x20;&#039;^s*passwords+sufficients+pam_unix.sos+.*sha512s*.*$&#039;&#x20;$PTF&#41;&#x20;]]&#x20;&amp;&amp;&#x20;sed&#x20;-ri&#x20;&#039;s/^s*&#40;passwords+sufficients+pam_unix.sos+&#41;&#40;.*&#41;$/12&#x20;sha512/&#039;&#x20;$PTF&#x20;done&#x20;authselect&#x20;apply-changes','[{\"cis\": [\"5.4.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"3.6.1\", \"8.2.1\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\"]}]'),(6665,'Ensure&#x20;password&#x20;expiration&#x20;is&#x20;365&#x20;days&#x20;or&#x20;less','The&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;force&#x20;passwords&#x20;to&#x20;expire&#x20;once&#x20;they&#x20;reach&#x20;a&#x20;defined&#x20;age.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;less&#x20;than&#x20;or&#x20;equal&#x20;to&#x20;365&#x20;days.','The&#x20;window&#x20;of&#x20;opportunity&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;leverage&#x20;compromised&#x20;credentials&#x20;or&#x20;successfully&#x20;compromise&#x20;credentials&#x20;via&#x20;an&#x20;online&#x20;brute&#x20;force&#x20;attack&#x20;is&#x20;limited&#x20;by&#x20;the&#x20;age&#x20;of&#x20;the&#x20;password.&#x20;Therefore,&#x20;reducing&#x20;the&#x20;maximum&#x20;age&#x20;of&#x20;a&#x20;password&#x20;also&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;window&#x20;of&#x20;opportunity.','','Set&#x20;the&#x20;PASS_MAX_DAYS&#x20;parameter&#x20;to&#x20;conform&#x20;to&#x20;site&#x20;policy&#x20;in&#x20;/etc/login.defs&#x20;:&#x20;PASS_MAX_DAYS&#x20;90&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--maxdays&#x20;90&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2.4\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6666,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;prevent&#x20;users&#x20;from&#x20;changing&#x20;their&#x20;password&#x20;until&#x20;a&#x20;minimum&#x20;number&#x20;of&#x20;days&#x20;have&#x20;passed&#x20;since&#x20;the&#x20;last&#x20;time&#x20;the&#x20;user&#x20;changed&#x20;their&#x20;password.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','By&#x20;restricting&#x20;the&#x20;frequency&#x20;of&#x20;password&#x20;changes,&#x20;an&#x20;administrator&#x20;can&#x20;prevent&#x20;users&#x20;from&#x20;repeatedly&#x20;changing&#x20;their&#x20;password&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;circumvent&#x20;password&#x20;reuse&#x20;controls.','','Set&#x20;the&#x20;PASS_MIN_DAYS&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_MIN_DAYS&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--mindays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.2\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6667,'Ensure&#x20;minimum&#x20;days&#x20;between&#x20;password&#x20;changes&#x20;is&#x20;7&#x20;or&#x20;more','The&#x20;PASS_WARN_AGE&#x20;parameter&#x20;in&#x20;/etc/login.defs&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;notify&#x20;users&#x20;that&#x20;their&#x20;password&#x20;will&#x20;expire&#x20;in&#x20;a&#x20;defined&#x20;number&#x20;of&#x20;days.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;be&#x20;set&#x20;to&#x20;7&#x20;or&#x20;more&#x20;days.','Providing&#x20;an&#x20;advance&#x20;warning&#x20;that&#x20;a&#x20;password&#x20;will&#x20;be&#x20;expiring&#x20;gives&#x20;users&#x20;time&#x20;to&#x20;think&#x20;of&#x20;a&#x20;secure&#x20;password.&#x20;Users&#x20;caught&#x20;unaware&#x20;may&#x20;choose&#x20;a&#x20;simple&#x20;password&#x20;or&#x20;write&#x20;it&#x20;down&#x20;where&#x20;it&#x20;may&#x20;be&#x20;discovered.','','Set&#x20;the&#x20;PASS_WARN_AGE&#x20;parameter&#x20;to&#x20;7&#x20;in&#x20;/etc/login.defs:&#x20;PASS_WARN_AGE&#x20;7&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--warndays&#x20;7&#x20;&lt;user&gt;','[{\"cis\": [\"5.5.1.3\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6668,'Ensure&#x20;inactive&#x20;password&#x20;lock&#x20;is&#x20;30&#x20;days&#x20;or&#x20;less','User&#x20;accounts&#x20;that&#x20;have&#x20;been&#x20;inactive&#x20;for&#x20;over&#x20;a&#x20;given&#x20;period&#x20;of&#x20;time&#x20;can&#x20;be&#x20;automatically&#x20;disabled.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;accounts&#x20;that&#x20;are&#x20;inactive&#x20;for&#x20;30&#x20;days&#x20;after&#x20;password&#x20;expiration&#x20;be&#x20;disabled.','Inactive&#x20;accounts&#x20;pose&#x20;a&#x20;threat&#x20;to&#x20;system&#x20;security&#x20;since&#x20;the&#x20;users&#x20;are&#x20;not&#x20;logging&#x20;in&#x20;to&#x20;notice&#x20;failed&#x20;login&#x20;attempts&#x20;or&#x20;other&#x20;anomalies.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;default&#x20;password&#x20;inactivity&#x20;period&#x20;to&#x20;30&#x20;days:&#x20;useradd&#x20;-D&#x20;-f&#x20;30&#x20;and&#x20;modify&#x20;user&#x20;parameters&#x20;for&#x20;all&#x20;users&#x20;with&#x20;a&#x20;password&#x20;set&#x20;to&#x20;match:&#x20;chage&#x20;--inactive&#x20;30&#x20;&lt;user&gt;','[{\"cis\": [\"5.4.1.4\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6669,'Ensure&#x20;default&#x20;user&#x20;shell&#x20;timeout&#x20;is&#x20;900&#x20;seconds&#x20;or&#x20;less','The&#x20;default&#x20;TMOUT&#x20;determines&#x20;the&#x20;shell&#x20;timeout&#x20;for&#x20;users.&#x20;The&#x20;TMOUT&#x20;value&#x20;is&#x20;measured&#x20;in&#x20;seconds.','Having&#x20;no&#x20;timeout&#x20;value&#x20;associated&#x20;with&#x20;a&#x20;shell&#x20;could&#x20;allow&#x20;an&#x20;unauthorized&#x20;user&#x20;access&#x20;to&#x20;another&#x20;user&#039;s&#x20;shell&#x20;session&#x20;&#40;e.g.&#x20;user&#x20;walks&#x20;away&#x20;from&#x20;their&#x20;computer&#x20;and&#x20;doesn&#039;t&#x20;lock&#x20;the&#x20;screen&#41;.&#x20;Setting&#x20;a&#x20;timeout&#x20;value&#x20;at&#x20;least&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;this&#x20;happening.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;readonly&#x20;TMOUT=900&#x20;;&#x20;export&#x20;TMOUT&#x20;.&#x20;Note&#x20;that&#x20;setting&#x20;the&#x20;value&#x20;to&#x20;readonly&#x20;prevents&#x20;unwanted&#x20;modification&#x20;during&#x20;runtime.','[{\"cis\": [\"5.5.3\"]}, {\"cis_csc\": [\"16.11\"]}, {\"pci_dss\": [\"12.3.8\"]}]'),(6670,'Ensure&#x20;default&#x20;group&#x20;for&#x20;the&#x20;root&#x20;account&#x20;is&#x20;GID&#x20;0','The&#x20;usermod&#x20;command&#x20;can&#x20;be&#x20;used&#x20;to&#x20;specify&#x20;which&#x20;group&#x20;the&#x20;root&#x20;user&#x20;belongs&#x20;to.&#x20;This&#x20;affects&#x20;permissions&#x20;of&#x20;files&#x20;that&#x20;are&#x20;created&#x20;by&#x20;the&#x20;root&#x20;user.','Using&#x20;GID&#x20;0&#x20;for&#x20;the&#x20;root&#x20;account&#x20;helps&#x20;prevent&#x20;root&#x20;-owned&#x20;files&#x20;from&#x20;accidentally&#x20;becoming&#x20;accessible&#x20;to&#x20;non-privileged&#x20;users.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;root&#x20;user&#x20;default&#x20;group&#x20;to&#x20;GID&#x20;0:&#x20;usermod&#x20;-g&#x20;0&#x20;root','[{\"cis\": [\"5.5.4\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6671,'Ensure&#x20;default&#x20;user&#x20;umask&#x20;is&#x20;027&#x20;or&#x20;more&#x20;restrictive','The&#x20;default&#x20;umask&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;&#x20;.profile&#x20;,&#x20;.bashrc&#x20;,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;make&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/bashrc&#x20;,&#x20;/etc/profile&#x20;and&#x20;/etc/profile.d&#47;&#42;.sh&#x20;files&#x20;&#40;and&#x20;the&#x20;appropriate&#x20;files&#x20;for&#x20;any&#x20;other&#x20;shell&#x20;supported&#x20;on&#x20;your&#x20;system&#41;&#x20;and&#x20;add&#x20;or&#x20;edit&#x20;any&#x20;umask&#x20;parameters&#x20;as&#x20;follows:&#x20;umask&#x20;027','[{\"cis\": [\"5.5.5\"]}, {\"cis_csc\": [\"5.1\", \"13\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6672,'Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','The&#x20;su&#x20;command&#x20;allows&#x20;a&#x20;user&#x20;to&#x20;run&#x20;a&#x20;command&#x20;or&#x20;shell&#x20;as&#x20;another&#x20;user.&#x20;The&#x20;program&#x20;has&#x20;been&#x20;superseded&#x20;by&#x20;sudo&#x20;,&#x20;which&#x20;allows&#x20;for&#x20;more&#x20;granular&#x20;control&#x20;over&#x20;privileged&#x20;access.&#x20;Normally,&#x20;the&#x20;su&#x20;command&#x20;can&#x20;be&#x20;executed&#x20;by&#x20;any&#x20;user.&#x20;By&#x20;uncommenting&#x20;the&#x20;pam_wheel.so&#x20;statement&#x20;in&#x20;/etc/pam.d/su&#x20;,&#x20;the&#x20;su&#x20;command&#x20;will&#x20;only&#x20;allow&#x20;users&#x20;in&#x20;the&#x20;wheel&#x20;group&#x20;to&#x20;execute&#x20;su&#x20;.','Restricting&#x20;the&#x20;use&#x20;of&#x20;su&#x20;,&#x20;and&#x20;using&#x20;sudo&#x20;in&#x20;its&#x20;place,&#x20;provides&#x20;system&#x20;administrators&#x20;better&#x20;control&#x20;of&#x20;the&#x20;escalation&#x20;of&#x20;user&#x20;privileges&#x20;to&#x20;execute&#x20;privileged&#x20;commands.&#x20;The&#x20;sudo&#x20;utility&#x20;also&#x20;provides&#x20;a&#x20;better&#x20;logging&#x20;and&#x20;audit&#x20;mechanism,&#x20;as&#x20;it&#x20;can&#x20;log&#x20;each&#x20;command&#x20;executed&#x20;via&#x20;sudo&#x20;,&#x20;whereas&#x20;su&#x20;can&#x20;only&#x20;record&#x20;that&#x20;a&#x20;user&#x20;executed&#x20;the&#x20;su&#x20;program.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/pam.d/su&#x20;file:&#x20;auth&#x20;required&#x20;pam_wheel.so&#x20;use_uid','[{\"cis\": [\"5.7\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(6673,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd&#x20;are&#x20;configured','The&#x20;/etc/passwd&#x20;file&#x20;contains&#x20;user&#x20;account&#x20;information&#x20;that&#x20;is&#x20;used&#x20;by&#x20;many&#x20;system&#x20;utilities&#x20;and&#x20;therefore&#x20;must&#x20;be&#x20;readable&#x20;for&#x20;these&#x20;utilities&#x20;to&#x20;operate.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;write&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd&#x20;#&#x20;chmod&#x20;644&#x20;/etc/passwd','[{\"cis\": [\"6.1.2\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6674,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow&#x20;are&#x20;configured','The&#x20;/etc/shadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/shadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;&#40;such&#x20;as&#x20;expiration&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;user&#x20;accounts.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/&#x20;shadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/shadow&#x20;&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-wx&#x20;/etc/shadow','[{\"cis\": [\"6.1.3\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6675,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group&#x20;are&#x20;configured','The&#x20;/etc/group&#x20;file&#x20;contains&#x20;a&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.&#x20;The&#x20;command&#x20;below&#x20;allows&#x20;read/write&#x20;access&#x20;for&#x20;root&#x20;and&#x20;read&#x20;access&#x20;for&#x20;everyone&#x20;else.','The&#x20;/etc/group&#x20;file&#x20;needs&#x20;to&#x20;be&#x20;protected&#x20;from&#x20;unauthorized&#x20;changes&#x20;by&#x20;non-privileged&#x20;users,&#x20;but&#x20;needs&#x20;to&#x20;be&#x20;readable&#x20;as&#x20;this&#x20;information&#x20;is&#x20;used&#x20;with&#x20;many&#x20;non-privileged&#x20;programs.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group','[{\"cis\": [\"6.1.4\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6676,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow&#x20;are&#x20;configured','The&#x20;/etc/gshadow&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;the&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','If&#x20;attackers&#x20;can&#x20;gain&#x20;read&#x20;access&#x20;to&#x20;the&#x20;/etc/gshadow&#x20;file,&#x20;they&#x20;can&#x20;easily&#x20;run&#x20;a&#x20;password&#x20;cracking&#x20;program&#x20;against&#x20;the&#x20;hashed&#x20;password&#x20;to&#x20;break&#x20;it.&#x20;Other&#x20;security&#x20;information&#x20;that&#x20;is&#x20;stored&#x20;in&#x20;the&#x20;/etc/gshadow&#x20;file&#x20;&#40;such&#x20;as&#x20;group&#x20;administrators&#41;&#x20;could&#x20;also&#x20;be&#x20;useful&#x20;to&#x20;subvert&#x20;the&#x20;group','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow','[{\"cis\": [\"6.1.5\"]}, {\"cis_csc\": [\"16.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6677,'Ensure&#x20;permissions&#x20;on&#x20;/etc/passwd-&#x20;are&#x20;configured','The&#x20;/etc/passwd-&#x20;file&#x20;contains&#x20;backup&#x20;user&#x20;account&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/passwd-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/passwd-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/passwd-&#x20;#&#x20;chmod&#x20;600&#x20;/etc/passwd-','[{\"cis\": [\"6.1.6\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6678,'Ensure&#x20;permissions&#x20;on&#x20;/etc/shadow-&#x20;are&#x20;configured','The&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;user&#x20;accounts&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/shadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/shadow-:&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/shadow-&#x20;&#x20;#&#x20;chmod&#x20;u-x,go-rwx&#x20;/etc/shadow-','[{\"cis\": [\"6.1.7\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6679,'Ensure&#x20;permissions&#x20;on&#x20;/etc/group-&#x20;are&#x20;configured','The&#x20;/etc/group-&#x20;file&#x20;contains&#x20;a&#x20;backup&#x20;list&#x20;of&#x20;all&#x20;the&#x20;valid&#x20;groups&#x20;defined&#x20;in&#x20;the&#x20;system.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/group-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/group-:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/group-&#x20;#&#x20;chmod&#x20;644&#x20;/etc/group-','[{\"cis\": [\"6.1.8\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6680,'Ensure&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;are&#x20;configured','The&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;used&#x20;to&#x20;store&#x20;backup&#x20;information&#x20;about&#x20;groups&#x20;that&#x20;is&#x20;critical&#x20;to&#x20;the&#x20;security&#x20;of&#x20;those&#x20;accounts,&#x20;such&#x20;as&#x20;the&#x20;hashed&#x20;password&#x20;and&#x20;other&#x20;security&#x20;information.','It&#x20;is&#x20;critical&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;/etc/gshadow-&#x20;file&#x20;is&#x20;protected&#x20;from&#x20;unauthorized&#x20;access.&#x20;Although&#x20;it&#x20;is&#x20;protected&#x20;by&#x20;default,&#x20;the&#x20;file&#x20;permissions&#x20;could&#x20;be&#x20;changed&#x20;either&#x20;inadvertently&#x20;or&#x20;through&#x20;malicious&#x20;actions.','','Run&#x20;the&#x20;one&#x20;of&#x20;the&#x20;following&#x20;chown&#x20;commands&#x20;as&#x20;appropriate&#x20;and&#x20;the&#x20;chmod&#x20;to&#x20;set&#x20;permissions&#x20;on&#x20;/etc/gshadow-&#x20;:&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/gshadow-&#x20;&#x20;#&#x20;chown&#x20;root:shadow&#x20;/etc/gshadow-&#x20;&#x20;#&#x20;chmod&#x20;o-rwx,g-rw&#x20;/etc/gshadow-','[{\"cis\": [\"6.1.9\"]}, {\"cis_csc\": [\"16.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6681,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;passwd&#x20;-l&#x20;&lt;username&gt;&#x20;||&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"4.4\"]}, {\"pci_dss\": [\"8.2\"]}, {\"tsc\": [\"CC6.1\"]}]'),(6682,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/passwd','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/passwd&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.2\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6683,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/shadow','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/shadow&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.4\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6684,'Ensure&#x20;no&#x20;legacy&#x20;&quot;+&quot;&#x20;entries&#x20;exist&#x20;in&#x20;/etc/group','The&#x20;character&#x20;+&#x20;in&#x20;various&#x20;files&#x20;used&#x20;to&#x20;be&#x20;markers&#x20;for&#x20;systems&#x20;to&#x20;insert&#x20;data&#x20;from&#x20;NIS&#x20;maps&#x20;at&#x20;a&#x20;certain&#x20;point&#x20;in&#x20;a&#x20;system&#x20;configuration&#x20;file.&#x20;These&#x20;entries&#x20;are&#x20;no&#x20;longer&#x20;required&#x20;on&#x20;most&#x20;systems,&#x20;but&#x20;may&#x20;exist&#x20;in&#x20;files&#x20;that&#x20;have&#x20;been&#x20;imported&#x20;from&#x20;other&#x20;platforms.','These&#x20;entries&#x20;may&#x20;provide&#x20;an&#x20;avenue&#x20;for&#x20;attackers&#x20;to&#x20;gain&#x20;privileged&#x20;access&#x20;on&#x20;the&#x20;system.','','Remove&#x20;any&#x20;legacy&#x20;&#039;+&#039;&#x20;entries&#x20;from&#x20;/etc/group&#x20;if&#x20;they&#x20;exist.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"16.2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}, {\"gpg_13\": [\"4.3\"]}, {\"gdpr_IV\": [\"35.7.d\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"tsc\": [\"CC5.2\"]}]'),(6685,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.6\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"gpg_13\": [\"7.8\"]}, {\"gdpr_IV\": [\"35.7\", \"32.2\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(7000,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.2\"]}]'),(7001,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7002,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7003,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7004,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}]'),(7005,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}]'),(7006,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#x20;&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.3\"]}]'),(7007,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}]'),(7008,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home.&#x20;Notes:&#x20;The&#x20;actions&#x20;in&#x20;this&#x20;recommendation&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7009,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7010,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7011,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7012,'Ensure&#x20;bootloader&#x20;password&#x20;is&#x20;set','Setting&#x20;the&#x20;boot&#x20;loader&#x20;password&#x20;will&#x20;require&#x20;that&#x20;anyone&#x20;rebooting&#x20;the&#x20;system&#x20;must&#x20;enter&#x20;a&#x20;password&#x20;before&#x20;being&#x20;able&#x20;to&#x20;set&#x20;command&#x20;line&#x20;boot&#x20;parameters.','Requiring&#x20;a&#x20;boot&#x20;password&#x20;upon&#x20;execution&#x20;of&#x20;the&#x20;boot&#x20;loader&#x20;will&#x20;prevent&#x20;an&#x20;unauthorized&#x20;user&#x20;from&#x20;entering&#x20;boot&#x20;parameters&#x20;or&#x20;changing&#x20;the&#x20;boot&#x20;partition.&#x20;This&#x20;prevents&#x20;users&#x20;from&#x20;weakening&#x20;security&#x20;&#40;e.g.&#x20;turning&#x20;off&#x20;SELinux&#x20;at&#x20;boot&#x20;time&#41;.','','Create&#x20;an&#x20;encrypted&#x20;password&#x20;with&#x20;grub-md5-crypt&#x20;:&#x20;#&#x20;grub-md5-crypt.&#x20;The&#x20;result&#x20;is&#x20;an&#x20;&lt;encrypted-password&gt;.&#x20;Copy&#x20;and&#x20;paste&#x20;the&#x20;&lt;encrypted-password&gt;&#x20;into&#x20;the&#x20;global&#x20;section&#x20;of&#x20;/boot/grub/menu.lst:&#x20;password&#x20;--md5&#x20;&lt;encrypted-password&gt;&#x20;&#x20;&#x20;&#x20;Notes:&#x20;This&#x20;recommendation&#x20;is&#x20;designed&#x20;around&#x20;the&#x20;grub&#x20;bootloader,&#x20;if&#x20;LILO&#x20;or&#x20;another&#x20;bootloader&#x20;is&#x20;in&#x20;use&#x20;in&#x20;your&#x20;environment&#x20;enact&#x20;equivalent&#x20;settings.','[{\"cis\": [\"1.4.2\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7013,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;/etc/security/limits.conf&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;fs.suid_dumpable&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0.','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}]'),(7014,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}]'),(7015,'Ensure&#x20;chargen&#x20;services&#x20;are&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;chargen&#x20;and&#x20;chargen-udp&#x20;:&#x20;#&#x20;chkconfig&#x20;chargen&#x20;off&#x20;#&#x20;chkconfig&#x20;chargen-udp&#x20;off','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7016,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;daytime&#x20;-&#x20;and&#x20;daytime-udp:&#x20;#&#x20;chkconfig&#x20;daytime-off&#x20;#&#x20;chkconfig&#x20;daytime-udp&#x20;off','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7017,'Ensure&#x20;discard&#x20;services&#x20;are&#x20;not&#x20;enabled','discard&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;discard&#x20;and&#x20;discard-udp:&#x20;#&#x20;chkconfig&#x20;discard&#x20;off&#x20;#&#x20;chkconfig&#x20;discard-udp&#x20;off','[{\"cis\": [\"2.1.3\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7018,'Ensure&#x20;echo&#x20;services&#x20;are&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;echo&#x20;and&#x20;echo-udp:&#x20;#&#x20;chkconfig&#x20;echo&#x20;off&#x20;#&#x20;chkconfig&#x20;echo-udp&#x20;off','[{\"cis\": [\"2.1.4\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7019,'Ensure&#x20;time&#x20;services&#x20;are&#x20;not&#x20;enabled','timeis&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;time&#x20;and&#x20;time-udp:&#x20;#&#x20;chkconfig&#x20;time&#x20;off&#x20;#&#x20;chkconfig&#x20;time-udp&#x20;off','[{\"cis\": [\"2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7020,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;rexec&#x20;&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;services&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;and&#x20;rexec&#x20;:&#x20;#&#x20;chkconfig&#x20;rexec&#x20;off&#x20;#&#x20;chkconfig&#x20;rlogin&#x20;off&#x20;#&#x20;chkconfig&#x20;rsh&#x20;off','[{\"cis\": [\"2.1.6\"]}, {\"cis_csc\": [\"3.4\", \"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7021,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;talk:&#x20;#&#x20;chkconfig&#x20;talk&#x20;off','[{\"cis\": [\"2.1.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7022,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;chkconfig&#x20;telnet&#x20;off','[{\"cis\": [\"2.1.8\"]}, {\"cis_csc\": [\"3.4\", \"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7023,'Ensure&#x20;tftp&#x20;server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;atftp&#x20;is&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;tftp:&#x20;#&#x20;chkconfig&#x20;tftp&#x20;off','[{\"cis\": [\"2.1.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7024,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsyncd&#x20;:&#x20;#&#x20;chkconfig&#x20;rsyncd&#x20;off','[{\"cis\": [\"2.1.10\", \"2.2.17\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7025,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://tools.ietf.org/html/rfc958.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;limited&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;limited&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;&#x20;&#x20;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;NTPD_OPTIONS&#x20;in&#x20;/etc/sysconfig/ntp&#x20;to&#x20;include&#x20;&#039;-u&#x20;ntp:ntp&#039;:&#x20;NTPD_OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7026,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;zypper&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7027,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon&#x20;:&#x20;#&#x20;chkconfig&#x20;avahi-daemon&#x20;off','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7028,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd&#x20;:&#x20;#&#x20;chkconfig&#x20;dhcpd&#x20;off','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7029,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind&#x20;:&#x20;#&#x20;chkconfig&#x20;nfs&#x20;off&#x20;#&#x20;chkconfig&#x20;rpcbind&#x20;off','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7030,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;chkconfig&#x20;named&#x20;off','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7031,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd&#x20;:&#x20;#&#x20;chkconfig&#x20;vsftpd&#x20;off&#x20;&#x20;Notes:&#x20;Additional&#x20;FTP&#x20;servers&#x20;also&#x20;exist&#x20;and&#x20;should&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7032,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.&#x20;&#x20;Notes:&#x20;Several&#x20;httpd&#x20;servers&#x20;exist&#x20;and&#x20;can&#x20;use&#x20;other&#x20;service&#x20;names.&#x20;apache,&#x20;apache2,&#x20;lighttpd,&#x20;and&#x20;nginx&#x20;are&#x20;example&#x20;services&#x20;that&#x20;provide&#x20;an&#x20;HTTP&#x20;server.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;also&#x20;be&#x20;audited.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2&#x20;:&#x20;#&#x20;chkconfig&#x20;apache2&#x20;off','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7033,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','cyrus&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;cyrus&#x20;:&#x20;#&#x20;chkconfig&#x20;cyrus&#x20;off&#x20;&#x20;&#x20;Notes:&#x20;Several&#x20;IMAP/POP3&#x20;servers&#x20;exist&#x20;and&#x20;can&#x20;use&#x20;other&#x20;service&#x20;names.&#x20;dovecot&#x20;is&#x20;an&#x20;example&#x20;service&#x20;that&#x20;provides&#x20;an&#x20;IMAP/POP3&#x20;server.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;also&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7034,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb&#x20;:&#x20;#&#x20;chkconfig&#x20;smb&#x20;off','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7035,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid&#x20;:&#x20;#&#x20;chkconfig&#x20;squid&#x20;off','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7036,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;chkconfig&#x20;snmpd&#x20;off&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Additional&#x20;methods&#x20;of&#x20;disabling&#x20;a&#x20;service&#x20;exist.&#x20;Consult&#x20;your&#x20;distribution&#x20;documentation&#x20;for&#x20;appropriate&#x20;methods.','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7037,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv&#x20;:&#x20;#&#x20;chkconfig&#x20;ypserv&#x20;off','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7038,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind&#x20;:&#x20;#&#x20;zypper&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7039,'Ensure&#x20;IPv4&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7040,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7041,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7042,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7043,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7044,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7045,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7046,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7047,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7048,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7049,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7050,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.&#x20;INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7051,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7052,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;ssh.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7053,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv&#x20;,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7054,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.&#x20;&#x20;Rationale:&#x20;Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7055,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7056,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(7057,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;username&gt;.&#x20;&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(7500,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/tmp','The&#x20;/tmp&#x20;directory&#x20;is&#x20;a&#x20;world-writable&#x20;directory&#x20;used&#x20;for&#x20;temporary&#x20;storage&#x20;by&#x20;all&#x20;users&#x20;and&#x20;some&#x20;applications.','Since&#x20;the&#x20;/tmp&#x20;directory&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;world-writable,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.&#x20;In&#x20;addition,&#x20;making&#x20;/tmp&#x20;its&#x20;own&#x20;file&#x20;system&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;set&#x20;the&#x20;noexec&#x20;option&#x20;on&#x20;the&#x20;mount,&#x20;making&#x20;/tmp&#x20;useless&#x20;for&#x20;an&#x20;attacker&#x20;to&#x20;install&#x20;executable&#x20;code.&#x20;It&#x20;would&#x20;also&#x20;prevent&#x20;an&#x20;attacker&#x20;from&#x20;establishing&#x20;a&#x20;hardlink&#x20;to&#x20;a&#x20;system&#x20;setuid&#x20;program&#x20;and&#x20;wait&#x20;for&#x20;it&#x20;to&#x20;be&#x20;updated.&#x20;Once&#x20;the&#x20;program&#x20;was&#x20;updated,&#x20;the&#x20;hardlink&#x20;would&#x20;be&#x20;broken&#x20;and&#x20;the&#x20;attacker&#x20;would&#x20;have&#x20;his&#x20;own&#x20;copy&#x20;of&#x20;the&#x20;program.&#x20;If&#x20;the&#x20;program&#x20;happened&#x20;to&#x20;have&#x20;a&#x20;security&#x20;vulnerability,&#x20;the&#x20;attacker&#x20;could&#x20;continue&#x20;to&#x20;exploit&#x20;the&#x20;known&#x20;flaw.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/tmp.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;or&#x20;the&#x20;systemd&#x20;tmp.mount&#x20;service&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.2\"]}]'),(7501,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/tmp','[{\"cis\": [\"1.1.3\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7502,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;create&#x20;setuid&#x20;files&#x20;in&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/tmp','[{\"cis\": [\"1.1.4\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7503,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/tmp&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Since&#x20;the&#x20;/tmp&#x20;filesystem&#x20;is&#x20;only&#x20;intended&#x20;for&#x20;temporary&#x20;file&#x20;storage,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;run&#x20;executable&#x20;binaries&#x20;from&#x20;/tmp.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/tmp&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/tmp&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/tmp','[{\"cis\": [\"1.1.5\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7504,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var','The&#x20;/var&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;daemons&#x20;and&#x20;other&#x20;system&#x20;services&#x20;to&#x20;temporarily&#x20;store&#x20;dynamic&#x20;data.&#x20;Some&#x20;directories&#x20;created&#x20;by&#x20;these&#x20;processes&#x20;may&#x20;be&#x20;world-writable.','Since&#x20;the&#x20;/var&#x20;directory&#x20;may&#x20;contain&#x20;world-writable&#x20;files&#x20;and&#x20;directories,&#x20;there&#x20;is&#x20;a&#x20;risk&#x20;of&#x20;resource&#x20;exhaustion&#x20;if&#x20;it&#x20;is&#x20;not&#x20;bound&#x20;to&#x20;a&#x20;separate&#x20;partition.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.6\"]}]'),(7505,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log','The&#x20;/var/log&#x20;directory&#x20;is&#x20;used&#x20;by&#x20;system&#x20;services&#x20;to&#x20;store&#x20;log&#x20;data.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;system&#x20;logs&#x20;are&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;logs&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.11\"]}, {\"cis_csc\": [\"6.3\"]}]'),(7506,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/var/log/audit','The&#x20;auditing&#x20;daemon,&#x20;auditd&#x20;,&#x20;stores&#x20;log&#x20;data&#x20;in&#x20;the&#x20;/var/log/audit&#x20;directory.','There&#x20;are&#x20;two&#x20;important&#x20;reasons&#x20;to&#x20;ensure&#x20;that&#x20;data&#x20;gathered&#x20;by&#x20;auditd&#x20;is&#x20;stored&#x20;on&#x20;a&#x20;separate&#x20;partition:&#x20;protection&#x20;against&#x20;resource&#x20;exhaustion&#x20;&#40;since&#x20;the&#x20;audit.log&#x20;file&#x20;can&#x20;grow&#x20;quite&#x20;large&#41;&#x20;and&#x20;protection&#x20;of&#x20;audit&#x20;data.&#x20;The&#x20;audit&#x20;daemon&#x20;calculates&#x20;how&#x20;much&#x20;free&#x20;space&#x20;is&#x20;left&#x20;and&#x20;performs&#x20;actions&#x20;based&#x20;on&#x20;the&#x20;results.&#x20;If&#x20;other&#x20;processes&#x20;&#40;such&#x20;as&#x20;syslog&#x20;&#41;&#x20;consume&#x20;space&#x20;in&#x20;the&#x20;same&#x20;partition&#x20;as&#x20;auditd,&#x20;it&#x20;may&#x20;not&#x20;perform&#x20;as&#x20;desired.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/var/log/audit.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.12\"]}, {\"cis_csc\": [\"6.3\"]}]'),(7507,'Ensure&#x20;separate&#x20;partition&#x20;exists&#x20;for&#x20;/home','The&#x20;/home&#x20;directory&#x20;is&#x20;used&#x20;to&#x20;support&#x20;disk&#x20;storage&#x20;needs&#x20;of&#x20;local&#x20;users.','If&#x20;the&#x20;system&#x20;is&#x20;intended&#x20;to&#x20;support&#x20;local&#x20;users,&#x20;create&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;the&#x20;/home&#x20;directory&#x20;to&#x20;protect&#x20;against&#x20;resource&#x20;exhaustion&#x20;and&#x20;restrict&#x20;the&#x20;type&#x20;of&#x20;files&#x20;that&#x20;can&#x20;be&#x20;stored&#x20;under&#x20;/home.','','For&#x20;new&#x20;installations,&#x20;during&#x20;installation&#x20;create&#x20;a&#x20;custom&#x20;partition&#x20;setup&#x20;and&#x20;specify&#x20;a&#x20;separate&#x20;partition&#x20;for&#x20;/home.&#x20;&#x20;For&#x20;systems&#x20;that&#x20;were&#x20;previously&#x20;installed,&#x20;create&#x20;a&#x20;new&#x20;partition&#x20;and&#x20;configure&#x20;/etc/fstab&#x20;as&#x20;appropriate.','[{\"cis\": [\"1.1.13\"]}]'),(7508,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/home&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;user&#x20;partitions&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;block&#x20;or&#x20;character&#x20;special&#x20;devices.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/home&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/home.&#x20;Notes:&#x20;The&#x20;actions&#x20;in&#x20;this&#x20;recommendation&#x20;refer&#x20;to&#x20;the&#x20;/home&#x20;partition,&#x20;which&#x20;is&#x20;the&#x20;default&#x20;user&#x20;partition&#x20;that&#x20;is&#x20;defined.&#x20;If&#x20;you&#x20;have&#x20;created&#x20;other&#x20;user&#x20;partitions,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;Remediation&#x20;and&#x20;Audit&#x20;steps&#x20;be&#x20;applied&#x20;to&#x20;these&#x20;partitions&#x20;as&#x20;well.','[{\"cis\": [\"1.1.14\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7509,'Ensure&#x20;nodev&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nodev&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;special&#x20;devices.','Since&#x20;the&#x20;/dev/shm&#x20;filesystem&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;support&#x20;devices,&#x20;set&#x20;this&#x20;option&#x20;to&#x20;ensure&#x20;that&#x20;users&#x20;cannot&#x20;attempt&#x20;to&#x20;create&#x20;special&#x20;devices&#x20;in&#x20;/dev/shm&#x20;partitions.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nodev&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nodev&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0.&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0','[{\"cis\": [\"1.1.15\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7510,'Ensure&#x20;nosuid&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;nosuid&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;setuid&#x20;files.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;introducing&#x20;privileged&#x20;programs&#x20;onto&#x20;the&#x20;system&#x20;and&#x20;allowing&#x20;non-root&#x20;users&#x20;to&#x20;execute&#x20;them.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;nosuid&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,nosuid&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0.&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0','[{\"cis\": [\"1.1.16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7511,'Ensure&#x20;noexec&#x20;option&#x20;set&#x20;on&#x20;/dev/shm&#x20;partition','The&#x20;noexec&#x20;mount&#x20;option&#x20;specifies&#x20;that&#x20;the&#x20;filesystem&#x20;cannot&#x20;contain&#x20;executable&#x20;binaries.','Setting&#x20;this&#x20;option&#x20;on&#x20;a&#x20;file&#x20;system&#x20;prevents&#x20;users&#x20;from&#x20;executing&#x20;programs&#x20;from&#x20;shared&#x20;memory.&#x20;This&#x20;deters&#x20;users&#x20;from&#x20;introducing&#x20;potentially&#x20;malicious&#x20;software&#x20;on&#x20;the&#x20;system.','','Edit&#x20;the&#x20;/etc/fstab&#x20;file&#x20;and&#x20;add&#x20;noexec&#x20;to&#x20;the&#x20;fourth&#x20;field&#x20;&#40;mounting&#x20;options&#41;&#x20;for&#x20;the&#x20;/dev/shm&#x20;partition.&#x20;See&#x20;the&#x20;fstab&#40;5&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;information.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remount&#x20;/dev/shm&#x20;:&#x20;#&#x20;mount&#x20;-o&#x20;remount,noexec&#x20;/dev/shm&#x20;&#x20;&#x20;&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0.&#x20;Notes:&#x20;/dev/shm&#x20;is&#x20;not&#x20;specified&#x20;in&#x20;/etc/fstab&#x20;despite&#x20;being&#x20;mounted&#x20;by&#x20;default.&#x20;The&#x20;following&#x20;line&#x20;will&#x20;implement&#x20;the&#x20;recommended&#x20;/dev/shm&#x20;mount&#x20;options&#x20;in&#x20;/etc/fstab:&#x20;tmpfs&#x20;&#x20;/dev/shm&#x20;&#x20;tmpfs&#x20;&#x20;defaults,nodev,nosuid,noexec&#x20;&#x20;0&#x20;0','[{\"cis\": [\"1.1.17\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7512,'Ensure&#x20;core&#x20;dumps&#x20;are&#x20;restricted','A&#x20;core&#x20;dump&#x20;is&#x20;the&#x20;memory&#x20;of&#x20;an&#x20;executable&#x20;program.&#x20;It&#x20;is&#x20;generally&#x20;used&#x20;to&#x20;determine&#x20;why&#x20;a&#x20;program&#x20;aborted.&#x20;It&#x20;can&#x20;also&#x20;be&#x20;used&#x20;to&#x20;glean&#x20;confidential&#x20;information&#x20;from&#x20;a&#x20;core&#x20;file.&#x20;The&#x20;system&#x20;provides&#x20;the&#x20;ability&#x20;to&#x20;set&#x20;a&#x20;soft&#x20;limit&#x20;for&#x20;core&#x20;dumps,&#x20;but&#x20;this&#x20;can&#x20;be&#x20;overridden&#x20;by&#x20;the&#x20;user.','Setting&#x20;a&#x20;hard&#x20;limit&#x20;on&#x20;core&#x20;dumps&#x20;prevents&#x20;users&#x20;from&#x20;overriding&#x20;the&#x20;soft&#x20;variable.&#x20;If&#x20;core&#x20;dumps&#x20;are&#x20;required,&#x20;consider&#x20;setting&#x20;limits&#x20;for&#x20;user&#x20;groups&#x20;&#40;see&#x20;limits.conf&#40;5&#41;&#x20;&#41;.&#x20;In&#x20;addition,&#x20;setting&#x20;the&#x20;fs.suid_dumpable&#x20;variable&#x20;to&#x20;0&#x20;will&#x20;prevent&#x20;setuid&#x20;programs&#x20;from&#x20;dumping&#x20;core.','','Add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;/etc/security/limits.conf&#x20;or&#x20;a&#x20;/etc/security/limits.d&#47;&#42;&#x20;file:&#x20;*&#x20;hard&#x20;core&#x20;0.&#x20;&#x20;Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:fs.suid_dumpable&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;fs.suid_dumpable=0','[{\"cis\": [\"1.5.1\"]}, {\"cis_csc\": [\"13\"]}]'),(7513,'Ensure&#x20;address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;enabled','Address&#x20;space&#x20;layout&#x20;randomization&#x20;&#40;ASLR&#41;&#x20;is&#x20;an&#x20;exploit&#x20;mitigation&#x20;technique&#x20;which&#x20;randomly&#x20;arranges&#x20;the&#x20;address&#x20;space&#x20;of&#x20;key&#x20;data&#x20;areas&#x20;of&#x20;a&#x20;process.','Randomly&#x20;placing&#x20;virtual&#x20;memory&#x20;regions&#x20;will&#x20;make&#x20;it&#x20;difficult&#x20;to&#x20;write&#x20;memory&#x20;page&#x20;exploits&#x20;as&#x20;the&#x20;memory&#x20;placement&#x20;will&#x20;be&#x20;consistently&#x20;shifting.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;kernel.randomize_va_space&#x20;=&#x20;2.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameter:&#x20;#&#x20;sysctl&#x20;-w&#x20;kernel.randomize_va_space=2','[{\"cis\": [\"1.5.3\"]}, {\"cis_csc\": [\"8.4\"]}]'),(7514,'Ensure&#x20;chargen&#x20;services&#x20;are&#x20;not&#x20;enabled','chargen&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;0&#x20;to&#x20;512&#x20;ASCII&#x20;characters&#x20;for&#x20;each&#x20;connection&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;chargen&#x20;and&#x20;chargen-udp&#x20;:&#x20;#&#x20;chkconfig&#x20;chargen&#x20;off&#x20;#&#x20;chkconfig&#x20;chargen-udp&#x20;off','[{\"cis\": [\"2.1.1\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7515,'Ensure&#x20;daytime&#x20;services&#x20;are&#x20;not&#x20;enabled','daytime&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;daytime&#x20;and&#x20;daytime-udp:&#x20;#&#x20;chkconfig&#x20;daytime&#x20;off&#x20;#&#x20;chkconfig&#x20;daytime-udp&#x20;off','[{\"cis\": [\"2.1.2\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7516,'Ensure&#x20;discard&#x20;services&#x20;are&#x20;not&#x20;enabled','discard&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;simply&#x20;discards&#x20;all&#x20;data&#x20;it&#x20;receives.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;discard&#x20;and&#x20;discard-udp:&#x20;#&#x20;chkconfig&#x20;discard&#x20;off&#x20;#&#x20;chkconfig&#x20;discard-udp&#x20;off','[{\"cis\": [\"2.1.3\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7517,'Ensure&#x20;echo&#x20;services&#x20;are&#x20;not&#x20;enabled','echo&#x20;is&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;data&#x20;sent&#x20;to&#x20;it&#x20;by&#x20;the&#x20;client.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;echo&#x20;and&#x20;echo-udp:&#x20;#&#x20;chkconfig&#x20;echo&#x20;off&#x20;#&#x20;chkconfig&#x20;echo-udp&#x20;off','[{\"cis\": [\"2.1.4\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7518,'Ensure&#x20;time&#x20;services&#x20;are&#x20;not&#x20;enabled','timeis&#x20;a&#x20;network&#x20;service&#x20;that&#x20;responds&#x20;with&#x20;the&#x20;server&#039;s&#x20;current&#x20;date&#x20;and&#x20;time&#x20;as&#x20;a&#x20;32&#x20;bit&#x20;integer.&#x20;This&#x20;service&#x20;is&#x20;intended&#x20;for&#x20;debugging&#x20;and&#x20;testing&#x20;purposes.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled.','Disabling&#x20;this&#x20;service&#x20;will&#x20;reduce&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;time&#x20;and&#x20;time-udp:&#x20;#&#x20;chkconfig&#x20;time&#x20;off&#x20;#&#x20;chkconfig&#x20;time-udp&#x20;off','[{\"cis\": [\"2.1.5\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7519,'Ensure&#x20;rsh&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;Berkeley&#x20;rsh-server&#x20;&#40;rsh,&#x20;rlogin,&#x20;rexec&#41;&#x20;package&#x20;contains&#x20;legacy&#x20;services&#x20;that&#x20;exchange&#x20;credentials&#x20;in&#x20;clear-text.','These&#x20;legacy&#x20;services&#x20;contain&#x20;numerous&#x20;security&#x20;exposures&#x20;and&#x20;have&#x20;been&#x20;replaced&#x20;with&#x20;the&#x20;more&#x20;secure&#x20;SSH&#x20;package.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;rsh&#x20;,&#x20;rlogin&#x20;,&#x20;and&#x20;rexec&#x20;:&#x20;#&#x20;chkconfig&#x20;rexec&#x20;off&#x20;#&#x20;chkconfig&#x20;rlogin&#x20;off&#x20;#&#x20;chkconfig&#x20;rsh&#x20;off','[{\"cis\": [\"2.1.6\"]}, {\"cis_csc\": [\"3.4\", \"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7520,'Ensure&#x20;talk&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;talk&#x20;software&#x20;makes&#x20;it&#x20;possible&#x20;for&#x20;users&#x20;to&#x20;send&#x20;and&#x20;receive&#x20;messages&#x20;across&#x20;systems&#x20;through&#x20;a&#x20;terminal&#x20;session.&#x20;The&#x20;talk&#x20;client&#x20;&#40;allows&#x20;initiate&#x20;of&#x20;talk&#x20;sessions&#41;&#x20;is&#x20;installed&#x20;by&#x20;default.','The&#x20;software&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;talk:&#x20;#&#x20;chkconfig&#x20;talk&#x20;off','[{\"cis\": [\"2.1.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7521,'Ensure&#x20;telnet&#x20;server&#x20;is&#x20;not&#x20;enabled','The&#x20;telnet-server&#x20;package&#x20;contains&#x20;the&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;package&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;telnet:&#x20;#&#x20;chkconfig&#x20;telnet&#x20;off','[{\"cis\": [\"2.1.8\"]}, {\"cis_csc\": [\"3.4\", \"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7522,'Ensure&#x20;tftp&#x20;server&#x20;is&#x20;not&#x20;enabled','Trivial&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;TFTP&#41;&#x20;is&#x20;a&#x20;simple&#x20;file&#x20;transfer&#x20;protocol,&#x20;typically&#x20;used&#x20;to&#x20;automatically&#x20;transfer&#x20;configuration&#x20;or&#x20;boot&#x20;machines&#x20;from&#x20;a&#x20;boot&#x20;server.&#x20;The&#x20;package&#x20;atftp&#x20;is&#x20;used&#x20;to&#x20;define&#x20;and&#x20;support&#x20;a&#x20;TFTP&#x20;server.','TFTP&#x20;does&#x20;not&#x20;support&#x20;authentication&#x20;nor&#x20;does&#x20;it&#x20;ensure&#x20;the&#x20;confidentiality&#x20;or&#x20;integrity&#x20;of&#x20;data.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;TFTP&#x20;be&#x20;removed,&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;need&#x20;for&#x20;TFTP.&#x20;In&#x20;that&#x20;case,&#x20;extreme&#x20;caution&#x20;must&#x20;be&#x20;used&#x20;when&#x20;configuring&#x20;the&#x20;services.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;tftp:&#x20;#&#x20;systemctl&#x20;disable&#x20;atftpd','[{\"cis\": [\"2.1.9\", \"2.2.17\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7523,'Ensure&#x20;rsync&#x20;service&#x20;is&#x20;not&#x20;enabled','The&#x20;rsyncd&#x20;service&#x20;can&#x20;be&#x20;used&#x20;to&#x20;synchronize&#x20;files&#x20;between&#x20;systems&#x20;over&#x20;network&#x20;links.','The&#x20;rsyncd&#x20;service&#x20;presents&#x20;a&#x20;security&#x20;risk&#x20;as&#x20;it&#x20;uses&#x20;unencrypted&#x20;protocols&#x20;for&#x20;communication.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;rsyncd:&#x20;#&#x20;systemctl&#x20;disable&#x20;rsyncd','[{\"cis\": [\"2.1.10\", \"2.2.18\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7524,'Ensure&#x20;xinetd&#x20;is&#x20;not&#x20;enabled','The&#x20;eXtended&#x20;InterNET&#x20;Daemon&#x20;&#40;&#x20;xinetd&#x20;&#41;&#x20;is&#x20;an&#x20;open&#x20;source&#x20;super&#x20;daemon&#x20;that&#x20;replaced&#x20;the&#x20;original&#x20;inetd&#x20;daemon.&#x20;The&#x20;xinetd&#x20;daemon&#x20;listens&#x20;for&#x20;well&#x20;known&#x20;services&#x20;and&#x20;dispatches&#x20;the&#x20;appropriate&#x20;daemon&#x20;to&#x20;properly&#x20;respond&#x20;to&#x20;service&#x20;requests.','If&#x20;there&#x20;are&#x20;no&#x20;xinetd&#x20;services&#x20;required,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;daemon&#x20;be&#x20;disabled.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;xinetd&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;xinetd','[{\"cis\": [\"2.1.11\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7525,'Ensure&#x20;ntp&#x20;is&#x20;configured','ntp&#x20;is&#x20;a&#x20;daemon&#x20;which&#x20;implements&#x20;the&#x20;Network&#x20;Time&#x20;Protocol&#x20;&#40;NTP&#41;.&#x20;It&#x20;is&#x20;designed&#x20;to&#x20;synchronize&#x20;system&#x20;clocks&#x20;across&#x20;a&#x20;variety&#x20;of&#x20;systems&#x20;and&#x20;use&#x20;a&#x20;source&#x20;that&#x20;is&#x20;highly&#x20;accurate.&#x20;More&#x20;information&#x20;on&#x20;NTP&#x20;can&#x20;be&#x20;found&#x20;at&#x20;https://tools.ietf.org/html/rfc958.&#x20;ntp&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;client&#x20;and/or&#x20;a&#x20;server.&#x20;&#x20;This&#x20;recommendation&#x20;only&#x20;applies&#x20;if&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system.','If&#x20;ntp&#x20;is&#x20;in&#x20;use&#x20;on&#x20;the&#x20;system&#x20;proper&#x20;configuration&#x20;is&#x20;vital&#x20;to&#x20;ensuring&#x20;time&#x20;synchronization&#x20;is&#x20;working&#x20;properly.','','Add&#x20;or&#x20;edit&#x20;restrict&#x20;lines&#x20;in&#x20;/etc/ntp.conf&#x20;to&#x20;match&#x20;the&#x20;following:&#x20;restrict&#x20;-4&#x20;default&#x20;kod&#x20;limited&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;restrict&#x20;-6&#x20;default&#x20;kod&#x20;limited&#x20;nomodify&#x20;notrap&#x20;nopeer&#x20;noquery&#x20;&#x20;&#x20;&#x20;Add&#x20;or&#x20;edit&#x20;server&#x20;or&#x20;pool&#x20;lines&#x20;to&#x20;/etc/ntp.conf&#x20;as&#x20;appropriate:&#x20;server&#x20;&lt;remote-server&gt;&#x20;&#x20;&#x20;&#x20;Add&#x20;or&#x20;edit&#x20;the&#x20;NTPD_OPTIONS&#x20;in&#x20;/etc/sysconfig/ntp&#x20;to&#x20;include&#x20;&#039;-u&#x20;ntp:ntp&#039;:&#x20;NTPD_OPTIONS=&#039;-u&#x20;ntp:ntp&#039;','[{\"cis\": [\"2.2.1.2\"]}, {\"cis_csc\": [\"6.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7526,'Ensure&#x20;X&#x20;Window&#x20;System&#x20;is&#x20;not&#x20;installed','The&#x20;X&#x20;Window&#x20;System&#x20;provides&#x20;a&#x20;Graphical&#x20;User&#x20;Interface&#x20;&#40;GUI&#41;&#x20;where&#x20;users&#x20;can&#x20;have&#x20;multiple&#x20;windows&#x20;in&#x20;which&#x20;to&#x20;run&#x20;programs&#x20;and&#x20;various&#x20;add&#x20;on.&#x20;The&#x20;X&#x20;Windows&#x20;system&#x20;is&#x20;typically&#x20;used&#x20;on&#x20;workstations&#x20;where&#x20;users&#x20;login,&#x20;but&#x20;not&#x20;on&#x20;servers&#x20;where&#x20;users&#x20;typically&#x20;do&#x20;not&#x20;login.','Unless&#x20;your&#x20;organization&#x20;specifically&#x20;requires&#x20;graphical&#x20;login&#x20;access&#x20;via&#x20;X&#x20;Windows,&#x20;remove&#x20;it&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;remove&#x20;the&#x20;X&#x20;Windows&#x20;System&#x20;packages:&#x20;#&#x20;zypper&#x20;remove&#x20;xorg-x11*','[{\"cis\": [\"2.2.2\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7527,'Ensure&#x20;Avahi&#x20;Server&#x20;is&#x20;not&#x20;enabled','Avahi&#x20;is&#x20;a&#x20;free&#x20;zeroconf&#x20;implementation,&#x20;including&#x20;a&#x20;system&#x20;for&#x20;multicast&#x20;DNS/DNS-SD&#x20;service&#x20;discovery.&#x20;Avahi&#x20;allows&#x20;programs&#x20;to&#x20;publish&#x20;and&#x20;discover&#x20;services&#x20;and&#x20;hosts&#x20;running&#x20;on&#x20;a&#x20;local&#x20;network&#x20;with&#x20;no&#x20;specific&#x20;configuration.&#x20;For&#x20;example,&#x20;a&#x20;user&#x20;can&#x20;plug&#x20;a&#x20;computer&#x20;into&#x20;a&#x20;network&#x20;and&#x20;Avahi&#x20;automatically&#x20;finds&#x20;printers&#x20;to&#x20;print&#x20;to,&#x20;files&#x20;to&#x20;look&#x20;at&#x20;and&#x20;people&#x20;to&#x20;talk&#x20;to,&#x20;as&#x20;well&#x20;as&#x20;network&#x20;services&#x20;running&#x20;on&#x20;the&#x20;machine.','Automatic&#x20;discovery&#x20;of&#x20;network&#x20;services&#x20;is&#x20;not&#x20;normally&#x20;required&#x20;for&#x20;system&#x20;functionality.&#x20;&#x20;It&#x20;is&#x20;recommended&#x20;to&#x20;disable&#x20;the&#x20;service&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;avahi-daemon&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;avahi-daemon','[{\"cis\": [\"2.2.3\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7528,'Ensure&#x20;DHCP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Dynamic&#x20;Host&#x20;Configuration&#x20;Protocol&#x20;&#40;DHCP&#41;&#x20;is&#x20;a&#x20;service&#x20;that&#x20;allows&#x20;machines&#x20;to&#x20;be&#x20;dynamically&#x20;assigned&#x20;IP&#x20;addresses.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;set&#x20;up&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DHCP&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dhcpd&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;dhcpd','[{\"cis\": [\"2.2.5\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7529,'Ensure&#x20;NFS&#x20;and&#x20;RPC&#x20;are&#x20;not&#x20;enabled','The&#x20;Network&#x20;File&#x20;System&#x20;&#40;NFS&#41;&#x20;is&#x20;one&#x20;of&#x20;the&#x20;first&#x20;and&#x20;most&#x20;widely&#x20;distributed&#x20;file&#x20;systems&#x20;in&#x20;the&#x20;UNIX&#x20;environment.&#x20;It&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;systems&#x20;to&#x20;mount&#x20;file&#x20;systems&#x20;of&#x20;other&#x20;servers&#x20;through&#x20;the&#x20;network.','If&#x20;the&#x20;system&#x20;does&#x20;not&#x20;export&#x20;NFS&#x20;shares&#x20;or&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;client,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;these&#x20;services&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;remote&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;disable&#x20;nfs&#x20;and&#x20;rpcbind&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;nfs&#x20;#&#x20;systemctl&#x20;disable&#x20;rpcbind','[{\"cis\": [\"2.2.7\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7530,'Ensure&#x20;DNS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Domain&#x20;Name&#x20;System&#x20;&#40;DNS&#41;&#x20;is&#x20;a&#x20;hierarchical&#x20;naming&#x20;system&#x20;that&#x20;maps&#x20;names&#x20;to&#x20;IP&#x20;addresses&#x20;for&#x20;computers,&#x20;services&#x20;and&#x20;other&#x20;resources&#x20;connected&#x20;to&#x20;a&#x20;network.','Unless&#x20;a&#x20;system&#x20;is&#x20;specifically&#x20;designated&#x20;to&#x20;act&#x20;as&#x20;a&#x20;DNS&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;named&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;named','[{\"cis\": [\"2.2.8\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7531,'Ensure&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;File&#x20;Transfer&#x20;Protocol&#x20;&#40;FTP&#41;&#x20;provides&#x20;networked&#x20;computers&#x20;with&#x20;the&#x20;ability&#x20;to&#x20;transfer&#x20;files.','FTP&#x20;does&#x20;not&#x20;protect&#x20;the&#x20;confidentiality&#x20;of&#x20;data&#x20;or&#x20;authentication&#x20;credentials.&#x20;It&#x20;is&#x20;recommended&#x20;sftp&#x20;be&#x20;used&#x20;if&#x20;file&#x20;transfer&#x20;is&#x20;required.&#x20;Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;FTP&#x20;server&#x20;&#40;for&#x20;example,&#x20;to&#x20;allow&#x20;anonymous&#x20;downloads&#41;,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;vsftpd&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;vsftpd&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Additional&#x20;FTP&#x20;servers&#x20;also&#x20;exist&#x20;and&#x20;should&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.9\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7532,'Ensure&#x20;HTTP&#x20;server&#x20;is&#x20;not&#x20;enabled','HTTP&#x20;or&#x20;web&#x20;servers&#x20;provide&#x20;the&#x20;ability&#x20;to&#x20;host&#x20;web&#x20;site&#x20;content.','Unless&#x20;there&#x20;is&#x20;a&#x20;need&#x20;to&#x20;run&#x20;the&#x20;system&#x20;as&#x20;a&#x20;web&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;apache2&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;apache2&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Several&#x20;httpd&#x20;servers&#x20;exist&#x20;and&#x20;can&#x20;use&#x20;other&#x20;service&#x20;names.&#x20;apache,&#x20;apache2,&#x20;lighttpd,&#x20;and&#x20;nginx&#x20;are&#x20;example&#x20;services&#x20;that&#x20;provide&#x20;an&#x20;HTTP&#x20;server.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;also&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.10\"]}, {\"cis_csc\": [\"9.1\"]}]'),(7533,'Ensure&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;is&#x20;not&#x20;enabled','dovecot&#x20;is&#x20;an&#x20;open&#x20;source&#x20;IMAP&#x20;and&#x20;POP3&#x20;server&#x20;for&#x20;Linux&#x20;based&#x20;systems.','Unless&#x20;POP3&#x20;and/or&#x20;IMAP&#x20;servers&#x20;are&#x20;to&#x20;be&#x20;provided&#x20;by&#x20;this&#x20;system,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;dovecot&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;dovecot&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Several&#x20;IMAP/POP3&#x20;servers&#x20;exist&#x20;and&#x20;can&#x20;use&#x20;other&#x20;service&#x20;names.&#x20;cyrus-imap&#x20;is&#x20;an&#x20;example&#x20;service&#x20;that&#x20;provides&#x20;an&#x20;IMAP/POP3&#x20;server.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;also&#x20;be&#x20;audited.','[{\"cis\": [\"2.2.11\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7534,'Ensure&#x20;Samba&#x20;is&#x20;not&#x20;enabled','The&#x20;Samba&#x20;daemon&#x20;allows&#x20;system&#x20;administrators&#x20;to&#x20;configure&#x20;their&#x20;Linux&#x20;systems&#x20;to&#x20;share&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;with&#x20;Windows&#x20;desktops.&#x20;Samba&#x20;will&#x20;advertise&#x20;the&#x20;file&#x20;systems&#x20;and&#x20;directories&#x20;via&#x20;the&#x20;Small&#x20;Message&#x20;Block&#x20;&#40;SMB&#41;&#x20;protocol.&#x20;Windows&#x20;desktop&#x20;users&#x20;will&#x20;be&#x20;able&#x20;to&#x20;mount&#x20;these&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;as&#x20;letter&#x20;drives&#x20;on&#x20;their&#x20;systems.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;mount&#x20;directories&#x20;and&#x20;file&#x20;systems&#x20;to&#x20;Windows&#x20;systems,&#x20;then&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;smb&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;smb','[{\"cis\": [\"2.2.12\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7535,'Ensure&#x20;HTTP&#x20;Proxy&#x20;Server&#x20;is&#x20;not&#x20;enabled','Squid&#x20;is&#x20;a&#x20;standard&#x20;proxy&#x20;server&#x20;used&#x20;in&#x20;many&#x20;distributions&#x20;and&#x20;environments.','If&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;a&#x20;proxy&#x20;server,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;squid&#x20;proxy&#x20;be&#x20;disabled&#x20;to&#x20;reduce&#x20;the&#x20;potential&#x20;attack&#x20;surface.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;squid&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;squid&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Several&#x20;HTTP&#x20;proxy&#x20;servers&#x20;exist.&#x20;These&#x20;and&#x20;other&#x20;services&#x20;should&#x20;be&#x20;checked.','[{\"cis\": [\"2.2.13\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7536,'Ensure&#x20;SNMP&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Simple&#x20;Network&#x20;Management&#x20;Protocol&#x20;&#40;SNMP&#41;&#x20;server&#x20;is&#x20;used&#x20;to&#x20;listen&#x20;for&#x20;SNMP&#x20;commands&#x20;from&#x20;an&#x20;SNMP&#x20;management&#x20;system,&#x20;execute&#x20;the&#x20;commands&#x20;or&#x20;collect&#x20;the&#x20;information&#x20;and&#x20;then&#x20;send&#x20;results&#x20;back&#x20;to&#x20;the&#x20;requesting&#x20;system.','The&#x20;SNMP&#x20;server&#x20;can&#x20;communicate&#x20;using&#x20;SNMP&#x20;v1,&#x20;which&#x20;transmits&#x20;data&#x20;in&#x20;the&#x20;clear&#x20;and&#x20;does&#x20;not&#x20;require&#x20;authentication&#x20;to&#x20;execute&#x20;commands.&#x20;Unless&#x20;absolutely&#x20;necessary,&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SNMP&#x20;service&#x20;not&#x20;be&#x20;used.&#x20;If&#x20;SNMP&#x20;is&#x20;required&#x20;the&#x20;server&#x20;should&#x20;be&#x20;configured&#x20;to&#x20;disallow&#x20;SNMP&#x20;v1.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;snmpd:&#x20;#&#x20;systemctl&#x20;disable&#x20;snmpd&#x20;&#x20;&#x20;&#x20;Notes:&#x20;Additional&#x20;methods&#x20;of&#x20;disabling&#x20;a&#x20;service&#x20;exist.&#x20;Consult&#x20;your&#x20;distribution&#x20;documentation&#x20;for&#x20;appropriate&#x20;methods.','[{\"cis\": [\"2.2.14\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.2\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7537,'Ensure&#x20;NIS&#x20;Server&#x20;is&#x20;not&#x20;enabled','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;&#x20;&#40;formally&#x20;known&#x20;as&#x20;Yellow&#x20;Pages&#41;&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;for&#x20;distributing&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;server&#x20;is&#x20;a&#x20;collection&#x20;of&#x20;programs&#x20;that&#x20;allow&#x20;for&#x20;the&#x20;distribution&#x20;of&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;disabled&#x20;and&#x20;other,&#x20;more&#x20;secure&#x20;services&#x20;be&#x20;used','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;disable&#x20;ypserv&#x20;:&#x20;#&#x20;systemctl&#x20;disable&#x20;ypserv','[{\"cis\": [\"2.2.16\"]}, {\"cis_csc\": [\"9.1\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7538,'Ensure&#x20;NIS&#x20;Client&#x20;is&#x20;not&#x20;installed','The&#x20;Network&#x20;Information&#x20;Service&#x20;&#40;NIS&#41;,&#x20;formerly&#x20;known&#x20;as&#x20;Yellow&#x20;Pages,&#x20;is&#x20;a&#x20;client-server&#x20;directory&#x20;service&#x20;protocol&#x20;used&#x20;to&#x20;distribute&#x20;system&#x20;configuration&#x20;files.&#x20;The&#x20;NIS&#x20;client&#x20;&#40;&#x20;ypbind&#x20;&#41;&#x20;was&#x20;used&#x20;to&#x20;bind&#x20;a&#x20;machine&#x20;to&#x20;an&#x20;NIS&#x20;server&#x20;and&#x20;receive&#x20;the&#x20;distributed&#x20;configuration&#x20;files.','The&#x20;NIS&#x20;service&#x20;is&#x20;inherently&#x20;an&#x20;insecure&#x20;system&#x20;that&#x20;has&#x20;been&#x20;vulnerable&#x20;to&#x20;DOS&#x20;attacks,&#x20;buffer&#x20;overflows&#x20;and&#x20;has&#x20;poor&#x20;authentication&#x20;for&#x20;querying&#x20;NIS&#x20;maps.&#x20;NIS&#x20;generally&#x20;has&#x20;been&#x20;replaced&#x20;by&#x20;such&#x20;protocols&#x20;as&#x20;Lightweight&#x20;Directory&#x20;Access&#x20;Protocol&#x20;&#40;LDAP&#41;.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;service&#x20;be&#x20;removed.','','Run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;uninstall&#x20;ypbind&#x20;:&#x20;#&#x20;zypper&#x20;remove&#x20;ypbind','[{\"cis\": [\"2.3.1\"]}, {\"cis_csc\": [\"2\"]}, {\"pci_dss\": [\"2.2.3\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7539,'Ensure&#x20;IP&#x20;forwarding&#x20;is&#x20;disabled','The&#x20;net.ipv4.ip_forward&#x20;flag&#x20;is&#x20;used&#x20;to&#x20;tell&#x20;the&#x20;system&#x20;whether&#x20;it&#x20;can&#x20;forward&#x20;packets&#x20;or&#x20;not.','Setting&#x20;the&#x20;flag&#x20;to&#x20;0&#x20;ensures&#x20;that&#x20;a&#x20;system&#x20;with&#x20;multiple&#x20;interfaces&#x20;&#40;for&#x20;example,&#x20;a&#x20;hard&#x20;proxy&#41;,&#x20;will&#x20;never&#x20;be&#x20;able&#x20;to&#x20;forward&#x20;packets,&#x20;and&#x20;therefore,&#x20;never&#x20;serve&#x20;as&#x20;a&#x20;router.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.ip_forward&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.ip_forward=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7540,'Ensure&#x20;packet&#x20;redirect&#x20;sending&#x20;is&#x20;disabled','ICMP&#x20;Redirects&#x20;are&#x20;used&#x20;to&#x20;send&#x20;routing&#x20;information&#x20;to&#x20;other&#x20;hosts.&#x20;As&#x20;a&#x20;host&#x20;itself&#x20;does&#x20;not&#x20;act&#x20;as&#x20;a&#x20;router&#x20;&#40;in&#x20;a&#x20;host&#x20;only&#x20;configuration&#41;,&#x20;there&#x20;is&#x20;no&#x20;need&#x20;to&#x20;send&#x20;redirects.','An&#x20;attacker&#x20;could&#x20;use&#x20;a&#x20;compromised&#x20;host&#x20;to&#x20;send&#x20;invalid&#x20;ICMP&#x20;redirects&#x20;to&#x20;other&#x20;router&#x20;devices&#x20;in&#x20;an&#x20;attempt&#x20;to&#x20;corrupt&#x20;routing&#x20;and&#x20;have&#x20;users&#x20;access&#x20;a&#x20;system&#x20;set&#x20;up&#x20;by&#x20;the&#x20;attacker&#x20;as&#x20;opposed&#x20;to&#x20;a&#x20;valid&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.send_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.send_redirects&#x20;=&#x20;0.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.send_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.1.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7541,'Ensure&#x20;source&#x20;routed&#x20;packets&#x20;are&#x20;not&#x20;accepted','In&#x20;networking,&#x20;source&#x20;routing&#x20;allows&#x20;a&#x20;sender&#x20;to&#x20;partially&#x20;or&#x20;fully&#x20;specify&#x20;the&#x20;route&#x20;packets&#x20;take&#x20;through&#x20;a&#x20;network.&#x20;In&#x20;contrast,&#x20;non-source&#x20;routed&#x20;packets&#x20;travel&#x20;a&#x20;path&#x20;determined&#x20;by&#x20;routers&#x20;in&#x20;the&#x20;network.&#x20;In&#x20;some&#x20;cases,&#x20;systems&#x20;may&#x20;not&#x20;be&#x20;routable&#x20;or&#x20;reachable&#x20;from&#x20;some&#x20;locations&#x20;&#40;e.g.&#x20;private&#x20;addresses&#x20;vs.&#x20;Internet&#x20;routable&#41;,&#x20;and&#x20;so&#x20;source&#x20;routed&#x20;packets&#x20;would&#x20;need&#x20;to&#x20;be&#x20;used.','Setting&#x20;net.ipv4.conf.all.accept_source_route&#x20;and&#x20;net.ipv4.conf.default.accept_source_route&#x20;to&#x20;0&#x20;disables&#x20;the&#x20;system&#x20;from&#x20;accepting&#x20;source&#x20;routed&#x20;packets.&#x20;Assume&#x20;this&#x20;system&#x20;was&#x20;capable&#x20;of&#x20;routing&#x20;packets&#x20;to&#x20;Internet&#x20;routable&#x20;addresses&#x20;on&#x20;one&#x20;interface&#x20;and&#x20;private&#x20;addresses&#x20;on&#x20;another&#x20;interface.&#x20;Assume&#x20;that&#x20;the&#x20;private&#x20;addresses&#x20;were&#x20;not&#x20;routable&#x20;to&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;and&#x20;vice&#x20;versa.&#x20;Under&#x20;normal&#x20;routing&#x20;circumstances,&#x20;an&#x20;attacker&#x20;from&#x20;the&#x20;Internet&#x20;routable&#x20;addresses&#x20;could&#x20;not&#x20;use&#x20;the&#x20;system&#x20;as&#x20;a&#x20;way&#x20;to&#x20;reach&#x20;the&#x20;private&#x20;address&#x20;systems.&#x20;If,&#x20;however,&#x20;source&#x20;routed&#x20;packets&#x20;were&#x20;allowed,&#x20;they&#x20;could&#x20;be&#x20;used&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;private&#x20;address&#x20;systems&#x20;as&#x20;the&#x20;route&#x20;could&#x20;be&#x20;specified,&#x20;rather&#x20;than&#x20;rely&#x20;on&#x20;routing&#x20;protocols&#x20;that&#x20;did&#x20;not&#x20;allow&#x20;this&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_source_route&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_source_route&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_source_route=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.1\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7542,'Ensure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','ICMP&#x20;redirect&#x20;messages&#x20;are&#x20;packets&#x20;that&#x20;convey&#x20;routing&#x20;information&#x20;and&#x20;tell&#x20;your&#x20;host&#x20;&#40;acting&#x20;as&#x20;a&#x20;router&#41;&#x20;to&#x20;send&#x20;packets&#x20;via&#x20;an&#x20;alternate&#x20;path.&#x20;It&#x20;is&#x20;a&#x20;way&#x20;of&#x20;allowing&#x20;an&#x20;outside&#x20;routing&#x20;device&#x20;to&#x20;update&#x20;your&#x20;system&#x20;routing&#x20;tables.&#x20;By&#x20;setting&#x20;net.ipv4.conf.all.accept_redirects&#x20;to&#x20;0,&#x20;the&#x20;system&#x20;will&#x20;not&#x20;accept&#x20;any&#x20;ICMP&#x20;redirect&#x20;messages,&#x20;and&#x20;therefore,&#x20;won&#039;t&#x20;allow&#x20;outsiders&#x20;to&#x20;update&#x20;the&#x20;system&#039;s&#x20;routing&#x20;tables.','Attackers&#x20;could&#x20;use&#x20;bogus&#x20;ICMP&#x20;redirect&#x20;messages&#x20;to&#x20;maliciously&#x20;alter&#x20;the&#x20;system&#x20;routing&#x20;tables&#x20;and&#x20;get&#x20;them&#x20;to&#x20;send&#x20;packets&#x20;to&#x20;incorrect&#x20;networks&#x20;and&#x20;allow&#x20;your&#x20;system&#x20;packets&#x20;to&#x20;be&#x20;captured.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.accept_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.accept_redirects&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.accept_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.2\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7543,'Ensure&#x20;secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;not&#x20;accepted','Secure&#x20;ICMP&#x20;redirects&#x20;are&#x20;the&#x20;same&#x20;as&#x20;ICMP&#x20;redirects,&#x20;except&#x20;they&#x20;come&#x20;from&#x20;gateways&#x20;listed&#x20;on&#x20;the&#x20;default&#x20;gateway&#x20;list.&#x20;It&#x20;is&#x20;assumed&#x20;that&#x20;these&#x20;gateways&#x20;are&#x20;known&#x20;to&#x20;your&#x20;system,&#x20;and&#x20;that&#x20;they&#x20;are&#x20;likely&#x20;to&#x20;be&#x20;secure.','It&#x20;is&#x20;still&#x20;possible&#x20;for&#x20;even&#x20;known&#x20;gateways&#x20;to&#x20;be&#x20;compromised.&#x20;Setting&#x20;net.ipv4.conf.all.secure_redirects&#x20;to&#x20;0&#x20;protects&#x20;the&#x20;system&#x20;from&#x20;routing&#x20;table&#x20;updates&#x20;by&#x20;possibly&#x20;compromised&#x20;known&#x20;gateways.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.secure_redirects&#x20;=&#x20;0&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.secure_redirects&#x20;=&#x20;0.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.secure_redirects=0&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.3\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7544,'Ensure&#x20;suspicious&#x20;packets&#x20;are&#x20;logged','When&#x20;enabled,&#x20;this&#x20;feature&#x20;logs&#x20;packets&#x20;with&#x20;un-routable&#x20;source&#x20;addresses&#x20;to&#x20;the&#x20;kernel&#x20;log.','Enabling&#x20;this&#x20;feature&#x20;and&#x20;logging&#x20;these&#x20;packets&#x20;allows&#x20;an&#x20;administrator&#x20;to&#x20;investigate&#x20;the&#x20;possibility&#x20;that&#x20;an&#x20;attacker&#x20;is&#x20;sending&#x20;spoofed&#x20;packets&#x20;to&#x20;their&#x20;system.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.log_martians&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.log_martians&#x20;=&#x20;1.&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.log_martians=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.4\"]}, {\"cis_csc\": [\"6\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7545,'Ensure&#x20;broadcast&#x20;ICMP&#x20;requests&#x20;are&#x20;ignored','Setting&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;to&#x20;1&#x20;will&#x20;cause&#x20;the&#x20;system&#x20;to&#x20;ignore&#x20;all&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;to&#x20;broadcast&#x20;and&#x20;multicast&#x20;addresses.','Accepting&#x20;ICMP&#x20;echo&#x20;and&#x20;timestamp&#x20;requests&#x20;with&#x20;broadcast&#x20;or&#x20;multicast&#x20;destinations&#x20;for&#x20;your&#x20;network&#x20;could&#x20;be&#x20;used&#x20;to&#x20;trick&#x20;your&#x20;host&#x20;into&#x20;starting&#x20;&#40;or&#x20;participating&#41;&#x20;in&#x20;a&#x20;Smurf&#x20;attack.&#x20;A&#x20;Smurf&#x20;attack&#x20;relies&#x20;on&#x20;an&#x20;attacker&#x20;sending&#x20;large&#x20;amounts&#x20;of&#x20;ICMP&#x20;broadcast&#x20;messages&#x20;with&#x20;a&#x20;spoofed&#x20;source&#x20;address.&#x20;All&#x20;hosts&#x20;receiving&#x20;this&#x20;message&#x20;and&#x20;responding&#x20;would&#x20;send&#x20;echo-reply&#x20;messages&#x20;back&#x20;to&#x20;the&#x20;spoofed&#x20;address,&#x20;which&#x20;is&#x20;probably&#x20;not&#x20;routable.&#x20;If&#x20;many&#x20;hosts&#x20;respond&#x20;to&#x20;the&#x20;packets,&#x20;the&#x20;amount&#x20;of&#x20;traffic&#x20;on&#x20;the&#x20;network&#x20;could&#x20;be&#x20;significantly&#x20;multiplied.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_echo_ignore_broadcasts&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_echo_ignore_broadcasts=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.5\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7546,'Ensure&#x20;bogus&#x20;ICMP&#x20;responses&#x20;are&#x20;ignored','Setting&#x20;icmp_ignore_bogus_error_responses&#x20;to&#x20;1&#x20;prevents&#x20;the&#x20;kernel&#x20;from&#x20;logging&#x20;bogus&#x20;responses&#x20;&#40;RFC-1122&#x20;non-compliant&#41;&#x20;from&#x20;broadcast&#x20;reframes,&#x20;keeping&#x20;file&#x20;systems&#x20;from&#x20;filling&#x20;up&#x20;with&#x20;useless&#x20;log&#x20;messages.','Some&#x20;routers&#x20;&#40;and&#x20;some&#x20;attackers&#41;&#x20;will&#x20;send&#x20;responses&#x20;that&#x20;violate&#x20;RFC-1122&#x20;and&#x20;attempt&#x20;to&#x20;fill&#x20;up&#x20;a&#x20;log&#x20;file&#x20;system&#x20;with&#x20;many&#x20;useless&#x20;error&#x20;messages.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.icmp_ignore_bogus_error_responses&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.icmp_ignore_bogus_error_responses=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1.','[{\"cis\": [\"3.2.6\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7547,'Ensure&#x20;Reverse&#x20;Path&#x20;Filtering&#x20;is&#x20;enabled','Setting&#x20;net.ipv4.conf.all.rp_filter&#x20;and&#x20;net.ipv4.conf.default.rp_filter&#x20;to&#x20;1&#x20;forces&#x20;the&#x20;Linux&#x20;kernel&#x20;to&#x20;utilize&#x20;reverse&#x20;path&#x20;filtering&#x20;on&#x20;a&#x20;received&#x20;packet&#x20;to&#x20;determine&#x20;if&#x20;the&#x20;packet&#x20;was&#x20;valid.&#x20;Essentially,&#x20;with&#x20;reverse&#x20;path&#x20;filtering,&#x20;if&#x20;the&#x20;return&#x20;packet&#x20;does&#x20;not&#x20;go&#x20;out&#x20;the&#x20;same&#x20;interface&#x20;that&#x20;the&#x20;corresponding&#x20;source&#x20;packet&#x20;came&#x20;from,&#x20;the&#x20;packet&#x20;is&#x20;dropped&#x20;&#40;and&#x20;logged&#x20;if&#x20;log_martians&#x20;is&#x20;set&#41;.','Setting&#x20;these&#x20;flags&#x20;is&#x20;a&#x20;good&#x20;way&#x20;to&#x20;deter&#x20;attackers&#x20;from&#x20;sending&#x20;your&#x20;system&#x20;bogus&#x20;packets&#x20;that&#x20;cannot&#x20;be&#x20;responded&#x20;to.&#x20;One&#x20;instance&#x20;where&#x20;this&#x20;feature&#x20;breaks&#x20;down&#x20;is&#x20;if&#x20;asymmetrical&#x20;routing&#x20;is&#x20;employed.&#x20;This&#x20;would&#x20;occur&#x20;when&#x20;using&#x20;dynamic&#x20;routing&#x20;protocols&#x20;&#40;bgp,&#x20;ospf,&#x20;etc&#41;&#x20;on&#x20;your&#x20;system.&#x20;If&#x20;you&#x20;are&#x20;using&#x20;asymmetrical&#x20;routing&#x20;on&#x20;your&#x20;system,&#x20;you&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;enable&#x20;this&#x20;feature&#x20;without&#x20;breaking&#x20;the&#x20;routing.','','Set&#x20;the&#x20;following&#x20;parameters&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.conf.all.rp_filter&#x20;=&#x20;1&#x20;&#x20;&#x20;&#x20;net.ipv4.conf.default.rp_filter&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.all.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.conf.default.rp_filter=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.7\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7548,'Ensure&#x20;TCP&#x20;SYN&#x20;Cookies&#x20;is&#x20;enabled','When&#x20;tcp_syncookies&#x20;is&#x20;set,&#x20;the&#x20;kernel&#x20;will&#x20;handle&#x20;TCP&#x20;SYN&#x20;packets&#x20;normally&#x20;until&#x20;the&#x20;half-open&#x20;connection&#x20;queue&#x20;is&#x20;full,&#x20;at&#x20;which&#x20;time,&#x20;the&#x20;SYN&#x20;cookie&#x20;functionality&#x20;kicks&#x20;in.&#x20;SYN&#x20;cookies&#x20;work&#x20;by&#x20;not&#x20;using&#x20;the&#x20;SYN&#x20;queue&#x20;at&#x20;all.&#x20;Instead,&#x20;the&#x20;kernel&#x20;simply&#x20;replies&#x20;to&#x20;the&#x20;SYN&#x20;with&#x20;a&#x20;SYN|ACK,&#x20;but&#x20;will&#x20;include&#x20;a&#x20;specially&#x20;crafted&#x20;TCP&#x20;sequence&#x20;number&#x20;that&#x20;encodes&#x20;the&#x20;source&#x20;and&#x20;destination&#x20;IP&#x20;address&#x20;and&#x20;port&#x20;number&#x20;and&#x20;the&#x20;time&#x20;the&#x20;packet&#x20;was&#x20;sent.&#x20;A&#x20;legitimate&#x20;connection&#x20;would&#x20;send&#x20;the&#x20;ACK&#x20;packet&#x20;of&#x20;the&#x20;three&#x20;way&#x20;handshake&#x20;with&#x20;the&#x20;specially&#x20;crafted&#x20;sequence&#x20;number.&#x20;This&#x20;allows&#x20;the&#x20;system&#x20;to&#x20;verify&#x20;that&#x20;it&#x20;has&#x20;received&#x20;a&#x20;valid&#x20;response&#x20;to&#x20;a&#x20;SYN&#x20;cookie&#x20;and&#x20;allow&#x20;the&#x20;connection,&#x20;even&#x20;though&#x20;there&#x20;is&#x20;no&#x20;corresponding&#x20;SYN&#x20;in&#x20;the&#x20;queue.','Attackers&#x20;use&#x20;SYN&#x20;flood&#x20;attacks&#x20;to&#x20;perform&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attacked&#x20;on&#x20;a&#x20;system&#x20;by&#x20;sending&#x20;many&#x20;SYN&#x20;packets&#x20;without&#x20;completing&#x20;the&#x20;three&#x20;way&#x20;handshake.&#x20;This&#x20;will&#x20;quickly&#x20;use&#x20;up&#x20;slots&#x20;in&#x20;the&#x20;kernel&#039;s&#x20;half-open&#x20;connection&#x20;queue&#x20;and&#x20;prevent&#x20;legitimate&#x20;connections&#x20;from&#x20;succeeding.&#x20;SYN&#x20;cookies&#x20;allow&#x20;the&#x20;system&#x20;to&#x20;keep&#x20;accepting&#x20;valid&#x20;connections,&#x20;even&#x20;if&#x20;under&#x20;a&#x20;denial&#x20;of&#x20;service&#x20;attack.','','Set&#x20;the&#x20;following&#x20;parameter&#x20;in&#x20;/etc/sysctl.conf&#x20;or&#x20;a&#x20;/etc/sysctl.d&#47;&#42;&#x20;file:&#x20;net.ipv4.tcp_syncookies&#x20;=&#x20;1.&#x20;Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;active&#x20;kernel&#x20;parameters:&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.tcp_syncookies=1&#x20;#&#x20;sysctl&#x20;-w&#x20;net.ipv4.route.flush=1','[{\"cis\": [\"3.2.8\"]}, {\"cis_csc\": [\"3\", \"11\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7549,'Ensure&#x20;SSH&#x20;Protocol&#x20;is&#x20;set&#x20;to&#x20;2','SSH&#x20;supports&#x20;two&#x20;different&#x20;and&#x20;incompatible&#x20;protocols:&#x20;SSH1&#x20;and&#x20;SSH2.&#x20;SSH1&#x20;was&#x20;the&#x20;original&#x20;protocol&#x20;and&#x20;was&#x20;subject&#x20;to&#x20;security&#x20;issues.&#x20;SSH2&#x20;is&#x20;more&#x20;advanced&#x20;and&#x20;secure.','SSH&#x20;v1&#x20;suffers&#x20;from&#x20;insecurities&#x20;that&#x20;do&#x20;not&#x20;affect&#x20;SSH&#x20;v2.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;Protocol&#x20;2','[{\"cis\": [\"5.2.2\"]}, {\"cis_csc\": [\"3.4\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7550,'Ensure&#x20;SSH&#x20;LogLevel&#x20;is&#x20;set&#x20;to&#x20;INFO','The&#x20;INFO&#x20;parameter&#x20;specifies&#x20;that&#x20;login&#x20;and&#x20;logout&#x20;activity&#x20;will&#x20;be&#x20;logged.','SSH&#x20;provides&#x20;several&#x20;logging&#x20;levels&#x20;with&#x20;varying&#x20;amounts&#x20;of&#x20;verbosity.&#x20;DEBUG&#x20;is&#x20;specifically&#x20;not&#x20;recommended&#x20;other&#x20;than&#x20;strictly&#x20;for&#x20;debugging&#x20;SSH&#x20;communications&#x20;since&#x20;it&#x20;provides&#x20;so&#x20;much&#x20;data&#x20;that&#x20;it&#x20;is&#x20;difficult&#x20;to&#x20;identify&#x20;important&#x20;security&#x20;information.&#x20;INFO&#x20;level&#x20;is&#x20;the&#x20;basic&#x20;level&#x20;that&#x20;only&#x20;records&#x20;login&#x20;activity&#x20;of&#x20;SSH&#x20;users.&#x20;In&#x20;many&#x20;situations,&#x20;such&#x20;as&#x20;Incident&#x20;Response,&#x20;it&#x20;is&#x20;important&#x20;to&#x20;determine&#x20;when&#x20;a&#x20;particular&#x20;user&#x20;was&#x20;active&#x20;on&#x20;a&#x20;system.&#x20;The&#x20;logout&#x20;record&#x20;can&#x20;eliminate&#x20;those&#x20;users&#x20;who&#x20;disconnected,&#x20;which&#x20;helps&#x20;narrow&#x20;the&#x20;field.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;LogLevel&#x20;INFO','[{\"cis\": [\"5.2.3\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7551,'Ensure&#x20;SSH&#x20;MaxAuthTries&#x20;is&#x20;set&#x20;to&#x20;4&#x20;or&#x20;less','The&#x20;MaxAuthTries&#x20;parameter&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;When&#x20;the&#x20;login&#x20;failure&#x20;count&#x20;reaches&#x20;half&#x20;the&#x20;number,&#x20;error&#x20;messages&#x20;will&#x20;be&#x20;written&#x20;to&#x20;the&#x20;syslog&#x20;file&#x20;detailing&#x20;the&#x20;login&#x20;failure.','Setting&#x20;the&#x20;MaxAuthTries&#x20;parameter&#x20;to&#x20;a&#x20;low&#x20;number&#x20;will&#x20;minimize&#x20;the&#x20;risk&#x20;of&#x20;successful&#x20;brute&#x20;force&#x20;attacks&#x20;to&#x20;the&#x20;SSH&#x20;server.&#x20;While&#x20;the&#x20;recommended&#x20;setting&#x20;is&#x20;4,&#x20;set&#x20;the&#x20;number&#x20;based&#x20;on&#x20;site&#x20;policy.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;MaxAuthTries&#x20;4','[{\"cis\": [\"5.2.5\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"2.2.4\"]}, {\"nist_800_53\": [\"CM.1\"]}]'),(7552,'Ensure&#x20;SSH&#x20;IgnoreRhosts&#x20;is&#x20;enabled','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;IgnoreRhosts&#x20;yes','[{\"cis\": [\"5.2.6\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7553,'Ensure&#x20;SSH&#x20;HostbasedAuthentication&#x20;is&#x20;disabled','The&#x20;HostbasedAuthentication&#x20;parameter&#x20;specifies&#x20;if&#x20;authentication&#x20;is&#x20;allowed&#x20;through&#x20;trusted&#x20;hosts&#x20;via&#x20;the&#x20;user&#x20;of&#x20;.rhosts&#x20;,&#x20;or&#x20;/etc/hosts.equiv&#x20;,&#x20;along&#x20;with&#x20;successful&#x20;public&#x20;key&#x20;client&#x20;host&#x20;authentication.&#x20;This&#x20;option&#x20;only&#x20;applies&#x20;to&#x20;SSH&#x20;Protocol&#x20;Version&#x20;2.','Even&#x20;though&#x20;the&#x20;.rhosts&#x20;files&#x20;are&#x20;ineffective&#x20;if&#x20;support&#x20;is&#x20;disabled&#x20;in&#x20;/etc/pam.conf,&#x20;disabling&#x20;the&#x20;ability&#x20;to&#x20;use&#x20;.rhosts&#x20;files&#x20;in&#x20;SSH&#x20;provides&#x20;an&#x20;additional&#x20;layer&#x20;of&#x20;protection.','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;HostbasedAuthentication&#x20;no','[{\"cis\": [\"5.2.7\"]}, {\"cis_csc\": [\"9\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7554,'Ensure&#x20;SSH&#x20;root&#x20;login&#x20;is&#x20;disabled','The&#x20;PermitRootLogin&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;root&#x20;user&#x20;can&#x20;log&#x20;in&#x20;using&#x20;ssh&#40;1&#41;.&#x20;The&#x20;default&#x20;is&#x20;no.','Disallowing&#x20;root&#x20;logins&#x20;over&#x20;SSH&#x20;requires&#x20;system&#x20;admins&#x20;to&#x20;authenticate&#x20;using&#x20;their&#x20;own&#x20;individual&#x20;account,&#x20;then&#x20;escalating&#x20;to&#x20;root&#x20;via&#x20;sudo&#x20;or&#x20;su.&#x20;This&#x20;in&#x20;turn&#x20;limits&#x20;opportunity&#x20;for&#x20;non-repudiation&#x20;and&#x20;provides&#x20;a&#x20;clear&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;a&#x20;security&#x20;incident','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitRootLogin&#x20;no','[{\"cis\": [\"5.2.8\"]}, {\"cis_csc\": [\"5.8\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7555,'Ensure&#x20;SSH&#x20;PermitEmptyPasswords&#x20;is&#x20;disabled','The&#x20;PermitEmptyPasswords&#x20;parameter&#x20;specifies&#x20;if&#x20;the&#x20;SSH&#x20;server&#x20;allows&#x20;login&#x20;to&#x20;accounts&#x20;with&#x20;empty&#x20;password&#x20;strings.','Disallowing&#x20;remote&#x20;shell&#x20;access&#x20;to&#x20;accounts&#x20;that&#x20;have&#x20;an&#x20;empty&#x20;password&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;the&#x20;system','','Edit&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;to&#x20;set&#x20;the&#x20;parameter&#x20;as&#x20;follows:&#x20;PermitEmptyPasswords&#x20;no','[{\"cis\": [\"5.2.9\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"4.1\"]}, {\"hipaa\": [\"164.312.a.2.IV\", \"164.312.e.1\", \"164.312.e.2.I\", \"164.312.e.2.II\"]}, {\"nist_800_53\": [\"SC.8\"]}, {\"tsc\": [\"CC6.1\", \"CC6.7\", \"CC7.2\"]}]'),(7556,'Ensure&#x20;root&#x20;is&#x20;the&#x20;only&#x20;UID&#x20;0&#x20;account','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;privileges&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;account&#x20;and&#x20;only&#x20;from&#x20;the&#x20;system&#x20;console.&#x20;Administrative&#x20;access&#x20;must&#x20;be&#x20;through&#x20;an&#x20;unprivileged&#x20;account&#x20;using&#x20;an&#x20;approved&#x20;mechanism&#x20;as&#x20;noted&#x20;in&#x20;Item&#x20;5.6&#x20;Ensure&#x20;access&#x20;to&#x20;the&#x20;su&#x20;command&#x20;is&#x20;restricted.','','Remove&#x20;any&#x20;users&#x20;other&#x20;than&#x20;root&#x20;with&#x20;UID&#x20;0&#x20;or&#x20;assign&#x20;them&#x20;a&#x20;new&#x20;UID&#x20;if&#x20;appropriate.','[{\"cis\": [\"6.2.5\"]}, {\"cis_csc\": [\"5.1\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(7557,'Ensure&#x20;password&#x20;fields&#x20;are&#x20;not&#x20;empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords&#x20;or&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;the&#x20;account&#x20;from&#x20;being&#x20;used&#x20;by&#x20;an&#x20;unauthorized&#x20;user.','','If&#x20;any&#x20;accounts&#x20;in&#x20;the&#x20;/etc/shadow&#x20;file&#x20;do&#x20;not&#x20;have&#x20;a&#x20;password,&#x20;run&#x20;the&#x20;following&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;account&#x20;until&#x20;it&#x20;can&#x20;be&#x20;determined&#x20;why&#x20;it&#x20;does&#x20;not&#x20;have&#x20;a&#x20;password:&#x20;#&#x20;passwd&#x20;-l&#x20;&lt;username&gt;.&#x20;&#x20;Also,&#x20;check&#x20;to&#x20;see&#x20;if&#x20;the&#x20;account&#x20;is&#x20;logged&#x20;in&#x20;and&#x20;investigate&#x20;what&#x20;it&#x20;is&#x20;being&#x20;used&#x20;for&#x20;to&#x20;determine&#x20;if&#x20;it&#x20;needs&#x20;to&#x20;be&#x20;forced&#x20;off.','[{\"cis\": [\"6.2.1\"]}, {\"cis_csc\": [\"16\"]}, {\"pci_dss\": [\"10.2.5\"]}, {\"hipaa\": [\"164.312.b\"]}, {\"nist_800_53\": [\"AU.14\", \"AC.7\"]}, {\"tsc\": [\"CC6.1\", \"CC6.8\", \"CC7.2\", \"CC7.3\", \"CC7.4\"]}]'),(8000,'Disable&#x20;Local-only&#x20;Graphical&#x20;Login&#x20;Environment','The&#x20;graphical&#x20;login&#x20;service&#x20;provides&#x20;the&#x20;capability&#x20;of&#x20;logging&#x20;into&#x20;the&#x20;system&#x20;using&#x20;an&#x20;X-&#x20;windows&#x20;type&#x20;interface&#x20;from&#x20;the&#x20;console.&#x20;If&#x20;graphical&#x20;login&#x20;access&#x20;for&#x20;the&#x20;console&#x20;is&#x20;required,&#x20;leave&#x20;the&#x20;service&#x20;in&#x20;local-only&#x20;mode.','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/application/graphical-login/gdm:default','[{\"cis\": [\"2.1\"]}]'),(8001,'Configure&#x20;sendmail&#x20;Service&#x20;for&#x20;Local-Only&#x20;Mode','In&#x20;Solaris&#x20;11,&#x20;the&#x20;sendmail&#x20;service&#x20;is&#x20;set&#x20;to&#x20;local&#x20;only&#x20;mode&#x20;by&#x20;default.&#x20;This&#x20;means&#x20;that&#x20;users&#x20;on&#x20;remote&#x20;systems&#x20;cannot&#x20;connect&#x20;to&#x20;the&#x20;sendmail&#x20;service,&#x20;eliminating&#x20;the&#x20;possibility&#x20;of&#x20;a&#x20;remote&#x20;exploit&#x20;attack&#x20;against&#x20;some&#x20;future&#x20;sendmail&#x20;vulnerability.&#x20;Leaving&#x20;sendmail&#x20;in&#x20;local-only&#x20;mode&#x20;permits&#x20;mail&#x20;to&#x20;be&#x20;sent&#x20;out&#x20;from&#x20;the&#x20;local&#x20;system.&#x20;If&#x20;the&#x20;local&#x20;system&#x20;will&#x20;not&#x20;be&#x20;processing&#x20;or&#x20;sending&#x20;any&#x20;mail,&#x20;this&#x20;service&#x20;can&#x20;be&#x20;disabled.&#x20;However,&#x20;if&#x20;sendmail&#x20;is&#x20;disabled&#x20;completely,&#x20;email&#x20;messages&#x20;sent&#x20;to&#x20;the&#x20;root&#x20;account&#x20;&#40;such&#x20;as&#x20;cron&#x20;job&#x20;output&#x20;or&#x20;audit&#x20;service&#x20;warnings&#41;&#x20;will&#x20;fail&#x20;to&#x20;be&#x20;delivered.&#x20;An&#x20;alternative&#x20;approach&#x20;is&#x20;to&#x20;disable&#x20;the&#x20;sendmail&#x20;service&#x20;and&#x20;create&#x20;a&#x20;cron&#x20;job&#x20;to&#x20;process&#x20;all&#x20;mail&#x20;that&#x20;is&#x20;queued&#x20;on&#x20;the&#x20;local&#x20;system,&#x20;sending&#x20;it&#x20;to&#x20;a&#x20;relay&#x20;host&#x20;defined&#x20;in&#x20;the&#x20;sendmail.cf&#x20;file.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;sendmail&#x20;be&#x20;left&#x20;in&#x20;local-only&#x20;mode&#x20;unless&#x20;there&#x20;is&#x20;a&#x20;specific&#x20;requirement&#x20;to&#x20;completely&#x20;disable&#x20;it.','The&#x20;software&#x20;for&#x20;all&#x20;Mail&#x20;Transfer&#x20;Agents&#x20;is&#x20;complex&#x20;and&#x20;most&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;issues.&#x20;While&#x20;it&#x20;is&#x20;important&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;can&#x20;process&#x20;local&#x20;mail&#x20;messages,&#x20;it&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;have&#x20;the&#x20;MTA&#039;s&#x20;daemon&#x20;listening&#x20;on&#x20;a&#x20;port&#x20;unless&#x20;the&#x20;server&#x20;is&#x20;intended&#x20;to&#x20;be&#x20;a&#x20;mail&#x20;server&#x20;that&#x20;receives&#x20;and&#x20;processes&#x20;mail&#x20;from&#x20;other&#x20;systems.','','Run&#x20;the&#x20;following&#x20;to&#x20;set&#x20;sendmail&#x20;to&#x20;listen&#x20;only&#x20;local&#x20;interfaces:&#x20;#&#x20;svccfg&#x20;-v&#x20;-s&#x20;svc:/network/smtp:sendmail&#x20;setprop&#x20;config/local_only=false&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;refresh&#x20;sendmail&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;sendmail','[{\"cis\": [\"2.2\"]}]'),(8002,'Disable&#x20;RPC&#x20;Encryption&#x20;Key','The&#x20;keyserv&#x20;service&#x20;is&#x20;only&#x20;required&#x20;for&#x20;sites&#x20;that&#x20;are&#x20;using&#x20;the&#x20;Secure&#x20;RPC&#x20;mechanism.&#x20;The&#x20;most&#x20;common&#x20;use&#x20;for&#x20;Secure&#x20;RPC&#x20;on&#x20;Solaris&#x20;machines&#x20;is&#x20;&quot;secure&#x20;NFS&quot;,&#x20;which&#x20;uses&#x20;the&#x20;Secure&#x20;RPC&#x20;mechanism&#x20;to&#x20;provide&#x20;higher&#x20;levels&#x20;of&#x20;security&#x20;than&#x20;the&#x20;standard&#x20;NFS&#x20;protocols.&#x20;&#40;&quot;Secure&#x20;NFS&quot;&#x20;is&#x20;unrelated&#x20;to&#x20;Kerberos&#x20;authentication&#x20;as&#x20;a&#x20;mechanism&#x20;for&#x20;providing&#x20;higher&#x20;levels&#x20;of&#x20;NFS&#x20;security.&#x20;&quot;Kerberized&quot;&#x20;NFS&#x20;does&#x20;not&#x20;require&#x20;the&#x20;keyserv&#x20;service&#x20;to&#x20;be&#x20;running.&#41;','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/rpc/keyserv','[{\"cis\": [\"2.3\"]}]'),(8003,'Disable&#x20;NIS&#x20;Server&#x20;Services','The&#x20;NIS&#x20;server&#x20;software&#x20;is&#x20;not&#x20;installed&#x20;by&#x20;default&#x20;and&#x20;is&#x20;only&#x20;required&#x20;on&#x20;systems&#x20;that&#x20;are&#x20;acting&#x20;as&#x20;an&#x20;NIS&#x20;server&#x20;for&#x20;the&#x20;local&#x20;site.&#x20;Typically&#x20;there&#x20;are&#x20;only&#x20;a&#x20;small&#x20;number&#x20;of&#x20;NIS&#x20;servers&#x20;on&#x20;any&#x20;given&#x20;network.&#x20;These&#x20;services&#x20;are&#x20;disabled&#x20;by&#x20;default&#x20;unless&#x20;the&#x20;system&#x20;has&#x20;been&#x20;previously&#x20;configured&#x20;to&#x20;act&#x20;as&#x20;a&#x20;NIS&#x20;server.','As&#x20;RPC-based&#x20;services&#x20;such&#x20;as&#x20;NIS&#x20;may&#x20;use&#x20;non-secure&#x20;authentication&#x20;and&#x20;share&#x20;sensitive&#x20;network&#x20;object&#x20;information&#x20;with&#x20;systems&#x20;and&#x20;applications&#x20;using&#x20;RPC-based&#x20;services,&#x20;this&#x20;service&#x20;should&#x20;be&#x20;disabled.&#x20;Users&#x20;are&#x20;encouraged&#x20;to&#x20;use&#x20;LDAP&#x20;as&#x20;a&#x20;name&#x20;service&#x20;in&#x20;place&#x20;of&#x20;NIS.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/nis/server&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/nis/domain','[{\"cis\": [\"2.4\"]}]'),(8004,'Disable&#x20;NIS&#x20;Client&#x20;Services','If&#x20;the&#x20;local&#x20;site&#x20;is&#x20;not&#x20;using&#x20;the&#x20;NIS&#x20;naming&#x20;service&#x20;to&#x20;distribute&#x20;system&#x20;and&#x20;user&#x20;configuration&#x20;information,&#x20;this&#x20;service&#x20;may&#x20;be&#x20;disabled.&#x20;This&#x20;service&#x20;is&#x20;disabled&#x20;by&#x20;default&#x20;unless&#x20;the&#x20;NIS&#x20;service&#x20;has&#x20;been&#x20;installed&#x20;and&#x20;configured&#x20;on&#x20;the&#x20;system.','As&#x20;RPC-based&#x20;services&#x20;such&#x20;as&#x20;NIS&#x20;may&#x20;use&#x20;non-secure&#x20;authentication&#x20;and&#x20;share&#x20;sensitive&#x20;network&#x20;object&#x20;information&#x20;with&#x20;systems&#x20;and&#x20;applications&#x20;using&#x20;RPC-based&#x20;service,&#x20;NIS&#x20;client&#x20;daemons&#x20;should&#x20;be&#x20;disabled.&#x20;Users&#x20;are&#x20;encouraged&#x20;to&#x20;use&#x20;LDAP&#x20;as&#x20;a&#x20;name&#x20;service&#x20;in&#x20;place&#x20;of&#x20;NIS.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/nis/client&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/nis/domain','[{\"cis\": [\"2.5\"]}]'),(8005,'Disable&#x20;Kerberos&#x20;TGT&#x20;Expiration&#x20;Warning','The&#x20;Kerberos&#x20;TGT&#x20;warning&#x20;service&#x20;is&#x20;used&#x20;to&#x20;warn&#x20;users&#x20;when&#x20;their&#x20;Kerberos&#x20;tickets&#x20;are&#x20;about&#x20;expire&#x20;or&#x20;to&#x20;renew&#x20;those&#x20;tickets&#x20;before&#x20;they&#x20;expire.&#x20;This&#x20;service&#x20;is&#x20;not&#x20;used&#x20;if&#x20;Kerberos&#x20;has&#x20;not&#x20;been&#x20;configured.&#x20;This&#x20;service&#x20;is&#x20;configured&#x20;to&#x20;be&#x20;&quot;local&#x20;only&quot;&#x20;by&#x20;default.','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/security/ktkt_warn','[{\"cis\": [\"2.6\"]}]'),(8006,'Disable&#x20;Generic&#x20;Security&#x20;Services&#x20;&#40;GSS&#41;','The&#x20;GSS&#x20;API&#x20;is&#x20;a&#x20;security&#x20;abstraction&#x20;layer&#x20;that&#x20;is&#x20;designed&#x20;to&#x20;make&#x20;it&#x20;easier&#x20;for&#x20;developers&#x20;to&#x20;integrate&#x20;with&#x20;different&#x20;authentication&#x20;schemes.&#x20;It&#x20;is&#x20;most&#x20;commonly&#x20;used&#x20;in&#x20;applications&#x20;for&#x20;sites&#x20;that&#x20;use&#x20;Kerberos&#x20;for&#x20;network&#x20;authentication,&#x20;though&#x20;it&#x20;can&#x20;also&#x20;allow&#x20;applications&#x20;to&#x20;interoperate&#x20;with&#x20;other&#x20;authentication&#x20;schemes.','GSS&#x20;does&#x20;not&#x20;expose&#x20;anything&#x20;external&#x20;to&#x20;the&#x20;system&#x20;as&#x20;it&#x20;is&#x20;configured&#x20;to&#x20;use&#x20;TLI&#x20;&#40;protocol&#x20;=&#x20;ticotsord&#41;&#x20;by&#x20;default.&#x20;This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/rpc/gss','[{\"cis\": [\"2.7\"]}]'),(8007,'Disable&#x20;Removable&#x20;Volume&#x20;Manager','The&#x20;HAL-aware&#x20;removable&#x20;volume&#x20;manager&#x20;in&#x20;the&#x20;Solaris&#x20;11&#x20;OS&#x20;automatically&#x20;mounts&#x20;external&#x20;devices&#x20;for&#x20;users&#x20;whenever&#x20;the&#x20;device&#x20;is&#x20;attached&#x20;to&#x20;the&#x20;system.&#x20;These&#x20;devices&#x20;include&#x20;CD-R,&#x20;CD-RW,&#x20;floppies,&#x20;DVD,&#x20;USB&#x20;and&#x20;1394&#x20;mass&#x20;storage&#x20;devices.&#x20;See&#x20;the&#x20;rmvolmgr&#40;1M&#41;&#x20;manual&#x20;page&#x20;for&#x20;more&#x20;details.','Allowing&#x20;users&#x20;to&#x20;mount&#x20;and&#x20;access&#x20;data&#x20;from&#x20;removable&#x20;media&#x20;devices&#x20;makes&#x20;it&#x20;easier&#x20;for&#x20;malicious&#x20;programs&#x20;and&#x20;data&#x20;to&#x20;be&#x20;imported&#x20;onto&#x20;the&#x20;network.&#x20;It&#x20;also&#x20;introduces&#x20;the&#x20;risk&#x20;that&#x20;sensitive&#x20;data&#x20;may&#x20;be&#x20;transferred&#x20;off&#x20;the&#x20;system&#x20;without&#x20;a&#x20;log&#x20;record.&#x20;By&#x20;adding&#x20;rmvolmgr&#x20;to&#x20;the&#x20;.xinitrc&#x20;file,&#x20;user-isolated&#x20;instances&#x20;of&#x20;rmvolmgr&#x20;can&#x20;be&#x20;run&#x20;via&#x20;a&#x20;session&#x20;startup&#x20;script.&#x20;In&#x20;such&#x20;cases,&#x20;the&#x20;rmvolmgr&#x20;instance&#x20;will&#x20;not&#x20;allow&#x20;management&#x20;of&#x20;volumes&#x20;that&#x20;belong&#x20;to&#x20;other&#x20;than&#x20;the&#x20;owner&#x20;of&#x20;the&#x20;startup&#x20;script.&#x20;When&#x20;a&#x20;user&#x20;logs&#x20;onto&#x20;the&#x20;workstation&#x20;console&#x20;&#40;/dev/console&#41;,&#x20;any&#x20;instance&#x20;of&#x20;user-initiated&#x20;rmvolmgr&#x20;will&#x20;only&#x20;own&#x20;locally&#x20;connected&#x20;devices,&#x20;such&#x20;as&#x20;CD-ROMs&#x20;or&#x20;flash&#x20;memory&#x20;hardware,&#x20;locally&#x20;connected&#x20;to&#x20;USB&#x20;or&#x20;FireWire&#x20;ports.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;commands:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/system/filesystem/rmvolmgr&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/rpc/smserver','[{\"cis\": [\"2.8\"]}]'),(8008,'Disable&#x20;automount&#x20;Service','The&#x20;automount&#x20;daemon&#x20;is&#x20;normally&#x20;used&#x20;to&#x20;automatically&#x20;mount&#x20;NFS&#x20;file&#x20;systems&#x20;from&#x20;remote&#x20;file&#x20;servers&#x20;when&#x20;needed.&#x20;However,&#x20;the&#x20;automount&#x20;daemon&#x20;can&#x20;also&#x20;be&#x20;configured&#x20;to&#x20;mount&#x20;local&#x20;&#40;loopback&#41;&#x20;file&#x20;systems&#x20;as&#x20;well,&#x20;which&#x20;may&#x20;include&#x20;local&#x20;user&#x20;home&#x20;directories,&#x20;depending&#x20;on&#x20;the&#x20;system&#x20;configuration.','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/system/filesystem/autofs','[{\"cis\": [\"2.9\"]}]'),(8009,'Disable&#x20;Apache&#x20;Service','The&#x20;Apache&#x20;service&#x20;provides&#x20;an&#x20;instance&#x20;of&#x20;the&#x20;Apache&#x20;web&#x20;server.','This&#x20;service&#x20;should&#x20;be&#x20;disabled&#x20;if&#x20;it&#x20;is&#x20;not&#x20;required.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/http:apache22','[{\"cis\": [\"2.10\"]}]'),(8010,'Disable&#x20;Local-only&#x20;RPC&#x20;Port&#x20;Mapping&#x20;Service','Remote&#x20;Procedure&#x20;Call&#x20;&#40;RPC&#41;&#x20;is&#x20;used&#x20;by&#x20;many&#x20;services&#x20;within&#x20;the&#x20;Solaris&#x20;11&#x20;operating&#x20;system.&#x20;Some&#x20;of&#x20;these&#x20;services&#x20;allow&#x20;external&#x20;connections&#x20;to&#x20;use&#x20;the&#x20;service&#x20;&#40;e.g.&#x20;NFS,&#x20;NIS&#41;.&#x20;By&#x20;default,&#x20;the&#x20;Solaris&#x20;11&#x20;OS&#x20;configures&#x20;this&#x20;service&#x20;to&#x20;be&#x20;local&#x20;only.','RPC-based&#x20;services&#x20;typically&#x20;have&#x20;weak&#x20;or&#x20;non-existent&#x20;authentication&#x20;and&#x20;yet&#x20;may&#x20;share&#x20;very&#x20;sensitive&#x20;information,&#x20;which&#x20;is&#x20;vulnerable&#x20;to&#x20;network&#x20;traffic&#x20;sniffers.&#x20;Unless&#x20;one&#x20;of&#x20;these&#x20;services&#x20;is&#x20;required&#x20;on&#x20;this&#x20;host,&#x20;RPC-based&#x20;tools&#x20;should&#x20;be&#x20;fully&#x20;disabled.','','To&#x20;disable&#x20;this&#x20;service,&#x20;run&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/rpc/bind.&#x20;If&#x20;the&#x20;goal&#x20;is&#x20;to&#x20;restrict&#x20;access&#x20;to&#x20;this&#x20;service,&#x20;but&#x20;not&#x20;disable&#x20;it&#x20;completely,&#x20;consider&#x20;using&#x20;a&#x20;host-based&#x20;firewall&#x20;such&#x20;as&#x20;ipfilter&#40;5&#41;&#x20;to&#x20;control&#x20;what&#x20;hosts&#x20;are&#x20;allowed&#x20;to&#x20;access&#x20;this&#x20;service.&#x20;Alternatively,&#x20;TCP&#x20;Wrappers&#x20;support,&#x20;which&#x20;controls&#x20;host&#x20;access&#x20;and&#x20;connection&#x20;auditing,&#x20;can&#x20;be&#x20;enabled.&#x20;TCP&#x20;Wrappers&#x20;is&#x20;discussed&#x20;in&#x20;the&#x20;next&#x20;section.','[{\"cis\": [\"2.11\"]}]'),(8011,'Configure&#x20;TCP&#x20;Wrappers','TCP&#x20;Wrappers&#x20;is&#x20;a&#x20;host-based&#x20;access&#x20;control&#x20;system&#x20;that&#x20;allows&#x20;administrators&#x20;to&#x20;control&#x20;who&#x20;has&#x20;access&#x20;to&#x20;various&#x20;network&#x20;services&#x20;based&#x20;on&#x20;the&#x20;IP&#x20;address&#x20;of&#x20;the&#x20;remote&#x20;end&#x20;of&#x20;the&#x20;connection.&#x20;TCP&#x20;Wrappers&#x20;also&#x20;provide&#x20;logging&#x20;information&#x20;via&#x20;syslog&#x20;about&#x20;both&#x20;successful&#x20;and&#x20;unsuccessful&#x20;connections.','TCP&#x20;Wrappers&#x20;provides&#x20;granular&#x20;control&#x20;over&#x20;what&#x20;services&#x20;can&#x20;be&#x20;accessed&#x20;over&#x20;the&#x20;network.&#x20;Its&#x20;logs&#x20;show&#x20;attempted&#x20;access&#x20;to&#x20;services&#x20;from&#x20;non-authorized&#x20;systems,&#x20;which&#x20;can&#x20;help&#x20;identify&#x20;unauthorized&#x20;access&#x20;attempts.','','To&#x20;enable&#x20;TCP&#x20;Wrappers,&#x20;run&#x20;the&#x20;following&#x20;commands:&#x20;1.&#x20;Create&#x20;and&#x20;customize&#x20;your&#x20;policy&#x20;in&#x20;/etc/hosts.allow:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;&lt;net&gt;/&lt;mask&gt;,&#x20;&lt;net/&lt;mask&gt;,&#x20;...&quot;&#x20;&gt;&#x20;/etc/hosts.allow.&#x20;Where&#x20;each&#x20;&lt;net&gt;/&lt;mask&gt;&#x20;combination&#x20;&#40;for&#x20;example,&#x20;the&#x20;Class&#x20;C&#x20;address&#x20;block&#x20;&quot;192.168.1.0/255.255.255.0&quot;&#41;&#x20;can&#x20;represent&#x20;one&#x20;network&#x20;block&#x20;in&#x20;use&#x20;by&#x20;your&#x20;organization&#x20;that&#x20;requires&#x20;access&#x20;to&#x20;this&#x20;system.&#x20;2&#41;&#x20;Create&#x20;a&#x20;default&#x20;deny&#x20;policy&#x20;in&#x20;/etc/hosts.deny:&#x20;#&#x20;echo&#x20;&quot;ALL:&#x20;ALL&quot;&#x20;&gt;/etc/hosts.deny.&#x20;3&#41;&#x20;Enable&#x20;TCP&#x20;Wrappers&#x20;for&#x20;all&#x20;services&#x20;started&#x20;by&#x20;inetd:&#x20;#&#x20;inetadm&#x20;-M&#x20;tcp_wrappers=TRUE&#x20;-&#x20;To&#x20;protect&#x20;only&#x20;specific&#x20;inetd&#x20;services,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;inetadm&#x20;-m&#x20;[FMRI]&#x20;tcp_wrappers=TRUE.&#x20;To&#x20;enable&#x20;TCP&#x20;Wrappers&#x20;for&#x20;the&#x20;RPC&#x20;port&#x20;mapping&#x20;service,&#x20;use&#x20;the&#x20;commands:&#x20;#&#x20;svccfg&#x20;-s&#x20;rpc/bind&#x20;setprop&#x20;config/enable_tcpwrappers=true&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;refresh&#x20;rpc/bind.&#x20;The&#x20;versions&#x20;of&#x20;SSH&#x20;and&#x20;sendmail&#x20;that&#x20;ship&#x20;with&#x20;Solaris&#x20;11&#x20;will&#x20;automatically&#x20;use&#x20;TCP&#x20;Wrappers&#x20;to&#x20;filter&#x20;access&#x20;if&#x20;a&#x20;hosts.allow&#x20;or&#x20;hosts.deny&#x20;file&#x20;exists.&#x20;To&#x20;protect&#x20;UDP&#x20;and&#x20;RPC-based&#x20;services&#x20;that&#x20;are&#x20;spawned&#x20;from&#x20;inetd,&#x20;consider&#x20;implementing&#x20;a&#x20;host-based&#x20;firewall&#x20;such&#x20;as&#x20;Solaris&#x20;IP&#x20;Filter.&#x20;See&#x20;ipfilter&#40;5&#41;&#x20;for&#x20;more&#x20;information.','[{\"cis\": [\"2.12\"]}]'),(8012,'Disable&#x20;Telnet&#x20;Service','The&#x20;telnet&#x20;daemon,&#x20;which&#x20;accepts&#x20;connections&#x20;from&#x20;users&#x20;from&#x20;other&#x20;systems&#x20;via&#x20;the&#x20;telnet&#x20;protocol&#x20;and&#x20;can&#x20;be&#x20;used&#x20;for&#x20;remote&#x20;shell&#x20;access.','The&#x20;telnet&#x20;protocol&#x20;is&#x20;insecure&#x20;and&#x20;unencrypted.&#x20;The&#x20;use&#x20;of&#x20;an&#x20;unencrypted&#x20;transmission&#x20;medium&#x20;could&#x20;allow&#x20;a&#x20;user&#x20;with&#x20;access&#x20;to&#x20;sniff&#x20;network&#x20;traffic&#x20;the&#x20;ability&#x20;to&#x20;steal&#x20;credentials.&#x20;The&#x20;ssh&#x20;protocol&#x20;provides&#x20;an&#x20;encrypted&#x20;session&#x20;and&#x20;stronger&#x20;security.','','Disable&#x20;telnet&#x20;server&#x20;if&#x20;enabled:&#x20;#&#x20;svcadm&#x20;disable&#x20;svc:/network/telnet','[{\"cis\": [\"2.13\"]}]'),(8013,'Restrict&#x20;Core&#x20;Dumps&#x20;to&#x20;Protected&#x20;Directory','The&#x20;action&#x20;described&#x20;in&#x20;this&#x20;section&#x20;creates&#x20;a&#x20;protected&#x20;directory&#x20;to&#x20;store&#x20;core&#x20;dumps&#x20;and&#x20;also&#x20;causes&#x20;the&#x20;system&#x20;to&#x20;create&#x20;a&#x20;log&#x20;entry&#x20;whenever&#x20;a&#x20;regular&#x20;process&#x20;dumps&#x20;core.','Core&#x20;dumps,&#x20;particularly&#x20;those&#x20;from&#x20;set-UID&#x20;and&#x20;set-GID&#x20;processes,&#x20;may&#x20;contain&#x20;sensitive&#x20;data.','','To&#x20;implement&#x20;the&#x20;recommendation,&#x20;run&#x20;the&#x20;commands:&#x20;#&#x20;chmod&#x20;700&#x20;/var/cores&#x20;&#x20;&#x20;&#x20;#&#x20;coreadm&#x20;-g&#x20;/var/cores/core_%n_%f_%u_%g_%t_%p&#x20;-e&#x20;log&#x20;-e&#x20;global&#x20;-e&#x20;global-setid&#x20;-d&#x20;process&#x20;-d&#x20;proc-setid&#x20;&#x20;&#x20;&#x20;If&#x20;the&#x20;local&#x20;site&#x20;chooses,&#x20;dumping&#x20;of&#x20;core&#x20;files&#x20;can&#x20;be&#x20;completely&#x20;disabled&#x20;with&#x20;the&#x20;following&#x20;command:&#x20;#&#x20;coreadm&#x20;-d&#x20;global&#x20;-d&#x20;global-setid&#x20;-d&#x20;process&#x20;-d&#x20;proc-setid','[{\"cis\": [\"3.1\"]}]'),(8014,'Enable&#x20;Stack&#x20;Protection','Buffer&#x20;overflow&#x20;exploits&#x20;have&#x20;been&#x20;the&#x20;basis&#x20;for&#x20;many&#x20;highly&#x20;publicized&#x20;compromises&#x20;and&#x20;defacements&#x20;of&#x20;large&#x20;numbers&#x20;of&#x20;Internet&#x20;connected&#x20;systems.&#x20;Many&#x20;of&#x20;the&#x20;automated&#x20;tools&#x20;in&#x20;use&#x20;by&#x20;system&#x20;attackers&#x20;exploit&#x20;well-known&#x20;buffer&#x20;overflow&#x20;problems&#x20;in&#x20;vendor-&#x20;supplied&#x20;and&#x20;third&#x20;party&#x20;software.','Enabling&#x20;stack&#x20;protection&#x20;prevents&#x20;certain&#x20;classes&#x20;of&#x20;buffer&#x20;overflow&#x20;attacks&#x20;and&#x20;is&#x20;a&#x20;significant&#x20;security&#x20;enhancement.&#x20;However,&#x20;this&#x20;does&#x20;not&#x20;protect&#x20;against&#x20;buffer&#x20;overflow&#x20;attacks&#x20;that&#x20;do&#x20;not&#x20;execute&#x20;code&#x20;on&#x20;the&#x20;stack&#x20;&#40;such&#x20;as&#x20;return-to-libc&#x20;exploits&#41;.&#x20;While&#x20;most&#x20;of&#x20;the&#x20;Solaris&#x20;OS&#x20;is&#x20;already&#x20;configured&#x20;to&#x20;employ&#x20;a&#x20;non-executable&#x20;stack,&#x20;this&#x20;setting&#x20;is&#x20;still&#x20;recommended&#x20;to&#x20;provide&#x20;a&#x20;more&#x20;comprehensive&#x20;solution&#x20;for&#x20;both&#x20;Solaris&#x20;and&#x20;other&#x20;software&#x20;that&#x20;may&#x20;be&#x20;installed.','','To&#x20;enable&#x20;stack&#x20;protection&#x20;and&#x20;block&#x20;stack-smashing&#x20;attacks,&#x20;run&#x20;the&#x20;following&#x20;to&#x20;edit&#x20;the&#x20;/etc/system&#x20;file:&#x20;#&#x20;if&#x20;[&#x20;!&#x20;&quot;`grep&#x20;noexec_user_stack=&#x20;/etc/system`&quot;&#x20;];&#x20;then&#x20;cat&#x20;&lt;&lt;END_CFG&#x20;&gt;&gt;/etc/system&#x20;set&#x20;noexec_user_stack=1&#x20;set&#x20;noexec_user_stack_log=1&#x20;END_CFG&#x20;fi','[{\"cis\": [\"3.2\"]}]'),(8015,'Enable&#x20;Strong&#x20;TCP&#x20;Sequence&#x20;Number&#x20;Generation','The&#x20;variable&#x20;TCP_STRONG_ISS&#x20;defines&#x20;the&#x20;mechanism&#x20;used&#x20;for&#x20;TCP&#x20;initial&#x20;sequence&#x20;number&#x20;generation.&#x20;If&#x20;an&#x20;attacker&#x20;can&#x20;predict&#x20;the&#x20;next&#x20;sequence&#x20;number,&#x20;it&#x20;is&#x20;possible&#x20;to&#x20;inject&#x20;fraudulent&#x20;packets&#x20;into&#x20;the&#x20;data&#x20;stream&#x20;to&#x20;hijack&#x20;the&#x20;session.','The&#x20;RFC&#x20;1948&#x20;method&#x20;is&#x20;widely&#x20;accepted&#x20;as&#x20;the&#x20;strongest&#x20;mechanism&#x20;for&#x20;TCP&#x20;packet&#x20;generation.&#x20;This&#x20;makes&#x20;remote&#x20;session&#x20;hijacking&#x20;attacks&#x20;more&#x20;difficult,&#x20;as&#x20;well&#x20;as&#x20;any&#x20;other&#x20;network-based&#x20;attack&#x20;that&#x20;relies&#x20;on&#x20;predicting&#x20;TCP&#x20;sequence&#x20;number&#x20;information.&#x20;It&#x20;is&#x20;theoretically&#x20;possible&#x20;that&#x20;there&#x20;may&#x20;be&#x20;a&#x20;small&#x20;performance&#x20;hit&#x20;in&#x20;connection&#x20;setup&#x20;time&#x20;when&#x20;this&#x20;setting&#x20;is&#x20;used,&#x20;but&#x20;there&#x20;are&#x20;no&#x20;publicly&#x20;available&#x20;benchmarks&#x20;that&#x20;establish&#x20;this.','','Run&#x20;the&#x20;following&#x20;commands&#x20;to&#x20;set&#x20;the&#x20;TCP_STRONG_ISS&#x20;parameter&#x20;to&#x20;use&#x20;RFC&#x20;1948&#x20;sequence&#x20;number&#x20;generation&#x20;in&#x20;the&#x20;/etc/default/inetinit&#x20;file:&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/TCP_STRONG_ISS=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;TCP_STRONG_ISS=2&quot;&#x20;};&#x20;{&#x20;print&#x20;}&#039;&#x20;inetinit&#x20;&gt;&#x20;inetinit.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;inetinit.CIS&#x20;inetinit&#x20;&#x20;&#x20;&#x20;&#x20;To&#x20;set&#x20;the&#x20;TCP_STRONG_ISS&#x20;parameter&#x20;on&#x20;a&#x20;running&#x20;system,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;ipadm&#x20;set-prop&#x20;-p&#x20;_strong_iss=2&#x20;tcp','[{\"cis\": [\"3.3\"]}]'),(8016,'Create&#x20;CIS&#x20;Audit&#x20;Class','To&#x20;group&#x20;a&#x20;set&#x20;of&#x20;related&#x20;audit&#x20;events,&#x20;the&#x20;Solaris&#x20;Audit&#x20;service&#x20;provides&#x20;the&#x20;ability&#x20;for&#x20;sites&#x20;to&#x20;define&#x20;their&#x20;own&#x20;audit&#x20;classes&#x20;that&#x20;contain&#x20;just&#x20;those&#x20;events&#x20;that&#x20;the&#x20;site&#x20;wants&#x20;to&#x20;audit.','To&#x20;simplify&#x20;administration,&#x20;a&#x20;CIS&#x20;specific&#x20;audit&#x20;class&#x20;should&#x20;be&#x20;created.','','To&#x20;create&#x20;the&#x20;CIS&#x20;audit&#x20;class,&#x20;edit&#x20;the&#x20;/etc/security/audit_class&#x20;file&#x20;and&#x20;add&#x20;the&#x20;following&#x20;entry&#x20;before&#x20;the&#x20;last&#x20;line&#x20;of&#x20;the&#x20;file:&#x20;0x0100000000000000:cis:CIS&#x20;Solaris&#x20;Benchmark','[{\"cis\": [\"4.1\"]}]'),(8017,'Enable&#x20;Auditing&#x20;of&#x20;Incoming&#x20;Network&#x20;Connections','The&#x20;Solaris&#x20;Audit&#x20;service&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;record&#x20;incoming&#x20;network&#x20;connections&#x20;to&#x20;any&#x20;listening&#x20;service&#x20;running&#x20;on&#x20;the&#x20;system.','This&#x20;recommendation&#x20;will&#x20;provide&#x20;an&#x20;audit&#x20;trail&#x20;that&#x20;contains&#x20;information&#x20;related&#x20;to&#x20;incoming&#x20;network&#x20;connections.&#x20;While&#x20;this&#x20;functionality&#x20;can&#x20;be&#x20;enabled&#x20;using&#x20;service-&#x20;specific&#x20;mechanisms,&#x20;using&#x20;the&#x20;Solaris&#x20;Audit&#x20;service&#x20;provides&#x20;a&#x20;more&#x20;centralized&#x20;and&#x20;complete&#x20;window&#x20;into&#x20;incoming&#x20;network&#x20;activity.','','To&#x20;enforce&#x20;this&#x20;setting,&#x20;edit&#x20;the&#x20;/etc/security/audit_event&#x20;file&#x20;and&#x20;add&#x20;the&#x20;cis&#x20;audit&#x20;class&#x20;to&#x20;the&#x20;following&#x20;audit&#x20;events:&#x20;AUE_ACCEPT&#x20;&#x20;&#x20;&#x20;AUE_CONNECT&#x20;&#x20;&#x20;&#x20;AUE_SOCKACCEPT&#x20;&#x20;&#x20;&#x20;AUE_SOCKCONNECT&#x20;&#x20;&#x20;&#x20;AUE_inetd_connect','[{\"cis\": [\"4.2\"]}]'),(8018,'Enable&#x20;Auditing&#x20;of&#x20;File&#x20;Metadata&#x20;Modification&#x20;Events','The&#x20;Solaris&#x20;Audit&#x20;service&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;record&#x20;file&#x20;metadata&#x20;modification&#x20;events&#x20;for&#x20;every&#x20;process&#x20;running&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;will&#x20;allow&#x20;the&#x20;auditing&#x20;service&#x20;to&#x20;determine&#x20;when&#x20;file&#x20;ownership,&#x20;permissions&#x20;and&#x20;related&#x20;information&#x20;is&#x20;changed.','This&#x20;recommendation&#x20;will&#x20;provide&#x20;an&#x20;audit&#x20;trail&#x20;that&#x20;contains&#x20;information&#x20;related&#x20;to&#x20;changes&#x20;of&#x20;file&#x20;metadata.&#x20;The&#x20;Solaris&#x20;Audit&#x20;service&#x20;is&#x20;used&#x20;to&#x20;provide&#x20;a&#x20;more&#x20;centralized&#x20;and&#x20;complete&#x20;window&#x20;into&#x20;activities&#x20;such&#x20;as&#x20;these.','','To&#x20;enforce&#x20;this&#x20;setting,&#x20;edit&#x20;the&#x20;/etc/security/audit_event&#x20;file&#x20;and&#x20;add&#x20;the&#x20;cis&#x20;audit&#x20;class&#x20;to&#x20;the&#x20;following&#x20;audit&#x20;events:&#x20;AUE_CHMOD&#x20;&#x20;&#x20;&#x20;AUE_CHOWN&#x20;&#x20;&#x20;&#x20;AUE_FCHOWN&#x20;&#x20;&#x20;&#x20;AUE_FCHMOD&#x20;&#x20;&#x20;&#x20;AUE_LCHOWN&#x20;&#x20;&#x20;&#x20;AUE_ACLSET&#x20;&#x20;&#x20;&#x20;AUE_FACLSET','[{\"cis\": [\"4.3\"]}]'),(8019,'Enable&#x20;Auditing&#x20;of&#x20;Process&#x20;and&#x20;Privilege&#x20;Events','The&#x20;Solaris&#x20;Audit&#x20;service&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;record&#x20;the&#x20;use&#x20;of&#x20;privileges&#x20;by&#x20;processes&#x20;running&#x20;on&#x20;the&#x20;system.&#x20;This&#x20;will&#x20;capture&#x20;events&#x20;such&#x20;as&#x20;the&#x20;setting&#x20;of&#x20;UID&#x20;and&#x20;GID&#x20;values,&#x20;setting&#x20;of&#x20;privileges,&#x20;as&#x20;well&#x20;as&#x20;the&#x20;use&#x20;of&#x20;functionality&#x20;such&#x20;as&#x20;chroot&#40;2&#41;.','This&#x20;recommendation&#x20;will&#x20;provide&#x20;an&#x20;audit&#x20;trail&#x20;that&#x20;contains&#x20;information&#x20;related&#x20;to&#x20;the&#x20;use&#x20;of&#x20;privileges&#x20;by&#x20;processes&#x20;running&#x20;on&#x20;the&#x20;system.&#x20;The&#x20;Solaris&#x20;Audit&#x20;service&#x20;is&#x20;used&#x20;to&#x20;provide&#x20;a&#x20;more&#x20;centralized&#x20;and&#x20;complete&#x20;window&#x20;into&#x20;activities&#x20;such&#x20;as&#x20;these.','','To&#x20;enforce&#x20;this&#x20;setting,&#x20;edit&#x20;the&#x20;/etc/security/audit_event&#x20;file&#x20;and&#x20;add&#x20;the&#x20;cis&#x20;audit&#x20;class&#x20;to&#x20;the&#x20;following&#x20;audit&#x20;events:&#x20;AUE_CHROOT&#x20;&#x20;&#x20;&#x20;AUE_SETREUID&#x20;&#x20;&#x20;&#x20;AUE_SETREGID&#x20;&#x20;&#x20;&#x20;AUE_FCHROOT&#x20;&#x20;&#x20;&#x20;AUE_PFEXEC&#x20;&#x20;&#x20;&#x20;AUE_SETUID&#x20;&#x20;&#x20;&#x20;AUE_NICE&#x20;&#x20;&#x20;&#x20;AUE_SETGID&#x20;&#x20;&#x20;&#x20;AUE_PRIOCNTLSYS&#x20;&#x20;&#x20;&#x20;AUE_SETEGID&#x20;&#x20;&#x20;&#x20;AUE_SETEUID&#x20;&#x20;&#x20;&#x20;AUE_SETPPRIV&#x20;&#x20;&#x20;&#x20;AUE_SETSID&#x20;&#x20;&#x20;&#x20;AUE_SETPGID','[{\"cis\": [\"4.4\"]}]'),(8020,'Configure&#x20;Solaris&#x20;Auditing','Solaris&#x20;auditing&#x20;service&#x20;keeps&#x20;a&#x20;record&#x20;of&#x20;how&#x20;a&#x20;system&#x20;is&#x20;being&#x20;used.&#x20;Solaris&#x20;auditing&#x20;can&#x20;be&#x20;configured&#x20;to&#x20;record&#x20;different&#x20;classes&#x20;of&#x20;events&#x20;based&#x20;upon&#x20;site&#x20;policy.&#x20;This&#x20;recommendation&#x20;will&#x20;set&#x20;and&#x20;verify&#x20;a&#x20;consensus-developed&#x20;auditing&#x20;policy.&#x20;That&#x20;said,&#x20;all&#x20;organizations&#x20;are&#x20;encouraged&#x20;to&#x20;tailor&#x20;this&#x20;policy&#x20;based&#x20;upon&#x20;their&#x20;specific&#x20;needs.&#x20;For&#x20;more&#x20;information&#x20;on&#x20;the&#x20;Solaris&#x20;auditing&#x20;service&#x20;including&#x20;how&#x20;to&#x20;filter&#x20;and&#x20;view&#x20;events,&#x20;see&#x20;the&#x20;Oracle&#x20;Solaris&#x20;product&#x20;documentation.&#x20;The&#x20;&quot;cis&quot;&#x20;class&#x20;is&#x20;a&#x20;&quot;custom&#x20;class&quot;&#x20;that&#x20;CIS&#x20;recommends&#x20;creating&#x20;that&#x20;includes&#x20;specifically&#x20;those&#x20;events&#x20;that&#x20;are&#x20;of&#x20;interest&#x20;&#40;defined&#x20;in&#x20;the&#x20;sections&#x20;above&#41;.&#x20;In&#x20;addition&#x20;to&#x20;those&#x20;events,&#x20;this&#x20;recommendation&#x20;also&#x20;includes&#x20;auditing&#x20;of&#x20;login&#x20;and&#x20;logout&#x20;&#40;lo&#41;&#x20;events,&#x20;administrative&#x20;&#40;ad&#41;&#x20;events,&#x20;file&#x20;transfer&#x20;&#40;ft&#41;&#x20;events,&#x20;and&#x20;command&#x20;execution&#x20;&#40;ex&#41;&#x20;events.&#x20;This&#x20;recommendation&#x20;also&#x20;configures&#x20;the&#x20;Solaris&#x20;auditing&#x20;service&#x20;to&#x20;capture&#x20;and&#x20;report&#x20;command&#x20;line&#x20;arguments&#x20;&#40;for&#x20;command&#x20;execution&#x20;events&#41;&#x20;and&#x20;the&#x20;zone&#x20;name&#x20;in&#x20;which&#x20;a&#x20;command&#x20;was&#x20;executed&#x20;&#40;for&#x20;global&#x20;and&#x20;non-global&#x20;zones&#41;.&#x20;Further,&#x20;this&#x20;recommendation&#x20;sets&#x20;a&#x20;disk&#x20;utilization&#x20;threshold&#x20;of&#x20;1%.&#x20;If&#x20;this&#x20;threshold&#x20;is&#x20;crossed&#x20;&#40;for&#x20;the&#x20;volume&#x20;that&#x20;includes&#x20;/var/audit&#41;,&#x20;then&#x20;a&#x20;warning&#x20;e-mail&#x20;will&#x20;be&#x20;sent&#x20;to&#x20;advise&#x20;the&#x20;system&#x20;administrators&#x20;that&#x20;audit&#x20;events&#x20;may&#x20;be&#x20;lost&#x20;if&#x20;the&#x20;disk&#x20;becomes&#x20;full.&#x20;Finally,&#x20;this&#x20;recommendation&#x20;will&#x20;also&#x20;ensure&#x20;that&#x20;new&#x20;audit&#x20;trails&#x20;are&#x20;created&#x20;at&#x20;the&#x20;start&#x20;of&#x20;each&#x20;new&#x20;day&#x20;&#40;to&#x20;help&#x20;keep&#x20;the&#x20;size&#x20;of&#x20;the&#x20;files&#x20;small&#x20;to&#x20;facilitate&#x20;analysis&#41;.','The&#x20;consensus&#x20;settings&#x20;described&#x20;in&#x20;this&#x20;section&#x20;are&#x20;an&#x20;effort&#x20;to&#x20;log&#x20;interesting&#x20;system&#x20;events&#x20;without&#x20;consuming&#x20;excessive&#x20;amounts&#x20;of&#x20;resources&#x20;logging&#x20;significant&#x20;but&#x20;usually&#x20;uninteresting&#x20;system&#x20;calls.','','To&#x20;enforce&#x20;this&#x20;setting,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;auditconfig&#x20;-conf&#x20;&#x20;&#x20;&#x20;#&#x20;auditconfig&#x20;-setflags&#x20;lo,ad,ft,ex,cis&#x20;&#x20;&#x20;&#x20;#&#x20;auditconfig&#x20;-setnaflags&#x20;lo&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;auditconfig&#x20;-setpolicy&#x20;cnt,argv,zonename&#x20;&#x20;&#x20;&#x20;#&#x20;auditconfig&#x20;-setplugin&#x20;audit_binfile&#x20;active&#x20;p_minfree=1&#x20;&#x20;&#x20;&#x20;&#x20;#&#x20;audit&#x20;-s&#x20;&#x20;&#x20;&#x20;#&#x20;rolemod&#x20;-K&#x20;audit_flags=lo,ad,ft,ex,cis:no&#x20;root&#x20;&#x20;&#x20;&#x20;#&#x20;EDITOR=ed&#x20;crontab&#x20;-e&#x20;root&#x20;&lt;&lt;&#x20;END_CRON&#x20;$&#x20;a&#x20;0&#x20;*&#x20;*&#x20;*&#x20;*&#x20;/usr/sbin/audit&#x20;-n&#x20;.&#x20;&#x20;w&#x20;q&#x20;END_CRON&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/var/audit&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;750&#x20;/var/audit','[{\"cis\": [\"4.5\"]}]'),(8021,'Default&#x20;Service&#x20;File&#x20;Creation&#x20;Mask','The&#x20;default&#x20;system&#x20;file&#x20;creation&#x20;mask&#x20;applies&#x20;to&#x20;processes&#x20;that&#x20;are&#x20;started&#x20;by&#x20;init&#x20;-&#x20;including&#x20;most&#x20;system&#x20;services.&#x20;To&#x20;ensure&#x20;that&#x20;files&#x20;are&#x20;not&#x20;created&#x20;with&#x20;write&#x20;access&#x20;to&#x20;anyone&#x20;other&#x20;than&#x20;their&#x20;owner,&#x20;the&#x20;default&#x20;file&#x20;creation&#x20;mask&#x20;should&#x20;be&#x20;set&#x20;to&#x20;022.&#x20;Some&#x20;sites&#x20;with&#x20;more&#x20;stringent&#x20;security&#x20;requirements&#x20;may&#x20;prefer&#x20;to&#x20;set&#x20;this&#x20;value&#x20;to&#x20;077&#x20;to&#x20;eliminate&#x20;all&#x20;permissions&#x20;for&#x20;group&#x20;and&#x20;world.&#x20;Note&#x20;that&#x20;changing&#x20;this&#x20;value&#x20;from&#x20;the&#x20;Solaris&#x20;default&#x20;of&#x20;022&#x20;may&#x20;negatively&#x20;impact&#x20;services&#x20;that&#x20;may&#x20;not&#x20;be&#x20;able&#x20;to&#x20;operate&#x20;with&#x20;a&#x20;stricter&#x20;setting.','The&#x20;default&#x20;file&#x20;creation&#x20;mask&#x20;should&#x20;be&#x20;set&#x20;to&#x20;022&#x20;to&#x20;avoid&#x20;unnecessarily&#x20;giving&#x20;files&#x20;write&#x20;access&#x20;to&#x20;group&#x20;or&#x20;world.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;&#x20;#&#x20;svccfg&#x20;-s&#x20;svc:/system/environment:init&#x20;setprop&#x20;umask/umask&#x20;=&#x20;astring:&#x20;&quot;022&quot;','[{\"cis\": [\"5.1\"]}]'),(8022,'Disable&#x20;&quot;nobody&quot;&#x20;Access&#x20;for&#x20;RPC&#x20;Encryption&#x20;Key&#x20;Storage&#x20;Service','This&#x20;action&#x20;listed&#x20;prevents&#x20;keyserv&#x20;from&#x20;using&#x20;default&#x20;keys&#x20;for&#x20;the&#x20;nobody&#x20;user,&#x20;effectively&#x20;stopping&#x20;the&#x20;nobody&#x20;user&#x20;from&#x20;accessing&#x20;information&#x20;via&#x20;Secure&#x20;RPC.','If&#x20;login&#x20;by&#x20;the&#x20;user&#x20;nobody&#x20;is&#x20;allowed&#x20;for&#x20;secure&#x20;RPC,&#x20;there&#x20;is&#x20;an&#x20;increased&#x20;risk&#x20;of&#x20;system&#x20;compromise.&#x20;If&#x20;keyserv&#x20;holds&#x20;a&#x20;private&#x20;key&#x20;for&#x20;the&#x20;nobody&#x20;user,&#x20;it&#x20;will&#x20;be&#x20;used&#x20;by&#x20;key_encryptsession&#x20;to&#x20;compute&#x20;a&#x20;magic&#x20;phrase&#x20;which&#x20;can&#x20;be&#x20;easily&#x20;recovered&#x20;by&#x20;a&#x20;malicious&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;#&#x20;awk&#x20;&#039;/ENABLE_NOBODY_KEYS=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;ENABLE_NOBODY_KEYS=NO&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;keyserv&#x20;&gt;&#x20;keyserv.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;keyserv.CIS&#x20;keyserv','[{\"cis\": [\"6.2\"]}]'),(8023,'Disable&#x20;X11&#x20;Forwarding&#x20;for&#x20;SSH','The&#x20;&#039;X11&#x20;Forwarding&#039;&#x20;parameter&#x20;defined&#x20;within&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;specifies&#x20;whether&#x20;or&#x20;not&#x20;X11&#x20;Forwarding&#x20;via&#x20;SSH&#x20;is&#x20;enabled&#x20;on&#x20;the&#x20;server:&#x20;The&#x20;Secure&#x20;Shell&#x20;service&#x20;provides&#x20;an&#x20;encrypted&#x20;&#039;tunnel&#039;&#x20;for&#x20;the&#x20;data&#x20;traffic&#x20;passing&#x20;through&#x20;it.&#x20;While&#x20;commonly&#x20;used&#x20;to&#x20;substitute&#x20;for&#x20;clear-text,&#x20;CLI-based&#x20;remote&#x20;connections&#x20;such&#x20;as&#x20;telnet,&#x20;Secure&#x20;Shell&#x20;can&#x20;be&#x20;used&#x20;to&#x20;forward&#x20;an&#x20;&#039;X&#x20;Window&#039;&#x20;session&#x20;through&#x20;the&#x20;encrypted&#x20;tunnel,&#x20;allowing&#x20;the&#x20;remote&#x20;user&#x20;to&#x20;have&#x20;a&#x20;GUI&#x20;interface.','As&#x20;enabling&#x20;X11Forwarding&#x20;on&#x20;the&#x20;host&#x20;can&#x20;permit&#x20;a&#x20;malicious&#x20;user&#x20;to&#x20;secretly&#x20;open&#x20;another&#x20;X11&#x20;connection&#x20;to&#x20;another&#x20;remote&#x20;client&#x20;during&#x20;the&#x20;session&#x20;and&#x20;perform&#x20;unobtrusive&#x20;activities&#x20;such&#x20;as&#x20;keystroke&#x20;monitoring,&#x20;if&#x20;the&#x20;X11&#x20;services&#x20;are&#x20;not&#x20;required&#x20;for&#x20;the&#x20;system&#039;s&#x20;intended&#x20;function,&#x20;it&#x20;should&#x20;be&#x20;disabled&#x20;or&#x20;restricted&#x20;as&#x20;appropriate&#x20;to&#x20;the&#x20;user&#039;s&#x20;needs.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^X11Forwarding&#x20;/&#x20;{&#x20;$2&#x20;=&#x20;&quot;no&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"6.3\"]}]'),(8024,'Limit&#x20;Consecutive&#x20;Login&#x20;Attempts&#x20;for&#x20;SSH','The&#x20;&#039;MaxAuthTries&#039;&#x20;parameter&#x20;in&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;specifies&#x20;the&#x20;maximum&#x20;number&#x20;of&#x20;authentication&#x20;attempts&#x20;permitted&#x20;per&#x20;connection.&#x20;By&#x20;restricting&#x20;the&#x20;number&#x20;of&#x20;failed&#x20;authentication&#x20;attempts&#x20;before&#x20;the&#x20;server&#x20;terminates&#x20;the&#x20;connection,&#x20;malicious&#x20;users&#x20;are&#x20;blocked&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;host&#x20;by&#x20;using&#x20;repetitive&#x20;brute-force&#x20;login&#x20;exploits.','By&#x20;setting&#x20;the&#x20;authentication&#x20;login&#x20;limit&#x20;to&#x20;a&#x20;low&#x20;value&#x20;this&#x20;will&#x20;disconnect&#x20;the&#x20;attacker&#x20;and&#x20;force&#x20;a&#x20;reconnect,&#x20;which&#x20;severely&#x20;limits&#x20;the&#x20;speed&#x20;of&#x20;such&#x20;brute&#x20;force&#x20;attacks.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^MaxAuthTries/&#x20;{&#x20;$2&#x20;=&#x20;&quot;3&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"6.4\"]}]'),(8025,'Disable&#x20;Rhost-based&#x20;Authentication&#x20;for&#x20;SSH','The&#x20;IgnoreRhosts&#x20;parameter&#x20;specifies&#x20;that&#x20;existing&#x20;.rhosts&#x20;and&#x20;.shosts&#x20;files,&#x20;which&#x20;may&#x20;apply&#x20;to&#x20;application&#x20;rather&#x20;than&#x20;user&#x20;logins,&#x20;will&#x20;not&#x20;be&#x20;used&#x20;in&#x20;RhostsRSAAuthentication&#x20;or&#x20;HostbasedAuthentication.','Setting&#x20;this&#x20;parameter&#x20;forces&#x20;users&#x20;to&#x20;enter&#x20;a&#x20;password&#x20;when&#x20;authenticating&#x20;with&#x20;SSH.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^IgnoreRhosts/&#x20;{&#x20;$2&#x20;=&#x20;&quot;yes&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh&#x20;&#x20;&#x20;&#x20;This&#x20;action&#x20;will&#x20;only&#x20;set&#x20;the&#x20;IgnoreRhosts&#x20;line&#x20;if&#x20;it&#x20;already&#x20;exists&#x20;in&#x20;the&#x20;file&#x20;to&#x20;ensure&#x20;that&#x20;it&#x20;is&#x20;set&#x20;to&#x20;the&#x20;proper&#x20;value.&#x20;If&#x20;the&#x20;IgnoreRhosts&#x20;line&#x20;does&#x20;not&#x20;exist&#x20;in&#x20;the&#x20;file,&#x20;the&#x20;default&#x20;setting&#x20;of&#x20;Yes&#x20;is&#x20;automatically&#x20;used,&#x20;so&#x20;no&#x20;additional&#x20;changes&#x20;are&#x20;needed.','[{\"cis\": [\"6.5\"]}]'),(8026,'Disable&#x20;root&#x20;login&#x20;for&#x20;SSH','The&#x20;PermitRootLogin&#x20;value&#x20;&#40;in&#x20;/etc/ssh/sshd_config&#41;&#x20;allows&#x20;for&#x20;direct&#x20;root&#x20;login&#x20;by&#x20;a&#x20;remote&#x20;user/application&#x20;to&#x20;resources&#x20;on&#x20;the&#x20;local&#x20;host.','By&#x20;default,&#x20;it&#x20;is&#x20;not&#x20;possible&#x20;for&#x20;the&#x20;root&#x20;account&#x20;to&#x20;log&#x20;directly&#x20;into&#x20;the&#x20;system&#x20;console&#x20;because&#x20;the&#x20;account&#x20;is&#x20;configured&#x20;as&#x20;a&#x20;role.&#x20;This&#x20;setting&#x20;therefore&#x20;does&#x20;not&#x20;significantly&#x20;alter&#x20;the&#x20;security&#x20;posture&#x20;of&#x20;the&#x20;system&#x20;unless&#x20;the&#x20;root&#x20;account&#x20;is&#x20;changed&#x20;from&#x20;this&#x20;default&#x20;and&#x20;configured&#x20;to&#x20;be&#x20;a&#x20;normal&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^PermitRootLogin/&#x20;{&#x20;$2&#x20;=&#x20;&quot;no&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"6.6\"]}]'),(8027,'Blocking&#x20;Authentication&#x20;Using&#x20;Empty/Null&#x20;Passwords&#x20;for&#x20;SSH','The&#x20;PermitEmptyPasswords&#x20;value&#x20;allows&#x20;for&#x20;direct&#x20;login&#x20;through&#x20;SSH&#x20;without&#x20;a&#x20;password&#x20;by&#x20;a&#x20;remote&#x20;user/application&#x20;to&#x20;resources&#x20;on&#x20;the&#x20;local&#x20;host&#x20;in&#x20;the&#x20;same&#x20;way&#x20;a&#x20;standard&#x20;remote&#x20;login&#x20;would.','Permitting&#x20;login&#x20;without&#x20;a&#x20;password&#x20;is&#x20;inherently&#x20;risky.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^PermitEmptyPasswords/&#x20;{&#x20;$2&#x20;=&#x20;&quot;no&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"6.7\"]}]'),(8028,'Disable&#x20;Host-based&#x20;Authentication&#x20;for&#x20;Login-based&#x20;Services','The&#x20;.rhosts&#x20;files&#x20;are&#x20;used&#x20;for&#x20;automatic&#x20;login&#x20;to&#x20;remote&#x20;hosts&#x20;and&#x20;contain&#x20;username&#x20;and&#x20;hostname&#x20;combinations.&#x20;The&#x20;.rhosts&#x20;files&#x20;are&#x20;unencrypted&#x20;&#40;usually&#x20;group-&#x20;or&#x20;world-&#x20;readable&#41;&#x20;and&#x20;present&#x20;a&#x20;serious&#x20;risk&#x20;in&#x20;that&#x20;a&#x20;malicious&#x20;user&#x20;could&#x20;use&#x20;the&#x20;information&#x20;within&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;a&#x20;remote&#x20;host&#x20;with&#x20;the&#x20;privileges&#x20;of&#x20;the&#x20;original&#x20;application&#x20;or&#x20;user.','The&#x20;use&#x20;of&#x20;.rhosts&#x20;authentication&#x20;is&#x20;an&#x20;old&#x20;and&#x20;insecure&#x20;protocol&#x20;and&#x20;can&#x20;be&#x20;replaced&#x20;with&#x20;public-key&#x20;authentication&#x20;using&#x20;Secure&#x20;Shell.&#x20;As&#x20;automatic&#x20;authentication&#x20;settings&#x20;in&#x20;the&#x20;.rhosts&#x20;files&#x20;can&#x20;provide&#x20;a&#x20;malicious&#x20;user&#x20;with&#x20;sensitive&#x20;system&#x20;credentials,&#x20;the&#x20;use&#x20;of&#x20;.rhosts&#x20;files&#x20;should&#x20;be&#x20;disabled.&#x20;It&#x20;should&#x20;be&#x20;noted&#x20;that&#x20;by&#x20;default&#x20;the&#x20;Solaris&#x20;services&#x20;that&#x20;use&#x20;this&#x20;file,&#x20;including&#x20;rsh&#x20;and&#x20;rlogin,&#x20;are&#x20;disabled&#x20;by&#x20;default.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc&#x20;&#x20;&#x20;&#x20;#&#x20;cp&#x20;pam.conf&#x20;pam.conf.pre-CIS&#x20;&#x20;&#x20;&#x20;#&#x20;sed&#x20;-e&#x20;&#039;s/^.*pam_rhosts_auth/#&amp;/&#039;&#x20;&lt;&#x20;/etc/pam.conf&#x20;&gt;&#x20;pam.conf.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;pam.conf.CIS&#x20;pam.conf','[{\"cis\": [\"6.8\"]}]'),(8029,'Set&#x20;Delay&#x20;between&#x20;Failed&#x20;Login&#x20;Attempts&#x20;to&#x20;4','The&#x20;SLEEPTIME&#x20;variable&#x20;in&#x20;the&#x20;/etc/default/login&#x20;file&#x20;controls&#x20;the&#x20;number&#x20;of&#x20;seconds&#x20;to&#x20;wait&#x20;before&#x20;printing&#x20;the&#x20;&quot;login&#x20;incorrect&quot;&#x20;message&#x20;when&#x20;a&#x20;bad&#x20;password&#x20;is&#x20;provided.','As&#x20;an&#x20;immediate&#x20;return&#x20;of&#x20;an&#x20;error&#x20;message,&#x20;coupled&#x20;with&#x20;the&#x20;capability&#x20;to&#x20;try&#x20;again&#x20;may&#x20;facilitate&#x20;automatic&#x20;and&#x20;rapid-fire&#x20;brute-force&#x20;password&#x20;attacks&#x20;by&#x20;a&#x20;malicious&#x20;user,&#x20;this&#x20;delay&#x20;time&#x20;should&#x20;be&#x20;set&#x20;as&#x20;appropriate&#x20;to&#x20;the&#x20;needs&#x20;of&#x20;the&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;#&#x20;awk&#x20;&#039;/SLEEPTIME=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;SLEEPTIME=4&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;login&#x20;&gt;&#x20;login.CIS&#x20;#&#x20;mv&#x20;login.CIS&#x20;login','[{\"cis\": [\"6.10\"]}]'),(8030,'Remove&#x20;Autologin&#x20;Capabilities&#x20;from&#x20;the&#x20;GNOME&#x20;desktop','The&#x20;GNOME&#x20;Display&#x20;Manager&#x20;is&#x20;used&#x20;for&#x20;login&#x20;session&#x20;management.&#x20;See&#x20;the&#x20;manual&#x20;page&#x20;gdm&#40;1&#41;&#x20;for&#x20;more&#x20;information.&#x20;By&#x20;default,&#x20;GNOME&#x20;automatic&#x20;login&#x20;is&#x20;defined&#x20;in&#x20;pam.conf&#40;4&#41;&#x20;to&#x20;allow&#x20;users&#x20;to&#x20;access&#x20;the&#x20;system&#x20;without&#x20;a&#x20;password.','As&#x20;automatic&#x20;logins&#x20;are&#x20;a&#x20;known&#x20;security&#x20;risk&#x20;for&#x20;other&#x20;than&#x20;&quot;kiosk&quot;&#x20;types&#x20;of&#x20;systems,&#x20;GNOME&#x20;automatic&#x20;login&#x20;should&#x20;be&#x20;disabled&#x20;in&#x20;pam.conf&#40;4&#41;.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/^gdm-autologin/&#x20;{&#x20;$1=&quot;&#x20;&#x20;&#x20;#gdm-autologin&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/pam.conf&#x20;&gt;&#x20;/etc/pam.conf.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;pam.conf.CIS&#x20;pam.conf','[{\"cis\": [\"6.11\"]}]'),(8031,'Set&#x20;Default&#x20;Screen&#x20;Lock&#x20;for&#x20;GNOME&#x20;Users','The&#x20;timeout&#x20;parameter&#x20;dictates&#x20;the&#x20;invocation&#x20;of&#x20;a&#x20;password-protected&#x20;screen&#x20;saver&#x20;after&#x20;a&#x20;specified&#x20;time&#x20;of&#x20;keyboard&#x20;and&#x20;mouse&#x20;inactivity,&#x20;specific&#x20;to&#x20;the&#x20;xscreensaver&#x20;application&#x20;used&#x20;in&#x20;the&#x20;GNOME&#x20;windowing&#x20;environment.','As&#x20;a&#x20;screensaver&#x20;timeout&#x20;provides&#x20;protection&#x20;for&#x20;a&#x20;desktop&#x20;that&#x20;has&#x20;not&#x20;been&#x20;locked&#x20;by&#x20;the&#x20;user&#x20;upon&#x20;his/her&#x20;departure,&#x20;to&#x20;help&#x20;prevent&#x20;session&#x20;hijacking,&#x20;this&#x20;value&#x20;should&#x20;be&#x20;set&#x20;as&#x20;appropriate&#x20;to&#x20;the&#x20;needs&#x20;of&#x20;the&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/usr/share/X11/app-defaults&#x20;&#x20;&#x20;&#x20;#&#x20;cp&#x20;XScreenSaver&#x20;XScreenSaver.orig&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/^*timeout:/&#x20;{&#x20;$2&#x20;=&#x20;&quot;0:10:00&quot;&#x20;}&#x20;/^*lockTimeout:/&#x20;{&#x20;$2&#x20;=&#x20;&quot;0:00:00&quot;&#x20;}&#x20;/^*lock:/&#x20;{&#x20;$2&#x20;=&#x20;&quot;True&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;xScreenSaver&#x20;&gt;&#x20;xScreenSaver.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;xScreenSaver.CIS&#x20;xScreenSaver','[{\"cis\": [\"6.12\"]}]'),(8032,'Restrict&#x20;at/cron&#x20;to&#x20;Authorized&#x20;Users','The&#x20;cron.allow&#x20;and&#x20;at.allow&#x20;files&#x20;contain&#x20;a&#x20;list&#x20;of&#x20;users&#x20;who&#x20;are&#x20;allowed&#x20;to&#x20;run&#x20;the&#x20;crontab&#x20;and&#x20;at&#x20;commands&#x20;to&#x20;submit&#x20;jobs&#x20;to&#x20;be&#x20;run&#x20;at&#x20;scheduled&#x20;intervals.','On&#x20;many&#x20;systems,&#x20;only&#x20;the&#x20;system&#x20;administrator&#x20;needs&#x20;the&#x20;ability&#x20;to&#x20;schedule&#x20;jobs.&#x20;Even&#x20;though&#x20;a&#x20;given&#x20;user&#x20;is&#x20;not&#x20;listed&#x20;in&#x20;cron.allow,&#x20;cron&#x20;jobs&#x20;can&#x20;still&#x20;be&#x20;run&#x20;as&#x20;that&#x20;user.&#x20;The&#x20;cron.allow&#x20;file&#x20;only&#x20;controls&#x20;administrative&#x20;access&#x20;to&#x20;the&#x20;crontab&#x20;command&#x20;for&#x20;scheduling&#x20;and&#x20;modifying&#x20;cron&#x20;jobs.&#x20;Much&#x20;more&#x20;effective&#x20;access&#x20;controls&#x20;for&#x20;the&#x20;cron&#x20;system&#x20;can&#x20;be&#x20;obtained&#x20;by&#x20;using&#x20;Role-Based&#x20;Access&#x20;Controls&#x20;&#40;RBAC&#41;.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/cron.d&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;cron.deny&#x20;cron.deny.cis&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;at.deny&#x20;at.deny.cis&#x20;&#x20;&#x20;&#x20;#&#x20;echo&#x20;root&#x20;&gt;&#x20;cron.allow&#x20;&#x20;&#x20;&#x20;#&#x20;cp&#x20;/dev/null&#x20;at.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;cron.allow&#x20;at.allow&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;400&#x20;cron.allow&#x20;at.allow','[{\"cis\": [\"6.13\"]}]'),(8033,'Restrict&#x20;root&#x20;Login&#x20;to&#x20;System&#x20;Console','Privileged&#x20;access&#x20;to&#x20;the&#x20;system&#x20;via&#x20;root&#x20;must&#x20;be&#x20;accountable&#x20;to&#x20;a&#x20;particular&#x20;user.','Use&#x20;an&#x20;authorized&#x20;mechanism&#x20;such&#x20;as&#x20;RBAC&#x20;and&#x20;the&#x20;su&#x20;command&#x20;to&#x20;provide&#x20;administrative&#x20;access&#x20;to&#x20;unprivileged&#x20;accounts.&#x20;These&#x20;mechanisms&#x20;provide&#x20;an&#x20;audit&#x20;trail&#x20;in&#x20;the&#x20;event&#x20;of&#x20;problems.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;#&#x20;awk&#x20;&#039;/CONSOLE=/&#x20;{&#x20;print&#x20;&quot;CONSOLE=/dev/console&quot;;&#x20;next&#x20;};&#x20;{&#x20;print&#x20;}&#039;&#x20;login&#x20;&gt;&#x20;login.CIS&#x20;#&#x20;mv&#x20;login.CIS&#x20;login','[{\"cis\": [\"6.14\"]}]'),(8034,'Set&#x20;Retry&#x20;Limit&#x20;for&#x20;Account&#x20;Lockout','The&#x20;RETRIES&#x20;parameter&#x20;is&#x20;the&#x20;number&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;a&#x20;user&#x20;is&#x20;allowed&#x20;before&#x20;being&#x20;disconnected&#x20;from&#x20;the&#x20;system&#x20;and&#x20;forced&#x20;to&#x20;reconnect.&#x20;When&#x20;LOCK_AFTER_RETRIES&#x20;is&#x20;set&#x20;in&#x20;/etc/security/policy.conf,&#x20;then&#x20;the&#x20;user&#039;s&#x20;account&#x20;is&#x20;locked&#x20;after&#x20;this&#x20;many&#x20;failed&#x20;retries&#x20;&#40;the&#x20;account&#x20;can&#x20;only&#x20;be&#x20;unlocked&#x20;by&#x20;the&#x20;administrator&#x20;using&#x20;the&#x20;command:&#x20;passwd&#x20;-u&#x20;&lt;username&gt;&#41;.&#x20;The&#x20;account&#x20;lockout&#x20;threshold&#x20;&#40;RETRIES&#x20;parameter&#41;&#x20;restricts&#x20;the&#x20;number&#x20;of&#x20;failed&#x20;login&#x20;attempts&#x20;allowed&#x20;before&#x20;requiring&#x20;the&#x20;offending&#x20;account&#x20;be&#x20;locked.&#x20;The&#x20;lockout&#x20;requirement&#x20;will&#x20;help&#x20;block&#x20;malicious&#x20;users&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;host&#x20;via&#x20;automated,&#x20;repetitive&#x20;brute-force&#x20;login&#x20;exploits--trying&#x20;different&#x20;passwords&#x20;until&#x20;one&#x20;fits&#x20;a&#x20;user&#x20;name.','Setting&#x20;the&#x20;failed&#x20;login&#x20;limit&#x20;to&#x20;an&#x20;appropriate&#x20;value&#x20;locks&#x20;the&#x20;user&#x20;account,&#x20;which&#x20;will&#x20;severely&#x20;limit&#x20;the&#x20;speed&#x20;of&#x20;such&#x20;attacks,&#x20;making&#x20;it&#x20;much&#x20;more&#x20;likely&#x20;that&#x20;the&#x20;attacker&#039;s&#x20;pattern&#x20;will&#x20;be&#x20;noticed&#x20;and&#x20;the&#x20;offending&#x20;source&#x20;address&#x20;and/or&#x20;port&#x20;blocked,&#x20;so&#x20;this&#x20;should&#x20;be&#x20;set&#x20;according&#x20;to&#x20;the&#x20;needs&#x20;of&#x20;the&#x20;user.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/RETRIES=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;RETRIES=3&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;login&#x20;&gt;login.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;login.CIS&#x20;login&#x20;&#x20;&#x20;&#x20;#&#x20;cd&#x20;/etc/security&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/LOCK_AFTER_RETRIES=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;LOCK_AFTER_RETRIES=YES&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;policy.conf&#x20;&gt;&#x20;policy.conf.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;policy.conf.CIS&#x20;policy.conf&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/system/name-service/cache&#x20;&#x20;&#x20;&#x20;&#x20;Be&#x20;careful&#x20;when&#x20;enabling&#x20;these&#x20;settings&#x20;as&#x20;they&#x20;can&#x20;create&#x20;a&#x20;denial-of-service&#x20;situation&#x20;for&#x20;legitimate&#x20;users&#x20;and&#x20;applications.&#x20;Account&#x20;lockout&#x20;can&#x20;be&#x20;disabled&#x20;for&#x20;specific&#x20;users&#x20;via&#x20;the&#x20;usermod&#x20;command.&#x20;For&#x20;example,&#x20;the&#x20;following&#x20;command&#x20;disables&#x20;account&#x20;lock&#x20;specifically&#x20;for&#x20;the&#x20;oracle&#x20;account:&#x20;#&#x20;usermod&#x20;-K&#x20;lock_after_retries=no&#x20;oracle','[{\"cis\": [\"6.15\"]}]'),(8035,'Secure&#x20;the&#x20;GRUB&#x20;Menu&#x20;&#40;Intel&#41;','GRUB&#x20;is&#x20;a&#x20;boot&#x20;loader&#x20;for&#x20;x64&#x20;based&#x20;systems&#x20;that&#x20;permits&#x20;loading&#x20;an&#x20;OS&#x20;image&#x20;from&#x20;any&#x20;location.&#x20;Oracle&#x20;x64&#x20;systems&#x20;support&#x20;the&#x20;use&#x20;of&#x20;a&#x20;GRUB&#x20;Menu&#x20;password&#x20;for&#x20;the&#x20;console.','The&#x20;flexibility&#x20;that&#x20;GRUB&#x20;provides&#x20;creates&#x20;a&#x20;security&#x20;risk&#x20;if&#x20;its&#x20;configuration&#x20;is&#x20;modified&#x20;by&#x20;an&#x20;unauthorized&#x20;user.&#x20;The&#x20;failsafe&#x20;menu&#x20;entry&#x20;needs&#x20;to&#x20;be&#x20;secured&#x20;in&#x20;the&#x20;same&#x20;environments&#x20;that&#x20;require&#x20;securing&#x20;the&#x20;systems&#x20;firmware&#x20;to&#x20;avoid&#x20;unauthorized&#x20;removable&#x20;media&#x20;boots.&#x20;Setting&#x20;the&#x20;GRUB&#x20;Menu&#x20;password&#x20;helps&#x20;prevent&#x20;attackers&#x20;with&#x20;physical&#x20;access&#x20;to&#x20;the&#x20;system&#x20;console&#x20;from&#x20;booting&#x20;off&#x20;some&#x20;external&#x20;device&#x20;&#40;such&#x20;as&#x20;a&#x20;CD-&#x20;ROM&#x20;or&#x20;floppy&#41;&#x20;and&#x20;subverting&#x20;the&#x20;security&#x20;of&#x20;the&#x20;system.&#x20;The&#x20;actions&#x20;described&#x20;in&#x20;this&#x20;section&#x20;will&#x20;ensure&#x20;you&#x20;cannot&#x20;get&#x20;to&#x20;failsafe&#x20;or&#x20;any&#x20;of&#x20;the&#x20;GRUB&#x20;command&#x20;line&#x20;options&#x20;without&#x20;first&#x20;entering&#x20;the&#x20;password.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;/boot/grub/bin/grub&#x20;&#x20;&#x20;&#x20;grub&gt;&#x20;md5crypt&#x20;&#x20;&#x20;&#x20;Password:&#x20;[enter&#x20;desired&#x20;boot&#x20;loader&#x20;password]&#x20;&#x20;&#x20;&#x20;Encrypted:&#x20;[enter&#x20;md5&#x20;password&#x20;string]&#x20;&#x20;&#x20;&#x20;grub&gt;&#x20;[enter&#x20;control-C&#x20;&#40;^C&#41;]&#x20;&#x20;&#x20;&#x20;The&#x20;actual&#x20;menu.lst&#x20;file&#x20;for&#x20;Solaris&#x20;11&#x20;x64&#x20;is&#x20;the&#x20;/rpool/boot/grub/menu.lst.&#x20;First,&#x20;ensure&#x20;the&#x20;menu.lst&#x20;file&#x20;can&#x20;only&#x20;be&#x20;read&#x20;by&#x20;the&#x20;root&#x20;user:&#x20;#&#x20;chmod&#x20;600&#x20;/rpool/boot/grub/menu.lst&#x20;&#x20;&#x20;&#x20;Next,&#x20;add&#x20;the&#x20;following&#x20;line&#x20;to&#x20;the&#x20;menu.lst&#x20;file&#x20;above&#x20;the&#x20;entries&#x20;added&#x20;by&#x20;bootadm:&#x20;password&#x20;--md5&#x20;[enter&#x20;md5&#x20;password&#x20;string&#x20;generated&#x20;above]&#x20;&#x20;&#x20;&#x20;Finally,&#x20;add&#x20;the&#x20;keyword&#x20;lock&#x20;to&#x20;the&#x20;Solaris&#x20;failsafe&#x20;boot&#x20;entry&#x20;as&#x20;in&#x20;the&#x20;following&#x20;example&#x20;&#40;as&#x20;well&#x20;as&#x20;to&#x20;any&#x20;other&#x20;entries&#x20;that&#x20;you&#x20;want&#x20;to&#x20;protect&#41;:&#x20;title&#x20;Solaris&#x20;failsafe&#x20;&#x20;&#x20;&#x20;lock','[{\"cis\": [\"6.17\"]}]'),(8036,'Set&#x20;Password&#x20;Expiration&#x20;Parameters&#x20;on&#x20;Active&#x20;Accounts','The&#x20;characteristics&#x20;of&#x20;an&#x20;operating&#x20;system&#x20;that&#x20;make&#x20;&#039;user&#x20;identification&#039;&#x20;via&#x20;password&#x20;a&#x20;secure&#x20;and&#x20;workable&#x20;solution&#x20;is&#x20;the&#x20;combination&#x20;of&#x20;settings&#x20;chosen.&#x20;By&#x20;requiring&#x20;that&#x20;a&#x20;series&#x20;of&#x20;password-choices&#x20;be&#x20;security-centric,&#x20;it&#x20;reduces&#x20;the&#x20;risk&#x20;of&#x20;a&#x20;malicious&#x20;user&#x20;breaking&#x20;the&#x20;password&#x20;through&#x20;dictionary/brute&#x20;force&#x20;attacks&#x20;or&#x20;fortuitous&#x20;guessing&#x20;based&#x20;upon&#x20;&#039;social&#x20;engineering.&#039;&#x20;A&#x20;basic&#x20;password&#x20;security&#x20;strategy&#x20;is&#x20;requiring&#x20;a&#x20;new&#x20;password&#x20;to&#x20;be&#x20;chosen&#x20;every&#x20;45-90&#x20;days,&#x20;so&#x20;that&#x20;repeated&#x20;attempts&#x20;to&#x20;gain&#x20;entry&#x20;by&#x20;brute-force&#x20;tactics&#x20;will&#x20;fail&#x20;when&#x20;a&#x20;new&#x20;password&#x20;is&#x20;chosen,&#x20;which&#x20;requires&#x20;starting&#x20;over&#x20;again&#x20;to&#x20;break&#x20;the&#x20;new&#x20;password.','The&#x20;commands&#x20;for&#x20;this&#x20;item&#x20;set&#x20;all&#x20;active&#x20;accounts&#x20;&#40;except&#x20;the&#x20;root&#x20;account&#41;&#x20;to&#x20;force&#x20;password&#x20;changes&#x20;every&#x20;91&#x20;days&#x20;&#40;13&#x20;weeks&#41;,&#x20;and&#x20;then&#x20;prevent&#x20;password&#x20;changes&#x20;for&#x20;seven&#x20;days&#x20;&#40;one&#x20;week&#41;,&#x20;thereafter.&#x20;Users&#x20;will&#x20;begin&#x20;receiving&#x20;warnings&#x20;28&#x20;days&#x20;&#40;4&#x20;weeks&#41;&#x20;before&#x20;their&#x20;password&#x20;expires.&#x20;Sites&#x20;also&#x20;have&#x20;the&#x20;option&#x20;of&#x20;expiring&#x20;idle&#x20;accounts&#x20;after&#x20;a&#x20;certain&#x20;number&#x20;of&#x20;days&#x20;&#40;see&#x20;the&#x20;on-line&#x20;manual&#x20;page&#x20;for&#x20;the&#x20;usermod&#x20;command,&#x20;particularly&#x20;the&#x20;-f&#x20;option&#41;.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;logins&#x20;-ox&#x20;|&#x20;awk&#x20;-F:&#x20;&#039;&#40;$1&#x20;==&#x20;&quot;root&quot;&#x20;||&#x20;$8&#x20;==&#x20;&quot;LK&quot;&#x20;||&#x20;$8&#x20;==&#x20;&quot;NL&quot;&#41;&#x20;&#x20;{&#x20;next&#x20;}&#x20;;&#x20;&#x20;{&#x20;$cmd&#x20;=&#x20;&quot;passwd&quot;&#x20;}&#x20;;&#x20;&#40;$11&#x20;91&#41;&#x20;{&#x20;$cmd&#x20;=&#x20;$cmd&#x20;&quot;&#x20;-x&#x20;91&quot;&#x20;}&#x20;&#x20;&#40;$10&#x20;&lt;&#x20;7&#41;&#x20;{&#x20;$cmd&#x20;=&#x20;$cmd&#x20;&quot;&#x20;-n&#x20;7&quot;&#x20;}&#x20;&#x20;&#40;$12&#x20;&lt;&#x20;28&#41;&#x20;{&#x20;$cmd&#x20;=&#x20;$cmd&#x20;&quot;&#x20;-w&#x20;28&quot;&#x20;}&#x20;&#x20;&#40;$cmd&#x20;!=&#x20;&quot;passwd&quot;&#41;&#x20;{&#x20;print&#x20;$cmd&#x20;&quot;&#x20;&quot;&#x20;$1&#x20;}&#039;&#x20;&#x20;&gt;&#x20;/etc/CISupd_accounts&#x20;&#x20;&#x20;&#x20;#&#x20;/sbin/sh&#x20;/etc/CISupd_accounts&#x20;&#x20;&#x20;&#x20;#&#x20;rm&#x20;-f&#x20;/etc/CISupd_accounts&#x20;&#x20;&#x20;&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;grep&#x20;-v&#x20;WEEKS&#x20;passwd&#x20;&gt;&#x20;passwd.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;cat&#x20;&lt;&lt;EODefaults&#x20;&gt;&gt;&#x20;passwd.CIS&#x20;MAXWEEKS=13&#x20;MINWEEKS=1&#x20;WARNWEEKS=4&#x20;EODefaults&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;passwd.CIS&#x20;passwd','[{\"cis\": [\"7.1\"]}]'),(8037,'Set&#x20;Strong&#x20;Password&#x20;Creation&#x20;Policies','The&#x20;variables&#x20;in&#x20;the&#x20;/etc/default/passwd&#x20;file&#x20;indicate&#x20;various&#x20;strategies&#x20;for&#x20;creating&#x20;differences&#x20;required&#x20;between&#x20;an&#x20;old&#x20;and&#x20;a&#x20;new&#x20;password.&#x20;As&#x20;requiring&#x20;users&#x20;to&#x20;select&#x20;a&#x20;specific&#x20;numbers&#x20;of&#x20;differences&#x20;between&#x20;the&#x20;characters&#x20;in&#x20;the&#x20;existing&#x20;password&#x20;and&#x20;the&#x20;new&#x20;one&#x20;can&#x20;strengthen&#x20;the&#x20;password&#x20;by&#x20;increasing&#x20;the&#x20;symbol-set&#x20;space,&#x20;to&#x20;further&#x20;increase&#x20;the&#x20;difficulty&#x20;of&#x20;breaking&#x20;any&#x20;password&#x20;by&#x20;brute-force&#x20;attacks,&#x20;these&#x20;values&#x20;should&#x20;be&#x20;set&#x20;as&#x20;appropriate&#x20;to&#x20;the&#x20;needs&#x20;of&#x20;the&#x20;user.','Administrators&#x20;may&#x20;wish&#x20;to&#x20;add&#x20;site-specific&#x20;dictionaries&#x20;to&#x20;the&#x20;DICTIONLIST&#x20;parameter.&#x20;Warning:&#x20;Sites&#x20;often&#x20;have&#x20;differing&#x20;opinions&#x20;on&#x20;the&#x20;optimal&#x20;value&#x20;of&#x20;the&#x20;HISTORY&#x20;parameter&#x20;&#40;how&#x20;many&#x20;previous&#x20;passwords&#x20;to&#x20;remember&#x20;per&#x20;user&#x20;in&#x20;order&#x20;to&#x20;prevent&#x20;re-&#x20;use&#41;.&#x20;The&#x20;values&#x20;specified&#x20;here&#x20;are&#x20;in&#x20;compliance&#x20;with&#x20;NSA/DISA&#x20;requirements.&#x20;If&#x20;this&#x20;is&#x20;too&#x20;restrictive&#x20;for&#x20;your&#x20;site,&#x20;you&#x20;may&#x20;wish&#x20;to&#x20;set&#x20;a&#x20;HISTORY&#x20;value&#x20;of&#x20;4&#x20;and&#x20;a&#x20;MAXREPEATS&#x20;of&#x20;2.&#x20;Consult&#x20;your&#x20;local&#x20;security&#x20;rules&#x20;for&#x20;guidance.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/PASSLENGTH=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;PASSLENGTH=8&quot;&#x20;};&#x20;/NAMECHECK=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;NAMECHECK=YES&quot;&#x20;};&#x20;/HISTORY=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;HISTORY=10&quot;&#x20;};&#x20;/MINDIFF=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINDIFF=3&quot;&#x20;};&#x20;/MINALPHA=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINALPHA=2&quot;&#x20;};&#x20;/MINUPPER=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINUPPER=1&quot;&#x20;};&#x20;/MINLOWER=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINLOWER=1&quot;&#x20;};&#x20;/MINNONALPHA=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MINNONALPHA=1&quot;&#x20;};&#x20;/MAXREPEATS=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;MAXREPEATS=0&quot;&#x20;};&#x20;/WHITESPACE=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;WHITESPACE=YES&quot;&#x20;};&#x20;/DICTIONDBDIR=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;DICTIONDBDIR=/var/passwd&quot;&#x20;};&#x20;/DICTIONLIST=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;DICTIONLIST=/usr/share/lib/dict/words&quot;&#x20;};&#x20;{&#x20;print&#x20;}&#039;&#x20;passwd&#x20;&gt;&#x20;passwd.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;passwd.CIS&#x20;passwd','[{\"cis\": [\"7.2\"]}]'),(8038,'Set&#x20;Default&#x20;umask&#x20;for&#x20;users','The&#x20;default&#x20;umask&#40;1&#41;&#x20;determines&#x20;the&#x20;permissions&#x20;of&#x20;files&#x20;created&#x20;by&#x20;users.&#x20;The&#x20;user&#x20;creating&#x20;the&#x20;file&#x20;has&#x20;the&#x20;discretion&#x20;of&#x20;making&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;others&#x20;via&#x20;the&#x20;chmod&#40;1&#41;&#x20;command.&#x20;Users&#x20;who&#x20;wish&#x20;to&#x20;allow&#x20;their&#x20;files&#x20;and&#x20;directories&#x20;to&#x20;be&#x20;readable&#x20;by&#x20;others&#x20;by&#x20;default&#x20;may&#x20;choose&#x20;a&#x20;different&#x20;default&#x20;umask&#x20;by&#x20;inserting&#x20;the&#x20;umask&#x20;command&#x20;into&#x20;the&#x20;standard&#x20;shell&#x20;configuration&#x20;files&#x20;&#40;.profile,&#x20;.cshrc,&#x20;etc.&#41;&#x20;in&#x20;their&#x20;home&#x20;directories.','Setting&#x20;a&#x20;very&#x20;secure&#x20;default&#x20;value&#x20;for&#x20;umask&#x20;ensures&#x20;that&#x20;users&#x20;make&#x20;a&#x20;conscious&#x20;choice&#x20;about&#x20;their&#x20;file&#x20;permissions.&#x20;A&#x20;default&#x20;umask&#x20;setting&#x20;of&#x20;077&#x20;causes&#x20;files&#x20;and&#x20;directories&#x20;created&#x20;by&#x20;users&#x20;to&#x20;not&#x20;be&#x20;readable&#x20;by&#x20;any&#x20;other&#x20;user&#x20;on&#x20;the&#x20;system.&#x20;A&#x20;umask&#x20;of&#x20;027&#x20;would&#x20;allow&#x20;files&#x20;and&#x20;directories&#x20;readable&#x20;by&#x20;users&#x20;in&#x20;the&#x20;same&#x20;Unix&#x20;group,&#x20;while&#x20;a&#x20;umask&#x20;of&#x20;022&#x20;would&#x20;make&#x20;files&#x20;readable&#x20;by&#x20;every&#x20;user&#x20;on&#x20;the&#x20;system.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;&#x20;&#x20;&#x20;#&#x20;awk&#x20;&#039;/#UMASK=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;UMASK=027&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;login&#x20;&gt;&#x20;login.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;login.CIS&#x20;login','[{\"cis\": [\"7.3\"]}]'),(8039,'Set&#x20;Default&#x20;File&#x20;Creation&#x20;Mask&#x20;for&#x20;FTP&#x20;Users','If&#x20;FTP&#x20;is&#x20;permitted,&#x20;set&#x20;a&#x20;strong,&#x20;default&#x20;file&#x20;creation&#x20;mask&#x20;to&#x20;apply&#x20;to&#x20;files&#x20;created&#x20;by&#x20;the&#x20;FTP&#x20;server.','Many&#x20;users&#x20;assume&#x20;that&#x20;the&#x20;FTP&#x20;server&#x20;will&#x20;use&#x20;their&#x20;system&#x20;file&#x20;creation&#x20;mask;&#x20;generally&#x20;it&#x20;does&#x20;not.&#x20;This&#x20;setting&#x20;ensures&#x20;that&#x20;files&#x20;transmitted&#x20;over&#x20;FTP&#x20;use&#x20;a&#x20;strong&#x20;file&#x20;creation&#x20;mask.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc&#x20;&#x20;&#x20;&#x20;#&#x20;if&#x20;[&#x20;&quot;`grep&#x20;&#039;^Umask&#039;&#x20;proftpd.conf`&quot;&#x20;];&#x20;then&#x20;awk&#x20;&#039;/^Umask/&#x20;{&#x20;$2&#x20;=&#x20;&quot;027&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;proftpd.conf&#x20;&gt;&#x20;proftpd.conf.CIS&#x20;mv&#x20;proftpd.conf.CIS&#x20;proftpd.conf&#x20;else&#x20;echo&#x20;&quot;Umask&#x20;027&quot;&#x20;&gt;&gt;&#x20;proftpd.conf&#x20;fi','[{\"cis\": [\"7.4\"]}]'),(8040,'Set&#x20;&quot;mesg&#x20;n&quot;&#x20;as&#x20;Default&#x20;for&#x20;All&#x20;Users','The&#x20;&quot;mesg&#x20;n&quot;&#x20;command&#x20;blocks&#x20;attempts&#x20;to&#x20;use&#x20;the&#x20;write&#x20;or&#x20;talk&#x20;commands&#x20;to&#x20;contact&#x20;users&#x20;at&#x20;their&#x20;terminals,&#x20;but&#x20;has&#x20;the&#x20;side&#x20;effect&#x20;of&#x20;slightly&#x20;strengthening&#x20;permissions&#x20;on&#x20;the&#x20;user&#039;s&#x20;tty&#x20;device.','Since&#x20;write&#x20;and&#x20;talk&#x20;are&#x20;no&#x20;longer&#x20;widely&#x20;used&#x20;at&#x20;most&#x20;sites,&#x20;the&#x20;incremental&#x20;security&#x20;increase&#x20;is&#x20;worth&#x20;the&#x20;loss&#x20;of&#x20;functionality.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc&#x20;&#x20;&#x20;&#x20;#&#x20;for&#x20;file&#x20;in&#x20;profile&#x20;.login&#x20;;&#x20;do&#x20;if&#x20;[&#x20;&quot;`grep&#x20;mesg&#x20;$file`&quot;&#x20;];&#x20;then&#x20;awk&#x20;&#039;$1&#x20;==&#x20;&quot;mesg&quot;&#x20;{&#x20;$2&#x20;=&#x20;&quot;n&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;$file&#x20;&gt;&#x20;$file.CIS&#x20;mv&#x20;$file.CIS&#x20;$file&#x20;else&#x20;echo&#x20;mesg&#x20;n&#x20;&gt;&gt;&#x20;$file&#x20;fi&#x20;done','[{\"cis\": [\"7.5\"]}]'),(8041,'Create&#x20;Warnings&#x20;for&#x20;Standard&#x20;Login&#x20;Services','The&#x20;contents&#x20;of&#x20;the&#x20;/etc/issue&#x20;file&#x20;are&#x20;displayed&#x20;prior&#x20;to&#x20;the&#x20;login&#x20;prompt&#x20;on&#x20;the&#x20;system&#039;s&#x20;console&#x20;and&#x20;serial&#x20;devices&#x20;and&#x20;also&#x20;prior&#x20;to&#x20;logins&#x20;via&#x20;telnet&#x20;and&#x20;Secure&#x20;Shell.&#x20;The&#x20;contents&#x20;of&#x20;the&#x20;/etc/motd&#x20;file&#x20;are&#x20;generally&#x20;displayed&#x20;after&#x20;all&#x20;successful&#x20;logins,&#x20;regardless&#x20;from&#x20;where&#x20;the&#x20;user&#x20;is&#x20;logging&#x20;in.','Warning&#x20;messages&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;login&#x20;to&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;the&#x20;system&#x20;and&#x20;must&#x20;include&#x20;the&#x20;name&#x20;of&#x20;the&#x20;organization&#x20;that&#x20;owns&#x20;the&#x20;system&#x20;and&#x20;any&#x20;monitoring&#x20;policies&#x20;that&#x20;are&#x20;in&#x20;place.&#x20;As&#x20;implementing&#x20;a&#x20;logon&#x20;banner&#x20;to&#x20;deter&#x20;inappropriate&#x20;use&#x20;and&#x20;can&#x20;provide&#x20;a&#x20;foundation&#x20;for&#x20;legal&#x20;action&#x20;against&#x20;abuse,&#x20;this&#x20;warning&#x20;content&#x20;should&#x20;be&#x20;set&#x20;as&#x20;appropriate.&#x20;Consult&#x20;with&#x20;your&#x20;organization&#039;s&#x20;legal&#x20;counsel&#x20;for&#x20;the&#x20;appropriate&#x20;wording&#x20;as&#x20;the&#x20;examples&#x20;below&#x20;are&#x20;for&#x20;demonstration&#x20;purposes&#x20;only.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;users&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/motd&#x20;&#x20;&#x20;&#x20;#&#x20;echo&#x20;&quot;Authorized&#x20;users&#x20;only.&#x20;All&#x20;activity&#x20;may&#x20;be&#x20;monitored&#x20;and&#x20;reported.&quot;&#x20;&gt;&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;chown&#x20;root:root&#x20;/etc/issue&#x20;&#x20;&#x20;&#x20;#&#x20;chmod&#x20;644&#x20;/etc/issue','[{\"cis\": [\"8.1\"]}]'),(8042,'Enable&#x20;a&#x20;Warning&#x20;Banner&#x20;for&#x20;the&#x20;SSH&#x20;Service','The&#x20;contents&#x20;of&#x20;the&#x20;Banner&#x20;string&#x20;in&#x20;the&#x20;/etc/ssh/sshd_config&#x20;file&#x20;are&#x20;sent&#x20;to&#x20;the&#x20;remote&#x20;user&#x20;before&#x20;authentication&#x20;is&#x20;allowed,&#x20;requiring&#x20;that&#x20;the&#x20;user&#x20;read&#x20;the&#x20;legal&#x20;caution.','','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;awk&#x20;&#039;/^#Banner/&#x20;{&#x20;$1&#x20;=&#x20;&quot;Banner&quot;&#x20;}&#x20;{&#x20;print&#x20;}&#039;&#x20;/etc/ssh/sshd_config&#x20;&gt;&#x20;/etc/ssh/sshd_config.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;/etc/ssh/sshd_config.CIS&#x20;/etc/ssh/sshd_config&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;svc:/network/ssh','[{\"cis\": [\"8.2\"]}]'),(8043,'Enable&#x20;a&#x20;Warning&#x20;Banner&#x20;for&#x20;the&#x20;GNOME&#x20;Service','The&#x20;GNOME&#x20;Display&#x20;Manager&#x20;is&#x20;used&#x20;for&#x20;login&#x20;session&#x20;management.&#x20;See&#x20;the&#x20;manual&#x20;page&#x20;gdm&#40;1&#41;&#x20;for&#x20;more&#x20;information&#x20;on&#x20;configuration&#x20;of&#x20;the&#x20;settings,&#x20;which&#x20;can&#x20;be&#x20;user-&#x20;or&#x20;group&#x20;specific.','The&#x20;remediation&#x20;action&#x20;for&#x20;this&#x20;item&#x20;sets&#x20;a&#x20;pre-login&#x20;warning&#x20;message&#x20;for&#x20;GDM&#x20;users.&#x20;Additional&#x20;methods&#x20;can&#x20;be&#x20;employed&#x20;to&#x20;display&#x20;a&#x20;similar&#x20;message&#x20;to&#x20;a&#x20;user&#x20;post-&#x20;authentication.&#x20;For&#x20;more&#x20;information,&#x20;see&#x20;the&#x20;Oracle&#x20;Solaris&#x20;11&#x20;Security&#x20;Guidelines&#x20;document.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Edit&#x20;the&#x20;/etc/gdm/Init/Default&#x20;file&#x20;to&#x20;add&#x20;the&#x20;following&#x20;content&#x20;before&#x20;the&#x20;last&#x20;line&#x20;of&#x20;the&#x20;file.&#x20;&#x20;/usr/bin/zenity&#x20;--text-info&#x20;--width=800&#x20;--height=300&#x20;--title=&quot;Security&#x20;Message&quot;&#x20;--filename=/etc/issue','[{\"cis\": [\"8.3\"]}]'),(8044,'Enable&#x20;a&#x20;Warning&#x20;Banner&#x20;for&#x20;the&#x20;FTP&#x20;service','The&#x20;action&#x20;for&#x20;this&#x20;item&#x20;sets&#x20;a&#x20;warning&#x20;message&#x20;for&#x20;FTP&#x20;users&#x20;before&#x20;they&#x20;log&#x20;in.','Warning&#x20;Banners&#x20;inform&#x20;users&#x20;who&#x20;are&#x20;attempting&#x20;to&#x20;access&#x20;the&#x20;system&#x20;of&#x20;their&#x20;legal&#x20;status&#x20;regarding&#x20;using&#x20;the&#x20;system.&#x20;The&#x20;text&#x20;below&#x20;is&#x20;a&#x20;generic&#x20;sample&#x20;only,&#x20;so&#x20;consult&#x20;with&#x20;your&#x20;organization&#039;s&#x20;legal&#x20;counsel&#x20;for&#x20;the&#x20;appropriate&#x20;wording.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;echo&#x20;&quot;DisplayConnect&#x20;/etc/issue&quot;&#x20;&gt;&gt;&#x20;/etc/proftpd.conf&#x20;&#x20;&#x20;&#x20;#&#x20;svcadm&#x20;restart&#x20;ftp','[{\"cis\": [\"8.4\"]}]'),(8045,'Check&#x20;that&#x20;the&#x20;Banner&#x20;Setting&#x20;for&#x20;telnet&#x20;is&#x20;Null','The&#x20;BANNER&#x20;variable&#x20;in&#x20;the&#x20;file&#x20;/etc/default/telnetd&#x20;can&#x20;be&#x20;used&#x20;to&#x20;display&#x20;text&#x20;before&#x20;the&#x20;telnet&#x20;login&#x20;prompt.&#x20;Traditionally,&#x20;it&#x20;has&#x20;been&#x20;used&#x20;to&#x20;display&#x20;the&#x20;OS&#x20;level&#x20;of&#x20;the&#x20;target&#x20;system.','The&#x20;warning&#x20;banner&#x20;provides&#x20;information&#x20;that&#x20;can&#x20;be&#x20;used&#x20;in&#x20;reconnaissance&#x20;for&#x20;an&#x20;attack.&#x20;By&#x20;default,&#x20;this&#x20;file&#x20;is&#x20;distributed&#x20;with&#x20;the&#x20;BANNER&#x20;variable&#x20;set&#x20;to&#x20;null.&#x20;It&#x20;is&#x20;not&#x20;necessary&#x20;to&#x20;create&#x20;a&#x20;separate&#x20;warning&#x20;banner&#x20;for&#x20;telnet&#x20;if&#x20;a&#x20;warning&#x20;is&#x20;set&#x20;in&#x20;the&#x20;/etc/issue&#x20;file.&#x20;As&#x20;telnet&#x20;is&#x20;an&#x20;insecure&#x20;protocol,&#x20;it&#x20;is&#x20;strongly&#x20;recommend&#x20;that&#x20;it&#x20;be&#x20;disabled&#x20;and&#x20;all&#x20;remote&#x20;administrative/user&#x20;connections&#x20;take&#x20;place&#x20;by&#x20;Secure&#x20;Shell.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;#&#x20;cd&#x20;/etc/default&#x20;#&#x20;awk&#x20;&#039;/^BANNER=/&#x20;{&#x20;$1&#x20;=&#x20;&quot;BANNER=&quot;&#x20;};&#x20;{&#x20;print&#x20;}&#039;&#x20;telnetd&#x20;&gt;&#x20;telnetd.CIS&#x20;&#x20;&#x20;&#x20;#&#x20;mv&#x20;telnetd.CIS&#x20;telnetd','[{\"cis\": [\"8.5\"]}]'),(8046,'Verify&#x20;System&#x20;Account&#x20;Default&#x20;Passwords','There&#x20;are&#x20;a&#x20;number&#x20;of&#x20;accounts&#x20;provided&#x20;with&#x20;the&#x20;Solaris&#x20;OS&#x20;that&#x20;are&#x20;used&#x20;to&#x20;manage&#x20;applications&#x20;and&#x20;are&#x20;not&#x20;intended&#x20;to&#x20;provide&#x20;an&#x20;interactive&#x20;shell.&#x20;These&#x20;accounts&#x20;are&#x20;delivered&#x20;either&#x20;in&#x20;a&#x20;locked&#x20;or&#x20;non-login&#x20;state.&#x20;Oracle&#x20;does&#x20;not&#x20;support&#x20;nor&#x20;recommend&#x20;changing&#x20;the&#x20;passwords&#x20;associated&#x20;with&#x20;these&#x20;accounts.','System&#x20;accounts,&#x20;such&#x20;as&#x20;bin,&#x20;lpd,&#x20;and&#x20;sys&#x20;have&#x20;special&#x20;purposes&#x20;and&#x20;privileges.&#x20;By&#x20;default,&#x20;these&#x20;accounts&#x20;are&#x20;configured&#x20;as&#x20;either&#x20;locked&#x20;or&#x20;non-login.&#x20;This&#x20;status&#x20;should&#x20;be&#x20;verified&#x20;to&#x20;ensure&#x20;that&#x20;these&#x20;accounts&#x20;have&#x20;not&#x20;accidentally&#x20;or&#x20;intentionally&#x20;been&#x20;enabled.','','To&#x20;lock&#x20;a&#x20;single&#x20;account,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;passwd&#x20;-d&#x20;[username]&#x20;&#x20;&#x20;&#x20;#&#x20;passwd&#x20;-l&#x20;[username]&#x20;&#x20;&#x20;&#x20;To&#x20;configure&#x20;a&#x20;single&#x20;account&#x20;to&#x20;be&#x20;non-login,&#x20;use&#x20;the&#x20;command:&#x20;#&#x20;passwd&#x20;-d&#x20;[username]&#x20;&#x20;&#x20;&#x20;#&#x20;passwd&#x20;-N&#x20;[username]','[{\"cis\": [\"9.3\"]}]'),(8047,'Ensure&#x20;Password&#x20;Fields&#x20;are&#x20;Not&#x20;Empty','An&#x20;account&#x20;with&#x20;an&#x20;empty&#x20;password&#x20;field&#x20;means&#x20;that&#x20;anybody&#x20;may&#x20;log&#x20;in&#x20;as&#x20;that&#x20;user&#x20;without&#x20;providing&#x20;a&#x20;password&#x20;at&#x20;all&#x20;&#40;assuming&#x20;that&#x20;the&#x20;value&#x20;PASSREQ=NO&#x20;is&#x20;set&#x20;in&#x20;/etc/default/login&#41;.','All&#x20;accounts&#x20;must&#x20;have&#x20;passwords,&#x20;be&#x20;configured&#x20;as&#x20;&quot;Non-login,&quot;&#x20;or&#x20;be&#x20;locked.','','Use&#x20;the&#x20;passwd&#x20;-l&#x20;command&#x20;to&#x20;lock&#x20;accounts&#x20;that&#x20;are&#x20;not&#x20;permitted&#x20;to&#x20;execute&#x20;commands&#x20;.&#x20;Use&#x20;the&#x20;passwd&#x20;-N&#x20;command&#x20;to&#x20;set&#x20;accounts&#x20;to&#x20;be&#x20;non-logini.','[{\"cis\": [\"9.4\"]}]'),(8048,'Verify&#x20;No&#x20;UID&#x20;0&#x20;Accounts&#x20;Exist&#x20;Other&#x20;than&#x20;root','Any&#x20;account&#x20;with&#x20;UID&#x20;0&#x20;has&#x20;superuser&#x20;rights&#x20;on&#x20;the&#x20;system.','This&#x20;access&#x20;must&#x20;be&#x20;limited&#x20;to&#x20;only&#x20;the&#x20;default&#x20;root&#x20;role&#x20;and&#x20;be&#x20;made&#x20;accessible&#x20;from&#x20;the&#x20;system&#x20;console&#x20;only.&#x20;Administrative&#x20;access&#x20;granted&#x20;to&#x20;an&#x20;unprivileged&#x20;account&#x20;should&#x20;use&#x20;an&#x20;approved&#x20;mechanism&#x20;such&#x20;as&#x20;RBAC.','','Disable&#x20;or&#x20;delete&#x20;any&#x20;other&#x20;0&#x20;UID&#x20;entries&#x20;that&#x20;are&#x20;displayed;&#x20;there&#x20;should&#x20;be&#x20;only&#x20;one&#x20;root&#x20;account.&#x20;Finer&#x20;granularity&#x20;access&#x20;control&#x20;for&#x20;administrative&#x20;access&#x20;can&#x20;be&#x20;obtained&#x20;by&#x20;using&#x20;the&#x20;Solaris&#x20;Role-Based&#x20;Access&#x20;Control&#x20;&#40;RBAC&#41;&#x20;mechanism.&#x20;RBAC&#x20;configurations&#x20;should&#x20;be&#x20;monitored&#x20;via&#x20;user_attr&#40;4&#41;&#x20;to&#x20;make&#x20;sure&#x20;that&#x20;privileges&#x20;are&#x20;managed&#x20;appropriately.','[{\"cis\": [\"9.5\"]}]'),(8049,'Ensure&#x20;root&#x20;PATH&#x20;Integrity','The&#x20;root&#x20;user&#x20;can&#x20;execute&#x20;any&#x20;command&#x20;on&#x20;the&#x20;system&#x20;and&#x20;could&#x20;be&#x20;tricked&#x20;into&#x20;executing&#x20;programs&#x20;if&#x20;the&#x20;PATH&#x20;is&#x20;not&#x20;set&#x20;correctly.','Including&#x20;the&#x20;current&#x20;working&#x20;directory&#x20;&#40;.&#41;&#x20;or&#x20;any&#x20;other&#x20;writable&#x20;directory&#x20;in&#x20;root&#039;s&#x20;executable&#x20;path&#x20;makes&#x20;it&#x20;likely&#x20;that&#x20;an&#x20;attacker&#x20;can&#x20;gain&#x20;superuser&#x20;access&#x20;by&#x20;forcing&#x20;an&#x20;administrator&#x20;operating&#x20;as&#x20;root&#x20;to&#x20;execute&#x20;a&#x20;malcode,&#x20;such&#x20;as&#x20;a&#x20;Trojan&#x20;horse&#x20;program.','','Correct&#x20;or&#x20;justify&#x20;any&#x20;items&#x20;discovered&#x20;in&#x20;the&#x20;Audit&#x20;step.','[{\"cis\": [\"9.6\"]}]'),(8050,'Check&#x20;That&#x20;Users&#x20;Are&#x20;Assigned&#x20;Home&#x20;Directories','passwd&#40;4&#41;&#x20;defines&#x20;a&#x20;home&#x20;directory&#x20;that&#x20;each&#x20;user&#x20;is&#x20;placed&#x20;in&#x20;upon&#x20;login.&#x20;If&#x20;there&#x20;is&#x20;no&#x20;defined&#x20;home&#x20;directory,&#x20;a&#x20;user&#x20;will&#x20;be&#x20;placed&#x20;in&#x20;/&#x20;and&#x20;will&#x20;not&#x20;be&#x20;able&#x20;to&#x20;write&#x20;any&#x20;files&#x20;or&#x20;have&#x20;local&#x20;environment&#x20;variables&#x20;set.','All&#x20;users&#x20;must&#x20;be&#x20;assigned&#x20;a&#x20;home&#x20;directory&#x20;in&#x20;passwd&#40;4&#41;.','','Correct&#x20;or&#x20;justify&#x20;any&#x20;items&#x20;discovered&#x20;in&#x20;the&#x20;Audit&#x20;step.&#x20;Determine&#x20;if&#x20;there&#x20;exists&#x20;any&#x20;users&#x20;who&#x20;are&#x20;in&#x20;passwd&#40;4&#41;&#x20;but&#x20;do&#x20;not&#x20;have&#x20;a&#x20;home&#x20;directory,&#x20;and&#x20;work&#x20;with&#x20;those&#x20;users&#x20;to&#x20;determine&#x20;the&#x20;best&#x20;course&#x20;of&#x20;action&#x20;in&#x20;accordance&#x20;with&#x20;site&#x20;policy.','[{\"cis\": [\"9.12\"]}]'),(8500,'Verify&#x20;all&#x20;Apple&#x20;provided&#x20;software&#x20;is&#x20;current','Software&#x20;vendors&#x20;release&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates&#x20;for&#x20;their&#x20;products&#x20;when&#x20;security&#x20;vulnerabilities&#x20;are&#x20;discovered.&#x20;There&#x20;is&#x20;no&#x20;simple&#x20;way&#x20;to&#x20;complete&#x20;this&#x20;action&#x20;without&#x20;a&#x20;network&#x20;connection&#x20;to&#x20;an&#x20;Apple&#x20;software&#x20;repository.&#x20;Please&#x20;ensure&#x20;appropriate&#x20;access&#x20;for&#x20;this&#x20;control.&#x20;This&#x20;check&#x20;is&#x20;only&#x20;for&#x20;what&#x20;Apple&#x20;provides&#x20;through&#x20;software&#x20;update.','It&#x20;is&#x20;important&#x20;that&#x20;these&#x20;updates&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;the&#x20;identified&#x20;vulnerabilities.','','1.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following:&#x20;softwareupdate&#x20;-l&#x20;&#x20;2.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following&#x20;for&#x20;any&#x20;packages&#x20;that&#x20;show&#x20;up&#x20;in&#x20;step&#x20;1:&#x20;sudo&#x20;softwareupdate&#x20;-i&#x20;packagename','[{\"cis\": [\"1.1\"]}]'),(8501,'Enable&#x20;Auto&#x20;Update','Auto&#x20;Update&#x20;verifies&#x20;that&#x20;your&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates.&#x20;If&#x20;&quot;Automatically&#x20;check&#x20;for&#x20;updates&quot;&#x20;is&#x20;not&#x20;selected&#x20;background&#x20;updates&#x20;for&#x20;new&#x20;malware&#x20;definition&#x20;files&#x20;from&#x20;Apple&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper&#x20;will&#x20;not&#x20;occur.','It&#x20;is&#x20;important&#x20;that&#x20;a&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;updates&#x20;applied&#x20;so&#x20;as&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;identified&#x20;vulnerabilities.','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;AutomaticCheckEnabled&#x20;-int&#x20;1','[{\"cis\": [\"1.2\"]}]'),(8502,'Enable&#x20;app&#x20;update&#x20;installs','Ensure&#x20;that&#x20;application&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;admin&#x20;privileges&#x20;for&#x20;end&#x20;users.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdate&#x20;-bool&#x20;TRUE&#x20;&#x20;&#x20;&#x20;The&#x20;remediation&#x20;requires&#x20;a&#x20;log&#x20;out&#x20;and&#x20;log&#x20;in&#x20;to&#x20;show&#x20;in&#x20;the&#x20;GUI.&#x20;Please&#x20;note&#x20;that.','[{\"cis\": [\"1.3\"]}]'),(8503,'Enable&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;update&#x20;installs','Ensure&#x20;that&#x20;system&#x20;and&#x20;security&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;&#x20;This&#x20;setting&#x20;enables&#x20;definition&#x20;updates&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper,&#x20;with&#x20;this&#x20;setting&#x20;in&#x20;place&#x20;new&#x20;malware&#x20;and&#x20;adware&#x20;that&#x20;Apple&#x20;has&#x20;added&#x20;to&#x20;the&#x20;list&#x20;of&#x20;malware&#x20;or&#x20;untrusted&#x20;software&#x20;will&#x20;not&#x20;execute.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;end&#x20;user&#x20;admin&#x20;rights.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;ConfigDataInstall&#x20;-bool&#x20;true&#x20;&amp;&amp;&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;CriticalUpdateInstall&#x20;-bool&#x20;true','[{\"cis\": [\"1.4\"]}]'),(8504,'Enable&#x20;OS&#x20;X&#x20;update&#x20;installs','Ensure&#x20;that&#x20;OS&#x20;X&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;This&#x20;setting&#x20;enables&#x20;OS&#x20;X&#x20;updates&#x20;to&#x20;be&#x20;automatically&#x20;installed.&#x20;Some&#x20;environments&#x20;will&#x20;want&#x20;to&#x20;approve&#x20;and&#x20;test&#x20;updates&#x20;before&#x20;they&#x20;are&#x20;delivered.&#x20;It&#x20;is&#x20;best&#x20;practice&#x20;to&#x20;test&#x20;first&#x20;where&#x20;updates&#x20;can&#x20;and&#x20;have&#x20;caused&#x20;disruptions&#x20;to&#x20;operations.&#x20;Automatic&#x20;updates&#x20;should&#x20;be&#x20;turned&#x20;off&#x20;where&#x20;changes&#x20;are&#x20;tightly&#x20;controlled&#x20;and&#x20;there&#x20;are&#x20;mature&#x20;testing&#x20;and&#x20;approval&#x20;processes.&#x20;Automatic&#x20;updates&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off&#x20;so&#x20;the&#x20;admin&#x20;can&#x20;call&#x20;the&#x20;users&#x20;first&#x20;to&#x20;let&#x20;them&#x20;know&#x20;it&#039;s&#x20;ok&#x20;to&#x20;install.&#x20;A&#x20;dependable&#x20;repeatable&#x20;process&#x20;involving&#x20;a&#x20;patch&#x20;agent&#x20;or&#x20;remote&#x20;management&#x20;tool&#x20;should&#x20;be&#x20;in&#x20;place&#x20;before&#x20;auto-updates&#x20;are&#x20;turned&#x20;off.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdateRestartRequired&#x20;-bool&#x20;TRUE','[{\"cis\": [\"1.5\"]}]'),(8505,'Enable&#x20;&quot;Set&#x20;time&#x20;and&#x20;date&#x20;automatically&quot;','Correct&#x20;date&#x20;and&#x20;time&#x20;settings&#x20;are&#x20;required&#x20;for&#x20;authentication&#x20;protocols,&#x20;file&#x20;creation,&#x20;modification&#x20;dates&#x20;and&#x20;log&#x20;entries.&#x20;Apple&#039;s&#x20;automatic&#x20;time&#x20;update&#x20;solution&#x20;will&#x20;enable&#x20;an&#x20;NTP&#x20;server&#x20;that&#x20;is&#x20;not&#x20;controlled&#x20;by&#x20;the&#x20;Application&#x20;Firewall.&#x20;Turning&#x20;on&#x20;&quot;Set&#x20;time&#x20;and&#x20;date&#x20;automatically&quot;&#x20;allows&#x20;other&#x20;computers&#x20;to&#x20;connect&#x20;to&#x20;set&#x20;their&#x20;time&#x20;and&#x20;allows&#x20;for&#x20;exploit&#x20;attempts&#x20;against&#x20;ntpd.&#x20;It&#x20;also&#x20;allows&#x20;for&#x20;more&#x20;accurate&#x20;network&#x20;detection&#x20;and&#x20;OS&#x20;fingerprinting.','Kerberos&#x20;may&#x20;not&#x20;operate&#x20;correctly&#x20;if&#x20;the&#x20;time&#x20;on&#x20;the&#x20;Mac&#x20;is&#x20;off&#x20;by&#x20;more&#x20;than&#x20;5&#x20;minutes.&#x20;&#x20;This&#x20;in&#x20;turn&#x20;can&#x20;affect&#x20;Apple&#039;s&#x20;single&#x20;sign-on&#x20;feature,&#x20;Active&#x20;Directory&#x20;logons,&#x20;and&#x20;other&#x20;features.','','Run&#x20;the&#x20;following&#x20;commands:&#x20;sudo&#x20;systemsetup&#x20;-setnetworktimeserver&#x20;&lt;timeserver&gt;&#x20;&#x20;&#x20;&#x20;sudo&#x20;systemsetup&#x20;-setusingnetworktime&#x20;on','[{\"cis\": [\"2.2.1\"]}]'),(8506,'Restrict&#x20;NTP&#x20;server&#x20;to&#x20;loopback&#x20;interface','The&#x20;Apple&#x20;System&#x20;Preference&#x20;setting&#x20;to&#x20;&quot;Set&#x20;date&#x20;and&#x20;time&#x20;automatically&quot;&#x20;enables&#x20;both&#x20;an&#x20;NTP&#x20;client&#x20;that&#x20;can&#x20;synchronize&#x20;the&#x20;time&#x20;from&#x20;known&#x20;time&#x20;server&#40;s&#41;&#x20;and&#x20;an&#x20;open&#x20;listening&#x20;NTP&#x20;server&#x20;that&#x20;can&#x20;be&#x20;used&#x20;by&#x20;any&#x20;other&#x20;computer&#x20;that&#x20;can&#x20;connect&#x20;to&#x20;port&#x20;123&#x20;on&#x20;the&#x20;time&#x20;syncing&#x20;computer.&#x20;This&#x20;open&#x20;listening&#x20;service&#x20;can&#x20;allow&#x20;for&#x20;both&#x20;exploits&#x20;of&#x20;future&#x20;NTP&#x20;vulnerabilities&#x20;and&#x20;allow&#x20;for&#x20;open&#x20;ports&#x20;that&#x20;can&#x20;be&#x20;used&#x20;for&#x20;fingerprinting&#x20;to&#x20;target&#x20;exploits.&#x20;Access&#x20;to&#x20;this&#x20;port&#x20;should&#x20;be&#x20;restricted.&#x20;&#x20;Editing&#x20;the&#x20;/etc/ntp-restrict.conf&#x20;file&#x20;by&#x20;adding&#x20;a&#x20;control&#x20;on&#x20;the&#x20;loopback&#x20;interface&#x20;limits&#x20;external&#x20;access.','Mobile&#x20;workstations&#x20;on&#x20;untrusted&#x20;networks&#x20;should&#x20;not&#x20;have&#x20;open&#x20;listening&#x20;services&#x20;available&#x20;to&#x20;other&#x20;nodes&#x20;on&#x20;the&#x20;network.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;&#x20;sudo&#x20;vim&#x20;/etc/ntp-restrict.conf&#x20;&#x20;2.&#x20;Add&#x20;the&#x20;following&#x20;lines&#x20;to&#x20;the&#x20;file:&#x20;restrict&#x20;lo&#x20;interface&#x20;ignore&#x20;wildcard&#x20;interface&#x20;listen&#x20;lo','[{\"cis\": [\"2.2.3\"]}]'),(8507,'Disable&#x20;Remote&#x20;Apple&#x20;Events','Apple&#x20;Events&#x20;is&#x20;a&#x20;technology&#x20;that&#x20;allows&#x20;one&#x20;program&#x20;to&#x20;communicate&#x20;with&#x20;other&#x20;programs.&#x20;Remote&#x20;Apple&#x20;Events&#x20;allows&#x20;a&#x20;program&#x20;on&#x20;one&#x20;computer&#x20;to&#x20;communicate&#x20;with&#x20;a&#x20;program&#x20;on&#x20;a&#x20;different&#x20;computer.','Disabling&#x20;Remote&#x20;Apple&#x20;Events&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;program&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremoteappleevents&#x20;off','[{\"cis\": [\"2.4.1\"]}]'),(8508,'Disable&#x20;Printer&#x20;Sharing','By&#x20;enabling&#x20;Printer&#x20;sharing&#x20;the&#x20;computer&#x20;is&#x20;set&#x20;up&#x20;as&#x20;a&#x20;print&#x20;server&#x20;to&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;computers.&#x20;Dedicated&#x20;print&#x20;servers&#x20;or&#x20;direct&#x20;IP&#x20;printing&#x20;should&#x20;be&#x20;used&#x20;instead.','Disabling&#x20;Printer&#x20;Sharing&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;attackers&#x20;attempting&#x20;to&#x20;exploit&#x20;the&#x20;print&#x20;server&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;system.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Sharing&#x20;3.&#x20;Uncheck&#x20;Printer&#x20;Sharing','[{\"cis\": [\"2.4.4\"]}]'),(8509,'Disable&#x20;Remote&#x20;Login','Remote&#x20;Login&#x20;allows&#x20;an&#x20;interactive&#x20;terminal&#x20;connection&#x20;to&#x20;a&#x20;computer.','Disabling&#x20;Remote&#x20;Login&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system&#x20;via&#x20;Secure&#x20;Shell&#x20;&#40;SSH&#41;.&#x20;While&#x20;SSH&#x20;is&#x20;an&#x20;industry&#x20;standard&#x20;to&#x20;connect&#x20;to&#x20;posix&#x20;servers,&#x20;the&#x20;scope&#x20;of&#x20;the&#x20;benchmark&#x20;is&#x20;for&#x20;Apple&#x20;OSX&#x20;clients,&#x20;not&#x20;servers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremotelogin&#x20;off','[{\"cis\": [\"2.4.5\"]}]'),(8510,'Disable&#x20;File&#x20;Sharing','Apple&#039;s&#x20;File&#x20;Sharing&#x20;uses&#x20;a&#x20;combination&#x20;of&#x20;SMB&#x20;&#40;Windows&#x20;sharing&#41;&#x20;and&#x20;AFP&#x20;&#40;Mac&#x20;sharing&#41;','By&#x20;disabling&#x20;file&#x20;sharing,&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;and&#x20;risk&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;files&#x20;stored&#x20;on&#x20;the&#x20;system&#x20;is&#x20;reduced.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;AFP&#x20;from&#x20;the&#x20;command&#x20;line:&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.AppleFileServer.plist&#x20;&#x20;-&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;SMB&#x20;sharing&#x20;from&#x20;the&#x20;CLI:&#x20;&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.smbd.plist','[{\"cis\": [\"2.4.8\"]}]'),(8511,'Disable&#x20;&quot;Wake&#x20;for&#x20;network&#x20;access&quot;','This&#x20;feature&#x20;allows&#x20;other&#x20;users&#x20;to&#x20;be&#x20;able&#x20;to&#x20;access&#x20;your&#x20;computer&#039;s&#x20;shared&#x20;resources,&#x20;such&#x20;as&#x20;shared&#x20;printers&#x20;or&#x20;iTunes&#x20;playlists,&#x20;even&#x20;when&#x20;your&#x20;computer&#x20;is&#x20;in&#x20;sleep&#x20;mode.','Disabling&#x20;this&#x20;feature&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;remotely&#x20;waking&#x20;the&#x20;system&#x20;and&#x20;gaining&#x20;access.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;&#x20;sudo&#x20;pmset&#x20;-a&#x20;womp&#x20;0&#x20;&#x20;&#x20;Note:&#x20;The&#x20;-c&#x20;flag&#x20;means&#x20;&quot;wall&#x20;power.&quot;&#x20;Different&#x20;settings&#x20;must&#x20;be&#x20;used&#x20;for&#x20;other&#x20;power&#x20;sources.','[{\"cis\": [\"2.5.1\"]}]'),(8512,'Enable&#x20;FileVault','FileVault&#x20;secures&#x20;a&#x20;system&#039;s&#x20;data&#x20;by&#x20;automatically&#x20;encrypting&#x20;its&#x20;boot&#x20;volume&#x20;and&#x20;requiring&#x20;a&#x20;password&#x20;or&#x20;recovery&#x20;key&#x20;to&#x20;access&#x20;it.','Encrypting&#x20;sensitive&#x20;data&#x20;minimizes&#x20;the&#x20;likelihood&#x20;of&#x20;unauthorized&#x20;users&#x20;gaining&#x20;access&#x20;to&#x20;it.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Security&#x20;&amp;&#x20;Privacy&#x20;3.&#x20;Select&#x20;FileVault&#x20;4.&#x20;Select&#x20;Turn&#x20;on&#x20;FileVault','[{\"cis\": [\"2.6.1\"]}]'),(8513,'Enable&#x20;Gatekeeper','Gatekeeper&#x20;is&#x20;Apple&#039;s&#x20;application&#x20;white-listing&#x20;control&#x20;that&#x20;restricts&#x20;downloaded&#x20;applications&#x20;from&#x20;launching.&#x20;It&#x20;functions&#x20;as&#x20;a&#x20;control&#x20;to&#x20;limit&#x20;applications&#x20;from&#x20;unverified&#x20;sources&#x20;from&#x20;running&#x20;without&#x20;authorization.','Disallowing&#x20;unsigned&#x20;software&#x20;will&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;unauthorized&#x20;or&#x20;malicious&#x20;applications&#x20;from&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;spctl&#x20;--master-enable','[{\"cis\": [\"2.6.2\"]}]'),(8514,'Enable&#x20;Firewall','A&#x20;firewall&#x20;is&#x20;a&#x20;piece&#x20;of&#x20;software&#x20;that&#x20;blocks&#x20;unwanted&#x20;incoming&#x20;connections&#x20;to&#x20;a&#x20;system.&#x20;&#x20;Apple&#x20;has&#x20;posted&#x20;general&#x20;documentation&#x20;about&#x20;the&#x20;application&#x20;firewall.','A&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;unauthorized&#x20;users&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;your&#x20;system&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.alf&#x20;globalstate&#x20;-&#x20;int&#x20;&lt;value&gt;&#x20;&#x20;&#x20;&#x20;Where&#x20;&lt;value&gt;&#x20;is:&#x20;-&#x20;1&#x20;=&#x20;on&#x20;for&#x20;specific&#x20;services&#x20;-&#x20;2&#x20;=&#x20;on&#x20;for&#x20;essential&#x20;services','[{\"cis\": [\"2.6.3\"]}]'),(8515,'Enable&#x20;Firewall&#x20;Stealth&#x20;Mode','While&#x20;in&#x20;Stealth&#x20;mode&#x20;the&#x20;computer&#x20;will&#x20;not&#x20;respond&#x20;to&#x20;unsolicited&#x20;probes,&#x20;dropping&#x20;that&#x20;traffic.','Stealth&#x20;mode&#x20;on&#x20;the&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;system&#x20;discovery&#x20;tools&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;/usr/libexec/ApplicationFirewall/socketfilterfw&#x20;--setstealthmode&#x20;on','[{\"cis\": [\"2.6.4\"]}]'),(8516,'Enable&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;in&#x20;terminal.app','Secure&#x20;Keyboard&#x20;Entry&#x20;prevents&#x20;other&#x20;applications&#x20;on&#x20;the&#x20;system&#x20;and/or&#x20;network&#x20;from&#x20;detecting&#x20;and&#x20;recording&#x20;what&#x20;is&#x20;typed&#x20;into&#x20;Terminal.','Enabling&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;minimizes&#x20;the&#x20;risk&#x20;of&#x20;a&#x20;key&#x20;logger&#x20;from&#x20;detecting&#x20;what&#x20;is&#x20;entered&#x20;in&#x20;Terminal.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Terminal&#x20;2.&#x20;Select&#x20;Terminal&#x20;3.&#x20;Select&#x20;Secure&#x20;Keyboard&#x20;Entry','[{\"cis\": [\"2.10\"]}]'),(8517,'Java&#x20;6&#x20;is&#x20;not&#x20;the&#x20;default&#x20;Java&#x20;runtime','Apple&#x20;had&#x20;made&#x20;Java&#x20;part&#x20;of&#x20;the&#x20;core&#x20;Operating&#x20;System&#x20;for&#x20;OS&#x20;X.&#x20;Apple&#x20;is&#x20;no&#x20;longer&#x20;providing&#x20;Java&#x20;updates&#x20;for&#x20;OS&#x20;X&#x20;and&#x20;updated&#x20;JREs&#x20;and&#x20;JDK&#x20;are&#x20;made&#x20;available&#x20;by&#x20;Oracle.&#x20;&#x20;The&#x20;latest&#x20;version&#x20;of&#x20;Java&#x20;6&#x20;made&#x20;available&#x20;by&#x20;Apple&#x20;has&#x20;many&#x20;unpatched&#x20;vulnerabilities&#x20;and&#x20;should&#x20;not&#x20;be&#x20;the&#x20;default&#x20;runtime&#x20;for&#x20;Java&#x20;applets&#x20;that&#x20;request&#x20;one&#x20;from&#x20;the&#x20;Operating&#x20;System','Java&#x20;is&#x20;one&#x20;of&#x20;the&#x20;most&#x20;exploited&#x20;environments&#x20;and&#x20;is&#x20;no&#x20;longer&#x20;maintained&#x20;by&#x20;Apple,&#x20;old&#x20;versions&#x20;may&#x20;still&#x20;be&#x20;installed&#x20;and&#x20;should&#x20;be&#x20;removed&#x20;from&#x20;the&#x20;computer&#x20;or&#x20;not&#x20;be&#x20;in&#x20;the&#x20;default&#x20;path.','','Java&#x20;6&#x20;can&#x20;be&#x20;removed&#x20;completely&#x20;or,&#x20;if&#x20;necessary&#x20;Java&#x20;applications&#x20;will&#x20;only&#x20;work&#x20;with&#x20;Java&#x20;6,&#x20;a&#x20;custom&#x20;path&#x20;can&#x20;be&#x20;used.','[{\"cis\": [\"2.11\"]}]'),(8518,'Enable&#x20;security&#x20;auditing','OSX&#039;s&#x20;audit&#x20;facility,&#x20;auditd,&#x20;receives&#x20;notifications&#x20;from&#x20;the&#x20;kernel&#x20;when&#x20;certain&#x20;system&#x20;calls,&#x20;such&#x20;as&#x20;open,&#x20;fork,&#x20;and&#x20;exit,&#x20;are&#x20;made.&#x20;These&#x20;notifications&#x20;are&#x20;captured&#x20;and&#x20;written&#x20;to&#x20;an&#x20;audit&#x20;log.','Logs&#x20;generated&#x20;by&#x20;auditd&#x20;may&#x20;be&#x20;useful&#x20;when&#x20;investigating&#x20;a&#x20;security&#x20;incident&#x20;as&#x20;they&#x20;may&#x20;help&#x20;reveal&#x20;the&#x20;vulnerable&#x20;application&#x20;and&#x20;the&#x20;actions&#x20;taken&#x20;by&#x20;a&#x20;malicious&#x20;actor.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;launchctl&#x20;load&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.auditd.plist','[{\"cis\": [\"3.2\"]}]'),(8519,'Configure&#x20;Security&#x20;Auditing&#x20;Flags','Auditing&#x20;is&#x20;the&#x20;capture&#x20;and&#x20;maintenance&#x20;of&#x20;information&#x20;about&#x20;security-related&#x20;events.','Maintaining&#x20;an&#x20;audit&#x20;trail&#x20;of&#x20;system&#x20;activity&#x20;logs&#x20;can&#x20;help&#x20;identify&#x20;configuration&#x20;errors,&#x20;troubleshoot&#x20;service&#x20;disruptions,&#x20;and&#x20;analyze&#x20;compromises&#x20;or&#x20;attacks&#x20;that&#x20;have&#x20;occurred,&#x20;have&#x20;begun,&#x20;or&#x20;are&#x20;about&#x20;to&#x20;begin.&#x20;Audit&#x20;logs&#x20;are&#x20;necessary&#x20;to&#x20;provide&#x20;a&#x20;trail&#x20;of&#x20;evidence&#x20;in&#x20;case&#x20;the&#x20;system&#x20;or&#x20;network&#x20;is&#x20;compromised.','','1.&#x20;Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;edit&#x20;the&#x20;/etc/security/audit_control&#x20;file&#x20;2.&#x20;Find&#x20;the&#x20;line&#x20;beginning&#x20;with&#x20;&quot;flags&quot;&#x20;3.&#x20;Add&#x20;the&#x20;following&#x20;flags:&#x20;lo,&#x20;ad,&#x20;fd,&#x20;fm,&#x20;-all.&#x20;&#x20;4.&#x20;Save&#x20;the&#x20;file.','[{\"cis\": [\"3.3\"]}]'),(8520,'Disable&#x20;Bonjour&#x20;advertising&#x20;service','Bonjour&#x20;is&#x20;an&#x20;auto-discovery&#x20;mechanism&#x20;for&#x20;TCP/IP&#x20;devices&#x20;which&#x20;enumerate&#x20;devices&#x20;and&#x20;services&#x20;within&#x20;a&#x20;local&#x20;subnet.&#x20;DNS&#x20;on&#x20;Mac&#x20;OS&#x20;X&#x20;&#x20;is&#x20;integrated&#x20;with&#x20;Bonjour&#x20;and&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off,&#x20;but&#x20;the&#x20;Bonjour&#x20;advertising&#x20;service&#x20;can&#x20;be&#x20;disabled.','Bonjour&#x20;can&#x20;simplify&#x20;device&#x20;discovery&#x20;from&#x20;an&#x20;internal&#x20;rogue&#x20;or&#x20;compromised&#x20;host.&#x20;An&#x20;attacker&#x20;could&#x20;use&#x20;Bonjour&#039;s&#x20;multicast&#x20;DNS&#x20;feature&#x20;to&#x20;discover&#x20;a&#x20;vulnerable&#x20;or&#x20;poorly-&#x20;configured&#x20;service&#x20;or&#x20;additional&#x20;information&#x20;to&#x20;aid&#x20;a&#x20;targeted&#x20;attack.&#x20;Implementing&#x20;this&#x20;control&#x20;disables&#x20;the&#x20;continuous&#x20;broadcasting&#x20;of&#x20;&quot;I&#039;m&#x20;here!&quot;&#x20;messages.&#x20;Typical&#x20;end-user&#x20;endpoints&#x20;should&#x20;not&#x20;have&#x20;to&#x20;advertise&#x20;services&#x20;to&#x20;other&#x20;computers.&#x20;This&#x20;setting&#x20;does&#x20;not&#x20;stop&#x20;the&#x20;computer&#x20;from&#x20;sending&#x20;out&#x20;service&#x20;discovery&#x20;messages&#x20;when&#x20;looking&#x20;for&#x20;services&#x20;on&#x20;an&#x20;internal&#x20;subnet,&#x20;if&#x20;the&#x20;computer&#x20;is&#x20;looking&#x20;for&#x20;a&#x20;printer&#x20;or&#x20;server&#x20;and&#x20;using&#x20;service&#x20;discovery.&#x20;To&#x20;block&#x20;all&#x20;Bonjour&#x20;traffic&#x20;except&#x20;to&#x20;approved&#x20;devices&#x20;the&#x20;pf&#x20;or&#x20;other&#x20;firewall&#x20;would&#x20;be&#x20;needed.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.mDNSResponder.plist&#x20;NoMulticastAdvertisements','[{\"cis\": [\"4.1\"]}]'),(8521,'Ensure&#x20;http&#x20;server&#x20;is&#x20;not&#x20;running','Mac&#x20;OS&#x20;X&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;Apache&#x20;web&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;Personal&#x20;web&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Personal&#x20;web&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;Apache&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;&#x20;Web&#x20;sharing&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;web&#x20;servers&#x20;and&#x20;appropriate&#x20;cloud&#x20;services.','Web&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;webservers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Ensure&#x20;that&#x20;the&#x20;Web&#x20;Server&#x20;is&#x20;not&#x20;running&#x20;and&#x20;is&#x20;not&#x20;set&#x20;to&#x20;start&#x20;at&#x20;boot&#x20;&#x20;&#x20;&#x20;Stop&#x20;the&#x20;Web&#x20;Server:&#x20;sudo&#x20;apachectl&#x20;stop&#x20;&#x20;&#x20;&#x20;Ensure&#x20;that&#x20;the&#x20;web&#x20;server&#x20;will&#x20;not&#x20;auto-start&#x20;at&#x20;boot:&#x20;sudo&#x20;defaults&#x20;write&#x20;/System/Library/LaunchDaemons/org.apache.httpd&#x20;Disabled&#x20;-bool&#x20;true','[{\"cis\": [\"4.4\"]}]'),(8522,'Ensure&#x20;ftp&#x20;server&#x20;is&#x20;not&#x20;running','Mac&#x20;OS&#x20;X&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;ftp&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;Ftp&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Running&#x20;an&#x20;Ftp&#x20;server&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;The&#x20;Ftp&#x20;server&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;Ftp&#x20;servers&#x20;meet&#x20;a&#x20;specialized&#x20;need&#x20;to&#x20;distribute&#x20;files&#x20;without&#x20;strong&#x20;authentication&#x20;and&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;servers.&#x20;Cloud&#x20;services&#x20;or&#x20;other&#x20;distribution&#x20;methods&#x20;should&#x20;be&#x20;considered','Ftp&#x20;servers&#x20;should&#x20;not&#x20;be&#x20;run&#x20;on&#x20;an&#x20;end&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;servers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Ensure&#x20;that&#x20;the&#x20;FTP&#x20;Server&#x20;is&#x20;not&#x20;running&#x20;and&#x20;is&#x20;not&#x20;set&#x20;to&#x20;start&#x20;at&#x20;boot.&#x20;Stop&#x20;the&#x20;ftp&#x20;Server:&#x20;sudo&#x20;-s&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/ftp.plist','[{\"cis\": [\"4.5\"]}]'),(8523,'Ensure&#x20;nfs&#x20;server&#x20;is&#x20;not&#x20;running','Mac&#x20;OS&#x20;X&#x20;can&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;fileserver.&#x20;NFS&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;mount&#x20;shares&#x20;and&#x20;gain&#x20;access&#x20;to&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;File&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;NFSD&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;export&#x20;shares&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.','File&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop,&#x20;dedicated&#x20;servers&#x20;should&#x20;be&#x20;used.&#x20;&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Stop&#x20;the&#x20;NFS&#x20;Server:&#x20;sudo&#x20;nfsd&#x20;disable&#x20;&#x20;&#x20;&#x20;Remove&#x20;the&#x20;exported&#x20;Directory&#x20;listing:&#x20;rm&#x20;/etc/export','[{\"cis\": [\"4.6\"]}]'),(8524,'Do&#x20;not&#x20;enable&#x20;the&#x20;&quot;root&quot;&#x20;account','The&#x20;root&#x20;account&#x20;is&#x20;a&#x20;superuser&#x20;account&#x20;that&#x20;has&#x20;access&#x20;privileges&#x20;to&#x20;perform&#x20;any&#x20;actions&#x20;and&#x20;read/write&#x20;to&#x20;any&#x20;file&#x20;on&#x20;the&#x20;computer.&#x20;In&#x20;the&#x20;UNIX/Linux&#x20;world,&#x20;the&#x20;system&#x20;administrator&#x20;commonly&#x20;uses&#x20;the&#x20;root&#x20;account&#x20;to&#x20;perform&#x20;administrative&#x20;functions.','Enabling&#x20;and&#x20;using&#x20;the&#x20;root&#x20;account&#x20;puts&#x20;the&#x20;system&#x20;at&#x20;risk&#x20;since&#x20;any&#x20;successful&#x20;exploit&#x20;or&#x20;mistake&#x20;while&#x20;the&#x20;root&#x20;account&#x20;is&#x20;in&#x20;use&#x20;could&#x20;have&#x20;unlimited&#x20;access&#x20;privileges&#x20;within&#x20;the&#x20;system.&#x20;Using&#x20;the&#x20;sudo&#x20;command&#x20;allows&#x20;users&#x20;to&#x20;perform&#x20;functions&#x20;as&#x20;a&#x20;root&#x20;user&#x20;while&#x20;limiting&#x20;and&#x20;password&#x20;protecting&#x20;the&#x20;access&#x20;privileges.&#x20;&#x20;By&#x20;default&#x20;the&#x20;root&#x20;account&#x20;is&#x20;not&#x20;enabled&#x20;on&#x20;a&#x20;Mac&#x20;OS&#x20;X&#x20;client&#x20;computer.&#x20;It&#x20;is&#x20;enabled&#x20;on&#x20;Mac&#x20;OS&#x20;X&#x20;Server.&#x20;An&#x20;administrator&#x20;can&#x20;escalate&#x20;privileges&#x20;using&#x20;the&#x20;sudo&#x20;command&#x20;&#40;use&#x20;-s&#x20;or&#x20;-i&#x20;to&#x20;get&#x20;a&#x20;root&#x20;shell&#41;.','','Open&#x20;System&#x20;Preferences,&#x20;Uses&#x20;&amp;&#x20;Groups.&#x20;&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;&#x20;In&#x20;the&#x20;Network&#x20;Account&#x20;Server&#x20;section,&#x20;click&#x20;Join&#x20;or&#x20;Edit.&#x20;&#x20;Click&#x20;Open&#x20;Directory&#x20;Utility.&#x20;&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;&#x20;Select&#x20;the&#x20;Edit&#x20;menu&#x20;&gt;&#x20;Disable&#x20;Root&#x20;User.','[{\"cis\": [\"5.7\"]}]'),(8525,'Disable&#x20;automatic&#x20;login','The&#x20;automatic&#x20;login&#x20;feature&#x20;saves&#x20;a&#x20;user&#039;s&#x20;system&#x20;access&#x20;credentials&#x20;and&#x20;bypasses&#x20;the&#x20;login&#x20;screen,&#x20;instead&#x20;the&#x20;system&#x20;automatically&#x20;loads&#x20;to&#x20;the&#x20;user&#039;s&#x20;desktop&#x20;screen.','Disabling&#x20;automatic&#x20;login&#x20;decreases&#x20;the&#x20;likelihood&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;a&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;delete&#x20;/Library/Preferences/com.apple.loginwindow&#x20;autoLoginUser','[{\"cis\": [\"5.8\"]}]'),(8526,'Require&#x20;a&#x20;password&#x20;to&#x20;wake&#x20;the&#x20;computer&#x20;from&#x20;sleep&#x20;or&#x20;screen&#x20;saver','Sleep&#x20;and&#x20;screensaver&#x20;modes&#x20;are&#x20;low&#x20;power&#x20;modes&#x20;that&#x20;reduces&#x20;electrical&#x20;consumption&#x20;while&#x20;the&#x20;system&#x20;is&#x20;not&#x20;in&#x20;use.','Prompting&#x20;for&#x20;a&#x20;password&#x20;when&#x20;waking&#x20;from&#x20;sleep&#x20;or&#x20;screensaver&#x20;mode&#x20;mitigates&#x20;the&#x20;threat&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;a&#x20;system&#x20;in&#x20;the&#x20;user&#039;s&#x20;absence.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;The&#x20;current&#x20;user&#x20;will&#x20;need&#x20;to&#x20;log&#x20;off&#x20;and&#x20;on&#x20;for&#x20;changes&#x20;to&#x20;take&#x20;effect.&#x20;&#x20;defaults&#x20;write&#x20;com.apple.screensaver&#x20;askForPassword&#x20;-int&#x20;1&#x20;&#x20;2.&#x20;&#x20;The&#x20;current&#x20;user&#x20;will&#x20;need&#x20;to&#x20;log&#x20;off&#x20;and&#x20;on&#x20;for&#x20;changes&#x20;to&#x20;take&#x20;effect.','[{\"cis\": [\"5.9\"]}]'),(8527,'Disable&#x20;ability&#x20;to&#x20;login&#x20;to&#x20;another&#x20;user&#039;s&#x20;active&#x20;and&#x20;locked&#x20;session','OSX&#x20;has&#x20;a&#x20;privilege&#x20;that&#x20;can&#x20;be&#x20;granted&#x20;to&#x20;any&#x20;user&#x20;that&#x20;will&#x20;allow&#x20;that&#x20;user&#x20;to&#x20;unlock&#x20;active&#x20;user&#039;s&#x20;sessions.','Disabling&#x20;the&#x20;admins&#x20;and/or&#x20;user&#039;s&#x20;ability&#x20;to&#x20;log&#x20;into&#x20;another&#x20;user&#039;s&#x20;active&#x20;and&#x20;locked&#x20;session&#x20;prevents&#x20;unauthorized&#x20;persons&#x20;from&#x20;viewing&#x20;potentially&#x20;sensitive&#x20;and/or&#x20;personal&#x20;information.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;&#x20;sudo&#x20;vi&#x20;/etc/pam.d/screensaver&#x20;2.&#x20;Locate&#x20;&#x20;&#x20;&quot;account&#x20;&#x20;&#x20;&#x20;required&#x20;&#x20;&#x20;&#x20;&#x20;pam_group.so&#x20;no_warn&#x20;group=admin,wheel&#x20;fail_safe&quot;&#x20;3.&#x20;Remove&#x20;&quot;admin,&quot;&#x20;4.&#x20;Save','[{\"cis\": [\"5.11\"]}]'),(8528,'System&#x20;Integrity&#x20;Protection&#x20;status','System&#x20;Integrity&#x20;Protection&#x20;is&#x20;a&#x20;new&#x20;security&#x20;feature&#x20;introduced&#x20;in&#x20;OS&#x20;X&#x20;10.11&#x20;El&#x20;Capitan.&#x20;&#x20;System&#x20;Integrity&#x20;Protection&#x20;restricts&#x20;access&#x20;to&#x20;System&#x20;domain&#x20;locations&#x20;and&#x20;restricts&#x20;runtime&#x20;attachment&#x20;to&#x20;system&#x20;processes.&#x20;Any&#x20;attempt&#x20;to&#x20;attempt&#x20;to&#x20;inspect&#x20;or&#x20;attach&#x20;to&#x20;a&#x20;system&#x20;process&#x20;will&#x20;fail.&#x20;Kernel&#x20;Extensions&#x20;are&#x20;now&#x20;restricted&#x20;to&#x20;/Library/Extensions&#x20;and&#x20;are&#x20;required&#x20;to&#x20;be&#x20;signed&#x20;with&#x20;a&#x20;Developer&#x20;ID.','Running&#x20;without&#x20;System&#x20;Integrity&#x20;Protection&#x20;on&#x20;a&#x20;production&#x20;system&#x20;runs&#x20;the&#x20;risk&#x20;of&#x20;the&#x20;modification&#x20;of&#x20;system&#x20;binaries&#x20;or&#x20;code&#x20;injection&#x20;of&#x20;system&#x20;processes&#x20;that&#x20;would&#x20;otherwise&#x20;be&#x20;protected&#x20;by&#x20;SIP.','','Perform&#x20;the&#x20;following&#x20;while&#x20;booted&#x20;in&#x20;OS&#x20;X&#x20;Recovery&#x20;Partition.&#x20;&#x20;1.&#x20;Select&#x20;Terminal&#x20;from&#x20;the&#x20;Utilities&#x20;menu&#x20;&#x20;&#x20;&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;/usr/bin/csrutil&#x20;enable&#x20;&#x20;&#x20;&#x20;3.&#x20;The&#x20;output&#x20;should&#x20;be:&#x20;Successfully&#x20;enabled&#x20;System&#x20;Integrity&#x20;Protection.&#x20;Please&#x20;restart&#x20;the&#x20;machine&#x20;for&#x20;the&#x20;changes&#x20;to&#x20;take&#x20;effect.&#x20;&#x20;&#x20;&#x20;4.&#x20;Reboot.','[{\"cis\": [\"5.18\"]}]'),(8529,'Disable&#x20;guest&#x20;account&#x20;login','The&#x20;guest&#x20;account&#x20;allows&#x20;users&#x20;access&#x20;to&#x20;the&#x20;system&#x20;without&#x20;having&#x20;to&#x20;create&#x20;an&#x20;account&#x20;or&#x20;password.&#x20;Guest&#x20;users&#x20;are&#x20;unable&#x20;to&#x20;make&#x20;setting&#x20;changes,&#x20;cannot&#x20;remotely&#x20;login&#x20;to&#x20;the&#x20;system&#x20;and&#x20;all&#x20;created&#x20;files,&#x20;caches,&#x20;and&#x20;passwords&#x20;are&#x20;deleted&#x20;upon&#x20;logging&#x20;out.','Disabling&#x20;the&#x20;guest&#x20;account&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;untrusted&#x20;user&#x20;doing&#x20;basic&#x20;reconnaissance&#x20;and&#x20;possibly&#x20;using&#x20;privilege&#x20;escalation&#x20;attacks&#x20;to&#x20;take&#x20;control&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.loginwindow&#x20;GuestEnabled&#x20;-&#x20;bool&#x20;NO','[{\"cis\": [\"6.1.3\"]}]'),(8530,'Remove&#x20;Guest&#x20;home&#x20;folder','The&#x20;guest&#x20;account&#x20;login&#x20;should&#x20;have&#x20;been&#x20;disabled,&#x20;so&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;the&#x20;legacy&#x20;Guest&#x20;home&#x20;folder&#x20;to&#x20;remain&#x20;in&#x20;the&#x20;file&#x20;system.&#x20;When&#x20;normal&#x20;user&#x20;accounts&#x20;are&#x20;removed&#x20;you&#x20;have&#x20;the&#x20;option&#x20;to&#x20;archive&#x20;it,&#x20;leave&#x20;it&#x20;in&#x20;place&#x20;or&#x20;delete.&#x20;In&#x20;the&#x20;case&#x20;of&#x20;the&#x20;guest&#x20;folder&#x20;the&#x20;folder&#x20;remains&#x20;in&#x20;place&#x20;without&#x20;a&#x20;GUI&#x20;option&#x20;to&#x20;remove&#x20;it.&#x20;If&#x20;at&#x20;some&#x20;point&#x20;in&#x20;the&#x20;future&#x20;a&#x20;Guest&#x20;account&#x20;is&#x20;needed&#x20;it&#x20;will&#x20;be&#x20;re-created.&#x20;The&#x20;presence&#x20;of&#x20;the&#x20;Guest&#x20;home&#x20;folder&#x20;can&#x20;cause&#x20;automated&#x20;audits&#x20;to&#x20;fail&#x20;when&#x20;looking&#x20;for&#x20;compliant&#x20;settings&#x20;within&#x20;all&#x20;User&#x20;folders&#x20;as&#x20;well.&#x20;Rather&#x20;than&#x20;ignoring&#x20;the&#x20;folders&#x20;continued&#x20;existence&#x20;it&#x20;is&#x20;best&#x20;removed.','The&#x20;Guest&#x20;home&#x20;folders&#x20;are&#x20;unneeded&#x20;after&#x20;the&#x20;Guest&#x20;account&#x20;is&#x20;disabled&#x20;and&#x20;could&#x20;be&#x20;used&#x20;inappropriately.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;rm&#x20;-R&#x20;/Users/Guest&#x20;&#x20;2.&#x20;Make&#x20;sure&#x20;there&#x20;is&#x20;no&#x20;output','[{\"cis\": [\"6.1.5\"]}]'),(8531,'Turn&#x20;on&#x20;filename&#x20;extensions','A&#x20;filename&#x20;extension&#x20;is&#x20;a&#x20;suffix&#x20;added&#x20;to&#x20;a&#x20;base&#x20;filename&#x20;that&#x20;indicates&#x20;the&#x20;base&#x20;filename&#039;s&#x20;file&#x20;format.','Visible&#x20;filename&#x20;extensions&#x20;allows&#x20;the&#x20;user&#x20;to&#x20;identify&#x20;the&#x20;file&#x20;type&#x20;and&#x20;the&#x20;application&#x20;it&#x20;is&#x20;associated&#x20;with&#x20;which&#x20;leads&#x20;to&#x20;quick&#x20;identification&#x20;of&#x20;misrepresented&#x20;malicious&#x20;files.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Select&#x20;Finder&#x20;2.&#x20;Select&#x20;Preferences&#x20;3.&#x20;Check&#x20;Show&#x20;all&#x20;filename&#x20;extensions&#x20;&#x20;&#x20;&#x20;Alternatively,&#x20;use&#x20;the&#x20;following&#x20;command:&#x20;defaults&#x20;write&#x20;NSGlobalDomain&#x20;AppleShowAllExtensions&#x20;-bool&#x20;true','[{\"cis\": [\"6.2\"]}]'),(8532,'Disable&#x20;the&#x20;automatic&#x20;run&#x20;of&#x20;safe&#x20;files&#x20;in&#x20;Safari','Safari&#x20;will&#x20;automatically&#x20;run&#x20;or&#x20;execute&#x20;what&#x20;it&#x20;considers&#x20;safe&#x20;files.&#x20;This&#x20;can&#x20;include&#x20;installers&#x20;and&#x20;other&#x20;files&#x20;that&#x20;execute&#x20;on&#x20;the&#x20;operating&#x20;system.&#x20;Safari&#x20;bases&#x20;file&#x20;safety&#x20;by&#x20;using&#x20;a&#x20;list&#x20;of&#x20;filetypes&#x20;maintained&#x20;by&#x20;Apple.&#x20;The&#x20;list&#x20;of&#x20;files&#x20;include&#x20;text,&#x20;image,&#x20;video&#x20;and&#x20;archive&#x20;formats&#x20;that&#x20;would&#x20;be&#x20;run&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;OS&#x20;rather&#x20;than&#x20;the&#x20;browser.','Hackers&#x20;have&#x20;taken&#x20;advantage&#x20;of&#x20;this&#x20;setting&#x20;via&#x20;drive-by&#x20;attacks.&#x20;These&#x20;attacks&#x20;occur&#x20;when&#x20;a&#x20;user&#x20;visits&#x20;a&#x20;legitimate&#x20;website&#x20;that&#x20;has&#x20;been&#x20;corrupted.&#x20;The&#x20;user&#x20;unknowingly&#x20;downloads&#x20;a&#x20;malicious&#x20;file&#x20;either&#x20;by&#x20;closing&#x20;an&#x20;infected&#x20;pop-up&#x20;or&#x20;hovering&#x20;over&#x20;a&#x20;malicious&#x20;banner.&#x20;An&#x20;attacker&#x20;can&#x20;create&#x20;a&#x20;malicious&#x20;file&#x20;that&#x20;will&#x20;fall&#x20;within&#x20;Safari&#039;s&#x20;safe&#x20;file&#x20;list&#x20;that&#x20;will&#x20;download&#x20;and&#x20;execute&#x20;without&#x20;user&#x20;input.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Safari&#x20;2.&#x20;Select&#x20;Safari&#x20;from&#x20;the&#x20;menu&#x20;bar&#x20;3.&#x20;Select&#x20;Preferences&#x20;4.&#x20;Select&#x20;General&#x20;5.&#x20;Uncheck&#x20;Open&#x20;&quot;safe&quot;&#x20;files&#x20;after&#x20;downloading&#x20;&#x20;&#x20;&#x20;Alternatively&#x20;run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;com.apple.Safari&#x20;AutoOpenSafeDownloads&#x20;-boolean&#x20;no','[{\"cis\": [\"6.3\"]}]'),(9000,'Verify&#x20;all&#x20;Apple&#x20;provided&#x20;software&#x20;is&#x20;current','Software&#x20;vendors&#x20;release&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates&#x20;for&#x20;their&#x20;products&#x20;when&#x20;security&#x20;vulnerabilities&#x20;are&#x20;discovered.&#x20;There&#x20;is&#x20;no&#x20;simple&#x20;way&#x20;to&#x20;complete&#x20;this&#x20;action&#x20;without&#x20;a&#x20;network&#x20;connection&#x20;to&#x20;an&#x20;Apple&#x20;software&#x20;repository.&#x20;Please&#x20;ensure&#x20;appropriate&#x20;access&#x20;for&#x20;this&#x20;control.&#x20;This&#x20;check&#x20;is&#x20;only&#x20;for&#x20;what&#x20;Apple&#x20;provides&#x20;through&#x20;software&#x20;update.','It&#x20;is&#x20;important&#x20;that&#x20;these&#x20;updates&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;the&#x20;identified&#x20;vulnerabilities.','','1.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following:&#x20;softwareupdate&#x20;-l&#x20;&#x20;2.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following&#x20;for&#x20;any&#x20;packages&#x20;that&#x20;show&#x20;up&#x20;in&#x20;step&#x20;1:&#x20;sudo&#x20;softwareupdate&#x20;-i&#x20;packagename','[{\"cis\": [\"1.1\"]}]'),(9001,'Enable&#x20;Auto&#x20;Update','Auto&#x20;Update&#x20;verifies&#x20;that&#x20;your&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates.&#x20;If&#x20;&quot;Automatically&#x20;check&#x20;for&#x20;updates&quot;&#x20;is&#x20;not&#x20;selected&#x20;background&#x20;updates&#x20;for&#x20;new&#x20;malware&#x20;definition&#x20;files&#x20;from&#x20;Apple&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper&#x20;will&#x20;not&#x20;occur.','It&#x20;is&#x20;important&#x20;that&#x20;a&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;updates&#x20;applied&#x20;so&#x20;as&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;identified&#x20;vulnerabilities.','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;AutomaticCheckEnabled&#x20;-int&#x20;1','[{\"cis\": [\"1.2\"]}]'),(9002,'Enable&#x20;app&#x20;update&#x20;installs','Ensure&#x20;that&#x20;application&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;admin&#x20;privileges&#x20;for&#x20;end&#x20;users.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdate&#x20;-bool&#x20;TRUE&#x20;&#x20;&#x20;&#x20;The&#x20;remediation&#x20;requires&#x20;a&#x20;log&#x20;out&#x20;and&#x20;log&#x20;in&#x20;to&#x20;show&#x20;in&#x20;the&#x20;GUI.&#x20;Please&#x20;note&#x20;that.','[{\"cis\": [\"1.3\"]}]'),(9003,'Enable&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;update&#x20;installs','Ensure&#x20;that&#x20;system&#x20;and&#x20;security&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;&#x20;This&#x20;setting&#x20;enables&#x20;definition&#x20;updates&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper,&#x20;with&#x20;this&#x20;setting&#x20;in&#x20;place&#x20;new&#x20;malware&#x20;and&#x20;adware&#x20;that&#x20;Apple&#x20;has&#x20;added&#x20;to&#x20;the&#x20;list&#x20;of&#x20;malware&#x20;or&#x20;untrusted&#x20;software&#x20;will&#x20;not&#x20;execute.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;end&#x20;user&#x20;admin&#x20;rights.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;ConfigDataInstall&#x20;-bool&#x20;true&#x20;&amp;&amp;&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;CriticalUpdateInstall&#x20;-bool&#x20;true','[{\"cis\": [\"1.4\"]}]'),(9004,'Enable&#x20;macOS&#x20;update&#x20;installs','Ensure&#x20;that&#x20;macOS&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;This&#x20;setting&#x20;enables&#x20;macOS&#x20;updates&#x20;to&#x20;be&#x20;automatically&#x20;installed.&#x20;Some&#x20;environments&#x20;will&#x20;want&#x20;to&#x20;approve&#x20;and&#x20;test&#x20;updates&#x20;before&#x20;they&#x20;are&#x20;delivered.&#x20;It&#x20;is&#x20;best&#x20;practice&#x20;to&#x20;test&#x20;first&#x20;where&#x20;updates&#x20;can&#x20;and&#x20;have&#x20;caused&#x20;disruptions&#x20;to&#x20;operations.&#x20;Automatic&#x20;updates&#x20;should&#x20;be&#x20;turned&#x20;off&#x20;where&#x20;changes&#x20;are&#x20;tightly&#x20;controlled&#x20;and&#x20;there&#x20;are&#x20;mature&#x20;testing&#x20;and&#x20;approval&#x20;processes.&#x20;Automatic&#x20;updates&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off&#x20;so&#x20;the&#x20;admin&#x20;can&#x20;call&#x20;the&#x20;users&#x20;first&#x20;to&#x20;let&#x20;them&#x20;know&#x20;it&#039;s&#x20;ok&#x20;to&#x20;install.&#x20;A&#x20;dependable&#x20;repeatable&#x20;process&#x20;involving&#x20;a&#x20;patch&#x20;agent&#x20;or&#x20;remote&#x20;management&#x20;tool&#x20;should&#x20;be&#x20;in&#x20;place&#x20;before&#x20;auto-updates&#x20;are&#x20;turned&#x20;off.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdateRestartRequired&#x20;-bool&#x20;TRUE','[{\"cis\": [\"1.5\"]}]'),(9005,'Enable&#x20;&quot;Set&#x20;time&#x20;and&#x20;date&#x20;automatically&quot;','Correct&#x20;date&#x20;and&#x20;time&#x20;settings&#x20;are&#x20;required&#x20;for&#x20;authentication&#x20;protocols,&#x20;file&#x20;creation,&#x20;modification&#x20;dates&#x20;and&#x20;log&#x20;entries.&#x20;&#x20;Note:&#x20;If&#x20;your&#x20;organization&#x20;has&#x20;internal&#x20;time&#x20;servers,&#x20;enter&#x20;them&#x20;here.&#x20;Enterprise&#x20;mobile&#x20;devices&#x20;may&#x20;need&#x20;to&#x20;use&#x20;a&#x20;mix&#x20;of&#x20;internal&#x20;and&#x20;external&#x20;time&#x20;servers.&#x20;If&#x20;multiple&#x20;servers&#x20;are&#x20;required&#x20;use&#x20;the&#x20;Date&#x20;&amp;&#x20;Time&#x20;System&#x20;Preference&#x20;with&#x20;each&#x20;server&#x20;separated&#x20;by&#x20;a&#x20;space.','Kerberos&#x20;may&#x20;not&#x20;operate&#x20;correctly&#x20;if&#x20;the&#x20;time&#x20;on&#x20;the&#x20;Mac&#x20;is&#x20;off&#x20;by&#x20;more&#x20;than&#x20;5&#x20;minutes.&#x20;&#x20;This&#x20;in&#x20;turn&#x20;can&#x20;affect&#x20;Apple&#039;s&#x20;single&#x20;sign-on&#x20;feature,&#x20;Active&#x20;Directory&#x20;logons,&#x20;and&#x20;other&#x20;features.','','Run&#x20;the&#x20;following&#x20;commands:&#x20;sudo&#x20;systemsetup&#x20;-setnetworktimeserver&#x20;&lt;timeserver&gt;&#x20;&#x20;&#x20;&#x20;sudo&#x20;systemsetup&#x20;-setusingnetworktime&#x20;on','[{\"cis\": [\"2.2.1\"]}]'),(9006,'Disable&#x20;Remote&#x20;Apple&#x20;Events','Apple&#x20;Events&#x20;is&#x20;a&#x20;technology&#x20;that&#x20;allows&#x20;one&#x20;program&#x20;to&#x20;communicate&#x20;with&#x20;other&#x20;programs.&#x20;Remote&#x20;Apple&#x20;Events&#x20;allows&#x20;a&#x20;program&#x20;on&#x20;one&#x20;computer&#x20;to&#x20;communicate&#x20;with&#x20;a&#x20;program&#x20;on&#x20;a&#x20;different&#x20;computer.','Disabling&#x20;Remote&#x20;Apple&#x20;Events&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;program&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremoteappleevents&#x20;off','[{\"cis\": [\"2.4.1\"]}]'),(9007,'Disable&#x20;Printer&#x20;Sharing','By&#x20;enabling&#x20;Printer&#x20;sharing&#x20;the&#x20;computer&#x20;is&#x20;set&#x20;up&#x20;as&#x20;a&#x20;print&#x20;server&#x20;to&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;computers.&#x20;Dedicated&#x20;print&#x20;servers&#x20;or&#x20;direct&#x20;IP&#x20;printing&#x20;should&#x20;be&#x20;used&#x20;instead.','Disabling&#x20;Printer&#x20;Sharing&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;attackers&#x20;attempting&#x20;to&#x20;exploit&#x20;the&#x20;print&#x20;server&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;system.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Sharing&#x20;3.&#x20;Uncheck&#x20;Printer&#x20;Sharing','[{\"cis\": [\"2.4.4\"]}]'),(9008,'Disable&#x20;Remote&#x20;Login','Remote&#x20;Login&#x20;allows&#x20;an&#x20;interactive&#x20;terminal&#x20;connection&#x20;to&#x20;a&#x20;computer.','Disabling&#x20;Remote&#x20;Login&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system&#x20;via&#x20;Secure&#x20;Shell&#x20;&#40;SSH&#41;.&#x20;While&#x20;SSH&#x20;is&#x20;an&#x20;industry&#x20;standard&#x20;to&#x20;connect&#x20;to&#x20;posix&#x20;servers,&#x20;the&#x20;scope&#x20;of&#x20;the&#x20;benchmark&#x20;is&#x20;for&#x20;Apple&#x20;macOS&#x20;clients,&#x20;not&#x20;servers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremotelogin&#x20;off','[{\"cis\": [\"2.4.5\"]}]'),(9009,'Disable&#x20;File&#x20;Sharing','Apple&#039;s&#x20;File&#x20;Sharing&#x20;uses&#x20;a&#x20;combination&#x20;of&#x20;SMB&#x20;&#40;Windows&#x20;sharing&#41;&#x20;and&#x20;AFP&#x20;&#40;Mac&#x20;sharing&#41;','By&#x20;disabling&#x20;file&#x20;sharing,&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;and&#x20;risk&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;files&#x20;stored&#x20;on&#x20;the&#x20;system&#x20;is&#x20;reduced.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;AFP&#x20;from&#x20;the&#x20;command&#x20;line:&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.AppleFileServer.plist&#x20;&#x20;-&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;SMB&#x20;sharing&#x20;from&#x20;the&#x20;CLI:&#x20;&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.smbd.plist','[{\"cis\": [\"2.4.8\"]}]'),(9010,'Disable&#x20;&quot;Wake&#x20;for&#x20;network&#x20;access&quot;','This&#x20;feature&#x20;allows&#x20;other&#x20;users&#x20;to&#x20;be&#x20;able&#x20;to&#x20;access&#x20;your&#x20;computer&#039;s&#x20;shared&#x20;resources,&#x20;such&#x20;as&#x20;shared&#x20;printers&#x20;or&#x20;iTunes&#x20;playlists,&#x20;even&#x20;when&#x20;your&#x20;computer&#x20;is&#x20;in&#x20;sleep&#x20;mode.&#x20;In&#x20;a&#x20;closed&#x20;network&#x20;when&#x20;only&#x20;authorized&#x20;devices&#x20;could&#x20;wake&#x20;a&#x20;computer&#x20;it&#x20;could&#x20;be&#x20;valuable&#x20;to&#x20;wake&#x20;computers&#x20;in&#x20;order&#x20;to&#x20;do&#x20;management&#x20;push&#x20;activity.&#x20;Where&#x20;mobile&#x20;workstations&#x20;and&#x20;agents&#x20;exist&#x20;the&#x20;device&#x20;will&#x20;more&#x20;likely&#x20;check&#x20;in&#x20;to&#x20;receive&#x20;updates&#x20;when&#x20;already&#x20;awake.&#x20;Mobile&#x20;devices&#x20;should&#x20;not&#x20;be&#x20;listening&#x20;for&#x20;signals&#x20;on&#x20;unmanaged&#x20;network&#x20;where&#x20;untrusted&#x20;devices&#x20;could&#x20;send&#x20;wake&#x20;signals.','Disabling&#x20;this&#x20;feature&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;remotely&#x20;waking&#x20;the&#x20;system&#x20;and&#x20;gaining&#x20;access.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;&#x20;sudo&#x20;pmset&#x20;-a&#x20;womp&#x20;0&#x20;&#x20;&#x20;Note:&#x20;The&#x20;-c&#x20;flag&#x20;means&#x20;&quot;wall&#x20;power.&quot;&#x20;Different&#x20;settings&#x20;must&#x20;be&#x20;used&#x20;for&#x20;other&#x20;power&#x20;sources.','[{\"cis\": [\"2.5.1\"]}]'),(9011,'Enable&#x20;FileVault','FileVault&#x20;secures&#x20;a&#x20;system&#039;s&#x20;data&#x20;by&#x20;automatically&#x20;encrypting&#x20;its&#x20;boot&#x20;volume&#x20;and&#x20;requiring&#x20;a&#x20;password&#x20;or&#x20;recovery&#x20;key&#x20;to&#x20;access&#x20;it.','Encrypting&#x20;sensitive&#x20;data&#x20;minimizes&#x20;the&#x20;likelihood&#x20;of&#x20;unauthorized&#x20;users&#x20;gaining&#x20;access&#x20;to&#x20;it.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Security&#x20;&amp;&#x20;Privacy&#x20;3.&#x20;Select&#x20;FileVault&#x20;4.&#x20;Select&#x20;Turn&#x20;on&#x20;FileVault','[{\"cis\": [\"2.6.1.1\"]}]'),(9012,'Enable&#x20;Gatekeeper','Gatekeeper&#x20;is&#x20;Apple&#039;s&#x20;application&#x20;white-listing&#x20;control&#x20;that&#x20;restricts&#x20;downloaded&#x20;applications&#x20;from&#x20;launching.&#x20;It&#x20;functions&#x20;as&#x20;a&#x20;control&#x20;to&#x20;limit&#x20;applications&#x20;from&#x20;unverified&#x20;sources&#x20;from&#x20;running&#x20;without&#x20;authorization.','Disallowing&#x20;unsigned&#x20;software&#x20;will&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;unauthorized&#x20;or&#x20;malicious&#x20;applications&#x20;from&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;spctl&#x20;--master-enable','[{\"cis\": [\"2.6.2\"]}]'),(9013,'Enable&#x20;Firewall','A&#x20;firewall&#x20;is&#x20;a&#x20;piece&#x20;of&#x20;software&#x20;that&#x20;blocks&#x20;unwanted&#x20;incoming&#x20;connections&#x20;to&#x20;a&#x20;system.&#x20;&#x20;Apple&#x20;has&#x20;posted&#x20;general&#x20;documentation&#x20;about&#x20;the&#x20;application&#x20;firewall.','A&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;unauthorized&#x20;users&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;your&#x20;system&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.alf&#x20;globalstate&#x20;-&#x20;int&#x20;&lt;value&gt;&#x20;&#x20;&#x20;&#x20;Where&#x20;&lt;value&gt;&#x20;is:&#x20;-&#x20;1&#x20;=&#x20;on&#x20;for&#x20;specific&#x20;services&#x20;-&#x20;2&#x20;=&#x20;on&#x20;for&#x20;essential&#x20;services','[{\"cis\": [\"2.6.3\"]}]'),(9014,'Enable&#x20;Firewall&#x20;Stealth&#x20;Mode','While&#x20;in&#x20;Stealth&#x20;mode&#x20;the&#x20;computer&#x20;will&#x20;not&#x20;respond&#x20;to&#x20;unsolicited&#x20;probes,&#x20;dropping&#x20;that&#x20;traffic.','Stealth&#x20;mode&#x20;on&#x20;the&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;system&#x20;discovery&#x20;tools&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;/usr/libexec/ApplicationFirewall/socketfilterfw&#x20;--setstealthmode&#x20;on','[{\"cis\": [\"2.6.4\"]}]'),(9015,'Enable&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;in&#x20;terminal.app','Secure&#x20;Keyboard&#x20;Entry&#x20;prevents&#x20;other&#x20;applications&#x20;on&#x20;the&#x20;system&#x20;and/or&#x20;network&#x20;from&#x20;detecting&#x20;and&#x20;recording&#x20;what&#x20;is&#x20;typed&#x20;into&#x20;Terminal.','Enabling&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;minimizes&#x20;the&#x20;risk&#x20;of&#x20;a&#x20;key&#x20;logger&#x20;from&#x20;detecting&#x20;what&#x20;is&#x20;entered&#x20;in&#x20;Terminal.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Terminal&#x20;2.&#x20;Select&#x20;Terminal&#x20;3.&#x20;Select&#x20;Secure&#x20;Keyboard&#x20;Entry','[{\"cis\": [\"2.10\"]}]'),(9016,'Java&#x20;6&#x20;is&#x20;not&#x20;the&#x20;default&#x20;Java&#x20;runtime','Apple&#x20;had&#x20;made&#x20;Java&#x20;part&#x20;of&#x20;the&#x20;core&#x20;Operating&#x20;System&#x20;for&#x20;macOS.&#x20;Apple&#x20;is&#x20;no&#x20;longer&#x20;providing&#x20;Java&#x20;updates&#x20;for&#x20;macOS&#x20;and&#x20;updated&#x20;JREs&#x20;and&#x20;JDK&#x20;are&#x20;made&#x20;available&#x20;by&#x20;Oracle.&#x20;&#x20;The&#x20;latest&#x20;version&#x20;of&#x20;Java&#x20;6&#x20;made&#x20;available&#x20;by&#x20;Apple&#x20;has&#x20;many&#x20;unpatched&#x20;vulnerabilities&#x20;and&#x20;should&#x20;not&#x20;be&#x20;the&#x20;default&#x20;runtime&#x20;for&#x20;Java&#x20;applets&#x20;that&#x20;request&#x20;one&#x20;from&#x20;the&#x20;Operating&#x20;System','Java&#x20;has&#x20;been&#x20;one&#x20;of&#x20;the&#x20;most&#x20;exploited&#x20;environments&#x20;and&#x20;Java&#x20;6,&#x20;which&#x20;was&#x20;provided&#x20;as&#x20;an&#x20;OS&#x20;component&#x20;by&#x20;Apple,&#x20;is&#x20;no&#x20;longer&#x20;maintained&#x20;by&#x20;Apple&#x20;or&#x20;Oracle.&#x20;The&#x20;old&#x20;versions&#x20;provided&#x20;by&#x20;Apple&#x20;are&#x20;both&#x20;unsupported&#x20;and&#x20;missing&#x20;the&#x20;more&#x20;modern&#x20;security&#x20;controls&#x20;that&#x20;have&#x20;limited&#x20;current&#x20;exploits.&#x20;The&#x20;EOL&#x20;version&#x20;may&#x20;still&#x20;be&#x20;installed&#x20;and&#x20;should&#x20;be&#x20;removed&#x20;from&#x20;the&#x20;computer&#x20;or&#x20;not&#x20;be&#x20;in&#x20;the&#x20;default&#x20;path.','','Java&#x20;6&#x20;can&#x20;be&#x20;removed&#x20;completely&#x20;or,&#x20;if&#x20;required&#x20;Java&#x20;applications&#x20;will&#x20;only&#x20;work&#x20;with&#x20;Java&#x20;6,&#x20;a&#x20;custom&#x20;path&#x20;can&#x20;be&#x20;used.&#x20;Apple&#x20;is&#x20;likely&#x20;to&#x20;finally&#x20;pull&#x20;the&#x20;plug&#x20;on&#x20;Java&#x20;6&#x20;in&#x20;upcoming&#x20;macOS&#x20;versions&#x20;so&#x20;any&#x20;applications&#x20;that&#x20;still&#x20;require&#x20;Java&#x20;6&#x20;will&#x20;likely&#x20;soon&#x20;be&#x20;unavailable.','[{\"cis\": [\"2.11\"]}]'),(9017,'Enable&#x20;security&#x20;auditing','macOS&#039;s&#x20;audit&#x20;facility,&#x20;auditd,&#x20;receives&#x20;notifications&#x20;from&#x20;the&#x20;kernel&#x20;when&#x20;certain&#x20;system&#x20;calls,&#x20;such&#x20;as&#x20;open,&#x20;fork,&#x20;and&#x20;exit,&#x20;are&#x20;made.&#x20;These&#x20;notifications&#x20;are&#x20;captured&#x20;and&#x20;written&#x20;to&#x20;an&#x20;audit&#x20;log.','Logs&#x20;generated&#x20;by&#x20;auditd&#x20;may&#x20;be&#x20;useful&#x20;when&#x20;investigating&#x20;a&#x20;security&#x20;incident&#x20;as&#x20;they&#x20;may&#x20;help&#x20;reveal&#x20;the&#x20;vulnerable&#x20;application&#x20;and&#x20;the&#x20;actions&#x20;taken&#x20;by&#x20;a&#x20;malicious&#x20;actor.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;launchctl&#x20;load&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.auditd.plist','[{\"cis\": [\"3.1\"]}]'),(9018,'Configure&#x20;Security&#x20;Auditing&#x20;Flags','Auditing&#x20;is&#x20;the&#x20;capture&#x20;and&#x20;maintenance&#x20;of&#x20;information&#x20;about&#x20;security-related&#x20;events.','Maintaining&#x20;an&#x20;audit&#x20;trail&#x20;of&#x20;system&#x20;activity&#x20;logs&#x20;can&#x20;help&#x20;identify&#x20;configuration&#x20;errors,&#x20;troubleshoot&#x20;service&#x20;disruptions,&#x20;and&#x20;analyze&#x20;compromises&#x20;or&#x20;attacks&#x20;that&#x20;have&#x20;occurred,&#x20;have&#x20;begun,&#x20;or&#x20;are&#x20;about&#x20;to&#x20;begin.&#x20;Audit&#x20;logs&#x20;are&#x20;necessary&#x20;to&#x20;provide&#x20;a&#x20;trail&#x20;of&#x20;evidence&#x20;in&#x20;case&#x20;the&#x20;system&#x20;or&#x20;network&#x20;is&#x20;compromised.','','1.&#x20;Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;edit&#x20;the&#x20;/etc/security/audit_control&#x20;file&#x20;2.&#x20;Find&#x20;the&#x20;line&#x20;beginning&#x20;with&#x20;&quot;flags&quot;&#x20;3.&#x20;Add&#x20;the&#x20;following&#x20;flags:&#x20;lo,&#x20;ad,&#x20;fd,&#x20;fm,&#x20;-all.&#x20;&#x20;4.&#x20;Save&#x20;the&#x20;file.','[{\"cis\": [\"3.2\"]}]'),(9019,'Disable&#x20;Bonjour&#x20;advertising&#x20;service','Bonjour&#x20;is&#x20;an&#x20;auto-discovery&#x20;mechanism&#x20;for&#x20;TCP/IP&#x20;devices&#x20;which&#x20;enumerate&#x20;devices&#x20;and&#x20;services&#x20;within&#x20;a&#x20;local&#x20;subnet.&#x20;DNS&#x20;on&#x20;macOS&#x20;is&#x20;integrated&#x20;with&#x20;Bonjour&#x20;and&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off,&#x20;but&#x20;the&#x20;Bonjour&#x20;advertising&#x20;service&#x20;can&#x20;be&#x20;disabled.','Bonjour&#x20;can&#x20;simplify&#x20;device&#x20;discovery&#x20;from&#x20;an&#x20;internal&#x20;rogue&#x20;or&#x20;compromised&#x20;host.&#x20;An&#x20;attacker&#x20;could&#x20;use&#x20;Bonjour&#039;s&#x20;multicast&#x20;DNS&#x20;feature&#x20;to&#x20;discover&#x20;a&#x20;vulnerable&#x20;or&#x20;poorly-&#x20;configured&#x20;service&#x20;or&#x20;additional&#x20;information&#x20;to&#x20;aid&#x20;a&#x20;targeted&#x20;attack.&#x20;Implementing&#x20;this&#x20;control&#x20;disables&#x20;the&#x20;continuous&#x20;broadcasting&#x20;of&#x20;&quot;I&#039;m&#x20;here!&quot;&#x20;messages.&#x20;Typical&#x20;end-user&#x20;endpoints&#x20;should&#x20;not&#x20;have&#x20;to&#x20;advertise&#x20;services&#x20;to&#x20;other&#x20;computers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.mDNSResponder.plist&#x20;NoMulticastAdvertisements','[{\"cis\": [\"4.1\"]}]'),(9020,'Ensure&#x20;http&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;Apache&#x20;web&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;Personal&#x20;web&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Personal&#x20;web&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;Apache&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;&#x20;Web&#x20;sharing&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;web&#x20;servers&#x20;and&#x20;appropriate&#x20;cloud&#x20;services.','Web&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;webservers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Stop&#x20;the&#x20;Web&#x20;Server&#x20;sudo&#x20;apachectl&#x20;stop&#x20;&#x20;&#x20;&#x20;Ensure&#x20;that&#x20;the&#x20;web&#x20;server&#x20;will&#x20;not&#x20;auto-start&#x20;at&#x20;boot&#x20;sudo&#x20;defaults&#x20;write&#x20;/System/Library/LaunchDaemons/org.apache.httpd&#x20;Disabled&#x20;-&#x20;bool&#x20;true','[{\"cis\": [\"4.4\"]}]'),(9021,'Ensure&#x20;FTP&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;FTP&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;FTP&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Running&#x20;an&#x20;FTP&#x20;server&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;The&#x20;FTP&#x20;server&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;FTP&#x20;servers&#x20;meet&#x20;a&#x20;specialized&#x20;need&#x20;to&#x20;distribute&#x20;files&#x20;without&#x20;strong&#x20;authentication&#x20;and&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;servers.&#x20;Cloud&#x20;services&#x20;or&#x20;other&#x20;distribution&#x20;methods&#x20;should&#x20;be&#x20;considered','FTP&#x20;servers&#x20;should&#x20;not&#x20;be&#x20;run&#x20;on&#x20;an&#x20;end&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;servers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Stop&#x20;the&#x20;ftp&#x20;Server&#x20;sudo&#x20;-s&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/ftp.plist','[{\"cis\": [\"4.5\"]}]'),(9022,'Ensure&#x20;nfs&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;can&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;fileserver.&#x20;NFS&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;mount&#x20;shares&#x20;and&#x20;gain&#x20;access&#x20;to&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;File&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;NFSD&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;export&#x20;shares&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.','File&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop,&#x20;dedicated&#x20;servers&#x20;should&#x20;be&#x20;used.&#x20;&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Stop&#x20;the&#x20;NFS&#x20;Server&#x20;sudo&#x20;nfsd&#x20;disable&#x20;&#x20;&#x20;&#x20;Remove&#x20;the&#x20;exported&#x20;Directory&#x20;listing&#x20;rm&#x20;/etc/export','[{\"cis\": [\"4.6\"]}]'),(9023,'Do&#x20;not&#x20;enable&#x20;the&#x20;&quot;root&quot;&#x20;account','The&#x20;root&#x20;account&#x20;is&#x20;a&#x20;superuser&#x20;account&#x20;that&#x20;has&#x20;access&#x20;privileges&#x20;to&#x20;perform&#x20;any&#x20;actions&#x20;and&#x20;read/write&#x20;to&#x20;any&#x20;file&#x20;on&#x20;the&#x20;computer.&#x20;With&#x20;some&#x20;Linux&#x20;distros&#x20;the&#x20;system&#x20;administrator&#x20;may&#x20;commonly&#x20;uses&#x20;the&#x20;root&#x20;account&#x20;to&#x20;perform&#x20;administrative&#x20;functions.','Enabling&#x20;and&#x20;using&#x20;the&#x20;root&#x20;account&#x20;puts&#x20;the&#x20;system&#x20;at&#x20;risk&#x20;since&#x20;any&#x20;successful&#x20;exploit&#x20;or&#x20;mistake&#x20;while&#x20;the&#x20;root&#x20;account&#x20;is&#x20;in&#x20;use&#x20;could&#x20;have&#x20;unlimited&#x20;access&#x20;privileges&#x20;within&#x20;the&#x20;system.&#x20;Using&#x20;the&#x20;sudo&#x20;command&#x20;allows&#x20;users&#x20;to&#x20;perform&#x20;functions&#x20;as&#x20;a&#x20;root&#x20;user&#x20;while&#x20;limiting&#x20;and&#x20;password&#x20;protecting&#x20;the&#x20;access&#x20;privileges.&#x20;By&#x20;default&#x20;the&#x20;root&#x20;account&#x20;is&#x20;not&#x20;enabled&#x20;on&#x20;a&#x20;macOS&#x20;computer.&#x20;An&#x20;administrator&#x20;can&#x20;escalate&#x20;privileges&#x20;using&#x20;the&#x20;sudo&#x20;command&#x20;&#40;use&#x20;-s&#x20;or&#x20;-i&#x20;to&#x20;get&#x20;a&#x20;root&#x20;shell&#41;.','','Open&#x20;System&#x20;Preferences,&#x20;Uses&#x20;&amp;&#x20;Groups.&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;In&#x20;the&#x20;Network&#x20;Account&#x20;Server&#x20;section,&#x20;click&#x20;Join&#x20;or&#x20;Edit.&#x20;Click&#x20;Open&#x20;Directory&#x20;Utility.&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;Select&#x20;the&#x20;Edit&#x20;menu&#x20;&gt;&#x20;Disable&#x20;Root&#x20;User.','[{\"cis\": [\"5.8\"]}]'),(9024,'Disable&#x20;automatic&#x20;login','The&#x20;automatic&#x20;login&#x20;feature&#x20;saves&#x20;a&#x20;user&#039;s&#x20;system&#x20;access&#x20;credentials&#x20;and&#x20;bypasses&#x20;the&#x20;login&#x20;screen,&#x20;instead&#x20;the&#x20;system&#x20;automatically&#x20;loads&#x20;to&#x20;the&#x20;user&#039;s&#x20;desktop&#x20;screen.','Disabling&#x20;automatic&#x20;login&#x20;decreases&#x20;the&#x20;likelihood&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;a&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;delete&#x20;/Library/Preferences/com.apple.loginwindow&#x20;autoLoginUser','[{\"cis\": [\"5.9\"]}]'),(9025,'System&#x20;Integrity&#x20;Protection&#x20;status','System&#x20;Integrity&#x20;Protection&#x20;is&#x20;a&#x20;security&#x20;feature&#x20;introduced&#x20;in&#x20;OS&#x20;X&#x20;10.11&#x20;El&#x20;Capitan.&#x20;&#x20;System&#x20;Integrity&#x20;Protection&#x20;restricts&#x20;access&#x20;to&#x20;System&#x20;domain&#x20;locations&#x20;and&#x20;restricts&#x20;runtime&#x20;attachment&#x20;to&#x20;system&#x20;processes.&#x20;Any&#x20;attempt&#x20;to&#x20;attempt&#x20;to&#x20;inspect&#x20;or&#x20;attach&#x20;to&#x20;a&#x20;system&#x20;process&#x20;will&#x20;fail.&#x20;Kernel&#x20;Extensions&#x20;are&#x20;now&#x20;restricted&#x20;to&#x20;/Library/Extensions&#x20;and&#x20;are&#x20;required&#x20;to&#x20;be&#x20;signed&#x20;with&#x20;a&#x20;Developer&#x20;ID.','Running&#x20;without&#x20;System&#x20;Integrity&#x20;Protection&#x20;on&#x20;a&#x20;production&#x20;system&#x20;runs&#x20;the&#x20;risk&#x20;of&#x20;the&#x20;modification&#x20;of&#x20;system&#x20;binaries&#x20;or&#x20;code&#x20;injection&#x20;of&#x20;system&#x20;processes&#x20;that&#x20;would&#x20;otherwise&#x20;be&#x20;protected&#x20;by&#x20;SIP.','','Perform&#x20;the&#x20;following&#x20;while&#x20;booted&#x20;in&#x20;macOS&#x20;Recovery&#x20;Partition.&#x20;&#x20;1.&#x20;Select&#x20;Terminal&#x20;from&#x20;the&#x20;Utilities&#x20;menu&#x20;&#x20;&#x20;&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;/usr/bin/csrutil&#x20;enable&#x20;&#x20;&#x20;&#x20;3.&#x20;The&#x20;output&#x20;should&#x20;be:&#x20;Successfully&#x20;enabled&#x20;System&#x20;Integrity&#x20;Protection.&#x20;Please&#x20;restart&#x20;the&#x20;machine&#x20;for&#x20;the&#x20;changes&#x20;to&#x20;take&#x20;effect.&#x20;&#x20;&#x20;&#x20;4.&#x20;Reboot.','[{\"cis\": [\"5.20\"]}]'),(9026,'Disable&#x20;guest&#x20;account&#x20;login','The&#x20;guest&#x20;account&#x20;allows&#x20;users&#x20;access&#x20;to&#x20;the&#x20;system&#x20;without&#x20;having&#x20;to&#x20;create&#x20;an&#x20;account&#x20;or&#x20;password.&#x20;Guest&#x20;users&#x20;are&#x20;unable&#x20;to&#x20;make&#x20;setting&#x20;changes,&#x20;cannot&#x20;remotely&#x20;login&#x20;to&#x20;the&#x20;system&#x20;and&#x20;all&#x20;created&#x20;files,&#x20;caches,&#x20;and&#x20;passwords&#x20;are&#x20;deleted&#x20;upon&#x20;logging&#x20;out.','Disabling&#x20;the&#x20;guest&#x20;account&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;untrusted&#x20;user&#x20;doing&#x20;basic&#x20;reconnaissance&#x20;and&#x20;possibly&#x20;using&#x20;privilege&#x20;escalation&#x20;attacks&#x20;to&#x20;take&#x20;control&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.loginwindow&#x20;GuestEnabled&#x20;-&#x20;bool&#x20;NO','[{\"cis\": [\"6.1.3\"]}]'),(9027,'Remove&#x20;Guest&#x20;home&#x20;folder','The&#x20;guest&#x20;account&#x20;login&#x20;should&#x20;have&#x20;been&#x20;disabled,&#x20;so&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;the&#x20;legacy&#x20;Guest&#x20;home&#x20;folder&#x20;to&#x20;remain&#x20;in&#x20;the&#x20;file&#x20;system.&#x20;When&#x20;normal&#x20;user&#x20;accounts&#x20;are&#x20;removed&#x20;you&#x20;have&#x20;the&#x20;option&#x20;to&#x20;archive&#x20;it,&#x20;leave&#x20;it&#x20;in&#x20;place&#x20;or&#x20;delete.&#x20;In&#x20;the&#x20;case&#x20;of&#x20;the&#x20;guest&#x20;folder&#x20;the&#x20;folder&#x20;remains&#x20;in&#x20;place&#x20;without&#x20;a&#x20;GUI&#x20;option&#x20;to&#x20;remove&#x20;it.&#x20;If&#x20;at&#x20;some&#x20;point&#x20;in&#x20;the&#x20;future&#x20;a&#x20;Guest&#x20;account&#x20;is&#x20;needed&#x20;it&#x20;will&#x20;be&#x20;re-created.&#x20;The&#x20;presence&#x20;of&#x20;the&#x20;Guest&#x20;home&#x20;folder&#x20;can&#x20;cause&#x20;automated&#x20;audits&#x20;to&#x20;fail&#x20;when&#x20;looking&#x20;for&#x20;compliant&#x20;settings&#x20;within&#x20;all&#x20;User&#x20;folders&#x20;as&#x20;well.&#x20;Rather&#x20;than&#x20;ignoring&#x20;the&#x20;folders&#x20;continued&#x20;existence&#x20;it&#x20;is&#x20;best&#x20;removed.','The&#x20;Guest&#x20;home&#x20;folders&#x20;are&#x20;unneeded&#x20;after&#x20;the&#x20;Guest&#x20;account&#x20;is&#x20;disabled&#x20;and&#x20;could&#x20;be&#x20;used&#x20;inappropriately.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;rm&#x20;-R&#x20;/Users/Guest&#x20;&#x20;2.&#x20;Make&#x20;sure&#x20;there&#x20;is&#x20;no&#x20;output','[{\"cis\": [\"6.1.5\"]}]'),(9028,'Turn&#x20;on&#x20;filename&#x20;extensions','A&#x20;filename&#x20;extension&#x20;is&#x20;a&#x20;suffix&#x20;added&#x20;to&#x20;a&#x20;base&#x20;filename&#x20;that&#x20;indicates&#x20;the&#x20;base&#x20;filename&#039;s&#x20;file&#x20;format.','Visible&#x20;filename&#x20;extensions&#x20;allows&#x20;the&#x20;user&#x20;to&#x20;identify&#x20;the&#x20;file&#x20;type&#x20;and&#x20;the&#x20;application&#x20;it&#x20;is&#x20;associated&#x20;with&#x20;which&#x20;leads&#x20;to&#x20;quick&#x20;identification&#x20;of&#x20;misrepresented&#x20;malicious&#x20;files.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Select&#x20;Finder&#x20;2.&#x20;Select&#x20;Preferences&#x20;3.&#x20;Check&#x20;Show&#x20;all&#x20;filename&#x20;extensions&#x20;&#x20;&#x20;&#x20;Alternatively,&#x20;use&#x20;the&#x20;following&#x20;command:&#x20;defaults&#x20;write&#x20;NSGlobalDomain&#x20;AppleShowAllExtensions&#x20;-bool&#x20;true','[{\"cis\": [\"6.2\"]}]'),(9029,'Disable&#x20;the&#x20;automatic&#x20;run&#x20;of&#x20;safe&#x20;files&#x20;in&#x20;Safari','Safari&#x20;will&#x20;automatically&#x20;run&#x20;or&#x20;execute&#x20;what&#x20;it&#x20;considers&#x20;safe&#x20;files.&#x20;This&#x20;can&#x20;include&#x20;installers&#x20;and&#x20;other&#x20;files&#x20;that&#x20;execute&#x20;on&#x20;the&#x20;operating&#x20;system.&#x20;Safari&#x20;bases&#x20;file&#x20;safety&#x20;by&#x20;using&#x20;a&#x20;list&#x20;of&#x20;filetypes&#x20;maintained&#x20;by&#x20;Apple.&#x20;The&#x20;list&#x20;of&#x20;files&#x20;include&#x20;text,&#x20;image,&#x20;video&#x20;and&#x20;archive&#x20;formats&#x20;that&#x20;would&#x20;be&#x20;run&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;OS&#x20;rather&#x20;than&#x20;the&#x20;browser.','Hackers&#x20;have&#x20;taken&#x20;advantage&#x20;of&#x20;this&#x20;setting&#x20;via&#x20;drive-by&#x20;attacks.&#x20;These&#x20;attacks&#x20;occur&#x20;when&#x20;a&#x20;user&#x20;visits&#x20;a&#x20;legitimate&#x20;website&#x20;that&#x20;has&#x20;been&#x20;corrupted.&#x20;The&#x20;user&#x20;unknowingly&#x20;downloads&#x20;a&#x20;malicious&#x20;file&#x20;either&#x20;by&#x20;closing&#x20;an&#x20;infected&#x20;pop-up&#x20;or&#x20;hovering&#x20;over&#x20;a&#x20;malicious&#x20;banner.&#x20;An&#x20;attacker&#x20;can&#x20;create&#x20;a&#x20;malicious&#x20;file&#x20;that&#x20;will&#x20;fall&#x20;within&#x20;Safari&#039;s&#x20;safe&#x20;file&#x20;list&#x20;that&#x20;will&#x20;download&#x20;and&#x20;execute&#x20;without&#x20;user&#x20;input.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Safari&#x20;2.&#x20;Select&#x20;Safari&#x20;from&#x20;the&#x20;menu&#x20;bar&#x20;3.&#x20;Select&#x20;Preferences&#x20;4.&#x20;Select&#x20;General&#x20;5.&#x20;Uncheck&#x20;Open&#x20;&quot;safe&quot;&#x20;files&#x20;after&#x20;downloading&#x20;&#x20;&#x20;&#x20;Alternatively&#x20;run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;com.apple.Safari&#x20;AutoOpenSafeDownloads&#x20;-boolean&#x20;no','[{\"cis\": [\"6.3\"]}]'),(9500,'Verify&#x20;all&#x20;Apple&#x20;provided&#x20;software&#x20;is&#x20;current','Software&#x20;vendors&#x20;release&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates&#x20;for&#x20;their&#x20;products&#x20;when&#x20;security&#x20;vulnerabilities&#x20;are&#x20;discovered.&#x20;There&#x20;is&#x20;no&#x20;simple&#x20;way&#x20;to&#x20;complete&#x20;this&#x20;action&#x20;without&#x20;a&#x20;network&#x20;connection&#x20;to&#x20;an&#x20;Apple&#x20;software&#x20;repository.&#x20;Please&#x20;ensure&#x20;appropriate&#x20;access&#x20;for&#x20;this&#x20;control.&#x20;This&#x20;check&#x20;is&#x20;only&#x20;for&#x20;what&#x20;Apple&#x20;provides&#x20;through&#x20;software&#x20;update.','It&#x20;is&#x20;important&#x20;that&#x20;these&#x20;updates&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;the&#x20;identified&#x20;vulnerabilities.','','1.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following:&#x20;softwareupdate&#x20;-l&#x20;&#x20;&#x20;&#x20;2.&#x20;In&#x20;Terminal,&#x20;run&#x20;the&#x20;following&#x20;for&#x20;any&#x20;packages&#x20;that&#x20;show&#x20;up&#x20;in&#x20;step&#x20;1:&#x20;sudo&#x20;softwareupdate&#x20;-i&#x20;packagename','[{\"cis\": [\"1.1\"]}]'),(9501,'Enable&#x20;Auto&#x20;Update','Auto&#x20;Update&#x20;verifies&#x20;that&#x20;your&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;security&#x20;patches&#x20;and&#x20;software&#x20;updates.&#x20;If&#x20;&quot;Automatically&#x20;check&#x20;for&#x20;updates&quot;&#x20;is&#x20;not&#x20;selected&#x20;background&#x20;updates&#x20;for&#x20;new&#x20;malware&#x20;definition&#x20;files&#x20;from&#x20;Apple&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper&#x20;will&#x20;not&#x20;occur.','It&#x20;is&#x20;important&#x20;that&#x20;a&#x20;system&#x20;has&#x20;the&#x20;newest&#x20;updates&#x20;applied&#x20;so&#x20;as&#x20;to&#x20;prevent&#x20;unauthorized&#x20;persons&#x20;from&#x20;exploiting&#x20;identified&#x20;vulnerabilities.','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;AutomaticCheckEnabled&#x20;-int&#x20;1','[{\"cis\": [\"1.2\"]}]'),(9502,'Enable&#x20;app&#x20;update&#x20;installs','Ensure&#x20;that&#x20;application&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;admin&#x20;privileges&#x20;for&#x20;end&#x20;users.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;the&#x20;auto&#x20;update&#x20;feature:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdate&#x20;-bool&#x20;TRUE&#x20;&#x20;&#x20;&#x20;The&#x20;remediation&#x20;requires&#x20;a&#x20;log&#x20;out&#x20;and&#x20;log&#x20;in&#x20;to&#x20;show&#x20;in&#x20;the&#x20;GUI.&#x20;Please&#x20;note&#x20;that.','[{\"cis\": [\"1.3\"]}]'),(9503,'Enable&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;update&#x20;installs','Ensure&#x20;that&#x20;system&#x20;and&#x20;security&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;&#x20;This&#x20;setting&#x20;enables&#x20;definition&#x20;updates&#x20;for&#x20;XProtect&#x20;and&#x20;Gatekeeper,&#x20;with&#x20;this&#x20;setting&#x20;in&#x20;place&#x20;new&#x20;malware&#x20;and&#x20;adware&#x20;that&#x20;Apple&#x20;has&#x20;added&#x20;to&#x20;the&#x20;list&#x20;of&#x20;malware&#x20;or&#x20;untrusted&#x20;software&#x20;will&#x20;not&#x20;execute.&#x20;These&#x20;updates&#x20;do&#x20;not&#x20;require&#x20;reboots&#x20;or&#x20;end&#x20;user&#x20;admin&#x20;rights.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;ConfigDataInstall&#x20;-bool&#x20;true&#x20;&amp;&amp;&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.SoftwareUpdate&#x20;CriticalUpdateInstall&#x20;-bool&#x20;true','[{\"cis\": [\"1.4\"]}]'),(9504,'Enable&#x20;macOS&#x20;update&#x20;installs','Ensure&#x20;that&#x20;macOS&#x20;updates&#x20;are&#x20;installed&#x20;after&#x20;they&#x20;are&#x20;available&#x20;from&#x20;Apple.&#x20;This&#x20;setting&#x20;enables&#x20;macOS&#x20;updates&#x20;to&#x20;be&#x20;automatically&#x20;installed.&#x20;Some&#x20;environments&#x20;will&#x20;want&#x20;to&#x20;approve&#x20;and&#x20;test&#x20;updates&#x20;before&#x20;they&#x20;are&#x20;delivered.&#x20;It&#x20;is&#x20;best&#x20;practice&#x20;to&#x20;test&#x20;first&#x20;where&#x20;updates&#x20;can&#x20;and&#x20;have&#x20;caused&#x20;disruptions&#x20;to&#x20;operations.&#x20;Automatic&#x20;updates&#x20;should&#x20;be&#x20;turned&#x20;off&#x20;where&#x20;changes&#x20;are&#x20;tightly&#x20;controlled&#x20;and&#x20;there&#x20;are&#x20;mature&#x20;testing&#x20;and&#x20;approval&#x20;processes.&#x20;Automatic&#x20;updates&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off&#x20;so&#x20;the&#x20;admin&#x20;can&#x20;call&#x20;the&#x20;users&#x20;first&#x20;to&#x20;let&#x20;them&#x20;know&#x20;it&#039;s&#x20;ok&#x20;to&#x20;install.&#x20;A&#x20;dependable&#x20;repeatable&#x20;process&#x20;involving&#x20;a&#x20;patch&#x20;agent&#x20;or&#x20;remote&#x20;management&#x20;tool&#x20;should&#x20;be&#x20;in&#x20;place&#x20;before&#x20;auto-updates&#x20;are&#x20;turned&#x20;off.','Patches&#x20;need&#x20;to&#x20;be&#x20;applied&#x20;in&#x20;a&#x20;timely&#x20;manner&#x20;to&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;vulnerabilities&#x20;being&#x20;exploited','','Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;enter&#x20;the&#x20;following&#x20;command&#x20;to&#x20;enable&#x20;install&#x20;system&#x20;data&#x20;files&#x20;and&#x20;security&#x20;updates:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.commerce&#x20;AutoUpdateRestartRequired&#x20;-bool&#x20;TRUE','[{\"cis\": [\"1.5\"]}]'),(9505,'Enable&#x20;&quot;Set&#x20;time&#x20;and&#x20;date&#x20;automatically&quot;','Correct&#x20;date&#x20;and&#x20;time&#x20;settings&#x20;are&#x20;required&#x20;for&#x20;authentication&#x20;protocols,&#x20;file&#x20;creation,&#x20;modification&#x20;dates&#x20;and&#x20;log&#x20;entries.','Kerberos&#x20;may&#x20;not&#x20;operate&#x20;correctly&#x20;if&#x20;the&#x20;time&#x20;on&#x20;the&#x20;Mac&#x20;is&#x20;off&#x20;by&#x20;more&#x20;than&#x20;5&#x20;minutes.&#x20;&#x20;This&#x20;in&#x20;turn&#x20;can&#x20;affect&#x20;Apple&#039;s&#x20;single&#x20;sign-on&#x20;feature,&#x20;Active&#x20;Directory&#x20;logons,&#x20;and&#x20;other&#x20;features.','','Run&#x20;the&#x20;following&#x20;commands:&#x20;sudo&#x20;systemsetup&#x20;-setnetworktimeserver&#x20;&lt;timeserver&gt;&#x20;&#x20;&#x20;&#x20;sudo&#x20;systemsetup&#x20;-setusingnetworktime&#x20;on','[{\"cis\": [\"2.2.1\"]}]'),(9506,'Disable&#x20;Remote&#x20;Apple&#x20;Events','Apple&#x20;Events&#x20;is&#x20;a&#x20;technology&#x20;that&#x20;allows&#x20;one&#x20;program&#x20;to&#x20;communicate&#x20;with&#x20;other&#x20;programs.&#x20;Remote&#x20;Apple&#x20;Events&#x20;allows&#x20;a&#x20;program&#x20;on&#x20;one&#x20;computer&#x20;to&#x20;communicate&#x20;with&#x20;a&#x20;program&#x20;on&#x20;a&#x20;different&#x20;computer.','Disabling&#x20;Remote&#x20;Apple&#x20;Events&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;program&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremoteappleevents&#x20;off','[{\"cis\": [\"2.4.1\"]}]'),(9507,'Disable&#x20;Printer&#x20;Sharing','By&#x20;enabling&#x20;Printer&#x20;sharing&#x20;the&#x20;computer&#x20;is&#x20;set&#x20;up&#x20;as&#x20;a&#x20;print&#x20;server&#x20;to&#x20;accept&#x20;print&#x20;jobs&#x20;from&#x20;other&#x20;computers.&#x20;Dedicated&#x20;print&#x20;servers&#x20;or&#x20;direct&#x20;IP&#x20;printing&#x20;should&#x20;be&#x20;used&#x20;instead.','Disabling&#x20;Printer&#x20;Sharing&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;attackers&#x20;attempting&#x20;to&#x20;exploit&#x20;the&#x20;print&#x20;server&#x20;to&#x20;gain&#x20;access&#x20;to&#x20;the&#x20;system.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Sharing&#x20;3.&#x20;Uncheck&#x20;Printer&#x20;Sharing','[{\"cis\": [\"2.4.4\"]}]'),(9508,'Disable&#x20;Remote&#x20;Login','Remote&#x20;Login&#x20;allows&#x20;an&#x20;interactive&#x20;terminal&#x20;connection&#x20;to&#x20;a&#x20;computer.','Disabling&#x20;Remote&#x20;Login&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;the&#x20;system&#x20;via&#x20;Secure&#x20;Shell&#x20;&#40;SSH&#41;.&#x20;While&#x20;SSH&#x20;is&#x20;an&#x20;industry&#x20;standard&#x20;to&#x20;connect&#x20;to&#x20;posix&#x20;servers,&#x20;the&#x20;scope&#x20;of&#x20;the&#x20;benchmark&#x20;is&#x20;for&#x20;Apple&#x20;macOS&#x20;clients,&#x20;not&#x20;servers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;systemsetup&#x20;-setremotelogin&#x20;off','[{\"cis\": [\"2.4.5\"]}]'),(9509,'Disable&#x20;File&#x20;Sharing','Apple&#039;s&#x20;File&#x20;Sharing&#x20;uses&#x20;a&#x20;combination&#x20;of&#x20;SMB&#x20;&#40;Windows&#x20;sharing&#41;&#x20;and&#x20;AFP&#x20;&#40;Mac&#x20;sharing&#41;','By&#x20;disabling&#x20;file&#x20;sharing,&#x20;the&#x20;remote&#x20;attack&#x20;surface&#x20;and&#x20;risk&#x20;of&#x20;unauthorized&#x20;access&#x20;to&#x20;files&#x20;stored&#x20;on&#x20;the&#x20;system&#x20;is&#x20;reduced.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;AFP&#x20;from&#x20;the&#x20;command&#x20;line:&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.AppleFileServer.plist&#x20;&#x20;-&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal&#x20;to&#x20;turn&#x20;off&#x20;SMB&#x20;sharing&#x20;from&#x20;the&#x20;CLI:&#x20;&#x20;sudo&#x20;launchctl&#x20;unload&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.smbd.plist','[{\"cis\": [\"2.4.8\"]}]'),(9510,'Disable&#x20;&quot;Wake&#x20;for&#x20;network&#x20;access&quot;','This&#x20;feature&#x20;allows&#x20;other&#x20;users&#x20;to&#x20;be&#x20;able&#x20;to&#x20;access&#x20;your&#x20;computer&#039;s&#x20;shared&#x20;resources,&#x20;such&#x20;as&#x20;shared&#x20;printers&#x20;or&#x20;iTunes&#x20;playlists,&#x20;even&#x20;when&#x20;your&#x20;computer&#x20;is&#x20;in&#x20;sleep&#x20;mode.&#x20;In&#x20;a&#x20;closed&#x20;network&#x20;when&#x20;only&#x20;authorized&#x20;devices&#x20;could&#x20;wake&#x20;a&#x20;computer&#x20;it&#x20;could&#x20;be&#x20;valuable&#x20;to&#x20;wake&#x20;computers&#x20;in&#x20;order&#x20;to&#x20;do&#x20;management&#x20;push&#x20;activity.&#x20;Where&#x20;mobile&#x20;workstations&#x20;and&#x20;agents&#x20;exist&#x20;the&#x20;device&#x20;will&#x20;more&#x20;likely&#x20;check&#x20;in&#x20;to&#x20;receive&#x20;updates&#x20;when&#x20;already&#x20;awake.&#x20;Mobile&#x20;devices&#x20;should&#x20;not&#x20;be&#x20;listening&#x20;for&#x20;signals&#x20;on&#x20;unmanaged&#x20;network&#x20;where&#x20;untrusted&#x20;devices&#x20;could&#x20;send&#x20;wake&#x20;signals.','Disabling&#x20;this&#x20;feature&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;attacker&#x20;remotely&#x20;waking&#x20;the&#x20;system&#x20;and&#x20;gaining&#x20;access.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;pmset&#x20;-a&#x20;womp&#x20;0','[{\"cis\": [\"2.5.1\"]}]'),(9511,'Enable&#x20;FileVault','FileVault&#x20;secures&#x20;a&#x20;system&#039;s&#x20;data&#x20;by&#x20;automatically&#x20;encrypting&#x20;its&#x20;boot&#x20;volume&#x20;and&#x20;requiring&#x20;a&#x20;password&#x20;or&#x20;recovery&#x20;key&#x20;to&#x20;access&#x20;it.','Encrypting&#x20;sensitive&#x20;data&#x20;minimizes&#x20;the&#x20;likelihood&#x20;of&#x20;unauthorized&#x20;users&#x20;gaining&#x20;access&#x20;to&#x20;it.','','1.&#x20;Open&#x20;System&#x20;Preferences&#x20;2.&#x20;Select&#x20;Security&#x20;&amp;&#x20;Privacy&#x20;3.&#x20;Select&#x20;FileVault&#x20;4.&#x20;Select&#x20;Turn&#x20;on&#x20;FileVault','[{\"cis\": [\"2.6.1.1\"]}]'),(9512,'Enable&#x20;Gatekeeper','Gatekeeper&#x20;is&#x20;Apple&#039;s&#x20;application&#x20;white-listing&#x20;control&#x20;that&#x20;restricts&#x20;downloaded&#x20;applications&#x20;from&#x20;launching.&#x20;It&#x20;functions&#x20;as&#x20;a&#x20;control&#x20;to&#x20;limit&#x20;applications&#x20;from&#x20;unverified&#x20;sources&#x20;from&#x20;running&#x20;without&#x20;authorization.','Disallowing&#x20;unsigned&#x20;software&#x20;will&#x20;reduce&#x20;the&#x20;risk&#x20;of&#x20;unauthorized&#x20;or&#x20;malicious&#x20;applications&#x20;from&#x20;running&#x20;on&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;spctl&#x20;--master-enable','[{\"cis\": [\"2.6.2\"]}]'),(9513,'Enable&#x20;Firewall','A&#x20;firewall&#x20;is&#x20;a&#x20;piece&#x20;of&#x20;software&#x20;that&#x20;blocks&#x20;unwanted&#x20;incoming&#x20;connections&#x20;to&#x20;a&#x20;system.&#x20;&#x20;Apple&#x20;has&#x20;posted&#x20;general&#x20;documentation&#x20;about&#x20;the&#x20;application&#x20;firewall.','A&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;unauthorized&#x20;users&#x20;from&#x20;gaining&#x20;access&#x20;to&#x20;your&#x20;system&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.alf&#x20;globalstate&#x20;-&#x20;int&#x20;&lt;value&gt;&#x20;&#x20;&#x20;&#x20;Where&#x20;&lt;value&gt;&#x20;is:&#x20;-&#x20;1&#x20;=&#x20;on&#x20;for&#x20;specific&#x20;services&#x20;-&#x20;2&#x20;=&#x20;on&#x20;for&#x20;essential&#x20;services&#x20;','[{\"cis\": [\"2.6.3\"]}]'),(9514,'Enable&#x20;Firewall&#x20;Stealth&#x20;Mode','While&#x20;in&#x20;Stealth&#x20;mode&#x20;the&#x20;computer&#x20;will&#x20;not&#x20;respond&#x20;to&#x20;unsolicited&#x20;probes,&#x20;dropping&#x20;that&#x20;traffic.','Stealth&#x20;mode&#x20;on&#x20;the&#x20;firewall&#x20;minimizes&#x20;the&#x20;threat&#x20;of&#x20;system&#x20;discovery&#x20;tools&#x20;while&#x20;connected&#x20;to&#x20;a&#x20;network&#x20;or&#x20;the&#x20;Internet.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;/usr/libexec/ApplicationFirewall/socketfilterfw&#x20;--setstealthmode&#x20;on','[{\"cis\": [\"2.6.4\"]}]'),(9515,'Enable&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;in&#x20;terminal.app','Secure&#x20;Keyboard&#x20;Entry&#x20;prevents&#x20;other&#x20;applications&#x20;on&#x20;the&#x20;system&#x20;and/or&#x20;network&#x20;from&#x20;detecting&#x20;and&#x20;recording&#x20;what&#x20;is&#x20;typed&#x20;into&#x20;Terminal.','Enabling&#x20;Secure&#x20;Keyboard&#x20;Entry&#x20;minimizes&#x20;the&#x20;risk&#x20;of&#x20;a&#x20;key&#x20;logger&#x20;from&#x20;detecting&#x20;what&#x20;is&#x20;entered&#x20;in&#x20;Terminal.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Terminal&#x20;2.&#x20;Select&#x20;Terminal&#x20;3.&#x20;Select&#x20;Secure&#x20;Keyboard&#x20;Entry','[{\"cis\": [\"2.10\"]}]'),(9516,'Java&#x20;6&#x20;is&#x20;not&#x20;the&#x20;default&#x20;Java&#x20;runtime','Apple&#x20;had&#x20;made&#x20;Java&#x20;part&#x20;of&#x20;the&#x20;core&#x20;Operating&#x20;System&#x20;for&#x20;macOS.&#x20;Apple&#x20;is&#x20;no&#x20;longer&#x20;providing&#x20;Java&#x20;updates&#x20;for&#x20;macOS&#x20;and&#x20;updated&#x20;JREs&#x20;and&#x20;JDK&#x20;are&#x20;made&#x20;available&#x20;by&#x20;Oracle.&#x20;&#x20;The&#x20;latest&#x20;version&#x20;of&#x20;Java&#x20;6&#x20;made&#x20;available&#x20;by&#x20;Apple&#x20;has&#x20;many&#x20;unpatched&#x20;vulnerabilities&#x20;and&#x20;should&#x20;not&#x20;be&#x20;the&#x20;default&#x20;runtime&#x20;for&#x20;Java&#x20;applets&#x20;that&#x20;request&#x20;one&#x20;from&#x20;the&#x20;Operating&#x20;System','Java&#x20;has&#x20;been&#x20;one&#x20;of&#x20;the&#x20;most&#x20;exploited&#x20;environments&#x20;and&#x20;Java&#x20;6,&#x20;which&#x20;was&#x20;provided&#x20;as&#x20;an&#x20;OS&#x20;component&#x20;by&#x20;Apple,&#x20;is&#x20;no&#x20;longer&#x20;maintained&#x20;by&#x20;Apple&#x20;or&#x20;Oracle.&#x20;The&#x20;old&#x20;versions&#x20;provided&#x20;by&#x20;Apple&#x20;are&#x20;both&#x20;unsupported&#x20;and&#x20;missing&#x20;the&#x20;more&#x20;modern&#x20;security&#x20;controls&#x20;that&#x20;have&#x20;limited&#x20;current&#x20;exploits.&#x20;The&#x20;EOL&#x20;version&#x20;may&#x20;still&#x20;be&#x20;installed&#x20;and&#x20;should&#x20;be&#x20;removed&#x20;from&#x20;the&#x20;computer&#x20;or&#x20;not&#x20;be&#x20;in&#x20;the&#x20;default&#x20;path.','','Java&#x20;6&#x20;can&#x20;be&#x20;removed&#x20;completely&#x20;or,&#x20;if&#x20;required&#x20;Java&#x20;applications&#x20;will&#x20;only&#x20;work&#x20;with&#x20;Java&#x20;6,&#x20;a&#x20;custom&#x20;path&#x20;can&#x20;be&#x20;used.&#x20;Apple&#x20;is&#x20;likely&#x20;to&#x20;finally&#x20;pull&#x20;the&#x20;plug&#x20;on&#x20;Java&#x20;6&#x20;in&#x20;upcoming&#x20;macOS&#x20;versions&#x20;so&#x20;any&#x20;applications&#x20;that&#x20;still&#x20;require&#x20;Java&#x20;6&#x20;will&#x20;likely&#x20;soon&#x20;be&#x20;unavailable.','[{\"cis\": [\"2.11\"]}]'),(9517,'Ensure&#x20;EFI&#x20;version&#x20;is&#x20;valid&#x20;and&#x20;being&#x20;regularly&#x20;checked','In&#x20;order&#x20;to&#x20;mitigate&#x20;firmware&#x20;attacks&#x20;Apple&#x20;has&#x20;created&#x20;a&#x20;automated&#x20;Firmware&#x20;check&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;EFI&#x20;version&#x20;running&#x20;is&#x20;a&#x20;known&#x20;good&#x20;version&#x20;from&#x20;Apple.&#x20;There&#x20;is&#x20;also&#x20;an&#x20;automated&#x20;process&#x20;to&#x20;check&#x20;it&#x20;every&#x20;seven&#x20;days.','If&#x20;the&#x20;Firmware&#x20;of&#x20;a&#x20;computer&#x20;has&#x20;been&#x20;compromised&#x20;the&#x20;Operating&#x20;System&#x20;that&#x20;the&#x20;Firmware&#x20;loads&#x20;cannot&#x20;be&#x20;trusted&#x20;either.','','If&#x20;EFI&#x20;does&#x20;not&#x20;pass&#x20;the&#x20;integrity&#x20;check&#x20;you&#x20;may&#x20;send&#x20;a&#x20;report&#x20;to&#x20;Apple.&#x20;Backing&#x20;up&#x20;files&#x20;and&#x20;clean&#x20;installing&#x20;a&#x20;known&#x20;good&#x20;Operating&#x20;System&#x20;and&#x20;Firmware&#x20;is&#x20;recommended.','[{\"cis\": [\"2.13\"]}]'),(9518,'Enable&#x20;security&#x20;auditing','macOS&#039;s&#x20;audit&#x20;facility,&#x20;auditd,&#x20;receives&#x20;notifications&#x20;from&#x20;the&#x20;kernel&#x20;when&#x20;certain&#x20;system&#x20;calls,&#x20;such&#x20;as&#x20;open,&#x20;fork,&#x20;and&#x20;exit,&#x20;are&#x20;made.&#x20;These&#x20;notifications&#x20;are&#x20;captured&#x20;and&#x20;written&#x20;to&#x20;an&#x20;audit&#x20;log.','Logs&#x20;generated&#x20;by&#x20;auditd&#x20;may&#x20;be&#x20;useful&#x20;when&#x20;investigating&#x20;a&#x20;security&#x20;incident&#x20;as&#x20;they&#x20;may&#x20;help&#x20;reveal&#x20;the&#x20;vulnerable&#x20;application&#x20;and&#x20;the&#x20;actions&#x20;taken&#x20;by&#x20;a&#x20;malicious&#x20;actor.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;launchctl&#x20;load&#x20;-w&#x20;/System/Library/LaunchDaemons/com.apple.auditd.plist','[{\"cis\": [\"3.1\"]}]'),(9519,'Configure&#x20;Security&#x20;Auditing&#x20;Flags','Auditing&#x20;is&#x20;the&#x20;capture&#x20;and&#x20;maintenance&#x20;of&#x20;information&#x20;about&#x20;security-related&#x20;events.','Maintaining&#x20;an&#x20;audit&#x20;trail&#x20;of&#x20;system&#x20;activity&#x20;logs&#x20;can&#x20;help&#x20;identify&#x20;configuration&#x20;errors,&#x20;troubleshoot&#x20;service&#x20;disruptions,&#x20;and&#x20;analyze&#x20;compromises&#x20;or&#x20;attacks&#x20;that&#x20;have&#x20;occurred,&#x20;have&#x20;begun,&#x20;or&#x20;are&#x20;about&#x20;to&#x20;begin.&#x20;Audit&#x20;logs&#x20;are&#x20;necessary&#x20;to&#x20;provide&#x20;a&#x20;trail&#x20;of&#x20;evidence&#x20;in&#x20;case&#x20;the&#x20;system&#x20;or&#x20;network&#x20;is&#x20;compromised.','','1.&#x20;Open&#x20;a&#x20;terminal&#x20;session&#x20;and&#x20;edit&#x20;the&#x20;/etc/security/audit_control&#x20;file&#x20;&#x20;2.&#x20;Find&#x20;the&#x20;line&#x20;beginning&#x20;with&#x20;&quot;flags&quot;&#x20;&#x20;3.&#x20;Add&#x20;the&#x20;following&#x20;flags:&#x20;lo,&#x20;ad,&#x20;fd,&#x20;fm,&#x20;-all.&#x20;&#x20;4.&#x20;Save&#x20;the&#x20;file.','[{\"cis\": [\"3.2\"]}]'),(9520,'Disable&#x20;Bonjour&#x20;advertising&#x20;service','Bonjour&#x20;is&#x20;an&#x20;auto-discovery&#x20;mechanism&#x20;for&#x20;TCP/IP&#x20;devices&#x20;which&#x20;enumerate&#x20;devices&#x20;and&#x20;services&#x20;within&#x20;a&#x20;local&#x20;subnet.&#x20;DNS&#x20;on&#x20;macOS&#x20;is&#x20;integrated&#x20;with&#x20;Bonjour&#x20;and&#x20;should&#x20;not&#x20;be&#x20;turned&#x20;off,&#x20;but&#x20;the&#x20;Bonjour&#x20;advertising&#x20;service&#x20;can&#x20;be&#x20;disabled.','Bonjour&#x20;can&#x20;simplify&#x20;device&#x20;discovery&#x20;from&#x20;an&#x20;internal&#x20;rogue&#x20;or&#x20;compromised&#x20;host.&#x20;An&#x20;attacker&#x20;could&#x20;use&#x20;Bonjour&#039;s&#x20;multicast&#x20;DNS&#x20;feature&#x20;to&#x20;discover&#x20;a&#x20;vulnerable&#x20;or&#x20;poorly-&#x20;configured&#x20;service&#x20;or&#x20;additional&#x20;information&#x20;to&#x20;aid&#x20;a&#x20;targeted&#x20;attack.&#x20;Implementing&#x20;this&#x20;control&#x20;disables&#x20;the&#x20;continuous&#x20;broadcasting&#x20;of&#x20;&quot;I&#039;m&#x20;here!&quot;&#x20;messages.&#x20;Typical&#x20;end-user&#x20;endpoints&#x20;should&#x20;not&#x20;have&#x20;to&#x20;advertise&#x20;services&#x20;to&#x20;other&#x20;computers.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.mDNSResponder.plist&#x20;NoMulticastAdvertisements','[{\"cis\": [\"4.1\"]}]'),(9521,'Ensure&#x20;http&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;used&#x20;to&#x20;have&#x20;a&#x20;graphical&#x20;front-end&#x20;to&#x20;the&#x20;embedded&#x20;Apache&#x20;web&#x20;server&#x20;in&#x20;the&#x20;Operating&#x20;System.&#x20;Personal&#x20;web&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;download&#x20;files&#x20;or&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;Personal&#x20;web&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;Apache&#x20;however&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;share&#x20;files&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.&#x20;&#x20;Web&#x20;sharing&#x20;should&#x20;only&#x20;be&#x20;done&#x20;through&#x20;hardened&#x20;web&#x20;servers&#x20;and&#x20;appropriate&#x20;cloud&#x20;services.','Web&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop.&#x20;Dedicated&#x20;webservers&#x20;or&#x20;appropriate&#x20;cloud&#x20;storage&#x20;should&#x20;be&#x20;used.&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Ensure&#x20;that&#x20;the&#x20;Web&#x20;Server&#x20;is&#x20;not&#x20;running&#x20;and&#x20;is&#x20;not&#x20;set&#x20;to&#x20;start&#x20;at&#x20;boot&#x20;Stop&#x20;the&#x20;Web&#x20;Server:&#x20;sudo&#x20;apachectl&#x20;stop&#x20;&#x20;&#x20;&#x20;Ensure&#x20;that&#x20;the&#x20;web&#x20;server&#x20;will&#x20;not&#x20;auto-start&#x20;at&#x20;boot&#x20;sudo:&#x20;defaults&#x20;write&#x20;/System/Library/LaunchDaemons/org.apache.httpd&#x20;Disabled&#x20;-&#x20;bool&#x20;true','[{\"cis\": [\"4.4\"]}]'),(9522,'Ensure&#x20;nfs&#x20;server&#x20;is&#x20;not&#x20;running','macOS&#x20;can&#x20;act&#x20;as&#x20;an&#x20;NFS&#x20;fileserver.&#x20;NFS&#x20;sharing&#x20;could&#x20;be&#x20;enabled&#x20;to&#x20;allow&#x20;someone&#x20;on&#x20;another&#x20;computer&#x20;to&#x20;mount&#x20;shares&#x20;and&#x20;gain&#x20;access&#x20;to&#x20;information&#x20;from&#x20;the&#x20;user&#039;s&#x20;computer.&#x20;File&#x20;sharing&#x20;from&#x20;a&#x20;user&#x20;endpoint&#x20;has&#x20;long&#x20;been&#x20;considered&#x20;questionable&#x20;and&#x20;Apple&#x20;has&#x20;removed&#x20;that&#x20;capability&#x20;from&#x20;the&#x20;GUI.&#x20;NFSD&#x20;is&#x20;still&#x20;part&#x20;of&#x20;the&#x20;Operating&#x20;System&#x20;and&#x20;can&#x20;be&#x20;easily&#x20;turned&#x20;on&#x20;to&#x20;export&#x20;shares&#x20;and&#x20;provide&#x20;remote&#x20;connectivity&#x20;to&#x20;an&#x20;end&#x20;user&#x20;computer.','File&#x20;serving&#x20;should&#x20;not&#x20;be&#x20;done&#x20;from&#x20;a&#x20;user&#x20;desktop,&#x20;dedicated&#x20;servers&#x20;should&#x20;be&#x20;used.&#x20;&#x20;Open&#x20;ports&#x20;make&#x20;it&#x20;easier&#x20;to&#x20;exploit&#x20;the&#x20;computer.','','Ensure&#x20;that&#x20;the&#x20;NFS&#x20;Server&#x20;is&#x20;not&#x20;running&#x20;and&#x20;is&#x20;not&#x20;set&#x20;to&#x20;start&#x20;at&#x20;boot&#x20;Stop&#x20;the&#x20;NFS&#x20;Server:&#x20;sudo&#x20;nfsd&#x20;disable&#x20;&#x20;&#x20;&#x20;Remove&#x20;the&#x20;exported&#x20;Directory&#x20;listing:&#x20;rm&#x20;/etc/export','[{\"cis\": [\"4.5\"]}]'),(9523,'Do&#x20;not&#x20;enable&#x20;the&#x20;&quot;root&quot;&#x20;account','The&#x20;root&#x20;account&#x20;is&#x20;a&#x20;superuser&#x20;account&#x20;that&#x20;has&#x20;access&#x20;privileges&#x20;to&#x20;perform&#x20;any&#x20;actions&#x20;and&#x20;read/write&#x20;to&#x20;any&#x20;file&#x20;on&#x20;the&#x20;computer.&#x20;With&#x20;some&#x20;Linux&#x20;distros&#x20;the&#x20;system&#x20;administrator&#x20;may&#x20;commonly&#x20;uses&#x20;the&#x20;root&#x20;account&#x20;to&#x20;perform&#x20;administrative&#x20;functions.','Enabling&#x20;and&#x20;using&#x20;the&#x20;root&#x20;account&#x20;puts&#x20;the&#x20;system&#x20;at&#x20;risk&#x20;since&#x20;any&#x20;successful&#x20;exploit&#x20;or&#x20;mistake&#x20;while&#x20;the&#x20;root&#x20;account&#x20;is&#x20;in&#x20;use&#x20;could&#x20;have&#x20;unlimited&#x20;access&#x20;privileges&#x20;within&#x20;the&#x20;system.&#x20;Using&#x20;the&#x20;sudo&#x20;command&#x20;allows&#x20;users&#x20;to&#x20;perform&#x20;functions&#x20;as&#x20;a&#x20;root&#x20;user&#x20;while&#x20;limiting&#x20;and&#x20;password&#x20;protecting&#x20;the&#x20;access&#x20;privileges.&#x20;By&#x20;default&#x20;the&#x20;root&#x20;account&#x20;is&#x20;not&#x20;enabled&#x20;on&#x20;a&#x20;macOS&#x20;computer.&#x20;An&#x20;administrator&#x20;can&#x20;escalate&#x20;privileges&#x20;using&#x20;the&#x20;sudo&#x20;command&#x20;&#40;use&#x20;-s&#x20;or&#x20;-i&#x20;to&#x20;get&#x20;a&#x20;root&#x20;shell&#41;.','','Open&#x20;System&#x20;Preferences,&#x20;Uses&#x20;&amp;&#x20;Groups.&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;In&#x20;the&#x20;Network&#x20;Account&#x20;Server&#x20;section,&#x20;click&#x20;Join&#x20;or&#x20;Edit.&#x20;Click&#x20;Open&#x20;Directory&#x20;Utility.&#x20;Click&#x20;the&#x20;lock&#x20;icon&#x20;to&#x20;unlock&#x20;it.&#x20;Select&#x20;the&#x20;Edit&#x20;menu&#x20;&gt;&#x20;Disable&#x20;Root&#x20;User.','[{\"cis\": [\"5.11\"]}]'),(9524,'Disable&#x20;automatic&#x20;login','The&#x20;automatic&#x20;login&#x20;feature&#x20;saves&#x20;a&#x20;user&#039;s&#x20;system&#x20;access&#x20;credentials&#x20;and&#x20;bypasses&#x20;the&#x20;login&#x20;screen,&#x20;instead&#x20;the&#x20;system&#x20;automatically&#x20;loads&#x20;to&#x20;the&#x20;user&#039;s&#x20;desktop&#x20;screen.','Disabling&#x20;automatic&#x20;login&#x20;decreases&#x20;the&#x20;likelihood&#x20;of&#x20;an&#x20;unauthorized&#x20;person&#x20;gaining&#x20;access&#x20;to&#x20;a&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;delete&#x20;/Library/Preferences/com.apple.loginwindow&#x20;autoLoginUser','[{\"cis\": [\"5.12\"]}]'),(9525,'System&#x20;Integrity&#x20;Protection&#x20;status','System&#x20;Integrity&#x20;Protection&#x20;is&#x20;a&#x20;security&#x20;feature&#x20;introduced&#x20;in&#x20;OS&#x20;X&#x20;10.11&#x20;El&#x20;Capitan.&#x20;&#x20;System&#x20;Integrity&#x20;Protection&#x20;restricts&#x20;access&#x20;to&#x20;System&#x20;domain&#x20;locations&#x20;and&#x20;restricts&#x20;runtime&#x20;attachment&#x20;to&#x20;system&#x20;processes.&#x20;Any&#x20;attempt&#x20;to&#x20;attempt&#x20;to&#x20;inspect&#x20;or&#x20;attach&#x20;to&#x20;a&#x20;system&#x20;process&#x20;will&#x20;fail.&#x20;Kernel&#x20;Extensions&#x20;are&#x20;now&#x20;restricted&#x20;to&#x20;/Library/Extensions&#x20;and&#x20;are&#x20;required&#x20;to&#x20;be&#x20;signed&#x20;with&#x20;a&#x20;Developer&#x20;ID.','Running&#x20;without&#x20;System&#x20;Integrity&#x20;Protection&#x20;on&#x20;a&#x20;production&#x20;system&#x20;runs&#x20;the&#x20;risk&#x20;of&#x20;the&#x20;modification&#x20;of&#x20;system&#x20;binaries&#x20;or&#x20;code&#x20;injection&#x20;of&#x20;system&#x20;processes&#x20;that&#x20;would&#x20;otherwise&#x20;be&#x20;protected&#x20;by&#x20;SIP.','','Perform&#x20;the&#x20;following&#x20;while&#x20;booted&#x20;in&#x20;macOS&#x20;Recovery&#x20;Partition.&#x20;&#x20;1.&#x20;Select&#x20;Terminal&#x20;from&#x20;the&#x20;Utilities&#x20;menu&#x20;&#x20;&#x20;&#x20;2.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;/usr/bin/csrutil&#x20;enable&#x20;&#x20;&#x20;&#x20;3.&#x20;The&#x20;output&#x20;should&#x20;be:&#x20;Successfully&#x20;enabled&#x20;System&#x20;Integrity&#x20;Protection.&#x20;Please&#x20;restart&#x20;the&#x20;machine&#x20;for&#x20;the&#x20;changes&#x20;to&#x20;take&#x20;effect.&#x20;&#x20;&#x20;&#x20;4.&#x20;Reboot.','[{\"cis\": [\"5.23\"]}]'),(9526,'Disable&#x20;guest&#x20;account&#x20;login','The&#x20;guest&#x20;account&#x20;allows&#x20;users&#x20;access&#x20;to&#x20;the&#x20;system&#x20;without&#x20;having&#x20;to&#x20;create&#x20;an&#x20;account&#x20;or&#x20;password.&#x20;Guest&#x20;users&#x20;are&#x20;unable&#x20;to&#x20;make&#x20;setting&#x20;changes,&#x20;cannot&#x20;remotely&#x20;login&#x20;to&#x20;the&#x20;system&#x20;and&#x20;all&#x20;created&#x20;files,&#x20;caches,&#x20;and&#x20;passwords&#x20;are&#x20;deleted&#x20;upon&#x20;logging&#x20;out.','Disabling&#x20;the&#x20;guest&#x20;account&#x20;mitigates&#x20;the&#x20;risk&#x20;of&#x20;an&#x20;untrusted&#x20;user&#x20;doing&#x20;basic&#x20;reconnaissance&#x20;and&#x20;possibly&#x20;using&#x20;privilege&#x20;escalation&#x20;attacks&#x20;to&#x20;take&#x20;control&#x20;of&#x20;the&#x20;system.','','Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;sudo&#x20;defaults&#x20;write&#x20;/Library/Preferences/com.apple.loginwindow&#x20;GuestEnabled&#x20;-&#x20;bool&#x20;NO','[{\"cis\": [\"6.1.3\"]}]'),(9527,'Remove&#x20;Guest&#x20;home&#x20;folder','The&#x20;guest&#x20;account&#x20;login&#x20;should&#x20;have&#x20;been&#x20;disabled,&#x20;so&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;the&#x20;legacy&#x20;Guest&#x20;home&#x20;folder&#x20;to&#x20;remain&#x20;in&#x20;the&#x20;file&#x20;system.&#x20;When&#x20;normal&#x20;user&#x20;accounts&#x20;are&#x20;removed&#x20;you&#x20;have&#x20;the&#x20;option&#x20;to&#x20;archive&#x20;it,&#x20;leave&#x20;it&#x20;in&#x20;place&#x20;or&#x20;delete.&#x20;In&#x20;the&#x20;case&#x20;of&#x20;the&#x20;guest&#x20;folder&#x20;the&#x20;folder&#x20;remains&#x20;in&#x20;place&#x20;without&#x20;a&#x20;GUI&#x20;option&#x20;to&#x20;remove&#x20;it.&#x20;If&#x20;at&#x20;some&#x20;point&#x20;in&#x20;the&#x20;future&#x20;a&#x20;Guest&#x20;account&#x20;is&#x20;needed&#x20;it&#x20;will&#x20;be&#x20;re-created.&#x20;The&#x20;presence&#x20;of&#x20;the&#x20;Guest&#x20;home&#x20;folder&#x20;can&#x20;cause&#x20;automated&#x20;audits&#x20;to&#x20;fail&#x20;when&#x20;looking&#x20;for&#x20;compliant&#x20;settings&#x20;within&#x20;all&#x20;User&#x20;folders&#x20;as&#x20;well.&#x20;Rather&#x20;than&#x20;ignoring&#x20;the&#x20;folders&#x20;continued&#x20;existence&#x20;it&#x20;is&#x20;best&#x20;removed.','The&#x20;Guest&#x20;home&#x20;folders&#x20;are&#x20;unneeded&#x20;after&#x20;the&#x20;Guest&#x20;account&#x20;is&#x20;disabled&#x20;and&#x20;could&#x20;be&#x20;used&#x20;inappropriately.','','1.&#x20;Run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;rm&#x20;-R&#x20;/Users/Guest&#x20;&#x20;2.&#x20;Make&#x20;sure&#x20;there&#x20;is&#x20;no&#x20;output','[{\"cis\": [\"6.1.5\"]}]'),(9528,'Turn&#x20;on&#x20;filename&#x20;extensions','A&#x20;filename&#x20;extension&#x20;is&#x20;a&#x20;suffix&#x20;added&#x20;to&#x20;a&#x20;base&#x20;filename&#x20;that&#x20;indicates&#x20;the&#x20;base&#x20;filename&#039;s&#x20;file&#x20;format.','Visible&#x20;filename&#x20;extensions&#x20;allows&#x20;the&#x20;user&#x20;to&#x20;identify&#x20;the&#x20;file&#x20;type&#x20;and&#x20;the&#x20;application&#x20;it&#x20;is&#x20;associated&#x20;with&#x20;which&#x20;leads&#x20;to&#x20;quick&#x20;identification&#x20;of&#x20;misrepresented&#x20;malicious&#x20;files.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Select&#x20;Finder&#x20;2.&#x20;Select&#x20;Preferences&#x20;3.&#x20;Check&#x20;Show&#x20;all&#x20;filename&#x20;extensions&#x20;&#x20;&#x20;&#x20;Alternatively,&#x20;use&#x20;the&#x20;following&#x20;command:&#x20;defaults&#x20;write&#x20;NSGlobalDomain&#x20;AppleShowAllExtensions&#x20;-bool&#x20;true','[{\"cis\": [\"6.2\"]}]'),(9529,'Disable&#x20;the&#x20;automatic&#x20;run&#x20;of&#x20;safe&#x20;files&#x20;in&#x20;Safari','Safari&#x20;will&#x20;automatically&#x20;run&#x20;or&#x20;execute&#x20;what&#x20;it&#x20;considers&#x20;safe&#x20;files.&#x20;This&#x20;can&#x20;include&#x20;installers&#x20;and&#x20;other&#x20;files&#x20;that&#x20;execute&#x20;on&#x20;the&#x20;operating&#x20;system.&#x20;Safari&#x20;bases&#x20;file&#x20;safety&#x20;by&#x20;using&#x20;a&#x20;list&#x20;of&#x20;filetypes&#x20;maintained&#x20;by&#x20;Apple.&#x20;The&#x20;list&#x20;of&#x20;files&#x20;include&#x20;text,&#x20;image,&#x20;video&#x20;and&#x20;archive&#x20;formats&#x20;that&#x20;would&#x20;be&#x20;run&#x20;in&#x20;the&#x20;context&#x20;of&#x20;the&#x20;OS&#x20;rather&#x20;than&#x20;the&#x20;browser.','Hackers&#x20;have&#x20;taken&#x20;advantage&#x20;of&#x20;this&#x20;setting&#x20;via&#x20;drive-by&#x20;attacks.&#x20;These&#x20;attacks&#x20;occur&#x20;when&#x20;a&#x20;user&#x20;visits&#x20;a&#x20;legitimate&#x20;website&#x20;that&#x20;has&#x20;been&#x20;corrupted.&#x20;The&#x20;user&#x20;unknowingly&#x20;downloads&#x20;a&#x20;malicious&#x20;file&#x20;either&#x20;by&#x20;closing&#x20;an&#x20;infected&#x20;pop-up&#x20;or&#x20;hovering&#x20;over&#x20;a&#x20;malicious&#x20;banner.&#x20;An&#x20;attacker&#x20;can&#x20;create&#x20;a&#x20;malicious&#x20;file&#x20;that&#x20;will&#x20;fall&#x20;within&#x20;Safari&#039;s&#x20;safe&#x20;file&#x20;list&#x20;that&#x20;will&#x20;download&#x20;and&#x20;execute&#x20;without&#x20;user&#x20;input.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;prescribed&#x20;state:&#x20;1.&#x20;Open&#x20;Safari&#x20;2.&#x20;Select&#x20;Safari&#x20;from&#x20;the&#x20;menu&#x20;bar&#x20;3.&#x20;Select&#x20;Preferences&#x20;4.&#x20;Select&#x20;General&#x20;5.&#x20;Uncheck&#x20;Open&#x20;&quot;safe&quot;&#x20;files&#x20;after&#x20;downloading&#x20;&#x20;&#x20;&#x20;Alternatively&#x20;run&#x20;the&#x20;following&#x20;command&#x20;in&#x20;Terminal:&#x20;defaults&#x20;write&#x20;com.apple.Safari&#x20;AutoOpenSafeDownloads&#x20;-boolean&#x20;no','[{\"cis\": [\"6.3\"]}]'),(10000,'Ensure&#x20;the&#x20;WebDAV&#x20;Modules&#x20;Are&#x20;Disabled','The&#x20;Apache&#x20;mod_dav&#x20;and&#x20;mod_dav_fs&#x20;modules&#x20;support&#x20;WebDAV&#x20;&#40;Web-based&#x20;Distributed&#x20;Authoring&#x20;and&#x20;Versioning&#41;&#x20;functionality&#x20;for&#x20;Apache.&#x20;WebDAV&#x20;is&#x20;an&#x20;extension&#x20;to&#x20;the&#x20;HTTP&#x20;protocol&#x20;which&#x20;allows&#x20;clients&#x20;to&#x20;create,&#x20;move,&#x20;and&#x20;delete&#x20;files&#x20;and&#x20;resources&#x20;on&#x20;the&#x20;web&#x20;server.','Disabling&#x20;WebDAV&#x20;modules&#x20;will&#x20;improve&#x20;the&#x20;security&#x20;posture&#x20;of&#x20;the&#x20;web&#x20;server&#x20;by&#x20;reducing&#x20;the&#x20;amount&#x20;of&#x20;potentially&#x20;vulnerable&#x20;code&#x20;paths&#x20;exposed&#x20;to&#x20;the&#x20;network&#x20;and&#x20;reducing&#x20;potential&#x20;for&#x20;unauthorized&#x20;access&#x20;to&#x20;files&#x20;via&#x20;misconfigured&#x20;WebDAV&#x20;access&#x20;controls.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;WebDAV&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;without&#x20;including&#x20;the&#x20;mod_dav,&#x20;and&#x20;mod_dav_fs&#x20;in&#x20;the&#x20;--enable-modules=configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;mod_dav,&#x20;and&#x20;mod_dav_fs&#x20;modules&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;dav_module&#x20;modules/mod_dav.so&#x20;##LoadModule&#x20;dav_fs_module&#x20;modules/mod_dav_fs.so','[{\"cis\": [\"2.3\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10001,'Ensure&#x20;the&#x20;Status&#x20;Module&#x20;Is&#x20;Disabled','The&#x20;Apache&#x20;mod_status&#x20;module&#x20;provides&#x20;current&#x20;server&#x20;performance&#x20;statistics.','When&#x20;mod_status&#x20;is&#x20;loaded&#x20;into&#x20;the&#x20;server,&#x20;its&#x20;handler&#x20;capability&#x20;is&#x20;available&#x20;in&#x20;all&#x20;configuration&#x20;files,&#x20;including&#x20;per-directory&#x20;files&#x20;&#40;e.g.,&#x20;.htaccess&#41;.&#x20;The&#x20;mod_status&#x20;module&#x20;may&#x20;provide&#x20;an&#x20;adversary&#x20;with&#x20;information&#x20;that&#x20;can&#x20;be&#x20;used&#x20;to&#x20;refine&#x20;exploits&#x20;that&#x20;depend&#x20;on&#x20;measuring&#x20;server&#x20;load.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;mod_status&#x20;module:&#x20;1&#41;&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;with&#x20;the&#x20;--disable-status&#x20;configure&#x20;script&#x20;options.&#x20;2&#41;&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;the&#x20;mod_status&#x20;module&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;status_module&#x20;modules/mod_status.so','[{\"cis\": [\"2.4\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10002,'Ensure&#x20;the&#x20;Autoindex&#x20;Module&#x20;Is&#x20;Disabled','The&#x20;Apache&#x20;mod_autoindex&#x20;module&#x20;automatically&#x20;generates&#x20;a&#x20;web&#x20;page&#x20;listing&#x20;the&#x20;contents&#x20;of&#x20;directories&#x20;on&#x20;the&#x20;server,&#x20;typically&#x20;used&#x20;so&#x20;an&#x20;index.html&#x20;does&#x20;not&#x20;have&#x20;to&#x20;be&#x20;generated.','Automated&#x20;directory&#x20;listings&#x20;should&#x20;not&#x20;be&#x20;enabled&#x20;because&#x20;they&#x20;will&#x20;reveal&#x20;information&#x20;helpful&#x20;to&#x20;an&#x20;attacker&#x20;such&#x20;as&#x20;naming&#x20;conventions&#x20;and&#x20;directory&#x20;paths.&#x20;They&#x20;may&#x20;also&#x20;reveal&#x20;files&#x20;that&#x20;were&#x20;not&#x20;intended&#x20;to&#x20;be&#x20;revealed.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;mod_autoindex&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;with&#x20;the&#x20;--disable-autoindex&#x20;configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;-disable-autoindex.&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;mod_autoindex&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##&#x20;LoadModule&#x20;autoindex_module&#x20;modules/mod_autoindex.so','[{\"cis\": [\"2.5\"]}, {\"cis_csc\": [\"18\", \"5.1\"]}]'),(10003,'Ensure&#x20;the&#x20;Proxy&#x20;Modules&#x20;Are&#x20;Disabled','The&#x20;Apache&#x20;proxy&#x20;modules&#x20;allow&#x20;the&#x20;server&#x20;to&#x20;act&#x20;as&#x20;a&#x20;proxy&#x20;&#40;either&#x20;forward&#x20;or&#x20;reverse&#x20;proxy&#41;&#x20;of&#x20;HTTP&#x20;and&#x20;other&#x20;protocols&#x20;with&#x20;additional&#x20;proxy&#x20;modules&#x20;loaded.&#x20;If&#x20;the&#x20;Apache&#x20;installation&#x20;is&#x20;not&#x20;intended&#x20;to&#x20;proxy&#x20;requests&#x20;to&#x20;or&#x20;from&#x20;another&#x20;network&#x20;then&#x20;the&#x20;proxy&#x20;module&#x20;should&#x20;not&#x20;be&#x20;loaded.','Proxy&#x20;servers&#x20;can&#x20;act&#x20;as&#x20;an&#x20;important&#x20;security&#x20;control&#x20;when&#x20;properly&#x20;configured,&#x20;however&#x20;a&#x20;secure&#x20;proxy&#x20;server&#x20;is&#x20;not&#x20;within&#x20;the&#x20;scope&#x20;of&#x20;this&#x20;benchmark.&#x20;A&#x20;web&#x20;server&#x20;should&#x20;be&#x20;primarily&#x20;a&#x20;web&#x20;server&#x20;or&#x20;a&#x20;proxy&#x20;server&#x20;but&#x20;not&#x20;both,&#x20;for&#x20;the&#x20;same&#x20;reasons&#x20;that&#x20;other&#x20;multi-use&#x20;servers&#x20;are&#x20;not&#x20;recommended.&#x20;Scanning&#x20;for&#x20;web&#x20;servers&#x20;that&#x20;will&#x20;also&#x20;proxy&#x20;requests&#x20;is&#x20;a&#x20;very&#x20;common&#x20;attack,&#x20;as&#x20;proxy&#x20;servers&#x20;are&#x20;useful&#x20;for&#x20;anonymizing&#x20;attacks&#x20;on&#x20;other&#x20;servers,&#x20;or&#x20;possibly&#x20;proxying&#x20;requests&#x20;into&#x20;an&#x20;otherwise&#x20;protected&#x20;network.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;proxy&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;without&#x20;including&#x20;the&#x20;mod_proxy&#x20;in&#x20;the&#x20;--enable-modules=configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;mod_proxy&#x20;module&#x20;and&#x20;all&#x20;other&#x20;proxy&#x20;modules&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;proxy_module&#x20;modules/mod_proxy.so&#x20;##LoadModule&#x20;proxy_connect_module&#x20;modules/mod_proxy_connect.so&#x20;##LoadModule&#x20;proxy_ftp_module&#x20;modules/mod_proxy_ftp.so&#x20;##LoadModule&#x20;proxy_http_module&#x20;modules/mod_proxy_http.so&#x20;##LoadModule&#x20;proxy_fcgi_module&#x20;modules/mod_proxy_fcgi.so&#x20;##LoadModule&#x20;proxy_scgi_module&#x20;modules/mod_proxy_scgi.so&#x20;##LoadModule&#x20;proxy_ajp_module&#x20;modules/mod_proxy_ajp.so&#x20;##LoadModule&#x20;proxy_balancer_module&#x20;modules/mod_proxy_balancer.so&#x20;##LoadModule&#x20;proxy_express_module&#x20;modules/mod_proxy_express.so&#x20;##LoadModule&#x20;proxy_wstunnel_module&#x20;modules/mod_proxy_wstunnel.so&#x20;##LoadModule&#x20;proxy_fdpass_module&#x20;modules/mod_proxy_fdpass.so','[{\"cis\": [\"2.6\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10004,'Ensure&#x20;the&#x20;User&#x20;Directories&#x20;Module&#x20;Is&#x20;Disabled','The&#x20;UserDir&#x20;directive&#x20;must&#x20;be&#x20;disabled&#x20;so&#x20;that&#x20;user&#x20;home&#x20;directories&#x20;are&#x20;not&#x20;accessed&#x20;via&#x20;the&#x20;web&#x20;site&#x20;with&#x20;a&#x20;tilde&#x20;&#40;~&#41;&#x20;preceding&#x20;the&#x20;username.&#x20;The&#x20;directive&#x20;also&#x20;sets&#x20;the&#x20;path&#x20;name&#x20;of&#x20;the&#x20;directory&#x20;that&#x20;will&#x20;be&#x20;accessed.','The&#x20;user&#x20;directories&#x20;should&#x20;not&#x20;be&#x20;globally&#x20;enabled&#x20;since&#x20;that&#x20;allows&#x20;anonymous&#x20;access&#x20;to&#x20;anything&#x20;users&#x20;may&#x20;want&#x20;to&#x20;share&#x20;with&#x20;other&#x20;users&#x20;on&#x20;the&#x20;network.&#x20;Also&#x20;consider&#x20;that&#x20;every&#x20;time&#x20;a&#x20;new&#x20;account&#x20;is&#x20;created&#x20;on&#x20;the&#x20;system,&#x20;there&#x20;is&#x20;potentially&#x20;new&#x20;content&#x20;available&#x20;via&#x20;the&#x20;web&#x20;site.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;user&#x20;directories&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;with&#x20;the&#x20;--disable-userdir&#x20;configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;--disable-userdir&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;mod_userdir&#x20;module&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;userdir_module&#x20;modules/mod_userdir.so','[{\"cis\": [\"2.7\"]}, {\"cis_csc\": [\"18\", \"5.1\"]}]'),(10005,'Ensure&#x20;the&#x20;Info&#x20;Module&#x20;Is&#x20;Disabled','The&#x20;Apache&#x20;mod_info&#x20;module&#x20;provides&#x20;information&#x20;on&#x20;the&#x20;server&#x20;configuration&#x20;via&#x20;access&#x20;to&#x20;a&#x20;/server-info&#x20;URL&#x20;location.','While&#x20;having&#x20;server&#x20;configuration&#x20;information&#x20;available&#x20;as&#x20;a&#x20;web&#x20;page&#x20;may&#x20;be&#x20;convenient&#x20;it&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;module&#x20;NOT&#x20;be&#x20;enabled.&#x20;Once&#x20;mod_info&#x20;is&#x20;loaded&#x20;into&#x20;the&#x20;server,&#x20;its&#x20;handler&#x20;capability&#x20;is&#x20;available&#x20;in&#x20;per-directory&#x20;.htaccess&#x20;files&#x20;and&#x20;can&#x20;leak&#x20;sensitive&#x20;information&#x20;from&#x20;the&#x20;configuration&#x20;directives&#x20;of&#x20;other&#x20;Apache&#x20;modules&#x20;such&#x20;as&#x20;system&#x20;paths,&#x20;usernames/passwords,&#x20;database&#x20;names,&#x20;etc.','','Perform&#x20;either&#x20;one&#x20;of&#x20;the&#x20;following&#x20;to&#x20;disable&#x20;the&#x20;mod_info&#x20;module:&#x20;1.&#x20;For&#x20;source&#x20;builds&#x20;with&#x20;static&#x20;modules,&#x20;run&#x20;the&#x20;Apache&#x20;./configure&#x20;script&#x20;without&#x20;including&#x20;the&#x20;mod_info&#x20;in&#x20;the&#x20;--enable-modules=configure&#x20;script&#x20;options.&#x20;$&#x20;cd&#x20;$DOWNLOAD_HTTPD&#x20;$&#x20;./configure&#x20;2.&#x20;For&#x20;dynamically&#x20;loaded&#x20;modules,&#x20;comment&#x20;out&#x20;or&#x20;remove&#x20;the&#x20;LoadModule&#x20;directive&#x20;for&#x20;the&#x20;mod_info&#x20;module&#x20;from&#x20;the&#x20;httpd.conf&#x20;file.&#x20;##LoadModule&#x20;info_module&#x20;modules/mod_info.so','[{\"cis\": [\"2.8\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10006,'Ensure&#x20;the&#x20;Apache&#x20;User&#x20;Account&#x20;Has&#x20;an&#x20;Invalid&#x20;Shell','The&#x20;apache&#x20;account&#x20;must&#x20;not&#x20;be&#x20;used&#x20;as&#x20;a&#x20;regular&#x20;login&#x20;account,&#x20;so&#x20;it&#x20;should&#x20;be&#x20;assigned&#x20;an&#x20;invalid&#x20;or&#x20;nologin&#x20;shell&#x20;to&#x20;ensure&#x20;it&#x20;cannot&#x20;be&#x20;used&#x20;to&#x20;login.','Service&#x20;accounts&#x20;such&#x20;as&#x20;the&#x20;apache&#x20;account&#x20;are&#x20;a&#x20;risk&#x20;if&#x20;they&#x20;can&#x20;be&#x20;used&#x20;to&#x20;get&#x20;a&#x20;login&#x20;shell&#x20;to&#x20;the&#x20;system.','','Change&#x20;the&#x20;apache&#x20;account&#x20;to&#x20;use&#x20;the&#x20;nologin&#x20;shell&#x20;or&#x20;an&#x20;invalid&#x20;shell&#x20;such&#x20;as&#x20;/dev/null:&#x20;#&#x20;chsh&#x20;-s&#x20;/sbin/nologin&#x20;apache','[{\"cis\": [\"3.2\"]}, {\"cis_csc\": [\"16\", \"4.3\"]}]'),(10007,'Ensure&#x20;the&#x20;Apache&#x20;User&#x20;Account&#x20;Is&#x20;Locked','The&#x20;user&#x20;account&#x20;under&#x20;which&#x20;Apache&#x20;runs&#x20;should&#x20;not&#x20;have&#x20;a&#x20;valid&#x20;password,&#x20;but&#x20;should&#x20;be&#x20;locked.','As&#x20;a&#x20;defense-in-depth&#x20;measure&#x20;the&#x20;Apache&#x20;user&#x20;account&#x20;should&#x20;be&#x20;locked&#x20;to&#x20;prevent&#x20;logins,&#x20;and&#x20;to&#x20;prevent&#x20;a&#x20;user&#x20;from&#x20;suing&#x20;to&#x20;apache&#x20;using&#x20;the&#x20;password.&#x20;In&#x20;general,&#x20;there&#x20;should&#x20;not&#x20;be&#x20;a&#x20;need&#x20;for&#x20;anyone&#x20;to&#x20;have&#x20;to&#x20;su&#x20;as&#x20;apache,&#x20;and&#x20;when&#x20;there&#x20;is&#x20;a&#x20;need,&#x20;then&#x20;sudo&#x20;should&#x20;be&#x20;used&#x20;instead,&#x20;which&#x20;would&#x20;not&#x20;require&#x20;the&#x20;apache&#x20;account&#x20;password.','','Use&#x20;the&#x20;passwd&#x20;command&#x20;to&#x20;lock&#x20;the&#x20;apache&#x20;account:&#x20;#&#x20;passwd&#x20;-l&#x20;apache','[{\"cis\": [\"3.3\"]}, {\"cis_csc\": [\"16\", \"16.8\"]}]'),(10008,'Ensure&#x20;OverRide&#x20;Is&#x20;Disabled&#x20;for&#x20;All&#x20;Directories','The&#x20;Apache&#x20;AllowOverride&#x20;directive&#x20;and&#x20;the&#x20;new&#x20;AllowOverrideList&#x20;directive&#x20;allow&#x20;for&#x20;.htaccess&#x20;files&#x20;to&#x20;be&#x20;used&#x20;to&#x20;override&#x20;much&#x20;of&#x20;the&#x20;configuration,&#x20;including&#x20;authentication,&#x20;handling&#x20;of&#x20;document&#x20;types,&#x20;auto&#x20;generated&#x20;indexes,&#x20;access&#x20;control,&#x20;and&#x20;options.&#x20;When&#x20;the&#x20;server&#x20;finds&#x20;an&#x20;.htaccess&#x20;file&#x20;&#40;as&#x20;specified&#x20;by&#x20;AccessFileName&#41;&#x20;it&#x20;needs&#x20;to&#x20;know&#x20;which&#x20;directives&#x20;declared&#x20;in&#x20;that&#x20;file&#x20;can&#x20;override&#x20;earlier&#x20;access&#x20;information.&#x20;When&#x20;this&#x20;directive&#x20;is&#x20;set&#x20;to&#x20;None,&#x20;then&#x20;.htaccess&#x20;files&#x20;are&#x20;completely&#x20;ignored.&#x20;In&#x20;this&#x20;case,&#x20;the&#x20;server&#x20;will&#x20;not&#x20;even&#x20;attempt&#x20;to&#x20;read&#x20;.htaccess&#x20;files&#x20;in&#x20;the&#x20;filesystem.&#x20;When&#x20;this&#x20;directive&#x20;is&#x20;set&#x20;to&#x20;All,&#x20;then&#x20;any&#x20;directive&#x20;which&#x20;has&#x20;the&#x20;.htaccess&#x20;context&#x20;is&#x20;allowed&#x20;in&#x20;.htaccess&#x20;files.','.htaccess&#x20;files&#x20;decentralizes&#x20;access&#x20;control&#x20;and&#x20;increases&#x20;the&#x20;risk&#x20;of&#x20;server&#x20;configuration&#x20;being&#x20;changed&#x20;inappropriately.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Search&#x20;the&#x20;Apache&#x20;configuration&#x20;files&#x20;&#40;httpd.conf&#x20;and&#x20;any&#x20;included&#x20;configuration&#x20;files&#41;&#x20;to&#x20;find&#x20;AllowOverride&#x20;directives.&#x20;2.&#x20;Set&#x20;the&#x20;value&#x20;for&#x20;all&#x20;AllowOverride&#x20;directives&#x20;to&#x20;None.&#x20;3.&#x20;Remove&#x20;any&#x20;AllowOverrideList&#x20;directives&#x20;found.','[{\"cis\": [\"4.4\"]}, {\"cis_csc\": [\"14.4\", \"14.6\"]}]'),(10009,'Ensure&#x20;Options&#x20;for&#x20;Other&#x20;Directories&#x20;Are&#x20;Minimized','The&#x20;Apache&#x20;Options&#x20;directive&#x20;allows&#x20;for&#x20;specific&#x20;configuration&#x20;of&#x20;options,&#x20;including&#x20;execution&#x20;of&#x20;CGI,&#x20;following&#x20;symbolic&#x20;links,&#x20;server&#x20;side&#x20;includes,&#x20;and&#x20;content&#x20;negotiation.','Likewise,&#x20;the&#x20;options&#x20;for&#x20;other&#x20;directories&#x20;and&#x20;hosts&#x20;needs&#x20;to&#x20;be&#x20;restricted&#x20;to&#x20;the&#x20;minimal&#x20;options&#x20;required.&#x20;A&#x20;setting&#x20;of&#x20;None&#x20;is&#x20;recommended,&#x20;however&#x20;it&#x20;is&#x20;recognized&#x20;that&#x20;other&#x20;options&#x20;may&#x20;be&#x20;needed&#x20;in&#x20;some&#x20;cases:&#x20;Multiviews,&#x20;FollowSymbolicLinks&#x20;&amp;&#x20;SymLinksIfOwnerMatch,&#x20;ExecCGI,&#x20;Includes&#x20;&amp;&#x20;IncludesNOEXEC,&#x20;&amp;&#x20;Indexes.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Search&#x20;the&#x20;Apache&#x20;configuration&#x20;files&#x20;&#40;httpd.conf&#x20;and&#x20;any&#x20;included&#x20;configuration&#x20;files&#41;&#x20;to&#x20;find&#x20;all&#x20;&lt;Directory&gt;&#x20;elements.&#x20;2.&#x20;Add&#x20;or&#x20;modify&#x20;any&#x20;existing&#x20;Options&#x20;directive&#x20;to&#x20;NOT&#x20;have&#x20;a&#x20;value&#x20;of&#x20;Includes.&#x20;Other&#x20;options&#x20;may&#x20;be&#x20;set&#x20;if&#x20;necessary&#x20;and&#x20;appropriate&#x20;as&#x20;described&#x20;above.','[{\"cis\": [\"5.3\"]}, {\"cis_csc\": [\"18\", \"5.1\"]}]'),(10010,'Ensure&#x20;Default&#x20;HTML&#x20;Content&#x20;Is&#x20;Removed','Apache&#x20;installations&#x20;have&#x20;default&#x20;content&#x20;that&#x20;is&#x20;not&#x20;needed&#x20;or&#x20;appropriate&#x20;for&#x20;production&#x20;use.&#x20;The&#x20;primary&#x20;function&#x20;for&#x20;the&#x20;sample&#x20;content&#x20;is&#x20;to&#x20;provide&#x20;a&#x20;default&#x20;web&#x20;site,&#x20;provide&#x20;user&#x20;manuals,&#x20;or&#x20;demonstrate&#x20;special&#x20;features&#x20;of&#x20;the&#x20;web&#x20;server.&#x20;All&#x20;content&#x20;that&#x20;is&#x20;not&#x20;needed&#x20;should&#x20;be&#x20;removed.','Historically,&#x20;sample&#x20;content&#x20;and&#x20;features&#x20;have&#x20;been&#x20;remotely&#x20;exploited&#x20;and&#x20;can&#x20;provide&#x20;different&#x20;levels&#x20;of&#x20;access&#x20;to&#x20;the&#x20;server.&#x20;Usually&#x20;these&#x20;routines&#x20;are&#x20;not&#x20;written&#x20;for&#x20;production&#x20;use&#x20;and&#x20;consequently&#x20;little&#x20;thought&#x20;was&#x20;given&#x20;to&#x20;security&#x20;in&#x20;their&#x20;development.','','Review&#x20;all&#x20;pre-installed&#x20;content&#x20;and&#x20;remove&#x20;content&#x20;which&#x20;is&#x20;not&#x20;required.&#x20;In&#x20;particular&#x20;look&#x20;for&#x20;the&#x20;unnecessary&#x20;content&#x20;which&#x20;may&#x20;be&#x20;found&#x20;in&#x20;the&#x20;document&#x20;root&#x20;directory,&#x20;a&#x20;configuration&#x20;directory&#x20;such&#x20;as&#x20;conf/extra&#x20;directory,&#x20;or&#x20;as&#x20;a&#x20;Unix/Linux&#x20;package.&#x20;1.&#x20;Remove&#x20;the&#x20;default&#x20;index.html&#x20;or&#x20;welcome&#x20;page&#x20;if&#x20;it&#x20;is&#x20;a&#x20;separate&#x20;package.&#x20;If&#x20;it&#x20;is&#x20;part&#x20;of&#x20;main&#x20;Apache&#x20;httpd&#x20;package&#x20;such&#x20;as&#x20;it&#x20;is&#x20;on&#x20;Red&#x20;Hat&#x20;Linux,&#x20;then&#x20;comment&#x20;out&#x20;the&#x20;configuration&#x20;as&#x20;shown&#x20;below.&#x20;Removing&#x20;a&#x20;file&#x20;such&#x20;as&#x20;the&#x20;welcome.conf,&#x20;is&#x20;not&#x20;recommended&#x20;as&#x20;it&#x20;may&#x20;get&#x20;replaced&#x20;if&#x20;the&#x20;package&#x20;is&#x20;updated.&#x20;2.&#x20;Remove&#x20;the&#x20;Apache&#x20;user&#x20;manual&#x20;content&#x20;or&#x20;comment&#x20;out&#x20;configurations&#x20;referencing&#x20;the&#x20;manual.&#x20;#&#x20;yum&#x20;erase&#x20;httpd-manual&#x20;3.&#x20;Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;Server&#x20;Information&#x20;handler&#x20;configuration.&#x20;4.&#x20;Remove&#x20;or&#x20;comment&#x20;out&#x20;any&#x20;other&#x20;handler&#x20;configuration&#x20;such&#x20;as&#x20;perl-status.','[{\"cis\": [\"5.4\"]}, {\"cis_csc\": [\"18.9\", \"5.1\"]}]'),(10011,'Ensure&#x20;the&#x20;Default&#x20;CGI&#x20;Content&#x20;printenv&#x20;Script&#x20;Is&#x20;Removed','Most&#x20;Web&#x20;Servers,&#x20;including&#x20;Apache&#x20;installations&#x20;have&#x20;default&#x20;CGI&#x20;content&#x20;which&#x20;is&#x20;not&#x20;needed&#x20;or&#x20;appropriate&#x20;for&#x20;production&#x20;use.&#x20;The&#x20;primary&#x20;function&#x20;for&#x20;these&#x20;sample&#x20;programs&#x20;is&#x20;to&#x20;demonstrate&#x20;the&#x20;capabilities&#x20;of&#x20;the&#x20;web&#x20;server.&#x20;One&#x20;common&#x20;default&#x20;CGI&#x20;content&#x20;for&#x20;Apache&#x20;installations&#x20;is&#x20;the&#x20;script&#x20;printenv.&#x20;This&#x20;script&#x20;will&#x20;print&#x20;back&#x20;to&#x20;the&#x20;requester&#x20;all&#x20;of&#x20;the&#x20;CGI&#x20;environment&#x20;variables&#x20;which&#x20;includes&#x20;many&#x20;server&#x20;configuration&#x20;details&#x20;and&#x20;system&#x20;paths.','CGI&#x20;programs&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;bugs&#x20;and&#x20;problems&#x20;associated&#x20;with&#x20;improperly&#x20;accepting&#x20;user-input.&#x20;Since&#x20;these&#x20;programs&#x20;are&#x20;often&#x20;targets&#x20;of&#x20;attackers,&#x20;we&#x20;need&#x20;to&#x20;make&#x20;sure&#x20;that&#x20;there&#x20;are&#x20;no&#x20;unnecessary&#x20;CGI&#x20;programs&#x20;that&#x20;could&#x20;potentially&#x20;be&#x20;used&#x20;for&#x20;malicious&#x20;purposes.&#x20;Usually&#x20;these&#x20;programs&#x20;are&#x20;not&#x20;written&#x20;for&#x20;production&#x20;use&#x20;and&#x20;consequently&#x20;little&#x20;thought&#x20;was&#x20;given&#x20;to&#x20;security&#x20;in&#x20;their&#x20;development.&#x20;The&#x20;printenv&#x20;script&#x20;in&#x20;particular&#x20;will&#x20;disclose&#x20;inappropriate&#x20;information&#x20;about&#x20;the&#x20;web&#x20;server&#x20;including&#x20;directory&#x20;paths&#x20;and&#x20;detailed&#x20;version&#x20;and&#x20;configuration&#x20;information.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Locate&#x20;cgi-bin&#x20;files&#x20;and&#x20;directories&#x20;enabled&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;via&#x20;Script,&#x20;ScriptAlias,&#x20;ScriptAliasMatch,&#x20;or&#x20;ScriptInterpreterSource&#x20;directives.&#x20;2.&#x20;Remove&#x20;the&#x20;printenvdefault&#x20;CGI&#x20;in&#x20;cgi-bin&#x20;directory&#x20;if&#x20;it&#x20;is&#x20;installed.&#x20;#&#x20;rm&#x20;$APACHE_PREFIX/cgi-bin/printenv','[{\"cis\": [\"5.5\"]}, {\"cis_csc\": [\"18\", \"4.7\"]}]'),(10012,'Ensure&#x20;the&#x20;Default&#x20;CGI&#x20;Content&#x20;test-cgi&#x20;Script&#x20;Is&#x20;Removed','Most&#x20;Web&#x20;Servers,&#x20;including&#x20;Apache&#x20;installations&#x20;have&#x20;default&#x20;CGI&#x20;content&#x20;which&#x20;is&#x20;not&#x20;needed&#x20;or&#x20;appropriate&#x20;for&#x20;production&#x20;use.&#x20;The&#x20;primary&#x20;function&#x20;for&#x20;these&#x20;sample&#x20;programs&#x20;is&#x20;to&#x20;demonstrate&#x20;the&#x20;capabilities&#x20;of&#x20;the&#x20;web&#x20;server.&#x20;A&#x20;common&#x20;default&#x20;CGI&#x20;content&#x20;for&#x20;Apache&#x20;installations&#x20;is&#x20;the&#x20;script&#x20;test-cgi.&#x20;This&#x20;script&#x20;will&#x20;print&#x20;back&#x20;to&#x20;the&#x20;requester&#x20;CGI&#x20;environment&#x20;variables&#x20;which&#x20;includes&#x20;many&#x20;server&#x20;configuration&#x20;details.','CGI&#x20;programs&#x20;have&#x20;a&#x20;long&#x20;history&#x20;of&#x20;security&#x20;bugs&#x20;and&#x20;problems&#x20;associated&#x20;with&#x20;improperly&#x20;accepting&#x20;user-input.&#x20;Since&#x20;these&#x20;programs&#x20;are&#x20;often&#x20;targets&#x20;of&#x20;attackers,&#x20;we&#x20;need&#x20;to&#x20;make&#x20;sure&#x20;that&#x20;there&#x20;are&#x20;no&#x20;unnecessary&#x20;CGI&#x20;programs&#x20;that&#x20;could&#x20;potentially&#x20;be&#x20;used&#x20;for&#x20;malicious&#x20;purposes.&#x20;Usually&#x20;these&#x20;programs&#x20;are&#x20;not&#x20;written&#x20;for&#x20;production&#x20;use&#x20;and&#x20;consequently&#x20;little&#x20;thought&#x20;was&#x20;given&#x20;to&#x20;security&#x20;in&#x20;their&#x20;development.&#x20;The&#x20;test-cgi&#x20;script&#x20;in&#x20;particular&#x20;will&#x20;disclose&#x20;inappropriate&#x20;information&#x20;about&#x20;the&#x20;web&#x20;server&#x20;including&#x20;directory&#x20;paths&#x20;and&#x20;detailed&#x20;version&#x20;and&#x20;configuration&#x20;information.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Locate&#x20;cgi-bin&#x20;files&#x20;and&#x20;directories&#x20;enabled&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;via&#x20;Script,&#x20;ScriptAlias,&#x20;ScriptAliasMatch,&#x20;or&#x20;ScriptInterpreterSource&#x20;directives.&#x20;2.&#x20;Remove&#x20;the&#x20;test-cgi&#x20;default&#x20;CGI&#x20;in&#x20;cgi-bin&#x20;directory&#x20;if&#x20;it&#x20;is&#x20;installed.&#x20;#&#x20;rm&#x20;$APACHE_PREFIX/cgi-bin/test-cgi','[{\"cis\": [\"5.6\"]}, {\"cis_csc\": [\"18.9\", \"4.7\"]}]'),(10013,'Ensure&#x20;the&#x20;HTTP&#x20;TRACE&#x20;Method&#x20;Is&#x20;Disabled','Use&#x20;the&#x20;Apache&#x20;TraceEnable&#x20;directive&#x20;to&#x20;disable&#x20;the&#x20;HTTP&#x20;TRACE&#x20;request&#x20;method.','The&#x20;HTTP&#x20;1.1&#x20;protocol&#x20;requires&#x20;support&#x20;for&#x20;the&#x20;TRACE&#x20;request&#x20;method&#x20;which&#x20;reflects&#x20;the&#x20;request&#x20;back&#x20;as&#x20;a&#x20;response&#x20;and&#x20;was&#x20;intended&#x20;for&#x20;diagnostics&#x20;purposes.&#x20;The&#x20;TRACE&#x20;method&#x20;is&#x20;not&#x20;needed&#x20;and&#x20;is&#x20;easily&#x20;subjected&#x20;to&#x20;abuse&#x20;and&#x20;should&#x20;be&#x20;disabled.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Locate&#x20;the&#x20;main&#x20;Apache&#x20;configuration&#x20;file&#x20;such&#x20;as&#x20;httpd.conf.&#x20;2.&#x20;Add&#x20;a&#x20;TraceEnable&#x20;directive&#x20;to&#x20;the&#x20;server&#x20;level&#x20;configuration&#x20;with&#x20;a&#x20;value&#x20;of&#x20;off.&#x20;Server&#x20;level&#x20;configuration&#x20;is&#x20;the&#x20;top-level&#x20;configuration,&#x20;not&#x20;nested&#x20;within&#x20;any&#x20;other&#x20;directives&#x20;like&#x20;&lt;Directory&gt;&#x20;or&#x20;&lt;Location&gt;.','[{\"cis\": [\"5.8\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10014,'Ensure&#x20;the&#x20;IP&#x20;Addresses&#x20;for&#x20;Listening&#x20;for&#x20;Requests&#x20;Are&#x20;Specified','The&#x20;Apache&#x20;Listen&#x20;directive&#x20;specifies&#x20;the&#x20;IP&#x20;addresses&#x20;and&#x20;port&#x20;numbers&#x20;the&#x20;Apache&#x20;web&#x20;server&#x20;will&#x20;listen&#x20;for&#x20;requests.&#x20;Rather&#x20;than&#x20;be&#x20;unrestricted&#x20;to&#x20;listen&#x20;on&#x20;all&#x20;IP&#x20;addresses&#x20;available&#x20;to&#x20;the&#x20;system,&#x20;the&#x20;specific&#x20;IP&#x20;address&#x20;or&#x20;addresses&#x20;intended&#x20;should&#x20;be&#x20;explicitly&#x20;specified.&#x20;Specifically,&#x20;a&#x20;Listen&#x20;directive&#x20;with&#x20;no&#x20;IP&#x20;address&#x20;specified,&#x20;or&#x20;with&#x20;an&#x20;IP&#x20;address&#x20;of&#x20;zeros&#x20;should&#x20;not&#x20;be&#x20;used.','Having&#x20;multiple&#x20;interfaces&#x20;on&#x20;web&#x20;servers&#x20;is&#x20;fairly&#x20;common,&#x20;and&#x20;without&#x20;explicit&#x20;Listen&#x20;directives,&#x20;the&#x20;web&#x20;server&#x20;is&#x20;likely&#x20;to&#x20;be&#x20;listening&#x20;on&#x20;an&#x20;inappropriate&#x20;IP&#x20;address&#x20;/&#x20;interface&#x20;that&#x20;was&#x20;not&#x20;intended&#x20;for&#x20;the&#x20;web&#x20;server.&#x20;Single&#x20;homed&#x20;system&#x20;with&#x20;a&#x20;single&#x20;IP&#x20;addressed&#x20;are&#x20;also&#x20;required&#x20;to&#x20;have&#x20;an&#x20;explicit&#x20;IP&#x20;address&#x20;in&#x20;the&#x20;Listen&#x20;directive,&#x20;in&#x20;case&#x20;additional&#x20;interfaces&#x20;are&#x20;added&#x20;to&#x20;the&#x20;system&#x20;at&#x20;a&#x20;later&#x20;date.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Find&#x20;any&#x20;Listen&#x20;directives&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;file&#x20;with&#x20;no&#x20;IP&#x20;address&#x20;specified,&#x20;or&#x20;with&#x20;an&#x20;IP&#x20;address&#x20;of&#x20;all&#x20;zeros&#x20;similar&#x20;to&#x20;the&#x20;examples&#x20;below.&#x20;Keep&#x20;in&#x20;mind&#x20;there&#x20;may&#x20;be&#x20;both&#x20;IPv4&#x20;and&#x20;IPv6&#x20;addresses&#x20;on&#x20;the&#x20;system.&#x20;2.&#x20;Modify&#x20;the&#x20;Listen&#x20;directives&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;file&#x20;to&#x20;have&#x20;explicit&#x20;IP&#x20;addresses&#x20;according&#x20;to&#x20;the&#x20;intended&#x20;usage.&#x20;Multiple&#x20;Listen&#x20;directives&#x20;may&#x20;be&#x20;specified&#x20;for&#x20;each&#x20;IP&#x20;address&#x20;&amp;&#x20;Port.','[{\"cis\": [\"5.13\"]}, {\"cis_csc\": [\"9.1\", \"9.2\"]}]'),(10015,'Ensure&#x20;Browser&#x20;Framing&#x20;Is&#x20;Restricted','The&#x20;Header&#x20;directive&#x20;allows&#x20;server&#x20;HTTP&#x20;response&#x20;headers&#x20;to&#x20;be&#x20;added,&#x20;replaced&#x20;or&#x20;merged.&#x20;We&#x20;will&#x20;use&#x20;the&#x20;directive&#x20;to&#x20;add&#x20;a&#x20;server&#x20;HTTP&#x20;response&#x20;header&#x20;to&#x20;tell&#x20;browsers&#x20;to&#x20;restrict&#x20;all&#x20;of&#x20;the&#x20;web&#x20;pages&#x20;from&#x20;being&#x20;framed&#x20;by&#x20;other&#x20;web&#x20;sites.','Using&#x20;iframes&#x20;and&#x20;regular&#x20;web&#x20;frames&#x20;to&#x20;embed&#x20;malicious&#x20;content&#x20;along&#x20;with&#x20;expected&#x20;web&#x20;content&#x20;has&#x20;been&#x20;a&#x20;favored&#x20;attack&#x20;vector&#x20;for&#x20;attacking&#x20;web&#x20;clients&#x20;for&#x20;a&#x20;long&#x20;time.&#x20;This&#x20;can&#x20;happen&#x20;when&#x20;the&#x20;attacker&#x20;lures&#x20;the&#x20;victim&#x20;to&#x20;a&#x20;malicious&#x20;web&#x20;site,&#x20;which&#x20;using&#x20;frames&#x20;to&#x20;include&#x20;the&#x20;expected&#x20;content&#x20;from&#x20;the&#x20;legitimate&#x20;site.&#x20;The&#x20;attack&#x20;can&#x20;also&#x20;be&#x20;performed&#x20;via&#x20;XSS&#x20;&#40;either&#x20;reflected,&#x20;DOM&#x20;or&#x20;stored&#x20;XSS&#41;&#x20;to&#x20;add&#x20;the&#x20;malicious&#x20;content&#x20;to&#x20;the&#x20;legitimate&#x20;web&#x20;site.&#x20;To&#x20;combat&#x20;this&#x20;vector,&#x20;an&#x20;HTTP&#x20;Response&#x20;header,&#x20;X-Frame-Options,&#x20;has&#x20;been&#x20;introduced&#x20;that&#x20;allows&#x20;a&#x20;server&#x20;to&#x20;specify&#x20;whether&#x20;a&#x20;web&#x20;page&#x20;may&#x20;be&#x20;loaded&#x20;in&#x20;any&#x20;frame&#x20;&#40;DENY&#41;&#x20;or&#x20;those&#x20;frames&#x20;that&#x20;share&#x20;the&#x20;pages&#x20;origin&#x20;&#40;SAMEORIGIN&#41;.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;Header&#x20;directive&#x20;for&#x20;the&#x20;X-Frames-Options&#x20;header&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;the&#x20;condition&#x20;always,&#x20;an&#x20;action&#x20;of&#x20;append&#x20;and&#x20;a&#x20;value&#x20;of&#x20;SAMEORIGIN&#x20;or&#x20;DENY,&#x20;as&#x20;shown&#x20;below.&#x20;Header&#x20;always&#x20;append&#x20;X-Frame-Options&#x20;SAMEORIGIN','[{\"cis\": [\"5.14\"]}, {\"cis_csc\": [\"18\", \"5.1\"]}]'),(10016,'Ensure&#x20;Insecure&#x20;SSL&#x20;Renegotiation&#x20;Is&#x20;Not&#x20;Enabled','A&#x20;man-in-the-middle&#x20;renegotiation&#x20;attack&#x20;was&#x20;discovered&#x20;in&#x20;SSLv3&#x20;and&#x20;TLSv1&#x20;in&#x20;November,&#x20;2009&#x20;&#40;CVE-2009-3555&#41;.&#x20;First,&#x20;a&#x20;work&#x20;around&#x20;and&#x20;then&#x20;a&#x20;fix&#x20;was&#x20;approved&#x20;as&#x20;an&#x20;Internet&#x20;Standard&#x20;as&#x20;RFC&#x20;574,&#x20;Feb&#x20;2010.&#x20;The&#x20;work&#x20;around,&#x20;which&#x20;removes&#x20;the&#x20;renegotiation,&#x20;is&#x20;available&#x20;from&#x20;OpenSSL&#x20;as&#x20;of&#x20;version&#x20;0.9.8l&#x20;and&#x20;newer&#x20;versions.&#x20;For&#x20;details:&#x20;https://www.openssl.org/news/secadv_20091111.txt&#x20;The&#x20;SSLInsecureRenegotiation&#x20;directive&#x20;was&#x20;added&#x20;in&#x20;Apache&#x20;2.2.15,&#x20;for&#x20;web&#x20;servers&#x20;linked&#x20;with&#x20;OpenSSL&#x20;version&#x20;0.9.8m&#x20;or&#x20;later,&#x20;to&#x20;provide&#x20;backward&#x20;compatibility&#x20;to&#x20;clients&#x20;with&#x20;the&#x20;older,&#x20;unpatched&#x20;SSL&#x20;implementations.','Enabling&#x20;the&#x20;SSLInsecureRenegotiation&#x20;directive&#x20;leaves&#x20;the&#x20;server&#x20;vulnerable&#x20;to&#x20;man-in-&#x20;the-middle&#x20;renegotiation&#x20;attack.&#x20;Therefore,&#x20;the&#x20;SSLInsecureRenegotiation&#x20;directive&#x20;should&#x20;not&#x20;be&#x20;enabled.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Search&#x20;the&#x20;Apache&#x20;configuration&#x20;files&#x20;for&#x20;the&#x20;SSLInsecureRenegotiation&#x20;directive.&#x20;If&#x20;the&#x20;directive&#x20;is&#x20;present&#x20;modify&#x20;the&#x20;value&#x20;to&#x20;be&#x20;off.&#x20;If&#x20;the&#x20;directive&#x20;is&#x20;not&#x20;present&#x20;then&#x20;no&#x20;action&#x20;is&#x20;required.&#x20;SSLInsecureRenegotiation&#x20;off','[{\"cis\": [\"7.6\"]}, {\"cis_csc\": [\"14.2\", \"14.4\"]}]'),(10017,'Ensure&#x20;SSL&#x20;Compression&#x20;is&#x20;Not&#x20;Enabled','The&#x20;SSLCompression&#x20;directive&#x20;controls&#x20;whether&#x20;SSL&#x20;compression&#x20;is&#x20;used&#x20;by&#x20;Apache&#x20;when&#x20;serving&#x20;content&#x20;over&#x20;HTTPS.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;SSLCompression&#x20;directive&#x20;be&#x20;set&#x20;to&#x20;off.','If&#x20;SSL&#x20;compression&#x20;is&#x20;enabled,&#x20;HTTPS&#x20;communication&#x20;between&#x20;the&#x20;client&#x20;and&#x20;the&#x20;server&#x20;may&#x20;be&#x20;at&#x20;increased&#x20;risk&#x20;to&#x20;the&#x20;CRIME&#x20;attack.&#x20;The&#x20;CRIME&#x20;attack&#x20;increases&#x20;a&#x20;malicious&#x20;actor&#039;s&#x20;ability&#x20;to&#x20;derive&#x20;the&#x20;value&#x20;of&#x20;a&#x20;session&#x20;cookie,&#x20;which&#x20;commonly&#x20;contains&#x20;an&#x20;authenticator.&#x20;If&#x20;the&#x20;authenticator&#x20;in&#x20;a&#x20;session&#x20;cookie&#x20;is&#x20;derived,&#x20;it&#x20;can&#x20;be&#x20;used&#x20;to&#x20;impersonate&#x20;the&#x20;account&#x20;associated&#x20;with&#x20;the&#x20;authenticator.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Search&#x20;the&#x20;Apache&#x20;configuration&#x20;files&#x20;for&#x20;the&#x20;SSLCompression&#x20;directive.&#x20;2.&#x20;If&#x20;the&#x20;directive&#x20;is&#x20;present,&#x20;set&#x20;it&#x20;to&#x20;off.','[{\"cis\": [\"7.7\"]}, {\"cis_csc\": [\"14.2\", \"14.4\"]}]'),(10018,'Ensure&#x20;ServerTokens&#x20;is&#x20;Set&#x20;to&#x20;&#039;Prod&#039;&#x20;or&#x20;&#039;ProductOnly&#039;','Configure&#x20;the&#x20;Apache&#x20;ServerTokens&#x20;directive&#x20;to&#x20;provide&#x20;minimal&#x20;information.&#x20;By&#x20;setting&#x20;the&#x20;value&#x20;to&#x20;Prod&#x20;or&#x20;ProductOnly.&#x20;The&#x20;only&#x20;version&#x20;information&#x20;given&#x20;in&#x20;the&#x20;server&#x20;HTTP&#x20;response&#x20;header&#x20;will&#x20;be&#x20;Apache&#x20;rather&#x20;than&#x20;details&#x20;on&#x20;modules&#x20;and&#x20;versions&#x20;installed.','Information&#x20;is&#x20;power&#x20;and&#x20;identifying&#x20;web&#x20;server&#x20;details&#x20;greatly&#x20;increases&#x20;the&#x20;efficiency&#x20;of&#x20;any&#x20;attack,&#x20;as&#x20;security&#x20;vulnerabilities&#x20;are&#x20;extremely&#x20;dependent&#x20;upon&#x20;specific&#x20;software&#x20;versions&#x20;and&#x20;configurations.&#x20;Excessive&#x20;probing&#x20;and&#x20;requests&#x20;may&#x20;cause&#x20;too&#x20;much&#x20;&#039;noise&#039;&#x20;being&#x20;generated&#x20;and&#x20;may&#x20;tip&#x20;off&#x20;an&#x20;administrator.&#x20;If&#x20;an&#x20;attacker&#x20;can&#x20;accurately&#x20;target&#x20;their&#x20;exploits,&#x20;the&#x20;chances&#x20;of&#x20;successful&#x20;compromise&#x20;prior&#x20;to&#x20;detection&#x20;increase&#x20;dramatically.&#x20;Script&#x20;Kiddies&#x20;are&#x20;constantly&#x20;scanning&#x20;the&#x20;Internet&#x20;and&#x20;documenting&#x20;the&#x20;version&#x20;information&#x20;openly&#x20;provided&#x20;by&#x20;web&#x20;servers.&#x20;The&#x20;purpose&#x20;of&#x20;this&#x20;scanning&#x20;is&#x20;to&#x20;accumulate&#x20;a&#x20;database&#x20;of&#x20;software&#x20;installed&#x20;on&#x20;those&#x20;hosts,&#x20;which&#x20;can&#x20;then&#x20;be&#x20;used&#x20;when&#x20;new&#x20;vulnerabilities&#x20;are&#x20;released.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;ServerTokens&#x20;directive&#x20;as&#x20;shown&#x20;below&#x20;to&#x20;have&#x20;the&#x20;value&#x20;of&#x20;Prod&#x20;or&#x20;ProductOnly:&#x20;ServerTokens&#x20;Prod','[{\"cis\": [\"8.1\"]}, {\"cis_csc\": [\"18.9\", \"14.7\"]}]'),(10019,'Ensure&#x20;ServerSignature&#x20;Is&#x20;Not&#x20;Enabled','Disable&#x20;the&#x20;server&#x20;signatures&#x20;which&#x20;generates&#x20;a&#x20;signature&#x20;line&#x20;as&#x20;a&#x20;trailing&#x20;footer&#x20;at&#x20;the&#x20;bottom&#x20;of&#x20;server&#x20;generated&#x20;documents&#x20;such&#x20;as&#x20;error&#x20;pages.','Server&#x20;signatures&#x20;are&#x20;helpful&#x20;when&#x20;the&#x20;server&#x20;is&#x20;acting&#x20;as&#x20;a&#x20;proxy,&#x20;since&#x20;it&#x20;helps&#x20;the&#x20;user&#x20;distinguish&#x20;errors&#x20;from&#x20;the&#x20;proxy&#x20;rather&#x20;than&#x20;the&#x20;destination&#x20;server,&#x20;however&#x20;in&#x20;this&#x20;context&#x20;there&#x20;is&#x20;no&#x20;need&#x20;for&#x20;the&#x20;additional&#x20;information.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;ServerSignature&#x20;directive&#x20;to&#x20;have&#x20;the&#x20;value&#x20;of&#x20;Off:&#x20;ServerSignature&#x20;Off','[{\"cis\": [\"8.2\"]}, {\"cis_csc\": [\"18\", \"13.2\"]}]'),(10020,'Ensure&#x20;the&#x20;TimeOut&#x20;Is&#x20;Set&#x20;to&#x20;10&#x20;or&#x20;Less','Denial&#x20;of&#x20;Service&#x20;&#40;DoS&#41;&#x20;is&#x20;an&#x20;attack&#x20;technique&#x20;with&#x20;the&#x20;intent&#x20;of&#x20;preventing&#x20;a&#x20;web&#x20;site&#x20;from&#x20;serving&#x20;normal&#x20;user&#x20;activity.&#x20;DoS&#x20;attacks,&#x20;which&#x20;are&#x20;normally&#x20;applied&#x20;to&#x20;the&#x20;network&#x20;layer,&#x20;are&#x20;also&#x20;possible&#x20;at&#x20;the&#x20;application&#x20;layer.&#x20;These&#x20;malicious&#x20;attacks&#x20;can&#x20;succeed&#x20;by&#x20;starving&#x20;a&#x20;system&#x20;of&#x20;critical&#x20;resources,&#x20;vulnerability&#x20;exploit,&#x20;or&#x20;abuse&#x20;of&#x20;functionality.&#x20;Although&#x20;there&#x20;is&#x20;no&#x20;100%&#x20;solution&#x20;for&#x20;preventing&#x20;DoS&#x20;attacks,&#x20;the&#x20;following&#x20;recommendation&#x20;uses&#x20;the&#x20;Timeout&#x20;directive&#x20;to&#x20;mitigate&#x20;some&#x20;of&#x20;the&#x20;risk,&#x20;by&#x20;requiring&#x20;more&#x20;effort&#x20;for&#x20;a&#x20;successful&#x20;DoS&#x20;attack.&#x20;Of&#x20;course,&#x20;DoS&#x20;attacks&#x20;can&#x20;happen&#x20;in&#x20;rather&#x20;unintentional&#x20;ways&#x20;as&#x20;well&#x20;as&#x20;intentional&#x20;and&#x20;these&#x20;directives&#x20;will&#x20;help&#x20;in&#x20;many&#x20;of&#x20;those&#x20;situations&#x20;as&#x20;well.','One&#x20;common&#x20;technique&#x20;for&#x20;DoS&#x20;is&#x20;to&#x20;initiate&#x20;many&#x20;connections&#x20;to&#x20;the&#x20;server.&#x20;By&#x20;decreasing&#x20;the&#x20;timeout&#x20;for&#x20;old&#x20;connections&#x20;and&#x20;we&#x20;allow&#x20;the&#x20;server&#x20;to&#x20;free&#x20;up&#x20;resources&#x20;more&#x20;quickly&#x20;and&#x20;be&#x20;more&#x20;responsive.&#x20;By&#x20;making&#x20;the&#x20;server&#x20;more&#x20;efficient,&#x20;it&#x20;will&#x20;be&#x20;more&#x20;resilient&#x20;to&#x20;DoS&#x20;conditions.&#x20;The&#x20;Timeout&#x20;directive&#x20;affects&#x20;several&#x20;timeout&#x20;values&#x20;for&#x20;Apache,&#x20;so&#x20;review&#x20;the&#x20;Apache&#x20;document&#x20;carefully.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;Timeout&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;10&#x20;seconds&#x20;or&#x20;shorter.&#x20;Timeout&#x20;10','[{\"cis\": [\"9.1\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10021,'Ensure&#x20;KeepAlive&#x20;Is&#x20;Enabled','The&#x20;KeepAlive&#x20;directive&#x20;controls&#x20;whether&#x20;Apache&#x20;will&#x20;reuse&#x20;the&#x20;same&#x20;TCP&#x20;connection&#x20;per&#x20;client&#x20;to&#x20;process&#x20;subsequent&#x20;HTTP&#x20;requests&#x20;from&#x20;that&#x20;client.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;KeepAlive&#x20;directive&#x20;be&#x20;set&#x20;to&#x20;On.','Allowing&#x20;per-client&#x20;reuse&#x20;of&#x20;TCP&#x20;sockets&#x20;reduces&#x20;the&#x20;amount&#x20;of&#x20;system&#x20;and&#x20;network&#x20;resources&#x20;required&#x20;to&#x20;serve&#x20;requests.&#x20;This&#x20;efficiency&#x20;gain&#x20;may&#x20;improve&#x20;a&#x20;server&#x20;resiliency&#x20;to&#x20;DoS&#x20;attacks.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;KeepAlive&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;On,&#x20;so&#x20;that&#x20;KeepAlive&#x20;connections&#x20;are&#x20;enabled.&#x20;KeepAlive&#x20;On','[{\"cis\": [\"9.2\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10022,'Ensure&#x20;MaxKeepAliveRequests&#x20;is&#x20;Set&#x20;to&#x20;a&#x20;Value&#x20;of&#x20;100&#x20;or&#x20;Greater','The&#x20;MaxKeepAliveRequests&#x20;directive&#x20;limits&#x20;the&#x20;number&#x20;of&#x20;requests&#x20;allowed&#x20;per&#x20;connection&#x20;when&#x20;KeepAlive&#x20;is&#x20;on.&#x20;If&#x20;it&#x20;is&#x20;set&#x20;to&#x20;0,&#x20;unlimited&#x20;requests&#x20;will&#x20;be&#x20;allowed.','The&#x20;MaxKeepAliveRequests&#x20;directive&#x20;is&#x20;important&#x20;to&#x20;be&#x20;used&#x20;to&#x20;mitigate&#x20;the&#x20;risk&#x20;of&#x20;Denial&#x20;of&#x20;Service&#x20;&#40;DoS&#41;&#x20;attack&#x20;technique&#x20;by&#x20;reducing&#x20;the&#x20;overhead&#x20;imposed&#x20;on&#x20;the&#x20;server.&#x20;The&#x20;KeepAlive&#x20;directive&#x20;must&#x20;be&#x20;enabled&#x20;before&#x20;it&#x20;is&#x20;effective.&#x20;Enabling&#x20;KeepAlives&#x20;allows&#x20;for&#x20;multiple&#x20;HTTP&#x20;requests&#x20;to&#x20;be&#x20;sent&#x20;while&#x20;keeping&#x20;the&#x20;same&#x20;TCP&#x20;connection&#x20;alive.&#x20;This&#x20;reduces&#x20;the&#x20;overhead&#x20;of&#x20;having&#x20;to&#x20;setup&#x20;and&#x20;tear&#x20;down&#x20;TCP&#x20;connections&#x20;for&#x20;each&#x20;request.&#x20;By&#x20;making&#x20;the&#x20;server&#x20;more&#x20;efficient,&#x20;it&#x20;will&#x20;be&#x20;more&#x20;resilient&#x20;to&#x20;DoS&#x20;conditions.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;MaxKeepAliveRequests&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;100&#x20;or&#x20;more.&#x20;MaxKeepAliveRequests&#x20;100','[{\"cis\": [\"9.3\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10023,'Ensure&#x20;KeepAliveTimeout&#x20;is&#x20;Set&#x20;to&#x20;a&#x20;Value&#x20;of&#x20;15&#x20;or&#x20;Less','The&#x20;KeepAliveTimeout&#x20;directive&#x20;specifies&#x20;the&#x20;number&#x20;of&#x20;seconds&#x20;Apache&#x20;will&#x20;wait&#x20;for&#x20;a&#x20;subsequent&#x20;request&#x20;before&#x20;closing&#x20;a&#x20;connection&#x20;that&#x20;is&#x20;being&#x20;kept&#x20;alive.','The&#x20;KeepAliveTimeout&#x20;directive&#x20;is&#x20;used&#x20;mitigate&#x20;some&#x20;of&#x20;the&#x20;risk,&#x20;by&#x20;requiring&#x20;more&#x20;effort&#x20;for&#x20;a&#x20;successful&#x20;DoS&#x20;attack.&#x20;By&#x20;enabling&#x20;KeepAlive&#x20;and&#x20;keeping&#x20;the&#x20;timeout&#x20;relatively&#x20;low&#x20;for&#x20;old&#x20;connections&#x20;and&#x20;we&#x20;allow&#x20;the&#x20;server&#x20;to&#x20;free&#x20;up&#x20;resources&#x20;more&#x20;quickly&#x20;and&#x20;be&#x20;more&#x20;responsive.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;KeepAliveTimeout&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;15&#x20;or&#x20;less.&#x20;KeepAliveTimeout&#x20;15','[{\"cis\": [\"9.4\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10024,'Ensure&#x20;the&#x20;Timeout&#x20;Limits&#x20;for&#x20;Request&#x20;Headers&#x20;is&#x20;Set&#x20;to&#x20;40&#x20;or&#x20;Less','The&#x20;RequestReadTimeout&#x20;directive&#x20;allows&#x20;configuration&#x20;of&#x20;timeout&#x20;limits&#x20;for&#x20;client&#x20;requests.&#x20;The&#x20;header&#x20;portion&#x20;of&#x20;the&#x20;directive&#x20;provides&#x20;for&#x20;an&#x20;initial&#x20;timeout&#x20;value,&#x20;a&#x20;maximum&#x20;timeout&#x20;and&#x20;a&#x20;minimum&#x20;rate.&#x20;The&#x20;minimum&#x20;rate&#x20;specifies&#x20;that&#x20;after&#x20;the&#x20;initial&#x20;timeout,&#x20;the&#x20;server&#x20;will&#x20;wait&#x20;an&#x20;additional&#x20;1&#x20;second&#x20;for&#x20;each&#x20;N&#x20;bytes&#x20;received.&#x20;The&#x20;recommended&#x20;setting&#x20;is&#x20;to&#x20;have&#x20;a&#x20;maximum&#x20;timeout&#x20;of&#x20;40&#x20;seconds&#x20;or&#x20;less.&#x20;Keep&#x20;in&#x20;mind&#x20;that&#x20;for&#x20;SSL/TLS&#x20;virtual&#x20;hosts&#x20;the&#x20;time&#x20;for&#x20;the&#x20;TLS&#x20;handshake&#x20;must&#x20;fit&#x20;within&#x20;the&#x20;timeout.','Setting&#x20;a&#x20;request&#x20;header&#x20;timeout&#x20;is&#x20;vital&#x20;for&#x20;mitigating&#x20;Denial&#x20;of&#x20;Service&#x20;attacks&#x20;based&#x20;on&#x20;slow&#x20;requests.&#x20;The&#x20;slow&#x20;request&#x20;attacks&#x20;are&#x20;particularly&#x20;lethal&#x20;and&#x20;relative&#x20;easy&#x20;to&#x20;perform,&#x20;because&#x20;they&#x20;require&#x20;very&#x20;little&#x20;bandwidth&#x20;and&#x20;can&#x20;easily&#x20;be&#x20;done&#x20;through&#x20;anonymous&#x20;proxies.&#x20;Starting&#x20;in&#x20;June&#x20;2009&#x20;with&#x20;the&#x20;Slow&#x20;Loris&#x20;DoS&#x20;attack,&#x20;which&#x20;used&#x20;a&#x20;slow&#x20;GET&#x20;request&#x20;as&#x20;published&#x20;by&#x20;Robert&#x20;Hansen&#x20;&#40;RSnake&#41;&#x20;on&#x20;his&#x20;blog&#x20;http://ha.ckers.org/slowloris/.&#x20;Later&#x20;in&#x20;November&#x20;2010&#x20;at&#x20;the&#x20;OWASP&#x20;App&#x20;Sec&#x20;DC&#x20;conference&#x20;Wong&#x20;Onn&#x20;Chee&#x20;demonstrated&#x20;a&#x20;slow&#x20;POST&#x20;request&#x20;attack&#x20;which&#x20;was&#x20;even&#x20;more&#x20;effective.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Load&#x20;the&#x20;mod_requesttimeout&#x20;module&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;with&#x20;the&#x20;following&#x20;configuration.&#x20;LoadModule&#x20;reqtimeout_module&#x20;modules/mod_reqtimeout.so&#x20;2.&#x20;Add&#x20;a&#x20;RequestReadTimeout&#x20;directive&#x20;similar&#x20;to&#x20;the&#x20;one&#x20;below&#x20;with&#x20;the&#x20;maximum&#x20;request&#x20;header&#x20;timeout&#x20;value&#x20;of&#x20;40&#x20;seconds&#x20;or&#x20;less.&#x20;RequestReadTimeout&#x20;header=20-40,MinRate=500&#x20;body=20,MinRate=500','[{\"cis\": [\"9.5\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10025,'Ensure&#x20;Timeout&#x20;Limits&#x20;for&#x20;the&#x20;Request&#x20;Body&#x20;is&#x20;Set&#x20;to&#x20;20&#x20;or&#x20;Less','The&#x20;RequestReadTimeout&#x20;directive&#x20;also&#x20;allows&#x20;setting&#x20;timeout&#x20;values&#x20;for&#x20;the&#x20;body&#x20;portion&#x20;of&#x20;a&#x20;request.&#x20;The&#x20;directive&#x20;provides&#x20;for&#x20;an&#x20;initial&#x20;timeout&#x20;value,&#x20;and&#x20;a&#x20;maximum&#x20;timeout&#x20;and&#x20;minimum&#x20;rate.&#x20;The&#x20;minimum&#x20;rate&#x20;specifies&#x20;that&#x20;after&#x20;the&#x20;initial&#x20;timeout,&#x20;the&#x20;server&#x20;will&#x20;wait&#x20;an&#x20;additional&#x20;1&#x20;second&#x20;for&#x20;each&#x20;N&#x20;bytes&#x20;are&#x20;received.&#x20;The&#x20;recommended&#x20;setting&#x20;is&#x20;to&#x20;have&#x20;a&#x20;maximum&#x20;timeout&#x20;of&#x20;20&#x20;seconds&#x20;or&#x20;less.&#x20;The&#x20;default&#x20;value&#x20;is&#x20;body=20,MinRate=500.','It&#x20;is&#x20;not&#x20;sufficient&#x20;to&#x20;timeout&#x20;only&#x20;on&#x20;the&#x20;header&#x20;portion&#x20;of&#x20;the&#x20;request,&#x20;as&#x20;the&#x20;server&#x20;will&#x20;still&#x20;be&#x20;vulnerable&#x20;to&#x20;attacks&#x20;like&#x20;the&#x20;OWASP&#x20;Slow&#x20;POST&#x20;attack,&#x20;which&#x20;provide&#x20;the&#x20;body&#x20;of&#x20;the&#x20;request&#x20;very&#x20;slowly.&#x20;Therefore,&#x20;the&#x20;body&#x20;portion&#x20;of&#x20;the&#x20;request&#x20;must&#x20;have&#x20;a&#x20;timeout&#x20;as&#x20;well.&#x20;A&#x20;timeout&#x20;of&#x20;20&#x20;seconds&#x20;or&#x20;less&#x20;is&#x20;recommended.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;1.&#x20;Load&#x20;the&#x20;mod_requesttimeout&#x20;module&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;with&#x20;the&#x20;following&#x20;configuration.&#x20;LoadModule&#x20;reqtimeout_module&#x20;modules/mod_reqtimeout.so&#x20;2.&#x20;Add&#x20;a&#x20;RequestReadTimeout&#x20;directive&#x20;similar&#x20;to&#x20;the&#x20;one&#x20;below&#x20;with&#x20;the&#x20;maximum&#x20;request&#x20;body&#x20;timeout&#x20;value&#x20;of&#x20;20&#x20;seconds&#x20;or&#x20;less.&#x20;RequestReadTimeout&#x20;header=20-40,MinRate=500&#x20;body=20,MinRate=500','[{\"cis\": [\"9.6\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10026,'Ensure&#x20;the&#x20;LimitRequestLine&#x20;directive&#x20;is&#x20;Set&#x20;to&#x20;512&#x20;or&#x20;less','Buffer&#x20;Overflow&#x20;attacks&#x20;attempt&#x20;to&#x20;exploit&#x20;an&#x20;application&#x20;by&#x20;providing&#x20;more&#x20;data&#x20;than&#x20;the&#x20;application&#x20;buffer&#x20;can&#x20;contain.&#x20;If&#x20;the&#x20;application&#x20;allows&#x20;copying&#x20;data&#x20;to&#x20;the&#x20;buffer&#x20;to&#x20;overflow&#x20;the&#x20;boundaries&#x20;of&#x20;the&#x20;buffer,&#x20;then&#x20;the&#x20;application&#x20;is&#x20;vulnerable&#x20;to&#x20;a&#x20;buffer&#x20;overflow.&#x20;The&#x20;results&#x20;of&#x20;Buffer&#x20;overflow&#x20;vulnerabilities&#x20;vary,&#x20;and&#x20;may&#x20;result&#x20;in&#x20;the&#x20;application&#x20;crashing,&#x20;or&#x20;may&#x20;allow&#x20;the&#x20;attacker&#x20;to&#x20;execute&#x20;instructions&#x20;provided&#x20;in&#x20;the&#x20;data.&#x20;The&#x20;Apache&#x20;LimitRequest*&#x20;directives&#x20;allow&#x20;the&#x20;Apache&#x20;web&#x20;server&#x20;to&#x20;limit&#x20;the&#x20;sizes&#x20;of&#x20;requests&#x20;and&#x20;request&#x20;fields&#x20;and&#x20;can&#x20;be&#x20;used&#x20;to&#x20;help&#x20;protect&#x20;programs&#x20;and&#x20;applications&#x20;processing&#x20;those&#x20;requests.&#x20;Specifically,&#x20;the&#x20;LimitRequestLine&#x20;directive&#x20;limits&#x20;the&#x20;allowed&#x20;size&#x20;of&#x20;a&#x20;client&#039;s&#x20;HTTP&#x20;request-line,&#x20;which&#x20;consists&#x20;of&#x20;the&#x20;HTTP&#x20;method,&#x20;URI,&#x20;and&#x20;protocol&#x20;version.','The&#x20;limiting&#x20;of&#x20;the&#x20;size&#x20;of&#x20;the&#x20;request&#x20;line&#x20;is&#x20;helpful&#x20;so&#x20;that&#x20;the&#x20;web&#x20;server&#x20;can&#x20;prevent&#x20;an&#x20;unexpectedly&#x20;long&#x20;or&#x20;large&#x20;request&#x20;from&#x20;being&#x20;passed&#x20;to&#x20;a&#x20;potentially&#x20;vulnerable&#x20;CGI&#x20;program,&#x20;module&#x20;or&#x20;application&#x20;that&#x20;would&#x20;have&#x20;attempted&#x20;to&#x20;process&#x20;the&#x20;request.&#x20;Of&#x20;course,&#x20;the&#x20;underlying&#x20;dependency&#x20;is&#x20;that&#x20;we&#x20;need&#x20;to&#x20;set&#x20;the&#x20;limits&#x20;high&#x20;enough&#x20;to&#x20;not&#x20;interfere&#x20;with&#x20;any&#x20;one&#x20;application&#x20;on&#x20;the&#x20;server,&#x20;while&#x20;setting&#x20;them&#x20;low&#x20;enough&#x20;to&#x20;be&#x20;of&#x20;value&#x20;in&#x20;protecting&#x20;the&#x20;applications.&#x20;Since&#x20;the&#x20;configuration&#x20;directive&#x20;is&#x20;available&#x20;only&#x20;at&#x20;the&#x20;server&#x20;configuration&#x20;level,&#x20;it&#x20;is&#x20;not&#x20;possible&#x20;to&#x20;tune&#x20;the&#x20;value&#x20;for&#x20;different&#x20;portions&#x20;of&#x20;the&#x20;same&#x20;web&#x20;server.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;carefully,&#x20;as&#x20;these&#x20;requests&#x20;may&#x20;interfere&#x20;with&#x20;the&#x20;expected&#x20;functionality&#x20;of&#x20;some&#x20;web&#x20;applications.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;LimitRequestline&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;512&#x20;or&#x20;shorter.&#x20;LimitRequestline&#x20;512','[{\"cis\": [\"10.1\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10027,'Ensure&#x20;the&#x20;LimitRequestFields&#x20;Directive&#x20;is&#x20;Set&#x20;to&#x20;100&#x20;or&#x20;Less','The&#x20;LimitRequestFields&#x20;directive&#x20;limits&#x20;the&#x20;number&#x20;of&#x20;fields&#x20;allowed&#x20;in&#x20;an&#x20;HTTP&#x20;request.','The&#x20;limiting&#x20;of&#x20;the&#x20;number&#x20;of&#x20;fields&#x20;is&#x20;helpful&#x20;so&#x20;that&#x20;the&#x20;web&#x20;server&#x20;can&#x20;prevent&#x20;an&#x20;unexpectedly&#x20;high&#x20;number&#x20;of&#x20;fields&#x20;from&#x20;being&#x20;passed&#x20;to&#x20;a&#x20;potentially&#x20;vulnerable&#x20;CGI&#x20;program,&#x20;module&#x20;or&#x20;application&#x20;that&#x20;would&#x20;have&#x20;attempted&#x20;to&#x20;process&#x20;the&#x20;request.&#x20;Of&#x20;course,&#x20;the&#x20;underlying&#x20;dependency&#x20;is&#x20;that&#x20;we&#x20;need&#x20;to&#x20;set&#x20;the&#x20;limits&#x20;high&#x20;enough&#x20;to&#x20;not&#x20;interfere&#x20;with&#x20;any&#x20;one&#x20;application&#x20;on&#x20;the&#x20;server,&#x20;while&#x20;setting&#x20;them&#x20;low&#x20;enough&#x20;to&#x20;be&#x20;of&#x20;value&#x20;in&#x20;protecting&#x20;the&#x20;applications.&#x20;Since&#x20;the&#x20;configuration&#x20;directives&#x20;are&#x20;available&#x20;only&#x20;at&#x20;the&#x20;server&#x20;configuration&#x20;level,&#x20;it&#x20;is&#x20;not&#x20;possible&#x20;to&#x20;tune&#x20;the&#x20;value&#x20;for&#x20;different&#x20;portions&#x20;of&#x20;the&#x20;same&#x20;web&#x20;server.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;carefully,&#x20;as&#x20;these&#x20;requests&#x20;may&#x20;interfere&#x20;with&#x20;the&#x20;expected&#x20;functionality&#x20;of&#x20;some&#x20;web&#x20;applications.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;LimitRequestFields&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;100&#x20;or&#x20;less.&#x20;If&#x20;the&#x20;directive&#x20;is&#x20;not&#x20;present&#x20;the&#x20;default&#x20;depends&#x20;on&#x20;a&#x20;compile&#x20;time&#x20;configuration,&#x20;but&#x20;defaults&#x20;to&#x20;a&#x20;value&#x20;of&#x20;100.&#x20;LimitRequestFields&#x20;100','[{\"cis\": [\"10.2\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10028,'Ensure&#x20;the&#x20;LimitRequestFieldsize&#x20;Directive&#x20;is&#x20;Set&#x20;to&#x20;1024&#x20;or&#x20;Less','The&#x20;LimitRequestFieldSize&#x20;limits&#x20;the&#x20;number&#x20;of&#x20;bytes&#x20;that&#x20;will&#x20;be&#x20;allowed&#x20;in&#x20;an&#x20;HTTP&#x20;request&#x20;header.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;the&#x20;LimitRequestFieldSize&#x20;directive&#x20;be&#x20;set&#x20;to&#x20;1024&#x20;or&#x20;less.','By&#x20;limiting&#x20;of&#x20;the&#x20;size&#x20;of&#x20;request&#x20;headers&#x20;is&#x20;helpful&#x20;so&#x20;that&#x20;the&#x20;web&#x20;server&#x20;can&#x20;prevent&#x20;an&#x20;unexpectedly&#x20;long&#x20;or&#x20;large&#x20;value&#x20;from&#x20;being&#x20;passed&#x20;to&#x20;exploit&#x20;a&#x20;potentially&#x20;vulnerable&#x20;program.&#x20;Of&#x20;course,&#x20;the&#x20;underlying&#x20;dependency&#x20;is&#x20;that&#x20;we&#x20;need&#x20;to&#x20;set&#x20;the&#x20;limits&#x20;high&#x20;enough&#x20;to&#x20;not&#x20;interfere&#x20;with&#x20;any&#x20;one&#x20;application&#x20;on&#x20;the&#x20;server,&#x20;while&#x20;setting&#x20;them&#x20;low&#x20;enough&#x20;to&#x20;be&#x20;of&#x20;value&#x20;in&#x20;protecting&#x20;the&#x20;applications.&#x20;Since&#x20;the&#x20;configuration&#x20;directives&#x20;are&#x20;available&#x20;only&#x20;at&#x20;the&#x20;server&#x20;configuration&#x20;level,&#x20;it&#x20;is&#x20;not&#x20;possible&#x20;to&#x20;tune&#x20;the&#x20;value&#x20;for&#x20;different&#x20;portions&#x20;of&#x20;the&#x20;same&#x20;web&#x20;server.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;carefully,&#x20;as&#x20;these&#x20;requests&#x20;may&#x20;interfere&#x20;with&#x20;the&#x20;expected&#x20;functionality&#x20;of&#x20;some&#x20;web&#x20;applications.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;LimitRequestFieldsize&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;1024&#x20;or&#x20;less.&#x20;LimitRequestFieldsize&#x20;1024','[{\"cis\": [\"10.3\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10029,'Ensure&#x20;the&#x20;LimitRequestBody&#x20;Directive&#x20;is&#x20;Set&#x20;to&#x20;102400&#x20;or&#x20;Less','The&#x20;LimitRequestBody&#x20;directive&#x20;limits&#x20;the&#x20;number&#x20;of&#x20;bytes&#x20;that&#x20;are&#x20;allowed&#x20;in&#x20;a&#x20;request&#x20;body.&#x20;Size&#x20;of&#x20;requests&#x20;may&#x20;vary&#x20;greatly;&#x20;for&#x20;example,&#x20;during&#x20;a&#x20;file&#x20;upload&#x20;the&#x20;size&#x20;of&#x20;the&#x20;file&#x20;must&#x20;fit&#x20;within&#x20;this&#x20;limit.','The&#x20;limiting&#x20;of&#x20;the&#x20;size&#x20;of&#x20;the&#x20;request&#x20;body&#x20;is&#x20;helpful&#x20;so&#x20;that&#x20;the&#x20;web&#x20;server&#x20;can&#x20;prevent&#x20;an&#x20;unexpectedly&#x20;long&#x20;or&#x20;large&#x20;request&#x20;from&#x20;being&#x20;passed&#x20;to&#x20;a&#x20;potentially&#x20;vulnerable&#x20;program.&#x20;Of&#x20;course,&#x20;the&#x20;underlying&#x20;dependency&#x20;is&#x20;that&#x20;we&#x20;need&#x20;to&#x20;set&#x20;the&#x20;limits&#x20;high&#x20;enough&#x20;to&#x20;not&#x20;interfere&#x20;with&#x20;any&#x20;one&#x20;application&#x20;on&#x20;the&#x20;server,&#x20;while&#x20;setting&#x20;them&#x20;low&#x20;enough&#x20;to&#x20;be&#x20;of&#x20;value&#x20;in&#x20;protecting&#x20;the&#x20;applications.&#x20;The&#x20;LimitRequestBody&#x20;may&#x20;be&#x20;configured&#x20;on&#x20;a&#x20;per&#x20;directory,&#x20;or&#x20;per&#x20;location&#x20;context.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;carefully,&#x20;as&#x20;these&#x20;requests&#x20;may&#x20;interfere&#x20;with&#x20;the&#x20;expected&#x20;functionality&#x20;of&#x20;some&#x20;web&#x20;applications.','','Perform&#x20;the&#x20;following&#x20;to&#x20;implement&#x20;the&#x20;recommended&#x20;state:&#x20;Add&#x20;or&#x20;modify&#x20;the&#x20;LimitRequestBody&#x20;directive&#x20;in&#x20;the&#x20;Apache&#x20;configuration&#x20;to&#x20;have&#x20;a&#x20;value&#x20;of&#x20;102400&#x20;&#40;100K&#41;&#x20;or&#x20;less.&#x20;Please&#x20;read&#x20;the&#x20;Apache&#x20;documentation&#x20;so&#x20;that&#x20;it&#x20;is&#x20;understood&#x20;that&#x20;this&#x20;directive&#x20;will&#x20;limit&#x20;the&#x20;size&#x20;of&#x20;file&#x20;up-loads&#x20;to&#x20;the&#x20;web&#x20;server.&#x20;LimitRequestBody&#x20;102400','[{\"cis\": [\"10.4\"]}, {\"cis_csc\": [\"9\", \"5.1\"]}]'),(10500,'Disable&#x20;MySQL&#x20;Command&#x20;History','On&#x20;Linux/UNIX,&#x20;the&#x20;MySQL&#x20;client&#x20;logs&#x20;statements&#x20;executed&#x20;interactively&#x20;to&#x20;a&#x20;history&#x20;file.&#x20;By&#x20;default,&#x20;this&#x20;file&#x20;is&#x20;named&#x20;.mysql_history&#x20;in&#x20;the&#x20;user&#039;s&#x20;home&#x20;directory.&#x20;Most&#x20;interactive&#x20;commands&#x20;run&#x20;in&#x20;the&#x20;MySQL&#x20;client&#x20;application&#x20;are&#x20;saved&#x20;to&#x20;a&#x20;history&#x20;file.&#x20;The&#x20;MySQL&#x20;command&#x20;history&#x20;should&#x20;be&#x20;disabled.','Disabling&#x20;the&#x20;MySQL&#x20;command&#x20;history&#x20;reduces&#x20;the&#x20;probability&#x20;of&#x20;exposing&#x20;sensitive&#x20;information,&#x20;such&#x20;as&#x20;passwords&#x20;and&#x20;encryption&#x20;keys.','','Perform&#x20;the&#x20;following&#x20;steps:&#x20;1.&#x20;Remove&#x20;.mysql_history&#x20;if&#x20;it&#x20;exists.&#x20;And&#x20;2.&#x20;Set&#x20;the&#x20;MYSQL_HISTFILE&#x20;environment&#x20;variable&#x20;to&#x20;/dev/null.&#x20;This&#x20;will&#x20;need&#x20;to&#x20;be&#x20;placed&#x20;in&#x20;the&#x20;shell&#039;s&#x20;startup&#x20;script.&#x20;Or&#x20;Create&#x20;$HOME/.mysql_history&#x20;as&#x20;a&#x20;symbolic&#x20;to&#x20;/dev/null.','[{\"cis\": [\"1.3\"]}]'),(10501,'Disable&#x20;Interactive&#x20;Login','When&#x20;created,&#x20;the&#x20;MySQL&#x20;user&#x20;may&#x20;have&#x20;interactive&#x20;access&#x20;to&#x20;the&#x20;operating&#x20;system,&#x20;which&#x20;means&#x20;that&#x20;the&#x20;MySQL&#x20;user&#x20;could&#x20;login&#x20;to&#x20;the&#x20;host&#x20;as&#x20;any&#x20;other&#x20;user&#x20;would.','Preventing&#x20;the&#x20;MySQL&#x20;user&#x20;from&#x20;logging&#x20;in&#x20;interactively&#x20;may&#x20;reduce&#x20;the&#x20;impact&#x20;of&#x20;a&#x20;compromised&#x20;MySQL&#x20;account.&#x20;There&#x20;is&#x20;also&#x20;more&#x20;accountability&#x20;as&#x20;accessing&#x20;the&#x20;operating&#x20;system&#x20;where&#x20;the&#x20;MySQL&#x20;server&#x20;lies&#x20;will&#x20;require&#x20;the&#x20;user&#039;s&#x20;own&#x20;account.&#x20;Interactive&#x20;access&#x20;by&#x20;the&#x20;MySQL&#x20;user&#x20;is&#x20;unnecessary&#x20;and&#x20;should&#x20;be&#x20;disabled.','','Execute&#x20;one&#x20;of&#x20;the&#x20;following&#x20;commands&#x20;in&#x20;a&#x20;terminal:&#x20;&#039;usermod&#x20;-s&#x20;/bin/false&#x20;mysql&#039;&#x20;or&#x20;&#039;usermod&#x20;-s&#x20;/sbin/nologin&#x20;mysql&#039;','[{\"cis\": [\"1.5\"]}]'),(10502,'Verify&#x20;That&#x20;&#039;MYSQL_PWD&#039;&#x20;Is&#x20;Not&#x20;Set&#x20;In&#x20;Users&#039;&#x20;Profiles','MySQL&#x20;can&#x20;read&#x20;a&#x20;default&#x20;database&#x20;password&#x20;from&#x20;an&#x20;environment&#x20;variable&#x20;called&#x20;MYSQL_PWD.','The&#x20;use&#x20;of&#x20;the&#x20;MYSQL_PWD&#x20;environment&#x20;variable&#x20;implies&#x20;the&#x20;clear&#x20;text&#x20;storage&#x20;of&#x20;MySQL&#x20;credentials.&#x20;Avoiding&#x20;this&#x20;may&#x20;increase&#x20;assurance&#x20;that&#x20;the&#x20;confidentiality&#x20;of&#x20;MySQL&#x20;credentials&#x20;is&#x20;preserved.','','Check&#x20;which&#x20;users&#x20;and/or&#x20;scripts&#x20;are&#x20;setting&#x20;MYSQL_PWD&#x20;and&#x20;change&#x20;them&#x20;to&#x20;use&#x20;a&#x20;more&#x20;secure&#x20;method.','[{\"cis\": [\"1.6\"]}]'),(10503,'Ensure&#x20;&#039;allow-suspicious-udfs&#039;&#x20;Is&#x20;Set&#x20;to&#x20;&#039;FALSE&#039;','This&#x20;option&#x20;prevents&#x20;attaching&#x20;arbitrary&#x20;shared&#x20;library&#x20;functions&#x20;as&#x20;user-defined&#x20;functions&#x20;by&#x20;checking&#x20;for&#x20;at&#x20;least&#x20;one&#x20;corresponding&#x20;method&#x20;named&#x20;_init,&#x20;_deinit,&#x20;_reset,&#x20;_clear,&#x20;or&#x20;_add.','Preventing&#x20;shared&#x20;libraries&#x20;that&#x20;do&#x20;not&#x20;contain&#x20;user-defined&#x20;functions&#x20;from&#x20;loading&#x20;will&#x20;reduce&#x20;the&#x20;attack&#x20;surface&#x20;of&#x20;the&#x20;server.','','Remove&#x20;&#039;--allow-suspicious-udfs&#039;&#x20;from&#x20;the&#x20;&#039;mysqld&#039;&#x20;start&#x20;up&#x20;command&#x20;line.&#x20;Or&#x20;Remove&#x20;&#039;allow-suspicious-udfs&#039;&#x20;from&#x20;the&#x20;MySQL&#x20;option&#x20;file.','[{\"cis\": [\"4.3\"]}]'),(10504,'Ensure&#x20;&#039;local_infile&#039;&#x20;is&#x20;Disabled','The&#x20;&#039;local_infile&#039;&#x20;parameter&#x20;dictates&#x20;whether&#x20;files&#x20;located&#x20;on&#x20;the&#x20;MySQL&#x20;client&#039;s&#x20;computer&#x20;can&#x20;be&#x20;loaded&#x20;or&#x20;selected&#x20;via&#x20;&#039;LOAD&#x20;DATA&#x20;INFILE&#039;&#x20;or&#x20;&#039;SELECT&#x20;local_file&#039;.','Disabling&#x20;&#039;local_infile&#039;&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;ability&#x20;to&#x20;read&#x20;sensitive&#x20;files&#x20;off&#x20;the&#x20;affected&#x20;server&#x20;via&#x20;a&#x20;SQL&#x20;injection&#x20;vulnerability.','','Add&#x20;a&#x20;line&#x20;local-infile=0&#x20;in&#x20;the&#x20;[mysqld]&#x20;section&#x20;of&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;and&#x20;restart&#x20;the&#x20;MySQL&#x20;service.','[{\"cis\": [\"4.4\"]}]'),(10505,'Ensure&#x20;&#039;mysqld&#039;&#x20;Is&#x20;Not&#x20;Started&#x20;with&#x20;&#039;--skip-grant-tables&#039;','This&#x20;option&#x20;causes&#x20;mysqld&#x20;to&#x20;start&#x20;without&#x20;using&#x20;the&#x20;privilege&#x20;system.','If&#x20;this&#x20;option&#x20;is&#x20;used,&#x20;all&#x20;clients&#x20;of&#x20;the&#x20;affected&#x20;server&#x20;will&#x20;have&#x20;unrestricted&#x20;access&#x20;to&#x20;all&#x20;databases.','','Open&#x20;the&#x20;MySQL&#x20;configuration&#x20;&#40;e.g.&#x20;my.cnf&#41;&#x20;file&#x20;and&#x20;set:&#x20;skip-grant-tables&#x20;=&#x20;FALSE','[{\"cis\": [\"4.5\"]}]'),(10506,'Ensure&#x20;&#039;--skip-symbolic-links&#039;&#x20;Is&#x20;Enabled','The&#x20;symbolic-links&#x20;and&#x20;skip-symbolic-links&#x20;options&#x20;for&#x20;MySQL&#x20;determine&#x20;whether&#x20;symbolic&#x20;link&#x20;support&#x20;is&#x20;available.&#x20;&#x20;When&#x20;use&#x20;of&#x20;symbolic&#x20;links&#x20;are&#x20;enabled,&#x20;they&#x20;have&#x20;different&#x20;effects&#x20;depending&#x20;on&#x20;the&#x20;host&#x20;platform.&#x20;&#x20;When&#x20;symbolic&#x20;links&#x20;are&#x20;disabled,&#x20;then&#x20;symbolic&#x20;links&#x20;stored&#x20;in&#x20;files&#x20;or&#x20;entries&#x20;in&#x20;tables&#x20;are&#x20;not&#x20;used&#x20;by&#x20;the&#x20;database.&#x20;','Prevents&#x20;sym&#x20;links&#x20;being&#x20;used&#x20;for&#x20;data&#x20;base&#x20;files.&#x20;This&#x20;is&#x20;especially&#x20;important&#x20;when&#x20;MySQL&#x20;is&#x20;executing&#x20;as&#x20;root&#x20;as&#x20;arbitrary&#x20;files&#x20;may&#x20;be&#x20;overwritten.&#x20;The&#x20;symbolic-links&#x20;option&#x20;might&#x20;allow&#x20;someone&#x20;to&#x20;direct&#x20;actions&#x20;by&#x20;to&#x20;MySQL&#x20;server&#x20;to&#x20;other&#x20;files&#x20;and/or&#x20;directories.','','Open&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#41;,&#x20;locate&#x20;&#039;skip_symbolic_links&#039;&#x20;and&#x20;set&#x20;it&#x20;to&#x20;YES.&#x20;If&#x20;the&#x20;option&#x20;does&#x20;not&#x20;exist,&#x20;create&#x20;it&#x20;in&#x20;the&#x20;&#039;mysqld&#039;&#x20;section.','[{\"cis\": [\"4.6\"]}]'),(10507,'Ensure&#x20;&#039;secure_file_priv&#039;&#x20;is&#x20;not&#x20;empty','The&#x20;secure_file_priv&#x20;option&#x20;restricts&#x20;to&#x20;paths&#x20;used&#x20;by&#x20;LOAD&#x20;DATA&#x20;INFILE&#x20;or&#x20;SELECT&#x20;local_file.&#x20;It&#x20;is&#x20;recommended&#x20;that&#x20;this&#x20;option&#x20;be&#x20;set&#x20;to&#x20;a&#x20;file&#x20;system&#x20;location&#x20;that&#x20;contains&#x20;only&#x20;resources&#x20;expected&#x20;to&#x20;be&#x20;loaded&#x20;by&#x20;MySQL.','Setting&#x20;secure_file_priv&#x20;reduces&#x20;an&#x20;attacker&#039;s&#x20;ability&#x20;to&#x20;read&#x20;sensitive&#x20;files&#x20;off&#x20;the&#x20;affected&#x20;server&#x20;via&#x20;a&#x20;SQL&#x20;injection&#x20;vulnerability.&#x20;','','Add&#x20;the&#x20;line&#x20;secure_file_priv=&lt;path_to_load_directory&gt;&#x20;to&#x20;the&#x20;[mysqld]&#x20;section&#x20;of&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;and&#x20;restart&#x20;the&#x20;MySQL&#x20;service.','[{\"cis\": [\"4.8\"]}]'),(10508,'Ensure&#x20;&#039;sql_mode&#039;&#x20;Contains&#x20;&#039;STRICT_ALL_TABLES&#039;','When&#x20;data&#x20;changing&#x20;statements&#x20;are&#x20;made&#x20;&#40;i.e.&#x20;INSERT,&#x20;UPDATE&#41;,&#x20;MySQL&#x20;can&#x20;handle&#x20;invalid&#x20;or&#x20;missing&#x20;values&#x20;differently&#x20;depending&#x20;on&#x20;whether&#x20;strict&#x20;SQL&#x20;mode&#x20;is&#x20;enabled.&#x20;When&#x20;strict&#x20;SQL&#x20;mode&#x20;is&#x20;enabled,&#x20;data&#x20;may&#x20;not&#x20;be&#x20;truncated&#x20;or&#x20;otherwise&#x20;&#039;adjusted&#039;&#x20;to&#x20;make&#x20;the&#x20;data&#x20;changing&#x20;statement&#x20;work.','Without&#x20;strict&#x20;mode&#x20;the&#x20;server&#x20;tries&#x20;to&#x20;do&#x20;proceed&#x20;with&#x20;the&#x20;action&#x20;when&#x20;an&#x20;error&#x20;might&#x20;have&#x20;been&#x20;a&#x20;more&#x20;secure&#x20;choice.&#x20;For&#x20;example,&#x20;by&#x20;default&#x20;MySQL&#x20;will&#x20;truncate&#x20;data&#x20;if&#x20;it&#x20;does&#x20;not&#x20;fit&#x20;in&#x20;a&#x20;field,&#x20;which&#x20;can&#x20;lead&#x20;to&#x20;unknown&#x20;behavior,&#x20;or&#x20;be&#x20;leveraged&#x20;by&#x20;an&#x20;attacker&#x20;to&#x20;circumvent&#x20;data&#x20;validation.&#x20;','','Add&#x20;STRICT_ALL_TABLES&#x20;to&#x20;the&#x20;sql_mode&#x20;in&#x20;the&#x20;server&#039;s&#x20;configuration&#x20;file.','[{\"cis\": [\"4.9\"]}]'),(10509,'Ensure&#x20;&#039;log_error&#039;&#x20;is&#x20;not&#x20;empty','The&#x20;error&#x20;log&#x20;contains&#x20;information&#x20;about&#x20;events&#x20;such&#x20;as&#x20;mysqld&#x20;starting&#x20;and&#x20;stopping,&#x20;when&#x20;a&#x20;table&#x20;needs&#x20;to&#x20;be&#x20;checked&#x20;or&#x20;repaired,&#x20;and,&#x20;depending&#x20;on&#x20;the&#x20;host&#x20;operating&#x20;system,&#x20;stack&#x20;traces&#x20;when&#x20;mysqld&#x20;fails','Enabling&#x20;error&#x20;logging&#x20;may&#x20;increase&#x20;the&#x20;ability&#x20;to&#x20;detect&#x20;malicious&#x20;attempts&#x20;against&#x20;MySQL,&#x20;and&#x20;other&#x20;critical&#x20;messages,&#x20;such&#x20;as&#x20;if&#x20;the&#x20;error&#x20;log&#x20;is&#x20;not&#x20;enabled&#x20;then&#x20;connection&#x20;error&#x20;might&#x20;go&#x20;unnoticed.','','Set&#x20;the&#x20;log-error&#x20;option&#x20;to&#x20;the&#x20;path&#x20;for&#x20;the&#x20;error&#x20;log&#x20;in&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#x20;or&#x20;my.ini&#41;.','[{\"cis\": [\"6.1\"]}]'),(10510,'Ensure&#x20;Log&#x20;Files&#x20;are&#x20;not&#x20;Stored&#x20;on&#x20;a&#x20;non-system&#x20;partition','MySQL&#x20;log&#x20;files&#x20;can&#x20;be&#x20;set&#x20;in&#x20;the&#x20;MySQL&#x20;configuration&#x20;to&#x20;exist&#x20;anywhere&#x20;on&#x20;the&#x20;filesystem.&#x20;&#x20;It&#x20;is&#x20;common&#x20;practice&#x20;to&#x20;ensure&#x20;that&#x20;the&#x20;system&#x20;filesystem&#x20;is&#x20;left&#x20;uncluttered&#x20;by&#x20;application&#x20;logs.&#x20;&#x20;System&#x20;filesystems&#x20;include&#x20;the&#x20;root,&#x20;/var,&#x20;or&#x20;/usr.','Moving&#x20;the&#x20;MySQL&#x20;logs&#x20;off&#x20;the&#x20;system&#x20;partition&#x20;will&#x20;reduce&#x20;the&#x20;probability&#x20;of&#x20;denial&#x20;of&#x20;service&#x20;via&#x20;the&#x20;exhaustion&#x20;of&#x20;available&#x20;disk&#x20;space&#x20;to&#x20;the&#x20;operating&#x20;system.','','In&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#41;,&#x20;locate&#x20;the&#x20;log-bin&#x20;entry&#x20;and&#x20;set&#x20;it&#x20;to&#x20;a&#x20;file&#x20;not&#x20;on&#x20;root&#x20;&#40;&#039;/&#039;&#41;,&#x20;/var,&#x20;or&#x20;/usr.','[{\"cis\": [\"6.2\"]}]'),(10511,'Ensure&#x20;&#039;log_warning&#039;&#x20;is&#x20;set&#x20;to&#x20;2','The&#x20;log_warnings&#x20;system&#x20;variable,&#x20;enabled&#x20;by&#x20;default,&#x20;provides&#x20;additional&#x20;information&#x20;to&#x20;the&#x20;MySQL&#x20;log.&#x20;&#x20;A&#x20;value&#x20;of&#x20;1&#x20;enables&#x20;logging&#x20;of&#x20;warning&#x20;messages,&#x20;and&#x20;higher&#x20;integer&#x20;values&#x20;tend&#x20;to&#x20;enable&#x20;more&#x20;logging.','This&#x20;might&#x20;help&#x20;to&#x20;detect&#x20;malicious&#x20;behavior&#x20;by&#x20;logging&#x20;communication&#x20;errors&#x20;and&#x20;aborted&#x20;connections.','','Ensure&#x20;a&#x20;line&#x20;containing&#x20;log-warnings&#x20;=&#x20;2&#x20;is&#x20;found&#x20;in&#x20;the&#x20;mysqld&#x20;section&#x20;of&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#41;.','[{\"cis\": [\"6.3\"]}]'),(10512,'Ensure&#x20;&#039;log_raw&#039;&#x20;is&#x20;set&#x20;to&#x20;&#039;OFF&#039;','The&#x20;log-raw&#x20;MySQL&#x20;option&#x20;determines&#x20;whether&#x20;passwords&#x20;are&#x20;rewritten&#x20;by&#x20;the&#x20;server&#x20;so&#x20;as&#x20;not&#x20;to&#x20;appear&#x20;in&#x20;log&#x20;files&#x20;as&#x20;plain&#x20;text.&#x20;&#x20;If&#x20;log-raw&#x20;is&#x20;enabled,&#x20;then&#x20;passwords&#x20;are&#x20;written&#x20;to&#x20;the&#x20;various&#x20;log&#x20;files&#x20;&#40;general&#x20;query&#x20;log,&#x20;slow&#x20;query&#x20;log,&#x20;and&#x20;binary&#x20;log&#41;&#x20;in&#x20;plain&#x20;text.&#x20;','With&#x20;raw&#x20;logging&#x20;of&#x20;passwords&#x20;enabled&#x20;someone&#x20;with&#x20;access&#x20;to&#x20;the&#x20;log&#x20;files&#x20;might&#x20;see&#x20;plain&#x20;text&#x20;passwords.','','IN&#x20;the&#x20;MySQL&#x20;configuration&#x20;file&#x20;&#40;my.cnf&#41;,&#x20;locate&#x20;and&#x20;set&#x20;the&#x20;value&#x20;of&#x20;this&#x20;option:&#x20;log-raw&#x20;=&#x20;OFF','[{\"cis\": [\"6.4\"]}]');

From c577fedff40890cb2b447b2bd33cd7df1a61456b Mon Sep 17 00:00:00 2001
From: Jonathan <jonathan.leon@pandorafms.com>
Date: Thu, 28 Sep 2023 11:46:15 +0200
Subject: [PATCH 067/116] #12145 remove maxlength

---
 pandora_console/godmode/setup/gis_step_2.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pandora_console/godmode/setup/gis_step_2.php b/pandora_console/godmode/setup/gis_step_2.php
index f2dac0bf20..4205932146 100644
--- a/pandora_console/godmode/setup/gis_step_2.php
+++ b/pandora_console/godmode/setup/gis_step_2.php
@@ -1,4 +1,4 @@
-<?php
+&STYLES=&EXCEPTIONS=application%2Fvnd.ogc.se_inimage&SRS=EPSG%3A900913<?php
 /**
  * Pandora FMS- https://pandorafms.com
  * ==================================================
@@ -312,7 +312,7 @@ if ($mapConnectionData != null) {
         $mapConnectionDataUrl,
         '',
         45,
-        90,
+        false,
         true
     ).'</td></tr></table>';
 

From a1d170cf0f187ca2c3fafb9a07da2aac6ce2d48f Mon Sep 17 00:00:00 2001
From: Jonathan <jonathan.leon@pandorafms.com>
Date: Thu, 28 Sep 2023 11:47:58 +0200
Subject: [PATCH 068/116] #12145 remove maxlength

---
 pandora_console/godmode/setup/gis_step_2.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pandora_console/godmode/setup/gis_step_2.php b/pandora_console/godmode/setup/gis_step_2.php
index 4205932146..f2e9182a07 100644
--- a/pandora_console/godmode/setup/gis_step_2.php
+++ b/pandora_console/godmode/setup/gis_step_2.php
@@ -1,4 +1,4 @@
-&STYLES=&EXCEPTIONS=application%2Fvnd.ogc.se_inimage&SRS=EPSG%3A900913<?php
+<?php
 /**
  * Pandora FMS- https://pandorafms.com
  * ==================================================

From 70ad1ea98600e96fbd7bd28a3dbc89dd20c76cae Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Thu, 28 Sep 2023 13:08:33 +0200
Subject: [PATCH 069/116] minor changes

---
 .../godmode/reporting/reporting_builder.item_editor.php   | 8 +-------
 pandora_console/include/functions_reporting.php           | 4 ++--
 2 files changed, 3 insertions(+), 9 deletions(-)

diff --git a/pandora_console/godmode/reporting/reporting_builder.item_editor.php b/pandora_console/godmode/reporting/reporting_builder.item_editor.php
index e350204930..291e0a1f01 100755
--- a/pandora_console/godmode/reporting/reporting_builder.item_editor.php
+++ b/pandora_console/godmode/reporting/reporting_builder.item_editor.php
@@ -1278,7 +1278,7 @@ $class = 'databox filters';
             <td class="bolder">
                 <?php
                 echo __('Operating system version').ui_print_help_tip(
-                    __('Case insensitive regular expression for OS version. For example: Centos.* will match with the following OS versions: Centos 6.4, Centos 7'),
+                    __('Case insensitive regular expression for OS version. For example: Centos.* will match with the following OS versions: Centos 6.4, Centos 7. Important: OS version must be registered in Operating Systems editor.'),
                     true
                 );
                 ?>
@@ -1301,12 +1301,6 @@ $class = 'databox filters';
         <td class="bolder"><?php echo __('End of life'); ?></td>
             <td colspan="6">
             <?php
-            $end_of_life_date = (string) get_parameter(
-                'end_of_life_date',
-                date(DATE_FORMAT, $utimestamp)
-            );
-            $end_of_life_date = date(DATE_FORMAT, $result['date_from']);
-
             $timeInputs = [];
 
             $timeInputs[] = html_print_div(
diff --git a/pandora_console/include/functions_reporting.php b/pandora_console/include/functions_reporting.php
index 0427e1a135..ce15b4b626 100755
--- a/pandora_console/include/functions_reporting.php
+++ b/pandora_console/include/functions_reporting.php
@@ -3698,10 +3698,10 @@ function reporting_end_of_life($report, $content)
         // Post-process returned agents to filter agents using correctly formatted fields.
         foreach ($agents as $idx => $agent) {
             // Must perform this query and subsequent operations in each iteration (note this is costly) since OS version field may contain HTML entities in BD and decoding can't be fully handled with mysql methods when doing a REGEXP.
-            $result_end_of_life = db_get_value_sql('SELECT end_of_support FROM tconfig_os_version WHERE "'.io_safe_output($agent['os_version']).'" REGEXP version');
+            $result_end_of_life = db_get_value_sql('SELECT end_of_support FROM tconfig_os_version WHERE "'.io_safe_output($agent['os_version']).'" REGEXP version AND "'.io_safe_output($agent['name']).'" REGEXP product');
             $agent_eol_datetime = DateTime::createFromFormat('Y/m/d', $result_end_of_life);
 
-            if ((preg_match('/'.$es_os_version.'/', $agent['os_version']) || $es_os_version === '') && $result_end_of_life !== false && $es_limit_eol_datetime >= $agent_eol_datetime) {
+            if ((preg_match('/'.$es_os_version.'/i', $agent['os_version']) || $es_os_version === '') && $result_end_of_life !== false && ($es_limit_eol_datetime === false || $es_limit_eol_datetime >= $agent_eol_datetime)) {
                 // Agent matches an existing OS version.
                 $agents[$idx]['end_of_life'] = $result_end_of_life;
             } else {

From 477d3e62f8d9336c8cb83ffb4d9276bfe58b8e29 Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Fri, 29 Sep 2023 01:00:27 +0200
Subject: [PATCH 070/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index 483710b13a..476638a9a5 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-230928
+Version: 7.0NG.773.3-230929
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index d28b3ee47f..f5c9d960bb 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230928"
+pandora_version="7.0NG.773.3-230929"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 8179796429..3a22258ee0 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '230928';
+use constant AGENT_BUILD => '230929';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 775c7b6de2..a07bf70cfb 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230928
+%define release     230929
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index e79f77124f..d964b57451 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230928
+%define release     230929
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index 027ac1e8fa..dcf73ffc22 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230928
+%define release     230929
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 094d35b842..923a2eb1f7 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230928"
+PI_BUILD="230929"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 0048e27d18..9b735ea8b3 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{230928}
+{230929}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index b28df08cd0..7ce821fb81 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 230928")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 230929")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 88007e38d9..10f53c4bfc 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 230928))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 230929))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index c628b00d4b..b6c1b8ecc7 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-230928
+Version: 7.0NG.773.3-230929
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 01f25b1bd7..580913f13f 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230928"
+pandora_version="7.0NG.773.3-230929"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 90b4673dd5..d6e17232d0 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC230928';
+$build_version = 'PC230929';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index e181906a0b..ae0f024382 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '230928';
+            $build = '230929';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index eb0de7ef8c..3b3d9650e9 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230928
+%define release     230929
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index f1d8475905..0efd967993 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230928
+%define release     230929
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index e3ecb23633..41948dfb7e 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230928
+%define release     230929
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 5cd86fd5b6..b3283d4ef1 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-230928
+Version: 7.0NG.773.3-230929
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index 3c1b457f85..a4f30e0505 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230928"
+pandora_version="7.0NG.773.3-230929"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index f1a3490fa7..8e6417807f 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230928";
+my $pandora_build = "230929";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index fd3b4da7fc..abca861f48 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230928";
+my $pandora_build = "230929";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index d9274cb126..e03ae323c3 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230928
+%define release     230929
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index ba7c1d7fca..ca11a57e05 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230928
+%define release     230929
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index e20b5fb78e..75458bbb4c 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230928"
+PI_BUILD="230929"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index db6b4f2860..b6a4ab3092 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230928";
+my $version = "7.0NG.773.3 Build 230929";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index 09dcd450f9..c32ebc9bb3 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230928";
+my $version = "7.0NG.773.3 Build 230929";
 
 # save program name for logging
 my $progname = basename($0);

From 418624000ff1d32204914bd9177bcedf985db4ed Mon Sep 17 00:00:00 2001
From: Jorge Rincon <jorge.rincon@pandorafms.com>
Date: Fri, 29 Sep 2023 09:21:08 +0200
Subject: [PATCH 071/116] #12142 Caught bd exception in php version 8.0 and 8.2

---
 pandora_console/include/db/mysql.php | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/pandora_console/include/db/mysql.php b/pandora_console/include/db/mysql.php
index 66510a1898..e8e7a6b020 100644
--- a/pandora_console/include/db/mysql.php
+++ b/pandora_console/include/db/mysql.php
@@ -80,8 +80,13 @@ function mysql_connect_db(
     // If you want persistent connections change it to mysql_pconnect().
     if ($config['mysqli']) {
         if (empty($ssl)) {
-            $connect_id = mysqli_connect($host, $user, $pass, $db, $port);
-            if (mysqli_connect_errno() > 0) {
+            try {
+                $connect_id = mysqli_connect($host, $user, $pass, $db, $port);
+                if (mysqli_connect_errno() > 0) {
+                    include 'general/mysqlerr.php';
+                    return false;
+                }
+            } catch (\mysqli_sql_exception $e) {
                 include 'general/mysqlerr.php';
                 return false;
             }

From 33d9badd3e387b8b677857ccc66f77e6099693be Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Fri, 29 Sep 2023 15:17:43 +0200
Subject: [PATCH 072/116] Added md5 check to server path for migrating
 discovery apps

---
 .../DiscoveryApplicationsMigrateCodes.ini     |  22 +-
 .../pandorafms.mysql/discovery_definition.ini | 172 +++
 .../discovery/pandorafms.mysql/logo.png       | Bin 0 -> 12952 bytes
 .../pandorafms.mysql/pandora_mysql.py         | 979 ++++++++++++++++++
 .../pandorafms.mysql/pandora_mysql.req        |   2 +
 .../wizards/ManageExtensions.class.php        |  60 +-
 6 files changed, 1196 insertions(+), 39 deletions(-)
 create mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
 create mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/logo.png
 create mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
 create mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req

diff --git a/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini b/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
index 5eff8c47d0..da8731393a 100644
--- a/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
+++ b/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
@@ -1,11 +1,11 @@
-pandorafms.vmware=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.mysql=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.mssql=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.oracle=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.db2=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.sap.deset=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.gcp.ce=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.aws.ec2=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.aws.s3=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.aws.rds=d41d8cd98f00b204e9800998ecf8427e
-pandorafms.azure.mc=d41d8cd98f00b204e9800998ecf8427e
\ No newline at end of file
+pandorafms.vmware=d69778777e1cebfb80b4b3fbdcbbadcc
+pandorafms.mysql=fadb4750d18285c0eca34f47c6aa3cfe
+pandorafms.mssql=1cc215409741d19080269ffba112810e
+pandorafms.oracle=2d9320a514d1e48a0b2804e1653c31c6
+pandorafms.db2=122f2abff0ec1d668c35ee0911483021
+pandorafms.sap.deset=9bb72b7f7497a8b543f25cd71f96878f
+pandorafms.gcp.ce=6743d39452f8e1ad85d0d56a30843973
+pandorafms.aws.ec2=07416081f11d92a7d5d9441dabb5c5cb
+pandorafms.aws.s3=eff053a212ea112e2a37efd9debbe6a0
+pandorafms.aws.rds=47d7b02019329e1698f96db4959f9516
+pandorafms.azure.mc=04a1072d1ece8583645ad88204fbeed3
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini b/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
new file mode 100644
index 0000000000..7345f5f1d9
--- /dev/null
+++ b/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
@@ -0,0 +1,172 @@
+[discovery_extension_definition]
+
+short_name = pandorafms.mysql
+section = app
+name = MySQL
+version = "1.0"
+description = Monitor MySQL databases
+
+execution_file[_exec1_] = "bin/pandora_mysql"
+
+exec[] = "'_exec1_' --conf '_tempfileConf_' --target_databases '_tempfileTargetDatabases_' --target_agents '_tempfileTargetAgents_' --custom_queries '_tempfileCustomQueries_'"
+
+default_value[_dbstrings_] = ""
+default_value[_dbuser_] = ""
+default_value[_dbpass_] = ""
+default_value[_threads_] = 1
+default_value[_engineAgent_] = ""
+default_value[_prefixModuleName_] = ""
+default_value[_scanDatabases_] = false
+default_value[_agentPerDatabase_] = false
+default_value[_prefixAgent_] = ""
+default_value[_checkUptime_] = true
+default_value[_queryStats_] = true
+default_value[_checkConnections_] = true
+default_value[_checkInnodb_] = true
+default_value[_checkCache_] = true
+default_value[_executeCustomQueries_] = true
+default_value[_customQueries_] = "# =======================================================================
+# Custom queries definition guide
+# =======================================================================
+# Definition example
+# check_begin
+# target_databases  database where should be executed, default (all)
+# name              custom name chosen by the user
+# description       custom description chosen by the user
+# operation         value | full,
+#                     value returns a simple value,
+#                     full returns all rows in a string
+# target            query to be executed,
+#                     you can use reserved word $__self_dbname to
+#                     reference current analyzed database name
+# datatype          module datatype, could be:
+#                     generic_data | generic_data_string |
+#                     generic_proc
+# min_warning       minimum warning
+# max_warning       maximum warning
+# min_critical      minimum critical
+# max_critical      maximum critical
+# inverse_warning   if set to 1, warning thresholds has inverse meaning
+# inverse_critical  if set to 1, warning thresholds has inverse meaning
+# str_warning       string warning
+# str_critical      string critical
+# unit              unit to be displayed in module view
+# interval          module interval
+# parent            module parent for this module (name)
+# check_end
+
+"
+
+[config_steps]
+
+name[1] = MySQL Base
+custom_fields[1] = mysql_base
+fields_columns[1] = 1
+
+name[2] = MySQL Detailed
+custom_fields[2] = mysql_detailed
+fields_columns[2] = 1
+
+[mysql_base]
+
+macro[1] = _dbstrings_
+name[1] = MySQL target strings
+tip[1] = "SERVER:PORT, comma separated or line by line, as many targets as you need. Use # symbol to comment a line."
+type[1] = textarea
+
+macro[2] = _dbuser_
+name[2] = User
+type[2] = string
+
+macro[3] = _dbpass_
+name[3] = Password
+type[3] = password
+
+[mysql_detailed]
+
+macro[1] = _threads_
+name[1] = Max threads
+type[1] = number
+mandatory_field[1] = false
+
+macro[2] = _engineAgent_
+name[2] = Target agent
+tip[2] = Defines a target agent where this task will store data detected, if you have defined multiple targets, define a comma separated or line by line list of names here or leave in blank to use server IP address/FQDN.
+type[2] = textarea
+mandatory_field[2] = false
+
+macro[3] = _prefixModuleName_
+name[3] = Custom module prefix
+tip[3] = Defines a custom prefix to be concatenated before module names generated by this task.
+type[3] = string
+mandatory_field[3] = false
+
+macro[4] = _scanDatabases_
+name[4] = Scan databases
+type[4] = checkbox
+
+macro[5] = _agentPerDatabase_
+name[5] = Create agent per database
+type[5] = checkbox
+
+macro[6] = _prefixAgent_
+name[6] = Custom database agent prefix
+tip[6] = Defines a custom prefix to be concatenated before database agent names generated by this task.
+type[6] = string
+show_on_true[6] = _agentPerDatabase_
+mandatory_field[6] = false
+
+macro[7] = _checkUptime_
+name[7] = Check engine uptime
+type[7] = checkbox
+
+macro[8] = _queryStats_
+name[8] = Retrieve query statistics
+type[8] = checkbox
+
+macro[9] = _checkConnections_
+name[9] = Analyze connections
+type[9] = checkbox
+
+macro[10] = _checkInnodb_
+name[10] = Retrieve InnoDB statistics
+type[10] = checkbox
+
+macro[11] = _checkCache_
+name[11] = Retrieve cache statistics
+type[11] = checkbox
+
+macro[12] = _executeCustomQueries_
+name[12] = Execute custom queries
+type[12] = checkbox
+
+macro[13] = _customQueries_
+name[13] = Custom queries
+tip[13] = Define here your custom queries.
+type[13] = textarea
+show_on_true[13] = _executeCustomQueries_
+mandatory_field[13] = false
+
+[tempfile_confs]
+
+file[_tempfileConf_] = "agents_group_id = __taskGroupID__
+interval = __taskInterval__
+user = _dbuser_
+password = _dbpass_
+threads = _threads_
+modules_prefix = _prefixModuleName_
+execute_custom_queries = _executeCustomQueries_
+analyze_connections = _checkConnections_
+scan_databases = _scanDatabases_
+agent_per_database = _agentPerDatabase_
+db_agent_prefix = _prefixAgent_
+innodb_stats = _checkInnodb_
+engine_uptime = _checkUptime_
+query_stats = _queryStats_
+cache_stats = _checkCache_"
+
+file[_tempfileTargetDatabases_] = "_dbstrings_"
+
+file[_tempfileTargetAgents_] = "_engineAgent_"
+
+file[_tempfileCustomQueries_] = "_customQueries_"
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/logo.png b/pandora_console/attachment/discovery/pandorafms.mysql/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..b24a84ceea0c3ad8590bc2721ebda93108a0b8f7
GIT binary patch
literal 12952
zcmb`uRZv||@Gc6$-QC^Y-GjTkySsaU;O@FZut3lqWaDgL2iM^41b2s<->F;oRGs^O
zxmEX}Yjw}+hv})A)$@JbD_%oQ9u1io843ytO;JHs>)#XjpCH0RK|w2x@_+wlz}icx
zN<l$2rJ}rA!u_)aZ4DIdR8^sv|LKTO&~c7Xu>UmZe?t6EprAgLefob!fMqcMTmSE+
zFBwn<3W^&=QC3PP0QxKxA%t}3?qkv{lQX5M-$$`k<yYh-LmD9>RV**%Z5dRnnpY+&
zEo`*w2$L*y6y0i8nj~w7A_K`+X*9a;nA!uS_|lXB>*xyDBxrwQQ0vW0kJyBhoBPB0
z{M5qQA<e{iu={A(gX*$?>fF40n{-)-)Xm}?o`E_<1%k4`FUOmjBhOudQV<}#Y<BZ3
z8r>W-k$VTyS*D*ptl;>G7RqdI*5h%v?bSZ@w%;b!u3pL@Y=M;XhkuHTC(|7E2>@m}
ztvE8!O8Y)WP3p#2gjvrKGQ?hrJDk{&jmTGYk`-BGxjYaI(X<M2oH4*sq*b$A=6Kxu
zJ4evK&W%(w#cqnZq65y8+CF%)Wo<93AydCvtPISppD6q@Y~|_q-B{X=xHUY8m;A+%
zAUXB)+L_qn_pXVE_H;;#ct{i%wf(~!pNvSUY|VG_)OWsMURpnjnd-sYxN*Xm{9!#5
zVzF#infJ?#0o^^}ci8(B6%s6=g80?n%+;70h={Oun=2U{0ya@4tLO7WwZj++NE4A7
z=6kp%m_ZDt!eZn<xKiI`UQmE>bGAk42#EZvF;Tw&ai>7DxR>wqUHf|>iy0c|UhK{0
zDK-~2T%vjEAyNeOUo&s7_he(t+o_`zST$xql9kJEW|@6Us(!IzDr8LA$i?SMKET;j
zF%~%12E(0$zgtt)HuKRaYT{!82+@ZrW9l~O@N_A%Rmk~Y#?+P38Km`S`(@)>GkXCb
z8x~tVEiEhGC)wOMC|vlKVw2~5L7sa}Gusm?qy%tyQbDV58lECm*}w3<Q%3Zh7y^lU
zl`QwT`)gpRh<g-E$M(IP8MmU{;CzA@1(u<!?3qnUlTlx;N0^<AKieoxIf~{osr6oK
zmZdU9&w?}@K}lX}i<YH<KU=Uj^6Iw^z<}macqHe(Y$mJlo3X#r`U1Le7apSst-ric
z-9(i{Q-@t(B&!I8q<J=#Opl0}Q{sWTg+#_FmKUfUMNyEh9*)=pvv<(A_qF`rL^UX8
zerqb@0)g6JQF}DX$l(qSqHvmAvvfqn%cGXxMkJgGe>y)uq!Ag;)=8IBpH2(QKZ)Xp
zqKU?uogpbv>X5yncii$g7P%u&aC8<Sj}r#dX)Fg>MXlbIB1eBRmhtST3aX4kHuU;A
zRaW^_@qi;msT_tIkoO9Z`d;~Cwnc-fM>XuKoD(l^ARYtbolX;zDs#bhg~#!UzY?7e
z1G#|FqOtzzQ0LLo%r9aKiGZ<y!eD3n3(Mo4R{xN>Ud*9U!kdoT)cGRXB%3cKebSFq
zFK{*0M@C0~^4?1L&h{w5m(h5JfxWn^&RCNw^S%=@ncK^ZsOl~Md4eAGcOPL^o8U9-
z0X4=4+U>fH&+6Ftp3lvV)T;Z;u(+R)p<^PXC8^SG5Yyz0-WOKUkc$j<WN2iFdrboE
z$2Nq_9hfZ)O}%I3nbLYY8a^ky!Alyt{x-^n{@{@P%=ilL%$G=ckdb&Xl3OEc`^#TF
zZ49r@)Hi2q<hJOtN*lqTD9lP9P{hcKH(*4xr}51PW1mvogLdh<wPK7-yPpk58YKH%
zfS^5k*`wC7IVa=nsaUCE!PsnA1F}Lzo>f`QbYU<ZN)IV2rHskwiq>+NOb)KW%^P{w
z*K+(0wX79!&mPa)ZdMIZcF3%)!M!w&C8^TtPZ1NaM>h8~zL8Rk@hKl+OK|+_i!+WV
zJROFTy~W6!>Jl}UeO-|iZ3kUO&Z14&p;neX*Bo?f9Qf3XR6a{LsZYu;Otu*xH@Yh6
zqX**jX~jQG)$FV1*#8Ak-YweP9i%CkOJyzd1Gx<Q?jS6^gAMjs>~82Ey-0(D%vjNT
z)G&>Wj6@CYa0o0lEwCo{{8*V_v1{gVs7tgXzv3T|_)F8De3pXX4iQn$$S<@)zVwdS
z*2YkPhi@(u#)Sx^z*~na?8K!^M{f1<_M2IOk(xLYfu$+W-@I*tgnQ>{n!kT4=RCM}
zF<tywkoc4%G5w0{<Xx<Q8(nHVNSef$CaLo~jl_|WkzrAP=2_osC^h?aBcvsXBpef{
zQm=b-@FZ2rnlvE#C5(Swhi_jo-|bnbG*=oX68Ve2N{ht-u%Ih!jniP3H(pGfIZ78_
zWQzP8*X9IP#?6Sc%7Fez`@%tS-fx@_xxk}I<DGRIW86u^OozJuYUGn|5>G5r{szbn
z5II@sB^~glsO>hG=npKFs?Q^3t2K3<P~e+nQJwY9D33Z(>CAYoE~6+b$!EijAq!8+
zpU9_~`m91ZvD7KMX}{#)O@hsQh!c>ucU9M4_l832e7Q82kH7NFvKpq`?4UUe%e+`<
zzLU2M5|L7VO=TtHNe?mbH(;8Zdzz5;9$r;ATGTHk!ym{S2TrtKTf<>g=a2DRJ*Q6l
z@EcE;k0Gn$g?RypKj;L~BwQrCjuF<olWq!N4G>AL9&hN&Nj}C8hQYtk@^>4{V^EpT
z7QdVe=)<`a__!CjV+yl6BpnO1G`C4qan_(-f$zq4Jz~D%TRivcmCeyq$y{mFP)LCz
zQc^Y@b0>sVVk*_&>uA~${djSU<l(YVj;Wo}Th3z`KR-nU4|B2^k<PU*qpoy@viu3V
zHvna;ipS!cD!~m4m`zyV2^M-W6aB9<`rp@<@qZuL|I9u5PwUNOdj~Y%a}xAA`}i;V
z(`noXPFEdWY)&jqi8GnSIC1Al`8f^I9M~HM3<6+J)2hZgtfDM<A_V+{QG`{dI8INd
zBz9Y!mFrZOq84+{$!lg{F_+)1MOFoZ&{@abi-c=v$Q<$zOW<khh2;BQSJD9|qbiC1
zAi?$hvnELt%HNeIS9=umf(?V*R@PxO!=f8FMf~2D{p+GGB{g97l3weEc}MEv4N$P?
zG?3osrS<-7o$pNTr>i*KaPlG4w3wB-zI)%sZX~^j13eMMR@aiB-S)$f{&KphC(<$F
zir15VO2#(9{tyGH>=-ciSFhNS@Tzw<o#9#-PJ~j;(&%|K@YPdg!!)U*5uwNiS5;b4
zg;eQ#UAKYpm2QIioVB5R25cu^G2PJWSr@PjL#89A1fP^_chh$`41bZDVtxw<KChfR
zLtLMrwBO73OO9&^>JaS*{V~r0=fA4{=`VDc7+YD<5Y4PBmhg!<SefIh4AqB{oPZLr
z;+QnTT``|-_QW~ySxQ`Yjg3{YSD?fe<Q-=*ZvU%O$NVJn6rXc(lkAq~{bauk#b#5<
zW{_-)+VpS<ux756U+n#3p!-bF-_|LE><|<XQnz&qCtQ;yXYqoV$Gh}-I?O!LPtegc
zgRD-)5|t)*3#S*m%p7r=Vw6_G<|zQ_K)SF83aUIyKE33ZhU;%fAAZUOAn?&yNr`&-
zcSh15Gah_MGkDdLcw!b$x8maW72Y&AarY&{NkPtzWF8Te&*E3ha{1+6YP{)gs6{rX
zTuY@+4jofJq>+5dxvSHw6jw$2#)H&?E%$0suCsb_rM@5hxP1+s!-cYSw;xZtac~2!
z>32tiS}u4;gF8nn?4z{~-ln9J#`KTi!nQXIekW(w+9I0SN9(fYGnah&mwnwlE1_TG
z>W5VmpJy0fGK6@y$yN`SVpavZ)0>i|t$WAF8(gGX0`aqoH|99SY})zOs3h+>{fNct
zp87x+3dz>aQ2?>itS}o#%ju+EM`J-~ZsR!ZXo$ASjSI!_f`(`k?j*Gkkw(>RkhF82
z>GRcSpf))lA8~2b86if&7|1fNqWk)w##d$T;$JfF9%X`o3Tgu6A6i6CG?o;nG6)TZ
zqkw7WE^r$}c%S+Kz7NtT>|^}mIcX9R_Mo&q#S^SWUw$SN^UF_t?+FU4^}oD?PDQa8
zG7G1V)Y23QDGjy7OnB;Hk5bOsp$r$7*}k?)+rS1o!wJq*J7R_NvGadQl90gX4mkcr
z&DI5E8^EAs-*@ggN6ty3$!#-<8v2Wr##Ds9r`FSvQu=xeX1?BJ2nl`Iyuu+J&ZPLt
z%1O@q#k{?7#tkowv`4@`Pv05evNQ2+J`vXSXJRrGB{`#wg-ru~SkXN{_TR^N#JEjE
z6297i(Ei}4gT2rE-CIWF41wP?RdGd6?H@}nAF^x5h*AFV9WGdiDz0EaH4=P9b=;)(
zIY7bP;7IEw=y0<y$Kue@6;3s|LSc6(p?ckeC#d7D6?jVT<?E~Bd}}n`lWbA7eJZa(
z;*2*D8Hep^F-7BGQ~3n%d#R&cFY?j8aCq~@>psXsv*p(VLhADmi_vm~E>z{QL9Fz&
z&;i$jB{w`00rt(;`3m3+DH~oO?SSW4S_vq)QaMAn=Y@z58dmsCvyiP_bTVAM?*?xd
z`D-l9^*dX@GAKX@f?_z>=68!|<ZcR*-oLGv#eON4%{yM<-mc=ueJNlCqnyGnuya$<
zm@sbS52&+;+Ct|cz@e3Aw~d(hG(L$$#UA|i+nyS(NSWE-ilIr@OBj3GSoR_g`D1B^
zmgUG4Hkk;U92lfQBWpuIV4l=<qRRc=!%FajS$U-<zSY@$Cpe_%JGy#`Ojrn2u~n7j
zR#>{+?yJHzWOtYX4sAjgTQF*at?edatgGf^Lxu+^Gl+J9XdIeQHp2dy%uC`nE8Nam
z35R~{VKCLKh)fQzAdJw$rIA6Je(>Jmc8*=xcvJAuOPi+CfuBN|JP?t+yDWg$$xoQj
zbP%Tl6u$Qx%&Y`+HpFry=)WyGrM(p-3o7n<nF%y<<-2!6hwww}FLkQ0%+*kiHJ%^<
zMP7jxYPOrWw{*x>6oSey=wr_(<GZlC*pUNc0gP%b>ghxe=`tX6ry(zgz|r8UgMctR
zB58v8@ai(FHTe{Hgj!?D_WcXjYs-($BCLW~-3Tk7O3TYJ8~}-XB!J(0kmdo-FK~wU
z@|os7@iJu<dfX<1$^x5s%nfba>8(So1aX(rwDu!%VFT(p^%#zdjFF(iGUX#x((9lx
zo#a(Qu#b0Vu`8}+)R&&V*zv7q&ewOEJ49`~E8#AYMmdqcW#mM_zmBy8({SN2G(_hO
zexIzJA~uFCg6ZmP3dmWI*%dh^=B)-L^d(mVd8k(IEU#4P^F8((GOur$nw->6$xR4p
zpxSjp<^Ma0{vSE@e>NrAsiqso(BMy`nvnmJ2=ae}V<BF!Hoo>{IYjv2H?YNeI`@>E
z^Tj_n!%SLF{3AnPZJW_?iek*o?p%ky!9pHVwl0Q#q_wh2wkSSO;_97Ga7JX()*4Et
zcS0I96nwFVu=M@exzeKQw2ysjc{hSywE|BIs9<K+oBX!9Iq-gw#pkmWBJ|5Mtg)$=
zFC-NfRL9P{$@w^OjIS{Z&EU!Q{AuA6xg=$9-eLRjUnZtR(U-q)r|FV7f=8GiiRhjz
z_~Ysd2>7lRM#ihJ=1^gn3%NarPw~fl!J|C6llQz{><}=2vJCXb<Moh#p|X#hVbiLG
z?L+~e-HR%aco;Pzn3D_!`l(?W<Vv;r@0x(Z8~KHAm4LA6=!Dy%{lIZ~g}|tsJNeaT
z0sg0#92;kKavM8CGs-<@mpn}J-6BTfc5z>o<3`ruCA>5>YbP&uq~FVQiQhC+T4-SE
zH8~n@B;vH6B}Docs>4n@d49&Jd`o6(-s+KsG^@%*W|&JVf{}H}1vIO3sSWq{b1H|{
z4%Jmhnc84h|4DKTpX#85jvMF6Z_}LqghfK&-ZY6K!6Qm@@0{NyAP9`AM%nq)D&a0k
zOB@|l;G!;_$aKjEsd+Xed$C@)we!mMi3*x`WlgTADa7SG+$ikP<<()zow7qPl_A-z
zIi6(<_21Paa*A#8#uC=bH7--?_uj)xm$d@C^`*OghVL#0Q5l8lVi-fL`+=R70O#7#
z*rAG<y6EuJt{Zp$kqo>;$X6YUL$_2uYyqW7Y2%*{J}zQ55tVO?EDfD?Y?%igS2BMp
z?gm$TewNGAqyb=nBvI>S3~ClzL+f9y;?WJuSpHIQVfZ$s{T`rEv*^=1$!*3|$0ll)
zY;#`$djH+g-OZf-O&yW^e1!R=X!w;r9#yf-ljn+6nu<K}g9j;@^%LMpiqu!OMG#=$
zjM*j|i#t8%?n-1U-T_!wVITezx!l&;7csw1VQM?64sHjrujc)mbP|9f@$<@sG89<e
zN~enmxH3gUMq!VVlNQ}ylQ9b}ERb(?4)GM{2yk;N&4XIUp5haZ%$T}<a6CLSKI&o=
z9{uVdZYnVvChXQ~TSdbqGVrQsfS5W=6d^Hi<>N0nM8-|5ih<!VhGcVn7#MQU&p<vQ
z!S6(PoXY+UkzGO<8;6HycVspWY1_QN&Z*L!fI{n^zj|g<Wnzak^k)yvxe=qJH$t-Y
zj;IA~0*0CxkKg(=>YIlsEI%eU*=LEoBoh(ZI(h!;kr6K>ZMRQX%HLxObtkOkVCi@(
zjHzm~<RLpCQ5mV-&sQ1sK*?KG-097KfERn7RFh<Z+|Tp5F+(dEwBK0EUYDsNGN;Ep
zCe3LSt!b~_Ln_TB4#widjd&cjRMe!P*~({RB$7=S|F*}+h>P@5k5KXb#l%=&Ja7M7
z7Pv(9lb~P!P`zkYpZM&H5{4t;N_W!LZM=ibjul_6f)X@a+7V4|T@+a%f7`53{r6+O
zS<dFvX2Lw1Bdaei>Yx3Yu@3o!8#vf~cJAoT65wj(6Iu&r`S^_JX}PTnuf$3@`@WBm
zZ9Zc3ae4#j1`I@gsI;AR>4gwrOyX7W$b}yd4nKo{0%{sX|Ip)!2j_`Z?xV@v9a3ce
z2^nOH>@FsJAPo(L^2*xC+052BU0c|Vw;&KQ3!F0*mf;53ywgRh>=ZrpVdscb6cK<X
z(Dr0=;z=0Rw761P{h&K|#CJV+RiRcmUQ7^eMj>zxq~A;zUsc-%aJm^-!e=WE2f-Ea
zsb$_=`Y8D!!zHLm&jTL9F#>(}6tOQb>`_!DbsnigLjvlGkh;1psh4o+tF+HhwMtbe
zpkps_BnuA3Z+Dh`Mhq_MJd;n%)98(Ja*vsLty+&SV{&oVrs@2s(gNEqhoy$wqxydR
z>Q!~d3_nrGJF1bw`;?m%cD~xEwj9{&M|6Bz{OS@nzfnnfnC$>=u&Envjy6ELoz1M9
zN%GaDn0!z#ZS@tsB01g<8kVcd4S1Y9icH`~*>ll?{hbrZxHXfwzB3)U!Obz-xF+mo
zUiq+aF$DGEFrm;D$ch<=)59bCO)&ZcI2>3pmC)$nsJGMN(MdG#dyy3&djDffwKh1Q
zz0t_h<mpQp*sirK(CpF?E63DOjTDxAV>Yajb&gD;pon=Mo&~wE;~j=&YfEab1&+gx
z!U}+`62mhgRi{r2QrRX<|FpPlWb@pJNaDFmzMZ>11wI>-YxmsP3rCXZ@N9i+ujiD&
z#kh2RmJw$&y|pP#<JuQC48%Lx$gaSK{2t5l348aBFKot9-pMy(%yTSkoqOR<8pB;`
zqLyL}2;V%MYT2Oo*}?43G@a%s=M>IG<6gfdS^Kn7dz{JEqpYpd6QG;JGx`cld5)^8
zyPXZt5O=;UcV3ZklvT}f=lFnWMm3G1k9!$tupW!8m;r4Y_P(xUsCo_Di|B?0Kz8-0
zd@2!a4X?{bjX2!oe2<;EH+wuGS*gT_{v({VHB?5FTSC=|2o#HIRq3+rfTJDSAW+14
zKYrV-1incpm*NhMSsLznG?ZC@{@nJ}%SWz4W;f&PFxtffvP6fme^{%|mrnK;+f`V!
zdN|&hvO5Z-60BrR_0rqjB<(_ncTQL%+Sk428VWbW$G4b&d1{UGy!@)EeQS6!7c748
zrh;z2n@Z#fDJW7k5g=NL@yWA5cC`!JsHiDQ#S8HQG*#?zpQ2GMzH+Jd^wJ?YBnMU@
zat(?ZKE@<YLjK+s@k3f1oma;JM04RRJ86jlN$l<YOKsXhHuZZCyI7r1(Z}Lz6O2Sd
zzFCBMbRW`-*>t|Lb54c53fR1v7K+^b+K)}O&tlv1as1McBWSv+W;AiZ&wxz*j(4R`
zq`iCFw1)_t8_7{gH0eh@Uhm6~p<%szOOv0)Nr;?;O~PEdEe6{y`6<W>H-SAxoT#0~
zmjLdQFPqC}PDcF0OU2T5e+Le5zEHT1Yv)KLBP{xn;`G7U`eB8X2|81yQrPBB;M&<<
zR5sA%V|#3Me)`Fi`X>ZRp`~$p!7&T|M+8+>%*-gnYw27*)p?jkn4OLV=QXeYCx3om
zmjw2$3cIPs!d*pf+UMn0wJXkvTQmlc%83J`xHS4h+$P>p<=>I1-$ZKWxXqs#3@AN+
zj$50w35({lzpCCSUl6?0=HBqg3i3W&FUCk1FYa1yX4pO@3|I-NgcU7w{ZUg!BAKZ(
z_flG8MXHz74oM=c^F>NGSiDm+$a-TD3O(nW{j{F1r!$C^h$^?_DaxMbXmas&Tb-dv
z=z<fR^kz7%Ny3#k^4O`RP=-;B_uk_(2lMlor+H+&p~B2A2Rrp-0bI77pZF(Fz?j=a
zWcAt~jI-R#HuBzI*_O{CT9(|Sp$32E-$I)6HbZCK`)`9k|D{j&Gb$_mp=|u6%wuNb
zUF$LCBr%XQR|-kIqn*}(dtv&=Q~i{gi+Zqb4qjLYlG`4@GiCUvg3OhoLwGo|jV4PS
z1{?es`7_o@ff#U8+u>UBH?n}1xsS9-qT#Pkp7<zc=AHSqc=W_vu(w~63J(x|#^C^A
zesFAp%K2%d*1fKF>e7=)xj=Q7^8rbz=obkgQQIVZ)`grt?+Bw_ynD!~V5j(Thxdfz
z@?WFGEJ)$|w^-ZH`<_yL?Jv0shq(^Kt>1)}qkIxPR;w+vMV^p=fo=r-{g7YMZGi7b
zMV8Y+sE*yE9iCPZPs{_N&;FOlb56XraMlW1ki)d@z=If^b+u?yx(ejoAydoT@<#X1
zC*Dx|7*PmipP@<rzGjH0UVYl(Ja{?dw?WQ~G#@0W7n;m<+r{;P@=U#a7?#VYK-H-i
z$mXgWDv8YBfmfPB87`frQyJ5+9997WL_IA#GP{b@(D1Pr1Sj5u0#ML%xO-Wd(4am<
zs(`R)#D3yWG-xqAXp;?)rAv+e=mpW5Krwx|%J9n+oAI`#JxjU+y6YsTIIP`7zz9wZ
zQ~?r<qbTy$6b<ogFZ@an8n3gWnOyDNwdQd6RwBM;%j*;N!@3pH#aqF7;Dmo)^@qbs
z5HU8!8i&DZ2+EHvU70};Fp?$GTkSC^oWdXl$0Xu~ll^;_<d>I$i6x&~Ir=Pk#}3ry
z)MLnl?n<{Rg1!~Se?*`|tjffhb6QQvTjfl3hRfeGjAYILAHr0>ta7&vS}4F<kQGaQ
z*?xjDg_w)c38;r%y%*Y4J9@6|6IJbE8}j6mblqEZ^MK6YoV#S^=YO0{xx>pifa=G-
zyjd&8eS*)=C<<!AT8Pg7NeTYX@Z~>_|9{{Q|35qDV;!}vZ|1k?VXsS3wp;v(F-c@7
zhGB(3&YvGVgon<CtZ#DvWM#?PY-n7w#B88#-0KPmoOLEUmTt3B*PpzD3lB^|ISFFU
znhqcL?Rt?or=G235(;6sjE~X57*iO24}XP)lGkS%aDxN_ocH-yZgv7oOa)J11<H=J
z3w|i+i{OcPn$G7qk=FB3AeVRn$<6qS1s=HUPYsK3?y?Se7M9et{FMCtzcIyZsBYks
zEtAcmn$TBm=QRw*OdThXcm3MOWFzjue2_kk@h0>PMVG+DvyymB<l-fg&z4ESfcqe2
zaMBgfRX0q@yls|nRa2uycvZy6hS}GYQ;3FIk9heFN|BHun(9kDx#SN0_7;@DJELvj
zQxY0*V@yCy{J}N*`VF(sgAN(4ce`k(3yzMCt_G5f)KBV@Eq%D9JfcHer2ni7oOgCG
zfZjJwI@y~o)hT4^R}(jFZJe=?fOxuj%c7**w(XXH#$;|r$tSq;rSP<o#i}nKM7^C%
zJ=2GrHG0YcJ`Ykg9G*%)cUljkSHQ348X83%6MDPXQ%q`Jek)0<7vhw&<Y<<sQdL9@
zVM%-`ER(h4wk!!+4p+^7GHoII1znE}uBB3jaoY}y%%o?a=`${mA0N!Xqf8i3m4)G-
ztPjwL&<qZ}3<!<h6A6)dI=H0!THQ3zcce<~I$H7Hgz}Caq&94QCo<8%5zRXwehwBh
zeu2kG<7PfL`HD`t#u-n%b=tLzdqiEz%%LUoYxxw3D!}#N9?pmB6+Cw}ZV=_nc~zH^
zv&@6!2>Z}j2$_DU0fqltR`Guo7yiT>c}`L;bszb}Hx|^u`s0RIP-eZ>(Ro>RdGq{r
zeJx6NBF2zsUPuQLLdi#6Z=%v+M7e)E#<`rGS<=~UKsN*bWXJ2-`=p5JGmM|TG)S7!
z>;kj8Kba+H3x%NoA89h&NRMD(Q0e3Sw_Y*{9*14nnF26@j2AUtzT6$q*4`BEtyT(h
z0?h5U7<<}|A+Qp2T=1xT3^z2CH2>_Sh^qJ90G-SUjFS(HCv_(UL-leK;_xZ~US3==
zq@UX>Yp?|n^94X$2SOq`V*9Bunn@O}b1)iz2gPEO-f(0}InZQ#yvUt?Q<XQxJ$kZi
zGVEyPovVWGjHX|}Lvh=3gkW%29K|7n#V3b82J0;82S_2=9<S%&zN!xF@NMbW>_8Y@
zTHt7|W%U*QejLWIH)mx%Np%+!Ma48s{5{kjpRd#rs?Q5f*#w0J>8h{XHPjwk^E3vd
zAoP<vFSuw5tg#mtwYd3jMc+RMM9ih~m?;|W=<RjF3p%rO4%cJ~zrJ^s1Lj5Izasm|
zFGn3DvPFj7GRB<Cdmzv`))y;1d94%b1Yce|EAt12iW}KmO;QsVc$#}y&iTKP;8aY%
zC0{~SrQS^*i2UITtu<cYZTX7Pn!ElODrX+JZtE(JQNE2pkEc1ZvqICqqHBMr`>b}%
z7~>~x`%vjxxpN~ZG4oES&uSpX-CpKMGYplx6MZ&lVLGSPsbU_NJB9X+uv@A~ZCVEx
z*cD=V<4C=>_%D*4&pv5$(IfTo2@!9M@l1|2q9VVRx*eG1QLqJoM7F;G=3hO+J0@<T
z)PuWSzB$zV!!G&FD+d<gdsXy$&oF<aRJ@;mvXxVBqb~s*uOteSj*mNQ1c7vkajQRV
z%fmQC__60o;?_1aq5=)(fz`c<s<w%-tD8A2cuYd@w5i)P_c_B)73z1bs7ip~L<{s`
z$Tz@E<M&%j<^uVLqBR4){h0sS9*8`_I&KElr9;vm4Z5s7!M*ner!uHgu~JRvU(lWq
zVD1F}7igV%gd-MUA87w@W{j5KOU4+n_i1QoW<V*<l19OO;B0g0|I6WtA52cqLt%DZ
zwRGH#q~uL2MlVj%fUKLHZ`VEeoGS2+-oar_v0V;$>i0&#L4I}^1iraXd*c@FTb#Nx
ze(2ot{#?#dX7b@@JR9boH}VEo%Ls(y8f{PIO@>FjMfSExXgv-5fk1Yzs<=LV-G{ri
zCbr8BbIBz-;;iG^9In6HXMCZG2O#xAcY1|I0&o>3B`T&T+ffaj4n2|7kBTPTizr;i
z@hC5`0@3}dIHWkd8K3h6Zf=$YikOSFj!Xirh4j$9dv{`6Pu?QChIkdZ35PnbCv&>}
z-BR(6Mg1gA7UhrEE{TiIlB0dj2h#>I_TOYYeJ=-y>ktU`wUOD<H0o(S@c~KfG>@>=
z&E7YkowZNrjnA3B%2WFi>J_2AJR(A(BJ%QlZ7#qs__z;p4f4TjKyPKNENNv6#)~aV
zjTXCP|8<m~C!Cz@W!RFQ0!d3_-Ztv|42&`4MgG-ZzLHQBk!@B<qQ;FDzJVKuHzuti
zlY4hjIU~Br#Yj{`6dtggViIU}!y;vC@w?a>pMWcZ>`TT(KMK0&O(V0Ut7PP_;PIfF
z)7#twZ<v#vZvbn8PfS<Q%WjSvzpwO#iV?oy8kK!tE0VV`S_gy6Lrz>6&wkxrebp1$
z7fqv$8TQl^*sa!eMxK5DLSEnfC%1K^=GR2kAa7WY7zNhnZGP+6YP~Q12)Pnr29&eJ
zJy50xw0R#*KavP`tnJ-3{gP1Hpm+JF&7(f#N^>O!D%(P7AG>`6$LLCyS_v44J(Cy6
z!*O^b;PT>@2<q?50Ei-7>s?rn?>O?+60vk8sV(^w7H{%XVd)iea~=Ju9$&kKG?rJ~
zFB-gO9f(RQ(6yi1G~RQhbN>-({FA#4BDl=)dsj#H|7yIU)bUHvP|JjE?iXbhNl(Y$
zUSOVH&~wOmO*?GN0_3&>*hViRXGt06Ixp;}j>$t)!Vls&d>Gv1LuZ5p$6oz>CgOY<
zN=)%bF=gmF=OCXy@^pKe$0q$z{&h9HBVAk>Glf+CI?!#!tC)VtljQfdwm#u4n0!b8
za-n!9TvmA}3!206j79Qg(htp!*zQQ>lkhO{RA9yXs(iT#sJw-bp3=v~k1KzLBi~-g
zP<ikwle1Yl)BwS7adFNnqO%<{8O(MJ#UIL|a4<bHEhdpP^+Do`Wuu$VC2#mpvnQPf
zGhi_#)pz8U!*CBs!sj*3FMTM(_k>s<K^@7X?1jpfE7vjCdCuCbF~f63MXFR+eJ}N)
z05l%Hf)0PSLP0+w73&-edoR7<aRbs52X75PxiTa~j5J;(%u~h_z#rsTX4Sp>2g^_N
zv7jN?`l6xGhI11VN#wlQdUIxJX6~c$<wl@vJOxi?Zn**G1+^5cw4o3jh{+7QphAMC
zu@`z4xP_#adb-lZ*6eaR@=iq2l{GM>DZTh9-0pkpbkb1q*aXWFt&+W25c4`r)P{vz
zLYA_b0jn}{v3GAfRgTq4!tfI0Jsl@>nVDzEF0&-z$*%PsZuFJH*omqCD1&Pg$$OWk
zN{<{I6USxu=Z4v+Ve<QUmWRc{Gs35qm3wP)KSia_l#(;PH2A?>pnvrPhA{S7l^FE*
z%6M^N^fm&_P#is5u0y?8$a#G~uv$#5(gRXC!NNJ;c$!E%#ryV|*GXMy2u|z}w_uTA
znv4!XC|Cc5hvlhTS!N5DCYab<_#R3I?AeMgaf|GaVE4-`&5f==hBp&8Z#jtK#(|*y
zifcS1t${T2aCnLiB(%5Hxx{4`3d~Jv`GpV=xIUcc$K~Wa3j_E>+FoD(<R{y)LO#K^
z7Pz?akog#YLsJidj!v{p5aNlCgSsY4sYs3!m@IrP886gZ46&K_SY94q@?zC1r5dxp
zMj-f7B3<hbGDZKnVczulu~6~$HJt=#da%$<+f208#oHWm>iT|6(UmiLN=9cjNHG|E
zL`?5T9~WD-ZjPC^P&g06vr3NsFG@`_CgZk<F#>8Vaf0K`r9x47>iXq@zp?N!YHxsr
z-rfK=4+egrNu~Xa<|~Sf<B53ts+rvC;T=^!kiK=XK5e7^nJ8B5-M+y#!Fj@uS^sKV
zg6)6!`gl1faYuK)HOWKEZYLe9)Z|H?LP_IWuuZ{b;kpm+JqIJ?t?OM`T<YQ{Nj--+
zet<~W;g;C?&}5jz+N!8eJ%^uaG)YB$7pYYqa&m6|H%>bu-_{(HJedNhl}xq$6z8?8
zp%vR*l9e1yXO_99RF{#_zq23eyz9I5(++fGV*~}}L1H>?#YL5u;GSY(H3F5w)k)#W
zmh^GTl0ao`U&ln8Df4AvqLrTEczIr@V+*#gl1=`7R-Bz}qshJxbL-dA6~P0^i)0}8
zh3CVo@f1BYoq2GeLlK|xVzCc`7C#sK0Xv(|+Kq%Jp~OwrF5FH>Mz{kXa<uP6y?=0;
zPoV3ON!QMZmx@+SU-i|3$B@8l^>?Zm)<jWKyaF3hP)Sxj9>!{N6iPvDod+>S$>{RV
z0MK~-+l&EUL-QT#dhJ{XPJO3H*%J8D*O!IKACmD2z3{9hJ$5H^ZPvFuQ@Z17r=aam
z@?vPvj)`zpz>LBvCPNVW3^wwF2Yvx~O5(4FGT`_d(dkt21tmOBHJAT?bWBkI9~)bk
z%v`~lXz{W3en-Hy%!mYVOp_4#@W(U|8h2gdzD(#XsqmPefgz<VzZ1|g=R%iw*1)45
zgManLv(Sq?Bre!@{}Am*hAY-hmVeVg{P~tn>-=Bqm+5wF6iMJw`}b6vbia(T04Xg4
zWY~89Ox)9Kg6=zeHzW&@`7pOG6Tr#AW4iOp5(+Hcla8L?PI+QO^lZ0fZUyJK!GrM3
z;!iYzvKUn};Kb5fvTg;&^1fx4uS*5=H5Slrft_PulPotJ&1fWxAW}~?6$r^e5@N`W
z6RG$5b^^L*xq0c2Kb8cK8}Yj9t^VXJO#U*KSGwIN%XX##wLb<a`mGM`<iFs=E6Q5+
z1K0jWUOJ_F^%FQv6<RGni(39Nr_x18{Nm29h+3IMJ~v=pgdFh;kwR!@W(cA9=*S2I
z614C=mDd}g!7ht#tVN+G=TMMb7GtY=8utU7D?waXq^AG7>r7|S<%#yO8g-NIL@C!N
zH#G|Z?{<_u;j&4=qBMOmQA2&L54a$}bry`z<Zm%A%TaGy2nYAUYid;KwMamm9!nj^
z?OEFftlCC`ywvT(QkI_`CpLx;ZnzGV*0STS5bo*-E`@6wiDnoJHQbg4{G<Dn-)7#(
zfB6@Jb7d2W&9kWoffT$txh|@J=m@frdN#?muLL4PSiD7(H-cuv>(oW3#LCA;+cpK2
zmY&MGN*7YnAU_$I{SLzh+r}zqj7(Eviu5~;%QwY-uF1|%ct~i#8w`7=HKKZsy7Uf0
zzYb<#zt%*u*P6>)mu(b<c?(2j1ZGvA)35~`pR3G!M9<>IG=0eK<LaV&?8{5*x#P{|
z<d$y!pmpLt<CL0Vdx>2d85&TdlKHmu_vqO(W?|x248G%DGN}-bOsXFiKD*IzD1|A3
z+OtOmk#b1&0wU2^jA>T~^P@7$8V31CT`OJWC_iD~+D}@>)jOcq)M!Z)0$ccx!!8}I
z2c~p3kx3~w<q-YlZ@ZxaOA10n^Jw+Sp6o>4x<|yP&HLnf=eQV3qWwkR`#KzJLUI;z
zM#Mn7oDh{bdp!pyUCY9Hg^Ap8hv8p5_%U@#Gfjag!?i}a13sUxJ@_Y>!osIN1qPe$
z<gkwpf1{9tp!D=wt-Lv4`Xw};e#;f=C<l}+DxoE1Fo)`syF_1n-Km=>GrfY}h--P{
zm1lu+`cW&b%~g{qkFxtn^%eih=cRo54l!S?_lg^=3z(5fZK^uP9flJkJP=&91vd?<
z5EP3^A(vp6HmyGIg#60#F-1&&WS2ixBpoGrNG5r4$I5OZ4#_;urgrh?q797D`&d3+
zj<w_n$BZrm7wy5AZ8`!s2IF&`dH<Se=^I5N4&ST9+%;k0L5c68;>Gg0+j@&dK~6SU
z%KAs2!4MHv4#ecIRXL^VB`u7+sGDdHRo6>}gy<E_fj`RRxFAJ()xjkx`_`$0#D8<w
zt+oRXm$JX&i$Y&yt9ed;3m(Ag;ny<vh{4%R{><_qoP!&d^hmH|JH12%f_QTmHr<Dc
zaOi{0ZiiA5qIBJeB%t(kihIdOh#LmMZ0ZjYNx`$|e6nknqKy@%%0!<EPtTVmk6#f_
zdupTyvuaH0lmk(_rv%gOsXbe9a&qe`FXcp4(q8Gh99IP_+`yM+iBuB|O@bc};s>EC
ziqH;~oWtTGBU`T!Lh7P&Ij&qL?3Rur{)R#MJ$F|dp07<0z~31I`b}0>=nUeqY5o8e
ze*o4K!sxI0+_uHHx>MKMHo7r2pTH}{&!XaJKZAty&MQzm8BND0dv-C7AT2c%euDd%
zXlTb6C<3^ulb`i6mSYl}Lpe?jgbpN4AB-t(pJEWgzx{F}Y~sPbKVR<{i{11+Rbbmh
zY^-s2u?V=Lu=-+1OXm>8b)^~WxS3XbjvL$IhQ>U+SR7!3)gNfnQXHVhYr+{_(Nn;Y
z4G|yaFO1ecKF8H*)ninR?1UA}ySfRwv(}r;zqT_HiYNNlczFnK90kZO=T`W(e#3o#
z*!O$;(5~e+lS9HQKyU@!SX`n!INv5MwgZ2Y${wCsB19zm`;gyyla-<mIQo@K)AuVW
zjg~nt4Bk~p9ldDoQFWtw*}xFj?tMc2iTV)QJBrSRwF5eo`AUH`3YxaYFusvZ!r<r^
ziIE{y1sg2IZ??!Dhh!wvA`q`i)fC6X*&8DHb%}bBQI+E-mK9=XH}d=~(Sk5!Bd{)%
z;O_L889pk71Mx1BQuORV;;SG3KflJ~3zw<FKS7m-@WW~_`$ECbV#wZMoNCMAD0X1K
zI;kf<^PnYwm{L_Kjpf-Co8X_f4@>C_f9Ulav2-#Y&#5=SLnK~go1i$=cyL(5;n6v%
z)lOatO8O#!wI46YT<0MvR`a*@(TbhKoPZ-(?HSm+pgbnG&Bk!(yvlz{v48c}h~?MY
zj*k(*JEa%hG!eG`0j-Oefx*EhOiW_ZL@{HjUY144?20R9Z*4JuNnvAr{QU^#VBH$8
z;2dYUf9FCtlxAAq$<uS=ijR&i9a<(x;P>yfrVadjwDGVgz{-YKdJV!gk9eeR>(A`t
zj)Toz+@OVT)9;;DD`bS5VVhVk#io(*nRF?law^i4%|7F@ZiA6@BDmHsG=6dU1M6A<
zXQ%cae#`_0Kq*s%DeLYJB^Iae<@!8wny>2^&==?Wd#B1tsr6{Y4<<wf5_FdEKm1Je
zvqPhlxDT<G*o++_o#a&C%$i=);bQTL;;pf|$cxWL7e7&)NjzjE|DeNXWYYitg|Pj<
g`@0(<)R*C1W4Z}UDYx|h{T`wyrzTr3Z4vc<0n?2Nwg3PC

literal 0
HcmV?d00001

diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
new file mode 100644
index 0000000000..1ce1cf91b4
--- /dev/null
+++ b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
@@ -0,0 +1,979 @@
+#!/usr/bin/env python
+# -*- encoding: utf-8 -*-
+
+__author__ = ["Enrique Martin Garcia", "Alejandro Sanchez Carrion"]
+__copyright__ = "Copyright 2023, PandoraFMS"
+__maintainer__ = "Operations department"
+__status__ = "Production"
+__version__= '1.0'
+
+import sys,os
+lib_dir = os.path.join(os.path.dirname(sys.argv[0]), 'lib')
+sys.path.insert(0, lib_dir)
+
+import signal
+
+# Define a function to handle the SIGTERM signal
+def sigterm_handler(signum, frame):
+    print("Received SIGTERM signal. Cleaning up...")
+    sys.exit(0)
+signal.signal(signal.SIGTERM, sigterm_handler)
+
+import argparse
+import json
+import re
+import configparser
+from queue import Queue
+from threading import Thread
+
+import pymysql
+
+###############
+## VARIABLES ##
+###############
+
+# Global variables
+output = {}
+error_level = 0
+summary = {}
+info = ""
+monitoring_data = []
+db_targets = []
+target_agents = []
+custom_queries = []
+
+# Parameters default values
+threads = 1
+agents_group_id = 10
+interval = 300
+user = ""
+password = ""
+modules_prefix = ""
+execute_custom_queries = 1
+analyze_connections = 1
+scan_databases = 0
+agent_per_database = 0
+db_agent_prefix = ""
+innodb_stats = 1
+engine_uptime = 1
+query_stats = 1
+cache_stats = 1
+
+######################
+## GLOBAL FUNCTIONS ##
+######################
+
+####
+# Parse parameter input
+###########################################
+def param_int(param=""):
+    try:
+        return int(param)
+    except:
+        return 0
+
+####
+# Get module name with prefix
+###########################################
+def get_module_name(name=""):
+    global modules_prefix
+
+    return modules_prefix+name
+
+####
+# Set error level to value
+###########################################
+def set_error_level(value=0):
+    global error_level
+
+    error_level = value
+
+####
+# Set fixed value to summary key
+###########################################
+def set_summary_value(key="", value=""):
+    global summary
+
+    summary[key] = value
+
+####
+# Add value to summary key
+###########################################
+def add_summary_value(key="", value=""):
+    global summary
+
+    if key in summary:
+        summary[key] += value
+    else:
+        set_summary_value(key, value)
+
+####
+# Set fixed value to info
+###########################################
+def set_info_value(data=""):
+    global info
+
+    info = data
+
+####
+# Add data to info
+###########################################
+def add_info_value(data=""):
+    global info
+
+    info += data
+
+####
+# Add a new agent and modules to JSON
+###########################################
+def add_monitoring_data(data={}):
+    global monitoring_data
+
+    monitoring_data.append(data)
+
+####
+# Print JSON output and exit script
+###########################################
+def print_output():
+    global output
+    global error_level
+    global summary
+    global info
+    global monitoring_data
+
+    output={}
+    if summary:
+        output["summary"] = summary
+
+    if info:
+        output["info"] = info
+
+    if monitoring_data:
+        output["monitoring_data"] = monitoring_data
+    
+    json_string = json.dumps(output)
+
+    print(json_string)
+    sys.exit(error_level)
+
+def parse_parameter(config=None, default="", key=""):
+    try:
+        return config.get("CONF", key)
+    except Exception as e:
+        return default
+
+########################
+## SPECIFIC FUNCTIONS ##
+########################
+
+####
+# Format uptime to human readable
+###########################################
+def format_uptime(seconds):
+    # Calculate the days, hours, minutes, and seconds
+    minutes, seconds = divmod(seconds, 60)
+    hours, minutes = divmod(minutes, 60)
+    days, hours = divmod(hours, 24)
+
+    # Create the formatted string
+    uptime_string = ""
+    if days > 0:
+        uptime_string += f"{days} days "
+    if hours > 0:
+        uptime_string += f"{hours} hours "
+    if minutes > 0:
+        uptime_string += f"{minutes} minutes "
+    uptime_string += f"{seconds} seconds"
+
+    return uptime_string
+
+####
+# Scan engine databases
+###########################################
+def get_databases_modules(db_object=None):
+    global interval
+    global agents_group_id
+    global modules_prefix
+    global agent_per_database
+    global db_agent_prefix
+
+    # Initialize modules
+    modules = []
+
+    if db_object:
+        # Get all databases
+        databases = db_object.run_query(f"SHOW DATABASES")[0]
+        
+        for db in databases:
+            # Get database name
+            db_name = db["Database"]
+
+            # Skip core databases.
+            if db_name == "mysql":
+                continue
+            if db_name == "information_schema":
+                continue
+            if db_name == "performance_schema":
+                continue
+            if db_name == "sys":
+                continue
+
+            # Add modules
+            modules.append({
+                "name": get_module_name(db_name+" availability"),
+                "type": "generic_proc",
+                "data": 1,
+                "description": "Database available"
+            })
+
+            modules.append({
+                "name": get_module_name(db_name+" fragmentation ratio"),
+                "type": "generic_data",
+                "data": db_object.run_query(f"SELECT AVG(DATA_FREE/(DATA_LENGTH + INDEX_LENGTH)) AS average_fragmentation_ratio FROM information_schema.tables WHERE table_schema = '{db_name}' GROUP BY table_schema", single_value=True)[0],
+                "unit": "%",
+                "description": "Database fragmentation"
+            })
+
+            modules.append({
+                "name": get_module_name(db_name+" size"),
+                "type": "generic_data",
+                "data": db_object.run_query(f"SELECT ROUND(SUM(data_length + index_length) / 1024 / 1024, 2) AS size FROM information_schema.tables WHERE table_schema = '{db_name}' GROUP BY table_schema", single_value=True)[0],
+                "unit": "MB",
+                "description": "Database size"
+            })
+
+            modules += db_object.get_custom_queries(db_name)
+
+            # Add a new agent if agent per database and reset modules
+            if agent_per_database == 1:
+                add_monitoring_data({
+                    "agent_data"  : {
+                        "agent_name"        : db_agent_prefix+db_object.agent+" "+db_name,
+                        "agent_alias"       : db_agent_prefix+db_object.agent+" "+db_name,
+                        "os"                : db_object.type,
+                        "os_version"        : db_object.version,
+                        "interval"          : interval,
+                        "id_group"          : agents_group_id,
+                        "address"           : db_object.host,
+                        "description"       : "",
+                        "parent_agent_name" : db_object.agent,
+                    },
+                    "module_data" : modules
+                })
+                add_summary_value("Total agents", 1)
+                add_summary_value("Databases agents", 1)
+                modules = []
+
+    return modules
+
+#############
+## CLASSES ##
+#############
+
+####
+# Remote database object
+###########################################
+class RemoteDB:
+    def __init__(self, target="", agent=""):
+        self.type = "MySQL"
+        self.target = target
+        self.agent = self.get_agent(agent)
+        self.parse_target()
+        self.connected = 0
+        self.connector = None
+
+        self.connect()
+
+        self.version = self.get_version()
+
+    def connect(self):
+        global user
+        global password
+
+        # Try to connect and capture errors
+        error = ""
+        try:
+            connection = pymysql.connect(
+                host=self.host,
+                port=self.port,
+                user=user,
+                password=password,
+                connect_timeout=5
+            )
+
+            # Execute a test query
+            with connection.cursor() as cursor:
+                cursor.execute("SELECT 1")
+                result = cursor.fetchone()
+                if result:
+                    self.connector = connection
+                    self.connected = 1
+                else:
+                    error = "Connection failed"
+
+        except pymysql.Error as e:
+            error = str(e)
+
+        # Add error to info if cna't connect
+        if self.connector is None:
+            add_info_value("["+self.target+"]"+error+"\n")
+            add_summary_value("Targets down", 1)
+        else:
+            add_summary_value("Targets up", 1)
+
+    def disconnect(self):
+        if self.connected == 1:
+            self.connector.close()
+
+    def run_query(self, query="", single_row=False, single_value=False, db=""):
+        if self.connected == 1 and query:
+            try:
+                with self.connector.cursor() as cursor:
+                    if db:
+                        cursor.execute(f"USE {db}")
+
+                    # Execute your query
+                    cursor.execute(query)
+
+                    # Get query fields
+                    fields = [field[0] for field in cursor.description]
+                    
+                    if single_row or single_value:
+                        # Fetch first row
+                        row = cursor.fetchone()
+
+                        if single_value:
+                            if row:
+                                # Get first field value
+                                result = str(row[0])
+                            else:
+                                result = ""
+
+                        else:
+                            # Read row
+                            row_item = {}
+                            if row:
+                                i = 0
+                                # Assign each value for each field in row item
+                                for field in fields:
+                                    row_item[field] = str(row[i])
+                                    i += 1
+
+                            result =  row_item
+
+                    else:
+                        # Fetch all rows
+                        row_items = []
+                        rows = cursor.fetchall()
+                        
+                        # Read each row
+                        for row in rows:
+                            row_item = {}
+                            i = 0
+                            # Assign each value for each field in row item
+                            for field in fields:
+                                row_item[field] = str(row[i])
+                                i += 1
+                            
+                            # Add row item to row items
+                            row_items.append(row_item)
+
+                        result = row_items
+
+                    # Close cursor and return result
+                    cursor.close()
+                    return result, True, ""
+
+            except pymysql.Error as e:
+                add_info_value("["+self.target+"]"+str(e)+"\n")
+                return None, False, str(e)
+        else:
+            return None, False, "Not connected to database"
+
+    def get_agent(self, agent=""):
+        if agent:
+            return agent
+        else:
+            return self.target.split(":")[0]
+
+    def get_version(self):
+        version = self.run_query(f"SELECT @@VERSION", single_value=True)[0]
+        if version is None:
+            version = "Discovery"
+        return version
+
+    def parse_target(self):
+        # Default values
+        self.port = 3306
+
+        if ":" in self.target:
+            target = self.target.split(":")
+            self.host = target[0]
+            self.port = int(target[1])
+
+        else:
+            self.host = self.target
+
+    def get_statistics(self):
+        global interval
+        global modules_prefix
+        global engine_uptime
+        global query_stats
+        global analyze_connections
+        global innodb_stats
+        global cache_stats
+
+        # Initialize modules
+        modules = []
+
+        # Get status values
+        status = {}
+        for var in self.run_query(f"SHOW GLOBAL STATUS")[0]:
+            status[var["Variable_name"]] = var["Value"]
+
+        # Get svariables values
+        variables = {}
+        for var in self.run_query(f"SHOW VARIABLES")[0]:
+            variables[var["Variable_name"]] = var["Value"]
+
+        # Get modules
+        if engine_uptime == 1:
+            modules.append({
+                "name": get_module_name("restart detection"),
+                "type": "generic_proc",
+                "data": 1 if int(status["Uptime"]) < 2 * interval else 0,
+                "description": f"Running for {format_uptime(int(status['Uptime']))} (value is 0 if restart detected)"
+            })
+
+        if query_stats == 1:
+            modules.append({
+                "name": get_module_name("queries"),
+                "type": "generic_data_inc_abs",
+                "data": status["Queries"],
+                "description": ""
+            })
+
+            modules.append({
+                "name": get_module_name("query rate"),
+                "type": "generic_data_inc",
+                "data": status["Queries"],
+            })
+
+            modules.append({
+                "name": get_module_name("query select"),
+                "type": "generic_data_inc_abs",
+                "data": status["Com_select"],
+            })
+
+            modules.append({
+                "name": get_module_name("query update"),
+                "type": "generic_data_inc_abs",
+                "data": status["Com_update"]
+            })
+
+            modules.append({
+                "name": get_module_name("query delete"),
+                "type": "generic_data_inc_abs",
+                "data": status["Com_delete"]
+            })
+
+            modules.append({
+                "name": get_module_name("query insert"),
+                "type": "generic_data_inc_abs",
+                "data": status["Com_insert"]
+            })
+
+        if analyze_connections == 1:
+            modules.append({
+                "name": get_module_name("current connections"),
+                "type": "generic_data",
+                "data": status["Threads_connected"],
+                "description": "Current connections to MySQL engine (global)",
+                "min_warning": int(variables["max_connections"]) * 0.90,
+                "min_critical": int(variables["max_connections"]) * 0.98
+            })
+
+            modules.append({
+                "name": get_module_name("connections ratio"),
+                "type": "generic_data",
+                "data": (int(status["Max_used_connections"]) / int(variables["max_connections"])) * 100,
+                "description": "This metric indicates if you could run out soon of connection slots.",
+                "unit": "%",
+                "min_warning": 85,
+                "min_critical": 90
+            })
+
+            modules.append({
+                "name": get_module_name("aborted connections"),
+                "type": "generic_data_inc_abs",
+                "data": status["Aborted_connects"],
+                "description": "This metric indicates if the ammount of aborted connections in the last interval."
+            })
+
+        if innodb_stats == 1:
+            modules.append({
+                "name": get_module_name("Innodb buffer pool pages total"),
+                "type": "generic_data",
+                "data": status["Innodb_data_written"],
+                "description": "Total number of pages in the buffer pool (utilization)."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb buffer pool read requests"),
+                "type": "generic_data_inc_abs",
+                "data": status["Innodb_buffer_pool_read_requests"],
+                "description": "Reads from innodb buffer pool."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb buffer pool write requests"),
+                "type": "generic_data_inc_abs",
+                "data": status["Innodb_buffer_pool_write_requests"],
+                "description": "Writes in innodb buffer pool."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb disk reads"),
+                "type": "generic_data_inc_abs",
+                "data": status["Innodb_data_reads"],
+                "description": "Amount of read operations."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb disk writes"),
+                "type": "generic_data_inc_abs",
+                "data": status["Innodb_data_writes"],
+                "description": "Amount of write operations."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb disk data read"),
+                "type": "generic_data_inc_abs",
+                "data": int(status["Innodb_data_read"])/(1024*1024),
+                "description": "Amount of data read from disk.",
+                "unit": "MB"
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb disk data written"),
+                "type": "generic_data_inc_abs",
+                "data": int(status["Innodb_data_written"])/(1024*1024),
+                "description": "Amount of data written to disk.",
+                "unit": "MB"
+            })
+
+        if cache_stats == 1:
+            modules.append({
+                "name": get_module_name("query cache enabled"),
+                "type": "generic_proc",
+                "data": 1 if variables["have_query_cache"] == "YES" else 0,
+                "description": "Query cache enabled." if variables["have_query_cache"] == "YES" else "Query cache not found, check query_cache_type in your my.cnf"
+            })
+
+            if variables["have_query_cache"] == "YES":
+                if int(status["Qcache_hits"]) + int(status["Qcache_inserts"]) + int(status["Qcache_not_cached"]) != 0:
+                    ratio = 100 * int(status["Qcache_hits"]) / int(status["Qcache_inserts"]) + int(status["Qcache_inserts"]) + int(status["Qcache_not_cached"])
+                    
+                    modules.append({
+                        "name": get_module_name("query hit ratio"),
+                        "type": "generic_data",
+                        "data": ratio,
+                        "unit": "%"
+                    })
+
+        return modules
+
+    def get_custom_queries(self, db=""):
+        global modules_prefix
+        global execute_custom_queries
+        global custom_queries
+
+        # Initialize modules
+        modules = []
+
+        # Run if enabled execute custom queries
+        if execute_custom_queries == 1:
+
+            # Run each custom query
+            for custom_query in custom_queries:
+
+                # Run if target database match
+                if "all" in custom_query["target_databases"] or len(custom_query["target_databases"]) == 0 or db in custom_query["target_databases"]:
+                    
+                    # Skipt if empty required parameters
+                    if "target" not in custom_query or not custom_query["target"]:
+                        continue
+                    if "name" not in custom_query or not custom_query["name"]:
+                        continue
+
+                    # Reset error
+                    error = ""
+                    # Reset result
+                    data = ""
+
+                    # Prepare parameters
+                    sql = custom_query["target"]
+                    sql = re.sub(r'\$__self_dbname', db, sql)
+                    
+                    module_name = custom_query["name"]
+                    module_name = re.sub(r'\$__self_dbname', db, module_name)
+                    
+                    desc = custom_query["description"] if "description" in custom_query else ""
+                    datatype = custom_query["datatype"] if "datatype" in custom_query else "generic_data_string"
+
+                    # Set single query
+                    if "operation" not in custom_query or not custom_query["operation"]:
+                        single_value=False
+                    elif custom_query["operation"] == "value":
+                        single_value=True
+                    else:
+                        single_value=False
+
+                    # Adjust module type if needed
+                    if(single_value == False):
+                        datatype = "generic_data_string"
+
+                    # Run query
+                    rows, status, err = self.run_query(sql, single_value=single_value, db=db)
+
+                    # Get query data
+                    if rows is not None:
+                        if isinstance(rows, list):
+                            for row in rows:
+                                for key, value in row.items():
+                                    data += str(value) + "|"
+                                # Remove last pipe
+                                data = data[:-1]
+                                data += "\n"
+                        else:
+                            data = rows
+
+                    # Adjust data
+                    if data == "" and "string" in datatype:
+                        data = "No output."
+
+                    # Verify query status and set description
+                    if status == False:
+                        desc = "Failed to execute query: " + err;
+                    elif desc == "":
+                        desc = "Execution OK"
+
+                    modules.append({
+                        "name": get_module_name(module_name),
+                        "type": datatype,
+                        "data": data,
+                        "description": desc,
+                        "min_critical": custom_query["min_critical"] if "min_critical" in custom_query else "",
+                        "max_critical": custom_query["max_critical"] if "max_critical" in custom_query else "",
+                        "min_warning": custom_query["min_warning"] if "min_warning" in custom_query else "",
+                        "max_warning": custom_query["max_warning"] if "max_warning" in custom_query else "",
+                        "critical_inverse": custom_query["critical_inverse"] if "critical_inverse" in custom_query else "",
+                        "warning_inverse": custom_query["warning_inverse"] if "warning_inverse" in custom_query else "",
+                        "str_warning": custom_query["str_warning"] if "str_warning" in custom_query else "",
+                        "str_critical": custom_query["str_critical"] if "str_critical" in custom_query else "",
+                        "module_interval":custom_query["module_interval"] if "module_interval" in custom_query else ""
+                    })
+
+        return modules
+
+    def get_modules(self):
+        # Initialize modules
+        modules = []
+        
+        # Get statistics modules
+        modules += self.get_statistics()
+        # Get custom queries modules
+        modules += self.get_custom_queries()
+
+        return modules
+
+#############
+## THREADS ##
+#############
+
+####
+# Function per agent
+###########################################
+def monitor_items(thread_agents=[]):
+    global target_agents
+    global interval
+    global agents_group_id
+
+    for thread_agent in thread_agents:
+        # Get target agent
+        agent = ""
+        if 0 <= thread_agent["id"] < len(target_agents):
+            agent = target_agents[thread_agent["id"]]
+    
+        # Initialize modules
+        modules=[]
+    
+        # Get DB object
+        db_object = RemoteDB(thread_agent["db_target"], agent)
+    
+        # Add connection module
+        modules.append({
+            "name"        : get_module_name(db_object.type+" connection"),
+            "type"        : "generic_proc",
+            "description" : db_object.type+" availability",
+            "data"        : db_object.connected
+        })
+    
+        # Get global connection modules if connected
+        if(db_object.connected == 1):
+            modules += db_object.get_modules()
+    
+            # Get engine databases modules
+            if scan_databases == 1:
+                modules += get_databases_modules(db_object)
+    
+        # Add new monitoring data
+        add_monitoring_data({
+            "agent_data"  : {
+                "agent_name"  : db_object.agent,
+                "agent_alias" : db_object.agent,
+                "os"          : db_object.type,
+                "os_version"  : db_object.version,
+                "interval"    : interval,
+                "id_group"    : agents_group_id,
+                "address"     : db_object.host,
+                "description" : "",
+            },
+            "module_data" : modules
+        })
+        add_summary_value("Total agents", 1)
+        add_summary_value("Target agents", 1)
+    
+        # Disconnect from target
+        db_object.disconnect()
+
+
+####
+# Function per thread
+###########################################
+def monitor_threads():
+    global q
+
+    thread_agents=q.get()
+    try:
+        monitor_items(thread_agents)
+        q.task_done()
+    except Exception as e:
+        q.task_done()
+        set_error_level(1)
+        add_info_value("Error while runing single thread: "+str(e)+"\n")
+
+
+##########
+## MAIN ##
+##########
+
+# Parse arguments
+parser = argparse.ArgumentParser(description= "", formatter_class=argparse.RawTextHelpFormatter)
+parser.add_argument('--conf', help='Path to configuration file', metavar='<conf_file>', required=True)
+parser.add_argument('--target_databases', help='Path to target databases file', metavar='<databases_file>', required=True)
+parser.add_argument('--target_agents', help='Path to target agents file', metavar='<agents_file>', required=False)
+parser.add_argument('--custom_queries', help='Path to custom queries file', metavar='<custom_queries_file>', required=False)
+args = parser.parse_args()
+
+# Parse configuration file
+config = configparser.ConfigParser()
+try:
+    config.read_string('[CONF]\n' + open(args.conf).read())
+except Exception as e:
+    set_error_level(1)
+    set_info_value("Error while reading configuration file file: "+str(e)+"\n")
+    print_output()
+
+agents_group_id        = param_int(parse_parameter(config, agents_group_id, "agents_group_id"))
+interval               = param_int(parse_parameter(config, interval, "interval"))
+user                   = parse_parameter(config, user, "user")
+password               = parse_parameter(config, password, "password")
+threads                = param_int(parse_parameter(config, threads, "threads"))
+modules_prefix         = parse_parameter(config, modules_prefix, "modules_prefix")
+execute_custom_queries = param_int(parse_parameter(config, execute_custom_queries, "execute_custom_queries"))
+analyze_connections    = param_int(parse_parameter(config, analyze_connections, "analyze_connections"))
+scan_databases         = param_int(parse_parameter(config, scan_databases, "scan_databases"))
+agent_per_database     = param_int(parse_parameter(config, agent_per_database, "agent_per_database"))
+db_agent_prefix        = parse_parameter(config, db_agent_prefix, "db_agent_prefix")
+innodb_stats           = param_int(parse_parameter(config, innodb_stats, "innodb_stats"))
+engine_uptime          = param_int(parse_parameter(config, engine_uptime, "engine_uptime"))
+query_stats            = param_int(parse_parameter(config, query_stats, "query_stats"))
+cache_stats            = param_int(parse_parameter(config, cache_stats, "cache_stats"))
+
+# Parse rest of files
+t_file = args.target_databases
+a_file = args.target_agents
+cq_file = args.custom_queries
+
+# Parse DB targets
+if t_file:
+    try:
+        lines = open(t_file, "r")
+        for line in lines:
+            line = line.strip()
+            # SKIP EMPTY AND COMMENTED LINES
+            if not line:
+                continue
+            if line == "\n":
+                continue
+            if line[0] == '#':
+                continue
+
+            db_targets += [element.strip() for element in line.split(",")]
+        lines = []
+
+    except Exception as e:
+        set_error_level(1)
+        add_info_value("Error while reading DB targets file: "+str(e)+"\n")
+
+# Parse target agents
+if a_file:
+    try:
+        lines = open(a_file, "r")
+        for line in lines:
+            line = line.strip()
+            # SKIP EMPTY AND COMMENTED LINES
+            if not line:
+                continue
+            if line == "\n":
+                continue
+            if line[0] == '#':
+                continue
+
+            target_agents += [element.strip() for element in line.split(",")]
+        lines = []
+
+    except Exception as e:
+        set_error_level(1)
+        add_info_value("Error while reading target agents file: "+str(e)+"\n")
+
+# Parse custom queries
+if cq_file:
+    try:
+        custom_query = {}
+        save = False
+
+        lines = open(cq_file, "r")
+        for line in lines:
+            line = line.strip()
+            # SKIP EMPTY AND COMMENTED LINES
+            if not line:
+                continue
+            if line == "\n":
+                continue
+            if line[0] == '#':
+                continue
+
+            # Start parsing module
+            if line == "check_begin":
+                save = True
+                continue
+
+            # Read next line until new module
+            if save == False:
+                continue
+
+            # End parsing module
+            if line == "check_end":
+                if "target_databases" not in custom_query:
+                    custom_query["target_databases"] = ["all"]
+                custom_queries.append(custom_query)
+                custom_query = {}
+                save = False
+                continue
+
+            # Get line key value pair
+            key, value = [element.strip() for element in line.split(maxsplit=1)]
+
+            # Add target databases to query
+            if key == "target_databases":
+                custom_query["target_databases"] = [element.strip() for element in value.split(",")]
+                continue
+
+            # Skip not select queries
+            if key == "target" and not re.search(r'^select', value, re.IGNORECASE):
+                add_info_value("Removed ["+value+"] from custom queries, only select queries are allowed.\n")
+                continue
+
+            # Add other parameters to query
+            custom_query[key] = value
+        lines = []
+
+    except Exception as e:
+        set_error_level(1)
+        add_info_value("Error while reading custom queries file: "+str(e)+"\n")
+
+# Verify required arguments
+required_params = True
+if not user:
+    add_info_value("Parameter [user] not defined\n")
+    required_params = False
+if not password:
+    add_info_value("Parameter [password] not defined\n")
+    required_params = False
+if not db_targets:
+    add_info_value("Database targets not defined\n")
+    required_params = False
+
+if required_params == False:
+    set_error_level(1)
+    print_output()
+
+# Initialize summary
+set_summary_value("Total agents", 0)
+set_summary_value("Target agents", 0)
+set_summary_value("Databases agents", 0)
+set_summary_value("Targets up", 0)
+set_summary_value("Targets down", 0)
+
+# Assign threads
+if threads > len(db_targets):
+    threads = len(db_targets)
+
+if threads < 1:
+    threads = 1
+
+# Distribute agents per thread
+agents_per_thread = []
+thread = 0
+i = 0
+for db_target in db_targets:
+    if not 0 <= thread < len(agents_per_thread):
+        agents_per_thread.append([])
+    
+    agents_per_thread[thread].append({
+            "id": i,
+            "db_target": db_target
+        })
+
+    thread += 1
+    if thread >= threads:
+        thread=0
+
+    i += 1
+
+# Run threads
+try:
+    q=Queue()
+    for n_thread in range(threads) :
+        q.put(agents_per_thread[n_thread])
+
+    run_threads = []
+    for n_thread in range(threads):
+        t = Thread(target=monitor_threads)
+        t.daemon=True
+        t.start()
+        run_threads.append(t)
+
+    for t in run_threads:
+        t.join()
+
+    q.join()
+
+except Exception as e:
+    add_info_value("Error while running threads: "+str(e)+"\n")
+    set_error_level(1)
+
+# Print output and exit script
+print_output()
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req
new file mode 100644
index 0000000000..057adf64fc
--- /dev/null
+++ b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req
@@ -0,0 +1,2 @@
+[deps]
+pymysql
\ No newline at end of file
diff --git a/pandora_console/godmode/wizards/ManageExtensions.class.php b/pandora_console/godmode/wizards/ManageExtensions.class.php
index c6c0814873..94f1a2826b 100644
--- a/pandora_console/godmode/wizards/ManageExtensions.class.php
+++ b/pandora_console/godmode/wizards/ManageExtensions.class.php
@@ -218,26 +218,6 @@ class ManageExtensions extends HTML
             }
         }
 
-        // Checsk XenServer is on DB.
-        $xenInstalled = db_get_value(
-            'id_app',
-            'tdiscovery_apps',
-            'short_name',
-            'pandorafms.xenserver'
-        );
-
-        if ($xenInstalled === false) {
-            db_get_lock('migrate_working');
-            try {
-                $res = db_process_file($config['attachment_store'].'/discovery/migration_scripts/insert.xenserver.sql', true);
-            } catch (\Exception $e) {
-                $res = false;
-                $error = e->getMessage();
-            } finally {
-                db_release_lock('migrate_working');
-            }
-        }
-
         // Check config migrated apps and create it if neccesary.
         $migratedAppsJson = db_get_value('value', 'tconfig', 'token', 'migrated_discovery_apps');
         if ($migratedAppsJson === false || empty($migratedAppsJson) === true) {
@@ -1273,17 +1253,16 @@ class ManageExtensions extends HTML
             return false;
         }
 
-        $serverPath = $config['remote_config'].'/discovery/'.$shortName;
-        $consolePath = $config['homedir'].'/'.$this->path.'/'.$shortName;
         // 1. Gets md5
-        $console_md5 = $this->calculateDirectoryMD5($consolePath);
-        // $server_md5 = $this->calculateDirectoryMD5($serverPath);
-        if ($console_md5 === false) {
+        $console_md5 = $this->calculateDirectoryMD5($shortName, false);
+        $server_md5 = $this->calculateDirectoryMD5($shortName, true);
+
+        if ($console_md5 === false || $server_md5 === false) {
             return false;
         }
 
         // 2. Checks MD5
-        if ($hash === $console_md5) {
+        if ($hash === $console_md5 && $hash === $server_md5) {
             // Init migration script
             $return = $this->executeMigrationScript($shortName);
         } else {
@@ -1302,13 +1281,25 @@ class ManageExtensions extends HTML
     /**
      * Calculates directory MD% and saves it into array
      *
-     * @param  string $directory
+     * @param  string shortName Shorname of app.
+     * @param  boolean                          $directory
      * @return $md5 Array of md5 of filess.
      */
-    function calculateDirectoryMD5($directory)
+    function calculateDirectoryMD5($shortName, $server)
     {
+        global $config;
+
         $md5List = [];
 
+        $serverPath = $config['remote_config'].'/discovery/'.$shortName;
+        $consolePath = $config['homedir'].'/'.$this->path.'/'.$shortName;
+
+        if ($server === true) {
+            $directory = $serverPath;
+        } else {
+            $directory = $consolePath;
+        }
+
         $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($directory));
 
         foreach ($iterator as $file) {
@@ -1317,6 +1308,19 @@ class ManageExtensions extends HTML
             }
         }
 
+        if ($server === true) {
+            $console_ini = $consolePath.'/discovery_definition.ini';
+            $logo = $consolePath.'/logo.png';
+
+            if (file_exists($console_ini)) {
+                $md5List[] = md5_file($console_ini);
+            }
+
+            if (file_exists($logo)) {
+                $md5List[] = md5_file($logo);
+            }
+        }
+
         sort($md5List);
         $concatenatedChecksums = implode('', $md5List);
         return md5($concatenatedChecksums);

From 1073d492f77e08cd25715a771015f4ecf91a71e3 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Fri, 29 Sep 2023 15:22:02 +0200
Subject: [PATCH 073/116] Deleted mysql app added by mistake

---
 .../pandorafms.mysql/discovery_definition.ini | 172 ---
 .../discovery/pandorafms.mysql/logo.png       | Bin 12952 -> 0 bytes
 .../pandorafms.mysql/pandora_mysql.py         | 979 ------------------
 .../pandorafms.mysql/pandora_mysql.req        |   2 -
 4 files changed, 1153 deletions(-)
 delete mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
 delete mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/logo.png
 delete mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
 delete mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req

diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini b/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
deleted file mode 100644
index 7345f5f1d9..0000000000
--- a/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
+++ /dev/null
@@ -1,172 +0,0 @@
-[discovery_extension_definition]
-
-short_name = pandorafms.mysql
-section = app
-name = MySQL
-version = "1.0"
-description = Monitor MySQL databases
-
-execution_file[_exec1_] = "bin/pandora_mysql"
-
-exec[] = "'_exec1_' --conf '_tempfileConf_' --target_databases '_tempfileTargetDatabases_' --target_agents '_tempfileTargetAgents_' --custom_queries '_tempfileCustomQueries_'"
-
-default_value[_dbstrings_] = ""
-default_value[_dbuser_] = ""
-default_value[_dbpass_] = ""
-default_value[_threads_] = 1
-default_value[_engineAgent_] = ""
-default_value[_prefixModuleName_] = ""
-default_value[_scanDatabases_] = false
-default_value[_agentPerDatabase_] = false
-default_value[_prefixAgent_] = ""
-default_value[_checkUptime_] = true
-default_value[_queryStats_] = true
-default_value[_checkConnections_] = true
-default_value[_checkInnodb_] = true
-default_value[_checkCache_] = true
-default_value[_executeCustomQueries_] = true
-default_value[_customQueries_] = "# =======================================================================
-# Custom queries definition guide
-# =======================================================================
-# Definition example
-# check_begin
-# target_databases  database where should be executed, default (all)
-# name              custom name chosen by the user
-# description       custom description chosen by the user
-# operation         value | full,
-#                     value returns a simple value,
-#                     full returns all rows in a string
-# target            query to be executed,
-#                     you can use reserved word $__self_dbname to
-#                     reference current analyzed database name
-# datatype          module datatype, could be:
-#                     generic_data | generic_data_string |
-#                     generic_proc
-# min_warning       minimum warning
-# max_warning       maximum warning
-# min_critical      minimum critical
-# max_critical      maximum critical
-# inverse_warning   if set to 1, warning thresholds has inverse meaning
-# inverse_critical  if set to 1, warning thresholds has inverse meaning
-# str_warning       string warning
-# str_critical      string critical
-# unit              unit to be displayed in module view
-# interval          module interval
-# parent            module parent for this module (name)
-# check_end
-
-"
-
-[config_steps]
-
-name[1] = MySQL Base
-custom_fields[1] = mysql_base
-fields_columns[1] = 1
-
-name[2] = MySQL Detailed
-custom_fields[2] = mysql_detailed
-fields_columns[2] = 1
-
-[mysql_base]
-
-macro[1] = _dbstrings_
-name[1] = MySQL target strings
-tip[1] = "SERVER:PORT, comma separated or line by line, as many targets as you need. Use # symbol to comment a line."
-type[1] = textarea
-
-macro[2] = _dbuser_
-name[2] = User
-type[2] = string
-
-macro[3] = _dbpass_
-name[3] = Password
-type[3] = password
-
-[mysql_detailed]
-
-macro[1] = _threads_
-name[1] = Max threads
-type[1] = number
-mandatory_field[1] = false
-
-macro[2] = _engineAgent_
-name[2] = Target agent
-tip[2] = Defines a target agent where this task will store data detected, if you have defined multiple targets, define a comma separated or line by line list of names here or leave in blank to use server IP address/FQDN.
-type[2] = textarea
-mandatory_field[2] = false
-
-macro[3] = _prefixModuleName_
-name[3] = Custom module prefix
-tip[3] = Defines a custom prefix to be concatenated before module names generated by this task.
-type[3] = string
-mandatory_field[3] = false
-
-macro[4] = _scanDatabases_
-name[4] = Scan databases
-type[4] = checkbox
-
-macro[5] = _agentPerDatabase_
-name[5] = Create agent per database
-type[5] = checkbox
-
-macro[6] = _prefixAgent_
-name[6] = Custom database agent prefix
-tip[6] = Defines a custom prefix to be concatenated before database agent names generated by this task.
-type[6] = string
-show_on_true[6] = _agentPerDatabase_
-mandatory_field[6] = false
-
-macro[7] = _checkUptime_
-name[7] = Check engine uptime
-type[7] = checkbox
-
-macro[8] = _queryStats_
-name[8] = Retrieve query statistics
-type[8] = checkbox
-
-macro[9] = _checkConnections_
-name[9] = Analyze connections
-type[9] = checkbox
-
-macro[10] = _checkInnodb_
-name[10] = Retrieve InnoDB statistics
-type[10] = checkbox
-
-macro[11] = _checkCache_
-name[11] = Retrieve cache statistics
-type[11] = checkbox
-
-macro[12] = _executeCustomQueries_
-name[12] = Execute custom queries
-type[12] = checkbox
-
-macro[13] = _customQueries_
-name[13] = Custom queries
-tip[13] = Define here your custom queries.
-type[13] = textarea
-show_on_true[13] = _executeCustomQueries_
-mandatory_field[13] = false
-
-[tempfile_confs]
-
-file[_tempfileConf_] = "agents_group_id = __taskGroupID__
-interval = __taskInterval__
-user = _dbuser_
-password = _dbpass_
-threads = _threads_
-modules_prefix = _prefixModuleName_
-execute_custom_queries = _executeCustomQueries_
-analyze_connections = _checkConnections_
-scan_databases = _scanDatabases_
-agent_per_database = _agentPerDatabase_
-db_agent_prefix = _prefixAgent_
-innodb_stats = _checkInnodb_
-engine_uptime = _checkUptime_
-query_stats = _queryStats_
-cache_stats = _checkCache_"
-
-file[_tempfileTargetDatabases_] = "_dbstrings_"
-
-file[_tempfileTargetAgents_] = "_engineAgent_"
-
-file[_tempfileCustomQueries_] = "_customQueries_"
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/logo.png b/pandora_console/attachment/discovery/pandorafms.mysql/logo.png
deleted file mode 100644
index b24a84ceea0c3ad8590bc2721ebda93108a0b8f7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 12952
zcmb`uRZv||@Gc6$-QC^Y-GjTkySsaU;O@FZut3lqWaDgL2iM^41b2s<->F;oRGs^O
zxmEX}Yjw}+hv})A)$@JbD_%oQ9u1io843ytO;JHs>)#XjpCH0RK|w2x@_+wlz}icx
zN<l$2rJ}rA!u_)aZ4DIdR8^sv|LKTO&~c7Xu>UmZe?t6EprAgLefob!fMqcMTmSE+
zFBwn<3W^&=QC3PP0QxKxA%t}3?qkv{lQX5M-$$`k<yYh-LmD9>RV**%Z5dRnnpY+&
zEo`*w2$L*y6y0i8nj~w7A_K`+X*9a;nA!uS_|lXB>*xyDBxrwQQ0vW0kJyBhoBPB0
z{M5qQA<e{iu={A(gX*$?>fF40n{-)-)Xm}?o`E_<1%k4`FUOmjBhOudQV<}#Y<BZ3
z8r>W-k$VTyS*D*ptl;>G7RqdI*5h%v?bSZ@w%;b!u3pL@Y=M;XhkuHTC(|7E2>@m}
ztvE8!O8Y)WP3p#2gjvrKGQ?hrJDk{&jmTGYk`-BGxjYaI(X<M2oH4*sq*b$A=6Kxu
zJ4evK&W%(w#cqnZq65y8+CF%)Wo<93AydCvtPISppD6q@Y~|_q-B{X=xHUY8m;A+%
zAUXB)+L_qn_pXVE_H;;#ct{i%wf(~!pNvSUY|VG_)OWsMURpnjnd-sYxN*Xm{9!#5
zVzF#infJ?#0o^^}ci8(B6%s6=g80?n%+;70h={Oun=2U{0ya@4tLO7WwZj++NE4A7
z=6kp%m_ZDt!eZn<xKiI`UQmE>bGAk42#EZvF;Tw&ai>7DxR>wqUHf|>iy0c|UhK{0
zDK-~2T%vjEAyNeOUo&s7_he(t+o_`zST$xql9kJEW|@6Us(!IzDr8LA$i?SMKET;j
zF%~%12E(0$zgtt)HuKRaYT{!82+@ZrW9l~O@N_A%Rmk~Y#?+P38Km`S`(@)>GkXCb
z8x~tVEiEhGC)wOMC|vlKVw2~5L7sa}Gusm?qy%tyQbDV58lECm*}w3<Q%3Zh7y^lU
zl`QwT`)gpRh<g-E$M(IP8MmU{;CzA@1(u<!?3qnUlTlx;N0^<AKieoxIf~{osr6oK
zmZdU9&w?}@K}lX}i<YH<KU=Uj^6Iw^z<}macqHe(Y$mJlo3X#r`U1Le7apSst-ric
z-9(i{Q-@t(B&!I8q<J=#Opl0}Q{sWTg+#_FmKUfUMNyEh9*)=pvv<(A_qF`rL^UX8
zerqb@0)g6JQF}DX$l(qSqHvmAvvfqn%cGXxMkJgGe>y)uq!Ag;)=8IBpH2(QKZ)Xp
zqKU?uogpbv>X5yncii$g7P%u&aC8<Sj}r#dX)Fg>MXlbIB1eBRmhtST3aX4kHuU;A
zRaW^_@qi;msT_tIkoO9Z`d;~Cwnc-fM>XuKoD(l^ARYtbolX;zDs#bhg~#!UzY?7e
z1G#|FqOtzzQ0LLo%r9aKiGZ<y!eD3n3(Mo4R{xN>Ud*9U!kdoT)cGRXB%3cKebSFq
zFK{*0M@C0~^4?1L&h{w5m(h5JfxWn^&RCNw^S%=@ncK^ZsOl~Md4eAGcOPL^o8U9-
z0X4=4+U>fH&+6Ftp3lvV)T;Z;u(+R)p<^PXC8^SG5Yyz0-WOKUkc$j<WN2iFdrboE
z$2Nq_9hfZ)O}%I3nbLYY8a^ky!Alyt{x-^n{@{@P%=ilL%$G=ckdb&Xl3OEc`^#TF
zZ49r@)Hi2q<hJOtN*lqTD9lP9P{hcKH(*4xr}51PW1mvogLdh<wPK7-yPpk58YKH%
zfS^5k*`wC7IVa=nsaUCE!PsnA1F}Lzo>f`QbYU<ZN)IV2rHskwiq>+NOb)KW%^P{w
z*K+(0wX79!&mPa)ZdMIZcF3%)!M!w&C8^TtPZ1NaM>h8~zL8Rk@hKl+OK|+_i!+WV
zJROFTy~W6!>Jl}UeO-|iZ3kUO&Z14&p;neX*Bo?f9Qf3XR6a{LsZYu;Otu*xH@Yh6
zqX**jX~jQG)$FV1*#8Ak-YweP9i%CkOJyzd1Gx<Q?jS6^gAMjs>~82Ey-0(D%vjNT
z)G&>Wj6@CYa0o0lEwCo{{8*V_v1{gVs7tgXzv3T|_)F8De3pXX4iQn$$S<@)zVwdS
z*2YkPhi@(u#)Sx^z*~na?8K!^M{f1<_M2IOk(xLYfu$+W-@I*tgnQ>{n!kT4=RCM}
zF<tywkoc4%G5w0{<Xx<Q8(nHVNSef$CaLo~jl_|WkzrAP=2_osC^h?aBcvsXBpef{
zQm=b-@FZ2rnlvE#C5(Swhi_jo-|bnbG*=oX68Ve2N{ht-u%Ih!jniP3H(pGfIZ78_
zWQzP8*X9IP#?6Sc%7Fez`@%tS-fx@_xxk}I<DGRIW86u^OozJuYUGn|5>G5r{szbn
z5II@sB^~glsO>hG=npKFs?Q^3t2K3<P~e+nQJwY9D33Z(>CAYoE~6+b$!EijAq!8+
zpU9_~`m91ZvD7KMX}{#)O@hsQh!c>ucU9M4_l832e7Q82kH7NFvKpq`?4UUe%e+`<
zzLU2M5|L7VO=TtHNe?mbH(;8Zdzz5;9$r;ATGTHk!ym{S2TrtKTf<>g=a2DRJ*Q6l
z@EcE;k0Gn$g?RypKj;L~BwQrCjuF<olWq!N4G>AL9&hN&Nj}C8hQYtk@^>4{V^EpT
z7QdVe=)<`a__!CjV+yl6BpnO1G`C4qan_(-f$zq4Jz~D%TRivcmCeyq$y{mFP)LCz
zQc^Y@b0>sVVk*_&>uA~${djSU<l(YVj;Wo}Th3z`KR-nU4|B2^k<PU*qpoy@viu3V
zHvna;ipS!cD!~m4m`zyV2^M-W6aB9<`rp@<@qZuL|I9u5PwUNOdj~Y%a}xAA`}i;V
z(`noXPFEdWY)&jqi8GnSIC1Al`8f^I9M~HM3<6+J)2hZgtfDM<A_V+{QG`{dI8INd
zBz9Y!mFrZOq84+{$!lg{F_+)1MOFoZ&{@abi-c=v$Q<$zOW<khh2;BQSJD9|qbiC1
zAi?$hvnELt%HNeIS9=umf(?V*R@PxO!=f8FMf~2D{p+GGB{g97l3weEc}MEv4N$P?
zG?3osrS<-7o$pNTr>i*KaPlG4w3wB-zI)%sZX~^j13eMMR@aiB-S)$f{&KphC(<$F
zir15VO2#(9{tyGH>=-ciSFhNS@Tzw<o#9#-PJ~j;(&%|K@YPdg!!)U*5uwNiS5;b4
zg;eQ#UAKYpm2QIioVB5R25cu^G2PJWSr@PjL#89A1fP^_chh$`41bZDVtxw<KChfR
zLtLMrwBO73OO9&^>JaS*{V~r0=fA4{=`VDc7+YD<5Y4PBmhg!<SefIh4AqB{oPZLr
z;+QnTT``|-_QW~ySxQ`Yjg3{YSD?fe<Q-=*ZvU%O$NVJn6rXc(lkAq~{bauk#b#5<
zW{_-)+VpS<ux756U+n#3p!-bF-_|LE><|<XQnz&qCtQ;yXYqoV$Gh}-I?O!LPtegc
zgRD-)5|t)*3#S*m%p7r=Vw6_G<|zQ_K)SF83aUIyKE33ZhU;%fAAZUOAn?&yNr`&-
zcSh15Gah_MGkDdLcw!b$x8maW72Y&AarY&{NkPtzWF8Te&*E3ha{1+6YP{)gs6{rX
zTuY@+4jofJq>+5dxvSHw6jw$2#)H&?E%$0suCsb_rM@5hxP1+s!-cYSw;xZtac~2!
z>32tiS}u4;gF8nn?4z{~-ln9J#`KTi!nQXIekW(w+9I0SN9(fYGnah&mwnwlE1_TG
z>W5VmpJy0fGK6@y$yN`SVpavZ)0>i|t$WAF8(gGX0`aqoH|99SY})zOs3h+>{fNct
zp87x+3dz>aQ2?>itS}o#%ju+EM`J-~ZsR!ZXo$ASjSI!_f`(`k?j*Gkkw(>RkhF82
z>GRcSpf))lA8~2b86if&7|1fNqWk)w##d$T;$JfF9%X`o3Tgu6A6i6CG?o;nG6)TZ
zqkw7WE^r$}c%S+Kz7NtT>|^}mIcX9R_Mo&q#S^SWUw$SN^UF_t?+FU4^}oD?PDQa8
zG7G1V)Y23QDGjy7OnB;Hk5bOsp$r$7*}k?)+rS1o!wJq*J7R_NvGadQl90gX4mkcr
z&DI5E8^EAs-*@ggN6ty3$!#-<8v2Wr##Ds9r`FSvQu=xeX1?BJ2nl`Iyuu+J&ZPLt
z%1O@q#k{?7#tkowv`4@`Pv05evNQ2+J`vXSXJRrGB{`#wg-ru~SkXN{_TR^N#JEjE
z6297i(Ei}4gT2rE-CIWF41wP?RdGd6?H@}nAF^x5h*AFV9WGdiDz0EaH4=P9b=;)(
zIY7bP;7IEw=y0<y$Kue@6;3s|LSc6(p?ckeC#d7D6?jVT<?E~Bd}}n`lWbA7eJZa(
z;*2*D8Hep^F-7BGQ~3n%d#R&cFY?j8aCq~@>psXsv*p(VLhADmi_vm~E>z{QL9Fz&
z&;i$jB{w`00rt(;`3m3+DH~oO?SSW4S_vq)QaMAn=Y@z58dmsCvyiP_bTVAM?*?xd
z`D-l9^*dX@GAKX@f?_z>=68!|<ZcR*-oLGv#eON4%{yM<-mc=ueJNlCqnyGnuya$<
zm@sbS52&+;+Ct|cz@e3Aw~d(hG(L$$#UA|i+nyS(NSWE-ilIr@OBj3GSoR_g`D1B^
zmgUG4Hkk;U92lfQBWpuIV4l=<qRRc=!%FajS$U-<zSY@$Cpe_%JGy#`Ojrn2u~n7j
zR#>{+?yJHzWOtYX4sAjgTQF*at?edatgGf^Lxu+^Gl+J9XdIeQHp2dy%uC`nE8Nam
z35R~{VKCLKh)fQzAdJw$rIA6Je(>Jmc8*=xcvJAuOPi+CfuBN|JP?t+yDWg$$xoQj
zbP%Tl6u$Qx%&Y`+HpFry=)WyGrM(p-3o7n<nF%y<<-2!6hwww}FLkQ0%+*kiHJ%^<
zMP7jxYPOrWw{*x>6oSey=wr_(<GZlC*pUNc0gP%b>ghxe=`tX6ry(zgz|r8UgMctR
zB58v8@ai(FHTe{Hgj!?D_WcXjYs-($BCLW~-3Tk7O3TYJ8~}-XB!J(0kmdo-FK~wU
z@|os7@iJu<dfX<1$^x5s%nfba>8(So1aX(rwDu!%VFT(p^%#zdjFF(iGUX#x((9lx
zo#a(Qu#b0Vu`8}+)R&&V*zv7q&ewOEJ49`~E8#AYMmdqcW#mM_zmBy8({SN2G(_hO
zexIzJA~uFCg6ZmP3dmWI*%dh^=B)-L^d(mVd8k(IEU#4P^F8((GOur$nw->6$xR4p
zpxSjp<^Ma0{vSE@e>NrAsiqso(BMy`nvnmJ2=ae}V<BF!Hoo>{IYjv2H?YNeI`@>E
z^Tj_n!%SLF{3AnPZJW_?iek*o?p%ky!9pHVwl0Q#q_wh2wkSSO;_97Ga7JX()*4Et
zcS0I96nwFVu=M@exzeKQw2ysjc{hSywE|BIs9<K+oBX!9Iq-gw#pkmWBJ|5Mtg)$=
zFC-NfRL9P{$@w^OjIS{Z&EU!Q{AuA6xg=$9-eLRjUnZtR(U-q)r|FV7f=8GiiRhjz
z_~Ysd2>7lRM#ihJ=1^gn3%NarPw~fl!J|C6llQz{><}=2vJCXb<Moh#p|X#hVbiLG
z?L+~e-HR%aco;Pzn3D_!`l(?W<Vv;r@0x(Z8~KHAm4LA6=!Dy%{lIZ~g}|tsJNeaT
z0sg0#92;kKavM8CGs-<@mpn}J-6BTfc5z>o<3`ruCA>5>YbP&uq~FVQiQhC+T4-SE
zH8~n@B;vH6B}Docs>4n@d49&Jd`o6(-s+KsG^@%*W|&JVf{}H}1vIO3sSWq{b1H|{
z4%Jmhnc84h|4DKTpX#85jvMF6Z_}LqghfK&-ZY6K!6Qm@@0{NyAP9`AM%nq)D&a0k
zOB@|l;G!;_$aKjEsd+Xed$C@)we!mMi3*x`WlgTADa7SG+$ikP<<()zow7qPl_A-z
zIi6(<_21Paa*A#8#uC=bH7--?_uj)xm$d@C^`*OghVL#0Q5l8lVi-fL`+=R70O#7#
z*rAG<y6EuJt{Zp$kqo>;$X6YUL$_2uYyqW7Y2%*{J}zQ55tVO?EDfD?Y?%igS2BMp
z?gm$TewNGAqyb=nBvI>S3~ClzL+f9y;?WJuSpHIQVfZ$s{T`rEv*^=1$!*3|$0ll)
zY;#`$djH+g-OZf-O&yW^e1!R=X!w;r9#yf-ljn+6nu<K}g9j;@^%LMpiqu!OMG#=$
zjM*j|i#t8%?n-1U-T_!wVITezx!l&;7csw1VQM?64sHjrujc)mbP|9f@$<@sG89<e
zN~enmxH3gUMq!VVlNQ}ylQ9b}ERb(?4)GM{2yk;N&4XIUp5haZ%$T}<a6CLSKI&o=
z9{uVdZYnVvChXQ~TSdbqGVrQsfS5W=6d^Hi<>N0nM8-|5ih<!VhGcVn7#MQU&p<vQ
z!S6(PoXY+UkzGO<8;6HycVspWY1_QN&Z*L!fI{n^zj|g<Wnzak^k)yvxe=qJH$t-Y
zj;IA~0*0CxkKg(=>YIlsEI%eU*=LEoBoh(ZI(h!;kr6K>ZMRQX%HLxObtkOkVCi@(
zjHzm~<RLpCQ5mV-&sQ1sK*?KG-097KfERn7RFh<Z+|Tp5F+(dEwBK0EUYDsNGN;Ep
zCe3LSt!b~_Ln_TB4#widjd&cjRMe!P*~({RB$7=S|F*}+h>P@5k5KXb#l%=&Ja7M7
z7Pv(9lb~P!P`zkYpZM&H5{4t;N_W!LZM=ibjul_6f)X@a+7V4|T@+a%f7`53{r6+O
zS<dFvX2Lw1Bdaei>Yx3Yu@3o!8#vf~cJAoT65wj(6Iu&r`S^_JX}PTnuf$3@`@WBm
zZ9Zc3ae4#j1`I@gsI;AR>4gwrOyX7W$b}yd4nKo{0%{sX|Ip)!2j_`Z?xV@v9a3ce
z2^nOH>@FsJAPo(L^2*xC+052BU0c|Vw;&KQ3!F0*mf;53ywgRh>=ZrpVdscb6cK<X
z(Dr0=;z=0Rw761P{h&K|#CJV+RiRcmUQ7^eMj>zxq~A;zUsc-%aJm^-!e=WE2f-Ea
zsb$_=`Y8D!!zHLm&jTL9F#>(}6tOQb>`_!DbsnigLjvlGkh;1psh4o+tF+HhwMtbe
zpkps_BnuA3Z+Dh`Mhq_MJd;n%)98(Ja*vsLty+&SV{&oVrs@2s(gNEqhoy$wqxydR
z>Q!~d3_nrGJF1bw`;?m%cD~xEwj9{&M|6Bz{OS@nzfnnfnC$>=u&Envjy6ELoz1M9
zN%GaDn0!z#ZS@tsB01g<8kVcd4S1Y9icH`~*>ll?{hbrZxHXfwzB3)U!Obz-xF+mo
zUiq+aF$DGEFrm;D$ch<=)59bCO)&ZcI2>3pmC)$nsJGMN(MdG#dyy3&djDffwKh1Q
zz0t_h<mpQp*sirK(CpF?E63DOjTDxAV>Yajb&gD;pon=Mo&~wE;~j=&YfEab1&+gx
z!U}+`62mhgRi{r2QrRX<|FpPlWb@pJNaDFmzMZ>11wI>-YxmsP3rCXZ@N9i+ujiD&
z#kh2RmJw$&y|pP#<JuQC48%Lx$gaSK{2t5l348aBFKot9-pMy(%yTSkoqOR<8pB;`
zqLyL}2;V%MYT2Oo*}?43G@a%s=M>IG<6gfdS^Kn7dz{JEqpYpd6QG;JGx`cld5)^8
zyPXZt5O=;UcV3ZklvT}f=lFnWMm3G1k9!$tupW!8m;r4Y_P(xUsCo_Di|B?0Kz8-0
zd@2!a4X?{bjX2!oe2<;EH+wuGS*gT_{v({VHB?5FTSC=|2o#HIRq3+rfTJDSAW+14
zKYrV-1incpm*NhMSsLznG?ZC@{@nJ}%SWz4W;f&PFxtffvP6fme^{%|mrnK;+f`V!
zdN|&hvO5Z-60BrR_0rqjB<(_ncTQL%+Sk428VWbW$G4b&d1{UGy!@)EeQS6!7c748
zrh;z2n@Z#fDJW7k5g=NL@yWA5cC`!JsHiDQ#S8HQG*#?zpQ2GMzH+Jd^wJ?YBnMU@
zat(?ZKE@<YLjK+s@k3f1oma;JM04RRJ86jlN$l<YOKsXhHuZZCyI7r1(Z}Lz6O2Sd
zzFCBMbRW`-*>t|Lb54c53fR1v7K+^b+K)}O&tlv1as1McBWSv+W;AiZ&wxz*j(4R`
zq`iCFw1)_t8_7{gH0eh@Uhm6~p<%szOOv0)Nr;?;O~PEdEe6{y`6<W>H-SAxoT#0~
zmjLdQFPqC}PDcF0OU2T5e+Le5zEHT1Yv)KLBP{xn;`G7U`eB8X2|81yQrPBB;M&<<
zR5sA%V|#3Me)`Fi`X>ZRp`~$p!7&T|M+8+>%*-gnYw27*)p?jkn4OLV=QXeYCx3om
zmjw2$3cIPs!d*pf+UMn0wJXkvTQmlc%83J`xHS4h+$P>p<=>I1-$ZKWxXqs#3@AN+
zj$50w35({lzpCCSUl6?0=HBqg3i3W&FUCk1FYa1yX4pO@3|I-NgcU7w{ZUg!BAKZ(
z_flG8MXHz74oM=c^F>NGSiDm+$a-TD3O(nW{j{F1r!$C^h$^?_DaxMbXmas&Tb-dv
z=z<fR^kz7%Ny3#k^4O`RP=-;B_uk_(2lMlor+H+&p~B2A2Rrp-0bI77pZF(Fz?j=a
zWcAt~jI-R#HuBzI*_O{CT9(|Sp$32E-$I)6HbZCK`)`9k|D{j&Gb$_mp=|u6%wuNb
zUF$LCBr%XQR|-kIqn*}(dtv&=Q~i{gi+Zqb4qjLYlG`4@GiCUvg3OhoLwGo|jV4PS
z1{?es`7_o@ff#U8+u>UBH?n}1xsS9-qT#Pkp7<zc=AHSqc=W_vu(w~63J(x|#^C^A
zesFAp%K2%d*1fKF>e7=)xj=Q7^8rbz=obkgQQIVZ)`grt?+Bw_ynD!~V5j(Thxdfz
z@?WFGEJ)$|w^-ZH`<_yL?Jv0shq(^Kt>1)}qkIxPR;w+vMV^p=fo=r-{g7YMZGi7b
zMV8Y+sE*yE9iCPZPs{_N&;FOlb56XraMlW1ki)d@z=If^b+u?yx(ejoAydoT@<#X1
zC*Dx|7*PmipP@<rzGjH0UVYl(Ja{?dw?WQ~G#@0W7n;m<+r{;P@=U#a7?#VYK-H-i
z$mXgWDv8YBfmfPB87`frQyJ5+9997WL_IA#GP{b@(D1Pr1Sj5u0#ML%xO-Wd(4am<
zs(`R)#D3yWG-xqAXp;?)rAv+e=mpW5Krwx|%J9n+oAI`#JxjU+y6YsTIIP`7zz9wZ
zQ~?r<qbTy$6b<ogFZ@an8n3gWnOyDNwdQd6RwBM;%j*;N!@3pH#aqF7;Dmo)^@qbs
z5HU8!8i&DZ2+EHvU70};Fp?$GTkSC^oWdXl$0Xu~ll^;_<d>I$i6x&~Ir=Pk#}3ry
z)MLnl?n<{Rg1!~Se?*`|tjffhb6QQvTjfl3hRfeGjAYILAHr0>ta7&vS}4F<kQGaQ
z*?xjDg_w)c38;r%y%*Y4J9@6|6IJbE8}j6mblqEZ^MK6YoV#S^=YO0{xx>pifa=G-
zyjd&8eS*)=C<<!AT8Pg7NeTYX@Z~>_|9{{Q|35qDV;!}vZ|1k?VXsS3wp;v(F-c@7
zhGB(3&YvGVgon<CtZ#DvWM#?PY-n7w#B88#-0KPmoOLEUmTt3B*PpzD3lB^|ISFFU
znhqcL?Rt?or=G235(;6sjE~X57*iO24}XP)lGkS%aDxN_ocH-yZgv7oOa)J11<H=J
z3w|i+i{OcPn$G7qk=FB3AeVRn$<6qS1s=HUPYsK3?y?Se7M9et{FMCtzcIyZsBYks
zEtAcmn$TBm=QRw*OdThXcm3MOWFzjue2_kk@h0>PMVG+DvyymB<l-fg&z4ESfcqe2
zaMBgfRX0q@yls|nRa2uycvZy6hS}GYQ;3FIk9heFN|BHun(9kDx#SN0_7;@DJELvj
zQxY0*V@yCy{J}N*`VF(sgAN(4ce`k(3yzMCt_G5f)KBV@Eq%D9JfcHer2ni7oOgCG
zfZjJwI@y~o)hT4^R}(jFZJe=?fOxuj%c7**w(XXH#$;|r$tSq;rSP<o#i}nKM7^C%
zJ=2GrHG0YcJ`Ykg9G*%)cUljkSHQ348X83%6MDPXQ%q`Jek)0<7vhw&<Y<<sQdL9@
zVM%-`ER(h4wk!!+4p+^7GHoII1znE}uBB3jaoY}y%%o?a=`${mA0N!Xqf8i3m4)G-
ztPjwL&<qZ}3<!<h6A6)dI=H0!THQ3zcce<~I$H7Hgz}Caq&94QCo<8%5zRXwehwBh
zeu2kG<7PfL`HD`t#u-n%b=tLzdqiEz%%LUoYxxw3D!}#N9?pmB6+Cw}ZV=_nc~zH^
zv&@6!2>Z}j2$_DU0fqltR`Guo7yiT>c}`L;bszb}Hx|^u`s0RIP-eZ>(Ro>RdGq{r
zeJx6NBF2zsUPuQLLdi#6Z=%v+M7e)E#<`rGS<=~UKsN*bWXJ2-`=p5JGmM|TG)S7!
z>;kj8Kba+H3x%NoA89h&NRMD(Q0e3Sw_Y*{9*14nnF26@j2AUtzT6$q*4`BEtyT(h
z0?h5U7<<}|A+Qp2T=1xT3^z2CH2>_Sh^qJ90G-SUjFS(HCv_(UL-leK;_xZ~US3==
zq@UX>Yp?|n^94X$2SOq`V*9Bunn@O}b1)iz2gPEO-f(0}InZQ#yvUt?Q<XQxJ$kZi
zGVEyPovVWGjHX|}Lvh=3gkW%29K|7n#V3b82J0;82S_2=9<S%&zN!xF@NMbW>_8Y@
zTHt7|W%U*QejLWIH)mx%Np%+!Ma48s{5{kjpRd#rs?Q5f*#w0J>8h{XHPjwk^E3vd
zAoP<vFSuw5tg#mtwYd3jMc+RMM9ih~m?;|W=<RjF3p%rO4%cJ~zrJ^s1Lj5Izasm|
zFGn3DvPFj7GRB<Cdmzv`))y;1d94%b1Yce|EAt12iW}KmO;QsVc$#}y&iTKP;8aY%
zC0{~SrQS^*i2UITtu<cYZTX7Pn!ElODrX+JZtE(JQNE2pkEc1ZvqICqqHBMr`>b}%
z7~>~x`%vjxxpN~ZG4oES&uSpX-CpKMGYplx6MZ&lVLGSPsbU_NJB9X+uv@A~ZCVEx
z*cD=V<4C=>_%D*4&pv5$(IfTo2@!9M@l1|2q9VVRx*eG1QLqJoM7F;G=3hO+J0@<T
z)PuWSzB$zV!!G&FD+d<gdsXy$&oF<aRJ@;mvXxVBqb~s*uOteSj*mNQ1c7vkajQRV
z%fmQC__60o;?_1aq5=)(fz`c<s<w%-tD8A2cuYd@w5i)P_c_B)73z1bs7ip~L<{s`
z$Tz@E<M&%j<^uVLqBR4){h0sS9*8`_I&KElr9;vm4Z5s7!M*ner!uHgu~JRvU(lWq
zVD1F}7igV%gd-MUA87w@W{j5KOU4+n_i1QoW<V*<l19OO;B0g0|I6WtA52cqLt%DZ
zwRGH#q~uL2MlVj%fUKLHZ`VEeoGS2+-oar_v0V;$>i0&#L4I}^1iraXd*c@FTb#Nx
ze(2ot{#?#dX7b@@JR9boH}VEo%Ls(y8f{PIO@>FjMfSExXgv-5fk1Yzs<=LV-G{ri
zCbr8BbIBz-;;iG^9In6HXMCZG2O#xAcY1|I0&o>3B`T&T+ffaj4n2|7kBTPTizr;i
z@hC5`0@3}dIHWkd8K3h6Zf=$YikOSFj!Xirh4j$9dv{`6Pu?QChIkdZ35PnbCv&>}
z-BR(6Mg1gA7UhrEE{TiIlB0dj2h#>I_TOYYeJ=-y>ktU`wUOD<H0o(S@c~KfG>@>=
z&E7YkowZNrjnA3B%2WFi>J_2AJR(A(BJ%QlZ7#qs__z;p4f4TjKyPKNENNv6#)~aV
zjTXCP|8<m~C!Cz@W!RFQ0!d3_-Ztv|42&`4MgG-ZzLHQBk!@B<qQ;FDzJVKuHzuti
zlY4hjIU~Br#Yj{`6dtggViIU}!y;vC@w?a>pMWcZ>`TT(KMK0&O(V0Ut7PP_;PIfF
z)7#twZ<v#vZvbn8PfS<Q%WjSvzpwO#iV?oy8kK!tE0VV`S_gy6Lrz>6&wkxrebp1$
z7fqv$8TQl^*sa!eMxK5DLSEnfC%1K^=GR2kAa7WY7zNhnZGP+6YP~Q12)Pnr29&eJ
zJy50xw0R#*KavP`tnJ-3{gP1Hpm+JF&7(f#N^>O!D%(P7AG>`6$LLCyS_v44J(Cy6
z!*O^b;PT>@2<q?50Ei-7>s?rn?>O?+60vk8sV(^w7H{%XVd)iea~=Ju9$&kKG?rJ~
zFB-gO9f(RQ(6yi1G~RQhbN>-({FA#4BDl=)dsj#H|7yIU)bUHvP|JjE?iXbhNl(Y$
zUSOVH&~wOmO*?GN0_3&>*hViRXGt06Ixp;}j>$t)!Vls&d>Gv1LuZ5p$6oz>CgOY<
zN=)%bF=gmF=OCXy@^pKe$0q$z{&h9HBVAk>Glf+CI?!#!tC)VtljQfdwm#u4n0!b8
za-n!9TvmA}3!206j79Qg(htp!*zQQ>lkhO{RA9yXs(iT#sJw-bp3=v~k1KzLBi~-g
zP<ikwle1Yl)BwS7adFNnqO%<{8O(MJ#UIL|a4<bHEhdpP^+Do`Wuu$VC2#mpvnQPf
zGhi_#)pz8U!*CBs!sj*3FMTM(_k>s<K^@7X?1jpfE7vjCdCuCbF~f63MXFR+eJ}N)
z05l%Hf)0PSLP0+w73&-edoR7<aRbs52X75PxiTa~j5J;(%u~h_z#rsTX4Sp>2g^_N
zv7jN?`l6xGhI11VN#wlQdUIxJX6~c$<wl@vJOxi?Zn**G1+^5cw4o3jh{+7QphAMC
zu@`z4xP_#adb-lZ*6eaR@=iq2l{GM>DZTh9-0pkpbkb1q*aXWFt&+W25c4`r)P{vz
zLYA_b0jn}{v3GAfRgTq4!tfI0Jsl@>nVDzEF0&-z$*%PsZuFJH*omqCD1&Pg$$OWk
zN{<{I6USxu=Z4v+Ve<QUmWRc{Gs35qm3wP)KSia_l#(;PH2A?>pnvrPhA{S7l^FE*
z%6M^N^fm&_P#is5u0y?8$a#G~uv$#5(gRXC!NNJ;c$!E%#ryV|*GXMy2u|z}w_uTA
znv4!XC|Cc5hvlhTS!N5DCYab<_#R3I?AeMgaf|GaVE4-`&5f==hBp&8Z#jtK#(|*y
zifcS1t${T2aCnLiB(%5Hxx{4`3d~Jv`GpV=xIUcc$K~Wa3j_E>+FoD(<R{y)LO#K^
z7Pz?akog#YLsJidj!v{p5aNlCgSsY4sYs3!m@IrP886gZ46&K_SY94q@?zC1r5dxp
zMj-f7B3<hbGDZKnVczulu~6~$HJt=#da%$<+f208#oHWm>iT|6(UmiLN=9cjNHG|E
zL`?5T9~WD-ZjPC^P&g06vr3NsFG@`_CgZk<F#>8Vaf0K`r9x47>iXq@zp?N!YHxsr
z-rfK=4+egrNu~Xa<|~Sf<B53ts+rvC;T=^!kiK=XK5e7^nJ8B5-M+y#!Fj@uS^sKV
zg6)6!`gl1faYuK)HOWKEZYLe9)Z|H?LP_IWuuZ{b;kpm+JqIJ?t?OM`T<YQ{Nj--+
zet<~W;g;C?&}5jz+N!8eJ%^uaG)YB$7pYYqa&m6|H%>bu-_{(HJedNhl}xq$6z8?8
zp%vR*l9e1yXO_99RF{#_zq23eyz9I5(++fGV*~}}L1H>?#YL5u;GSY(H3F5w)k)#W
zmh^GTl0ao`U&ln8Df4AvqLrTEczIr@V+*#gl1=`7R-Bz}qshJxbL-dA6~P0^i)0}8
zh3CVo@f1BYoq2GeLlK|xVzCc`7C#sK0Xv(|+Kq%Jp~OwrF5FH>Mz{kXa<uP6y?=0;
zPoV3ON!QMZmx@+SU-i|3$B@8l^>?Zm)<jWKyaF3hP)Sxj9>!{N6iPvDod+>S$>{RV
z0MK~-+l&EUL-QT#dhJ{XPJO3H*%J8D*O!IKACmD2z3{9hJ$5H^ZPvFuQ@Z17r=aam
z@?vPvj)`zpz>LBvCPNVW3^wwF2Yvx~O5(4FGT`_d(dkt21tmOBHJAT?bWBkI9~)bk
z%v`~lXz{W3en-Hy%!mYVOp_4#@W(U|8h2gdzD(#XsqmPefgz<VzZ1|g=R%iw*1)45
zgManLv(Sq?Bre!@{}Am*hAY-hmVeVg{P~tn>-=Bqm+5wF6iMJw`}b6vbia(T04Xg4
zWY~89Ox)9Kg6=zeHzW&@`7pOG6Tr#AW4iOp5(+Hcla8L?PI+QO^lZ0fZUyJK!GrM3
z;!iYzvKUn};Kb5fvTg;&^1fx4uS*5=H5Slrft_PulPotJ&1fWxAW}~?6$r^e5@N`W
z6RG$5b^^L*xq0c2Kb8cK8}Yj9t^VXJO#U*KSGwIN%XX##wLb<a`mGM`<iFs=E6Q5+
z1K0jWUOJ_F^%FQv6<RGni(39Nr_x18{Nm29h+3IMJ~v=pgdFh;kwR!@W(cA9=*S2I
z614C=mDd}g!7ht#tVN+G=TMMb7GtY=8utU7D?waXq^AG7>r7|S<%#yO8g-NIL@C!N
zH#G|Z?{<_u;j&4=qBMOmQA2&L54a$}bry`z<Zm%A%TaGy2nYAUYid;KwMamm9!nj^
z?OEFftlCC`ywvT(QkI_`CpLx;ZnzGV*0STS5bo*-E`@6wiDnoJHQbg4{G<Dn-)7#(
zfB6@Jb7d2W&9kWoffT$txh|@J=m@frdN#?muLL4PSiD7(H-cuv>(oW3#LCA;+cpK2
zmY&MGN*7YnAU_$I{SLzh+r}zqj7(Eviu5~;%QwY-uF1|%ct~i#8w`7=HKKZsy7Uf0
zzYb<#zt%*u*P6>)mu(b<c?(2j1ZGvA)35~`pR3G!M9<>IG=0eK<LaV&?8{5*x#P{|
z<d$y!pmpLt<CL0Vdx>2d85&TdlKHmu_vqO(W?|x248G%DGN}-bOsXFiKD*IzD1|A3
z+OtOmk#b1&0wU2^jA>T~^P@7$8V31CT`OJWC_iD~+D}@>)jOcq)M!Z)0$ccx!!8}I
z2c~p3kx3~w<q-YlZ@ZxaOA10n^Jw+Sp6o>4x<|yP&HLnf=eQV3qWwkR`#KzJLUI;z
zM#Mn7oDh{bdp!pyUCY9Hg^Ap8hv8p5_%U@#Gfjag!?i}a13sUxJ@_Y>!osIN1qPe$
z<gkwpf1{9tp!D=wt-Lv4`Xw};e#;f=C<l}+DxoE1Fo)`syF_1n-Km=>GrfY}h--P{
zm1lu+`cW&b%~g{qkFxtn^%eih=cRo54l!S?_lg^=3z(5fZK^uP9flJkJP=&91vd?<
z5EP3^A(vp6HmyGIg#60#F-1&&WS2ixBpoGrNG5r4$I5OZ4#_;urgrh?q797D`&d3+
zj<w_n$BZrm7wy5AZ8`!s2IF&`dH<Se=^I5N4&ST9+%;k0L5c68;>Gg0+j@&dK~6SU
z%KAs2!4MHv4#ecIRXL^VB`u7+sGDdHRo6>}gy<E_fj`RRxFAJ()xjkx`_`$0#D8<w
zt+oRXm$JX&i$Y&yt9ed;3m(Ag;ny<vh{4%R{><_qoP!&d^hmH|JH12%f_QTmHr<Dc
zaOi{0ZiiA5qIBJeB%t(kihIdOh#LmMZ0ZjYNx`$|e6nknqKy@%%0!<EPtTVmk6#f_
zdupTyvuaH0lmk(_rv%gOsXbe9a&qe`FXcp4(q8Gh99IP_+`yM+iBuB|O@bc};s>EC
ziqH;~oWtTGBU`T!Lh7P&Ij&qL?3Rur{)R#MJ$F|dp07<0z~31I`b}0>=nUeqY5o8e
ze*o4K!sxI0+_uHHx>MKMHo7r2pTH}{&!XaJKZAty&MQzm8BND0dv-C7AT2c%euDd%
zXlTb6C<3^ulb`i6mSYl}Lpe?jgbpN4AB-t(pJEWgzx{F}Y~sPbKVR<{i{11+Rbbmh
zY^-s2u?V=Lu=-+1OXm>8b)^~WxS3XbjvL$IhQ>U+SR7!3)gNfnQXHVhYr+{_(Nn;Y
z4G|yaFO1ecKF8H*)ninR?1UA}ySfRwv(}r;zqT_HiYNNlczFnK90kZO=T`W(e#3o#
z*!O$;(5~e+lS9HQKyU@!SX`n!INv5MwgZ2Y${wCsB19zm`;gyyla-<mIQo@K)AuVW
zjg~nt4Bk~p9ldDoQFWtw*}xFj?tMc2iTV)QJBrSRwF5eo`AUH`3YxaYFusvZ!r<r^
ziIE{y1sg2IZ??!Dhh!wvA`q`i)fC6X*&8DHb%}bBQI+E-mK9=XH}d=~(Sk5!Bd{)%
z;O_L889pk71Mx1BQuORV;;SG3KflJ~3zw<FKS7m-@WW~_`$ECbV#wZMoNCMAD0X1K
zI;kf<^PnYwm{L_Kjpf-Co8X_f4@>C_f9Ulav2-#Y&#5=SLnK~go1i$=cyL(5;n6v%
z)lOatO8O#!wI46YT<0MvR`a*@(TbhKoPZ-(?HSm+pgbnG&Bk!(yvlz{v48c}h~?MY
zj*k(*JEa%hG!eG`0j-Oefx*EhOiW_ZL@{HjUY144?20R9Z*4JuNnvAr{QU^#VBH$8
z;2dYUf9FCtlxAAq$<uS=ijR&i9a<(x;P>yfrVadjwDGVgz{-YKdJV!gk9eeR>(A`t
zj)Toz+@OVT)9;;DD`bS5VVhVk#io(*nRF?law^i4%|7F@ZiA6@BDmHsG=6dU1M6A<
zXQ%cae#`_0Kq*s%DeLYJB^Iae<@!8wny>2^&==?Wd#B1tsr6{Y4<<wf5_FdEKm1Je
zvqPhlxDT<G*o++_o#a&C%$i=);bQTL;;pf|$cxWL7e7&)NjzjE|DeNXWYYitg|Pj<
g`@0(<)R*C1W4Z}UDYx|h{T`wyrzTr3Z4vc<0n?2Nwg3PC

diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
deleted file mode 100644
index 1ce1cf91b4..0000000000
--- a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
+++ /dev/null
@@ -1,979 +0,0 @@
-#!/usr/bin/env python
-# -*- encoding: utf-8 -*-
-
-__author__ = ["Enrique Martin Garcia", "Alejandro Sanchez Carrion"]
-__copyright__ = "Copyright 2023, PandoraFMS"
-__maintainer__ = "Operations department"
-__status__ = "Production"
-__version__= '1.0'
-
-import sys,os
-lib_dir = os.path.join(os.path.dirname(sys.argv[0]), 'lib')
-sys.path.insert(0, lib_dir)
-
-import signal
-
-# Define a function to handle the SIGTERM signal
-def sigterm_handler(signum, frame):
-    print("Received SIGTERM signal. Cleaning up...")
-    sys.exit(0)
-signal.signal(signal.SIGTERM, sigterm_handler)
-
-import argparse
-import json
-import re
-import configparser
-from queue import Queue
-from threading import Thread
-
-import pymysql
-
-###############
-## VARIABLES ##
-###############
-
-# Global variables
-output = {}
-error_level = 0
-summary = {}
-info = ""
-monitoring_data = []
-db_targets = []
-target_agents = []
-custom_queries = []
-
-# Parameters default values
-threads = 1
-agents_group_id = 10
-interval = 300
-user = ""
-password = ""
-modules_prefix = ""
-execute_custom_queries = 1
-analyze_connections = 1
-scan_databases = 0
-agent_per_database = 0
-db_agent_prefix = ""
-innodb_stats = 1
-engine_uptime = 1
-query_stats = 1
-cache_stats = 1
-
-######################
-## GLOBAL FUNCTIONS ##
-######################
-
-####
-# Parse parameter input
-###########################################
-def param_int(param=""):
-    try:
-        return int(param)
-    except:
-        return 0
-
-####
-# Get module name with prefix
-###########################################
-def get_module_name(name=""):
-    global modules_prefix
-
-    return modules_prefix+name
-
-####
-# Set error level to value
-###########################################
-def set_error_level(value=0):
-    global error_level
-
-    error_level = value
-
-####
-# Set fixed value to summary key
-###########################################
-def set_summary_value(key="", value=""):
-    global summary
-
-    summary[key] = value
-
-####
-# Add value to summary key
-###########################################
-def add_summary_value(key="", value=""):
-    global summary
-
-    if key in summary:
-        summary[key] += value
-    else:
-        set_summary_value(key, value)
-
-####
-# Set fixed value to info
-###########################################
-def set_info_value(data=""):
-    global info
-
-    info = data
-
-####
-# Add data to info
-###########################################
-def add_info_value(data=""):
-    global info
-
-    info += data
-
-####
-# Add a new agent and modules to JSON
-###########################################
-def add_monitoring_data(data={}):
-    global monitoring_data
-
-    monitoring_data.append(data)
-
-####
-# Print JSON output and exit script
-###########################################
-def print_output():
-    global output
-    global error_level
-    global summary
-    global info
-    global monitoring_data
-
-    output={}
-    if summary:
-        output["summary"] = summary
-
-    if info:
-        output["info"] = info
-
-    if monitoring_data:
-        output["monitoring_data"] = monitoring_data
-    
-    json_string = json.dumps(output)
-
-    print(json_string)
-    sys.exit(error_level)
-
-def parse_parameter(config=None, default="", key=""):
-    try:
-        return config.get("CONF", key)
-    except Exception as e:
-        return default
-
-########################
-## SPECIFIC FUNCTIONS ##
-########################
-
-####
-# Format uptime to human readable
-###########################################
-def format_uptime(seconds):
-    # Calculate the days, hours, minutes, and seconds
-    minutes, seconds = divmod(seconds, 60)
-    hours, minutes = divmod(minutes, 60)
-    days, hours = divmod(hours, 24)
-
-    # Create the formatted string
-    uptime_string = ""
-    if days > 0:
-        uptime_string += f"{days} days "
-    if hours > 0:
-        uptime_string += f"{hours} hours "
-    if minutes > 0:
-        uptime_string += f"{minutes} minutes "
-    uptime_string += f"{seconds} seconds"
-
-    return uptime_string
-
-####
-# Scan engine databases
-###########################################
-def get_databases_modules(db_object=None):
-    global interval
-    global agents_group_id
-    global modules_prefix
-    global agent_per_database
-    global db_agent_prefix
-
-    # Initialize modules
-    modules = []
-
-    if db_object:
-        # Get all databases
-        databases = db_object.run_query(f"SHOW DATABASES")[0]
-        
-        for db in databases:
-            # Get database name
-            db_name = db["Database"]
-
-            # Skip core databases.
-            if db_name == "mysql":
-                continue
-            if db_name == "information_schema":
-                continue
-            if db_name == "performance_schema":
-                continue
-            if db_name == "sys":
-                continue
-
-            # Add modules
-            modules.append({
-                "name": get_module_name(db_name+" availability"),
-                "type": "generic_proc",
-                "data": 1,
-                "description": "Database available"
-            })
-
-            modules.append({
-                "name": get_module_name(db_name+" fragmentation ratio"),
-                "type": "generic_data",
-                "data": db_object.run_query(f"SELECT AVG(DATA_FREE/(DATA_LENGTH + INDEX_LENGTH)) AS average_fragmentation_ratio FROM information_schema.tables WHERE table_schema = '{db_name}' GROUP BY table_schema", single_value=True)[0],
-                "unit": "%",
-                "description": "Database fragmentation"
-            })
-
-            modules.append({
-                "name": get_module_name(db_name+" size"),
-                "type": "generic_data",
-                "data": db_object.run_query(f"SELECT ROUND(SUM(data_length + index_length) / 1024 / 1024, 2) AS size FROM information_schema.tables WHERE table_schema = '{db_name}' GROUP BY table_schema", single_value=True)[0],
-                "unit": "MB",
-                "description": "Database size"
-            })
-
-            modules += db_object.get_custom_queries(db_name)
-
-            # Add a new agent if agent per database and reset modules
-            if agent_per_database == 1:
-                add_monitoring_data({
-                    "agent_data"  : {
-                        "agent_name"        : db_agent_prefix+db_object.agent+" "+db_name,
-                        "agent_alias"       : db_agent_prefix+db_object.agent+" "+db_name,
-                        "os"                : db_object.type,
-                        "os_version"        : db_object.version,
-                        "interval"          : interval,
-                        "id_group"          : agents_group_id,
-                        "address"           : db_object.host,
-                        "description"       : "",
-                        "parent_agent_name" : db_object.agent,
-                    },
-                    "module_data" : modules
-                })
-                add_summary_value("Total agents", 1)
-                add_summary_value("Databases agents", 1)
-                modules = []
-
-    return modules
-
-#############
-## CLASSES ##
-#############
-
-####
-# Remote database object
-###########################################
-class RemoteDB:
-    def __init__(self, target="", agent=""):
-        self.type = "MySQL"
-        self.target = target
-        self.agent = self.get_agent(agent)
-        self.parse_target()
-        self.connected = 0
-        self.connector = None
-
-        self.connect()
-
-        self.version = self.get_version()
-
-    def connect(self):
-        global user
-        global password
-
-        # Try to connect and capture errors
-        error = ""
-        try:
-            connection = pymysql.connect(
-                host=self.host,
-                port=self.port,
-                user=user,
-                password=password,
-                connect_timeout=5
-            )
-
-            # Execute a test query
-            with connection.cursor() as cursor:
-                cursor.execute("SELECT 1")
-                result = cursor.fetchone()
-                if result:
-                    self.connector = connection
-                    self.connected = 1
-                else:
-                    error = "Connection failed"
-
-        except pymysql.Error as e:
-            error = str(e)
-
-        # Add error to info if cna't connect
-        if self.connector is None:
-            add_info_value("["+self.target+"]"+error+"\n")
-            add_summary_value("Targets down", 1)
-        else:
-            add_summary_value("Targets up", 1)
-
-    def disconnect(self):
-        if self.connected == 1:
-            self.connector.close()
-
-    def run_query(self, query="", single_row=False, single_value=False, db=""):
-        if self.connected == 1 and query:
-            try:
-                with self.connector.cursor() as cursor:
-                    if db:
-                        cursor.execute(f"USE {db}")
-
-                    # Execute your query
-                    cursor.execute(query)
-
-                    # Get query fields
-                    fields = [field[0] for field in cursor.description]
-                    
-                    if single_row or single_value:
-                        # Fetch first row
-                        row = cursor.fetchone()
-
-                        if single_value:
-                            if row:
-                                # Get first field value
-                                result = str(row[0])
-                            else:
-                                result = ""
-
-                        else:
-                            # Read row
-                            row_item = {}
-                            if row:
-                                i = 0
-                                # Assign each value for each field in row item
-                                for field in fields:
-                                    row_item[field] = str(row[i])
-                                    i += 1
-
-                            result =  row_item
-
-                    else:
-                        # Fetch all rows
-                        row_items = []
-                        rows = cursor.fetchall()
-                        
-                        # Read each row
-                        for row in rows:
-                            row_item = {}
-                            i = 0
-                            # Assign each value for each field in row item
-                            for field in fields:
-                                row_item[field] = str(row[i])
-                                i += 1
-                            
-                            # Add row item to row items
-                            row_items.append(row_item)
-
-                        result = row_items
-
-                    # Close cursor and return result
-                    cursor.close()
-                    return result, True, ""
-
-            except pymysql.Error as e:
-                add_info_value("["+self.target+"]"+str(e)+"\n")
-                return None, False, str(e)
-        else:
-            return None, False, "Not connected to database"
-
-    def get_agent(self, agent=""):
-        if agent:
-            return agent
-        else:
-            return self.target.split(":")[0]
-
-    def get_version(self):
-        version = self.run_query(f"SELECT @@VERSION", single_value=True)[0]
-        if version is None:
-            version = "Discovery"
-        return version
-
-    def parse_target(self):
-        # Default values
-        self.port = 3306
-
-        if ":" in self.target:
-            target = self.target.split(":")
-            self.host = target[0]
-            self.port = int(target[1])
-
-        else:
-            self.host = self.target
-
-    def get_statistics(self):
-        global interval
-        global modules_prefix
-        global engine_uptime
-        global query_stats
-        global analyze_connections
-        global innodb_stats
-        global cache_stats
-
-        # Initialize modules
-        modules = []
-
-        # Get status values
-        status = {}
-        for var in self.run_query(f"SHOW GLOBAL STATUS")[0]:
-            status[var["Variable_name"]] = var["Value"]
-
-        # Get svariables values
-        variables = {}
-        for var in self.run_query(f"SHOW VARIABLES")[0]:
-            variables[var["Variable_name"]] = var["Value"]
-
-        # Get modules
-        if engine_uptime == 1:
-            modules.append({
-                "name": get_module_name("restart detection"),
-                "type": "generic_proc",
-                "data": 1 if int(status["Uptime"]) < 2 * interval else 0,
-                "description": f"Running for {format_uptime(int(status['Uptime']))} (value is 0 if restart detected)"
-            })
-
-        if query_stats == 1:
-            modules.append({
-                "name": get_module_name("queries"),
-                "type": "generic_data_inc_abs",
-                "data": status["Queries"],
-                "description": ""
-            })
-
-            modules.append({
-                "name": get_module_name("query rate"),
-                "type": "generic_data_inc",
-                "data": status["Queries"],
-            })
-
-            modules.append({
-                "name": get_module_name("query select"),
-                "type": "generic_data_inc_abs",
-                "data": status["Com_select"],
-            })
-
-            modules.append({
-                "name": get_module_name("query update"),
-                "type": "generic_data_inc_abs",
-                "data": status["Com_update"]
-            })
-
-            modules.append({
-                "name": get_module_name("query delete"),
-                "type": "generic_data_inc_abs",
-                "data": status["Com_delete"]
-            })
-
-            modules.append({
-                "name": get_module_name("query insert"),
-                "type": "generic_data_inc_abs",
-                "data": status["Com_insert"]
-            })
-
-        if analyze_connections == 1:
-            modules.append({
-                "name": get_module_name("current connections"),
-                "type": "generic_data",
-                "data": status["Threads_connected"],
-                "description": "Current connections to MySQL engine (global)",
-                "min_warning": int(variables["max_connections"]) * 0.90,
-                "min_critical": int(variables["max_connections"]) * 0.98
-            })
-
-            modules.append({
-                "name": get_module_name("connections ratio"),
-                "type": "generic_data",
-                "data": (int(status["Max_used_connections"]) / int(variables["max_connections"])) * 100,
-                "description": "This metric indicates if you could run out soon of connection slots.",
-                "unit": "%",
-                "min_warning": 85,
-                "min_critical": 90
-            })
-
-            modules.append({
-                "name": get_module_name("aborted connections"),
-                "type": "generic_data_inc_abs",
-                "data": status["Aborted_connects"],
-                "description": "This metric indicates if the ammount of aborted connections in the last interval."
-            })
-
-        if innodb_stats == 1:
-            modules.append({
-                "name": get_module_name("Innodb buffer pool pages total"),
-                "type": "generic_data",
-                "data": status["Innodb_data_written"],
-                "description": "Total number of pages in the buffer pool (utilization)."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb buffer pool read requests"),
-                "type": "generic_data_inc_abs",
-                "data": status["Innodb_buffer_pool_read_requests"],
-                "description": "Reads from innodb buffer pool."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb buffer pool write requests"),
-                "type": "generic_data_inc_abs",
-                "data": status["Innodb_buffer_pool_write_requests"],
-                "description": "Writes in innodb buffer pool."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb disk reads"),
-                "type": "generic_data_inc_abs",
-                "data": status["Innodb_data_reads"],
-                "description": "Amount of read operations."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb disk writes"),
-                "type": "generic_data_inc_abs",
-                "data": status["Innodb_data_writes"],
-                "description": "Amount of write operations."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb disk data read"),
-                "type": "generic_data_inc_abs",
-                "data": int(status["Innodb_data_read"])/(1024*1024),
-                "description": "Amount of data read from disk.",
-                "unit": "MB"
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb disk data written"),
-                "type": "generic_data_inc_abs",
-                "data": int(status["Innodb_data_written"])/(1024*1024),
-                "description": "Amount of data written to disk.",
-                "unit": "MB"
-            })
-
-        if cache_stats == 1:
-            modules.append({
-                "name": get_module_name("query cache enabled"),
-                "type": "generic_proc",
-                "data": 1 if variables["have_query_cache"] == "YES" else 0,
-                "description": "Query cache enabled." if variables["have_query_cache"] == "YES" else "Query cache not found, check query_cache_type in your my.cnf"
-            })
-
-            if variables["have_query_cache"] == "YES":
-                if int(status["Qcache_hits"]) + int(status["Qcache_inserts"]) + int(status["Qcache_not_cached"]) != 0:
-                    ratio = 100 * int(status["Qcache_hits"]) / int(status["Qcache_inserts"]) + int(status["Qcache_inserts"]) + int(status["Qcache_not_cached"])
-                    
-                    modules.append({
-                        "name": get_module_name("query hit ratio"),
-                        "type": "generic_data",
-                        "data": ratio,
-                        "unit": "%"
-                    })
-
-        return modules
-
-    def get_custom_queries(self, db=""):
-        global modules_prefix
-        global execute_custom_queries
-        global custom_queries
-
-        # Initialize modules
-        modules = []
-
-        # Run if enabled execute custom queries
-        if execute_custom_queries == 1:
-
-            # Run each custom query
-            for custom_query in custom_queries:
-
-                # Run if target database match
-                if "all" in custom_query["target_databases"] or len(custom_query["target_databases"]) == 0 or db in custom_query["target_databases"]:
-                    
-                    # Skipt if empty required parameters
-                    if "target" not in custom_query or not custom_query["target"]:
-                        continue
-                    if "name" not in custom_query or not custom_query["name"]:
-                        continue
-
-                    # Reset error
-                    error = ""
-                    # Reset result
-                    data = ""
-
-                    # Prepare parameters
-                    sql = custom_query["target"]
-                    sql = re.sub(r'\$__self_dbname', db, sql)
-                    
-                    module_name = custom_query["name"]
-                    module_name = re.sub(r'\$__self_dbname', db, module_name)
-                    
-                    desc = custom_query["description"] if "description" in custom_query else ""
-                    datatype = custom_query["datatype"] if "datatype" in custom_query else "generic_data_string"
-
-                    # Set single query
-                    if "operation" not in custom_query or not custom_query["operation"]:
-                        single_value=False
-                    elif custom_query["operation"] == "value":
-                        single_value=True
-                    else:
-                        single_value=False
-
-                    # Adjust module type if needed
-                    if(single_value == False):
-                        datatype = "generic_data_string"
-
-                    # Run query
-                    rows, status, err = self.run_query(sql, single_value=single_value, db=db)
-
-                    # Get query data
-                    if rows is not None:
-                        if isinstance(rows, list):
-                            for row in rows:
-                                for key, value in row.items():
-                                    data += str(value) + "|"
-                                # Remove last pipe
-                                data = data[:-1]
-                                data += "\n"
-                        else:
-                            data = rows
-
-                    # Adjust data
-                    if data == "" and "string" in datatype:
-                        data = "No output."
-
-                    # Verify query status and set description
-                    if status == False:
-                        desc = "Failed to execute query: " + err;
-                    elif desc == "":
-                        desc = "Execution OK"
-
-                    modules.append({
-                        "name": get_module_name(module_name),
-                        "type": datatype,
-                        "data": data,
-                        "description": desc,
-                        "min_critical": custom_query["min_critical"] if "min_critical" in custom_query else "",
-                        "max_critical": custom_query["max_critical"] if "max_critical" in custom_query else "",
-                        "min_warning": custom_query["min_warning"] if "min_warning" in custom_query else "",
-                        "max_warning": custom_query["max_warning"] if "max_warning" in custom_query else "",
-                        "critical_inverse": custom_query["critical_inverse"] if "critical_inverse" in custom_query else "",
-                        "warning_inverse": custom_query["warning_inverse"] if "warning_inverse" in custom_query else "",
-                        "str_warning": custom_query["str_warning"] if "str_warning" in custom_query else "",
-                        "str_critical": custom_query["str_critical"] if "str_critical" in custom_query else "",
-                        "module_interval":custom_query["module_interval"] if "module_interval" in custom_query else ""
-                    })
-
-        return modules
-
-    def get_modules(self):
-        # Initialize modules
-        modules = []
-        
-        # Get statistics modules
-        modules += self.get_statistics()
-        # Get custom queries modules
-        modules += self.get_custom_queries()
-
-        return modules
-
-#############
-## THREADS ##
-#############
-
-####
-# Function per agent
-###########################################
-def monitor_items(thread_agents=[]):
-    global target_agents
-    global interval
-    global agents_group_id
-
-    for thread_agent in thread_agents:
-        # Get target agent
-        agent = ""
-        if 0 <= thread_agent["id"] < len(target_agents):
-            agent = target_agents[thread_agent["id"]]
-    
-        # Initialize modules
-        modules=[]
-    
-        # Get DB object
-        db_object = RemoteDB(thread_agent["db_target"], agent)
-    
-        # Add connection module
-        modules.append({
-            "name"        : get_module_name(db_object.type+" connection"),
-            "type"        : "generic_proc",
-            "description" : db_object.type+" availability",
-            "data"        : db_object.connected
-        })
-    
-        # Get global connection modules if connected
-        if(db_object.connected == 1):
-            modules += db_object.get_modules()
-    
-            # Get engine databases modules
-            if scan_databases == 1:
-                modules += get_databases_modules(db_object)
-    
-        # Add new monitoring data
-        add_monitoring_data({
-            "agent_data"  : {
-                "agent_name"  : db_object.agent,
-                "agent_alias" : db_object.agent,
-                "os"          : db_object.type,
-                "os_version"  : db_object.version,
-                "interval"    : interval,
-                "id_group"    : agents_group_id,
-                "address"     : db_object.host,
-                "description" : "",
-            },
-            "module_data" : modules
-        })
-        add_summary_value("Total agents", 1)
-        add_summary_value("Target agents", 1)
-    
-        # Disconnect from target
-        db_object.disconnect()
-
-
-####
-# Function per thread
-###########################################
-def monitor_threads():
-    global q
-
-    thread_agents=q.get()
-    try:
-        monitor_items(thread_agents)
-        q.task_done()
-    except Exception as e:
-        q.task_done()
-        set_error_level(1)
-        add_info_value("Error while runing single thread: "+str(e)+"\n")
-
-
-##########
-## MAIN ##
-##########
-
-# Parse arguments
-parser = argparse.ArgumentParser(description= "", formatter_class=argparse.RawTextHelpFormatter)
-parser.add_argument('--conf', help='Path to configuration file', metavar='<conf_file>', required=True)
-parser.add_argument('--target_databases', help='Path to target databases file', metavar='<databases_file>', required=True)
-parser.add_argument('--target_agents', help='Path to target agents file', metavar='<agents_file>', required=False)
-parser.add_argument('--custom_queries', help='Path to custom queries file', metavar='<custom_queries_file>', required=False)
-args = parser.parse_args()
-
-# Parse configuration file
-config = configparser.ConfigParser()
-try:
-    config.read_string('[CONF]\n' + open(args.conf).read())
-except Exception as e:
-    set_error_level(1)
-    set_info_value("Error while reading configuration file file: "+str(e)+"\n")
-    print_output()
-
-agents_group_id        = param_int(parse_parameter(config, agents_group_id, "agents_group_id"))
-interval               = param_int(parse_parameter(config, interval, "interval"))
-user                   = parse_parameter(config, user, "user")
-password               = parse_parameter(config, password, "password")
-threads                = param_int(parse_parameter(config, threads, "threads"))
-modules_prefix         = parse_parameter(config, modules_prefix, "modules_prefix")
-execute_custom_queries = param_int(parse_parameter(config, execute_custom_queries, "execute_custom_queries"))
-analyze_connections    = param_int(parse_parameter(config, analyze_connections, "analyze_connections"))
-scan_databases         = param_int(parse_parameter(config, scan_databases, "scan_databases"))
-agent_per_database     = param_int(parse_parameter(config, agent_per_database, "agent_per_database"))
-db_agent_prefix        = parse_parameter(config, db_agent_prefix, "db_agent_prefix")
-innodb_stats           = param_int(parse_parameter(config, innodb_stats, "innodb_stats"))
-engine_uptime          = param_int(parse_parameter(config, engine_uptime, "engine_uptime"))
-query_stats            = param_int(parse_parameter(config, query_stats, "query_stats"))
-cache_stats            = param_int(parse_parameter(config, cache_stats, "cache_stats"))
-
-# Parse rest of files
-t_file = args.target_databases
-a_file = args.target_agents
-cq_file = args.custom_queries
-
-# Parse DB targets
-if t_file:
-    try:
-        lines = open(t_file, "r")
-        for line in lines:
-            line = line.strip()
-            # SKIP EMPTY AND COMMENTED LINES
-            if not line:
-                continue
-            if line == "\n":
-                continue
-            if line[0] == '#':
-                continue
-
-            db_targets += [element.strip() for element in line.split(",")]
-        lines = []
-
-    except Exception as e:
-        set_error_level(1)
-        add_info_value("Error while reading DB targets file: "+str(e)+"\n")
-
-# Parse target agents
-if a_file:
-    try:
-        lines = open(a_file, "r")
-        for line in lines:
-            line = line.strip()
-            # SKIP EMPTY AND COMMENTED LINES
-            if not line:
-                continue
-            if line == "\n":
-                continue
-            if line[0] == '#':
-                continue
-
-            target_agents += [element.strip() for element in line.split(",")]
-        lines = []
-
-    except Exception as e:
-        set_error_level(1)
-        add_info_value("Error while reading target agents file: "+str(e)+"\n")
-
-# Parse custom queries
-if cq_file:
-    try:
-        custom_query = {}
-        save = False
-
-        lines = open(cq_file, "r")
-        for line in lines:
-            line = line.strip()
-            # SKIP EMPTY AND COMMENTED LINES
-            if not line:
-                continue
-            if line == "\n":
-                continue
-            if line[0] == '#':
-                continue
-
-            # Start parsing module
-            if line == "check_begin":
-                save = True
-                continue
-
-            # Read next line until new module
-            if save == False:
-                continue
-
-            # End parsing module
-            if line == "check_end":
-                if "target_databases" not in custom_query:
-                    custom_query["target_databases"] = ["all"]
-                custom_queries.append(custom_query)
-                custom_query = {}
-                save = False
-                continue
-
-            # Get line key value pair
-            key, value = [element.strip() for element in line.split(maxsplit=1)]
-
-            # Add target databases to query
-            if key == "target_databases":
-                custom_query["target_databases"] = [element.strip() for element in value.split(",")]
-                continue
-
-            # Skip not select queries
-            if key == "target" and not re.search(r'^select', value, re.IGNORECASE):
-                add_info_value("Removed ["+value+"] from custom queries, only select queries are allowed.\n")
-                continue
-
-            # Add other parameters to query
-            custom_query[key] = value
-        lines = []
-
-    except Exception as e:
-        set_error_level(1)
-        add_info_value("Error while reading custom queries file: "+str(e)+"\n")
-
-# Verify required arguments
-required_params = True
-if not user:
-    add_info_value("Parameter [user] not defined\n")
-    required_params = False
-if not password:
-    add_info_value("Parameter [password] not defined\n")
-    required_params = False
-if not db_targets:
-    add_info_value("Database targets not defined\n")
-    required_params = False
-
-if required_params == False:
-    set_error_level(1)
-    print_output()
-
-# Initialize summary
-set_summary_value("Total agents", 0)
-set_summary_value("Target agents", 0)
-set_summary_value("Databases agents", 0)
-set_summary_value("Targets up", 0)
-set_summary_value("Targets down", 0)
-
-# Assign threads
-if threads > len(db_targets):
-    threads = len(db_targets)
-
-if threads < 1:
-    threads = 1
-
-# Distribute agents per thread
-agents_per_thread = []
-thread = 0
-i = 0
-for db_target in db_targets:
-    if not 0 <= thread < len(agents_per_thread):
-        agents_per_thread.append([])
-    
-    agents_per_thread[thread].append({
-            "id": i,
-            "db_target": db_target
-        })
-
-    thread += 1
-    if thread >= threads:
-        thread=0
-
-    i += 1
-
-# Run threads
-try:
-    q=Queue()
-    for n_thread in range(threads) :
-        q.put(agents_per_thread[n_thread])
-
-    run_threads = []
-    for n_thread in range(threads):
-        t = Thread(target=monitor_threads)
-        t.daemon=True
-        t.start()
-        run_threads.append(t)
-
-    for t in run_threads:
-        t.join()
-
-    q.join()
-
-except Exception as e:
-    add_info_value("Error while running threads: "+str(e)+"\n")
-    set_error_level(1)
-
-# Print output and exit script
-print_output()
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req
deleted file mode 100644
index 057adf64fc..0000000000
--- a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req
+++ /dev/null
@@ -1,2 +0,0 @@
-[deps]
-pymysql
\ No newline at end of file

From 7a890d5820f48d4cef8a91485ad32c021539a84f Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Sat, 30 Sep 2023 01:00:22 +0200
Subject: [PATCH 074/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index 476638a9a5..c99594d5c0 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-230929
+Version: 7.0NG.773.3-230930
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index f5c9d960bb..2049cf1f38 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230929"
+pandora_version="7.0NG.773.3-230930"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 3a22258ee0..5b9d912ece 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '230929';
+use constant AGENT_BUILD => '230930';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index a07bf70cfb..89525a05dc 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230929
+%define release     230930
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index d964b57451..66047586b5 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230929
+%define release     230930
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index dcf73ffc22..fbbb7dcdda 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230929
+%define release     230930
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 923a2eb1f7..1ab705875c 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230929"
+PI_BUILD="230930"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 9b735ea8b3..60cfc92cce 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{230929}
+{230930}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index 7ce821fb81..4fdbca4baa 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 230929")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 230930")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 10f53c4bfc..dd5888926d 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 230929))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 230930))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index b6c1b8ecc7..c70b0a792f 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-230929
+Version: 7.0NG.773.3-230930
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 580913f13f..20a4dbb8b7 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230929"
+pandora_version="7.0NG.773.3-230930"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index d6e17232d0..4f6b364f62 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC230929';
+$build_version = 'PC230930';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index ae0f024382..fc9db5e08b 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '230929';
+            $build = '230930';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 3b3d9650e9..28ab52e144 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230929
+%define release     230930
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 0efd967993..4a1e0d58c6 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230929
+%define release     230930
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index 41948dfb7e..1e1e1a43b9 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230929
+%define release     230930
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index b3283d4ef1..9c83c833c2 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-230929
+Version: 7.0NG.773.3-230930
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index a4f30e0505..c861781a5e 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230929"
+pandora_version="7.0NG.773.3-230930"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 8e6417807f..05bf053556 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230929";
+my $pandora_build = "230930";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index abca861f48..32fcb7ea90 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230929";
+my $pandora_build = "230930";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index e03ae323c3..14c3927386 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230929
+%define release     230930
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index ca11a57e05..d7a95c5885 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230929
+%define release     230930
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index 75458bbb4c..8216c43048 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230929"
+PI_BUILD="230930"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index b6a4ab3092..f4273a763a 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230929";
+my $version = "7.0NG.773.3 Build 230930";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index c32ebc9bb3..bd0ee7dff9 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230929";
+my $version = "7.0NG.773.3 Build 230930";
 
 # save program name for logging
 my $progname = basename($0);

From f6fdd587e708c1cc20af110a4be02e89ed2e5d00 Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Sun, 1 Oct 2023 01:00:18 +0200
Subject: [PATCH 075/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index c99594d5c0..78341c0cf7 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-230930
+Version: 7.0NG.773.3-231001
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 2049cf1f38..4462b500e6 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230930"
+pandora_version="7.0NG.773.3-231001"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 5b9d912ece..919bbbc64f 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '230930';
+use constant AGENT_BUILD => '231001';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 89525a05dc..9224e2f735 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230930
+%define release     231001
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index 66047586b5..192d82029a 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230930
+%define release     231001
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index fbbb7dcdda..b8e413d8c8 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     230930
+%define release     231001
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 1ab705875c..3fccf9e67f 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230930"
+PI_BUILD="231001"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 60cfc92cce..2d1da0ee11 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{230930}
+{231001}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index 4fdbca4baa..1e008275e3 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 230930")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231001")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index dd5888926d..b6af2e0156 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 230930))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231001))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index c70b0a792f..6e792feb8a 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-230930
+Version: 7.0NG.773.3-231001
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 20a4dbb8b7..2f37ab90fb 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230930"
+pandora_version="7.0NG.773.3-231001"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 4f6b364f62..e628410bf8 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC230930';
+$build_version = 'PC231001';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index fc9db5e08b..86c456b06e 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '230930';
+            $build = '231001';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 28ab52e144..030f974150 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230930
+%define release     231001
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 4a1e0d58c6..4f0d50e216 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230930
+%define release     231001
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index 1e1e1a43b9..69e9364770 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     230930
+%define release     231001
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 9c83c833c2..8a634087e6 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-230930
+Version: 7.0NG.773.3-231001
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index c861781a5e..9a4fc5d293 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-230930"
+pandora_version="7.0NG.773.3-231001"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 05bf053556..1edbb01c6d 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230930";
+my $pandora_build = "231001";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 32fcb7ea90..01b3759a95 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "230930";
+my $pandora_build = "231001";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index 14c3927386..4462c36640 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230930
+%define release     231001
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index d7a95c5885..c71f84f3fb 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     230930
+%define release     231001
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index 8216c43048..e44dc12547 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="230930"
+PI_BUILD="231001"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index f4273a763a..db36735489 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230930";
+my $version = "7.0NG.773.3 Build 231001";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index bd0ee7dff9..43f930974c 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 230930";
+my $version = "7.0NG.773.3 Build 231001";
 
 # save program name for logging
 my $progname = basename($0);

From 323572a4c7f68ba6d903b027a2c5701deabeef50 Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Mon, 2 Oct 2023 01:00:18 +0200
Subject: [PATCH 076/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index 78341c0cf7..47b4424bcf 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231001
+Version: 7.0NG.773.3-231002
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 4462b500e6..43113c2cbc 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231001"
+pandora_version="7.0NG.773.3-231002"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 919bbbc64f..ee38d65811 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231001';
+use constant AGENT_BUILD => '231002';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 9224e2f735..61d81e4f20 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231001
+%define release     231002
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index 192d82029a..e2a248ac0d 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231001
+%define release     231002
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index b8e413d8c8..8ea67efe7a 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231001
+%define release     231002
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 3fccf9e67f..770f884057 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231001"
+PI_BUILD="231002"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 2d1da0ee11..713324e963 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231001}
+{231002}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index 1e008275e3..0c9fd22936 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231001")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231002")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index b6af2e0156..139d9f9d03 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231001))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231002))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index 6e792feb8a..a5c5741bb8 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231001
+Version: 7.0NG.773.3-231002
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 2f37ab90fb..41da81dd2b 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231001"
+pandora_version="7.0NG.773.3-231002"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index e628410bf8..937064bd86 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231001';
+$build_version = 'PC231002';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index 86c456b06e..4539d67968 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231001';
+            $build = '231002';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 030f974150..8d98092032 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231001
+%define release     231002
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 4f0d50e216..c597822705 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231001
+%define release     231002
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index 69e9364770..3be2933997 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231001
+%define release     231002
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 8a634087e6..2e40bc2930 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231001
+Version: 7.0NG.773.3-231002
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index 9a4fc5d293..7b528817d8 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231001"
+pandora_version="7.0NG.773.3-231002"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 1edbb01c6d..8feacb839e 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231001";
+my $pandora_build = "231002";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 01b3759a95..8a4c26f904 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231001";
+my $pandora_build = "231002";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index 4462c36640..e622f2e047 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231001
+%define release     231002
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index c71f84f3fb..7a2bed9cdd 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231001
+%define release     231002
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index e44dc12547..573f34cd74 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231001"
+PI_BUILD="231002"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index db36735489..048c365ca1 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231001";
+my $version = "7.0NG.773.3 Build 231002";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index 43f930974c..656da24b65 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231001";
+my $version = "7.0NG.773.3 Build 231002";
 
 # save program name for logging
 my $progname = basename($0);

From 12fbd1e522eb3bff8594633c788a10ccf3fa65af Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Mon, 2 Oct 2023 13:57:11 +0200
Subject: [PATCH 077/116] some functional changes in gotty

---
 pandora_console/extensions/quick_shell.php    | 187 +++++++++++++++---
 .../include/class/DiscoveryConsoleTask.php    |  47 +++--
 .../include/functions_cron_task.php           |  57 ++----
 3 files changed, 207 insertions(+), 84 deletions(-)

diff --git a/pandora_console/extensions/quick_shell.php b/pandora_console/extensions/quick_shell.php
index cd863f6b10..d07342945a 100644
--- a/pandora_console/extensions/quick_shell.php
+++ b/pandora_console/extensions/quick_shell.php
@@ -31,6 +31,7 @@ global $config;
 
 require_once $config['homedir'].'/include/functions_agents.php';
 require_once $config['homedir'].'/godmode/wizards/Wizard.main.php';
+require_once $config['homedir'].'/include/functions_cron_task.php';
 
 
 /**
@@ -78,9 +79,28 @@ function quickShell()
         return;
     }
 
+    $method = get_parameter('method', null);
+
+    $setup_anchor = html_print_anchor(
+        [
+            'href'    => 'index.php?sec=gsetup&sec2=godmode/setup/setup&section=quickshell',
+            'content' => __('GoTTY setup'),
+        ],
+        true
+    );
+
+    if ($method === 'ssh' && (bool) $config['gotty_ssh_enabled'] === false) {
+        ui_print_error_message(__('Please, enable SSH in %s', $setup_anchor));
+        return;
+    }
+
+    if ($method === 'telnet' && (bool) $config['gotty_telnet_enabled'] === false) {
+        ui_print_error_message(__('Please, enable Telnet in %s', $setup_anchor));
+        return;
+    }
+
     $agent_id = get_parameter('id_agente', 0);
     $username = get_parameter('username', null);
-    $method = get_parameter('method', null);
     $method_port = get_parameter('port', null);
 
     // Retrieve main IP Address.
@@ -89,10 +109,10 @@ function quickShell()
     ui_require_css_file('wizard');
     ui_require_css_file('discovery');
 
-    // Initialize Gotty Client.
+    // Build URL args.
     if ($method === 'ssh') {
         // SSH.
-        $args = '?arg='.$username.'@'.$agent_address;
+        $args .= '?arg='.$username.'@'.$agent_address;
         //$args = '?arg='.$username.'@172.16.0.1';
         $args .= '&arg=-p%20'.$method_port;
     } else if ($method == 'telnet') {
@@ -103,20 +123,15 @@ function quickShell()
         $args .= '&arg='.$method_port.'&arg=-E';
     }
 
-    $method_addr = ($method === 'ssh') ? $config['gotty_ssh_addr'] : $config['gotty_telnet_addr'];
-    $address = (empty($method_addr) === true) ? $_SERVER['SERVER_ADDR'] : $method_addr;
-    $use_ssl = ($method === 'ssh') ? $config['gotty_ssh_use_ssl'] : $config['gotty_telnet_use_ssl'];
-    $protocol = ((bool) $use_ssl === true) ? 'https://' : 'http://';
-    $port = ($method === 'ssh') ? $config['gotty_ssh_port'] : $config['gotty_telnet_port'];
-    $connection_hash = ($method === 'ssh') ? $config['gotty_ssh_connection_hash'] : $config['gotty_telnet_connection_hash'];
-    $gotty_addr = $protocol.$address.':'.$port.'/'.$connection_hash.'/'.$args;
+    $connectionURL = buildConnectionURL($method);
+    //$basic_auth_hdr = $config['gotty_ssh_user'].':'.$config['gotty_ssh_pass'].'@';
+    $gotty_addr = $connectionURL.$args;
 
     // Username. Retrieve from form.
     if (empty($username) === true) {
         // No username provided, ask for it.
         $wiz = new Wizard();
 
-
         $wiz->printForm(
             [
                 'form'   => [
@@ -192,13 +207,70 @@ function quickShell()
       }
     </style>
 
-    <div id="terminal"><iframe id="gotty-iframe" src="<?php echo $gotty_addr; ?>"></iframe></div>
 
+    <div id="terminal"><iframe id="gotty-iframe" src="<?php echo $gotty_addr; ?>"></iframe></div>
+    
+    <?php
+        /*
+        <script>
+        // Capture error sent from iframe.
+        window.addEventListener("message", function(event) {
+            var received_data = event.data;
+
+            if (received_data.error_code) {
+                // Send error code to the server.
+                var new_url = window.location.href + "?error_code=" + received_data.error_code;
+                window.location.href = new_url;
+            }
+        });
+
+        var iframe = document.getElementById('gotty-iframe');
+        console.log(iframe );
+
+        iframe.addEventListener("error", function (event) {
+            console.log("erorrrrrrr");
+        // If an error occurs while loading the iframe content.
+        if (event.target.contentWindow) {
+            var status = event.target.contentWindow.document;
+            if (status && status.location) {
+                var status_code = status.location.href.match(/(\d{3})\.html/)[1];
+                if (status_code >= "400" && status_code < "600") {
+                    // Post the error data to the parent window.
+                    window.parent.postMessage(status_code, window.location.origin);
+                }
+            }
+        }
+    });
+    </script>*/
+    ?>
     <?php
 
 }
 
 
+/**
+ * Build Connection URL based on provided connection method.
+ *
+ * @param string $method Connection method (SSH/Telnet).
+ *
+ * @return string
+ */
+function buildConnectionURL($method)
+{
+    global $config;
+
+    $method_addr = ($method === 'ssh') ? $config['gotty_ssh_addr'] : $config['gotty_telnet_addr'];
+    $address = (empty($method_addr) === true) ? $_SERVER['SERVER_ADDR'] : $method_addr;
+    $use_ssl = ($method === 'ssh') ? $config['gotty_ssh_use_ssl'] : $config['gotty_telnet_use_ssl'];
+    $protocol = ((bool) $use_ssl === true) ? 'https://' : 'http://';
+    $port = ($method === 'ssh') ? $config['gotty_ssh_port'] : $config['gotty_telnet_port'];
+    $connection_hash = ($method === 'ssh') ? $config['gotty_ssh_connection_hash'] : $config['gotty_telnet_connection_hash'];
+    //$basic_auth_hdr = $config['gotty_ssh_user'].':'.$config['gotty_ssh_pass'].'@';
+
+    return $protocol.$address.':'.$port.'/'.$connection_hash;
+}
+
+
 /**
  * Provide an interface where configure all settings.
  *
@@ -212,6 +284,15 @@ function quickShellSettings()
     ui_require_css_file('discovery');
 
     // Gotty settings. Internal communication (WS).
+
+    if (isset($config['gotty_ssh_enabled']) === false) {
+        config_update_value('gotty_ssh_enabled', 0);
+    }
+
+    if (isset($config['gotty_telnet_enabled']) === false) {
+        config_update_value('gotty_telnet_enabled', 0);
+    }
+
     if (isset($config['gotty_host']) === false) {
         config_update_value('gotty_host', '127.0.0.1');
     }
@@ -245,6 +326,16 @@ function quickShellSettings()
 
     // Parser.
     if (get_parameter('update_config', false) !== false) {
+        $gotty_ssh_enabled = get_parameter(
+            'gotty_ssh_enabled',
+            0
+        );
+
+        $gotty_telnet_enabled = get_parameter(
+            'gotty_telnet_enabled',
+            0
+        );
+
         $gotty_ssh_addr = get_parameter(
             'gotty_ssh_addr',
             ''
@@ -296,6 +387,14 @@ function quickShellSettings()
             'Pandor4!'
         );
 
+        if ($config['gotty_ssh_enabled'] != $gotty_ssh_enabled) {
+            config_update_value('gotty_ssh_enabled', $gotty_ssh_enabled);
+        }
+
+        if ($config['gotty_telnet_enabled'] != $gotty_telnet_enabled) {
+            config_update_value('gotty_telnet_enabled', $gotty_telnet_enabled);
+        }
+
         $gotty_telnet_pass = io_input_password($gotty_telnet_pass);
 
         if ($config['gotty_ssh_addr'] != $gotty_ssh_addr) {
@@ -353,6 +452,8 @@ function quickShellSettings()
             $gotty_telnet_pass = io_input_password($gotty_telnet_pass);
             config_update_value('gotty_telnet_pass', $gotty_telnet_pass);
         }
+
+        cron_task_start_gotty();
     }
 
     echo '<fieldset class="margin-bottom-10">';
@@ -370,6 +471,16 @@ function quickShellSettings()
     $ssh_table->style[0] = 'width: 50%;';
 
     $ssh_table->data[0][] = html_print_label_input_block(
+        __('Enable SSH GoTTY'),
+        html_print_checkbox_switch(
+            'gotty_ssh_enabled',
+            1,
+            $config['gotty_ssh_enabled'],
+            true
+        )
+    );
+
+    $ssh_table->data[1][] = html_print_label_input_block(
         __('Gotty address'),
         html_print_input_text(
             'gotty_ssh_addr',
@@ -381,7 +492,7 @@ function quickShellSettings()
         )
     );
 
-    $ssh_table->data[0][] = html_print_label_input_block(
+    $ssh_table->data[1][] = html_print_label_input_block(
         __('Gotty port'),
         html_print_input_text(
             'gotty_ssh_port',
@@ -393,7 +504,7 @@ function quickShellSettings()
         )
     );
 
-    $ssh_table->data[1][] = html_print_label_input_block(
+    $ssh_table->data[2][] = html_print_label_input_block(
         __('Gotty user'),
         html_print_input_text(
             'gotty_ssh_user',
@@ -405,7 +516,7 @@ function quickShellSettings()
         )
     );
 
-    $ssh_table->data[1][] = html_print_label_input_block(
+    $ssh_table->data[2][] = html_print_label_input_block(
         __('Gotty password'),
         html_print_input_password(
             'gotty_ssh_pass',
@@ -417,7 +528,7 @@ function quickShellSettings()
         )
     );
 
-    $ssh_table->data[2][] = html_print_label_input_block(
+    $ssh_table->data[3][] = html_print_label_input_block(
         __('Use SSL'),
         html_print_checkbox_switch(
             'gotty_ssh_use_ssl',
@@ -433,7 +544,12 @@ function quickShellSettings()
     $test_start = '<span id="test-gotty-spinner-ssh" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
     $test_start .= '&nbsp;<span id="test-gotty-message-ssh" class="invisible"></span>';
 
-    $ssh_table->data[2][] = html_print_button(
+    /*$tip = ui_print_help_tip(
+        __('Save configuration before performing test to check if GoTTY process was started successfully'),
+        true
+    );*/
+
+    $ssh_table->data[3][] = html_print_button(
         __('Test'),
         'test-gotty-ssh',
         false,
@@ -462,6 +578,16 @@ function quickShellSettings()
     $telnet_table->style[0] = 'width: 50%;';
 
     $telnet_table->data[0][] = html_print_label_input_block(
+        __('Enable Telnet GoTTY'),
+        html_print_checkbox_switch(
+            'gotty_telnet_enabled',
+            1,
+            $config['gotty_telnet_enabled'],
+            true
+        )
+    );
+
+    $telnet_table->data[1][] = html_print_label_input_block(
         __('Gotty address'),
         html_print_input_text(
             'gotty_telnet_addr',
@@ -473,7 +599,7 @@ function quickShellSettings()
         )
     );
 
-    $telnet_table->data[0][] = html_print_label_input_block(
+    $telnet_table->data[1][] = html_print_label_input_block(
         __('Gotty port'),
         html_print_input_text(
             'gotty_telnet_port',
@@ -485,7 +611,7 @@ function quickShellSettings()
         )
     );
 
-    $telnet_table->data[1][] = html_print_label_input_block(
+    $telnet_table->data[2][] = html_print_label_input_block(
         __('Gotty user'),
         html_print_input_text(
             'gotty_telnet_user',
@@ -497,7 +623,7 @@ function quickShellSettings()
         )
     );
 
-    $telnet_table->data[1][] = html_print_label_input_block(
+    $telnet_table->data[2][] = html_print_label_input_block(
         __('Gotty password'),
         html_print_input_password(
             'gotty_telnet_pass',
@@ -509,7 +635,7 @@ function quickShellSettings()
         )
     );
 
-    $telnet_table->data[2][] = html_print_label_input_block(
+    $telnet_table->data[3][] = html_print_label_input_block(
         __('Use SSL'),
         html_print_checkbox_switch(
             'gotty_telnet_use_ssl',
@@ -524,7 +650,7 @@ function quickShellSettings()
     $test_start = '<span id="test-gotty-spinner-telnet" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
     $test_start .= '&nbsp;<span id="test-gotty-message-telnet" class="invisible"></span>';
 
-    $telnet_table->data[2][] = html_print_button(
+    $telnet_table->data[3][] = html_print_button(
         __('Test'),
         'test-gotty-telnet',
         false,
@@ -545,9 +671,10 @@ function quickShellSettings()
 
 
 if (is_ajax() === true) {
-    $address = get_parameter('address');
+    $method = (string) get_parameter('method', '');
 
-    if (isset($address) === true) {
+    if (empty($method) === false) {
+        $address = buildConnectionURL($method);
         $ch = curl_init($address);
 
         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
@@ -571,6 +698,9 @@ if (is_ajax() === true) {
         echo json_encode($result);
         return;
     }
+
+    $result = ['status' => 'error'];
+    return;
 }
 
 // This extension is useful only if the agent has associated IP.
@@ -599,13 +729,14 @@ if (empty($agent_id) === false
 }
 
 echo '<script>';
+
 echo 'var server_addr = "'.$_SERVER['SERVER_ADDR'].'";';
-echo "function checkAddressReachability(address, callback) {
+echo "function checkAddressReachability(method, callback) {
     $.ajax({
         url: 'ajax.php',
         data: {
             page: 'extensions/quick_shell',
-            address
+            method
         },
         type: 'GET',
         async: false,
@@ -663,7 +794,7 @@ $handle_test_telnet = "var handleTestTelnet = function (event) {
     hideMessage();
     showLoadingImage();
 
-    checkAddressReachability(url, function(isReachable) {
+    checkAddressReachability('telnet', function(isReachable) {
         if (isReachable) {
             showSuccessImage();
             hideMessage();
@@ -717,7 +848,7 @@ $handle_test_ssh = "var handleTestSSH = function (event) {
     hideMessage();
     showLoadingImage();
 
-    checkAddressReachability(url, function(isReachable) {
+    checkAddressReachability('ssh', function(isReachable) {
         if (isReachable) {
             showSuccessImage();
             hideMessage();
diff --git a/pandora_console/include/class/DiscoveryConsoleTask.php b/pandora_console/include/class/DiscoveryConsoleTask.php
index 129bc93435..b0bd4846e9 100644
--- a/pandora_console/include/class/DiscoveryConsoleTask.php
+++ b/pandora_console/include/class/DiscoveryConsoleTask.php
@@ -161,30 +161,37 @@ class DiscoveryConsoleTask
             }
         }
 
-        // Maintenance task: schedule task 'cron_task_start_gotty' if not defined yet.
+        // Maintenance task: schedule daily task to manage GoTTY processes if not defined yet.
         // Must do at every Cron execution.
-        if ((bool) $config['enterprise_installed'] === false) {
-            $call_func_user_task_id = db_get_value_sql('SELECT id FROM `tuser_task` WHERE `function_name` = "cron_task_call_user_function"');
-            if ($call_func_user_task_id === false) {
-                db_process_sql("INSERT INTO `tuser_task` (`function_name`, `parameters`, `name`) VALUES ('cron_task_call_user_function','a:1:{i:0;a:2:{s:11:\"description\";s:13:\"Function name\";s:4:\"type\";s:4:\"text\";}}','Call PHP function')");
+        $gotty_ssh_enabled = (bool) $config['gotty_ssh_enabled'];
+        $gotty_telnet_enabled = (bool) $config['gotty_telnet_enabled'];
+
+        if ($gotty_ssh_enabled  === true || $gotty_telnet_enabled === true) {
+            // Create necessary data in task tables when some method of GoTTY is enabled in setup.
+            if ((bool) $config['enterprise_installed'] === false) {
+                $call_func_user_task_id = db_get_value_sql('SELECT id FROM `tuser_task` WHERE `function_name` = "cron_task_call_user_function"');
+                if ($call_func_user_task_id === false) {
+                    db_process_sql("INSERT INTO `tuser_task` (`function_name`, `parameters`, `name`) VALUES ('cron_task_call_user_function','a:1:{i:0;a:2:{s:11:\"description\";s:13:\"Function name\";s:4:\"type\";s:4:\"text\";}}','Call PHP function')");
+                }
             }
-        }
 
-        $user_function_task_id = db_get_value_sql('SELECT id FROM `tuser_task_scheduled` WHERE `args` LIKE "%cron_task_start_gotty%"');
+            $user_function_task_id = db_get_value_sql('SELECT id FROM `tuser_task_scheduled` WHERE `args` LIKE "%cron_task_start_gotty%"');
 
-        if ($user_function_task_id === false) {
-            $this->schedule(
-                'cron_task_call_user_function',
-                [
-                    0               => 'cron_task_start_gotty',
-                    'function_name' => 'cron_task_start_gotty',
-                    'internal'      => 1,
-                ],
-                'daily',
-                0,
-                0,
-                strtotime('tomorrow')
-            );
+            if ($user_function_task_id === false) {
+                // Schedule task to manage GoTTY processes daily if it is not scheduled yet.
+                $this->schedule(
+                    'cron_task_call_user_function',
+                    [
+                        0               => 'cron_task_start_gotty',
+                        'function_name' => 'cron_task_start_gotty',
+                        'internal'      => 1,
+                    ],
+                    'daily',
+                    0,
+                    0,
+                    strtotime('tomorrow')
+                );
+            }
         }
 
         // Maintenance task: check whether start GoTTY SSH and Telnet processes are running and start otherwise.
diff --git a/pandora_console/include/functions_cron_task.php b/pandora_console/include/functions_cron_task.php
index 0cc9cb08cd..0962632431 100644
--- a/pandora_console/include/functions_cron_task.php
+++ b/pandora_console/include/functions_cron_task.php
@@ -449,15 +449,12 @@ function cron_task_start_gotty(bool $restart_mode=true)
 {
     global $config;
 
-    if (empty($config['gotty_ssh_addr']) === true
-        && empty($config['gotty_telnet_addr']) === true
-    ) {
-        return;
-    }
-
     include_once $config['homedir'].'/include/functions_config.php';
 
-    // Check prev SSH process running and kill it.
+    $gotty_ssh_enabled = (bool) $config['gotty_ssh_enabled'];
+    $gotty_telnet_enabled = (bool) $config['gotty_telnet_enabled'];
+
+    // Check prev SSH process running and kill it (before changing config parameters).
     if (empty($config['restart_gotty_ssh_next_cron_port']) === false) {
         config_update_value('restart_gotty_ssh_next_cron_port', '');
 
@@ -468,7 +465,7 @@ function cron_task_start_gotty(bool $restart_mode=true)
         }
     }
 
-    // Check if prev Telnet process running and kill it.
+    // Check if prev Telnet process running and kill it (before changing config parameters).
     if (empty($config['restart_gotty_telnet_next_cron_port']) === false) {
         config_update_value('restart_gotty_telnet_next_cron_port', '');
 
@@ -486,49 +483,38 @@ function cron_task_start_gotty(bool $restart_mode=true)
     $start_ssh_proc = true;
     $start_telnet_proc = true;
 
-    if (empty($config['gotty_ssh_addr']) === true) {
+    if ($gotty_ssh_enabled === false) {
         $start_ssh_proc = false;
     }
 
-    if (empty($config['gotty_telnet_addr']) === true) {
+    if ($gotty_telnet_enabled === false) {
         $start_telnet_proc = false;
     }
 
     if (!empty($processRunningSSH)) {
         // Process is running.
         if ($restart_mode === true || $start_ssh_proc === false) {
-            // Stop the process for restarting.
+            // Stop the process for restarting or in case GoTTY method is disabled in this iteration.
             shell_exec("pkill -f 'pandora_gotty.*-p ".$config['gotty_ssh_port']."'");
         } else {
-            // Prevent starting if already running and must not be restarted.
+            // Prevent starting if already running and must not be restarted or terminated.
             $start_ssh_proc = false;
         }
     }
 
     if (!empty($processRunningTelnet)) {
         // Process is running.
-        if ($restart_mode === true
-            || empty($config['restart_gotty_telnet_next_cron_port']) === false
-            || $start_telnet_proc === false
-        ) {
-            // Restart GoTTY if it is intended to be restarted specifically, port has changed, or address was changed to an empty value.
-            if (empty($config['restart_gotty_telnet_next_cron_port']) === false) {
-                $telnet_port_kill = $config['restart_gotty_telnet_next_cron_port'];
-                config_update_value('restart_gotty_telnet_next_cron_port', '');
-            } else {
-                $telnet_port_kill = $config['gotty_telnet_port'];
-            }
-
-            // Stop the process for restarting.
-            shell_exec("pkill -f 'pandora_gotty.*-p ".$telnet_port_kill."'");
+        if ($restart_mode === true || $start_telnet_proc === false) {
+            // Stop the process for restarting or in case GoTTY method is disabled in this iteration.
+            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['gotty_telnet_port']."'");
         } else {
-            // Prevent starting if already running and must not be restarted.
+            // Prevent starting if already running and must not be restarted or terminated.
             $start_telnet_proc = false;
         }
     }
 
     if ($start_ssh_proc === false && $start_telnet_proc === false) {
-        // Nothing to do.
+        // Nothing to start.
         return;
     }
 
@@ -537,7 +523,7 @@ function cron_task_start_gotty(bool $restart_mode=true)
         shell_exec('touch '.$logFilePathSSH);
 
         // Start pandora_gotty and capture the output.
-        $command_ssh = '/usr/bin/nohup /usr/bin/pandora_gotty --config /etc/pandora_gotty/pandora_gotty.conf -p '.$config['gotty_ssh_port'].' ssh > '.$logFilePathSSH.' 2>&1 &';
+        $command_ssh = '/usr/bin/nohup /usr/bin/pandora_gotty --config /etc/pandora_gotty/pandora_gotty.conf --ws-origin ".*" -p '.$config['gotty_ssh_port'].' ssh > '.$logFilePathSSH.' 2>&1 &';
         shell_exec($command_ssh);
     }
 
@@ -546,15 +532,15 @@ function cron_task_start_gotty(bool $restart_mode=true)
         shell_exec('touch '.$logFilePathTelnet);
 
         // Start pandora_gotty and capture the output.
-        $command_telnet = '/usr/bin/nohup /usr/bin/pandora_gotty --config /etc/pandora_gotty/pandora_gotty.conf -p '.$config['gotty_telnet_port'].' telnet > '.$logFilePathTelnet.' 2>&1 &';
+        $command_telnet = '/usr/bin/nohup /usr/bin/pandora_gotty --config /etc/pandora_gotty/pandora_gotty.conf --ws-origin ".*" -p '.$config['gotty_telnet_port'].' telnet > '.$logFilePathTelnet.' 2>&1 &';
         shell_exec($command_telnet);
     }
 
     $ssh_hash_read = false;
     $telnet_hash_read = false;
 
-    // Maximum wait time (seconds).
-    $maxWaitTime = 2;
+    // Maximum wait time to read asynchronously the output of the executed commands (seconds).
+    $maxWaitTime = 10;
 
     // Wait for content to appear in the log file.
     $startTime = time();
@@ -579,11 +565,10 @@ function cron_task_start_gotty(bool $restart_mode=true)
                 $hash = array_slice($parts, -2, 1)[0];
 
                 config_update_value('gotty_ssh_connection_hash', $hash);
+                $ssh_hash_read = true;
             }
 
             unlink($logFilePathSSH);
-
-            $ssh_hash_read = true;
         }
 
         if ($start_telnet_proc === true) {
@@ -604,16 +589,16 @@ function cron_task_start_gotty(bool $restart_mode=true)
                 $hash = array_slice($parts, -2, 1)[0];
 
                 config_update_value('gotty_telnet_connection_hash', $hash);
+                $telnet_hash_read = true;
             }
 
             unlink($logFilePathTelnet);
-
-            $telnet_hash_read = true;
         }
 
         if (($start_ssh_proc === false || $ssh_hash_read === true)
             && ($start_telnet_proc === false || $telnet_hash_read === true)
         ) {
+            // As soon as the reads have completed, the timing loop will terminate.
             break;
         }
 

From 0771094e85fab2a34647ce3baa584e8b07a10437 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Mon, 2 Oct 2023 16:42:32 +0200
Subject: [PATCH 078/116] minor changes

---
 pandora_console/godmode/setup/os_version.list.php   | 7 +++++--
 pandora_console/include/functions_api.php           | 2 ++
 pandora_console/operation/agentes/estado_agente.php | 5 +++++
 3 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/pandora_console/godmode/setup/os_version.list.php b/pandora_console/godmode/setup/os_version.list.php
index eac41fae71..3e15725793 100644
--- a/pandora_console/godmode/setup/os_version.list.php
+++ b/pandora_console/godmode/setup/os_version.list.php
@@ -108,7 +108,7 @@ html_print_action_buttons(
 echo '</form>';
 
 echo '<form id="redirect-form" method="post" action="index.php?sec=view&sec2=operation/agentes/estado_agente">';
-
+html_print_input_hidden('os_type_regex', '');
 html_print_input_hidden('os_version_regex', '');
 
 echo '</form>';
@@ -129,6 +129,8 @@ echo '</form>';
         item.options += '" ><?php echo html_print_image('images/edit.svg', true, ['title' => __('Edit'), 'class' => 'main_menu_icon invert_filter']); ?></a>';
 
         item.options += '<a href="javascript:" onclick="redirect_to_agents_by_version(\'';
+        item.options += item.product;
+        item.options += '\',\'';
         item.options += item.version;
         item.options += '\')" ><?php echo html_print_image('images/agents.svg', true, ['title' => __('Show agents'), 'class' => 'main_menu_icon invert_filter']); ?></a>';
 
@@ -140,7 +142,8 @@ echo '</form>';
         item.options += '<form method="post" action="?sec=view&sec2=operation/agentes/estado_agente"></form>';
     }
 
-    function redirect_to_agents_by_version(version) {
+    function redirect_to_agents_by_version(product, version) {
+        $('#hidden-os_type_regex').val(product);
         $('#hidden-os_version_regex').val(version);
         $('#redirect-form').submit();
     }
diff --git a/pandora_console/include/functions_api.php b/pandora_console/include/functions_api.php
index 7e22befbee..1cccf382ba 100644
--- a/pandora_console/include/functions_api.php
+++ b/pandora_console/include/functions_api.php
@@ -1528,6 +1528,7 @@ function api_set_update_agent($id_agent, $thrash2, $other, $thrash3)
     $learningMode = $other['data'][10];
     $disabled = $other['data'][11];
     $description = $other['data'][12];
+    $osVersion = $other['data'][13];
 
     // Check parameters.
     if ($idGroup == 0) {
@@ -1623,6 +1624,7 @@ function api_set_update_agent($id_agent, $thrash2, $other, $thrash3)
             'server_name'               => $nameServer,
             'id_parent'                 => $idParent,
             'custom_id'                 => $customId,
+            'os_version'                => $osVersion,
         ],
         ['id_agente' => $id_agent]
     );
diff --git a/pandora_console/operation/agentes/estado_agente.php b/pandora_console/operation/agentes/estado_agente.php
index 4235e3e14e..c27632c1fa 100644
--- a/pandora_console/operation/agentes/estado_agente.php
+++ b/pandora_console/operation/agentes/estado_agente.php
@@ -170,6 +170,7 @@ $recursion = get_parameter('recursion', 0);
 $status = (int) get_parameter('status', -1);
 $os = (int) get_parameter('os', 0);
 $os_version_regex = trim(get_parameter('os_version_regex', ''));
+$os_type_regex = trim(get_parameter('os_type_regex', ''));
 $policies = (array) get_parameter('policies', []);
 $ag_custom_fields = (array) get_parameter('ag_custom_fields', []);
 
@@ -182,6 +183,10 @@ $onheader = [];
 
 $load_filter_id = (int) get_parameter('filter_id', 0);
 
+if (empty($os_type_regex) !== true) {
+    $os = (int) db_get_value_sql('SELECT id_os FROM tconfig_os WHERE `name` REGEXP "'.$os_type_regex.'"');
+}
+
 if ($load_filter_id > 0) {
     $user_groups_fl = users_get_groups(
         $config['id_user'],

From 19821c4a4039af1d54c60da9fbc29bc271b59430 Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Tue, 3 Oct 2023 01:00:30 +0200
Subject: [PATCH 079/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index 47b4424bcf..717f29d462 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231002
+Version: 7.0NG.773.3-231003
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 43113c2cbc..5d9dd7d3ed 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231002"
+pandora_version="7.0NG.773.3-231003"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index ee38d65811..7757b068c8 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231002';
+use constant AGENT_BUILD => '231003';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 61d81e4f20..5d401dbc68 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231002
+%define release     231003
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index e2a248ac0d..f630f42ec7 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231002
+%define release     231003
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index 8ea67efe7a..d3aff53214 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231002
+%define release     231003
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 770f884057..cc96ec72b4 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231002"
+PI_BUILD="231003"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 713324e963..0ebdc6e9d8 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231002}
+{231003}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index 0c9fd22936..fb1babfa20 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231002")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231003")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 139d9f9d03..84a52bbd75 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231002))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231003))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index a5c5741bb8..5087900589 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231002
+Version: 7.0NG.773.3-231003
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 41da81dd2b..945906aa5a 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231002"
+pandora_version="7.0NG.773.3-231003"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 937064bd86..f6511a6dbe 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231002';
+$build_version = 'PC231003';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index 4539d67968..40f90ddb2c 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231002';
+            $build = '231003';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 8d98092032..ae2c08e660 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231002
+%define release     231003
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index c597822705..400e776081 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231002
+%define release     231003
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index 3be2933997..357b56a8d4 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231002
+%define release     231003
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 2e40bc2930..69b9401dce 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231002
+Version: 7.0NG.773.3-231003
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index 7b528817d8..2f2ef92573 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231002"
+pandora_version="7.0NG.773.3-231003"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 8feacb839e..e2d498a442 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231002";
+my $pandora_build = "231003";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 8a4c26f904..34322e1fa9 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231002";
+my $pandora_build = "231003";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index e622f2e047..d4d8c35f52 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231002
+%define release     231003
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index 7a2bed9cdd..8603c74445 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231002
+%define release     231003
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index 573f34cd74..1a0c6c0579 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231002"
+PI_BUILD="231003"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index 048c365ca1..ece636f664 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231002";
+my $version = "7.0NG.773.3 Build 231003";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index 656da24b65..3e8788d21a 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231002";
+my $version = "7.0NG.773.3 Build 231003";
 
 # save program name for logging
 my $progname = basename($0);

From cd2fce36c14acbf1941b5daf6f99686033366127 Mon Sep 17 00:00:00 2001
From: Enrique Martin <enrique.martin@pandorafms.com>
Date: Tue, 3 Oct 2023 10:49:47 +0200
Subject: [PATCH 080/116] Fixed not hash JSON output in discovery plugins

---
 pandora_server/lib/PandoraFMS/DiscoveryServer.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pandora_server/lib/PandoraFMS/DiscoveryServer.pm b/pandora_server/lib/PandoraFMS/DiscoveryServer.pm
index 2703f65113..ad7247a71d 100644
--- a/pandora_server/lib/PandoraFMS/DiscoveryServer.pm
+++ b/pandora_server/lib/PandoraFMS/DiscoveryServer.pm
@@ -493,7 +493,7 @@ sub exec_recon_app ($$$) {
 		}
 
 		# Process monitoring data.
-		if (defined($output->{'monitoring_data'})) {
+		if (ref($output) eq 'HASH' && defined($output->{'monitoring_data'})) {
 	    	my $recon = new PandoraFMS::Recon::Base(
 				dbh => $dbh,
 				group_id => $task->{'id_group'},

From 67df5ee92a307adfdc5444656371c04076796df9 Mon Sep 17 00:00:00 2001
From: Enrique Martin <enrique.martin@pandorafms.com>
Date: Tue, 3 Oct 2023 11:45:59 +0200
Subject: [PATCH 081/116] Fixed vmware app issue, updated migrate code and
 removed xenserver insert sql

---
 .../DiscoveryApplicationsMigrateCodes.ini          |  2 +-
 .../migration_scripts/insert.xenserver.sql         | 14 --------------
 .../discovery/migration_scripts/migrate.vmware.sql |  2 +-
 3 files changed, 2 insertions(+), 16 deletions(-)
 delete mode 100644 pandora_console/attachment/discovery/migration_scripts/insert.xenserver.sql

diff --git a/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini b/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
index da8731393a..2dc698cb74 100644
--- a/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
+++ b/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
@@ -1,4 +1,4 @@
-pandorafms.vmware=d69778777e1cebfb80b4b3fbdcbbadcc
+pandorafms.vmware=459175dce8ab811e874ce2e7216f0db4
 pandorafms.mysql=fadb4750d18285c0eca34f47c6aa3cfe
 pandorafms.mssql=1cc215409741d19080269ffba112810e
 pandorafms.oracle=2d9320a514d1e48a0b2804e1653c31c6
diff --git a/pandora_console/attachment/discovery/migration_scripts/insert.xenserver.sql b/pandora_console/attachment/discovery/migration_scripts/insert.xenserver.sql
deleted file mode 100644
index 7a1160af50..0000000000
--- a/pandora_console/attachment/discovery/migration_scripts/insert.xenserver.sql
+++ /dev/null
@@ -1,14 +0,0 @@
--- Insert new XenServer APP
-SET @short_name = 'pandorafms.xenserver';
-SET @name = 'XenServer';
-SET @section = 'app';
-SET @description = 'Monitor&#x20;hosts,&#x20;storages&#x20;and&#x20;VMs&#x20;from&#x20;a&#x20;specific&#x20;XenServer';
-SET @version = '1.0';
-INSERT IGNORE INTO `tdiscovery_apps` (`id_app`, `short_name`, `name`, `section`, `description`, `version`) VALUES ('', @short_name, @name, @section, @description, @version);
-SELECT @id_app := `id_app` FROM `tdiscovery_apps` WHERE `short_name` = @short_name;
-
--- Insert into tdiscovery_apps_scripts
-INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES (@id_app, '_exec1_', 'bin/pandora_xenserver');
-
--- Insert into tdiscovery_apps_executions
-INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;-c&#x20;&#039;_tempfileXenServer_&#039;&#x20;--as_discovery_plugin&#x20;1');
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql b/pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql
index f7ebeef09b..1625314557 100644
--- a/pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql
+++ b/pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql
@@ -992,7 +992,7 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
     SELECT
-    `id_rt`, '_tempfileVMware_', 'custom', 'Configuration&#x0d;&#x0a;server _server_&#x0d;&#x0a;datacenter _datacenter_&#x0d;&#x0a;user _user_&#x0d;&#x0a;group __taskGroup__&#x0d;&#x0a;use_encrypted_password _useEncryptedPassword_&#x0d;&#x0a;interval __taskInterval__&#x0d;&#x0a;pass _pass_&#x0d;&#x0a;threads _threads_&#x0d;&#x0a;event_mode _eventMode_&#x0d;&#x0a;retry_send _retrySend_&#x0d;&#x0a;virtual_network_monitoring _virtualNetworkMonitoring_&#x0d;&#x0a;recon_interval _reconInterval_&#x0d;&#x0a;&#x0d;&#x0a;scan_datastore _scanDatastore_&#x0d;&#x0a;scan_datacenter _scanDatacenter_&#x0d;&#x0a;scan_esx _scanESX_&#x0d;&#x0a;scan_vm _scanVM_&#x0d;&#x0a;&#x0d;&#x0a;logfile __temp__/tmp_discovery.__taskMD5__.log&#x0d;&#x0a;entities_list __temp__/tmp_discovery.__taskMD5__.entities&#x0d;&#x0a;event_pointer_file __temp__/tmp_discovery.__taskMD5__.events&#x0d;&#x0a;temporal __temp__&#x0d;&#x0a;transfer_mode tentacle&#x0d;&#x0a;tentacle_ip _tentacleIP_&#x0d;&#x0a;tentacle_port _tentaclePort_&#x0d;&#x0a;tentacle_opts _tentacleExtraOpt_&#x0d;&#x0a;local_folder __incomingDir__&#x0d;&#x0a;pandora_url __consoleAPIURL__&#x0d;&#x0a;api_pass __consoleAPIPass__&#x0d;&#x0a;api_user __consoleUser__&#x0d;&#x0a;api_user_pass __consolePass__&#x0d;&#x0a;&#x0d;&#x0a;_extraSettings_', 1
+    `id_rt`, '_tempfileVMware_', 'custom', 'Configuration&#x0d;&#x0a;server _server_&#x0d;&#x0a;datacenter _datacenter_&#x0d;&#x0a;user _user_&#x0d;&#x0a;group __taskGroup__&#x0d;&#x0a;use_encrypted_password _useEncryptedPassword_&#x0d;&#x0a;interval __taskInterval__&#x0d;&#x0a;pass _pass_&#x0d;&#x0a;threads _threads_&#x0d;&#x0a;event_mode _eventMode_&#x0d;&#x0a;retry_send _retrySend_&#x0d;&#x0a;virtual_network_monitoring _virtualNetworkMonitoring_&#x0d;&#x0a;recon_interval _reconInterval_&#x0d;&#x0a;&#x0d;&#x0a;scan_datastore _scanDatastore_&#x0d;&#x0a;scan_datacenter _scanDatacenter_&#x0d;&#x0a;scan_esx _scanESX_&#x0d;&#x0a;scan_vm _scanVM_&#x0d;&#x0a;&#x0d;&#x0a;logfile __temp__/tmp_discovery.__taskMD5__.log&#x0d;&#x0a;entities_list __temp__/tmp_discovery.__taskMD5__.entities&#x0d;&#x0a;event_pointer_file __temp__/tmp_discovery.__taskMD5__.events&#x0d;&#x0a;temporal __temp__&#x0d;&#x0a;transfer_mode tentacle&#x0d;&#x0a;tentacle_ip _tentacleIP_&#x0d;&#x0a;tentacle_port _tentaclePort_&#x0d;&#x0a;tentacle_opts _tentacleExtraOpt_&#x0d;&#x0a;local_folder __incomingDir__&#x0d;&#x0a;pandora_url __consoleAPIURL__&#x0d;&#x0a;api_pass __consoleAPIPass__&#x0d;&#x0a;api_user __consoleUser__&#x0d;&#x0a;apiuser_pass __consolePass__&#x0d;&#x0a;&#x0d;&#x0a;_extraSettings_', 1
     FROM `trecon_task`
     WHERE `type` = @current_app_type
 ;

From 7e20e6b0488b42eb02dd874ad55e9287609504e0 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Tue, 3 Oct 2023 12:10:53 +0200
Subject: [PATCH 082/116] Changed migration scripts and migration ini path

---
 .../pandorafms.mysql/discovery_definition.ini | 172 +++
 .../discovery/pandorafms.mysql/logo.png       | Bin 0 -> 12952 bytes
 .../pandorafms.mysql/pandora_mysql.py         | 979 ++++++++++++++++++
 .../pandorafms.mysql/pandora_mysql.req        |   2 +
 .../DiscoveryApplicationsMigrateCodes.ini     |   0
 .../migration_scripts/migrate.aws.ec2.sql     |   0
 .../migration_scripts/migrate.aws.rds.sql     |   0
 .../migration_scripts/migrate.aws.s3.sql      |   0
 .../migration_scripts/migrate.azure.sql       |   0
 .../migration_scripts/migrate.db2.sql         |   0
 .../migration_scripts/migrate.gcp.ce.sql      |   0
 .../migration_scripts/migrate.mssql.sql       |   0
 .../migration_scripts/migrate.mysql.sql       |   0
 .../migration_scripts/migrate.oracle.sql      |   0
 .../migration_scripts/migrate.sap.deset.sql   |   0
 .../migration_scripts/migrate.vmware.sql      |   0
 .../wizards/ManageExtensions.class.php        |   4 +-
 17 files changed, 1155 insertions(+), 2 deletions(-)
 create mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
 create mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/logo.png
 create mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
 create mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req
 rename pandora_console/{attachment => extras}/discovery/DiscoveryApplicationsMigrateCodes.ini (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.aws.ec2.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.aws.rds.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.aws.s3.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.azure.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.db2.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.gcp.ce.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.mssql.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.mysql.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.oracle.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.sap.deset.sql (100%)
 rename pandora_console/{attachment => extras}/discovery/migration_scripts/migrate.vmware.sql (100%)

diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini b/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
new file mode 100644
index 0000000000..7345f5f1d9
--- /dev/null
+++ b/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
@@ -0,0 +1,172 @@
+[discovery_extension_definition]
+
+short_name = pandorafms.mysql
+section = app
+name = MySQL
+version = "1.0"
+description = Monitor MySQL databases
+
+execution_file[_exec1_] = "bin/pandora_mysql"
+
+exec[] = "'_exec1_' --conf '_tempfileConf_' --target_databases '_tempfileTargetDatabases_' --target_agents '_tempfileTargetAgents_' --custom_queries '_tempfileCustomQueries_'"
+
+default_value[_dbstrings_] = ""
+default_value[_dbuser_] = ""
+default_value[_dbpass_] = ""
+default_value[_threads_] = 1
+default_value[_engineAgent_] = ""
+default_value[_prefixModuleName_] = ""
+default_value[_scanDatabases_] = false
+default_value[_agentPerDatabase_] = false
+default_value[_prefixAgent_] = ""
+default_value[_checkUptime_] = true
+default_value[_queryStats_] = true
+default_value[_checkConnections_] = true
+default_value[_checkInnodb_] = true
+default_value[_checkCache_] = true
+default_value[_executeCustomQueries_] = true
+default_value[_customQueries_] = "# =======================================================================
+# Custom queries definition guide
+# =======================================================================
+# Definition example
+# check_begin
+# target_databases  database where should be executed, default (all)
+# name              custom name chosen by the user
+# description       custom description chosen by the user
+# operation         value | full,
+#                     value returns a simple value,
+#                     full returns all rows in a string
+# target            query to be executed,
+#                     you can use reserved word $__self_dbname to
+#                     reference current analyzed database name
+# datatype          module datatype, could be:
+#                     generic_data | generic_data_string |
+#                     generic_proc
+# min_warning       minimum warning
+# max_warning       maximum warning
+# min_critical      minimum critical
+# max_critical      maximum critical
+# inverse_warning   if set to 1, warning thresholds has inverse meaning
+# inverse_critical  if set to 1, warning thresholds has inverse meaning
+# str_warning       string warning
+# str_critical      string critical
+# unit              unit to be displayed in module view
+# interval          module interval
+# parent            module parent for this module (name)
+# check_end
+
+"
+
+[config_steps]
+
+name[1] = MySQL Base
+custom_fields[1] = mysql_base
+fields_columns[1] = 1
+
+name[2] = MySQL Detailed
+custom_fields[2] = mysql_detailed
+fields_columns[2] = 1
+
+[mysql_base]
+
+macro[1] = _dbstrings_
+name[1] = MySQL target strings
+tip[1] = "SERVER:PORT, comma separated or line by line, as many targets as you need. Use # symbol to comment a line."
+type[1] = textarea
+
+macro[2] = _dbuser_
+name[2] = User
+type[2] = string
+
+macro[3] = _dbpass_
+name[3] = Password
+type[3] = password
+
+[mysql_detailed]
+
+macro[1] = _threads_
+name[1] = Max threads
+type[1] = number
+mandatory_field[1] = false
+
+macro[2] = _engineAgent_
+name[2] = Target agent
+tip[2] = Defines a target agent where this task will store data detected, if you have defined multiple targets, define a comma separated or line by line list of names here or leave in blank to use server IP address/FQDN.
+type[2] = textarea
+mandatory_field[2] = false
+
+macro[3] = _prefixModuleName_
+name[3] = Custom module prefix
+tip[3] = Defines a custom prefix to be concatenated before module names generated by this task.
+type[3] = string
+mandatory_field[3] = false
+
+macro[4] = _scanDatabases_
+name[4] = Scan databases
+type[4] = checkbox
+
+macro[5] = _agentPerDatabase_
+name[5] = Create agent per database
+type[5] = checkbox
+
+macro[6] = _prefixAgent_
+name[6] = Custom database agent prefix
+tip[6] = Defines a custom prefix to be concatenated before database agent names generated by this task.
+type[6] = string
+show_on_true[6] = _agentPerDatabase_
+mandatory_field[6] = false
+
+macro[7] = _checkUptime_
+name[7] = Check engine uptime
+type[7] = checkbox
+
+macro[8] = _queryStats_
+name[8] = Retrieve query statistics
+type[8] = checkbox
+
+macro[9] = _checkConnections_
+name[9] = Analyze connections
+type[9] = checkbox
+
+macro[10] = _checkInnodb_
+name[10] = Retrieve InnoDB statistics
+type[10] = checkbox
+
+macro[11] = _checkCache_
+name[11] = Retrieve cache statistics
+type[11] = checkbox
+
+macro[12] = _executeCustomQueries_
+name[12] = Execute custom queries
+type[12] = checkbox
+
+macro[13] = _customQueries_
+name[13] = Custom queries
+tip[13] = Define here your custom queries.
+type[13] = textarea
+show_on_true[13] = _executeCustomQueries_
+mandatory_field[13] = false
+
+[tempfile_confs]
+
+file[_tempfileConf_] = "agents_group_id = __taskGroupID__
+interval = __taskInterval__
+user = _dbuser_
+password = _dbpass_
+threads = _threads_
+modules_prefix = _prefixModuleName_
+execute_custom_queries = _executeCustomQueries_
+analyze_connections = _checkConnections_
+scan_databases = _scanDatabases_
+agent_per_database = _agentPerDatabase_
+db_agent_prefix = _prefixAgent_
+innodb_stats = _checkInnodb_
+engine_uptime = _checkUptime_
+query_stats = _queryStats_
+cache_stats = _checkCache_"
+
+file[_tempfileTargetDatabases_] = "_dbstrings_"
+
+file[_tempfileTargetAgents_] = "_engineAgent_"
+
+file[_tempfileCustomQueries_] = "_customQueries_"
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/logo.png b/pandora_console/attachment/discovery/pandorafms.mysql/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..b24a84ceea0c3ad8590bc2721ebda93108a0b8f7
GIT binary patch
literal 12952
zcmb`uRZv||@Gc6$-QC^Y-GjTkySsaU;O@FZut3lqWaDgL2iM^41b2s<->F;oRGs^O
zxmEX}Yjw}+hv})A)$@JbD_%oQ9u1io843ytO;JHs>)#XjpCH0RK|w2x@_+wlz}icx
zN<l$2rJ}rA!u_)aZ4DIdR8^sv|LKTO&~c7Xu>UmZe?t6EprAgLefob!fMqcMTmSE+
zFBwn<3W^&=QC3PP0QxKxA%t}3?qkv{lQX5M-$$`k<yYh-LmD9>RV**%Z5dRnnpY+&
zEo`*w2$L*y6y0i8nj~w7A_K`+X*9a;nA!uS_|lXB>*xyDBxrwQQ0vW0kJyBhoBPB0
z{M5qQA<e{iu={A(gX*$?>fF40n{-)-)Xm}?o`E_<1%k4`FUOmjBhOudQV<}#Y<BZ3
z8r>W-k$VTyS*D*ptl;>G7RqdI*5h%v?bSZ@w%;b!u3pL@Y=M;XhkuHTC(|7E2>@m}
ztvE8!O8Y)WP3p#2gjvrKGQ?hrJDk{&jmTGYk`-BGxjYaI(X<M2oH4*sq*b$A=6Kxu
zJ4evK&W%(w#cqnZq65y8+CF%)Wo<93AydCvtPISppD6q@Y~|_q-B{X=xHUY8m;A+%
zAUXB)+L_qn_pXVE_H;;#ct{i%wf(~!pNvSUY|VG_)OWsMURpnjnd-sYxN*Xm{9!#5
zVzF#infJ?#0o^^}ci8(B6%s6=g80?n%+;70h={Oun=2U{0ya@4tLO7WwZj++NE4A7
z=6kp%m_ZDt!eZn<xKiI`UQmE>bGAk42#EZvF;Tw&ai>7DxR>wqUHf|>iy0c|UhK{0
zDK-~2T%vjEAyNeOUo&s7_he(t+o_`zST$xql9kJEW|@6Us(!IzDr8LA$i?SMKET;j
zF%~%12E(0$zgtt)HuKRaYT{!82+@ZrW9l~O@N_A%Rmk~Y#?+P38Km`S`(@)>GkXCb
z8x~tVEiEhGC)wOMC|vlKVw2~5L7sa}Gusm?qy%tyQbDV58lECm*}w3<Q%3Zh7y^lU
zl`QwT`)gpRh<g-E$M(IP8MmU{;CzA@1(u<!?3qnUlTlx;N0^<AKieoxIf~{osr6oK
zmZdU9&w?}@K}lX}i<YH<KU=Uj^6Iw^z<}macqHe(Y$mJlo3X#r`U1Le7apSst-ric
z-9(i{Q-@t(B&!I8q<J=#Opl0}Q{sWTg+#_FmKUfUMNyEh9*)=pvv<(A_qF`rL^UX8
zerqb@0)g6JQF}DX$l(qSqHvmAvvfqn%cGXxMkJgGe>y)uq!Ag;)=8IBpH2(QKZ)Xp
zqKU?uogpbv>X5yncii$g7P%u&aC8<Sj}r#dX)Fg>MXlbIB1eBRmhtST3aX4kHuU;A
zRaW^_@qi;msT_tIkoO9Z`d;~Cwnc-fM>XuKoD(l^ARYtbolX;zDs#bhg~#!UzY?7e
z1G#|FqOtzzQ0LLo%r9aKiGZ<y!eD3n3(Mo4R{xN>Ud*9U!kdoT)cGRXB%3cKebSFq
zFK{*0M@C0~^4?1L&h{w5m(h5JfxWn^&RCNw^S%=@ncK^ZsOl~Md4eAGcOPL^o8U9-
z0X4=4+U>fH&+6Ftp3lvV)T;Z;u(+R)p<^PXC8^SG5Yyz0-WOKUkc$j<WN2iFdrboE
z$2Nq_9hfZ)O}%I3nbLYY8a^ky!Alyt{x-^n{@{@P%=ilL%$G=ckdb&Xl3OEc`^#TF
zZ49r@)Hi2q<hJOtN*lqTD9lP9P{hcKH(*4xr}51PW1mvogLdh<wPK7-yPpk58YKH%
zfS^5k*`wC7IVa=nsaUCE!PsnA1F}Lzo>f`QbYU<ZN)IV2rHskwiq>+NOb)KW%^P{w
z*K+(0wX79!&mPa)ZdMIZcF3%)!M!w&C8^TtPZ1NaM>h8~zL8Rk@hKl+OK|+_i!+WV
zJROFTy~W6!>Jl}UeO-|iZ3kUO&Z14&p;neX*Bo?f9Qf3XR6a{LsZYu;Otu*xH@Yh6
zqX**jX~jQG)$FV1*#8Ak-YweP9i%CkOJyzd1Gx<Q?jS6^gAMjs>~82Ey-0(D%vjNT
z)G&>Wj6@CYa0o0lEwCo{{8*V_v1{gVs7tgXzv3T|_)F8De3pXX4iQn$$S<@)zVwdS
z*2YkPhi@(u#)Sx^z*~na?8K!^M{f1<_M2IOk(xLYfu$+W-@I*tgnQ>{n!kT4=RCM}
zF<tywkoc4%G5w0{<Xx<Q8(nHVNSef$CaLo~jl_|WkzrAP=2_osC^h?aBcvsXBpef{
zQm=b-@FZ2rnlvE#C5(Swhi_jo-|bnbG*=oX68Ve2N{ht-u%Ih!jniP3H(pGfIZ78_
zWQzP8*X9IP#?6Sc%7Fez`@%tS-fx@_xxk}I<DGRIW86u^OozJuYUGn|5>G5r{szbn
z5II@sB^~glsO>hG=npKFs?Q^3t2K3<P~e+nQJwY9D33Z(>CAYoE~6+b$!EijAq!8+
zpU9_~`m91ZvD7KMX}{#)O@hsQh!c>ucU9M4_l832e7Q82kH7NFvKpq`?4UUe%e+`<
zzLU2M5|L7VO=TtHNe?mbH(;8Zdzz5;9$r;ATGTHk!ym{S2TrtKTf<>g=a2DRJ*Q6l
z@EcE;k0Gn$g?RypKj;L~BwQrCjuF<olWq!N4G>AL9&hN&Nj}C8hQYtk@^>4{V^EpT
z7QdVe=)<`a__!CjV+yl6BpnO1G`C4qan_(-f$zq4Jz~D%TRivcmCeyq$y{mFP)LCz
zQc^Y@b0>sVVk*_&>uA~${djSU<l(YVj;Wo}Th3z`KR-nU4|B2^k<PU*qpoy@viu3V
zHvna;ipS!cD!~m4m`zyV2^M-W6aB9<`rp@<@qZuL|I9u5PwUNOdj~Y%a}xAA`}i;V
z(`noXPFEdWY)&jqi8GnSIC1Al`8f^I9M~HM3<6+J)2hZgtfDM<A_V+{QG`{dI8INd
zBz9Y!mFrZOq84+{$!lg{F_+)1MOFoZ&{@abi-c=v$Q<$zOW<khh2;BQSJD9|qbiC1
zAi?$hvnELt%HNeIS9=umf(?V*R@PxO!=f8FMf~2D{p+GGB{g97l3weEc}MEv4N$P?
zG?3osrS<-7o$pNTr>i*KaPlG4w3wB-zI)%sZX~^j13eMMR@aiB-S)$f{&KphC(<$F
zir15VO2#(9{tyGH>=-ciSFhNS@Tzw<o#9#-PJ~j;(&%|K@YPdg!!)U*5uwNiS5;b4
zg;eQ#UAKYpm2QIioVB5R25cu^G2PJWSr@PjL#89A1fP^_chh$`41bZDVtxw<KChfR
zLtLMrwBO73OO9&^>JaS*{V~r0=fA4{=`VDc7+YD<5Y4PBmhg!<SefIh4AqB{oPZLr
z;+QnTT``|-_QW~ySxQ`Yjg3{YSD?fe<Q-=*ZvU%O$NVJn6rXc(lkAq~{bauk#b#5<
zW{_-)+VpS<ux756U+n#3p!-bF-_|LE><|<XQnz&qCtQ;yXYqoV$Gh}-I?O!LPtegc
zgRD-)5|t)*3#S*m%p7r=Vw6_G<|zQ_K)SF83aUIyKE33ZhU;%fAAZUOAn?&yNr`&-
zcSh15Gah_MGkDdLcw!b$x8maW72Y&AarY&{NkPtzWF8Te&*E3ha{1+6YP{)gs6{rX
zTuY@+4jofJq>+5dxvSHw6jw$2#)H&?E%$0suCsb_rM@5hxP1+s!-cYSw;xZtac~2!
z>32tiS}u4;gF8nn?4z{~-ln9J#`KTi!nQXIekW(w+9I0SN9(fYGnah&mwnwlE1_TG
z>W5VmpJy0fGK6@y$yN`SVpavZ)0>i|t$WAF8(gGX0`aqoH|99SY})zOs3h+>{fNct
zp87x+3dz>aQ2?>itS}o#%ju+EM`J-~ZsR!ZXo$ASjSI!_f`(`k?j*Gkkw(>RkhF82
z>GRcSpf))lA8~2b86if&7|1fNqWk)w##d$T;$JfF9%X`o3Tgu6A6i6CG?o;nG6)TZ
zqkw7WE^r$}c%S+Kz7NtT>|^}mIcX9R_Mo&q#S^SWUw$SN^UF_t?+FU4^}oD?PDQa8
zG7G1V)Y23QDGjy7OnB;Hk5bOsp$r$7*}k?)+rS1o!wJq*J7R_NvGadQl90gX4mkcr
z&DI5E8^EAs-*@ggN6ty3$!#-<8v2Wr##Ds9r`FSvQu=xeX1?BJ2nl`Iyuu+J&ZPLt
z%1O@q#k{?7#tkowv`4@`Pv05evNQ2+J`vXSXJRrGB{`#wg-ru~SkXN{_TR^N#JEjE
z6297i(Ei}4gT2rE-CIWF41wP?RdGd6?H@}nAF^x5h*AFV9WGdiDz0EaH4=P9b=;)(
zIY7bP;7IEw=y0<y$Kue@6;3s|LSc6(p?ckeC#d7D6?jVT<?E~Bd}}n`lWbA7eJZa(
z;*2*D8Hep^F-7BGQ~3n%d#R&cFY?j8aCq~@>psXsv*p(VLhADmi_vm~E>z{QL9Fz&
z&;i$jB{w`00rt(;`3m3+DH~oO?SSW4S_vq)QaMAn=Y@z58dmsCvyiP_bTVAM?*?xd
z`D-l9^*dX@GAKX@f?_z>=68!|<ZcR*-oLGv#eON4%{yM<-mc=ueJNlCqnyGnuya$<
zm@sbS52&+;+Ct|cz@e3Aw~d(hG(L$$#UA|i+nyS(NSWE-ilIr@OBj3GSoR_g`D1B^
zmgUG4Hkk;U92lfQBWpuIV4l=<qRRc=!%FajS$U-<zSY@$Cpe_%JGy#`Ojrn2u~n7j
zR#>{+?yJHzWOtYX4sAjgTQF*at?edatgGf^Lxu+^Gl+J9XdIeQHp2dy%uC`nE8Nam
z35R~{VKCLKh)fQzAdJw$rIA6Je(>Jmc8*=xcvJAuOPi+CfuBN|JP?t+yDWg$$xoQj
zbP%Tl6u$Qx%&Y`+HpFry=)WyGrM(p-3o7n<nF%y<<-2!6hwww}FLkQ0%+*kiHJ%^<
zMP7jxYPOrWw{*x>6oSey=wr_(<GZlC*pUNc0gP%b>ghxe=`tX6ry(zgz|r8UgMctR
zB58v8@ai(FHTe{Hgj!?D_WcXjYs-($BCLW~-3Tk7O3TYJ8~}-XB!J(0kmdo-FK~wU
z@|os7@iJu<dfX<1$^x5s%nfba>8(So1aX(rwDu!%VFT(p^%#zdjFF(iGUX#x((9lx
zo#a(Qu#b0Vu`8}+)R&&V*zv7q&ewOEJ49`~E8#AYMmdqcW#mM_zmBy8({SN2G(_hO
zexIzJA~uFCg6ZmP3dmWI*%dh^=B)-L^d(mVd8k(IEU#4P^F8((GOur$nw->6$xR4p
zpxSjp<^Ma0{vSE@e>NrAsiqso(BMy`nvnmJ2=ae}V<BF!Hoo>{IYjv2H?YNeI`@>E
z^Tj_n!%SLF{3AnPZJW_?iek*o?p%ky!9pHVwl0Q#q_wh2wkSSO;_97Ga7JX()*4Et
zcS0I96nwFVu=M@exzeKQw2ysjc{hSywE|BIs9<K+oBX!9Iq-gw#pkmWBJ|5Mtg)$=
zFC-NfRL9P{$@w^OjIS{Z&EU!Q{AuA6xg=$9-eLRjUnZtR(U-q)r|FV7f=8GiiRhjz
z_~Ysd2>7lRM#ihJ=1^gn3%NarPw~fl!J|C6llQz{><}=2vJCXb<Moh#p|X#hVbiLG
z?L+~e-HR%aco;Pzn3D_!`l(?W<Vv;r@0x(Z8~KHAm4LA6=!Dy%{lIZ~g}|tsJNeaT
z0sg0#92;kKavM8CGs-<@mpn}J-6BTfc5z>o<3`ruCA>5>YbP&uq~FVQiQhC+T4-SE
zH8~n@B;vH6B}Docs>4n@d49&Jd`o6(-s+KsG^@%*W|&JVf{}H}1vIO3sSWq{b1H|{
z4%Jmhnc84h|4DKTpX#85jvMF6Z_}LqghfK&-ZY6K!6Qm@@0{NyAP9`AM%nq)D&a0k
zOB@|l;G!;_$aKjEsd+Xed$C@)we!mMi3*x`WlgTADa7SG+$ikP<<()zow7qPl_A-z
zIi6(<_21Paa*A#8#uC=bH7--?_uj)xm$d@C^`*OghVL#0Q5l8lVi-fL`+=R70O#7#
z*rAG<y6EuJt{Zp$kqo>;$X6YUL$_2uYyqW7Y2%*{J}zQ55tVO?EDfD?Y?%igS2BMp
z?gm$TewNGAqyb=nBvI>S3~ClzL+f9y;?WJuSpHIQVfZ$s{T`rEv*^=1$!*3|$0ll)
zY;#`$djH+g-OZf-O&yW^e1!R=X!w;r9#yf-ljn+6nu<K}g9j;@^%LMpiqu!OMG#=$
zjM*j|i#t8%?n-1U-T_!wVITezx!l&;7csw1VQM?64sHjrujc)mbP|9f@$<@sG89<e
zN~enmxH3gUMq!VVlNQ}ylQ9b}ERb(?4)GM{2yk;N&4XIUp5haZ%$T}<a6CLSKI&o=
z9{uVdZYnVvChXQ~TSdbqGVrQsfS5W=6d^Hi<>N0nM8-|5ih<!VhGcVn7#MQU&p<vQ
z!S6(PoXY+UkzGO<8;6HycVspWY1_QN&Z*L!fI{n^zj|g<Wnzak^k)yvxe=qJH$t-Y
zj;IA~0*0CxkKg(=>YIlsEI%eU*=LEoBoh(ZI(h!;kr6K>ZMRQX%HLxObtkOkVCi@(
zjHzm~<RLpCQ5mV-&sQ1sK*?KG-097KfERn7RFh<Z+|Tp5F+(dEwBK0EUYDsNGN;Ep
zCe3LSt!b~_Ln_TB4#widjd&cjRMe!P*~({RB$7=S|F*}+h>P@5k5KXb#l%=&Ja7M7
z7Pv(9lb~P!P`zkYpZM&H5{4t;N_W!LZM=ibjul_6f)X@a+7V4|T@+a%f7`53{r6+O
zS<dFvX2Lw1Bdaei>Yx3Yu@3o!8#vf~cJAoT65wj(6Iu&r`S^_JX}PTnuf$3@`@WBm
zZ9Zc3ae4#j1`I@gsI;AR>4gwrOyX7W$b}yd4nKo{0%{sX|Ip)!2j_`Z?xV@v9a3ce
z2^nOH>@FsJAPo(L^2*xC+052BU0c|Vw;&KQ3!F0*mf;53ywgRh>=ZrpVdscb6cK<X
z(Dr0=;z=0Rw761P{h&K|#CJV+RiRcmUQ7^eMj>zxq~A;zUsc-%aJm^-!e=WE2f-Ea
zsb$_=`Y8D!!zHLm&jTL9F#>(}6tOQb>`_!DbsnigLjvlGkh;1psh4o+tF+HhwMtbe
zpkps_BnuA3Z+Dh`Mhq_MJd;n%)98(Ja*vsLty+&SV{&oVrs@2s(gNEqhoy$wqxydR
z>Q!~d3_nrGJF1bw`;?m%cD~xEwj9{&M|6Bz{OS@nzfnnfnC$>=u&Envjy6ELoz1M9
zN%GaDn0!z#ZS@tsB01g<8kVcd4S1Y9icH`~*>ll?{hbrZxHXfwzB3)U!Obz-xF+mo
zUiq+aF$DGEFrm;D$ch<=)59bCO)&ZcI2>3pmC)$nsJGMN(MdG#dyy3&djDffwKh1Q
zz0t_h<mpQp*sirK(CpF?E63DOjTDxAV>Yajb&gD;pon=Mo&~wE;~j=&YfEab1&+gx
z!U}+`62mhgRi{r2QrRX<|FpPlWb@pJNaDFmzMZ>11wI>-YxmsP3rCXZ@N9i+ujiD&
z#kh2RmJw$&y|pP#<JuQC48%Lx$gaSK{2t5l348aBFKot9-pMy(%yTSkoqOR<8pB;`
zqLyL}2;V%MYT2Oo*}?43G@a%s=M>IG<6gfdS^Kn7dz{JEqpYpd6QG;JGx`cld5)^8
zyPXZt5O=;UcV3ZklvT}f=lFnWMm3G1k9!$tupW!8m;r4Y_P(xUsCo_Di|B?0Kz8-0
zd@2!a4X?{bjX2!oe2<;EH+wuGS*gT_{v({VHB?5FTSC=|2o#HIRq3+rfTJDSAW+14
zKYrV-1incpm*NhMSsLznG?ZC@{@nJ}%SWz4W;f&PFxtffvP6fme^{%|mrnK;+f`V!
zdN|&hvO5Z-60BrR_0rqjB<(_ncTQL%+Sk428VWbW$G4b&d1{UGy!@)EeQS6!7c748
zrh;z2n@Z#fDJW7k5g=NL@yWA5cC`!JsHiDQ#S8HQG*#?zpQ2GMzH+Jd^wJ?YBnMU@
zat(?ZKE@<YLjK+s@k3f1oma;JM04RRJ86jlN$l<YOKsXhHuZZCyI7r1(Z}Lz6O2Sd
zzFCBMbRW`-*>t|Lb54c53fR1v7K+^b+K)}O&tlv1as1McBWSv+W;AiZ&wxz*j(4R`
zq`iCFw1)_t8_7{gH0eh@Uhm6~p<%szOOv0)Nr;?;O~PEdEe6{y`6<W>H-SAxoT#0~
zmjLdQFPqC}PDcF0OU2T5e+Le5zEHT1Yv)KLBP{xn;`G7U`eB8X2|81yQrPBB;M&<<
zR5sA%V|#3Me)`Fi`X>ZRp`~$p!7&T|M+8+>%*-gnYw27*)p?jkn4OLV=QXeYCx3om
zmjw2$3cIPs!d*pf+UMn0wJXkvTQmlc%83J`xHS4h+$P>p<=>I1-$ZKWxXqs#3@AN+
zj$50w35({lzpCCSUl6?0=HBqg3i3W&FUCk1FYa1yX4pO@3|I-NgcU7w{ZUg!BAKZ(
z_flG8MXHz74oM=c^F>NGSiDm+$a-TD3O(nW{j{F1r!$C^h$^?_DaxMbXmas&Tb-dv
z=z<fR^kz7%Ny3#k^4O`RP=-;B_uk_(2lMlor+H+&p~B2A2Rrp-0bI77pZF(Fz?j=a
zWcAt~jI-R#HuBzI*_O{CT9(|Sp$32E-$I)6HbZCK`)`9k|D{j&Gb$_mp=|u6%wuNb
zUF$LCBr%XQR|-kIqn*}(dtv&=Q~i{gi+Zqb4qjLYlG`4@GiCUvg3OhoLwGo|jV4PS
z1{?es`7_o@ff#U8+u>UBH?n}1xsS9-qT#Pkp7<zc=AHSqc=W_vu(w~63J(x|#^C^A
zesFAp%K2%d*1fKF>e7=)xj=Q7^8rbz=obkgQQIVZ)`grt?+Bw_ynD!~V5j(Thxdfz
z@?WFGEJ)$|w^-ZH`<_yL?Jv0shq(^Kt>1)}qkIxPR;w+vMV^p=fo=r-{g7YMZGi7b
zMV8Y+sE*yE9iCPZPs{_N&;FOlb56XraMlW1ki)d@z=If^b+u?yx(ejoAydoT@<#X1
zC*Dx|7*PmipP@<rzGjH0UVYl(Ja{?dw?WQ~G#@0W7n;m<+r{;P@=U#a7?#VYK-H-i
z$mXgWDv8YBfmfPB87`frQyJ5+9997WL_IA#GP{b@(D1Pr1Sj5u0#ML%xO-Wd(4am<
zs(`R)#D3yWG-xqAXp;?)rAv+e=mpW5Krwx|%J9n+oAI`#JxjU+y6YsTIIP`7zz9wZ
zQ~?r<qbTy$6b<ogFZ@an8n3gWnOyDNwdQd6RwBM;%j*;N!@3pH#aqF7;Dmo)^@qbs
z5HU8!8i&DZ2+EHvU70};Fp?$GTkSC^oWdXl$0Xu~ll^;_<d>I$i6x&~Ir=Pk#}3ry
z)MLnl?n<{Rg1!~Se?*`|tjffhb6QQvTjfl3hRfeGjAYILAHr0>ta7&vS}4F<kQGaQ
z*?xjDg_w)c38;r%y%*Y4J9@6|6IJbE8}j6mblqEZ^MK6YoV#S^=YO0{xx>pifa=G-
zyjd&8eS*)=C<<!AT8Pg7NeTYX@Z~>_|9{{Q|35qDV;!}vZ|1k?VXsS3wp;v(F-c@7
zhGB(3&YvGVgon<CtZ#DvWM#?PY-n7w#B88#-0KPmoOLEUmTt3B*PpzD3lB^|ISFFU
znhqcL?Rt?or=G235(;6sjE~X57*iO24}XP)lGkS%aDxN_ocH-yZgv7oOa)J11<H=J
z3w|i+i{OcPn$G7qk=FB3AeVRn$<6qS1s=HUPYsK3?y?Se7M9et{FMCtzcIyZsBYks
zEtAcmn$TBm=QRw*OdThXcm3MOWFzjue2_kk@h0>PMVG+DvyymB<l-fg&z4ESfcqe2
zaMBgfRX0q@yls|nRa2uycvZy6hS}GYQ;3FIk9heFN|BHun(9kDx#SN0_7;@DJELvj
zQxY0*V@yCy{J}N*`VF(sgAN(4ce`k(3yzMCt_G5f)KBV@Eq%D9JfcHer2ni7oOgCG
zfZjJwI@y~o)hT4^R}(jFZJe=?fOxuj%c7**w(XXH#$;|r$tSq;rSP<o#i}nKM7^C%
zJ=2GrHG0YcJ`Ykg9G*%)cUljkSHQ348X83%6MDPXQ%q`Jek)0<7vhw&<Y<<sQdL9@
zVM%-`ER(h4wk!!+4p+^7GHoII1znE}uBB3jaoY}y%%o?a=`${mA0N!Xqf8i3m4)G-
ztPjwL&<qZ}3<!<h6A6)dI=H0!THQ3zcce<~I$H7Hgz}Caq&94QCo<8%5zRXwehwBh
zeu2kG<7PfL`HD`t#u-n%b=tLzdqiEz%%LUoYxxw3D!}#N9?pmB6+Cw}ZV=_nc~zH^
zv&@6!2>Z}j2$_DU0fqltR`Guo7yiT>c}`L;bszb}Hx|^u`s0RIP-eZ>(Ro>RdGq{r
zeJx6NBF2zsUPuQLLdi#6Z=%v+M7e)E#<`rGS<=~UKsN*bWXJ2-`=p5JGmM|TG)S7!
z>;kj8Kba+H3x%NoA89h&NRMD(Q0e3Sw_Y*{9*14nnF26@j2AUtzT6$q*4`BEtyT(h
z0?h5U7<<}|A+Qp2T=1xT3^z2CH2>_Sh^qJ90G-SUjFS(HCv_(UL-leK;_xZ~US3==
zq@UX>Yp?|n^94X$2SOq`V*9Bunn@O}b1)iz2gPEO-f(0}InZQ#yvUt?Q<XQxJ$kZi
zGVEyPovVWGjHX|}Lvh=3gkW%29K|7n#V3b82J0;82S_2=9<S%&zN!xF@NMbW>_8Y@
zTHt7|W%U*QejLWIH)mx%Np%+!Ma48s{5{kjpRd#rs?Q5f*#w0J>8h{XHPjwk^E3vd
zAoP<vFSuw5tg#mtwYd3jMc+RMM9ih~m?;|W=<RjF3p%rO4%cJ~zrJ^s1Lj5Izasm|
zFGn3DvPFj7GRB<Cdmzv`))y;1d94%b1Yce|EAt12iW}KmO;QsVc$#}y&iTKP;8aY%
zC0{~SrQS^*i2UITtu<cYZTX7Pn!ElODrX+JZtE(JQNE2pkEc1ZvqICqqHBMr`>b}%
z7~>~x`%vjxxpN~ZG4oES&uSpX-CpKMGYplx6MZ&lVLGSPsbU_NJB9X+uv@A~ZCVEx
z*cD=V<4C=>_%D*4&pv5$(IfTo2@!9M@l1|2q9VVRx*eG1QLqJoM7F;G=3hO+J0@<T
z)PuWSzB$zV!!G&FD+d<gdsXy$&oF<aRJ@;mvXxVBqb~s*uOteSj*mNQ1c7vkajQRV
z%fmQC__60o;?_1aq5=)(fz`c<s<w%-tD8A2cuYd@w5i)P_c_B)73z1bs7ip~L<{s`
z$Tz@E<M&%j<^uVLqBR4){h0sS9*8`_I&KElr9;vm4Z5s7!M*ner!uHgu~JRvU(lWq
zVD1F}7igV%gd-MUA87w@W{j5KOU4+n_i1QoW<V*<l19OO;B0g0|I6WtA52cqLt%DZ
zwRGH#q~uL2MlVj%fUKLHZ`VEeoGS2+-oar_v0V;$>i0&#L4I}^1iraXd*c@FTb#Nx
ze(2ot{#?#dX7b@@JR9boH}VEo%Ls(y8f{PIO@>FjMfSExXgv-5fk1Yzs<=LV-G{ri
zCbr8BbIBz-;;iG^9In6HXMCZG2O#xAcY1|I0&o>3B`T&T+ffaj4n2|7kBTPTizr;i
z@hC5`0@3}dIHWkd8K3h6Zf=$YikOSFj!Xirh4j$9dv{`6Pu?QChIkdZ35PnbCv&>}
z-BR(6Mg1gA7UhrEE{TiIlB0dj2h#>I_TOYYeJ=-y>ktU`wUOD<H0o(S@c~KfG>@>=
z&E7YkowZNrjnA3B%2WFi>J_2AJR(A(BJ%QlZ7#qs__z;p4f4TjKyPKNENNv6#)~aV
zjTXCP|8<m~C!Cz@W!RFQ0!d3_-Ztv|42&`4MgG-ZzLHQBk!@B<qQ;FDzJVKuHzuti
zlY4hjIU~Br#Yj{`6dtggViIU}!y;vC@w?a>pMWcZ>`TT(KMK0&O(V0Ut7PP_;PIfF
z)7#twZ<v#vZvbn8PfS<Q%WjSvzpwO#iV?oy8kK!tE0VV`S_gy6Lrz>6&wkxrebp1$
z7fqv$8TQl^*sa!eMxK5DLSEnfC%1K^=GR2kAa7WY7zNhnZGP+6YP~Q12)Pnr29&eJ
zJy50xw0R#*KavP`tnJ-3{gP1Hpm+JF&7(f#N^>O!D%(P7AG>`6$LLCyS_v44J(Cy6
z!*O^b;PT>@2<q?50Ei-7>s?rn?>O?+60vk8sV(^w7H{%XVd)iea~=Ju9$&kKG?rJ~
zFB-gO9f(RQ(6yi1G~RQhbN>-({FA#4BDl=)dsj#H|7yIU)bUHvP|JjE?iXbhNl(Y$
zUSOVH&~wOmO*?GN0_3&>*hViRXGt06Ixp;}j>$t)!Vls&d>Gv1LuZ5p$6oz>CgOY<
zN=)%bF=gmF=OCXy@^pKe$0q$z{&h9HBVAk>Glf+CI?!#!tC)VtljQfdwm#u4n0!b8
za-n!9TvmA}3!206j79Qg(htp!*zQQ>lkhO{RA9yXs(iT#sJw-bp3=v~k1KzLBi~-g
zP<ikwle1Yl)BwS7adFNnqO%<{8O(MJ#UIL|a4<bHEhdpP^+Do`Wuu$VC2#mpvnQPf
zGhi_#)pz8U!*CBs!sj*3FMTM(_k>s<K^@7X?1jpfE7vjCdCuCbF~f63MXFR+eJ}N)
z05l%Hf)0PSLP0+w73&-edoR7<aRbs52X75PxiTa~j5J;(%u~h_z#rsTX4Sp>2g^_N
zv7jN?`l6xGhI11VN#wlQdUIxJX6~c$<wl@vJOxi?Zn**G1+^5cw4o3jh{+7QphAMC
zu@`z4xP_#adb-lZ*6eaR@=iq2l{GM>DZTh9-0pkpbkb1q*aXWFt&+W25c4`r)P{vz
zLYA_b0jn}{v3GAfRgTq4!tfI0Jsl@>nVDzEF0&-z$*%PsZuFJH*omqCD1&Pg$$OWk
zN{<{I6USxu=Z4v+Ve<QUmWRc{Gs35qm3wP)KSia_l#(;PH2A?>pnvrPhA{S7l^FE*
z%6M^N^fm&_P#is5u0y?8$a#G~uv$#5(gRXC!NNJ;c$!E%#ryV|*GXMy2u|z}w_uTA
znv4!XC|Cc5hvlhTS!N5DCYab<_#R3I?AeMgaf|GaVE4-`&5f==hBp&8Z#jtK#(|*y
zifcS1t${T2aCnLiB(%5Hxx{4`3d~Jv`GpV=xIUcc$K~Wa3j_E>+FoD(<R{y)LO#K^
z7Pz?akog#YLsJidj!v{p5aNlCgSsY4sYs3!m@IrP886gZ46&K_SY94q@?zC1r5dxp
zMj-f7B3<hbGDZKnVczulu~6~$HJt=#da%$<+f208#oHWm>iT|6(UmiLN=9cjNHG|E
zL`?5T9~WD-ZjPC^P&g06vr3NsFG@`_CgZk<F#>8Vaf0K`r9x47>iXq@zp?N!YHxsr
z-rfK=4+egrNu~Xa<|~Sf<B53ts+rvC;T=^!kiK=XK5e7^nJ8B5-M+y#!Fj@uS^sKV
zg6)6!`gl1faYuK)HOWKEZYLe9)Z|H?LP_IWuuZ{b;kpm+JqIJ?t?OM`T<YQ{Nj--+
zet<~W;g;C?&}5jz+N!8eJ%^uaG)YB$7pYYqa&m6|H%>bu-_{(HJedNhl}xq$6z8?8
zp%vR*l9e1yXO_99RF{#_zq23eyz9I5(++fGV*~}}L1H>?#YL5u;GSY(H3F5w)k)#W
zmh^GTl0ao`U&ln8Df4AvqLrTEczIr@V+*#gl1=`7R-Bz}qshJxbL-dA6~P0^i)0}8
zh3CVo@f1BYoq2GeLlK|xVzCc`7C#sK0Xv(|+Kq%Jp~OwrF5FH>Mz{kXa<uP6y?=0;
zPoV3ON!QMZmx@+SU-i|3$B@8l^>?Zm)<jWKyaF3hP)Sxj9>!{N6iPvDod+>S$>{RV
z0MK~-+l&EUL-QT#dhJ{XPJO3H*%J8D*O!IKACmD2z3{9hJ$5H^ZPvFuQ@Z17r=aam
z@?vPvj)`zpz>LBvCPNVW3^wwF2Yvx~O5(4FGT`_d(dkt21tmOBHJAT?bWBkI9~)bk
z%v`~lXz{W3en-Hy%!mYVOp_4#@W(U|8h2gdzD(#XsqmPefgz<VzZ1|g=R%iw*1)45
zgManLv(Sq?Bre!@{}Am*hAY-hmVeVg{P~tn>-=Bqm+5wF6iMJw`}b6vbia(T04Xg4
zWY~89Ox)9Kg6=zeHzW&@`7pOG6Tr#AW4iOp5(+Hcla8L?PI+QO^lZ0fZUyJK!GrM3
z;!iYzvKUn};Kb5fvTg;&^1fx4uS*5=H5Slrft_PulPotJ&1fWxAW}~?6$r^e5@N`W
z6RG$5b^^L*xq0c2Kb8cK8}Yj9t^VXJO#U*KSGwIN%XX##wLb<a`mGM`<iFs=E6Q5+
z1K0jWUOJ_F^%FQv6<RGni(39Nr_x18{Nm29h+3IMJ~v=pgdFh;kwR!@W(cA9=*S2I
z614C=mDd}g!7ht#tVN+G=TMMb7GtY=8utU7D?waXq^AG7>r7|S<%#yO8g-NIL@C!N
zH#G|Z?{<_u;j&4=qBMOmQA2&L54a$}bry`z<Zm%A%TaGy2nYAUYid;KwMamm9!nj^
z?OEFftlCC`ywvT(QkI_`CpLx;ZnzGV*0STS5bo*-E`@6wiDnoJHQbg4{G<Dn-)7#(
zfB6@Jb7d2W&9kWoffT$txh|@J=m@frdN#?muLL4PSiD7(H-cuv>(oW3#LCA;+cpK2
zmY&MGN*7YnAU_$I{SLzh+r}zqj7(Eviu5~;%QwY-uF1|%ct~i#8w`7=HKKZsy7Uf0
zzYb<#zt%*u*P6>)mu(b<c?(2j1ZGvA)35~`pR3G!M9<>IG=0eK<LaV&?8{5*x#P{|
z<d$y!pmpLt<CL0Vdx>2d85&TdlKHmu_vqO(W?|x248G%DGN}-bOsXFiKD*IzD1|A3
z+OtOmk#b1&0wU2^jA>T~^P@7$8V31CT`OJWC_iD~+D}@>)jOcq)M!Z)0$ccx!!8}I
z2c~p3kx3~w<q-YlZ@ZxaOA10n^Jw+Sp6o>4x<|yP&HLnf=eQV3qWwkR`#KzJLUI;z
zM#Mn7oDh{bdp!pyUCY9Hg^Ap8hv8p5_%U@#Gfjag!?i}a13sUxJ@_Y>!osIN1qPe$
z<gkwpf1{9tp!D=wt-Lv4`Xw};e#;f=C<l}+DxoE1Fo)`syF_1n-Km=>GrfY}h--P{
zm1lu+`cW&b%~g{qkFxtn^%eih=cRo54l!S?_lg^=3z(5fZK^uP9flJkJP=&91vd?<
z5EP3^A(vp6HmyGIg#60#F-1&&WS2ixBpoGrNG5r4$I5OZ4#_;urgrh?q797D`&d3+
zj<w_n$BZrm7wy5AZ8`!s2IF&`dH<Se=^I5N4&ST9+%;k0L5c68;>Gg0+j@&dK~6SU
z%KAs2!4MHv4#ecIRXL^VB`u7+sGDdHRo6>}gy<E_fj`RRxFAJ()xjkx`_`$0#D8<w
zt+oRXm$JX&i$Y&yt9ed;3m(Ag;ny<vh{4%R{><_qoP!&d^hmH|JH12%f_QTmHr<Dc
zaOi{0ZiiA5qIBJeB%t(kihIdOh#LmMZ0ZjYNx`$|e6nknqKy@%%0!<EPtTVmk6#f_
zdupTyvuaH0lmk(_rv%gOsXbe9a&qe`FXcp4(q8Gh99IP_+`yM+iBuB|O@bc};s>EC
ziqH;~oWtTGBU`T!Lh7P&Ij&qL?3Rur{)R#MJ$F|dp07<0z~31I`b}0>=nUeqY5o8e
ze*o4K!sxI0+_uHHx>MKMHo7r2pTH}{&!XaJKZAty&MQzm8BND0dv-C7AT2c%euDd%
zXlTb6C<3^ulb`i6mSYl}Lpe?jgbpN4AB-t(pJEWgzx{F}Y~sPbKVR<{i{11+Rbbmh
zY^-s2u?V=Lu=-+1OXm>8b)^~WxS3XbjvL$IhQ>U+SR7!3)gNfnQXHVhYr+{_(Nn;Y
z4G|yaFO1ecKF8H*)ninR?1UA}ySfRwv(}r;zqT_HiYNNlczFnK90kZO=T`W(e#3o#
z*!O$;(5~e+lS9HQKyU@!SX`n!INv5MwgZ2Y${wCsB19zm`;gyyla-<mIQo@K)AuVW
zjg~nt4Bk~p9ldDoQFWtw*}xFj?tMc2iTV)QJBrSRwF5eo`AUH`3YxaYFusvZ!r<r^
ziIE{y1sg2IZ??!Dhh!wvA`q`i)fC6X*&8DHb%}bBQI+E-mK9=XH}d=~(Sk5!Bd{)%
z;O_L889pk71Mx1BQuORV;;SG3KflJ~3zw<FKS7m-@WW~_`$ECbV#wZMoNCMAD0X1K
zI;kf<^PnYwm{L_Kjpf-Co8X_f4@>C_f9Ulav2-#Y&#5=SLnK~go1i$=cyL(5;n6v%
z)lOatO8O#!wI46YT<0MvR`a*@(TbhKoPZ-(?HSm+pgbnG&Bk!(yvlz{v48c}h~?MY
zj*k(*JEa%hG!eG`0j-Oefx*EhOiW_ZL@{HjUY144?20R9Z*4JuNnvAr{QU^#VBH$8
z;2dYUf9FCtlxAAq$<uS=ijR&i9a<(x;P>yfrVadjwDGVgz{-YKdJV!gk9eeR>(A`t
zj)Toz+@OVT)9;;DD`bS5VVhVk#io(*nRF?law^i4%|7F@ZiA6@BDmHsG=6dU1M6A<
zXQ%cae#`_0Kq*s%DeLYJB^Iae<@!8wny>2^&==?Wd#B1tsr6{Y4<<wf5_FdEKm1Je
zvqPhlxDT<G*o++_o#a&C%$i=);bQTL;;pf|$cxWL7e7&)NjzjE|DeNXWYYitg|Pj<
g`@0(<)R*C1W4Z}UDYx|h{T`wyrzTr3Z4vc<0n?2Nwg3PC

literal 0
HcmV?d00001

diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
new file mode 100644
index 0000000000..1ce1cf91b4
--- /dev/null
+++ b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
@@ -0,0 +1,979 @@
+#!/usr/bin/env python
+# -*- encoding: utf-8 -*-
+
+__author__ = ["Enrique Martin Garcia", "Alejandro Sanchez Carrion"]
+__copyright__ = "Copyright 2023, PandoraFMS"
+__maintainer__ = "Operations department"
+__status__ = "Production"
+__version__= '1.0'
+
+import sys,os
+lib_dir = os.path.join(os.path.dirname(sys.argv[0]), 'lib')
+sys.path.insert(0, lib_dir)
+
+import signal
+
+# Define a function to handle the SIGTERM signal
+def sigterm_handler(signum, frame):
+    print("Received SIGTERM signal. Cleaning up...")
+    sys.exit(0)
+signal.signal(signal.SIGTERM, sigterm_handler)
+
+import argparse
+import json
+import re
+import configparser
+from queue import Queue
+from threading import Thread
+
+import pymysql
+
+###############
+## VARIABLES ##
+###############
+
+# Global variables
+output = {}
+error_level = 0
+summary = {}
+info = ""
+monitoring_data = []
+db_targets = []
+target_agents = []
+custom_queries = []
+
+# Parameters default values
+threads = 1
+agents_group_id = 10
+interval = 300
+user = ""
+password = ""
+modules_prefix = ""
+execute_custom_queries = 1
+analyze_connections = 1
+scan_databases = 0
+agent_per_database = 0
+db_agent_prefix = ""
+innodb_stats = 1
+engine_uptime = 1
+query_stats = 1
+cache_stats = 1
+
+######################
+## GLOBAL FUNCTIONS ##
+######################
+
+####
+# Parse parameter input
+###########################################
+def param_int(param=""):
+    try:
+        return int(param)
+    except:
+        return 0
+
+####
+# Get module name with prefix
+###########################################
+def get_module_name(name=""):
+    global modules_prefix
+
+    return modules_prefix+name
+
+####
+# Set error level to value
+###########################################
+def set_error_level(value=0):
+    global error_level
+
+    error_level = value
+
+####
+# Set fixed value to summary key
+###########################################
+def set_summary_value(key="", value=""):
+    global summary
+
+    summary[key] = value
+
+####
+# Add value to summary key
+###########################################
+def add_summary_value(key="", value=""):
+    global summary
+
+    if key in summary:
+        summary[key] += value
+    else:
+        set_summary_value(key, value)
+
+####
+# Set fixed value to info
+###########################################
+def set_info_value(data=""):
+    global info
+
+    info = data
+
+####
+# Add data to info
+###########################################
+def add_info_value(data=""):
+    global info
+
+    info += data
+
+####
+# Add a new agent and modules to JSON
+###########################################
+def add_monitoring_data(data={}):
+    global monitoring_data
+
+    monitoring_data.append(data)
+
+####
+# Print JSON output and exit script
+###########################################
+def print_output():
+    global output
+    global error_level
+    global summary
+    global info
+    global monitoring_data
+
+    output={}
+    if summary:
+        output["summary"] = summary
+
+    if info:
+        output["info"] = info
+
+    if monitoring_data:
+        output["monitoring_data"] = monitoring_data
+    
+    json_string = json.dumps(output)
+
+    print(json_string)
+    sys.exit(error_level)
+
+def parse_parameter(config=None, default="", key=""):
+    try:
+        return config.get("CONF", key)
+    except Exception as e:
+        return default
+
+########################
+## SPECIFIC FUNCTIONS ##
+########################
+
+####
+# Format uptime to human readable
+###########################################
+def format_uptime(seconds):
+    # Calculate the days, hours, minutes, and seconds
+    minutes, seconds = divmod(seconds, 60)
+    hours, minutes = divmod(minutes, 60)
+    days, hours = divmod(hours, 24)
+
+    # Create the formatted string
+    uptime_string = ""
+    if days > 0:
+        uptime_string += f"{days} days "
+    if hours > 0:
+        uptime_string += f"{hours} hours "
+    if minutes > 0:
+        uptime_string += f"{minutes} minutes "
+    uptime_string += f"{seconds} seconds"
+
+    return uptime_string
+
+####
+# Scan engine databases
+###########################################
+def get_databases_modules(db_object=None):
+    global interval
+    global agents_group_id
+    global modules_prefix
+    global agent_per_database
+    global db_agent_prefix
+
+    # Initialize modules
+    modules = []
+
+    if db_object:
+        # Get all databases
+        databases = db_object.run_query(f"SHOW DATABASES")[0]
+        
+        for db in databases:
+            # Get database name
+            db_name = db["Database"]
+
+            # Skip core databases.
+            if db_name == "mysql":
+                continue
+            if db_name == "information_schema":
+                continue
+            if db_name == "performance_schema":
+                continue
+            if db_name == "sys":
+                continue
+
+            # Add modules
+            modules.append({
+                "name": get_module_name(db_name+" availability"),
+                "type": "generic_proc",
+                "data": 1,
+                "description": "Database available"
+            })
+
+            modules.append({
+                "name": get_module_name(db_name+" fragmentation ratio"),
+                "type": "generic_data",
+                "data": db_object.run_query(f"SELECT AVG(DATA_FREE/(DATA_LENGTH + INDEX_LENGTH)) AS average_fragmentation_ratio FROM information_schema.tables WHERE table_schema = '{db_name}' GROUP BY table_schema", single_value=True)[0],
+                "unit": "%",
+                "description": "Database fragmentation"
+            })
+
+            modules.append({
+                "name": get_module_name(db_name+" size"),
+                "type": "generic_data",
+                "data": db_object.run_query(f"SELECT ROUND(SUM(data_length + index_length) / 1024 / 1024, 2) AS size FROM information_schema.tables WHERE table_schema = '{db_name}' GROUP BY table_schema", single_value=True)[0],
+                "unit": "MB",
+                "description": "Database size"
+            })
+
+            modules += db_object.get_custom_queries(db_name)
+
+            # Add a new agent if agent per database and reset modules
+            if agent_per_database == 1:
+                add_monitoring_data({
+                    "agent_data"  : {
+                        "agent_name"        : db_agent_prefix+db_object.agent+" "+db_name,
+                        "agent_alias"       : db_agent_prefix+db_object.agent+" "+db_name,
+                        "os"                : db_object.type,
+                        "os_version"        : db_object.version,
+                        "interval"          : interval,
+                        "id_group"          : agents_group_id,
+                        "address"           : db_object.host,
+                        "description"       : "",
+                        "parent_agent_name" : db_object.agent,
+                    },
+                    "module_data" : modules
+                })
+                add_summary_value("Total agents", 1)
+                add_summary_value("Databases agents", 1)
+                modules = []
+
+    return modules
+
+#############
+## CLASSES ##
+#############
+
+####
+# Remote database object
+###########################################
+class RemoteDB:
+    def __init__(self, target="", agent=""):
+        self.type = "MySQL"
+        self.target = target
+        self.agent = self.get_agent(agent)
+        self.parse_target()
+        self.connected = 0
+        self.connector = None
+
+        self.connect()
+
+        self.version = self.get_version()
+
+    def connect(self):
+        global user
+        global password
+
+        # Try to connect and capture errors
+        error = ""
+        try:
+            connection = pymysql.connect(
+                host=self.host,
+                port=self.port,
+                user=user,
+                password=password,
+                connect_timeout=5
+            )
+
+            # Execute a test query
+            with connection.cursor() as cursor:
+                cursor.execute("SELECT 1")
+                result = cursor.fetchone()
+                if result:
+                    self.connector = connection
+                    self.connected = 1
+                else:
+                    error = "Connection failed"
+
+        except pymysql.Error as e:
+            error = str(e)
+
+        # Add error to info if cna't connect
+        if self.connector is None:
+            add_info_value("["+self.target+"]"+error+"\n")
+            add_summary_value("Targets down", 1)
+        else:
+            add_summary_value("Targets up", 1)
+
+    def disconnect(self):
+        if self.connected == 1:
+            self.connector.close()
+
+    def run_query(self, query="", single_row=False, single_value=False, db=""):
+        if self.connected == 1 and query:
+            try:
+                with self.connector.cursor() as cursor:
+                    if db:
+                        cursor.execute(f"USE {db}")
+
+                    # Execute your query
+                    cursor.execute(query)
+
+                    # Get query fields
+                    fields = [field[0] for field in cursor.description]
+                    
+                    if single_row or single_value:
+                        # Fetch first row
+                        row = cursor.fetchone()
+
+                        if single_value:
+                            if row:
+                                # Get first field value
+                                result = str(row[0])
+                            else:
+                                result = ""
+
+                        else:
+                            # Read row
+                            row_item = {}
+                            if row:
+                                i = 0
+                                # Assign each value for each field in row item
+                                for field in fields:
+                                    row_item[field] = str(row[i])
+                                    i += 1
+
+                            result =  row_item
+
+                    else:
+                        # Fetch all rows
+                        row_items = []
+                        rows = cursor.fetchall()
+                        
+                        # Read each row
+                        for row in rows:
+                            row_item = {}
+                            i = 0
+                            # Assign each value for each field in row item
+                            for field in fields:
+                                row_item[field] = str(row[i])
+                                i += 1
+                            
+                            # Add row item to row items
+                            row_items.append(row_item)
+
+                        result = row_items
+
+                    # Close cursor and return result
+                    cursor.close()
+                    return result, True, ""
+
+            except pymysql.Error as e:
+                add_info_value("["+self.target+"]"+str(e)+"\n")
+                return None, False, str(e)
+        else:
+            return None, False, "Not connected to database"
+
+    def get_agent(self, agent=""):
+        if agent:
+            return agent
+        else:
+            return self.target.split(":")[0]
+
+    def get_version(self):
+        version = self.run_query(f"SELECT @@VERSION", single_value=True)[0]
+        if version is None:
+            version = "Discovery"
+        return version
+
+    def parse_target(self):
+        # Default values
+        self.port = 3306
+
+        if ":" in self.target:
+            target = self.target.split(":")
+            self.host = target[0]
+            self.port = int(target[1])
+
+        else:
+            self.host = self.target
+
+    def get_statistics(self):
+        global interval
+        global modules_prefix
+        global engine_uptime
+        global query_stats
+        global analyze_connections
+        global innodb_stats
+        global cache_stats
+
+        # Initialize modules
+        modules = []
+
+        # Get status values
+        status = {}
+        for var in self.run_query(f"SHOW GLOBAL STATUS")[0]:
+            status[var["Variable_name"]] = var["Value"]
+
+        # Get svariables values
+        variables = {}
+        for var in self.run_query(f"SHOW VARIABLES")[0]:
+            variables[var["Variable_name"]] = var["Value"]
+
+        # Get modules
+        if engine_uptime == 1:
+            modules.append({
+                "name": get_module_name("restart detection"),
+                "type": "generic_proc",
+                "data": 1 if int(status["Uptime"]) < 2 * interval else 0,
+                "description": f"Running for {format_uptime(int(status['Uptime']))} (value is 0 if restart detected)"
+            })
+
+        if query_stats == 1:
+            modules.append({
+                "name": get_module_name("queries"),
+                "type": "generic_data_inc_abs",
+                "data": status["Queries"],
+                "description": ""
+            })
+
+            modules.append({
+                "name": get_module_name("query rate"),
+                "type": "generic_data_inc",
+                "data": status["Queries"],
+            })
+
+            modules.append({
+                "name": get_module_name("query select"),
+                "type": "generic_data_inc_abs",
+                "data": status["Com_select"],
+            })
+
+            modules.append({
+                "name": get_module_name("query update"),
+                "type": "generic_data_inc_abs",
+                "data": status["Com_update"]
+            })
+
+            modules.append({
+                "name": get_module_name("query delete"),
+                "type": "generic_data_inc_abs",
+                "data": status["Com_delete"]
+            })
+
+            modules.append({
+                "name": get_module_name("query insert"),
+                "type": "generic_data_inc_abs",
+                "data": status["Com_insert"]
+            })
+
+        if analyze_connections == 1:
+            modules.append({
+                "name": get_module_name("current connections"),
+                "type": "generic_data",
+                "data": status["Threads_connected"],
+                "description": "Current connections to MySQL engine (global)",
+                "min_warning": int(variables["max_connections"]) * 0.90,
+                "min_critical": int(variables["max_connections"]) * 0.98
+            })
+
+            modules.append({
+                "name": get_module_name("connections ratio"),
+                "type": "generic_data",
+                "data": (int(status["Max_used_connections"]) / int(variables["max_connections"])) * 100,
+                "description": "This metric indicates if you could run out soon of connection slots.",
+                "unit": "%",
+                "min_warning": 85,
+                "min_critical": 90
+            })
+
+            modules.append({
+                "name": get_module_name("aborted connections"),
+                "type": "generic_data_inc_abs",
+                "data": status["Aborted_connects"],
+                "description": "This metric indicates if the ammount of aborted connections in the last interval."
+            })
+
+        if innodb_stats == 1:
+            modules.append({
+                "name": get_module_name("Innodb buffer pool pages total"),
+                "type": "generic_data",
+                "data": status["Innodb_data_written"],
+                "description": "Total number of pages in the buffer pool (utilization)."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb buffer pool read requests"),
+                "type": "generic_data_inc_abs",
+                "data": status["Innodb_buffer_pool_read_requests"],
+                "description": "Reads from innodb buffer pool."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb buffer pool write requests"),
+                "type": "generic_data_inc_abs",
+                "data": status["Innodb_buffer_pool_write_requests"],
+                "description": "Writes in innodb buffer pool."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb disk reads"),
+                "type": "generic_data_inc_abs",
+                "data": status["Innodb_data_reads"],
+                "description": "Amount of read operations."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb disk writes"),
+                "type": "generic_data_inc_abs",
+                "data": status["Innodb_data_writes"],
+                "description": "Amount of write operations."
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb disk data read"),
+                "type": "generic_data_inc_abs",
+                "data": int(status["Innodb_data_read"])/(1024*1024),
+                "description": "Amount of data read from disk.",
+                "unit": "MB"
+            })
+
+            modules.append({
+                "name": get_module_name("Innodb disk data written"),
+                "type": "generic_data_inc_abs",
+                "data": int(status["Innodb_data_written"])/(1024*1024),
+                "description": "Amount of data written to disk.",
+                "unit": "MB"
+            })
+
+        if cache_stats == 1:
+            modules.append({
+                "name": get_module_name("query cache enabled"),
+                "type": "generic_proc",
+                "data": 1 if variables["have_query_cache"] == "YES" else 0,
+                "description": "Query cache enabled." if variables["have_query_cache"] == "YES" else "Query cache not found, check query_cache_type in your my.cnf"
+            })
+
+            if variables["have_query_cache"] == "YES":
+                if int(status["Qcache_hits"]) + int(status["Qcache_inserts"]) + int(status["Qcache_not_cached"]) != 0:
+                    ratio = 100 * int(status["Qcache_hits"]) / int(status["Qcache_inserts"]) + int(status["Qcache_inserts"]) + int(status["Qcache_not_cached"])
+                    
+                    modules.append({
+                        "name": get_module_name("query hit ratio"),
+                        "type": "generic_data",
+                        "data": ratio,
+                        "unit": "%"
+                    })
+
+        return modules
+
+    def get_custom_queries(self, db=""):
+        global modules_prefix
+        global execute_custom_queries
+        global custom_queries
+
+        # Initialize modules
+        modules = []
+
+        # Run if enabled execute custom queries
+        if execute_custom_queries == 1:
+
+            # Run each custom query
+            for custom_query in custom_queries:
+
+                # Run if target database match
+                if "all" in custom_query["target_databases"] or len(custom_query["target_databases"]) == 0 or db in custom_query["target_databases"]:
+                    
+                    # Skipt if empty required parameters
+                    if "target" not in custom_query or not custom_query["target"]:
+                        continue
+                    if "name" not in custom_query or not custom_query["name"]:
+                        continue
+
+                    # Reset error
+                    error = ""
+                    # Reset result
+                    data = ""
+
+                    # Prepare parameters
+                    sql = custom_query["target"]
+                    sql = re.sub(r'\$__self_dbname', db, sql)
+                    
+                    module_name = custom_query["name"]
+                    module_name = re.sub(r'\$__self_dbname', db, module_name)
+                    
+                    desc = custom_query["description"] if "description" in custom_query else ""
+                    datatype = custom_query["datatype"] if "datatype" in custom_query else "generic_data_string"
+
+                    # Set single query
+                    if "operation" not in custom_query or not custom_query["operation"]:
+                        single_value=False
+                    elif custom_query["operation"] == "value":
+                        single_value=True
+                    else:
+                        single_value=False
+
+                    # Adjust module type if needed
+                    if(single_value == False):
+                        datatype = "generic_data_string"
+
+                    # Run query
+                    rows, status, err = self.run_query(sql, single_value=single_value, db=db)
+
+                    # Get query data
+                    if rows is not None:
+                        if isinstance(rows, list):
+                            for row in rows:
+                                for key, value in row.items():
+                                    data += str(value) + "|"
+                                # Remove last pipe
+                                data = data[:-1]
+                                data += "\n"
+                        else:
+                            data = rows
+
+                    # Adjust data
+                    if data == "" and "string" in datatype:
+                        data = "No output."
+
+                    # Verify query status and set description
+                    if status == False:
+                        desc = "Failed to execute query: " + err;
+                    elif desc == "":
+                        desc = "Execution OK"
+
+                    modules.append({
+                        "name": get_module_name(module_name),
+                        "type": datatype,
+                        "data": data,
+                        "description": desc,
+                        "min_critical": custom_query["min_critical"] if "min_critical" in custom_query else "",
+                        "max_critical": custom_query["max_critical"] if "max_critical" in custom_query else "",
+                        "min_warning": custom_query["min_warning"] if "min_warning" in custom_query else "",
+                        "max_warning": custom_query["max_warning"] if "max_warning" in custom_query else "",
+                        "critical_inverse": custom_query["critical_inverse"] if "critical_inverse" in custom_query else "",
+                        "warning_inverse": custom_query["warning_inverse"] if "warning_inverse" in custom_query else "",
+                        "str_warning": custom_query["str_warning"] if "str_warning" in custom_query else "",
+                        "str_critical": custom_query["str_critical"] if "str_critical" in custom_query else "",
+                        "module_interval":custom_query["module_interval"] if "module_interval" in custom_query else ""
+                    })
+
+        return modules
+
+    def get_modules(self):
+        # Initialize modules
+        modules = []
+        
+        # Get statistics modules
+        modules += self.get_statistics()
+        # Get custom queries modules
+        modules += self.get_custom_queries()
+
+        return modules
+
+#############
+## THREADS ##
+#############
+
+####
+# Function per agent
+###########################################
+def monitor_items(thread_agents=[]):
+    global target_agents
+    global interval
+    global agents_group_id
+
+    for thread_agent in thread_agents:
+        # Get target agent
+        agent = ""
+        if 0 <= thread_agent["id"] < len(target_agents):
+            agent = target_agents[thread_agent["id"]]
+    
+        # Initialize modules
+        modules=[]
+    
+        # Get DB object
+        db_object = RemoteDB(thread_agent["db_target"], agent)
+    
+        # Add connection module
+        modules.append({
+            "name"        : get_module_name(db_object.type+" connection"),
+            "type"        : "generic_proc",
+            "description" : db_object.type+" availability",
+            "data"        : db_object.connected
+        })
+    
+        # Get global connection modules if connected
+        if(db_object.connected == 1):
+            modules += db_object.get_modules()
+    
+            # Get engine databases modules
+            if scan_databases == 1:
+                modules += get_databases_modules(db_object)
+    
+        # Add new monitoring data
+        add_monitoring_data({
+            "agent_data"  : {
+                "agent_name"  : db_object.agent,
+                "agent_alias" : db_object.agent,
+                "os"          : db_object.type,
+                "os_version"  : db_object.version,
+                "interval"    : interval,
+                "id_group"    : agents_group_id,
+                "address"     : db_object.host,
+                "description" : "",
+            },
+            "module_data" : modules
+        })
+        add_summary_value("Total agents", 1)
+        add_summary_value("Target agents", 1)
+    
+        # Disconnect from target
+        db_object.disconnect()
+
+
+####
+# Function per thread
+###########################################
+def monitor_threads():
+    global q
+
+    thread_agents=q.get()
+    try:
+        monitor_items(thread_agents)
+        q.task_done()
+    except Exception as e:
+        q.task_done()
+        set_error_level(1)
+        add_info_value("Error while runing single thread: "+str(e)+"\n")
+
+
+##########
+## MAIN ##
+##########
+
+# Parse arguments
+parser = argparse.ArgumentParser(description= "", formatter_class=argparse.RawTextHelpFormatter)
+parser.add_argument('--conf', help='Path to configuration file', metavar='<conf_file>', required=True)
+parser.add_argument('--target_databases', help='Path to target databases file', metavar='<databases_file>', required=True)
+parser.add_argument('--target_agents', help='Path to target agents file', metavar='<agents_file>', required=False)
+parser.add_argument('--custom_queries', help='Path to custom queries file', metavar='<custom_queries_file>', required=False)
+args = parser.parse_args()
+
+# Parse configuration file
+config = configparser.ConfigParser()
+try:
+    config.read_string('[CONF]\n' + open(args.conf).read())
+except Exception as e:
+    set_error_level(1)
+    set_info_value("Error while reading configuration file file: "+str(e)+"\n")
+    print_output()
+
+agents_group_id        = param_int(parse_parameter(config, agents_group_id, "agents_group_id"))
+interval               = param_int(parse_parameter(config, interval, "interval"))
+user                   = parse_parameter(config, user, "user")
+password               = parse_parameter(config, password, "password")
+threads                = param_int(parse_parameter(config, threads, "threads"))
+modules_prefix         = parse_parameter(config, modules_prefix, "modules_prefix")
+execute_custom_queries = param_int(parse_parameter(config, execute_custom_queries, "execute_custom_queries"))
+analyze_connections    = param_int(parse_parameter(config, analyze_connections, "analyze_connections"))
+scan_databases         = param_int(parse_parameter(config, scan_databases, "scan_databases"))
+agent_per_database     = param_int(parse_parameter(config, agent_per_database, "agent_per_database"))
+db_agent_prefix        = parse_parameter(config, db_agent_prefix, "db_agent_prefix")
+innodb_stats           = param_int(parse_parameter(config, innodb_stats, "innodb_stats"))
+engine_uptime          = param_int(parse_parameter(config, engine_uptime, "engine_uptime"))
+query_stats            = param_int(parse_parameter(config, query_stats, "query_stats"))
+cache_stats            = param_int(parse_parameter(config, cache_stats, "cache_stats"))
+
+# Parse rest of files
+t_file = args.target_databases
+a_file = args.target_agents
+cq_file = args.custom_queries
+
+# Parse DB targets
+if t_file:
+    try:
+        lines = open(t_file, "r")
+        for line in lines:
+            line = line.strip()
+            # SKIP EMPTY AND COMMENTED LINES
+            if not line:
+                continue
+            if line == "\n":
+                continue
+            if line[0] == '#':
+                continue
+
+            db_targets += [element.strip() for element in line.split(",")]
+        lines = []
+
+    except Exception as e:
+        set_error_level(1)
+        add_info_value("Error while reading DB targets file: "+str(e)+"\n")
+
+# Parse target agents
+if a_file:
+    try:
+        lines = open(a_file, "r")
+        for line in lines:
+            line = line.strip()
+            # SKIP EMPTY AND COMMENTED LINES
+            if not line:
+                continue
+            if line == "\n":
+                continue
+            if line[0] == '#':
+                continue
+
+            target_agents += [element.strip() for element in line.split(",")]
+        lines = []
+
+    except Exception as e:
+        set_error_level(1)
+        add_info_value("Error while reading target agents file: "+str(e)+"\n")
+
+# Parse custom queries
+if cq_file:
+    try:
+        custom_query = {}
+        save = False
+
+        lines = open(cq_file, "r")
+        for line in lines:
+            line = line.strip()
+            # SKIP EMPTY AND COMMENTED LINES
+            if not line:
+                continue
+            if line == "\n":
+                continue
+            if line[0] == '#':
+                continue
+
+            # Start parsing module
+            if line == "check_begin":
+                save = True
+                continue
+
+            # Read next line until new module
+            if save == False:
+                continue
+
+            # End parsing module
+            if line == "check_end":
+                if "target_databases" not in custom_query:
+                    custom_query["target_databases"] = ["all"]
+                custom_queries.append(custom_query)
+                custom_query = {}
+                save = False
+                continue
+
+            # Get line key value pair
+            key, value = [element.strip() for element in line.split(maxsplit=1)]
+
+            # Add target databases to query
+            if key == "target_databases":
+                custom_query["target_databases"] = [element.strip() for element in value.split(",")]
+                continue
+
+            # Skip not select queries
+            if key == "target" and not re.search(r'^select', value, re.IGNORECASE):
+                add_info_value("Removed ["+value+"] from custom queries, only select queries are allowed.\n")
+                continue
+
+            # Add other parameters to query
+            custom_query[key] = value
+        lines = []
+
+    except Exception as e:
+        set_error_level(1)
+        add_info_value("Error while reading custom queries file: "+str(e)+"\n")
+
+# Verify required arguments
+required_params = True
+if not user:
+    add_info_value("Parameter [user] not defined\n")
+    required_params = False
+if not password:
+    add_info_value("Parameter [password] not defined\n")
+    required_params = False
+if not db_targets:
+    add_info_value("Database targets not defined\n")
+    required_params = False
+
+if required_params == False:
+    set_error_level(1)
+    print_output()
+
+# Initialize summary
+set_summary_value("Total agents", 0)
+set_summary_value("Target agents", 0)
+set_summary_value("Databases agents", 0)
+set_summary_value("Targets up", 0)
+set_summary_value("Targets down", 0)
+
+# Assign threads
+if threads > len(db_targets):
+    threads = len(db_targets)
+
+if threads < 1:
+    threads = 1
+
+# Distribute agents per thread
+agents_per_thread = []
+thread = 0
+i = 0
+for db_target in db_targets:
+    if not 0 <= thread < len(agents_per_thread):
+        agents_per_thread.append([])
+    
+    agents_per_thread[thread].append({
+            "id": i,
+            "db_target": db_target
+        })
+
+    thread += 1
+    if thread >= threads:
+        thread=0
+
+    i += 1
+
+# Run threads
+try:
+    q=Queue()
+    for n_thread in range(threads) :
+        q.put(agents_per_thread[n_thread])
+
+    run_threads = []
+    for n_thread in range(threads):
+        t = Thread(target=monitor_threads)
+        t.daemon=True
+        t.start()
+        run_threads.append(t)
+
+    for t in run_threads:
+        t.join()
+
+    q.join()
+
+except Exception as e:
+    add_info_value("Error while running threads: "+str(e)+"\n")
+    set_error_level(1)
+
+# Print output and exit script
+print_output()
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req
new file mode 100644
index 0000000000..057adf64fc
--- /dev/null
+++ b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req
@@ -0,0 +1,2 @@
+[deps]
+pymysql
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini b/pandora_console/extras/discovery/DiscoveryApplicationsMigrateCodes.ini
similarity index 100%
rename from pandora_console/attachment/discovery/DiscoveryApplicationsMigrateCodes.ini
rename to pandora_console/extras/discovery/DiscoveryApplicationsMigrateCodes.ini
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.aws.ec2.sql b/pandora_console/extras/discovery/migration_scripts/migrate.aws.ec2.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.aws.ec2.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.aws.ec2.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.aws.rds.sql b/pandora_console/extras/discovery/migration_scripts/migrate.aws.rds.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.aws.rds.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.aws.rds.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.aws.s3.sql b/pandora_console/extras/discovery/migration_scripts/migrate.aws.s3.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.aws.s3.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.aws.s3.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.azure.sql b/pandora_console/extras/discovery/migration_scripts/migrate.azure.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.azure.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.azure.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.db2.sql b/pandora_console/extras/discovery/migration_scripts/migrate.db2.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.db2.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.db2.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.gcp.ce.sql b/pandora_console/extras/discovery/migration_scripts/migrate.gcp.ce.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.gcp.ce.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.gcp.ce.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.mssql.sql b/pandora_console/extras/discovery/migration_scripts/migrate.mssql.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.mssql.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.mssql.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.mysql.sql b/pandora_console/extras/discovery/migration_scripts/migrate.mysql.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.mysql.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.mysql.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.oracle.sql b/pandora_console/extras/discovery/migration_scripts/migrate.oracle.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.oracle.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.oracle.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.sap.deset.sql b/pandora_console/extras/discovery/migration_scripts/migrate.sap.deset.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.sap.deset.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.sap.deset.sql
diff --git a/pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql b/pandora_console/extras/discovery/migration_scripts/migrate.vmware.sql
similarity index 100%
rename from pandora_console/attachment/discovery/migration_scripts/migrate.vmware.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.vmware.sql
diff --git a/pandora_console/godmode/wizards/ManageExtensions.class.php b/pandora_console/godmode/wizards/ManageExtensions.class.php
index 94f1a2826b..ffbf5f738a 100644
--- a/pandora_console/godmode/wizards/ManageExtensions.class.php
+++ b/pandora_console/godmode/wizards/ManageExtensions.class.php
@@ -1151,7 +1151,7 @@ class ManageExtensions extends HTML
 
         // 2. If app not migrated yet, check DiscoveryApplicationsMigrateCodes.ini
         // Path to the INI file
-        $filePath = $this->path.'/DiscoveryApplicationsMigrateCodes.ini';
+        $filePath = $config['homedir'].'/extras/discovery/DiscoveryApplicationsMigrateCodes.ini';
 
         // Parse the INI file
         $migrationCodes = parse_ini_file($filePath, true);
@@ -1347,7 +1347,7 @@ class ManageExtensions extends HTML
 
         $scriptName = preg_replace('/^pandorafms\.(\w+)$/m', 'migrate.$1.sql', $shortName);
 
-        $script_path = $config['attachment_store'].'/discovery/migration_scripts/'.$scriptName;
+        $script_path = $config['homedir'].'/extras/discovery/migration_scripts/'.$scriptName;
         try {
             $res = db_process_file($script_path, true);
         } catch (\Exception $e) {

From 134aa82330f952bba2f4516d952c46c4fd5610f7 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Tue, 3 Oct 2023 12:12:50 +0200
Subject: [PATCH 083/116] Deleted mysql app added by mistake

---
 .../pandorafms.mysql/discovery_definition.ini | 172 ---
 .../discovery/pandorafms.mysql/logo.png       | Bin 12952 -> 0 bytes
 .../pandorafms.mysql/pandora_mysql.py         | 979 ------------------
 .../pandorafms.mysql/pandora_mysql.req        |   2 -
 4 files changed, 1153 deletions(-)
 delete mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
 delete mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/logo.png
 delete mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
 delete mode 100644 pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req

diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini b/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
deleted file mode 100644
index 7345f5f1d9..0000000000
--- a/pandora_console/attachment/discovery/pandorafms.mysql/discovery_definition.ini
+++ /dev/null
@@ -1,172 +0,0 @@
-[discovery_extension_definition]
-
-short_name = pandorafms.mysql
-section = app
-name = MySQL
-version = "1.0"
-description = Monitor MySQL databases
-
-execution_file[_exec1_] = "bin/pandora_mysql"
-
-exec[] = "'_exec1_' --conf '_tempfileConf_' --target_databases '_tempfileTargetDatabases_' --target_agents '_tempfileTargetAgents_' --custom_queries '_tempfileCustomQueries_'"
-
-default_value[_dbstrings_] = ""
-default_value[_dbuser_] = ""
-default_value[_dbpass_] = ""
-default_value[_threads_] = 1
-default_value[_engineAgent_] = ""
-default_value[_prefixModuleName_] = ""
-default_value[_scanDatabases_] = false
-default_value[_agentPerDatabase_] = false
-default_value[_prefixAgent_] = ""
-default_value[_checkUptime_] = true
-default_value[_queryStats_] = true
-default_value[_checkConnections_] = true
-default_value[_checkInnodb_] = true
-default_value[_checkCache_] = true
-default_value[_executeCustomQueries_] = true
-default_value[_customQueries_] = "# =======================================================================
-# Custom queries definition guide
-# =======================================================================
-# Definition example
-# check_begin
-# target_databases  database where should be executed, default (all)
-# name              custom name chosen by the user
-# description       custom description chosen by the user
-# operation         value | full,
-#                     value returns a simple value,
-#                     full returns all rows in a string
-# target            query to be executed,
-#                     you can use reserved word $__self_dbname to
-#                     reference current analyzed database name
-# datatype          module datatype, could be:
-#                     generic_data | generic_data_string |
-#                     generic_proc
-# min_warning       minimum warning
-# max_warning       maximum warning
-# min_critical      minimum critical
-# max_critical      maximum critical
-# inverse_warning   if set to 1, warning thresholds has inverse meaning
-# inverse_critical  if set to 1, warning thresholds has inverse meaning
-# str_warning       string warning
-# str_critical      string critical
-# unit              unit to be displayed in module view
-# interval          module interval
-# parent            module parent for this module (name)
-# check_end
-
-"
-
-[config_steps]
-
-name[1] = MySQL Base
-custom_fields[1] = mysql_base
-fields_columns[1] = 1
-
-name[2] = MySQL Detailed
-custom_fields[2] = mysql_detailed
-fields_columns[2] = 1
-
-[mysql_base]
-
-macro[1] = _dbstrings_
-name[1] = MySQL target strings
-tip[1] = "SERVER:PORT, comma separated or line by line, as many targets as you need. Use # symbol to comment a line."
-type[1] = textarea
-
-macro[2] = _dbuser_
-name[2] = User
-type[2] = string
-
-macro[3] = _dbpass_
-name[3] = Password
-type[3] = password
-
-[mysql_detailed]
-
-macro[1] = _threads_
-name[1] = Max threads
-type[1] = number
-mandatory_field[1] = false
-
-macro[2] = _engineAgent_
-name[2] = Target agent
-tip[2] = Defines a target agent where this task will store data detected, if you have defined multiple targets, define a comma separated or line by line list of names here or leave in blank to use server IP address/FQDN.
-type[2] = textarea
-mandatory_field[2] = false
-
-macro[3] = _prefixModuleName_
-name[3] = Custom module prefix
-tip[3] = Defines a custom prefix to be concatenated before module names generated by this task.
-type[3] = string
-mandatory_field[3] = false
-
-macro[4] = _scanDatabases_
-name[4] = Scan databases
-type[4] = checkbox
-
-macro[5] = _agentPerDatabase_
-name[5] = Create agent per database
-type[5] = checkbox
-
-macro[6] = _prefixAgent_
-name[6] = Custom database agent prefix
-tip[6] = Defines a custom prefix to be concatenated before database agent names generated by this task.
-type[6] = string
-show_on_true[6] = _agentPerDatabase_
-mandatory_field[6] = false
-
-macro[7] = _checkUptime_
-name[7] = Check engine uptime
-type[7] = checkbox
-
-macro[8] = _queryStats_
-name[8] = Retrieve query statistics
-type[8] = checkbox
-
-macro[9] = _checkConnections_
-name[9] = Analyze connections
-type[9] = checkbox
-
-macro[10] = _checkInnodb_
-name[10] = Retrieve InnoDB statistics
-type[10] = checkbox
-
-macro[11] = _checkCache_
-name[11] = Retrieve cache statistics
-type[11] = checkbox
-
-macro[12] = _executeCustomQueries_
-name[12] = Execute custom queries
-type[12] = checkbox
-
-macro[13] = _customQueries_
-name[13] = Custom queries
-tip[13] = Define here your custom queries.
-type[13] = textarea
-show_on_true[13] = _executeCustomQueries_
-mandatory_field[13] = false
-
-[tempfile_confs]
-
-file[_tempfileConf_] = "agents_group_id = __taskGroupID__
-interval = __taskInterval__
-user = _dbuser_
-password = _dbpass_
-threads = _threads_
-modules_prefix = _prefixModuleName_
-execute_custom_queries = _executeCustomQueries_
-analyze_connections = _checkConnections_
-scan_databases = _scanDatabases_
-agent_per_database = _agentPerDatabase_
-db_agent_prefix = _prefixAgent_
-innodb_stats = _checkInnodb_
-engine_uptime = _checkUptime_
-query_stats = _queryStats_
-cache_stats = _checkCache_"
-
-file[_tempfileTargetDatabases_] = "_dbstrings_"
-
-file[_tempfileTargetAgents_] = "_engineAgent_"
-
-file[_tempfileCustomQueries_] = "_customQueries_"
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/logo.png b/pandora_console/attachment/discovery/pandorafms.mysql/logo.png
deleted file mode 100644
index b24a84ceea0c3ad8590bc2721ebda93108a0b8f7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 12952
zcmb`uRZv||@Gc6$-QC^Y-GjTkySsaU;O@FZut3lqWaDgL2iM^41b2s<->F;oRGs^O
zxmEX}Yjw}+hv})A)$@JbD_%oQ9u1io843ytO;JHs>)#XjpCH0RK|w2x@_+wlz}icx
zN<l$2rJ}rA!u_)aZ4DIdR8^sv|LKTO&~c7Xu>UmZe?t6EprAgLefob!fMqcMTmSE+
zFBwn<3W^&=QC3PP0QxKxA%t}3?qkv{lQX5M-$$`k<yYh-LmD9>RV**%Z5dRnnpY+&
zEo`*w2$L*y6y0i8nj~w7A_K`+X*9a;nA!uS_|lXB>*xyDBxrwQQ0vW0kJyBhoBPB0
z{M5qQA<e{iu={A(gX*$?>fF40n{-)-)Xm}?o`E_<1%k4`FUOmjBhOudQV<}#Y<BZ3
z8r>W-k$VTyS*D*ptl;>G7RqdI*5h%v?bSZ@w%;b!u3pL@Y=M;XhkuHTC(|7E2>@m}
ztvE8!O8Y)WP3p#2gjvrKGQ?hrJDk{&jmTGYk`-BGxjYaI(X<M2oH4*sq*b$A=6Kxu
zJ4evK&W%(w#cqnZq65y8+CF%)Wo<93AydCvtPISppD6q@Y~|_q-B{X=xHUY8m;A+%
zAUXB)+L_qn_pXVE_H;;#ct{i%wf(~!pNvSUY|VG_)OWsMURpnjnd-sYxN*Xm{9!#5
zVzF#infJ?#0o^^}ci8(B6%s6=g80?n%+;70h={Oun=2U{0ya@4tLO7WwZj++NE4A7
z=6kp%m_ZDt!eZn<xKiI`UQmE>bGAk42#EZvF;Tw&ai>7DxR>wqUHf|>iy0c|UhK{0
zDK-~2T%vjEAyNeOUo&s7_he(t+o_`zST$xql9kJEW|@6Us(!IzDr8LA$i?SMKET;j
zF%~%12E(0$zgtt)HuKRaYT{!82+@ZrW9l~O@N_A%Rmk~Y#?+P38Km`S`(@)>GkXCb
z8x~tVEiEhGC)wOMC|vlKVw2~5L7sa}Gusm?qy%tyQbDV58lECm*}w3<Q%3Zh7y^lU
zl`QwT`)gpRh<g-E$M(IP8MmU{;CzA@1(u<!?3qnUlTlx;N0^<AKieoxIf~{osr6oK
zmZdU9&w?}@K}lX}i<YH<KU=Uj^6Iw^z<}macqHe(Y$mJlo3X#r`U1Le7apSst-ric
z-9(i{Q-@t(B&!I8q<J=#Opl0}Q{sWTg+#_FmKUfUMNyEh9*)=pvv<(A_qF`rL^UX8
zerqb@0)g6JQF}DX$l(qSqHvmAvvfqn%cGXxMkJgGe>y)uq!Ag;)=8IBpH2(QKZ)Xp
zqKU?uogpbv>X5yncii$g7P%u&aC8<Sj}r#dX)Fg>MXlbIB1eBRmhtST3aX4kHuU;A
zRaW^_@qi;msT_tIkoO9Z`d;~Cwnc-fM>XuKoD(l^ARYtbolX;zDs#bhg~#!UzY?7e
z1G#|FqOtzzQ0LLo%r9aKiGZ<y!eD3n3(Mo4R{xN>Ud*9U!kdoT)cGRXB%3cKebSFq
zFK{*0M@C0~^4?1L&h{w5m(h5JfxWn^&RCNw^S%=@ncK^ZsOl~Md4eAGcOPL^o8U9-
z0X4=4+U>fH&+6Ftp3lvV)T;Z;u(+R)p<^PXC8^SG5Yyz0-WOKUkc$j<WN2iFdrboE
z$2Nq_9hfZ)O}%I3nbLYY8a^ky!Alyt{x-^n{@{@P%=ilL%$G=ckdb&Xl3OEc`^#TF
zZ49r@)Hi2q<hJOtN*lqTD9lP9P{hcKH(*4xr}51PW1mvogLdh<wPK7-yPpk58YKH%
zfS^5k*`wC7IVa=nsaUCE!PsnA1F}Lzo>f`QbYU<ZN)IV2rHskwiq>+NOb)KW%^P{w
z*K+(0wX79!&mPa)ZdMIZcF3%)!M!w&C8^TtPZ1NaM>h8~zL8Rk@hKl+OK|+_i!+WV
zJROFTy~W6!>Jl}UeO-|iZ3kUO&Z14&p;neX*Bo?f9Qf3XR6a{LsZYu;Otu*xH@Yh6
zqX**jX~jQG)$FV1*#8Ak-YweP9i%CkOJyzd1Gx<Q?jS6^gAMjs>~82Ey-0(D%vjNT
z)G&>Wj6@CYa0o0lEwCo{{8*V_v1{gVs7tgXzv3T|_)F8De3pXX4iQn$$S<@)zVwdS
z*2YkPhi@(u#)Sx^z*~na?8K!^M{f1<_M2IOk(xLYfu$+W-@I*tgnQ>{n!kT4=RCM}
zF<tywkoc4%G5w0{<Xx<Q8(nHVNSef$CaLo~jl_|WkzrAP=2_osC^h?aBcvsXBpef{
zQm=b-@FZ2rnlvE#C5(Swhi_jo-|bnbG*=oX68Ve2N{ht-u%Ih!jniP3H(pGfIZ78_
zWQzP8*X9IP#?6Sc%7Fez`@%tS-fx@_xxk}I<DGRIW86u^OozJuYUGn|5>G5r{szbn
z5II@sB^~glsO>hG=npKFs?Q^3t2K3<P~e+nQJwY9D33Z(>CAYoE~6+b$!EijAq!8+
zpU9_~`m91ZvD7KMX}{#)O@hsQh!c>ucU9M4_l832e7Q82kH7NFvKpq`?4UUe%e+`<
zzLU2M5|L7VO=TtHNe?mbH(;8Zdzz5;9$r;ATGTHk!ym{S2TrtKTf<>g=a2DRJ*Q6l
z@EcE;k0Gn$g?RypKj;L~BwQrCjuF<olWq!N4G>AL9&hN&Nj}C8hQYtk@^>4{V^EpT
z7QdVe=)<`a__!CjV+yl6BpnO1G`C4qan_(-f$zq4Jz~D%TRivcmCeyq$y{mFP)LCz
zQc^Y@b0>sVVk*_&>uA~${djSU<l(YVj;Wo}Th3z`KR-nU4|B2^k<PU*qpoy@viu3V
zHvna;ipS!cD!~m4m`zyV2^M-W6aB9<`rp@<@qZuL|I9u5PwUNOdj~Y%a}xAA`}i;V
z(`noXPFEdWY)&jqi8GnSIC1Al`8f^I9M~HM3<6+J)2hZgtfDM<A_V+{QG`{dI8INd
zBz9Y!mFrZOq84+{$!lg{F_+)1MOFoZ&{@abi-c=v$Q<$zOW<khh2;BQSJD9|qbiC1
zAi?$hvnELt%HNeIS9=umf(?V*R@PxO!=f8FMf~2D{p+GGB{g97l3weEc}MEv4N$P?
zG?3osrS<-7o$pNTr>i*KaPlG4w3wB-zI)%sZX~^j13eMMR@aiB-S)$f{&KphC(<$F
zir15VO2#(9{tyGH>=-ciSFhNS@Tzw<o#9#-PJ~j;(&%|K@YPdg!!)U*5uwNiS5;b4
zg;eQ#UAKYpm2QIioVB5R25cu^G2PJWSr@PjL#89A1fP^_chh$`41bZDVtxw<KChfR
zLtLMrwBO73OO9&^>JaS*{V~r0=fA4{=`VDc7+YD<5Y4PBmhg!<SefIh4AqB{oPZLr
z;+QnTT``|-_QW~ySxQ`Yjg3{YSD?fe<Q-=*ZvU%O$NVJn6rXc(lkAq~{bauk#b#5<
zW{_-)+VpS<ux756U+n#3p!-bF-_|LE><|<XQnz&qCtQ;yXYqoV$Gh}-I?O!LPtegc
zgRD-)5|t)*3#S*m%p7r=Vw6_G<|zQ_K)SF83aUIyKE33ZhU;%fAAZUOAn?&yNr`&-
zcSh15Gah_MGkDdLcw!b$x8maW72Y&AarY&{NkPtzWF8Te&*E3ha{1+6YP{)gs6{rX
zTuY@+4jofJq>+5dxvSHw6jw$2#)H&?E%$0suCsb_rM@5hxP1+s!-cYSw;xZtac~2!
z>32tiS}u4;gF8nn?4z{~-ln9J#`KTi!nQXIekW(w+9I0SN9(fYGnah&mwnwlE1_TG
z>W5VmpJy0fGK6@y$yN`SVpavZ)0>i|t$WAF8(gGX0`aqoH|99SY})zOs3h+>{fNct
zp87x+3dz>aQ2?>itS}o#%ju+EM`J-~ZsR!ZXo$ASjSI!_f`(`k?j*Gkkw(>RkhF82
z>GRcSpf))lA8~2b86if&7|1fNqWk)w##d$T;$JfF9%X`o3Tgu6A6i6CG?o;nG6)TZ
zqkw7WE^r$}c%S+Kz7NtT>|^}mIcX9R_Mo&q#S^SWUw$SN^UF_t?+FU4^}oD?PDQa8
zG7G1V)Y23QDGjy7OnB;Hk5bOsp$r$7*}k?)+rS1o!wJq*J7R_NvGadQl90gX4mkcr
z&DI5E8^EAs-*@ggN6ty3$!#-<8v2Wr##Ds9r`FSvQu=xeX1?BJ2nl`Iyuu+J&ZPLt
z%1O@q#k{?7#tkowv`4@`Pv05evNQ2+J`vXSXJRrGB{`#wg-ru~SkXN{_TR^N#JEjE
z6297i(Ei}4gT2rE-CIWF41wP?RdGd6?H@}nAF^x5h*AFV9WGdiDz0EaH4=P9b=;)(
zIY7bP;7IEw=y0<y$Kue@6;3s|LSc6(p?ckeC#d7D6?jVT<?E~Bd}}n`lWbA7eJZa(
z;*2*D8Hep^F-7BGQ~3n%d#R&cFY?j8aCq~@>psXsv*p(VLhADmi_vm~E>z{QL9Fz&
z&;i$jB{w`00rt(;`3m3+DH~oO?SSW4S_vq)QaMAn=Y@z58dmsCvyiP_bTVAM?*?xd
z`D-l9^*dX@GAKX@f?_z>=68!|<ZcR*-oLGv#eON4%{yM<-mc=ueJNlCqnyGnuya$<
zm@sbS52&+;+Ct|cz@e3Aw~d(hG(L$$#UA|i+nyS(NSWE-ilIr@OBj3GSoR_g`D1B^
zmgUG4Hkk;U92lfQBWpuIV4l=<qRRc=!%FajS$U-<zSY@$Cpe_%JGy#`Ojrn2u~n7j
zR#>{+?yJHzWOtYX4sAjgTQF*at?edatgGf^Lxu+^Gl+J9XdIeQHp2dy%uC`nE8Nam
z35R~{VKCLKh)fQzAdJw$rIA6Je(>Jmc8*=xcvJAuOPi+CfuBN|JP?t+yDWg$$xoQj
zbP%Tl6u$Qx%&Y`+HpFry=)WyGrM(p-3o7n<nF%y<<-2!6hwww}FLkQ0%+*kiHJ%^<
zMP7jxYPOrWw{*x>6oSey=wr_(<GZlC*pUNc0gP%b>ghxe=`tX6ry(zgz|r8UgMctR
zB58v8@ai(FHTe{Hgj!?D_WcXjYs-($BCLW~-3Tk7O3TYJ8~}-XB!J(0kmdo-FK~wU
z@|os7@iJu<dfX<1$^x5s%nfba>8(So1aX(rwDu!%VFT(p^%#zdjFF(iGUX#x((9lx
zo#a(Qu#b0Vu`8}+)R&&V*zv7q&ewOEJ49`~E8#AYMmdqcW#mM_zmBy8({SN2G(_hO
zexIzJA~uFCg6ZmP3dmWI*%dh^=B)-L^d(mVd8k(IEU#4P^F8((GOur$nw->6$xR4p
zpxSjp<^Ma0{vSE@e>NrAsiqso(BMy`nvnmJ2=ae}V<BF!Hoo>{IYjv2H?YNeI`@>E
z^Tj_n!%SLF{3AnPZJW_?iek*o?p%ky!9pHVwl0Q#q_wh2wkSSO;_97Ga7JX()*4Et
zcS0I96nwFVu=M@exzeKQw2ysjc{hSywE|BIs9<K+oBX!9Iq-gw#pkmWBJ|5Mtg)$=
zFC-NfRL9P{$@w^OjIS{Z&EU!Q{AuA6xg=$9-eLRjUnZtR(U-q)r|FV7f=8GiiRhjz
z_~Ysd2>7lRM#ihJ=1^gn3%NarPw~fl!J|C6llQz{><}=2vJCXb<Moh#p|X#hVbiLG
z?L+~e-HR%aco;Pzn3D_!`l(?W<Vv;r@0x(Z8~KHAm4LA6=!Dy%{lIZ~g}|tsJNeaT
z0sg0#92;kKavM8CGs-<@mpn}J-6BTfc5z>o<3`ruCA>5>YbP&uq~FVQiQhC+T4-SE
zH8~n@B;vH6B}Docs>4n@d49&Jd`o6(-s+KsG^@%*W|&JVf{}H}1vIO3sSWq{b1H|{
z4%Jmhnc84h|4DKTpX#85jvMF6Z_}LqghfK&-ZY6K!6Qm@@0{NyAP9`AM%nq)D&a0k
zOB@|l;G!;_$aKjEsd+Xed$C@)we!mMi3*x`WlgTADa7SG+$ikP<<()zow7qPl_A-z
zIi6(<_21Paa*A#8#uC=bH7--?_uj)xm$d@C^`*OghVL#0Q5l8lVi-fL`+=R70O#7#
z*rAG<y6EuJt{Zp$kqo>;$X6YUL$_2uYyqW7Y2%*{J}zQ55tVO?EDfD?Y?%igS2BMp
z?gm$TewNGAqyb=nBvI>S3~ClzL+f9y;?WJuSpHIQVfZ$s{T`rEv*^=1$!*3|$0ll)
zY;#`$djH+g-OZf-O&yW^e1!R=X!w;r9#yf-ljn+6nu<K}g9j;@^%LMpiqu!OMG#=$
zjM*j|i#t8%?n-1U-T_!wVITezx!l&;7csw1VQM?64sHjrujc)mbP|9f@$<@sG89<e
zN~enmxH3gUMq!VVlNQ}ylQ9b}ERb(?4)GM{2yk;N&4XIUp5haZ%$T}<a6CLSKI&o=
z9{uVdZYnVvChXQ~TSdbqGVrQsfS5W=6d^Hi<>N0nM8-|5ih<!VhGcVn7#MQU&p<vQ
z!S6(PoXY+UkzGO<8;6HycVspWY1_QN&Z*L!fI{n^zj|g<Wnzak^k)yvxe=qJH$t-Y
zj;IA~0*0CxkKg(=>YIlsEI%eU*=LEoBoh(ZI(h!;kr6K>ZMRQX%HLxObtkOkVCi@(
zjHzm~<RLpCQ5mV-&sQ1sK*?KG-097KfERn7RFh<Z+|Tp5F+(dEwBK0EUYDsNGN;Ep
zCe3LSt!b~_Ln_TB4#widjd&cjRMe!P*~({RB$7=S|F*}+h>P@5k5KXb#l%=&Ja7M7
z7Pv(9lb~P!P`zkYpZM&H5{4t;N_W!LZM=ibjul_6f)X@a+7V4|T@+a%f7`53{r6+O
zS<dFvX2Lw1Bdaei>Yx3Yu@3o!8#vf~cJAoT65wj(6Iu&r`S^_JX}PTnuf$3@`@WBm
zZ9Zc3ae4#j1`I@gsI;AR>4gwrOyX7W$b}yd4nKo{0%{sX|Ip)!2j_`Z?xV@v9a3ce
z2^nOH>@FsJAPo(L^2*xC+052BU0c|Vw;&KQ3!F0*mf;53ywgRh>=ZrpVdscb6cK<X
z(Dr0=;z=0Rw761P{h&K|#CJV+RiRcmUQ7^eMj>zxq~A;zUsc-%aJm^-!e=WE2f-Ea
zsb$_=`Y8D!!zHLm&jTL9F#>(}6tOQb>`_!DbsnigLjvlGkh;1psh4o+tF+HhwMtbe
zpkps_BnuA3Z+Dh`Mhq_MJd;n%)98(Ja*vsLty+&SV{&oVrs@2s(gNEqhoy$wqxydR
z>Q!~d3_nrGJF1bw`;?m%cD~xEwj9{&M|6Bz{OS@nzfnnfnC$>=u&Envjy6ELoz1M9
zN%GaDn0!z#ZS@tsB01g<8kVcd4S1Y9icH`~*>ll?{hbrZxHXfwzB3)U!Obz-xF+mo
zUiq+aF$DGEFrm;D$ch<=)59bCO)&ZcI2>3pmC)$nsJGMN(MdG#dyy3&djDffwKh1Q
zz0t_h<mpQp*sirK(CpF?E63DOjTDxAV>Yajb&gD;pon=Mo&~wE;~j=&YfEab1&+gx
z!U}+`62mhgRi{r2QrRX<|FpPlWb@pJNaDFmzMZ>11wI>-YxmsP3rCXZ@N9i+ujiD&
z#kh2RmJw$&y|pP#<JuQC48%Lx$gaSK{2t5l348aBFKot9-pMy(%yTSkoqOR<8pB;`
zqLyL}2;V%MYT2Oo*}?43G@a%s=M>IG<6gfdS^Kn7dz{JEqpYpd6QG;JGx`cld5)^8
zyPXZt5O=;UcV3ZklvT}f=lFnWMm3G1k9!$tupW!8m;r4Y_P(xUsCo_Di|B?0Kz8-0
zd@2!a4X?{bjX2!oe2<;EH+wuGS*gT_{v({VHB?5FTSC=|2o#HIRq3+rfTJDSAW+14
zKYrV-1incpm*NhMSsLznG?ZC@{@nJ}%SWz4W;f&PFxtffvP6fme^{%|mrnK;+f`V!
zdN|&hvO5Z-60BrR_0rqjB<(_ncTQL%+Sk428VWbW$G4b&d1{UGy!@)EeQS6!7c748
zrh;z2n@Z#fDJW7k5g=NL@yWA5cC`!JsHiDQ#S8HQG*#?zpQ2GMzH+Jd^wJ?YBnMU@
zat(?ZKE@<YLjK+s@k3f1oma;JM04RRJ86jlN$l<YOKsXhHuZZCyI7r1(Z}Lz6O2Sd
zzFCBMbRW`-*>t|Lb54c53fR1v7K+^b+K)}O&tlv1as1McBWSv+W;AiZ&wxz*j(4R`
zq`iCFw1)_t8_7{gH0eh@Uhm6~p<%szOOv0)Nr;?;O~PEdEe6{y`6<W>H-SAxoT#0~
zmjLdQFPqC}PDcF0OU2T5e+Le5zEHT1Yv)KLBP{xn;`G7U`eB8X2|81yQrPBB;M&<<
zR5sA%V|#3Me)`Fi`X>ZRp`~$p!7&T|M+8+>%*-gnYw27*)p?jkn4OLV=QXeYCx3om
zmjw2$3cIPs!d*pf+UMn0wJXkvTQmlc%83J`xHS4h+$P>p<=>I1-$ZKWxXqs#3@AN+
zj$50w35({lzpCCSUl6?0=HBqg3i3W&FUCk1FYa1yX4pO@3|I-NgcU7w{ZUg!BAKZ(
z_flG8MXHz74oM=c^F>NGSiDm+$a-TD3O(nW{j{F1r!$C^h$^?_DaxMbXmas&Tb-dv
z=z<fR^kz7%Ny3#k^4O`RP=-;B_uk_(2lMlor+H+&p~B2A2Rrp-0bI77pZF(Fz?j=a
zWcAt~jI-R#HuBzI*_O{CT9(|Sp$32E-$I)6HbZCK`)`9k|D{j&Gb$_mp=|u6%wuNb
zUF$LCBr%XQR|-kIqn*}(dtv&=Q~i{gi+Zqb4qjLYlG`4@GiCUvg3OhoLwGo|jV4PS
z1{?es`7_o@ff#U8+u>UBH?n}1xsS9-qT#Pkp7<zc=AHSqc=W_vu(w~63J(x|#^C^A
zesFAp%K2%d*1fKF>e7=)xj=Q7^8rbz=obkgQQIVZ)`grt?+Bw_ynD!~V5j(Thxdfz
z@?WFGEJ)$|w^-ZH`<_yL?Jv0shq(^Kt>1)}qkIxPR;w+vMV^p=fo=r-{g7YMZGi7b
zMV8Y+sE*yE9iCPZPs{_N&;FOlb56XraMlW1ki)d@z=If^b+u?yx(ejoAydoT@<#X1
zC*Dx|7*PmipP@<rzGjH0UVYl(Ja{?dw?WQ~G#@0W7n;m<+r{;P@=U#a7?#VYK-H-i
z$mXgWDv8YBfmfPB87`frQyJ5+9997WL_IA#GP{b@(D1Pr1Sj5u0#ML%xO-Wd(4am<
zs(`R)#D3yWG-xqAXp;?)rAv+e=mpW5Krwx|%J9n+oAI`#JxjU+y6YsTIIP`7zz9wZ
zQ~?r<qbTy$6b<ogFZ@an8n3gWnOyDNwdQd6RwBM;%j*;N!@3pH#aqF7;Dmo)^@qbs
z5HU8!8i&DZ2+EHvU70};Fp?$GTkSC^oWdXl$0Xu~ll^;_<d>I$i6x&~Ir=Pk#}3ry
z)MLnl?n<{Rg1!~Se?*`|tjffhb6QQvTjfl3hRfeGjAYILAHr0>ta7&vS}4F<kQGaQ
z*?xjDg_w)c38;r%y%*Y4J9@6|6IJbE8}j6mblqEZ^MK6YoV#S^=YO0{xx>pifa=G-
zyjd&8eS*)=C<<!AT8Pg7NeTYX@Z~>_|9{{Q|35qDV;!}vZ|1k?VXsS3wp;v(F-c@7
zhGB(3&YvGVgon<CtZ#DvWM#?PY-n7w#B88#-0KPmoOLEUmTt3B*PpzD3lB^|ISFFU
znhqcL?Rt?or=G235(;6sjE~X57*iO24}XP)lGkS%aDxN_ocH-yZgv7oOa)J11<H=J
z3w|i+i{OcPn$G7qk=FB3AeVRn$<6qS1s=HUPYsK3?y?Se7M9et{FMCtzcIyZsBYks
zEtAcmn$TBm=QRw*OdThXcm3MOWFzjue2_kk@h0>PMVG+DvyymB<l-fg&z4ESfcqe2
zaMBgfRX0q@yls|nRa2uycvZy6hS}GYQ;3FIk9heFN|BHun(9kDx#SN0_7;@DJELvj
zQxY0*V@yCy{J}N*`VF(sgAN(4ce`k(3yzMCt_G5f)KBV@Eq%D9JfcHer2ni7oOgCG
zfZjJwI@y~o)hT4^R}(jFZJe=?fOxuj%c7**w(XXH#$;|r$tSq;rSP<o#i}nKM7^C%
zJ=2GrHG0YcJ`Ykg9G*%)cUljkSHQ348X83%6MDPXQ%q`Jek)0<7vhw&<Y<<sQdL9@
zVM%-`ER(h4wk!!+4p+^7GHoII1znE}uBB3jaoY}y%%o?a=`${mA0N!Xqf8i3m4)G-
ztPjwL&<qZ}3<!<h6A6)dI=H0!THQ3zcce<~I$H7Hgz}Caq&94QCo<8%5zRXwehwBh
zeu2kG<7PfL`HD`t#u-n%b=tLzdqiEz%%LUoYxxw3D!}#N9?pmB6+Cw}ZV=_nc~zH^
zv&@6!2>Z}j2$_DU0fqltR`Guo7yiT>c}`L;bszb}Hx|^u`s0RIP-eZ>(Ro>RdGq{r
zeJx6NBF2zsUPuQLLdi#6Z=%v+M7e)E#<`rGS<=~UKsN*bWXJ2-`=p5JGmM|TG)S7!
z>;kj8Kba+H3x%NoA89h&NRMD(Q0e3Sw_Y*{9*14nnF26@j2AUtzT6$q*4`BEtyT(h
z0?h5U7<<}|A+Qp2T=1xT3^z2CH2>_Sh^qJ90G-SUjFS(HCv_(UL-leK;_xZ~US3==
zq@UX>Yp?|n^94X$2SOq`V*9Bunn@O}b1)iz2gPEO-f(0}InZQ#yvUt?Q<XQxJ$kZi
zGVEyPovVWGjHX|}Lvh=3gkW%29K|7n#V3b82J0;82S_2=9<S%&zN!xF@NMbW>_8Y@
zTHt7|W%U*QejLWIH)mx%Np%+!Ma48s{5{kjpRd#rs?Q5f*#w0J>8h{XHPjwk^E3vd
zAoP<vFSuw5tg#mtwYd3jMc+RMM9ih~m?;|W=<RjF3p%rO4%cJ~zrJ^s1Lj5Izasm|
zFGn3DvPFj7GRB<Cdmzv`))y;1d94%b1Yce|EAt12iW}KmO;QsVc$#}y&iTKP;8aY%
zC0{~SrQS^*i2UITtu<cYZTX7Pn!ElODrX+JZtE(JQNE2pkEc1ZvqICqqHBMr`>b}%
z7~>~x`%vjxxpN~ZG4oES&uSpX-CpKMGYplx6MZ&lVLGSPsbU_NJB9X+uv@A~ZCVEx
z*cD=V<4C=>_%D*4&pv5$(IfTo2@!9M@l1|2q9VVRx*eG1QLqJoM7F;G=3hO+J0@<T
z)PuWSzB$zV!!G&FD+d<gdsXy$&oF<aRJ@;mvXxVBqb~s*uOteSj*mNQ1c7vkajQRV
z%fmQC__60o;?_1aq5=)(fz`c<s<w%-tD8A2cuYd@w5i)P_c_B)73z1bs7ip~L<{s`
z$Tz@E<M&%j<^uVLqBR4){h0sS9*8`_I&KElr9;vm4Z5s7!M*ner!uHgu~JRvU(lWq
zVD1F}7igV%gd-MUA87w@W{j5KOU4+n_i1QoW<V*<l19OO;B0g0|I6WtA52cqLt%DZ
zwRGH#q~uL2MlVj%fUKLHZ`VEeoGS2+-oar_v0V;$>i0&#L4I}^1iraXd*c@FTb#Nx
ze(2ot{#?#dX7b@@JR9boH}VEo%Ls(y8f{PIO@>FjMfSExXgv-5fk1Yzs<=LV-G{ri
zCbr8BbIBz-;;iG^9In6HXMCZG2O#xAcY1|I0&o>3B`T&T+ffaj4n2|7kBTPTizr;i
z@hC5`0@3}dIHWkd8K3h6Zf=$YikOSFj!Xirh4j$9dv{`6Pu?QChIkdZ35PnbCv&>}
z-BR(6Mg1gA7UhrEE{TiIlB0dj2h#>I_TOYYeJ=-y>ktU`wUOD<H0o(S@c~KfG>@>=
z&E7YkowZNrjnA3B%2WFi>J_2AJR(A(BJ%QlZ7#qs__z;p4f4TjKyPKNENNv6#)~aV
zjTXCP|8<m~C!Cz@W!RFQ0!d3_-Ztv|42&`4MgG-ZzLHQBk!@B<qQ;FDzJVKuHzuti
zlY4hjIU~Br#Yj{`6dtggViIU}!y;vC@w?a>pMWcZ>`TT(KMK0&O(V0Ut7PP_;PIfF
z)7#twZ<v#vZvbn8PfS<Q%WjSvzpwO#iV?oy8kK!tE0VV`S_gy6Lrz>6&wkxrebp1$
z7fqv$8TQl^*sa!eMxK5DLSEnfC%1K^=GR2kAa7WY7zNhnZGP+6YP~Q12)Pnr29&eJ
zJy50xw0R#*KavP`tnJ-3{gP1Hpm+JF&7(f#N^>O!D%(P7AG>`6$LLCyS_v44J(Cy6
z!*O^b;PT>@2<q?50Ei-7>s?rn?>O?+60vk8sV(^w7H{%XVd)iea~=Ju9$&kKG?rJ~
zFB-gO9f(RQ(6yi1G~RQhbN>-({FA#4BDl=)dsj#H|7yIU)bUHvP|JjE?iXbhNl(Y$
zUSOVH&~wOmO*?GN0_3&>*hViRXGt06Ixp;}j>$t)!Vls&d>Gv1LuZ5p$6oz>CgOY<
zN=)%bF=gmF=OCXy@^pKe$0q$z{&h9HBVAk>Glf+CI?!#!tC)VtljQfdwm#u4n0!b8
za-n!9TvmA}3!206j79Qg(htp!*zQQ>lkhO{RA9yXs(iT#sJw-bp3=v~k1KzLBi~-g
zP<ikwle1Yl)BwS7adFNnqO%<{8O(MJ#UIL|a4<bHEhdpP^+Do`Wuu$VC2#mpvnQPf
zGhi_#)pz8U!*CBs!sj*3FMTM(_k>s<K^@7X?1jpfE7vjCdCuCbF~f63MXFR+eJ}N)
z05l%Hf)0PSLP0+w73&-edoR7<aRbs52X75PxiTa~j5J;(%u~h_z#rsTX4Sp>2g^_N
zv7jN?`l6xGhI11VN#wlQdUIxJX6~c$<wl@vJOxi?Zn**G1+^5cw4o3jh{+7QphAMC
zu@`z4xP_#adb-lZ*6eaR@=iq2l{GM>DZTh9-0pkpbkb1q*aXWFt&+W25c4`r)P{vz
zLYA_b0jn}{v3GAfRgTq4!tfI0Jsl@>nVDzEF0&-z$*%PsZuFJH*omqCD1&Pg$$OWk
zN{<{I6USxu=Z4v+Ve<QUmWRc{Gs35qm3wP)KSia_l#(;PH2A?>pnvrPhA{S7l^FE*
z%6M^N^fm&_P#is5u0y?8$a#G~uv$#5(gRXC!NNJ;c$!E%#ryV|*GXMy2u|z}w_uTA
znv4!XC|Cc5hvlhTS!N5DCYab<_#R3I?AeMgaf|GaVE4-`&5f==hBp&8Z#jtK#(|*y
zifcS1t${T2aCnLiB(%5Hxx{4`3d~Jv`GpV=xIUcc$K~Wa3j_E>+FoD(<R{y)LO#K^
z7Pz?akog#YLsJidj!v{p5aNlCgSsY4sYs3!m@IrP886gZ46&K_SY94q@?zC1r5dxp
zMj-f7B3<hbGDZKnVczulu~6~$HJt=#da%$<+f208#oHWm>iT|6(UmiLN=9cjNHG|E
zL`?5T9~WD-ZjPC^P&g06vr3NsFG@`_CgZk<F#>8Vaf0K`r9x47>iXq@zp?N!YHxsr
z-rfK=4+egrNu~Xa<|~Sf<B53ts+rvC;T=^!kiK=XK5e7^nJ8B5-M+y#!Fj@uS^sKV
zg6)6!`gl1faYuK)HOWKEZYLe9)Z|H?LP_IWuuZ{b;kpm+JqIJ?t?OM`T<YQ{Nj--+
zet<~W;g;C?&}5jz+N!8eJ%^uaG)YB$7pYYqa&m6|H%>bu-_{(HJedNhl}xq$6z8?8
zp%vR*l9e1yXO_99RF{#_zq23eyz9I5(++fGV*~}}L1H>?#YL5u;GSY(H3F5w)k)#W
zmh^GTl0ao`U&ln8Df4AvqLrTEczIr@V+*#gl1=`7R-Bz}qshJxbL-dA6~P0^i)0}8
zh3CVo@f1BYoq2GeLlK|xVzCc`7C#sK0Xv(|+Kq%Jp~OwrF5FH>Mz{kXa<uP6y?=0;
zPoV3ON!QMZmx@+SU-i|3$B@8l^>?Zm)<jWKyaF3hP)Sxj9>!{N6iPvDod+>S$>{RV
z0MK~-+l&EUL-QT#dhJ{XPJO3H*%J8D*O!IKACmD2z3{9hJ$5H^ZPvFuQ@Z17r=aam
z@?vPvj)`zpz>LBvCPNVW3^wwF2Yvx~O5(4FGT`_d(dkt21tmOBHJAT?bWBkI9~)bk
z%v`~lXz{W3en-Hy%!mYVOp_4#@W(U|8h2gdzD(#XsqmPefgz<VzZ1|g=R%iw*1)45
zgManLv(Sq?Bre!@{}Am*hAY-hmVeVg{P~tn>-=Bqm+5wF6iMJw`}b6vbia(T04Xg4
zWY~89Ox)9Kg6=zeHzW&@`7pOG6Tr#AW4iOp5(+Hcla8L?PI+QO^lZ0fZUyJK!GrM3
z;!iYzvKUn};Kb5fvTg;&^1fx4uS*5=H5Slrft_PulPotJ&1fWxAW}~?6$r^e5@N`W
z6RG$5b^^L*xq0c2Kb8cK8}Yj9t^VXJO#U*KSGwIN%XX##wLb<a`mGM`<iFs=E6Q5+
z1K0jWUOJ_F^%FQv6<RGni(39Nr_x18{Nm29h+3IMJ~v=pgdFh;kwR!@W(cA9=*S2I
z614C=mDd}g!7ht#tVN+G=TMMb7GtY=8utU7D?waXq^AG7>r7|S<%#yO8g-NIL@C!N
zH#G|Z?{<_u;j&4=qBMOmQA2&L54a$}bry`z<Zm%A%TaGy2nYAUYid;KwMamm9!nj^
z?OEFftlCC`ywvT(QkI_`CpLx;ZnzGV*0STS5bo*-E`@6wiDnoJHQbg4{G<Dn-)7#(
zfB6@Jb7d2W&9kWoffT$txh|@J=m@frdN#?muLL4PSiD7(H-cuv>(oW3#LCA;+cpK2
zmY&MGN*7YnAU_$I{SLzh+r}zqj7(Eviu5~;%QwY-uF1|%ct~i#8w`7=HKKZsy7Uf0
zzYb<#zt%*u*P6>)mu(b<c?(2j1ZGvA)35~`pR3G!M9<>IG=0eK<LaV&?8{5*x#P{|
z<d$y!pmpLt<CL0Vdx>2d85&TdlKHmu_vqO(W?|x248G%DGN}-bOsXFiKD*IzD1|A3
z+OtOmk#b1&0wU2^jA>T~^P@7$8V31CT`OJWC_iD~+D}@>)jOcq)M!Z)0$ccx!!8}I
z2c~p3kx3~w<q-YlZ@ZxaOA10n^Jw+Sp6o>4x<|yP&HLnf=eQV3qWwkR`#KzJLUI;z
zM#Mn7oDh{bdp!pyUCY9Hg^Ap8hv8p5_%U@#Gfjag!?i}a13sUxJ@_Y>!osIN1qPe$
z<gkwpf1{9tp!D=wt-Lv4`Xw};e#;f=C<l}+DxoE1Fo)`syF_1n-Km=>GrfY}h--P{
zm1lu+`cW&b%~g{qkFxtn^%eih=cRo54l!S?_lg^=3z(5fZK^uP9flJkJP=&91vd?<
z5EP3^A(vp6HmyGIg#60#F-1&&WS2ixBpoGrNG5r4$I5OZ4#_;urgrh?q797D`&d3+
zj<w_n$BZrm7wy5AZ8`!s2IF&`dH<Se=^I5N4&ST9+%;k0L5c68;>Gg0+j@&dK~6SU
z%KAs2!4MHv4#ecIRXL^VB`u7+sGDdHRo6>}gy<E_fj`RRxFAJ()xjkx`_`$0#D8<w
zt+oRXm$JX&i$Y&yt9ed;3m(Ag;ny<vh{4%R{><_qoP!&d^hmH|JH12%f_QTmHr<Dc
zaOi{0ZiiA5qIBJeB%t(kihIdOh#LmMZ0ZjYNx`$|e6nknqKy@%%0!<EPtTVmk6#f_
zdupTyvuaH0lmk(_rv%gOsXbe9a&qe`FXcp4(q8Gh99IP_+`yM+iBuB|O@bc};s>EC
ziqH;~oWtTGBU`T!Lh7P&Ij&qL?3Rur{)R#MJ$F|dp07<0z~31I`b}0>=nUeqY5o8e
ze*o4K!sxI0+_uHHx>MKMHo7r2pTH}{&!XaJKZAty&MQzm8BND0dv-C7AT2c%euDd%
zXlTb6C<3^ulb`i6mSYl}Lpe?jgbpN4AB-t(pJEWgzx{F}Y~sPbKVR<{i{11+Rbbmh
zY^-s2u?V=Lu=-+1OXm>8b)^~WxS3XbjvL$IhQ>U+SR7!3)gNfnQXHVhYr+{_(Nn;Y
z4G|yaFO1ecKF8H*)ninR?1UA}ySfRwv(}r;zqT_HiYNNlczFnK90kZO=T`W(e#3o#
z*!O$;(5~e+lS9HQKyU@!SX`n!INv5MwgZ2Y${wCsB19zm`;gyyla-<mIQo@K)AuVW
zjg~nt4Bk~p9ldDoQFWtw*}xFj?tMc2iTV)QJBrSRwF5eo`AUH`3YxaYFusvZ!r<r^
ziIE{y1sg2IZ??!Dhh!wvA`q`i)fC6X*&8DHb%}bBQI+E-mK9=XH}d=~(Sk5!Bd{)%
z;O_L889pk71Mx1BQuORV;;SG3KflJ~3zw<FKS7m-@WW~_`$ECbV#wZMoNCMAD0X1K
zI;kf<^PnYwm{L_Kjpf-Co8X_f4@>C_f9Ulav2-#Y&#5=SLnK~go1i$=cyL(5;n6v%
z)lOatO8O#!wI46YT<0MvR`a*@(TbhKoPZ-(?HSm+pgbnG&Bk!(yvlz{v48c}h~?MY
zj*k(*JEa%hG!eG`0j-Oefx*EhOiW_ZL@{HjUY144?20R9Z*4JuNnvAr{QU^#VBH$8
z;2dYUf9FCtlxAAq$<uS=ijR&i9a<(x;P>yfrVadjwDGVgz{-YKdJV!gk9eeR>(A`t
zj)Toz+@OVT)9;;DD`bS5VVhVk#io(*nRF?law^i4%|7F@ZiA6@BDmHsG=6dU1M6A<
zXQ%cae#`_0Kq*s%DeLYJB^Iae<@!8wny>2^&==?Wd#B1tsr6{Y4<<wf5_FdEKm1Je
zvqPhlxDT<G*o++_o#a&C%$i=);bQTL;;pf|$cxWL7e7&)NjzjE|DeNXWYYitg|Pj<
g`@0(<)R*C1W4Z}UDYx|h{T`wyrzTr3Z4vc<0n?2Nwg3PC

diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
deleted file mode 100644
index 1ce1cf91b4..0000000000
--- a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.py
+++ /dev/null
@@ -1,979 +0,0 @@
-#!/usr/bin/env python
-# -*- encoding: utf-8 -*-
-
-__author__ = ["Enrique Martin Garcia", "Alejandro Sanchez Carrion"]
-__copyright__ = "Copyright 2023, PandoraFMS"
-__maintainer__ = "Operations department"
-__status__ = "Production"
-__version__= '1.0'
-
-import sys,os
-lib_dir = os.path.join(os.path.dirname(sys.argv[0]), 'lib')
-sys.path.insert(0, lib_dir)
-
-import signal
-
-# Define a function to handle the SIGTERM signal
-def sigterm_handler(signum, frame):
-    print("Received SIGTERM signal. Cleaning up...")
-    sys.exit(0)
-signal.signal(signal.SIGTERM, sigterm_handler)
-
-import argparse
-import json
-import re
-import configparser
-from queue import Queue
-from threading import Thread
-
-import pymysql
-
-###############
-## VARIABLES ##
-###############
-
-# Global variables
-output = {}
-error_level = 0
-summary = {}
-info = ""
-monitoring_data = []
-db_targets = []
-target_agents = []
-custom_queries = []
-
-# Parameters default values
-threads = 1
-agents_group_id = 10
-interval = 300
-user = ""
-password = ""
-modules_prefix = ""
-execute_custom_queries = 1
-analyze_connections = 1
-scan_databases = 0
-agent_per_database = 0
-db_agent_prefix = ""
-innodb_stats = 1
-engine_uptime = 1
-query_stats = 1
-cache_stats = 1
-
-######################
-## GLOBAL FUNCTIONS ##
-######################
-
-####
-# Parse parameter input
-###########################################
-def param_int(param=""):
-    try:
-        return int(param)
-    except:
-        return 0
-
-####
-# Get module name with prefix
-###########################################
-def get_module_name(name=""):
-    global modules_prefix
-
-    return modules_prefix+name
-
-####
-# Set error level to value
-###########################################
-def set_error_level(value=0):
-    global error_level
-
-    error_level = value
-
-####
-# Set fixed value to summary key
-###########################################
-def set_summary_value(key="", value=""):
-    global summary
-
-    summary[key] = value
-
-####
-# Add value to summary key
-###########################################
-def add_summary_value(key="", value=""):
-    global summary
-
-    if key in summary:
-        summary[key] += value
-    else:
-        set_summary_value(key, value)
-
-####
-# Set fixed value to info
-###########################################
-def set_info_value(data=""):
-    global info
-
-    info = data
-
-####
-# Add data to info
-###########################################
-def add_info_value(data=""):
-    global info
-
-    info += data
-
-####
-# Add a new agent and modules to JSON
-###########################################
-def add_monitoring_data(data={}):
-    global monitoring_data
-
-    monitoring_data.append(data)
-
-####
-# Print JSON output and exit script
-###########################################
-def print_output():
-    global output
-    global error_level
-    global summary
-    global info
-    global monitoring_data
-
-    output={}
-    if summary:
-        output["summary"] = summary
-
-    if info:
-        output["info"] = info
-
-    if monitoring_data:
-        output["monitoring_data"] = monitoring_data
-    
-    json_string = json.dumps(output)
-
-    print(json_string)
-    sys.exit(error_level)
-
-def parse_parameter(config=None, default="", key=""):
-    try:
-        return config.get("CONF", key)
-    except Exception as e:
-        return default
-
-########################
-## SPECIFIC FUNCTIONS ##
-########################
-
-####
-# Format uptime to human readable
-###########################################
-def format_uptime(seconds):
-    # Calculate the days, hours, minutes, and seconds
-    minutes, seconds = divmod(seconds, 60)
-    hours, minutes = divmod(minutes, 60)
-    days, hours = divmod(hours, 24)
-
-    # Create the formatted string
-    uptime_string = ""
-    if days > 0:
-        uptime_string += f"{days} days "
-    if hours > 0:
-        uptime_string += f"{hours} hours "
-    if minutes > 0:
-        uptime_string += f"{minutes} minutes "
-    uptime_string += f"{seconds} seconds"
-
-    return uptime_string
-
-####
-# Scan engine databases
-###########################################
-def get_databases_modules(db_object=None):
-    global interval
-    global agents_group_id
-    global modules_prefix
-    global agent_per_database
-    global db_agent_prefix
-
-    # Initialize modules
-    modules = []
-
-    if db_object:
-        # Get all databases
-        databases = db_object.run_query(f"SHOW DATABASES")[0]
-        
-        for db in databases:
-            # Get database name
-            db_name = db["Database"]
-
-            # Skip core databases.
-            if db_name == "mysql":
-                continue
-            if db_name == "information_schema":
-                continue
-            if db_name == "performance_schema":
-                continue
-            if db_name == "sys":
-                continue
-
-            # Add modules
-            modules.append({
-                "name": get_module_name(db_name+" availability"),
-                "type": "generic_proc",
-                "data": 1,
-                "description": "Database available"
-            })
-
-            modules.append({
-                "name": get_module_name(db_name+" fragmentation ratio"),
-                "type": "generic_data",
-                "data": db_object.run_query(f"SELECT AVG(DATA_FREE/(DATA_LENGTH + INDEX_LENGTH)) AS average_fragmentation_ratio FROM information_schema.tables WHERE table_schema = '{db_name}' GROUP BY table_schema", single_value=True)[0],
-                "unit": "%",
-                "description": "Database fragmentation"
-            })
-
-            modules.append({
-                "name": get_module_name(db_name+" size"),
-                "type": "generic_data",
-                "data": db_object.run_query(f"SELECT ROUND(SUM(data_length + index_length) / 1024 / 1024, 2) AS size FROM information_schema.tables WHERE table_schema = '{db_name}' GROUP BY table_schema", single_value=True)[0],
-                "unit": "MB",
-                "description": "Database size"
-            })
-
-            modules += db_object.get_custom_queries(db_name)
-
-            # Add a new agent if agent per database and reset modules
-            if agent_per_database == 1:
-                add_monitoring_data({
-                    "agent_data"  : {
-                        "agent_name"        : db_agent_prefix+db_object.agent+" "+db_name,
-                        "agent_alias"       : db_agent_prefix+db_object.agent+" "+db_name,
-                        "os"                : db_object.type,
-                        "os_version"        : db_object.version,
-                        "interval"          : interval,
-                        "id_group"          : agents_group_id,
-                        "address"           : db_object.host,
-                        "description"       : "",
-                        "parent_agent_name" : db_object.agent,
-                    },
-                    "module_data" : modules
-                })
-                add_summary_value("Total agents", 1)
-                add_summary_value("Databases agents", 1)
-                modules = []
-
-    return modules
-
-#############
-## CLASSES ##
-#############
-
-####
-# Remote database object
-###########################################
-class RemoteDB:
-    def __init__(self, target="", agent=""):
-        self.type = "MySQL"
-        self.target = target
-        self.agent = self.get_agent(agent)
-        self.parse_target()
-        self.connected = 0
-        self.connector = None
-
-        self.connect()
-
-        self.version = self.get_version()
-
-    def connect(self):
-        global user
-        global password
-
-        # Try to connect and capture errors
-        error = ""
-        try:
-            connection = pymysql.connect(
-                host=self.host,
-                port=self.port,
-                user=user,
-                password=password,
-                connect_timeout=5
-            )
-
-            # Execute a test query
-            with connection.cursor() as cursor:
-                cursor.execute("SELECT 1")
-                result = cursor.fetchone()
-                if result:
-                    self.connector = connection
-                    self.connected = 1
-                else:
-                    error = "Connection failed"
-
-        except pymysql.Error as e:
-            error = str(e)
-
-        # Add error to info if cna't connect
-        if self.connector is None:
-            add_info_value("["+self.target+"]"+error+"\n")
-            add_summary_value("Targets down", 1)
-        else:
-            add_summary_value("Targets up", 1)
-
-    def disconnect(self):
-        if self.connected == 1:
-            self.connector.close()
-
-    def run_query(self, query="", single_row=False, single_value=False, db=""):
-        if self.connected == 1 and query:
-            try:
-                with self.connector.cursor() as cursor:
-                    if db:
-                        cursor.execute(f"USE {db}")
-
-                    # Execute your query
-                    cursor.execute(query)
-
-                    # Get query fields
-                    fields = [field[0] for field in cursor.description]
-                    
-                    if single_row or single_value:
-                        # Fetch first row
-                        row = cursor.fetchone()
-
-                        if single_value:
-                            if row:
-                                # Get first field value
-                                result = str(row[0])
-                            else:
-                                result = ""
-
-                        else:
-                            # Read row
-                            row_item = {}
-                            if row:
-                                i = 0
-                                # Assign each value for each field in row item
-                                for field in fields:
-                                    row_item[field] = str(row[i])
-                                    i += 1
-
-                            result =  row_item
-
-                    else:
-                        # Fetch all rows
-                        row_items = []
-                        rows = cursor.fetchall()
-                        
-                        # Read each row
-                        for row in rows:
-                            row_item = {}
-                            i = 0
-                            # Assign each value for each field in row item
-                            for field in fields:
-                                row_item[field] = str(row[i])
-                                i += 1
-                            
-                            # Add row item to row items
-                            row_items.append(row_item)
-
-                        result = row_items
-
-                    # Close cursor and return result
-                    cursor.close()
-                    return result, True, ""
-
-            except pymysql.Error as e:
-                add_info_value("["+self.target+"]"+str(e)+"\n")
-                return None, False, str(e)
-        else:
-            return None, False, "Not connected to database"
-
-    def get_agent(self, agent=""):
-        if agent:
-            return agent
-        else:
-            return self.target.split(":")[0]
-
-    def get_version(self):
-        version = self.run_query(f"SELECT @@VERSION", single_value=True)[0]
-        if version is None:
-            version = "Discovery"
-        return version
-
-    def parse_target(self):
-        # Default values
-        self.port = 3306
-
-        if ":" in self.target:
-            target = self.target.split(":")
-            self.host = target[0]
-            self.port = int(target[1])
-
-        else:
-            self.host = self.target
-
-    def get_statistics(self):
-        global interval
-        global modules_prefix
-        global engine_uptime
-        global query_stats
-        global analyze_connections
-        global innodb_stats
-        global cache_stats
-
-        # Initialize modules
-        modules = []
-
-        # Get status values
-        status = {}
-        for var in self.run_query(f"SHOW GLOBAL STATUS")[0]:
-            status[var["Variable_name"]] = var["Value"]
-
-        # Get svariables values
-        variables = {}
-        for var in self.run_query(f"SHOW VARIABLES")[0]:
-            variables[var["Variable_name"]] = var["Value"]
-
-        # Get modules
-        if engine_uptime == 1:
-            modules.append({
-                "name": get_module_name("restart detection"),
-                "type": "generic_proc",
-                "data": 1 if int(status["Uptime"]) < 2 * interval else 0,
-                "description": f"Running for {format_uptime(int(status['Uptime']))} (value is 0 if restart detected)"
-            })
-
-        if query_stats == 1:
-            modules.append({
-                "name": get_module_name("queries"),
-                "type": "generic_data_inc_abs",
-                "data": status["Queries"],
-                "description": ""
-            })
-
-            modules.append({
-                "name": get_module_name("query rate"),
-                "type": "generic_data_inc",
-                "data": status["Queries"],
-            })
-
-            modules.append({
-                "name": get_module_name("query select"),
-                "type": "generic_data_inc_abs",
-                "data": status["Com_select"],
-            })
-
-            modules.append({
-                "name": get_module_name("query update"),
-                "type": "generic_data_inc_abs",
-                "data": status["Com_update"]
-            })
-
-            modules.append({
-                "name": get_module_name("query delete"),
-                "type": "generic_data_inc_abs",
-                "data": status["Com_delete"]
-            })
-
-            modules.append({
-                "name": get_module_name("query insert"),
-                "type": "generic_data_inc_abs",
-                "data": status["Com_insert"]
-            })
-
-        if analyze_connections == 1:
-            modules.append({
-                "name": get_module_name("current connections"),
-                "type": "generic_data",
-                "data": status["Threads_connected"],
-                "description": "Current connections to MySQL engine (global)",
-                "min_warning": int(variables["max_connections"]) * 0.90,
-                "min_critical": int(variables["max_connections"]) * 0.98
-            })
-
-            modules.append({
-                "name": get_module_name("connections ratio"),
-                "type": "generic_data",
-                "data": (int(status["Max_used_connections"]) / int(variables["max_connections"])) * 100,
-                "description": "This metric indicates if you could run out soon of connection slots.",
-                "unit": "%",
-                "min_warning": 85,
-                "min_critical": 90
-            })
-
-            modules.append({
-                "name": get_module_name("aborted connections"),
-                "type": "generic_data_inc_abs",
-                "data": status["Aborted_connects"],
-                "description": "This metric indicates if the ammount of aborted connections in the last interval."
-            })
-
-        if innodb_stats == 1:
-            modules.append({
-                "name": get_module_name("Innodb buffer pool pages total"),
-                "type": "generic_data",
-                "data": status["Innodb_data_written"],
-                "description": "Total number of pages in the buffer pool (utilization)."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb buffer pool read requests"),
-                "type": "generic_data_inc_abs",
-                "data": status["Innodb_buffer_pool_read_requests"],
-                "description": "Reads from innodb buffer pool."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb buffer pool write requests"),
-                "type": "generic_data_inc_abs",
-                "data": status["Innodb_buffer_pool_write_requests"],
-                "description": "Writes in innodb buffer pool."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb disk reads"),
-                "type": "generic_data_inc_abs",
-                "data": status["Innodb_data_reads"],
-                "description": "Amount of read operations."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb disk writes"),
-                "type": "generic_data_inc_abs",
-                "data": status["Innodb_data_writes"],
-                "description": "Amount of write operations."
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb disk data read"),
-                "type": "generic_data_inc_abs",
-                "data": int(status["Innodb_data_read"])/(1024*1024),
-                "description": "Amount of data read from disk.",
-                "unit": "MB"
-            })
-
-            modules.append({
-                "name": get_module_name("Innodb disk data written"),
-                "type": "generic_data_inc_abs",
-                "data": int(status["Innodb_data_written"])/(1024*1024),
-                "description": "Amount of data written to disk.",
-                "unit": "MB"
-            })
-
-        if cache_stats == 1:
-            modules.append({
-                "name": get_module_name("query cache enabled"),
-                "type": "generic_proc",
-                "data": 1 if variables["have_query_cache"] == "YES" else 0,
-                "description": "Query cache enabled." if variables["have_query_cache"] == "YES" else "Query cache not found, check query_cache_type in your my.cnf"
-            })
-
-            if variables["have_query_cache"] == "YES":
-                if int(status["Qcache_hits"]) + int(status["Qcache_inserts"]) + int(status["Qcache_not_cached"]) != 0:
-                    ratio = 100 * int(status["Qcache_hits"]) / int(status["Qcache_inserts"]) + int(status["Qcache_inserts"]) + int(status["Qcache_not_cached"])
-                    
-                    modules.append({
-                        "name": get_module_name("query hit ratio"),
-                        "type": "generic_data",
-                        "data": ratio,
-                        "unit": "%"
-                    })
-
-        return modules
-
-    def get_custom_queries(self, db=""):
-        global modules_prefix
-        global execute_custom_queries
-        global custom_queries
-
-        # Initialize modules
-        modules = []
-
-        # Run if enabled execute custom queries
-        if execute_custom_queries == 1:
-
-            # Run each custom query
-            for custom_query in custom_queries:
-
-                # Run if target database match
-                if "all" in custom_query["target_databases"] or len(custom_query["target_databases"]) == 0 or db in custom_query["target_databases"]:
-                    
-                    # Skipt if empty required parameters
-                    if "target" not in custom_query or not custom_query["target"]:
-                        continue
-                    if "name" not in custom_query or not custom_query["name"]:
-                        continue
-
-                    # Reset error
-                    error = ""
-                    # Reset result
-                    data = ""
-
-                    # Prepare parameters
-                    sql = custom_query["target"]
-                    sql = re.sub(r'\$__self_dbname', db, sql)
-                    
-                    module_name = custom_query["name"]
-                    module_name = re.sub(r'\$__self_dbname', db, module_name)
-                    
-                    desc = custom_query["description"] if "description" in custom_query else ""
-                    datatype = custom_query["datatype"] if "datatype" in custom_query else "generic_data_string"
-
-                    # Set single query
-                    if "operation" not in custom_query or not custom_query["operation"]:
-                        single_value=False
-                    elif custom_query["operation"] == "value":
-                        single_value=True
-                    else:
-                        single_value=False
-
-                    # Adjust module type if needed
-                    if(single_value == False):
-                        datatype = "generic_data_string"
-
-                    # Run query
-                    rows, status, err = self.run_query(sql, single_value=single_value, db=db)
-
-                    # Get query data
-                    if rows is not None:
-                        if isinstance(rows, list):
-                            for row in rows:
-                                for key, value in row.items():
-                                    data += str(value) + "|"
-                                # Remove last pipe
-                                data = data[:-1]
-                                data += "\n"
-                        else:
-                            data = rows
-
-                    # Adjust data
-                    if data == "" and "string" in datatype:
-                        data = "No output."
-
-                    # Verify query status and set description
-                    if status == False:
-                        desc = "Failed to execute query: " + err;
-                    elif desc == "":
-                        desc = "Execution OK"
-
-                    modules.append({
-                        "name": get_module_name(module_name),
-                        "type": datatype,
-                        "data": data,
-                        "description": desc,
-                        "min_critical": custom_query["min_critical"] if "min_critical" in custom_query else "",
-                        "max_critical": custom_query["max_critical"] if "max_critical" in custom_query else "",
-                        "min_warning": custom_query["min_warning"] if "min_warning" in custom_query else "",
-                        "max_warning": custom_query["max_warning"] if "max_warning" in custom_query else "",
-                        "critical_inverse": custom_query["critical_inverse"] if "critical_inverse" in custom_query else "",
-                        "warning_inverse": custom_query["warning_inverse"] if "warning_inverse" in custom_query else "",
-                        "str_warning": custom_query["str_warning"] if "str_warning" in custom_query else "",
-                        "str_critical": custom_query["str_critical"] if "str_critical" in custom_query else "",
-                        "module_interval":custom_query["module_interval"] if "module_interval" in custom_query else ""
-                    })
-
-        return modules
-
-    def get_modules(self):
-        # Initialize modules
-        modules = []
-        
-        # Get statistics modules
-        modules += self.get_statistics()
-        # Get custom queries modules
-        modules += self.get_custom_queries()
-
-        return modules
-
-#############
-## THREADS ##
-#############
-
-####
-# Function per agent
-###########################################
-def monitor_items(thread_agents=[]):
-    global target_agents
-    global interval
-    global agents_group_id
-
-    for thread_agent in thread_agents:
-        # Get target agent
-        agent = ""
-        if 0 <= thread_agent["id"] < len(target_agents):
-            agent = target_agents[thread_agent["id"]]
-    
-        # Initialize modules
-        modules=[]
-    
-        # Get DB object
-        db_object = RemoteDB(thread_agent["db_target"], agent)
-    
-        # Add connection module
-        modules.append({
-            "name"        : get_module_name(db_object.type+" connection"),
-            "type"        : "generic_proc",
-            "description" : db_object.type+" availability",
-            "data"        : db_object.connected
-        })
-    
-        # Get global connection modules if connected
-        if(db_object.connected == 1):
-            modules += db_object.get_modules()
-    
-            # Get engine databases modules
-            if scan_databases == 1:
-                modules += get_databases_modules(db_object)
-    
-        # Add new monitoring data
-        add_monitoring_data({
-            "agent_data"  : {
-                "agent_name"  : db_object.agent,
-                "agent_alias" : db_object.agent,
-                "os"          : db_object.type,
-                "os_version"  : db_object.version,
-                "interval"    : interval,
-                "id_group"    : agents_group_id,
-                "address"     : db_object.host,
-                "description" : "",
-            },
-            "module_data" : modules
-        })
-        add_summary_value("Total agents", 1)
-        add_summary_value("Target agents", 1)
-    
-        # Disconnect from target
-        db_object.disconnect()
-
-
-####
-# Function per thread
-###########################################
-def monitor_threads():
-    global q
-
-    thread_agents=q.get()
-    try:
-        monitor_items(thread_agents)
-        q.task_done()
-    except Exception as e:
-        q.task_done()
-        set_error_level(1)
-        add_info_value("Error while runing single thread: "+str(e)+"\n")
-
-
-##########
-## MAIN ##
-##########
-
-# Parse arguments
-parser = argparse.ArgumentParser(description= "", formatter_class=argparse.RawTextHelpFormatter)
-parser.add_argument('--conf', help='Path to configuration file', metavar='<conf_file>', required=True)
-parser.add_argument('--target_databases', help='Path to target databases file', metavar='<databases_file>', required=True)
-parser.add_argument('--target_agents', help='Path to target agents file', metavar='<agents_file>', required=False)
-parser.add_argument('--custom_queries', help='Path to custom queries file', metavar='<custom_queries_file>', required=False)
-args = parser.parse_args()
-
-# Parse configuration file
-config = configparser.ConfigParser()
-try:
-    config.read_string('[CONF]\n' + open(args.conf).read())
-except Exception as e:
-    set_error_level(1)
-    set_info_value("Error while reading configuration file file: "+str(e)+"\n")
-    print_output()
-
-agents_group_id        = param_int(parse_parameter(config, agents_group_id, "agents_group_id"))
-interval               = param_int(parse_parameter(config, interval, "interval"))
-user                   = parse_parameter(config, user, "user")
-password               = parse_parameter(config, password, "password")
-threads                = param_int(parse_parameter(config, threads, "threads"))
-modules_prefix         = parse_parameter(config, modules_prefix, "modules_prefix")
-execute_custom_queries = param_int(parse_parameter(config, execute_custom_queries, "execute_custom_queries"))
-analyze_connections    = param_int(parse_parameter(config, analyze_connections, "analyze_connections"))
-scan_databases         = param_int(parse_parameter(config, scan_databases, "scan_databases"))
-agent_per_database     = param_int(parse_parameter(config, agent_per_database, "agent_per_database"))
-db_agent_prefix        = parse_parameter(config, db_agent_prefix, "db_agent_prefix")
-innodb_stats           = param_int(parse_parameter(config, innodb_stats, "innodb_stats"))
-engine_uptime          = param_int(parse_parameter(config, engine_uptime, "engine_uptime"))
-query_stats            = param_int(parse_parameter(config, query_stats, "query_stats"))
-cache_stats            = param_int(parse_parameter(config, cache_stats, "cache_stats"))
-
-# Parse rest of files
-t_file = args.target_databases
-a_file = args.target_agents
-cq_file = args.custom_queries
-
-# Parse DB targets
-if t_file:
-    try:
-        lines = open(t_file, "r")
-        for line in lines:
-            line = line.strip()
-            # SKIP EMPTY AND COMMENTED LINES
-            if not line:
-                continue
-            if line == "\n":
-                continue
-            if line[0] == '#':
-                continue
-
-            db_targets += [element.strip() for element in line.split(",")]
-        lines = []
-
-    except Exception as e:
-        set_error_level(1)
-        add_info_value("Error while reading DB targets file: "+str(e)+"\n")
-
-# Parse target agents
-if a_file:
-    try:
-        lines = open(a_file, "r")
-        for line in lines:
-            line = line.strip()
-            # SKIP EMPTY AND COMMENTED LINES
-            if not line:
-                continue
-            if line == "\n":
-                continue
-            if line[0] == '#':
-                continue
-
-            target_agents += [element.strip() for element in line.split(",")]
-        lines = []
-
-    except Exception as e:
-        set_error_level(1)
-        add_info_value("Error while reading target agents file: "+str(e)+"\n")
-
-# Parse custom queries
-if cq_file:
-    try:
-        custom_query = {}
-        save = False
-
-        lines = open(cq_file, "r")
-        for line in lines:
-            line = line.strip()
-            # SKIP EMPTY AND COMMENTED LINES
-            if not line:
-                continue
-            if line == "\n":
-                continue
-            if line[0] == '#':
-                continue
-
-            # Start parsing module
-            if line == "check_begin":
-                save = True
-                continue
-
-            # Read next line until new module
-            if save == False:
-                continue
-
-            # End parsing module
-            if line == "check_end":
-                if "target_databases" not in custom_query:
-                    custom_query["target_databases"] = ["all"]
-                custom_queries.append(custom_query)
-                custom_query = {}
-                save = False
-                continue
-
-            # Get line key value pair
-            key, value = [element.strip() for element in line.split(maxsplit=1)]
-
-            # Add target databases to query
-            if key == "target_databases":
-                custom_query["target_databases"] = [element.strip() for element in value.split(",")]
-                continue
-
-            # Skip not select queries
-            if key == "target" and not re.search(r'^select', value, re.IGNORECASE):
-                add_info_value("Removed ["+value+"] from custom queries, only select queries are allowed.\n")
-                continue
-
-            # Add other parameters to query
-            custom_query[key] = value
-        lines = []
-
-    except Exception as e:
-        set_error_level(1)
-        add_info_value("Error while reading custom queries file: "+str(e)+"\n")
-
-# Verify required arguments
-required_params = True
-if not user:
-    add_info_value("Parameter [user] not defined\n")
-    required_params = False
-if not password:
-    add_info_value("Parameter [password] not defined\n")
-    required_params = False
-if not db_targets:
-    add_info_value("Database targets not defined\n")
-    required_params = False
-
-if required_params == False:
-    set_error_level(1)
-    print_output()
-
-# Initialize summary
-set_summary_value("Total agents", 0)
-set_summary_value("Target agents", 0)
-set_summary_value("Databases agents", 0)
-set_summary_value("Targets up", 0)
-set_summary_value("Targets down", 0)
-
-# Assign threads
-if threads > len(db_targets):
-    threads = len(db_targets)
-
-if threads < 1:
-    threads = 1
-
-# Distribute agents per thread
-agents_per_thread = []
-thread = 0
-i = 0
-for db_target in db_targets:
-    if not 0 <= thread < len(agents_per_thread):
-        agents_per_thread.append([])
-    
-    agents_per_thread[thread].append({
-            "id": i,
-            "db_target": db_target
-        })
-
-    thread += 1
-    if thread >= threads:
-        thread=0
-
-    i += 1
-
-# Run threads
-try:
-    q=Queue()
-    for n_thread in range(threads) :
-        q.put(agents_per_thread[n_thread])
-
-    run_threads = []
-    for n_thread in range(threads):
-        t = Thread(target=monitor_threads)
-        t.daemon=True
-        t.start()
-        run_threads.append(t)
-
-    for t in run_threads:
-        t.join()
-
-    q.join()
-
-except Exception as e:
-    add_info_value("Error while running threads: "+str(e)+"\n")
-    set_error_level(1)
-
-# Print output and exit script
-print_output()
\ No newline at end of file
diff --git a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req b/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req
deleted file mode 100644
index 057adf64fc..0000000000
--- a/pandora_console/attachment/discovery/pandorafms.mysql/pandora_mysql.req
+++ /dev/null
@@ -1,2 +0,0 @@
-[deps]
-pymysql
\ No newline at end of file

From 95f62f4f77a178275fe6e834b89abcdd9a358fc6 Mon Sep 17 00:00:00 2001
From: rafael <rafael.ameijeiras@pandorafms.com>
Date: Tue, 3 Oct 2023 12:47:29 +0200
Subject: [PATCH 084/116] adding sourcecode for pandora_gotty_exec

---
 extras/pandora_gotty/src/pandora_gotty.conf   |   9 +-
 .../pandora_gotty/src/pandora_gotty_exec.py   | 110 ++++++++++++++++++
 2 files changed, 111 insertions(+), 8 deletions(-)
 create mode 100644 extras/pandora_gotty/src/pandora_gotty_exec.py

diff --git a/extras/pandora_gotty/src/pandora_gotty.conf b/extras/pandora_gotty/src/pandora_gotty.conf
index 01a037dd72..09d54e64c0 100644
--- a/extras/pandora_gotty/src/pandora_gotty.conf
+++ b/extras/pandora_gotty/src/pandora_gotty.conf
@@ -1,15 +1,8 @@
-//Pandora Gotty
+//Pandora Gotty config file
 
 // [bool] Permit clients to write to the TTY
 permit_write = true
 
-// [bool] Enable basic authentication
-enable_basic_auth = true
-
-// [string] Default username and password of basic authentication (user:pass)
-//          To enable basic authentication, set `true` to `enable_basic_auth`
-credential = "pandora:Pandor4!"
-
 // [bool] Permit clients to send command line arguments in URL (e.g. http://example.com:8080/?arg=AAA&arg=BBB)
 permit_arguments = true
 
diff --git a/extras/pandora_gotty/src/pandora_gotty_exec.py b/extras/pandora_gotty/src/pandora_gotty_exec.py
new file mode 100644
index 0000000000..1f7756745f
--- /dev/null
+++ b/extras/pandora_gotty/src/pandora_gotty_exec.py
@@ -0,0 +1,110 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+
+__author__ = "PandoraFMS Team"
+__copyright__ = "Copyright 2023, PandoraFMS"
+#__credits__ = ["Rob Knight", "Peter Maxwell", "Gavin Huttley", "Matthew Wakefield"]
+__maintainer__ = "Projects/QA department"
+__status__ = "Prod"
+__version__ = "1.0"
+
+import sys, argparse, signal, re, datetime, subprocess
+
+info= f"""
+SSH and TELNET helper for pandora_gotty.
+Version: {__version__}
+"""
+
+parser = argparse.ArgumentParser(description= info, formatter_class=argparse.RawTextHelpFormatter)
+parser.add_argument('exec_cmd', 
+                    help='Aplication to be executed, avalibles: ssh or telnet',type=str, choices=['ssh', 'telnet'])
+parser.add_argument('address', 
+                    help='IP addres or dns name to connect', type=str, default="")
+parser.add_argument('port', 
+                    help='Port to connect', type=int, default=23)
+parser.add_argument('user', 
+                    help='Username, only requiered for ssh connection', type=str, default="", nargs='?')
+
+args = parser.parse_args()
+
+# Define a function to handle the SIGINT signal
+def sigint_handler(signal, frame):
+    print ('\nInterrupted by user', file=sys.stderr)
+    sys.exit(0)
+signal.signal(signal.SIGINT, sigint_handler)
+
+# Define a function to handle the SIGTERM signal
+def sigterm_handler(signum, frame):
+    print("Received SIGTERM signal.", file=sys.stderr)
+    sys.exit(0)
+signal.signal(signal.SIGTERM, sigterm_handler)
+
+# Functions
+def is_valid_add(add:str):
+    # Regular expression to match an IP address
+    ip_pattern = r'^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$'
+    
+    # Regular expression to match a DNS name (domain name)
+    dns_pattern = r'^[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'
+    
+    if re.match(ip_pattern, add) or re.match(dns_pattern, add):
+        return True
+    else:
+        print(f"Error not valid address: {add}", file=sys.stderr)
+        return False
+    
+def is_valid_username(username:str):
+    # Regular expression to match a valid Linux username
+    username_pattern = r'^[a-zA-Z_][a-zA-Z0-9_]{0,31}$'
+    if re.match(username_pattern, username) is not None:
+        return True
+    else:
+        print(f"Error not valid username: {username}", file=sys.stderr)
+        return False
+    
+def exec_ssh (user:str, add:str, port:int):
+    # Previus checks
+    if is_valid_username(user) == False: 
+        return False
+    if is_valid_add(add) == False:
+        return False
+    if port == 0 : 
+        return False
+    
+    try:
+        print("> Starting SSH connection...")
+        ssh_command = f"ssh {user}@{add} -p {port}"  
+        subprocess.run(ssh_command, shell=True)
+
+    except subprocess.CalledProcessError as e:
+        raise SystemExit(e)
+    return True
+
+def exec_telnet (add:str, port:int):
+    # Previus checks
+    if is_valid_add(add) == False:
+        return False
+    
+    try:
+        print("> Starting Telnet connection...")
+        ssh_command = f"telnet -E {add} {port}"  
+        subprocess.run(ssh_command, shell=True)
+
+    except subprocess.CalledProcessError as e:
+        raise SystemExit(e)
+    return True
+
+
+# Main
+if __name__ == "__main__":
+    if args.exec_cmd == "ssh":
+        exec_ssh(args.user, args.address, args.port)
+        print ("> ssh session finished")
+        sys.exit(0)
+
+    if args.exec_cmd == "telnet":
+        exec_telnet(args.address, args.port)
+        print ("> telnet session finished")
+        sys.exit(0)
+
+    sys.exit(0)

From 1817f2ebebcf2528fd35ef7fdb65c4fa00467ce0 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Tue, 3 Oct 2023 13:38:02 +0200
Subject: [PATCH 085/116] Automonitorization in one agent pandora.internals

---
 pandora_server/lib/PandoraFMS/Core.pm | 49 ++++++++++++++++-----------
 1 file changed, 30 insertions(+), 19 deletions(-)

diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index ed4e127ade..4bdce6a4c3 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -6244,7 +6244,7 @@ sub pandora_self_monitoring ($$) {
 
 	my $xml_output = "";
 	
-	$xml_output = "<agent_data os_name='$OS' os_version='$OS_VERSION' version='" . $pa_config->{'version'} . "' description='" . $pa_config->{'rb_product_name'} . " Server version " . $pa_config->{'version'} . "' agent_name='".$pa_config->{'servername'} . "' agent_alias='".$pa_config->{'servername'} . "' interval='".$pa_config->{"self_monitoring_interval"}."' timestamp='".$timestamp."' >";
+	$xml_output = "<agent_data os_name='$OS' os_version='$OS_VERSION' version='" . $pa_config->{'version'} . "' description='" . $pa_config->{'rb_product_name'} . " Server version " . $pa_config->{'version'} . "' agent_name='pandora.internals' agent_alias='pandora.internals' interval='".$pa_config->{"self_monitoring_interval"}."' timestamp='".$timestamp."' >";
 	$xml_output .=" <module>";
 	$xml_output .=" <name>Status</name>";
 	$xml_output .=" <type>generic_proc</type>";
@@ -6306,8 +6306,7 @@ sub pandora_self_monitoring ($$) {
 		$pandoradb = 1;
 	}
 
-	my $num_threads = 0;
-	$num_threads = get_db_value ($dbh, "SELECT SUM(threads) FROM tserver WHERE name = '".$pa_config->{"servername"}."'");
+	my $num_threads = get_db_value ($dbh, 'SELECT SUM(threads) FROM tserver WHERE name = "'.$pa_config->{"servername"}.'"');
 	my $cpu_load = 0;
 	$cpu_load = cpu_load();
 
@@ -6400,11 +6399,14 @@ sub pandora_self_monitoring ($$) {
 		$xml_output .=" </module>";
 	}
 
-	$xml_output .=" <module>";
-	$xml_output .=" <name>Total Threads</name>";
-	$xml_output .=" <type>generic_data</type>";
-	$xml_output .=" <data>$num_threads</data>";
-	$xml_output .=" </module>";
+	if(defined($num_threads)) {
+		$xml_output .=" <module>";
+		$xml_output .=" <name>Total Threads</name>";
+		$xml_output .=" <type>generic_data</type>";
+		$xml_output .=" <data>$num_threads</data>";
+		$xml_output .=" </module>";
+	}
+
 
 	$xml_output .=" <module>";
 	$xml_output .=" <name>CPU Load</name>";
@@ -6436,11 +6438,12 @@ sub pandora_self_monitoring ($$) {
 		$xml_output .=" </module>";
 	}
 
+	# Installation monitoring.
+	$xml_output .= pandora_installation_monitoring($pa_config, $dbh);
 
 	$xml_output .= "</agent_data>";
 
-	my $filename = $pa_config->{"incomingdir"}."/".$pa_config->{'servername'}.".self.".$utimestamp.".data";
-	
+	my $filename = $pa_config->{"incomingdir"}."/pandora.internals.self".$utimestamp.".data";
 	open (XMLFILE, ">", $filename) or die "[FATAL] Could not open internal monitoring XML file for deploying monitorization at '$filename'";
 	print XMLFILE $xml_output;
 	close (XMLFILE);
@@ -6465,7 +6468,7 @@ sub pandora_thread_monitoring ($$$) {
 	# All trhead modules are "Status" module sons.
 	$module_parent = 'Status';
 
-	$xml_output = "<agent_data os_name='$OS' os_version='$OS_VERSION' version='" . $pa_config->{'version'} . "' description='" . $pa_config->{'rb_product_name'} . " Server version " . $pa_config->{'version'} . "' agent_name='".$pa_config->{'servername'} . "' agent_alias='".$pa_config->{'servername'} . "' interval='".$pa_config->{"self_monitoring_interval"}."' timestamp='".$timestamp."' >";
+	$xml_output = "<agent_data os_name='$OS' os_version='$OS_VERSION' version='" . $pa_config->{'version'} . "' description='" . $pa_config->{'rb_product_name'} . " Server version " . $pa_config->{'version'} . "' agent_name='pandora.internals' agent_alias='pandora.internals' interval='".$pa_config->{"self_monitoring_interval"}."' timestamp='".$timestamp."' >";
 	foreach my $server (@{$servers}) {
 		my $producer_stats = $server->getProducerStats();
 		while (my ($tid, $stats) = each(%{$producer_stats})) {
@@ -6531,7 +6534,7 @@ sub pandora_thread_monitoring ($$$) {
 	}
 	$xml_output .= "</agent_data>";
 
-	my $filename = $pa_config->{"incomingdir"}."/".$pa_config->{'servername'}.".threads.".$utimestamp.".data";
+	my $filename = $pa_config->{"incomingdir"}."/pandora.internals.threads.".$utimestamp.".data";
 	open (XMLFILE, ">", $filename) or die "[FATAL] Could not write to the thread monitoring XML file '$filename'";
 	print XMLFILE $xml_output;
 	close (XMLFILE);
@@ -6552,7 +6555,6 @@ sub pandora_installation_monitoring($$) {
 	my @modules;
 
 	my $xml_output = "";
-	$xml_output = "<agent_data os_name='$OS' os_version='$OS_VERSION' version='" . $pa_config->{'version'} . "' description='" . $pa_config->{'rb_product_name'} . " Server version " . $pa_config->{'version'} . "' agent_name='pandora.internals' agent_alias='pandora.internals' interval='".$pa_config->{"self_monitoring_interval"}."' timestamp='".$timestamp."' >";
 
 	# Total amount of agents
 	my $module;
@@ -6826,6 +6828,20 @@ sub pandora_installation_monitoring($$) {
 	push(@modules, $module); 
 	undef $module;
 
+	# Last 24Events.
+	my $events_24 = get_db_value(
+		$dbh,
+		'SELECT COUNT(id_evento)
+		FROM tevento
+		WHERE timestamp >=UNIX_TIMESTAMP(NOW() - INTERVAL 1 DAY)'
+	);
+	$module->{'name'} = "last_events_24h";
+	$module->{'description'} = 'Last 24h events';
+	$module->{'data'} = $events_24;
+	$module->{'module_interval'} = '288';
+	push(@modules, $module); 
+	undef $module;
+
 	}
 
 	foreach my $module_data (@modules) {
@@ -6881,12 +6897,7 @@ sub pandora_installation_monitoring($$) {
 	my $wux_performance = enterprise_hook("wux_performance", [$pa_config, $dbh]);
 	$xml_output .= $wux_performance if defined($wux_performance);
 
-	$xml_output .= "</agent_data>";
-
-	my $filename = $pa_config->{"incomingdir"}."/pandora.internals.".$utimestamp.".data";
-	open (XMLFILE, ">", $filename) or die "[FATAL] Could not write to the thread monitoring XML file '$filename'";
-	print XMLFILE $xml_output;
-	close (XMLFILE);
+	return $xml_output;
 }
 
 ##########################################################################

From 29fe86c007ca54d1be9dab334663bc96bb0e2530 Mon Sep 17 00:00:00 2001
From: rafael <rafael.ameijeiras@pandorafms.com>
Date: Tue, 3 Oct 2023 15:25:50 +0200
Subject: [PATCH 086/116] adding .gitignore

---
 extras/pandora_gotty/src/.gitignore | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/extras/pandora_gotty/src/.gitignore b/extras/pandora_gotty/src/.gitignore
index 423058ca29..a2acfc48bf 100644
--- a/extras/pandora_gotty/src/.gitignore
+++ b/extras/pandora_gotty/src/.gitignore
@@ -1 +1,2 @@
-*rpm
\ No newline at end of file
+*rpm
+bin/*

From a685a04493f8a61776fc0b6fee60add0a9bc84ea Mon Sep 17 00:00:00 2001
From: Jorge Rincon <jorge.rincon@pandorafms.com>
Date: Tue, 3 Oct 2023 15:42:57 +0200
Subject: [PATCH 087/116] #12166 fixed calendar button and border styles

---
 .../include/styles/js/jquery-ui_custom.css         | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/pandora_console/include/styles/js/jquery-ui_custom.css b/pandora_console/include/styles/js/jquery-ui_custom.css
index 9ee92c54d3..a2efd33a93 100644
--- a/pandora_console/include/styles/js/jquery-ui_custom.css
+++ b/pandora_console/include/styles/js/jquery-ui_custom.css
@@ -183,7 +183,7 @@ a.ui-state-default > span:hover {
   overflow: hidden;
   position: absolute;
   width: 350px !important;
-  border: 2px solid var(--primary-color);
+  border: 1px solid #c5c5c5;
 }
 .ui-datepicker .ui-datepicker-header {
   position: relative;
@@ -345,12 +345,20 @@ input[type="submit"].ui-button-dialog {
   width: 90px;
 }
 
-.ui-priority-primary,
+.ui-priority-primary {
+  background-color: var(--primary-color) !important;
+  color: #fff !important;
+  border: 2px solid var(--primary-color) !important;
+  box-shadow: none !important;
+  border-radius: 8px !important;
+}
+
 .ui-priority-secondary {
-  background-color: #fff !important;
+  background-color: var(--secondary-color) !important;
   color: var(--primary-color) !important;
   border: 2px solid var(--primary-color) !important;
   box-shadow: none !important;
+  border-radius: 8px !important;
 }
 
 .ui-timepicker-div > dl dt,

From a842c8249f5698b9b35d4f61260f4d98caa281ce Mon Sep 17 00:00:00 2001
From: Daniel Maya <daniel.maya@pandorafms.com>
Date: Tue, 3 Oct 2023 15:44:27 +0200
Subject: [PATCH 088/116] #12087 Fixed report with fatal error

---
 .../include/functions_reporting.php           | 25 +++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/pandora_console/include/functions_reporting.php b/pandora_console/include/functions_reporting.php
index eab4e761d3..a68e7470fb 100755
--- a/pandora_console/include/functions_reporting.php
+++ b/pandora_console/include/functions_reporting.php
@@ -149,6 +149,26 @@ function reporting_get_name($id_report)
 }
 
 
+/**
+ * Frees memory in case of fatal error.
+ *
+ * @param mixed $memory Object that reserves memory.
+ *
+ * @return void
+ */
+function shutdown($memory)
+{
+    // Unsetting $memory does not free up memory.
+    // I also tried unsetting a global variable which did not free up the memory.
+    unset($memory->reserve);
+
+    $error = error_get_last();
+    if (isset($error['type']) === true && $error['type'] === 1) {
+        echo __('You have no memory for this operation, increase the memory limit.');
+    }
+}
+
+
 function reporting_make_reporting_data(
     $report,
     $id_report,
@@ -170,6 +190,11 @@ function reporting_make_reporting_data(
 
     enterprise_include_once('include/functions_metaconsole.php');
 
+    $memory = new stdClass();
+    // Reserve 3 mega bytes.
+    $memory->reserve = str_repeat('*', (1024 * 1024));
+    register_shutdown_function('shutdown', $memory);
+
     $return = [];
     if (!empty($report)) {
         $contents = io_safe_output($report['contents']);

From 5a985aabac1895f8e8fe249309fed338f50b7b44 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Tue, 3 Oct 2023 17:13:40 +0200
Subject: [PATCH 089/116] Removed total_agent_access module from
 automonitorization

---
 pandora_server/lib/PandoraFMS/Core.pm | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/pandora_server/lib/PandoraFMS/Core.pm b/pandora_server/lib/PandoraFMS/Core.pm
index 4bdce6a4c3..abb00ed9ba 100644
--- a/pandora_server/lib/PandoraFMS/Core.pm
+++ b/pandora_server/lib/PandoraFMS/Core.pm
@@ -6594,13 +6594,6 @@ sub pandora_installation_monitoring($$) {
 	push(@modules, $module);
 	undef $module;
 
-	# Total agent access record
-	$module->{'name'} = "total_access_data";
-	$module->{'description'} = 'Total agent access records';
-	$module->{'data'} = get_db_value($dbh, 'SELECT COUNT(id_agent) FROM tagent_access');
-	push(@modules, $module);
-	undef $module;
-
 	# Total users
 	$module->{'name'} = "total_users";
 	$module->{'description'} = 'Total users';

From b9f94050a2f2e81d06ad126c6ac19228e3f0249b Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Wed, 4 Oct 2023 01:00:26 +0200
Subject: [PATCH 090/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index 717f29d462..131c396ef8 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231003
+Version: 7.0NG.773.3-231004
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 5d9dd7d3ed..dd779f8f15 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231003"
+pandora_version="7.0NG.773.3-231004"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 7757b068c8..b9d6e9ada8 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231003';
+use constant AGENT_BUILD => '231004';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 5d401dbc68..4df66d18ca 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231003
+%define release     231004
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index f630f42ec7..88fd76aa64 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231003
+%define release     231004
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index d3aff53214..de935859b3 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231003
+%define release     231004
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index cc96ec72b4..1f1792f353 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231003"
+PI_BUILD="231004"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 0ebdc6e9d8..e439ec2e23 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231003}
+{231004}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index fb1babfa20..634ef5b8bd 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231003")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231004")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 84a52bbd75..7921369578 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231003))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231004))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index 5087900589..840b01e089 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231003
+Version: 7.0NG.773.3-231004
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 945906aa5a..b7b3d69db2 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231003"
+pandora_version="7.0NG.773.3-231004"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index f6511a6dbe..990c2bbd74 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231003';
+$build_version = 'PC231004';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index 40f90ddb2c..335e6374e2 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231003';
+            $build = '231004';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index ae2c08e660..238b00136d 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231003
+%define release     231004
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 400e776081..cad0eca679 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231003
+%define release     231004
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index 357b56a8d4..f85963e8be 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231003
+%define release     231004
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 69b9401dce..3c666e4647 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231003
+Version: 7.0NG.773.3-231004
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index 2f2ef92573..ac7bd1b382 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231003"
+pandora_version="7.0NG.773.3-231004"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 2b2c17a738..3fadae2f17 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231003";
+my $pandora_build = "231004";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 34322e1fa9..6c3288f358 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231003";
+my $pandora_build = "231004";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index d4d8c35f52..f2c276898b 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231003
+%define release     231004
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index 8603c74445..9fe0f3d864 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231003
+%define release     231004
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index 1a0c6c0579..9ad5cb68f4 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231003"
+PI_BUILD="231004"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index ece636f664..1557f7ece8 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231003";
+my $version = "7.0NG.773.3 Build 231004";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index f5d42b561c..d7edaf89c3 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231003";
+my $version = "7.0NG.773.3 Build 231004";
 
 # save program name for logging
 my $progname = basename($0);

From e5fff03608a0d62d53d1338cc51e14265609ecc6 Mon Sep 17 00:00:00 2001
From: rafael <rafael.ameijeiras@pandorafms.com>
Date: Wed, 4 Oct 2023 10:50:29 +0200
Subject: [PATCH 091/116] adding pandora_gotty_exec compiled from installers to
 rpms and deb packages

---
 extras/pandora_gotty/build_deb.sh       | 2 ++
 extras/pandora_gotty/build_rpm.sh       | 5 ++++-
 extras/pandora_gotty/pandora_gotty.spec | 2 ++
 3 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/extras/pandora_gotty/build_deb.sh b/extras/pandora_gotty/build_deb.sh
index 483ab35076..fbcb2a6790 100755
--- a/extras/pandora_gotty/build_deb.sh
+++ b/extras/pandora_gotty/build_deb.sh
@@ -6,6 +6,8 @@ mkdir -p pandora_gotty/usr/bin
 mkdir -p pandora_gotty/etc/pandora_gotty
 cp -a ../src/pandora_gotty pandora_gotty/usr/bin
 cp -a ../src/pandora_gotty.conf pandora_gotty/etc/pandora_gotty
+curl -SsL --output pandora_gotty/usr/bin/pandora_gotty_exec http://192.168.50.31/installers/installers/Linux/x86_64/pandora_gotty_exec
+chmod +x pandora_gotty/usr/bin/pandora_gotty_exec
 dpkg-deb --build pandora_gotty
 mv pandora_gotty.deb ../
 rm -rf pandora_gotty/usr/ 
diff --git a/extras/pandora_gotty/build_rpm.sh b/extras/pandora_gotty/build_rpm.sh
index 64a43fa099..e08fa0e65b 100755
--- a/extras/pandora_gotty/build_rpm.sh
+++ b/extras/pandora_gotty/build_rpm.sh
@@ -2,7 +2,10 @@
 #RPM
 VERSION=$(grep '%define version' pandora_gotty.spec | awk '{print $3}')
 mkdir -p pandora_gotty-${VERSION} 
-cp src/* pandora_gotty-${VERSION}/
+cp src/pandora_gotty pandora_gotty-${VERSION}/
+cp src/pandora_gotty.conf pandora_gotty-${VERSION}/
+curl -SsL --output pandora_gotty-${VERSION}/pandora_gotty_exec http://192.168.50.31/installers/installers/Linux/x86_64/pandora_gotty_exec
+chmod +x pandora_gotty-${VERSION}/pandora_gotty_exec
 tar -cvzf pandora_gotty-${VERSION}.tar.gz pandora_gotty-${VERSION}/*
 mv pandora_gotty-${VERSION}.tar.gz ${HOME}/rpmbuild/SOURCES/
 rm -rf ${HOME}/rpmbuild/RPMS/x86_64/pandora_gotty*
diff --git a/extras/pandora_gotty/pandora_gotty.spec b/extras/pandora_gotty/pandora_gotty.spec
index 005dfd945f..813c9726c9 100644
--- a/extras/pandora_gotty/pandora_gotty.spec
+++ b/extras/pandora_gotty/pandora_gotty.spec
@@ -25,6 +25,7 @@ rm -rf $RPM_BUILD_ROOT
 mkdir -p $RPM_BUILD_ROOT/%{_bindir}
 mkdir -p %{buildroot}/etc/pandora_gotty/
 cp %{name} $RPM_BUILD_ROOT/%{_bindir}
+cp pandora_gotty_exec $RPM_BUILD_ROOT/%{_bindir}
 cp pandora_gotty.conf %{buildroot}/etc/pandora_gotty/
 %clean
 rm -Rf $RPM_BUILD_ROOT
@@ -33,6 +34,7 @@ rm -Rf $RPM_BUILD_ROOT
 %defattr(-,root,root,-)
 %config(noreplace) /etc/pandora_gotty/pandora_gotty.conf
 %{_bindir}/%{name}
+%{_bindir}/pandora_gotty_exec
 
 %changelog
 * Mon Sep 18 2023  PandoraFMS  - 1.0-1

From 27bee15d50eea8272087dbd8cac911fb0b69a7ef Mon Sep 17 00:00:00 2001
From: miguel angel rasteu <miguelangel.rasteu@pandorafms.com>
Date: Wed, 4 Oct 2023 12:56:28 +0200
Subject: [PATCH 092/116] #12172 Change truncate event name limit to
 description_size_text

---
 pandora_console/operation/events/events.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pandora_console/operation/events/events.php b/pandora_console/operation/events/events.php
index 5300bf109a..e7a20b8642 100644
--- a/pandora_console/operation/events/events.php
+++ b/pandora_console/operation/events/events.php
@@ -518,7 +518,7 @@ if (is_ajax() === true) {
 
                         $tmp->evento = ui_print_truncate_text(
                             $tmp->evento,
-                            $config['item_title_size_text'],
+                            'description',
                             false,
                             true,
                             false,

From ae0bb2022d62413d7ec0f80503cda45eec4bf851 Mon Sep 17 00:00:00 2001
From: Daniel Maya <daniel.maya@pandorafms.com>
Date: Wed, 4 Oct 2023 15:42:19 +0200
Subject: [PATCH 093/116] #12029 Fixed font size

---
 .../include/class/Heatmap.class.php           | 19 +++++++++---------
 pandora_console/include/styles/heatmap.css    | 20 -------------------
 2 files changed, 10 insertions(+), 29 deletions(-)

diff --git a/pandora_console/include/class/Heatmap.class.php b/pandora_console/include/class/Heatmap.class.php
index 34ef485d8b..05d6152030 100644
--- a/pandora_console/include/class/Heatmap.class.php
+++ b/pandora_console/include/class/Heatmap.class.php
@@ -1277,6 +1277,7 @@ class Heatmap
 
         $scale = ($this->width / $this->height);
         $Yaxis = $this->getYAxis($count_result, $scale);
+        $Yaxis_font_scale = $Yaxis;
         if ($count_result <= 3) {
             $Xaxis = $count_result;
             $Yaxis = 1;
@@ -1381,22 +1382,22 @@ class Heatmap
         if (count($groups) > 1 && $this->group === 1 && $this->dashboard === false) {
             $x_back = 0;
             $y_back = 0;
-            $x_text_correction = 0.25;
+            $x_text_correction = 0.08;
 
             if ($count_result <= 10) {
-                $fontSize = 'small-size';
+                $fontSize = 0.2;
                 $stroke = 'small-stroke';
             } else if ($count_result > 10 && $count_result <= 100) {
-                $fontSize = 'tiny-size';
+                $fontSize = 0.18;
                 $stroke = 'tiny-stroke';
             } else if ($count_result > 100 && $count_result <= 1000) {
-                $fontSize = 'medium-size';
+                $fontSize = 0.16;
                 $stroke = 'medium-stroke';
             } else if ($count_result > 1000 && $count_result <= 10000) {
-                $fontSize = 'big-size';
+                $fontSize = 0.14;
                 $stroke = 'big-stroke';
             } else {
-                $fontSize = 'huge-size';
+                $fontSize = 0.12;
                 $stroke = 'huge-stroke';
             }
 
@@ -1452,7 +1453,7 @@ class Heatmap
 
                     // Name.
                     echo '<text x="'.((($x_position - $x_back) / 2) + $x_back - $x_text_correction).'" y="'.($y_position + 1 - 0.01).'"
-                        class="'.$fontSize.'">'.$name.'</text>';
+                        style="font-size: '.($fontSize * $Yaxis_font_scale).'%">'.$name.'</text>';
 
                     $x_back = $x_position;
                     if ($x_position === $Xaxis) {
@@ -1503,7 +1504,7 @@ class Heatmap
 
                         // Name.
                         echo '<text x="'.(($x_position) / 2 - $x_text_correction).'" y="'.($y_position + 1 - 0.01).'"
-                            class="'.$fontSize.'">'.$name.'</text>';
+                            style="font-size: '.($fontSize * $Yaxis_font_scale).'%">'.$name.'</text>';
 
                         // Bottom-right of last line.
                         $points = sprintf(
@@ -1560,7 +1561,7 @@ class Heatmap
 
                         // Name.
                         echo '<text x="'.(($x_position) / 2 - $x_text_correction).'" y="'.($y_position + 1 - 0.02).'"
-                            class="'.$fontSize.'">'.$name.'</text>';
+                            style="font-size: '.($fontSize * $Yaxis_font_scale).'%">'.$name.'</text>';
 
                         // Bottom-top of last line.
                         $points = sprintf(
diff --git a/pandora_console/include/styles/heatmap.css b/pandora_console/include/styles/heatmap.css
index 34df84e1c1..5a0f558cc7 100644
--- a/pandora_console/include/styles/heatmap.css
+++ b/pandora_console/include/styles/heatmap.css
@@ -289,26 +289,6 @@ div#heatmap-controls div.heatmap-refr > div {
   stroke-width: 0.04;
 }
 
-.small-size {
-  font-size: 1%;
-}
-
-.tiny-size {
-  font-size: 2%;
-}
-
-.medium-size {
-  font-size: 4%;
-}
-
-.big-size {
-  font-size: 6%;
-}
-
-.huge-size {
-  font-size: 8%;
-}
-
 .progress_main {
   height: 2.5em;
   border: 2px solid #82b92e;

From 80807ae0851572767a724a1950a30e73f579adb8 Mon Sep 17 00:00:00 2001
From: Jorge Rincon <jorge.rincon@pandorafms.com>
Date: Wed, 4 Oct 2023 16:46:43 +0200
Subject: [PATCH 094/116] #12166 fixed style of selected item in calendar

---
 pandora_console/include/styles/js/jquery-ui_custom.css | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pandora_console/include/styles/js/jquery-ui_custom.css b/pandora_console/include/styles/js/jquery-ui_custom.css
index a2efd33a93..9c17d7fdab 100644
--- a/pandora_console/include/styles/js/jquery-ui_custom.css
+++ b/pandora_console/include/styles/js/jquery-ui_custom.css
@@ -151,6 +151,7 @@ a.ui-state-default > span:hover {
   background-color: #82b92e !important;
   font-weight: bold !important;
   border: 2px solid #000 !important;
+  border-radius: 50% !important;
 }
 .ui-corner-all,
 .ui-corner-top,

From 17f5b0deded30930d67673f8a1c06236ee4b4b29 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Wed, 4 Oct 2023 18:00:19 +0200
Subject: [PATCH 095/116] quick shell changes

---
 pandora_console/extensions/quick_shell.php    | 356 ++++++------------
 .../include/functions_cron_task.php           | 136 ++-----
 2 files changed, 142 insertions(+), 350 deletions(-)

diff --git a/pandora_console/extensions/quick_shell.php b/pandora_console/extensions/quick_shell.php
index d07342945a..9aee7610d8 100644
--- a/pandora_console/extensions/quick_shell.php
+++ b/pandora_console/extensions/quick_shell.php
@@ -89,13 +89,10 @@ function quickShell()
         true
     );
 
-    if ($method === 'ssh' && (bool) $config['gotty_ssh_enabled'] === false) {
-        ui_print_error_message(__('Please, enable SSH in %s', $setup_anchor));
-        return;
-    }
-
-    if ($method === 'telnet' && (bool) $config['gotty_telnet_enabled'] === false) {
-        ui_print_error_message(__('Please, enable Telnet in %s', $setup_anchor));
+    if ((bool) $config['gotty_ssh_enabled'] === false
+        && (bool) $config['gotty_telnet_enabled'] === false
+    ) {
+        ui_print_warning_message(__('Please, enable GoTTY in %s', $setup_anchor));
         return;
     }
 
@@ -112,19 +109,13 @@ function quickShell()
     // Build URL args.
     if ($method === 'ssh') {
         // SSH.
-        $args .= '?arg='.$username.'@'.$agent_address;
-        //$args = '?arg='.$username.'@172.16.0.1';
-        $args .= '&arg=-p%20'.$method_port;
+        $args .= '&arg='.$agent_address.'&arg='.$method_port.'&arg='.$username;
     } else if ($method == 'telnet') {
         // Telnet.
-        $username = preg_replace('/[^a-zA-Z0-9\-\.]/', '', $username);
-        $args = '?arg=-l%20'.$username;
-        $args .= '&arg='.$agent_address;
-        $args .= '&arg='.$method_port.'&arg=-E';
+        $args .= '&arg='.$agent_address.'&arg='.$method_port;
     }
 
     $connectionURL = buildConnectionURL($method);
-    //$basic_auth_hdr = $config['gotty_ssh_user'].':'.$config['gotty_ssh_pass'].'@';
     $gotty_addr = $connectionURL.$args;
 
     // Username. Retrieve from form.
@@ -132,6 +123,18 @@ function quickShell()
         // No username provided, ask for it.
         $wiz = new Wizard();
 
+        $method_fields = [];
+
+        if ($config['gotty_telnet_enabled']) {
+            $method_fields['telnet'] = __('Telnet');
+            $port_value = 23;
+        }
+
+        if ($config['gotty_ssh_enabled']) {
+            $method_fields['ssh'] = __('SSH');
+            $port_value = 22;
+        }
+
         $wiz->printForm(
             [
                 'form'   => [
@@ -154,7 +157,7 @@ function quickShell()
                             'type'  => 'text',
                             'id'    => 'port',
                             'name'  => 'port',
-                            'value' => 22,
+                            'value' => $port_value,
                         ],
                     ],
                     [
@@ -162,10 +165,7 @@ function quickShell()
                         'arguments' => [
                             'type'   => 'select',
                             'name'   => 'method',
-                            'fields' => [
-                                'ssh'    => __('SSH'),
-                                'telnet' => __('Telnet'),
-                            ],
+                            'fields' => $method_fields,
                             'script' => "p=22; if(this.value == 'telnet') { p=23; } $('#text-port').val(p);",
                         ],
                     ],
@@ -190,6 +190,24 @@ function quickShell()
         return;
     }
 
+    // Check gotty connection before trying to load iframe.
+    $ch = curl_init($gotty_addr);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+
+    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
+    curl_setopt($ch, CURLOPT_MAXREDIRS, 10);
+
+    $response = curl_exec($ch);
+    $responseCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    $finalUrl = curl_getinfo($ch, CURLINFO_EFFECTIVE_URL);
+
+    curl_close($ch);
+
+    if ($responseCode !== 200) {
+        ui_print_error_message(__('Connection error. Please check your settings at %s', $setup_anchor));
+        exit;
+    }
+
     ?>
     <style>#terminal {
         width: 100%;
@@ -207,7 +225,6 @@ function quickShell()
       }
     </style>
 
-
     <div id="terminal"><iframe id="gotty-iframe" src="<?php echo $gotty_addr; ?>"></iframe></div>
     
     <?php
@@ -259,15 +276,11 @@ function buildConnectionURL($method)
 {
     global $config;
 
-    $method_addr = ($method === 'ssh') ? $config['gotty_ssh_addr'] : $config['gotty_telnet_addr'];
-    $address = (empty($method_addr) === true) ? $_SERVER['SERVER_ADDR'] : $method_addr;
+    $address = (empty($config['gotty_addr']) === true) ? $_SERVER['SERVER_ADDR'] : $config['gotty_addr'];
     $use_ssl = ($method === 'ssh') ? $config['gotty_ssh_use_ssl'] : $config['gotty_telnet_use_ssl'];
     $protocol = ((bool) $use_ssl === true) ? 'https://' : 'http://';
-    $port = ($method === 'ssh') ? $config['gotty_ssh_port'] : $config['gotty_telnet_port'];
-    $connection_hash = ($method === 'ssh') ? $config['gotty_ssh_connection_hash'] : $config['gotty_telnet_connection_hash'];
-    //$basic_auth_hdr = $config['gotty_ssh_user'].':'.$config['gotty_ssh_pass'].'@';
 
-    return $protocol.$address.':'.$port.'/'.$connection_hash;
+    return $protocol.$address.':'.$config['gotty_port'].'/'.$config['gotty_connection_hash'].'/?arg='.$method;
 }
 
 
@@ -297,28 +310,8 @@ function quickShellSettings()
         config_update_value('gotty_host', '127.0.0.1');
     }
 
-    if (isset($config['gotty_telnet_port']) === false) {
-        config_update_value('gotty_telnet_port', 8082);
-    }
-
-    if (isset($config['gotty_ssh_port']) === false) {
-        config_update_value('gotty_ssh_port', 8081);
-    }
-
-    if (isset($config['gotty_ssh_user']) === false) {
-        config_update_value('gotty_ssh_user', 'pandora');
-    }
-
-    if (isset($config['gotty_telnet_user']) === false) {
-        config_update_value('gotty_telnet_user', 'pandora');
-    }
-
-    if (isset($config['gotty_ssh_pass']) === false) {
-        config_update_value('gotty_ssh_pass', 'Pandor4!');
-    }
-
-    if (isset($config['gotty_telnet_pass']) === false) {
-        config_update_value('gotty_telnet_pass', 'Pandor4!');
+    if (isset($config['gotty_port']) === false) {
+        config_update_value('gotty_port', 8080);
     }
 
     $changes = 0;
@@ -336,35 +329,16 @@ function quickShellSettings()
             0
         );
 
-        $gotty_ssh_addr = get_parameter(
-            'gotty_ssh_addr',
+        $gotty_addr = get_parameter(
+            'gotty_addr',
             ''
         );
 
-        $gotty_telnet_addr = get_parameter(
-            'gotty_telnet_addr',
+        $gotty_port = get_parameter(
+            'gotty_port',
             ''
         );
 
-        $gotty_ssh_port = get_parameter(
-            'gotty_ssh_port',
-            ''
-        );
-        $gotty_telnet_port = get_parameter(
-            'gotty_telnet_port',
-            ''
-        );
-
-        $gotty_ssh_user = get_parameter(
-            'gotty_ssh_user',
-            'pandora'
-        );
-
-        $gotty_telnet_user = get_parameter(
-            'gotty_telnet_user',
-            'pandora'
-        );
-
         $gotty_ssh_use_ssl = get_parameter(
             'gotty_ssh_use_ssl',
             false
@@ -375,18 +349,6 @@ function quickShellSettings()
             false
         );
 
-        $gotty_ssh_pass = get_parameter(
-            'gotty_ssh_pass',
-            'Pandor4!'
-        );
-
-        $gotty_ssh_pass = io_input_password($gotty_ssh_pass);
-
-        $gotty_telnet_pass = get_parameter(
-            'gotty_telnet_pass',
-            'Pandor4!'
-        );
-
         if ($config['gotty_ssh_enabled'] != $gotty_ssh_enabled) {
             config_update_value('gotty_ssh_enabled', $gotty_ssh_enabled);
         }
@@ -395,44 +357,19 @@ function quickShellSettings()
             config_update_value('gotty_telnet_enabled', $gotty_telnet_enabled);
         }
 
-        $gotty_telnet_pass = io_input_password($gotty_telnet_pass);
-
-        if ($config['gotty_ssh_addr'] != $gotty_ssh_addr) {
-            config_update_value('gotty_ssh_addr', $gotty_ssh_addr);
+        if ($config['gotty_addr'] != $gotty_addr) {
+            config_update_value('gotty_addr', $gotty_addr);
         }
 
-        if ($config['gotty_telnet_addr'] != $gotty_telnet_addr) {
-            config_update_value('gotty_telnet_addr', $gotty_telnet_addr);
-        }
-
-        if ($config['gotty_ssh_port'] != $gotty_ssh_port) {
-            // Mark ssh gotty for restart (should kill the process in the current port).
-            if ($config['restart_gotty_ssh_next_cron_port'] === ''
-                || $config['restart_gotty_ssh_next_cron_port'] === null
+        if ($config['gotty_port'] != $gotty_port) {
+            // Mark gotty for restart (should kill the process in the current port).
+            if ($config['restart_gotty_next_cron_port'] === ''
+                || $config['restart_gotty_next_cron_port'] === null
             ) {
-                config_update_value('restart_gotty_ssh_next_cron_port', $config['gotty_ssh_port']);
+                config_update_value('restart_gotty_next_cron_port', $config['gotty_port']);
             }
 
-            config_update_value('gotty_ssh_port', $gotty_ssh_port);
-        }
-
-        if ($config['gotty_telnet_port'] != $gotty_telnet_port) {
-            // Mark telnet gotty for restart (should kill the process in the current port).
-            if ($config['restart_gotty_telnet_next_cron_port'] === ''
-                || $config['restart_gotty_telnet_next_cron_port'] === null
-            ) {
-                config_update_value('restart_gotty_telnet_next_cron_port', $config['gotty_telnet_port']);
-            }
-
-            config_update_value('gotty_telnet_port', $gotty_telnet_port);
-        }
-
-        if ($config['gotty_ssh_user'] != $gotty_ssh_user) {
-            config_update_value('gotty_ssh_user', $gotty_ssh_user);
-        }
-
-        if ($config['gotty_telnet_user'] != $gotty_telnet_user) {
-            config_update_value('gotty_telnet_user', $gotty_telnet_user);
+            config_update_value('gotty_port', $gotty_port);
         }
 
         if ($config['gotty_ssh_use_ssl'] != $gotty_ssh_use_ssl) {
@@ -443,24 +380,49 @@ function quickShellSettings()
             config_update_value('gotty_telnet_use_ssl', $gotty_telnet_use_ssl);
         }
 
-        if ($config['gotty_ssh_pass'] != $gotty_ssh_pass) {
-            $gotty_ssh_pass = io_input_password($gotty_ssh_pass);
-            config_update_value('gotty_ssh_pass', $gotty_ssh_pass);
-        }
-
-        if ($config['gotty_telnet_pass'] != $gotty_telnet_pass) {
-            $gotty_telnet_pass = io_input_password($gotty_telnet_pass);
-            config_update_value('gotty_telnet_pass', $gotty_telnet_pass);
-        }
-
         cron_task_start_gotty();
     }
 
     echo '<fieldset class="margin-bottom-10">';
-    echo '<legend>'.__('SSH connection parameters').'</legend>';
+    echo '<legend>'.__('GoTTY general parameters').'</legend>';
 
-    $test_start = '<span id="test-gotty-spinner" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
-    $test_start .= '&nbsp;<span id="test-gotty-message" class="invisible"></span>';
+    $general_table = new StdClass();
+    $general_table->data = [];
+    $general_table->width = '100%';
+    $general_table->class = 'filter-table-adv';
+    $general_table->data = [];
+    $general_table->style = [];
+    $general_table->style[0] = 'width: 50%;';
+
+    $general_table->data[0][] = html_print_label_input_block(
+        __('Address'),
+        html_print_input_text(
+            'gotty_addr',
+            $config['gotty_addr'],
+            '',
+            30,
+            100,
+            true
+        )
+    );
+
+    $general_table->data[0][] = html_print_label_input_block(
+        __('Port'),
+        html_print_input_text(
+            'gotty_port',
+            $config['gotty_port'],
+            '',
+            30,
+            100,
+            true
+        )
+    );
+
+    html_print_table($general_table);
+    echo '</fieldset>';
+
+    echo '<fieldset class="margin-bottom-10">';
+    echo '<legend>'.__('GoTTY SSH connection parameters').'</legend>';
 
     $ssh_table = new StdClass();
     $ssh_table->data = [];
@@ -471,7 +433,7 @@ function quickShellSettings()
     $ssh_table->style[0] = 'width: 50%;';
 
     $ssh_table->data[0][] = html_print_label_input_block(
-        __('Enable SSH GoTTY'),
+        __('Enable SSH method'),
         html_print_checkbox_switch(
             'gotty_ssh_enabled',
             1,
@@ -481,54 +443,6 @@ function quickShellSettings()
     );
 
     $ssh_table->data[1][] = html_print_label_input_block(
-        __('Gotty address'),
-        html_print_input_text(
-            'gotty_ssh_addr',
-            $config['gotty_ssh_addr'],
-            '',
-            30,
-            100,
-            true
-        )
-    );
-
-    $ssh_table->data[1][] = html_print_label_input_block(
-        __('Gotty port'),
-        html_print_input_text(
-            'gotty_ssh_port',
-            $config['gotty_ssh_port'],
-            '',
-            30,
-            100,
-            true
-        )
-    );
-
-    $ssh_table->data[2][] = html_print_label_input_block(
-        __('Gotty user'),
-        html_print_input_text(
-            'gotty_ssh_user',
-            $config['gotty_ssh_user'],
-            '',
-            30,
-            100,
-            true
-        )
-    );
-
-    $ssh_table->data[2][] = html_print_label_input_block(
-        __('Gotty password'),
-        html_print_input_password(
-            'gotty_ssh_pass',
-            io_output_password($config['gotty_ssh_pass']),
-            '',
-            30,
-            100,
-            true
-        )
-    );
-
-    $ssh_table->data[3][] = html_print_label_input_block(
         __('Use SSL'),
         html_print_checkbox_switch(
             'gotty_ssh_use_ssl',
@@ -544,11 +458,6 @@ function quickShellSettings()
     $test_start = '<span id="test-gotty-spinner-ssh" class="invisible">&nbsp;'.html_print_image('images/spinner.gif', true).'</span>';
     $test_start .= '&nbsp;<span id="test-gotty-message-ssh" class="invisible"></span>';
 
-    /*$tip = ui_print_help_tip(
-        __('Save configuration before performing test to check if GoTTY process was started successfully'),
-        true
-    );*/
-
     $ssh_table->data[3][] = html_print_button(
         __('Test'),
         'test-gotty-ssh',
@@ -567,7 +476,7 @@ function quickShellSettings()
     echo '</fieldset>';
 
     echo '<fieldset class="margin-bottom-10">';
-    echo '<legend>'.__('Telnet connection parameters').'</legend>';
+    echo '<legend>'.__('GoTTY telnet connection parameters').'</legend>';
 
     $telnet_table = new StdClass();
     $telnet_table->data = [];
@@ -578,7 +487,7 @@ function quickShellSettings()
     $telnet_table->style[0] = 'width: 50%;';
 
     $telnet_table->data[0][] = html_print_label_input_block(
-        __('Enable Telnet GoTTY'),
+        __('Enable telnet method'),
         html_print_checkbox_switch(
             'gotty_telnet_enabled',
             1,
@@ -588,54 +497,6 @@ function quickShellSettings()
     );
 
     $telnet_table->data[1][] = html_print_label_input_block(
-        __('Gotty address'),
-        html_print_input_text(
-            'gotty_telnet_addr',
-            $config['gotty_telnet_addr'],
-            '',
-            30,
-            100,
-            true
-        )
-    );
-
-    $telnet_table->data[1][] = html_print_label_input_block(
-        __('Gotty port'),
-        html_print_input_text(
-            'gotty_telnet_port',
-            $config['gotty_telnet_port'],
-            '',
-            30,
-            100,
-            true
-        )
-    );
-
-    $telnet_table->data[2][] = html_print_label_input_block(
-        __('Gotty user'),
-        html_print_input_text(
-            'gotty_telnet_user',
-            $config['gotty_telnet_user'],
-            '',
-            30,
-            100,
-            true
-        )
-    );
-
-    $telnet_table->data[2][] = html_print_label_input_block(
-        __('Gotty password'),
-        html_print_input_password(
-            'gotty_telnet_pass',
-            io_output_password($config['gotty_telnet_pass']),
-            '',
-            30,
-            100,
-            true
-        )
-    );
-
-    $telnet_table->data[3][] = html_print_label_input_block(
         __('Use SSL'),
         html_print_checkbox_switch(
             'gotty_telnet_use_ssl',
@@ -675,6 +536,7 @@ if (is_ajax() === true) {
 
     if (empty($method) === false) {
         $address = buildConnectionURL($method);
+
         $ch = curl_init($address);
 
         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
@@ -689,7 +551,7 @@ if (is_ajax() === true) {
         $response_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
         curl_close($ch);
 
-        if ($response_code === 200 || $response_code === 401) {
+        if ($response_code === 200) {
             $result = ['status' => 'success'];
         } else {
             $result = ['status' => 'error'];
@@ -755,16 +617,14 @@ echo "function checkAddressReachability(method, callback) {
 }";
 
 $handle_test_telnet = "var handleTestTelnet = function (event) {
-    var gotty_telnet_addr = $('input#text-gotty_telnet_addr').val();
-    var gotty_telnet_port = $('input#text-gotty_telnet_port').val();
-    var gotty_telnet_user = $('input#text-gotty_telnet_user').val();
-    var gotty_telnet_password = $('input#password-gotty_telnet_pass').val();
+    var gotty_addr = $('input#text-gotty_addr').val();
+    var gotty_port = $('input#text-gotty_port').val();
     var gotty_telnet_use_ssl = $('input#checkbox-gotty_telnet_use_ssl').is(':checked');
 
-    if (gotty_telnet_addr === '') {
-        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_telnet_port;    
+    if (gotty_addr === '') {
+        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
     } else {
-        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + gotty_telnet_addr + ':' + gotty_telnet_port;
+        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
     }
 
     var showLoadingImage = function () {
@@ -808,16 +668,14 @@ $handle_test_telnet = "var handleTestTelnet = function (event) {
 };";
 
 $handle_test_ssh = "var handleTestSSH = function (event) {
-    var gotty_ssh_addr = $('input#text-gotty_ssh_addr').val();
-    var gotty_ssh_port = $('input#text-gotty_ssh_port').val();
-    var gotty_ssh_user = $('input#text-gotty_ssh_user').val();
-    var gotty_ssh_password = $('input#password-gotty_ssh_pass').val();
+    var gotty_addr = $('input#text-gotty_addr').val();
+    var gotty_port = $('input#text-gotty_port').val();
     var gotty_ssh_use_ssl = $('input#checkbox-gotty_ssh_use_ssl').is(':checked');
 
-    if (gotty_ssh_addr === '') {
-        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_ssh_port;    
+    if (gotty_addr === '') {
+        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
     } else {
-        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + gotty_ssh_addr + ':' + gotty_ssh_port;
+        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
     }
 
     var showLoadingImage = function () {
diff --git a/pandora_console/include/functions_cron_task.php b/pandora_console/include/functions_cron_task.php
index 0962632431..ffc5958d85 100644
--- a/pandora_console/include/functions_cron_task.php
+++ b/pandora_console/include/functions_cron_task.php
@@ -454,90 +454,50 @@ function cron_task_start_gotty(bool $restart_mode=true)
     $gotty_ssh_enabled = (bool) $config['gotty_ssh_enabled'];
     $gotty_telnet_enabled = (bool) $config['gotty_telnet_enabled'];
 
-    // Check prev SSH process running and kill it (before changing config parameters).
-    if (empty($config['restart_gotty_ssh_next_cron_port']) === false) {
-        config_update_value('restart_gotty_ssh_next_cron_port', '');
+    // Check prev process running and kill it (only if port changed in setup params).
+    if (empty($config['restart_gotty_next_cron_port']) === false) {
+        config_update_value('restart_gotty_next_cron_port', '');
 
-        $prevProcessRunningSSH = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['restart_gotty_ssh_next_cron_port']."'");
+        $prevProcessRunning = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['restart_gotty_next_cron_port']."'");
 
-        if (!empty($prevProcessRunningSSH)) {
-            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['restart_gotty_ssh_next_cron_port']."'");
+        if (empty($prevProcessRunning) === false) {
+            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['restart_gotty_next_cron_port']."'");
         }
     }
 
-    // Check if prev Telnet process running and kill it (before changing config parameters).
-    if (empty($config['restart_gotty_telnet_next_cron_port']) === false) {
-        config_update_value('restart_gotty_telnet_next_cron_port', '');
+    // Check if gotty is running on the configured port.
+    $processRunning = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['gotty_port']."'");
 
-        $prevProcessRunningTelnet = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['restart_gotty_telnet_next_cron_port']."'");
+    $start_proc = true;
 
-        if (!empty($prevProcessRunningTelnet)) {
-            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['restart_gotty_telnet_next_cron_port']."'");
-        }
+    // If both methods are disabled, do not start process.
+    if ($gotty_ssh_enabled === false && $gotty_telnet_enabled === false) {
+        $start_proc = false;
     }
 
-    // Check if pandora_gotty is running on the configured port.
-    $processRunningSSH = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['gotty_ssh_port']."'");
-    $processRunningTelnet = shell_exec("pgrep -f 'pandora_gotty.*-p ".$config['gotty_telnet_port']."'");
-
-    $start_ssh_proc = true;
-    $start_telnet_proc = true;
-
-    if ($gotty_ssh_enabled === false) {
-        $start_ssh_proc = false;
-    }
-
-    if ($gotty_telnet_enabled === false) {
-        $start_telnet_proc = false;
-    }
-
-    if (!empty($processRunningSSH)) {
+    if (empty($processRunning) === false) {
         // Process is running.
-        if ($restart_mode === true || $start_ssh_proc === false) {
+        if ($restart_mode === true || $start_proc === false) {
             // Stop the process for restarting or in case GoTTY method is disabled in this iteration.
-            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['gotty_ssh_port']."'");
+            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['gotty_port']."'");
         } else {
             // Prevent starting if already running and must not be restarted or terminated.
-            $start_ssh_proc = false;
+            return;
         }
     }
 
-    if (!empty($processRunningTelnet)) {
-        // Process is running.
-        if ($restart_mode === true || $start_telnet_proc === false) {
-            // Stop the process for restarting or in case GoTTY method is disabled in this iteration.
-            shell_exec("pkill -f 'pandora_gotty.*-p ".$config['gotty_telnet_port']."'");
-        } else {
-            // Prevent starting if already running and must not be restarted or terminated.
-            $start_telnet_proc = false;
-        }
-    }
+    if ($start_proc === true) {
+        $logFilePath = $config['homedir'].'/log/gotty_cron_tmp.log';
+        shell_exec('touch '.$logFilePath);
 
-    if ($start_ssh_proc === false && $start_telnet_proc === false) {
-        // Nothing to start.
+        // Start gotty process and capture the output.
+        $command = '/usr/bin/nohup /usr/bin/pandora_gotty --config /etc/pandora_gotty/pandora_gotty.conf -p '.$config['gotty_port'].' /usr/bin/pandora_gotty_exec > '.$logFilePath.' 2>&1 &';
+        shell_exec($command);
+    } else {
         return;
     }
 
-    if ($start_ssh_proc === true) {
-        $logFilePathSSH = $config['homedir'].'/log/gotty_ssh_cron_tmp.log';
-        shell_exec('touch '.$logFilePathSSH);
-
-        // Start pandora_gotty and capture the output.
-        $command_ssh = '/usr/bin/nohup /usr/bin/pandora_gotty --config /etc/pandora_gotty/pandora_gotty.conf --ws-origin ".*" -p '.$config['gotty_ssh_port'].' ssh > '.$logFilePathSSH.' 2>&1 &';
-        shell_exec($command_ssh);
-    }
-
-    if ($start_telnet_proc === true) {
-        $logFilePathTelnet = $config['homedir'].'/log/gotty_telnet_cron_tmp.log';
-        shell_exec('touch '.$logFilePathTelnet);
-
-        // Start pandora_gotty and capture the output.
-        $command_telnet = '/usr/bin/nohup /usr/bin/pandora_gotty --config /etc/pandora_gotty/pandora_gotty.conf --ws-origin ".*" -p '.$config['gotty_telnet_port'].' telnet > '.$logFilePathTelnet.' 2>&1 &';
-        shell_exec($command_telnet);
-    }
-
-    $ssh_hash_read = false;
-    $telnet_hash_read = false;
+    $hash_read = false;
 
     // Maximum wait time to read asynchronously the output of the executed commands (seconds).
     $maxWaitTime = 10;
@@ -547,58 +507,32 @@ function cron_task_start_gotty(bool $restart_mode=true)
 
     // Workaround to wait until process inputs data in the log.
     while (time() - $startTime < $maxWaitTime) {
-        if ($start_ssh_proc === true) {
+        if ($start_proc === true) {
             // Read command output.
-            $log_content_ssh = file_get_contents($logFilePathSSH);
+            $log_content = file_get_contents($logFilePath);
         }
 
-        if ($start_ssh_proc === true
-            && !empty($log_content_ssh)
-            && $ssh_hash_read === false
+        if ($start_proc === true
+            && !empty($log_content)
+            && $hash_read === false
         ) {
             // Extract the URL from the output.
-            if (preg_match('/.*?HTTP server is listening at:\s+(\S+)/', $log_content_ssh, $matches)) {
+            if (preg_match('/.*?HTTP server is listening at:\s+(\S+)/', $log_content, $matches)) {
                 $url = $matches[1];
 
                 // Extract the hash.
                 $parts = explode('/', $url);
                 $hash = array_slice($parts, -2, 1)[0];
 
-                config_update_value('gotty_ssh_connection_hash', $hash);
-                $ssh_hash_read = true;
+                config_update_value('gotty_connection_hash', $hash);
+                $hash_read = true;
             }
 
-            unlink($logFilePathSSH);
+            unlink($logFilePath);
         }
 
-        if ($start_telnet_proc === true) {
-            // Read command output.
-            $log_content_telnet = file_get_contents($logFilePathTelnet);
-        }
-
-        if ($start_telnet_proc === true
-            && !empty($log_content_telnet)
-            && $telnet_hash_read === false
-        ) {
-            // Extract the URL from the output.
-            if (preg_match('/.*?HTTP server is listening at:\s+(\S+)/', $log_content_telnet, $matches)) {
-                $url = $matches[1];
-
-                // Extract the hash.
-                $parts = explode('/', $url);
-                $hash = array_slice($parts, -2, 1)[0];
-
-                config_update_value('gotty_telnet_connection_hash', $hash);
-                $telnet_hash_read = true;
-            }
-
-            unlink($logFilePathTelnet);
-        }
-
-        if (($start_ssh_proc === false || $ssh_hash_read === true)
-            && ($start_telnet_proc === false || $telnet_hash_read === true)
-        ) {
-            // As soon as the reads have completed, the timing loop will terminate.
+        if ($start_proc === false || $hash_read === true) {
+            // As soon as the read has completed, the timing loop will terminate.
             break;
         }
 

From 8225384e55953348d383265937f4e53220774e98 Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Thu, 5 Oct 2023 01:00:25 +0200
Subject: [PATCH 096/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index 131c396ef8..d587f2bca6 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231004
+Version: 7.0NG.773.3-231005
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index dd779f8f15..878b8fbab6 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231004"
+pandora_version="7.0NG.773.3-231005"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index b9d6e9ada8..d13bee4c8b 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231004';
+use constant AGENT_BUILD => '231005';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 4df66d18ca..b2e1e80897 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231004
+%define release     231005
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index 88fd76aa64..213ce7f0b2 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231004
+%define release     231005
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index de935859b3..2e7eca0d15 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231004
+%define release     231005
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 1f1792f353..0bf5520e15 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231004"
+PI_BUILD="231005"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index e439ec2e23..8a9ab1d8e4 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231004}
+{231005}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index 634ef5b8bd..edd46d5302 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231004")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231005")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 7921369578..822a0fe9f4 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231004))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231005))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index 840b01e089..4adb64e5ba 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231004
+Version: 7.0NG.773.3-231005
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index b7b3d69db2..a519476469 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231004"
+pandora_version="7.0NG.773.3-231005"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 990c2bbd74..4cf3a4bcd4 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231004';
+$build_version = 'PC231005';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index 335e6374e2..b47dc530f2 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231004';
+            $build = '231005';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 238b00136d..516340be07 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231004
+%define release     231005
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index cad0eca679..1cc89377a3 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231004
+%define release     231005
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index f85963e8be..fdd7c5c3d1 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231004
+%define release     231005
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 3c666e4647..c0658c738d 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231004
+Version: 7.0NG.773.3-231005
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index ac7bd1b382..949b3fe01e 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231004"
+pandora_version="7.0NG.773.3-231005"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 3fadae2f17..4c72043eca 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231004";
+my $pandora_build = "231005";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 6c3288f358..8f2180bd46 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231004";
+my $pandora_build = "231005";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index f2c276898b..e5eda07c4a 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231004
+%define release     231005
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index 9fe0f3d864..5a2a85cf65 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231004
+%define release     231005
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index 9ad5cb68f4..3a57b6ea1a 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231004"
+PI_BUILD="231005"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index 1557f7ece8..bb22b5f0b4 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231004";
+my $version = "7.0NG.773.3 Build 231005";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index d7edaf89c3..5310702613 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231004";
+my $version = "7.0NG.773.3 Build 231005";
 
 # save program name for logging
 my $progname = basename($0);

From 780d29fce3ed89dec60ad2521c911d0a4a019cfd Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Thu, 5 Oct 2023 09:08:20 +0200
Subject: [PATCH 097/116] ssh by default

---
 pandora_console/extensions/quick_shell.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pandora_console/extensions/quick_shell.php b/pandora_console/extensions/quick_shell.php
index 9aee7610d8..0396b06323 100644
--- a/pandora_console/extensions/quick_shell.php
+++ b/pandora_console/extensions/quick_shell.php
@@ -299,7 +299,7 @@ function quickShellSettings()
     // Gotty settings. Internal communication (WS).
 
     if (isset($config['gotty_ssh_enabled']) === false) {
-        config_update_value('gotty_ssh_enabled', 0);
+        config_update_value('gotty_ssh_enabled', 1);
     }
 
     if (isset($config['gotty_telnet_enabled']) === false) {

From d091ee81942697dd190ba1741f4f7faf355c3c7b Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Thu, 5 Oct 2023 10:52:52 +0200
Subject: [PATCH 098/116] Migration dicovery fix bugs and changed script paths

---
 ...migrate.azure.sql => migrate.azure.mc.sql} |   0
 .../wizards/DiscoveryTaskList.class.php       |   2 +-
 .../wizards/ManageExtensions.class.php        | 162 ++++++++++++------
 .../include/javascript/manage_extensions.js   | 109 ++++++++----
 4 files changed, 177 insertions(+), 96 deletions(-)
 rename pandora_console/extras/discovery/migration_scripts/{migrate.azure.sql => migrate.azure.mc.sql} (100%)

diff --git a/pandora_console/extras/discovery/migration_scripts/migrate.azure.sql b/pandora_console/extras/discovery/migration_scripts/migrate.azure.mc.sql
similarity index 100%
rename from pandora_console/extras/discovery/migration_scripts/migrate.azure.sql
rename to pandora_console/extras/discovery/migration_scripts/migrate.azure.mc.sql
diff --git a/pandora_console/godmode/wizards/DiscoveryTaskList.class.php b/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
index 347458ff62..421e6e3dc8 100644
--- a/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
+++ b/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
@@ -761,7 +761,7 @@ class DiscoveryTaskList extends HTML
                     $data[3] = __('Manual');
                 }
 
-                if ($task['id_recon_script'] == 0 || $ipam === true) {
+                if ($task['id_recon_script'] == 0 || $ipam === true && $task['type'] !== 15) {
                     $data[4] = ui_print_truncate_text($subnet, 50, true, true, true, '[&hellip;]');
                 } else {
                     $data[4] = '-';
diff --git a/pandora_console/godmode/wizards/ManageExtensions.class.php b/pandora_console/godmode/wizards/ManageExtensions.class.php
index ffbf5f738a..2f794c74da 100644
--- a/pandora_console/godmode/wizards/ManageExtensions.class.php
+++ b/pandora_console/godmode/wizards/ManageExtensions.class.php
@@ -757,7 +757,7 @@ class ManageExtensions extends HTML
 
                 $migrationHash = $this->canMigrate($row['short_name']);
                 if ($migrationHash !== false && empty($migrationHash) !== true) {
-                    // Migrate button
+                    // Migrate button.
                     $data[$key]['actions'] .= html_print_input_image(
                         'button_migrate-'.$row['short_name'],
                         'images/reset.png',
@@ -1153,7 +1153,7 @@ class ManageExtensions extends HTML
         // Path to the INI file
         $filePath = $config['homedir'].'/extras/discovery/DiscoveryApplicationsMigrateCodes.ini';
 
-        // Parse the INI file
+        // Parse the INI file.
         $migrationCodes = parse_ini_file($filePath, true);
 
         if ($migrationCodes === false) {
@@ -1167,7 +1167,7 @@ class ManageExtensions extends HTML
             return $migrationCodes[$shortName];
         }
 
-        // All checks ok, discovery app can be migrated
+        // All checks ok, discovery app can be migrated.
         return false;
 
     }
@@ -1176,9 +1176,6 @@ class ManageExtensions extends HTML
     /**
      * Prints html for migrate modal
      *
-     * @param string $shortName Short name of app
-     * @param string $hash      App hash
-     *
      * @return void
      */
     public function loadMigrateModal()
@@ -1191,6 +1188,7 @@ class ManageExtensions extends HTML
             'id'       => 'modal_migrate_form',
             'onsubmit' => 'return false;',
             'class'    => 'modal',
+            'name'     => 'migrate_form',
         ];
 
         $inputs = [];
@@ -1227,12 +1225,43 @@ class ManageExtensions extends HTML
             ],
         ];
 
+        $inputs[] = [
+            'block_id'      => 'migrate_buttons',
+            'class'         => 'flex-row flex-items-center w98p',
+            'direct'        => 1,
+            'block_content' => [
+                [
+                    'arguments' => [
+                        'name'       => 'cancel',
+                        'label'      => __('Cancel'),
+                        'type'       => 'button',
+                        'attributes' => [
+                            'icon'  => 'left',
+                            'mode'  => 'secondary',
+                            'class' => 'sub cancel float-left',
+                        ],
+                    ],
+                ],
+                [
+                    'arguments' => [
+                        'name'       => 'migrate',
+                        'label'      => __('Migrate'),
+                        'type'       => 'submit',
+                        'attributes' => [
+                            'icon'  => 'wand',
+                            'class' => 'sub wand float-right',
+                        ],
+                    ],
+                ],
+            ],
+        ];
+
         $this->printForm(
             [
                 'form'   => $form,
                 'inputs' => $inputs,
             ],
-            false
+            false,
         );
     }
 
@@ -1254,16 +1283,28 @@ class ManageExtensions extends HTML
         }
 
         // 1. Gets md5
-        $console_md5 = $this->calculateDirectoryMD5($shortName, false);
-        $server_md5 = $this->calculateDirectoryMD5($shortName, true);
+        try {
+            $console_md5 = $this->calculateDirectoryMD5($shortName, false);
+            $server_md5 = $this->calculateDirectoryMD5($shortName, true);
+        } catch (Exception $e) {
+            $return = [
+                'error' => $e->getMessage(),
+            ];
+            echo json_encode($return);
+            return;
+        }
 
         if ($console_md5 === false || $server_md5 === false) {
-            return false;
+            $return = [
+                'error' => __('Error calculating app MD5'),
+            ];
+            echo json_encode($return);
+            return;
         }
 
         // 2. Checks MD5
         if ($hash === $console_md5 && $hash === $server_md5) {
-            // Init migration script
+            // Init migration script.
             $return = $this->executeMigrationScript($shortName);
         } else {
             $return = [
@@ -1274,18 +1315,19 @@ class ManageExtensions extends HTML
         // Add shotrname to return for showing messages.
         $return['shortname'] = $shortName;
 
-        echo json_encode($return);
+        echo \json_encode($return);
     }
 
 
     /**
      * Calculates directory MD% and saves it into array
      *
-     * @param  string shortName Shorname of app.
-     * @param  boolean                          $directory
+     * @param string  $shortName Shorname of app.
+     * @param boolean $server    If true, perform checks into server folder.
+     *
      * @return $md5 Array of md5 of filess.
      */
-    function calculateDirectoryMD5($shortName, $server)
+    private function calculateDirectoryMD5($shortName, $server)
     {
         global $config;
 
@@ -1345,57 +1387,63 @@ class ManageExtensions extends HTML
             return false;
         }
 
-        $scriptName = preg_replace('/^pandorafms\.(\w+)$/m', 'migrate.$1.sql', $shortName);
+        $scriptName = preg_replace('/^pandorafms\.(\w+\.?\w*)$/m', 'migrate.$1.sql', $shortName);
 
         $script_path = $config['homedir'].'/extras/discovery/migration_scripts/'.$scriptName;
-        try {
-            $res = db_process_file($script_path, true);
-        } catch (\Exception $e) {
+        if (file_exists($script_path) === false) {
             $return = [
-                'error' => $e->getMessage(),
+                'error' => __('Migration script '.$scriptName.' could not be found'),
             ];
-        } finally {
-            db_release_lock('migrate_working');
-        }
-
-        if ($res === true) {
-            $migrateAppsJson = io_safe_output(
-                db_get_value(
-                    'value',
-                    'tconfig',
-                    'token',
-                    'migrated_discovery_apps'
-                )
-            );
-
-            $migrateApps = json_decode(
-                $migrateAppsJson,
-                true
-            );
-
-            $migrateApps[$shortName] = 1;
-
-            $migratedAppsJson = json_encode($migrateApps);
-
-            if (json_last_error() === JSON_ERROR_NONE) {
-                config_update_value(
-                    'migrated_discovery_apps',
-                    $migratedAppsJson
-                );
-            } else {
+        } else {
+            try {
+                $res = db_process_file($script_path, false);
+            } catch (\Exception $e) {
                 $return = [
-                    'error' => __('Error decoding migrated apps json.'),
+                    'error' => $e->getMessage(),
                 ];
+            } finally {
+                db_release_lock('migrate_working');
             }
 
+            if ($res === true) {
+                $migrateAppsJson = io_safe_output(
+                    db_get_value(
+                        'value',
+                        'tconfig',
+                        'token',
+                        'migrated_discovery_apps'
+                    )
+                );
+
+                $migrateApps = json_decode(
+                    $migrateAppsJson,
+                    true
+                );
+
+                $migrateApps[$shortName] = 1;
+
+                $migratedAppsJson = json_encode($migrateApps);
+
+                if (json_last_error() === JSON_ERROR_NONE) {
+                    config_update_value(
+                        'migrated_discovery_apps',
+                        $migratedAppsJson
+                    );
+                } else {
+                    $return = [
+                        'error' => __('Error decoding migrated apps json.'),
+                    ];
+                }
+
+                    $return = [
+                        'result'    => __('App migrated successfully'),
+                        'shortName' => $shortName,
+                    ];
+            } else {
                 $return = [
-                    'result'    => __('App migrated successfully'),
-                    'shortName' => $shortName,
+                    'error' => __('Error migrating app'),
                 ];
-        } else {
-            $return = [
-                'error' => __('Error migrating app'),
-            ];
+            }
         }
 
         return $return;
@@ -1406,7 +1454,7 @@ class ManageExtensions extends HTML
     /**
      * Check if legacy app has been migrated.
      *
-     * @param string $shortName
+     * @param string $shortName Shorn name of the app.
      *
      * @return boolean
      */
diff --git a/pandora_console/include/javascript/manage_extensions.js b/pandora_console/include/javascript/manage_extensions.js
index 0685c868f1..3148c8a6d9 100644
--- a/pandora_console/include/javascript/manage_extensions.js
+++ b/pandora_console/include/javascript/manage_extensions.js
@@ -1,15 +1,5 @@
 /* globals $, page, url, textsToTranslate, confirmDialog*/
 $(document).ready(function() {
-  function loading(status) {
-    if (status) {
-      $(".spinner-fixed").show();
-      $("#button-upload_button").attr("disabled", "true");
-    } else {
-      $(".spinner-fixed").hide();
-      $("#button-upload_button").removeAttr("disabled");
-    }
-  }
-
   $("#uploadExtension").submit(function(e) {
     e.preventDefault();
     var formData = new FormData(this);
@@ -75,40 +65,73 @@ $(document).ready(function() {
  * Loads modal from AJAX to add a new key or edit an existing one.
  */
 function show_migration_form(shortName, hash) {
-  var btn_ok_text = textsToTranslate["Migrate"];
-  var btn_cancel_text = textsToTranslate["Cancel"];
   var title = textsToTranslate["Migrate"];
   var method = "migrateApp";
+  loading(true);
 
-  load_modal({
-    target: $("#migrate_modal"),
-    form: "modal_migrate_form",
-    url: url,
-    ajax_callback: showMsg,
-    modal: {
-      title: title,
-      ok: btn_ok_text,
-      cancel: btn_cancel_text
+  $("#migrate_modal").dialog({
+    resizable: true,
+    draggable: true,
+    modal: true,
+    width: 630,
+    overlay: {
+      opacity: 0.5,
+      background: "black"
     },
-    extradata: [
-      {
-        name: "shortName",
-        value: shortName
-      },
-      {
-        name: "hash",
-        value: hash
-      }
-    ],
-    onshow: {
-      page: page,
-      method: "loadMigrateModal"
-    },
-    onsubmit: {
-      page: page,
-      method: method
+    closeOnEscape: false,
+    title: title,
+    open: function() {
+      loading(false);
+      $("#migrate_modal").empty();
+      $.ajax({
+        type: "POST",
+        url: url,
+        data: {
+          page: page,
+          method: "loadMigrateModal",
+          shortName: shortName,
+          hash: hash
+        },
+        dataType: "html",
+        success: function(data) {
+          $("#migrate_modal").append(data);
+
+          $("#button-migrate").click(function() {
+            // All fields are required.
+            loading(true);
+            $.ajax({
+              type: "POST",
+              url: url,
+              data: {
+                page: page,
+                method: method,
+                hash: $("#text-hash").val(),
+                shortName: shortName
+              },
+              success: function(data) {
+                loading(false);
+                showMsg(data);
+                $("input[name='button_migrate-" + shortName + "']").hide();
+              },
+              error: function(e) {
+                loading(false);
+                e.error = e.statusText;
+                showMsg(JSON.stringify(e));
+              }
+            });
+          });
+
+          $("#button-cancel").click(function() {
+            $("#migrate_modal").dialog("close");
+          });
+        }
+      });
     }
   });
+
+  $(".ui-widget-overlay").css("background", "#000");
+  $(".ui-widget-overlay").css("opacity", 0.6);
+  $(".ui-draggable").css("cursor", "inherit");
 }
 
 /**
@@ -165,3 +188,13 @@ function showMsg(data) {
     ]
   });
 }
+
+function loading(status) {
+  if (status) {
+    $(".spinner-fixed").show();
+    $("#button-upload_button").attr("disabled", "true");
+  } else {
+    $(".spinner-fixed").hide();
+    $("#button-upload_button").removeAttr("disabled");
+  }
+}

From c616d2cf4915ccf649dca6a00925b33377b67422 Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Fri, 6 Oct 2023 01:00:29 +0200
Subject: [PATCH 099/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index d587f2bca6..6ce3b2c9a4 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231005
+Version: 7.0NG.773.3-231006
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 878b8fbab6..68ec6eb001 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231005"
+pandora_version="7.0NG.773.3-231006"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index d13bee4c8b..5a28dfdf69 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231005';
+use constant AGENT_BUILD => '231006';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index b2e1e80897..cd41f8fc05 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231005
+%define release     231006
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index 213ce7f0b2..bf54a938bd 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231005
+%define release     231006
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index 2e7eca0d15..ff436e7d7f 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231005
+%define release     231006
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 0bf5520e15..3da5c53058 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231005"
+PI_BUILD="231006"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 8a9ab1d8e4..092beddc92 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231005}
+{231006}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index edd46d5302..8cf437a801 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231005")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231006")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 822a0fe9f4..24d2ecdaa3 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231005))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231006))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index 4adb64e5ba..7590ffa286 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231005
+Version: 7.0NG.773.3-231006
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index a519476469..94ec30602b 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231005"
+pandora_version="7.0NG.773.3-231006"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 4cf3a4bcd4..c54687fc48 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231005';
+$build_version = 'PC231006';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index b47dc530f2..b6c141f048 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231005';
+            $build = '231006';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 516340be07..95aa907e54 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231005
+%define release     231006
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 1cc89377a3..d9f316ba6f 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231005
+%define release     231006
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index fdd7c5c3d1..c4fffd8b7c 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231005
+%define release     231006
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index c0658c738d..995edecb26 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231005
+Version: 7.0NG.773.3-231006
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index 949b3fe01e..a4b1257227 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231005"
+pandora_version="7.0NG.773.3-231006"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 4c72043eca..786048c91e 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231005";
+my $pandora_build = "231006";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 8f2180bd46..3a8b173e60 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231005";
+my $pandora_build = "231006";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index e5eda07c4a..9fa656ee0e 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231005
+%define release     231006
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index 5a2a85cf65..a4ca1a0b5a 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231005
+%define release     231006
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index 3a57b6ea1a..013661485b 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231005"
+PI_BUILD="231006"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index bb22b5f0b4..1b950ddda8 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231005";
+my $version = "7.0NG.773.3 Build 231006";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index 5310702613..d327c49a37 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231005";
+my $version = "7.0NG.773.3 Build 231006";
 
 # save program name for logging
 my $progname = basename($0);

From a21f85276c4434fceb1e498adcb61502e597d787 Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Sat, 7 Oct 2023 01:00:27 +0200
Subject: [PATCH 100/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index 6ce3b2c9a4..2ae6e41899 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231006
+Version: 7.0NG.773.3-231007
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 68ec6eb001..b64a2ae3ec 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231006"
+pandora_version="7.0NG.773.3-231007"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 5a28dfdf69..c4287009f1 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231006';
+use constant AGENT_BUILD => '231007';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index cd41f8fc05..2ba83787b7 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231006
+%define release     231007
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index bf54a938bd..6ef3497f65 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231006
+%define release     231007
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index ff436e7d7f..7a7e9c59f4 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231006
+%define release     231007
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 3da5c53058..52d351481f 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231006"
+PI_BUILD="231007"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 092beddc92..9e5c2295ea 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231006}
+{231007}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index 8cf437a801..9f311eff38 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231006")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231007")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 24d2ecdaa3..39deeb80e3 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231006))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231007))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index 7590ffa286..34292435bb 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231006
+Version: 7.0NG.773.3-231007
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 94ec30602b..b0be444ebb 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231006"
+pandora_version="7.0NG.773.3-231007"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index c54687fc48..8f1ef32ccd 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231006';
+$build_version = 'PC231007';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index b6c141f048..6329343114 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231006';
+            $build = '231007';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 95aa907e54..430e257919 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231006
+%define release     231007
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index d9f316ba6f..2aa250cbf5 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231006
+%define release     231007
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index c4fffd8b7c..6fcc0b9657 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231006
+%define release     231007
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 995edecb26..196934d83e 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231006
+Version: 7.0NG.773.3-231007
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index a4b1257227..1b7d514aab 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231006"
+pandora_version="7.0NG.773.3-231007"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 786048c91e..7dcfd3f410 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231006";
+my $pandora_build = "231007";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 3a8b173e60..780c3b93d8 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231006";
+my $pandora_build = "231007";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index 9fa656ee0e..99cf4d9916 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231006
+%define release     231007
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index a4ca1a0b5a..99f59b45a9 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231006
+%define release     231007
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index 013661485b..ad7897c34f 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231006"
+PI_BUILD="231007"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index 1b950ddda8..bde30c0466 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231006";
+my $version = "7.0NG.773.3 Build 231007";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index d327c49a37..f18d3aca07 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231006";
+my $version = "7.0NG.773.3 Build 231007";
 
 # save program name for logging
 my $progname = basename($0);

From b41ec6f30be7bb792ab4a1db0be0a94a13f56e67 Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Sun, 8 Oct 2023 01:00:19 +0200
Subject: [PATCH 101/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index 2ae6e41899..aa7f0cb2a0 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231007
+Version: 7.0NG.773.3-231008
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index b64a2ae3ec..f507981e13 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231007"
+pandora_version="7.0NG.773.3-231008"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index c4287009f1..32da8a9bda 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231007';
+use constant AGENT_BUILD => '231008';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 2ba83787b7..cd4e27182f 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231007
+%define release     231008
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index 6ef3497f65..89d0458d3c 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231007
+%define release     231008
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index 7a7e9c59f4..7c3c929d7e 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231007
+%define release     231008
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 52d351481f..46269f5f7e 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231007"
+PI_BUILD="231008"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 9e5c2295ea..cb44803027 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231007}
+{231008}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index 9f311eff38..d33a36fb69 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231007")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231008")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 39deeb80e3..ce90591ee8 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231007))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231008))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index 34292435bb..3b9122c91e 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231007
+Version: 7.0NG.773.3-231008
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index b0be444ebb..533af87a77 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231007"
+pandora_version="7.0NG.773.3-231008"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 8f1ef32ccd..1335b5634c 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231007';
+$build_version = 'PC231008';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index 6329343114..d2c728d9ac 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231007';
+            $build = '231008';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 430e257919..2e6eaf62a4 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231007
+%define release     231008
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 2aa250cbf5..0bccab3beb 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231007
+%define release     231008
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index 6fcc0b9657..515b31e075 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231007
+%define release     231008
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 196934d83e..d553630890 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231007
+Version: 7.0NG.773.3-231008
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index 1b7d514aab..b19d443a07 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231007"
+pandora_version="7.0NG.773.3-231008"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 7dcfd3f410..fd988a2dad 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231007";
+my $pandora_build = "231008";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 780c3b93d8..59947d2afb 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231007";
+my $pandora_build = "231008";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index 99cf4d9916..f78933003c 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231007
+%define release     231008
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index 99f59b45a9..8761c55432 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231007
+%define release     231008
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index ad7897c34f..7019f1ecea 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231007"
+PI_BUILD="231008"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index bde30c0466..f6ea7b1c57 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231007";
+my $version = "7.0NG.773.3 Build 231008";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index f18d3aca07..7ee32e8a01 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231007";
+my $version = "7.0NG.773.3 Build 231008";
 
 # save program name for logging
 my $progname = basename($0);

From eabfff37538c2789014189a21c34171b0c098f16 Mon Sep 17 00:00:00 2001
From: slerena <slerena@artica.es>
Date: Sun, 8 Oct 2023 17:03:21 +0000
Subject: [PATCH 102/116] Fixed disk status (Crit/Warn), added some sample
 modules

---
 pandora_agents/unix/Darwin/pandora_agent.conf | 34 ++++++++++++++++---
 1 file changed, 30 insertions(+), 4 deletions(-)

diff --git a/pandora_agents/unix/Darwin/pandora_agent.conf b/pandora_agents/unix/Darwin/pandora_agent.conf
index 44f909aee8..46a654561f 100644
--- a/pandora_agents/unix/Darwin/pandora_agent.conf
+++ b/pandora_agents/unix/Darwin/pandora_agent.conf
@@ -239,8 +239,34 @@ module_exec df -kh / | tail -1 | awk '{ print 100-$5 }'
 module_max 100
 module_min 0
 module_description Free disk Percentage of root partition
-module_min_warning 70
-module_max_warning 90
-module_min_critical 91
-module_max_critical 100
+module_min_warning 10
+module_max_warning 20
+module_min_critical 0
+module_max_critical 10
 module_end
+
+# Sample modules to check connectivity from your mac 
+#module_begin
+#module_name Packet_loss
+#module_type generic_data
+#module_exec ping 8.8.8.8 -c 5 | grep "packet loss" | cut -d " " -f 7 | grep -o "[0-9\.]*" 
+#module_end
+
+#module_begin
+#module_name Internet_Latency
+#module_type generic_data
+#module_exec  ping -c 1 8.8.8.8 | grep "time"| cut -f 4 -d "=" | grep -o "[0-9\.]*"
+#module_end
+
+#module_begin
+#module_name Internet_check
+#module_type generic_proc
+#module_exec ping 8.8.8.8 -c 2 | grep "2 packets received" | wc -l
+#module_end
+
+# Check a running process
+#module_begin
+#module_name Cyberduck
+#module_type generic_proc
+#module_exec  ps aux | grep cyberduck | grep -v grep | wc -l
+#module_end

From 64a17cb59d9a66a0420b06d82fb351b0f8a3fde8 Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Mon, 9 Oct 2023 01:00:21 +0200
Subject: [PATCH 103/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index aa7f0cb2a0..a92a79704f 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231008
+Version: 7.0NG.773.3-231009
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index f507981e13..620851f5ec 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231008"
+pandora_version="7.0NG.773.3-231009"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 32da8a9bda..2d47136f63 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231008';
+use constant AGENT_BUILD => '231009';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index cd4e27182f..08b764f51b 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231008
+%define release     231009
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index 89d0458d3c..e4d91ef456 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231008
+%define release     231009
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index 7c3c929d7e..efa33579b4 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231008
+%define release     231009
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 46269f5f7e..c94bb52d1e 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231008"
+PI_BUILD="231009"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index cb44803027..64665b90d3 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231008}
+{231009}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index d33a36fb69..fe6c911fe9 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231008")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231009")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index ce90591ee8..13e4caccbe 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231008))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231009))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index 3b9122c91e..eac67470fa 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231008
+Version: 7.0NG.773.3-231009
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 533af87a77..1f2a64f9a3 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231008"
+pandora_version="7.0NG.773.3-231009"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 1335b5634c..24a465a948 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231008';
+$build_version = 'PC231009';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index d2c728d9ac..b874e818fc 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231008';
+            $build = '231009';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 2e6eaf62a4..9cad5be24a 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231008
+%define release     231009
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 0bccab3beb..1cadeac712 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231008
+%define release     231009
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index 515b31e075..f3ad8170b1 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231008
+%define release     231009
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index d553630890..90b9fbf7f1 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231008
+Version: 7.0NG.773.3-231009
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index b19d443a07..f7b31d8d42 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231008"
+pandora_version="7.0NG.773.3-231009"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index fd988a2dad..06503b6578 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231008";
+my $pandora_build = "231009";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 59947d2afb..704574b52d 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231008";
+my $pandora_build = "231009";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index f78933003c..9806be396c 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231008
+%define release     231009
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index 8761c55432..b1f55859e9 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231008
+%define release     231009
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index 7019f1ecea..b2e46b1b5a 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231008"
+PI_BUILD="231009"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index f6ea7b1c57..7d2c2eb679 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231008";
+my $version = "7.0NG.773.3 Build 231009";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index 7ee32e8a01..97db74caf7 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231008";
+my $version = "7.0NG.773.3 Build 231009";
 
 # save program name for logging
 my $progname = basename($0);

From 025abbed9313b257c1d37aba0f722a870988e56a Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Mon, 9 Oct 2023 14:17:16 +0200
Subject: [PATCH 104/116] add timeout

---
 pandora_console/extensions/quick_shell.php | 57 ++++++++--------------
 1 file changed, 20 insertions(+), 37 deletions(-)

diff --git a/pandora_console/extensions/quick_shell.php b/pandora_console/extensions/quick_shell.php
index 0396b06323..b50a7ec828 100644
--- a/pandora_console/extensions/quick_shell.php
+++ b/pandora_console/extensions/quick_shell.php
@@ -135,6 +135,18 @@ function quickShell()
             $port_value = 22;
         }
 
+        $method_script = "
+            var wizard = document.querySelector('.wizard');
+            p=22;
+            wizard.querySelector('ul > li').classList.remove('invisible_important');
+            wizard.querySelector('ul > li').classList.add('visible');
+            if(this.value == 'telnet') {
+                p=23;
+                wizard.querySelector('ul > li').classList.remove('visible');
+                wizard.querySelector('ul > li').classList.add('invisible_important');
+            }
+            $('#text-port').val(p);";
+
         $wiz->printForm(
             [
                 'form'   => [
@@ -147,8 +159,9 @@ function quickShell()
                     [
                         'label'     => __('Username'),
                         'arguments' => [
-                            'type' => 'text',
-                            'name' => 'username',
+                            'type'     => 'text',
+                            'name'     => 'username',
+                            'required' => true,
                         ],
                     ],
                     [
@@ -166,7 +179,7 @@ function quickShell()
                             'type'   => 'select',
                             'name'   => 'method',
                             'fields' => $method_fields,
-                            'script' => "p=22; if(this.value == 'telnet') { p=23; } $('#text-port').val(p);",
+                            'script' => $method_script,
                         ],
                     ],
                 ],
@@ -193,7 +206,10 @@ function quickShell()
     // Check gotty connection before trying to load iframe.
     $ch = curl_init($gotty_addr);
     curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-
+        // Maximum time for the entire request.
+        curl_setopt($ch, CURLOPT_TIMEOUT, 3);
+        // Maximum time to establish a connection.
+        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 2);
     curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
     curl_setopt($ch, CURLOPT_MAXREDIRS, 10);
 
@@ -226,40 +242,7 @@ function quickShell()
     </style>
 
     <div id="terminal"><iframe id="gotty-iframe" src="<?php echo $gotty_addr; ?>"></iframe></div>
-    
-    <?php
-        /*
-        <script>
-        // Capture error sent from iframe.
-        window.addEventListener("message", function(event) {
-            var received_data = event.data;
 
-            if (received_data.error_code) {
-                // Send error code to the server.
-                var new_url = window.location.href + "?error_code=" + received_data.error_code;
-                window.location.href = new_url;
-            }
-        });
-
-        var iframe = document.getElementById('gotty-iframe');
-        console.log(iframe );
-
-        iframe.addEventListener("error", function (event) {
-            console.log("erorrrrrrr");
-        // If an error occurs while loading the iframe content.
-        if (event.target.contentWindow) {
-            var status = event.target.contentWindow.document;
-            if (status && status.location) {
-                var status_code = status.location.href.match(/(\d{3})\.html/)[1];
-                if (status_code >= "400" && status_code < "600") {
-                    // Post the error data to the parent window.
-                    window.parent.postMessage(status_code, window.location.origin);
-                }
-            }
-        }
-    });
-    </script>*/
-    ?>
     <?php
 
 }

From 62b52b901a48fdf19a32018175d2bd76ff843c73 Mon Sep 17 00:00:00 2001
From: Enrique Martin <enrique.martin@pandorafms.com>
Date: Mon, 9 Oct 2023 14:37:31 +0200
Subject: [PATCH 105/116] Fixed SQL migration scripts

---
 .../migration_scripts/migrate.aws.ec2.sql     |  32 ++++
 .../migration_scripts/migrate.aws.rds.sql     |  76 +++++++--
 .../migration_scripts/migrate.aws.s3.sql      |  32 ++++
 .../migration_scripts/migrate.azure.mc.sql    |  26 ++-
 .../migration_scripts/migrate.gcp.ce.sql      |  24 +++
 .../migration_scripts/migrate.sap.deset.sql   | 152 +++++++++---------
 6 files changed, 251 insertions(+), 91 deletions(-)

diff --git a/pandora_console/extras/discovery/migration_scripts/migrate.aws.ec2.sql b/pandora_console/extras/discovery/migration_scripts/migrate.aws.ec2.sql
index 61a7e2ef4e..e23874971e 100644
--- a/pandora_console/extras/discovery/migration_scripts/migrate.aws.ec2.sql
+++ b/pandora_console/extras/discovery/migration_scripts/migrate.aws.ec2.sql
@@ -48,6 +48,38 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     WHERE `trecon_task`.`type` = @current_app_type
 ;
 
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_useProxy_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_proxyUrl_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_sslCheck_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
 SET @position = 4;
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
diff --git a/pandora_console/extras/discovery/migration_scripts/migrate.aws.rds.sql b/pandora_console/extras/discovery/migration_scripts/migrate.aws.rds.sql
index 466c5771f8..531dd937a6 100644
--- a/pandora_console/extras/discovery/migration_scripts/migrate.aws.rds.sql
+++ b/pandora_console/extras/discovery/migration_scripts/migrate.aws.rds.sql
@@ -46,6 +46,30 @@ INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES
 INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES ('', @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--target_databases&#x20;&#039;_tempfileTargetDatabases_&#039;&#x20;--target_agents&#x20;&#039;_tempfileTargetAgents_&#039;&#x20;--custom_queries&#x20;&#039;_tempfileCustomQueries_&#039;');
 
 -- Migrate current RDS tasks configurations
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleIP_', 'custom', '127.0.0.1', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentaclePort_', 'custom', '41121', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_tentacleExtraOpt_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
     SELECT
@@ -54,6 +78,38 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     WHERE `trecon_task`.`type` = @current_app_type
 ;
 
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_useProxy_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_proxyUrl_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_sslCheck_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
     SELECT
@@ -405,7 +461,7 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     SELECT
     `id_rt`, '_threads_', 'custom', '1', 0
     FROM `trecon_task`
-    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
 ;
 
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
@@ -413,7 +469,7 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     SELECT
     `id_rt`, '_engineAgent_', 'custom', '', 0
     FROM `trecon_task`
-    WHERE `type` = @current_app_type AND `id_app` = @id_app_mysql
+    WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
 ;
 
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
@@ -521,14 +577,6 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
 ;
 
 -- Migrate current RDS tasks
-UPDATE `trecon_task`
-    SET
-        `id_app` = @id_app,
-        `setup_complete` = 1,
-        `type` = 15
-    WHERE `type` = @current_app_type
-;
-
 UPDATE `trecon_task`
     SET
         `setup_complete` = 1,
@@ -541,4 +589,12 @@ UPDATE `trecon_task`
         `setup_complete` = 1,
         `type` = 15
     WHERE `type` = @current_app_type AND `id_app` = @id_app_oracle
+;
+
+UPDATE `trecon_task`
+    SET
+        `id_app` = @id_app,
+        `setup_complete` = 1,
+        `type` = 15
+    WHERE `type` = @current_app_type AND `id_app` IS NULL
 ;
\ No newline at end of file
diff --git a/pandora_console/extras/discovery/migration_scripts/migrate.aws.s3.sql b/pandora_console/extras/discovery/migration_scripts/migrate.aws.s3.sql
index 2da7bf28c9..0392ed9d78 100644
--- a/pandora_console/extras/discovery/migration_scripts/migrate.aws.s3.sql
+++ b/pandora_console/extras/discovery/migration_scripts/migrate.aws.s3.sql
@@ -48,6 +48,38 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     WHERE `trecon_task`.`type` = @current_app_type
 ;
 
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_threads_', 'custom', 1, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_useProxy_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_proxyUrl_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_sslCheck_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
 SET @position = 3;
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
diff --git a/pandora_console/extras/discovery/migration_scripts/migrate.azure.mc.sql b/pandora_console/extras/discovery/migration_scripts/migrate.azure.mc.sql
index a262188962..5f62b39139 100644
--- a/pandora_console/extras/discovery/migration_scripts/migrate.azure.mc.sql
+++ b/pandora_console/extras/discovery/migration_scripts/migrate.azure.mc.sql
@@ -487,6 +487,30 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     WHERE `type` = @current_app_type
 ;
 
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_useProxy_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_proxyUrl_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_sslCheck_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
     SELECT
@@ -674,7 +698,7 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
     SELECT
-    `id_rt`, 'agents_group_name=__taskGroup__&#x0d;&#x0a;threads=_threads_&#x0d;&#x0a;interval=__taskInterval__&#x0d;&#x0a;transfer_mode=tentacle&#x0d;&#x0a;tentacle_ip=_tentacleIP_&#x0d;&#x0a;tentacle_port=_tentaclePort_&#x0d;&#x0a;tentacle_opts=_tentacleExtraOpt_&#x0d;&#x0a;advance_monitoring=_azureMCInstanceSummary_&#x0d;&#x0a;cpu_summary=_azureMCCpuPerfSummary_&#x0d;&#x0a;iops_summary=_azureMCIopsPerfSummary_&#x0d;&#x0a;disk_summary=_azureMCDiskPerfSummary_&#x0d;&#x0a;network_summary=_azureMCNetworkPerfSummary_&#x0d;&#x0a;azure_zones=_azureMCZones_&#x0d;&#x0a;azure_instances=_azureMCInstance_&#x0d;&#x0a;creds_b64=_credentials_&#x0d;&#x0a;stats_agent=_statsAgent_&#x0d;&#x0a;stats_agent_name=_statsAgentName_', 1
+    `id_rt`, '_tempfileAzureMC_', 'custom', 'agents_group_name=__taskGroup__&#x0d;&#x0a;threads=_threads_&#x0d;&#x0a;interval=__taskInterval__&#x0d;&#x0a;transfer_mode=tentacle&#x0d;&#x0a;tentacle_ip=_tentacleIP_&#x0d;&#x0a;tentacle_port=_tentaclePort_&#x0d;&#x0a;tentacle_opts=_tentacleExtraOpt_&#x0d;&#x0a;advance_monitoring=_azureMCInstanceSummary_&#x0d;&#x0a;cpu_summary=_azureMCCpuPerfSummary_&#x0d;&#x0a;iops_summary=_azureMCIopsPerfSummary_&#x0d;&#x0a;disk_summary=_azureMCDiskPerfSummary_&#x0d;&#x0a;network_summary=_azureMCNetworkPerfSummary_&#x0d;&#x0a;azure_zones=_azureMCZones_&#x0d;&#x0a;azure_instances=_azureMCInstance_&#x0d;&#x0a;creds_b64=_credentials_&#x0d;&#x0a;stats_agent=_statsAgent_&#x0d;&#x0a;stats_agent_name=_statsAgentName_', 1
     FROM `trecon_task`
     WHERE `type` = @current_app_type
 ;
diff --git a/pandora_console/extras/discovery/migration_scripts/migrate.gcp.ce.sql b/pandora_console/extras/discovery/migration_scripts/migrate.gcp.ce.sql
index 18e0ddf97e..b197a3367d 100644
--- a/pandora_console/extras/discovery/migration_scripts/migrate.gcp.ce.sql
+++ b/pandora_console/extras/discovery/migration_scripts/migrate.gcp.ce.sql
@@ -671,6 +671,30 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     WHERE `type` = @current_app_type
 ;
 
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_useProxy_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_proxyUrl_', 'custom', '', 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
+INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
+    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
+    SELECT
+    `id_rt`, '_sslCheck_', 'custom', 0, 0
+    FROM `trecon_task`
+    WHERE `type` = @current_app_type
+;
+
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
     SELECT
diff --git a/pandora_console/extras/discovery/migration_scripts/migrate.sap.deset.sql b/pandora_console/extras/discovery/migration_scripts/migrate.sap.deset.sql
index 354f4c3aba..11fb2d8ae4 100644
--- a/pandora_console/extras/discovery/migration_scripts/migrate.sap.deset.sql
+++ b/pandora_console/extras/discovery/migration_scripts/migrate.sap.deset.sql
@@ -16,20 +16,12 @@ INSERT IGNORE INTO `tdiscovery_apps_scripts` (`id_app`, `macro`, `value`) VALUES
 INSERT IGNORE INTO `tdiscovery_apps_executions` (`id`, `id_app`, `execution`) VALUES (1, @id_app, '&#039;_exec1_&#039;&#x20;--conf&#x20;&#039;_tempfileConf_&#039;&#x20;--custom_modules&#x20;&#039;_tempfileCustomModules_&#039;');
 
 -- Migrate current SAP tasks configurations
-INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
-    (`id_task`, `macro`, `type`, `value`, `temp_conf`)
-    SELECT
-    `id_rt`, '_group_', 'agent_groups', `id_group`, 0
-    FROM `trecon_task`
-    WHERE `trecon_task`.`type` = @current_app_type
-;
-
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
     SELECT
     `id_rt`, '_server_', 'custom', `subnet`, 0
     FROM `trecon_task`
-    WHERE `trecon_task`.`type` = @current_app_type
+    WHERE `type` = @current_app_type
 ;
 
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
@@ -37,7 +29,7 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     SELECT
     `id_rt`, '_sapClient_', 'custom', `field3`, 0
     FROM `trecon_task`
-    WHERE `trecon_task`.`type` = @current_app_type
+    WHERE `type` = @current_app_type
 ;
 
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
@@ -45,7 +37,7 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     SELECT
     `id_rt`, '_sapSystem_', 'custom', `field2`, 0
     FROM `trecon_task`
-    WHERE `trecon_task`.`type` = @current_app_type
+    WHERE `type` = @current_app_type
 ;
 
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
@@ -53,7 +45,7 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     SELECT
     `id_rt`, '_sapLicense_', 'custom', `field4`, 0
     FROM `trecon_task`
-    WHERE `trecon_task`.`type` = @current_app_type
+    WHERE `type` = @current_app_type
 ;
 
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
@@ -61,13 +53,13 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     SELECT
     `id_rt`, '_credentials_', 'credentials.sap', `auth_strings`, 0
     FROM `trecon_task`
-    WHERE `trecon_task`.`type` = @current_app_type
+    WHERE `type` = @current_app_type
 ;
 
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     (`id_task`, `macro`, `type`, `value`, `temp_conf`)
     SELECT
-    `id_rt`, '_threads_', 'custom', '1', 0
+    `id_rt`, '_threads_', 'custom', 1, 0
     FROM `trecon_task`
     WHERE `type` = @current_app_type
 ;
@@ -85,7 +77,7 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
     SELECT
     `id_rt`, '_targetAgent_', 'custom', '', 0
     FROM `trecon_task`
-    WHERE `trecon_task`.`type` = @current_app_type
+    WHERE `type` = @current_app_type
 ;
 
 INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
@@ -166,7 +158,7 @@ INSERT IGNORE INTO `tdiscovery_apps_tasks_macros`
 ;
 
 SET @position = -1;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -231,17 +223,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -2;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -306,17 +298,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -3;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -381,17 +373,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -4;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -456,17 +448,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -5;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -531,17 +523,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -6;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -606,17 +598,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -7;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -681,17 +673,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -8;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -756,17 +748,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -9;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -831,17 +823,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -10;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -906,17 +898,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -11;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -981,17 +973,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -12;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -1056,17 +1048,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -13;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -1131,17 +1123,17 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
 SET @position = -14;
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task` AS `main_trecon_task`
     SET `tdiscovery_apps_tasks_macros`.`value` = JSON_MERGE(
         `value`,
         (
@@ -1206,42 +1198,42 @@ UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
             FROM `trecon_task`
             WHERE
                 `trecon_task`.`type` = @current_app_type AND
-                `trecon_task`.`id_rt` = `tdiscovery_apps_tasks`.`id_task`
+                `trecon_task`.`id_rt` = `main_trecon_task`.`id_rt`
         )
     )
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `main_trecon_task`.`id_rt` AND
+    `main_trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task`
     SET
     `tdiscovery_apps_tasks_macros`.`value` = REPLACE(REPLACE(REPLACE(`value`, '"", ', ''), '""', ''), ', ]', ']')
     WHERE 
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `trecon_task`.`id_rt` AND
+    `trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_customModules_'
 ;
 
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task`
     SET
     `tdiscovery_apps_tasks_macros`.`value` = (
         SELECT `tconfig`.`value` FROM `tconfig` WHERE `tconfig`.`token` = 'sap_license'
     )
     WHERE
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `trecon_task`.`id_rt` AND
+    `trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_sapLicense_' AND
     `tdiscovery_apps_tasks_macros`.`value` = ''
 ;
 
-UPDATE `tdiscovery_apps_tasks_macros`, `tdiscovery_apps_tasks`
+UPDATE `tdiscovery_apps_tasks_macros`, `trecon_task`
     SET
     `tdiscovery_apps_tasks_macros`.`value` = 'trial'
     WHERE
-    `tdiscovery_apps_tasks_macros`.`id_task` = `tdiscovery_apps_tasks`.`id_task` AND
-    `tdiscovery_apps_tasks`.`id_app` = @id_app AND
+    `tdiscovery_apps_tasks_macros`.`id_task` = `trecon_task`.`id_rt` AND
+    `trecon_task`.`type` = @current_app_type AND
     `tdiscovery_apps_tasks_macros`.`macro` = '_sapLicense_' AND
     `tdiscovery_apps_tasks_macros`.`value` = ''
 ;

From a822f6db86d32bd302188d23e2017833a6d7625e Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Mon, 9 Oct 2023 16:52:52 +0200
Subject: [PATCH 106/116] Fix discovery migration bugs

---
 .../wizards/DiscoveryTaskList.class.php       |  2 +-
 .../wizards/ManageExtensions.class.php        |  8 +++-
 .../include/javascript/manage_extensions.js   | 43 +++++++++++--------
 3 files changed, 32 insertions(+), 21 deletions(-)

diff --git a/pandora_console/godmode/wizards/DiscoveryTaskList.class.php b/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
index 421e6e3dc8..796f3a56d9 100644
--- a/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
+++ b/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
@@ -761,7 +761,7 @@ class DiscoveryTaskList extends HTML
                     $data[3] = __('Manual');
                 }
 
-                if ($task['id_recon_script'] == 0 || $ipam === true && $task['type'] !== 15) {
+                if ($task['id_recon_script'] == 0 || $ipam === true && $task['type'] !== '15') {
                     $data[4] = ui_print_truncate_text($subnet, 50, true, true, true, '[&hellip;]');
                 } else {
                     $data[4] = '-';
diff --git a/pandora_console/godmode/wizards/ManageExtensions.class.php b/pandora_console/godmode/wizards/ManageExtensions.class.php
index 2f794c74da..91ba1926e5 100644
--- a/pandora_console/godmode/wizards/ManageExtensions.class.php
+++ b/pandora_console/godmode/wizards/ManageExtensions.class.php
@@ -1256,13 +1256,17 @@ class ManageExtensions extends HTML
             ],
         ];
 
-        $this->printForm(
+        $spinner = '<div id="migration-spinner" class="invisible spinner-fixed"></div>';
+
+        $migration_form = $this->printForm(
             [
                 'form'   => $form,
                 'inputs' => $inputs,
             ],
-            false,
+            true,
         );
+
+        echo $migration_form.$spinner;
     }
 
 
diff --git a/pandora_console/include/javascript/manage_extensions.js b/pandora_console/include/javascript/manage_extensions.js
index 3148c8a6d9..f9febd8f28 100644
--- a/pandora_console/include/javascript/manage_extensions.js
+++ b/pandora_console/include/javascript/manage_extensions.js
@@ -1,5 +1,15 @@
 /* globals $, page, url, textsToTranslate, confirmDialog*/
 $(document).ready(function() {
+  function loading(status) {
+    if (status) {
+      $(".spinner-fixed").show();
+      $("#button-upload_button").attr("disabled", "true");
+    } else {
+      $(".spinner-fixed").hide();
+      $("#button-upload_button").removeAttr("disabled");
+    }
+  }
+
   $("#uploadExtension").submit(function(e) {
     e.preventDefault();
     var formData = new FormData(this);
@@ -67,7 +77,6 @@ $(document).ready(function() {
 function show_migration_form(shortName, hash) {
   var title = textsToTranslate["Migrate"];
   var method = "migrateApp";
-  loading(true);
 
   $("#migrate_modal").dialog({
     resizable: true,
@@ -81,7 +90,6 @@ function show_migration_form(shortName, hash) {
     closeOnEscape: false,
     title: title,
     open: function() {
-      loading(false);
       $("#migrate_modal").empty();
       $.ajax({
         type: "POST",
@@ -98,7 +106,7 @@ function show_migration_form(shortName, hash) {
 
           $("#button-migrate").click(function() {
             // All fields are required.
-            loading(true);
+            loadingMigration(true);
             $.ajax({
               type: "POST",
               url: url,
@@ -109,12 +117,11 @@ function show_migration_form(shortName, hash) {
                 shortName: shortName
               },
               success: function(data) {
-                loading(false);
-                showMsg(data);
-                $("input[name='button_migrate-" + shortName + "']").hide();
+                loadingMigration(false);
+                showMsg(data, shortName);
               },
               error: function(e) {
-                loading(false);
+                loadingMigration(false);
                 e.error = e.statusText;
                 showMsg(JSON.stringify(e));
               }
@@ -137,7 +144,7 @@ function show_migration_form(shortName, hash) {
 /**
  * Process ajax responses and shows a dialog with results.
  */
-function showMsg(data) {
+function showMsg(data, shortName) {
   var title = textsToTranslate["migrationSuccess"];
   var text = "";
   var failed = 0;
@@ -153,11 +160,9 @@ function showMsg(data) {
     title = textsToTranslate["Error"];
     text = data["error"];
     failed = 1;
-  }
-  if (data["report"] != undefined) {
-    data["report"].forEach(function(item) {
-      text += "<br>" + item;
-    });
+  } else {
+    $("input[name='button_migrate-" + shortName + "']").hide();
+    $("#migrate_modal").dialog("close");
   }
 
   $("#msg").empty();
@@ -189,12 +194,14 @@ function showMsg(data) {
   });
 }
 
-function loading(status) {
+function loadingMigration(status) {
   if (status) {
-    $(".spinner-fixed").show();
-    $("#button-upload_button").attr("disabled", "true");
+    $("#migration-spinner").show();
+    $("#button-migrate").attr("disabled", "true");
+    $("#button-cancel").attr("disabled", "true");
   } else {
-    $(".spinner-fixed").hide();
-    $("#button-upload_button").removeAttr("disabled");
+    $("#migration-spinner").hide();
+    $("#button-migrate").removeAttr("disabled");
+    $("#button-cancel").removeAttr("disabled");
   }
 }

From c059f834205b500186ae30830f08ef080e42605e Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Mon, 9 Oct 2023 18:56:02 +0200
Subject: [PATCH 107/116] some changes in gotty

---
 pandora_console/extensions/quick_shell.php   | 380 ++++++++++---------
 pandora_console/include/functions_config.php |  13 +-
 2 files changed, 205 insertions(+), 188 deletions(-)

diff --git a/pandora_console/extensions/quick_shell.php b/pandora_console/extensions/quick_shell.php
index b50a7ec828..2f45242942 100644
--- a/pandora_console/extensions/quick_shell.php
+++ b/pandora_console/extensions/quick_shell.php
@@ -79,8 +79,6 @@ function quickShell()
         return;
     }
 
-    $method = get_parameter('method', null);
-
     $setup_anchor = html_print_anchor(
         [
             'href'    => 'index.php?sec=gsetup&sec2=godmode/setup/setup&section=quickshell',
@@ -89,6 +87,15 @@ function quickShell()
         true
     );
 
+    $fetch_result = get_parameter('fetch-result', null);
+
+    if (isset($fetch_result) === true && $fetch_result === '0') {
+        ui_print_error_message(__('Connection error. Please check your settings at %s', $setup_anchor));
+        return;
+    }
+
+    $method = get_parameter('method', null);
+
     if ((bool) $config['gotty_ssh_enabled'] === false
         && (bool) $config['gotty_telnet_enabled'] === false
     ) {
@@ -118,6 +125,9 @@ function quickShell()
     $connectionURL = buildConnectionURL($method);
     $gotty_addr = $connectionURL.$args;
 
+    $connectionURLSSH = buildConnectionURL('ssh');
+    $connectionURLTelnet = buildConnectionURL('telnet');
+
     // Username. Retrieve from form.
     if (empty($username) === true) {
         // No username provided, ask for it.
@@ -160,6 +170,7 @@ function quickShell()
                         'label'     => __('Username'),
                         'arguments' => [
                             'type'     => 'text',
+                            'id'       => 'username',
                             'name'     => 'username',
                             'required' => true,
                         ],
@@ -191,7 +202,7 @@ function quickShell()
         html_print_action_buttons(
             html_print_submit_button(
                 __('Connect'),
-                'submit',
+                'submit-btn',
                 false,
                 [
                     'icon' => 'cog',
@@ -200,30 +211,57 @@ function quickShell()
                 true
             )
         );
+
+        echo "<script>
+            $(document).ready(function() {            
+                // Intercept form submission.
+                var connectForm = document.getElementById('connect_form');
+                connectForm.addEventListener('submit', function (event) {
+                    var username = $('#text-username').val();
+                    var port = $('#text-port').val();
+                    var method = $('#method').val();
+
+                    var connectionURL = '';
+                    if (method == 'ssh') {
+                        connectionURL = '".$connectionURLSSH."'+'&arg=".$agent_address."&arg='+port+'&arg='+username;
+                    } else if (method == 'telnet') {
+                        connectionURL = '&arg=".$agent_address."&arg='+port;
+                    }
+
+                    // Prevent the default form submission behavior.
+                    event.preventDefault();
+
+                    var xhr = new XMLHttpRequest();
+
+                    var input = document.createElement('input');
+                    input.type = 'hidden';
+                    input.name = 'fetch-result';
+
+                    // Handle response.
+                    xhr.onreadystatechange = function () {
+                        if (xhr.readyState === 4) {
+                            input.value = (xhr.status === 200) ? 1 : 0;
+                            connectForm.appendChild(input);
+                            connectForm.submit();
+                        }
+                    };
+            
+                    // Open and send the request.
+                    try {
+                        xhr.open('GET', connectionURL, true);
+                    } catch (error) {
+                        input.value = 0;
+                        connectForm.appendChild(input);
+                        connectForm.submit();
+                    }
+                    xhr.send();
+                });
+            });
+        </script>";
+
         return;
     }
 
-    // Check gotty connection before trying to load iframe.
-    $ch = curl_init($gotty_addr);
-    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-        // Maximum time for the entire request.
-        curl_setopt($ch, CURLOPT_TIMEOUT, 3);
-        // Maximum time to establish a connection.
-        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 2);
-    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
-    curl_setopt($ch, CURLOPT_MAXREDIRS, 10);
-
-    $response = curl_exec($ch);
-    $responseCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-    $finalUrl = curl_getinfo($ch, CURLINFO_EFFECTIVE_URL);
-
-    curl_close($ch);
-
-    if ($responseCode !== 200) {
-        ui_print_error_message(__('Connection error. Please check your settings at %s', $setup_anchor));
-        exit;
-    }
-
     ?>
     <style>#terminal {
         width: 100%;
@@ -511,41 +549,141 @@ function quickShellSettings()
     html_print_input_hidden('update_config', 1);
 
     echo '</fieldset>';
-}
 
+    echo '<script>';
 
-if (is_ajax() === true) {
-    $method = (string) get_parameter('method', '');
-
-    if (empty($method) === false) {
-        $address = buildConnectionURL($method);
-
-        $ch = curl_init($address);
-
-        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-
-        // Maximum time for the entire request.
-        curl_setopt($ch, CURLOPT_TIMEOUT, 2);
-
-        // Maximum time to establish a connection.
-        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 1);
-
-        curl_exec($ch);
-        $response_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-        curl_close($ch);
-
-        if ($response_code === 200) {
-            $result = ['status' => 'success'];
-        } else {
-            $result = ['status' => 'error'];
+    echo 'var server_addr = "'.$_SERVER['SERVER_ADDR'].'";';
+    echo "function checkAddressReachability(method, callback) {
+        var connectionURL = (method == 'ssh') ? '".buildConnectionURL('ssh')."' : '".buildConnectionURL('telnet')."';
+    
+        var xhr = new XMLHttpRequest();
+    console.log(connectionURL);
+    
+    
+        // Initialize the request with a 'HEAD' method, which is faster for checking
+        xhr.open('HEAD', connectionURL, false); // Synchronous request
+    
+        try {
+            // Send the request
+            xhr.send();
+    
+            // Check if the request was successful (status code 200)
+            if (xhr.status === 200) {
+                callback(true);
+            } else {
+                callback(false);
+            }
+        } catch (error) {
+            // An error occurred.
+            callback(false);
         }
+    }";
+    
+    $handle_test_telnet = "var handleTestTelnet = function (event) {
+        var gotty_addr = $('input#text-gotty_addr').val();
+        var gotty_port = $('input#text-gotty_port').val();
+        var gotty_telnet_use_ssl = $('input#checkbox-gotty_telnet_use_ssl').is(':checked');
+    
+        if (gotty_addr === '') {
+            url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
+        } else {
+            url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
+        }
+    
+        var showLoadingImage = function () {
+            $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon cog rotation secondary mini');
+        }
+    
+        var showSuccessImage = function () {
+            $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon tick secondary mini');
+        }
+    
+        var showFailureImage = function () {
+            $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon fail secondary mini');
+        }
+    
+        var hideMessage = function () {
+            $('span#test-gotty-message-telnet').hide();
+        }
+        var showMessage = function () {
+            $('span#test-gotty-message-telnet').show();
+        }
+        var changeTestMessage = function (message) {
+            $('span#test-gotty-message-telnet').text(message);
+        }
+    
+        var errorMessage = '".__('Unable to connect.')."';
+    
+        hideMessage();
+        showLoadingImage();
+    
+        checkAddressReachability('telnet', function(isReachable) {
+            if (isReachable) {
+                showSuccessImage();
+                hideMessage();
+            } else {
+                showFailureImage();
+                changeTestMessage(errorMessage);
+                showMessage();
+            }
+        });
+    
+    };";
+    
+    $handle_test_ssh = "var handleTestSSH = function (event) {
+        var gotty_addr = $('input#text-gotty_addr').val();
+        var gotty_port = $('input#text-gotty_port').val();
+        var gotty_ssh_use_ssl = $('input#checkbox-gotty_ssh_use_ssl').is(':checked');
+    
+        if (gotty_addr === '') {
+            url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
+        } else {
+            url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
+        }
+    
+        var showLoadingImage = function () {
+            $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon cog rotation secondary mini');
+        }
+    
+        var showSuccessImage = function () {
+            $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon tick secondary mini');
+        }
+    
+        var showFailureImage = function () {
+            $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon fail secondary mini');
+        }
+    
+        var hideMessage = function () {
+            $('span#test-gotty-message-ssh').hide();
+        }
+        var showMessage = function () {
+            $('span#test-gotty-message-ssh').show();
+        }
+        var changeTestMessage = function (message) {
+            $('span#test-gotty-message-ssh').text(message);
+        }
+    
+        var errorMessage = '".__('Unable to connect.')."';
+    
+    
+        hideMessage();
+        showLoadingImage();
+    
+        checkAddressReachability('ssh', function(isReachable) {
+            if (isReachable) {
+                showSuccessImage();
+                hideMessage();
+            } else {
+                showFailureImage();
+                changeTestMessage(errorMessage);
+                showMessage();
+            }
+        });
+    };";
 
-        echo json_encode($result);
-        return;
-    }
-
-    $result = ['status' => 'error'];
-    return;
+    echo $handle_test_ssh;
+    echo $handle_test_telnet;
+    echo '</script>';
 }
 
 // This extension is useful only if the agent has associated IP.
@@ -573,136 +711,4 @@ if (empty($agent_id) === false
     }
 }
 
-echo '<script>';
-
-echo 'var server_addr = "'.$_SERVER['SERVER_ADDR'].'";';
-echo "function checkAddressReachability(method, callback) {
-    $.ajax({
-        url: 'ajax.php',
-        data: {
-            page: 'extensions/quick_shell',
-            method
-        },
-        type: 'GET',
-        async: false,
-        dataType: 'json',
-        success: function (data) {
-            if (data.status === 'success') {
-                callback(true);
-            } else {
-                callback(false);
-            }
-        },
-        error: function () {
-            callback(false);
-        }
-    });
-}";
-
-$handle_test_telnet = "var handleTestTelnet = function (event) {
-    var gotty_addr = $('input#text-gotty_addr').val();
-    var gotty_port = $('input#text-gotty_port').val();
-    var gotty_telnet_use_ssl = $('input#checkbox-gotty_telnet_use_ssl').is(':checked');
-
-    if (gotty_addr === '') {
-        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
-    } else {
-        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
-    }
-
-    var showLoadingImage = function () {
-        $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon cog rotation secondary mini');
-    }
-
-    var showSuccessImage = function () {
-        $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon tick secondary mini');
-    }
-
-    var showFailureImage = function () {
-        $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon fail secondary mini');
-    }
-
-    var hideMessage = function () {
-        $('span#test-gotty-message-telnet').hide();
-    }
-    var showMessage = function () {
-        $('span#test-gotty-message-telnet').show();
-    }
-    var changeTestMessage = function (message) {
-        $('span#test-gotty-message-telnet').text(message);
-    }
-
-    var errorMessage = '".__('Unable to connect.')."';
-
-    hideMessage();
-    showLoadingImage();
-
-    checkAddressReachability('telnet', function(isReachable) {
-        if (isReachable) {
-            showSuccessImage();
-            hideMessage();
-        } else {
-            showFailureImage();
-            changeTestMessage(errorMessage);
-            showMessage();
-        }
-    });
-
-};";
-
-$handle_test_ssh = "var handleTestSSH = function (event) {
-    var gotty_addr = $('input#text-gotty_addr').val();
-    var gotty_port = $('input#text-gotty_port').val();
-    var gotty_ssh_use_ssl = $('input#checkbox-gotty_ssh_use_ssl').is(':checked');
-
-    if (gotty_addr === '') {
-        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
-    } else {
-        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
-    }
-
-    var showLoadingImage = function () {
-        $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon cog rotation secondary mini');
-    }
-
-    var showSuccessImage = function () {
-        $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon tick secondary mini');
-    }
-
-    var showFailureImage = function () {
-        $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon fail secondary mini');
-    }
-
-    var hideMessage = function () {
-        $('span#test-gotty-message-ssh').hide();
-    }
-    var showMessage = function () {
-        $('span#test-gotty-message-ssh').show();
-    }
-    var changeTestMessage = function (message) {
-        $('span#test-gotty-message-ssh').text(message);
-    }
-
-    var errorMessage = '".__('Unable to connect.')."';
-
-
-    hideMessage();
-    showLoadingImage();
-
-    checkAddressReachability('ssh', function(isReachable) {
-        if (isReachable) {
-            showSuccessImage();
-            hideMessage();
-        } else {
-            showFailureImage();
-            changeTestMessage(errorMessage);
-            showMessage();
-        }
-    });
-};";
-
-echo $handle_test_ssh;
-echo $handle_test_telnet;
-echo '</script>';
-
 extensions_add_godmode_function('quickShellSettings');
diff --git a/pandora_console/include/functions_config.php b/pandora_console/include/functions_config.php
index 4039b40164..f2579fe53a 100644
--- a/pandora_console/include/functions_config.php
+++ b/pandora_console/include/functions_config.php
@@ -1497,7 +1497,6 @@ function config_update_config()
                         $interval_values = implode(',', $interval_values_array);
                     }
 
-                    hd($interval_values, true);
                     if (config_update_value('interval_values', $interval_values, true) === false) {
                         $error_update[] = __('Delete interval');
                     }
@@ -2490,6 +2489,18 @@ function config_process_config()
         config_update_value('2Fa_auth', '');
     }
 
+    if (!isset($config['gotty_ssh_enabled'])) {
+        config_update_value('gotty_ssh_enabled', 1);
+    }
+
+    if (!isset($config['gotty_telnet_enabled'])) {
+        config_update_value('gotty_telnet_enabled', 0);
+    }
+
+    if (!isset($config['gotty_port'])) {
+        config_update_value('gotty_port', 8080);
+    }
+
     if (isset($config['performance_variables_control']) === false) {
         config_update_value(
             'performance_variables_control',

From bbcc8ee7eff8e2eb8b5ca478942b1479b39b116a Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Tue, 10 Oct 2023 01:00:24 +0200
Subject: [PATCH 108/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index a92a79704f..81808209d5 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231009
+Version: 7.0NG.773.3-231010
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 620851f5ec..7c985eda83 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231009"
+pandora_version="7.0NG.773.3-231010"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index 2d47136f63..c19a2cec78 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231009';
+use constant AGENT_BUILD => '231010';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 08b764f51b..06c801ffd1 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231009
+%define release     231010
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index e4d91ef456..991cbe0877 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231009
+%define release     231010
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index efa33579b4..777b6fc28c 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231009
+%define release     231010
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index c94bb52d1e..9a2d9ad307 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231009"
+PI_BUILD="231010"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index 64665b90d3..e3920cfc95 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231009}
+{231010}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index fe6c911fe9..bb12ef0f09 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231009")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231010")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 13e4caccbe..260c1b3308 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231009))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231010))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index eac67470fa..6a74fdef53 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231009
+Version: 7.0NG.773.3-231010
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 1f2a64f9a3..1eb6207148 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231009"
+pandora_version="7.0NG.773.3-231010"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 24a465a948..467b9356c5 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231009';
+$build_version = 'PC231010';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index b874e818fc..ef32094185 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231009';
+            $build = '231010';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index 9cad5be24a..e1d0fb1004 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231009
+%define release     231010
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 1cadeac712..337cd1269b 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231009
+%define release     231010
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index f3ad8170b1..f5abec9d74 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231009
+%define release     231010
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 90b9fbf7f1..611291d7a8 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231009
+Version: 7.0NG.773.3-231010
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index f7b31d8d42..32c8f21a50 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231009"
+pandora_version="7.0NG.773.3-231010"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index 06503b6578..fed3a729d1 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231009";
+my $pandora_build = "231010";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index 704574b52d..b7c99eac51 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231009";
+my $pandora_build = "231010";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index 9806be396c..715a34aa34 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231009
+%define release     231010
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index b1f55859e9..f058ecacf8 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231009
+%define release     231010
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index b2e46b1b5a..f0d1ef8097 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231009"
+PI_BUILD="231010"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index 7d2c2eb679..dc2b07c47b 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231009";
+my $version = "7.0NG.773.3 Build 231010";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index 97db74caf7..586345bcd3 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231009";
+my $version = "7.0NG.773.3 Build 231010";
 
 # save program name for logging
 my $progname = basename($0);

From 6a58a2e86f93cdaedc79d1f364b3f40f8c9484df Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Tue, 10 Oct 2023 09:10:42 +0200
Subject: [PATCH 109/116] ip check

---
 pandora_console/extensions/quick_shell.php | 61 +++++++++++++---------
 1 file changed, 35 insertions(+), 26 deletions(-)

diff --git a/pandora_console/extensions/quick_shell.php b/pandora_console/extensions/quick_shell.php
index 2f45242942..cd35c15e8e 100644
--- a/pandora_console/extensions/quick_shell.php
+++ b/pandora_console/extensions/quick_shell.php
@@ -318,7 +318,6 @@ function quickShellSettings()
     ui_require_css_file('discovery');
 
     // Gotty settings. Internal communication (WS).
-
     if (isset($config['gotty_ssh_enabled']) === false) {
         config_update_value('gotty_ssh_enabled', 1);
     }
@@ -553,32 +552,42 @@ function quickShellSettings()
     echo '<script>';
 
     echo 'var server_addr = "'.$_SERVER['SERVER_ADDR'].'";';
-    echo "function checkAddressReachability(method, callback) {
-        var connectionURL = (method == 'ssh') ? '".buildConnectionURL('ssh')."' : '".buildConnectionURL('telnet')."';
-    
-        var xhr = new XMLHttpRequest();
-    console.log(connectionURL);
-    
-    
-        // Initialize the request with a 'HEAD' method, which is faster for checking
-        xhr.open('HEAD', connectionURL, false); // Synchronous request
-    
-        try {
-            // Send the request
-            xhr.send();
-    
-            // Check if the request was successful (status code 200)
-            if (xhr.status === 200) {
-                callback(true);
-            } else {
+    echo "
+        function isValidIP(ip) {
+            // Regular expression for IPv4 address pattern
+            const ipv4Pattern = /^(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/;
+            
+            return ipv4Pattern.test(ip);
+        }
+
+        function checkAddressReachability(method, callback) {
+            var connectionURL = (method == 'ssh') ? '".buildConnectionURL('ssh')."' : '".buildConnectionURL('telnet')."';
+
+            if (isValidIP('".$gotty_addr."') === false) {
                 callback(false);
             }
-        } catch (error) {
-            // An error occurred.
-            callback(false);
-        }
-    }";
-    
+
+            var xhr = new XMLHttpRequest();
+
+            // Initialize the request with a 'HEAD' method, which is faster for checking
+            xhr.open('HEAD', connectionURL, false); // Synchronous request
+
+            try {
+                // Send the request
+                xhr.send();
+        
+                // Check if the request was successful (status code 200)
+                if (xhr.status === 200) {
+                    callback(true);
+                } else {
+                    callback(false);
+                }
+            } catch (error) {
+                // An error occurred.
+                callback(false);
+            }
+        }";
+
     $handle_test_telnet = "var handleTestTelnet = function (event) {
         var gotty_addr = $('input#text-gotty_addr').val();
         var gotty_port = $('input#text-gotty_port').val();
@@ -629,7 +638,7 @@ function quickShellSettings()
         });
     
     };";
-    
+
     $handle_test_ssh = "var handleTestSSH = function (event) {
         var gotty_addr = $('input#text-gotty_addr').val();
         var gotty_port = $('input#text-gotty_port').val();

From 133826b498e2fb0d9360ac79d3ea72cc0a2398d1 Mon Sep 17 00:00:00 2001
From: miguel angel rasteu <miguelangel.rasteu@pandorafms.com>
Date: Tue, 10 Oct 2023 09:57:09 +0200
Subject: [PATCH 110/116] #12205 Fix ehorus conf interfaz

---
 pandora_console/godmode/menu.php              |  2 +-
 pandora_console/godmode/setup/setup.php       |  4 +-
 .../godmode/users/user_management.php         | 91 +++++++++++++++++++
 .../operation/agentes/ver_agente.php          |  4 +-
 4 files changed, 96 insertions(+), 5 deletions(-)

diff --git a/pandora_console/godmode/menu.php b/pandora_console/godmode/menu.php
index e949eeaa83..a9b1266c6c 100644
--- a/pandora_console/godmode/menu.php
+++ b/pandora_console/godmode/menu.php
@@ -474,7 +474,7 @@ if ($access_console_node === true) {
             }
         }
 
-        $sub2['godmode/setup/setup&section=ehorus']['text'] = __('eHorus');
+        $sub2['godmode/setup/setup&section=ehorus']['text'] = __('Pandora RC');
         $sub2['godmode/setup/setup&section=ehorus']['refr'] = 0;
 
         $sub2['godmode/setup/setup&section=ITSM']['text'] = __('ITSM');
diff --git a/pandora_console/godmode/setup/setup.php b/pandora_console/godmode/setup/setup.php
index d7f496c2d6..2561905102 100644
--- a/pandora_console/godmode/setup/setup.php
+++ b/pandora_console/godmode/setup/setup.php
@@ -188,7 +188,7 @@ $buttons['ehorus'] = [
         'images/RC.png',
         true,
         [
-            'title' => __('eHorus'),
+            'title' => __('Pandora RC'),
             'class' => 'invert_filter',
         ]
     ).'</a>',
@@ -299,7 +299,7 @@ switch ($section) {
 
     case 'ehorus':
         $buttons['ehorus']['active'] = true;
-        $subpage = __('eHorus');
+        $subpage = __('Pandora RC');
         $help_header = 'setup_ehorus_tab';
     break;
 
diff --git a/pandora_console/godmode/users/user_management.php b/pandora_console/godmode/users/user_management.php
index 9991736583..6d5f9bf18b 100644
--- a/pandora_console/godmode/users/user_management.php
+++ b/pandora_console/godmode/users/user_management.php
@@ -576,6 +576,57 @@ $userManagementTable->data['fields_autorefreshTime'][0] .= ui_print_input_placeh
     true
 );
 
+// eHorus conf
+if (isset($config['ehorus_user_level_conf']) === true && (bool) $config['ehorus_user_level_conf'] === true) {
+    $userManagementTable->data['captions_ehorus_user_level_enabled'][1] = __('Pandora RC user access enabled');
+    $userManagementTable->data['fields_ehorus_user_level_enabled'][1] = html_print_checkbox_switch(
+        'ehorus_user_level_enabled',
+        1,
+        $user_info['ehorus_user_level_enabled'],
+        true
+    );
+
+    $userManagementTable->rowclass['captions_ehorus_user_level_user'] = 'field_half_width';
+    $userManagementTable->rowclass['fields_ehorus_user_level_user'] = 'field_half_width';
+    $userManagementTable->data['captions_ehorus_user_level_user'][1] = __('Pandora RC User');
+    $userManagementTable->data['fields_ehorus_user_level_user'][1] = html_print_input_text_extended(
+        'ehorus_user_level_user',
+        $user_info['ehorus_user_level_user'],
+        '',
+        '',
+        25,
+        150,
+        $view_mode,
+        '',
+        [
+            'class'       => 'input',
+            'placeholder' => __('Pandora RC User'),
+        ],
+        true
+    );
+
+    $userManagementTable->rowclass['captions_ehorus_user_level_pass'] = 'field_half_width';
+    $userManagementTable->rowclass['fields_ehorus_user_level_pass'] = 'field_half_width';
+    $userManagementTable->data['captions_ehorus_user_level_pass'][1] = __('Pandora RC Password');
+    $userManagementTable->data['fields_ehorus_user_level_pass'][1] = html_print_input_text_extended(
+        'ehorus_user_level_pass',
+        io_output_password($user_info['ehorus_user_level_pass']),
+        '',
+        '',
+        '25',
+        '150',
+        $view_mode,
+        '',
+        [
+            'class'       => 'input w100p',
+            'placeholder' => __('Pandora RC Password'),
+        ],
+        true,
+        true
+    );
+}
+
+
 // Title for Language and Appearance.
 $userManagementTable->data['title_lookAndFeel'] = html_print_subtitle_table(__('Language and Appearance'));
 // Language and color scheme.
@@ -893,5 +944,45 @@ $(document).ready(function () {
     $('#skin1').on("change", () => {
         $('#advanced-line1_looknfeel-1 > a').css('display', 'block');
     })
+
+    var ehorus_user_level_enabled = 
+    <?php
+    if (isset($user_info['ehorus_user_level_enabled']) === true) {
+                                            echo $user_info['ehorus_user_level_enabled'];
+    } else {
+        echo 0;
+    }
+    ?>
+                                    ;
+    var chk_ehorus_user_level_enabled = ehorus_user_level_enabled;
+
+    if (ehorus_user_level_enabled == 0) {
+        $('#advanced-captions_ehorus_user_level_user').hide();
+        $('#advanced-fields_ehorus_user_level_user').hide();
+        $('#advanced-captions_ehorus_user_level_pass').hide();
+        $('#advanced-fields_ehorus_user_level_pass').hide();
+    } else {
+        $('#advanced-captions_ehorus_user_level_user').show();
+        $('#advanced-fields_ehorus_user_level_user').show();
+        $('#advanced-captions_ehorus_user_level_pass').show();
+        $('#advanced-fields_ehorus_user_level_pass').show();
+    }
+
+    $('#checkbox-ehorus_user_level_enabled1').on('change', () =>{
+
+        if (chk_ehorus_user_level_enabled == 1) {
+            $('#advanced-captions_ehorus_user_level_user').hide();
+            $('#advanced-fields_ehorus_user_level_user').hide();
+            $('#advanced-captions_ehorus_user_level_pass').hide();
+            $('#advanced-fields_ehorus_user_level_pass').hide();
+            chk_ehorus_user_level_enabled = 0;
+        } else {
+            $('#advanced-captions_ehorus_user_level_user').show();
+            $('#advanced-fields_ehorus_user_level_user').show();
+            $('#advanced-captions_ehorus_user_level_pass').show();
+            $('#advanced-fields_ehorus_user_level_pass').show();
+            chk_ehorus_user_level_enabled = 1;
+        }
+    })
 });
 </script>
\ No newline at end of file
diff --git a/pandora_console/operation/agentes/ver_agente.php b/pandora_console/operation/agentes/ver_agente.php
index 4e0299fa86..383a3b40d5 100644
--- a/pandora_console/operation/agentes/ver_agente.php
+++ b/pandora_console/operation/agentes/ver_agente.php
@@ -1759,7 +1759,7 @@ if ((bool) $config['ehorus_enabled'] === true && empty($config['ehorus_custom_fi
                 'images/RC.png',
                 true,
                 [
-                    'title' => __('eHorus'),
+                    'title' => __('Pandora RC'),
                     'class' => 'invert_filter',
                 ]
             ).'</a>';
@@ -2048,7 +2048,7 @@ switch ($tab) {
     break;
 
     case 'ehorus':
-        $tab_name = __('eHorus');
+        $tab_name = __('Pandora RC');
     break;
 
     case 'extension':

From c790b48fd716cb6580b086fc4135a3914d2f71e1 Mon Sep 17 00:00:00 2001
From: Calvo <luis.calvo@pandorafms.com>
Date: Tue, 10 Oct 2023 10:40:37 +0200
Subject: [PATCH 111/116] Fix discovery list network column for disco ext

---
 pandora_console/godmode/wizards/DiscoveryTaskList.class.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pandora_console/godmode/wizards/DiscoveryTaskList.class.php b/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
index 796f3a56d9..d0bbcb7cb5 100644
--- a/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
+++ b/pandora_console/godmode/wizards/DiscoveryTaskList.class.php
@@ -761,7 +761,7 @@ class DiscoveryTaskList extends HTML
                     $data[3] = __('Manual');
                 }
 
-                if ($task['id_recon_script'] == 0 || $ipam === true && $task['type'] !== '15') {
+                if (($task['id_recon_script'] == 0 || $ipam === true) && (int) $task['type'] !== DISCOVERY_EXTENSION) {
                     $data[4] = ui_print_truncate_text($subnet, 50, true, true, true, '[&hellip;]');
                 } else {
                     $data[4] = '-';
@@ -998,7 +998,7 @@ class DiscoveryTaskList extends HTML
                         && $task['type'] != DISCOVERY_CLOUD_AWS_RDS
                         && $task['type'] != DISCOVERY_CLOUD_AWS_S3
                     ) {
-                        if (check_acl($config['id_user'], 0, 'MR') && (int) $task['type'] !== 15) {
+                        if (check_acl($config['id_user'], 0, 'MR') && (int) $task['type'] !== DISCOVERY_EXTENSION) {
                             $data[9] .= '<a href="#" onclick="show_map('.$task['id_rt'].',\''.$task['name'].'\')">';
                             $data[9] .= html_print_image(
                                 'images/web@groups.svg',

From 23c5836ddc0a8ef9596ab12066f622f36f2aa3f0 Mon Sep 17 00:00:00 2001
From: miguel angel rasteu <miguelangel.rasteu@pandorafms.com>
Date: Tue, 10 Oct 2023 11:34:11 +0200
Subject: [PATCH 112/116] #12205 Change ehorus images

---
 .../godmode/setup/setup_ehorus.php            |  18 +++++------
 .../ehorus/images/Pandora RC blanco.svg       |  20 +++++++++++++
 .../ehorus/images/Pandora RC blanco@2x.png    | Bin 0 -> 265640 bytes
 .../ehorus/images/Pandora RC negro.svg        |  20 +++++++++++++
 .../ehorus/images/Pandora RC negro@2x.png     | Bin 0 -> 297215 bytes
 .../include/ehorus/images/Pandora RC.svg      |  28 ++++++++++++++++++
 .../include/ehorus/images/Pandora RC@2x.png   | Bin 0 -> 308532 bytes
 7 files changed, 77 insertions(+), 9 deletions(-)
 create mode 100644 pandora_console/include/ehorus/images/Pandora RC blanco.svg
 create mode 100644 pandora_console/include/ehorus/images/Pandora RC blanco@2x.png
 create mode 100644 pandora_console/include/ehorus/images/Pandora RC negro.svg
 create mode 100644 pandora_console/include/ehorus/images/Pandora RC negro@2x.png
 create mode 100644 pandora_console/include/ehorus/images/Pandora RC.svg
 create mode 100644 pandora_console/include/ehorus/images/Pandora RC@2x.png

diff --git a/pandora_console/godmode/setup/setup_ehorus.php b/pandora_console/godmode/setup/setup_ehorus.php
index 9a711c9a39..3382a08113 100644
--- a/pandora_console/godmode/setup/setup_ehorus.php
+++ b/pandora_console/godmode/setup/setup_ehorus.php
@@ -64,7 +64,7 @@ $table_enable->style['name'] = 'font-weight: bold';
 
 // Enable eHorus.
 $row = [];
-$row['name'] = __('Enable eHorus');
+$row['name'] = __('Enable Pandora RC');
 $row['control'] = html_print_checkbox_switch('ehorus_enabled', 1, $config['ehorus_enabled'], true);
 $table_enable->data['ehorus_enabled'] = $row;
 
@@ -81,7 +81,7 @@ $table_remote->size['ehorus_port'] = '50%';
 // Enable eHorus user configuration.
 $row = [];
 $row['ehorus_user_level_conf'] = html_print_label_input_block(
-    __('eHorus configuration at user level'),
+    __('Pandora RC configuration at user level'),
     html_print_checkbox_switch(
         'ehorus_user_level_conf',
         1,
@@ -155,15 +155,15 @@ $table_remote->data['ehorus_test'] = $row;
 // Print.
 echo '<div class="center pdd_b_10px mrgn_btn_20px white_box max_floating_element_size">';
 echo '<a target="_blank" rel="noopener noreferrer" href="http://ehorus.com">';
-if ($config['style'] === 'pandora_black' && is_metaconsole() === true) {
+if ($config['style'] === 'pandora_black' || is_metaconsole() === true) {
     html_print_image(
-        'include/ehorus/images/ehorus-logo.png',
+        'include/ehorus/images/Pandora RC blanco@2x.png',
         false,
         ['class' => 'w400px mrgn_top_15px']
     );
 } else {
     html_print_image(
-        'include/ehorus/images/ehorus-logo-grey.png',
+        'include/ehorus/images/Pandora RC@2x.png',
         false,
         ['class' => 'w400px mrgn_top_15px']
     );
@@ -180,13 +180,13 @@ echo '</a>';
 echo '</div>';
 
 if ($custom_field_created !== null) {
-    ui_print_result_message($custom_field_created, __('Custom field eHorusID created'), __('Error creating custom field'));
+    ui_print_result_message($custom_field_created, __('Custom field Pandora RC ID created'), __('Error creating custom field'));
 }
 
 if ($custom_field_created) {
-    $info_messsage = __('eHorus has his own agent identifiers');
+    $info_messsage = __('Pandora RC has his own agent identifiers');
     $info_messsage .= '. '.__('To store them, it will be necessary to use an agent custom field');
-    $info_messsage .= '.<br />'.__('Possibly the eHorus id will have to be filled in by hand for every agent').'.';
+    $info_messsage .= '.<br />'.__('Possibly the Pandora RC id will have to be filled in by hand for every agent').'.';
     ui_print_info_message($info_messsage);
 }
 
@@ -205,7 +205,7 @@ echo '</div>';
 // Form remote.
     echo '<div id="form_remote">';
     echo '<fieldset>';
-    echo '<legend>'.__('eHorus API').'</legend>';
+    echo '<legend>'.__('Pandora RC API').'</legend>';
     html_print_input_hidden('update_config', 1);
     html_print_table($table_remote);
 
diff --git a/pandora_console/include/ehorus/images/Pandora RC blanco.svg b/pandora_console/include/ehorus/images/Pandora RC blanco.svg
new file mode 100644
index 0000000000..1092ba6c90
--- /dev/null
+++ b/pandora_console/include/ehorus/images/Pandora RC blanco.svg	
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg width="2586px" height="500.001408px" viewBox="0 0 2586 500.001408" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+    <title>Pandora RC blanco</title>
+    <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
+        <g id="Pandora-RC-blanco" fill="#FFFFFF">
+            <g id="Group-3">
+                <path d="M383.135312,354.853112 C368.253912,367.5785 348.637362,378.490503 327.50345,384.159533 C303.84882,390.511663 277.275646,392.268711 251.94523,388.906025 C204.245186,382.627838 161.368307,352.529162 132.513812,324.293167 C135.802013,316.507934 136.780729,313.662855 140.153423,306.004383 C145.821522,311.895245 155.890319,319.754422 160.364948,322.842459 C191.34234,344.395336 231.811157,362.951727 285.415177,359.849605 C312.558681,358.367207 337.737713,348.948166 355.601026,334.610097 C372.922172,320.747382 387.409269,300.838876 387.081857,273.134572 C386.743884,243.817588 372.358883,219.902028 356.667755,203.880856 C351.291862,198.373798 345.4759,192.479415 339.603609,188.137854 C330.316376,181.275159 319.990579,175.954721 309.611973,170.926538 C299.046778,165.72934 288.196418,160.528621 275.606901,157.810304 C296.371154,144.613083 352.112153,128.436982 358.71672,132.204598 C362.846335,134.549675 367.299841,138.306728 370.728864,141.10251 C382.124911,150.218733 391.852214,163.060318 400.188896,174.965282 C412.123588,192.15195 422.185344,212.035809 425.864327,234.409111 C434.817107,289.666309 412.176397,330.117127 383.135312,354.853112 M50.3193389,262.986656 L50.3193389,262.919755 C75.7729749,222.828092 105.162595,186.549821 140.051327,155.736354 C164.10026,134.436998 192.444275,115.447508 223.82301,101.655216 C229.089766,99.3030966 234.194575,96.3453418 239.883797,94.5108296 C245.509649,92.6551906 251.38194,90.8136361 257.384492,88.8206727 C280.331491,81.2572711 311.903857,77.4474013 337.220191,80.2361415 C356.153753,82.4227674 375.002822,87.8664447 387.578256,97.6411201 C391.852214,100.912256 396.967585,104.493252 399.699538,108.415798 C401.290831,110.690453 403.515823,115.919341 402.255463,119.024983 C400.692336,122.792599 394.932702,123.162319 390.165866,123.070769 C373.879764,122.736261 358.987803,121.02851 343.240346,122.926403 C320.923527,125.662326 302.444117,131.926428 286.50655,138.606024 C252.842972,152.62719 223.925107,175.729368 201.125971,199.046335 C178.136726,222.490063 156.900719,252.028879 139.998519,282.356429 C121.181135,316.127651 106.986244,351.733385 95.2663059,389.120814 C68.3621998,353.990434 51.6923566,310.567776 50.3193389,262.986656 M249.952594,0 C111.890382,0 0,111.901724 0,249.979577 C0,388.075037 111.890382,500.001408 249.952594,500.001408 C388.025367,500.001408 499.919269,388.075037 499.919269,249.979577 C499.919269,111.901724 388.025367,0 249.952594,0" id="Fill-1"></path>
+            </g>
+            <path d="M659.867032,265.066592 L707.890966,265.066592 C722.624503,265.066592 733.809316,262.587712 741.438366,257.629951 C749.070936,252.675712 752.887221,243.112305 752.887221,228.946772 C752.887221,214.777718 749.070936,205.21431 741.438366,200.260071 C733.809316,195.305832 722.624503,192.82343 707.890966,192.82343 L659.867032,192.82343 L659.867032,265.066592 Z M610.265887,331.91185 L610.265887,168.087445 C610.265887,164.6649 611.452315,161.724751 613.82165,159.270519 C616.187466,156.812766 619.081364,155.583889 622.503347,155.583889 L722.888545,155.583889 C775.953919,155.583889 802.488366,180.041704 802.488366,228.946772 C802.488366,277.851839 775.953919,302.306133 722.888545,302.306133 L659.867032,302.306133 L659.867032,331.91185 C659.867032,335.334395 658.65948,338.253418 656.251418,340.661875 C653.836315,343.077375 650.921293,344.281604 647.49931,344.281604 L622.767389,344.281604 C619.345406,344.281604 616.40574,343.077375 613.951911,340.661875 C611.494561,338.253418 610.265887,335.334395 610.265887,331.91185 L610.265887,331.91185 Z" id="Fill-4"></path>
+            <path d="M876.429595,261.512708 L960.236483,261.512708 L960.236483,192.825895 L922.739018,192.825895 C914.321363,192.825895 906.973958,195.213226 900.703844,199.99493 C894.430209,204.776633 890.198498,211.202708 888.00519,219.273153 L876.429595,261.512708 Z M807.225981,332.174879 L840.248818,206.9034 C849.194556,172.780064 878.313093,155.670861 927.60795,155.586354 L998.522554,155.586354 C1001.76851,155.586354 1004.46174,156.81523 1006.61632,159.269463 C1008.76034,161.727216 1009.83763,164.579337 1009.83763,167.822304 L1009.83763,332.174879 C1009.83763,335.597424 1008.60895,338.470672 1006.15512,340.794622 C1003.69425,343.118572 1000.75811,344.280547 997.339647,344.280547 L972.600684,344.280547 C969.006194,344.280547 966.045405,343.118572 963.721836,340.794622 C961.398268,338.470672 960.236483,335.509396 960.236483,331.914315 L960.236483,298.75225 L866.691731,298.75225 L857.876253,331.914315 C856.996113,335.509396 855.024601,338.470672 851.958194,340.794622 C848.884747,343.118572 845.642313,344.280547 842.22033,344.280547 L816.301981,344.280547 C812.879998,344.280547 810.426169,343.294629 808.933452,341.322792 C807.440735,339.347435 806.719021,337.615036 806.764788,336.122074 C806.807035,334.632633 806.96194,333.315728 807.225981,332.174879 L807.225981,332.174879 Z" id="Fill-6"></path>
+            <path d="M1047.46219,331.912907 L1047.46219,168.084981 C1047.46219,164.662436 1048.64861,161.725808 1051.01795,159.268054 C1053.38377,156.813822 1056.27766,155.584945 1059.69965,155.584945 L1098.38002,155.584945 C1101.44995,155.584945 1104.6959,156.813822 1108.11788,159.268054 C1111.53635,161.725808 1114.34223,164.662436 1116.53554,168.084981 L1196.00158,290.328283 L1196.00158,167.820895 C1196.00158,164.401872 1197.20561,161.503976 1199.62071,159.137772 C1202.02878,156.768047 1204.94732,155.584945 1208.3693,155.584945 L1230.99945,155.584945 C1234.41791,155.584945 1237.33645,156.768047 1239.74804,159.137772 C1242.15962,161.503976 1243.36717,164.4899 1243.36717,168.084981 L1243.36717,331.912907 C1243.36717,335.335452 1242.15962,338.250953 1239.74804,340.662931 C1237.33645,343.07491 1234.41791,344.28266 1230.99945,344.28266 L1187.31988,344.28266 C1183.8979,344.28266 1180.3879,343.07491 1176.79341,340.662931 C1173.1954,338.250953 1170.34375,335.335452 1168.24198,331.912907 L1095.48612,219.01118 L1095.48612,331.912907 C1095.48612,335.335452 1094.27857,338.250953 1091.86699,340.662931 C1089.45541,343.07491 1086.54038,344.28266 1083.1184,344.28266 L1059.96369,344.28266 C1056.54171,344.28266 1053.60204,343.07491 1051.14821,340.662931 C1048.69086,338.250953 1047.46219,335.335452 1047.46219,331.912907" id="Fill-8"></path>
+            <path d="M1330.72595,307.04171 L1365.7203,307.04171 C1389.3186,307.04171 1405.36883,302.745923 1413.87801,294.147307 C1422.38368,285.548692 1426.63652,270.833862 1426.63652,249.999296 C1426.63652,229.16473 1422.38368,214.425252 1413.87801,205.784382 C1405.36883,197.147034 1389.3186,192.823078 1365.7203,192.823078 L1330.72595,192.823078 L1330.72595,307.04171 Z M1281.12481,332.175584 L1281.12481,168.347657 C1281.12481,164.752577 1282.35348,161.724399 1284.81083,159.270167 C1287.26466,156.812414 1290.20432,155.583537 1293.62631,155.583537 L1367.17077,155.583537 C1405.23504,155.583537 1432.93128,163.196234 1450.25594,178.414587 C1467.57709,193.636461 1476.23766,217.495683 1476.23766,249.999296 C1476.23766,282.502908 1467.57709,306.341004 1450.25594,321.517103 C1432.93128,336.693202 1405.23504,344.281251 1367.17077,344.281251 L1293.62631,344.281251 C1290.20432,344.281251 1287.26466,343.119276 1284.81083,340.795326 C1282.35348,338.471376 1281.12481,335.598128 1281.12481,332.175584 L1281.12481,332.175584 Z" id="Fill-10"></path>
+            <path d="M1641.35677,202.956558 C1632.49201,192.428359 1618.17742,187.16426 1598.39892,187.16426 C1578.62043,187.16426 1564.27767,192.428359 1555.37418,202.956558 C1546.47421,213.484756 1542.0207,229.164378 1542.0207,249.998944 C1542.0207,270.833509 1546.47421,286.495525 1555.37418,296.974428 C1564.27767,307.460373 1578.62043,312.699825 1598.39892,312.699825 C1618.17742,312.699825 1632.49201,307.460373 1641.35677,296.974428 C1650.2145,286.495525 1654.64336,270.833509 1654.64336,249.998944 C1654.64336,229.164378 1650.2145,213.484756 1641.35677,202.956558 M1677.3404,324.738591 C1659.39963,340.488635 1633.08698,348.361897 1598.39892,348.361897 C1563.70734,348.361897 1537.37356,340.488635 1519.39055,324.738591 C1501.41106,308.995589 1492.41956,284.058899 1492.41956,249.932042 C1492.41956,215.808707 1501.41106,190.896664 1519.39055,175.192395 C1537.37356,159.488125 1563.70734,151.635991 1598.39892,151.635991 C1633.08698,151.635991 1659.39963,159.488125 1677.3404,175.192395 C1695.27412,190.896664 1704.2445,215.808707 1704.2445,249.932042 C1704.2445,284.058899 1695.27412,308.995589 1677.3404,324.738591" id="Fill-12"></path>
+            <path d="M1780.81453,238.090459 L1836.86182,238.090459 C1845.89557,238.090459 1853.85556,236.29468 1860.74177,232.696078 C1867.62446,229.097476 1871.07109,223.350981 1871.07109,215.456593 C1871.07109,207.562204 1867.62446,201.815709 1860.74177,198.217108 C1853.85556,194.622027 1845.89557,192.826247 1836.86182,192.826247 L1780.81453,192.826247 L1780.81453,238.090459 Z M1927.11837,338.622433 C1927.11837,342.397091 1924.88282,344.280899 1920.40467,344.280899 L1888.8323,344.280899 C1885.49481,344.280899 1881.83343,343.076671 1877.84816,340.661171 C1873.85585,338.252713 1870.80704,335.333691 1868.70175,331.914667 L1846.33564,296.911048 C1837.12586,282.523683 1825.98682,275.330001 1812.9185,275.330001 L1780.81453,275.330001 L1780.81453,331.914667 C1780.81453,335.333691 1779.60698,338.252713 1777.19892,340.661171 C1774.78382,343.076671 1771.8688,344.280899 1768.44681,344.280899 L1743.71489,344.280899 C1740.29291,344.280899 1737.35324,343.076671 1734.89941,340.661171 C1732.44206,338.252713 1731.21339,335.333691 1731.21339,331.914667 L1731.21339,168.086741 C1731.21339,164.664196 1732.39982,161.727568 1734.76915,159.269815 C1737.13497,156.812061 1740.02887,155.583185 1743.45085,155.583185 L1851.99318,155.583185 C1872.07797,155.583185 1888.54714,160.981087 1901.39717,171.76985 C1914.24369,182.558613 1920.67223,197.122034 1920.67223,215.456593 C1920.67223,240.984834 1904.13617,256.995442 1871.07109,263.484897 C1876.33432,265.418001 1881.20325,268.731391 1885.67436,273.421545 C1890.14899,278.11522 1895.27844,284.935662 1901.06624,293.88287 L1925.01308,331.914667 C1926.41426,334.3689 1927.11837,336.608343 1927.11837,338.622433 L1927.11837,338.622433 Z" id="Fill-14"></path>
+            <path d="M2002.63716,261.512708 L2086.44405,261.512708 L2086.44405,192.825895 L2048.94659,192.825895 C2040.52893,192.825895 2033.18153,195.213226 2026.91141,199.99493 C2020.63778,204.776633 2016.40607,211.202708 2014.21276,219.273153 L2002.63716,261.512708 Z M1933.43355,332.174879 L1966.45639,206.9034 C1975.40212,172.780064 2004.52066,155.670861 2053.81552,155.586354 L2124.73012,155.586354 C2127.97608,155.586354 2130.6693,156.81523 2132.82389,159.269463 C2134.96791,161.727216 2136.0452,164.579337 2136.0452,167.822304 L2136.0452,332.174879 C2136.0452,335.597424 2134.81652,338.470672 2132.36269,340.794622 C2129.90182,343.118572 2126.96568,344.280547 2123.54722,344.280547 L2098.80825,344.280547 C2095.21376,344.280547 2092.25297,343.118572 2089.9294,340.794622 C2087.60584,338.470672 2086.44405,335.509396 2086.44405,331.914315 L2086.44405,298.75225 L1992.8993,298.75225 L1984.08382,331.914315 C1983.20368,335.509396 1981.23217,338.470672 1978.16576,340.794622 C1975.09232,343.118572 1971.84988,344.280547 1968.4279,344.280547 L1942.50955,344.280547 C1939.08757,344.280547 1936.63374,343.294629 1935.14102,341.322792 C1933.6483,339.347435 1932.92659,337.615036 1932.97236,336.122074 C1933.0146,334.632633 1933.16951,333.315728 1933.43355,332.174879 L1933.43355,332.174879 Z" id="Fill-16"></path>
+            <path d="M2223.2702,238.090459 L2279.31748,238.090459 C2288.35124,238.090459 2296.31122,236.29468 2303.19743,232.696078 C2310.08012,229.097476 2313.52675,223.350981 2313.52675,215.456593 C2313.52675,207.562204 2310.08012,201.815709 2303.19743,198.217108 C2296.31122,194.622027 2288.35124,192.826247 2279.31748,192.826247 L2223.2702,192.826247 L2223.2702,238.090459 Z M2369.57403,338.622433 C2369.57403,342.397091 2367.33848,344.280899 2362.86033,344.280899 L2331.28796,344.280899 C2327.95047,344.280899 2324.28909,343.076671 2320.30382,340.661171 C2316.31151,338.252713 2313.26271,335.333691 2311.15741,331.914667 L2288.79131,296.911048 C2279.58152,282.523683 2268.44248,275.330001 2255.37417,275.330001 L2223.2702,275.330001 L2223.2702,331.914667 C2223.2702,335.333691 2222.06264,338.252713 2219.65458,340.661171 C2217.23948,343.076671 2214.32446,344.280899 2210.90247,344.280899 L2186.17055,344.280899 C2182.74857,344.280899 2179.8089,343.076671 2177.35508,340.661171 C2174.89773,338.252713 2173.66905,335.333691 2173.66905,331.914667 L2173.66905,168.086741 C2173.66905,164.664196 2174.85548,161.727568 2177.22481,159.269815 C2179.59063,156.812061 2182.48453,155.583185 2185.90651,155.583185 L2294.44884,155.583185 C2314.53363,155.583185 2331.0028,160.981087 2343.85284,171.76985 C2356.69935,182.558613 2363.12789,197.122034 2363.12789,215.456593 C2363.12789,240.984834 2346.59183,256.995442 2313.52675,263.484897 C2318.78998,265.418001 2323.65891,268.731391 2328.13002,273.421545 C2332.60465,278.11522 2337.73411,284.935662 2343.5219,293.88287 L2367.46874,331.914667 C2368.86992,334.3689 2369.57403,336.608343 2369.57403,338.622433 L2369.57403,338.622433 Z" id="Fill-18"></path>
+            <path d="M2405.03275,322.042456 C2388.76072,306.514244 2380.62471,282.503613 2380.62471,250 C2380.62471,217.496387 2388.76072,193.461108 2405.03275,177.890642 C2421.30124,162.316654 2445.70927,154.531421 2478.24979,154.531421 L2507.59013,154.531421 C2527.49888,154.531421 2545.1052,159.707492 2560.41258,170.059634 C2575.71645,180.411776 2583.37014,194.58083 2583.37014,212.563275 C2583.37014,217.739346 2581.83518,221.443582 2578.76877,223.679503 C2575.69533,225.918946 2572.71341,227.038668 2569.81951,227.038668 L2554.16359,227.038668 C2546.09095,227.038668 2539.82084,222.211189 2535.34973,212.563275 C2528.85782,198.70056 2518.06731,191.770963 2502.98172,191.770963 L2479.56648,191.770963 C2460.35832,191.770963 2447.33225,195.894214 2440.48829,204.140716 C2433.64784,212.387218 2430.22586,227.651345 2430.22586,249.933098 C2430.22586,272.218372 2433.64784,287.500106 2440.48829,295.792383 C2447.33225,304.081138 2460.35832,308.225516 2479.56648,308.225516 L2505.74535,308.225516 C2520.83447,308.225516 2531.57569,301.295919 2537.98311,287.436725 C2542.45422,277.697261 2548.7701,272.827529 2556.92723,272.827529 L2572.58315,272.827529 C2576.70573,272.827529 2579.96928,274.362745 2582.38439,277.436697 C2584.79597,280.507128 2586,283.838123 2586,287.436725 C2586,305.41917 2578.37095,319.563576 2563.10933,329.873464 C2547.84771,340.179831 2530.259,345.334776 2510.35024,345.334776 L2478.24979,345.334776 C2445.70927,345.334776 2421.30124,337.570669 2405.03275,322.042456" id="Fill-20"></path>
+        </g>
+    </g>
+</svg>
\ No newline at end of file
diff --git a/pandora_console/include/ehorus/images/Pandora RC blanco@2x.png b/pandora_console/include/ehorus/images/Pandora RC blanco@2x.png
new file mode 100644
index 0000000000000000000000000000000000000000..444fc6397bfd49e735bf2d11046d856919112a31
GIT binary patch
literal 265640
zcmZr&1yod9+eSp`?hXk_DG8AfkPfB0hEC}QQ92bQ2N*z7q+y65r9rx9DCzDV;^%(X
z@qXX>FKeB34rlLo@3+r6@3Z$ryit+G#-PAJLPElpmy=dQLL%ZvLVCD?_81B2!G*Nm
z&3yxk)hp#!NJtfNnAfI{?*F&9(2=)PRz_mGzeYnsc|d{m*WCyAhu8zkKi4u3o+3T`
z&wXShq%a#Kl;3?+?$3YyeY!vXqWSxboP~_&LByZ+5OMu*<FBsMxK6wGC-ir6x~@n_
zBusxD59HMt50H=~kmRLbX?Q)@X+od%-`2UiTmAV_Diw#CN+nciE&dCAFoAf{347v~
zoL+GT`N()Y`jDI>sjC}Fi$b&rya-+zUYc$<At9mTlbgWO^_lI<(k4*NWb?XvS<U?R
zDRjuF-QRd>-N*P`4<1n3bT*HQ!(lD#b+EX5>IJ5```Rt+lU~wo<8vKEBWQ$&AsK>%
zLWlGKO#%t|m?aB+9`m%P=B4>9N(3G<-uu6rg7OIKX1_d`=6I)clRU<oALu8AglHN^
z;Q~QTRD9Dg=gSO9es1=6dgw<@#=YB=qWo*X{|xYkFGyaa*`7d)uS3~EgGex<9Q!}B
z;k|FwK-16{w%1<GN3I%~84b{@inIDd#{CF+LKCMzi^)xycS2fQt@`6{K24O6CzNp3
zU$D+9aV2ypGuR{8c|#a9!V;#KO616Rqoz!NyD;6&j1UcvETh%>oXS@1A~-|^i*qwf
zcSlcVS^TO;>W}oA1Y~(G)>S!dHqnfcwP~`*ary{m&hVe=)sLnh_$y(ZuP(ml8F3l7
zk)3|{TMQ(WK7yxO!qqdXGsF3tF>Fix$Dy`=leQY55v5Y`@|;j|DdF9CjZh#I=Y~?*
zT=HH17itRG6-$4LO?_mbst-bANI^o#Gi+f3kcb2sCww7o&5mXI2Y)70!0+J|HaANV
z@NXPQPhy$;Z9KdUmQQ{zJsst=9zXG!!+B0NFn^Q0XAjCvkYWxkoo<Knyuw<Rd4`Z{
z7M&4z&z)Ns%~(9T8J6gk<Zqjm$4JDhvOlvnyD$f)V{;-03^@z~VxNV(V=@2fgC|GV
z;3CxB8>xJY?0x2;IKUd#WpqgOAD_9O*@Oorhb^p#<t5<l!grLl;gPe?KbogOpMT&8
zAUJ+60c`!Xiw$yDRuNkqYX*Y>TJsbOpA)td#ut<h{o`w}xlVrTgjtF1Vt1@3V&G{{
zn*7YuLDclF^6$^{gWd_F{FYLp6XgSQ7*9efkB*WlGI6^b#$n87Pd|i2i>j^g%=Q%d
z=$6Jh8UdS1ra^_&dG-ur+(Uu9^xzIzT7*ve@DI|cYzdC$T}FS1?*2q$;bpa#W$k6D
zuGJ0u<12aSUYZlOWp7HpIpvWvpOf}^a~-mvM!rG}l8!E<iX+9sF{r>mG3cO1)b8WR
z!4Ue$kpAyL!$YH6JONiSv$qhMK%|qy_{iCU$Z7u$w+Cn(A@9{!x%1-_G0jU7eo*L4
z^f6EAv~nR_c@xdPgldv|W(Mv2s75KEV{N3Xpvm5v+CtsOh(8jLj*yt!8(E({OyIDH
zsgHs=B=e;a=fF8{K;})(=c!h<7id@rZ+ny8YO-2>5^PC#WfdblgC8bKfvNwPpN2bz
zvVX8+_-Z;plv;dTe6_+sPyOl#34)DddTt%z@1`Fr(llZuXPIvC{JA{TQK)h_LyYYa
zLvtG<Hzl;I5vI_)0hArVotctT0<=;FFJm*<OFF+L(ll6OAgq^%@-2fZKjr-;FKt@+
z>M-BRkhZTeoT>rtS3!#inoYuu#`W@!TnnT*e+5-*4kP^r{!|kEhS<)%ev8@?Mbo*;
zrhylKr7S$;h9m>yIKj=4+D1iGM|?A&7~XpcLzEXRq8@8;^i>_^HhiVcI*PWNW93E9
z-5};1QWUP;Gs|!%;yc_ks$$1lGEteF%uiA}Jwl%{YZdx;4NikE-qp-iC*&KCUR9;-
z4y?byPVHXr&pmD%JzG_7s&R<=NQ}*;{C!)xGr-aeXt$ON$Amgh)MTs*?3G;@sSO&|
zu{bwm`-tnuiG=BI?p_)=UtG?A6-DI*`HC8OdIZY&s8ZOzxk}NYVgaq^9u!Z%Soh)r
zi-^R2E=-{_K%TQ-CR?V=WA8?<W@Xvdp8H}6c_y^`Ze?!bd4F?7YIt`M#*V-42TJZO
zLQkbZziX_XInN&1gyP3D*U?mluAnLxkxb^2xToumEi62BpU*PEcXCOh;@Mut>7$iH
zb#j}YJxSXal$H3t_8eTL6^aW_r`k9T${22pp`*+*raa|=R8d6S2FGS?yFjW~o)kZn
zf*v`!==$dhW1j5bKzV%Q<e1qjh@Svl(o4`E^Ce7`Tde6lh??|y`8#sVQ5(WXKyH+0
zTmgPD@B`P=eZZKulbo;i96eYN{`9QOZs8CJS9B-{uK`~>R4U>x=MQ8%9M(y6$5GfO
zz*FpgCa&*AMK0Uc>%@>l6a!>HR1M)uiBwF>#g*=oxlOcR)>>k!M`lFVO;~%q`RdZ0
z9j-9u1_uh5A9GdYk8UsZKeuX5Gw_E)-6tqvgPMWiw4L?|s6grQ@>!XRW<CwMl1o_l
zdY0KvV|U<J!vjkTs&vOEg-Wh0@bPt1Wggs4uz(KJRoIJ7bEq&QM@_$`q!~*n^Y*Hx
zVt;~~9Y^nznzJGpOnI~ISiQTVQlw9`u?Wy+q>EhN6+5HJSfhl6y%qSKKk<>lBy82C
zD`m_>SLxK753FZITC60%B_LJdp>{?)S|uR-Wh^=0?WK9~inKLa>!&WxZW;@Zn(LoQ
z9!6oV&OF&hl1Vcc8(-4ZplP-*Oz=SUU$E4nk#Y8Ok^|7m#89Wa*tchn=}=2Ax2ipF
zZD$-Vn(r=dUNON+z$CbnEi9eNk!Gke!wz|zX)<RI3VOG2jCmpVlvEvt_7rs2TrvP&
zj*gHD?pS&f2G+r(H(8eNe-?7$aFr5d*)+M%Y8`En%qBBa-(2lSr-gfyfv$77*f3b4
zjjg^4n<}${lPaz!!u%)qggNk~iz2ek>Kl-6{6wY+wu_efKSyam{e;)TJGDPL!O660
zy0;1Rx5y0q9Q!|)F>8aGJ!&_9`dy0<O~L&Al{mWAYBw@|r0dxiXWhQ_ZY)rLFB-!Z
z=PPhd<+$Y8RI1a`=UPn;g?iU&-_I3{JMRBY)Z=N=da?ImM7BJCtln9jPmhsZ+Q&pU
zQQHA@$|e+!h$d82oI=<>4wcbP_M6P8N0YR5o|^hQ&$a~D{a2EApyM??YL#WnI;~!p
zVopaTIGBrLk>FBI?K9i+o`x?@+GDW}WiHe6^>e|2n2?l<^P~N2A+Zvpg_Q+9?>J22
zqY)l0*Ogoi8mRMn_*Vz<DIc_A){ZR#?R=rkrweiD1IcB~$wJCeWpi(CSmE_uNep7N
z#=B&I`i85R)3HeduN$mRF9%~#<oW8BtMNiW2y6)KVohb(W%<L|2K49>|B{MBr)ME%
ze2;&Ow2HrCS9zM?@o3(*jxbhpYE{3<lvpSCmZyiijje<ywd+jsi)R%+2K-Lo!x;KR
znah~wnpRoGor~kc3GSpJ7TcSV0dRj+6zxKK{Y8xcS2NuH($?iPv42m3D)1XXe9Cjy
z`EH76fw;EjG^WI1DA5?AI_2YtO@Bt%b%q&vsoJpQF+-a3gmE66Bq>&<gd<g53veov
zb@7X-_H%+6`HGI7p;tP%rWP{Ed~}WtfRDYpkzFn5=op@tq1o*>fD3gn77j7P=g_QY
zGi*N2lGM_Slt^|jY-89)<M4JNt+x-N%mm0dSw)znF4@)l%mM4>KW3t;L66)rn(EDb
z&)Aw7S_-p|SuUQ#+@SH)ebQ7rqiAc+aag7SHhHW*X4X(M*CxJU{>59>Pzg^Zg)ILZ
zwrz%+X9*9B2{h|F8tJ;2>lEmognvs}=FHo5d_qS)kT)2%9kbTR+g<E@IgY2hbP<{z
zkUf<_wXRS&FiaL&w<45(Q5xUw7&ef#(1^3T@GH;*qE<DM(!_`~8n{9x#Z&S8F67!=
zf?FTbfd;enn~;dOuq<JQ;6o?MoFIB!E~AIe#=EXIw7fKi$7@i>ggpM6^R?zj_JQ^f
zcwU4R@|XyghNUNadUz~NbFWZ2^HUr4zB}d9g5Y^HI9^*gHqke@*nJzmjbj>jODW@A
z-GKSS>%h1JfqcSlr^~Zk8lS2@N@24cQ`<J+`N8OCjO<8#YG@q&=6<zPalX!46jozn
zv=Yxwu(3iVv@5K5*Vn=LL=Za&qyTu#&V%B1d*iNjm(pC*jANckm4xB(;TiWGK5uvj
z-<J9iz1Zgc%kCE@JeRrg=LfV68n$=Z4QIH!n1|x#W!pO8ap*?t5XrcC793JI1^Tbu
z?T=?+XisHZ{H=>KYd$%D0=RgU5y<8Hw55F8BM|0XX%{mTx*~9?jOFstY5f?6yD#2X
zUk;LQ&1~N9hp4^hZ1}?RE-9>^Eihm}>W&~ytaORac;hSQ<;t69K4oY4c%vR$&)7zd
z$KvM0a!o4z`Ncp9de`IK01TR?D=T^r6H>_-F<1Jm<F#+D5f**U(O%R(TC9!~cDSF)
zN)}wQJVZd&s#hR60KZlF6J{O@9ob6?J}_UzoS++2H5duNFZT8c?@MN*CSV9Yz>Sb>
z`Wtw=${7bM#4!Zz>1$lh72EEZ>zSz)p_nN1M5)I)#*ucAPZvc6?u<c0(r0D$a4Y{#
zXRZqZ#Ra1&r}=^K)-+$NbucadRW2lQI}CY7%ziXTBwXCU#BqPvQ9psy-tN<qmkEJ-
zU00V9nl%>FjhNC5W)U)opD-Q%W0-LnC^@LU-7cO2e^>d{44I;`Kr!=tXrV^3LDDW`
z;sc6g>01Zy1})LAO`_fIzWSH4fQN*Is9n(MNpXQx*iM|Y0goYvhivpO-!`$`WH&V~
z4FdsdD5F#C`nF7py-JD%_Og0GuP{0OmESPa*XZheyB;7zg9Ws3tJ>0uJy128-<Ljo
zbAMF(Aw%y_Z`}pkEc2!)D5Pc?2U#9n!{wJMg*rN5DQUT&Q9;i0ESs!lq5cqsVl80q
zi@(@LybV?OE<-?FD|6UXw296Z{5&>pSWX*lTzawLc|>m>(@AF>y4f3<(y2YBP@bt1
za8cUil-YOrlroY9*N?70lHWC-HP`nSFt%6#seA$}ET1T5solEB0z7uT_gF%ge9!e-
z?aiOy2_=<Iu*jVS<n8M$1Z41mc0>efZxkCo#im0B>@L>MdXD1jK(Ce33FW&aou4EL
z>PL#ujASe0h?6e0pcJ-}9)Eh*wNn)iC+$M9Z<gwg@475NtrquRBnv}E4_;#%o}+5;
zucHp`+98F(_;l|!zATqdDe7Z%9&m<SbF>X8Vyu<0WeNymU5;)6HHaUX(G5#U5XRhf
zntw%A37X3$)mpV5O$b7^J~s$I1fC06Hsp{Q3$_hAnlCRTz1e+%+t{Kky(dPr6&C<O
z@rVb**KZXq%xJ^Cf@tCn9?)6Rp4iZiCXt@t*`AElRRE9gSn(qk<jt*yeiC%o7y=$H
ziCN%Mu;ZoR1S#^*ss}s_Iqwi(GyvkvMJw#SNF2FdQKIFdp&d5)rcifst)=+^PyLGo
zC#hftWs`UgR}3vHhDFezJ=ME5Ba@{9>Pmml@}?}B;tJo}YAM~ME6sVFcLOs6kfsuY
z<)aIV*V#62QTFPYpic8H>Fu1z*`x-B<@F@hLTh@&>-#?~e6u}<2**^p_|N3S=9CCn
zsHKq)CzNsIl|FnoV@P|?%y&oTfbtNC((LOR)_#^V|C;RZ>YOCZfYFB6EZX;K7nJA_
zMX}&eCN<sXPGooBwEk^hv3+*1b_$&Sy!$oX*6y$xKqFvY`-MIU4BW}T+t}@h?T?~|
z><5KcpH3_RAd}$Im+BSHr^%7pY;#2?_EpP2tZaE|0E76TDCIG{zJVS1*+5?Jgd?zi
zyTK{ivQ|-*O{BEJADTCr1U1s;pckVMF}$>i#TM<ppsLj0n2v~q|8!{f1Dsf}!n+mP
z>tSvu)VK%h&y#sun#HcF8+OhYZwOx{N(uKItxnPWFccboj69EGprX-LBskfG!{v8Q
zQLELFj$2smRjmbQQx6=o<vX2->cXLOn@w{pC0({q^%g06x7TdfXdNc%8{1C$NE1g{
z66>HD?`7wCYU*qNX_6VhnD*qBsIC4&@mE0wPhw+(ORB<4?7IQ0WFdcmTgA-Ar`=kc
z8<DhKgQ3zim#!^BU>Q!8C=tNcSFGZsW+0n2Y~afkrM^_XEwmaWwPbrv>)jODX9|4v
zbO_m7<ds<Eopia=^{d2ofdh^0<{#>p8J{v338gyWk?5TU(%&+!!9>oXguvlh9IR~=
z+xlC1+2>{G+reAYk@YI!yNQNh3oTyOZDmM8hG&U;I;UKYF(b0;@vdDQou$s0{3@RP
z%zo$*zCO%z2^ktbWTNIf19Pyh>6wMVvz3Ak>a?2zFFqv>)+mac<LqN?^4UAP^E0Th
z!1E|xN6%F$*mS5q3-UduAs1Q{_Gk*!=@`3xKY9~pF0vue+C(a2?2OOSBX-){d`_Nn
zfTJB-L{@*L7{Q--hLToVbn!8OtMZVVKv89F^jO-)*X`@j>dfmnr*tj>!J5mf>75n_
zm}Wv5jy42#GUIH#-~i-$A-M~gcC?!TXR6DF?@nK=j0L#fsKb`_UhFN2(B)&ApQmsI
zvYtKKDB5#a4V9AM5HU17(i)Xrwu8A^H=bd#axCM&yUI%)UWp~uO1A<fa1RnTbu*fH
z8$qW9<|E7k%m-&n_-XQq3`w?G-Zob7#-EWU^ATyQ0eQM|SzsO9GTJfzoopKofaU3{
zwP+jnQiG?0uO{wGB#9+wT<h*pd|ob3yR8aaZqA8nsvmN{+TDHHPPp;?-DS)c`U<Ps
z67K6Wko!4n=J9ibuN}KZTo0eb@8?BM%uYYE@ot%;>hG<FbO>ny-+;R;o`Q880f#9m
z#>H1gFzqTA0AcM{@F^xWB|AjcJ^BHhWtYhZ%U^W()cxg#!*Sw5O~GPs_V@H^OV$w?
z#&K!3$P{Oa6beRGC#@#s&pnn~()D#YPSzAd&(3$He9^G*%k5T%4`Tu6W6ddL;Cg95
zi^Ew+{K5M(9O^rO!=0J0@yZn?13Y=_cF1Mr#$smaxzH;PrhuXV{(v%oFk1MX+?1F{
z=Hsgk7gG@K<zeZ=qVrV8s(O#lhuFD11Z<_dPGeedox+<mxI-7L;5iejHppL3@*Lj9
zoiylhc-duo=F-ieoY1shJ|Gh8012FGV24vRLr!w1*D1#G%UC<Dq5ex)5d+<~%>4tq
zcz04fkEh|BoyQPhgPJ3%^|!Okc7f#gbsi0nSkN1|LrmTja5_zuJ^8F<0)$>|Vb_i>
z@GizK@}b>_O$nDrC<a3j7`d^`^r3H+7DgYa$`@ClPXM>BxbAdWLi3Kr9|iW!Wf-`H
z#$uDggrU`^GRioB$F+6~;Atvu1z5WN%e+hFUfTLhHSpGCni)r4`DfrL5r4jU)>PX-
z?Yh+bmJ+MYTQEZxjMDJc>x*~ppL6H(2M2n8S%bVr<z1YOgV{%F_e8`JZ-573ZV;8s
zF#GDb%L~VIfPeD)qeIH_9>w=O&;dcF<V4PW++;U)MTnq9x=o@(ElKvxBUs581542G
z>}8`&nV$il6%`K{LiSx5XJYXK8EUD&Zx+pbRbcn`>Lv&~k~RoXdpyF0<3y?d?Dic0
zqRHQPYx?uiL&fLPZY31b<5_K`<lx*%hJ>@t<rNPp_cRiHN%++0Gyc%*DbcX$*mu@^
zG6_*#@ARrvW8#KFVm})=r_$&*?35|vKq%~Cq{8LrsSB1)f?xJb&d7_+WofS;c+UiS
zdbA3LjpEfAQSh~E@q;t@XBjRw03Us2+%#T-VmHLXN<E*s$LJd-$5P@$Ys>gM6ok6R
zS~W#saQ?t-)#YjMlBfLl7^<7RZFb?EwMz0AIJE=X4JT>O?u$sovz}896lcmfweC;p
z=O5K=R_6t0qS1C=+PX!|X~&g4HipBXzE{uGn&$KCmoHpJ&Q5n<DDnj6>@TLk4PCQ6
zR1bzP6=@u51q^MXOUCCtioZ%>2doU+UOtbit(n&TN~FJX-q_{IS`Z^HdMAqks&sus
zD`E@Uwc0U<Kky;)He_4vo?bgzwGrHgRkCw-?p^W+4lMBn0H6Z5C)c449xqUxdr&&l
z9bGNE{p}&plbY=uK5$IjSywVHFh8!}HJpSL((FJ4x;gMOe!T@4z2q<k=E2w>!;gNo
z`&{4Fn8_V|m;wa8tF0DQ!G6&a^|paVVA^{zYe($s`hkeWd6`cv6HIimrN0}N%eo<Q
zv$EdI>lMcJ^#Pnq12nXCh_mVKD{=Q065iR(NT+!!()&!T4(an=!Ff%TFzS`PBkY;z
znWDhQgfwNtt>cm{*E=y7a2F0;oqp!9zzB)ksPJ#7J~d?bY1r9IGKAyI)9%`wFwfk;
zGXXOmit771dcrrK+-_{R9vnGM#o0+u-+ehTWT_5Z4_3($WBq6(!;~{Nna@3QmXX?`
zke|_Vs=v0t2rA+_03OvkLR_Z#iCQhjq}M$PGgSaP!AK}1suELdz($>#iRPY#dH)wu
zamm|y$6BIQ_vJ}Gx?z!Q%#`nq#-w3D9G=h05b>O{E#C3xh2J>?_Y+56DSuR%!<D&t
zY=dNHWub(V@pc4(hdjWa_8c-rNmQr4daR5!;MjwrK=>6nvr?#QzQ&IlqoPa!EMD(V
zf8oxL5mDT(v{1@&PHiHND4XJKFbwMpS9d)iOm6d4MBZ_?!THAEK>?j+^{*W*-QG4$
z5G@X71}Zt$@q)#({h!Uwf?QzCrL4QAn20jyB_Ub*%V4FoD`rM|FnBSr&d&j2>J}B@
zjALaoLfo?uHH7O%Z9@Ccj8C|QgsWBP2~$ha&B8OpMs{xuo1xuydZZ8GiOF{y*)|FW
z3J0yI2m(hG98Wtfr((-dUATGSh;I1GqBaZB==(pA4zrwz-RiIzM(T7miyi&V6CE1%
zg>~5zRcOt-9T6yOC*ko&9z-SFQnmGTtWWkbo(!N?J?fQt3GUQ({dVT!zZd%+pP!pY
zDe?8r?{aaHd~1=5wY7caa#UezVerZ6X-$d$R||c}@bdExYp82Cd0$unqDZdv@x9$D
zxAmwgA+x@%L`AXr?*5#VdvD+I6o<`|ajm`pB`o#Pj^EX4lT?&+_OMV{*DT7dO{soq
zP0w*9tnESEt=~w5I{o5v;p(jKW&(+eB)P{~%wdC?i;tY?H4sv~ME6p~84x3sR_#j#
zsz3jUMRxof9D9V1mPSQE%N*_=O~4%LzVd+hcSAj1xHtRJmwJg5TPh{2f;3^b-#FD4
z6W&YV@s5>cjO}<IDPU72@TZt0^1Z+QhnXy)pvBrm%Dl#=*-uZe{4$x>yNOT3`4Ehd
zyrT1QvHp@mmqg9pm|>74IR9G&MTSr2F4nF04den!SpDz1F#jIUqzENm83&t=u%od(
zJi^qdSqFh)NQid=DUb;}#-%-Xd3b)d6Bi?N`<)Q&w)&_cRZ3sU45vb_+T(!|;pYx4
zgn#IxGlHnnx+l!n(o5!T%41pwI*(EuVuWyh*Yc52)bQnQ!7lnK^JZdNuyycx#h%Q2
z+iXe}y;r~SrB6u`lf9--65)811dc;WSaU)n7zp=1L5WntQ5GPSu3h2baa)#VN63DJ
z*W)r|nmj&{yS`Bh*nu^vCPdIbd4Qm+Kqo4u0zb@)oX)Q}e~@{aVUL&%DF`1enpfC<
z$>56dvw|rffmbL(+a$=H^ICftUeATEhDrf^3!VVxP`)AVU%yG26->tOUy)}dzlHA)
z=N^D}>;4M_dX7(4<1+o&G?8B)3b(Aj)rO4l@T9+0L4Wi&OWcac6DnOA@{KLwEnZ9G
z&&uR~wMBHl_e01-BAo^8H5EZs_wD!YA|Ce8`(qlDP!wh!VSCpy_ne;K@(iX)1a6eV
z7G%38?DnXx!P9A7-oMKacG)dZT^A}Lf*6$U4QEiVCQj{V4U0qG8hPreFn;{&B!_0<
zf2>2tO^=)=bQ|c?_$qE_)47PoYU2<?l!iZ>`x63=K|-m-lQT5zXBeF*WcHd7Ber*<
zg=}R}BU}J4g(0YS&Td*_lIoyd0N?)EKn2y1gLv^NWcA>q@*iHfNrL1x+w3I;ND3VS
zik><?>2OB0*|NOx?<_YgDkis7TxYSHj1WMy&<)FGK_g8ECfdYOfbb#)M*>qygpJeC
zH8gp~%@4xT`t%2e4Qd8hNv2Y4P=7mKs~ft;Tb^;0EhEW`zD+YXb(KdWF@z-uxRETZ
zb%Ri<_*)F&m6uT}U2Hea5W?e62+17G>N?PWSyH6X{r7}C=tM2uZwP-3@v_b;*E<g%
zl>l&%{tEyPl^BW49{51f{j!WO%cpMeBPT+PKEkJJJmY=`sHsFaETm%XenJT4N(3O!
zu!kynT_?z$4ui-=5&VU-d~!GI$>o0eN(rZZW`qzSG&k}LbEpzVJHhB)=SsQqM|Z>&
zE`)LcaoNnlvfQjn2?9d-zru+TO|xi>8DzE$uBi1*Jp<264A8iR-Lj?sWN<Y+Ie~jc
zt;I2JD6>kN0y2;i+TCgX1k9%}iFjYE=g!`rRz#o0Nq-kWsar3nZ{tIlUl>hV8|yji
zOWhwy+^pA?ON|xEgP|lf-c>ZZBy3^2<z_?(-id=YBC>b<%q;mqBYcOD$}<p{Q>&(a
z*)s67eh3^;+MP<(5TEnMubNSE<`pt~8CSEIU09iWRCYRdv}`Z93c4P~*dGbMOOZkt
zOrjMiaj;^xl<<R(zpMc)SkgglM$Rj&l#ciFcj%I+&{><2iDZ*UdB+eI=_Ebx;@1i|
zL}20)R1fxR-vC&6on1cqfB*?B`X79(_Nt3H41h<@_eB*RT!c?aqIs!ev2?877Ryf&
z=Vu9<EnRJ~c7(|wG`+>LsQDTwS2NtKX1QGuW~Z$DbU8f2qU7oDBLuc-iabc%K8&u|
z<`rO}NuR!x%N?3{)UJx(g_QdYp;FXz_R#05SnFDxm=>afIO!mSq+gg8`FXH13RiF}
zVhOW#CSA?reW^_UV4{Y|`U?uN8HMJ^{vi}B5@x5?%fwY3NAdgH9nh>lZyo)N<uzv3
z3F&FW<NWmBW0VsL(#W2t{gVa*kUtW)_c4ogPjUa^VIEleG;deJZ`_&fP{}-cK4IR)
zjX>F3&Csy4upE#z9!6BK1jkZ|v1LrrF0EQy^#mVRRHO=H=FuZ0n!wx0AWKT`z#1X5
z`|$Nb^-Jjxw#`^Yd+vTEr^6&p^2!SmNX`41KkEf}Q64WS&<IC<?M|7tUOG#kSSfK*
z^ZKx<$7z%xxomTD;@16nW{KvvXFWjMc`~fa!=XC?Eszt@N+>9mnmJ=#1NL78o(s#B
z$lu1smtkIAGePeZHgAn1>`fmdTr!ogu+%KY2YD^NWkR~nPR+}A3=kDX4HDq>&W0|G
z7pO|Wd{Ixb|9XA~`J=dHTx&wKa5!3;$_Pd7?`#qd%in1~WC@s*%G<<7Iqp%@%l-BJ
z0rg0jLTAN59CE#^8~5#FE`b(U^@NLoo>Nh`{&l<C7CwJ|1_!O}36M#L#$~GhtP>Br
z^5j;<&c-8?lTVy7$1YlI)W<Qc99NeWznk8vbLzHO+ONnjd=QKtz}<=$<01e}mujXZ
z&JnhvwYdT=qI~!Cb1oe8PvowmwB^V*j{P?Ki6&V{(Z*$jm#7~M$XnVN`z+Ed*76X(
z&&gayA(VMDtfOSm{o&*$i0&l=N^o%;9;|fMkG~FzHL^Y0En6Jb^htn;JU3Pw+LD!0
zMnT|NDpmx*8e!$q)@rGeyy`kRjA&Y^bB*bhZ7Cke_Q)f<=+Nxc?-lzHh6JIiVw_$Y
zo2+Sy8YmTDTHZfuY4tCgB}a)}rXvP*S?wKuk#ic(9rjy~9O^E$)1UH)NbyMH!7f=%
z%ZTCKwZFFHU9b`OIP{G<gv5>TYi5+j2rP?o0jlk%Hr+8lIabS+(K734|MP}3V8)zZ
zY)2TFfZfgsDuW4CJGqva>8PzJ^s+o>ZP*jjO!deOf40uZ71B)O7MHlkazfSLpwFXQ
zbStl$!N@H((&!_*M`0CNv9Z<v9L-pn>(<|)!B%;AFYCk#-rba6XL!WlQI)TA<<`|T
zZB^UU!i>XpIGI~J;Osiblr$jb4~x9Cr-qm<9LB@Lmijz?Iinqv5NMgJ6`E6J+Tx{A
z>r*XZ+8j~RXHZ>Tmr4O&3-%_C8F&<Y`p(pyNhhAn7og`D-#VFw&es42tYD9QwfH%e
zvxDLx_0p?`Dpm_z+-DOj)Lm)gr+#5HQ)H%QeTWqUtWfFlykEFv$ZFzLmA&}vE%5$x
z@>o<1WnxNe%t$GqMR&daWza+fu%p8M#!|soUfR?=62(J|C_%EWYZ<^slaQ<cLsje0
zt%%_x28=pI77Brg3)+nJIM%0cZzJb?-E3e$G7oAu!QF`?*EFQLu3}k}Wlg29M;@MA
zmSXnKwmZXe_LKATo*PT!(gdn5wsi+GtS+pSElklGHjn5Z4Ta$LW*h*7zuh_Y4?nF<
z@LJjL8oe})J5#s6iqyyfbW5{QD^?KpiBucQmjWrynM3oWt>@KO*0u&DT)VAqt7o5n
z23avyjtRKR_<lSMKu+qp{i-5Mvp;T2A470pfL8R2`-!la<FwCnS*I+as#`vBkKE7R
zv!6jfx~8e}Hx`m1PH>*o>Kc*^vbAra4nOQs>%2LR&um!zqQ=^Jw>$ipky(#G@)VX<
z5_IN%At#$s7E=e!ul*YX8LGSE=5G16nV4C&eEYut`pH<ALKPR2HQh1H#mw}fgr1z0
z|I3ml1B?0ze!SFa?+sy?x^(?l;ox=ij{_VA98UXN3=hsBwJaZ`0w(s#^Gl$H7KOWD
z0J@u#E6?gOZARrqk)0<wkjvqvke{)u5w>Xmy#7mj4*>@^T1Q!6%wQ6_haNZjPy6Se
zMPf^k^{|x`i|X_pQMH*iJw{K!Z8F4EN}UeDhbAq7)C~qXb#Vu~FD0X!3C^LwNsanB
zz860f?6J^Y&MZSRZqg_S3$6ls`PnApHZOgi<Q7d?C>a1{2v=OjRu;k6qMqe#NgwGe
z`U~bjMx7;c^jDBiPnqG}OdHzq4Lf<Wq!eGTc5m9rM7XN7v7|npJfg<@F$GeD>nM{?
zH%+`gH-M6f>q{;l_JW}E?BheF3U~6Rh2mE+iYAFpl*w(z2gQfrQwM#}A>`FcAJ4in
zENLg5z?NMyP+xNLREw+W2BquV#7P!HJ%}?PmDTbM649y4PIIov$<JMeYSuMsiB&uu
zyD)qIaJbR#d%<H6;W|Pv!OV~UR)tz*>iYmsaIc_#O#3k(>QNsaJa6zbo`dk!J29%9
zZ?kvK(zhS)ehKGhx$Y8=o~#Z&aTeL9nrhmc$M@#IpB~HGr&JJ1OT%^cF5-u=oHdac
zcE{g#xx^km0j{$Zei~x;W4f=n%4Qj+0)JpC=XR+>mMlTE4`R9jH$E#)hFes<v=N}N
zp5wNm85F&BGE}qctWU#vt77yw;M31@f{u1$?gq{%r`wg!PyNlD_2jV3?hZZ$C~iIx
zYazt5TQBowl@+O7zno6EGq_vPCFb3rRB=(pifZ&MW9$eh30J+%fri>@nyugFmAy3(
z6<HXp5*?s_6D-ja)t+S6ckCAuW_@soZ+)jCCe~$7Nd}5D-!GG5&+3)EBY-mB@x<s@
z(*qWd8tPv1P99nYqW2z+i93kvb4BjvPkdK>>-zkF0Bxl1`W(gbEETQSuBW$Q=rGtb
zm>c-6PVTR7!Qt0*g*j6ePgli?$;6oQ+6bO``MmXht1!UiAP?8{zsWOayOR%$?-fic
zsv#`{rKPPEZ4m1>djLdrr*sxL8r;VS=GBb)6*e*|adoCZqN`6=Xe9Pq{klHXC|_w+
z#<}kIOp07zT&?ATo4G5Y+R;0KwtFANg<sT208Sof!u{SlVK$HjG}mlaf9pMM_We||
zAF7g}AF~3#DH-^tMI3k2VSXCrW(lcbE!f>^n`Ax6aPQmFUiFF*8{x=JCu6>w_S6n{
z6?(OXC#CIZ*|7h(XxZiED|JZ8D9yU0o8J7C=`Sg2cz)ydVNKMOP_xS}#mJO0-3mpn
z-GzfdN$;RA5N-<tPi1oUr{)XKbi5hd0W9bye?qY&4nAbUn-+e1g>0cj!vG*nm(t&}
zGrNH7mDr#MHK2VjePDI@4MWt}?`F6eB(b!8?tGJ(@6OoUQQm>1n%+86MT9rBElb*@
z^x)1Z)f83MUq@nS0c%5w6fIhzwe%M_nk}c>J7Q{uW@=(ztIw!0q3&STzw(Oi$s-w6
zEb{lC$=~g84K6HCf3ZYI4~GK?()iS?N@F9YCXH7%mTXA3N^dY{&)J`Jq_2)$J#>z~
zYVsM#r91PcYc2`%GZGXQ#Q7CHFcZ0YgR6UDtiD&ey--}$JtcCkRnF&Qro#|gpGg+E
z9ZYb2@Hy=L(K&T<lKb1#j+m2X=NcHiaiazvvA!f8&EPR)&&OIle`(QF@5kO%uwE&O
z5AmZ2WQc%%A@^~BRaZf8VVO5y_hZw@m_x_W0i_8)G|P>5vC=Yh(agydo%$KvXk?_s
zqPsBHgz5v~LXM=Hr!hWrjR9*tcXU-ZuhWLO7mCh&)^CnE2f}-hig=pNzmpy%oD1j#
zA)zo!Nlb+$Z(W~G+9jM5Op!R59`E5@zu<P_u=$EfKJ|h+_E3{vyk!j*cGiv}=^|+F
zyl&ldGmT@p43yTyTAp*NIfy9Xv_^V>iY)N!opn-;e14Ro)&NgeGKmvbaei6oCjNj=
z+qwwJiMs?3mji=Oak%TR#`yZSsTU9Wft=gE2@Z3Nsd*itADBbQU+soyw_{#rrbM$x
z@=ay+7y7)&cc7Xf$nmmH?_V(vn>H|^-QOR_9GFs?7V`)e3V@UkjoxB})ou@#(iX3_
z$l$*pdxP9E&&W0Y9?(MTVXxgdvx?01!wJ6{wys5y#a^3haJE~*SAg!r#w@Vm`l!lA
zJB>Ea-$<~wdm}*{9=z%x=pJm3yD66#g=fg)A8KX`JB@MbDJ?6J>CRU+76IN+LUyf;
zfs<36j<B#H9}H1e`wQzc2cVvDxTx_!>8^TQOq!Xig~_gg&^QS&YK{Ie{b9!y)hMCs
zPaDa~UyBd{aDr1Pk_uN&dYf57wF`Zxcja{$*HOB;+EWp~az?Hg-zK}Ji(Pc{N5~Oq
z{8J@FYv$YdtUD&{F|BN#Mz661`^W5vd3k<P<T0@nKa7@Y4Z4SW7dD5ZnaR=LarU5*
zj_IN^Qb7C~gzS=D#E7#oc+&1v3$<lTC}Xko;Pvu7DKGhvhbcRpEHs3bpe+PTIU|p%
zlRHmMhu!+qYN1;g@}xlW#x4B}l5{}Pb2=a3aFMm$Z}5B27`?trQNM<k*(OKZU;(h~
zVqF2&RK`-aCqx?BMhRYH-}e1b>qs-}N={9?g~#l4Cn5p0HzPeA@VBRB$a1}&!gZ)G
zLEmI@<P6jAJzoyh&lP49pE|9{B{N=!vAp)BECcr>&9P8dKQ%HM`_L2Osn$0Lm7jIo
zlf<4`e-?|oYXA`MbamRiT6cij|Acl7Q&dIEF4n}BmaR-XmZuITp5qAUoV6_wf~+_x
zU-^%~LcWP<>Jr@qkQ6)01j0&m-HPL6^`F{HOa&Kg;9sl8gzj7UGZhc9_`!z*#Dg^F
zC0kxGz*Q$%hnNCamWbi#?)$<9i$<F5?%EVdE{Deb!50ev2UN<hcshm>GKWo!1zo}`
z2DqDiOr??gQ1wxWbV)Wq`+F&V>-NffF}F>+tj3#^!7@Jg9=K=EZUex3pBrd9g<gb(
zJyRhR8tX(;yj8NI>})TUg%s59r{cFj`2GEDZ~eh9(fY+7k3f4ccTCxR<DWgE;D@_+
z;m?xOcWb%#-KoiZ%S3T5@ZZeStW7Pyv0L4{Uq=`^CD|3W6L!7K&B1tNO-v}IlJ<)u
zawx@#2RjP5Hv)&sf6s%0n9{iPzQFN%oNvbJnp<V1#stDhsyHF*{9=BY#N7)Q)z8KS
zHrlPs-UZP6*KN|7kiui<xFF3ld2gjD_w}*;{6f;lUWqH4$1>2Bb(-f-dT`japWdqM
z14olXMp&V7c0V(h#(5pSiYF}?tJocVs`->~`)2=ea_5RibGNAQb=O^Ok()jAbLkMP
zXzw?&%5#<@=h=Kvkz>?=X;8fglxYnQ<{?%;jbrmfl%;5aoZjDV`+lwUg&yc<bk#I&
z#Doh8KaW!SPS#yBfgM?A`eSG@hKSg=@)kNzVbxZ;SNIu3ieP!u;O}}3^OBOc5E33H
zw++b~t;>4D@6Te2X=g3l2fwzGh7y*5P8ZeyutSME5li)ph5TnHbvBq0oWxUa=1wqK
zvStlcZ5FP66{S>|Zha4|>yr|d>arU1wK5~4kOMIOs=Bf5gb_lEXTFR*v+H2=<nvm+
z%(-`R2%%gmrf1o)L($;{4Nr!_dqCVnh*9$U$qw?RvQ2%-^>M%O0nf;yn~$GtFOxMw
zlT5n1To*5{Q!eT<eL-6K#nnE~M4|IcQv1VS_dQUGW$tont737wti~fvDc?uv+F&W`
z$%dcqsnuOq$~0}h(xpfCn6E8+7&6P%rHs)`eOV9O+4HZ>iVcLkXTAxWcbm%0MFTs%
zweMX@h=q&~ev|YUI6u6_c_Tt<(3KB0C|+)iXnSYp4wn7QbkWWd@zDr#^3k<kScF4e
z7fY8hP{+E*kmX&?sWR9Ht+ByM93qHTXCwlhlf0^idw##GGQ0!6?j{vvwNDAIeC`nw
zbLP5m>p?lWjQ-Rqxl5lMjQ2tyv}8>bYVD|sH8i;GGI!O5e&D(-JJvMRY*YJTx7*jc
z?t?6>EnoQuDy4II^82ph^T1WJ+fJj8RMSuBRL-F=le}b!pTbmQwc2koA8P*ukQC$T
zu;BTq*#9(~jB&INxtiuyw{_ibUTuoVM!pDDn-{$4IX@OSpE<+WqHc&)b_bdHq(^yx
z+SbkD1V&JdXdNCrY(mjm_t`(pqm^r835ogXEu=@ma?U0HbV_>aLbplGlE&C@jdrZY
z6($Cn4T+6&pdg^VQ{J3~=YMR9FbyYc^9Go-)bL*6nMd5zM!cVkG~;r%$Nusd5A8|0
zhanmtPnnU&Ksl492CGBfsJVy7hsN1eE+w0)@)F<R3%iyxn;S}hhj3WS<yrO(J@V3d
zhm`*1q^;;a$I?Xox$o}ASLRS&w*qiQ%IO*UsD%}i*vzBKe%UVn{R46`m=4NDqlyGb
z!!U9_=aYilcWRJd_f?u=AWu{i&A_9OPG^Hso-h55Pp_dT!5!ITMwFvYUx$(fz;-j~
z2E<dS1{)X0{uxG>!arp7_rU%YWrpE!iaa8g6xH3Tb!4ABXWj*WOP`wQsRJQSF06E{
z8j9Y#0zKes?NzvH)QgUpT=eN)-c2NiPW|iR)kZn>k8_kPA7glFzrT{|!{f}v^TnUK
zR+}g_Ae36bU4L}r6AMs@RGQ|O=F*KxU}*U~OA4_m&)dI%c9fTm4Bx(gbyE!6>0Nsg
z3VoWXU;3fJzHn~3JG9l)2GeB5!g3VumpVaa-%Iw=UpP?oW1Jxf%yp??Iy4b#Cqg<G
z<j~yD&##yjv*^g#5{Pf#QMT->FLvW|R@<z0mwozV&DUQQS|SIpJ$n1Z_|<v$<pr9}
zcAvy<qgZ;uS+7`hJ$bUdAR%}_N*BDkzwNWb;c{@zp>js)Z`Qwl`?W+Au0o)!;`nv>
z>~-W|l(4JA4&SA74LdN9^-g^C8@;E9_M8KC<S$`pfSj*!<S8B}>$S(so9MH#02UAG
zv1a4M$sJ?*;boXj?FlSqUVM1$LT!`wIxN4yIDT&QjFY!|f9!^Rxj-HU3K5E*6DeBo
zZ@B7PD|6dbtyjGbR5)||WqXg^`-!$s#7RM_#=DwV&i3;*?ZeI{`0-KM$#P$kmN7pz
zN_dY)HtMf>3b9jNNS1Hc_l>of;S|+Q{IxJ`cKv*`=1idaYUakM`|PCZ@Ff2p0`^pd
zeO<}jr?|DYfzU|@@7!izxeq=uKQ^To09?rpJ)F3+loD{+ioXl%JLe0#7NLS9^FQ_{
z*0Ew>>^o<E2fT6QjCnlmAeOq*YEmm7j%&57PZ9ZwWr%Zb2X&3MR6rFr$+hBDn2%?C
za{p$zrhE?$!*vJX+s^u;r6pm?0SkHE#+!Nx+nlngR`(qg@Hf(Xf|W`QnCa*}wCQ4#
zZ(RMer7w<MRtbDTuWbBUV&`)Ay;cHzf!{U)dq4YZA^?`waFiGOJXon4)*p^XvW48P
z`=q*SsYF=J<E@<eqjqTPJHv*4foyi5RjS<{FioX;<`69h3$^LTgMV#Z`A^OGBg)P>
zvN~shJ&*bMtTd;<XN-*SqJ>VEd69?&8+h=z=Z1454M+<vxG4;)Oe3<ade$BY8WRHl
zfr)5?<|E=mD0sa$fpsC%6hG$HtqN7KyF1$0l1bMlc{RoA>rMWYkOPoe*+ZL*_{p!t
zn@}I(@)HiQD!-=~2%?9(!QDY!)&Fb|lrbqcv&NQW<^v|w;8Cu@tY%I&#{@lL1c$YN
z!qnILEZc~x_4w<o<8~HG0^_=hCU<qh?B@M=C{(aINV(Y_eHZj~p){v5Ern>Uhf&}+
z&;4|NRjA1%nGFU|Ui%wAA@rnuuuhz3`elCt<5yy&YP)EnC;}*^E2lzMA(U#z=bfpL
zSCDJLx^QA=HELN~`ud8;==E+@VAY*~vJyru{*n+vqf#i90T<GQ`Cr6~`H8y00H@?6
z4`7)MfqUl}&XoI1eLOUvv&O&80~X*@ltpBKKn}TI-<R&CFjW$AYGx*g9%dF>ehYCO
z;Bfxk{?}eHvNR6nu+{kGtqA#Sc2?*gO6k^B^<LnOabx|*-9t2PR;oDB%-^!QK3O#6
z;YZTIE+&6WYGdZ5@!S><8G$$CqN6BdahfrQEw5+T{<;vBc<{FjCMqZ&SVA8M_5Sjb
z3X=cjwR4E|H%SV6P+>&&D^nMp0Bdemjv=bJzl{*YgcqJkM!|T`T_{Gv50~$Uzl-=f
z6hZgv`aX88aNiA^s-=K<Xb>1O^Cx>VYrIsdHA)2~jN^(<UWED}DDf&-1B?mnCsI-J
zrat*P2)NorJZObb%C&9fo%qJEs1k-$?+7lULT`+$%N)x5p*P!!?X1>Htqz3li-5X%
zWa(fX!;E~wSgKSBKi+wqAjYGMmgsR}67khjcEow%nU#(2MVBD?7#YC_0Ix@n#~xMs
zv|RbCZw9)lAn6%myW5*kiHeBqkoJ{w@ggM*_{=*LM8Ti;ey?R>Bl!>8BiFov8^w76
zW-v$UgNi@fMp1)Cm>D&2aSie>7fs!<9%>-AuOS6JM3n)O2^=H~y~>rGHV6ILoodU#
zebrGOR1u8MK=^|h_VUkIPl9ZjL$T9^Rq#^r1ZGyr5j@-jmx4U@CIhA)?g8Ci=0Cur
zQjo-mDia*3LOzjm>$qL)hRxdd(s0#pwC;le9Rk{ZfO`)lV*$zddwq26a!zwB11*LY
z=B&s0T29n-T|Oc9p}waKvRzQ{_$<B#8xX*E8<G11_t9|^BTr~!g-L+Fxrr3p!dtV?
z@VgzMzu13J{n?WE7Y>6bFQIwAtbSRoI4QQyPr7-ZoE&2gkyH>s&EF6{8&hkE3o)b2
zqdFFauCMH$;uU|KZ_Hgxt@FkjBA_vZwf{pIRE_eKB7b$pM)`Fcq5Gn12I`D=5=Nx<
zqlXCNB67!n)Gr}=-<|nqNaRP)FZF@S)-EIYJCF|~*zXtrjh|LI6y_U?sV6)z=VIhv
z#@iL(jn<afA{)o%sYM#7kh`NZ0q(y|Qy7Ef=^|_{eaa?gw9{(yoq6`N5Q+CS!l!=k
z*8GcqZf)dQo9WNG#OSnc8(rX!s1w2aPj(hH`b#}Z?e9y98~>}G-=eECwPu9&rEe+C
z$_q{4?_>c*@TuuW5T5xv<o{laP>sfMrqX^kXS39n5nS?$r*^`lwC47tzEk$)|0w3~
z-V$`rgI>?sSa*IMN2(BXK%NZ|+P%*H2ORsyg<qmr8uRDANwHe|Il}g+L)bDg<$vt*
zHxp>|-2FN9AwNE4OMpm%qBJF5R@Mx#{hP{kh=OMP3bKhYfEI7b8K<dGVy(O4GePO?
z4-l#Rf7q26Kw<VT$i{fVg1$%o{GklY5AEP^^>QU%?q9edW9IG^!3IKFi6|bm|GIYJ
zrw_86-MkzkOzR~2H(m;3TXXmLt8<jyQShs+k!StuHckj%{=c3kV3cnyV{hDlB$Vh_
z_uE%Vm?SWji|~>I6O`$G{EItnFurjZdDEGKT7nS*+RzwOLDP_azhwHlR|4bzjg5pn
zg7OXSRT=qgNKK=Kh?@K{9XG=RG4M+UKLbQo_%AoYQ_f1u$&L)E)#i`qpfy1J7JyT1
zEZRf7!f>R{_Q?1kqJIgXbo6K=evOI)w4$aST^?*ZdXq=<zJ*UcZgoEJd)!Jk(+VX8
z(zX!c`dg2XAQJFD!vs~JN9*xxjD*n&lKY~#!S95L>ocePtzY=sQ5h5A7VrhUL99;r
z?O*p%uEQJjHZt@%i7SZ^+Thy<+Zc*bkobyoJF`1fMSyDK|Csr2Dy1-qk(_J{0T%QD
z^078P%)I?KL0jOea7Jf5ia3^@6>UPGyFj;L*kGYG+W$EJ-yv^`+!+~~IQvVJ%*or6
zDCb9to!`8^s4@Pe$hRr)z8UAYBpbh<dH)-11cY^dX1?&BMP#nV7@_d;T<GCrb^`GI
zXKb>iESB-iI}R#%MLKOr#Qlzy|HpMu2}<R>jU10Td*H%jK~2-`o8}B_S{aGubE;Dg
zZ_-8IFAMs?MR}zEVtG6{SvviZPajO<8U0%#<?cRp5XgK$|3cI6(G4iqdGRk<1Stpw
zB|h+_?xQ5tWUfla#WztAxVmkHHE+1TKjDkxWNja$<?J0Ai04^EtoHjaH3iua%K6A9
zXuimg`P%5ij+b;EDNBn?F*)@HK6G^=KYsR*f~J7EGKBmeyZ=MIs6?mR7WpBY@Ax4R
z#+>eH&A1mNE!IDd=8XFNSzQB7_jelOvE$?uA;mb{&BL~dW&R3r)oqn1zn7ZWffGf}
zT{6+h(eHQ=Ki%+;m%Nu?31WOLg%O%z4-;w0`7tC2_AGB!kpT2Wx@zSDHt8gOl|RIQ
z{7ba=$k2VWE|iR$n>)R<-^zEmARzXMP4PgpnXqd#V2t8M?@;)~jYl>2FQf;|c-H_-
zHl#WA`KM%#bhSSQZFTLPl>o~xMb9`TiThRtur-pcE-z1H^eiiEB&_h!Uj504|LEk6
zXi%02wkG6){Po%O)>n4MVGP|61I=}2Q~K@F9~YtH517Z3_4LY{nBr<ptlbdrD8JXR
z{T0=%QSZ+)LfL-IYSTO=qY*kFV4t5}dhPckCJ`Q{gJ0To5n84A{n+W~L$;0GOPf=N
zW<5Ixr)#^3P_BQm(b}ul;>A3@kQ=kz)MGSJ4h(k5kkfRdXRGk3+^gQ8zCgo5N%-T2
z*?DCi!`CIvbxjsGoJss7+e42r{(llXW?0ljQg5>;@)T+^ev}3rWIvr7L0P*P>R4}^
zBiWuU7Aj-3FfLNhfUseN?R~dK|3@u|boE~3!Fn7EDoMg@;`q$bJN7>7REM@V-u`K;
zU|p)QcOMNod;?iDxvR<YuI<&!CdA#M>-#K|YS}{Q|E%THB^VxG?oRVwmK%yoXVUrb
z;cvgukZavkkpkjr6p8|KHF;QpHx=0I8Fx>xr_RSs0gDu7eEo3+s(#VN`HfU-sYAK~
zATJvA^_BDITmesNMuca^yef>{0%K@AGt~`96bGkxoZ*D^7a@{A=Zke5je4}z1ee_E
zu#D1sHXbd#Q)1AE|CHMfv|DEs-p91`>K^Mj#BWy?`gVA5oO7^)p5PUGWUxh%h?0;J
zC=*(m+A-}H-Du!_oqZXc@Qfe^)bjb1c5vO4s=u#Ay@WwJBW3RG&F%Bt{b;zKQBN7q
z@`aDon3s?mYD;eSVN=Z3%Xg(NNruOhgl~~Z)wzFqn^O2jv&NJqghDJw4>c-)oseci
znteen9F_hr3tIy!LQa4RQI+M@#)|ahli~`~yLXM%xkHhDhPf|k6V--N*3-;pURcSK
z+eMc|r<c-Ut#??%c7SiU^NWk@7o?-bg@`LEUL@Y##mDG(KvN~|juWQ<cH_Om8yShl
zZ@56qb9O(d`DJ#fYFynvM;&FHoPt~jeaZYKScN7a+9A|m;N9|*PTEg7|BtS>jEieo
zx`)GLAUFgM4hinT-GaNj2Y1)OT@#$(?rs5s1)1RP?he6ake73xd+yEsAKowXn-8<6
zYgbiw*RH+R>iRq|wW*xAvD0rL#^l1lSgI0d>E!SX^hKa#y-1(pqwH6|7}0ldCtf+<
zWzQ-;*|&%rED(stX?A=5_R3IZBs3Hw+#!@Kwehe-%5+sLA5}=}?J`{6br6g_YnDe?
zh-YeIys&;R`;^7Eva>K!59+_M>?^iBeBZz=vuMkc^YpnQ;hg=~?BQ_*@~aEht&4D|
zhgg?2d};r4%B}J3<5~?I?1SP>XWMi!Xe|^q*$iF3=yEiUq$^ZjT~5!%<;0zS{jUbw
zUrZqz<O$nH3b;jbr}&w<Y?bjF#OO?fJcVz#<u0<$E+{2@#y@S%P(qe*MJr1b)RV}!
zo`~w7JX@lx8IHj5G%e(WrS=})QJlj=R9nt`jnla2apDsx{as;UR>thPJbKg=!z)G^
zI`TotiWzErYxc-@qw~uyWjr=&Y>Pr0s|FTKdnX!1(TsOyHK__5J2{Tk=Bt`qCw#3<
zj%C(c*VJbZJ=OPe-6wx-XndNU6sXL6*~?}Ol$s`&8|3{nN_3_TH;BIe)|o#_ZB9;@
z5$=#3i~~LtZG@(Ont?Z?MGYnS-M>v6#S~jxd67OkF5byVap+;4S;%B((|RV)<_J);
ztq{D@HY$sCJ`&BnxE#K=oa75G2u{d2g5YbAOJ*g2iIRn2qjb&l^*Mq9v#TRI-j&*?
zU6d*{<0Bnerb}TwKPMa!ayP8y@08luE;EP8@07MUWvHj3XucI6DC3JA`=H%)GZnVA
zksWn4b$)3%Y5Q8V`B*u(fly}Ae&%)X(j)Mj<7B&O2H|+^x#daC;}j2J6&DkLJ1!&4
zT=W<bj%7xY*JojNO`?lGg>a7pWJQO5`DC?GxOIR&6?3Qq@M%fy4NxmV3UvZ4NNOe6
za!mFj@WzqYEm~-|x5gXZw(#sIvK%p#;XLks$sgt}F58eV3?oS0Vi*{v6-yPSKB)X;
z!{xY?fp)G^J;7Qh(Ws<*<K~cpNSJN!Eb&h5KsVk9B2tSmb6v9~M7&j>wQZ^2&!O`j
zxxR0R%DAkl9@+leZT0%fb)I(gE$_6W?2heT8e~Zu$^m(sw8e&f%h_?MW(Di^YGcY`
z2pp%ySWxv1lD47U&kTQe)^M@`FWFIhE>3AX<v;D9?mptqL(P8Oh~AyZLs(MnabXkR
z;$x{`98io!x9i&h3#6ZZ=k8+O?t=M64n8=)Q*LnOxU{EJO<J1GVMl5eMQx^n^lgP#
z)Mb~eh#~%1-%0%7R;c~({N*es%TvQ3?#E8SED?Rz?h~(eeM{T>{eJo#MV@|H1e!L;
z_5>t6c%S$7<g98vnlAkV`FEv0&locKaXlWv+p$=+fSHWP5A*7Ie#MbA0hsTomq<oM
zR>R4_suFrSoi(-&z~iCh6zyRXy4l`bI?jMW>lI<h7<b$WqEB9@_b=l~V~VeDP`n3<
zNbLwk^vfKLY1<X5b`kwpfNe#mJ`T7_Z;<Wi^GTbgqK67cEE_dxaQ9bF>QQ8^TT=?9
zWn43Lw>C;k<2Fn{)>sWs*pVT0M!l`n__{m=FkVSyquN@%9;$UK*<!5xcUek|5LftU
zP)4O_GKiLLft0Ad{j5t#2#^q&9{5&fLAe3FsH;kxS3YLI;(el#bpJNPcGbbJ<12!j
z+NHPjdLfMu5*w${TuSVatmG$Ci`=H8`njm43XUf>*RqAfBtBC~$U)fCE$2CX=FI+S
z%j^=TJ7iWBK&UH-#`m^VaA#}{Gfisd${;hR{5t{R0DaCAli{P5%u{_%w#%caqrTw?
zzfo99^0sc1q`VR>Pj=(jPn6l9uEc6av+r}RWhy!x_;DlZ?kS~uQH_lU&%HYcR*%;m
ztbJzIsq-iLcB7~zkR7vkj0(NW>=K#2k@x`bS~V?zD?~2~Y(TJcHcUTu1FjC8^_AYz
zDzIvM1Q#E2&foT7%`|dc^^Hq&4O`d!@|$4bC&zHGJbjWE@{C~0PkYdhYuwi8BvQkD
zez~83#<xW=$9a<5Xt3b%sFC?tmyQAz<yY9)+qrD92WvD8eaWlp5%D<E`o;pZ6*<1R
z`8eJHy!FvEK#H-wx5h$BeTZ|{^}CPggC#^QiCYJi#)TWMy(+vS*)W#!)GKz5;-$f_
z5zto#;D%7JGf<+Pt@#_$_pez7p5J28d2<T=+;#)%^8R$gWzgiYCChSr$QZh{8PVeY
zVDrV0r$2bfSnVuMa7Ks8Q^62lVo+j1g9b!)?k>EwMiB?BvU}gZ<X(RNphJQ`=cB;c
z({$Xo9!3|Pp<~|00w}LGgl?KoQp~LLP>hgDkj^`KTcEHW-a40KIkyL6RB6WXvxkoQ
zT|LDV1xK~dYWPzz--DTFsPAd*)@a5@%Tn~l$l6y7LTBYrOS>Nx0Jt&i)STq3ZQfjD
z)N?J*a5^okR{Kk?vkbZ;4jy{|u3C>C9(lAC)0x`Lt5n}7?cyx-NN{D+c=P)C^CoHd
z5byO6H~oZOn)G-8jBke|_Gb@w;Z=BM9!`sto?kG<MZH?feLFhK*}lrT!;3BT+hecW
z#Tl7*zStf*D$jLiC{akU!rJ>PJUA$=z|L_;F@QU0)|yR~qKo!8ei6$uY@=66s;{LS
zS(%S;MZ=$)Z=Y1&PWsV({TF}StZpIaM()<|b7zH93eduU^d=_7*ba#K-02S3nG+$I
z|B?%Z7ZWWr^DXE~i+R1_v>}#f@k3L+=H8=y<FtJ_{Pug<-3yPTo8f+|^9}!vb=auu
z+=3)sj2Y3a-UCqac~S4I4j3#6LC{$M*QF|tjdqy18%cN6U(};_CTd;`N`sLkYwP_u
znS%qF?Ey-7aa^W8)xfi2d#cXQf_%dh95k0qNzexAaz(6qL@dvWVa&@PkXJaj$|Rrk
zBz%g0t}PV|mWUqp>xCU$U^;YHoYzgNVb8_9)`@)&V<n_d1$07A@X#3wRwm&Q=&kjc
zS(6=;$Nnx=D-zpLMK+lTED&WUndTnY6~ZFc4{F|=<@1D6hqKoN*0eKapVLkOo4S+k
z+COXV30uPe!1I>EFfGYxaDIyCL%#NI8gSj=PqJk9n^)N!Wp?U@?$&S=H_3>82ndw*
zL}HY;PcnXA?4bOFfdE}16lWK0noG?SN{W&cL-#<$&E|J@ro)Rkwi&s=on4-!K#Si*
zdh5VnUjxDxet1zG<Cd<-zo+SWvSr;DQt}4i#*tMVjf6&hGP($=X4Afl06*x=kD1^D
z$n;L6TInN&(JHHflF>ct<y4Rny5pvvxQ{ce3*(nf-PbOBA6Q@SJzh<+wH%sj6D`+g
zf>2?}vZ_6w;pZ2n0lpOoZ`3N?ZN-arp=+AX+dqf-PzE?@jWz(CE6OJJGvm-0d=o@;
zW71TRC1E{G;3zWq+6MkYo2?43LO{6Jbq`?~4^*xzwE0X{TO?H;OFkNe2M4N0&VmCp
z&$}hGA1`2JUTdH(=k!_vd&1&cFv;bswQS6xp5^t*2;Ct4hb9nhPn-N>q2bVDday_N
z?F6FqN=D~)LEnzeu|6K)S!QH-?$*U55((TU>rAnCYcA&5Ikc^4v=7LdJ+?TV%h{OO
zx2QE<i8;AizJ+uY9LXxk_7(5<*kFFnwXYfZdFK@Nl+XvmD7OYS^V0dkTsJ>V5#da~
zqpY^v4N;hX%BwIczLH7N^E<u4eCGbjPmi1OYdZyuK2|(f3}zep<XrI2vj%^0q1qVc
zO=PRzzM9!?+G_y~y7D$2Q<<~6P+i__lQw{kwVTh1MZ{=Fs_$k7D^0A)&dHD)liJy_
z&)l0Uq$mn6$R1D<S`XQgC*62e4k@Uvm=(_stDJKT<rHVv)3`r10wa1;4`%7I`&6WI
z(|2CKDQRwXmxZHcT7B0c2pm?ki5^#Pp)6uge+HDx08W+{*Pdw_{@E0{B5aMEg2gk6
z=gftizewL83O=`x;z;H9@7mx*X71wHugPYIbs6J(7e0)Jg+Zf_a$fTV`B<0(2P-Af
z<xWoQkTR%`15*d|(MH;pzj;%GN~)5-_<|%(hjkj@tQ%yO#PNtMPV@-?MyR8gl#ohu
zs*1wEUUJa=nI7ejpo`ijzuvHiSD%J0uaISKtL1bSrReoqQGWzBrFUpe23Fq84i{fx
z*(P*IJdrvf>g&ueqfhW>Rf6tTQ!jpbFI`O~Zam4H(w*gUk3Y(;xS8`K`@J3JgoK{5
zUUGP(g+f}lId<+^?LS~cwM_ihZHnZcZ;gYQNX1`JU6RHQE#ceNVJ-XGqfz0Y)BX9n
z3o+;`dL$&cqboH*dj$973Eu!x71}1N<Cwl9J8T{w=<8s{Z)UtQa8~>QCM4=df5l2<
zs)0BH*IjM+WnJ2-#Sa~sjUxn35XY={nQ$r<`|Z21kvo%$GdJF?(~Sh7b#4#}{*BGn
zjvn*Y4*28T5;M)w6sG=lclEf4uj6rt9|DV2%$`5<S)0aWx+HTQL*5Sw^JnUA%PWf%
zuXPrM@BV}sh^gJOn<;5B9~6Eel4hMg_-922aoIm&0(jBcztN-_pa(0iG4e@$tyqW&
z)}9ucpuTHCR2Ws~aoKgtF?wSEnod1L8FRJN)Rfe-+?R}Jl?S5Ho;|Dl>cZ7>aDQ*M
z1LY#5-wAY)YobO7PE2T|<6!N~)*Aa=(%IU@ZPGG8qpheuGR2Rjhj1YCtm#M$<!2Za
z2-J*79(CRWZ|y=sr|D>Sh*cq^)&X4$j1qv7+mpI0^^-UB?g>qT%8Y)NwtMd5i5pbN
zK72u6gBD<K6Z(VR58ysJ!(-CR_TdIaCV4Fl5FlKc%B*Ip?r0x5o>UHUA*A@%=B({}
zoI7T=B<f;pkJCGB59@nV{rlCgHCmWgI|ejSrA!Yw(-l^w&51<s41bKeCtbb|BC(&K
zK=Pa7mmiTavMx<HXVD#5nh$?QCQ$sYrqhw~+Pw78VzG1M_Cs@@uP~gWt60RKySOi2
zq`a87Gq)j{4H4J^K4v)&gY>pE@!ZucRoz@D^m|%n_1c`S8gP~MoQ~zqg<Hk7>qq%p
z6VL>niJ$W5P&zS$`ZFK2;P<&&vlwjEJX)KoT`9PvgMH5+=WK<PA8uxU?x<#0+0{n*
zo_V)eTchC<-LDZKolBwJ%$lqhHn1k2oeH^o9mT(sQD|v}v7*(Z#}~Uw)u(Oy$+U(H
z5C$H$Xe|s>BC%Fn%%;;!snpX#NaEG@zCM8Et(;V3ek!Dq6S{x}!%mXyl|R+01N!$I
zS$T-iEJGeqDFp>KF29|fr=Yb3d+nxiy6?KJFzqoY&eCobGRR&fk?1={C^oV2Z&ylx
zb}J4PxN2!&&7&_Oo(_=^z9JgNWg0$gw<+a0``X9@_sCt{YD+k=rYhBT99Wu10rZER
z)oG?U_(Ahg4@D7YW>3|ADQV8r^h|5@r)vhxvb~a+w(rE`TN%~%Uej?Opd}tn@kS}t
znBfEEp1Y#Vx9tit6P_s-n=dr3fF?(5&I)?v4}wHVt`t=>XH(<PTt~~Hv@25e^37=r
z8^g2a;>HUXIxmYcg>OF8KCI_7*>srTuZP+tmZ3|Vic><%;e{KYq5_ze+{j!PsG@J1
zbx8S*dK=Td)9GqfR9oRa&s?_?a5|ik-zxw0@|5Ef@pe$+!7fR3Sw2~oy?Z>ZE@%0a
zuI0*z`mu4>zq(XZaQG%O3sYw^R7fH7AL+6|dvE-xP|ajHdhal5R78!6a|}|<KDw_3
z_5rbKpJitAU_W6YQus99=Ec?vRO4pqMZe2!`<0A$gO;l5xpn;-8Uw{U(_r8ULF+(6
zb%!eha|W;Wl@`0l@*TNW3hcctUZLhAO&n<OxuJ{q*KEuQI$N+27jG+0mTc`y({8C0
z?73?u56KwGG=t=rJ=0IC>8o6szT>sb1$GcaA*FaCvQhf{?%C2=w>JSs%g9G^nwm(%
z7AgYZdP^KXvx$w4Lllfng;~nJ3S1E>jjKE3a$8*c;zG%Mnn-szQ1&kIRvN4b<HWLW
zm9lBzy|S(L+~aloG;(UyGGxoPfs=vchrg3LhmqCQ>tDyU^GM(56LcHB$oKiF48SMq
zn5}(;2~W0O;U^@kyXCd>Z3Y90AIr?DVF|eR9{%{U7U@fe1KLetS}(}@U>$<q1~NnO
z!}NPHjl-bZ0i%vxULZ3)>>)tu0ocr@c3eRa=mwvBnKA%myj%z%HMFz1o}tB4pHAI8
z_!yyMnQ9CKVSn9tTeRW80^pjVw;X2oBozDw;@A<*I$m=~$Q%_iD5R)uQev4*hHMXG
z!MXO&OrU)mu#nVbhzmHBu7UBhCjzKln@elK()xC=s>Q`VrBhC`lhp*ggXKUU#d)N|
z0}m6B;?3t#j{}!zh~=qc+KeU|L6rT9ry=`}M}-`Ghx2STOJ=T*pY~;!mwJonK6=?Z
zY`liC9<=Ct6jtB<EC3Ti{49EU{I1b)n71g;ksG`2b4!zjGeIA2EcBNtL4ytW9S2S$
zi(?krx6@rx9ATH${yK-5k?O4%F%(${6WHtJhnm0KYYN6g31BZ!-E^66N6&XW=G{)F
zIZwq;WSx8kgaBmZnNixhuW`{Pyy%nLucxGoh(l;`@>X=aY`*l|1S{z19g4nA#DZet
ztl4yS-MagkwxQZkIST((1y)%^U}qt-a=57y6C)8~xyYBootQQgxj4UYg&ERn9(!58
z`@5klzjDNQm6kUq<Mio=DWsS+^PV9|4(TTFBBKyaH0;E{qdzd2*tq~`^|5^Brjq&x
zx(P0+fe0!k@6&|c4~@{pDGquE*FYvF9}+I`q0+}BrA?)e?4_q3KfJtK<5wa#8a^`>
zV9?(WM*0pn(P)a3RR%N-bM`naq1kVa>sgpdJhf~cBsM)9Et#vY2gwPlc!DLu1XH+E
zX0Iu-?4Owqx=Xwk_`=}~`z^c8?~PA@a9%Mw8|;aP(8B5H45`F4A4cMRd)s9S+}|4)
z++HF{%@pPyIWJ(Xv@snWaq*b=5UsR0A$yM%j;LGbUp56f_JLywV$0XOWe<~G?P{k#
zTylJA<*ww^e+@`L$Jt1ma6fxfTpb_Y^)K0x%!Or1$1DHro@zFGDyUNBGf=EDsSOct
z9i1@omii=4&B<Ze(fb=BwaCKwY|aeqYM=NY{8Y96{3BLAski5o9mlaXG2`uOG1ruh
zrUy;?`Q7!bTkhJp1vfkjd_?IJwvv2J=P8N@Yz0k5bKCseZj!QO9C?#?T{6{t@()j>
zy`okt%Cr~}4;F_a)gE4u!ts*>*P>SSSpxlhey+O*!&4ODX6+cdLwwo?x!ZyGLL!$T
z5xo{P&e)T#Jk|p+0%Sd6iGh!zulHTGOTz`fg4gikc<-KFn3v>%W>k-ada!8tCFe)T
z7sLWjneEWlPs3~gkM{NNd%bPcY&}08cj})&QuJ!G_iks`eGvXcWyXd|KS4Jib4Y3R
z<r+VVA0l?$JbdsQjEzHtV0Tflcd4Pq1w!yOP4Y6Kjut;F?-ZpjJd`IAj@!fY8#RsY
zVxDD9zxzl+6`!Ths3zqO<9=_moEsdQOlGQ$(=Aehq@odnwg<F&ewAt;;;-c*Db-B5
zi*sK4?m>Vj61-X_BbBAvw(1$XFTE02h<Fb?GZF$D{kqsb%fkVR@Iz{YoHO|ohY68_
zxUxs5u9gzjF|V<;@^XXOc}6s7aN&RQOQ@^DCccvLQl*IQm64L0z?N8-aylflFkJEZ
z?0Qo*7$~rR%FY;VA{5C;jQVL+Q?QkXE1xfkS9`(<255D^d-ot8bT;@dP{|thhbW<2
zZSXvS;|DX=V90h2r}pvOVc&ss{$8AC6sg)~*KyGg`55X)TgK(DBy?>psC;^;87s`*
zHNTnk-Zs_B0YB@I))`L)o!+8WF|lPkR-k+B;c$uIbNr^aKjdT?SsJ=DKjB8wGFUFH
z&oEZ00(-dHF=S+;i`jYCm=|4EzN6Lp2I7%R64>WKj>=`C%8zy&RR7J(3#iY)o_HU&
zz6f+Gzkgqm)I`NF(-uWXrvV>~q~bVQruO?DuH~^%6C(x$Yze=i-q02-+4vB@-Gm#b
zYa{`B<fE7L5Y8e5yia$m6qnG)>}t=e3oG{q95K~aniU099-n+W3<Z_x*NHFyTHDvB
zf@`TpqvvuSt{z^|qLWsoHr1h9rur&}uck>llOO>4p6M+;eTN2Sb3h!qfnlHhUB^Mr
zV3x!y_B>-7uzo5-Zs~!|$<ya|JbDGikQSc9M~0XNK^Zkf|GRNGKpRkX<4AeM`|Z(5
z`rVUpj~(`KYG@>f6Kh*TUFtCn?tJHv=n-=9G^=l{YKD$;-$}&O)lJ1!g?;G~gSytU
z3{X`iH9&9ZYvCkzM|?Mi?H&VAj*3VNokD(h@#dnNiKJZ!P&yMnqDF}%fli`t^eeG?
z^VoxE<VoG$^vv@txoHqX$=Rf5whgA=d#-KLfhNg4eBP@ep7>rM>jPA}BM~LY+L3d|
z>zz7c!_8Ih1F;|fk<q*c3qDK2@oMWtibHMQbN1KQ5pnEkJKamAzkzW%j+~y#^fST7
z_3NOfQ<L1&G}@%%r1yej%}5)?Dj=38gGyhRYiFqL?|7S#?%SI<gg)JN!r7vPFP+{2
zQaz8dcyuq88Hq<*teQCAQyS+rE;npFSCJ<(vP&LVuoRr`>D5$ygA>y6%5QvQWSEn#
z&r%L6gbqG|9rWg`b!$|j1%qJ*BDK&Orq#J($bVcFmBxXv+}hY`c@b66hh;mkU*+F=
zjxnCeCjqNHzey5SpZIm^yW3|=HRsasbO{@04UOomQOiOKk`}ErXuuroE?4t8SL_f}
zFoj%JifLJf*zIN{Lbqt){PJS{gZ~0gMUO=%PA}4ugS?{OkVf4h<RayWHfv)X!1vq+
z5d@Sv4)45&1YF@G>y}I$v?3q<NTp1)ROe}MbJaBoK{+0uzlEe&!!`)f*{{)lT^!|5
zG>bdQR3&}%()!3jD6)#xKjoQ2d*P(|co^a-`an2LXl~h}6gkBjfIcVh9i2FN?%1zG
zt)*9xJ)=Ry@7N#YrlVHvvq<5+(m>_DHEb(c-j;SZPh$cBS6m}aw|R437jDLL7jkmO
z*QLk0ODuufenF5^HWFqWAvg*1dZgG&c<qJ`uBSdS#rVHQmU?zG@q9M(NY)<HQZ@RS
z(zHqyq>5*F5$x%t?96Fsd&KQQrT1;MN1mMrg`u9KPXzSnYln><)G4mNQhp@Ib=*}X
zf=)g)S*SWZ{*;Y0QQ%+JaR_2xJkAL&&Tzy;JX#Wk5AJfuxh!(<@dJ9%=7uhq)J2)Q
z0=RctJkRg6EDpU%Yx{}B%~vWKsgCNcx9XOzHd^R)LZ<TQ>Julgylz!zA3b_MI~L2E
z#^*JGXI_KD1CNX^{ImC11bIE;4u`Gz!+s&XAHSbZI9{;E@2|g|*A8wulx3pOv9~&e
zZ1%eJ56$GWB&Pb<K&Uk8tW#{BHA=RtD!x2AQdCV7^;~Xqc5kD0jg?nfvli)_c{gAo
z8S_9~xx~S#`2NTihS2R<(GYGBNQLKz+Y?DUuc60x<8qBj2#q%u*3#Vs5<4$ZLPVg$
z!(5;dMbcpJ@d_)A6lhxg#sm*Lod3pfw)1$-L}`GVE4uo*E7duE9KnU$bIA4c(4x<!
z4ICPA)PkpZCNa;f=JLd+x?=K#=uv6R#{Mwbu++_)Gi~H>t2@VA!L}WC$)j=Q0^f0@
z?NYWwze#~i6V-%_>>}I75_P$*%D0FabETs2;V@@x_lOItnIU9Io-X?VqpQ7for8Qb
zTDU!K!FsT;L1`tW?mGC>!i@HG&|x!;&Daw~WAYEMl|_@5rC#imPObS4A*U5N-1LMv
z`m_3?%cc1vKVOtmql%fU6?jfJsnWFYO08oVX@RM3nn8MN!JRRlGE3dJ7{JUue*b}&
zmpXq4Nh>L7Q(2^scVgVS-5XNhN`Rmz!Al=(7v2goT~i94pL8kvkU4KC_8%157Mxj|
z6Q=tEGjHtj*blPU#@(9{%jNUO=Qi`-7#9IjfUXFa3~DU)FSZSFjaO99?-eo?U5y;i
zHBM(+*d3o#z}Ml%rwoT!3*hjh6RVGvpqB3MrRh+2FCZqw<vL2u%#Nin))g^?BzF%b
zz%zMI;k@9QL)9|&#5I)9Oc^spAm!bfAN0ZH5$Pbk?1$05%|wiyzD<8o#uvaZBCu8u
zvR%lSBp|NAi<5A=o1Uu^wQZ+O;CZ_y-_hjzny=wvN11~Snu<H5?EJ-G_pis=E&Me~
z-FL%d@WC?v7>LlqGm+yjA#!?9f45DH{wi8E3`#s~r?k8zTagxD$er2=YkQEaLkTMk
ztjNEq5?aGIG{zqyiRk_tu<&0{N>Qq>t3m~VY&Pkj0(C6M6Rs(Vj5T8Rfv$ZJmxf0>
zT-2LFWd%m3pP$~pfWsh#`vjW&E)TUKgz2rjkG9hd{|Remc^!?&dJ*<ea4K9Y#=MT&
zsZHiJ4D~;87pT7^iT7o@L{l)$zg?z{2#cUg+@Rb(Hl#gD%@c;#=S5T9P_sVve(rR`
ziQ{Yg=k){cQJo770!ozyjil_&*r0_sEUIm2E6v;(ZZ)JUYCH4AJ3T&aW5;u~i$=bk
z`3IT_3RYQ^SYm9{kXmI{9W#<}e%lN(zrd{1er-~1RnOa}_vGC7bsZ8ilst73M-MU`
z-)7^gj82iD4gBu`Bmc>sjzHKCw{8yHx|r_A1xGUt*ISy6LizW+a#uw01K{o>UAa&`
z1xv(dMZ>(KsQP_8rKG4MriYEc)q4Iwl=vB=|58n^;_gn2a;X_>*Xv)I_DHL^o0_jw
zqp5cZ*+;s(!Q!>a14mtc&m<Jv?L?FC^*8t+(EK8T?iq768eja~DJ7%kE|lCC3U*R>
zHJBRbQI6L^{%;ude^bG?LlF*xYS(^dO)&)9z6EXdSm=+#Wd6YNWC8s?^9O$Xkm&yl
zl^~ift>b}%ABztF`!`Phzqcb#;z#O=+pw`+(Zz-|oh0pRxE5P0cleKB_%*{}G)+`R
z>8nuQ7GCj9lT>{GxFFBg<Ryn;z5qlse@m&$!opLM<V7SBXO4t1Nlx;cv=@XHjq^-L
z_)k#&{gs&6kNVhU{rx~nZRG73oIEW)FEs4`!s7mQNk@PHrbw44Lr+&QaKw>BpxTZ;
z<pc6Rvc97RR#}C`YE+5GO8hsE3IGG)55=-S$JPgy(BiTcXS>aQS#_rdQew%HDeb<1
zjM5Jkn0g+U<6q;}qh+b9Tblew5$BKF5rFkm@aCOUE5iJ2b$TS`3HzD+_mhhlxe+t7
z>EH|Dmrw5a5FU&ar|P$TJH(ekBL7W*8Ts<QT?*3sU&XsW{6HzFf985}I<|$@1tcQ1
z3kwev69D|v`Ol}W`2B??J(Lu8oJor2Ej!?V5Tgobz0<=$G@=~G{^u2b#cz}E(}Q(7
zoUhkX=6&j)70Cj8U;Am5h~KOrADO+7h_8Sq63@oqx)_T<XO^<NhB_0N5&^kjdFtOW
zV<2+xR=tGz6M37wl^zUwH%SnxH(qUf$UXen^Y(iPd|;)H_9XD{t>O=dz5+I&sw<CG
z4GBSab6Y_479i@G{7@~ac8>~Z|Iz08GgU+1GY-U1v=A#C?aHVMSYTap?vBT>#l8PM
zNDjW@;k<<XTP*F5x$+9|9yKd;{I!lNsp6+Y1Et$z*Ah0j)P7dd|DgZ>Ofh8{{c2ZS
zn*mA4aorSw#ZzrL3RsNfcP?I2jy{JZuH8Ser@kF&uy%z8pV*r4m;k!!Gp?lqZU<Er
z7yky3{XbwnyT4%86?t6q){AQmwZ$e+jk#1U_i&5Z0SwT>KG7F{<imfzE(5<$jN)mi
zzgbFfbG`JEQ9seR=92E|955ju>HM3<@#og!7xs2lwo3?3$>6Y_z;*cOC^qs9cC6y~
zP>+MlLo0EM8YNERAZ**8v*o{+Z%YWc(h(Meb1!dd2+5LM`{y3EB@&8W{xL4Vi>HZ%
zDc2P9sv_U+xCo4-7K68Yi+Az-(gA$%tk|Zf$IDl_gHlO&GINgSEWGOOVe-Nn@qYoc
zpvW>@9lCG}AT(kaiS>PNxf8_qXK?=GOFzbEh&xU%oh1Y2=JAI&l@lAk%c95ed<vzP
z6<nz^GM8Df{<&ZMl}VCsv&_`PonnYEVJl07iDtU^*m%HOM9QD;A30$}rT<K}zum82
z@eJ?B8ZHYDyjt?tqd#mQcRf*gd%DdEC-iUO!vD#(=O!+f-$12pO+tV#e2`Bec$gF-
zMUR843(@VpI_u(0Hu_sF?Z2z^U%n?!d*zB7T#I*DT$232b*jzpz=Px2-MO<z-<=t;
zE2s9dAArx9!3fpe8wekyXJL~)!T0<Kj&r?}X??SI+jqS55?1ng0)B~o9!qpw+5RBr
z^Lo<zp;1tB$EDMob&B9ryTA3&{vYcwp~8dxJ{(1V@2GG>p!m&-iBgHPoSyNL!(IXC
zfj4e72>B{_Q*b^L;Xw^<PPyh>0E)x$m0M3Mu3Gh%r-m8&bI!6wWjH4k4NsFC+a0Vi
zpB;<s9(NT+l|fy<G?KpRb7+wBCXP+<I0mzupBpAUT_@#IXcjN!Y6lCPJj>xPyq=%P
zloNB8Hkc^3yaY{@|D}xmF~a5B)#ttlXSHEAUAaz~Y)nVFORd}Q%Za#X!<XV9|K`~{
z{Q=?9N%FL1Mgru@_DL$Izfa+;4gZFh{*O0l{X25_Gs<$tY2vp$8AvC9?#>{qTLk^T
zGwy%$X;xPMtB5crLM0hX=6rMrmgD=ZpKGMx`^7Wym*^IoWL4h*@I=DH+*#y?4^~si
z?FOWpUthq?z5<4$s}H*3mZ;xg!3Xz%)yk18KN|@Suv%b-zJ&QDW+e9$Su{7B%4Q<j
zXt4o!eQr9w&w8mSJ_DLO^C&EWOcfYu`HKpkPyGr_<d&6T_jqYe3eW>;TPH?K1e&r8
zT-$)(5A52S$UeT{<wdx`V_D%T_)Ou>QP8VVhjia40=immhUwhTFYHE8u!!i%Q|ZB~
zNAHl6a#8Kbf7>rPyM;Si;=YJ=fA=<7WK6#P=SD(Y<p?E1pduU;Uxl^=>6aI3O#uZ!
z+!Ia#d~hW?6MV2p$dE(Y+)}A#w5DwLrx&(|S3qR^WT&yw5>Cl=9f=RXkLce8gpamT
zK>9CmV4jO&Vf`8+IbBS|QmC*m#;B_s{R6+475-^-qO88dU%_(|fe)4<YS`!*nZ^4r
zZ|{#>Mx_+fSA0$&D?(}()1<Bd3fMymfi*jR^sE0Yr~l1PMg~CKty>K|YbNSl+)hxY
z8M*B0{@wR8Y;wZaXD@}XgAWk*eZtP!bfyn7S^FBWfySX^bj}V=@O6D5hQwbo1TI~1
z&lE;4B*2Ca0NW{okd=f*YM2-QS{ztHkE_UtZ?3$`7T8g!%<)53T<q=zt6%xeKOfJ?
zlBch}ATJp6+RssigJ(ILK<1@oKw#>xvQUw+%wv$)Cb>fp6Pe;vC%enwrG?Lr>{)=%
zOuW;sugjjVy3|g6sfm@S`O^yplYk9CW$CR*C!=d~wO+Vy@7Zm>*V>zZmSRw_dF1jk
ze-SbECk<^s1H>$)eM~+heg9kO_J5|nAh3k;*;2%QouPDH2K(!Y4OmFB&2G*k#onnp
zFY-Q9&(=5Gg_E=#JC+y9&nhcGuFuIcJE;%3<4rNn&5lv=%=e~TuXfd#+}`okwd;}Y
z{Z7Io^A}TAl#J10Og<<R0rTN&E?UPe8vwhw^HSyFZn7cRh-k*GCg!!CqZI+~W7L|M
zXLR)o&r#2rETUf*Ls8ms?n)}ySyi%D^?tjQ+NM4!w@v}nIT|mu!_NA%{x&b&Z2$KB
zt4Chei(E5Abet_&VNAq!m71H1#<j(Go;w`Og$(s^0|`A`TfO-9()f$Hoq_OgAn@$p
zLYV(kVp@<eN<s;Xq!m9_iO{)AWp9Wnx8J2=1Q!?zcOA#%T_%C2rPk~Y5m*2D@bt>h
z8W@g^M1^A`B{99>D&M)kQsa^AYai7~A--+Y8!x$LCw+JGLd~g<=a=&r&tzfz>(&hw
zwLFL?Vk-=9%I$|V2?p;Q&0ou<KNf%d|B%*-p2?v^LJEG{_ZB%B?O#l1)2&K_{0-#V
zdceI;)x06kG7TxiVV0XN{-Bp87^=|f?=P}#AZ7ffm^=KVg_x^lV4F@*)zk0e`c>q0
z<DSC-^T_B^-qcLi6@*^7-9HzKfA2ral3C)NhI#(d`M+v^aY^)4j(o2EL7a<Qc%t;Z
zFcDd!iN=92F&e?=g-fNA1g;FBp}V{S0t}Tr8gMIT5~n66v<U0mvK{);zXybJyhNsw
z0BA%6Q+H?==||JP8%6U{pdHNIdK<o^rl#Beh5sYZi!=TRSc8eA;?&f<=<|FIjV1@$
zcV&@$(iOqIBGaoONo-^)m=SOBx5WQ=8rA;@bihIa-x!4T`Cg-X$oJ$KwmTeUTVBbi
zu+-_P@-=?W!a$Z9?|q3y1p?M!<Vvn&Phl@kUTZ-~NG0OSq|3lP82aeK@mmvdxq4Ur
z->HuOT~PmBR^tQ+oIUe*F1}X++;4F@2YU)t;CIjl@YgAIfD})TIIJ&phLYL*HhYT4
zp%cwF^wi|4&C<o_w2UIndxhxc#Qvjz{+}Q`3x~&gUpPmu_e+mowPJ*s#P)qM*wt?K
zAyrC#vEW_?#x9u`k%Ff-AEa%e2abP3VIs)su=(HR5|!e}k~BS5`w9Ic!#cF#@G}@0
z;e!bosbJkZaI1^qgJ<3iv|`e{qc9o+|3@SCzh=z=V=<6a7H)pkFnNePl~V&-2TI>W
zUB4YoZi#SNHoW{^oe`tKdw4v@uxFq6m%j5~gf4r2oo7PV)WPKMkA=M~FP4kU@4swr
z^ifygr@c$UU(+thQHdqBMz*h?oBYD1@NGFO1QUqeYS*}yGa>i;Ki2%cy!t7?etJTM
zhweIZug!^hE`NB7Sc0P`H>B~ThH?rrCyY*^g@wt<Q5sCK{^5e>)kQvBVDgzuW%B#&
z@S1dbrQuq2mrSCo@<wm?)XstZ=2;F(#B9m10q@@5y1M_fBHhDvFPr~zZM$UVkM&<8
z;h@HN^e5zwxY8|o1KlO;)=&Yr_+(}M>Gew^e+d<^8<Q77guI1Md;q$5pQ=K4MO+hU
zP7_9br8riGyA=ESB=K{1Xj%C1xaBGbq$jtV%ce9_DTC_q!e*Gv;I|sXqse5}rtbf~
zB|lvKiD1zahJcm!P%TO?lOx_U?4VS~df3fMmlRp-yTc!%+JBU)uw<wg8~D`y_u55W
zO;@$t%iFlAQrck%&io(J7+g;mrg|N|s>>y%GF?HZR~o_gQ2b*`z5+~;qu!lv@~6AZ
zN=*3-hbv3a$#y5hJEGLAr_p_l<^PPRC1uxHHD=II_ZVs7Nk0OoJ^~GG|H8WP<*To2
zwUkK28}Si@j~3rz_h^dQE~lvAWV2O_R;A~fH1o>&F<SJZ>Z<Eo>gG`@w7=J{1>%;$
z=b$S_{zpRp4^I_{66cxWc&g1!;yCZ?7_O0b>e$GkHiBIMLqC}Pt_I;-2Nz<F0+-1S
zw?cdWk!H`WnmFGX*SzB2KN-j^(`d`}aWw2a1KgIJ4<`m3u-<`ZN$MUvu^|iTe`vM;
z@h=OoH_PQ0dJBld_cxjMPlroz_tr`ePp6(sB(<L-rQW?)mNd@_EJDoZ4Ez{>$NG>X
z$f7_^c9{h85yLzdF{+3K6*n~V7wXcWaPYuZbJtUAn`>s}IqwSdp}`QOo+t)1Qg^MH
zIpSE}I&xdlGR$X<%g7R7Wl}s*&|9qTkAmZ}&VK52T<BeD(nNKMA4&uTL=|}T=f^rG
zC2wesAbjo7Pd6od!a3<EPTuVwiLlf~-10@EDDh)6@5K$wV3E%7G%HT99dUt|)?y%7
zV&7MQKR+0?v-+jGrjc>Jb-tsUL&33NJUVfPnZ!Dee879~&E~|H&g(*nV9{04YUPg-
z4@3LYf`1vLh)&7trfAAY#Tw~-y8W?ZlA&?f(PAOW`DuT6qo%QVVRN)l$u^({6m|6P
z8zA<E0yWHQC>(2+m8wMEkXZXPOxM;ue#*2bEdS1*`u_hc^fmTV3<$n^#VB@3Z`5?W
z8)4byD;?!mTjt%=DEg>yxxjWYR@4Cp^Dl$^un=|~Cs^{In9I3=hKx^r4~n42CT95u
z<%oaXu0ScU9~pQ0jwv#bta2>mEi;6EL4@dzUfy9rRf2H_iW&yF^uqt9QN?puHNJK|
zrp`Wa`<d=s=Pd}{ejO#1>k9|i7qcBjuN=LTEH9OHV_JT*{HP?xS8r03l&6(-WKyJO
zdO9bp>X<MROXhg8bU5U2qx;-BC!`t1E?MMnrd$wC@lhezF@H$-;eC|dHm#iPeX2m_
z`Dqi*N9?FgZIdY)QEs}$JeMeDk+BkKn<hQ3p0I%J2XE!%Pt#mJW0Qw(BTU=pgY#?e
zsR{gU5%uqaCq(#Yiu@sIs%WNb{A%i%UrzJwgR#Yw_la6)V$tjQNTNdvl8p@C)Gye2
zftejf<<+^Vi}Y@gY4t&3B_zmj>h0$xQw7eCsNAabCoY8AzVO`!k28z6cyXnZll1Rn
zjMSXL$`$jcnmx4!(oE2iJzlRg#dLC`hyo>ROGlFVKgv<H3UlEtmo(^2sC;)QJttJ8
z!Qc9Ncso=OXZa?zdfLK_pF8DA-lLqB;ao|lxxR=$`M^z1jy<6I$w_?QQAaAevqWcq
zk4yJS!MU)(y0Xm(26|*nbE^?PR^Q=v8O$`(h;Yboj(*n`dmFcpVsgJT0atLVTR*3!
z4dy-TavMM{8Vd4mvb>PrDy6GbUP{$0@kuPRsa96~ZTQ)-$e)A9jrbD4A!A)_+NyIt
zD|O@=@KJ+3#wzWzebSvcb?sK#t7M@mx#7v7(sUJ6wN8G;)b?c;@sAg5`m>mjcl}$=
zIx)HJ2R|iX-t*T^`Psj<Oy>X`)yiM;Nz`4xDdGQSF@-W{+RT~*_e+*|*+h>Wu5k;j
zuhD#cz`<K^*vn~K_~=k}=BYN!>9Tc|H4nP20IME53?>-fw;t+gTMPi%6^Ya(3|7+h
zce{ih^X3oHyV!~#^S@BC=(vg!F&rAOwO!_-9q{I2_Fd#NAx$g}>AwqW<NwwI5Tm!2
zpP|}nC{1+?c&K?q9X-ft8|$|`!+o=`1Fi85Dp7t1a@%hzY76PTQI{QV%U;Wp5k>@n
zXRXqcABi{0xltV2RrFZ(nmj&S^F-XUDJ|$?YE@Xgj_wSPGKBD`SKkq*mZoYKhR>iV
zy01!FH#XAx6vk^hW;9NEF;5|zz<8WVX$?0u#H40VBnROxrItoySjg9Z=F~4@yZ>?!
z&=s#oOXM`h*VfOH-l3*5X(ZQi!Rwh{pOaV4{l=<dj=H_kd26<r=yboX6fyc_vC#?d
z44+fyHreuZK~>#eEIn17SOQMtej2w^>d{Pc!h$5ZTxXqe$LNJ0jm)s-VEvLh8kYKE
z<gL$@QpU(Ze|^I1;DXftj;objL>yKA#~n;i_3>p&>5Q2@N>3YTruuXBrdvc!`pGE&
zD{13X#n~|09lspkqofNplGn|wdy@#0NlI;x@<)s4)|K<O&9h8N=UI0@q0i=~gA_`P
z=dBjRqw7(q3P-?;gwg5C#rN$d?|pijV){AzL^bFrjoh2~lZ7*)A*Pa_I@=BM8W{B+
zS{TXdV2#pCjU4x2H%bU%?|KUB9j9kzD#LTx2)RrY@_B~+RO;?*Eo*u2X7qP7>g$`N
zM^Fyq6J4le7OZxqyXwqE#a1wEosiZVV7-L2dnRoY?Eq00-Ws{BU58fQgF(=Knt+Iy
zX_3sbdPg8P)#Ll{bEMb7(euJ>+w%-ew3!hkp}tH%dJUIav}kFra|kJi<3?my6?*vD
zls-(|5OhC?pSG=K?T(AIRa_)mafs^|ug|7&ngu9ls1b5wgJPk&lyS@R?Xkd%2Gs?X
zH;I(dWH5*kqSW(;4b9eUcBAsp3mNd*?4lHqEiU~c7l^w37Y_SUO|vn<I9wj(6^?d`
z467Ic7=S`LcfSYLPD@PUQpV9ZcIX~2y>CJN99B5*Eq~4H8$C_03JDXF_H|ahBlgU$
z*ze>;Cv0@{=P7Lm`Fsa}m=e0m2HlcEK!ni+zTA`o5`YcJr*ff%XRJY!8*1)X4>+eb
zyZk?c_~yKm2i-bGy(l9c8oumhnMiDXm#U7*+f0?@H#15rzIfl`E=yhAP)*b{tYQ81
zZpK-j?-`*@D7AK<i&Lq9tfBqGTU=|_ZO=jDRIC80ugcge?Wg^mOrG1dEZz3;O;d~j
z?Sq=VbOc%AtY?t@xPwFjM+g$GDiuYFwGuueb%3R2+n`H!Ba{6%GADfF{gL|0_`Y=O
zdAh0_N}W2PGWZ_O&pYZH@97x;M5l@f3B-(_vN+U+acd;1lETk7C;Xwm==P*n*5+e#
zzLi6zyn77XG4#sf7>e;s$2YR-4iv!j8wIEBKly~adM6~$x%AJX&?PwULN4JuN9eT#
zBp0^0U@`6l$|v4%F;R??vs1S_A8h{OgZ)5nml-{g;2gP(u0)vbC??JHRtg7d0vpW@
z1uj6ioDbThl!h;>4QI%w&Mu>D<vvYqf1#(&^zi5x6Rwgi2^Jn8JDPLK5@sdtUd0se
zSZ087!6v{2SM;{MKt|r-zDp?TN4fbfIeqpu>#3y%4p+3`W$8*8`))l>X3`b`Q?H10
zAN(T0vzq(ow@N(SXu1MAhK0WsP@w=yi7{LE7*hCD*KmkRHmzWzn0f-Er~`Y>V-k6}
z4%Zd>eWQ*lUB{>sm4YQ0B;081*sgTxH;6vZhXfLbTqz(c$(T-^wc?yhls%Q<=8`bw
z)951);^f4TMdQ$h8u)iKp%b3I^792`k0@myporVHTF{oq!BEK`-N=6lf1@nfj{B->
zVh;9Zf1_=`ufRa`!^eKd@vLl@o6NVy<d+VHule$=rbJClmR0lFWG!>qzaf_z7sGZ%
zTlA^~@&(3M`*KnW7hpF(erZy=HiNnYo4s%NO@Ug%A6zn%S@!ge@zVA<t2citTFzeH
zW{Y%BE}?IhL;>pZQcF9y;%w(TZF{-#z~!1?lN>I~Wbn37tOjk$b1}xhTxc>T5D@3a
z(ZH^HnXdv9f;U4`<7uS*_N@#uU|$U!^h@}1nJ7nhUs_7w;qy`*DfxUF^dwR1qgcer
zor6uw@?zByro`E)Om?m+|DF9VP7x7Q48Zbxi4=G|N%`tyMZc|klT@GUkvGf(3=+gT
zY2A?~ALpVfdEu(FXS0+n{E2{e-Z<Cb2z|^_!F!0Clt`$U!cM<+Y5ydD!>8a%x6K>w
zaE{auPcxpTn4DOjuj2+*Y3j$a7_W7OaPLkd=M%nz8Xg}mN6ZpnM(z^U4Re%fXP@^s
zNEh8)&zSvMigQM=3)|dew)Fu`_L4K?jqc$GcB*S=CSWn2vo)eU>T5tY5Reuk<ns$f
zM5dJ$2)G!*Rj83l1x`|oTzok};h9vZ509wt;<{T@HXq{~Fz3y+FeYqR85Sl`UQ_M3
zr}+FO=(>RTP#M?H_wLcrD!8-yvy!8ohC^HB^%Pt{@cin{G7_4XS14b$cD(-LYvJuz
zDK(#HVYVkuI)c}sfv8pFSw@famO%>gmcU6{!yn`}miH1)u^pupyhf*C>U?-q`5PXh
zZ}f`5>?$%UkioIL=HnXW-i6Y{4MRw1nNHqJ_($Qo?0pu!{Lg|}<p7_CgzwS$Mc$LY
zRCT{5)(Y8bqr)Iwu6wuQeYm;-fJQk!Rwsu9<E<mvm<d4Xb?5N3l`X4yTQ+>k`r!-S
zu-iIQs3rq!0A4e!^Rz*`qW-2_-A^la$UI?+YEyAWI_887W^=X86^jWjj<KW4$@TMu
z^kHVyJqsDGmc~0l0}o+otqXB1^9NNWh(?>ecX&(otQ9iqU!`K?UAG*xT%QoI9D38$
zLl7qA7Yea1s@!xyqxh<(hn4Tp>7;@qC(=-bruAx$jihYACS<^GZE!40dL-VhpOWXS
z43W=ZW0{gflBesAf{%y<qcwuFj=P>j#l~y8?%I!L;?GJnN1{Gl!Wk6FJ$n5_cOgu!
zeDy|y%X+89VXCFMSnD$QZfkIpT+L~o`l5XP(7g>J)qdwh+t#>pPM@KqlhjPvD4HVY
zH2285-Umv`)%HlD)B3dy79xa=D&NRDHTA$VW^uaFCAzM^TpZIZ*HLPrwEaQd<E7g5
zJ@v3n_j-5^5m(aH!_}~OC1!OsG{vsMiwzc^*e4#w#+OZ{@_fN><Ak_5cQHWMUl6>4
z&3v_zSCvt*5cF;*#nGbr!PaSbdTg^`<C4C-1p|CC8|AOX7W+!ih8a0MKp3=TFY(%v
zIf=`dDsW4vhXkT^(7kvCn$%57VLPCO;*CC4zjoxEp3<7iAh29oUV)ItoMX$k@RvCU
z$@0thK1nlKraKO;nucyYak(^u97A6zpOnfVmOxTT_D?Dty+-AcYOJpjsFoNQmEhgY
z$}A#!-=7K7{MzX83GdtQQ7Nq|8tFL;5l^U^V?&3!<Uco(+m`t-$$;=wNh3)xQ`kc7
z`KgKMV}WJ`VKo5*1#t(&3=p+R@`+#sC5m9`PHal%Tz;#AdXmEWu_*Prk_RhV;ejI|
z%$)dp3wFj~#qL$S_65a+cc-aPll;tSTYZFsRQ&D0&#OALg&K(n;3Pwa$z8DGqq3nn
zBtzrzWF2Ro1&gBR{3_?@M{wTx><`(XjeuZ}b^qZws-@spPJ3NMTnSE3w3XN@^IgZi
zh{yAnd3E6ct|wmgwAXqn_A|-sK5-|jk=cnOkcy<cMflx^HLgZhc@IedS1)!n!QLH(
z{Nhq(lVwPjcdOP>y5+IiqQ&vPS0gD~W$n)?7=HT<bt!6jNYqf^SxUwH2-t`Ce%MsD
zfZmbTteUHI&J}rbM^^x}xlxe&y>jmq*J*I+{wCM$<Q+DhTo|hmdfLvciPL`V8B~E%
z^2x$0J6WYks2*Zv=QaLN>+}5<))nCghW!mO`W=>$STsdcc|D$m>s$E;nsB{3t9ib*
zrEk3hj|sr($~soOM$s&eW7At%^&J_!+7j<W=3|WEui;~0VtIB?*(ZgWbhRo-24t?j
z6U|w<+LT{RL%vK7Y6N6*#MQLNJFzeuY8u0ZZv+VpXWkc#dHW5Wewf2>VOQ_UUH(&y
z0&hoqzwOd~i*Y-6c+OPZA05ck{#E_S9*Y1xO;64PWzz9_ME7;hs(BLNM`QD(Op6u4
zQzMY$4Q*1a=Bvzko;IVYCSxxc(W9(6dw*Xro6{Y8-d*smh>C557`rW}!dD`wyJ5qf
zNqnL1)cvfry`RlvBWs&&SdT^3hF$^qt$O!--GY`P5kd}F&xF8-f{JCBCr+1CHWe<&
zLF?L~Qx2Kp3ZQKSdOxPVUAGLh<9Q)*YzrK*=JYP7h_N0IE;$|`?qj&=?{v((PQbdn
z!7O4$7<CTyXy=}HCJ?!m@+bjYu(m~m>buZoR*i^YFZ8KOH8|*{#ap;5erlc8T(ccb
zYbmZ#uVY7b%_%v40C4fcJQ#0@<A?^WJ@Dg*LU$j?Lc7>&as^Q^tR8f^LQQQR^t81F
zLyDvoAH4eWHPHA-pN~_J=I~m{ZXb6InoP>{jc%IzYI5mKWKZ=}<h@#IILtSHd`Vs~
z{6y+qY3SR@rq*@W_A0Md`yFGQ9Nw=Br7Py_Pr!YI8!owhw^|oIRgL9}w`7@3m(Fv{
zB7OoVNK}gToZATtX<n|!Tw>&$=RY^IW?held$vI7YP-zzepH@CzIS&cAvPTmu*8hY
z0^l$8?MA_>o4X=GCq{|8=Q20xg2J}8RWgH$wzJ2Jmx5i_BO$J8nU|myAN&$MZyr^7
z4J#~5tL}uLjxem+-)ENboUJkHb+#f3TttLp;h!XG5`Bk}t|#ZKdu8_{LR6MyAlfR<
znco&Dn7`_adovK6eH%(TuF=3T&S%KlxUeD8_^r_!;!wKJ(c#>{#Wqc?71985owJ^^
z2_I_jxwDUcFw-_2ty+Pp=1rPZD+*cL6Szs#)iar8`!Ovo&|B<XUZAlacl|iNS?E?k
z255Bu<@n5kmxl&40QoFRiTnGMIyQ*bo!hdj!cd&w{g@Nur9Y5IZg<w;Gv>xt-~9pO
zidnW<VJ0csk>VTk^j)uB=t8f!%6dtr_J)b3b>&D4J8RS1NY78!c=Y#YKOV)8)kW+R
z>eEUXs|z{EALCX(ADz!9Er|4ES!#cE*g{VnPO;pKi>j9{(4q<RkHuK!kB_xt^S`3_
zo!nlMHq(tl%t_&*3N=GXBnxR?V>qV<BtUz4y><}XD#Aa`YLD}JtV-^Z?hRjFF@O$9
zt%<{7QO<3fA_+Xnu|3l<h&bRLQaj$yZNE~%z9jyV>I>t*xAC6h|6}Z{<Ejd_{pD~7
z2|>C+LAtwJknZm8kZw34prC+sbLi$E-JpPU35Ra!?vnT&@4NTicg6R9{&PNipU<AP
zXV!ezcV^aFGn=$P#ozeo6NkGzo^s%<_i>eAaJwm7I!#RLH<efq^=*#SUGlNkzOH_E
z7kA-l&irPM_ZAH}C(1_JgVJ-`vsRadVf?x;D&oWJA?M1{3?(Cc%RsI7CA+B#)1w$f
z^dt7d&0B+SAp?!uqwsw&rwp1BC1zr~^a@ItH30eY=8QkUfJ+o!ZA}u+UzpEvg(H~U
zX4VKTAYKcAdL!g~t4<!(zIXIioC;YTi?`(a1Q+*2^iVT<)7I_&3yWI2`oSp{01qQ&
z@w`D)@=GD>O@8l8rop9nrM>s=y$jQuKRZ*>jNVlj@RL0c5=8*DFxdC!n*f^!T~>tn
z<l$-5cQOS#eT+l+JxYId+d)~AS?5oGsD%BryyKzqOWZ*OW*bA`3kp^liu}dM%e~x9
zMv*MGd~zLT_V5+^sC4(ly0^l-ZCv4uG)SLkR|~%TNqxh}CG_T2IoP4ZCe=3FKKg{}
z{!7`B!%iCsYK~WhADa!86b=S=)+}EMdjQArjf@L&-DFjUrf-9SU9L0Tbc0@f3>xYe
zM)Zm8(##A9sQiM>3qa<@AL09YBdz(vsSa=LL${qJ(LUE5ZMFc)csJydcUapgz_&1l
z3NpA%(rt!d8}<z;s@u5;1vG)YInoT~>W$fa1zNzMqx7_{{c<+wVdeA>=WIXVpjzLs
zZKc#`Q9IMZa2E1BLxREs?oKMQC8W5!VEDTnPG&)%^6P`20|Ay>^TTLFj$=Q~H@j~E
z=%i}F*Gdi*EKSd0-p>Y9`<-WEcVq4Fm0k4Q71|Rc*_Rc9abfsRVIE*70NHT&4(}`a
zeux0Sb9T==AZ!R*rAxcY*v?8}hWl95GWwxJLtArq#{a7UhcyAzG$x!LjQGXN@5Bz%
z0+zNuP8RrHLEZZRM^C;pILHc=R1RI?J3B2N>wW~`c;p_L8<;z(;3w%9wIe%zk+IbH
zq%YGY(GI@mM?(2dPm3R+&(C3@mhJ(?@sqvx-xQ{vqHIS0gnac0j~a0s7(7%_>gBJz
z<hJY8FLS_~1uySUu%qfn5A(FO7g1}p%vk7j!#N$)-|%<+tPk=@ub)DKV*y-Otehlz
zx2(qbzOd!Uya!!6?`N!P$r&f=`fAK>jpcApZX^gvJD4q>-CJdS(2h8K{qa=7R6+Q>
ze!MMncu{^$SH>w~k+JTD-ZPjxn|D2f*RRChNQixQfP@+k3eHjtEf5%h>W%Vawk?;j
z(-+ep8be8o?IFT`M)7+>4nI|u&Xmys@j$n7H{sX<RZ)AA)OI~TgxuE4Xh>rr4LV#)
zrqS-R@3(T}%Vr~oV64|v4ew`;qR0S?Pzh2UjV#ywR^7o}aq{lz`t<AIv-@aOqD*o~
zkN~nIJvgB84d42}3SZ|*|3txvp@GM2<LnlWv(3E!Y_kz(a456l3LNoyP>{PC7oY`@
zdM^CM4EX%1S4<f1(3vul1~2Bw1|V}1XgDK=g7dze7PKbq0G{+@{H&0p;8r?lr~XKQ
zQdwLS9^jh-hgxNQf-Son(?^X|fJOVdR!%f*My>lveOI@B^m`_sKyMv{Gak*U1O*`!
z`3vpIiek$rzHE7u1E6HpW`_^ZY8A`iaR+-T7b$RDP^3G#5gQ{eDzOGW>xQk-K}j=@
zx)b@i=p#@)f}3H}SJ$^3>Wf6WT8H`vJ=<9Ky9d|DvXr+|;Ocf^{{6IjD<v&X%k$lB
zU9Bx2=7c6A2tm&dgX8de2GEp%vssJgs9SJtr<%wpaEe#q&DUSB#sKge2~SIKsecM<
zuZ#a?D6Fc|)@+z5GjXAU@BS-jK?clN&Wgk-)=m<S4mKVCiIq4)@D_XV#PX2&8=T;Q
z>UJHHW~rNQ*WUD8tmq+xri7zxl}@Vwx(S=+rfG^UYa)yr7U(cVf5m(!FY13|^C@JU
zc&MyJ>5u>v0Ju)8@NC;46{^d~aiPQe6;hyx4qA{-LzCL9ng{`@X6pj8@kZFJZm+Xc
zXwtl$#gNcBcI4XznjxzR3;R#7vsrjM^EST&CgT<=??OKhV+AVQj!$t=!)0dTpGs3C
z6231wdXE5;YfZ6qdHbUaU7VrGZi_sIR*z!#*^)LzV?Q?U5YNvQi6=ys9Agn8td$~)
z#nhL##R3&VfcGeVyzBL6VPBKkx~1*o5$-g+qf!Jm{cm?unktEZMRP={0Fg*&E#^fe
z#W&G!6O#&opl5*8l3`)iRd+*KWr`_q7XMhrV;=<+oj~owHj!BM?_S~#7wFQT*p-)&
z6HNOb7djniIrdxXZ3zarrDNeN?riUN3-7^3Fulo~M<U=KPg9G3MQ>&SKEq2ppK4X;
zFhI)yxt)q8zf0=olx)#xv5o=7mD#+h!%jhJ=O9$1vjYkdn}g^0ee#-1mpzpCSz(u^
z_uJJ-Zx~As&l_F_&-y9w^)pMVB2z>+1x2-So#B1ixSbQgx{AkR?M_Q*$n!Mr$OSh0
zU+$~&HS7d@_q+;zzO_#21<L{$@!ncs#4gDgkAZrcL`@-_g2vHS2QP37A`6tRiX(jf
z5oRJnZ65rf&&iyp4@)MST|Xw;U8^)_0EVK@tsEs0lRbv;V;>4z7b>1<T1|T~Y6rf$
z`D*5_9s-LNefaf)k2BU?pNMOX;aesd?Zr~c<W(F5I?PtWyh|hgp$OpiV@6JRd|k!j
zI^Q&3y3Da3A3hXfCb3)WzDwnI$HTiq^&;iuBxRudPRh}jS5ssiy(U+tkkMI%rEGN9
zjCGySovT@{mbfBVJQT1SEE?6mEfke5q@KBE*Ei%wNAL?N)XHf3@^+fCH7#eg6&^K0
zQ$!#?V7M7`!RvHCqHYyxVI*`Gx47U7(<}I|0uB8riyM{BeNydVqOTSCr=$(i`A<R1
z8AG?>bx0a>twZaJWmVWeb1A`ho?*k*?jQDctAw}3e+3i?=nv!D;qiGeJ`N2<_?dl;
zq|BRoTF-FEW<`T4Tl9jpWx|llLzQMW|C{6JUbYB{;yY$qfcPVjCdwf>!ELI+0gvx#
zV2G6~7Av`-5E=YNPvpJEa1s0`Q~)gB%DG1IXKF5<Td-H=h_R8!%l7b~t5S<R3KSXL
z_I|L5WxB&+u3p;GQ&9>VIP{pLowHqR-uE;}<$=~`WJocg-@Zf`0zFijM9x%Vx3rS|
zGmgGUk^TZaHfUp~*;ghOfVFVJ*0M)MBAi7-e;7dO+6@e!_lq#E5p`GF!-UH;QX<2W
zB4RlTvnJY;j6+_f0G|wg*A=lF5}1#0nWb?HxMqFrn@$kdeeetL$Y`+cxtRt}>I*`I
zn=>L@=&)gi6ouyfF%h#z!`Lo;aS&@hC<_++i(}yTuF+i@?+VkefRhNmztyZ0?d;{S
z)~<Ygiul>KS790rGzBCmw3&L&f7il-a`mi?+?Jp*Vt&|Bd2<5&+(HX@jgo}X;BVx7
zvU=tio;RL=qObM*Kuykm%o@Api^F)~Bac>czz(2|McAv%x@C18;W*;kAUfSMVUSRS
z8S^Rz9=kPxQ5!+TJF$*qbhG^aN(xq0QJT3I(vGX1!Hbt=kuxrMBbNguE<;gsF}Ro6
zke<OXTO)TBC0;nL6F4$kmJ{3xC*OBJv@zU)MdEw)nPK5dN6ONACH0A}j(VvX&G3&&
zaJG}i776fSuJQ&pwR%MM;LsN%;|-1sp9xbbMxJ`PZYWaKDOiTSi~*QPK0j=EwL*ag
zq(<Hh&W|!$BZH`Aq9zapwx{bOv@Y|roz4D`f@V1ch}aUNLY)3Fkn=7`7>D^3=0G*x
z5_MX0@%Ps0wv)K(x{xqjtCtYhS{~<99=h)59BGobJl4yl2V-aNp_cEH#)jN2UE0YX
zVahcEw&iM&I^ENRq8-;IGu{MU7Ysw_MAF_oW_unK<O`SXL*{0L%9Zr=!w3q>vRsxK
zH~=V!!l;}%yocpL>~-3oPtRf9<Jld?X@%ybEb;Zn3jqMf9u9|LpWL^D*GMpfOSyCU
z;c}%MEz=1|{28v0i9x`78loTs!(b5b`DN3tKPM2tgk3MuZD60cV5@^YE~mA}4Nc>)
zW5&LtT)27aCEmi?caSIQ$=v2Hs7LR3*YmM}PhZNVp#Li!F$fLl2$c_Cy6?yYQPT0^
zDT~a{y~dsII>B9YMBk@j0uMLuP^Uloa)CR-H@clI%e<%eshehyyq&BhhaOmrLSk_O
zR$G(SLT~?a?n)Xb^XUmf_=$O}6Ap_yA&sZFzIgieWIEClrwcdj+Wzb-{&czdSA7#~
zht^bCn6RJ>$|iwMm5i~^m=2`(ZZ|>{7w*KQrSDv!mPt5{i|&m-C600v_Z67bL@H0b
zF>74&u|uxMjgt5>_0wWSh+c|osSb{F#TS9078y7EH`Nqii9L8Tq`4KdeL>Wh6ZBty
zuz9MLJ({-BZ#UK3E33>fMsd7$uR2<in)B{>H<{zBBWm>iA5;Pd6huwJpvNn2UJxh5
z0m16wWJEf#fpF~^pCDtVN4(LZlH6)Bj%WaBYugd_>__Fi#(=~?^;KP(cDcv8;W@54
zyFY)QRNPpYhS}3;?zZb)e|e;M!IV7Et$t6L#8r&Cd6VGqh#Voc(UCdtb@&dyc>DqQ
zBN<!6B@rjudFXfWmxcLX^aSI>7<}ZbZqZ{eDok}ze^0_FIM&z+%G#acQ;@Isq<hja
zR9cBiFRB(6;;mJvRofp+-Cg|V59J<qGFzDE>u<kFzc||85S-7<6Bg)KGssWD_xd$t
z5YU1phV;#x?GdNiKa#Y7&Gs#&Uq<1U%#pe11gM-Fl5HOvhRj%kB4jo8En5-M4LT1>
z<-Z&<SP!|KFl+m77<gN~@^E-cdxvZ-*SMNo5R~|ZT%y3WE$ZHXxGH|7fBWuI{1|W4
zY{Aw=|I?FR?trej&)Z8YXUWTIKJGJ1Old7E?zLG}jI;zGn6qtt9pSpPwRQ+1d~a5p
zEf3pd#8rFYsfAFmpxd9H@#qK%o0nUA@RmWi{C-R@qTLuSm0bMvi|NG|t|Jt{K5#s$
z<qipaea*LDnPm>dEToNIsY|2JCzxF4-(ar3y2`Tm;J@I%S0dIB3#6Z=u;0+2=wvGZ
zZg?qt7qj5cU)%;y8NX~4#$dOe8mlh<;#>UV8K4~DZqgkgE;GJ;lGN{#mx<w7jEro%
zSRh%#{ZNPDYRx5rU;yG=Vd%GR+g&wpd_pP_2_?SE#`8I@c#vL2@W#o0QsK;vWOsEh
zMhx$H)@2X?6v>wue5Q2NzIC0p{4AtPWAkRiPadN7<>^9Y_H*D0)}@#J^3+Eur{`kK
zadteYvM0}sg`KVWMx+hKL9lfZlRvZo!;x7;@~3Q0{8`~v^DTYeP|c*~%L(Byt@(oW
zbH0JXW0yU?n%-|*A7?94qsX(iJlurrthe_2>Z3&M0sQ3NBAz?`Cwa^yaeZwDakF~)
zD;Te3LKax<1wCAtI`-SYA)-TB!`wx-R$7THl<?PP7}eO0O%|!G0Tx9Efqj}u+roNN
z^bsyFXMaUjB>Vw6r{KD@1{1#WMQimMFjque^k8xQ&GBs1R4Err!HqZX+LY_IG5^6r
zvESV~2hGev0k`{0`ieIj^#OYg!n4r9Is@>*vD<=gZ4|!%2fF|GnFD#eG7<m|ff-es
zM}tyX!`Qw;nS2*g(r7llcP4edRykWq3SdSUA0{O5e4G|A9pxpT)ysmDxzC`O-WGML
zkyz$~bK+CmN3Sx}@uJq|jGBMX=gO>>SjT^9XFkedPAi#shBk~H)0qhdc{u3nupOVq
z{>h_d+wV}z`Lp^)$YI-$Vtb{vyDn)V*n}qMu6@6v<EORsHf*v9>_cW`4W{W@v9G9L
zh`w-}-(Uu0AqZpfKiZCx6V1HMSpRvFIn-9uCY9^&e^)Uc_QSSJbyVNTmI0Nxi0Sfd
z1S@j=MC$#Zz2mV*Y6z}{Mr&G7Faa$VNEN`ps>xE5)%EdIxG|+`<y*KanbtJ3tEjgx
z{oM<sX1ud8GLbgF$qlec^(NrrHWaVyWhwymQ0yCz)5Ij~B!y&Wf34J3Lq-M5dMbI*
zO=S7xY_p{*Uf7U0VkN@i<*BgoxnMT;8r&`Nis+;O$L@#u7(@FG#*-2J?>iKd_FC<J
z>vei7J>MP48(y}clNHtJt+lLgH=8i4#SCP7+1(?Vf26wDCF5+)lY(p5tz=D<?4kT1
z`hi^eG~lR+m1vwudrA4kB+G7^%2`mc<e-nEp-It%wiyz%Mdfd_)C==c++OQ-`FdPf
z8M9oK{N&2m+it?>zP!q>`wZx;4{$;gBx3{%Hytc#%{ONYe=bUmnUAxL+)>Bpc^+pg
zw#0^N5yvdvopxng4Sm_&sj7)eVmL+FxBPZFwezTWh0{!HLAaxk6wiH_pKa34tLH@s
z)|__yU55o}+(%Iv&^W|MnO%Xqit3O_Zf%_ITQl37QR)5o9xi{B)V&5_`oX<Ajn27P
zdvH5Mqq~-DJ1ZRK!%$?$7tF+C&84~{*xH~Ja2+hB*>34>#(!CZ^V$2O%o853GS=We
zb8e`so&jC$w|kk~q{SFG5xQz+(XcsrSW<=yA?pD{mH*%s{e-??-4<`hB{<8TOcV15
z3vZ)qNMHI^;jV61=o<(wqks;!a^PaWrpdO1-3-jSR&bO9r&)%2vLkKfFh)sNvz`?9
z$cuKLcr;&FO%(cnS0QfGSGsQ=mJ`cRZJS**?UE~IG%}jqe(Rqpzd;*Cd&jEIxWQ1d
z$N$B<d4Af=ph3f;6}rC1QFYzpcQ$#{=5A*i(6k<);nDQD@0)!D%x%V1U3T@tl_esw
z;U)ii>67~8WBCR{EL!@lVkbR~d*V!YjAA*q5T9Y<pIKT?V??MyguxVEWU%<{q+a=s
zNJ4)OFA$UV8JOpoC1L7=0%j7GvG7|(pBS1L?2)idLfyfEppqIz?KpW(_|R~R1O<Kf
zMQMiwt*lZD)Kww+T{CwzXj|xev5-&#R?bPO+al;&UG=2hQZl3$o8m)^%ug3q6jmz@
zw?0l|f=~e4dUYC8bA9>zLYdZiU|y7~8t*o`1oBX18Fv=evyy$~1MguDZ=T!5L`;u~
zZAK!nk$2M$g@Aw0&h7bfgCuagmY535HkOsgv6AEG^ASnW4aLR#XHY8ra|cMfkgR{+
zdH#X0tFSZ^_r%5%j*h<VY<Aek6*py<)NA&NeEiD4PUY=*TX||MKBK=G8=|Mxa#qFf
zV@Zs;C>sD`IZf(vY*4tCdJV^*JbfqGej4aX;)S+RR=nfDy@MJp(ROIW)A_pAgSGA4
z-qJnAPJnq_*Ih?Jz&^`8r&!>6s?~GkaIpB)jU2aIKa77pNsNk=)3O-HOklurL_(2_
zyQD}z;kx|5=xr$prGPmTE6vXCD`r%fH&-k2j3fhrRp!Ivq~Vw+bmAC(2XpRd=|$>B
zW*l1aw}kPNm)&OeUAZ^w)AS`}Ydy}bGf=zh;sXFw&pRRVTwuZutR5O90BX@VrP~kB
z)UJ#q#ScESq+p-W`Cv!KUA12OK?y+EX2w4L_{_JQLxa3=)}7R%k0;%`-D4eo>hd}E
ziOKL5M&}2uZ=@Rl+aby{EpY^7ilrZuLj(8UK2waS2PI1=AWR1)wYzi}+Fz##kCo0<
zqec8YuoTw2V4U1JLaHtoE+lKIZJxNTG0b-Vn(c2&#OlU(De#V_e<Px;%x}HcVX$vO
z!?lgRsf!<3^#xMxM}5)mxjO%_!q}@S`-vhF#Y!DAi;sBGSC?MXZ^b%Bn{=n2Z$ki&
zt-d3%3e}aei+q<o$H9^p-LpP}&r}Sxq-Te%34xd+%QuOSpsE&@u$;;PlD<*}O4$vs
zGYDV#4;4~Pky-6XPoek=gt9sX0`y%U@Z<msd!X9RlzXfj@sAa^L!NJMg*vMn!uY?H
zuo^hth)H_7UG5XB@V<@tEE;qX-Zs6C79G5Y6GI1?<nIKVI5W05so!NZEDhAC4?v)w
zbLpJ(gDd=vMjGr<l<1qD%|0{M6Wy4kg>;z+DE0MAgD-+rgp)tXh=P#DAx{pq?}f>B
zZ1pq()%EzvZybn=<ykJ$tAsNT`zKpRi&(fpuKtL*W{#k}>&pR4y=o`#*nrc#MR3-Y
zkyt?l|42!iCTruN*gb=Q8(uE|R*u{FXg!-_mPeI;I;j)>>+<a){d+xk@>=Qk>~;~x
z1g=6_%P{nq<*P;jn#W|kS(^;NhuqNQd+d`;W&eUgFV`b?ynaCCe4ooF94+J?kC8>Q
z@()9FdKGt?Ev37)_F<y*u%XT4h{Ue#Gd1zE<`Jo9aid0}x2xza5P92I4sK=#QcuY4
zJH?Xo!pBqFMUWf{=MG3ubuUh4hMIeYW^PF?e&Ev1^m_!gh&(rM^6Qg$1o{Gy!w7h<
zg;~f9zIbm}a?nMFERU7+W0RvhH{2&vxy2BP-gjsC=yhT3z^KbB#Y~dpl(WQBPvdC_
zos&t+aWBF?*A-ocSbJH}!HI5&S-IOv-?FKLpYs;!R7G_=_>RqHq{8j}mSg>wppihK
zrK?sY)NwzJ<mAWx?knCd%H2*_SrM^Dv0gssLaiHY7*Bf?MZ0UxAOhxLlH&0Q`prh_
zPu`HK;_*uO({9!rY<8SCVkDe1hQ(8DD53ezciCN&h;+Pc(CAm+Uo2|Gn58t9SrV38
zi=&t7o;#3r&^DnY6<PObSU-Nvm;elIIY1}k6r50<hmTO%IJ)~H>%PxNOYzJBmd7ME
zY?o;lw)|u!YU38U-kSI<%l%f;2!gk^dqO08_Qo7ykKpFFo9^I3HGv1Zor$6K*2UF+
zdC&%_(ls6Y8a^x>H9nU<PqnmiLRk@v0Pw<S>3lETFHcOu1fhs-g~c9mg{(f;L|n&(
zU1iOn8^q1mvP-9j{d_`XTj1#%gz|bX9(13R!}G3k3`#SK(<7kZ1ELW}NlFGYClKr7
z$R;D3KX<MS6TDl34PVwpK?}oe(C_0iP5D7rXoYM0DNO>?3P+52Zw49B5^MoHN#9Cq
zQT6n&E}QaPWN~vuewGtgE=x!l{&)d&d8$2O^<3ebZfIAL+PQmLUD)G~0c9VI7GW0t
za--p8>=5H_W<1=m8gpZ*Wg%0kk*n%0<qWw9o$gZKrtX^{%nC-Z*=+B<rtXv26)e1^
z7Qy9jC&bqgruz)xgZc;WcUTe+u$2<0uh)32<Wd2Zf%${SvT<CcWtqyR_xY)%^VN^e
zrNQrmBKZ!2e_ZR$Y-7ZFY(V@jF)|&aT`q>{cew3G4hLM^p^LJl-LsFYc7wpviv6sK
zS&#7#88GJG;io?)2xK~O&;kp84)6PL-BEWO5W3e)hw;m)R@8o>m%?Kcg;#I68~bg%
z2>;^(=Pq8jE9gC!J<idjVfBW{N)+b-vj2s~36c@5${N3b`uuo=sC4@UTY=B;=J?)9
zZO?`dbKg*zyjk8F)Z&DQmp5NL?IX|=!P9l}Hff)E<manBa=uUVLixCH(UV2zY;d9P
z@>o4J&eF?K^7Vl(m?L~A{d}upPv8;u$uGmx@%0mp=ww?mn~T0bx#O<&K02PV8vd!q
zq&3zyxPit*oH#3(Q6@hUzD{=}iK9UE6Q4T^Q0Xlg*7wDu#nl0yw^Y#IBl!^Zo6k+P
z$?ORc-~~`spxj9NIgMTFCV?xzHpKNBx6Aw1&`xYaW5jc(`2d}SbD&qsziKFGSfqL}
zES0xVEJLS2C1rei!ry?uNw`7BwklJXKFk!ekl`?+Q9yI*KnJ(hLM;No->sYZWgdH>
zS12l2#O<o}I|W~=Vgcv79EBz_^XoSWxk&Rk_fy~kqW$mOTnj<^8<91e<3%)RUh|V<
zG*`v6@jm0sa=wu@7lK~JVb^V2FsLHajLa5%eW{vlN$QH9IK|kY5H~5iE|{smv=1;e
z7p&e@DG1MsCSvr?M7dQ>f5WirTK;A+@9TLyj|1-}hu)FS6_I-fFa5@R4C!6zxp#Sq
zKGbquytkv=ccpk+cCF8N^Rs?YMJKl=@qBKy!5v#&vKK`5Lzi#8@Q_o(nJb3ndWzjd
ztN0fCg7&N?Un+T=*VIoqF0lBlBJ-@9C`yswZBVJ!s~1!JuZ#DbCId>K(>!aikHJeQ
zFzJ&Ae_qp@=&zCUB$<~I-rg&R2t=wM^zXvXHZSS8REnL>sO|Hd|5j8Bu}jQ27m!z!
zJ{8<J%{rD_aq_`O=DuDXNe(SuBESb-#5K4Mo0VWd#ZvCjE_7?3WM_Yws7WzyLQSPs
zON6C0A4rNAPwg|aT7+M>s~Hd#`XQqA!wK9jUaj2dFvm#Nx}?YU)o~kZM+Y!I)wMI}
z8}ZX{Y^(v$(OQB|2H12Mbub80q?9vY>D=yh=vDLOOfy{H?u}czm&HD3bX2C}8JsE<
zxVxcDE_$bW?C(r$X>s|lL*rw|n)<dhm>HC>CSXawypt{j2k=k&J#^hhdHlNq>&MKm
zamsJFX<azm)J8(r#A6{k_EZ9un0oM*lyCgs94GUbrs}fHeptk7l#zU$Y-g#j#z5!6
zj(_fPC!IFf`lG(rkTGgepqz4h1**B8xDQKD${jRY@UUk~*w{|$Z6Gy2Z?o-ZnQ>Io
zvSgl_(kQJ}FjzHwA*H35by93<>^(bX(b%-c9?Q(!(OOYFb6Gw`-1X^aVEoTm(_w#g
zze=`X)Ue2z^4^`64Nd7i6PP#5oyiu<uJmW$fFHwwCDIWen_6=f?hfPZ(fRp{*|ndv
zO5E#Ma2R~$JEl5(q+k~8HWvfUSs`sp*q1|ILy^LUI5~OC>Gwf_)f=zlFrc4H(>K@n
z&)YI&PkU9UiEWhgMQlylD@y!VN4Mc5B%TFJD|By~+W1X+cz=YK1wTTvT#q6v*&`y(
z`7WT#2EAJ@3%IK1Wazt7Y4h0;++d&JKSG-=c;{YXGRy1Z&?;Auy&Do~8kIHGM*A)?
zS<n{`5zSY(;73kD;(<3^UYMTS@rc7Id??~XXG!WT<8$(?=dt9hjP?VQ1RsY#;`xW-
zX^iu@rG~S3z>aC&JLm~N6Ij%@yw`leVXtXEBNl<p5pQQnOlA$+%A!z#*N>_h_uZ?$
zr)#=SPCeidP6ED^cRfj8AR+_yk@Yhf+I;4){^|6~!Lkw`SzLS93VY?}%rWY7o`tO%
zNYLq}t2%}SC+?}XgL2`tpPFgkVigB|=4EILBz>uT@pEl-ePcWnqI@SX!Fu^wFi^`(
z#AEBJGVv~?AY<XgEjbMK4If3uDwD|Bp1rfalI<|MldS77m!_$L_onGZ*8^eu?)2k!
zcd>^8;apdcTZVh4xc=1Y#>=QuzL2q+#<N;l8rR41b=C%>dU<Q~?EZ5Dh^)-(=OViI
zSpjY>jyfc$g+|R18h(SXx!fZ}WN(*(-8~~6M08Sj<o8QzwzW0~&Kg^(QE7r1+4y=l
z*TM^iteW>Z9TTA&jhUOCM()Wc%T+&HxL5dG9k27Zz3e+ZbXpmCT(3Uw*-}{r>@2+@
z`pGr(@@T&Rz+I&M?kav&4d*}s_d?Fm^~z27K;90sIl0BFx_RG0St{BfzKsvbPrKym
z1DVTJ0zHq}b5uVh6_1faZG>~??k_s`eMLl5Ys3X-UIMKsKV9YnEjM2GJCzyUc*N!X
z5auYp?t|>)s%#UK>$3{{_f{@=;HmePgU?opuK!*4n)K=CjVgHY6`Ox<7;~mj_G$mp
zZ5%!bhuPJX&^(}SQxGwj<O{FyL}}dhe$T)4MU)8jY={5)c23mnP`AZ>6)D5ov;W$K
zCF%=2ZLoE)XiA>2vNn(?xdIWMK&?3R*6vJO)atZsZ<~b2SY6dI8DS1_SnRBmO4(w>
zISatj;y*~`1VswvvfCFh;TeV(9oC!+OvMaZL+Z2g#Pv>DGc{v$B-9b!6<{5{?b7t=
z@9UF4vlRP}4Q~I4<CUVQ69G@zDze3*W!ccbA3n8nny)oIV5+<L?832F0{gP>kOiNZ
z$NIIESOTVhmsED^b?QfLI(XP%|I3B+@1O5j+Rtm9xq@6(#*);(C8j2*SOppdD-khX
zmk_dUGlrj)@*g2CY`CUhy7vc}oPG21Ju{ekC<c?3M%i04GYZ7Uk)+OibEkLp?sMSa
zkKu(voC(-bkynw&JZ+ZVX&biE8lGkH+(b2>Ad?o=>D&B^TK=^=Ha;JwBEydVU8{dy
zQLunEEs2N>(KqK}c~2UjAu)4-Pq{b>$6I<_b;_)KU2e;^b#j^l=A&%d4?VgPcZ0G_
z@3S=V{zv=%DXBeKbdAuT2#o{&BWl`9bsT%dwC(Y%%XQnf7dyK<)|pN5ee{ui9;&5i
zlUiS@s>_R^H(%3r4xqLH%lp)8u62&F`r=R4X8<L>_EW`~E)Q!O2x^3Pjqn>8CnS0A
zrEG1mcEUpLIL@Xcdixda%}~aTtjlm(NkFxniwZXDf9y2;g%7G1%AO-51A?gs{9^-%
z=-u_(tE)477sp)2mxV5A$r2f-nIyWONPd6oJ0tJ}7dn^o^36_fX!&;Om*UwlYclK{
zyb}#0yl#Mt;k0o{3L_#~eD~+bURtvM+3o)&iU7Ni%i8+<l<S9#negyXMVTgNu#T>9
zrir6UuDLUAkAVu%j1HO9^`KTAr|ZA%>c24k>sA867K7*s6Ldc!kWMWPcBBeJm4W#z
zi9KRnbu)EkeGIyE0zTo0IW_^wrDCwr3hp2JrChYkj>scy$tK7WWT~TYP+oV@TEOd5
zQgiDiy>`Vg8&aDkSaToQcY@!rzHMjeR35PUD;oWum4O272RNIXbmMDkxkZ}4hpr`B
z9;)?cIlP*XimaR&4Js<NM?#C&)4Oi_$Sg+qTVZ4hV=?fNyacuco3+`qwB?s*DGqtp
zlcO0tPZkAwwIFIk#MFchKfuuS12tSD7kvesE{yF96`(Zc13}SwL1khcdwH%INLd1$
zL6tsELam5QzB^|(UX3mn$0g8=lVbJsnVFm8)9`o?SuZn0G;Bvfaq0iCNLZ4E2^_JJ
z5_em!Un@;8R1k`7#&t5dRG5(2O_0`~6nFB(EP00<I+g+_vE~ygr`0F*TY1<m;$!V(
zn<=_Ev|YFTrslm2|2+Cc4FinEQkIp<sKhR~r`=itoHaZ2Ggm`12<8=Lo+85(q^kc(
z4KR#=-U3SpICuLlQp$f0?VqD5*1ETkT<$wDhOZ3|wF}{v3P$cz<<Jwdo~|l#Jy1uG
zC?p6fCNcP7roIlK6~$FwT~bns&2+(+4p+Bw{&wm_IZb3QQs<~u<UC2Ji)T_zNIm#L
z-y)ylR$QO0DxzCb6uK@Rl@XrmZ`Mbqh2N*dT#=*i`*5jwdIfL8KAEAzXVTag0(sFC
zlc)axXtWGVwj<890OO!Sdxp-cd3cnyC|wr%2{|``I?rg8;GlJ%U`x#{sjfXax26Wo
zgmu7;tcR<F>_d%&0u&L^739gRh`FhZJ%QOzlgi*`YI5F(ivDh%qTm|95F+|VTKKTC
zJuNCji6F>}Nl`QW2bFVvZhRJ|d@XsoFFbsN13*4SW;LFI|0?m|L1g+Rw-IIdXWfW{
zk$q2JNh}%Iyp@T2p!X3xxB?@keTrkQwMbwcvOJz~!m>Gb#)Dx5Q~@xAwIv*lB-Fv$
zHcBlBu7h_rr11B4ST_ZYL1-?P_D4^W!jP+VVUKC@i1hw*L-K!j7-mgSU2>?DSQYxl
zmZjAAb6{8yIjF#P<j_(?Lj~sH`cIQZrchRB-;nR1Bce*yVG^vBqL2gG5wZ?c8pxph
zMpPhsVDk{?ZsBYH4p?&>aF*<P9qip*en&k86Nn->H1r*)qnaOObmpmX`v@#&<M+1)
z1?j;-V9JrPD9Y#-l%%kOLqw}`G>nn>&4wr#K*qtLM55l3F;0E5vF4Zr6zxIFj|eh;
zf9)d>Ey5drp@y6+2%S;!&*446bvzInLcYz2vq`A;C#(kzH>bz+8yTs$T{^^@Fa1=+
zW>cfL^qz>dxosY39`)ba{I7Y&BS6t(;7=bHo;XB}iE*<NcMCkA3)WOLTt`|;tp0<J
ziW0?vX+STS;f7V#_u7D%eO}D}x{;eoHu8b?qccTeX?CHS!Hg<?2K;T7)Re=30}U<V
zVb^r^um`n3*2aG460JDNt8dOEfg;`xX(uCMy(wR$FGByVvtYLs447-+EE$y_p(kz}
z9gdB0p+RaOCN9`H$>?dnlD&SjsaLubGhz}s#h{KRw<?$KUxABwARXAQ|2DwTn}-#l
zV!?!Rq5E=iAy<WGG!<WXlTl(Ow|_??keYb@_91(G1ZI<QawglbT5`;j%+ShtNVR{0
zWkcw!^V4UT{z|a>&+33E04jk(4SJGB8r)S+4t4_~e<HudVa*A7wo~BvpO5}3*&Z+I
z5==%UxSAMmaE92&#MB;SVnfd@`9LfXA^YCP1wt3h)$&~MoU!7a@TN}M_V1byZEu3f
z3zd2&MtpGl76l*GPs*RA*DMtAfj~H5F*4P~+3No4slpm$`$(WE^M^3(j5~rtk1Uwa
z>vzy&mWX~24n@>}53^jKe4`C|&)^S({g{&k`$G-b0(t|Xs_^`%gyTgMoAw5}OTyQh
zHVl7g)CXV;Ip=QmOSbxxk|8t4r`EI;rPt%(=>0HSe9$xs8PIB5#+;IYk&fZ`fp>-k
z_`{<r)PCB}=no8Jl`(oyzGGjC9?_qGcUNjTfDm-SW~?3h-r=ECPY|OOkq40i_7knq
zTLFQnhL^_CkAg#j&0%q&-zzag8@(pqp(tTXvB``W%uh7;1oM*D-#iGGD*i8P`<LcK
z?GP$6Y^LUmQ{1gx45nZX;8~`2W0R)Y%-si|F|H7u;6QI0n|L&uZ5q9qw!hJ^C<}@w
zWVN?wisgLJx;PwbSnCWi0!$jTa&e=ECykf;bwAO`{K|0t*X#dzg$~peu%2QwJFKAm
zbiu@ddg5qQ`8!WNf@=blUHKeS)S9x|bcjJt{AK|8{(~_dc#;pv1o;xz`WBqEJdyO>
zy{rBEe!x}HV0@5`QdK>DrptqdJp!d65U6jBHD31}>z$px_cvTA>Oml&{m=|T{^d3N
zPwd2C8jm=?;;=b%)@$+m60P7xhXsd-N@;`q^*^736$3E>2{;)?KM)D(OQjCdeWpwG
z!ZWTI;oyb-b9wb|O^7l8>+?<CTTZl(OISMhF}~oo!oC2sY0nW=hxyvtJ`^4CMbG75
zX8~}duv%+>hBhIV2<yMr;&x)LuwT9pUw^3r_+8U5#kW(ySq`Dc6dg9Vwh9`hDwV*#
z{FQ*us{kM3o3NP1^iVr+z!aGLDfJ4wKy<R9kq&PIrPp;C?LtJf`V9-^yANln$iKo*
zVjcN!;Lj%?t;G1)><1-!`&71<!AiIuj|o0xFIePCFUXFFA8Yc_6s2xAzJ_aTPO&QU
zdCzMKMA)uiY17|lj*mbCz$6<2uoxHWYatC^|Da+Ctt$+4EMXxx%<(_qfr3>(C^@vl
zKdreKR7KoqIh72W-O`14sOn6KN9_&8!gW-96x;g^mjAeYkD6rn-1fF;LOr1an}){k
zcR2h59p7<BXjkN_Gj_Z=UuSLqtenu<>U+xf2jz<r!j;=-OTjGMnF0(q^-+BnwMJNO
z$Fi$2#!*cdk9O*Q%*W!hVfJhU?7%l^_x?W&48L>Uzs!jcnRS#kSc)pd8IZzQUu_#$
z2Fq2LmtkmQqIw%1afJ>hPtm}}8O(k8hgIY6JpM1xzk3z*KJ+OUVpb<5`0?9WhLj82
zdA^Locai`eo7?aSh>hwBWuwJ|`PRRRKR_*9H$a}#4Nd;&=&?1{vKlVbM0XL-$W78*
zYzZa)bv^a-43jLz@Q20zsB}zG@EJ^;y+3{rwrK3*#hd}*GWTgg4yqDFz~Wdd`M6}~
zG<u)0*8fuYVViX++a)_DINbx@+p;hB$3yF?%Rd=;nB%-!iYUG?RuI?6DGVt7l_T~W
zBmDW6f*+2WNNSP_IL-im9OAp(fL$}R>Ho1C*$a!;;B2?-@w+JR;walc7yiRb-bumw
zVw4jBWG%j&qRMNuBV|ny{jObr^XicJeWz^FpTPUa|HiS5vrU+|J#6X0G9eIULXlDa
zDjS{MC{c4jx83nF+@~%{-ai)n6Y|FKV8R^uJs25a!t|_XQEQkDJjiP$U<Z%qz-ktp
zye7&2x5Aj7!eq%2&1j{hs9Rr;d+XMnXwbm6R)O37x^7_mJ(_vHOg$$2OZ9^-0CLrg
zM&D}~!S6$cCmKa}rm|P?Z7pK5EUd!&6^$F&8w*|MaO#W(ndPwlkqG@4u<H>IVj!{{
z{csmE^0u(9xEA{s`bq)0T62lr;ONl1Y%rtqPxSexF3$edR!)VdRun1PmmV+A&v<hv
z>4Ca0oI|L|giACCV;TRz9{(OL{(U8i1G9k-*@P>P#j#N{%dGFPlq4l#v;hxP9PRAz
zM{NE!_P6?nO@58Dv$*;=QNMSJk0ITaxof5nVsZhHaR36=E6d*2e*(ZC|1;Jzemsky
zYIp-k(Z4h-GmFSJD2$g0J>nsL`kYmENh|$_ZXHk5Ow#1vstc2rp&b{!U-m_7IyIRA
z1ZP4{5dEw4BajbZ7z%xIukWOF{<nQ--SkL{bD$c@+H~30K#NB&mowQs$wn_04;DFN
z-r*<rEAKqF|7+fDuZKw^DR^}sNsYA!W(-IUpf-mwat4qY8vms3R2?7sM+N<hwEsuf
zP|?HKN0PW4yOtWiRq-Nl%6otbh5==@B_aj>x%&0i-Ozvc`u}+q{rM3#I<~#O0<&Mk
z*E{bwS=j8bT>NLwHPobzF;az+@Bh!z|E}7SE{t)?Lzv<ry&)wfg|m#f(rmB_i|T-W
zaBUq1RT5W`{w+uYeu1=JfvaJpdYDqzN{WO!>sb)Yxx7#)6DDG<)My_5mvu4*CRr1h
zh>QR`c5o)HpN2}k`c)%oV^RhF=Ax4zy}#q;M<73hgdU!nYWA_!uk+QBOyOxVp*CFP
zqt8dAK!LagrGa&9-VYYue<0;woH0WMgC=}kE%kO%rc{9V5^LeFDS5@Sik5O0FVM#~
zw14m-|B-7b$l%JY3BXL84Ts<rS>p(Gp;$EdYB&v8DmymlB*JwTUQxC{`EOfD0ni^E
zp=_dFVpMle^5ra`2Vx>KSA><jT+T14VE(1LgG3$Rs9T`<40Sow_>NgjEDUvAdcP*G
z(<u6RkHb<eQc2%Gn9KfIHX$nO=!nV>+c(Qf>Zc_nxJsXY^;{odjB{&5e>wgS3+6v7
z2@W=_>N-*>u%;C}x6)=#Sb@<ihy<Z_^lb;KtNe$wKe6q@|3GQLgdVzN<pyh)WqRFi
zysmbt4rO$)7TA8Ily;{GwT<Z_1jXk6VV?ho8H=U@>$6RQCnkW&R@N5`L^xl{|4}ds
z^(M32xqj;hM#CRG4Sy7f84RP7(ovKY<4aptT;{z#st%%n-Ct~khB?)lrdKn^wdDTL
zHS@oWiO3W%N<rC7xj9zhfR}1Y(=p-U{>S{Kkh-FhZ_+kd%Ymo%fuHAp5$61?U5O@9
z8ET$*U|YqLI2EVx53Q0QZ_>njx4A6Ie)>yo!KT30ypl55Xc%0H<KL;}*-2J9<zQul
z?BHCPC)gL=h2s7+ga0=#{rielCx}5(fjc?7mk}~Cb|dIQPMq;;9C(gduY}L5&-Mm(
z=I#H|oZrA@9RlObrW74)w9Kq9EjOVq10d!ry(Pntd+-Ebm%~PDgK81qz55Vo-Gi@;
z;k1<FEa`<IDA4xn^4JP`RL?_z{pqzJK_Gvu{c%seC0>egeYi(U)%yM~Rv$zt*Lo^4
zcCA;2Z+o1SOp$b&ebUD-yR@den0<yILxUZ7xKT8`iy4?C`R>og^}FhG=|-;Kho+#J
zm)n1Xp~nMZ02inPy>?J|)HLNd>K&i27R`r24nCvQ&5Y6VSg7*Oxt_&no|FywUC<v<
z8YH?7C`-34>=n9KofYOfIe#Gp)JMLN4hay)Zfsr4cJ51~1-nAGeb#x)niTv(q$Pj}
z>i2$bJv+^B|E~TN%3@%5Y;-Q0jrrp%Sp-V%m*9_pMV0U5Bj#mIGf93Zd^`HJA69PO
zPwc6^;}QLE0u8hR7ADgF-FyPH3)JNpRgQJhRNk3SG(e5P1e_tP+e~^|vrovJMHmk!
z0o^k6#E<j~-Aj^IP)PcRq1{G=yokjQmZ5*@W!N4PJnJq=358ajLQUJ3<uVsiZ#-W(
zN1-gp#g+xE7X$h}YKd;N)iE?ex{0&udNPX4mJSwdbDsYlvr|xlN@*5t-VBP_mgKP8
zvZ#s~C$)>5uI#7CyI)m&^eUSN@Uz^>0Q73rO+H0pxI(4>cEJbB_MKL&A2CmP>0%sX
z5;D}D--|q;lFKsswrF8(%jb<uXfLN(k|<O<V{wZ&9PF^sQ?%Y9*6;guQ;p&8CIZp<
zq8?hD<G>iBB09qaOIO(B(jVb`qO-#3!as!OX$2M7)oQ2Q&6-+YcO{45FZE#uvZvOu
zjv1)5EkdetWQws1ZU?+*NM097&J?p0Yi|k~%Hz=3%2{A|qP0Bi*1U&P?qmCxq_=|K
zvr-Vt#kQWAZ5d;7bNdmQ26bRUtv`jK1h?O9p1s$(5_{MSOZh%^a_d9!v9S^~v~)e*
z2ZK$H8~Z@QRF&ti)Urw!eJUxz!PYtOL}koA+Ug`)BNSk?DZfJRI61K=LAWj>ONd<P
z6nQa;_MI^Pt9VN~iGVGo;a`Fg<_+A%P2+sF%F8tca<J!gQIs{-Q<%6`P<@Kc2s`@D
zZNEi=1;TG0yK2N98x*Vb=I_-02rdF3qnJM;iSLRlfd@3j_L7GyE8&y9f6v6aBGz6j
ziaOLGu&FIPTuc0~WP<;n>C>T5osIRTOjVkpQrG29Ma__$pbkQZ!!7b1lg+2r7e=z@
z6f(6MrLEGAA*TTy!zosC?YVz9DPBW}X~@o^_M6MA)@05k(tExnY0NSRxsHsDp~C?I
z5!@W_O26JIzsb^iJT3p6TZ{2;of^7y(VdbK<)%}8t%P#lyKUc$HkmyR<;8rbBD%5J
z5N_8?U{*yi_KY8&#OAYL_+PG3VxGS9fz=k$EFaS*D-|p1ikSqV(j0r6?d$p~lmzqe
z8QAqKytn|pdq6*(IN{tx_Sc@+|DSeYkBG_x<T`QWJsDH#k9~z;h~`1LFnH{z6C1|g
zk2Y`9@s>_2A#PS2j+EoxL1sp7tHnk|&gF%|-vPo{-}w5n<=sB(C(7(^Jsfc%vUV>N
zA{$wTPkT_{+5lah&Ta9CrDa}Gx=I_-#PFeF(7&s65D#dx+`5NK!pUK=Hr#PE7d*tS
z;F)ATRZAw?I)UKUx{$+b<z&%vc!}C9))2^i$NC=g&$RseAZ^XeTI2oHLw4ltM;&^b
z+Vt<V2p~346=&8VRGVT+LUg0Trr6523^LvrJ8@Q>Un^J~bTG*;y%W>b80R?H_uXj8
zh<~_r_Wni2Upj@3G2fZO`gOBeI?ZS(IF1p3+N=~Cuqg*3ewMiH?&y=@GA+GhsGB(2
z_eRtRF5NTROJt9jMClJ6^FOH$9pR1AhY`sPj(B*jbi1i&rbYk2!6Uw`HN;#a7#cIU
zYWllt_6xW!8!AjM?a8tp#iCQ%<B0zqCK&)?G?UiZ!)@_hx|-}+(Y25LBx8MqXKQnN
z>r#S-*aU2&%&HyL9h7RNz!@;fI}M-l|BC!NnK12PI(Z~SowD`%1k=DAU^GIN5lk8J
z-Wh<psbBe4{PNAj1=5p{?Wdc_j0LXHv>|xMzZ~Yr5e9&y2NBeWOsaYE?5E6`<{=_%
zTF4A|)P&U2Z_nRM6#al-zZq>QJVnqoOEtfYHszPy8RJi{8!9_rG-QzT0bmqIrDU%E
zDKY7HF#VcOR$?9oyp-S&qebP5ai(LHj;%~^)q%6<W&)3OvWFk)m(5BNZ6Sp3<ZKrt
zUWO}CA7~mF9chrCX+NFP_g{5kc%g#)S30A>RBqpql%OU=wBO<^Hq?uCu`GB>uQG!*
z;%$Nue<od)Iz>OG$|qf%)-g^qh>M-0Yi=1CtD}POk~J7;m@Diy3dZ+-7&rP;lQ3V2
zwa+TiaP+c<>|;`W3+8%UP{rEI`U?B9Onu``X3~k6mCD|Q4LVovp**xjwE+Hnjx4)-
zRDqqdEU$io{qy#I)u35IA;Mi@D{KqzQ!J9dYapw5dp|Dv;M?q{uMb_CfcsFAqWGD3
z7lA5h*1fHTBlSs$p>UD##rqMl`ck8bdyOk4HytDk9xSi&>!nQM`1YYc8OX!`L@D4l
zv^dRUOuz{rt7aTHN53)3vwx`aCz8(laf`j4bihbIazWJrVcs{5y}OnCvHF}vln`QF
zshK1#NoK3p(InrEAmTYcF+uZRCjk9_m=X)$+2^H%LU9sHrp<fervV%wJ+2FzLCcpF
zo~5wk?L<nZgmEZZXEiqZ$Lq>bls&ODiXA32!8|li?VH}{OTji&dF090K5WJxs6V<f
zs0y|KSp7QemA@d6($yA1J$93)^K_RKc6QRvEza0c#*aqzGY81sDR{%Ds!-9PHVw<0
zBEp<qM%;gT+SiF%G8gm*xete#Pmkq2pGHyF-pH;AkG`CaBdlrHAI#L@-$s619upL~
zW>MXduIpd3Q&!wBui8?k3bq$i7EQ2xv#wsV7Sot6;4EQyNDZ#l&h;><%;I@X|5tnj
z$_L1CGJ!n<2Qzskhg(Wv;c+XbLw61vsR&4~wT@Y+qGI>qC(Gw?Iyn6#Wz4hgZCwUd
zH;Y{EQ8J-V_(A&QY<=`IH@WO`#-No;6cPmJgUINg+r9=YHB^zors3AA31rgZ(zBqb
zNLXjOr3n_)&3qGS;QHbVjX<b2_?Sl{v*FuoAsi!dQHRzNZh?}{eESu}ppy2+syx`1
z>E9NguoG#1sEpynG`#wvsOve>m^GoE*o1TGRDGwu(?E36%mbBtNBrBE2C4+q(h#LE
zfIqJ?u}TM1_pha!-c8#mJK<W`1Yk{{Rn}bhlk01VU!5V0<1<ez3`2|nzT7yMS&^T3
zI2nWIA5tjD7(is?Q$;VLUDALFCl?61-`--e7Lqa(!?;*{YxN%mKyJX(x}|U7=MB1p
zdt(u^=x(XArp$8|>l!x;rPrzDQ2eDT?onmZcQT<3r1aP)S4B?}(rJXda^iq)?}U|(
z3|Dy98K6oT%k@vfJt^Ax=HP6vo_mhIc6GcOoUTL%@KbxLWLVWb({f3ps!$$ID>x%5
z6B)VsqW>Zo0d51pe;_CwZ=Z9P*R{vqXz`fkP%IrO5`|pq7J0mGVq$^EriS}YStR9~
z??OHnw`!{3NIexwArn~Gz1d>{;sNL3c@urzv9X7@)yA3ZSf(4e(Pn8|`ph}~oUg6Q
zMY#A`4|5G{1?ZLM!5O<c5J>j9{%KN)sYvmUYdOd8f^jjx_M-20%>kNE`i35jalof7
z^Rn(OFTV=+=~!o0xb%n#t+iR(d8rb@R2>5bIWJJ=mVSlWCF`~{xRuMmcQM-?dYxBc
zB?XA0ON4!6K*K*Z0>NUuf?IX;YUL&U#-lP{Yc8!Et0I=ecOF7gI~(q$$t>v>HQI!m
zT45ZolzL=C&G`XN>fQHZ8*p_tk2j}I*&3X2`mCzIm~2a1t^nma0oyF=dWiS<uix>7
z)xM2<O1--=_w|MA*lX)MGn3w!)G9&%P52T#f8ZPv0w5UZX2`ZkEvUZ}8C<)3MFk`q
z`P?dw^$Aa`_`smNX;_|ao#?Y8#G?WHEnrtwMfBFjVh`)*>d#f-vHtj@=5T+u(ZON0
zxpk3GL$aI!U(ad5Ctn2=0*|y`XvAal%B1d<{7Cwo<6@Xss~TtoMo*-zVIzKaSl{k9
zFQna_a}{NV2b4nD)UV3tzK)xy`#6_`4m)e<wUdQm2!slHAza!Rc?ugN&0id%T2!?)
z-UL?mg`4MZHXo9)`57{}HhsMa`+@V-*F7zHIH8y6<02-Ma4>A^f;y28E(%LqBc1<T
z>_&yJ`q-T`c0K%!7FBffRkSH}r3+Vd50RXI&nbDi{8od38zX0c(m4q`R0n6|^#vR5
zg-patRrMx>0pA@m{xav9@q|<ObP2-}b*0fpc{x=_*OZ;jsa876M`zNmxS>0yk)vYv
zy$V2g<E7G9XLKidHR{3)i@9cQq*eq8C<$AS>1~bVx>V$^0hZZ=_%&q3cR#hSx1z;#
z;L=eezt<wg!_Gy|#=eYwKBL?15OdFltE%RIPh7mHUlf7>mkL<FA2S4-9V4cOsA>`c
z_#sIw)3?fYks`RsQk0hw$Ihf1mW(3XFa2X!Xe8&wdl4^W&hC|{i2daNlgm!bmM+Db
zCxM8JHjn2Z&UN2kduZ&M@DLSh(D+wkHFKR)y@$kzx-7Os;tcYMceM3&i-h9DeAWw)
z2Q<W(2PqPB)s!<+%7K>{h;3zFP1mj7Miw^7L6LP%^lP_z3EW%P_^iQlvs;2E#P=F%
zIZU9H14vtOGt?nohEE1XP^SAh(CmZ0KW8XIF;bq&EGLoGV<Nw|@g+)mmzk6*N`kms
z2jk;<(o=J9aSDR2-q#qo!w!KHfgSEY^7)=B<esIhpC%14D+<pmBvR{S%`pKEz>gPD
zoM_0mWRW4&Ufa&bPrc~Wq}+!}19p9PMc8{%<A}|SVjC&CL_s>c9>K4|yj?(dM@pLa
zLhK_BYg=`7d1M%EH=VRp<`+c%xxstvBo+#x|3}hQhc)@VeVHKLA|k1X2uMrU5K(EA
zZjh4hjxiDW(n$B{?sT*w0wacWgTR<{$AGc-;rIT#YuELhbMF3p?sFfGP|tUHUEQ;i
zzfC7`MXpHEM|aRM+{Qfy)qb6lXtF`;4_SnG%%SJy8FVt*boG(2a>yQ&P>ASsm8^H{
zQQxu|=geCy_C93ty%rfLFefsP&XBQZ-g88vtZDXb&i4`W4VNa^r$vz?O=A9#kl4jH
zkij;R^z%ly+3ktfjIna7>b!WTC2^nnkP~wf*XrA4lnW1Kqa&#MCju*i_I}y=eF5`A
z6(;&H49$j~!QNws&cFTlM>DRz=dq4@I{1B!o#YuOUv^%X<Qua6<WXex0RI)SV}<3B
zSRQxD(iTY4g(<H?)-XuptltFO=U%xcw6QO9?88b5dW_HaC-3l@ims(dy@Nl!!acLX
zqoGl6MU~mMhB*6%#_O&oXJ^}9=MH^Lx6?*wJdirS8Gl-E_fOrq4#4X*JNKCXRnHD=
zb8cba?R_AM?-@L!h?)qlsijsJM2N$!G0n0j+0)(*GN3z;3DkG|T{_;LODu;wl22BN
zio?gB`G2~(8?E#eI{#&hx|FL{-t9#u53*r`-d7K661vZ@t?{i`(oNVml&1SB6zM73
zaKD9e(|cFR=<tgkUegbp_naafa(wQqn?lWRV%@WIb=c^x3vKkWcRv@Txz<VE&jLSq
z(My$u`5C@F^RwJDzqfjf=@mZ(2V5WON118KMY!kZWqeWk%Db0JUD#<oEphUG(UwBF
z=gqgj4XvufS2T%aj2SkySI&z;ug=AYziCzBRJCi{cxIAc;j3or;@?P!cDQa$h*T!M
zc|1bkIaD<*VNqJ|BUvMGLlQiG_}uwCN^aegeFF3Gn}qH2(5Ug@C)xdKFm+DDCrxbK
zld&(@K70Yj?r7PQMxIalwPrgPX_GK;v!N$Rj_Vkm+RsOseW{`U5llodu%|7^+N=%_
zB*He*6F?3r3w*zaKVqZLcOKUL$3==KTz9!qjTDL7ys<a1df-RnE?d1;tyzF2?&@cl
zr&&^w3{q?nYvkC>k+uwi>=7r1^HTdlrUfz0DeFuo8TO%NhWq=CVW4Y6Pk9>6N>Ih`
zM-SZ|Q$=*E_FCM)e!SSAe`KIc(!V_;D1t38xzTkO6LqNR*2%ufpAQNWoXGf8x}tte
z$9AeuccCKq<G@Z=rAWXQB*|cGt4>zF;%}S0{{G<bcbS8PbX?;q;uSiMo;%-qEs`7g
zX(Dx4L#Xx^zR1HL5+fgmP-LQhYRa!0)~HUiCQiyB4$q8_pYj89%IIf|!mq9m-!9zt
zo6J2n?`(7rKnuq?GpIDr>>UMa_38Gqe5(5tX&=|!nk`#6-!PXbn*M~Us=Fo9(ml`F
zvP0Rh(O2hg;vrephO&{3@$c)5Uq?EF<^i|)7*rX=li}f9cdbz*V^m+~*g1vw0bv~0
z#<9D{HcTsteb+KC@f_0LkDw)|8@;<0;K4};C5<HhYE($$nz=S1c=maO7)-I<GMg{I
z7w%0KHP8R@d6Y>Tz9*kwf0o9{M39Mw$8_f%xdHR#BpPaPZccYp+maR>VIk8~*Rd{s
zM(!u`y;@#y2jD^NNK|=7ijw=x$5c~GfvgLv1ZwjMD!xV+>iK;v47nbnOC7?$FU+-i
z@=dB14}>D{7QvS5Pw{p!8Uak<T|D7ES?}s;L3mN<k&#KED#T&L>s4CGq_JJp|2Vep
zu5O$#`XjH{RgGlzBkO}5L1Jt{{}Q#H=j%jhH%1XB1PiF-Pre7I>yM2zm)L%<nacx}
zdq7Lp;-iCynxh>(Jf-xgt@stSldP;1)=e1gH0_QrG>q@*Z1A4LalG>W8Ot;C%kA1}
zzuT5spcf2|$it*tr_g{TllR9k*LlO3uYttEqVjAWc*nG-fgV!FZ=T5j@&&9Pef-T?
z<00H@P%Qor%WoC3jYt(^R5=R!L*Y^^?WPz7qV#%C0B~XS7vrlvZhsiVU4B>e;9GrH
z{`+Z3#Z1W2$n<}0g9qHT-fqFcGY(bM+Qsd*nG19XvnNF1R7dmzdhUBKkafw<MG;@i
zPw1Pui<wG5diR0Nxf_y(i9HylUc|l~c@slg7*Y>n-OW;qns*x9>-UZ${U_~_CowGz
zT+nnREroPWd8a4cl6v}7-%EUP>m=cK1yIL!mW8QEmRe$<&k`I!FeKKp@91)A6$|`L
zm1<@>(1tsOgR_0?h){^(YJgoZYtEfyjFP?9$<27_QL(?h;vFa-bf2zot=I(V=JO?F
zD93K0kpU7AQ@d&ns3==)_lMrA1zzZyt7*`;5<iy=RJ#y2IJc`C78U&cEiQFX&Imva
zxupvN>l_*0tw;)Qz8!1;O=>i85O_*6J5zjg8ex^-7-n+uhT6q_6qIx5{}n;9vQbzt
z>{9u^9>9zD7`55k7rqYo%&T4ht=Dfa3D;@oNyiGqIJFlZr$iP4kbJ+E`3|YAU-27V
zpbiB)LE#%7Nhyo=sqsHz5xA$Jx!PyLzy*tUz!;j_`;cT(*yg99Cj`|m2`w+}z7K<6
z^S{XA^D&|=`d`7N|3JSdtE;IU=??!9Wt8<`|L+gR&v#l0)Ojya4;D3a;by>&NP^Uo
zKhI88bSv28$EA>WOetF@6L@wnIZ+ty`hG%X&;Cda!5H+6XeeZC_=nX*YE{2Q!%pwx
zRJ2AOPt8mcB4b2ES8uDzr=##4{|X$tHhRl8os#@WJl^!S#7&|TK$G(#dD~>>Z>elv
z>WjnG@wNN{!-ReP41}LcVhhX8cyarH2m^Ga=IB~B{XgRSP*or^3`@}xQmgSc6iT--
z*Y0L@p#K^BzuH`oD6mW%)<>mM@KBY-#!j0^ihV_QrM@+&apJWC-A%~+1y@IP_sq%9
zGOg6AHn}S}{pjI1hSK-=O?|@Eqp~0M-N+&0X8mA0_)cZyIOboAa_PjCvTj71h7ISr
zj^<qeLK)TXzHXeq{$2D`KLit<TZ>CE|Mw;O4#<tjxO}`Hwn`NC{MM<J;!_C08XB#z
zC?AyA<Wnw8V!;^aL;OopN9)Uq6t&B)p$4G!Qpud(gU!F3=hFVQTli;3RGRilj6%q*
zc-8QZWlOA)8Eu4%YHns0pD7>VC$nqHcc19-+Um?$pM0UB`~I24xLP^Saa(bP*d`$_
zHKVjJB_uW*ozDJ2>NxRp6Mn&h9pQL!?-BYrI~h}wx=NI|*sKfwDI7A-pA2}yJ9yh5
z%Vm~ni3+;Jkz_RWhA`Aik>vFqs3?i!0H!czSRKG}G(W76dBjfCs}AfY&Z<h7)R@yh
zqZNQY0jda{joiTN$LD~3d<l`DXp$Cuy(l<QwlFPrC(?TI;p*di|EspQLCb&aZVb1J
zB)K)~s<qnrWqRJz-H!@Uftp0!7?sCvax}Nr{1SCs)i4iITZR8H^P14s0TZq~o<oo8
zoLgS4<L8Wf)yt^$Stl%)yB0Y=V??0MxN&9GTb~Tz4g(&o`WPFV!ACis)bF&-p(6%H
z+gYdKuh&=^nvVih8Iv(a_ErXtx7dj%;3oxfO3jfYFdv_swg1hU1(5St^+XTPSk)WS
zLqt!YpzRM|n}sqS^JjLZRi|=>E?iRqUQ&A7?7h3Hi+n|1N>#=Cm9tIG+R`PADUzUG
z+tgt%V^dRG$QckBc|f?yy6;7?Jt|d6DeoR5Fg_$++pm9esQxd?U4j_5vg9=OJvKao
z8lyh8oBiNrbqc}%3Rc29wHB6@(E_GE$<;y!M{!JA3=WhFiS&V_?MgA2pylKbW`20g
z{2R7jKF_-djclIQhR;Fbp1{zX`W-I{7VJx&5FQW5)Rc$#O!0kTZX?+HbJru;;+A@3
zBY-Y%%b06)&}XH*s<pP%R<{AK{i&b-U-yuv!U|uugZdQaxJu;A`u55Yn-A35EB0mR
z662<H`cN`&E2H9H$g4QHC7?OIkHC4VgT0BR<}7AQInG{8cq1TwD%H+9{rQ0yW}#Hn
z$Yph08Zh-ZQ0hPNz=&7{VGQ4uB0K{L`u_{6yVPlUTDVsoNX2s%<;W=hZ%rkv&0OPt
zTk{%If<9Ndg>RXoH{t?PYC)Xkc*8%R_SEhQ)Os^pO*@D{W&{RYb3as=exEoY<i$Da
zOx;bGgm0VpZ-(IUAA5>GQIj>ry7OUGw-GxRRI=56`ZbqYztR|9nZKH5_32MiJ{8zJ
z7nqNXcIDWHO1Ix?gDU(DdSJFp;`xTuec?p15>?DMrlA_q6F!Ye+U3zllTQ`Kk@v@I
z8uxO&#`06;%$w~n_0^YRv=GB3;&*c2yTc^Orioa>*6xT;i{C5uy*)isykixA%3t?$
zR%gu)U5hT$9);;Uk}MR<-W19cP_*agc^le|s!Q)HuE;%V(jQb&)Bd0W?&~+1b3++Q
zHE1#7i)ykmFq#8TygI$})r?if`Mx*Ko91U|BuAz`_^x9l3qP51O#2LefDSiCdPw>V
zYjO(dSqp4m8j6kD2dAJI3=I&(fo8FK6>-Ko&d1^{A1D}kgpL~=UnCNYOliqY``69Q
zwlBZ!DCLy{Mhnw;#p8!}e}vj?)okoX*hx0$XS&L>Kc@P?R)oxvj2_n6gc(+D|MNDf
zLcY+g*6084-rx(59MvMZG=0YPjH7Cs)$8#|_35IlU$ryI^MCvoD=nik{4@5hO}5AB
z<;HU$YH}K=G*!6H+^5QF>)%#G$n37y74Z5}KYr`<7p_q`h>w+S?)F;6X&$OwXg_C!
zqL8@OcCR7-ABiVh{8eQPwp=6YodWr32G_()MZwqdkjbzbrM|HAq2rfT$UpW==;ra(
zXx)?u(BQz<)6=*X^}snCd#_up{o*WS_|Mb@p`v%fl-8u|aehp_mASo{$2D_-S64#Y
zdTTnSskalxTS7T-VRk!tB^)GqaVeV8!_C$DIYj*hrTwur&(6<cVB8;U^BPZDCA<Y=
z+2s{=B&z5CQtz`6t*5~jX{9Md?<`t7*CY79m+ju+MIO_ZG~bK$c`W{Aoj=$;u&WAm
zvqB{CpyGGXMomQ+%ILwSW<N}6ETOP`9FPrOlfD@B`-f}rVLhmSYP}dTn-ya6GodFz
z_%qRS21PIjI~%AC1R^2gmdC#@N2m0eO`hO&!aG-a`PZMHa=cJ}<32K&U@+7Db>GYf
z{Q|ud@N+0jUFY~@fBJk#)km*mUu$tvILN`DCC&06y+^O=4G7<xJKpj<fUAJ)mzlpn
z@MVaQ{$_AGYnor1S;+u*g-CBnV6miaB}9C3$W~BYq+NEETP`SYS(c<aZ)iQ(f3+Q9
zSZRmLL?3QX=d|4TG<UI5g)32d+I27+4)R}(mn3SX<DA+S>M555x33j8Je*pbqXq{B
zAJ*8{{BWFl*3fC)&|7hENt(FsQfOzQVj4D;vW6gDpSkf);0p~KypFEAGsc=DH3)-Y
z&Wx(259*J2*t!@Sjtl~lxK1JLbg8&w)27WjH^>S1(`@O%)3B?djRr0Cd7ONX^vw>v
z?uxwo(m@AGm%c>zNbREk>ZeZqxac{axz+ecIa2Th>&{jL4keS)GJ${YG(O8ywKa1z
z=74&-EUR|z{ch=bgS<JeXMSMe0m8pW^$vEPKa|?vKA%)xlkA7O=_$&(zGuE)5vjvu
z<=eaHZ5&E=HP@1)Vr~kxEo9`S7gWP1s>}tC450Q#DMyU=TwAB_C%ESYOqS4&Yp{qY
zenBh~^1r&=@RC9!D1;V>Uhtu8Q+?D7f@@-?><*e(ZI|Urf3z2BL%|fymcp>B%7VR0
z2<;hxP@E{6#iwQ_$T>^vi0rmep2w#DZ=q6Gtfy+uM4*#XkTVM{TkT!w3BfWlF#MGH
zwO`f~Saaw{hxwB>OM)zqvBR<ex_b<r&d8t_NWG8oe|4{P$#QBp5>65NZCcHSUCGw7
z`?ya?V^OA0X>@}~v-GdDzMGEWCmxPH=|~f;*zkQDK9?2p&TOOM$a$i`!X2&j>aJn`
zVP18!^V6qZ@C_P9(L5<iqwF~%s(&BYuq#(Wsclj_86VCtLN&j-d$P`Rri)Ni*2#&d
zRHv%Bu}2M+gw?yLn5zilUr+G?oun6c54$W}6h4o>1LY-fUkYAr^|+`GpIv!u<UFzQ
z6Ileyn(#`Y+iZ!;*oC0bi>mWPzsj#C=Bw>8b&T`_-AR@D^T?r0o}5;)tCa;V)8^5P
zE#GE~4Wxa>Ig)w%;hr2fcOg?Rw!2O+pAi|#-|>l}U&MPD!v~jVwSHoT`X8Sf28~cs
z{%iV7PNI=*HZX`9B&|}H3p%4{M9Ow8*e95v=qlVxx<aE25ZCF|i0n@ikXBn`Mv9k1
z$}LMCipT(J@unT$^gV#HCt3UkR(}8+Hooz|95B;aS%NZ2uYG3wgiLIYb>@r`WcSAh
z$`}3&HWq@<(sepGE)zbAvJ03%Pa>8_+8tIb@}<pNzj@Ql%1Cip=e`=7&UvY+W2x)W
zwF9x{_IbxGN9X(mY`zLY^(YiOXh^I6rDhYT2ajxPaB*HVas9pS>wiqH69gY|ugl|}
zFV7h>aA|6XTB9>|&CEWrrM~~5?-MB6R#VySCV=QH7|SMIzX-T$wLD<;F<m`T?mzUw
zZ7MeDzaIFzU*8Lja?)9xb1|N$Kb}sNt#FXVqfM&@UnUKv+;C7gOO99!!qWCyt=-lA
z-y_=JO{3Iv+f$RVR-zpc(4jWNtLr5rGTOifA1|cf!GEVQ4b$MB%F#<PzbUlb##(57
zjYwNT3~}3ds|Q)Tum`-`qbxhcIsoKB!lZWwSJlh*z;5ZO;Lbarx|M9vGVnw7V)dFb
zh^hXmum!EzrTeIr6%4@ohv3eQFcJO2MH*X-s^`HIU{cIpvTfU315cC@AmuEMgPaqs
zz8`GhknVPn#6E6pXTgjw5aPVF%Wbl+vdR9oV`I*j6${L*-2A0{9ybuij68z891cF~
zKh&&l$RtwLW$Rm6ROw2&vn(~smP)#lKIkM`R<$Qp_NkS8<BxUMpy#o3l+Gi(TP1!c
zrxk1u&q9whTqRt>P)-}~6|BDb2lJjT1pU`~uX4==5&W%e-Dc|@TTYwv%hXlA#rNN|
zxHsIkLuVawEgp2*VM$ng_*~H@;f~(*BPzNpvH0!@zJVL=f7j67+VL^OFZd7s)>GO@
zx?`Sf%?btmmE)XCou;jOM@+>gkOjW%Crvqz?wJ(VR|`i=>nWJJFsoY4L<X1a=%vew
zIyTv}gL4U?+ewrZGD#KhK=_a7`>#S&QpN5n9S4(__#f%RiyS(Qwww=BdDOYC)QTaj
zgUu-awbnr~iO%L;X%FM}>fZMCi4<^b&rzZeFOKP>4tYxOT4OmVM{Wkk%Q>zZmkptH
zpkV`>qd}WKoko(dq=~VI$(BBR!g|EGm(zw`mD<63Evl2t7+=J~A=X%4J(?Bfo+TCG
zQ~>>YwO<IHcji8*su#BQ?=5!F7l;JQ)-F8tz))t$J><BPOfzG&!e|W}((VCAcNCbd
zB%eh13~b5io6}Z|;MYT>@$TV)c1e@O;s)xQDA{phs1z04<!`RO7Dq>GGsMe(8p<yi
zD|U&f(#&!LKlOXwU|MRQ0dgCm>A(7Hn<_@=cQ(zNQRpHaRM>7R{h=dBH^9?7*=GOy
zH0MITbst7|cEdQzS?|YX%aEX79?9zc)kxCyhtiMn-!}e?U)x&}*+}^AlKTC;Lh#J#
z<C56bOjC<N-$xKW(Fu2aaOncJBl*WyxkVmb5~M^~5kE#&X1D9lMQta8Uh}oD8P|YW
z0bK|a#kAR=bqg~WsbL!mZJ1+;lX)rijTC3u@{{G%79#h;Lqek6I!-Z%CM~j?VO9|$
zo@{;@$&OuvUvak`y0b3%29L3W&7TQe2^=kxLz5`=v~rw9Q7b9`?S{>UXW)*0((s8s
z9!=;b#w;APr_dyj;(>aI*PVWbG6vPux?KM5Bjbc`%jE@2TLs;n^m09mqbJu+wSPjj
zPs=Fttg9GGJi!*fwjU62EFtns@@+I_mSr|q^-($3y{6E#V9m=@RbF!4S-fyHVycHm
zY}oe<j-Te<u)#QCox|KByq#WiSa}hG1?5UNocV_C4P+zMVYhxB+|z#XxryM$`^iCm
z{kWB6S>o9Jv2?IH8HyYmkxf_12Er0E8J<n6LT1hA)>4fn5r+j-c!1!FdE%XqzDDdt
zjmNmw^}Cz4?S3>OYw%vZ{3jqnt~=<|u+Jo{@5BvwOI2t<F{Q&Py7#xIju<qVIxUC~
zVqr;)8_>iQQg&Kz*>9zOM#z5KOv)phY-j`jSjHv;_A72z6<5~v-l{eaOwo1a{5`jm
zzM?Hu{W8Lk@U3&RPy6GmL`Gi6;x#W2{_p!2HG(|*<$GCTmx0Iygv4fAR@6-uj|b`n
zXT0b?4>J?K(%zQVi@9e36fYN!F?0Sme9tw#lT_dGe@~wbc+fwvVVNG}P-<)2d;a7g
zzJA|EvNm<B<o&;=gxRX0Hfzu8<)j_gI7~Ufxr)&CmUb%zKN-t>xGL5;Dynvo<7%ja
zezv<6pGcd(cDY)E%r<9pPW@Dk3lFqLwBDhB`TUbVRx3cRso0Fkp6YD-a=<+6Lj!-~
z0gP>J#Y^8Ibk{YG!tcIf2sjhOyC}1@yV>XR$3}P{@(%PKKFb1_f+LLQ<l9@>x4|WG
z?r)zTFT3*{S;MGT#LDZTNFQ4W{Aec%DWPB8{J!4QNPp!w`3@T?r_3pNJp^YDJV<{K
zsTHRah~G>t&e3*6*kVwE=-reWH2-g{f-JZ_msQSm(*7CP{3%o_TH9rM(zJ3L<YQ<$
zQp35^7)|Vi%gE9*lg;z}@+zde7F1HA(T1zlDUShOzra6YSydZA*%}RS`X$NFbeK}A
zV&WY8D+=AgmKg19bqCyZ{2EF@N9?~9J*AbXilm+U?rOM$?_9tByeG3Q#C5v8wdVSI
z2M?4@S{UaKL5Ia^tq`<Ti=qpT{Qmt{J;+?p-gsQqSE`qtNveH=*=ur0&z2b#;J==n
zi@M?Ca1EU066y#lt8$u%0;}U++49{bGy9`LK*Avq+dVlLoV~f?R=!^|b&^NFRde!8
z#T3HgA|$Uw%~sn6z8uioy@|9nAzIHe<YUR|imETxd~=pKulkrm5OC$?-NNH7L6#Fl
z+Ug<TCXgS$oAGA|xQTd&`J(SExNKaHW!}zi?SXexBTmx?$|N@4YVWdn8OLZk(X?OX
z-k7S7T7QecQnOFa`!z|V?o9*U>M1w`91eopcw#7`7#m78&NVUT0na_6pBUXF{}Pmz
zsu13%Meq}4%@{!M(k0cx+H@x`DNDO*&+@xSNtu|mLoFZJZ2N>}v32D<3SMyGRpta%
zsWgkk1y2xNmMtJh_*XK5Rsu;YopnI?b5y=cq;`e4%XDJYVF7V({kY~x$2iDQ!(5R-
z-AQ1deSA8Fe<_`aimkR5T<s;x!x-fImz=XzzO`rYjM@;<;m3-K)!yhE-*b6b<~-^A
zINqBJeQa}YW&OL|q5sAM-cQtcpn2j#Gv7bn+uDuS=iHGxr9kRk-Q8pKPG&!`YfOQK
zci|tpr%q74I6S+c;>oxyTG^m$PRH+Vl1JC6S0(GG?>Am?Xj)%A?+~GEq2;ZqN3U{?
zR|bvwIz59c79Owa5kd)o!Kw4h^b3xy6(t%@oB2PfMkyKdX}kadaX~p%xie6q@ZO_L
z?-uKk0{VA$S3Y{Hr5xGu$Nwnb#DG!wTXf<Lf!{SQhJ!l!Ve~>KZA-<}5_lj>;zFbL
zOMS0%&HcWB=MDEUmpKUL_L;`><a;&RVIHJ~L53J6efQ4kg$Sc>-9#Y2{lF6H^4$VN
z>iPRm8rDl4CGLd$qS#X{Lg4TCL{$35D@#!>V>b`{C^g679^?1yb{ejW{iZtEc0C<8
z++|whq&&O_JQlxTc1{WQ9(_u?yFs#TcH+wiy&LM+0iS9dGY8G44&Ldp;X5F|SCYR)
zfarvk6&bOa6<)q!;Dd&f=_O|XG4nHcDKz*KiJK=?kC){0f~Y64`}y%)N#BAB$TD66
zN_`i~^cH0_sIeeVt+jX}gK2kN&<>@g#{(rk_`X_LkSX^ayJ6<VF?~IpJk;7*h%_+k
zXMCG=&e5@8?YTDBu54}reRhxG>GoUREDRB2p`7nA(d3y9iu{UO9}aBupE4VEFSC`q
z;)lE8Mg0#Y@@AEBE|mWXN+=aCTq9jSUxUxh+8>$YR<-!&;3k0YAW#d6lNcPUdLu^n
z$U<KIzZ&EYXWpAyJyapS`hdmgFEQL0GMKkMb`#@Wqr3N0#H@Mh2{@Mn`Uf{Ii5@N^
z^WMof!48?wM<Up$pzZY7&}#{o(1+89aQF}1WEyA=!5C+7KAQU;k8IG2nWxAj9?Cm+
zz;~2h%WE4LAg&-LDPlGTcD8cXQZ{#o41DG`!ws5}apHl)S$0M--MJv%4l{L_;Az`h
zWz(+OG|R+|*aprdfMS&soa+S5LdU9o?HYZT(uPgiR`-Y;hWi-)e%&ngFX#z*-KU3s
ztcUSKZN-iOaf&VbpRjUfQI8?4tp@21p|pF=vm~a=YAd<sIj!?NInmtl6kQ8VMd@v$
z(UE0Gy7;C^YpWZZ6|v52c?AhQ^pE-#NPxp-tF7z4fA8?6hfht`73ZPW1fy7!9`OWc
zyyccugg>mk#d&X#zacADHFmkO#`?8tNcTHXs!|7xp=^(@0^4){te=APdW~Z6QA6o6
zYlFKN{|nbL$HUXGmW-u)1&~8W|EEtLX|e5pb4j{f7PTQ`p2nWU4sI8H{|>27{oKcO
zBE6<vp$jBRL!1I_EH9T4bd|~5hR8kfp;S-frRTl9sEz{d$}x3<u~>d}sP&R7;?Vd8
z;shh7A30z3`OwF3T-ADR=x~=D*>e7*rjphd5)biT^q}Nqiw{K`5nGbr<Yn;4A5+b!
zt*}VQIwu8hmoA!C?I^9{J|306*mC<BGv2#)TI6Q0#{*;)DGwf=+5!)fE?I2$m$dw)
zEv8TSkEro+{JFk$tpyxBJtqRCO_)ATSn8Pn#AQImHd+F{j6@bA|22?U$32ff!&XpN
z=$(EB+10Eu$C2h6WOqLRN#r1!B3K>kl#`>z^rTA@y7~2#vgX4u9cd7sw&WL_Ky~sE
zBrzTI^wiWkx;3D(AuytHdsDBK&-KfZI#ZsyPApseIrB10-dsb4@zv&fgV}*OKU87t
zT@^O`r>WA^$t(4*sR-k0=SNohT0Ie7pP(um0(O7rhntM47+QnQEBDm{I#&SigU?O%
z@HA925P^LCQV?~FV9$8>ng;(F0153F67N2vC3oSpSmc2*sLw0mHFJQ?i}1_83y*p8
zCIs)NHXGUIptwqsq13@#HaYiTOOhIyrthNOCaskYN=5Urgz)MbvRy69S@YqL6ANrT
z>z=!h9*JFBn$d4XbHNzm{#6PPP_uz^0i2?ao(ByV0@_pWG32BNpC2*{03|2uT>&G{
zgmDT2vX=`?2MU|H2+yO93VoqQ@JQIQN;ZtS)%29QRD0#KgbgBFt|EJkQ0$PE;qJ?B
zHNsK_x?3M%n0x(V^SRbYT$iwNFIM}~0einf8-zbax*oJSFSNgoem+GnR@8S@r12tg
zTS3d7u8t}#7u?#d+etJt*<F04TAQ9iJdo{_`kv7*lPRuC%ALqWXBpu(ksR*sf4~1~
zvBFxmqy3OqtK9yy;lya{?X^o>Quh7qXX4KZnvS%3aFfK5uWrpr0eVtZ!-xJZR8(pM
zA>c*BM`|p>DwFvWu)`ES?3uJ_D(1^fFX>?p!;^-aPd0Od?VCR2csI{#)WpNH?jvP(
z-zmN|cL$+|^N#ZdfN~s+nh|s2bxo|IH&PA(=xCB8*b`=l%k4Vuz1F2bXFr2!Ywox^
z&|w1iq1z&3E-=PEH3{d5-L)^E7YC%iLI3^7b%is0W3k29aNuXwl&O(Y=}$+kl~U31
zgvl9@pIHEAXn!#9EGZ2kax_BtEINCe<rE@_y+rOG&S}GLT+5-nkMxFI8vlt--D;~k
zf&1qxh%Id0hVsKkm5<@xM2iM&emXT|U+8oJ9l<YMf^5j~BHGc;Z7=IQR429jbS12e
zPTF)JM`;IfONgaVGO^akQUhgzMsA?dF~OQn*IEW^{Tj_2|4P<w$#VrjYWQO%%NDzC
zC`cS5`^|-nMYMlF`7w!1a)mw!znQ9EB($ggLZex~Xi5>O%!-LI45b&t1BDV@pi*H1
zW*3~4GEW2|ySWM`%0GbEN!PLVa3~^17-zDPD7-Ji@k_(1bE7|x!UW5CEP+Z;&}&r<
zva5}<YQv_?dVijOd8{}^JVz4IjUXw6Npm0H73z{Z{;K7A<4XX&y#5KMy-Tj=3X4B_
z2f8XT#YuQQxCuRew!rxFoA<An@?nGHd_U|UBkwT)3jo<uw&hmQCfc;+Acfr}J`KlR
zCuhAbpsfK2l8ac{OZmqRTZ*Mm?XJ3L(1p5a&S*1A<pV5BQ~K58+7BR!8-!RNEUOSQ
zs=xa7S&eX_nb|UxOSFn4zOMQTeBc7glj_w*3~5-L(0$U-rIB)O7NN=k&jkC`G|!Xf
zP>J_Ruw=LF$5j!n^3e6RT9>*(4pMmZ--UDwfhY&d_ACY+KV^Co-21NXHR*k7^(Hp}
zDzxQ;B7Bq*%athqb#dQJB{fZqigo1oJqAABPYNJLlIwt2UYy1E$1(H(>Y$n2-CGgq
zooIf1b9JHi;PlLWB$R)z>fkS_?57LvN#HyF&=X6}lqlkDGY6F0<sgs;B?qp{hk$KC
zHT#uM3Do3QmP@F<JWP2|x;OZX(K_RtQFhu9e@z5*OuCaA_jHm>Xh;y!fzism&N$Bs
z`~td7WU(NAhtoMDO0_lmR{>z1_1_@t+`lL>(?*(_V9mal9o~Gn%x|U9k6@<b|CN$M
zg}K$%u9AQAIszfalRLgeiGQ=Pdy;3zIi~P>HZWGA>YH()e6Bxq)+@|M7uLT-+|G&4
zejmIMysy~~R2{GJZycVu?L3b@ajH1;$jJ2T2x=fOt$CFju_idyIiuOT_pG0oq`fnc
zVnBQT^u|YZ)V(bJBksCLv=K;CfvCn&yZxdCfDuKf5xU$USU1@GIaFx$Kw3dZw9cO|
zXJqpcZIoS6&wyg*(YTiLRo7SmbUmD^-{NfR@z&<|*sk60(!IBiQxbZzO!(|yn=bvu
zZ@eyxwbZKskzkkIniC6^5p>!hnNa}%zs{($^`TB1M!Z^#YJQ@om2jIL{$b>tR-hoF
z!kQ~nAhFim;PCli+uEzUXLALSa;x3_4!nLFN6(`7VHdxg_QEC>C$w1K-0yMI?%^cp
zLS2J1TLSex0XDLuxk7__-O?kZ>vqgv`Eksh<!vt6OX+EGojBd?^dd{dx~<<^htC~6
zIoQ5l*8PrOJOK8==DN+~5q_@e3{$*Ofras80tHtxQPu~gtm7|!L()86?IST#d@hx%
zvCI`8Pifd{o50n=?Ip&JGyYYQsVT^v^bs@Lll*6Z(=i1}VOO#0Ez3N)-%KwM?@r58
z0QJ(1Ejg9&Q_ZD>)}$aGrN{0R96%9)v*6Pc6EzHEgYwKI;t0^x+RvcWMX%y{TNr<p
z`JPGP^&%h1`+HD7d|jv9zglAw$ysW&)cp``<IZcB-q$~=??H8FO1FmJT<-Z)eOT*H
z29_N_(s&lkg}ns0l{zH)@CtY=lG4C?C)lh1azZhrdle+1K4{*v&)bPwZxMft-SpsO
zExL32>5gu{7BlNX5krQDr&!*G#`talP!*F#&!;kLI)a=0z|MZpKN*Qg^nc405;rm*
z<vioiIRJ_l(tQMS5F_S6w<2GdMf0*Bu#@0_rFkB@r_NYj|7}~sN3tY5nkjT^ns`05
z*Xa0!cH8tQ{tgt6z@6;oI%Kje5?C{S%Kdkc#ko|WoYtqk>Y{Bs|MM_$IhrqCJqDYT
zLX9EfPoh|xd%2tVT7A@2D%_dNrbKA~M><b>?R%xuY`iwXn>y9tit~R(XV-JPYI3n}
z6K|+4J}@{5X0nL9!Ukz$l4MDk^M>4Q2NK_w>Lmk__><a7M#FJd<`=K&`YSKJqy!>I
zUQLPxR>uxytcq>6_Oaj8#D@l)fC~z}ZJ$ri13d-d;5QL{x4EbQFSOmve|<-0yb&~S
z@zT#l_Fv14rT(NzV9RREqGgMrGXoxIoTgv!DmCI?yq)5t(#xylW36ZO0#bjqiSR(|
zM1i*9UVENb%(~078|Xd2$x!Q?<|eP%`QaJSh^wr~G~fnbK=}U9D9egT!;=HYM0J)8
z>XW_W3GqOaB*uP=@V&c}HiC=Yi*7!xPUFT_Rg^EUr^gILrtRrClPK@gbKw}@yOF%&
z98CgK^r?s@$6Eo*9t{CsZfp-P@i&Q=?y!D!%ok6=lMSadu#NM=D#uy#WZZ$~;JYiW
zu79mj$w~=6Yw^$5dI8Ai^8U=9?&6be&NGIE5Nk94?pAF@b73emb6h6fmKR_u*Q%IG
zfy`<nrJ=zun5#j@mp`0LrGBJ+d3_r{NUz7|l$_7bEww0`p)-6lV2Tf=uK}aH_UEYM
zd$hqZZn5b6C#G^42EMtwn#_ge!A|B{0ZKu2aEwyPo&5r6NDzP!jp+%e@>{hR#2uAr
z+AP7A9ah8*F&Zl#zxI|1o3)tnK+Ggbq~%<DYRnHLlJjq#l~mIf(?p8{DVH8w-<9HJ
zl|}6smT=l&LXSb!STURQrKfaos|OPSO<HmHG|g1+Ao{b{ct8n*z0doi8h<;Vq8OtO
zbGy20Z*si>zoKfoLOGqihUhVa1^#j(__y)OsR>=!z;%~gPGXZNmB@Jt8srwC<}{WF
zmQ_u{z3d9o=;cYd14R)~7zS$@{m)X=@sG~_l^(I!IVl^^FDd!aIbJm={C+qcRnmFn
zR}wa$aoji>>8|ewHLkemWi#%O|L-`}!ywd8DdG;agTT4@T;;SQ;pRg4RB=(|7pmQ=
zTo2HgL)?}V=o{^fb}kv4wEY<**#W|rKxnq)8RbpCQ1or$rv00Ap*$c5K752oE@4gf
z$`m#zkUosZ(hmBdMuIQKq9>RD0cmgY6sw?2imfygD&l_<k8_w=hKRp-Vq*g80RZF<
z%t2H6H$V^-9PyoJ@k4zn=ZX$m__8gpNMIxLCu{dcT9Wx$l3^y;t#0pf0K(^lG9g(<
z7S_F@W-+^xGJm*$qp%~oM!ft<rT7-qHSt~|lHqN4cGGV+y<5Z57)<OzTwTc&A0_si
z>36Mi%Z{K!an2n3jcC@Uged9Td^Mz-uwifbOuR3-<jUq|n*dR_B>)PR^m}OA^x7OZ
z#A^3?m2Pu%Z{Z!ETH!ZJY81s+6gmMQJ5_;sqQv{;;}q{b0n<(E1TS4BxkN7tABPIH
zxN~->uN=!_-Lvn%w0&$B#W)1FC$C`63S8i-{F*|;4kf@J<KIhEXuDoNz|hZBe$|On
zG2K`4pRRhWF9^he+7O2t(nK}?Q0z12?3HHP@8jM)`syLwvG|<{Rj>q1x}Qq`B39XO
zF{Wl&d8>M`aV+5oU>+!;5X5m8!fy|9<{Lx@yRl8U3DZ$E9>GtcetwsHxqj#??ZQS0
z=fiQt*CesUedVLj8|fv)N0qGZ5rSZQwBmCME2!??oQP1tRw`Y;U)LFog=as4GIN-a
zf7`q*hQK}VW3-eHcKY`p-`kilPW|rO*J>p1T;nw|OI<trwR`pvs~h_%F8gUN)ot*9
ze2`PQ##ikDHV6a$o=jr=(oGIN<mX`Y;k)0`a%Y{ifD=DegN932iU=SHu(=hqt@x&G
zWW>V->9_Zry-(QYlwSpP?@{b5XscS;9OwB^F3XEWhoDowHg$GIgg=HY9y`FS_r_I^
z0}sT*doYzeVtS-S_5I}jXR4kP{NE3)5?b<o(sRE2cPr>R0D817TJ~2@$!R@&blNG|
zChBVCer?lX@L$#)s0fs4{B5;N_4U4-&wX5!mip;k^6_d)bvcvZ%W>^*;JMvbbYX2e
zrJZce$+6a2w7v?l9ZhMbiJixy4jR{sn%%fr=l)g2Ta(sZc_V?$4$4<as_>R6A$u8k
zW@ThM(mnPibs!*V&V@|Kwpo`^t6QTrrfk`KF(51C(U7Jxz{)<3@9Z^kX!!~`o{Hk-
z07Bpa2m_Y-olT~a&(ADtByvkG`9VEX<yh*F#<B;PX6eWKs6ntYEgtBUv_1dkzPI&3
zY3z~jo42TFlOf>obud<ixZSF(s<`Dn+$bvo90O|M!_kXoI_p@1f_^ilvYr@p)&oHr
zY)%Drmnl(QepuN2jc33Mz8}Z*N^cSutVh5V-mMF|_sF@(a&`eEF<{(~Ww)`^9SQ7G
znJs*O0!i4XO5*7MqtP7-%vgK^&<$MBx_d+GfoJhWpyt~Y@EM!Hwv?F+RI`=huh_U8
zY|1MS0njwAP)15qOG>)p8mtw4Z!y!fd|Qb2?|P7!iFXf|Q|j73vy%I9`b00d4l>%O
zdB?9(7COs@S6%gKByF{nlx~sh3SQUs>V^da98>4qeH|+ZjywOp)hWo~u8Qo3pl37>
z)!5L<eTD9<`EMNX=xG1FUUAP(8Z&!*zE$(@Qe`A;mUS8yMh1lI*DK+hiN9MDEgoMF
zzF{ho59y91DJ1Q1`q1?%baP*<O`yXp6s{BjJ_bny?@t9L402p7qC_*NbnTW?HF%!<
zapZ_UYhBbG<OO#15^5s0)-QO8`ST?0P4AwKc#Jm{!EK<Ux^N!xux<sjhH2!g`poBm
z*@-M1piGdrR>2=P_O15(FJF^nZEt8?A%9-?T?Z{pJ=TEOC3L>#LqOavzctfZ4B<Fu
zuT`ZO2EG7gS(d=zP!Os6D*01sK;K@ku=w%ctkyj}>OA4HoUAehe)Hst?`&Lfa)6yU
z@GkLgHx`~64IJ*bzSMev2kIb=K4Ym_8`_&w@T=MWJ|q~~HvTZV+`|s4$J>Ew6ul0&
z3)9kh$<HV;cUKGNCk*31))9)sSodhl!8a2c&JS@J=j}Wq0^)vVqE!}<v;{scHqaz-
zpfoka^;fBiobKL&-iTM~i1CO|@ghO21`HCLh0fSIP8?B4)I04;OJZV)H_m|vB>L%A
zfae-cA{2tSut#Ovn6hKccKco;b`!pxv+w_Xdj%Ouh@Mpn;Hx~q6eO&hX+QKyer($%
zApvF8wm$d_@Frr=lkCJG;k3@;U*5l+@dD~iS3K-Gk1YDM^T22Oa_?s1Y6LtV)6S@w
zlc2vbY4B3?&koPhf*e3v;u}*R4X!d3YK?ud8*|4bxEz{kcPFb4TE<-&A$-zhxvj(-
znTN9O75Uuz(>P(wqGQGNZ~X`3EyYWWaqoRnz0~U{cZ9mil9RC;-y$~aw4xl+eJ^Kx
zxc4ijggalzb~WD+#FcQyV|VpvCcD)5>wDR^)_fQEA}_FBQ<&`Csm#kG!JQPr2p@)c
z{Tr<#mO;nmQBk>U(Ex}7#xX-#0sTwOqcNmg5=x4ikqurvR+4sH7Z3d4$SO-b>h$@)
zbLIv_ln`tEa5*pk(%GfD+JKllnTQxsV{uSvlzs#2jSd2{$cNafjb2t+zMg10I^(50
zdc`0x_0#kGK|<-{a05<<cnk6vjyHhskS@8o??1ev)R9u{3Mh{wuj_bV%EO>q|E0`J
zcuUp%zy|<4qkBgm@a;=5Qn_cDd*`^t{m{GODKGoze_+~BvhfG3|H@<xF<#kiC+h_>
z&IB0`t!8*5#)`S)&+AHTWF?PhwLY5kn)UfFbGPrS#ZE%ft;_ooz5{Wy8m#WxXCr&E
zLu<nFbgo5BY}NG1yjKt>8ajXe;qo9%*7Jh9twwP7{hp9xxhmW4S^E&`>mw~jEB&W9
z?!4^gH?0o2f9DeK-I$g^nV!LZI-+v|vw%uDmjN0emZ(G-vF<Ure4<(T<hB^e?mo7q
z*Ia5{jJ(Tx?%{G*zT)d0=wE`dWm&nVJ-NVP?6iJ0zg4R`PNWQa2WpLvz-t}y)>?QL
zv?&r0x$Q2KEah9r+jPF-dsjQ{3^Q|Ql1wKITBV?*QJHhnyPs{MGIPrLH(R`pDuA@)
zq%QrYvW4U~|3%eWI2#B!*J%ED+6A?#5wD2i2zdvO^3M9Ke;dX=^%X_CInuK$4@h^k
zqN<#C1qs~$F-b}V7vESPW2a(|fj|Tkd6v^!!XKZ#k>wyYa#BF|7yws@RL^3}F0*tx
z7cW3+p8)EKi0s+H=h?7?fxwjk_$qU#b<J(%8vQiB^ZaBCSA03p>9dSC?6x@=H~-^I
z6rfWHp-ic;&Ageq$ZHETx)KN3rkeV`=VH4z<$_x}=qZq0s*!CBk8_8vjEcv?clIEe
z;Yo+WS^AM=czd6d&FGn^dECh1!on4%(6hzqs5uSr$~;{0S__GTe$}dY7Yp2MNyo;;
zgt|G~Mm%v4y$ic=-94e%S00WT3Ug(F)I}{04>EPzLkS`<G24WXWUUCT)ojL}o(?7w
z7w3Uj{WlAbL%)7VAi)F4QD5xBq_Y+Zd^Gs-?Fde0?ZVg}0ZkkaE_xgIB6f}$X@?H|
zX`_|i0h!o8MYbR}c<gb4DG6)K==OT6f(LF>lCNwI=pc#jIozFXH70fZsJ!eql0yqu
zMFM5)_3qe>4|Dx1FDKskGjVZ;cK_|Ba>L7i<@t0wY@p2&IhnQ%&3hlSu!)YL+On@W
zB&r8bLa594DiHMNI<@YAVvR<EM?6yb(5>s^ztXat=1`jeRxm7?Xp&{qx@i?^^rBXe
zuer4;{6W9PQT2qu8oD4enRKG9m`Q-M<~HRp(`LZ|m*pu;CC5`bd!;2T@u(kav0-t`
zF$OqMFSDRbR7K~-xh^yK=C-5apd*WYs#xsQa6BOl9kit!Nb9M@l1a@rS_+ojaPNyR
zFjVEo`lpX9e{^<#q8SB_{c#l5%s54}&*XL%e7=1$*jrfy733cXUa{Rp&%o~)q6(o~
z422m?{Bg{MPm;BH;)B*hhOF7%s9?9=>>fs+G?lnC<`z#U^z=AH>Qw?~3^X{Dd@mUq
z@i=FeO6lB2O603H-N?Dn`uOvckNQaQKqR0qhu_wtkbEtt7e)Yc?D_z~`J2+NkNSEd
zRz<UW7Bu@~Kb6x(_KJY=e-(3pmfCY{oXaccadC{m*qGQ{%fJ-SK63BAc)RgVzvr(I
zFFs?P5n7ZSORS-<0wa*J<l;e3{+K;y_PSf<nDmo)a}Cz<2UG(bLJc^!;|NBTy48|m
zp`xMZ7YenP{*>$gwY>Pc5<47Tt|}8i`U`@a6@;Jv^f!a+bmT<^e!4}M3P-SCt9@23
z&v^U%ijT>ST~a4y@&<n<DFQ`~4t2lZo<#bfS9Z(GoMS?doGU9QiDJ7wO{1aAUPfGv
zbMw&l8d0Gdf~}__S}Q=TX-{JGU}W*WlrxuI+K~sSn3?3);Q-gFi;sTvFfmnHb9e7E
zCR4apl${4uSk%ml7)TNx(1^=A>>Kep4i)e7H=g?P;LO|0Csl#3+Yu!NOMMFre)Pxl
zQE!kWubKtmq`Bf9Lc|6ZR<kLpzgw>|^Qrn6%NF1)!xh!@N~djGe7Ej{44NLU1{bYg
zul+u{c^{iNEt-<(>Hpw)ki*7NaLeiW*X1EM98$)^+cfaw&GrbX4jZrvT~)RcI1HA(
zZ8&o6E@3-y;dfjd^AZu(gKK)@UM3sUs0b(4o(v^ZVc!uQ708|mFLz0ApefxW$4o3V
zgmy^^Vs9o^X()lt0+Ot(VB9Ztm7UVs6ZtAgXbEYVW$W|T3;<bO*^Nvheb})13S%@$
zh|S_0NluY+v^LUM1$0ZFGhX)kgP(t@7r);-VDoT-qt5bnO2<Rt3x_c|ipy=8vi&`e
zp6Q0w(1xh%(j3?AxR*;P+c{Z7$g?)v__ZE%%c7FB5t!`?=^+ddq`VqFS=osWh(jNH
z65U(nO{?$Tkv^~G>ia%EgYe_i5|N|J6!mj(ceV~$3M08upC3JwqD^c10r$~Gylh?q
zAhH*Q=Njyd%!-FRQgi;jVj~ncf2kJydl?Efa{Zv~@{(4OO2w4i^fAsty)(u4wdRl-
zDjH?-zh0TofpFOe6nykNQ)>I!-u?4$&aqC@wV>N$e#eHr8cf`KGwrMUPQDx{mU!Zk
zi&x2{3)UGvnTRPVVeG2Yn@D(X=S6(OS&A_K%Y;pYwv^N}puh8{n4<tER}7nGwO!#{
zNwnsvxz5Pt{87W7#2gxQT_T01E3nH_O+b!aS=rm%(ZPH1%gG-7^Jvq6b-HmDdIpIv
z>J_jK<VBe}sm@F@$gNAQZrQunU-#nd4ZW<hw#Iel+YE2X<qZ|ySyeV?RCS8pq9c5o
znCjD;l>yq3Um75nWpT5aU^)jNq<#h!;R3<%hjo3PJ<@VTbaCxw9mYKH{!kzon2;3K
z@ZWVnKss}ltl<cNV`hf7$N9T&xVv37de_fMC3=Q2nj9|$^s<<81-V6bI8iEU<n`BB
zpG$a=KpP(@7%z)Ti5jU?t$R4eMjfHVXrb!(^>Q*#37F@UEXH})Cr*g_RK?m&zAaj;
z9umg^pPVFFH`c4(4J??$Z>GHdn%r@oeNBI-nRD4GhVnj6)ml#Y^o3@wR&Upt@$hJ`
zoOw+Y-)74*jBtiZf1|7IZ;mn3;KZFZ*8V9yqfUGPUeS!`F5BE@mF(3YrxXb?I-nSK
z8MQEo1h&EljpJCbMD%_oFUB6tHEb!{mVJ_gPw3Jvd<qpk`G5q?lCy~YFp+<UFG<&L
z(Fh?4R4)nR26}w$363PLc!4HPrPcEaHLH>CL8Ax>y<MlKF9%!qm$tHVDAIP-VVmTx
zVI;9A*aKwY!mnXg(NC?3?$Xy=_i6$n02rX&EIG*G<R<v7l4IB5@wiN&{ng}GGj=y-
zvA`<qg#H=(crD0oAnJTPLz!a~Xj&X1eO9n+$5XM`z_lMLyendAci!|HlG6O#Y@+S=
z#Wzou9}Ko4KhpPHXC!tdMyTh<BV8yJ<4mn$BT}8cS8jg%`?D*3$3^>rz>w@sXJs|5
zLHAHOzCGPLG-ULPC1mxBWv1#UyB>axXAhx(PG~{nN<z@qH^W2pgNGf9o~X)$pV_*G
z+h=}A|8YahWwt$bQQu(|KuiC<W<y6_73Y%rd`JV>!_qfw`^jg>Ygjrmhvr(XT**8f
znj$tP^&-Dvm{ys=_!N>&C*JXyPiB4~1MYDd|Eun5e>GJS_o?4Myqc#^e%mLTF+)2j
zfN1Cv>$7|4uA;#&wartUGVWFUU^L-SI&fgu@eSZp<ni5e0^V>-`o<%ESFE38Z9jvg
zE;RNMDokv3Bb%g{QlQ~z1{b~3u8j+m(smynt@_!Tn`qIYl}*&-5$}0NG1GGm)jf?F
z2YGA$r{T67saJXr&Q|{Z-h^mviV)W51I;O9eDShwLiCI0s<J`v6ALcShZ;iBlzX{k
zid6r!%@IK=B@x_?Bp{cZS5(Zu4hopWmbY`66mM&BE$E4`8S-aPJ8~(h9|Y1N1uh8e
zK0R0;3fInl_x6Xzp|H}&R{OclOr^s><|2vSj}*o}Iewn*!8`XuvtFsXwZ2+?ZuZhB
z!Y;CJUAeo)JYjaaI(2RPQVH8-qz0Kn=J3FC#Jyu9P%4&vqdM5bzz=%XT;YK21Q8e3
zaGUMeVdqBbB)S5{;iet@eS8SDK;*kD6mAyR8g=wc|INVe{D2#8qtMrXtpiulP4w4`
zMr@|2jG-3c7TM>%dPlRYEZQuN-fw&AcTQ0-M2Y*4;l?nq_cd-{)xoJQQW2l1kzHVx
z*7!1CqorrT<(UMu<?>#$nRpQ`n`Q@igwCf%HUjq4bp$4T@*l7$EXg|760Ug>5$y0@
z^46uS2O)=r<v5Sa(#5hqEH?--T0Q(?AUADI>#3{zQ3^uhfEoF^U3C+<IC7b~O<#Fi
zb@>iIy?2kHdMlP~e~Dmhy3-PY{v3NJIR0k+T#DPF?BfRrMh+Fl+jMv$+IoEQislx#
z5T#GcMlW?@9!>JY4gHp-PhX5tpq!mi(`C9Am+4Op_Qc`Am!3Hbj&upjFZ$NITsB&)
zmPD*OSgmt*9!3uz=^ve{R64c%WhNi|$@H}4g^&Z!)TJ2Lf-wAAq3ZCQ!N)OH1ydB7
z77%I80FZo+2eELm`X_iGEvlIorcNy)E9Aqmk|ZesV;khO%(CVR2V>{fExJ_swL9vO
z(($;K45!#C4>_<<s&`!;z3uy*IuAN*LVHc0XeNWtP%f&^SB|vA39B<X@6Y`oWnUc@
zRl6+?!!Xh!NJ|)`bV)ZNjnW;`E!{98At<194hG%bp@4LEgOqf~Q1jb-=id8#=bm#9
z^ZSQ~2lifj^}F8nuC-pdcL#Gv4%qtB4<u<h;shzKZ8jQvNslAd)+9e4N{)?QHS-BM
z&mPiI)2-z_DY<JpcZASSQn;j-O^tCoaqbk|-?KD=Zuzeuij?Fk3a%}7qoe0rKCcGd
z$<)u=39-3rji6}J97zj2!^GDTh92oZ>+@Ww?Yx{VFo#`sA<U>#^tw|Y(DTz)HYq1K
zC^#A>m<C)y)UQPmA1!!>gNafN;w-MKdWt@dt{ql&G4jW8yu91*GtET!N90ddrf^fa
z#+DnkhiDQ}QGKOThCeL68kc+K+rE=gy#SlOMPz)HPZDL;4Eh%w3116%G-pKDe7_kl
z&>3J1t$6Jo_AryWM)f!OadLvH%OrDV`N}M>?kZ5Wic!uSb=dY;r<2VWzM|79O$Ejn
zp^duE(p$E<T65d5zCXzN)N#3#Vyci4y7}GkY17E7wiqpk<kRwJ3dJn*L8f_?45C~o
zAA~hL6!flLBFA$*lYF|G2T3eMG<n2NDgIy&r?nsH1`T1_vPE6(MLmEicP2GeT}`PM
zzWK83ZhkOxjBu4Si(-m=p<jTrp!WyyJcLsN2%NyHKwj0*{>kWhMQXJ3T#bX1Z=Vp|
z>-^}6#%j=ZF^(OabCt!y8IDt}KvtQU)*MpWzk4$0HD6%T)3rk3F{(TXrB?AJprpf(
zq|d0<WqW0M64W44zMRqDZ!qs9s`H&{lYnNRp!s>beH9P0q0af&Z>7iG@odH`l`f}=
zu{KVaKtqkv!kbO1@yk6$o;z&7ImHxyg70&_ijTIYKz@t~E5?sml_wBqe2Resp-EL2
zQ44X3aK3EPqnNVw@+O`UJTw;7_MMQ)sk{6=9M0vyN1NmnFBgc@ZylFsf#B_MoX}UZ
z)5S3LXEwBLY9`K8YqA{UNcC@)YUDD~Z_rR*@(wi+zYo-Z#)8(nyCyzTtCL;&h>HrY
z)ppMBS&!k(!`NtT?q$DPK$OA|BWa)dosE}Xd)uom9tt<HXd7eAzDvP_i!iQ#!H#oV
zFBt2OsMwrVEsHn`)Ge?94$uNI>uuZ=@H7@55oNG3xsRk?QnX4tZFtX?uQ6S<zM4<z
z0xHoSK~uQW3|?021}8OMl2qyakN{K$=SkG{pLDh3a%iq9E+DB|f-^Xy;bsDTXKRxi
zNp62n*)>*?>dy7qOb`9)VKam3hM&H96Z5@y1({9?=I47Fn_AC}aG+c9^f9T<A8PO9
zAHH*mirlVi9C?$`xJg=kiH)ljpL=tnmM5m<ydux9yjAh}4Yp{m4?gL$ciT3~f)COv
z^iJo~y2y_)g=jBM)t_N`PeX$zi%(!mbFruR4wcV9X+t&~)h~a0p1kD{7Px4h351sJ
z@NmZ8br7vG64n4n6NJhyv)3EAx4G)RI{$iLw@dA=Ykin;rGH2!7X`T7WNabFLuqvu
zM#M|&M?f0d6nv1l=uX%Z<u0D6umgH{a~jVUxA`$~?v?&>GB`z#HCdWu*0dxZsF2?a
za8en=&nDH>HL8U9)fxxMta@Fzd-v^r6OI>E+ZXM-cDz)H&AC}_Br(1lUIdOfH$L1T
z&jV6~T`oH%8?dao@|I-tU4A8)h3_VQw%CHiWEOR)cFHs!cZ%IvS1(rfpJN$~`!;J|
zG7lTHuzaWAqWg0S_P?4B?sD5@O|?pVwf2lSe|!Us!A$Sir7bfnVyI((cwLorEN%a=
zfyQ;}xQckD75F#4r3B5|M@^njFFwC8^n+<QeFDxvw=upuoNK^w29=(30(5dfIcd@r
z;%%9W^w*yh6~!$dEPrHKrOz@)S7N%b%e3H0{?eL6*m3Pu^Tc&+mEb~FB4q7cmd)Kq
zu7qXw%lZH;%Jb%^(hUeVF5Enw$CRE^m>)ExL{pV4e#UG_FlT7`<35KO^yEG$94lWx
zWb&Y!%o&%v2lY+6v<>X{`MOV|KwI^B1fwT)iU2W{M~qvO1W8Fo3br{beN~?8%QQ})
z=0Rnli@&F<L}ZfDcaVp0=BMwVDIqy)vG?7-YFBC4`JvN_tY23^UPn&JlQ+lWEf_r_
zW&Vx{QzH@pZg%KOY*()`(W>;zphTb7dgV)HSIQwnpCqP1cT6>TRI;{t?SZ57x}q0O
z7d**E1l`A{oUX!r2;7eeu|KZ*%06;uasyas(Ol`lftz(c#`ErPEIFkmU*Z-H;mjvi
zNCS>@q_ywy`x-DS%-6kelO3QiMcp&9CO7RwjznqAdC@9lLf(a*MQ0=bP}il5Wn4Lt
znsFtL@oA%NcPz^jF`&cHJ=Ilh`>@3G8R_eWqlUY34Z9TIcBVEJE<}n>9<<(66PbaX
zc0Bqyrxo8MAFasG()xtegaXH#Zs<dr`j02CB<jezfY2KY+$d7_>*Wrp#7WhOEwH-F
zRh1B$gQ;iYW=sB^t0L}RzXWJ9vOnRttYPNL;fv9^F8r`2?Vw8kKFrDQTeuTYsXle}
zRW(!+=O%Uqx;$oMU$t*v6k4<%ME1aQ!VW#AekYclQu+&hjnBpGdAzq=T4a7cA_NpF
ztx{PgNEiw^d?7S+$k?&2HkFyaXsh2+Zqhgz;WYDyx3->=E#6D`+MH-XDSn~n5cZ=W
zlJQD~{}-(CnkRCNn9p{Hr{HEkd;%_<eIe)W@Z_!)5Nd-!@DKZ|lWRvr9U3>MGA|Y)
z%4{CwouThHBpI8(EKE!*8JA$gC)HS}FS{CKi^16}tV}~MHH=44T&<<$k(HfYtR!9j
zd`2@#v*16mPyx)~v-l_;o(SkkH`cPyDchvm&Kt4rF|JiNGaQ9X><F@!de<!B>-_qx
zzVjxbUEZ<B>`~3m-HnOsU&6<#Ebk0opp;7!YMEcT2o!0X*G*M2Hf(<8@VD>Wj+<f@
z+#zz`ZiLgL`@G4Ku$3~Z0H5?OmRcf&!v^xHYcCmM#|_s7hx<fxMRCb)Lg6>i6w$`g
zGmYVyN4{`TB`(gFKrN7wGZ12|9D0%<_-j0A;{YaXfT-Dgdu_c|a$noV_}iX5718Eh
zH!PW8a4S-0Dc+25D0_V<sBZDd0|YEO)J>|yRX(%l3zV1C#&EJ#8HXR5qhHI9kMpp!
zif_a!M&mnQNHO+3JFcnz=s2Y)Z3K0kM*6#=L41u*qo8RNmbwIhf+6dLN#=!ZW7n8G
zF?sgqFeT+TY*V!zOmTBesePZ+rD{#1I(Ika?R9wTJSy3S@4Bn}dX;QWU1vJ^tvd!J
z(xmo~_t8LMv$zE%<pr}~s0VxE5%oo^l4&s(MLvVwHt0p*HWMvS>_@_|7M1V%X?r~1
z<RgXJy$qV0JT_EpE|MxKp1SJCBeolkXhR)(3T<LUSLhoQoH1HAy3m>Pu4f+P=>|2I
zg8G>*v@;Jpd!&qL!KF?9xm!mp^ty$E7PT7${MVBN(+Y2*;}tj<IBozjKqtNH;x2xM
ztO}h5ei5q6rnhr)@<hDMj5*C`?NWn4`N2xUHbv9NyPK<8{@v=t<d#};auqTT+9tx-
zO)r(R!=;n@j$ozIBvoO;<vyTJ?yeW7TQ>1i70GL`<-_x~`}vCLj8Oe~qy8_B*0|ak
z{b$Loo;tWCN_@Za6#00++|+tGKz}rC4QWd7yElC+Dvgx~l>Q-jC{md7_<@L&{s!=b
zHq>9%u$0&JO+%@6_BH|b@49iCGJ7~bHz70?%g5Ue1~eOQm9tM1W~-+^xbyxhx#E|o
z%nWrO&xK}B$y}kj`S|IYzVFaxhSe_bItscB@C8(`x$k1eoowrTroKdH&Ddv6veQB|
zhlPwD2tnd>uVmutAzKo`>~3ZfDoeh+`uEeGnN4u5_ykpkr~I+d^ro>l%oj0zp1hQU
zZzi3I;!_cEWoYR>3m1Vkyrl%tTJ$l)KNM!gyPQ55unxDTik`|!e%%Gh^<5FC6D}YJ
zN>eNW;{TXJzwUMpwUBBI|EN`!dy`mB6q`%-Yx1Gm%@+d-hzDw$Poo!%Gv*T%s~m(E
zIS#_Nx5ooio7k#83}PIQdA^dE_pd~x6wPr<DW&T|9}uo+4p0r*<wP@WYdZIu%_XCi
zJNY8m=te<r9|8+|D2Tt`x3C^T!SQY`j};-4y3X04IiiYgm1Yyq%cPon7Lu0xa?2V+
z?<!x|YP^Yh_wh;wgq$uVny_d10>g5FvnZi&bq;NOQrERJ<Fa)I+beG&|80}1*B^zZ
z8E4^SV%XL0dz(AYHEP9HnPjpZlG4%hSog9guk}ZR8jmo?87W(GpBa$Av#$Je!<}MY
zer(pwd#{!b4!(ER%07BzAP<LU6df6aW5wO`80VyzH1~#X9nMer704FtpUBEQgD!Nf
z#k|`u#eDZl62l?cGOCeMbTBwaD1V6n(U=jL0JMVcMl$v1<nAr`2J&2juP1Wfl5DAf
zcJ-%a4o(MpvhJ$yw{CcDw*J1?*9vyB70P(<ln^_w+wo+2hukktG_xD4o%yLEJey-v
z^Yj;R9Kz;M|GiK%x_#eOT2H-P^-4&e=(qU~^Le1k+1<Xf9y%_X>O5Is)Bm{FrD#aQ
zOpetIXQ1AYI9u3tpN)R6!M5_mth996$D_t%b>3RWA)(4!Qox_|Tal+&ah@ojjCG`D
z+Ya8hss-i%QX$d1k%@9bziHUB#K_V$&%ZFS9ef-)?UB`;wO;G-8|YCE*2ofl)r|W<
za<{|JJMhz)+H`^#TDzpxCoX3N=HsBkUrElT>)gdKU!jYM*i4KE(@yj|l=>E=97Rs2
zENHJ+Z37??-}t%o?JKtAqlNH>>{l+;R@VAfbbe|GWB7=eUF*5+7oDn9J`yDE;PAH$
zyVP4fkhUA%z|?!zzTvIGwq3wwzaZSxJzVHMDIhOjhu_h7@F(WbLO+J*2d7e}pUd9!
zH?+GBYsUvRgzCzj4xe}1^PX?BpFz%lJ1e+Shi{iy<#t{+U2)d+s@cVNnr%#%J2KlF
z`>32`s8(qiY=14+t+9CxH>=0(Um2yN+mlA`V*A<XH~6tu$6p44I;J9nSSl22XR>G|
z{IM-Rn@Go@!gaCi5OY<kU==RO>F=J;`;rZCSbkUe4X&_*Uc|<A8GZW|EH2PLLa2Zf
z*8IARn$(mJrfy?H`O;Zp(gBw<zXr8!uA;flNnz^`m&Q0Mqk|;WaDH!8&Y(wxw^KYg
zsOa|<V*mXtO$&Mi)FZZkM!hLSn`Ty8^D0*Q8L9OZw=NmZ%!Yr$-L`6`;}~&>J4^dH
z)o{iE&=DYa^0s_5lGBhKa4E*raqzO(cWgav;4arT&SJ+a)2PK?!SOR^D@+C~hSppi
zj_H|U$FO)brcq(@bf%E})pWhFd535$o2KcRNQ>=CSucaMP%${CRPXS$Dz3-{f|5`d
zKBKwmlB0uG#Id98&p&zP8Iox@wRjReE3|!**b@?SqMJ;x^_ZTbxVaXek1<H^O+kZ&
zzYK7YO2Fjs*`0f(*AlKA5xJ8cWo4^3=R?K!QH41Ck)5MNB_F~>_qg_?!UW!EV59YQ
zk58X9*_ZjyoH{*@VU!L`Ow1tKv=;?*ybM72<7UvmU7YZ7T(s5HvT3~M0j68z+AZu{
zl+9neDE=}jkWByi`b%?K+R~TNa8B1PKJ4d-S6c^@-z#Ao*K#Li;VcOo40-LRf;rW3
z;+C4BoAfeJ>+GR&_(-ArhYa1eRF0?HXzkX+ahtyWpD&`1phfolvNgcD-SxtF=`T_9
z6SKsEoXpDd^Ud(rf#&l?+vGhI!-n%dwpHqdqIC-J9>c~I7qQ29@x3C)i65PE_Rh5A
zmqM4-`~(KnfclsVos$yE$O6)@o+i4pskk;JlwYrY<vzaXHO$<}Mcnmnn9bc)wd$8|
zUozx0v}*`&k0xOVY>Vu>))mQ8cAMHqfA>TSVy`IB$$xye<Ht#pbD?13D8V5iVNVQ%
zj5zs}u8>pFy4d(+RM|}AqN<b7g6xUzVU<8wMGhV`#C%>iIoB^RZs|NGO4I$cEoYZ*
zk{^dN#p^LHzTx_lSBkh*0&HmdU4X8jT(mK1ymTvE*6;2o->Pj9m*DLvE=}dJJL#Nk
zJSoPK5N&Kt$_Wz>ZsRIR%L1o_&?`-x+SC40fRMQjym%v2YLuCMfZj*#qGD<%9mA#<
zmlG!Vny#-x#Ie-fFyHP@f>!;C61>0vvb*l2s}})ZXXfm1H2L_<g>UkXL6T?Fah<G5
zwbAM`9Ln%>V5+mV!4>>?o6B48__z(1i}I}PcLLL0>gp-8+>5jPUR+MS=S3}cLwH$c
zB93EJW(ar_UO07q_HxN0O$)(`P7eP$VGosVbuB+_6FcBL{4Il(Ot|q~MVvY);p#rk
z%yVs(<W}3QUhUfTyQGZoq;nfA6)VG^XiV2yg_I#g1xw~DD$h<sPs6;03~REi`uoir
zz4#kXQr_-kC(f5TF$~L9e^3>;NYEXBzH$g(Zl8}O^q^OTz+%F4R<f*ZVAqduPqWEC
zhr-PW*Rrfbc{mK13k?&U^7onD1(-z{jTc&DD00&#BDzEnL0&&+1%@6_ue5X=R~mE=
z(V}-LTa2HuY|yG!Og;kf@AM@ecQ1rsvz6*AZ=SFEC>Mv#>d>_R5H9_NU1eZ1kg=;^
z_e`$IZs00?t3@sDYWvT~(OYBd>B=}wQ_;G^N*nd^pHg$maWGV0D{0%&kR&%Y1Qc=7
zqgf=9I7`T|2Hmvq7qCB#-}H^Etkw9+hWKK;cX`&U#mei?;0y=tdRsWxB%kGY+CE~>
z1zNKVl~God=vB{B1ahTAV&h+5mn0&%+u>G}ae3M3;8F+Jv%Gj4_BCCjvPKPG^^+jM
zBlT*hi+dd+M}J~2Ev{nbta8@+ua65n<rNGxJ8G$6?pLT|f+DVZT>L(E0kvuz#bPH_
zPJsz`O<4_%D7=}T>D20+RG1f{{yNp}T(4>mR=hG(kS)2|0-N0XnF5;hkLb#E=<-SA
ze@13gVPQV+wV)MSrRFeIk26;9yE<*&XfI!b8zb-8e{h-zOY=S0L>uMT;z`BjX1-@(
zVPlrwsyH;^K#@-rm!JJ=*S+-wBA+RAX3ilZ5UaEzN^z&(FbEq{i1Fg2g=FgM+gN9u
zn3OaX@$8CVkHD>GX82j}fn5y{;RDs>|MiOsP;mcPpC0q_`KmWSLK;`<(t{$rpV&@U
zYq9Kqf3TPd1ozQu?9plbuCbG3cx}LNh|Wp<8NM*-Gf>-<8eu436RwnH8W_z9OR2eh
zr3^Qbtm*cFUnKfu+SoT69q3qZ)PE^0E9acplbC$j#V{<Z^pQ`KznSi&36}c1GkS&t
z%=5juY)D4Pr~@k`|LFx>QguE$INuq4)64DT%SD0F+$*3B;Ggl2p&*G7oWGu_g<Bk+
z=@EWsbf;u?C-rq-b&usAcM*X#(fu>EKue7;(6jL9?Yx!LeoBqeUQ5o(XKZ%Z3x#-?
zj-FuX+6W(YdEmCpJhz=wFL-~d$LvXEjxf}TW1pl9)>zXp;?~b_aj?4*o3(YFYXQUv
zoEO7HUJRO_{)wmm8_U1g4edie*{*HHNjbCcx@-gb%X8`px&D|pecG5So@#YoW45%4
zGVVNVUasJ6Fm7q3zcx9!IJIbeu{xXiPJb%z0b!;WxJzGqw?tQRr>x)4bMA<y<v~CZ
z^BrTSXC1`|-{Ye#WeC~HZa(CnN&Yv;q(6rC?OIk7YyQd;qKibBZhQ9ncL#jSX%(fw
z;Er`Xk64P7K&<&{az2M!wI628wVOB2lOE?C+Ct;k2014Cl|(LLiM*qH_orpyLQmsP
zve%W?Q#hI4bphe}zxmwXWCpbcdr^wTqcXFFwhoS3+EQB9eA9-*M+P&AC`_xf4i$eR
zDuoSgk3FZ(Nj^_Yaw1;k@#7_ohrAkpT!x5&Rq{&HT#OsTogaNzM91NLFsJwNR>lK`
zy<U`-T0gr3;t*XhiY=iL*%(Jl$omxT=TF{T&X0H(aBQR*rB=NVRD%<C>+6`q`24#r
zMtj_Qe9Bn63$yc82{z?9MR_iy$W$z+Bxo*ru*=S<bn{JKMuGr-hvr${&TmcV9MDts
zhpT$!8{9d=fQzhf58Jf31G7cFs(UvsXV+D7O#7w2yMlLp=~oY#yFBenL4>Wx=7-0J
zr(KEtv7SBaM{3uNJ-c0(JDgeiqVY{YF~#?WyD#o#?G%$H@2WJ@v`~VkQvTUC{*5e1
z)s3Q{!L%(nZg7ulJ>wDEy1Yv{GVWIgWTs)WiGgZr{<M+Gb(h9hRviHV--hgb=rZ)Y
z)@T`xvjAFm)CNv&XZHl?0*^=xqNB&*>g$z#?p3(<nymG3A#HO)y<R*Rn^E+uM{lMw
zb9qKACO1u#FT!CQFW~#@s73J92u%wn_gnnGJDq>4O;Ac~9NvLqsU%dA_-+_t^3BLF
z!$J<(z+t9{q%2%{r|j}qcjM($K;GnhH*Z?ek%k)0#p&?a$ua(ngESdkVx@R+v@NkX
zu+RRRX8td?_}9PWF>p?XJ2zi<rzdExz_-VmH1?OMP1!qZ>LNs+Uu5-AyXzMoxM9|F
z*}3@=-<$;__G(-Gx^<QegQ|fgKS(3)@xKH6cOGg{LSI72iRW-)Jaw*xvWYed@5HvQ
z^=Q~Kbu1NHHN|V-XW?tA(aipMD0}s;C!~NuT;0muS0tOs^T$o&!+(~zA{Nd$fIm7H
z{?ZRmzqR9{(aUNaoSu<Rn)H~%T^?OE(hJdT>jv1Ra~_s6zSC>aBqhSsE?&V}v};Bd
zF+@5%GQ{6P(~`sU-s5(mu!5i0eOuJoBYWYT1B_yuI)q${@S!PQdrb=ce)GxpBG#;`
zN}ml>C70Y-8UL9`&WJARHG<glj9M(0=*;^3eYgfiL-VZ;1Qp0%eGnNaZjD3bUFi$U
za=2$<7v7kHN>5@)_ebljbJ=Vmcy@K7e76WsH)BeNkiED#huBy4{9PSS>?hM(sXzs7
zg6TL099h!FAd_Ybof3_mh}4p^8lJoUdH48OKF!hfUe#JZBL0&O;;)o9+;d3u_Z$dQ
z=Y7}Awld*P-}UhOXy_)!+JDai0GdN?QGgG0Dmzd360LaIcfWUn%Ui^{nmZNTQ?nBC
z-A%`UO%PT7dO?}L#QCXy!Bw=sQg@54GMm~x+=o$>{>#d4LHh2D!jF&1P5Hpr#jX#`
zqZW%7fH6<Eef8Hptv?aol0gZm0{x2mr&PI(s2gx`$hQ>lJg=_w?*(zXV;`EkKX-CW
zQY%@}eIrtO60(i{*{>#fmPa$em{t{r`@yhthF0;m?_lJoHGki+to{W<ebAKH9&hM9
z*F5hW3w@V}H_H%TZvcTMY5?O$We=D2y<2t=mv(7XrR3mav&71pm#cTT=1l7#cc@{u
zIGp)KvhD=?nz)=Zm@vCrbp%R|PUk7pavWu5)PKH)E97Sg$<ec6iTv&^Mg^-qnK1-W
zU|i}OT(oRGo1ZjFj2FP~c%ud36=gacq`aRM>W1z|-@eE-rKoKFcT4^E)&~8EPA580
z{4P~o%&-p@Zl5AiQM3a?eVRpIH3oU5F-=2s=lXr?bx%)!r--Xlo2Ltv7hVyX>YrIo
z>S*|{RL%5eb%F`D_HnYjm}0$KDMJP7w$*XCnSYo!4^SSgO;j{fz`f-T__Bc()|ZiD
z@S6FhvEJQIlw4{B{>ul5JM@itW{vi%$rg>;=At~5VAWlaXy5)zNIo#q<KNTsH+6mb
zRHav}rGmIC;ITW3UdvwmjV_<x=MxCTF&wc#@A{Wu>|a5S(5TFcwY*I#2}XPtttvp(
z`f$Th6_^-=RKwFRUs<R1Rt}5df-c7Jm(w`RFWa{dbl{BYK(7bz)}L1k>cCd6Gl%*1
z<rf{gu{#k{M?nP(t`@`o`0&onE2QcR={TH1u78c$xy?*(1_i{rbL;IUh(9FhIkYMC
z?|uE(cY)ri{T0^WL>x{%lwP2Q?O%EDPk(9Nz)<rCR8ujwj>1o{zrPGP*!WB8z?6s(
zi-5(`DlPlJx`zMht$)GJXazmD>D%HtagWib!_^vS@a9XQ8*xBCg6Ce@8z*$qw0v}_
z2g-c@CeDA0n-=}R2qo_LifhEo>|WEsC1lg^@TP_tj1e;!bpJMLZXR4EvD}CV-W=}Z
z`%FQuP-@V6!<YQ}=Etcd8h+F$xB4Os=7+@u?yg<4xYWeS^sI}o32*qCZMg6Ohkd5#
zn%net2>7HjMzj#}!a?)q#rT6W6Px}kpmhiZx{8k1P18cn1Iqv-VOhdh+!w>06p3cV
zoo!dPtIs(N07ok33~G<L76E$UdwB}p-O3N>7j%sqZoF}JZ|Pov(~mc;a@;Uejcu<4
zhqd16SQ|LLx=kiD><^)_wci%KPI08*YBi(k2Hrd8<HCQ*R{&iOmIg>yAX$0j-wO2a
zR^9v#UE?Go*t=48$MNiay&GKE@bs@3k&eyr1%xzB2+n|x1U}hn&0;OW<g93TP0{fY
z6H8{wH{3Mx0+Dp0v=k|_G2gpAk^)Z=XiWm=^Z8_4mMcPu-6%c7&ve^2Z%6<JNma;;
zrUFF0Ocr0cov2(4Qp;*tc?*>8YqR^^bm0v^c`$IIi#=0u)SY<kewGW29k`XpTKcGH
zxK&mcoL_149H)MD0)^HXM+|#)8Ekz=LsXk8+_wq|I6I&N?Mzf*_L#H5JXaGfOv$Qx
z1L~Ckz1soXC;kX3+AZXxMS?RJ%#V$lXE?1V>Co_$dtfbbGc$j!JH<84L|n~#gvo4`
zH+{OdF~;ZxK#_ZPDryK!`Cj~tF$XU&r~?J+oU&9;W^_i0f7|;vJR2sMaMxKJAyI_1
zJ&3Krnech-I~acB4x;fVnvT8!PA)~t8RPBk*c8_VK!fYNnXj19OzjPxcYY6`V9^i7
z1@xv^00d+5U9}bPbsdTW2Gre#R=NnPXzGk=@(O)y_%@j^Q4uix17n2AaUO@&N2%aP
z_{}_lTVNE20o{9e0~=&6XJ6EuD^PP^-SnenGC3CFunWD({qa8hb{N2kD}YCRjiQA-
zXZ7mF%9^<9LV@5@HF4nE360Hb^7GG<0q*#DzrU#-xecK&0fOZA9Yculn(oDM)o%2Q
zB3WGE9a6moEHb^b&L1}FKy%A2Kmgyw2HLTlz}`FwGRN-=>e6p4UFE4VoF>0PslK^R
z9>#lvl8-Yc5-71Z0Vwr3j9w%GD21qYs(Tl`KnDQ*QCheJP%797QzbwGrREXv%%GzL
z%jX{gnor%)<X?m+GBAI+@fONZnb<~aUNT^lAF*~TX(-TNH-LWQCe=MK5Ps<A_}dr@
z7;tlfe$9o3?J(w-#0ks+xs}lqsyB{Hn(k645RW=xFHK|-Kj?XYm@bIk)Nv7gN=}yd
zc0^EtvJ}AIWKT$q^{2PIChVf5BZvU<VwN%sJ>Q)y0WUhEBnQ;VAc4($z$OF-lRGK_
zMf~~BDf0ch$2cJH1|c8ILl{>ewsH=e%RR!s`|tmQz$2Dohj}7~CVwano`3*wmQr!$
ziQvfvy0swS#^eVlsjifFmW#xLak+DmS;2iVs=pai=Mpk<xeHtdy*tSK2VTEOJS-sh
z4g4?JrH~+wMkN}cj;CS_&!jiK1+5HT#YGKFpth9@5c37Kn>rf9Jzf71x7|V@Gy{C;
za`4Lb*e(Y89B7-fSk+hM^w9Cu4oyG-4ze0yu6WvlV~683E&K!dK=ID4N?BZUV{G<i
zobpapEs~$N_7nRnIA!Hy05v%63i#=7`IL6@KL=a?_=tjZGbL`;5W(YLpHSuK%|zS*
z#3X74Ll?7w(GJ__5&D9_{SUwfWv=JO0B@lZ6(o;U{cZ8HV_v!Tj)w<q`C?1GOS=#Z
z9Pu^cFw~E=nh@aKN*S;Mh25-$k8o$rlE^$fT)Mo)<IR}DQJ}NnxkPBt`204JG7_lV
z^v4;cFTU7gQBQ`3#LJ3McltQWdv*pj2Y~$Jph5mZM!vZ~5!~&(X0HO2z*$xM%{?fN
zh>y}3qF1`IgcVA3@67GsG6#qG@*r&asp9RP4F%c-OaaTUN43EeMZ0@fIe)juXGO<^
zm>wDd-iZ?rVq4E<Zo8ewfE-Bm02lD1Q@xrl>PN_0_tG=7#$Qu5*96&G3q7rVE)b%|
z>faCE0gLwS+%{qZ7TD8A`#&c@WC3U2TlWS^mQ+NcEZ}RlZu?a6AlS4CWjIpo=6-0D
zZcNxa;YUE`;~`b*<F`6p2`j*%f3i2*>ZAa<-{>X5fq647;8sNfCJ6#dTUSA8Avz~Y
z$ySSh3Y;TxyI&uzNXgSdDYq#WH3+7Y8e;}b4Z9thkq9bU*{XA?Mi7YXorl;@)<Ap&
z`=K9ECe5-v;CS1FnFBHB=j}@5Zci`(Y#68nbiuBwXbYItCDs~lx=(G^XlUO4lUO5`
z`5e{?w;+3QmL&I^=w<}-tz3gLfpH3Rzb1nD<HR734Y*zBZFs49G#)%P*j?{Lm?gsE
z#ow(IzWZOv{{Ks5A@|t_9K~$aD_Ek$--pn(Oq(`Juj-mNs+bSYfh?9Ys?4t=dy0A&
zenhSo{mXgDzXb|?4=fUVgTeR4tg(7_(mg6n{f~PzJA6iL8%?iw;yv@%lXK3T6GdV0
zvP97oxMZSe67=m#L?Ds~lM}HI6b}Z+YUl#0=TT_tqP8k;#_BF7WVm|Re_bdn@~HoA
zm(PN&fw$guS{yv4C#!F@qFuD-kTY~ocN2Kv+Q;C+2SVV-;}1;jK*n(LvjOQno!T3s
z(xgGVb5|Zb-tCjxW8=<VZ$dThra%Qt7~io!g9`b{K<MHGsgOx003WuLO0N`G{8%ji
z%@sN+_EYyszpgo}Kii;JpYHPM67xlW58@O2m@M>cpJlA#rt{%;WTEdd0nV2|?kVYm
z$W%NEq<pd_eb#Hg!lcU0@P9X%UauWI3&ihM7EDHpZv2EOfN(-<oG%Ih;aHI`Tuys@
zih49t?Z5X*xjAuq8n3RI?Jd6PHKo0W1a_z(B0w>;jK5*l7(#KFgxsyqQhNYVLH%r0
z&)<UB`p=cS7h2p|t5Zjj*r5X4(0T><GulPlu?R5;@f`1@5Z|HVbf>i$C)}LVS7$ZL
zd~fmn)94B*q@dw20B%2EA~z`*07jMi;+o;mEbHDU27&v0kIjT1AHpma7BPWyQU;_b
zefkuD*2R0Z@gxlz<gQSu+~c!8+NqPt1?4(CWlTgcpxsseip+`)tZTmkx5jF39{wKN
z)Mzo5z=TZ8Bkz3(Q~e@(mp&f#C-IPeibm_3VIa5rwd|W9P+(ed#2W*M`Wg<0hB>J#
z+aD=o+S2a*WcE>kQ29CJ#WEx1(~7$Qyb7H*HB-C+h9&I5KEXwZvK}5;Vft_`&Ts|d
z&GQ!&OG)026c7;W0jo*-vE~H`M5gD_mw$blxLe<Bu0dP;K@9$W#oKgXaWj5$0;vcU
ztV00!hm0{>c3>pT&v^O@Lu+<n#?gn4CO_+KAe7g-l#5}Xk+CMRDu6z>&75*PFlTk~
zR=j^Qyb;KVVgM~iK8!)L0)cp<6J}q!kc$P(puSlTQYJLyY0z+hbtJL#{6i1WfuwOb
z{&~BN@Xwttzohll#Jfebj&G0>q?QH{fW^m_>C=PAvR!-cA7%EeZGRUF0<u2~%FgjE
z?H^Ptbdb{fBS2G)n;PZj#b^StyHmLh)8G*l%qIlUB=knuf<u~kNc(8Yy9uOV<&*3I
zCoDWdJL&+L4l(c;H776gKpgK;jk6b^HKm5#K0kv@i-`My)<}VKVOod?PIY3keGJ8^
z_Odr<I(^<<|J(>2+?e>lpVyuLvIlFK>81zjHYW~+01=dJ@yo2JR}d1aL_U!O_)pbP
z85}U(BS!=d-(~Xq)<?kZ<5oDRAZN_8_2rs`eC{G3Ydgnun5d1QNW|q#A?fqVd$gDD
z<YVeJnfruU83|y}bM%?P;%nX%DF_+gaW(iLR2KXg19XhxL;J;m!<}EKBrQrBnOLRR
z`o<7-!rfDLxB6_|cdE78?rHHrqd)Jdb1v*T=fzd~Aj9rVHo#>aO<OwMGY57ko!d*C
zh@R!Qg!llS_McHh9P<8AgMF(#mp=j&>M0Aq7!{dOwSO+$W3?McC6x&yzqYvmz^5WF
zg2o>i_Ur>Pd(ebSM=cH^rHY~vO@wE6-gznp+QyvWMZ+_kHPGQi#`dzM0hgzvWBrcL
z0u4trHJ6P;;y4#*B5;Qanl>-yx%qc;A%P9hcZf}DInnecmIo-e3L!Wf&BZYo08bHD
z+e02SW^La$18RnEU831(0Y8^DLQWV;3%G&D#xo|MFBrg9wHLjw<7+p7&e}7>HUgy3
znZ?+eR^*V&(FZIImJ07#HjXmh{>XT(j?dtGy5`i8mH;nSf1wqDj8ZS%L=9<IPptcB
zGQI&V^1-KxQetlbw|o!E*-?zc%Pi^&T(g4&eFNbEFr}R!*YhBAqah-KmG&&^91Nfb
zP;6oMz`3ibqWN6oCKr7xpNb2BxMP~2qCx^fx&!;rm<Zpi<ctOytTw?rDX1YuTBkF>
zP+TO;RUQypHMhPm1#lSHO>msL8LkH$vM@h%)T!k6hdl6ecyDKi)GEAS3-#^yTNW<^
zkr{d9^;pn}2jV2#nZ3U^A)h|ea8$>CG~X~zz;>G>`ipWcF~E0|H0Rol;;;+wam3dp
zQfldL{RZZ*I72Vic7pwfJ#%jED7ckRmIi=oKTqZh#6fW6TzP$4mj$-FE8wnvM(Q-w
z5K$d_XI*4cuK8a9soCd`0{PY4#P0ql6s8ke({dqVcR(v^G5!gxzgH+@GBA+fH?X&L
zlxYbj7YGayiFRR~RgrrI^h_B-ZI*X}skf@IfR5hVsTyGgoPI@>(eHi~U@yYz&cWSL
z3_Xbf0i!%cq6(K<(8jWukiiA(#=HJ}u1oC%!K8$(k!T^3ZboWqNi3Y#)GZ3ePxR3t
zqd_0BfrL;7ZVGC!d$-<>iDi^=h8=?~h>*}jrZz@dnVD`88JR2Gh@5@^BRn|jhnQhM
zFNvOu;3mKgBc*>ZC&gJm4;fK$-!O-W#}Ptmz~WpJ{zW{Ps3KVfQ;lH{>cZoY&2Ik?
z85SSW08oU}PhOfrt}bP|8l<Vso<;-Ori+on<^Jq)k+_=$8FRPPyCG_>8L$Y;RVNb3
zKpgrxjh~MPvYX$pzoi<qv>!qSN`fSy#QagebZ7&;sp4v9Wo`2zDr`4ryOHw#N81(j
z*T@7!`Eh^_r&)SisPtD6OnK6irxgRT)`!Bnl^L77U5Ddu=DlBwdY_^?$h<sxBlHmZ
z?%ja*ZUg2ku-bQqFosYqe0+S0w-^UsLtmjAPGd6|i37J66dP;eq`zQ$^x_VYxYsVr
z%9ZFM-OP-4Urn8bg?ZNH$zkI1jBp)S|KaT9tm^94qnk@KY5wDn82V-++{e?a<VMw>
z!e*Hg#e+ZDQT!A~fs%pZ*YRCBh;MoSf1s~mI7+vKR#rfEFQpdixxPkW++3&qhn8JK
z^I6K24Qkq7S5J!p_Y4C!@BXJBFAM=+`^i=km(%Cf7lp7V4}RV}pNnOi|07saT|Z&v
zmiPY$`Vis5SSO1E7cRS=R-1in4^2y46?!jl_p~8Ma|7Sa+R&zy;5PRB7kOd?Aicrj
zw%+eQ_`UPs!#X(7%$uuuH9>bbyMn{3b3b??i`4IXKrkXdEfI)Qq%urVH6qk|Bcw*~
z>S#bqmXEqp1G4;HM6Y&r@;H16RF_Ei0;?jrcajte>MlrmgS4vbRKxN=^7wyv1l)+4
zfP#h__%gB-H8?LvK{NU_h*w_q=5k|8C~QOJ8NbW7@|%mi|3}XM;kN}DKyrS1A)~qC
z&q8cgSz6MJAi$eZS<PbtJHjvvYtta)AjQzK*XFxScWMOM^=WqNRtyUi+;FJ?yNBQF
z$g<8%h!8o10>s{eaJY}^2e~`;M0iT7*UYo20M!fCH`2!Ctrt9@d4KmmY2x3wWK@k(
zr9@@_+cpA1rlf9$!|6gNCk>ER+^jD^*T}PYhDnJWBnAzDM^wBGkYNRt#KPSD;|2Lx
z08V~$k*npUb?G1>A9AFrWCIAf)i3gdn&YZ_MlV_C-~kA9$Sz>bKKC3>A$UY`o1OiG
zIvNYq!s<20P3x#ds@w?iU_8YfEL3pm{Rye|Zke*458shfY$y(T_17=oKIV#Z&1<Uj
z4n$$zup|9zK%s4iXZBa3@SCf{|AXrM_kZm$*_&IS^$;?HJnJ!c6(aQ;y`#nYFz(Sp
zBBzj&a$|M369&Bx24Z8!r&dvmqUvp7xOv8|H`us9;XD(2?}zSnP$K~ZcqH^CAS~R<
zFbJ7Q`Y4H=3VPmO9<}~a@jD2`98j-%bD8q(=-faOH;N#A`+@^<<JI19b+EU6l<C2s
z!Ov^<6{swHVB^?|tZ6U-tCL7&J>+M7`Y7FT2~*x*mU%>6t=~R@>&5mHxUu}dnfaf8
zdx#F?zEpM5j54ibYpe@@{r>CmQS`#W61UBb@Ukb!$P0KUKp7Q6J~lAg9KWvfpp4v{
zISi2W5hJ^H$c+BEUi>I>3WN%NfW>ZE2+D-ieV`&W)iSms25##H<2ycajEHEs5XcR;
zMi$WdePG{+;Yhx0@_hKY)`zUWbmkHxC4Xse(Jwbs11W)tp+K2H-}0E%4mkBXi<b+O
zcK~U9YHs`{6M6kyY9Aj9Iqs-@0KBWWtu;`J+`PyLe3_=cnU&o3Y<RDC=n;}2Dgh96
zw!rCC`84g)a9hYEz;rQrkgiqnVh~G(B9a0Z`vk)IzF9oU)3Ha}OEta7X#ST;ma`Q@
zAruDFex$%00HhF#c?f9W!)fh69N1t!rlk2H{mpA)dZ4E^#fzd#Snn;76BJYkP(VJ*
zI>7ThK6m~hUgi;s0$Rta&mN#w_q2Xd0_TeKJ!y*NS6@|4^k4Az7LpBOw1>6<77VSH
zd?J9H6lr{+iGg-Q{ojot<fa}~xmvZxJoynQAV09ZTE#fd{W`Oq0&=61bXex|LiKiR
ziiGOIE-xnC?0Q)<S)$B6&|wan5Lu(P4zRQ$^T94)b^ijyK)AEt5n~J%WzmeFmzWAK
zxz}<OG~nTok5??Yf6g(Ux5sek*gcI+Rddr!lnLsDHG3Q<lU%AR_x@#qxBd{D1hw7e
z9tlXt9zmZ|aeGGN4StIuRH)IX#xEK8vk-5{#Ps7IkJnY^bCN4pOcYYY21AS4%0&Jm
z@?K~JLP!Z&ibdt983*^A|CR1qXm%C;kB3p2&1P5^II+~0m*c}$nfP?plp$kk@*%lf
z#F=fjx`~C2yfT%OpGc7cPc!gUtOO00r@Fn+#8Q*XR00KR4$`zdMhw#wIVY*NOwpyk
z9tNH7$}?R|%qvuYsa}feRgaM~e?U$}Y1qGteFDHoS#WgDh<?Sx2K192N^QCNiG1L=
zUrCv>zaSt&(>w1Mq5A3@UFXUQ{jZHR(*GaWzZH7}fVXV7FW|30w@H$sQHR2w?n#nr
zO<b=I@7vf(?|a8)Oh?jfU|efnjoQofzC#l61+ny2Xz(y)^-FXRKekZzGTw+-0rhH%
z=|+v!z~WBVqBj$-N0L=_v)e|C{{xX^{#%vhzdr1W9!74N4dw60u$0h$5+{?60?mtA
zN+VBjRYk2akN+BBN6(OhRw|$GDIuSuJU?AeZjIDZiwf={W-w3x0{K0YuGpY4nVh_J
zFF|p^{oKYKx7Ev~vgYzren5n?Ak&%QljHzcb9-*2^06vU1rl46n{~_#<Nlj&MchVy
z{bZoZ&+N#mbc@9?A}vh@t;lxDAV@s8q2aTa#`K}ybTO8fG*R8#r^DGVRmG4*9p92J
z>WT=r=BH*E-p?s*3?EHxAGM`^gPunepR<|Mm*(|!&gPlqH4GU0(P8QcSOW4P>={Xi
z7r>Rtp2t74F1dz4ph3)(>`=U+g<Pva>E~iU&|R2Qlt0dWdv#z`H*e)XA;KquizH9T
zFqZu`O(A6F1G2JTN}JbsqO4bsFolhxjLmB6Nz@EIB-$Vb4k_-L!e!p!5IxR;V)}c^
zNWxA<FKzhx1rj5a9YeC7!s~pmL&B)G^ehGv<;x##`{GeTKt!aW=IaY|8}`CrI%}9G
zZ(&p@1S#K$AF4~!4GkujI#ew2=d<_vDhbR{7_L~o!>!c?A?JKJ5FZc`y;SjgnCbO-
zF3n<W`L3zwj=V=Sz5r4#MT#|Q)(9InZBk`bQ)WlW17n1!7}a>w(q|;qRnycH?1lL!
z0nQ?f_+rp)dNy-46(85Z&h`q)_^lqplxIK%&3rX#NR924T9}w12%%C&VXZPEzs;?j
zM~m@iqNe`f(jBt~uWNsEsz^lSj{_BwEXQ!U*8z<1<X%ZsSJJPfC_5xMtAL0%upqcQ
z+38Sm`Fzy&nekN>(q3yTUrZjSO{aSyvl0Q3h9_zr$cQ)^(lL`QMQWPRHpVRQzKnaX
z6S&Edcoug`*5Jxsyu#;|U_sT;hO2<P<D6ws+H<4=Y#Lf9Glbkay@Nie(Ohn?HLMvQ
zx@3XF_CVOH>fs@r5Sk9!2)W4np&rOPW&c`r+AeJjDYz)mGxX0*pQC|2*8RibeO1DT
zAWC$+k>)}|0g)C3unzISzH68S>97;&!z4uXNz1cf%TQh<qmBFMPC&RJEbU>!YOv5t
zK5-QCn+PS;Kr9fqNF$2kIkn{>%J{H|r|+S4HY#%Z+@Vafu1jx&(zATYi%Dk2y!YKn
z_jzEVtx1&eFA9OIkr7S90w277#w^wvy>T;<G9+2>8~yW*36d2S6}a2&>*5F82iu|y
z=kXYI+e>!86Z;GjSZx%C8b+D!jRyLuT&$anl32(hrxNKn(3m324w@FubIUGmrLlC{
z<S|VkPv52c8JLB3*N_21v5<OLo()mkiFbax9E{web@VuDnFyB$e_5Qi?u96386F4~
z?3XRBy^B47r$~dZC)Pf%IQqxz2L;~rg2#3X+dI3@V@L|k1O0Oyz>69my%ZeI4^_&s
z4<@U4_--^fZU&pPU;paDDWlq9)k-AZ)9*WyX^Iho7aL*0K-xrUQrPgRB=Pg+re<ZH
zGiwq=?*It2kMYODr{SwMeOhRWj8oysW@^f~To7`rERb!;0Y*pBEqympDptmKa)n}Z
z<6He>FXf48S-f~u&q*HFYdzKOK*1YNh9pp9Q0I(*_L8>W7rPdkmY)Ka-`5TDe#r20
zbg&QMN@@K7<Kd3I62zUIQYtII*?J+d{cEL-YHbz<df?P-@3u<IaHC^g%JUa}MGbZ{
zQ=|jqM~R_o@?3_Tz+ERNkO2ooSDm07y}>B)VA|866K8*whabj`zQqC~_OE}@y!`|A
zqt=(QN7IoBWF)ivGZr(2l=Nvhpnr-ivr(x;qt-77oM~r-z?lpm+qkRu28D(mVuNR}
z|BwpHR*0-Ou2x%*yrDTiG}AMY3Pg$n{FqX{(vrAFiOLhe6?Qr88PVOk+=Z4(5VFj&
zAED)xsN0W~D~6pWG+ae$nQg<%k+g)?$N0x$k{rTRcZojTf3(Mgn^MYnI{kyVlwXz*
z)dG}kUA)-UXZ`IFa@I=o5L#05D;Jfr{TDgK8#6}7Xb4GRteN?fpa6g9=18m8b+T1M
z&@>Thm5RMD7d}#iW4t2{J-E?+OEi8FLh`_qu=^ge+H8PJcvK}UTSrK`RG3?BGX!6s
zek1e31v%jdctaVAdcH#+L^6${&t%De#OR^hqr+tva;W6Lgra~d&|P}c47@YSH5269
z@hHCcAQ=qbe~3Q|_!R>)icYSM;?SLOozL`EQBjIGoVIp^1CFd90dpCCquH`u!nDmS
zWEVvy=pRVveGjwzYyqj&A3_C}tK%pwIf-ksUKn7)0gj7@Je7{ckR_`>4FYkOd})rM
zVB{8qJ$n3609m7z@#|L^t3T1_zKDxQ19=P&HX2_GkQ=RJEWNt%`#_xDeVIP?91P@u
zhU(EIJtenp?&8xHrmi7b%%I<UhRZs`-cbCW?-?rPlC9C{6w}je=D9B)#_Rdjf8m|a
zQ;7<yq){B5F$(*sv=!2w?KLA#Jj^|%uKa4R-9#88d)3zOsxe0nWr=oq)*+n<J0J<Q
zO8+uD=4NueY)YyEq)$P$f=1rl>cs(&g@Wv(c}|teQ3US`_KMCzm9uwU+_5!xy1-YW
z&x3Nxnr8(1*k3f3;W{I=0MZab86ZC`1N!0)OrwnHQkmXzD~&Y6l%??RJTzrUUm8u0
z9ZO?!&@6dcvdZ0?XPVEhPU4{!K4qi;crIk(ei~gULm{vg5;U;iPu$jcTw)J$6P!fn
z?r^lOLQjYkQ%9wY+Y0lm%iGE*wHiIvDtrO8bDc@lGhKc15h)v!#^@PzizDxGHksxa
z@FND*S*7>a18&AdxAOD52<hb9OFgq+-)Yj+;c-}jIJ%RMWO>fBzJI0FLJt4*OtDQ(
z?(%!WJg?2)fFamIW@tEf`WHAr>R^{Ylak%Oa%R0u-DNnyU3(9*UJn{SW^Nfq&X9rF
zq5zM3L=2Yq{bb|G3Wfj#ipE{MX2SuNz}d(C<5BkI>t$&d#qY>C4AuJs``M$;)?wzY
z$nD9kFv@uuBm(_bi9gLI#b82fL2TARnB>D;6+2<fh7kb~9L|i>McG@1N@J!|rOna;
ztPPDTq?R}7dL)GE$jTmaNS>#8CUz{XO#syfwOi8k^Fhe^4i<jUpyIOX>8uD5)zMyH
zGXY}>mRlruK}D+L$-~}HxsgnIfr&{esvF39t!RERd9mkwthD0NhFXQq0O^as_5}O{
z+VrK)&7<~prl);LooL`G!fF{swkd<da^$#!QB7jG85Uess~kkmMa(CShSSd8!M?<z
z$HfC6ueoB#<hJs&Df>Hn$KHI{AwsQEqvU$Vb?7i8mpy~AIJ9;}!YWv41W74dKnGJT
zE|T+5NsH9CN#HinBrZZNm2V|f-OThu>yl#a5g8RzY-$Fx?HgY-OJ2_~GOcAJri?lo
z=~gb;3aTXxpO(E!2KC$2_0O84lp|*o7}fVJU#A<-2ioh=Dd`Vl&tyUc@}#M0QN4%;
z!~_MOr{)}p6yfsZU3wPy)pu!*SWw$(jP6yK6=$p(@LiIvO0gE_p0{j&YJcH@B$c$#
z^eUyXfW%Xcu&^LGl8Hbdec+Bt`Se63kq-T736M>N2D#ZR@sBFoCF!nkG4<Uc%l-H=
z_q3mhci{m2BAJm4svG@2Mhq#Zg#x_?erqtOf)-Mpw1`3RE=%U)cmfkdjcDSYi-(q$
zm0@nF+&f_QItOKD<GLBU@u-iPOKse2*~S6$cx^NB23LGJ6*?*sk=xB9xae>7flry9
zSdl)>TVru7fh<q7(zMi99Tso7*iI<7K^}^JCjfdYH}7}b818)Ly1vT3wsVd8@`EwB
z;b{KXNdhA#G(0-=GY#^z=?^*@(F|fN?zwyc>Dr)-q6e)Sm`({$DX9JSe>utiC;*|#
z9Foh{NcvKNQu5Qhmhk?ocKSrJ<Yw~?)%Z5z`};`J<_fkg4m*_%G}&U(Q^3F>Du%vV
z;>HNkwZ0qMdE`KeU8!chmItm&vcB78aWvDo;cs!IMc0*e|L{IKuTGl#I>PKL&gXP<
ztcmUBK->-3Bm?5{|83#J{aS|qJqzIPo}Cq40`~-7*qxs96dMY&Djw1M%X>#8yo0n-
zW|*MKv8iFY&aB@bZ{j|5-Eima{q`A{pY}tR@!IV8)E&~l^u`CYaXzyn(AX;>g_OFg
zNH$-n$8k5CxVJ?g8Kse@G3zKUD3a5-8dOMYGpVC)U%2_e!@F#B`xebB5K6~2$vP1&
zx`(B6I<d+pV<<$=h*c1WevNhyo)96)Xnk<~U7rCIQv2{}^rnGHLY}!*;NBy)M|Rr>
zOEKBFJGx)m-Z`jF*JT&!&zs<gC&yhpvflfV{&5HxiNP~UZP#RkWa{KIA?YTU39gT4
zVE=iJAS3h+PltKQ_eXRSI-sd}k`b(`ya|Mz!ri<<%8`Cnhj06p(`s{fttck!a<VEY
zvA5mtS1UQMZJgn7A*rk#=(Z|h{p%oDtg1UFC=1vnCEBSAs^Hq|K40-HI182gBOc6~
zZO?YhmQ4JT(J5-N=VRt&7R9@3KbKXZ>&WLueb67(gJ3Bdqy!fLgbNNpDmdMwEmyo)
zZw!=dH8U)tZJ}l9#A_+HLYCnlA2!R%zkEbXp^|0wq3cwFH$_61Q~Sl6xla=LL2Vv3
z#_-RqNNw6o9~o&j9&lQr3_0g|)W>(_a1%jmxEIzl)ZWteS%apk=q+U_^eh7>C6uai
zO2+e)XQ@jEW2T3IF<kpaFef~+Um{uOdoehNk7$uvQ#-VpyMc(d+U#o&kUe_SPWG^(
zjyviXu=kEYi5(iADr(QZl;N0G$C1S2yxi-awK}pshlvOC2z;zJ$Y^8BEx`&uC#jzD
zCoKQJE%5JFhfz(m$2p+#@VeJ7VI(f9*@}FoTu)-3z#1JDm;ExDxGb-jMc4QZN%%~<
z933tW`(<S~mVAL^aFOOt6B7>t<IsTZX9C7w=gzku*8E{y0B&W=71mwp)I)b0OwaUn
zQY>t(=WgD65xd^yn=A&W=4Y>Vq`X47r1O?JJdbnG{7hmBvwVbU9WTJ~Nd=P-xxggh
zA^TKCAVg(iv|Z#+t-(gPfsrS!dFk{9rx{K9)!9e6rAX*2PlIjS@7J$2IZO{2(znmu
z)%%H#g~&AvbgpLM@G9$RW@IxPM2;c@;%M4i8x{&?m_0chTyDDhnXTyM7fNbak-0rY
zG_e$;zk)Xe*}#_JbP#a)$K4T0dxtr{$O&0r#LP(x4G1aC0PaCW%>tA@z)X|JbF8Dc
zREiGNZ<*dBl(_uLhkVMvpX8?oDve*B-{Ba__J9-#s@<l{(a2l<G;=o^)a^S;{Xd{T
zGs*t-Q_bN4B4tU2L`8+AQ|XB9{amKk>ORVdmuOXZEaw<&_Vc)^qW{}e7%})Lm(%Zp
zs*{YdbY~SmjIX1`9nY#sv)Ex-R^jr9oiQIL&QA5jRvO+LaD(MGt$LW@Me5*dsa&+a
zW+|7C{#Pp(b42x}s`yG?K~3XOR2tL;j=fKRLA9(CJD)QVnaifkfobyme<@gcVL%x)
z_&mzUfah9j7DY=$7Fx8~5*<lT#xLGaFd$-6C0pt1){~#;N0m}=eLy9uu4+SwdW;GQ
zd4_7+xKl9oY)kW8;oqRb3p($xQlvffixpNUR%f&-r9Mq7IPmq|aW;^BAN};7nIU!!
zV!cCtEvaX-rmW!;JiUoVaFIc$`V(|s+;9KJUX$~PA2{bSX;Lr`Qxm%~vJX13{k}+a
zFYe@?#oFSd<`)G2qS9Xp2G-=enbHw2;n`uk)Z8+$-n~X!T*qvi-~Jy}R~Zmh7j0!6
z8l(gSq`SL@76s`Zy1N@`7zq_56p-%jkZ$R21cp?kyM~5$`QH2U{_qR9=bn4cK6|gd
z);d`da|SWJ|1T!Pw!!B{E)>XhO+$Jt2=kx(C=Z#&k6V0gc@`BK*L#vp?~nE<2AO{~
zHwlrgWhwV0RPXK<Hr$=UO&{Wn=HH5HNVe<@`TF0Ebco$MYs(oZ25cY$y`pkyq>C?F
zn#+zaO7lv5L7B7dZVqi)I?XSU4l>u{_fA+4me?8;ARLw`eUzcun@4r>=T0NE{51o*
zlKr{w;#YlH5PDNaA|q^wOC3Un29S19v!SQ|RpO%EV!6`&wnoI7P=YW#D$i>#(KhP7
zR_p=lrvyD_$a<*#$RhF1Qp7pRqw)&XcXxf4AjZ>}uFcxQ?zW&!@Y=(7l98-B;D=r2
z&wKax)upSeu?|phMq6++F&Xn9XR$+aKusV)?ft4aam^Wq#xQ7i&g(KWP7~oE{4(W|
z(<L*d(P)Dv0aJ@(E^y#7^`l9Iwq$=%6X9|=3&Q7X01@w*JIU>8w6UTSGKH#V%g#L4
zf@9sm?}ET{r+3Fn2}>x?>M+TS_XMbhIB>lZBGR`wG>z+z=#y}_6@U~TyY_GNbIbI0
zmcgL>)P%pb(Ao~MjG*RRnJBMsd5}5klC4ON-JEC}WCpv!wIS<Cr;KmUrvvSB%jU>^
z24xf+vIE`Za!GZB8-s894(-mru3=BFVIdvxDv$NLY|>}lPZ`C#*&nnD*v~o~&V1~E
zUMIZ3(G5t_A`IT>!rV^cl`C&o+rVbgFPZ1WO@<SD>rt~6nZp7kllJo-JPSUqvM+$G
zaPBnV6arNri|LUr3iD^r(^<F;xQ794QNH*|+JlPk_q`2yleoM%CfY0Fgn|Gyi%LAk
z(xdyfueF0Uj!5LR3`{7u)tyL={oj3VgH!`i?N>MZZIA?OZyEwPE-4c%pO|bX7>Zgp
z9je0bZgbMzlX1~#vdkx6+u4vMu%iwY++-eMhvNRKt%*i`{7MzwF0J}_Qv|K2+~uY=
z0U`9xT3A*!SFQFxec>9#ov7|YsR)wX2w_<o^a_{H4SFc4>nOV4Z-}z{;$g|isXnuF
zRi~0iHvdj%_f8ow%+e{!Z4dSuAFcb{doj0fk9`}~!@bKRv19KDwNsM3{}*Gogz}0j
zjCjqi`p;;tquT9Xd5ptoo9A>@0?7N%4=cA{-?j*ZWF4F%d!*^A=(YxBu_Xn{ytAnK
zfw)gqAJz;QMfs>C$9@=b;*{g)X4z}0JMt~~W@b)v_942&T{p^b=Pz3#VR(r`fme$L
znZd94Pr=yg5ZMjJ-8ccAbaYrdvWLHp0c&QlSqMc^7v@qW!-u(chv$*WqUc4L9r9Z4
zvvw-&BwF?jy&?v;v>_fm@FK^89P@E?yP(Z2p3-^}Oh;{^tFO^W#zn0jZ!t?c#7bO<
zJ~Pq1`J%BVi?QdvyCsKH5)~(~Qsm)3|7J1(x}kI;ldNSSuyz~=A9ot1F710hFoSe3
z%<Pvv8lTx2xx2l7s!*EtwKk|e;9c2X{ypAB?(mSBilD|tA|qj&;pAuLvd(n4EEH{#
zuDq8iE5HS{_oDQbIc)(G@}at>R~;tGrEHVWUo`oCLb7eos-Z2-ec~^QI~a8QRZ0Ps
zq2uU>Q{3K79xa-B-+=6>;PXMfNwxA;kwmM=?=?s-{qzT$hjEBle`^_de<*cTRaiIR
ze5H(smShVA;h0aH5HRsH-%8LhB|y4ubwWMpCgv{=^#pEf4SEdT^tVPd-GxcgBi&MO
zqt>bLyvoHV#@zA#nffvs`bQ+VwxxTnZZ$|W|K-eOLE%fzY8l$&k2J!n_sc7?JeG7>
z(p~cM{eeQi!al)QD=wKr#p*JZoFw8OXk54_CIU|^JMPSe6xISg_vugNi_;uDa^@u$
zj0kl5yoMX3XDXFHvvG8h&~=i<NWDU$wCk|(7k}}JL&*nsqTSkfd%hAg8FyQI4XgZ$
znp}B5<XOQRp!r;VHW<hvTYPN4F>)g%UrCJNrz9-57|#01XK8gNb3Z~4v0<<uXXvww
zT8(OZGUy?9Z%t{(lfZ0}xj~WraFfb2&A68hf-u}wZU)$G`#(ghulc{b5IE=<mmx8v
zkt!Z{f4BO!UJGPul>f>xv$iyrhnfq37GB*-jdQcuzxkft$pT+JdQZ)I(Ovj*OO&}s
z{;L}1yvc09>`@1aXFPaLOS1oC+xfpQECx13rRsYs^FABwz_M```%a3)M=_r@HfVE2
zy7q<5Hvz)aVW4DTj*YF+@~<wX;bG$X+r8Mkll|O4#Qnfu7V*~?lr3;P<M{9+bjsfk
z#|HrQ%8U)vnh{~CU_tN+dthF_pHO6#$C4v!y?;sm#3LcEA}`_E>Lg+13|{HzCo5L0
z0w-Rb?B98Hq68P%60V5brOSG-kZ`DzQY%(mpCLB-DyC!P*Vi8QvERDkql9L_<;OMl
zX%l-8<ON%0-vMvWwLa#@@KlUe?c0NxRH*vjn>18~rClkvhwlhE6i3wT=t?|t?Px8{
z%rBfgG;Zu!_pK-M7<1g%<tq0l2BUtr6W4c9lF~@G)j7+qVU+9wq33PQ(MTet*tgXC
z-m8vk9qzEW+L(i*RwxeP*ks-qOc|bs@jFUo&A`(Lg`}^+Q0D9V+x71(0>^>~sqi1e
zItfR*ttk|$y31BPb(~rEk0kG^HEzGXB>vS9F`N`?jlTWLrh~!kO=o`RVaYzd$e<m(
z+p>3t@KbR89ysBr<8xLTvYB40ZXtoFBc?w4IL?EXZwwc#?H9Fywjo$i`!PcSa|~W(
zi&|9qz~g#?TCDH~33f|6qUm0CeU|MMM-?>==q_Mp!TSE$dQm9m?cxWO#fcJtY60+S
zIbPRxQ7+Wac-T!q37i#;B$PyvyJEE0VoCh|o$q|ue#BoT=mjXi?+On5mpTO+&R9aQ
z#Dx2y<@ML!s(WXsDFE9sNmHmfEMK!b2sPU8$k~95P>68COIOdb524nJ@J*BoR}Kr&
zs$cCC_sV=QX3{AQ;G40TY5V@OH1F$9t|1f%U>4XsHTvb;^bA=6lPJsqOx0B)VSXhy
zCNF$EhS-aJb~T8Z*X9@qJ#K!D6+ev6_D`)w*YQp~SW(JwQ?Kc-H9-1WXFt%+9BE5_
zilm+G!VA>TMhqb5w3kqC)v8g>RU`JkU1nQ!X$1NH{CIE3gVce)?R^nKY;?_AA-iAb
z>KFsgxh}am`-R>k_n8*WX7#a^NZ28?*Bjyp8?NhUXE=CyCp+#l(ZS6=f?q{>UYU1)
z3e$D>j%^K&ruIr;LSbX<pic#k>E_9+2&?i-BmIDLJN9bRqkL~7pb^z?_u;DSC%mYr
zJ{aNS7h`>Nk#zd9>L^BVI?&6<VTT`rcUr(!Kf1t_Aw472u~dWteZi3xFi|0Y(>j#)
zi|leS%MjVj@M5t4PC)vg4LsBFN^u2q;ND$AD|59spl;^X&tSyQQNq<;?*8`<3+PMb
zU!k)neMS;o^i)~vp@!&x)DvD-=%okS+)&#+I-ZNK6b9e0hHS}3!3|Oe5V{57pk3t;
z#SxaI(CNNi#v+{8^D^DEb<EQ-cF7ttdeK{W+cYk*H;5C%40EqM5d0`c!{(C=DTV1Z
zUZeW$E<<36atrhT=SUsJx-cDil9A~+)XYflc4Hd7PkG=u2oji<{mBazj{&S`LUAxH
zkR;SB7mzS+nX}094(ySI_(Bjd!1tZ5u2coeq%VvA!ZZ}myBzV;rd{Rm78ApBg>z^x
zmdmR4uda!<=MbfjQ^+nkrVXWkVaeT>bvyIYF(X{((g&YF2Ur4b%uP}{Z9zh;J)3Yz
z<z;|TG(GCyBF3!y{Ug0@C*HwOfMhQ+yEX*bSHxcCI?y7RI5E{{zeXjzHAN=?g&;%c
z+Wq#{NVr9znRTV>?))8zf_+_ZnV6m`L-lB>0G0*L_qF%A{)U|Dw>%DShVDPk=i)YM
zs5#^~J(#?l#C<D^ba0e8L4bvIP^2+3G6+{W5JR304n{<xp1Y_?;@Zfqp&Z2R)y@cv
zBB-;>`=;~`oLM5zt0ATT*pK-S#!-8I<lL0C%|*IBvv7d+tSgzAACPJLl(rp5)WyUQ
z{K95oC017Ry;1WQocO1}ibAqE8Md1BTs#DeVDSg!n?Y`@JEet<es6nPa+$v)WXOsu
zj9{YrSNr@r@x-42+2Tx2qAKB(2<c#{a94*<__;bpaw?OqTi@~HVuY<7<CHY_U;Ags
z$6eZU7s@$|f>$OSJe}<q+4GW&h`e8+foTW<%2OU0Lv_^;?N*%mJwhc)6*k0v_pE^K
zoWNIn%UDx{zF!Zxp}IZm%aN;5wpr{SRw7Xh&ML%k%fEBlE<vS8PjGGeCeTV!g&Rr%
z%{tV|G)wb)1FKs%0i<LZ7MJ|!OqHUqU-;TBy1(x@Vyqmh13}NCA?IhObM+iE3qktq
zyzIMx0N4C1_ZB64N)O$#ntBxcd*Mh$47oSAD?)^~RW2cK)G5+7|NLkvkigCuH17aG
zWDJUl9=00@?I`JvhoxeC0NN{BDDM3J#`NA-edchR7=dOq8xgijGwr0-)?u0v8Iyue
zJzmPUh{xt{z0-C=@JweX{%54JKoQ!7mL_zpcWQ5%lAGWJg1<1=%$PZw^VAQ&?#1wT
zHIXoE(?P<QrQ(3m)~P6K{XwO2btG;<>r7+0WGU;{)Vn_w=OOJP;i%d?)>Rw%<DSeU
zAblb=!iv<=iS&Gr+yhzoL8`YeyzFllq+~$0)2MLXq#F}1Ut9?b$3XZwA}h9xfuR%6
za>&wWW!|kIdt}YOi<*CbF;$q{(bp!!;MFV5Fb;x19SRv5!)mOzV7pBpEnZpc0qUYZ
zpu+9eo9`GBOr%chp3x&)8r8-_kNWwmm)1t+d8gapAD=mL5})gFO*O(X>^%<_Me1gS
z4xSiQFl59W_jo}js#D@79o6OdUI#Nv+%u`HPo1N?taF#%8HE7#DJ{6|GDzn3pLRFD
zoI)G8mfa!iA(ExKef5w~d_0W!^M##bX?S7QJ8(0`e5Ws&%fQyM;g@C!>V}x&`DfjN
zp2iW@xUViy_83!E2;n)a<bHD#u&E3USU$hYwsIlAda^bW`Rj)Ql(7@|d*1}-tk}ZA
z%@>3y@2*w@*Y5<SFoEi^RU98E=mDO#`RrjN<V8SzJ|fZ{`ddP6DyH;U;regAI65&+
zXK?Bp0X|!r;7&GJ`uR;?fri!SADAGL@OY`21eVx{KCNb2YA2*V#178T&@+GvdyD*H
z>cK`r)WS|q@`17@BqznVAs^R<2q@hLbURTt;9CBx-`u}*xW^?J#&;h2dVC-DEoSwD
z{hW2)j~Mw?0Dq26xYqhBCzqNM6bZ;9#Kc(&lrI4!R;F|wHN4Wz*iV4JB2UplwdbDY
z%py+9;>&iUX~)+fYYWp2(ig_>x0)>nF<~Cy=t<#=NslfiPW5Y!Tr)}wcPAz1Gdylk
z9k{l1)yN*1=m{b@#l0$O`#pIM@HM`0VlGe=7G<dZaiTnN%y>z26L&K)$_$qOiuRI<
zYf?EWr4e7ZGm8C4STjQ{ZWUvmP3eiAo{w>-*uTW8pww=+!gCY$qb?GEhN4@m4*SQj
zo=M;Zb*lJFn&Cjm&gC1h44Dy_XvQQPwQWW*e+=0JS4TDhP9-hQRaVfFMC2#$q*COv
zSZ`-l_hag0-CFNYy&h||iv)=E{3rh26J{QbOf+#l!{9`+{t8+U1WouLT=8QUSV~5)
zgu2xZ$jb3&EMSt4SzIF8vSw<F=Aam*1{sKr>Flt4rRGCqXlC^X<;?cj+md2DB=8Mx
zqt@-eKLKU^Ed0p-?u5(Dv?Ehg-L;6GHZAV9u?a1CknwKNh5uaqFqp7~=~wi%m7En4
za(n*azxyutdn~>sW-5?U6G4)8Na#l+j%mZ~joG~PM{mo30H0)$!TE~jo6lH|6Mwpt
z?ef0sf*{dl0(&?V-UO<vhQs<BnonKF8G=Ub{=5&f`eFGZ=mV2Zj@Fc~THB}3Mx>v?
z%8)CDAR^zNBzZDK-jbXl927p>Kep+qx;;^iRL17)g)^kH3Oc)YwPj}wJ^?UKXH2IW
zoU-X}9OWWO-O#15m=N5YK=Z%e--Mw_SzG3054k4lR}0rr3OJ!xGOi1A)xWP|jyLD|
zhEPajg&wf%MjC&yo(Yk_zL35?*W{Tbq9{V}l9}Fp=^`=6b8b)ze4jC1G(Y<yc?q3u
ztAfRDm*%*e<1G2<5w+AV^<()<@&&NgyOoOBgWp~NR;F4M9Q{0zI0a(+)ZyVp7MQD^
zD2TEeTYKCEx&16PFw_pf{_!^JN9UhibHN$CkTBpS5`zs-cBqXL67?z-iM6UJgQ7WS
zgIfU*3-%eje;8^n^HPO1dtgnO-`|2YYTAYw^r1BKV2gI)Y532Kxo+k$0{7Cgq{7E<
z96!Ph(QFtqrF&Pl*>-Zoca!K%5<5DKYsZUCL?ZJaQ6U9O`E}#_9VoxcsH&X8EOnlE
zBxuaX)akOoRxsgk96U%I+E_9;rN#jkguV#@ISzE+&k_10G&lv)nEr0eGr9gChSO$f
zxl6C`<4k@-)sGv}hM%l$#IZqaAWZupf9@Y9>M_zk{FpwWs*i_UJ-x>W*lFg(XL!V|
zBtH5yL!-AZlug?fndnVca_8Laa)k}F_qcBF1)u-pF-sCbbtfG*TFr1U?>mmHbU(r{
zA^uY?4V>}7Vy~F8Oz0mXUhIZ~Xm-Trk`b8O2VYgf@VCaSW+d=I&RMI9qm|~)Tim|v
z4GveBUDe~eGg<@h!E`(x?VkJv_?39Zs(d5H1-|OmnLSIkT;kfkn~UFOw%{A0Bp;C$
zxqvyq9gS*Dz7vI->#8BU0E<(TaMf7{yY#<y-4$M=YX6Soy(YPJ`OpXUcYQJFf0sms
zW$UVMGNvgFXUJ`mc%7V@Mk`^GDqBA^qpxiW9~w`a+54AhMhC@v0u2tmis!k%^(D#c
z_-}82P)Ofw@U?r|dN=s<l3U|J=XF-5tb>Cn|Hk!o;Ca9s(V}fnm}m=I{@2s;*6j?$
zx*_6%U}Cjqq?Mli9C_DS+8MVSv_#U!%AG)~D%Xkfs9ao2hlx!PyBv_xv{A*F1n`^y
zflyqh55%ZLpdi@4H%Ih?`m*3vNv1E}D=8DT3n}Xm16CY9&D>0KYOaiESrclY1zlRm
z1<d{ZE=`!X*+0`w(v>NBhlqOEnL_U-h5#QYxpl^5Yh3u)ma{czQK<Aw#1j{y0c5{-
zcTLuywW*cr-?-~+lp5~<?6+e9avCBxU24y#xcLS14%*+#OECV+_UbfAI&3aZS*y4V
z2dRa31pXA1fT@R?d`0xiE<=-p9C`fS>vCiS6<9oFA{Nvx-=Y_XEx*Yn(#5Y%`tEK4
zxV-=<8@wN}pnO=P=aZGq^K)$cWk+WY>0Nhf^i{(&(?L%R^9YU1wrsobzIwGlI=N4p
zT6p35=mW-AoDMNZ@{3`}maU4KDmySo6KW=Y<hkOjC&^vb@W_ZR^!I=m4+uiu|K8~U
z#8F%(c@x35(B{ITuPt<}pIm*122p{#o=pTmp5TXU@xiS*&mJ8jBnc3vjdAOO%Ix(l
z3+rvP$DcbMT3Vo^KxGdT@w}tRG!GxzyB*qd7v7Xnmcy9GAtN*9ZW((PJ}JkOKzRP0
z^xV8-$}~bpQsmHv@D}9z@VT3fyY|C^*W~#Z{5a<%UVu`EHgA5B>nqx?@pOzYf<EoE
z4kju;*OwyVHD0f4GqeGQjgLFQy?zevqI>)F=)BJF5CL(@nqTwqnz^`$Vw;fpdi0YK
z+$z?QvT$S|jB!*oBYHV&Dc=1<8rYT#Yn1$Ficj%`;Y(V>wjkrmA1cNaR#nga@=}q$
zS+kgEj|4W$IVGTwmV9$e<?Cve0z;>$x^F+$zNHNS-o8fPLTRrB1jV9uX|0b_^0K!q
zzyLuI^X%~|6;(`;GsIU8_gXs7pTZ7{i7{l9u(sEmY@OezbuoMZP&S&VkV|Yub90$J
zt$DqduL{l02P=!^$J%<GWTy$iPLu6THenl2Ve1aVU+?y>Z(!>C2Cs$r1gs{eH_fTB
z15en03$2B~2P8EP<5`A#v{XXadt`=^m=(CQ!_%lwoe_)A_K@+sqfl<{Sl=t~O*I62
zX}0`T5n$|Zr=HS1adP~*IECJ@{N57_u7c-MI^ZSvy!<HuIHI>sK)b7JOXskn0`CbG
zD0+bH^$R%zV}<5Fk;Dn+OP>UrwhVwEb{FvT9F0;{VnY@`{}OZ>BeizK4aU>Qf{5Q6
zal6uY&kJDv$33_}CYs{DSGdrQw8!2!c75leYM_RP4eAC%wT#6)=a(>eOJ499RKGD~
zn~Lsi;p^Nw^-3w2Edjx$4&J({&2H#&kixWT4;=m?>ShH7yJm^Ziy@%hApKe049lm$
zD**N=Yi^G6GPluaGR_fV=)=Y220pAC$SXC%JT5XN`01CPfgs{UXXY~bH=o}h)DJ46
z^>7?J>?7e*f&c|U>xnnI4|G(G!q0x;poC-G4Oke@K$DnvG0_KJi34<uz3niN1oz+?
zdh=UYz>M`=W$M*y+VU*<{^(k)@dk!tW^A52Is5Wy7kZ=vX=_`l7CsJ*X3!^l5qPb7
zGxJr9K|gH^|F8T9eU^$aPU1vvbU+Fp0V3NKZL*Dk34YNP4pQH9{+;*Y_q%7XzsTab
z=7XOzM_*QgfuQh`Ict4Aeu+RkdW)qW*?m0j?i5cob0cEp+CiB|PTNHMAku(dZc*jM
z@J`3{)N=e=Kw<}M^><W*EpK;Q`Q)w*rs)~2XaTuvo#*q?Q&Ys&E_CQr3f!J6B{pa*
zAn;i;GHTo6RFJ>JK9YK(Rv#u(t3>jCu3NJ|f7DNORO23fp3^u9h<<>wmqUU2y*BqQ
z|1Z*#J=TidTnZp&=mm4`N3Pt_#XJLv0pM+=%B8pXPGS5ahy2=s9HZ1RJ;q3G`)wgU
z0dPvu5HLObC4vww%myEQb!fqT@w5YjX_3gcI`)c6VrNB3YPjKVIun8s4UD@pT9#RV
zOg&jF7N|f$QzjWWD7If@ZiptvuCkzkTC0RrW@Vtt$@)6mbe-p4sVXjIaGz8E$H1ti
z$~rTb>-gPLjBEx7^8v9V!}e8^aYpes!l#+hG0BPkHYZp?UxN`pEsC*|Hqb@$`pM)V
zSG?7IHcS@~bKjxaNVJZtj1JDE9K_&#UjTuh*xgrz^9ozdu7Rm8+AU@QBZiJMp^`2z
zpV?2B<#4+MSh#r!w9icn>@-2uE%<+9RlfQTHOf1}(BVdg?bW4o%2Q8FaPPjlFt58d
z+xBvIQVEFS%y3`n{1+~11R~o`s?#xI#vYduwz{;uJZ4J<7}YT3c8W%^l&5r29bZSb
zvLjlNc@3l5jeim2JsW;qr%IhMe6|PpK3QV0-a5*Pd84y~y0TUr)ja}uWblutNC5_+
zi{cig%ZzTfT4e5xt`^}#WwHWbai!rCXHi*RpEtB7J4%6}uOJ`JJ<FhPZFuuM3S7IY
z=&T9c*1*Koff&_Gj8ozsgmBvnCg~4L=v$NjIAA`GznO0pOI#bILl&~8Yg#~S{umss
zE4FH_SwsVWSGx*lKTv3PGp}9DS?dfeFx*eC-WV4i9VGI3zv!jL$Zx4CHx$6~`^;ph
zfW*UA-G#QQ0#O;%SX|PkSIcQs^t-`<^P_`aeaqldh1<AfllG&8V3FeVI?!??Ng%vc
zyHbB{DSY2igQ39-Bd${^@JJvLZ*Z<}(-l#N=@|Rn{GIZd5qGaK2kZ*U(R&(KZC8c#
zsgCTh!@}{78LJ`?O(J(%t7TRPeu(z2l|(M;*pN<k`0DRh%-^bM*<5DO#?L&2VAgd~
zBo?p6TD%k>U*=~e3TKSI5xU`e8!SG)KgfN}i&|g6mJv5td9n3E*kKLLE$O8cRwxiR
z&@_oAgxAU;#CHX!7`E&H!MnDec#<aednXMf(5Z5L%UJ^>Mdv9f1%te_cJhKIa@Oy{
zhfIfqt(XNb;y*rqiwLlNAWo+&yit}}v^K1(&K<hdgkCHgp<Im9|BS116#pT`krymk
z1A^nMmfas;4l<}pxHu&ntbXNx+Nkl!4!Fi6N6$$tlH87H5ZR#8y}FGYUq@Ss{XNLV
z615gm$MLQ_@%a~9c<fRagvqC^ueNla9-dj;K%`*J<dTTcx_!qt9sFzyuh7u6>?ZLN
zXEt3%(UKOUD(36^9uPXvWt=^0lZhy{&8*{Wn3Lo7G8>Z*W+k<%6aK^)w|?U8{eyN~
z?%GqmY>~@y`kNn?!b>_6iN1^^yY~H0Vhu|qzKBwIJ0e9SMQ+hS9N9f<h?>RA@@>H%
z5JBzozTI~<mHi+!XNr&ZOt^b{<Ked0`i8eB{rqP=rYc;|VVxlELwC4DV~*)sprpGL
z^6#0z5AG90tb7Ichi2^cK4I^4!LWF6#`J^LdS<h-yGKAcV-DVg3~*%e>6?2~L11hJ
zO#m5HS>tb-<t(KG>5g4B{laS_^_mR#IvlnCVx0xpL;UVN&o3yN=JounC5eU3uZVZR
zCQA;E7QDl6CZV<mBKQi3z$5L>EP|Qk@J!?DqWK6;(V^o(<PB`+{zjq%fZtopeBbmQ
zT9}3G?DuO97b(_nC0U`1itpj!0RM^*DcxMaCjZZI6wd%xt1$Z$!orRA_EKDGYb5~;
z=uKYvqH;G9CF$QU_DOoCHv{zGh{z9yk&GYFvHZR9%EU-Z065b^x7;<Ttxl);87y%|
z5Xwq5j;Arhy`O|fYz8X<ebO?FeKKu<y$84B$-S=VYV6l~H}fRa_)1k(v!dd_*Tp0H
zROiLBxqOa}!^{J7;T}Pmd-s`tCu$z0?(;e;MV8VDny7F;YFqX_liM&eZeQ9RWXZQX
zAR0PSVKy;)M<oqo<r%T9kM~HsK6K!{ddhkvv*=*e5S$SL-L4OBiE#c<t*NgWx3TO&
zCRAAi>gOUviQk&|$3kuLIFZsvptBK=JNA}P7O6F&i*M-)?`z*gJC{~rMSf+gniz<z
z0s}!CH!*lDOuvs%EohPn=hpR$;pBfV7ijb@mPO$<sK6uNYp#9k`K!!sG}juW9_DTn
zykfwz)l|`1eiJ_&!ctl~pYTFr8v6QM?QPrpzf@RYc|fB0s%e$nu~J=-!{@)!X9V}k
zp6vx>E0F((4o$RqgjtK?hIhiUmVlaW=ZZ)#4|4{xR=xIh^iVg8VkO%AGTnZFQ-ARu
zfu3#3@9i7^et6Q3x(V}v$z^j{Z1WPj&7+QSo#9@EjNOpV+N*=%Pu6M1`7=U=nr5V~
z)P8^X|Gr_1jSogd?Z_c73C|DirYw2|vK%zQMI%{4614X5uMm%=nnsm8l^7cQu$^7X
zw!kIL@*h7E)s3qJdz*qxR%1?=^>!2!6tp;|>jP^u<=<4q4Z2=h*92O>Z(wn>G}EV_
zjU6_~c5Jg9Kry#t-4M?|AlleN#4Dj*jE3~4_MqOJQj|6(YU)Z^Uc(;eCLR&V-|xK>
zikmu3cX9gpEBl<WcQKFDFeOeG<!kFQ3mj`zYA1cr6c_!pwfug3D$yu9^>;jSG{feL
zJ6j{+;n>~%26s9uRVlA9%N(5FQu*D_P|Sr*eARZ-uOB|H929-?%fhnS^Cnqne2rxG
zDj*?JbKgC=C9Pqtu}d+!H`juE*-v~SqkQy&qd%3++mjo9^LE1PXM1f;M4R@KdheL0
zeJPhG?&tiVe{O7hl1t-dg|$<cn#yyCL9@HB^+zv&u5&_01J3WWCY6p^fdKnLx|R&^
zf-uAtIrWmrv1%37J}TS}-DY)Ok<~!mo}P%qaLwRgS|s6X*1Z+|Mv&|vO0?UmQos(I
ztf!h17?j+)GUSzIn!u6cC?qw!P+5)8WcK3v>~_SjG*i8|V1(IomsWq$7r}X}kE^wW
zf*`$;bQ~{b;h<bLOMd-<#O9UZ_$ldxJbcS{rKHP#j~$wE`cUHd`{JygNKQ820W!dz
z3=0o2t2kF(><?Ua{vhN1DWdI@RS6aD-h+V9xgw(N7qga+e^dRaeF<CA9uNF5Q^QGi
zE5$gbb$=*9?V*S#E}*&*7A|&^(pF#H@^QgrGgoszg0EMFIgR*s;eGOc$9<l-M|ul?
zw|L_9!UUuGwMe2P$$C43J_>0;4eiWljm23bjm3nYA}<idYFZqThb8xwvy`s3sY^^F
z{O*7fE2h78jIow{Y}<VKA9NB?A8<s>VjhRNBGtJ(_QBnwL|=z|>x148pE2b2lBixP
z>8&y+mYMbwz1bcrX~8u5*_zy&F$sBjZ<`88#l6N^#w$o>hdt(NRX=PfkeF10AnjtM
zr|b!HMI%WwYf~(%mv9%ogv>-}V|NaFK<pn!d|j(7Kj-YnIC2Xihhd)QFh20UCm&!z
z^pYyez09!p95*3B%Sut+@9Pi+OAu>tR^`hJABC9@p=$mD^JRI1C`k(kRS^^xHe?1U
zUWo)`-Ve^VEm=FiKf2M+{y?sc6svUmKJ<pAzC%g#+I85p4&FK@GF(R*{HZTNV`p`6
zK?}2?UcACqH^Bmx#CMwlxCR&jf^Qwz<%<9#jz4x{8Mn;zz67frJ;Xm+dnnh;k<!25
zsU2sWqu36|+<l}$A<>Ibujo)q*1$PXw#I?CerLG2_7vGzbd>yKlul%o@d3s<D~E$v
z!N5MJ&q}v(FZWghIR5w`$aM+MLglD@Mk9^%S$T)r8OxJ2)*o~GVo8j}uLPK`l?N6?
zn0|3wTe!U2RMX;$=nqJ`@I;vQ^y4EtA*>bevy^0ij&Uz8>QgP`jg%fzSUfN6Bb`7J
zm*bs^v9+l!(2oyM=C~WmoD_pVnm^wmd*nch4Mz`MgOu{Le~LmiXS{l+)C;s~Rp1Ga
z0DT7lOGW{3#)y#2!=}NYUECY@K=A4eA?-o|Ted9g*+HQfgD(3}Bw)&esQ^Ig70}cF
zrOQH~xo@ETxAD7cx7Noo<^$Qcx4OpD780LpS%ry2m>&x@i3mDrSf(*PZePJ`7A3n?
zUV;e}N>qx>f1Jal*$xx_PJE(8ur5WivX8t$^B~sI3)p!$RN1=!8todx)V*~!_I>~9
zeES1}JS<f19bgLjojrE{QTQhzyVcP^m$H%nr4I<ytNO;X7TPL6!3`4vdri3VZA$UE
zGT|YE!qB!~-`gjUXp=#Qyk>LuFyz{_Q!dYaYs$Ag_8&Ux;ZE7h`7@l?%GsE$4*Q_z
zh(MqftJT#*n5-~A^lhuiaID>3-`QkUgyYo3FuVaaJOr;$*qRDhjLr^29Ei}}zIG)~
zC}yu!0oabQpM#_Eyb2ZlqME)A{rnQTETouDrq>iz3$LS`o~QbWUocwkYzt`$wb=W|
z6!%GM|BwK6R+saSrHIk{5@2fT2$cB-CuT_w=Cl;?Ft+omi@R7(6gJTsWQeHQ3&bs-
zAIhggS@~UoHsK@NpAwE;pxJW_@*TYtC-gfr9!iZ(9*{`7rmB9NlV@9D_ycDb>?`&w
zfH2j{9hOB(Vt{b+ap|~ef+cm3(i@J{b&Y$CjNysw^!Fu!TnGc-%GSd*l5e8oT;GNK
z!%se5NGM(2IM5|FZ}7#qUE6b9pAVS39>jSWn7yIGKsxaIv;dR;^&0=3WJbuugSBzs
z7Egjer>U0bEWM_DJFh%PK%yuv8elcj7o@fSqg`MnFBG#q4HxSJB3vHOaeQT!E|uUG
zutGRW>~oTkS0+0eo4V^5h+A#fZRBNNc#+u%c?drsSUbIr_ZB}Kz-<L)h7vCfkyvRa
zbWNl#${9r@5-ttWJ&x4F?=UJCti-bxcFTY~hZ}7^6_@Zf_BQX;Uv%7V5E9%49y&Ig
z>8fYCln@}bJn7VQVzy+8PY$xg+-^Kyu0b9EWKe*Af#`!iA(@VeG1u~({eog<<nB;3
z#43nOW9ygga*nuQ;4v0O3>($YIoslH86%!+`bH7e(^RewaP4D&Zm)P`wf@wmD0zmo
z8zhk<MVf-py%By>P_W3#F>VG_z@1!3<kI_g?e2SDpcPkwY*azK5F^u3WA|K{oix6}
z-SO+za~u(L+nZ{Y{-xa?bCKZ%tvRj3AEl2>wNWVrI+aAwwdLKIjIvAK&0Jnt$|Dy|
zMA{hZXgL~@HygrPWlX-`%xm;oi1_8~jXp32&Az-+9o^7<jRdA4n%L{SM_u_m@2FOj
z;jyyFQ4Nk!Vp|F9Hk1sg%9BdChg4GlleV94UL0WZpLo=RaKh(aH-Wyc(|{$$%aE&^
z(c|ma9lM#;u~=^xc>yZ3s9(I^28NPeh<8edA!>r999`ehLJ23t8>997&F7&Z^@zc&
z@@xBj`5-M>tuwM&M!^UcnvcLz%|rH3tftIfSSu`yQ>Lp}<BVW^T{!7bdWgSH4oYL#
z`N?z5UVg)Qz92K~8RTGd+YQ(tz}h}>^sKIcjS7`7s~X_Njm}5`T(+no`nMIqgm^^^
zTroFrf?1+bYi9CGrxC_fD39D>iAg!rBopWh`u4ny1mfDx%ybU>vZtA~wyt$-+>1VI
zsW5To$iY|i^6elF0P4%%SF2m4e)GUR=FD<$P2VF{SD?p6Y5Co;Kfu0S_m6>=GvORx
zU?3I=4_h!Bt0R{M;h>{5Q)+L_bnv54%^Bxos-fiVS|%Uk9OcQs)8sz4pU!n`k2RD*
zdd7hF4iY#GbNkAyLF7LDEP}R3wUYP4i`RVxutm(-wB-#Ox1v5bC)sFy<_=@4lw53s
z3`eu9KMt>@9)%3j4=Sbf^Qz@R5blLfRUfqVlEQFpIJhcr4Ait=y`oyo5hmw<f<t`J
zx9k4=8nUTttw~`|)v~^2J(N)XBGTG7DOUDir7ipv6VJhY+xOjD)0nBB@g%d@k<!l&
z5cP;`mmkJl*skds{R7vZM(o$e(>jWpRF=O;g-81)uys_HD7$DHex2PXGgs{i?NmfM
z2pQk2UdH&w%!8CZ?oL@NA%8#45O_zTyGr{S>_#x*YUQ_azO{6!E{+;DB)64E`=*Yt
zCY{7Odoni@bHVD+anM6{!~5N#k6vIpU}CNF<}dr!m9=M$xn4AEQv_}MEq9ESd&1xg
zfss>|s^FUyX(Rp5Wp3opIlr*w<#nkA>CzPkqXX?&7GOrbQ;C#qC5<+g9HhuQ`hM$W
zw}oBWRN5Y~uT}>3`SghJVpFYYt#Og7hy-M;*Qv3{K7-XFdptC7CK)Ao5hdhw<WH#w
z64#6qyQdWtQ!Y3*CBMcPIG5D=kkHMNTOwbn>-NBHsQDW_of(Yy#jNN4Cdj_O<p-i|
z26Z<;&}ez{Tk$G(3y<oVUh$Ko#Wq`(^cdOsh=hnl>i*IwNG8ytv;HGrug?JGPltou
zM4T)8?DUii_-S2;{$|L|FH%zq2|gDtoN3Z>081F-mceu<D;Y9l+tx8Lz4+z#dXB`;
zQ}+QxhkLUEgJ%PDej6#tN<wGtpFi7doT;&ll>*_~y)*i9Yql4hElPqwzLdw=={I-Y
zKuz*w3Q_s|p+e^1tTL^z7p|zBdEj3@iV$l^ABqVV<!!7qy4~z6@hrJb$t^m`ValOG
z1N)-cP}Y`S`{(u3FpFPQybPgud6p7FVSS-`A0-v8>!|i!iV7Qv+!v}$JJpyobKCM-
zLV=Pp(JgS&CP-hjqfDmF$3^)kHs4G%kJE9Ss22y9VY;2#R-Jk_E7I)-DFMh4gROY|
zSjiCux5kkiC+5Y1k(DF&1lLb&c?cjxo8Ue*8x;xMzQcNW;iV7~Snk0gUbgCKZme=|
zr@qe(K)3+nk_5<;`&l?gKR(6N;9w)1d99s&%tPCzob9WtFe3NGj^6qJfwqk1QIAaQ
zc%ue?ck+S3OX~a&hi^~k#IM-HZr;-Tfui#+z``LhoCfs2-X<m|*(`+uhlURt*L>B3
z*PZ#jR*sRmU)!b+^)A{OI!D8iSu@}TCgAr$e389fv37b)po+I0Z8++^v%ytX+0rPb
z{-%AA2z>3kdI6b&+>C3+!U}Y@nqZbXwl>&E1fJEp)c(wf3Kr$22;xQ%m>p_!?)Haz
z;=VUr%bOvf3Isl@iex3fd!XaQkXG%5&lt^tqgo}qan^%d+Z<7me?ez7FXg}U4n&jz
z>e^;)^1y~AY=h^c4&;x4vXT(ODBC&fZ0Bbi(V8$&k#`mbM@xC#{v!^k$E$H_>%%%R
z?1oUgpDz6#-F@D1wuCZ^gEnwuD<;Z98+(De#pAKI$PtqHuUZ2}nD$%7at!Q&@4KRF
zsTmqf1{<B_4B9U!*|zslI>*DOdID7|o^^P<ILcgSckr4aTU<gZ4?iNQ{VW*@@?AYP
z2{pw7++OKuvgS~Q+YghoE7#X+*d4+t>n92>8D^F05i4leBe<~_oEK|{Si;H!T#V{N
zs*<-^hLgu9SQ-lK`L9t8AJy*n;4=c?6CgqP0b;d`pWPI9pY$7QxGIzIScc$~lQfS`
zEyi7c<MC#e{gnM2`zKtN25y2{Ot4I%CK}2^#dVyI)qqtf+rxD1bTJ-ajx}Pb2=t6L
zYQ%S+!thgknhL}{`IL4#b$#Gjy_q{-AHiRb;<}s{Xko0wLme!c0gBw7uM7BJ92tzS
z!=);coq8RxjWW9;z+Su4GC1omD0%-AbGy!uEX2YZr|aHWy5p1EDu|zEP1(fygO(Zr
zh!b;rzMcHZ*;f(^1fjSW3>SLcTNRe;+pOgdZD7Ptd;A7AAEW<w?Ivg8LLt4nhJEjM
zTqAm@vZhB~6?5dQ_4|}Li_^S9^S)_is)v!>^AmxP?!Cvl3&3@sYSFV7{u4ecD4;0h
z{|1O?q#$4R>rK+g!m90Cnir>ypUwAJ`7Sc+ZuGt-08KM`*lONOwrXHP4M4u-$4NAB
z+KQsIw*=>Q*uF6t>%pTUGZIejHT*?+6_TtCj}>GV=^J%1#~W7UTt6I@B>USi_3YEa
zWp{MGt=oU6U#NY0DGN~39aBKPev>a(#;SCBxn}X4;Hq7|DJePq?N*PAn$t@xw)2*E
zg+=QQYYpgjN3xR6P~}-)vWuS_dsMhOYZw=E$e;$2T48d=ApF{2{-l1^;>EG(zz)Y9
z*g>$gKnEJi-wD{3nyMU7tQ8xT0R55y@Oj1`#K0Q>#K(RAUh-&oT(c2}?xkD4s;2{%
z@cc1q!bf=<>WfG%d<?--Rm;cTGJId*<T##@FY%{@Nk5$JCat|R&+&d^9;1*?AC)#>
zC_JG-E68rwBlC-nSr<k;h1}vIzDH_&6B?40$VRK~FmPrX;7KJid<9;QfmnDZ3Fp43
znpm5eyM*rEzDyCfEo45nNim&^xcRH6@UsdXs2hNamHv45YfU<1u0f9SyCd0lBF|tj
zATHxThW_?53{>1wk8j3hQk1MDBO2%0a0hM1FKP{pW827Tq$97)_;}U0_tTLH!xEW}
z&t8B3eH-%fXuHn;1%lUoVz1QGN_;cusSQemM4tLUpumQ`u9N-erVT35HW$Y%R(Oy;
zOvt8TcJy-Z5;Cgjxl#rT2bwd*40yIn!|zD7Crx*v5(4Cc^d`~hGV_9ODh#25TehFl
z;?Ckz8;p0oBNFX^tN<3gf^}+tgA%9(oo({EWErNf9T`LKl`jGs+A?eMg0rfaz)P~Z
zs9H5uCg_U)nwq?gN&m<%BTbH6i#@h?^|p)mBEx<;w43p~2D~rdA*?uD5FZ+im#Y!c
z@TQDdQzsn2SAmUqLwtNK{lmbhfnr&L)4uuT#BEEP!S6XQ!w^)`O$26>fFq8oY*Xpz
zGaJ9g;FY|Q$|h~>pm1R{I%+PXfUECxGzYZr$$2S{%=w{DE~fGXLe;gQ&$s+E*AT4&
zh3@u5+9t;lZ#U2YLyJo+ZHpu#W?*YmA+-exiK}Y-N+G!tov`<_qb=pc3cVn!G|@DY
zU32s#QZ`wrq{F49rZEA{S#-t1$?0E=_5{d~`Wn`GDqqI}uTG^J5xlaBO(C7&0f!Ki
zfAaucBR@tNsFSwFIV38mvv0Z9dFeQ*{XUi1p1LzP+~g&LX@Ui&BU3N)@f|2#Gp70>
zWgnlASUMLIj=^33dcDx5GF(%|`*08M4%Ql=Sxv`TRUKW;%8-eS4(zm4P-??M<EQ$L
zf7xT%TH!Y4HmNHQzpWRSJiAhz+9K-M0}Y*{wi8zbZh%`CV2Q|wqhK>LGoRN#bXwcG
z+6w35ME{dE;?{NkQj^sdYXl_ZL*J>v=MPS+xCfy&=EuNwN^kg*e8@Crgaw8~`{|~q
ziP@K&xCYr}C&<BpSr4M^-FL684l<?jsohnLlUObMY5^nN1B`9Y&2ukW7x;~Uvc0`d
za&%!X85D1JcbB#QEg|kNVB|Kipm3*H1h8Hyk=mjg`7#}>EKYwtyJmZx6{V`g#YGeE
zap4tR-p-^z6C8{Q`zjtJ2bi>hi5EG)L)>ov$k3IA0`1%v$VM(Y+D=*<ZiJm5HtS7!
z1{oudoKSH1Ml4!t6T?^hM;46sYL}EGjbE=;Zq?kJHtJW5aLTMTz2=?ejz{`+A-G?E
zp>2u{1PueKMB`a!yalf-4~r8%bjC#Ssh(g@JSHQ_qmUpiQP4BsfP1?(ss!b*U0w>T
z%5l8h{a$a3(X@M3GhTpeJ^QL|+{M2*qSp<LkJvlMhtSk+qS~~bi#^QtUH{=@sO=Z%
z6GYLD+;`Dt^}uSyeQdau6M4F-xno&$@V$4r=#|ZO#S!~Dz`Sy!&k|(ZDz4}?n3WYn
z>!HbN4=`k_7K&ci?7!GBTJ~yUd>@EL#ih8GXX-wcR&8Wqy5-@QaVcx1AOwsty7Pta
zc<eM`JzOnM3yeWHfw~$r!0btmW4y(k*(Um%yw%Rp@Aj8~hCk>riZidB7E*P@uZsth
z1VNnt@ocl_>oZUg+nj~lY%bwOO+5LB2M7BhwV@1bbeX9%&t=Pe0<j8}v1)2bP%ce;
zg@uzGaD}*IUVBRfpv6t6-p6{az|}h*KC^7u8LxyEH(J6xXZwv;-LS+{R_A2%N#+K*
zIo6{T>;Tt2p{C)x8LLV>-Ol1=WmgQ|?q|;=pUD9(`$epoD~XDSH*_k%La_xg2UP38
z>#2>w>bO^W7*f!$Cvk*{d)Cz<H@eJIp30y3IJ!vr?QXx~Ua_&}MkTwl3|oHJmp?*v
zyD>7!RJ_5leX4-yG5o3G@+7{=QRo(AAGsWAnguDbH7(rCjIfeArRd;uhxz40-f$RS
z_5Fi05n*@g=@I(ps?nEymAnH5MN9Pf;_Z4v@>fWEIotG3K+mXD0Vl?|JN(fTfw{dt
zg9=R(9!{anYzSB$|H?9YaQD>*y=b3rK+b(dJh3<S{H_7NEUdxD!InM76SZ7#F^zQ;
znXqytsebfgHqi=jk8`0qc0%>+QGF->9NYZZ4L>A$Ax5b9v;2S2PzK-IED!m{`@uY*
zj9{4sLYz)vs0!vw4X*#T>|=W4z)SleeX=4Z)SCPpTaZjNu0H{}0MjFGNa3f+d)NZR
zcOcvr6BY})`ODR>4>zEgimm_e-$oD%3DCl5d4|F?0g6i2B|-$nk;}l`Z%?dy=}$^7
zpi&=DG_kX~j(q`Q#xzKEI}S0QvyZz*eH=9h)4ZG)>q@fwly@m4clS!IKa}5|k@yJ1
zUy$Ueo|*>${%|K;KPWQ1y7V3}cf|2jrw5D#&-ENPz1yP4W%=Caan!6)+I`+i6}%j3
zjQ_|^4^4mFM5D({mMW@b!hLaV$eVj*^WT%7@`)vo?w!1A@RfqA1_3$1$msFX|DbK6
z(p2&pu>H>xg5A3f>SU&mtV4)ro8tE%`ejF<M2iJGb|A{4dL4X)gY>uYVBMNd9(u;r
zH;2YH*-AidGzHW~PgFXgmsg*=o8e`<9|g!_8V~eoqN66lG1++hp_=Xmc9Q?*!e#i}
zv#7QCUbFC?t~wKME6{TG;Zq}@BducFaVDx=QSaEWI>LTVy$C{Vdpg|T?z>-MK6SrL
zK6g$_KWwUitpIc}Wh5W5V1d>Hh~@^wKM$Y$4mCeFx=wmE`UTL-|0SAmJxO(y)nSED
zhA^z^vwmzO78g1^{;Yg!E}+df^Lxa0HQU{aA!}~b09*7<AVB|$;l8%W{6gh!MzQ>9
ze`>%?L&DR3Q&iNP84BdjJ!>-Xyk+GuEE=u^N(|95qRop%`Nule_UiQC8Nw4T*?<FY
zWoc&u=w55i+9!t)iTo}`v)jIIN+^nEq9*v}ag_a&<QY4<&EmLdV#7<MQ6M|S1SQr^
zSp87ieU&mjJN)o%LxzSK48q)Qd+>#&V$CjD`z*hTNbv&VxjGW%hmd16YgT{AqigCu
z^q;+8%5WHtk)en?6kvvTe(2(VrvQu^nEYCr*x}0vWmHl-h1Q=5<$u~Ik6J3flLlaH
z-#0EtG4$Qn>>;n1Vg23`a8qv(IA>61$-%b<-E{Q;7eM_fd&BaEN(?qzM_HC)G;c^N
zp1;Q{%B^X#p3Qqj23Y75H*()%b<=wrG#0cr^k~_%5==`<fflV&N&{?qpDfU32(O%$
z326)i$#GoUhNROSHLoiLNb^VA!EViMHpb7&LV<v7fbwmXu(QOK;6|CY@Y1Nm0qYI&
z)0A5yk$(u<ZTey|i-R@hwy?s%!D?U1(WGcw>IgqDmRxjf9<rIm?SAzoQ;#jBz;pOB
zEPUCbd7N_Yo;kx-T9WZCnVg?And3AA=o|VHsjjF}mvHOgP*{0O;Qty@d?meLLK_2n
zc|bLW33rrMeV#rEngwmvy=~2RAF9+)BRPwYD-uVy|7U{Fg6>~1rOp;#(`m|#YOJ&0
zPxOOxhXz+uvNFN^%4|++tgyLcz+FrjJ8Kg)D?<cxmNqz;0G6IU^WB=>d4!j}MqW-b
zQz1z41fEn|s{i?xyG}UM?3L>T`*Z9)$Mp2D8#6%j4GDghTl1W1`YkEwhKnwe)o)kl
z_C4uewYNL#C0J^7GPuC`qXk&@8`^q5Q3+jWv*vOmTZ);R^^~JIXg~nSRD|pyI^w$K
zIkTA^GA;1nx-DQ^DS_lz>d>A#VVz`uS=gzEb_GzI(lq#kW>gN!XMFux%YQq2bl;Tr
zG=)b`e&`_~QF~%o0yUID;<W3oYrVZJQU!GN8+~~)qFu$3mawHO8(Xw>)g8qvf4XUA
z=_88@)HV_pt`%=&v`L!%(0cQijpU6aV-Fq2BSqIo0U%Tf;eYuH{>{!|jt{WrZ?*6=
zq=A%Vslb$wyF5@v@fR*8hy;B<U5(?X`sB&cFWsPHAf?1*dN0}EG1n-s?aBTh%$}tR
zE5{s7tz9Sd7GIgzl`S~p%`EO9vggB1f}0pZ-vNKqin)CsX*lRYe}o-ozsC9}MZP3I
zla7%6S2R=BoJV01TQ-mVlsw{jau`{Bn3WddG{o?HRe=_T*9InhrD_o?6Z7d~fM-mh
zPYE*8#WH8{f~B5K3IpC}J;~cXdNouXF(H%>+CTqBgwLkwV8GJAz>N^8<;l|rJ}+FQ
z->?HIgN|h8^R$YNOfpf<xc<m(v2K0d!7x5x&wlN6?&4c-OK>Ewj~%8e)-z@hI?pY6
zKpr~`nl1Xh#8P5|R$znFCeSYR%>8B5#G6yM)zUDl0DhmZl@Z0nz--vCWUZG+6;`qS
z*x<`|+gO>{?7&*4ItU}4u>P%~Nnxu>8q{yYnbw3qHLw_X2Q>8GzDG*OP1N#xB&bn>
zzX7ZkM{8q75>#84-)y`y6HH#%8W+6HyaRGcWVBXQ$!Kczk<CwUeWeH4v8B&n!I`v7
z)C;~mLZ(~a1HtwV&3{>??w7r%u+W61;V)_we(%k!eo;l~H4)oTVYB$AeQ8>TA&@KP
zw)?pP;U7I$SzVE40=vq|F$~#;>9Rzq#8Ez!<>?ENVr+{xRFyQAn(|MUSB!UOdXmJa
z)m&9bawIl+WOIO<(dQ+lD?(?Kwl=PhCSMFDHnl~;y%7?QeDbMibacl@p=JlKN}}6{
zKlp!4{x8O1z6tK6LMo&z!754oghmC_7z}m#CgiEK;o@)GX!~0SfCFF&b6dwd<5o|<
z_@wTI{-|Z_3=VmUs@5~4gP6GId;~dPzEG29V?T8uE{+3yANbpT$elNZ;D7PkdHeS@
z_XzAVik74QDN&OICUtAyi3lgmfmc;u+s|g}f?_vM9$W+XIE9y5rW&60R7^*98#uk2
zFrfWT>Y?t>_FWb2IV=hJ$4om9_2#oL*iT1SmNRgp1VZWZGy)=fxKI_51eIVbF!_uO
zdyRbF)M=eCcaG(*FW284#WNBa|CH4_fpS~KCj0$c?sZP%#$2};Gr>T0@(jd}d`{|(
zN9Y&O;XSGqr(@8M*j{b<yxN{QX4x#3_;vuGiJan1xFS9bG0e5-?(dr_0CMZ+ELxka
zCY=AE1A=W<$veGQH=}kYj&mRgb4DIy>w_WZ1$AukGwp{FkM8e8K()yUT!*k}xVF8i
z)uR@&@-xp(Ay26DGYIy8OtcNG-nmwu-EFj|%UPZZ%cmdz!_!+wMcIAt!w(}Mf^<rU
zfPjEfA`$~gcXvoPNH>fK2uODi(%qekv~)Kj-O|nPjGyoO{^N43S<HRr+~@4L_TJYO
z47rZjwl6vm4p!?{pM2;hQcQFg95?k1t;UvrZ2`zdK(nB8#=LqLYFhi-;iu*cK5J~)
zjsO439$_X9ziAau9$d7rRd;2BJFWH?of;3Z<cT036KZPS47P;iC+?Qp;w``Y4EiBi
zF@XB$6>9G)I@jPcME$l1-9qsYU;A7_Em6VpZL4_$ZLWI=A?N|dcdx2Vup~i34npS_
za7Oh5%|-S|ts8gIp_nc1YKQdWzUqfMSaQz;Yz~H~PYmdd<dZ->vC?1uV`_n{O6aC(
zT3+tCvBFjEy-!o+%(=M;^%s9kE?qWB8B6Y}Onnl;O!Z!|_XF!aVKcv;Z)>iY^_&Hk
z9ef?Z978lgNBMWeJo!mt`{lZ$Yw6KChhDl2?HUYJ1h3N!rwLZ~=(@vQY;+4F&oqIq
zR6kzt9Y%3g-NwM|v6yO;jzHL*Qn?UAZu65b{J=I<hA?XsfkCc|92}=kl5+b7-`>fd
zV4JUqxD%#};v70}zryd<=t!P!oxyoBX6|&DewFkP{A5Ng71Wq%4GpToF~^ko!uh{F
zn&{j9tRtSoCoHHYo@Wx`?*yB8oPFEfh(?HLmD<Lz$?!!lHH+#mzbU5v=#{}N{W8E`
z2S&K4PAq5Z_8$KU4BUzmNaIr*Z9(-FqSdB~KpxAn@D8d))p1YO-8xDnBoik1VJsE}
ziSq}IhlLjd&)+fDe%PG-I5=6C%wG0|RLn^}yH@KNI67Nkety(N)sB>R+NU*=Sy^xW
zun?8<#Q_<lR+JO%YyY+tr94kQ>NB>z99rg&4Di@BH?>**A?6%fWOV!y!MMFdBt8Zw
zms#{XwfQ6`4HQNqVQM<0GQLS0;|-9&wR2?~+9Kl=u)wGDAEx*;ru5hY*UwU7bbNCw
zvcBNL&XL({%PsR+-%!rPjd~rir1dLnNy2pN^#0tve$Hpx#RC6xtjwHW{40rI`{Q5n
zUDm3eQ+?CW`ng5*Te14dTJ8CVnmN93aH?KI_`dI#I+mwz#ntG2cMUg+@uMG&@#Q~~
zo|>duRQ6E<b34gE^u+waYjMx-SYsZ-r%{$ma&GkwYfggtBg_^*GV@4+NYnNIMh2jU
zP(!=th<D2XxrW%sGVDsU9AJ534`FN4E<ryB0hogCd~wF?25a8+bw!^T1(wQAbJ5Gk
zLl>pdBcXFt<uWf8^s_dq*v~*UogB0`>~JtssV9GwF}bsU#CBg?mH#JCx!CUSXUM&S
zNagucwVprCo@^Zm?jWcfQu<VPflaPsN`DwLCxe<(N<SWV@qp!D7Uy4brcfW910eJ&
z)7IhIXnV{;cBf5|c7F{*rqK8PGA-g&G-!0TNUi7s$~_Hq<3pdeywHvU9k9tW5MZzw
z`j&SRaGvt%$;5!g4$1;?CA*Q)ww$%k#xA@b^-YDlB5b7^%!RzB?Nb1sQNbrz&}*B(
zD&t;LfC~`r2h%h@<=WpcbE~i7kP4(icU4L8xd)}ohp_75)$;!!Nspm<A;-w*yu*XJ
zrB<7~@1_Tff0(}#A+a3uup5s~_<f~R|G^*n0vKZ~$=#J2;TO(xg$!_Fyhv4@m|XDa
zPaU}08@=cQT@AfLgaq|Z_FGMfcJ8=_5jO+vDcY^QI9_J|3u0wq>bFQfK@NpW)pL_9
zRn1j3$JY_Z^Nfw*A{~e=<c8%Ivrah`=6VXI_Qvu}EhkDAd`>R!h`Gw!V68?`ttMnZ
zHhZ$=ejlOb_x>Jw$UPOo|C8_ctQ#8`16$GeXQ6C<BiGuEeJu;!%<J-=qN+IXg4Btr
z1Y$Vst|h*M5>a8TPb9iPg(R<DCaK7;eFD=QbLGlSK0gf0+MnJB^iTlpst*!GX0%b6
z{t@f;!_SK!Yxn=5W3An7(ejBtN;;7)#6dy^O<O{`WmD+eFK?03?HfF0`R2nU0VbK@
zA2tkoMy@uTmW#W^uwvx5r~c*y_l20@?oYfs5u?B7=oewF8Ec68$A3tS5caK;`a|Br
zLN9u)g&1vl1y_Y=a~ua2;6#+NhbH9R%5~JOtZCuwT;0}p<vfJ}F5nT_(4zX__7Y>B
zU*s==T;F5sBNA8(%K5<a)&={sH80M;Supz#I}-4w4zD8il!+JxdJxnh-ohk`?o%5_
zC5f{yfECpnrC|ixHlOedObwSGzF|ijkE>Q++9}CPV2QaqO%R29fF)9UAyHV{E_^v;
z0x@e_bO9CYJ0usID=jZzoH9VzojkCkTIszo4%!-Hh2uA-*CP&Vm_3A;5<EsvkR5Sn
z7-HX-JxLGt{Z*yD#UoI6VHxS7!VNMVoDp+$bL+qP)+I6h-;A9X`1#@uLl6{d1vIbf
zx~mq6OyM8iJlpu!0r?p(spx{X(OaCL|Ci~zHw`6Un-DvP%!gjG{ITpNS+{bjm5JMo
zP4OBkYKKCg^>~{2nUIELHXTNo15U3v^k(KpSw@^HX(37b7wb<zVW$Jl2MCA7^H+_d
zb9bd_gZm!NcDLew$R!}U%Rt^ZQ?;L;^p!uPl73hy*tdn=fKJc+{|w%DHR^o<QfN3Y
zqzs29VkW)9_LajLC0ZU|xJQ5y<CTZmW^4zk(4z1^9c*tmU%Ws=3zfuquS!tu{|Oxx
z`qdu^{}Z*+Q$t|v%y4ACyeRnc<wYp6=@lA!f2icpTQ;(`i;@erYBxsbf-*t1yTi@x
z#YTZewawe2CiA@fJdi-{V5H?ZtyCU_{v^cQttX~;mW2;6eih0I7_W(_t>1M%qv<TG
ztBc*Geu4!%MQKa-MK>9dF#Ibxpb3)8<R@FLW5t}(+mWnmRiYRO00hk$3f&~yOVFYk
z;8L^8O0z_SFN7$08VhXog9&}CG{;iP{)ap<HawrislRkE8)piCA|R@aO7s2CQ~mv$
zB7{w9Vt6H1?$j(H>)G|iMTroih34!6|1H4BOA#xEu@V21+ap($2XMV=&X}qqt7#Z!
zHK9}p0MHnSo#QDHp(!7BnG<M+t6gKHE&IKe0Vi7yiDG(BraIZSdqi<D%o2XnOvapQ
zgbM|U^}8{Q#^^6^>&MVo0uu-f{a!xl-a#{=t;iDeT1c>9tF(h9zrg<R@5o55c(xAN
z5@{Jl_ns+HK>9G89pPD6@&okCj>+_JcDDO;E$JNKmy!1EU;Ck~PSI3%kXR&X1;k)M
z9w8@CR-|>&A)n4&9OD+}oO0D~N)^_AskMg4n57&|a}I{p08`h}p|}3#0|q!ok}E?&
z{kedv`H1C6#HZaOe))(GfA->CEK>;L#(hLN7~fsc{#cx*NA?JD^!jU1ns`SX=4(=4
zwr`zv9qz_Y&Rv;`ivzmD%Y^w}w34F#G*k+hdt4E<$qN}O$>*x&ALin_tCF0n)_=Uj
zqj`eNK`?TERWWw$8dNx#KTT7X5@*~QgAZ9pp=4=)q5~|bC}b}Z^Skm(h&)P0?l763
zGwFP9#i_?C1)YYpdEnjnlXzgL{)3qymyPZ&aIlIEKsysw3VHNkWtdzo(vJ(A#%;@P
zX{Uq3uHq+|{<k=yl^wUT)O=-!8cTW}9uaCLm~l*~t9wN|)x9&_u-%wsApv3>MHXk|
zZLpiXX52s~%ht)wdE;|YN>GK+@`uUAZ_nVsR=~;tF)9w2S{&GN>Nd5@W+9qk3@zR8
zW3BBfz0ZCwg0MMEuyJP_z4ERv&n#wW1=aGIMhZa%9BP|n#%W4XtM?ZMk`!8uEtwx@
zbQ)UqP4hcMQCH`>qpwa-8CvbY9Kc=oFJ$?lmzhc1-rQ!U6X0IQqo|j+<Q`%UA5l<_
zg4zl)%o2A8jt*`!1F*D4@+E=L9e^G+58fy%i2N;25yndRL6^KHObQ&5KQRn@*X5v=
z^>MYuz?q5wr0<EdCHyx=tabXYM^lL#RLY@WafVycrG`s8h!@1Cgeu6c+0C|-po#j!
zmd?mcFOE8Y#oP=3@;=Qt*?+xj-B1?Ett;3CT=;)T>C~-SUC+IAsy`s}<;hc=^ACf?
zokPZ}hog{jB_#~S`Lghs5QRowgG?5i6txdJ8mU{HKc8zLO=4`oJyWZJH3cs`vZLQK
z{l;i`*;XKJK^-88&?1Q5vm}RBEM={XHHF$g+W~=#9B*r3@`aB0Zy<Nb`jhrqe@t~p
z9o+vMv7G-F<PQUb8=k|bVI~1oI1NjQLVPQQc|-^t|8a`QH(f9@$O1QB#OO@e%ByiX
zovR5<wLk--fJPV&+;=mp6TuyZNasD@dH4gsHnNXwhHU0$yjQq=e8De&oi*3h>7SH?
z`2@k;9n~S^!e6`X%1EkPIwd8FBhCj&C$T69n9$zlk}{`lZRbpmd4Zt6Fogeh5VJGj
zUI;eFl~jg4db?N0Q7+HnZXjH~0Yc5u1vL*D9xz8$hs<MJyc)FITJZar2|VEz{Z&Pu
z{XCA=1@a74^Yn&ET6;%&b+Fzqp@&QknX`^x$21fO&kNgul#g34ju+W4^(IuZe;tv;
zBM61c!q~v5{cDC7F5yHYi5p&)rS#(Eec%v`<oKU=*`~Y{a+n38?^ylN&VPGW1aaLR
zT*%A(DJxm-@^&%9{2|E|aoo;OoL5hk;~nMhVs7K%e^>%A@3=8=X>ddhvq<6<AA>9r
z56HgKFsO@AKZ6aPU47^>`Nm3Y!PZmEv_57AqHeH2O4xEFX5NF=Fb6v}kjcoU|3dc+
zw(yvAuH3Jxc~O_6)!G5xgXs&HDWKHfIv&$asns)s$c%Vxs;|?>od~vu%;j$^?kG%*
z!Fz7|6`PqT;i2}lapT?pE?E+Qe%)F_1~{&~Fk011W2M+~K>ex<CE;Zovo*k1I}s-2
zkqSQ~8aaZB%>AQO&h<C-?BS;aVx<+c{pYrI?$U?>>M8<vT`kta=_cZLLlLl`2(sW2
zZ*&uZ5yi(Px_)<ms^1WPk)~okV5%T32FH{f7FTw8ElD0@V*NWbsE>yNM)#`Re~Dcn
zCs(UYVfyBTWpl7$l%C4E#u**)?V(ThRBdY4rczRXDmvgWa6#dnz83nv?Lsq430Auo
ziG;%hff1n$k&qcSxP`s`S#VuI692P6bpI@v<P5RT)KMWFvg?&u5$PC~z9Sy;Pq~~y
z2C%6>J;45|Cu#X0vUwhNTjpeuzCyO15Ybl2j6TDzpM;75#EbtOXAX#GIhWMQOOzH(
z4&g+M33;}k8IFwt!;O`{3xHVck0)E7cZSup6NH+^2d1`v=ez)>2@gk;8Af9K`O@L5
zbipGSE+oyI3hC!K8ZY5xpdi)Esa5{pK&)N8EQ}m}#G6K%hMZG$pn9gK=3FsPM+@RE
zJW}9a!v%)~w-<QR06qtwdbIy`-xKn_wz5?P(j#;zr(G*+(JWV*FqU&n`{0-D4U`!i
z!?aOAF{@`-L%h-8+4}fv9l5-L?vnD~O$`DHogD;`&~XT#MD#dor)Q(<$Y0mMB@})H
zDF+|5gVSTj=VJfPTm>X^1n80|Hw`Fi!fIr0T<3n{1Ak3D($L{j^nt#0X!gI(VzP2p
z8<hIbtPx{4y$00Nu%O$fDXry6Vr(~Fj1UJ93i(0i86n@n6~T0wKFaq1-ES@ETLNRZ
zDf?mlCoSD1%xvj~yw6p&PzL(8&-oLHekB7@(2n|!$3DRtZ}|idHS&x_5yLY8xeehV
z|L4-9Q4UmmT-6v;vBGuTb|<&Jr@KoZ<FfhRbrOn6AuOOeB=c%{VBuC_^r0|=$_V~J
zT`$JO2yG3xS_6uodkIdm^2nzjR%_7%S;%=Uv421fKl$%xGRZa?tQXsnEojyMR|lF?
zE+L+g&Q(^mI!{VS+t1}E8q681o`YafQXIO;+?HcVrNFR)2ixJ^Po-BkR|8uHmxDDw
zQuS5w=Xe1S=8e=tTpXNURYSkli+amvgN1sNOeV49&#EeT29)0gxj&4Up-&(tn?4g<
zhN0^W>ThvT;8d+7^n>-v9I2+3LG2!4QjLG#!`KGmiP4!Uwr0<Rpx2Oh^f5nHLw?Sx
zCjr%IR*xMqc#c1+(M$Lh|KNFN(woEu{`E<ZNd4BciekH-1T=R7%`sy|BqPs!{W&5`
zMJzD{_9ch$ndCXix3768Io_ahxv~Ris=<3rM96D%?hy8HchdNc%(QKZg|qJvCVNZ`
zD$r1PL<fQGZCvGaQ|XzXe85SSyF$^4W9%;1t9e>Qaq4<lkW8FZhD$2(2-1G&hIJMy
zB7BeP|Hv87Yt1EAD)-DnGb}P3*8)_mLtLk9G^~@duC4~Bx5|Pde}0vm8vd$f(CI?4
z;BZ9%U@2S_XWH}EY8UZe)VfPT*;kCLREUA!BSia4ul$9hsGG{>U8{KpLCGt05qQdf
z0j|Z3mGRiHVuJ4CZdBbFKZ#4Uuot8_ycIAGCIoNo5t|{g^kvD0ShxNz&-lZ%2X>Q@
zcjMC(-BzP}n;@tqEKR)DSNicAyHc$t46b^Zyn1QwSmvlMW*jgx6u>zDKI(3Bx*X>R
zH91?ft=18{qG`L>MqRSAcSTN3OZoF5AxSDc^_#eJojWqG_X_~(OG-5I`tRLb`GsXe
z3QuTePK#jKEtYk*;|_wt107wKwPC4Z(vJMxL}b{uNb?~@vE_40CO|b#tjE(htAx=E
zCcJBw4u^id9mQ$fcKTi{689(PYdLdfIbTTND}+N}K=J+dBXVqaAy-a)wbW)kb>Qlv
z*7U}}zU^mhJ`_=zL-J?wx!ld3zQPFk0=$9}B2%|-(Dk+D<d?}1>j2OkFI&MCYYO`)
zzn5~u^7O))aL|-hd8Hq%!rSzb2w4dikn2bp=1QLZEZb0QMRN=+nc0~Lh9V>F&o{P|
zx4!&uIv%P2NbzU20J8AYb(9*RGDTmOL>-4W&l3kl6pbN5lMk-ey?-sa1uoOffUMju
z?c2NmYBakMsTEody+isBpZ1NwZiB7U2Qn@<tEdm!ay%S!`Qf?&gg9u=qXwa!P)Y)P
zNhssH2rN~CE^x0qA#(=AHVvUTU7N>&;%H&Mrbig@zRWL0;YdgnoNq>2>Nlt?+r&=x
zq}1fby+4^XGoz_Q`pe7THf<{WPjL^_MY`XeE+;1&Ibf{Ik|oseu~&F7Kx!Y8?vVJ(
zF%apP#7Gd2_vY>ciRiASRQaKDjRGopMqRgP!EwF!$p6HNMp%wa?mpCuFBQ1aM8*;U
z-#s>%sDAWzk?$?*)z|FF`u!6Y0YQJ$h3=e$^bWKBEs;$vfj$rK(x80yw`Mh@|HZrM
z8CtiVKfL>Z?6q7~u+i0H=KBS|?sYpwUBhT@p-`LSsdfo)X=pX<@C%3Xs?nW&2|WH!
zV)0W;{f7-J^eWWgBc=-5)cD6GH^=^_x%v|rDhlw<znf#Odyy0eKSOfvn<_7M6SrDz
z*&ZF>XEDnDGw5iLumY@R(O9)J-PS2RoGkew3wdBx2WOR!k&(zOEZV;reEi{f{~p}+
zMHe139iU9j7WD(#$(>!SNCP|&VTG`#HL+guSra`x7XQ$O#@KEc_z^V_A(+B2YuAOC
z?f2a}jR{E~VcykYN7E>Zt*oo@9M^>}WeV=F<`MnTD(-43Y|4PL-TXN_BbgzESwK?5
zF?sp*%jvu%in&KaO=``*W#RK6oQx@~ee2TJ%~o5!+y&d^8SU?dE2Z~8!V|T(T)Pr>
zl`)zOTKJAwC+*)3tfCiC>`f02{49+J;$c7m2i=|@U^au|W=;shg#xQ9OKARx(TGTM
zsTHN5jP~VYK^p3FGgsn#LWV*%rl9oajhqp$z-;mfdJI{J;ksgY4#>35$Gmh?rzE-V
zH9z>#s{d~&l^RFYkS6{duD>aduFV|Sg{R4e_yo%H2y-&7cr1+#dFUf9iZD2<&tNY7
zB@1Isx*qlP?nQ|D4ZzlqeyOX~o4!LVO9sNHZx?6T#<I0`dY-%?t_>U)c;$$H76}`K
z51k?p?XKxK4J_A4Oa6VZ0w@JrhXyBF;G5KsdR#qLj$dE_t|lA!@7iROUXZkrDYNsm
z+rC9E0=~-%@^rO$qg(yo_XVH~k>9F14R76THK(wo#~{)@aTNV2i|u_vUvV!r6;8y4
z7jzhhCr}nTwECI7l6-Dm1O^`Vkk2PxpSJB)6(vW>GEBexGzk6_40)mbDu0!?-Ei+s
z^_z>bi;AoqhK|!K*?~%`A1x&aAk9jeGurB!B0tM88by$ks1k!a;_|NUpHA`?9lY47
zwP<*iBn-qNPfd5gVpbr0b{VB2_SpIr0T7oq!=iv!XrLHj1xOC`OS?BRcv@c@zS=~6
zSv>g7)wbGkhYiq@evCiXsRYC+T+b`w&ZR&pKUVeupBEYJ-$^e)9s-H>bX9+WAIDR!
zy~7{M$k*s=TqCa%@%4Skm|=l#jEGh_f2bd9{f6BPBvpugk4K&(->Y}b{W6P?;Bugb
ze-CP;?3@~v+GZuk!G|Dzh`ZOBoSyAfv;SxsenkmS*j(vge_?YBl+E^hT6(q`7b1v4
zIexRKyF8FcC{(eBS^~To0*71?04Z6(&5K=>q%Npv?YQ>8<8K7v896%aQg>;eQdy8l
zvh?ROY!xolGB85GDL7x)9b9gi5sYCtBroAGj$ka`x<>QUjJWv|t{#~_V4W2Vhuzi0
zO1Hli)G9p#fdtVdbPJ-x%)YkLv0NV~x@GkSQ;&L`o2^3O5BJYP>a}|kMk6a>!-kGh
zKK8$Bzl)t$XHnio(@P<+iADSw@p31Pjg-2!@dnP=1@I~<bAIa@BJFc=ruArYwU`s>
zMW21bxP9RsLV(}`qE=L03H|o3?~fWs7(Qt5i-Md+s0eXDNC`*Yrq~yKk{~P1$^GFX
zlJY%>bykHH1V!p-ib27&^4Nr*Bc@eE;>F&g#Sv&$uU+eFn8UNC6KKl#AP=KnON`S@
z)a$nKH=#^D3VZ+F4IN5GnXyk@0H%alW;c3s4laX|I$~z0bt8;xc!J!~Q#UX@$K#B)
za^0Db50#Y2@^8m(LG~TBLo@-Ri|`lFVER?Psog<^kHVJO;NOn80}06YaCY5t`$D_o
zg!z-2FA9@jPgM>3;JH^!HW;n-20aSA??K0-9{z~e<V|yeQ?$2>jecpbXGs9m5T;v(
zPMQ?B%7Jqk8Br`_9wiY^5K&ZxJOA$*Kc_bgz<h{O{ke$lI&YUdA8u1SJiGE^HkLzB
z^n@s76FaSS@wJV{;F}0F)5yp2Zx{7TitQI3^Vp3m6a;8(`lyVbDGCBqPJcx#otOj*
z;JU##M=v30@9{>6>ussZi9_R<ClOByN8fVi)61*}R2Gj&OAFF}<QL72F#ee9`>c(-
z1;+U#nq8hxvgLbxj`1^3L{je4yD^^6Z2Y9OeK+*WFwmtKz8hzksu5Cm@lnQ7U;ade
z%L(Nj&1v$%<UL<uz}@Y>&r1Yih!#h9`EeE#Qr=$CUp?Kp&MhS1FxyB_AFjXImOI_J
zASk*3NA*-@3x7|!jbR})udQ|4m@B)t6SO?y+veVW?L=xZ!!DG-&Enux-KB!i?0uy}
zof=z!S!<rkNK7Ujf<X0zk>33so6EuGZ(JBE=N4rK35fxOFT@ERVN0c^dTwf`9(&9u
zdbJ;=ru;krP#Z{?#VpmJ9ydssvdu#qE5p2lnSbre{Fn)<+__OL2`%U;?eOrVstxYh
zI;FIK)@6EVa52u`XZ$tVI3?@4%8Q+9HVSa~!2=+k>0a5>HD}uO=|(p>8|EJ2uZ?sM
zqk0Y}^o2q-&BxX5R0+KcwxwTC!Du0K?PcSh)`VL1-(84Q$g5TF`Gw$G@bA)0e8xy;
zjLnOq%+K;AK?9*whrFkIhW^&uhC1W%)JvWD2-r1%G*2KmTbj;p1LzAG`Rk|%wO)(&
z)WP3b?hN-_sh;8-GInwxd!v{9<}4XgN>}y_8zsASIAtz@K|uq@r-Ui}4{o&@+}v;I
z!53Xv2`ZkL4Dxgg`Dz|RRnBr1%a%?AlSI;Jj8w}~gI)x4AkxWUh^NO*{Dxe&{w9%1
ziJW)$k?gD2byN}I&ypMXC)=wn6lz2CP$HR>kZPB2Q*0d!<^!I3p=>^r;Sd~gkUrGr
z7l-@%FCKgWnd~vnk?#-lX#S)=ME^{$@``f0=2cO^uRZ3M2zd&Sb@8<=<$tc??VHX2
zaIjVVRSZ}@P<E+vdS+r#wQT4ACKVQBwM+bFMKl@-WkUR|-ZR!zA4WrbbB(yAfqUf>
z<&@IHd)j8?F#4K?^Tm_U(v(~6OnJdacnF&!jkdMEk2~1>wROnlsti-b$s@C<t_A*{
z_^4&)hX1jIO#n&_J8Pl2IhKBQt2x2^vX?a#m4&<Sp$H}2D_LmzR%>U*CaAMW%CGdV
z(J~k!`~(s<Byzj+O}pmB2;NU{nP$;vq;_><#~TCf*HXwlXriJ!o;0p~`?KAc<)oDC
zhoxs0w$A+;r@G6zs^t35GgB8w@x~}=5PPz_P1rob@>4TBTTu6CTe>)i*HQL4_VCCw
zeTgvTd^GSxUNT+#a;JG`+TR|rX`5E&CuKikzCi5kg(yd<CyNf;$S;FD6>if0UUmbS
z4pVR8{s)#y6qN{}tQi5_S_T?65wVWej`ah&=g@yEcZ2Y`t*(YvUq3y1>BjpnF#SxZ
z$!PP@PTDIm;<sxt4NyEhVyP%y9{KXJ!askW14W)Sbrq|R9^WUS<yE3?Z+4phoUfN{
zWz<G+zismET+g=8VQ8PZ@c(?FD9S0HTZS2#!)0L>%f>~{;?5aWa!wb#PnMLUma7Ik
zcjRJ2_sq!~{((({%iGS1f}z%Z^82tftJx};c!-8*eAUg)C3ODvdrF{lzu8sUt^pO4
z{-9j2N_>XV9WtfSXu6C|OYl>uEs-dk%GDr#fWqeccdz^0gOvggR2UZ8*2!hUvs@3a
zfJXi)!&#-Up_0MuIfR=dARh6W@8M?8VqMbmE`B*>b6i`XM&0V`e3g(@I;Zj$^tBR<
z>@Iu{{nh>3<U}jW{}k0zp!at|D<eVg<Q=nB*xBM^DSs#A34N8bp39lmw*vx#iY4V0
z4Q7vv0~RqU14?l4A1O1#2^Zg|cl%nNSAE;9Ml`q6tz3l$H8W(-$iu(e-%ZGqP5_WQ
z<cWK8=;a<ZPslSogjAEFG<4H8L(eL}Sv@1i2{Sk!pDmhpgb7y7*?+!;>U5<YVA{iW
z{dI;=+2A!&tGaL2Oo~*AixZv_p2;7Gr{9gO8i&-$uWlA6W!U+8bJ}M-zNfzbk!r^s
zgPrm~0`cFNjT`c{@^K%5!U~ILsZQPH4%_sv^`VTnKJqTJN+Kw^KHa`+jq(M@v~f;(
zlhHp5dhtk}a=nD9eV8O;vFT(0chX?xfjqdO`Oggh=W{Y_VH_~~;Vf+!BOfJusM`G;
z(Rg}^>)w{B_(|L`Nxo<{@fV_$`W||dlg_C>CdEthgO}kw&7=Na%l~FVA32(Qyn#?z
z34J!iU8@;J7TvZI=4*eYQr(K(QbmV4u+4q`<*Ad8XVBYdFkwZF^B!96M5QV`jIOLn
z8n}=yo^+S3>ZLdLki3?_VaJ@#(EKW0G4l&Z!h>`KqDdn~(6>5=rI{mR<!F?cFhGUW
zbNsX-R`ELUb>p%~!XWO7>$%elcW`xak%>mEgNj)&w*+?10Yf=J^PwGq{t@5()TtZq
z|2sk=?nMSE)gOqKo`6Bmu;rhSz<UGJWrC((JOkr5y9#w$LN3EBa2_qMrCcfY-#g4w
zZwxrU?`k$hOAoE1i)2S(jrtC{*=EPNBarJ}N$@ignbHF}r7bO(J=2>#x6t{Yi9z=b
zH6~0PU&48=1O6PL2IVyvEW8_WnCjpj_b|G57Lj8c({2AHSw@2f8fkDyh)05B3;#r3
z0kS|G3&j;d3VWO5OAi<b?`Dn&05Wus?EKO<roG_P`<eoI<$c1O=jb3P$APe;DSe6M
zD09M-VE#ZJCk>|vJy}h2ob*bTaOw}%{qdy0elL4$iL~tfH2vZMUlZQ<ZGqcnnUbL*
zgq1c27yFG|b-3wY_Xq*!=92R1;B--9(#jUy0|qyd_nbvV3>9*<gWAhh7fY}pKMMhJ
zhyxRx_>&yL%qO-0x)<Qbt3!J-HqBDWLlC`=+i169n?ea6$qzWmd&Dgek5GX$bE`QF
ztW!=q-l>8B7;nV<?+ItX%o`EG9`OP?ZNi;L?4jz<2r&s2b!IN!3}EXql`<Ymv*>;c
zXN8|&p9fybSMJ(o3+^wg%oWtb_#!RfvZ09Np^9+CI=!`h_lIF;=2q<xs(K#p`thG)
zJ>{Q=(!WC5iM_=SLD{!`CSG4ha9CIHC~i276~K}!>=7#b9UpBz1Gp5;S$L(E?{B3G
zF&@1H!u-&Ki6jN}7VJC%r%_FpnEi-vyNFSi&%`5w7WL}=I}(0;X7?{!Civ+$T<=#e
zPE2|~)giN4f-=L-orUPSvW+-MULJI}TiCMWP;;w7^xX`2xB5OOlt(F+d`48k8gNFe
z^)yh)1Xm#~COB4^Hr?G@t=--9<K|~*5G&$$r~qhCPS03+H*z#xXf{e#Pioq@)b63H
z0L@@Bn5xr1wh4#6L2f(b9i$-d*`TR;M)`>vpliMAhDttg!9gci&&+;S9)UMFm7rQQ
z4v~4ICoHpG4*&Bm^O5$Cd~M|C4sX!cQBK>g?vHh@mPC41&95RVI7dw<vF0?|7Lya`
zMztY3EIg989om68m46#8KhFwDx2nIKczBlZuUX?O9{2%=yy;5C`Pa8UJWF|*Cs#N_
zZdzoIds)L-@Dwb%(;g*ZnH4f}E)lUm^XqsJM)t+aApmC;@TV*vk&=82C*bw@zce<E
z_%cF}c;?jNN-o>}Z{HTTGC&p()}?1V8GT)m@%Lw}fQ!Z~F(zyn1oZ1zV3*cez|>T<
z*Q36CU&5~}BT>^M&BogS36an7&iCQtr;sbqxLSrO%gcQsTU)*y;}Fs4ODWYLg+>9e
zcYICWO84T=H%hHjtm>wn3H5JF)~`j?+T(7UM}|c_xb-9EI_;R+KKvo%*7^R(36+#b
zM`2>DaoU~Q&gD1~g*ns+Sdqex8REEuZ{vT><=lk9)AH{{Xn{(%q-F<d$;;yDK)2^{
zk3e0xpb`x<%Kbo89G}En^&IXo_)sRL=qW${>~9Rb-r}+oxl!(jbK2LdP6D!m<jEZ0
zN-y;%^l@MJh&38^83`Pt75#Kg=%<9?K<er5^zNaKSEA{qJK_F`y(AaAU2uj)CoVun
zE^&Zw;}SdOq8jBQ?FtA_Sc3kxN~I%xQCCV^Zc}Wuv(Iug+$J-w?d})x2-8ir7*ki`
zhG}{fmmJYle&oHoI6Ng+_Go^d_5D8{F&v2f_~T8fltWA<&95BJc)s8Nzha4hhw_u3
zn)E+iifn%J0MDk?(Y9h#L<7GVGoP4Q*v(_~#4LIAaosgg*1D?R4ZbK@2_hi_4O_UT
zz1V%P4ix22vaW-GI)WGwhlCnF{g%wx`N%)tNsGUIXw#21(FE_;pF(3H6X{o{Eh6gg
zN^-tV4N@1AF=BDGFa+c<m_~{2G8M%7m7h_gfv-p*;;q|8w~EW$Dd)A$(X~_Yxs?1}
zm$x2c1S(`-SdSi2$k<%#?}a{^=-KyxP%8sct{ir_@ug`0s@Jx;2r58068wjd^mCe=
z$X_@pV&wJd6&lAyU-uYDly;tcKry*jk55{}E<Vjz|6QRRH}x7O<~Xczb8pMEUf`}F
z#iVb9z;O66wtU9&36^U!jGyAnd!5czTKGE}5k-$<m&bT!;#Nn~O}ogfU8fWsP~kr&
z%@|Xai%U&|y4K%FmZ6}Lz&21CYK2d_CxG1qz&x)CBfHJqq_G2vF&})zvjkzDOxWRn
zuI8&0Vvs?$fQ#fa>Xe4Q^ey^_4x4IEw?aLRNW`Yf8x5iDANvd1TWpVtZx1@m$9z_6
zoJAQOu_1hULV3JPt27Cy#+p(+^Aw~ng`7tv0@<QK`0yW$4GjL4VYs<U?gwkV)r<D}
z*gEWPn|M)K=aks4$8WrP*;3b8r2VkW$Z#B6MDH;tA6}D_@2(ss=DV3s#EF<|1`&v*
z%ax1~ML-=(rrc)Tk@x)W5I5=*x~Qm*O1|^?)1uEtlmu208jH{3SOyR|HZ8=OKr6%r
z@%WEOKIejpkr$*7@2Vf{t>~y)hwrt>&cq8&iqKpX1CeVC1f!VVM+7)<+A_CWZj;>j
zh$VLF%?8nA3hqgn4_6wzv&Q)W9N<gjy}F{e3gFrw^r%QF9tt?#u$@l;rmirRyQQ{a
z>AXYYqfCxzsOUbBxSDwpsMfG<)}^k@m}!tISiibq1Gae^O?QWP!k#Z;P{u;&7!U0u
z@LG5fuPvW8xkD-1Ib7kLyPbYI_1}m9748J#>z;?F2)VF*1U>jLX^5xL8LRC~H{k<w
zm(GXmO|=<@35JI!YEk))6Xx2_TDJS(+nOe~9+Q>t$Ioh%Ku)yA=U;_6BtKo)R-=FL
zA0Lr!vRA~~zv0Fa0}x2KZ6(Lv2&E2=iJobj|4~v-76eXRY&GtVPHf6JeFZZ9DRIUK
z#;2~wKMn09GJc|WMkY!;lXdL)%w{f&fldvX`N^J^Wic;VDQSL6j`fxN*eE_f1nnoz
zWi7Lor2VBW-)r$e++AJ{BRy3F_Wqm>{^t%O=1Bt3FNSj?`BWacsoh6RLB1$fMg&ib
z6__a!+G0796R3PyFD^VJC;LX-pQHh;BeUFYI}wcSin*)m{q&sw$(nE0*Zke2iZaHd
zkjfWrgN$r{?7@Eh2YUs%ep#)P6r-Eyn7F&;`ANl#eEh^53!8X!msdzNVkYJ|<J*oh
zsjiM>{xY;PIk4`ubu7#$c$1UQ#c_AVRXG48n;gU=WZCT=vPwNP(~L?jNriX5hxA0N
zAZOEn_^EOg?~r^LcTJ&kBh+g!Tp}uaA&tnhs_<82+V@i8KI5R#!H4J113#r-EWVNr
zv6HcMQH)&*Sl(05^ELD;#%`_geH}N#VtA8x-`3)$B_CO<FcVJ-+Itz`f-W%hRMHY?
zCd%D_xu(;%)yMGvMVM$@v=!cTxz|k2TCI<L12Y}O#U20ja*t{M_Bh@=_=GzrJCv!y
zo%+6j*^}@Nl{5oS0G;`i_Q+2kLW2e3JJppKahY<B%ZnY`p(#X^w22&{-W|5}zFCfa
z!rOWiSrQQwLJcGQ^&juG-nVbQTtNb!ks4MRJMS8nv*#-&R0+B{PhS;mkK_O8-#T0_
z5-Lqp5~Nh_yE-?W_WF+@=oZin58wCf@J)HPz3Y-W-c>U}U^kbzz+)_iZfN+@T0M{9
zBx9;g76CT!T)uUhxAYmCG&j=KLCJ$)OjdVm!uXnCh>yg;(un!nFb*O`iF*9-;a|LB
z%0L!?5n2EKr>I+`WBXa)I|szPOb)Uc)11Afpfn>{nH=*m^!tv$t{E)!Sn*fvL`35q
z=~%$-2+2gSjSyg5vPPoN$&fY}ZVHjYg8hK-5%J5g7-+i(oN73KR70f*#*Vq`8QUaJ
z`Ysf|tP;2B@@RS`L<B<N-nt<@5a<bEQ3Dc0ul;mC&J*y=>-BsQa4GTO3N*wI|2ux3
zl5Vlr7qkeQZZnw=>hO88by?$ca1(aitm$F*TgG?Eg5XbjsLK-Lm_b!GV9dWNP4{JP
z<A~ZV3*CBdpo9{(!OLQq!9rR@cgLei$V!yc?IjmBnXg&9NR|c;A|FsCy49l`pZMtI
z6Z!G&*KM2N*9fwR&%_l9W%*WhI@FQC6v5I>4%VnUU$5HO4QIOo9?#3WAUs^?$`jbM
zz~3kd;C#S6YpX-*8IN;I1k&^7hw&7(XC4tomb7sX1(5>TA)lHR^Y%8T)7I<b1@_;l
z+^kUu_?_Uu;E){yAte|#GV6rFhYK$Zso*k-)-F}L3_2^Dfjq=HdI}3SQXMm*7@peg
zCuN;7$lK8!t`_JLOtjE0dWyP>MHICzab{B%@Rap$`JB+nQ?8o8WZ4@~=PKdaBOU^&
zT~vFAIeET&6UYYx&rKB&BSmNvc<zci^DDn2t(Vjp`@9&*R4+XT+so8MeaYInV&lwA
zVjf$9W+)Xfm3}LmHP{v(IF9oKQTN0dd9pt}`v#f$nsg9@M=@}dwsrA*J20aX(&ZZ1
zG*1cZ-;sUIp`+9{v<Lm6<3cT=Y-3=Ud@gFi^$Er0m%CdwcN{x^K9#?qx}Z-T0{2;c
zvb8W2U$npD&RwTGj#)aPT{TvDVnbgqZFP2Yn(=2>N^I|y<}-bGMT8@Xc12VT`+`Z}
z?7rh>GV&`u493Be_eL0TCd;>YGTDC}CYKTmV&urmzn}xV?t(PjBSsPC_(1O#b$+oB
zB#gJGNt1kflR9Z*?pm_#IbO@sH4`G$93Ou7@MUA3dwGg;`I}E7%oI}i&a`Tnq?2)y
z5vy?b`}sNw$F^vG(L+m{_xYe*bdzn_VWqNtqM4ViQ?A#(Lh@;FWbeh+hBkX^%w(Ai
z%Z>`y=5fGR>F|}0?JDy#ge4l~af;ex=`;@-`Gk(|MvD}Z#@Xiz1?)=YFZ#%b1TtRe
zpkAIko9}A`?+$l*5}96%jNd;$BtNIyrE}|Z3Ebn8fjn6s3+CTX{4>a=)0}?G_Qx;(
zx?N(vj@4<_K8V*>ZvVcGX1Lj1df)K1Z<pAsLDavFwGu>b-)$4NL&hfG>;-3>Q+yaA
zzOMdErLnBpODS9DcP+a-QPq0$(p)J60u;`x_4?3ZA&^a3-IaCw*8dLI{uyJ~802Au
zY``sHDHIdu1rvNabUJR~=gCgy5ji;`9Z`o+De+_uGt<QYzkPMuW+C@_W)ih7z_`wT
zng!JczIAX2CEJG!UNs!+YGz_KJLI-W%Q4e6$9rfTFxTkNKj#sF1JdSq!PXCas;OpP
zzj4<u4AvXfQ7Czyy>wVv$#+KuM$>`Oa5>Af`IDDq&c#mcL4apzby!woI>E9Ap*b<I
z#JT*X6t2ocLT>Za@{rj0#mZkxVXhxiVmINq@do|E!r@JlSRP!-0blQ@Os?WU;$4Q!
zZ?M==*4DwL?LYtaD~}QAfauj&8E?$V!`^bGmj%!o6#fy3!hWyczD!|)CjyFsW&$|9
z-DIo;l~1?^UArIJQ=XadPSx>EHIl!CH&7~mnT`xhzVUMv4tTbcLDefTT6NX8R%m=<
zs{yP*ew&}87UPrzs9he^E9$HCL=Re#PA=)bZmD;rkw+i-*w5C`i7@5Qff82&=6Mr)
zh+*;L<bLd$B?E!3wL1Pm!5#}fsT24|(>{7aX2WEg54_CwLo3aSre3TPJ>T969q-N4
z)QGTMcy1Pb&G!1ROC>KJ+zVRSK!Xkg#k~2$Ej3h2IBdka;%?4ac|_!db#KO7g^m;9
zka9YL=%yu&1K*9I#l8SAJsphx-&A(5J~T6WdgK;qP=#waBd*40+tJ^wnF4!!0Wv>)
zm*3o;vC8(%>=B=Mx@*(M!s9yv<+#pu?Y}7^ESuG1Q&%}6426K#zP?rdo-5v+rF;AL
zH=2d?ETcb_0OAAdGMxR-)Sb;psnu<1(#fAFb;-#Yw29%TexK{|RW%zY<{EBuIrtgh
zbX<Sz7ccx`Ijkw>L^H!FoOAo#$SXP=U*WeouO}baDUY4o^Y@t1u+O|cnSw-9f2A*i
z?l$_*OiQ5a*Lwdi2xeX=yvBck<sfe86D9xzo*|_p*A^Siv#KY9<PYXQ)H4hHvCriv
zds5CVl;h!OC@S;c|8W5f<>1(l*ks=Ee8efcz@Z#@eV~yMpz6&@xNN}RGXu3bHy-nv
zD16AC_0^qgl=ASCsrJFGR_ck#EEHU>y<e(iI8QCRUK;Yv#=uX;VrhS>qP(u`_-u_M
zx9UGKMC#4@WXok}Nr!Sm`K+=?fJt49d)LEva9?HVRuujI^-W3kHqqeWblP3l=eR$i
zDZ>*sH(9$*IGC<w0$u}@m%;|(iB?_aXJu)t#uUzvH<FA5X^bi7ar+4x<9XR9T+eqa
z=m%_in}BmF>R6w1dt=A_i6&lymk5)I^)TOEZlK(UbNiuPW%<<G`uvtp{xRoR+c9PC
zT`jrtrsk3zi<#qsfZE;G*}n9Uj@M3|-pm^n`)m)d^ksVe8x;nh6`I=HPI>L+p|^8{
zsQc5mJm!9mdT%{b8La(Mf3p_&{xzw3IFl*ut=g>_3$iMf2rWrF=Cj(wCww?y+EnB`
zubmj0o_?8KImkJStq}K@GMt89zhcf^FZZbY=Qs)BJ;%<Yi*RkG(~~MaO;bVAriFxl
zujHr0c7+E+8mWDiGi6pAcDFDazY?rEnVs}s*`<sswbefNeOE?C56V=U%dsBqniE*A
z`bML^!!F*lwf)P!Bp*&1tz?>`v>apSrk5^eY^yHDTZ|l^aN!*NG(K6Qaq$)zPUl<m
z$dCr&AU#*6of?~sBXy$>GL|>ZXRi_s*yD2zeUM{-sQ0c%R2EQO1n~nRAXb8$&wl>*
ze|Sbm|J-ezr&t9yq!i<28Jdlm$jSiUa`aE?&dR*1Vr{C~Q8TZqV_(h9*wR*4<>vJ0
z*nnegwW}Gm+l(|7eL}}ZZQEVfs1JeOGtY&Q&c0g%@>AA<%w)q$G0`>&mb%v+Ye(OZ
zJOT6AXW^hFvXDz~lae~dJda@?Sf1Z6czUufLwk0L(>5zVtyWWsa163m)ZN!0dGZYB
z*VQ~Q$e-(X4=F4O@}y=jhIegPrWnieXnHdZ)(Ms7co+{3SeWgwAI*n^1xM6rbY9qA
zg#_|Gc(GG_Y5UFJz4cqoVqSFZvTq5h7Ieq)%a^7b*eqWZ`RTSB((>PGyhI*y^y0cg
zYB~qx*|a-f7^C_GL1FWcOY+cETwj~f{>2-Lfy~9(Am=D|2A>cXQl62-8hb1Op)qKD
zDM6vn%A2Cg^-|TPEa}$seAx&X#g0@C-+RNRbI#@z6Xn=*;pT8hMtys9u3yWwLqk>)
zhX&N=a$>fY8V#3q8+tcoBi{q{4Q@PBX=A5_%PeN*3m#FLk4-(QN^Nz|INS{?C0~7;
zJVzK()!^xb-cyWYyHWd9_go?JPO?sSbi}#`n>=yu+Jx|Gqob>ddFYQI53VGDd-vz<
zRvquf0mnE>jlvMOYel$0>rYn!TF_FtJ1%_q&eT}7C)qkG%eLHfce`C^#u!nSVS?XH
zoKSa`dKWc@TV?#In3sHl&<{fcgg<5H^gz)Isqwi8XqAu3^B1IQp&jfEAq5{N$xu&T
z1hWjqi`754H;p|6FYV4dXKu8%IKAk$<udp-+h$lfAI#Bv6e8}l?5ps(KRW`gh2w;O
zzF}9CDB$TNyKjQWGPMAh74-KX+BbO+RJCvP+iGQ+#G3btjJ^c(@eYC4*SY~uOMfXn
z!pui4XxOLSn}W(ZVYJvD2ua+#{DpH*6zb<}Mo^yegXA8rhID8^dta!Q{*!t7?|Icv
z5eCp34yBIk_>hHe)l5z?Fl_k_bqCSA`~2uB0pcQjMp=SisJfbVtTA-?Bz_Wn)7X)U
zJ!7Zkl7_iLmb%9?&||R#v`ufO;Y}LTE$thAmKg$;gF+TdH4jAT`h0Resqds+nlLV9
z^nJ$4R&9G0Y#1q$4!*{x?Pv?A>*4PFehkNrDg@=pZ)hd>xe4dY9@+YSMAqfkKe)@a
z+~w5YQ_CSWm!9&E7r=sSZ<)<9sCU^$gum!0f2HaF)}Oj%8&nGutnqn2eE7-+kfHtu
z+k#+QF7tyz3ku6brG;f_%0M|ahS{JM2)zFT^D*b;4HT&e6ddgocVrW}Suc0+Un$fI
zaxQb7nM34k-xBIK5768N4MQc?JO7O^=lcRTPhG#X(yQtexAB%}GoAX099yE1Ta&@^
zDesC66|UtnkD(lh{lx9F!QBMrmQ)t@vB8?Yxn}=}dKUM{N;B_)UHI8*iYdY3ZSOZ0
z#7$o%J^aTpNUaE9)N1S6r8wGMhL$0pC1Z_u3viOg2LFp7+O{G{yAoCArd5#o%-RQf
zt8Dx;@w3k#cAp=or6=(+L~EvERqs9il)UrUmE}uT?9^56b-%XucDty?niK%o=nWrT
z@hc>HVGVt-Ss45NAsYweK=1K;O%1OVvO|<WgEI9i5oqS`%n#X2;w9bVV1xV_VcUGJ
z0^=%BZlg+;%S8j@n=(7AWz!ZDn+)TQfm!lU9?BN|8~Q`Wxv2c1Z;%_SuC&A6vv=#n
ze?(ZCiBa6zD0^5oG2gob>`@+i*vT_+yD((3e&M@*weHCAaa!G*T`7%Ib+;g_r3>@x
z98LifyzQ=ESj;)Mno1B2E;HcbKVK-)_Ks*#oMPXzbUt2CEiUj3$3k?)XO3zgGkid*
zhxR6yGcks3n(roFC%qPdSMejCrc`QECjT1x)*s)+DV?bbf`F_J7V_@*l89`}01UBf
zRvh9#VN+$pezDhy_cT2UcZ)EosLk8z5JE|}A_w(3#R#=*s&5eK&OTxAd!nVkVe0ex
z<W>@Nh&M4A3jOT!xK^g^Gd=O(#<l-pqi?u{Ef@L}{ayJL30e8~oA_4J$0Wt@Q^Lwq
z;k~aM-!1R7Quc{e>*Hr5z_cHAQisnRN;^?WjTw5?fFx%;j$-N@{RoIu0KA7D*GgKi
zLq{?2u+PH_0jF0UeXGGa0k1tfwl9_o;Gql^j#fyKp&C6abTvb)*;9W!Kr?m$wv&!!
zdAO)9KFS_*)msG}%ZlGca`XjN^)^L&MEwFafqaFCE?Ns!=waWG5=#9WZK;94-P*0Z
z1W^*L*0~RP>Yk&$gjz^|`uspSQ_xbgKn#`iK&ZrDHDes9U|eHZ`Cg%XL_OaAFfXD$
zbmzt{kZ%@@i-7K~Wu3h4jd1%S<5BdYpJsWh5W8}DEq;_KM6HJzqb2tk@Gh^N^S8|f
zSO7OB3(cfbhal7&9M~$7Bh<8fKjyVKHhI>c*u8g$p%7u|Qg+dd0P3UK$bzFoE_GPs
zCwseBU%`mlwPJugqM(LW19)nh_I#7Lk({`F+HcdI3@qFgx?To+x^8RkKtqGYKz0V`
zdK|x!TNH?}F>94iPez`QYUVVsl`0Oi5!NMFhg=WMpY`xK5g}+cQix_+w$UMR!;?=3
z=**lr^1XL#5N(?#bPmou$x&z!w6zyU8RW6Fj39jwF?^S9kQO7x5D=Thf60^~4D_=%
z=GgNazkY=y;Bmp52qXp5YRyNlQkqyD*fh+Wgi^a1a1qgIdxzj1v3d3BCjyR9FRW&V
zA3`c$;z@8xs4FJ@*PU1?0c%cK?fCtlc*|e|0Z*Tf3YN6^R`%O$KAfqx<IsLy1s8T*
z0na)xAoB^rXzkaWv(i*rl4m^XS>ztA&aBWpMmL6)xrI3WRuIp{nQwCmZ1sG<z>ppS
zER=+1(nU=AMZyrjj29p1q30XC3uAKU?H@fbQe2nk`fi*BMMg*Sp1Qf}fxNAdc0<XC
z^Vp%9@Q9O2-qd7l4cN8$RfjMKZb+>XH$_I?3tnk1tDrs4e%FS|TBo*aTy;9T5+T(D
zLBCbJyZAx7P6#yox(IolkCNNbq=R;K^=R@9+m)5g)ADBb$_sHGrve653)th@uzeoS
z+NtRR$Cp+DTXl~V=gscE!)*-^E@v7tt2?UJa~!NEgAXbn)UTGkW&9C_nip?I^e{8R
zjX)tg>&3KR!6%J3+D`)M6b)9Mo=rwhu?OMdSV%zcF2pBq6J4z$)pvbptjFAn$}zR{
zQ%wu++Q-c9{&nrY$J69c7O+)2QEug7omO8r-I?4S`er(1u7^yHwvg+4v+?aC0fmJ-
zbQF?aKHbO?vSny(+u}G2q=lHdlxt-hna9h_&f7TVD?r=8SE7-&_51Mb2(e)e20e;B
zfhOF?<$tHYEBt*5)*jW`QI~8&a{AtnfdMg?GlYDaY}6!j-BMkF2J)9CrXxIxSouBe
zo&Kw*>%Tn4%ecMyuJpeN_8ZPP&xJ`oMk}DQ7g#COC1Ni-Ici3hWk{v+N9D=_rCex7
zslPrT<sj^7#C#=d=oZM7ccnZ*>CL{x&&mB6H>vQTNhJ9jIwqHDmg|qV!P_I`F)xxu
z;|(mh&j%>aa?6?Sb7eL<cEI*(QpX#-PkY0QlJShT;v#C(9WfmXrN)E>{4Z^U??SFy
z+6<;KdqK5Zo7g=sLTnR=-N_(*O@DJIA~OlP0|SuDG?o{<M`B+}Pz%F0=}DZDqx^Ku
z)^T^|x<nn5_WHm7^R0}?r)~R-jf_RYXH*LG619&5FjXu|uzCvZ_zG>V15rsM2t9pg
ze^8VycTso@RPDnfPVcMc<FpLcm&<48R%1BkE5VNcqC0ZlmyR5&o|uKS{=Uhoj*59A
zvHy-f+3*PgSUCvArX$iJMAKGEd<pZ|w*N|Hs>lg)^opzC9_=9~jNIh0R1FlFh;Ynk
zq>`&Sa;i(fnP7!GvDVybyz8_hLH^e@KGPm5WG+2LDx0eJl*MK5cly@Ld_o-X8Ne~b
z(Hs<hDi`EXpuZdQ>>~SuvhU}dNw!j*4vfPXb@REBS@z4aqMQKv-hrTD*y$y-ky4+g
z40Ld)SmINt>?cMI7uLKcqw(*Uuf=YBpwEa9#V9OXl5|qTa{$r>%IY=<xPSnE<($7O
zO%uWS1xVC}NiK>y#y=5Be*o99!vPlTyjQuM^}E<*Q%j4yz^0m)csX5tfMXoU15OWe
zaK`Mk_+OusCezszoE+Dl8`v&yp-35B7q<?7(V}ueL_M~Eg5E96=+b!pBbV;OB4#30
zjeBhfCeIqDy`maA26csh(?$vNIsv6c0eV@9GOW{9-ho6#g@!^sYlVW@M#TgFjOE>j
z509s;S%`lGp*bt8pzZT4%RRTf`4&@{(h*#2+pUgpx<rs&^XM+`ll9|g%&{AYd6XBl
z@L|$&)+)+fL?DKQ?3-^qgoo7MSBBO|UY=7o%=Q{jT5N@QCqS2)I(~|Fs0eac)bxRN
z{;t?8Ewi9eAobs9a198!9ocOvuSwL{vxWbbe^pW{;OiE=;b34Oc(Fc#r|4HxI7Tg6
z+yJO1D_<Oz5SB)U6aU2(uU6XX&^~+Lkvr$wYL=Z^@9eVbQgcdwBG`!s!gT5*pM7?<
z|Hs-_$3?kq4a*2fDvf}F(nvG3!hlMbba!`mjR=Ye(p@6m-6;*y-5nBwAYI=x96j$n
z=braE?|1!Yelzeqd+*h2uf6tK$k<ZUX~%r_bcK@|3=?h=&Lc?<yzIT7+hKyS7S@0e
z-x;9?7<4LV`bro^C7>V0pc4C)hp7x?wm4yK9;wnM>cO2Nw6B6A8a&ordD8G%`X5Sb
zK+expCulc#I@iw5{Fe1s%nFC%gpB!)?0;O&k`~kIQc*pf<*d}LneiNpisH`iy-@W*
zsYU->m;G#-wCg5#s@B5iUfF2uM!D;okMp;CvR_>A>3`oOo>ZKWyD?%5o*c%s%#*uD
z@&E`7D^EP136YNB6QfoTfSrG0SpoNuKb&%+raIhqnJ!~|edT#9A=;gtl)tPauWUdC
zPBCP#D#Y4u$1+Gf7%S5a8<cBd%G~12sAmO{Wc9k&v5o_mI`_KE^;S@-H|~gi@y|Dk
zjbpgia0|k^y_5o+ig^Rc3SV`eoX$3yrd+<$D5h&mp)BpXhj!#Ff+SH;3G_8G@Sc)S
z9)diTKZzAb+#10hm*h@jNLeDtiJohrUDapn$|$Kk8DF2+!4GFQAOkAj6sSg!7i+E^
zS@YLPU{e%d|2QN-0W(QbP^lvf{|uP-WP!T2*S0d<8D$0#<z<5fcUcbBhlHH0pmFi;
zgT+nNV$pYcHK=qM77pR%NpEfd7jTAF)3eVQ*_B^=7j5TbHO=FfSy%c^9HB)*vGHIb
zED=asBb88AR<21x?siJzkixS3hJ1BgzPY*hEnH9`;(<cFt7Jx}C?@z$_V-5V@N%V|
zC4!B>7yF6V<!vHvezruDQ^?dA>e%WucL14-W@0K60mXkjQl=k7t408ww-ujZ9teaR
zhTiNI-Etq=VRO1_^sS=xMZD-#pVB!9D358UsugRIE_DE`MtDw?r#Jn}5@gxF==O1L
zR`acGy<PI@l!oQv!=6jb3X`IHoq`RiK!Ls2>c|8P8A$eZ7t<8}r@|fk%0MawU@FSJ
z)cF}#zntKO4!Q=lZMj$I@I7id^5dd`;tvl8-XgLFIt*^35J6P+zXa@`PG<24)IP9u
zJ-e>#PAc%(JzM(qthiLp^q~mB!#+&tV#)mymbr3dOPk2dyx>Q%SD7Y=KrLNKi(cHm
z&}0}%s(^Dun}p7aObaeEAdM)VKuNVNB!HV9i^*BpL#>7Weu41Y^|A)Zby*U}Sg%d&
zDEb1Om7AK3(VF4gfno~S`uj!BLa1+Hbt<7_AeVZ_<aIYrhg#;1!9z670A<bgsv%wn
zp{8^ny3iu5+qe~S=Ur($PyNF@iZe((aJb(@bn>L7x{%~5+~_AG&X~I$?y7cunSfTt
z{VU(dY3VMi54#oxP$SAIvdUvzlcX%BHV}WRHQfW<Ez1Kt4CZT)KeAFP3YJ1q%b)j5
zEO^5QbFs*QB6F%_9Sx|!mVSbu070DnJbepdldYNNNRqQ#^|*YhohqhbG0V89s=xQ+
zu<&yfPQW?P(yRk2nmvdwzqAad>~k?CP-YCazbQ&C`3dGL>!8r#e+(hmaLU(c3aQP`
zobf-CEp~6MPI~?{t4B=hk$t8_tZ3$UK#4)VTGA%HS)K@tS+o;=DzcU8y?394wpzMy
z0(&M4pKv4&NY+GO{wx|#Fs9;up-O|gcKe%TOSO$Cv+FzgEsuh>3RosE)*JEy%@mgm
zSnwT^6bA&Y$7#|VCjd7<d``<fuhb7gyeSOym`b-AXBrvdZSornRJUjDh7Y<~tHRmG
zA2O*yPG6}@P_G(G#MhVeya|X2yi+Pb+nX)1EkU6G*jJcqecN^WFgk6+xbkeNjVUue
z;nCCTf!&-4`b=JRXnofGaXal$8o9eh6}F-LEwrkZS@pQtdAIke@AK?{xoRQyYNL8c
zA3H~GGE3}*s946n*w}pxbOp@G^0<f$TNo|W4p}%i5M|~G2<HftB=IfqMY9^PpuQy)
zftPV|oTA4Tke|@)ciftqk@VI}9oo9se0uwRE)F%NJ1^IZ=ig%Pw}<KgS3Bpfb1RHB
z%b$?37u4jl+sQi{G@E47N<dw6^NqN<yLbFt#Jvu6yB&O{ZdhLCUYm_Y&k6lR>v+}0
z2206n^i4xjC4TxL^agc$oTph)MqR##^ZHhrLlr<hsonV@+XokGpzQ2zGwhEeqMA!I
z6|=1<3<7s8{iTII)9R>MThZT5y8kv>uD)vMM(>~*Rewm;f@-~*k}psLfNo<nMyBR`
z=i?LSodQ_x7t78FVE<#~Y|19f4Ag@7u5!Vg{sCLz9!TSTwP&w)Bpou)Z=`H9X;lg6
z&l*o~yZ-rZBu{Ri%`UfKz379n_r+X%gEp$1xfe(^fjs8XyV~js9=K)Hv`ObnCb_PH
z{rj?NQnTCR>V8#BwVCK5lrf8#KxZS8gMeC3PM0&!K%ED8^&p4C_PF%frI5IpNVgZo
z0k64uBjegXGDE-J_n4Vd!o)?(1NT|wyfdW=3tvifk&SO*3=4Z*OWj<xeWsJu+cHdR
zXXYNcTjt>=6mmBx3EN3v&Sig<yKRX|^zE7OYj0aQ{hURqrOgF}bY3g9DdNm-sF(lf
zV9d?Pk*S1kKtUvph8jKvTxcJ}ngq_3{Uqr<iu!@BkX|pCv-+xmjaJXu-M941>I1Zt
zcPAhd{~K(KSs^iX8xrSQG!G&gsLZK`zo#qV%SbJPH2BcL2~Ig^CG|Bb_TBH~HPQF&
z7V@5%v=yrsq;~3nxXy(8HwvTnSXxfB(nklr_2(H?xb~o&Bxo<j?aIb(<&GoYS+QZR
zh>J<zQuEMre=7U^zQ+jBP?7tj33UDPX_CzZ!%EH=!WyahpibdNyi%gWoocixQI)#1
zl{mg@lH&38d)S;Z?oPRQgZ<2Nm~UMt@pK(;+iocO+Zzq|1l<&QB67FhBiiL=^S0nz
zrp3cd!uFMYcEb%{BuV3nvsV96>(Px|>_f}P$1AjR>rzPO!<U=r)oWDwXuhlZrF*rA
z15|;NCv>{lAbrG}{nia>``}r1gQp__R7qu(4a6dBUkURSOl&B3NH(s=gz&9mjqQ&$
zEI((IH0P#pNxhpR-4kjfsk-{zwqEAA+}5HV!{$^RnaizF_a?W4`Wkay2(x?Y(n*d6
zKg4~R+&rRqp9^1U$}-u(wbI};uI;($RJp<;f`*YhzpSaERau~tbI}Wfa1Mu(52aoo
zt!RA)Y*fwY1USmKLt4aq+TVN?ec~6Og5~t~AaO$_que2UVl?8#gTo<)H=tG|jSqEL
z?tMp2%V)C*kgojsQe4G)i3@i*b7158Fv)%XDQ)|*Ulk6j<RC-v=@yl!)sd?Fxf$m3
z@bBg>kMBF;dPumIt8s}a>O{(`Y9<XQ%IbtN<W>cr42IvsRjA%ds*pUqO~PDBz{%fV
z`}Ew!cY_+$BFXFE+<kv(^+sL;E*ENCru(qP$L=8^$mvUW1+n8Bl&r&b%D22W2F-Hm
zWjqV_)GIZ{7P8mHPQ{zMweCm9huAEtEjPE?AC#Y{3@oBQK4k8na6RBAj4`P$r=y!S
zHowsyelo1N`4DGvIVykk92{0YvE4+wu_nFzLJ|kGnrUgd_+X%l5uENUoNR$HfqE-L
zRWNq)(Zz^hR^YOGw2qTyEOM>A=_<GDX3OHo+AimJUaZj5oJ5nV9%VKCPufA+M7h`-
zS&U5WR<B;PO3j8_SyZacbI((@(|)fv2<i?YS_-m9bE&Om{)Wg0w4Wlsv5~1sPUINt
z&TpWad9gR~uF-V5$eOFYuLf_DNMrg<SA0XqTO;FrqS%?NXnx<XF&Rz}llqUj4@!Lw
z53yT9b-MjP=_(|qIzjW#q7&+u_o6Puos;H^T?gj1n?UP~4pg~nH*#vz@6V3$4s2(J
zMbwg}YVq9JphsQx2;Upyu)jB3u(Nq%3TT{4iFd^1JbB2Yc~gz9<vEV@sXKpht)lYt
zJ<o^oVr*L|cP!0wJAiJ0WEuOE%HCa++3(sW3o%r)OGU?U7Q@pVc6PhoYreI9?G#Oz
zE%JDFIL4B`jNSAB)^jb-tw)LeGO|y@jq0nUo-+<he^aMBkXpx$L;RxC^~i8b3Vpqv
zoDY&cOL=;c`Ek12ePZH%O-+8T&c50fj)M;)<tk|1fQPo3+!Gx6$(p0_{D{nEd9)t?
zP_>jJv3#}6HSlEcxh>=Fe&odF-M4G1b;%EjZ-5S*_4xKR>-22;ZcDsQT5M>|Y6_Hh
zu;)lCL7K@vKiDu%$Kr6=zm(hV`!u|_=n!6MB3oZ6fvyl^s=eU3Hr9U_mtZ4tT=Urx
zK-#Fj4MUPeS&%?U<7|h7_rYB$zxG4zmg0=`D74n1WVda)3WjVXJn2MdpSL`$TEX|;
zs)(F_xp@oP{EpwevV8qCW~GWS&Yy_g9+SYS_~hHI8+_9<tfkyhAu%%=YuctGlI11<
z7Q@miwz{Jtja^%8LnF0X7p3{!V+~IGzMp^7KYI@m106hY$F^@9x<LdGnW>%0jB0^!
zRr^UOtwbB*X@Bbn5v22aEkY?K1Azm^9iGbv2LV==TU{6|n_`QWA12mU->z$T1_!)b
z6CoSjDg5Ni`-vK_rFQ)m1`FM@VNZ(VT8Un>(aZ53`dYbrc{hku{Ha?lH|nc-M!Cr!
zzi6;PI)2{Wl_fQ%S5B=9a9gVQrGlzvnlpB);dRX39&mTuV3m4@c?Nq4&`OFzRmI?d
zYwjo{)>+A&`4+z&8}fc^c)07^)vsCLano$GC9PQ7VMz=YyFRSv0@AAE@6{w}it>u>
zXIAMF_~%ocW-eZ@69P;*l#Iz3d2T7^gDF|s>sKlMeknva`teXin{h(Qcx&q&IRn)Z
zd$JwZ=Q@ibW;TG_q?}ynq+)zPj@ZiFmp#*BXYQUHl6Fw;PoX?k6><$OPBQGY2`P?R
zc|}$n`n@d=7L<f?f)YnP3N_=hVzQr~zF*!MUolxT=vXHy)qGz~6R9{dQGb#1u1u0V
zJ9o&OQJh@ilejqKRKTP@!O&AU=Y7EISfDqxPhhoSK-<@I&+)IRx8LvGquOr#R2nof
z)q^k=`MlJlkC-8Ojp9kxMc5EN*^t2j5-9O$vSauNEikD$BxKs6Ezj!Hs|Ga?H|1j~
zbdOx;j>?3&TT-C=BNwLEUqypZGI}qcwwPfhW!!$AlV5hJ`0j0nZiUxLz;t-ChR~LU
zC5_ajLZZuh5@J|-ZGO3$Y;>Rk?|l&pr3E(ui2D}%dFcSIm>S<n=E-<Z9@!?UWSIjr
zHP)5D*~2N+Y;@<2R-}&X?D5-O34Q6UhO`%n3vNR111Ic-&W#nh)p8A)Z=Iv4rAwE|
zmY4QYi-_|(Fxh_|s>9fv<fOT06*rkrF}QK6!=pr9eV_Ur2N#MD)-FK-?kzE6&8T3P
zm<dCToI5hL17U_2-a~x6TU-zwf1t<lCgSixgcF-WmND!8I8At&9vNU*jQ9!|xi00j
zhRYP4)ez`DoHt4~uu{+_T^MZl*W7wHA$Y!7GxSEkI#j3Zk+y4G2npT_cA=)YiR0<Z
zZQJvNE~oK;2_f0ag*CPAq=PCU^oVHF2cAo$JBk$FaJ%`WXT_JhTJB60cks9QJ_-M<
z$d(RnCnvc?^&5+X-tVi6J9BP9b*?;;bw5``TassZNpz>V%H%TBJ8>nN9dXF9OtIFm
z<b`7rcVfDS{Y6qySR!UhiS0caaR;B#Y#EfW+o$Lm_2bMI@fW>S$|ukFi*Hr?rD>5C
zmGZ~2M-A?MR~)yP=W1YRO{>$@ePcGO#?yahn4y_^@zJYwZMg2>>G*q-8O`D+1|~vt
zy;%pj>)DqU=_f9wz9$09>n_?yV=6qu@7<rt(4n=Q`s$dLm5q4fFY@LN^Cs(Tl{iS*
zx_)?U)137<03r|N$n>Yr<2nw7PDGC4eA><uD45nl*uRBLbaUm)6zlpeSL!c{oDyzT
z3o3HVEbV>9*Ozf3PNLi!CK{c2Z&3I6fLYu7oSz1uNtqidYVWzI6))yZcd}IS`>y0w
zNDX>En$R^Iw8ST&>L)hA8=nZD+Oj<u$CRJX9m}VgCci;MoT8(taOvJgLi-I5r+`1%
zp_;4u<>o}$?7q0_TH%&IOyzWl;vx+>)_oYC*_ilt77%kkrsAe22d!1g_<M=%!OM<B
zMKif<!TF+T$ynD~tj3RT&5LwO7>}dlP&3p$GRFghX*8a18~E^A1$}t2;e1MGvW@#h
zs(2Do2*6|e2>*?Q`H@`i!7(Vith7_`Ei<ro-_#1rQM0zJ>d8+eFSb3<-t+sC1x+}q
zY_W(HV_wq`-IFkHmM-p*H?c_EUon{!0^iSbX6|-)SHK^=J>>Rc#IHOtF1~HN?Q>h&
z>c%Au%vAfhiBROEF%rpqMw!&zVnO;+e*Z^ZPr@gs)aXX&Ra0o?N*`}EM^B!{5sJPH
zuR)1R=B@XS)LL)-;NDdC#=QdArOzsAt(nuFSTug>0Zw;#o^{-tC)GZcY4Z5;IXC1k
zSTItck5_BE>oWUTL~^(6aOQvvR4srdYXDleJRqxi#AZ21%0|*q<##f{cc&SL9PzkL
z4Jkgevb%ROGW)`?gUz3Z1<^PP#V2EnFT<oRsj|Dw@}VqAfyp^{tcbb3;&Ng39#bi!
zRkc6`aK@-}nO(0w>!I|l&mQ3})#eREcC3a|`6F3V+EW2b&8^j^H!e~l<V?P0c~0U-
zKfxd_?ghnW@tr+kYXVAdUFeomKM^W^-5c5zvp~L|JN-JB=^NMbfi1mjck?p+g}HYj
z--yn++;o!HNo>6BWMw05CtmIAlL<e4_MMuqW7eI>D-2ttJp*kIZ!kOZBJO{XLTx<#
zHrjJMu8w?v)6IJrQQCF#{oa-imP40*?2|h@c!Dy6mUvqn!}mQS<c5&EF&&Z><LM(q
z_qU~Wt1sEgD+pys_!J7_pX9Jh<e|Hw=*eLex%-Y3;#L`aegz>yIAzh2-?t}u6Vx5n
z|7}_~HYel4CcUlUO-H2HL6Zc2KP%g$Y1nyHMn?zlD|Lh7lhyi|oHs?-zy{8}L2|+}
z)!DuK5&m@Eic7h%D~S{P^HY!_VwPX@z{<KMI_=D=iAU9nJz29y`Fe%GUh29jdj<Q3
zNZrBmWNXZpy?G&WXf40~<i<FX&9bOCrT`(min(Pyb@?Hf#JFtHMRc$pKW9IEZ#dB)
z1<xs5X;?wkl*g3HbsE#*Yk?@8pP8=Wd7-V{VC%|E+o5r^`%1O$<|WVYYqKYmh#`c1
zg`Wa(Pfcg&kM$NPwXUP_rRz2_E+~kZKSvrW=NPRz&=}^uHFhf`Chn`^{K37Zp2o3L
z%rp$dq1Uamdn)&fdLzvx9KLyxuq9?)=+COlC4_~#*O%w6q#J7#+wd>5mz+2Cbg5+?
zRoZBCRWFSyBu)y5jPaIySV`-B&6mu*S@Rix-E?HNC_%3}24_mVI6hXHSD@%p?(PA%
zBmb+ajE671PJ-eG$Db9u-!nR0hn7<#pIXmwog~t{^qTNQlHaRI7!Mp(f8waOigKBJ
zY}d`F$QPG&$-|6fYGt3{D6&bym63TJ(bl;0=}f)sIHN_@8FE)Czfw87641*>zvd0v
zY3)kxOMFrOO0==pL2N_7ZU2QF%B>rf7!MuC8E9%|Dqg`Z=E2fs|K-Dqg2{nlpB`;J
zH-;<mq<*9@J2)ZfxSIRM_ry#31<ikb6hi8W;4Y}9pgf^9G&7zTXtZe6YIw@*{lvmW
zx-#oF_jnRN$=<iMF*Cl~rO+JqS)ewVds=MXWi&aK9YkI5x=cc{q)q(ly^xCi#@+KU
z!&$$=4p&Qh9tR*d=4*|YdZpEq{Z%?o^Oz%RN}rx%js5uibS!G-tDqk&fDgoCe|*Rz
z+If6Ap0MEQo-{3cguBc+9{$NA^*EA!!|j$LLw8|##~(RWe?m%n1Zm>y7-9&GKKY&@
ziA=Z7h8iC?u3UKDZ0d%zSOx4{Xe;t!hxO{?URFZ(Tr6Hb3}Qz#BR@r6ZyGIq;rx!9
zNN=pB=tQco@uFKu9P@ux^79*n6CvKy#aFaA`#!JX<|XE*@OvdGs`4@Mxc3qn2aMy}
zyhk9g1C@V;0)?Cu%Pz=U5<^_3r&5i<Mme6YVpNx;bDUwa(yMKZwz(uOZacF;eIphq
zUE?s{W_q*gerdvO1Pt5?S*g5@{V^uG9hTlqOWW!t7OmltC#vUb`orw{kN!flD{3dH
zg1FW7`L1bJ8fqACep@)1wJ0s!8GC#&)|1G`&OZ6xcguR)yue~`)`3Fc)bk+6md)W1
z2bRG4S7y0Qisj}N#=FCpQMK9RzCNhVU0Cq4jhy8U;&%jP&+(7;{ZT`dLZ;KV2-Oq!
zLvW9LPSyfDo~u8Y!+6h#kC$u)bY{W3&izqZ7U+ccH(dPF&mnxHg)FDo5zNkxgD%sC
zfOE8g;gqOATYTv#t-6$&G+&ymcp0#kk!Cl$)hP0K!nh>f(1cgR%t&6$ZN0H;7O(wl
z6y4wQ``-O}Ed>Zy{c=i(38*pO$mkl8I`)PNCbDvy>_-DVo;UVv(X%XT9bpmKxe?Me
z>`Zo}VGEQa$35YV4(qSq+qDP)n|7MPXt%p18!GFXqdafCvHp&@zv1!6PpAM$0>~Pp
zohg>yx=>V6y>3NJ^iG+=zNJVsd<$oC#bEikyIJQeNgguJlMH8$?qaIk?|yZUiu$}8
zrqLECbR|l2FSb7?@oZU|QXlp#ZG0%s^ki=Dd-@c1S^J+5`nSK~5g3_a#Utl0*{HVr
zvr+4HeM-j6qaNszKNG}Mn9p4Mf@Xj{-n)Y*m!UKi!IPaMW$Iy)!9tT>($F;V3HfD$
zf=ib;yENaFO6D0?sGW?6F5!NqtPE-dClJE^Q}q7BH(aCjx4sGok(-GaY4mrN`@;Es
z1$mYC>@Z(VbO(DDNSh@Euh_HoCdloavdt3afY6A^cWyoTR>OSIvhNvrgJ>e$5Xhg-
zNC%gwxd-z5VvYm#YvF+#Ow|W8!N5#A(z4ZVqj%mEeQEtDUOHCCsr%J)_2a$M&L^jn
z?@T<8->&F`C*=hRhutbxc-UBnaSI-0d%W0_G06V%C8jrDQSU_6G_k1BqAfj9#D?fj
z&>tly;aP!jQlTnUY#wrPT;8QaK^u`cy0O>5qWSWJF5@iM#<F!sne8$YZ`=5095#&7
zOM@({``woPQ)?b1Y=t}F;|-s1!JcaF%T+rq>6*zWA(&d~yyxNrT@d#WcaB;EGM#@D
z+<&4+5M<H&9yp@~`C^G_I*0jTc6qq4V4yu}z9LVKe0k8FGQ~tE=&n=z%BZOZ{p&c|
zC9BM`!bf}VvgbMmK3hCMmP^+|(SzU~@=eBm%Z&G5ml^3EUX>*Jr^){MH$n8~+eS`4
zpPX9Pq(hW+jWO{m`5aP+Nxv%(S88s$#E+JHPb@_C=$cVH-jD2-FT{jQiR_)^B4XDK
z#LB0X9vYh*&c0&g-NqTFN=V1J40DXAE0(P{KieNEzt(@1Y4<ly|F@rzPEf!tx4vtU
zNQhuE{gi~U`$I~>6s{M6yVAauYWOTAqvj^><pl_1Y@OFd%X;}#_iWo%==U#UVkQ$T
zUR)zIsngoL^dBm7sJ2Rr0h#PA${{KaWPeezwIv}voruvd018a}+ob=Xg8E`0i`Oyf
zSuyP@MK7P^meMsT)TAN5o5Ct<Z%pm5Fn;2?J;&xG2&&GMkQ7WN0&;m<<acdiB8g*j
zr5HXqhZykqj%n$f&LTJSg4y{VA6&YhTq>0Iegxc#BCm;_yar--E4wA|v|{?j{pHe;
zCx{6DU{3#ir9f%l7sz}@1!9tlY;hl$$wGBYD>i!+)gAV^(&j<$H@@f(v9mV>ph6{q
z!~Jh}5XOcdL{AWMs<)+%mfT0ih6i%M6b>VqUDH|&MOOYSM==W4coBz2X^hqTXi<)>
zngA#T*rXwy{UoJ~>*LsZjt|hbcH%~lya5nF8K{AMV7-Fn8vS~vQp99H$37gIBdqRT
z|E|){J)z_+L|h&^?kjq{9XKFK6Be22*CR=zrSm)~&?}J8-^4X<P5B1%Sy}yvwNdp>
zi_AlKrU4F56-hhsG3hBV%c4G9=Dm&8uq`!~?j4PN<SyA!AGP=9hCY%<HhYz(ZONos
zBxcY)HVQ?Ohet-IPLMWrA7mK_Z()(Q{2CqrWXJ|6Kr`G@$Cnt3)pVgq?s9}QMDX0E
z$fPpBGcC<Uy^C4;38)dt?wyi=&rCYkMAEl8ktNkRKkl!a!Imz1up7j`o<|+WNY|=!
z+ZJJjG%-_RIk~9ZIBWA}#Hk8NN#>WPyPxC3Sn;Jjc||gxBvl41I;CaJ4*-yGie25Y
z{H6Va9v~6dKAcVZZq_`Sw2Grv_ZB&9ih$b!d-?;5B8oc0ayNlf;Kb%bIxOKAkT%~^
zyhD4M)|n4ce7U-x`R{f{%E4t~NNu5Iz||ho(Q-W<9@*=nfLlpX+!*!2Ss?5%3Qbwr
z+^{@eUw{-9;VvPAT#_m!w%Kd%A?wue(UF^>p|Ao}fA!b?=_i=3ualmG4O#cS@7`PG
zGZ69FUP2IlR?Vmn-TR^wG`gJB!_Je$7}fDxCxR^kh$ko+@9*V|=OK2HHu3WI5NvJH
z-2<*G!(%NGP0&jmhA9G~#})fM>l~0J(NLU`9*sXvE+McEQBnL<A>e0`<M8=Q*^Ihz
zwb|ZKp%ywtn|U3s$$U^g5^Aah(Bbyi;E)DYLQJn?cFTJk*$@xyYhp4v7cI*>c79G}
z5Zc^I&$!FsuTHc7pbx0+-Jo-Fdb9h052)0|u5`R>_lZIVF1rIsih@j*znjidiW12w
zjX=I(F2f-cUZ^<DGFBJSkY;i{mLWqPjf7141;l+@$NVG+C=03pHZv}M4LEfnkB8w?
zV2hw!jsCu(!K4_W{n<|ehQyg5OmL<??Rz4$(k+Cf;F6Gx6{)v2By6UVinHRNI#d2Y
zObd6((cK>E*%tdaC(e&<!a$p#UotZANEF$eHe|BXHo0RCii{qwz>0axT!z&rhuyQT
zC_2-jR(@|+SznNa0nyCsg8@l<C+Sl{dKsEGm%2gP6ddeunM~+2M3wtPX^ljO9VVg=
zHJ*Q(dZFtZL0z=aY+o|nMhV=h<^Zvi9!Qq<V{~Jn*bdTtK~DB)zSd+HYnj)+&t2A`
zhJFOgiT$e?{>Pu~;z=Xs9#2(_`XnUF)8bR1RH-+t4Gge~T%G7QrcG8CYmkN1E)YxJ
zGp1%R4A+#^uf54gZb0C^>6W%o2D>&751Wxckal5G^H$!P)EY1JPtd&nwvMn`X5F8`
zDhKoCuw9IS)TxXe3hf<+q>FDX-K?b%>WzSN*i;$f62b2)!baE#9}_%B;7|mY9I;_h
zrDqeXh(0pG>Wn|o8cG?OO}DROF?o{UNYC`NzgE!v;?d{}95pb))@Y)<{^|4Vptm~c
zIUmo@C&t2M?!yHUDVA!(B&4Yn(MsLy73IbtX_!DOaS&MDTHJ(%pfiwmM{Kz4W6Uh_
zeHMFR$mwp3=wW%x=(hBPy7<1!*6cydRX;~K1XPc4ZrvfDxa6CrpJsSy74qG2ui}Te
z-WdMWsl`19X!cbTp1v#PDY)#x3fR&lj7i7j-45~!Jb}#Z1!#H#lYo`^(E3mgE>6gx
zpEF7Np#QOvgk+?rQxRd(c(cDRTjPr}a`LfBaZvvluft1B$l&*&mAg*~B$c<&GM?}m
zVP;crc7|7%kzkez;f-<pC?)_0U?mLFYh`tXABQU9fhHz?Ky9BQUd*IBM!9bHUrhUh
zmHG6maVx~Iw~{TsxjF`8_empc<!=w6X%5!(_2E0SC_<wrEGt3gdAVX5@Ngh$pQ6^>
zTzQ?TkXlCL<M&xrK4c2xcJhj*R-MS_v@h};o`ciAqD`d?9V%Q>yTopN6)g>_bm;BK
zI>3#&W%R)%>pN9J$-(gHxzF=waLwlhu?2m#h@T2wmwEEu*69e0sT8w1lBIGGb0>uC
zwF)TPbc1z>&@3kN*s5ENIhVk=Hek6vbft@Jl60<(jkUeto-u>!C9s>V1XDP}flt6q
zAVMey*q<ESy1H?)J*|%;sx|GyCapi=6xaFf-V+UjGs_Dht(Og+-w!?3S<@wzdJ++k
zO72f=1>G7rTk>j=kuv~I+)}SMFld$Fh6~0y;fC`hRLpCgU&}t#ddu5<?tO9D!yINB
zHk3Z}TC$zF@-~-oqN>9FX67-ZTdXZ3l)DH^N%3@gh>itlQu2@L=<gaUDaC75mFj(Z
z$n@|9xbKTpMBIgEzf%ZsTF4KzFP%9w^I8WE>{Kr5R_M_!W;2JEiu_h|!L!-U2jpJW
zZ1+=vGv)Yo%+iqBAb#J{v$3mk3cobJID}T7&!6rMuO)47)KBA-C)~d9FKyUWF<-zv
z3jor!_T*dNgD*v|r)(Z{DNAt+nx!FXva{DSZRm+GRCyhIAlG>Gu?bck84kMH36e%P
z;yTb2^^~CbJ?x9~+7gllYvvq3jAip(H#y&S8TeYC269U?AW1U4j>a(rgmr<-{iW~K
z?g7{3{*JBx1+p5n6d;2}`N0Ie6p)&k<cvTP<n(cc#ARi}_1@&}4KQCGztZ6TWuM4(
zB*Ia&NAJ2H9Xu}6KPbl}pAz0%kBP?Gd1wVaIkc@se0m2Sm;hc>1$AJ6!K9c9+@hE6
zCG>RbSBau)fnLZ&l>5Zv@evPX;bMR{^g&akXqfD7!ovP7zRA3>m!OiUblKLvhYqy5
zAy>ox8V$%ObWB>6lP$zY+T~h6ZD*Km1TwS9fH)r>{W5&k<t?Z~y}vKWUcM>vOMS5n
zB9*}v1f#%hu%LOIJTh`lxFCX%7C}M)mrK|ilX1|q_ub}mpr$(DsS%+Y1!))M`x9}X
zXTrCq?E-a7b30Fo>GHGR^Zb1I2W1ekoQ(hIH2{x%wM&wYLw$AW3q>911q7}}Fh@~K
zL)ff0{it(QmmZE$YS77nejeTe7Pvd3wPd(g2Gk2^1ex%-%kkB-tCBXq_C!mlm^@wO
zUuQdy<S4(-Eb;jiE(~ki0IRjHq<kIIa$CAC1y(r?4v`AO5k7hAyBKZa)&A*6B|U&?
za6mU$+6!J0WWz^oDx@Ny8*OP^o=HX7#i=8eYH-Tc9wZCpOx7DCQ9=J{8JvE66?sq#
zK4xwsSZPV++)*i#_`TX6BcU_37gXI<g>OCOh((pj^G?NII(=pLo#MaMUsVVM;Nk^^
zvh`UBCN5u96@`ObKr(tzH$G<D-atcedLZA5=O1i)f@0PIY*J|99R?XikE73uuGa^7
zsp~2N1+_qT6Y|Dj{K}3new9i8Yf>#E7FFBtI-OMc?2fpct^NcGC}ish$P`+<;<f)p
zqx~IBYMP)8e9YBBt&lx^YZ;MS3a|^NKr*Hmzi%`<oiTj!v<Mp4=(kdnRAjGFeII%E
zGWPO{PTVvFCCJ1xvmKvBU^i}mrEFfcf=GYX0stP*pb6RnkgX0b(5w8`c6L?zyH5l<
z3eY}uOL71neg^WiNlyVOl?=V^`~r6O#|xqY(i|Xd8XQE6HiBzs46B+vKFjSKrwWvk
zP=9ZE=O=JQgh$!PL>9sB5#(3(yMHaHzz#V45php?BPB=2ZaAi^3{X`H$eO<ebtTeU
z`}p7utPb$6aD;$3K)Ci9^3;?TllwT};#B;kTM#J5229?BXjh}@Ft+y?PPIWQt(L@E
zF8P(B-#n~$bhdX(y;T=BKX7Lg3}86l+_~hQ@~;^Y27wT?=Voi4Ruj)KX_u=Rp3aq(
z$e=68X(gIbbv9*(r69ur8CH}~k}R;IZjI|N6#8b1T_V3-c^#z2P<kT0D7#baD}?=0
zm2u*)Z2}m&g(>{S?n3gETpPy3@`$`Cx+g92?0O_{tpz~DJSe`_ewWkV;zLc!y;;5s
z4xlwCFgZDu)mvnuuOVtfu)axGxc|im`NO_rsPBj*u~|jYMKxP6JJ}x{B&ZNQ^7(xk
zJr<<y!6j$FY_EU@8S_yY$Rv3mU&}tdE(_Gw1ejVE6loGPpB4}<+4zg4{7KMaB%mk9
zAU1f+3iq5V)e!sEl{C1aov8vkdYu)V4A*uWC}WMIM4E56uK$t$QDoLD^NsLNBUekn
zM4xIUZSwVjH4cM^_G{QcSA$!=Plo2gZTDw;a0&LPen`iueVj&%5cM<oqL?UlPk|;J
z?i0%1N*-A)+h6wZ{I8~;z;zODTTPwJPKbd|?x7ZFOnp|6YE!1JLYMW$>j?(TSGZP#
zMsqVT;s6Dcu1YcfT41r5pvT&`8JJ8*au!QkHJU~jl&|EB5((TMG@4Bbr2#rn!h@pQ
z4`GGt=f-4-CyUB2iW_}l7x=D$z9AVfw=?l_v%zH!uYqbo7~sv}+dE3$YBRa%fwy<S
z{#O`@!H&vXWXzZC9+RPki>*nemAq765TwOe@=gl^>DL~$&6GJ;o`$r<95yD4TFyk8
z8SK*QpG@~3zG2A#WTRkX8{65RSPBb?Exd{<Lad>#;C8FZh3sPBmLELhctJt|_;Ql6
z8+|8Difw7lIw`N-YeKRZB5k6=)bug@cltvw4Ywt|=xDOtpsv|pkOWf^5cu^p^<>9e
ztqJdHBU_UY;$gR>CtFH?+Ja7!fbsMNpAHcvwkN&Yp06l)^TrE}A?aaza(gn0_e*Ng
z>mLOi2PH;Nsa^yOn=9JWb8L4r?nPq1cC}=fb?jmER~^UJjC%<2x`qHkM8P8c^9z$O
z0y?H)MtqB}>(W4%p;KiS?7wr2NO@fko8m8R%Afq@@ju`D>z5|H+e9l%6ut2+Op4@}
zTVi?qUxC+*f*NkovzYZw2ci9K*1x`eHG@{1myhovQ`#xJzm7#aTdc$(_bM*1&IVf0
z>dNVNONH^p>%Sfa&`OAO;JD@7_JycfgE#wzT<^M2u}J&mp;F7P-?yt(YN~*r|1kYu
z5JQ3TT~xRz?2eF-kRrKaTIv*&GY%<}8PvO|eaF8^^3xeSI0;2p!sDpyEqQNHIG?Om
zGGD@IhX4RjMN#mSfaoGwl_ERh@5K1`bxEgr@x@QAo<{hvlIXYJ|L&~RgiQ)GDFdO?
zv6u~R$)W!eC4CM6flVu#lp%YsFit-Z`?8Y*?}!p8C2Y5usH)gt+fe=cw15ALokT;T
zWZt*H)n4lRLG!(N)@V-w+9csYRf`&Sf>X&KN&S_p{{H?I%AtJdN=8S9{wg#2h4TbN
zM=L7G9Mr&CI<YvZ{4uh9M%m#R1cY?<Whur|g<y0lgl1*ralkx`zH-oy07BMtg9(3$
z5Qvruh?`ilJCo5cwR%3D$VgignH2?iErzkckbp>|{|u}z{1<lkXKFJ=dj<N2e))c^
zL@;F*^x(3%w~06qpr{1yZ3zKeU^Nrw!MEU8jRA;&xaYHZtD^pVcVp!d4ePxIADHlz
zH4Gmokci|MIm8r^{UbvEI(SqTAV9L=>x<6HUbfo4v7>DdFrRw?UB*yqC}u6I*&bkX
z{hIR;QNBwhjn;p72gZf=_xF?7PP4OCj<CVj6VyPUtar45yiA4<51n{X*Nn!f+M{oV
z`fyFIOdNK9cNqm(SF0T)w);fEoPg-&v0zjJ91;NZK=ifmkhGn$W1o5udFB=q$rTU0
z)`WNDLU8*l-)F?n5^zvUx*ovJK8cj6FCAwM2jS=Vk>`?>fOeTfN{D>!Yk1Q`g%#(Q
zdI1pyLj@3odnHFID_x)Bow=4}O}V<Y0d!!9X(>}C=myUh9CeHRdO5difYo?&Xl}ey
zZm@NdoN&vf;)Vi1dE;|ts$j$`F^?H{3;uc-;I1BmC%1FdiEI>)r|5Aym-#47+&Uhx
zo*|lo=LEMes(Mi0!GoPXafG{=vCf+J+G){U9lBl{J}GD-fq|tkH{o_mKK8k<w><~R
zU-|8yu$9CNh!*>bLe7(5I}WwDVuGA=aYKOXk{Cg~9iXP-6P6JEf3-gU8(Y7{@9Qr}
zQjJ97+n}6&j~7-Xhl)ilt0gjUuduz~b1aqVuQ?D>k3<LFEH~<2)SvH-Wo>C?lhSnp
z)bArJx6%wQ<_UFBILy5KiUHpd?xcsdnc^Mr0tns{IZpaC5W#=|>c*>JG=4&kj*-pR
zZvl^VlJ0l`e0)nf?2r=urA9~&2Q8y55iV&T6I6H4y(sXxFJ|?lfd{`{5BM2GsL6Ng
z&3IbyS6?cFcZ$6ZcSeD6XrTI;2l+(}1umt4l>HJcETxaYa!mDTEDZ_JYAKcTV=KyQ
zHuc558n6&G61M}K0r}*g3HxWw_pif4KLPfZZqrvH!h!&UUgUEx7dMF{^73sUx-b>B
z?PqeTS571+_3QPJGRebOIZFnRN51s4y_DLg&`h!DYfu+Nhh9)q;s|TW3pgw{;skBd
zM{U(@v-QrG$#;RWa{gj+#0Vf+T+R<B+ELvPn=+lb{C`DrfMI`lBNIpL=>A_XSu-=Y
zw#;*+BoI-=X?G^?-0e7Q*r0sU#s6zI1m+4wIU4K;oh$h!eG#`SB{TZfJVyc;Dd%B<
z7{P6g>dt%j;SmXx&k%s}L`mUpA_VuIa35QSDJj_81&p_r0QBSDrE{sW9_NGL>%XQL
z0%#DsuiuJWg`S6F8Z$8@q;9aNDC}ucHptM>dLF7yuQ3hJAp3xRS4uQr6zWM%*;X*`
z4O!zMNz6e+#flQ18@Uq&sKRHD58#oo&k6us<7j1TCw81?Zk=2i&nakpAhAdhX%#{S
z(E062wUh~X5ai3K^<jQzn}3m|{bdt+=ujweWYjAZEG3!(TL8`FyWWa$QOh1p$w(>P
zqEXkdP<y}l+g|elQse`BkU6dsU~W9J&7Wt!hJ$~S#zAD=l2Q&$IPE%V{mnO{JvA26
zw3oFtK!{%noh&XqfxdGX=MZ=dGKLy}A82SKmp1pEywK0te8W}h(fI8#kYLaa1MB(m
z=LQVMa6kqfK~XXqi&5o@5-6Ipk~FB|E*#V{0HXs1rq0|6ZYNB3bmGHhDmVdulEhK0
zQ-s?8X0KS;X?SR%I4W30%eiQh6&)kr#4aKP9)-9T*C4z~t6(*YSVU@a`K(lFKh&LM
z2!dEeWhEp!!+H6rTS7^1toAft=hwhN76Dyvc1CaF@lyHD{>ih_xt%vFhL4_t0<e#?
zSuzO-Ey5~lnUzIe!9h8%1{2VQ-L45KZ;uA4r;Ky?I~!x2#!Vqs5Of6fPNa{IP<b9L
z5<EJ#M4>^TX=G+%o-hLGwQXq2A<iiV9|;lG?W_hP13pr8jNZE@1e9=i-&mwf*I~*L
z*@z)J20|cDFLq|1tkQSVnyJ1_2g=2%pdS9*dkG>#^~X@PH^qPYYi$c0>;(EwSB?f`
zfYonuNIv8fHyeEOikv^`9(2?|d){v!!(8syXa}(A4H#;xf|>Y4djEWn#4+{{UD~Uj
z#40ze_-R%0fxBG>!P*-Z`7hy+-)Wf1uRg3}4o~lzuOYV;T<~for@#hOw^H0-LcEX9
zs??U9Av}1;qLu<AX7{V|220PwTvyy)Q8{$YLt&tg=R^D<cBrE~U;cR3O<w|{vaPRK
z@CdUOKHwcG&hLB>0e!JM+FaT@Zg!FA6k~|TKhmSUOjK6loKQyafk)Tb$p9=NIdic4
zwkNqMl4?VWf*>ri_8mIGk(mwOV}JBWJT>njc+4EiXHj4z<!_Zvw?WEwM^m3&ZFJ_D
zRyYhdkS^%)??t!x9G2F}Ai?9(Vnw}#Z5$vrqP9pyYgWB_jsiN{D+V;hzUXvf9zy!s
z^FqW4>EGcXA>c1Q2Uhi=AhzTtl#V+t(V8!eGdb{Ez&I^5Tc&%XsAA_dH%pWm9`k}|
zf^|DnTl^``?Y9tu0D6g<2iBJn<OwlH^U@*A#)F6vlpj9glIil@d*74&+*hJnY!?pa
z3Ck!2;QN3Y`jD)rq<3#=hFZ^tj}^fd$O&DSGP#r`z?&JV_)Pxn*AfKyw4{I{M6Xho
z*~*6y+^ZuetK%sY^AuvAz(R~L>{-O!?)~(s+Lx)G1}=L3P!=ja5{jhgx9-QA28!Q_
z*tu-AL%893@t$S+o3fl!r&c-}98Nf}=lhDPBtBg0nzvw#qW5hc%5^U9w<@*Bl765#
zH-T~Zg|?_*C-CB?IT$V(M;xI9EbGLpJ5&XL_PPHxRGpF7KUa}wbMZ4$7N6%?cylC9
zy1@(W{c(7<EWn;C2+-Ddb}^aUT@j0}S@+7>LUb;hLnmaFXCEEQ3qE$FtBXPM={n){
zMt}=-SZlEW1G|3&V?q6picqX$@3`wMpz7woPdM6Kcz?!#@5cD;yl_;kC~Bu}AzKC>
z8*mL82)F@b{UrIDE2w(R3sZWfrxh6lR2K0W8XUqHrrF##XTS`3U8jlUd7Yq7le;GH
zm^^@IT7b=d+0hDZ0BjWoluTtij*DuwB07WCFWmD8E*RoSSM)py%T4%q<Nc~fupIR?
zOQ|c@9aL)b+&o<g9_6<i!o>i;-l_fMaOn&$UtgaYPGgw*YRCfVN}!at&j<zj)3?>;
zA6P~egi|oZ*kv2M;h^$hJ5Z^;e|gLiLnhb^AF1KOHLzG@x}*>DUX2n$uw{j!r!db~
zaV@^^yNf&d-hXS?qxe-ogB_y6(o)v(JY#DMrt@WS^S<$`3c7rFLPqc-1EPftA|~#+
z)=dFZQB3wwFtu7xv7^`~H$nAM>Dydfk6TEMBb?CXjtmnoC;Nq%!qN3}dt)!9yTx!B
zCU`bxe>{WTC*1iS7A{2jEKC}J#?kBJnnN)8*@%e{n_6+MF6E-Q8Gn&1;MO)>Ie9cZ
zmIoeB^XeIBCaRGUCmR*a)F!cljO92(bQ~qlx|JR?<nvHvodXy*pe&$^RF6K=URa<V
z_`c&?1DAgemjQt-0a6GMfxvZxToTY^(Woif^DC9RG`io0Y81NB&UsN@1^^l)!tkOC
zclNG7`r!ASya%g#F7T-`I2Xb6!3$XdcYqVv=|WkM1`4dI_3A8>O%#;a7^YaX$skF0
zL8EE!w#l>7UK6Iw&zo;ii{Zm%)!>|8IvJ2kiWxR8U}tX(1=Gcmc(qX_a1pq!+Dm>C
z^n#QFyQ4FIoLOPFC)WDJ_X1ajf3G~6VE6SE5GZ&9{)3hS$XJDwkL)qM^_-Gfydq5h
z7?4@XGhD1Isl^$*eq_KJWeT63hLimP&^?f0@<$E@)92KA9|}L_c>y5)(Yz}c3c!BI
zv;}m<>QNQ-<J!b`HTe3*C4MXLEoeq@@|(G#oCu&)loadvmrGTi3rK#e<RemJz^bHQ
zHsp%zes4DRLm%ASsly40Ap1Wkn4fC*UqdK=c^yL#^0cXuGuG!C&^{HI{ZrWS=Ck37
z0uwDIHkJ~YOa_1)Q#10(vjksjN_}jiFsG9Nf(dYo_g^Oar?;3Y0sM!aa*6`1Uymic
z_{n)(nT^g(IoU+3LIdDEKtbPf=}RV!i{YfOenEUUPyims3r^BsgC3w68I8@jX0w10
zPe_ASd|dUSym1*t%=%wHz~l#(#DJz2n#`y8Jm$`YA|b+%_%9LqPcZ%?_Mz;ssavbF
zC_#v6^g*pYdp7;HxUVS=#6F9_2oFi(g|-l#ylXbZSxxVsH*%LHiiX#|!9$;QEI{UN
z%Io5g_8CFJj8oL8b#&jdnstfebC!Vj`{<!rne*ki@}W(G14}yzzgOudeE@VW`}bC1
z|7*|-loaQAN}@~?H76&XjaOH$N+)i`LmE#OYtfiHGwK>AEI{b|cfk(fK>~x#R^8?C
zflvf6^9jvaU-Je|wH*$BKfu^)fep`TN=<B>Ok(aZY)OvOQvAlLZ4rT~duoGFfuI<c
z@ZKk9uJaZ@GF(@wMVWNi-U(QnpzO#fZW~pPSZLFF@f9xMAtpS}nBV~f7gPgI()#$I
zV5X@jALYBzH6xVz>VpHWb|CZw6|AN4QAeX-&YH>=`#+pUct(cfnWun;x1!#pq=0C#
z0Nmzg6?i|wNmu8zqsRW;6=lU`=R)E<-4=$xTx#syrtyF={-y4Kn=*?4-tWAgrw5L4
zu!XNTWf{+_;^vEgzEZG&8=8dp_4BhtVK*@5O;5fIk#0C58gMHZb`(I$eXBE&K|ZJ{
z(0SI7-4}j_1QAtsFdLS14mwP2W~2-h^KQCdUay7^*9IECxwTecz9rBH3kV|flXjzz
zb{M}Vp9vn*MvLV1xxy`2Vs3%_`wW=#ak{Zz2RxApcxloEu$ooW$qHqk0KjQ+u|+o}
zYFG;;(8c6%u84Z{0woLiwc!W&Ac1RENF*TEo4eDBJWyVgcWg|L>7Le-70TcD1tVTf
zNi8w=mi%m{IojBUQ$=NW_cw}lgE%mCTxQ$`ik%!OCWesAi5RZ@VwyQmXOh{Ko5&R1
zkjiy*0Ook?SrmE)zO5U4Kz{*f9N}?eSxV~~$XMrSNPG|4ym*5tp5{s<A(Mzb!u;E!
z-c6<x3Q;a_h$)<weXR^I+S7HHSyTmrFjc~QV<yr``_o}Farh?rl~l6gRB$N92RV5X
z-<e_mh^+=!hyyN|uR(oLjO0dwNFHDUhq8b)+p}J(;s{aPd;D4L$I&b|<<8{LX<oD8
zz?{|dHWNkQ01ZySe#wwN=tf3LN0?!}&}g(2zxhF%t=G7&J$4wdvu4=x-3d9V$m;03
zG4sEkwj=+6i{COg&|DJWZ`O=?6tFzNWE`RvZR8q}N>sq^;0kRq^gC@ShmFlb0L<3K
zvf+1sAI$17!{P6!-W`uEjN9ZcyV-_Y?T}{VbET{R56bOPYV896Vhc+@+TX|AN#qEa
zm||6`HWUQ}FeQ>GI}_t1q*GfO_m$}n*rf9swnI+({Xz%ltV*U>^nRbofONp*%I$DT
zk`xfD3U>|O7|v_3oDD#Pfb3lS%#%UC^7P92t#~|X@b5$PpGK022MT7MVkC2WSU9~Y
zXv6knW&x<b?BKky#Zf51NE-QX<7q@<@}v*i-WI-cDB|Qn$iBmu+4&-FOofflR>yxH
zr7B6xrMX?SfjQ15OitZ@BVRY<z?3K32LzNMvLH&|4TB{|s+pK5)m}QmA1a!geCPGh
zNnrD(h<6kI-7MA2-y%;}7H|j#xI}?31rsiSaJ8rn-Vmo{@jOS&A2ii^3+l3&xq-7S
zW!vPM?i4Wi`&1}t!COFwW?LOWw02-T_QK#?X<@Fh*Fx|IT^qc=`ZvDDX-lb`$GP|W
zK*j>{c6@=n9h-YlUYG`>B>IZ$NBG@Z>FLjqlEI^bhu7r-B4(pkd=Ec6FagK?a64MR
zSZALFAk&lXp7NulFb3!Ra^||gg()gV`{O;RAEKb`+$;`o8iz?JWfyY(i}C&s>#|eS
zN~uoGj)R=Tuub}{zxnOwgX&iXzWc?ouv8dernUEw;j^<h%}<;oltY|s1)hGt7$g3}
zRf2n0_rEIx$Rk8Bxp9lR+_O-`R^sy-X0E%DQL`yiO9DU4-kNtq^1E;A8u^FIyzlf;
zexG=w5divoE|zNF05v6ezBsgB#4jK=JlgChGnb;CJtn&!x8fT)%<c{SeX$jz9DvgT
zYT0le@smnm9115SiapMH<+l7Y+b!e8+$7OyADE-2vXu)1p2J}H=ne5k6eJGwmqWpO
z0BDr=!f}bWB|b$`fm!JmdPGA0pmm1woH5a*;xMaBSt#zUOlRJv-^b-ldH|QdcDpXF
z=?fv=eavYslWd~nB)0HHUyniTr*umrY6L4^1_`C>`(4IIv4+u!0}+t_oqPUI|AOR#
zYE^_dIH8}A2HaN7Y39e8xqTuZy8oQJ0O=wK@j@tnl*fL|FDmi>H1>ab7}&}Ko1ObY
zA4`M*f;)<G8In6#yigYX8L<J2%)KPHm5w2qnMq0clkfj~?b7faQ83N1su;CI7MORH
zoHyvUgwH4inAL1GR{{SIr1oJz)2RYxSNlyx7KXcpMF@VMY7tjV;+RH{lLFFYjgyKU
z*SY8m^<&p%e&)(1L7?|3Rtdkm)N0~KRfqjH`LdJIN(q&JR5b`FG)_Ki0Ua<_Bqf-2
z^Sjimg+C?%JY~6nG|y<El4ZY-#37;JpA!Gy!yff4iKB!0HA;ynX@K>C1iz-R*;Lji
zyq`N~qx=SYnyuqnjeI!s!{A~9AbTy?cbV)i$Q>VWL~l^lh28FMAS4H1&Ms*D30o=J
zW7?0Js!zJ~c^H_}N5(OJpIg{ag6J~HJ=uYXhAmtiyGk_-s1AB^ed9lO?cx%1D{%)e
zHS!(53`sf?{3dY*M9v=d-4I)WH7bS*jKL`-CEpo*9mI_xx_Lqw_5O!QO4m1#v9?e+
zFR2DQ8J-VD|FCLsVfH^OR=_N~;NC4rgwTMD^@`<f&Q)|GWo#m-e!>UQM5+t!*BIN_
zzvvr%f%*Hw;|(c*A1>Lss1=Gd(7wafvCW6O!Nw(3`O{TF!4RM0i2l+5X0LJ6VvTw8
zpOn+j#lrIp<Ta8Yw_5c8Iv&7h!Oh?N`cpg&1X!Cu+aLdwUp7>;2y4c!j|;oad?Vo3
z+P_V%fwm%R!9d&}LOfs=^SD=ZQ&ynP=1-5?=v~8?j-?=t{PGHBBKR_l;DT5T7Mkn`
zFf%1G)~m2I$&TrxGcyfX|MLpR?Kcep(aT<7_Oo$_0V@!|{O@%Lj5C2#hj(^Kf)oVQ
zL4v+*<bt6mNT}Ty=rylpeujL(;#!kSw(9qoBPlgT3Z_zis+j+puaktKfC(0>3I`d}
z$+9s#eo|=p2we{ECuER8MBdO>H@Ej)x?&=t+<vN;{~GKtQee-4>X^CAl@>g|Li6pc
z`J;+P*6yF<$IwVW@#p0Tz}&Vla4Gr||NkwxK*}{HEajRzSe}^ZYnVWN^jI=3(xV^l
z5D<#|0*a()JRcmhdNGI_e*Y&H;NhMB^bBwv0B{LjRreL%8ECgk40F@a@eT~nQ~Sw2
zP!_~IsTj}LR^NJBGIixYHR*rraNiDWXtzpZGbIERhgE&^bmn;o;OncOJ&<Po0a_9U
z^lr!s<KCu=sm>^iOa#Sm1Gy215pg>0^>jy3GToqxNZr}P*|5I}Y5bFQQqjyJnmuC-
z$E$Iqs7q0tf1B%>AqJf0Rp|wsCV}0#SPCEFrIU~F|J+{yG?s?$haMj8npJaJYkgo7
zj{Q%R`@f(AG7Ae%@nj+lE-hd8>leNQw1)iY^Z^kQ94J!eV$S1r2C14N3N{+=-!*N+
zJ0x&yEOR`18+ytIvEe&=&CS`Z+lT*i%LCGd6u7?cayhk29DbGS@h1uXi!WLMfKkc|
zZt2NHO9|HAXSI`AD9F@UeEgH85kT~KPO8Kt9vMFNG=9Gg)>kl7D7@G(fjIDa=Q`Kw
zT50?$aAy1i5NIIEyR;s~w8D8q9+`ZW-(`%r831L~=6TIP#)FvXUi3y_Vn=D-zfcwd
zxCZde+1Tu;^yX03v!9Fkb5;L;U!XSu0UDc+<(nQDY~Ptv+w;UF8>}5U{vVogQ}3h?
z)o2ovTqJpyKKfn9qDj{Q6g$jO_Len+S*93u<HDmjCJWVmhQI*%@dlNrucW6G&X?ZJ
zQSbPl_57*4|8HOH57QK`U4vW`dB!jIL*dcG_UbJhj%BH-!SlRCi)YPG4R|6p{)L`S
zeT=$0OMu4{jr9MA-hY1!`s0vlY?T<$mgyMB@y%)O_a>~a00g>lendFhZcetgKCL($
zF67I5a8Y8TN&I0t_VDTCZX6S1Xg(hUf#i-y=w^Nb#XVjEl9l0NLo74IhgR|n#>bb(
zH;MmiO#L(mq6B?%X-n0kt5btXMtc~}+B%cGx6C=O7*DzgGOV=|scSu0F{-+I!6BbQ
zGd@r=VL%gP7;Mk_Z2wNtw2~R$*K-ADJ`QcNK1%5N`04iUT^p&`w}0-{{@X1$#1U|#
zHhXFl3I@QpRHD3RMISqS3cd4(@zzIwM|qxwF#rEpd(W^Ym#%FX0zn9f^se;Yq(~Q{
z(z_y6nn9Y<QADW`h0sxYM+HQBlOioh5TvR|uLcCABfWnU-R^xK$M+u3z2EoY4?lp+
zHM3@|bDgu+IafAAGoyWqCXS6$LWMgEir`3vw(GqWh6I?li17JjyUxdvfN0zEe4?MN
zb9lf{(iwYF7y{@170u+I3BM~{c5`TBjQi!=wy^6uFjw^hZ{KY8A<<4DwSjx2Gqv_E
zvqKVVGiBZgOKHs^Vo8;$@4g{t2jgzd0A0lY--rHReq-&7LsFf*oVLD?uWlnuE=b@M
zCx8^@l8mK1_K#zj%v%kX+|6fV7$N>55M!S$EZ*D^9HQ5;KTegAe8*6F=Qg<Ax9hr|
zzTMEjwg0EC^uMJ_@GN&oN`>Td!k1M2l#RtS#>Pw&lND{%-_rRzG<hksN7m-%8MzjQ
z>mtm^_oOqj`47D&B!FOPG2Xbh?^0<$hnt_OpKl{4eZTnIOaBqP|GTMeT!IrMD6%D-
zS7ur*OjKw}AA0qtoYo2(d)C#|ApRM(5R4FfDuZ++o-w`SuN!b1VO!DSoa<g|K%&jF
z`h>;Tu~AQrSN?<834t|esRJR28^b(7hQw*FsNOg=a&NOf+%^I+Lw>MXB6p8gT564q
zPF2DjP>rFP2!FCjJsaQWA=f#$f^8;YMkW*2OHEeu_RL%!{1fK?cQE>Y_|#uSi21w=
z({}}4$F!$;Oh0~!Y65|<v$*$z)wysW0towIz6h8o4}H7m2&cz;_RvILuk-^aH4+83
z)wX({YmKo1Khfu0|JSqmv+HD60X<{K4qmv&G~*OsCaSAYUo0E(>;7gDg-M1$V|-r9
zq(ArRa{uwLe40yut|_z>rGBwW_BKF-08Oeg#CR4RyWVj4Dpa@h#L9MPHk>-*@z20n
zb?UU*<oPs=1d(KpBW~4zBe!a-*JECXmgM3O1SCGK5+b2!Umu@-v6_HU;+mykFHJ%7
zuBRXE^>6K-Som3616UxBcsmjLd2x0;`D?>w58^J)T^(xR{duc}Knv&DH*;H~Wj+2J
z5Yo`JOH2~g&fE)?=8{UC{if^s3hmJG(7kcJAotD5>2(QcftP2E9cBvYID2*EC32k`
zIsO#+Yt5%=YlI)90~e$Bm)9vwke1YQq-4{tfM-AlyJ^(8qI8{1*6#+pR-q#`TuTmg
zYYK)PJ8(C*Pa-RVnj;Xe`bzhqXTvp)RiKG%_i*DTnNJ0?C|-2Gjr}b7nkoI@t{Mr&
z_qXtjGt!aGWuYxp8Jl&x1Zx=wjWW5ZIRz;vG#TrUkd!nsv-&gZIaj+I8E2V8W&Id>
zC~)gM?~4?SedlPHP166SMNf^0kht;^TW>^v#gQNttM>Isa_4c%8o`|9^hth08}kzr
zog+tpZx=>Z9TU9b@2-#78^=uVDZQn{Au>=*NZUpA@*HvM<hn4SeRDySq6r`m5`3>I
zro|1dA=4)+EvDiQ8fCMWRPz56+5YE3*?-?tYj2!y_k!!+ukgEX)=u^Hy>0(RB+m;W
zKWQHnVLpWReb%1;Ew}r~fK<4#9D7Swcky#lHrKU8bUE3<#(~J&yke5yuyFz|^w9zo
z2AKU<`kd@uW_z0=3W8q=Tm(LJ*K}%t=C}+);>d8%IFbE}ZXo;t<iUjR)pA9#GXDp|
zo!(54$<EsS+3oB7Qy)*P<_E5BbNVs1vb`bBuI(yg+}Q%h_BX`Lall0-=yvRi$CPxQ
z8@WWcr%qF)F!m&U0q-s#(_)*nu+kLjI`E`Ee#UUtNMyFia4MAXaN>Y@I>yXi?4M)O
zf8U`0iQB+m5k5@MuZltR-MZD5{m>En{7JTu4zN|FskKU&{Kd6K$%8%jR8m8n{~Ez&
z9^751KSm%j<M->UG^gHQuSis_FM9hb?4JYF|H_@nRIG3DRixYn8ms8nOl=23&y&AC
z)+EQ_wh_`tVoxLV?C0;VM`pP!<34tk8hHf)<sTQ)cWyjxXF<6i4@eJ{r1+I;yUeUd
zBi!tdmfX7v)x=K-3IgG;p!r1HRYb(u$?X#w)BB;dr`6S9z+b;VL%*QeUlaITy$~fr
zTWkc(r>(};TM!Vxu9Tj~#4<9%>E@&P;I99vquh(!um9B@%6~CwYkdf3P)fT3HEFhN
zSJT}098hNDwe!FYe@M0CNF*mDCfc2vzjQNn8`n@sEOiI@CI{ZgyQ0eymzVNFiSz1(
zcNOuXtEF*ncaC&^=Kj>W`s>2P|ABq{$@l;EPv|UYz8zN;J4v=<JE!=j9u+e=KeP|j
z!m^eio!6%5saSQ7iv&k43-@qH>VQ<}6=_f7<sv`3F*aMEGL;hX*4W=(<hAWxoPhp+
za^Qbqr{5p1)V0pOM@xH6Kc%Vu!t04=z<*+Vcz~;iQPjwq8cmigykazX)2&sn@I3h@
zWwqWjLgF}{n3X~9P-CDJ{}IBqEL=piTMVw8D+>2C8IqgWmYg{Otopq;9*R7s=piD$
zm|3<3ySJTG@@L%43;^TIDuO7f-)zf`9xxs?%X$lJrJn-NxX+rH)~n&9Z?^o?LS<_4
z!2hCK{6)ooyEXsSVkSC()AhsW50Yj@46npg%%`;sft5Oxp&f4TYXTL!w?_B^?wtUH
zX6!NclNJW;_o<nyUSzq@m2ugw#81`@-mUO8JgEv`p^o(}XI>daAEcz`5AL21>Hs4%
z`iKFVt4&SBJwzb(C9maIJ;kg8@bsFqhvyIy(+I_^EEG^P=R7{7?!W)GNC64e*quMP
zG28MjN5lq4CQiVoke7%zh{QA!=hWAu$FCjdgyu7%eu<lT=uDnodBqi_K~TudtJqD6
zdmi6aw%*oEoe5D<vHP-<qN}L~_qPwCEHNinH`GKvjd!izvSQP@5!IV#3_8V&N+p05
zIE0{w`E7b7)$*%kL$84TTGjMK{v+T61;p1U*M`gNv5ki0JNjX0JB^L41LnCmIb1^j
z=2b-hChZ{ipbt0oJ~c3Yo|(S+`t9voJFClvziy+0cR&QO_!*~|S)Bi2N{$P0_#Noa
z!us>AhTV6h9h{#oi7uAM?d%*VS`8dsGdw9C4pgh{w@#f+ZG<yb)=L^6DuVQ~v1@)Q
z5WY`XtfL{S8Ik?t>YIz~00H)wE5dNlWQ#mFS0l*l`n1NggI>1G5#q!Bymhx)Z}VT?
zSN!kT^}Q5mO8n|~9lx)&l5N*2k~{JNmx<$X)1p#T5UZZIOma>H$CXc?VNXSIR{z2q
zGfBFAYom=TVNg2!=^eVH*tLMT0D`jy>k7gD>Ms1h091!kcu8|DZLC>}w^P!s5)CIa
z?ax#|y#@~e!t(RSX*=F22IJ$I?2*4p@fMWro*SJ83-)!_T*DXY72aGF>4h*|uiD`e
zJR!Y*DG#7@gW2Mdeva=vtaX*{FeS>w124`YO-qDK#O10CCRm~lev#lE$b*a{yK?XM
zs}fI}g`f$udlwa0yRLouc0zIgj!+fWS$*|K?rw*MhPp(H>NxEOfXhMXvyAKQm@!HI
z{Hi7`2RjpjN_H@xk5`e~cPp2x;x8&eEn)*W8*-eV{Hyn0{CCFzgdc&Nz=W_Q18s^N
z-OP|4^{CF>D4fEK&wMIv=6F_8q`r7nF8fzW3`#t+yH}iD>yQ6h)BQGNvRwk>Zy?`q
zdNNkQhj5cd#HAga_t2||w-8@p1!zn@O_UUihkQ#&XFDa$HJgin_08EBkak6!r*RRF
zo`*D<_=WVUkSa(VySx=HyY$IW{hvn1e@#>WBZgZS;p%Yl-+Otp+1m=%f6QaXlvXxz
zN7PnWT6!1jy@369mMb?O91dcBA_|`VqSJ9gtEJCk6Ze^*QXeK%cBQ{i4|;#mJ*jkI
z1iFSYt)oe*EXSg+GGto&(!l`($paJ8yr#xAz<3AYZEYDafKmSTOIJP)B5F&^V999w
zb&Wy%*0m*-+BVmf>-}LTB=Wzjo^|{D%~WN!ZfUxiRm0FFUfFJTuvAGyaHqh_n~C0X
z<O|_9@bWW!$T)3##n#Q&M}6b8->-kO>RoR?O3ybbI~l(L&2nIt4?4O*@k<^%^Oyq-
zT~D0mL5F%rlS+<5C&<Oc4Dr{C3F6@y6|AX=CEQX4ilcIzZg&L6`Fr^S=Cxa4CuEgM
zbL;GHo82|_lBTk3^v4_^Jw(u2s0X4035{-LM01}@A-dGRH3rUa1n;DODQdNK*m?(h
zHO-S5x@nC8%T8mmNbMO>Xcg*+Mn^ddXbPW@nM6o8-kKjMzj@XCe$;buC^Tvm1T~U~
z_<&!wUVd#&QnbDVe^(u+k9h-|*>!T^84|d9LD^@At4t%RTcgq$6huUH$I@%;#}+!a
z`;X$w_8R+@jHiVd!*dE6tWqWg`^^m|JY4B!XXYEPm)T;)LNC6zWKA(<MqVIM5LLQk
zU;HD`?_}135BUc6yk?|9^GZUm{otj7rLCv99jB<_)~ILi4rm;Ed}{`zC{RTO^<J*Q
zi{fQ1Oo-9N0w#KJOZs~-TIpNuY{NL8A-D!~B1Fy$+**|Jvg$Lp*PXC@I@FL}ZDt5a
zq=1|0Pep}p|NLJUcA5Ck4`i3#*54VzoU<wE-`AnW72>pc+{`jOEoFvDqW%`}{4eJu
zX$;u+SgPdL;q#)>Ty#>~Mjs-8ri3Id*(_S!GxLVr^@?kN*5$!7V)Ip>9A`G{<Hcs@
zpOb2=2~DFj5f@_9iV>2vCwcaA=P6kr*Ch&y15yt4>x7gPl=}FW;M`h05RPYDYN4d0
zLbAf0+Zp$WLdHqP`}%2J8nz$w^f=wWH}2_gXz;vlZy@Y!8AM5qN{pgX2Omn)t~oW?
z<scU2r}*J^aE}`JjXwP3ez373N6t75iK*+6Wr@kKdiY!ggTJM%d8XF%0j?<OwO@Ef
zAS)2!O!1xJ%Yz4Y4OEmtbRs(1nnPd~$a<*ir?2#~bPwfMqL%bdZc@M2mvszzbM9lz
zC0`@ta_-Ukt|nM`7B`al!KN<R*t)is=UOX_FAIJK!m^;<Y~WsBL0%?RcK)UT_;827
zs$yv5%+UARavldu@Lz$D6a0}$pSKhkOt!jykI(=30r~MOFghsjkv|+lA|IZ+<D=&V
zp7(}gD#?x<7TFB5`S|V)>gHqIR_5iSUvV{(wQ1freuKAebb{LmhMMQn@5DdNxHET3
zXohpXGONfC9}1)0p>J^QMJt@4OL>wmm<6|m%6KIQ&kXWP@eFY0@;Kov*a1oPSlmdA
zBdwG=Vc&uxM@~DmgZfSRl$XZMucko|Se)4ud-*65>Afs+FM$V`E{AGL#+H&Q>=LOo
zdxC(W2hU4j&Kc2C>9%XUvy(*^ao%@=n+KB=&@TXH;`$zqb{gl4>f;CF>%bH~Y>1)0
zI_os{e4y3OvV*Y13aNb<rMN*^@ul$KMaN-MloeaX0?K%I*G#ScL$9|YM^yAHo?P}>
zb~^3^-e4+Vxpu25HI^HPGRH1US5G<=D3K#%4(;em#(3qHoP4@C6G^gD5ZEkr!Q}^~
z)|hw=;m8zXw*xWO92YIj)DzPF?8W*H-_)pO?q&9K-%%k$=bBnpoE?RFO_SHwl!f$C
zfsJ|H6aq%~zYV5e#M$74Z5$44>^o}&H*%tB{ei;@MMA}y-9rYGxkNwhxjq=5J~e*S
zh1}dPMWH3sg4Azh-oNPas?<yV!HHSIq@P`Lt*Xsj^>JkC^woSO8@5CK^`}VpGqI<S
zp}O|+t4og;DkM+VSF@f$G|n`>gG*eUY(ljP)ZW!L131F7Do-_%-h6k0{{~_fSbdko
z%~$Nvgcp|=+boAuH%WcxOf{u6wKV1ZGK)i0X1sGDbzkg3GDbCC_#K8eFBrY+BwF=a
zHQ(;_$r|{}6}DkuU=urv@YS1$#)m?h1=rz7DH2Rp-spMn9vkPBrV8K^RHSYSWmG?w
z)SXncRfhKH7}~hXmg=iGU2K{6E=`JR*}w*pTVKyaW7;JJ%3)AVUN`R1xJ|9Zc#;$L
zhzqpp9`Gwf&ltOY`lcln<aYL#gD|^*9DK0bLzb{UIAAwj0DhqfIU7X3tl4ve;z~iB
z4}NXqrA*`dn0rp5nZj%#pYMN=+dTbDA=%AO;PA6}a~O$vr<eUw*f*!QC+WKY5T8Ll
z0N6r{1({rnrsRBPj-bm4ge*}pv_(X7k=q8Q>5cS<t^@OW5WCf{+KPuZlU8%{h^iUo
zbYh*w-$vD>)jV^aCe7(A<sd0*>{ia7qb@MyvhBN`1%nt@SeRAALQ`IzXuR>ol*6wP
zFnN*L?eLL0WyH~^yy4G+=R%Cds+Slk=K8hg=DR@hl!UObV%(c8F}j#9IU0p5p%L7X
zH&9I!iRHq+Z&@63QlSgegL%u+m|H)L9BpAUJgd@GH>^GsNy}e5*;GZ7q|TO%e_EbM
z!uK(3E<I0^6-Q|lMJWipoLlf@?)x3x#AQ`O`YCT~z6(xTzKJG<^P9Jl0?0-l@>3Gf
zTefVi1d+`x74EU4-^x*o)}c&Zvx;tW!}wN}kb=XxMaNCYdjR52H1UJ)iPZog9C)7K
zQg}1jTqkvJBe3Z;$aMRbHBr56{x#E7@I}%a0%$Qbl{Q5Xy~`D{ANQ~i6?Q3XE#c-}
zTg%9Yaps2trqSD3VVTrH`Bss%eEKN#H>Y(ep=^73!;>}fZ4v!lfDm}Iq(UtW_4c>A
z6LY?S{J#y^UR%v2^H{&Tt+$^Cfn8S#^z$d%suFgmD6=;F>0*!(Ek4OmvkIwlJyZ4i
zjD2ba-hy}GU?S!E%-EZ8{+LH-tKoAl&n~kMoN&sxuEF*M|MUu>Z?eGi)B+r#vKG3y
z*qbHATiL)X5AsJ9$@!YmxGrB~gcTy8>fZHbMx{#+(+TL`;}umg5tlCOX(roKjef~8
z*SgN8g{+V{8s+a~loLJKECEMOKm{&lu?IDnt2|iPvV74ikOhw<Ji1hrDi+hdej$JO
z8m+o&;Ne3uGln4g_iVvpNjK9+_Gx@b)=psss%*s07w91I4=kL{wEVzO$O8XiM`l)>
zj`Rz~(Zdtv^{0>><PPmqB6D9WbjVe`o(Dp{(e0o%w(O=-3_8<uhxxP6k0FblA?rhD
zP!_1?)QXv_$15+Zz}}lzS%~tOzsj-YLr-=dbS*O>ddTb-3Tf00r;djj&t=?p9{_lG
zlED?Hk@bv#Nj$5w1U^=z9W(nP5K>DzrW$?Yyh(Rw?Y2`0jPIi;{???y`a3_AU+B)o
zO{oM(30n^;)2Re|ECn^Anp$z7vvU(J)7O&t*$T@RE#(~@x5~B3r9EN#*b2Mu0uq_K
zETo*3rqgZ(@R%6%sf{}3puRLi{bR2JKqiSxd(XX_siP>H%%}}bG;;sEt-hy+VRU-w
z@*06ZYc7m`)R@aXU4XJJh_4+Mh$%o14)bKj-ih|gJz1-M(ar)%LENo#St!$Lz=_ec
z7y=_>a3dhTA;#A2AO@Uo46;}-$lGEQ`lKV>QERxNwV;<n*S>DUTFVnyu@db6*i09;
z7b7R!(~&3`laFR{DwsC;e8ThO`$&ZB0LW@B%&dQG>wMlV0a#TRsi(2PMwBJ{Htk1p
zJOuU_Z-35oca0ix3QMYdd&veC){ND)^SSGJyA^ydBIH1rJU1mARg!BEAI}#Pik6ub
zR~lXAl}JvNz#V8$GPHKm;M_!#w*nKMeAsL5wOtON(PuM6UZts`4C)z+zl|KofyYCK
zc-yj`$Ww+;S6r`6IOh?4iBykA#7<taD#X#(1o;`ZDlNzT!QzUL@d%fWHu3;Ek=r>u
zT-+2NFu0X>vR;ratiJ~mL7Xi^_>?T7ypsM&Kfk^YvWdMko}l}S|3!){00ZH3yhYTg
zP0b`rLH>q!;Wn%942HJqM>-;Wiy*etQ!8FP9&ewZnyf%hB?I4oL%d$rz{(qZq8I>p
zmlq@l9QctYL<aK`n8M-s#Wdif$`G-vt|Ky`^$MzQw*+8(fq45<!n>3KsTI709?Wl8
zRLpz4=K3Dbm(xHW(oDHNP|S!xp0;0h=g8F0QiMpC9a<GBelvUhFXsxcgVw0txwe<|
zD9PhdrUmQ5o{zRt48xai_IgeCb?FBcqLxs4JUfih_Z0^=x3|3y&SJ+!lza}-7j9$U
z{Hx>h9=HA$NOW2Gw)=+3qSxR^angEq536tQ5`8+-vTOPEdGST^Qo|kwC@-pD0^b?B
zidoO^V)TXw6!bR{T~<gV=nk`0@Pje9_QZU>Zv%vuUMBqToi1%j^9Jp|Odu&VQ%w0k
z9(-6lE2eg)sSO=e^_~zB(`p<#hnkZ|yqmO|GD|=6pyywNc}xx5@s#AuBczqhaS`TF
zSP%J@#9X&|)a|C`*is)D07_a~V)2;9U!(Avn}F$E*8B8|Au^AgyKGFmK0e@!d4U(O
z?V~@a!9QT915UK1XZFLWQ<5e${_RRMInWpMC1N`un1i!xtx=iltDeL+3!=~q*-V4J
zstOa|w$*AH=Ln8maaE!J0s?s`I6qhmN6`3MIDP`CjOhCz8E!4snP10F-rY>hq2*#j
zD{cwKxx>WnL%x|`I(@3buT~mqCUgloMmR+7i|i3$lj<!pkiVAY3%OHzT=U%5G5P7g
z^E-Vd{9?zHXZiG;bSqR=*li7xR7g5RbWO`#;-OVr@6MrEF~MG3=Kt(qNEqpA@>lE6
ztg2n=+E+04s7Td%FE+8f#P53wvHdSv=NxS0vC|?=Z8mGi_d~1eF!C1u(W$Wwm+MD%
zV|%~7U#-(Yo`Y&iXR$LU#J6uHoRioh0X3^IbU4>rMfn#s))?G|!b)AopDsu9=8B$=
z6ng8QlFWkk`le^v)%Ac+|2}@zX?Kp}`-q9RH%tPAq1e+2vcs?H%{%9X!D(8Y);jYo
zmxOsjQY~lj{e!eH+<LxSvMCaWrdliC^=JFMx$P}<#Jaz@joM-3Qe+9uv<O)7UDP=j
zeMVK4+O<4-n^X(_tMDjJ>PB|q!fxw+Jf(Z{C1rEB^Vy*cBQ2Hg?2mMic2H~$hvI0M
zsIr=Zo_VLc%0Z=}cGh%5?;CX=-4_eBBV-3kE<1=j=4??#(}?VzrpO)n(B3=6b1R(Z
zs=>J_7UJ}hXO6ponv`Nq@w4_>rRi-Mx_q<n^^L34nDK*Skt*uxe4~inBfY?T_Xv+~
zL?*?5AIp5-`vdja!c$$hYMw-U=iJS?{U_-w)LR?JJ=<i{ek~asQ7gQ@A`@3wTB`VG
z@BH$|cGEzc@SV^4WY=pr$}YF{4(~V`fY)=bnc9%u^=5YWIhbLXg8GjD5IlolHMn;4
z<0pnnIgP-}l7PCY&4&qC&mj{&x9hgph8?S3f0(j!@x?l6tLwdWA9D%nl~1ko;Z`<H
zbN3|vvKh>+o;DMD&r+~&)1GXWwO3{1?nUjn^^1oQgS$r;iK}u6u?$>MoY<5=dU^jS
zrB_=Oijo2YauY!}k}K)i-}*Pw&v{KqW+OWL?h5jLe4s1+b=N#?)K7Wit}gwYw?*%d
ziPf}XkIsq5w0RBiw*8I@Jj%hvEgJVDn}S66;`F&6JQ>zj^!r*j-a&F6dOnK0?u%qo
z6pE6*j*B%Nq`bP%6)(0DLkYhMqpUs1SyzQ+HEt!2`~y`R-xz<XHNPtUwcrTAlSkOl
zQZ_1fK4&ReEk|hbV$lJ7UWEG$P5P#<a$JgFm24l~(+-{O-1)?8NGpEkfWglpcid)V
zIfw+pGW95<DWj>@@IRb7sKgaH-q3&FIdE}dle1AyoSYVGLK8hIqJzvCeA|{$UG41U
zHXCz#nZS`=^SUpeTeBeQwSw-aHmas+*O?YMh)D%xoTN08>BDpg^$m)gx2gqozN0%P
zWCB~HScWRfiS*jYkB8|O7H${5RHL$5Tv6~%hlG-1*19{D=MrV>{L3m9Y+erc$T}!v
z1%ti;&+CP-7<BbiEZkKdb6|5pAPll1AZ1OBnKdap%<cs%_F2{i>3E|{HSc{{v2YF-
zWm^L{a*r6ZdA^t84E6CcRdl&t1X2oD)D46X-(?Z)ZY}Y=Pwl>>O-5m7kVOvZ)t{MQ
z;WfV&f+)DgIhyyn{X);&7I!{KV)-$tuOPNmsMNZPSG2u#w;4v~8Q`CA8K9C2?XK!8
zZ7s&(VpPRe23Nz_Bkwg5Mg4Skra`T29ER7#*2M3;S}}Z~|H&xjG?clr{Tm4)Bg`zN
z3UZHLhC0yI=Y_#`KYA~m>bs1X%%h`i4(xK0p^I4Q$ly>0<}Ab+#upQdH~Mt?`@E0r
zJ$q?boXQkzOPV>3n{geS`+ky?2Bc*a_HYjfTY1@K;}8hLrn<)d!M<6nRRTI|GYFOo
zZ-KB(b~R(t=@~F8L~Hx?%8rT>T=c0BLke#c*EErpo-zCI7mr&vs-!QRRq?*$^?-gk
z^=#*NnIqkL{i^!T4_!E?nrH6XN_;$;m*F>^3rQ{WtErpQ@Xbw!6uvSLKbAlhjSNSF
zqCL35jwNb#$M>>V_^{&cvPLnAk?}9b`BD!3lne(E{}^g0!X%Xev`Ex-*j%1H6mzF^
zm*4;4{+ia|;wG)N{5dO`$a_A?djcl4pp45;vEQtQs*}Td`A_s7i4hT3;f9K*oRV>X
zJ+pX>x??L>l4u$?*$~Q0ECo%WKr!R_CE6ejQoSQ%?YPiYPFxjX+d_054hcP~_|VVv
zJCCVYx#W6(xY#hCBVfmYM=*p%i|oZBH;OitJGADxH<^*iW|;<Gvk?K(Tj}RH4i^(T
z%FM41Jn7gvhBVi|aY^~o<5k)+KJC)L2b2nRCKucND)wR8J6<rBGh|VITI+lWwL5*h
zTpFK(X1er!Or(=f#@v0t4R7(Gy=>*|=v{St62Cg7$3txCWg`4Kp4;kuJ^(D)3V$n9
z@Z+>qDC5ti;R)~ycH~YLm*PQm-Q~zLQL@-hJzRog^Tdy`Ad=|I3ElZ=I;S$|{s~L*
z4tU}cEec<w@tyw!e)7nILZGt+S^ZtbGXK;%kF8-+jD3e#&1myMQGM*;V){!+D`{zD
zSSkW@Pwx(0rp`BUnc#>si2W%%c3C00f&OnlW_vNKEN?4F0fbtxP1yJ*>_}6tT$s>1
z2=ackluMw72l`0JEfTk}^YosRg`C)mJ~{KuAw~VUv@rAn4b>ne#@cPLTq)`jixcen
z<-n!AV6Hti4x*oBxXm*qt?wc$;T7R5zQrobvp}Af30T0#Sa{p+LWjcSg9hz`wCAsW
z_?hEUqD=7N5q@&dr{sHr=qeYV44L%RhiI24zWVr3GZ0@g=4u$(@qVY#Nk@18M(_z3
z)l||=P-MIlWW;X7oxqJ1ONHE{K&6%+JVD)=K59PdTDT1}pU+|V7!!#-#~{OIh7^2c
zA^0&HeM7s6gn5-Y#Wy_`6oSGbixSg1ZC659s0m0$1E8ww)36uor(>m`T!kZ#NK1=`
zQO0c=H~4$#_pCxou4mmuzLBYll%4?5s_%)vg|vD!MgESo=1!xCNh3s-7&A_8<Kt<l
zcF=c5%R|4K6e<AfV4A+B-eQQ&C{#GvuT~SlVS9C3lC3$Lj@WBV$)%?wdM_7q4d}jn
zF=9;F)+|=~_0yX~3N{k_s;gJ{xh8Hz)ftVNQOi7YZfP#+erLSRg?`IKkTt2TJ<=zs
zSPX)M-uo$RnFE1tSyLJ=ez>IljlKZN_t762wZ44syQ3Pyh9k-yO!#9O+CbZ%ZcTox
zNsOUP2l<(}G~FulRxvwKJP$uLSnpdB1?6V<mi+Z0Jw?lEY>_cAKBztNxO}W&`t+c?
z>!7H&UlyRud&p>6rjqpZ137uZAtINaXwp_3<%ZGh(EA;WJ#zLV^K}4z^9U-V$e;}q
zq-MU0X@6u;?gQ-*Srs68-?+%KWqUv2;_&sKg1&)NQVDC&LLUSCH{?(%deoWd0b9<)
zyV!eX8K5WjU8W2r>Z<I0NyAf%SGA|{iA;1&%#!i%@rekBwlKBtpcuN-+RI$9>lRaf
zu%su4kFDlk?>&<YfbQ|5{Y8n|QTXN4opQL4%5p%~B)40IDp9&8wwwvqZ9f9V_Cp9u
zG-mwFASYJAR~Vs+3$cFcp-8{&*Zo>`X^a)lV+mdL-y71xdBY3O+3}?QlwNnBlkhwT
zn-K<3NwKG(u;Nd>BH9yRY+tv!jald_s*hTaNd11END^dLcmot+{bT3dr%2^7%#Kl2
z^_pTf$lbTO&}Gduadl_QsLRYFHLI^f!zfUPPUb%M<@U!IoQ87Y#gMaeLDiprP}O=l
z+2f$y2I3yYG?&}NErPJxy=o)sDF6kfs6d;<ov7UeOfcq!^4Ccp-cta6Bzaf$c&wTa
zA9^}m)amwem&@2cCFZKvw^IY+Pd^LYws9zpmB!dQ?N77xg5@%T_Q-kKim}J21&8V2
zsVFfBV2@<bWoyeOo*sLvEz98bdq%`Gd+*7aKeErPLd1f!uHZv8h24aQo!_bMj9;^N
z^nh`3p%ulqKJ8N|aU%j8JB`>H$*2hi4v;l*OE>C~2;dGbghS_ALs-|EKTD1)EM0+R
zbGh;E6NnD!Ifj~rLr%j=OHxBMGC8oM3cvQM3-VHZ*$GP)b>p0%=Zje|&x@pPi=gUV
ztasNEwIrtAYp(bbZV2`7ZhV-S&tsKPKWzCP9_-GZAnb?Sd4U}`7(d`XyjFCc7R1q@
zz82YK=R48p2`6e@r{2N^3FCo2l{_gI@q;IO*PQ`5`uGT)S})b;eV5;zd-Us|SyG}X
zXl*<rc2g*Yy<XID(#D*gz!9`UxUcK%EshDLyH+<A%hliBuR12ZHbwAw^e8*AvXwt3
z4gKmm%}U+-$QF^CRzCt6J_sX7uUVt<q73NT*ozZGcV6&-M4yHpy)H?=zb5^xK&b7}
zkWsPn{py*a9E)GDNsN&lv&HaZ`WH#Dzc%PJap_9*w)-GE_TexC+D!oGqpieay49~J
z#oE7yv}VVsmZ+R@U^vCioPEiW7RJTD>XSc`e0ph!tDu4ps>z4eP)l>bSdawApKp-M
zzRRqVamgHAwK6V8;}i)x!RW0YCb{D!pMIq4BEw)Tom<EIwB6&CAUIedi<7fhTQR<*
zAk=nCZzAwRenM>cd$FP3P?k1@Yhe-Em+_(RN!`-KlB}dSs(7#!r60hd4faKCifgOe
zr~lQMlb|j0{5`_qXGXRz)9QDPkGynCG~dmdD&be@iGf!pV-TAKirZmlY<=8JmK%6J
zvoGXZ-POEhY8DLPru0rxKxDNjQA=0&MNLbAapSZD50CF=S4x*LQ%c{h00DM^u$Z&E
z#*&|iu8RL-Io^IyPSS^Q;of#e9Q*r5;T<oj%b{y$wfj)^nm8`cDF@m-dy?!T&p{-T
zR`PUECK3YU;-m;-?CEaYFS;erQASafx$tS6R@TeW7#DZ)&<y)oUJCc1#Ol%Er|U*p
z0+7Xp>5+;O3irN^9e<>B4t{ekJQO;?TU~*o9!hMzALD!)Mk57|k0T6R*zZK^cf~<h
z+;~b|D)-dfXifvaK8^smueHl!+V=$F-u|p>U!KD}abi9@_2x@>$IOT@dh0gb-VVK3
z{kWfO0D#pY)Y4%NbjuY`JU|im-+1>O(<1iL-c~Z>c!DUB!F<}AgJ@w}K}z)A{_6(3
zHafvarKiedDT5dR@qr_YhUkwqf@cYbGTys)HFh_2yr!l`$=`Kdn$$yRU3ls-q<R>3
z4H3w2LlLr2DqO>pS^W9OlTAq%>`!euTGLQqb(5*99^t7)X>D73YgBWNw}FeH6$2Qa
zwC=8FV6JP>IbMZ*F__Zrh{B&J$+zD%8V|$U4|aUuM|N}}FMfB&3<tg#$jZ~vP>k53
zpiL<kZY$w|HZhDE(>IiT{l$Gqu8BjTG<=p*JX`$*w3(`J#I1eg&M+#O78Q0Ifue<j
zrZt%XtJ=Y%LyWvm!{<=iyga=9ZPD0=5k+tKzwTGjT14d*p$Q?z>&GoaiQ|gR(?|H~
zY%zb{1yCIhXD47P|6~!tvb^*xqzUvZ)*$Y4Gb^Q^6pD7PcfpYx&>{NwA(Bm;MtV&n
zGXlPeVLd!p9cs1Dx-M&G`kWA_7IMT}PUhqRN1D7W^r;zzH0OgGv|ZzIAWTT`x9ru<
z@19BV4vocC+6`&FpJD<o9|YT^MHiSoejupNgCE5?%agf6G0B$8i#wUX??aAnPBIg~
zhM8!r_vIdGWZri3;MKCSmgE-co%}@oBk}eVLker=Z*O#WMf22#iG*STs{5Cp-rE!x
zK-JZZ;`Wt;5X*!SL>Zt8hN9YzaR&$_-u@0ihycWWL<gDO4<TT7CW!l$WrnHMj@#LH
z5>x=n%7h=?=Mz7*kJH_F(4j7w2WY3gYy26TwqGR=z0Hqad#?|h3_~&dix_ATh6AFn
z3YEHb?EBy)wfuM>zLU-L*s-7)F1RjGd1siNVfSxS<a7zVW03V3^ii7N_^H&VD6|aU
zGQ=9gk#>Z|_E^?(QP02@k=wOr9NJZ7_I!hrDzwfW<pT^O!2}B5D0hz_O~KI<Rb<o|
zm#A0aHF+Ns63_&3o)CBP(Y`Z%0^PSkeI(F%<gS9}8L|7@20M9>c)FUDrQNsj#poGe
ze`EYDn>FstYM=CWUQjbb-i0FEj#w$@JiDetj(>>Q3wG)U+JwAG8rKW0(RzXFF*&GO
zdu~<JORqnY)9c*YQkb92?I9YND1w_WR!9YCkq7q)N1vJH1{uD3<Bfsk;c%}#<i_fD
zz$g3T^+ZdkiQeF?M|b`_?f{DA5p=htA<!O+3)tSugWrP=Rl6#0wNb4bSHmQL9mt@F
ztlUY8<2J?3c(S>LLMjUDOv?Q*HEO<AD%?&Q5n}x?D`lC!Rq@HVXxYicYh!5HwIUN=
zcSf`yXRJx%B1jLp01E0C?pFckGf~`iOIrH;>sZ`QyoO=!GxczgBaX!c`Z<aOg+Y@j
zDDOM7vahs#LS=ph6DTmfLYr99XMQ{T{%G-=e-CG9Vk>dUgKDc!&x06ei(CR=+Cr;x
zXM|f+-NfHDlksk?Q9{M3ryk$Z!s^&D5TN9eZrYXSq<rGI<w>-L-zhf|f=R|8aymZW
zqG{I;oDPvjQFi^@XY3g;<=3Y}-Wv*DF-^GD1!%$uN2$Y&*?Dc;w%jJhB$^^hv)ozM
zeJ`hJk`<`V+r5S>LJo9<ln;^_CckeofoHFOt)_=wqc)Lw^Jv68dgXOBW6g^StDySn
z^+ayLlqSbloKsTyNw$ocEh9|ytMxhVg0Fz+<A9K;uYUj&dDis}CR!TR63V!))sjKO
z*Mt{9-4bd=y*A<J`(UL+x&GC!BIspnwlY#Nfhx*M-q7x8kg<q&8lMy(0YN%%4PT_s
zWNb=2*yua8TU*G7BhGjM(y^4MC`zc^Et#wuCxhJ1x6JaTgJK>L+0HX!9TIQdL7GHr
zaGrPsiPi7Z#dNx}Xx7ELSv{M2RQyn*F!2t>eM<L68tE<hc<|ADQImCJHhCn&_q)c}
zoFUzh8NAqs$s=#fPe~F!Ab3nLfy?hC3TlJvVtAj<V_92sZuY{mh0%(xme_L~y6Pfq
zxw>_Tf>b!0V&Ul18tDOKl$W5=V5+s;aRK}rR3<|vfdkv)^X43X<4@Ahkhjz_PnWh7
z#xH)g0TA&xkbsG&j6oRWZE*@zFEKV;@1=Z?#c`|Nsjv@t1E$xt0yh;K`B>)g++)MM
zl~yJ(JpK9aoIsRiL&zP5rXJl~XAVje`ZzVCYovrUQ9AnYkcu8}goaNOjob`-x((T!
z9kb9&UH7;R;9S?*?5*NsZ|;fk=YGm*Dncganp=f%F-YNdIMp$m+^Mh~y5yOMegR_f
zqoCP+i;ZINf(66q8M84mECt8Jm9l;V^n&$#?N|{o^+P&T@AqX?I+rjJzGcIlhMy{O
z54Kt@MzVGROTy8kHOU#pky}s_77w;T72<wzVuP`}fV^TYt(aVEm<i0E5ow#WgOpLt
z8P^jU?+Q;hLKYI5Y}@hp>qT&4(|*Xk+Y}SDo_h)3gH&9_vfAul+E0?n$ZM^+Qfsk_
z_nn3<GxO-}ttYTJqbUvX)bL9ovs~C;r+p!GqYIzAI3+Ka9);Geu_qM;Rp_wn0F^@4
zv%<@J)n_U1cfaA+cf^kpwq(bOP$?DNW#=hDV<3q-2Qkqg6L3KKxUPlR;sV)}RH%o{
zCM(H7tmgTBzizXk-FVf&O&?FhLArv50MU=h*wv_?Ii{C+Uckj6?yppCfKvfdb<A-%
z7w!tFD?Rp)%4>yQY`C;z&JH1mT_xTRWLWJOs6j7A>dnXDvd(Klgi;;B8b#Z~bYUWg
zl&0&ZDG?Axl2VrvZ3QYp`HK4J9S_wCFDbxut&q>-{ADPE2&1{Nq*r4H6JI98`<&Gl
zrms^077l`l5wC78GQS+Z;$1w<mKK}CkDf#?Vr-SuVxu^F*k^Sr%nCqT=MnV4_stq~
zO4ef9NEgVzHmOm}@)NXeC6%efCE<CKaxr&W3vIM0)1^6mLVKEYy`AqAYc==Ks9$4i
zG$<8a;~7nI2w=C<DZduh;S9gBx5r5t!~|Fkn-wzThYKAMV@mXnUZcfmDrA#l3VzcM
zdpiFxa7XuIepLq<A+|UmfDMZ+b2w(-;^OJFp6I!Zyi6!Fu!DcLS0{p>3t!%l%?Ak`
z7GaG&bOPlPU?E)BQJ)0KFt%zL74o801<%u%<4)}LEPDKb>7~#?R1M$$WrVkA?0(!|
z{~c$*CZc(^W!bmiBiG*OuMxm7j3iDyzULyh-5p%1l{j*{942~Hkz-JkfI%)q;Fh=R
zPdmh|WsRZdfGex8xs;!^LOqnOlC89&CU-GO%yCWsHIg5RP%~lrT*_QUbXtB1{Z2iE
zpSZNRS1W>bDE46nr<D40kvso%yYkY}0@oFeD(IqI^|-OBqCgQqXKgW(;2nzUU0dd<
zXEg21?*UnVk76ik&I+|ezGTMX((z2Y(-wZ^W7QR>mRnzhlmSYQX{AVrmwvpA>Fie@
z7NX6I!rQNM4Alyi5vxs0s*)Q{b<}{)vXxMWZX+6Av?eYDC~F&k_SMlsx<F-?y%SKI
zTZ7}eQ$eunde#9|t?u}-xQzR2nt2uI&osx9Z7S2Km#7_%I8cNjEiKl)yr^2Qg4y@B
zr|wHsbf>=lyGw;^B*aFwNtgR5y)Gf~v-~rLJ{#Dc_EmijBB=<vAictLWm~$Zm3Rw3
zh_Nfm_0kW7DG4fn(W823qe_Ta&DT?ya}Vx=4EJku<4mjtJ;LvhV0kpHgxxc8bKy;d
zCMEP7%WT-R4HCqre|I}Q?iBXN6?Bmn>VgyNEGigy2&g+!SvL#^dMBeib3H?oQ&W%t
z^8+EnB!wReGa{BKmk<aOuL==6U1!#h6xsZIOB;xe3S&U3+;|Q3I^mbKC|=&-xBdjH
zyc&3D7EyX6Vo`rd#>ADmD1CEBbdWWyWuegX6Sn0iC#r)r@U7DVJK9~no}D2m!`D1I
ztVrA)>3!utR0kkak+FE<i6yM}?W}r1uhQ_P;w{*cA!=CH&ecY8`m1OgRw;D<QOb)`
z4h8ug9b%@mXJ@s4?*?v5@;S~cg<5vITUXW;&)!h3zYlsZZukSO{3r?3&d)vrjK>pR
zTbwn}0np%|)7e9cpE7ujXhDtj*BI|fwOg7JBPOr-@BOgaVVrydkWK@CV3HfPkMPS4
z4502bDyNA34~ch{J2E+GBUgqf_b_2quKfMdZE5a>HgSxNa+-vNDp|?dM^Jz+!%!*i
z=1)$!?<w0Tu5@I$-QRuV2freBcv{T#e)@hANEHHZ)Sjtf%|QvA6J2+EdbE)#q@}T}
zx)DmrPdJDqQ|f2A609QNzH3LPlvx5*eL_${AH6GDbK(3@8J^ly3=g-9i0vbu9QZVZ
zw6x){={@g#oUs0v<7Lr7*1j$|v+%ZtaEY})*Fj!}nw*)gIi!4sx<nSuec+V;ksC4h
z+d*b{N{KJF+Vhak4ZJ-2kKe>;Sj#=zy+FBQ;IGW0vD2uZoS?7cakF7G!aKx+)2mox
zI00Z`KW$Rv7uQ>Lw8BJgKi}*3TO`<lavsRhMd<fkB8r~gk9H7M6<#i|N;S}8qj2Y-
zB=8u!A~cebkp{BmZ>$3DmqR}kN;bXz&L`AVE3=4XmIM9vd_+wG@KJe^-fhpP)zpCR
zUS)HcuT@%OPc2CdjlYp*RV?bd5EyLj8-Kg%!y68HgDii@p#INWWDJ!|l=PQ}0l;zs
zQY}x#dcH0()KEO7sNyP{AhKrNisf+>;$r01xityIY@wW+BJ37BdhLS@!f^JDGu=9<
zi_!48F^mrF!WJis|Mahs<uFVLmzsMa&64IjQHA(>8r(_r3!_|^=gMS=o%3Si&EmqK
z%Kpp#dvqxI7{zw6=1YEh^ECggl7y5jw@QX5;*JBhQ}Yy+bAztjO)afE@W9PG9#}nP
zU;KFvj^epr4G2SO)XG79Yp#$>Rl~#nXVO-`M;_riFS_m*;Wu4}33i@u85a2X3~yof
z8YUp=LmMVTxVwuU7tDV>F(v_xh+BuWbply-j$ukasFIXVW_V}*P@}#hwI}xq*SXZ>
zJD-;3VwXy{q>cDYHM>(AH{$i2ytVDgCHsJ4>0=<2HieCKb>&(IX5B+ExOL-dZN#O=
zDZwbw$u^Z>d#WoENktX<Y-f-)bq9(Vt+J!f6TDcFJLGOjA&q_;;3(F?n(V-YO;+Uf
zf<QY2-CQ0RNJ#wcrZf;M_VAr|eHNI?oc4CEXEfG_Od1%xV6m95(I^HJobKTFVpu+i
zy}Kv=x4!`K2;98ozyM1fMLFH6nOg7yZUiaR6Qp{XG+BqCGwmMS#r-dol<ej4!f>O?
zKCM{Zl<(qi07i-vYwJ=amRlVptqwJjX=TsKV#Ju%NI4qUy`;s|x;2EX{sw9w6C})?
z{%}LaH>!F5?8jp1*UA|-vc1|E@o3LnhL!w{Ab;-5u8hFpGtp6ZX{Xy2bh~1$s=GJ8
zRN<f2nC9Z}S_P%RcB3hBJLwBSkRr|c#HGS?km+fy?HlOU<RCTxq8fCN`J@;PuQA&q
zaLODsX=_sR{%NtvedFtatk;8ZhD#((g>H<wmafR0;izRpS4e^J@AQHXWuh`kc|9>T
z^urPn9Blbj879ew-m6ri3}R5cEc6krm8SgHQs#L}iP}hQP^JsUZ)yK=k`2ID#jV=K
z5S41glg9J-9U(sS*5kwJsBK<XZo7HE+nG2utAKDR^Kctl=a>zVbp_NtaJIcik3#w%
zWBlEP%ACi=3Y7xz2kL6p<|;N0#J;{++!clR{FMX21oEojWJUqPZC}LjzP#-hX<e+N
zwyrJKu5b1fr4+m;9T|;-oluf4wTpV?OFnfG`&CtB4(iXt4K_qVh1EN+f~vQVy0sh;
zzFCHM-S=CIR!ADcA*<6oy1a<E%{#=WusS!J&93M{`qnY-%JpBVmTn>{GI+M!p(Fh0
zGHtS|S|-X-pm;K*mPuHeyKbm8;`?`4KO&@iIcY5Gzb8*g4;iBQo`|>5`&>Eg%DF4r
zpG%T=IR0`~(3_T|*@uLjk^l1A;m$t_Uk7z-E`!z!5}6eH(i<?|{06**4lo5JM(Nd!
z!w(}Rln_3BL8Pd`l7kddk8=G>zDM})4`=xxkqW*d`>or=r_{esw5v(bSYO<y5(_hZ
zAE`9g<u=fx`5#Uw2h-O4Wb7VssLFB&e5ufz6w|0Ws!aXCZcOFte*24HL*N7u196?j
zQ7lu^@gRDmR{L`T{^<_~mFDFDJLlO~@oanA(MnpBHuG1@4Fx`0;(K98sq{W|s$rx@
zM^inGvnnC()w|(4H@-UsOeb<{r51&9^P=6mb!cdV-nDLla(+BvaLi(;q2`eJ-^QaN
z7E&W$@tD{hrJ6y&XsN8zW#uMn*uJqE@;Mv)WhCTJ;<VQ1m?z&f+WsSFYjRNx>akL<
zT>P}mWhZ>qCHEQxe;||{0|mC*ZJ^4&1;efBDTMR;freCQ31ufuGRp6_+v-yxKeSKN
zZH4zzlZzWad-CiWQ=zdIRmoKY-;%qzaknez{=f?k-`FS!CNHAJwmC7SR5La(AnELC
zgs16Z?7d%6EHOzJgchb<2ZrV|XRCVBWYZ^;uw(XV_*Uc1+`M$Yjx+q>mgQTSkKkjn
z_I5=3rg04EmoE)u!9PJ3UwUyNC|W{LH8t-6NF7s~gjgMam{hNf4mAk<dh9bYNz-l_
zXp?q7^g*)cSn~wVeApxe_~JmP;@^k{mZw4Jg_RK)DdzsrCaEcamirlQa#ek0pIhfs
z<)1t*2TAobSz{5qckh~%!Qbmbra`eObM!KHz9A;^bB#;Iw;+WC1fk&?3s(@G&vNYL
zaK`%t>5GMv5gzb-JzW`Y$+T61!%}@B<ghx{bSvDLA~`^>nhct9r4dr7)=6daeKS*;
z#Rp`~KhOfIHGUAz<V}Yt@clDZ^gXhI_z8Vn7}umpUW{}_O36A-j!8w$pnh?#v;ipf
zq=oXUv?uv;V%TXs5La7=N+6-c3MywSBx-seVe*u3my<zZ)Yg-daWaW0QFx{XnTQah
zyit}MBuM=pJ@(tq=<|!}g_h|X-Icc?EbEIJJ!Mg?RU^4@LqgpG%@?zO-@A#^pQ7oJ
zm`?K?pqjPQ1S%%oG*wLPS4(K_O`L$>7yHOSFUCm*w?r8B33iA5vm|kvq(=`dy4`Ke
zhZ_8FEg@P;>)K3szD=l(;Inc^T-{TJ1QW@LB^o(qpA`}y+5an8l_3jHJ9!uBs|Bv=
z=3ZmRA4rc6t=8BjN2I`VT=M^HD0p->Tj|BN>9yS{CVrY&#A%^ahPK-*Ymqby6+B?~
zvQ9%lYc$76NsW?o<ovOvee#dM;ElUNVzwn0_p-s21FlsfJ)w7jitALO8<J0>0gbeQ
zEM9L?SLpe|N--+6CGZNIN6!(`&8{u%riRhof2o8*Aq$;hw|LNNy^&o`0vts5tN8Vy
z$krjcWwR&B-GAR-<9m&E`}q)QlW(AvlIi%35B;!|k&>R#SH8_<=?~J(bDt;qHqkB?
zBK@Oq(4!hx^8V!vSxON1o7=-I@~ZOLN)oFV`l+mCSI&~A7H$_C&DsH>G>k^%{3%9-
zPM(c(?~wOlRxCWfwm~0)Tp#9Dyo9;1CI#K2LD}$OZ}QY9ulfx8g~{RyRloiV{BWj5
z^`0u3-cfLw!EVouz8@QlFr`zYTw|Qb=x+G@`WN2F5!zwr44gDwIfG|&o(%^Eb6tFv
zz1<<`zJC>{52EvI&l0UAXLz4~{#Hl@oREiDowa<`=b|asX`ek#7l^5Xk3}A-W3L<y
zyf}<+_q)Da8M<)eY}@4(s&x*xhkmq$^$3WP4Rg{ciEpcuHfS6FUc19}Yx=0y6P$Do
z8&KWED7;QT9;~UrTNLV2@NaPrF4F3tTQfV;{s^}^d5@!iR;5AA(o<$r*%F)go<orr
z?O_qi&>6(*yG(+kRiGqSh^DHyCL8@iN}{ylXw>`T*D|kBqwaj2L}b?J+<s!JR|P5L
zRI-V(AudVoNEoR7hn@3%3`0Mw-yw(^9CWhfX{@?{f6%1q`_7!)!CAKvRGNUVU9pDx
zzdv$*rJyX%{4wTM^aswH`}%BRNLLAmUVUr|X1<&S>OpJ$N|wZ(g_5%{Q%mNjU$GXt
z=e9^G<z`#n*ryD3siNADZ}x2HvQO2?-O>_C@fG@6<B-@-%{P~pF}r`Whzk^`>HHAc
zR~uT*7fgoIxy$Q&XST0m($b@M4gMIiUBjAk??K4)(<h$uy)OTRWWJ~yaa;5>%3Nf*
zSkbsv&{|ek1#`N+gqtWq{ze6kq6%=A$`1R#lk%F@v~@23ZQe??DTS@jYKjcc%C_oq
zPup~pr#mr_t=CSJJim?~za0xc0&(w4xFhRw>^WkaP$Ji5&uht6p@kA^YZ0(2!zqwp
zG@Pq9sw(uT`l>4SwWX%GYN<5dTT21T=Ab>rKr|of_0T3(9*EZO@}iG;MT8>oFSSul
zF1RqUf^M)mboNDc_-<XqmdKg~N9=UBc|mE#HDb54yF{Tvx)=*dCs>^6)V|Y#9iQhT
zT=)0)+^?&%HPRf&h^ajBkm~1wnlvs@x))d5#ERbY_!Ds8+Dpx)ksy{tmZWdm>4|?w
z3j8x<?ORSw&HfccQMRB?jZA{Yn8}>*JNzDM%bo=AgeNe}(N9q)*G#rtQAuj~-!w7H
z8@bc7l)6Yg?L$`u&Y0)4FO8A56e;`a0@c}{{Q<RY4^pRhVh4hcS3Ij8$lg?lsd?m*
z!D;90dA|q8oAc_>3V8L+Ufaw|kJ@hsCfkg}XRR9oe<FQt&qlDp5@TYK@DlX=7a0It
zsl0N(`J6svHs94ACMk4Y*5D`&Rk!31XHh3}+UeKL!-KF$jJHMqKqV4h1zk0F%H>bo
zJ-uK4xCJsFaKU%3?&P)F{Z!JE6Ht@fE2vXR0wPlF^XsoC<Tp+KSSrgEnduSXVKEsi
z`{Zvk1wt~x{YipBHx}6xhPC0BN7ruSC-h@6bzBeBUsGR@1s`TRi+sTU?Lt)pZ??g+
z_}@VEQ50G8dQM`Ix_W-F!0##*MCiDIf95Qrj0;vy{O5tdVDp^kIdk6crxo<Sn(-BE
z^)h(KqE(pa+Pj6@;xCp{(oR7o+=#Tt+BZ6_7#4<Pg)$wD!0CR2a5*cRpE1r}3t|57
zo9R=?F1TJ|8jU*Rc8;^2L6X(W=PDa1@_E<HD~!oeuo4G3kC`HQH;35VRe$`b^a&np
z6qEn+%7gHN9>(P^FXvn7_=OgKcCX!pt%q@ChT%?h#N5InjLO<nL}hTz_Nypu+@tZo
zFU~ZO6gIDQFubdi-_D)!{0FG0VPw<DS29ucsP+TM3W@ys@gcqSZrX=}V-SjFpsxkO
z2^@yIy<{3!<!>~OkNkB6$f1_WJp9^=yJh;uFwj<!#9bm?rrq;KPCAgo{R8gwHAtI%
zg3$@BNIA48vAZ<4mHEqZVQ{A%RC~}VTpLoO)7ovW9SF8$n+_gZMOd8rl%q#-<R$L}
zUTkLyh{f+Ac=Amv6k-hDX_d#)yMUSdX&JQVmDm-(uE;gA?7W#zK+HaXxe2|YJ3O0g
zpShI-l)r6KvJF5U^(X2!gx#p-A_Knrh`-{i!0TLf`xzd7nkZgY&-1SsK#q`V2cbz>
z>K65VNbvu7B0e;Qb|``#bMO3GpAiRs!Uq=2LUyH1=x1?S;1O9-kUoQrb*I?v0-Lpg
z!e7sV(<4{Pl@yvfj}I^0#824tjoT(K^LS@#mhvAqxkt6b-?qy;@OsLtKWsXo3k39Q
zug$N&k0nfWD6urGUB-gsL6{<slOy~J)o}7|8}l7tik<rZkEyE+h^p(lFfz1sw=~in
zl7b+OG}0iQLpO{f3?YahU5bEoca1QBgrI<gba#oA)OQJ=_xtU5x%ZrXcCNJ!ob0lR
z?A~s_Z1c%!{yBh01IqfK6_Ew4JgJmDuF*H`q8Xr{_%Lp?Ov2#RY8%-5!uZA%5}*zD
z^UI&6XZV4W`Jnsg0q?iRf8SSGW&GbZeZz3<hK!bcYe5wB(ZSuKnwV$Qxxy13(7OMZ
z5mFF|L|G<F35t}&|NltDhBsDgjHq~Fv?Nh{AQMaiggTM8Ggq=IdPXEiMugDVf&;|`
ziUk4s(U$E9&xp>5ln5E4V{Kc8@Duu8aXF*ON{kA2eBmUC*!p;%_vLKgouQT!l2URi
zqdPI_ZMUn&L^2*3IREY1N$}yBk?(do(y%ZOnt2TXGob(NRWCz1OZORRB1?w7)yrvV
zddc|u?B^+ICBQQ@u%K-fZ)RAcl+bEK;%RG7{7g%w?Lm-dz4As7Hyt3@#)5n?%3o1F
zHeJOtT>6=R0R(n7lok3Y!*NtOz6#n4v9sZ^1t}qLBWAgYQLi80yY5TXYCp+g&(X_L
zX%Yb1)Eq>@??&^#70n{lk2?rC^Lc?WfYBAWLw=>Dgq%3`j**0v(q~4um+6J(-EY5#
z!%3(H#k&Qt+|N&SX@~z-|36bP2Fved{h(6cX|Gr+YXU6(6x~cJA#>qkslFDGCmjr4
zFyfh6Y|W?-_X+U{Yunr>t=sosrf6tW7*h9^(>guyCVn-@sluVep^V6e?O$=@0X<-1
z{kNpe-F}C}qkV0HXBPRlfr1Vn`hJ3Rrnl8KS8k&s8V5PiVQOzq-r{{s_&LBj{NI<Y
z1A~Ezt0(EhPMIcl+ePSArz!pcVZwH2evpBiUvXldM{ggdZ!JEj7%!itr5`>WV>8<!
ziP~ERFjM91!Ea^J(fC#D3Z5%FgSPbYn4EJua52#M`&DORh*)#sdS4%M?OeVc&rKjt
z)&2mYa*>b+RpIXvrNT1Uc`D$3j&+HtC+4*O<AZ&brfX$97U?#8#h;v1Wt)T4XKQMG
zr4Ec@C)c)$@9I@RH?wNEgDl2L*XdT-<L-mreuUdmDPImB^B)*j`*f3jm|>*q=P~{J
z@QCEqnXw{3Sq^cCV|E<ggNq?PAea!ta#m>kj-JTR&dw0i2$u-5a?fWLbo&N5v1ET-
zjTdYXvZ1O#<G<9RDNxRo@U;1M;V`fe-y|+@EFNPeFN@w=Mu--?B4@5P;(YQy0|qjC
zp+%~>Et<@Oc?^{D$U#dQCaQi{5arc%jt$g3O^$Vo{IfxILAbV0W2Lsd%UU&{)hIE$
z^%RTM)xDJz;NSRW3PSArJS{CU#c$QijsW^4F+SPj%>2qXFfUGC<0rp`zEPowT>8Cs
zwq`cz{qU#>m?<I;zEAt%_P=aj6zZFNjz55lCUne~KcF09<xUnzouwCibd$DTdsIN#
zmS82Ap<9Hdwt?2>rm(zmv~Tm^?-CA?yW@-U4NMve+kGGLMRGsB&#7l^tyK;$`V;)H
z0`-R{QY%~ik!|1tsa&yeEeY85JOn_+(^T*PY>82Rf+m77!Ysf>#lS)EqqDAotCQOt
z5=wzt+}FDIl43N&sE4Cllx@S;qHrm)ithiNf1))-Gyegw+QzyfEiDgHmLiO@;-umB
zNWLc+58w7~YoiqUER{PnuiMPEV*v~b20)}*=ekBt^RJ0LO|XhvW<guZ3s`Fq$dJ)R
zW&}4dmKVb)R;(zi+9vB5RGqk*(a&Efsqsf1edTSyvNAVu7V)|<t5<>etFf8oXdib)
zkYuv|px1xQzY$rw8Lh@w`i(Tpy7@{muhi)#TZ-Z<QvQp{_p!EmDhBLTT8MVf0;l$h
z(gC>eKZgcIzSoM>en_RB*;BDJ@UmI~X_l<qIq9f>x<U8p9Gja&2CS{_8FBBUQ*8s9
z9Jb%pF(<_)mtK0yQu}pH<nv~qvU)~#l5`A67goA}8CA1M(*~#h&EtV5*S;`4kv)19
z9`#HWIdK;Bf@bWE|Ep1ZuE$mXf7C$?l@MX^dF$TjgF7|)1S!exWOq?+>d)6aX&Mmk
z(J&>VNdgfrE|~~hXFey7)v3A9ynm9;X)zR&6@S2gc@*Z2zyoM6wz_7fwaeU<u?~J_
z9YObPpL$6-3d!c{0fk%ev%ZJtUs~cdR1-f+1J0nFB(KULBE@}kBnHURn4orSE2y<h
zizf|eXNy{z4+oy7lA2M&gfU30GwLI<iUg$4Og~5)qAaBQZr1is+^p+5Mze|{?|4gz
z2-GK5L^2tM%hPx^ajG9s&P&b9WUd8t6S>`STt!#!Q4(dqF0S-KmLbe-+n>XM)^>BZ
z_(EUT{=tRwf)-8HA!j*Ryw5>+YexEYoB<Fw_{>4!i<wNKI2Ydh+#WY)2KpQmacG4*
zR{47-Dl;^HF>0C@Zg{@MwQ%vZM~t4UeCMx!aGAFiP*h+7Qx3}>s~!tT3=1{mqnu8t
zoul3kb7DV$_|FpqLAJ-AAby;yUQ~(MrP=8rCmI{=67#n13saj`{)!mSBICW3xhjZ~
z4k&OI*o5;HlU5klv1wRA^A#@#9+H~vWEo2lj`bi!?d8sCR`WZ=+7Gno98)mQlP~51
zx6rtIJW2<Ow?Q0rx$8@%wcan#0I>PN)H8&k+}I|-OvsA(BIFo|h4AmCJeEk&x=!CD
zFvZ*XkB?4@)wN}^-8J$D+#3cC8pjp-rB&1sHVH!DN+OZ>?yvks^A99G;OL0Ael3H%
zF+NxQMYN_&Cn*&i=@Si;;aRj<-Q`Vwp3Xh-ixED%xz+F2$%Q{F>uNf|yo)(-Br+No
ze)6cfGG&Uz&Uzs^QLVKXcb3YDWMEwj&nJyucO`bKl_;_T75tmT><XWD===@r3+@g4
zED@B?Uo}0hpy&JNj6=fy5%-bcDsYx-z~y_D82#N|>phiBKsw2~2Y?mH(e@^v`6WD_
zdtRI5kVH=yZySXa?6NNjH$qHN|2RE+c`haSDVm#ml4z|AUf?L}wYeJ=Xe<Oe&oJ#z
z7y4%HJisIa{W0Qk58qTe8d>79bJj`R+93xiI7xx;?A5RF*Hz9&bM&L9oD^Bjty+~c
zT}epOk|W;4pPw(I?bmIeVd@y#bFTDxZ48sx%=ewKxKanZI2`Wg9{Lj(t-sN3vA=l8
zZPj^Ju|s3p+i#yt6imr0qB-RwNY91HY*I#;Deh-369HjG9AyD(-PD2--}GyF4IO;e
z3m6)iTg;GHFDe%??dc6kylu-m(X1#z1>U?nDc6e`hrzl)rYG^l6k2oos7*I|1?9wF
zG)`}8VyY;;Q5Do?Nj>vH^}wr^7$DyBq4w&B=vOi%&aFNUef8j_*(QL2PM1QPd`sFC
zIEtps0-rriWn6|RuP3V55k&3^Ps^MGc?ZnFnr6{u3Mvv}tGBqzH**zOYJA|`s*2U$
zFD6yEuJ>~fT-+2yTPognp+7pgo5VuR&!!a8);Ir$des#IFwWff-5KY-X{F0O+41f@
z8$<{#O*?0m{CIVKQ7qfQn+H>c;`t=j*DyHG+h9kpc=||df7m~!I%~0tAQQRVL^y_)
z1cCNV<fBveJaTf6S5@~~C^H&{+1|dD#(w8v|M*Zp64Zd<`nD1?!&prv#W3FssQf(%
zPe{PQQQNBNU!4(>{wmW*#m8+Rj<XU2T$7bxf4h&;7$~jEI3|qGUxLlAo6!KC3DY(D
z2$ft;z@x4=2KUj5<=>OJU>$m{^YknrY0ZF_7V~>oW@h}Hj+Yz_LOx$?-#U3z^V5({
zGP^lbB(1*x*jlNAPen75;~H>G^i*#yp9&3t9!TIQd6OHaTxSW=k3m~iQrYP?Vjl~7
z$5*?}VEfCTp1^Wp+yMA1_Z}UvBT4WV%^QlNB_#&J+-qZ00Y8w=7hHIpdB{vzt8>}$
zOnt7ng4u&r>g3orRYR<3?}Z?~0YpF-smqmEh6OCGS`Tn3L@H&cy@n5v8G{FLI4_Kx
zT5UTk+xU~3qMM}a=P)dYrSxDJN`Nf_>tXt>nag@b_Lo7zoBAd{m8KjgAMDXu|9!L|
zUVDLClXGwNUsv`NtK2m9IG@3Jt-w151MT<Jkld>1w9>g`H9(IM_l1gNNrjIyo+|mX
zy={v+k=%}GQCZNk!xVpNkc6j)=j{>D8gHE|SQKeRK1+D&uRt|!AQ`*~VW@N=<jw5(
zlM#EyZvgd~<?D)${E|s&zyC6fl6@p8c^s>flEl3o1%)dw4C?rTx}OL7+79CsvwToL
z!Y9qdh5kB^3-Z^>E(Nh`olpYgCT95&;txBX?o%Z9%CA1{;EbALLXF2sI!V+2we!A*
zN(YR~ATnTsEUmK9jFMx?#@Md)l=$}wI!RL;4@pGg7fZpLsv0VX^;z<RLDt&X!Er4?
zN~^(4x*L^{n89Zj8u?OqmXRt0tx|-r<rg>QC2;dC1r_d_2i8t5!UO-R_DG^R@#A|7
ztugL1fhP@oyiEHI@-f2%lz82E-UOBapsxiZeXwE)*FO!u+DHm_Le2Dz1E6<15rvm)
z3`FHh-SS@6K>(`pXOeB$X_aI&{iSI!ZNCtzkVK+uR@w(hgf;P5kFiohY{9klI^mlo
zk&JzvlBH58R#%aUcJUA)ui)MHUyx|m#f2`9qXo6m<m%QbCH}B@LHkPm*9Oa;08?;y
za-qBbx4{M&Edh?Te%s-f$eU!^o(q0?MM#gjBlb=|DjB$vDLVo}T+4hZ7w~j^<3Ty^
zD%PWsoRNs4Pe&KNBLEgNPjNlYo0YlC<aw>T|Jc4eeh`hyl>7;GSwf-@ZcTZ*DLoED
z7=A|9<aXbZ%bz_0+R|3|OUKn%+v?~%K%pUzR|IeZV(8+sagYc7D{|3f0PPlv3LeKO
zk#6o>s>8#1F`k_U6s3Stk~@E0{y0g?Q;xUm=@|x0C?Y{oQJ1kra+S;}m2k7jC@hkH
zJN>o-soOu6FrR?eXOzw&ASbOM;vUQ&!>|R#dF9;YX^Rq9?ek`DmRI#TsQ@1%mTg}T
z0lRW`VmSp#2|sXFZu4Njop1u6R=eZ{aLk+9U3VpxyJ{Kw2`r)>6kq>RBt$=kOeJ8H
zH3$L#0(Xpd>Hg4-cVV3;TlNrE+ZrL2i6;N`wb<w~T}~jzBU6o`^l}s+U9vIqx7Pwd
z!K3lVuw6n(pjvuX*4QRiKxHH-zjE4JI{zV;s5<~`RzVr>4wN=}?5OTRz2+(^CKB%>
z6(5tXNDhv%rWG+HC*)_D89DtkT;N)-6ZH#yN;Q`fA5x-H?F&Gz$q*g?H6{PB!uQ*o
z5MYF^+!z!`Z}ka;AuHA|ph6v>B#osDBkud!|NJb9${(F}H8Dg`pXoMg_Gom%!u5C>
z)-?2R*#0@O8E|5@gVcb`04ZD<zphTq)YMcAN?YC%Yc*-(;3M4;BRuJ~;~t}yEnNd%
zi1OtH{YAIXu2JUo2mdBElfw4~MM1F_ql)*D-&|v@Sf87b5cniJ4HqFSp0HS6odWG0
zQkRg7beFQDJh&WahRBSb;6`lfW==(QPg0pmmIE;BKSC_{uZ-I!S~D};F;J}O!iSaK
zDsXDfQTY>NURZHPmbk>lYWb~_!otgCrZar<TB&qzTgK8^ARG5+B5!SgIeu5{PGh>7
z1kyrKDnLI@!E5y}{|5^!2>#HLOpw1j$LX10;*8Nx5!F6+8u~DyW2Jnq3b=ZY6WwGd
zc|@ObdVaxsqmaW@&IJd#Ekjb~%!j_cd1Lj`*lT~j-9dHe0+GGEy$K!>#uHZTMlCLp
zNlT$d)aEkm9e5}ymcBdTyG-cOv69IEhDI9L?R=h&mUha7Ndz<5pR~Sa-4(9@0Hm8(
zm|&7XHbNvnEdqAjYZ-uQNCA>%U0f4TvMa`%>6ngXqwX)~Ev-~1UPN$EPUgqdGE2Fz
z`VXz>Ng|J?`NN1UCFq-;z|Q)Ta>)<1vOgSiQUdB7j7N;ADXm$)XMDii4xsLt2k`DT
zw)2%+f*%5GoUTeaY|K6Hb|^M`J+`U=lmZ<ACpoSxp&*<rrWkREpaxNmZGS1VLH{TX
z1-VyFPke%3Zr=<hq=8PGtI7#gg%mF*K5ZyA^AWvCnS`1j(j&L68WTUO_eJ#4;qgBN
zmwS61`3UO6PdSJtm42Ovn$iuRk4{{>GRzTqGpv~RnGAWQs+}YN3jby;II&zWFL?H4
zEl_w{d53*rC+*!1oZfTTh4g!#F$`s&l`5YsMW|ncb>_42pKydYo&~&~cysj|ld^>t
zZ?Q6?#l5HrX>&vt(JX@SS}bn#XVkn}-$D~o`$W=reW>|J&DxHc@$ap5)BS)L_ZK5X
zQ@oe34@kz}UCd(odfNxLV3n&3SVeLlO1>Y|)tC!(i=hmZkAl9&p_?f+qt3f+4*~@_
z(Omta4*d*!Rv65^@g#k32s6>5H;Z&U;~?B8OYBrWgEx7;qK7oq8A_}5YaVezX;V)A
zJffa`+O4D*9eK0>Eus@PKIkNi@U1Ut1hH3bU)h_k3-e2xW82zl(LI5ZG5KiL2BPKb
zrwg)u=R)@4i^9uExuOm=?YASXzE->A07j+O-sRhV;rdK{<d4dJ1Bnf(w{1)mnj<C=
zQ@P$V>dCUZZjTBFe1Belfzg5tpEeBfBoAjmh*w94Ry6#eg{*pL6cyQVkw5oQM7{eb
z&ihasR?FpanjrwWtvnC(DsMdDS{r<;S-`op`uUa3Jo~>+%nm3$OG*_%nr}n5Akp6g
zlYp&mILG^3Y(l8kNk<wDzEbZh&kSnudmmKe>L}19&btaZ;MeJ~IPsShB5h76Ak^fx
zlo$PZvUF=m4rsXdNRQBPHkNv?Z36(nl<qPuY*L@W>w^HkvCJpRa`t&fg#@1bUwMd%
zuQEh!PEN=}?B|3^k!=+Z9Jwv$VoY=OJ`&%ZdTC;?2v@`)hA_RD6oYtcq-XMh4|Hj8
zT|_+++C$Y}?#CXGj!UhG2-$(C{Rs}e*RSIus>^3NT5}N5qZmZe{)L~tfvB4$P{p)B
zSRnhsqj!fXailN*<gOp+5c*_<DpXcPJ$ort{QUPyk@Pdr7NI;I1nOvHCRF@ceCvAb
zXe(oeY2r^fSy=~LHcXD?E`cF+`%T7eWU;?1waa5E7n@9N7-sLgn`%Fm4YBMDCfvl^
z{}4QtdzmQku*ivc_}S^8y<y-P))kg<|IbV3tp{k(_%%zsv{rmXiRd32(p%p#qDVKu
z={zU##q|GSTCS<mJD121K3*35Zi-<-76Qx3u_AY_r)IJ-41*6p@A7&3Q}%o_T|xO)
zq6gIv8ZJM59_^Dm#ulgvs8*KmT)czremj?<Z~bgjlm{=_Vo}iL_q=H-MB<xWkqTdk
zza)E#>P~n}6d%!Yq-7>}6sY{?pr(~W7CEt_v7Zaozg)+3j#mkYdfkHj;dr!qZH(;y
zVyZS+L^om({g`3l;LGa>k;Doe1v7^MriC*$MIrk$zSkK^FCgnAhulhOX{t)VE~x}0
zI2Y*ZdLfUtB}G{ExVtSBR<1e(5n^z_gUr4~&}{#fmIZXRE(VNE7R!LyJ)U<Og}l#P
zX8TZem=VhO2W%Fa+^T%og!}r48eq=QBTSXfEf<@~Bh(6Q|0cJcCs?jib>yN(1|Bp=
zriRFa1rAMXoB*{O2uVu7gsaPVL+`<Y?A5o3y26CEh9Ks0v{fJX;3KKv9yz38k^H~*
z%>3@m0OCM3Q#Z<q%89$3+li!x@x}}^vbjM15NuB=-g+*uVgB85Tw;KWUQi-t5N7l<
zeN%B{@#?!r?_R-isAOrfWToD(fud&LuDQK`I?BjG<dcqOZNX10oN;`Rh~ar2`~XxO
z6-<Zv;}rQdqgj3lCIT{;u|>)3;3?mFGvCWWI)mFp)SF163X9jppc0q(&PJ|esQjYx
zNAP}4=^@gdeXN%Ehpd_bmH*Ef;?Nkk_~uKcp}m-{*asR^eHw6$c4$^%6=S@3{-U^@
zNEDs3tyNJNyx^1QTc@w@5LMSu>`i*O*r{X%&0&{kZPHloj@-snNuAhVs_$<zdIb9E
zT0dKB(Sf0}6}(YiYM7n+uRy-&h@g-YmcSMjAK<Cqw*f-VZ<6FhoLy@};Z%Kr-GOax
zDdZUBvHZHUgUuhAL?<e6<oi-Nd!)AxsPF;2VzCndRnrK2?#VXUbJUg^To!KzpSK7i
z54>N*y5HvP#MRm;4b@xo$FH@6#OJ4B_IKRDK0oKc>4`3Iy0sul9(OY@U~W%>Ja9b7
zoClOsN3)DGF3Ji60_xB}(J*n=L7cvEQq)=cGM5BiVfPK4In_+#Xw{)}L{W>{dORi(
zKzsMaHts&Qz0}vh^qLHYo}3@KTm(0i-6WD`QX(<qI1ywh9h99(!SBao+;a+gv#f{6
zX=FUB7>&(;by9Z;asQ$T6~0vQH!#e&wTWwa>J<ih)S$?N&`0*qJZhq*-UDF;TR25t
zLY8&Kgg)q3FDC$Jjk0aRU+m2&ocL)R;_1Or@c@UPU<Q^=!H!tjBDC=JoV?xxy=^(h
zn)of<b~G(gpHNV~&AnRLjn~h!Kn57)2V_b{edh}}Gs@P2rmNSzU;v0t)-c^&>q1mv
z7I7d@Gm0|0w9H*Agk@SHJq)U<FgD0v*E<E>MFLi%kYhqqx)tU)CfEr<W(fr#R()P$
zA*fj*m)QNzDxH6_kZF%#oeM7HD6(%>qbY27`ybyCz@mg{mrnkKd@8IY`}eS1q+R56
z85K3ReUq417YS}`g6Si1RI<*)dm|C5Pq!hmnl6=^Ez5spYh{KBj`g@b`AY$4`FcL0
zc0__@elG3jb7Wm>Df}$sTg20IJTob>S7wMe3#4>24(7V8)h(d?j2X_!$=B|?iXoOU
zr#?H`nVHA?npjj{g}8ow$Q>A3`mawLgz1`ofKwsPZ5l&135fqx9$~4-kV1AcG@C*#
ztknv#Q5+gzsi=OE33KmCWE6|*aw6gq8VU9x_mxWhB6!iQ>Pq5}?|bhYy_ft9uz@A%
zzAaCfaXxK+_9o$*CUgOO@_pH(64sVQ_NV7&#;j__j2Q%Tn%6=&da_F%`iU|}3){A-
zoX9(EU^N9C`Z^o8T3N{7dU*j3IAo~>QQb^8<9NLD;(i~o*gP)gwnW^3DEB2n?pFL$
zQBO989oDu7lf?!R3Y(hMp0~|u4P<DJNNr;)$T#)lo%;cFv;0A2gr*NH=3d<+WGyIV
zO7G)cYW8H$Ol8Skq1@E<?%WIvJ<m6fKZuVUGyf|{WY!WG1KR{27nz^xaQR9dk*4W2
z0DKf6o$95B2kkwhN7b*d<`7NkmIE28{(<2xG3`w@i&bXzqg?i;Tg=7e@TcYQ|EF22
z1boY2#wXIOqA8OFfz8ZcqXkHNnU2k|t<Db*8TGq2M+8VGUvr|j9VE<wO0^V=JL>Qu
z{QFoN+TLIX<Ffp8f9mgVse3h>UE?xMwiYoHjOcbg@sUFmdJY66z)B2wECh&r#y{VN
z7_I1m)suz*_`|=xLQ%(f!$e785;mMbGNjz^UQ)cec}}z@YsOy71o@Hlj~eoj175MT
z{7H&wU;lOAXXTAe_wyPv<47mV43qR}`6;3PzbLg@uf%F~oRV9r?!d8760q(nnJ4!A
zw}j`Rf0l2zjP-jx(k>yDDgquhNdRF$G4w>SXqfKZU(DY4l&+YU#GACvmlDt4BWorl
z#0wcdt^2*!FG*wzKv(zn`~9sKeqN7~`AO?T0+)(Y27i)Y@24QKnQ1+KF0JnH?>>{G
z#;pTpZvS@$%i*UnBh_y9o=irA!JnN-YOT`naHit+Ue^8-<xbWQS<F(05&NzrL}VSt
z5uiJ2zNC7t26g|`nbK2nO;WE`rYprD10Z;Ds?ZlG`uUa`<4myFc(#WnkN*M+WT=LD
z%VvUt`1MI*EH)h;9;zEPDgdcxj?se9f`k9J+(#=_8{qvgFcA@I0blm)>E+$)m;lJp
zf@(sAKPXrKu_wwxAG4u0i!uK{L}@09NMb-1S<gZDp}?EiB>6f2+@4P_BV2LLsfSD&
zUlxq<E|0PLdDW_(ja2wJ+>SG{EkKZax%DYSN5p-T9{=*t1yHlg9-#Kp^{9R!cZBnT
z%xLpnBhfd=@45odZ;c~{`(oX1uc#dLEbv6qK#J()lCkvGACvjtv9ey!w@OE>=HBU&
zo??{KiYLs_J1!H#z9>41Vz@esfsHfLwY<HC8{x;}LEoM<PyH=U2W0ba3K&)mW8|3d
zg+>=NL5^Aa^ho#UCw)n}i{x>^0bKz)i)F68RA39~W8%{@DV}c0Z6yF}q~B(VUEx#4
z47hV99;P!Gw^x#80Bp?AUAkk&BcRj~1Ua4)oFL<rX*R80>Q{jBVV1k=N5UR0UZ#-g
zcTs)2CMU4Q!GA6NelYpXQYj(6pqdWOyIAJq3$&G+QN+6klz#=?dbF=HA&Wg1>s?r3
z?&Z!OqB2Co(`sLjjUDCIcfLlO5%^5u0B3WIwWc%qEZ_K_9y&EpJ@<P8Q@Yy^%$A-3
zHHW)026lN`=&elGT^t&kNyJcJmCcrwe#I()kQIoT$q6Qo9XcxKF=UoqKS<ggR6IGm
zM4Tpc{4gI#IEjyF_n$c3#9e?5xrK&nsf!a57iSYzWx&?qD_YbF1}LXJXPNzMm?S>0
zFKw)w4y#@sl>6U>h#Qq`%1(bP(j?{wgzH3~|B6l<5b-rvkp(Bpn-Qg`bj)6C=k|P+
zBeIQ0+C1$>5cFT}33<*to^hAEdUJ0>q-7<?4d0RW4^Kx0s6YuY(>uCs@F0O0?)*%E
zz&czgNPYo>peZf6&;uj&EwHf~&d`gAuoxzxhu*2yV?f#-+r&Tp=8ejx06+^Zmz>1m
zcI`nLGPpAU666?`#f~<e-gmLSDvUfBu>pY}6#}#Ip(pR!6W*w-3B1M#P#R>fppJ}+
zz3EuxR-CB)(*n5uYpPIA-?lwbiw*lcm(hP_rGq@9P6jmiE~5x%#2YEFe)Ggok`~Gr
zUJU%EG9ed!Uh&>=uG>*+l*2pHI$wGdRJ<B&&gD+HTO%pF`rR5DKdvw^vLcz@a{UK{
zp%QE-KO2dSfBWgN`UdrU8iN?&&vKW)H>7J-7EgyEi~sAS0p}N}U*oQV_D;jkO}~KH
zNv49^npUaUBnf|&&hqcQ-UeDZ<bz$JKOSvwz)v4)$Rm%Q*5fY;S@oB6iF*1|E63iW
z0M$HsQ^C<92Fg+NbQTf|VyhAB>sP@dn)_r<2O(!`e%x<p_Ry;Y$UC%+&FH}A@0~VS
z+hyQItpaG+`e_6v#X;n{K+Gc3usOh7vWxuZN<)!$RcG3l_Lof!MZxDtEj`QazB@$C
zFRqwPSC&pOn-#sQ$}bu?XPvkI`SD+LJdX~jI(WzJos#SRIck8sOFY-|`V7{SvZmgm
zwia)N|I|wqBHqmZbu$tCOWcoWJld%XXqk<&5It21IlM4XN{#Vht{Bo}XK5w$bhdv2
z08D^I{RCv$>T9#R>%<Ls%sXdMgi=ckP6Q&gst2C66Bt{4UcFA*UYP^`s6+&WbNcH}
zN`Jj9taMt^Pahh=UD(t83kzm@W=|he@6LXDp5w{(JqKy?@>IM5g}1ajB7j~UT94}Y
zada{y%ur3B2A5TX3qT}&NQr|*fq@PC9*#tM(fRs?WyJlz$s_qUo{)kR_UKHqN9f2!
z4%^MPC>yCez9QJD;blRZn;=+xtaQbV-{JOD0gI6QTZ!3KYPLwzT%D`?^cSq%ugtnz
zA?|3-KF=hocsIY-+|j$aFMyMz?#WFeF(OCj9O`zjyQJ;2V#_sW>}F?}2<HOBN}k#+
zzRR@|BgEoB@LIaP>UlQ&BH?dQMBicDJB(sP?ZO~aUylcoEzp;_Q1BoS7H_TF&X|y4
z2RT$qK{V2IQ39`_Jv@M91iZ+1Z6AZ?sI3#Dzq8d@12R39V-ro9J+!^~%*m?A=*{-<
zAbVO%#D9P=z(x1}@o$Vw%b)Chz~dr1WXpv$5Qno!?0)TioU7on{lTX~$MajntSv}q
z4JT91jQESP<B`P4jZHgE*J(uGf{M}dv!JG;pWQ?F_2HV#miHDr&(}G$*zIzVCjT75
zV%HbG1E|$&_zAQTtN0#VzqZbVNbiRr)Uq%CX<$-hp3ASF1mhu2PXZqN*NKh5a8>br
zz;wY;QK`wc>QF#5v?C^>n-M4J<>D<h&^8O&|FXH@=pwm(OcekSZ*QDQf`J)#Og9Z3
zl~H5Aa?jMQ6Mw25a!kqfp?W^l)cN5tpJc*fC%7-eVt9i33wxN*#Y5A#Nz%=v4Rn*R
z$=@5_gKn6YSNRBnCC|VKH~y?a463uMi6+96Z+U;Ai(O=vv+)^`FEHXl+az)|AIRmZ
zK9{p1Wx{7r&Q<llk_+WvWAdN)NN@Pnd23R?GA89}wLds4D`oaKhqq|oYO6{2x%lyn
zd+Y46Z{}*If7Yt#G4a*v)y>;$Kfq&#yGAI`sZ?%hmci@&it3Ie!R>Nqq=yFKP5*5e
z6QEE)s_w%5b=Ci%i*Vp;9NsRUqbK~UVdIlmpyThOh4cJTsFT%f;E%*}HLh4+UZ-h^
z6qq-)jGTssAx=xZENeW$sKn?l^pyK~m8i=TGIe`0U?LyI5W?4Enly9JD%P2ZO(ycI
z>t2IB@d@#6%OYFU$gjxvWAt#cgKljq<`0l(*=kT%OX#-^M|k7E6ha3oVHX%sgg<^_
z1~Mn`OBz6Fk8P3ntSvAU<Zz|lE*WSjGJR}IHnVcOEw=h*R=@ls2g!Bq>y6X?!{1sj
zG<Lk=;gD;PiTMl;BJuPvM(M8ih6v4;L>W(2`$An+e|N2<)jR<&5YE+<V>~k^F?}H~
zpksy~!#-d2{HE50ZlDAi8taT|L*XxpN6d+3(RpHgu!?HQENXD;xXT|bLRfyew9!Tb
z-*@vWLj)p%C9YMmLIJ30Lv9{QUr6vA>X9dYrIU(643RUOA~Ue|QtRKBn5z4JIB1!w
zw1CREn2<ATk~u=$UVqUJC{~49`ZAEqHk5y(b2J1PStoc_*vsM;_t9owYr!VSuFbw5
zr9G)+cd_L}A!S)dNsN~9N4T=$sJJ1akAef|Wci)_jy!}P_VN4}KdKS3SZ+Zt?iT%(
zP5bVTra|eMS+#gWpupHU!Qdv>!f{Mwg!jk!Ta)<y8eZ(^PrX<b*f`#;dbb<WP$iW5
zF3~swW<ANecbFxgaG*8h?9Rptotz`SFR+|`y;ucp?ghE3uBJ8Rf}WrkD<_T-$JwPS
z()9DX9SO(^1BwqCbV|@Y(HdoOkb4)QQes?mA77F9J3sE#JksU3$h+_jM7%ecfMf>i
zG3*VKyIQy4s9?`Z3xo9%sw$@A7vCS#szSDgn4jq34vStE#$mr5AM)CetTMb>=I;m%
zqcU1C>o`Q69Pb9YeRNa%-fT0{=lE7wCqgNiNW1fA1cwI+Z-%30VAo5yg(BH`_B%d-
z=Rv44Jt+E72gms&BSEQo9{Zds%Fy;BhFk2OnH+Lg0%_HcWBIA?_fv_;o>-c2QyNTh
z+r&DKbdhim*`CbreG;OmQ@!1MB3qp~9!X1)wx8&Zw{09`a3t~Eb3`6vuvZ1rK1-1H
z`2!r<2bR-<;}%Wxb#6{kpxxELxk{4BIy>-3qB&1|XXje6Whm=CfzK0kBKoM;&xP8f
zi0nu_QH|BpN~_VP<Iw|q>UYusz24S0;TI-9=!EdaJ$QDX*vR9BKe$U1LqKepBBusM
zEs6c1Vda4mT#XAkqG1OgXGzQGLO>npdlU^xKb1Ax4^@(^!OoP$4dl!MFLJ!GYd^%Y
z0fJ|x&34VH3uX=AfHW255M1@qkK(E$mun&=rThRm=c_4Q0Ax;nCMP&OxbXDF*OP<C
zm8a&C<SB}wAmxMB@_<kX`MWzK)Mjzj_tY`adIFm7>*fLukK}!C%_%q7PsyoLcw&0~
z%&;?h?LTq>C#EAp-w9;3PhweacekRf+93`E^YTu?Tml#4!zPiu3#1mfZlNbQ<mN3!
zlY}B6V^;;+f-ZfS2u}DW!xYakXM(FNebNbv*D9H4aDX}awZin<;t(lNO#Wv3H*w<)
z{JlD#!}=q`%`7s1+V3t*JO3f=5+1_!H+<c2$M}pF@SZND$2b&iemOi6`5Fy^?oqxp
zP5|~I4p1_X=+{-&prQ12sQauj*ZyV0?QzHT$#sIVW0(oeaI}tj(bbkoZ-LT@`ehqp
zM7Z<&Y5beJuCGBO;wUHF9aGmdF)f#|F9?qk$IT_F-e+dQ3p!r}P=z;vCk4~hi9f*A
z$1iU^H+6KQ0Ch%VDoC{H!5UZEspKxpj9sg;fbbo(R2J&nV<(=)yY<%GIq#ZzalQZh
zSfPW0E|F6G^bFz&ybI$*{46`f5ogqFT_)1~ED+V-bD-Y>Pr!c(<~-d<iJP0sl%^WE
zpnDy2(;J0Te%Ght9ST`p_-qE3uI518>c;Uehc&v)Rl{f7X%3%%Jv<}yNu8FRt^d!|
zFo7|r{_)Q(vApi-=@LJv_P~0pN#MrlcsM-#RNO+7_N=K0V1VuU`KDJQDP|dJFKjdU
zOU=A`jw|%xL;S<)v1hq;RMsaZSuC4|tb^}k%r7yc8Q~F2yp9JVR=IJtp4WMEwlopQ
z9lukxIhdCCi2y2ZG1B4>SF~;1`%Q7|#B1tsTAM$st24Ke`xD*VeZz%~T%AQsmP}g_
z_32RC$B+nRI-|2gG;hdZ#E;uo|6U8Ph@Mune}q1HyPVR{N|ckW06y|EnG_A(6~z~i
z(4OV_U9kQH5Y!fb@Ru&O&b~+<dFz2A3FgRrg)nGMw1?Ii&%mW0u#XH2JotDtul*bj
zv=f6tg=mu?T>4?WDdNLVU!riY)&fHz)^h&EZ5s;5!Mxj`1uQfbII*9%Ak;nb5->I(
z*3KUi3Jq}n(GuZq<f;1v)SJvGKHH8;kD7#j=*~L@Sbjb?-G4xhmYh4mLqrNrB{>mw
zL9f!h{N>S6n-AcwoAs`6mwgv5RqQJ$Z)Qz!BIvX)ZCeIk9SsDFM@S+ZJ($otK|ZM*
zj*8Lkymq@>tlyzXi#-S9TU|Ipp7GWwE34xD+}7C663%<!fz?(}^?gYKXO!iC_KAs2
zG#&=oo=)&Zm0X*>dqlQ$2FNJqg!|CN$cA!sx(dD{u{$vo6K%DcyH0IrKVuzEI-Wk}
zUyuAb3ZVV4!X2z>g<5JmzD*a4LS3g3ma6VEwSfJeViw1{*ehC-Tr80m6u1TbeP&@I
zSyPV%JErfNXyc$$*ShQQ0DKV={iYq%;x<cYL^MRJ-gjzMY~bttO_F4ldum;}b(M!e
zU+HY;`03tZLVlH6b;}ahmy=0Z!K+A&`xCa)AB6ru!1e?_34TcniW_KMg2;wWlAr($
zKFa0Y7evgLRPpN8*4JN5#8!@NAob<!uYXj(WXUJ*2UCi6uN|u+(EGpm!|fvw_R0Si
zu?cS1vb&Kfh+h0$HbYUbC)q=pK%ak|@i+EmfTXY}+u%t54JD9H6S@j>VC#*K>$1@=
zBhr6)l>ygx?$DFmy83TKeu&{(vhdJ;wyKq+xIqD`$ICVKp*wK$*LIYEcwtGGllN2T
zJ)ev#%da)1fECT72+=y{Zaya*FR4j%y2he@RiLYJe-p4|)4%kjYja*Wnd>Jem9~@T
zsBRoQpS`f#{yz&G0*mKIt&-zipd1Fwh>#kY4|ykvptKHphMX;;cd`P2s*tfC!L07@
zzFe+b<6A8q<Najrcp`KW8a5+pBf>eR!|BS%eGX>x)-$d+WP6*2#DYBEmp!O4`ju1o
zhRcdcD)Q?1L<>t8CKlLLh)Xz!{0z;`l?}^B3!30RIDVUAtf|bs8xV3Y3PUj&)_BAw
z=xz%nPDGnD;AQ(;9%vl8%EeTWNjn6aQZXwUPd*uG1te)n_8TXkVQcp~y|~H0vK^4S
zq7^EJvzlgpP;Zbt-F`l_x`|qGSqgSuJPdRl^KSrJMJo7nhwh}oRICafAa>X37sG2G
z`L5y4boj_Kva2j3-Yf*p80KMV*!9}1aQ6VcLM-7kw+Q9A{OB^5NOs1Y|M2lcgl5fW
zs2`8Qj`uyLr4}))zCM-gNL^peqHwd+8{wK;^{OG9lvV^8IiR<tQ7AXme`<E<J)9jm
z6I02eEWKREWmU`LNl)A?B=CujOkC+{(9<D)9t&!~bZtKoQ>u>|#cx=-yPcEYsmK4~
zUcz1{ZW20}td8cf{;?cc>VsVFIaTn`t}OrU=bJGiv%Df#{5)}}EHG&_RRW>;i%*Yj
zst@?SIiCU9vY3Bw&-x_9^81V4tGByJN<E^l#M|KYJI{NQvE6t9sl}UTJ(Zoa3>6i9
zqY)M1rqlH*?bBOMh_ie;)+am%bKV_&{nk7{Pz+?GeoFCv#@M%0cf1Uac2)wvxQ-q#
z!9n`2JG^;8Cebpv6ojjJ^LfwE@+gA4AnNpWfqeg;k;V*;v8&{rq<BX6+P%?OzQ6r`
zD!~bFmZ<o+wq<ROG#jY7G&8?gp*2eLyhY80I+!kuT{A4BpGW&*C^XCnmiFq(w50B6
zN*NjhZtWp-M^>sQ`~Wx@><4&~R3Fm2HVj$STm?hpaj%nGatsa?uGqbqwjg=Y<-|zZ
z7(kf?vb3lQURXoRxw9W3<kDAa*}q+n9{`7dB$grC_M-@E>Qn3&+3=ZrSKV#5)@myo
z0@*UJJ|pRka;kPoGsY_Jr%~T0?@%({UB~&)Atr&MiFYlN0-L73ecL2Gk-JdU9%?^&
zKVre8gP9KB{M-JJy_yS*Npj-xrJ+0ZZ><rx@4B#71*)A9@Ca!~P_wtQqRM0!iQfGF
zC!W(MO2*Z+U&JPY0wlc9SMy`LNE7k@a~F0Pu4<&ETF%M3BNGb#LH*>v(+$E;5@STW
z+AYpx%uiEGfxOyvdp@W)&DMis86i)pURN=U5s2+PkLp6rc~2@G3yqu<yg`62H5GVY
zeL!Nv9_~l{^+|}#70D7o5Eap-=Z)2~D$q@>@6yNILraKv6HDQXk;t@lQDL!QP?a;Y
zGdYN2A}BJy9dl$$?}Cz!T8sR3Ip#vcv}DM`!<tzCcD{<tG9%XZCR)up*42pBxr@Vf
zNZp^<3trIlItA)kgH_S{l^Di&2i)D3n5&(D!6aaj&~`8xI}Og4jMw~##7m)Qa5sWv
z1nvWK5xCm@#Cq@9!pS3*rTJ@K2D)p&Im1sQO&J~CXBluR?ZeiM!W))2T`+Rjw({F$
zj8mIb?XY;*QTr$Q7!m!<#rcDT3kIBuk?)y|`>&K$XPR#}8Tg}xC}g{>ag8wrg_4^E
za&!2l)K^9CQa6fTr2Q?dUEu<ADbJk_St&V}N~eRGM>F#s)iDnIo1@&k)8lGMep*&H
z%kG&^yyL4#dy1-Ndy?qv<zWbJ#1lznSvgO5bW>lks)fWOPT8&=><_cfXRqFbSdBdR
zm<WxLhV{k|n~UW&1_3w`cvOkk*7A-)04+t?*|m2NF4Z!d7h_k?bsiAysOi3^6;YQh
zlEpMuMwC!iaI*=(T*>BKUCTt_vy>v8k?eUe)P-jz>Tl_c*FTA}7YuWZwh&LN<bK!9
z`p2mcQaOEJ)RNO2LWRIV3*JqWOLf~S;B+dM)|hF@*0<45fxUofg*fz?^K}@qSuRGG
zkAJ@GufKS0QB@|n&to^U^;6H`O(5ph=0UT%jQ78!Y5^>gZwL<Mfn>UCBMu!;0*&Ue
zDO9(zcyTB^@^CL%hnrQDp`XF^%=-$xnhCDh##wIeBgkW<Qxe)OPh8CmLfnkXRPU#M
z=fT!6BKoX32YKkvss5c?*Py_Y?QIScON7GPv77`e_x?fPJ|rLxG?I+Jwd|Nqa1A$0
zdWu3ecA2PA8pBA{0R+XV)35)SLBC1R#{!HN@b<8Ju4Zvf7qY;MYXmuDbbD3<kFv=3
zt}btTYSO@^kU5f1cxEC*Q)$R~-@Z8sFb66W{5p?&|3w`I<Stm7_1LE0)b#WQ{)w5y
zPhH(2LM0t}1A`}M+Pd)o2nJ4s91}~rA1+J*+dM5N9($Ue%w8(VO93pXM#ypRG6uVf
zwTMIL{CgVBla>@^Fi3oG^+T$}!_U1B3yJGrLH^(tmJD5M_TC<cN))oqQq`_`?=m%O
zGSe}IK(%gn8_uuo_i>DVktVC4v((Xs;j?PgB8{<LDj8(*S;<%$_bMhtkoQKj<WIA?
ztE+lrTuS6bileF7t}$Zjz@B#tKzDyLX2iOkRim8)h#6}lv$t)i%XXt%qKnUOIbndB
zhY^Y&Y%x?yBziN#Ro`fyOcfP0V?_5#P2etW$m97qh8~tWtC`iVq()XT4e)lv;vU8F
zH-5}%%o@~+dHDQVmKFGjkEC<@o|rOWn?L8f!npRa`juge<X78x!Jp;-v3xMFqLoFC
zsAOl;_f3=2A2hzMZ^vDmAvZR&Lh~S4^*v5fH9Nu_VRrR!5;TNxgK{R;w_CQ>0A>Qf
zFa$-9bu>)BA!6Z=E*rk;sh{q7SG1Y5_b7x%$Q39A&Ru8znE?PQQ9vG84;m;<(oF9!
zSLmSdK4Vz*7#q_MCf4zfUwlYZRIqp~Zra|=&xOf~7l%~Vr_4s19sQxX8qcC$razxm
zD(4*fTUe>yydOm=IlFp$`3a~#_P2VkL4qvn<}+(wwuomriA%dK&oUSGm68k|J7H_K
zx3OzKuX_Lf;T}pv*+9Ht^H(Dx4Ks9T!EV#MZ0=sz?rp9O*8sVfFF40gI`FnOx_y2V
z&@77lcV75UcbzTd$IA1X+<tI#gY*iuqu*`Nq1*e6`2)S5MwM|J?1rZr?yj0tkJ3D^
zYII>PaPtdUbl1Q?CZ(|hgByFIt6{Q^D;*FFD&;IEwb?+r((>qk;%#ntX3_f&T@<s-
zNqWm~)tN<`lf+}9c#>)&dN!*do+>`ujle432d+yE?%v;5D>P{g+bF3NhN_Nl_s@8F
zUSBE+TxJoY7xmWo<iob+sdY+#bvR3w3?s%~0PgI?l_TRkSyvy(Tr*_Y<kIx&zezOF
znsx~9&gS?LW-lmXXVL2o7S#`*sA=JofgNv1Y$}RcX@N-*0JWn)sn3M){|x&bPf@7e
z+MAMZUCwtUw&?bIdcqGRH3t^v?(D%f+{L^HGYBC>coWVZTw6jz&h_m$L@))q=;5-t
zllj>Di|g?`AAp2G2ctQ2?0CHJVHM5Yp@wO~F@S$g{20vBSMN^K*dB4P;47&Xwe(OD
zkTv>sb#e#gs{pV{sVWmNkz<&I?xMe<nPJz<#rzmFQ@`(0|DD!Il$g@bG(`pSb51|C
zwR}0v>DiKeP%gjtPFwAVS~6n3VB4GKs8SMUi<MnJ%7_E>N$!J;*fW!U;}*8YF1!d6
zB-7Jg&WN52)_P{F%Rj8broyOcA$2N|N8mr5eiyB>xseA}Nj`*PBshN%NijD~t=S0x
zuX>P<{Cb@A{y_XW?4j;f6$Rig=C(EpD{o{|jG=af6s;B0JdP3&C`&}JD5`drvN&#s
zUbZeW>Y*j;ys}wazDR^)$*&tM?+Z3p`fmJgLx{)rG5X?bk;lA|Dk$PCgP#~w?}GFL
zlohH42(7aT-PDUuOIB1pv0UVILsJ)SUZ1Ef^=~Y&18eUh#HF%xBO#*0W&PJv6cUyg
zjDUf1bH;tLfA{4r0Z`ol%^v!AeHO<^!BP&fmT<<HO><gr;3kS4lz<G+Rh{Eec6Zem
z^No}hLD#nCg*<~rniD!Jpqd@JdBz37awPTkS(ocR2x9tpp&^D(O1SQF+RWR`((u2g
zg$EtH-pioZ)6tLCssYCf67L1Bb*Vdzc|Mz+Q!@1#1L`0m<yRgN=6L;awvPdGNYfZ-
zdPD1GmL5)Ez2^nI%mWk=nW>jL^Jv2^)E0!acO!8^=q^O%)PjYwQ8f@09hmju$a2%+
zODYzT>*Eg4qib1k!2d-O><xtPdw7%ekv6z;HK0fA8ol@pVYyHk;2n&8B$spB!Zx!-
zj<M9M@N(`A4x8x}#K#Ct+cAcZ?@i)&z5wKhfut7bZPg=Lw(sQ>U=gY_<nJY!HP;2G
zVBilHBdSbPc**-zx*dR@9b&o$1cZ<@Uz&2e*VVX8ZR0p!cfFSA;mPM%39bys{;ZdI
zY;R&D-t8ln?Lt%K5*FXVDx2w!0sa*KUETo%R>C<WXQE|?1jQ}#)+}P?O|J-3Gwy+P
z=P0TE6d@J5F3rc{`3Z900BUJ3Ub4`Kd57MoV;t;6KJOY6ZRidsFgL3of-4E<P$0U!
z?-{+Gd-bGTPk6JX4MDRD;|t++PU~$`rGQO3&YNCf`KZmbeGt6;NW7{LLW-{8M}t7`
zcrotUDF}^6z%w%(mjFT9>t#T2z`ap3bDJ~Cg7MtbyN)oSdy79E*ep%<Ki}%YT>t0~
z*WTugx91=QicrCafuKU8tc?6X)0Qm1sX7X%yJ)!o=hVVtATY?|?VX5#G&+ie?dv6O
zrU}mp=YH+>CuFe2YBCc(t?&89Q38I^F^xIZl{`I*=}{zvIBG^2wf^ZJroY{>jS-Nw
zdb)knmAtbz>1I&0dB+sdnMNjkFHhV&a)K+NR+0b;mrb$%3yKc|)iU&uM7$LyCPup$
zV4N8PujYn{_&yd5G<lLIWsWC^yS(!7VHFObEHftup>*?)`MqM~E^u>sFLV?IXH}%i
z)S+Z@PbK>G6{y2llT{-Q&PV*yQt-}3@bYh#k9!b7sN^2!dRb3j5?J3r;#43D&2o44
zl?|V4ykSa(fPP@P8l6$eIO7Lqql&1SSzY=>RxBtD)9l?zB?93R7dm`4K4x4*3Ug}D
z(<xH_L2-sBQWYCG4QNj^5}pKlr!{$g1JT6Vqt^NXCr2;Dp{4IxkRnFBar4ttNvlh*
zoXSHQaP1aE%A3;2Y-$eo%r*){Xm_T}S?dDadw*lp+0q`M^uChEqVEZqb8+3ZsN_@l
z8>R2tGD2M?TMwU7c9v)6|7u3;cad4}hOvS4)~^585+je(;|?n~rCuX@LUgGkqc~dn
zfWlgmVtpt!3K@J*z9CXut(T5k>n4kW>CNHA2%mLPn&8J#8_FdzPlSdDliNO?5W4l-
zw(7u<pRCGiUGB~g&VGA!+&8iB=>c5WBDw$CO78YO|FFQlF$S{3p0LIq>BajCGxD%+
z8+F^<_ZJ??{Pyol@<7q|Xz6SA0!4wE(ju+g?!Ab9v_&C&LJ6>ZejtX@X6FVA4yTrQ
z(9P|CzQ-sGcoq+o`qCznW$a!?rIYhh>s|%coS~lfr)c;-ES4|_RNtv^KfJlzeJ`)c
z>~Q1hTodR$-%Ke37sAnht@P`5xV|StZ$knb){n4Fm|+)n%@0qyJ(8}*V~=uU?6lCd
z`9{P8SJTIXX(EVdfI9b)G&u!-z(}sa>`xqp*(88F!ApPjd$;ypMIhLMWKQDn6@rxc
z%7}AC<c3M2K}QLNQ29%ystT<$xmox<poDw^^~q5rng2t43xX;xe5zB6hl-irbE9kL
z^@%PT7HqY=*Rg$~gAu)WkQiQ6*zb3{*f0PLI0f`Ks1w{RBK!2ih)+-#yAIeczkBL4
z>)ln9aCA^G4bb#YBh-(nnBMv(C~TpuMkh%B%#w1d=k%BAn;L6bAVWh*mlMcb{jx<x
zoAic-is8C$6(gOyaM0<+WsTL!<JbxmWeOmLZ#HIVb+s<zM2}q&`M-_mT)i*7xLK}%
z(GwI=W_nZUTw94f(H!GWNrI`yrE*H;_o>qaReQ(L!ZcE!N2?xJj;#}!hDHUe64Mp-
z&|q!j4~N&E?u6B^f>dS)G?imb%p6eF)1J`gB0v285y>WYUKwYeOTW90EKK!g+Lpk!
z*GBcKefpj;1&LX7fQ0JIPuD7;q<lcZD#oUVU$E*nG0JvCj@h4&T69P%!P7bFRJDb*
znu20B*hH9;^G|li7O?tYx2yPBH)Jz^zVUFisO0A_d*F7EM%qOx>wSvJ@_!w&uZDEz
zd%a9FP#p_&s|~^5?=4}SWO?XD*+5@RfXmf<k@MG_E9e;&Z8+9<Prwn?A}y{Gv!Q8}
z0_kqHo8WR)f^RQLuh`l2iP3U>F~6gTsEM@U@Y2S8VFz~xtgUbEfkR)@8vfG^dYg%4
z`TZwbxQ6q`=IXaSRtd4sR<i4t*!E<)8VaV*#|C#7e7R=G)LG@P6JBiwJZ2UBJirGt
z$wD7}wbMaWSAUV5#>S?Rf@G6Gn_GERQv8_xZcY55RiZSnA%@9DW4Q)UsqaQ7@7_j%
zE-*P{!F7KOBhGFX7&u@aAP2l3<7*!u3TJ<07FZI8Xf^tExHUcc)!&9VJv;azZ)0|Q
zmVss;?`~7HBG;#0SJHW2VqGVlL-c;-n#J`h>a|C~A_lP)HMf@dwhI1UlqJc`*}Ofk
z?Frs-Bx3H{1^pVV;K7O5n|$u*PgKaJz?i{PL^6{?@2Nb1>CHuVofeFa>Nq)3O{ig|
z)Jn{+XDz24TWaH!T?Wk{Rl5zfvNy-A{vG^V+KKsJ+DL)|aF5<wcc8eM4{g<Hwu??X
zuySE;eHA$lMIqN!;#o10^?KZ4<UiU>#Hvqcgl$?qcdi;}3x!~(A5r?%I1p)s#1D!-
zLpK#Lkhy=G*V5yiJnGJ~BI}r@l;L1{?Ml)k_Q70H!o;*RN~4C5VszEv+wE#pGnG3V
z-k;pb1}&lm3e2JbIb1-XKk4fBY!o*K!`&W8BF6-dxo!J#J+Dt)SS>t!re|<awpMlg
z-JAAvrRL^cS`TdolRXmeB3lru3~-uBVUC|JjFa1l{XoACD=;_0*AtP?k-ofkgDWRK
zXenIr!L^Dn)*x&V&U{b73q*4l0Yq`%)D3LkRx-x6#1IUGCw_>|t!Mon0k@7O9oTsx
zTeof$GPcPw?l&=T?AjNGa%B6NI_<wEtu;`}i16cbNt17-JG0Sbd8yS21p5!`;u*;k
zB_l{&=F_>R)`UBmRKBkhgkML=AGq>>Dhn}YD8_x#;&RC%CDS<rP5oEU;rr|P7O0pb
zEbxfU(UBmxKu+L#%bUeA#tOyCO>&RMjHd{TGUxh+9?Bip{FHoJ#l7}jh4hIu;$N-#
zn{b?`E#ck3+OJPJyYxN-|Hsu;21L<DYgj>9Lb@BIkq{&V0YyqWq*J<EKysx-O1eu*
zkXE`@QkE2?TZ9FXmaaPsi{HKX4}TbjnRiZ~=R5~zesIOstuj1KfU!b`uYcm*_5GZ|
zPW>ld47xGAu-fB8EN3Z8en|{FdH-PWlvdtlCfQ3$WT*)kr~*<9!8?Eyti6~zzSL%R
z&~D23YwwN+*`7`Gzq?z93k+|bgBFkK6wdo6p56h4yH`Y}u@03(W$MZfV*EIq{efPA
z;ez!8?D6@nKCzKk1fm}^EbQIMAXuI)Sr7YOYh7D&yl|*t`p5>cJWm&JINvcv70i11
zx_tSkFhao*hxNkR&D%U_b;UXmkyQJEF+hSLC+KYo!%C?tt*-3%(<QTAd7NAxv}?TX
z6QU$F4iJ0i!i6J}VzP81aFy*3K_u$h;cV1)aAsmK&nrJj@j&^<N1xdAjK5Zm2qK|}
zyMzlA!whECQhq5+X{yOb=M84LTVmVJvs*uD9%7wEy2=ht+Dap04&dL{p$n1t#bC@6
z1Kln`2|5KaK8R}?&K=Q}n+d;cs1ryKr*_yq60_q$Og5p+!>NsSfmc{?vpG6<Z3ZoN
zm9&8F?kTIrGNHsJ({V`S7049eL#}<_4~iJf=&J~ESmuk|)`{;vqp&+IaTydl^zcAt
zj|kWC62I<^1j$M|S5FUiAp;i$R)KRLKY5_HJK~ovgcyVrkF1|MG*9V?O+T=DEy6^#
zji>?Op^E*`4i3%Av3u~%hW1*6=tv;<g)KG+<#~cToOS5EQZ1T6b9UK=Mz+@#wrm`T
z!L-#6fl#8lsP%d7yY&LO#OZ{7>28U=toizClZ;8v`j8o#9~xQQdCa+y6xgE}5xf)8
z8v-yKy`4~-pliKn#e+yB$A4wI3(;nFe9IIi^g4f*^<u<fuci#3K5e=9x#q_*g)njm
z24vP33${K=RaDFMYN)^a(gq*2Ip(+OBKm)EP_QWca&jbd^QI{c++IQ-B*Ir?5FUGy
zE^5dU3HNe0x;<Fv$sY;a>jOTJ9a%MesFrA(^;ub>^Kh}npQr$VF}8EMYQcL(@s;2p
z+qc)xNYzzo%ScW^Softe(T>#;)luNR>sIPDqSYA`(cPX$D?*y&IRg&0_0H$KlMrk5
z)GKoU&XaVHs66M|gsXf)>Fx|=Gf`{*Y-9fo_KE0-0WLhQ)}?`{DIz1#SD;#pB-I9R
z|KNoE0Y=;59aVg{wjX%uD)%#6cw%?ae9k*Z;HE-iA+~BjWeD*{{P&$`ak$zn8Se<p
zI+<*2D7WkpC%R&;Z6-W@-*r>g0xpH}fEFpXMAJv8`T7LdN_F}3jrpSYGyC@V9s`G}
zL8o9<r;<~jcA&sVJ&<ip4qJK&{LKQ$$J*oxthwa8Z9xxMbaeGEzhkC%^4e`$<@Rz^
z^zJ_Iw$mj5&M|Sp9<dn<P=i!7F@<KoCpFA7G@s7pqfeQtDdCXCM=Jz!=mydi-ia{<
zI@bp>lz}q;!c)-Or>3!ara=mlV13HgmA+_%oc94FlLsPl+k2>6m+-C0gRh->y>lUj
zq;;kzcg_G40?;}}b?H{+D51R+5_?5ZIDK^-Kpt-{hN}~?D<Q_#nFP)<=#$nkc`6Ci
zq*{7h=fRJD{wDmdnMSm#WX#g_rMysda@IlBaU&>X$89ioC+H=DOijWaWb(BA_|vC>
zR04d@L?JDUp)bk|I}`<=QjBert|<O9p3Wy;9FL82uTI4mGYEItf7FtCa}MZi|7Mx^
z69RO$3DH9cw`Y8WsK>9r@cZ{D<MCYtn}>v$_3<i$J&#p0y%+hiZn+NfeLeI0=CxD`
z?y~=Obwf;k2B`CHDE}9R<$7s~FEM`T7Wr>%$-Os69i{%kM|3bn<IOeKn2FoX-uN9p
z$b=6DUOhe$%fb$C8Q0+ik(NIhuvCr}h#wx_6BN%1q>6Qo#b18KQyH{nSKq;iCw6-3
zBDzQh>{UbN4gnwo@L6yvd?9_a&|o8>tILovvM`IegYaDp;)+pl5N&NRH)UfyqZ3V0
z2xMe`InS;D!KxX}ZIPotU?`kv>=wFs4P!3CYKk_U3RPETh&j4UluZvIFAp&K5LW9L
zp>QoL4(M$U^XnUDdp2x|>w;~6dW=myrApY6A=~T3f2XPdY%cRZd~t0@P|-t3jY|$3
zYcNb#ZA0gWtMS2918`ipy0jEgTn_T#C3-;->xOhe-FkQ1SByxK;mhKBr?v-Ux;2Yy
z=;<o<ukkO9AR%Z%VoG^z{_zv<J?`{-+Wki9QM?L(PJkKZ<|GsB3ieK338VOojXq1_
z#e&^NkD6+|hpgMghPMX!Co&b0$_gkSt4c6bQKO2-bQ0$Q&ESb%5_=}w=#NFq^-&>U
zizMbVW;|wox8a~~kMg^mYAlET3c!9{1;()?3z8Alatk^zT{)JQ+t)|m#JQ~=<+#^!
z)_U<GPU7fmDG*v>cz%ZX{hhfcv4sGQ1@G20m2?f!*b6eeuKHUS1G~zZ-k)P8E_9fa
zUa8&LNr^Dxmu<w2M2rEdWYeQYrEsfg=F~G%+6-HqkWRd1r!nPh@VtDXb2GkRc5mBB
zx;`)S`6ogFUL~qq#z&bA@>C!tD>4~zGO2nHZerSNx0KMqAAq9(d<fA;$ptxfU%o7N
z&L?b(1!?YN2fA>RKdZ-<<*)bu9HNY#q!>M}8M_(e1`a4%qAuk0^#FWMqUW5CxIAWT
zkLq{6ren}hc<L#jWPd@6Pc!0}pUo@!-tiQC*w+nR>u9m90---3S-^5@rE8XF%jHuV
zx#kmv0Uj)wR?BcI($dEiNE?hD0G~uxOY@NS%JBR|tE=I^BPVhY^%<@l$yf3`_tD#_
zGnXg%dA?dCEyhl=^VQmrYdH@FZ#RcD%X*Ep4J!%HI!Wg5q~i)#dc&Hn{#<_y4GuhJ
zC#NvU?2Yx{Ql*b%GNjLlI|)^#OnETl5xSKrc6dajY;>hJ@53d823j))1y^#;7?bkU
zdIASo66wa2^9dZEIB)i>o47nVPA&eYU=j@=lijvzveuT=-7L3}RrcK)amhdI6Mcey
zVtZ!_%E0bgV!)uDiCnPWR+3kx85DoPr;#m)D%PZ(zKh}QUs6jkBY&+vtLOr7?b;WA
zRST%I2`LI@{du2l_1}KEif(%Ku@G&BuIWW>KSJ{snomx(CulT3PmYB5U(EaUi(a<v
zIYb{Y^1fL^J6Nng{OJ~b+={dT05+$4$aT^V6?Ti-Zj;#=<LsStk>F%RE;k}+N7(op
z^t10$(~q}ZPVJQ^ensaPZibUx>{gRYa+68+fLd-Zt@%bP@B9tEG8si!`pTe1!88+w
z_L9~l0xubAd@moSkV9@m!a1V4j!Z#I#61x=rn?X6#W;KsVL)1-AEUYIE3^J^xCPAd
zX(1S9Q-vV#r(=Nd<Sb6S{mC2u8;x0YbP7B3prq`%ts0#;s-H%sh)!f-5N!t%CI;9%
zL02WNH!}|OAz}C(CKzj&LOCW4zLvkP-ZL1>$=8}6ZBZV!7&Xte1E!)il1-3tBYPM!
z=&k<~zb<9a(vM16=qgPFB=t40v70uR^Xad`0#e^feE)#G+?{x@cf>r-$fw5u4ffzg
zN=%DO+ju|iw0gu4E8$}=J&YfsS`twH)w5x4NnO;}<jS=agBHD6O^>ln&0(`e%rTNP
zJ~Wk>UUo^6Tq(;7TPb|&DkJ}ri3fy7caI}hd>p7@?J3J+){pG{Lnf@#ne5;}AxwX(
zgxOWHC5|9zam>HQcWPsYXRx!m2Du;dsby23ihW5=aRFCTzfg=EyYB7)`X=xC=hWw~
zDl-M0=~hn=4f8`cRe+tuQDEp(`suZ01L_8*e^mJ|m0?x)Lrg~6vCJOl&<}p?l)D^h
zC#<VMM{P}?1vMyMIq_d?(CYESxJj11KCa%9wj(#t(hr=^eFJ&OFPcq=%3}BXSy77p
zRAxmFt>nXz!Hk-pwx8A6YSpu8P>lisRHWLc?n1*KGgrHTj6rDA+bL4oVhUb{v8-r!
zBN;FQ$ym2p3~AwaeV|Az#FenTm00k5>FF($V|olSS3~2iCVx7eMPHNRZD%i%V`BIC
zr6^#1!X%Q1oL(|L)RE%^b@K%1Chod%qLPP#D#6=JVdMBCaq;di!}~pvwoS*Fs{08G
ze>v_k1kr2<p@|A|XU8dCF|X5cqjrsjzgMl}Fshrbl}`t0IhCGmIfrQKXviSituL6i
zNi#hxHD9FcBYhE6fzR3Qoct~jUVM@v0Ga$e#1gVR(Iogz0r10LU88ZIM}Cx8*Ju!A
ze~Hos7JI$fp!@1?wGP&&1oojy=xS80TYCe#sMzRzyK~?#faQeTv9KrcI!Ea*{a|dz
zd5M0^KDR5mbecrY6{>onlmQmw`ON=<-+LT*Ww$n^Q&RTorP$#2(&Y9bwddq7_sR41
za<i!Orah#A!d*KCkaM0(IFMy`Xxev4*uXnp3h1L#5HH*cH?Z0!fl);Y*a3_B5RqmF
zJzkXmoo@W+iK>7aCC*N1tIdTq^V(1%Gjo5`GTse|`-iF|tE~dIA5|AVQmi{P+hm41
z-g~>DhueWtK)T&KITC(!iF|uHs0aOp<U?2Wvf}JVpRA-8!XtFb^CPSag!Pcp4|u$$
zo|pHipOD!rW6Zre-TC{BD&}Y^B9}JegFd8kxq!xCg(mC6I>9Z(GkhQvN_b1M;2H)L
zyS3O%UP=Op+^$YiwH^F(?((E{U{S)Ak-7SjZ4b#Jgz85qcB{20rp&yOz^~bQIPCeT
zb8ED7gcPCkSJ`+5f6mjP#NyQ5cAeYmmbE`x`q|$Hp@;*E4<uUCo>kmN_UnB?-cAbX
zpId&1mra6k!Z$Bk;tnlt`4Z|P-Az9RPo`L0Vw8QsL%lUgW6|+G<=>{4M6Vw62h(AN
z?+A)+m2q-fjv!YQ@S;Y2CS?0GlD(AO_2U$nytnauxA$?o9Ed2cK14kILXhIl-#xzj
zp~J6E?-$Y<?6nBw0*An^03A0LrQY0O1F{7Igt;Vv$f4~@!ru7Y#!oy{rwL~gT1r+8
z7^Ir($zAWS>yptW!iekmGyC#X05OeqEx0OWP^>&ZH1kb1OSfF<jc=`&_mgsS`!a?q
z7z?BY0Nk;3vOSPJrIK8ylOw-JYdjck6?ZnN7~U_gUS@*cA(mI8Vfm!E3+uDH)+~U`
zlizz|7)Z_dV}W`{)V*IPi)c-gP^U*_*G(rn5Na8>ZwNt)PrVn~B3auvkW5sQT!Y@W
zhJNU(FIU%iuy-eEEE0V5J_}_&dLpYt;DhI#4gLlX&9<gQ-V)P%{*zwT>(1n=78IOz
zLR{i-S>qq^<JIY?+=}XmomZX-3FbWxg!eAn`{%uf3ZRVqErjM4Vy<M0$DGUG1#VSs
zl%aLGS65RC(mRor=Y*zOeM1)LuPl$m0uAg{#FO?19OjNNb(kCH!o%UHBAfXkFpe!t
z4dBPDB!P5lH4kk6O>1Q30K257ynx+Sl};Jek7x({pfUV`awd5yKt+!@@5f-D%EIOu
z>wBoJ-yX!iUk@eRwz$>4R;P6BXi3oPTE37oQGJTG=EY9iR9c`Z%b=Z|<?6BDNcz0A
zUX|-LH%o1#Eq$%^5}6<>5AJ)PkJ%1aQcMzcs0ZptkK<K!EG%ybig^@`zgqhrIj(~S
zzmTJvzVgQ&wYbwaQB&SeuITd&!i-L0gTTgVW{)l{Rm1=}HXudW4v_f~=<oDTLFV)@
zWwtq?B8UBV>u|mhT$SZwVl7+ubMRTxEbgCj%)@_eJ0N+}hRBsXj;VSISZJL$yJ;qe
zPRmXpzYxK6rO)dt4mHAhh)<u2e=S9PV=rnRKwu=M?}=|40I4lc5DKkYdQWi{PUTeS
z^+#pZF^(ysT}iT2k=e}D8_m&G$`JF1t=V1=6U#me;N44%?*<=66K(k<%C;)vxJG|z
z+u+j8OiHWlKAGKE9(#xtv~zaxu-0TBDe62x2AblTUL}Nkiaxq#$8a$p`PLp}IyK~o
z%&uAA7eYVnDsc3ayi5k%*R#&OA38#rDiO~h4Cp>MT_YPbX+PJnt_uFYNsg#-O1{D|
zMiLLVyI;5q+MHKodEOeD3Tt#Q7B|%M!)>t@@VJh15GIIBnohyk6J$Px7LrTu>Y!Zj
zob0PVS|2bjD^gqR-Fy7o0eS+wI79%gEhuF1E*aMv##stv>@5Ct7(6LUY^51MD;^}5
zN|Q6%pJqRasDA-Bm3_VtE+>^HUBR7)U!W?@zEJP=uMKVvR%kABqrVIhsmOYsQpgG6
ztZI&3hu14xEdiqBT}%Vr8{qZzIe+==>U4rJoT%oaG{kjf8-(-72R?VXPVMJV#q!=k
zhC7}*0ZZOTUpqOu#eW*z#}b`zIn6niVSM`)@4^V$Bkjw~iXgP=_OhNzE3Ez{F8g^=
z@b>ko9)p`?pSR{Wg$-gC+}~P?_FqY|sVC<xn+p45q+TWwpEBRS{zpVr+Cl~SnE*9m
z0|$Yt{H46we-JkCKo;+?DH&@kbBk#xSC35vN*tX*5%tb*N(jBX<Fe+qK7idY7o$`s
zT`aK&@)5%KD<NP$)6YI0v%g-W0?9+0gE_k%18_WX?JZ6+f7(u}#dh91mdH8SU!2f7
zPcB$aJkJyNy0R}%298PIPjd;wzwNo{?dsi!QxW#v_bFQ1Mq3gvyFQO9f`vw+?${w)
zHf75M?YSPR?xTZ_CUt(1>tDYk)XuAmSW-I5#Apkr55XY&fMN2T^#czEI*e%hh)k<>
zo)S@%Mi}9tTqyb<(iU;vkik1`53tN_VWW@7;11RpRPoZuQd0FYs*|ZDH^w?!f*2I{
z@fRm-C7#FGM7v8(>}h?`yW1tE&mh}r<UsSU4d<2tAREB&5g<lNsd)aiVv=urc~L}|
zFH|B`AO~nimF;q0{GNK_PgGssv<GaLpx@zqhl&{rjLH4K&@d2XJZ7vw|4B;Urm|Yg
zvy}YM;u$6`NN!z}pOilR3!45qnC+J~KlFp2UZivK$fQvv+Z;8jr<SlyG@e86Zs&>!
z=@Cky`4U^s{LKY)z7X>fW%@L1<_BVaJa6m(;N2UgWQsPIn`*{7cNv$*)AqWPb}Pi&
zC;?sU+zeJ%mrOqU$z*Y*0);<$pjtVjfI<9MELbe>qCRnyW0beoJ$(S6-H<v5`G(f^
zE0|PGOd-YoH`pM#V|zAUT&3-G(h7Q$^i<Qa%Kg`pRXJupzz|g|(zneR90|6ig@2v6
z?;L9FhWUjB8cKkrvdQwsek!~z@!BlOB2YV@HUwCpMPr}8OaUQdX?Oos!k(>)T1H(e
zCmiztm|~-8jIXlDeKMgv3-WNL_8n}XwEpau*^rfYK3+o}Xg^5jL_OGOG_d^<_u30*
zOW1;_(v0$&f>Bz=bnygcN})gh@IZDpLuNNu50Hw1mvPl&XR1`Vw~G7Wr<amYjxHj{
zSOy=RgclCd{%VLJH0m6oy~<$}xSeot|0wGu9<D=rr_KhI*_4%A0Wfn2N)~O<)+(*G
zbd8*O%KqV(*x%qlBtZiz`cJ&NH#`T~oDUa*xD*WQ@RvPduFgT$L>M!LPx*l~#ucH{
z60bmuFEitqJElvGER0{tHZ78;fHttUb2=KH?P$S19^~>Oxnp7pJ^8wanaEw|GW35r
z-xjq@Hz9w)0K#P<C`6)o@tRRgXS^_WCF6l2umtM~%_mMMu7;+16EQWBqgAIgNsH&d
zu_b&=r`c190h|GPesTGz3jf<+HlI0vRNsU9Ck}^C#!j!09)M2e0TENk&fk&8F+l|K
zR54CpC_=K5zQ7!pg0X;uf`b>Fkr5NC7GRW}d6(^AI{LURE&7;zTTd5y?L<6CryH%$
zL9I*slwyId|8g@TR(U!Fet-Jq!FX{V=B8kOgJD7-b@x26d)2}%C|;i5{S(|HixAig
z^egonYBe2w7}VHO+VcedyO^U!487~=$DkW702cydryAU2szi0A6=c4K1=9Pz^8Nmo
zG}AcO<>Ywbhs+E8w<&UK=n-NK(MPKj;1AKCQ<}`&6??bDi-&2@(y{-y*L5HR?wy?N
z`aRuMfxnh-E$x}4;GaHpY0J#4HAId_4d#(<3NqbqvZM0Dt2dJosaKr_HGa2DBk1`3
zcOJ|Bj_D~<!iK7$#Rgl8ciq7e<)40XtvA>9Zp=1`L4wI_xx0j>#fk<eQi;i)8z<yw
z9(gW-S^$zghd?0l`Y3UPe^DRLW4)L~9yn+4G0<9z4(ioMrLmWfSzPtb27OLyUR29I
zVXQ!c3AD&;bK`G^vY>%~XdD<sHqtjC7saky6KF!p{sB8@;T_8!kxQ%T+s$20_dBnw
zJ>WnQQI@kiJTmArdtd;33A5LV=&gLfliieOU%d2H$q|)L;C1CN?WBJwS!pYd3qzD1
zM&*y~Iu(Vb)n5Oy9qfc-g*xUaI~i2PyNm;jINiofAK3p};`q94oz6#R0Sb{j_2376
zmL?2?AaxU(4dCpv%sSN~iu^iTX=&UTX(IsO3h4DaF}=WxMy{HLh?`BfA;g}06}AQd
zX=1gafPjKtE%xVu7yVcza&eaY^CkD$RmxD{H6{-tx2IggB%w=cROiOPo>5@Q)lu`(
zXnZg0Vpm*}GxebofQHZJf|RRQ&i8+muRVO-zBP=n>wwoo{1_(mOniU&gxpgJt|&3Q
z-p$U?0(m~CEhRPfy%xIr!$}cY`ofEmsB?0YdA36aQ{bB&2=-y&`<s#t#RK_N0^?(U
z9bp8Lc0b#1zI_IiV%C0htQ|urXOTy!j6xO4?G`Ef>-N>}fwB8YOR-&@gsQ24DhB^k
zbPYWHM<ir}iFzJQ?hTZFDMN5MK_BEyEAWU@qzm3;B2F|eBr#_V=T;Hfw;)aqp7(ug
zNPPhY^XbN$3iKC%8AwFoxu{;R$;4SNsPb%;DN)EUk?pj+_I(Q>MdCRX&*=)fW{#Zr
zrQMwGM-tPNZI6#f2&+x>R+Y}DcAq6a%enO6g6tN5fe(7!SOwjrFYi2d|8>Rr>bxLR
z=nfx(Y1J>1TpMI;9s6&q0X(S28ACi#G~SX_CS(XKfeOO3YFg^NPz=|65wp(<Oc~KW
z3!<$L)tQ%pC#D@=OTy3x=qI5ru1@rxM%@Vdqyo}jCj31s{RKI3BCDC1+r(r{Kn94-
z4JC87sKF2~Bj?+nuRIgE{85E+sl>5ZY3(2C-%cu*l*g%XHIWYg=%d)B$~`tIJMF%w
zn;uAZU@LO>W>665;Ncnn@dPb>lK;l!Lq9_KBky~W%#h_4!w<#P)*kC1JH%3Tz}gXU
zRJ^K8=}tLneTfmyJ3|-&Z$o31@5YPf?fa{V1H|*r09GI}4tILtVSAZ-K0*zkz{ES}
z<-Q8pw6fkM>4i}I&c);v0LzBp==T1J!C<OW>2-Stae&zvkma7;k1Ds*N6y18#e-ZM
z!o%@+dUDXpC~bnH1-bAH3$MI_Cg?NIP+jQPZY(omzvSP;Ex?i1%-@m5%R$*v&!R6e
zWx(!#e=Wq{o*3iA0;coA+okB@Q$@&AbO&yJ#}UnJMMzSM!K4LV&10zr`}DnOS}}6q
z0rVi-EtM2mjx+NcQD6su9^TL%ssE)8?0Cl5UZjONdupRbZ0i~-`7eHOSKuouWY242
z&pQ{l3hUj(1T^S#-<SM0HJhP?5ovAr-c)j$?0(EQ1s7}!37F|WPK3+UnE)6MOn%1g
z1B=wkguCeJLlu&&f{5Hj8c#cGe;xM-rj?9ss@#>bXz`Q_Q-cAzw_dIB#gr*Q=SHNj
zz6vnG7;!mi2Nj;}IlF90ADI<!V!RwMgt{JiHh3m@KIKIu?Aa8MltN8cnTMk~03N^G
zVq37(i2dULJCUqWz<7tV*`is<nnynQ)eSp1wpTnQ<=Ly4;@*uJn-bJ978pm|wEc->
zC5(Mr_?=Bb&IiN{<5Hw~Z)Q)5J2I|g7R1{FAO%k0uqrN&7SZ<Sv~OP+(|{-k$&Mu}
zZ(AXTfe?`>PaL5@=ia>|Ezul>u#TSGpKI^8&;KeefxBgiSOIjZ|I*q@T0PCLpt7C6
zp+Kou!VqNgAY#4Fk23L;ZTeS2=H!=qJZ1T>ke$J6-5W-06P_tmA6R8pZprX(F3{=X
zTWEMNtiaGKxZ99+KTH+}k#w%A7*BP0dAQXzr#)n>u(|>&0Mn$~z(`vd>$&RF83S{-
ztEXJUYGOMl`tZ%T2#BWN5}|L({x`LPimprG$t^C>P?ukm=5WA6K{e`@TT_U5HN^YH
zGeGNh@mvhT9~8x>^L^VBYLRq$dfO}c&Gqkfz)n7fp+PGH>_uPVj`hqIfwH1L^-o;<
zrQf)@Jph^3(&hWPbn?PvT^pKcwRPSl03@z~Zm77x;!K6zn;T!Mrr1$8O}OConWEHj
z+7PYghBg-X?-G@u-uK5@ZD8u&=6J<-3ExDWTLe9@*u-MIQrYrrEuMd+_=NZX*VU3A
z1Fu>5?Yd_*83`89EOpwv(sxhZwml%aw*4-|7)CVCYmxz#y)XZW+0wqKvz-LhCS|lt
zBJoIozsItJhQcjhHMzG@x<u_zv|XCDv5_?(&w&*vX)X0~V7Sr1sO8Y?-aj!G>FWJI
z(fM7-#u7$5YXN3DX-Y?aOsD#5Atg+;6F%r!8qq{SPnVtTGl;zOOdDWa0LdyQNzTIb
z@2#Gxn33?39L3Q#ssSxk_4jrB=dXxlW$606TsPzS8hYZ&7v}Sa!Lza=M0FqAH)cxw
zAWrHQh$b)q_XE)4bIFR*UiW?mg?RnV)%nW`1uGuCS@LH!^)6|fMcy%61fu0$Td#-9
zfVYXZ_CcZ?lo@x(4);UKvC2EB8G$chT>n{qd{EB_w<YP1$%306)dnWdz!^7_0_%DB
zE5^!wE;JHLU~^=xaW2<^^Ua>tkID;y`!DSK4KNj6o?<o36pr<i+eQ~c(roQJV2$|N
z$<BY7Xa6kJ0Lj~D0Kt*DW;3~SrfXA;n9T-~6?9GGc7Hw+-<T@@LXmm{FOaDC7|VJ;
ztam2jKYb*6t81+Ip)qdfWG{a38FkTDcSay+owXWm+?f7dIyZ%=1z4aLC|Y?ce(s-|
z!T@@7LZJ7b_J|kmt(=-2uKV!uBe!vXK%l-a8qG%$hV%`3*?l1ob>v(WV6+H4qi_<J
zWXiRoznE~X1Fhu&Zn5|BVk`gFLIG44$$NwyK!JaU0<MtDBb2qXCs=)BFb~j#NLmBO
zNUgX*dYMWKFT1K2Q*G>ey(-Z)JVj~QMg2##vR?snM`^>~o>mK*-O9ie?c4c2ui#$1
z{0brX&7j5F5+k@adEy?c>-cnfH4Ezkjs)Q!e#!r8N37Du*eNu8%MlK{ztoRB?08e)
zDXYO=1qo)FlzXpJ1unH>!DNWdT0DT2piGTp!Pc<8-0Gad{fa?kWf<^e%*fguzM@wn
zb*&)pNRuO%w)HzX{@wvj^!zxX>Cn{2<RCK^weN<&AE?GG2#oc2d#;U{)buzf7!3?m
zYF!bnA>KO{@Vj1^5UwX)3}FE{4>108SyGLwStQ&vrgiZrsuMKr-B=;6p}OC9mz1m~
zT<$20pM{c(4+_khUI23&8XOhs)uTFkSs<Fw6ErsjXeXN)5?OQz?kcENODrnF`J^Zt
z0ROrY)Ts27p7OtLVE~8;t10VOmO0fWH>{0GGA~tRKJN5R<)z^05ns570!hOY3*nR~
z1kD4F{I`r-{kO0QXnqcA5!>Ob|K{i<il}5&sYTfm|2)za8K3{#p%+n9LReyBS%?$Y
z_K)|r2E4IQ8%Fzu*XSX5+ne)}(4!kR7b0$_M_C4TI;o)X=i`iUkHo~<<7?;!U_N=l
zJa?NzohN-d-002ElV9>B(xYoy^vC_3ruaMWF6pq0d42jsA2k9@x2iObHlK4;SNWk2
ztku3rJ@8;CN;UQ_5jbQ0?HZr^dS)I_Wn(fxZo(^Gr<n*izt{u81?ThbU;R5b`fc5s
z<_y!-jI&1ianG&Qmqvp9@<6|1Wi-p;s%CQKu2e#x?0MuX91WTNf-C8pUmpw)F!y5h
zbPRegtqyEYr(pd=44129W1>by<`!9gEi$LSz%l2{FI`5bxa%4gw2QYa5H(E*kT9CV
zfca5doH$lHH7_j9iEs(BFZHY{K`4$;`S+`e@xt$9C+=Mz<6A9bji#JVYVxHNCs4i5
zj4Fje2WVWHDlO+9O28icXCRbe-saOz;`Dy+<b98T{(pw~Nx;sk*~MhQdaL)|mSCGH
z*LSSG=RxDcmfqj}Wu$3KQLm5teJGT4PnI!_bJL8<%`0LOZyc@5`jW2Z;me5fq2v~c
zIUu>Qf~URO04?q>6C^?For6tprmr~rmug)%oj5Mbdc8VsN!r2N$uWnvrsFj0ykc%T
z3RmthkFA2hBs2`C{O3H6&N-oVfvWzGRwh#x{)pV^TBeA>ZUB)1C@>4K(z&hDQ3fU*
z&!aWd7oSJsLPq9zl;spxL94C=*S<J|Cd{5a#%q%!YKZydF+D!AXg}~#$MMxz8B_x`
z6TZF;p9LnP{_0#C9EnrVrM-BN86yTuDi`KopknD+?y`B~qlGa=mDJ?-a%5uS$X%NG
zeaMYxsYJ%oZyX8WZ^_bVl>V3uCy=W5=RoVCjqQBJIw^&TCyuXK+K19nx~HV9H(dLx
zt>mdOsOG;4*gNc|2~gH<kfSC3azFbDjGiLm4f%la7e_d62`>)vwT}n<;U@$33F9`w
zS02P2vndL;1+ROJZ(j3=vTE}q+TAdAiopNM0Dx&WM4#)3igp$ApfGnUPpC681r_p-
z#o|QX+qN;}TaW${vrep%O^s@pWy;p5b|INkh1cT_R5(7V-X2)&zGSWs+M02A3ZCEa
zbg)U)+TPlowcx{B`t9KH>QooKtuKuW(~JX3Io2(=8EZ$#&wH&}SH*_8Q@bT#z(g6{
z0@H)q<-cc2wl0V}=Kbyy--y{orscF*@DHZ{i~~xxpM@qUxSVJe$X~IB-WK_mdAm8N
zv(RYq@&?0f4l?X5j;N}7=Vzd!xUWIv?Xz!2?NO>kM&NNtW{?UpVzy&3eD`Tf=`9CU
zE}O)Hb{R_pHiN``bbeFFu6R68<!%m8UE3_EW93N(Y5|vg`tb7sV-8<VTGW%H5i`O$
z+MC)R0!<J__RFm+6ffJ<qA;kZTQJ)v$OR23!uTSxal(l=cUT_G&HGm*h>?V%aBs1M
z-D^q&*m90MuX8mt)F>0zVB0u=gy*j%+v20;s`%K%hjItf*lh$30yJI0j9j-^_}yMs
z;@4Bm0>wJY<(f)nbkD#?5eI&AW@$C~$bgU$Q}ppq5(l1msI+A1wlfglduHzY)0$9f
z{nOWatR{&!>pLb#HT5iy^!@btW~25UsT?Sg@GgWI0*Zv5`{Xc}XWO|4A1ao)&{s@O
zcOt6WqjPT(l<cRdQRN(Jvoahd!^J10bs;;y_s_M|jc__VaH}t?5%e2(Am*Nrw|=zy
zZ31<mK#c9zn1YfM9`9d>{U}4^Q0tECm`(Sfp4(n9>Ueop7L|iSJ0+cWyYGTCR`Q#o
zcU$AZL`hZXua<>Q8I~WL^ZiPBd`{tq=IfL>nS$&)0X2qb6c+nIHHX}@;9U;bTzo%k
zxT<00`~9c!_N**wnIG!n?{B+zoe!#w-A|+c{YN?MQA5?6X~;N?$~@n$2D5_&y6(gc
zyT^bP*RuJXTu9u=2UU>tdnW%wa9Xa6%`Ov<bl9TOE^g$Pz;#MQRjliy{YN>}xn!ln
zX5Uo1ks72D8$W|MJrPdVu6JXDPFS$L(rM|PozaI_gOYZp(nL4>5re_km$IrXXm?3|
zR^#I0Ib2g0GrPtC-UKE`Xk?9kAs=hraX(<BkY4aCTNd&9$|F&R>`vc-7#&nZH~!#o
z@@XE`(rjF+g0XUZT6OB`{j8yxM$D#C16|D9T4yVRLxc5u>$%I`BPLTH;V)F5qAh#G
zN2{+CD(FlI&UBcO!dgX&y6vk7Fj^t!)TZN&tXP%_DLp~7Pg|c~ac5mUFT@8;2;v>&
zf@$szn*j!5$hl-E!(F_^CR61?L8g<NF9+adxj~febsbDjF8Yf^)csafhZbg1;^+!3
z_feyiKdbpEf?JPqvyOw)oa(T-w!M-KvzxrONBIU&yn0k9Pk?G05N8P0<BYLEDZg96
zs=wfG#v;px0U&4a47HY!oYZG`weJ*mcA%s#lJ`5;SsfsxIAGDIBIS$IY_#?tn?C|m
zIctR&+tmn;6lBB<T*D3KiFzD)sT03DA&+|^^9MA|yGf%A7WV|E5U<}*3{5CAq(?I3
zOwEP%MWgK&h`VYX_w{`9_s2l5SamasA}zYKW%7HX1JIn51cm{zyStnS(Euo>=w`<#
zEr7tE2kEEz#_syU-T?=cP$n&$y9FzyBZe@6|Dr}UcjpmQIN!Z5As%J2p%psUb~9K8
zJR4AZA~<ASmWA0CrVs7V?&>AEI4F6g_Evy6Di6Q|=q&<&G|TKX0+N0%@q4P}MovvQ
zfxK}6;5AU!DFuih0Dyqhj}t2MQybgCh8m~1T8_%oE@PdL#u04&bOn=a=|=z7%Gnir
z1AvLo^Hyrs6is%CzCr2O4Yq<9Q(xW0Apga3P)Pp1XZ7)Gb%@R5(i_&%pQOpp04m0u
z!>92gKXGd>FzR1Xv_!Z%o!_5Crk036H~|!4xmCz1kpX|9Q|>;>ULjPiY>eHaT3V`&
z+__AS<wRxh=5N%1P^X6aDZc4Qp&CY}5DQ+R_}h2opI<HSQ!|4AgAbWQ_ZvGc+ti7J
z?)^CJP5oV?3zWiS19(?jS@l#3ID=}~mb>0Q<&S@jCe}`N;02r7*KjPw0aHncxC;D8
zyqOsTOxH73XxL1CyyE3$gaZsMR1be813$z@7NGHg9?!(Z6Bn0`O`YH!`O%&>*j9tW
zccvyPr`Qp%eH)-MtRamK4Z|L%wQG)czgHm`C8*Yh7Rr5pMA>T943qo&my7N<Zewbt
zGA1aPf7zgWo>Il0@2iZnUeq@t)6gF*PWHYp;Cg&Z=~6ud+-<+6I~C1V6wy;vYLJs8
zL~o^xsf+~36@`Tp0~o?gaerzH#cE^UgyBGFCy&}y>u8!Zi{L+*2GD}<vIh6hbEmMr
z-ZX1;7pOjDU3hoPvBb-57e(5)q=b1pSPOkOb9ihc772EWsuzze9o7yM_)!GKt#css
z3qq(A02iDRPpSej>0{}~?l!hzJb&(i-D3!=JfeCBFAm!m^%Wqc-%8V-2tllOy;d`o
z&nSg1g{p}uua#=4`VF*Q<22_pC4^Y&Ag+Ogh$kupZ>OGO`JamHS<`J?o+cbf@_>K^
zN(&R8*_meecei~$+wp&1w%(w<rI&v3a${aw*m>dh#cVOOtF*>p32}&&N8TTQzJ_sF
zsBL`K{YQQA8@;Tk1;$`A)9{v4v5E`g@0xR1*}z_Fh%}=J5ZydMFIkt^sT7eqQI69&
zzfb+eCsj04y#KWSF&59*If+R5bFUou^O;I($SirZk$g(^T8KRWP()<4zy=Qo8p%J7
zvJWpJmc#;gR_)oAWttWne<$S=xzbm1b+4Z_2LG~2#nfPiu3O-+pT0IH)>TaaDP`;B
z7XTz0A5lyPcj6CK+kS<V=j*3iv4=cvlBnAmdKT5YMd8OcF3pVBrSkb1N!;Q;vxWKW
z9<*rYetabBV)|xeyuTDtW{w6+1vT7tP<5;rfC2tiT{wNb33nL9;_SC=OXJkqvWdj(
z>#*hU@pF4<t|ZJ(tc^asS2%hE5OR_CHh+7Uq^UIh&0mjjA`d}g1rbB{%$-bNZ;I2&
zirT!6mn0++W|s0Vi}!SYGf^^wQ_bC*Q<7K#b;r$f`fOG_?4)GFnVVc3@LJrAy=i3t
zb}9^uX9Z_`5?(Nq?8(j)-1?wLtkZ+Ct@Y*-o(Pog-dXMQ6hy}34U(xIcQd*#(xYMI
zQ@zoIRetC(uGvV;@jeBmJn4Jh-_yQf7*oc)OX<p{ek?C80LGOLI1HX<TUTv+MrP8-
zmy?=W%0vJeD)(PFI!h|*UX^Wo5b+glH8<GnY%j2M4;eLHIa5GmH8vl?Y}5zW#QFr3
zaceT7nK<wqWM2!zF$<Z}p3p!pBlt7>8520G$hvLY=2OkSCotm&qLdfvu#FSSA6<mY
zKL$~nG%0^PAtt0yvR_x;|6*PG80Zw3;96}Cx1c!k+#%@nn2PSeK>B&0-rrdF-rM%h
zbbSvBYM01j6!#}=&u`+ytC~Pe)=2Dn!}cvJwNQxmh!0LqTM(4ST93^D6_z@3@|u65
zd3@8)1I*_KP=tS0Zi&RvygYv}K|77)@c09<`P`0Q{W{n3se~q^<nZ;ClGr#{b8q@A
za|dpe=2&w{5_U>t<NTrMf^GfdBDUe7{FrK`JNx?_34o6#273=i&(zH&{P%+}t4c1w
z_V<}}Z{*q0%*79iw5s1L=wrD(aPkp{A3h^B6TwguJ4)spxBnt;6@UtC03KD?*As=M
zHn7zI@_4Ibj5Pqy%r7BveP7?zwQj>uPn~M(2VNm&J~?~x#+kAT^d0P^ual6S`Jsf&
z!08y>jc)EUjsSw9uw!I0d{}O=casbA9wXHCpb_nK)C?q`g4E*eGN$Iocf@9=9X9g;
z#yuzJL;d^6la_!)pc&F7Q6J-paEhohTgK}d6j3R3n(PA6^uJ5`(8zGNo<C2sOw`<5
zqw4XX=E^?01)K4nI=i~0fnZ^xj$Y&_<4xHQidmt3xs>xK8oA0zQIwSZiCViSxZ<%0
z*F%ry8A<iExc_Pd9rG;MmM^J>@=YngCczGBGCE7z^?P2&RcFNRObLGrT0E?RyEa|4
zztwAavIP3u>%xDs(?wbH<iCgdgC>;V9bW|w3wA|ubc#{Njb=*tB;;`<CC0{-AeS6)
z(JCjE?olDKtvm5xi>O}-@*3R}r#X_Otl;Rh^mS3;s2HXHA8~+}6?@9TIM|~(z3azC
zD`hS18+_KG6coo_troookEW+ek*7dMfa>ovWG=(A0%lPcajQ>D<KR(Q@EK@s&kMOx
z(QJv|AdeU*CHZvU^JA~yJ^aMtaH8@LrQH0ZnH&FECVp<{k<giniwTUezt$oAF{a%&
zKSHu{?zyFl&Fj^Cz!(=5VS7>o_c!*Urr2YA(}6T~rLZG^*|XY$bjhyD*3_AcSZBY2
z0tq7!6{APqo5!a>y?&jj!twWyY6k!hZ|w6Zihx;Q<_&?v@735AXrqvWxS|gIxkeSt
zSYLB8IpW6iWCLvQ=`h8DKfL?tT>6b^Gp|){1A_|PLRsGNKMy^NhyGODHI!LQ{Wkt+
zW~M(CUnpw)YkEJwIS1x1Ca5jTO!8TJQ`K{Zw1*Y|c-CgZk_F$7{7Hz;R|BHAh5>@R
z;`qM~zTdG4K$=0|#CW-Q4EVQEFE?cu_Us<Y%jh-4fC90CDnI|LFTAgks0&{v8(>K+
z&`)w<xZg>$sZZvIfnd)<-Ue9VXu2HAiWT!={MN`C+zZ29bl(5S_z^v2(e)*xSWcYS
zgq}zFo4>6;74Jx~PZbu!bj!Ns3UxOFOj3=)58t?k>TI#2zXK?3D{;auzkK^OB71VL
ztW!Tl`lB>})U3qZ7IV36uK9EN9f4oRR%{LQPmuqu?rq1s3~8G0Be=HjdrtShb#dP4
z2ry4awBWM|kLL*;P$FUxh^UNf2)FhVz@1;3%x#>VX;6mbPFz-stven5Mq9})-YW)X
zg@{;zJzg?(x7{tsC#92?VUmhgt4T#mYaBow1sGv7!$6(;R&G2hg3uV`tK$KCig!Xt
zEX^Xk+wvIe&v@vRem(fG%M3FA`x!YZ^*#+cdhZLT(JqEOaE=`_1a=Ix18j-;8Or?M
z6Yc*K!w!1r#Bs*6DqE`WWKyA^ZoXHS?*9=j038i%(SRVOUiPB1*kg9nzHV39a8V_e
z=y2C>Oe0hRi;wC5B5Fc(&~^Is`K)`=KR`<Hl<tRQ=^$$`kLKe@K>W_EbYmzt@DOVg
zTjK~EY?g*Ip>+qTHRk_maV(lp)+rlPU;bw;IWNof^_cWQ19>ofjq4%S_EgF<LZhO3
za-eWPH}m$->FmbOG0b=l=(@Q`m3Y2BWQ@<q?IRec9XoFEZYI|TR$n{Ta{orC2^wY}
zK#b^00#hu}aqX%WyAd2P233YcL}l=iHAt7PCOd+K4U$&>(OXgtpYjGH70>A;*wY%g
zBd<O8tiIYT;++dXt3doj7YPmk65&`B)3q)9t>^J@^>>Zi+O_agyhX09J(5l1ldDgJ
z4tAOm33O}KRDrP-yv8x@l~lv_Nlwo2u^~&x&}@!A3=x+>@E{Krqm&2U2QQRp23G9E
zptZE~KJckoLp-VmJJh?kGTw>ruT$hWlRYFK<I*{5eM?Rxl0UcGmyuzfzkfCIdZ!}7
zd(pi>Rf0#|JK!lCa8&F6T4zL{ozj}QGV^jHiDoBy3gBlA>e(wRE=A?olrpx=yi^*V
z3Qs>JVuG&!x^>Uzsj6Ie(jUS=C97{=nS3B89y^_ScF)pCfvu=A9MH5QDl`w$<^Aus
zt&vmctUT$^$%xZ(YKL3nIP4W$+0iH2pbV_^nd1V7Yk)KG245JQxJz5o_JS)orFKH!
z5xd_S*U%~~F6Ag5_($xCicUaiY)9?j_CRp?q~j^K@Jy%N1#j2xVrU}LoB~CxN(VU@
z8i9{vjoeDyM9p#D?qv#((gmgeIeTr>gI-JZImWUNL18}nL;z16+^-IGv#66PQ?pGO
zzifV8{?lNDCgc~u6ukL-=(Bp6ESKl4Ov42as`-pQv)2hHmzP5)X%$Fbuq!pT05sU)
zfw{<7pG>`V*L|OR^pNizui4;k^Kz^!@sj7Bu&<UBr;DPO;tAFc1^GZq+9Xz!6H9nn
z_6_rd*wY2T^cIf&zK3<bt6A$$M%T!S7m4Ed6N^CM$Yk%scQkW4qz(_2Lh)xeRZb2f
zAYzcO!}%h~{_~(r+e1YwbmSE(fzah2^~^?N7`;E^KigQfvs<QGr(+<03j~YiK*;Tv
zNw7(FQCh_m3lmeAa`F35j14fhg^xDvXdLWB9Z4JOtwlgaCY&kjxErtD{0)1hZC@=3
z8J*a4nB!}^x50%;1VjvC3Qc?MFA0<czel@9_%P3IM*<iLHT;F<6=3YFqw((YvBpn<
zfhXuS%R-kt%cFs1`(K}<JKYsj@wClP&_!~yTs@uvrjyvA&@#@S0~%N!mxsq*9onm9
z(WSdEedpi=E&e9M3n^(Cc)|;k$+NfcmN*IvAXZe(M=1|~T(p(PzW${w6P+1bFvp}W
zd?x&{)<)C|OwK_p79ac$DaaVQCl?pMXP|NhGF@*5a>FZI_LtL%m^5x+-D?ZvVTMgK
zka3rr$6dWlb0M*a)CEB_abuz(o9N6{y|rw6ykg+qsrXh8qeyQzcBpV?h~4RdQmqFP
zeF<ESU<B|F4GWx$@kq3|DKGP4IW^mWVYfOwHTs+>rsYB74?@mP<S&yZX@4D1vH9|U
z{^Fuw=^Xny;xKB|Rbe2VDA_Ooej+7$kiSNIc$rHm6uk6}?Yoq@1Ykv~QMN>qRJ&q-
z@#?Uo`nzDo{yeAJs~r#@9pn3ZJG;~ag8HAGRv-i%%VGTYv)1wWf}FhLt>K_^G`JgO
z9=YEG)vYIa(aePQ!jKR-99&Mswj^UuR6|^Gi*Uw}c~~_L=8VuUAjD~FOOhP0;~`6<
zFf?vl)N0fO=HERDjZ!on3WIRxZmO$v29WZ6%Gb6rTk^e&;T%ATozclfT%-}nB?fdX
z3!&D3S|5yGv_A-`qFmk)TX#DgK)<`;qh9-u_n3$kXjB|!_3-I?_*De?^k0K$5#YcD
zkpMpRHh7|kI!P2GdoCG3f}eho!DttEX4BPO7}o*rVTttzEy`qGF8Kc1J1(>d$;aG2
zGkm*?cU*2%{N$;ZxMT^fJgcE3&^!l1()LY-=e_EgFwW}XVc`_hOXqy1S&fznzvLQC
zyW+>w|2x)J2N?8fOr~p93|HM~Yr~a{iSP}+d36ishI7UR0P8si*~F9O9@XdXyvRIl
z?Z3~qr<zTPYIw_(RjYDPY4#7irW#9M95_eyv{#yIQ>WQWw*h2_DZ5~aWPsq#WzL)}
z8)LKMkMB+H$c`5<4{Yg-zZUVkxVM$L>xpaZvew?<4{S<2ptO1Wz5VrI96*kMq42YH
zu{&#>=OU}du9J3reWVEmPPCOXTAk)NNrG&?0Tr~Dq{a~!tjnVvYdA8dTbxVCL5N$Z
zW$M%l6pJz}dY12%<k;+bl6Nwn63oSjUh2t~6%~5%Zvmq%?Yu=SFV6s0>;+-!xzIMV
z5G)*@nbut5i5Szo?ntY~ZYUxSIm}68bB)`mG&f7PPo#ZG<%DZKXUAv9T`4(bJB6%>
zT$NAB3<LJ+IVN9nE-ND#(!Qa;TJqVv{d`qE=^eUfM!I5xjD~*c=nKXQ;=xmIw!IhX
z8P%-sqfiD<U%VCYk^Z9lNEKi^!(miZctt=oNZO9?@j-s?<!jp+dJ2Ow5U?&p-od~B
zq4*xM6w3oqCQWoCUJDWV(x(eR)KtGfarB#TJYGBf`@X;NJOiG$KGk{4E2Ax~-WILT
z{VA7s{g1A(KEUUFGrJ08fvTX0*>=m_EH-xQxSO3~U1&!a^NaC4{71`O6xBJ!Xe|TU
zmB~HjJ^SPfH6JktU)zvsXOLtrZ<wD?=~V%IJ0uHUqNy%y{byfR3QAfYL5y5xgmM~w
zmmoIxtSSc_=0&TuU#hg>uo?^#X-8DhnkrN{q%L-oK1>uL997$qvbYA!Uz@HbPM}t1
z1{3k>7-TWDklQII#y9~FNCG)OG1fN4WE%Uqy<KM+@rzp4{h)R7tdfsnpH%5yqh@Z+
z(|z+-Z8|ngZ+8D$K}g}E;svRT4(B^y$ek+tR-)Jd?1TDNOCP|ei__MHl%i~QNFdo#
zba`<V!EY1JFC<=m#X<W0m9HRK<8yCtkk$quro?@3RR^%Ikj*RWkt{}Uw~xs@e<I7I
zJisRQtb`+<pxhZL;s`enbT2MszO;xgPXgVGo1hM0<y}{ERaMFj3d25xF_pLN9`TuW
zI5DPuAaM~(3d-=|%P_=km8yGNn<~$GVSF#ck8c<iB<dj!y;RC8dAwk98KJiz9YsnT
zenm3}Awc(ZYzS(Cf0)sKd6Du<^qnY|h0lVpTo&~^6Co|3x<Q+nf1P>2baw%yG+2Aq
zoD%irmD2VfZ6G>D+qVZ~UKKaITu)=DAiu;JA2#?&bOatezf@U?<`d0T%l1djoG;H8
zl~y!~eUT)DUS_PYzX}|yQslH8>CZLjwn=?BC=$Fa-SRLp;|EahyD9CuW6sDg-x-^f
zC~&`I09ax_d7);>_oq!G7bg~BDKJ37SsPVImfu`_VFD1*g3ARz2s!UvNMiPk@c*aY
z00b?a)^GKZAk)m_v45znRo#HCGkZC&H`G~qcHiC6H}S%ukI|~UIKT2!-&y+UWU${?
zFkRi;f;MKd1^2p~tSr}^(Sh7X_iPzZt`BBbwyV%d`)#y<UaZ}EX;bn95YUe@0hNFF
z;+>XK8P~19>QWL2B|Eoy;Z!Hs@-2ogn>--<FXsn<4ETWC;f1|KJNsnzMqubGnqQyr
zEI6=qyK)ZQ(_Zx3-1MPgptk^B1*g3zZ12(ywt9Q&GZ>u$f8kiv=J)AIDZh{rW8{=<
zImjPdBuXfU{!W7Y#DK`HeVG1+U-&j?x&l!ThI~c$ENjks$b#E4CWAZ?x+f41o|>$5
z<C)UnK2Ixd3ZtBA6gwdn$cWeZ<5cyh{~8wwn4*gI{@H&N$c3C2t-A0i)moJ6TZc(X
zOYl(vft8n(7aUHG{Lhn`F+z|08O$FNJQ7XIQ$R3;AS{{<@xr4YQ}L8+iz29nKq0z^
zYYpfmuX6A(V-pG_G}+1RF0N#7S%c5wYd^5C*%lDjd{4Xw-E*~gE@T+8wcAvdH^bMn
z|CoxA7Iu$x1Q5XpbkB0k`6qMtmWbqK?M=I|an(uK=_lD;JM1|3sa4D~#%{WZfEkd8
z1Er7n1|8JcRw+&w>l=#<C^{7Ose1LJYkjj_A{w4AH-4j`=1&Vz`gQEjX`ZO@MnDNs
zLl-_nr^$M@QzuHM;uB3x`t<kTNI2ZiTiZvNi2OVJ+esS(pWs>-ny2LayRJ6l;Tx&i
z#XAxueOK1Ym|#(5Ec)f%ec#-aF}r*eh?COBO`c?q6+~-bs34rQ%hCn+Na~OAKS)=P
zVCXG}XIZ<DXUYPLh&k#V_!ek@okzK28z$la@g;DUKpSB%#FtF#BJBM@G%Keh(m(@q
znPe<MJ#$gnLip<UeAQIR22}?s$*{z9RDF9i1HXog4vsTIE>$d)1Y#cC$_oEdo_)Fb
zYu<gW*BfTWvrdNYX-M---zbb%!1TB5!l$Of^x5k+5#}>sFX`AZl{X1pyuZ33^%L2U
zp=RitKf8G6M*=5%O`9IvucB{#^Er6=Iht=r54?UPB+18)&Q6>hI@O|W9jSR$Yf&jd
zfupo8>My9FH~{3Fb6jg+PRVc4Bhj|QSz3jpe(Ct8!goi^!!`+>rL8n>p}ktzqFyb>
zI`XhR0f?D;q#*auJm(w~vs()y<QR+tu|e=%F<1Gcb}&xhQ{CRNrd5)hTU*K;cDagD
z0dTFO4@-{fVdFwbNeB9w>f|DR9v!7K#;+lKo^%QlKR-ycf^hdJL_g0zpD{v;=m!$d
zfYq{8T`u^%ywHU>fqTd8@gV3NKY?HJ0zou1vPqye8o?!(Eru$#4yK&}(1*SqV+af(
zKQr_Qpzs=p7k=GdUX`M>od`k3!*q{OyU^tEHInfbmWWt9!plP0!Bzy-C2eFwTX&R~
zJAMjep001VE>1PdzXr(@?s}f^%>1$@JmFJN0#I`tAW_`tyv4`5)-%$d2!uioV|eKE
z5ha}W@hDpc(fHd8RN-xhvVzL&o`KY?PF%j8tmpNY&^zbe(x~ZeW-m|s5EG>&6Jc=2
zWN4cdqy*g)SN9DXfU90N6c7d!Gg}9>OU1+0CnZUfJEy67a?HLInCCAXe(`sSbaik`
zL&I`s)VQ9pV6n@ak|;XnHdH$37{m8~|I#n^LWDlDBC_fkYG$EH)sHNdGed>f$^o=W
zSoOIBOZ}_#uY}yElrE+lpk<{p#wa?N+g&Z_VaK|IRUV303ox=(Aa{CBZw0T+xlTod
z-8F*??(0KD*tefUXq$Ka&&83|3t5Q;wwKt1M47T+@ps2~=87;;eGXbXuwb?qi@7*#
zi&e=2L$e19PV_m}|H!#sULSPYMI810pE=3^I!L^bDl)yS;Yk{Y8<QZ6;S_1j1lx%Z
zi|_g6#$qn>TxR~X|7$jsY7SPnwF26s5inP{=(??R_Mk-VFGte7wlpse@8l|nzuzg0
z1wf+nU21+(;BHkGK7~e0<weg5*C{qKU_nhh7xZ+(n`a{5Ewp2AKH8*{DPA=UuIh0V
zIs{z>cxo@o&@TGC-^Y=^l3MAy4o?86H$ah+&#XGO5))|T_oJ17NGNr$o{u0xWaYge
zeO=?ryF(Kec*%h>e*L!eoE|CynI>4YD%t3$nc<6k&8BR?k1SQ-^s&x|{)euw4r}TS
z|JDf#A_h}XS_LN3-7o`b5RgvkPDh6m6(`c&UDDk!6{SN4jGlx{I!BDy@67nV@AY2q
z?>{cKo%1|*e(ukGKj&CSi|`xc*Q&)oJA6*%maCf8PIX%KsJXcM*?zO<g@xDcM&JPc
znSsK6_3yT^&#YMguHb4Al7gf{-25AYk0e_0(g%b#WV9>~Kp||mulDEuHzZ*UcS+sl
z>;Cd3=7O%L=e-Y+5aJ1F*u~dfm%aqIaBq<r_S<84GTZ;2ZX&8c3OHsx{?>jh-4wm~
zhU;JA>y&?Kems}6!`=;He}2b2zLLb4WjglO#<Z^XM5=X2ACp(AUy4+~_d{c+TbamL
z?JxNJZ#|Sq*=EIiXdE!nkbVR}b}c_HRY5PW+oz;R2p)18-XZ~SDxp8RP^yr9hw{C~
z!>Gh4v7Lxa<EpIQNAGm_^Iu;|jP1?5&VPgd^?7qIrEA?!pJ~u4xMK-Tco|4ON^GD!
zU8;DtNjiOH6}#Fp>Tj~|SpqAo**88iUgAiTteDVJet8Cd`(lpFq)10$w#EX1b@>S*
zZ;yORgxw?pSFbmU#Z1PZ+6aX8_!NFZre<3*=DZL&!|=F|pM>lxGZgsoSCVZ;)BTj4
z03J1_RNlcuGik2Fjrpp}1IneiwDq~Tg{d(?b1#^rb2<qjWs||v96hW7Zh{#f28=%M
zb1}{eIJfg%zYO;pffOaFJdxtX(Z|$}h%Re($dekk*eq2s4)Uh<^Nn9s?fmR%P<<v)
z?Xf9txY2y>C1SXAsGr;d6W~XStLYa~4*I<yXd7v5ub7{Iy;V{!v>&0}SuEG<=23Mm
zAry(NVoH-pzSZ{#ST!RBePZkOtdvt*9+-KM58hl>FtA~Qs<47(igEX^f7Ty95Bj~s
zA5XlmoD`<GkG}a1Vby-}@a37azz4t^j61f(17w7^cH7OVIM|d=sOts$+EP~}tY*l}
zUO@LUYxuEE)@hUUTvx}q#Ma|rKKhL5k+>ri^#bSD^Ar{aAI<G3V-B~^=d;%|P#g<~
zNP4Y@=)D3i-gl$Zd%)R!s!@Tz7-Qo!I;CtW9Ezm%UMnu{=&<w;Fi$$f9}G$0$9}!7
zI}90D4R`hm8@dZ<;`h3qFk`hl7F&>gQJY=l=jv;$`iywK>pKfQJvphA4)kczIkxTx
z@ij}v)pfl(FO*VcoK0Pj9JOW;iPJ-jv~I-}o3z#OP@<laR)&sPXI)@jmmYp~Ls$WB
zK4fCJ;XY)EP3Swqinfi*K{hMD-zZs-CeNt~G@LlXN!REZkP|HedWD2B8cb*${3<8{
zFSFW%E!MtkAXnztgxi|n?hqIG`&%@mGf7YS@Kzc|BsQkWt*QH+LchWhzc+D}d5|2Q
zGI`8SS;*9US_!5cBK!R-Kuw0>b&7Mh5uPlniiRS&g#-mZz6ztyrf(noI(!i@(H79Z
zF;(mqNB6LJudBE$>F27IeK7Kg!VW}};pdf|`Uet2ah94Sm3@*TTN?}RdcY4=^!UDX
z&9`57kKa8(pZd6o%HDrNRKitxjEC%8Sl8m+zD{}Sa~J8;b|UsE>m9JvAzvAW3anwJ
z&)1v>S0*qdTtqJ*Zc9*!c>~L>IK{8$-=LS+Wpx=O)IX%QBfVJTuKTT6>00Nhi?{K|
z2b2T)-JEGo=}2vbLxXWSYSq9lrZSb{>DIi?dUDXXM_PiYlse{cI0JcJz~S@zTgI0M
zjGGG@F54W8Uw4_Edvic|OtKz%vfBzS)XPo1)+zkV(^tA!fO6>SAJJxzq{Ux(IfXL~
zn|#<GVw^5pn>cS~1>sFas#WnYicDWJ{%0&#f5ky(bf)fbxd~(~mT1!?3p%HEzWbws
zgnX#9Z?kxX?0fG?$&gCXKYHW60QWnsGBXQl520dGqff8D?>Zeb$F1Nevz64IO2r0J
zq7vm&o8ia4DD5(i>K7dNy4vD>c%G(Rt?FI;#NBe3#>vXFV0?(=Oo>!s&kIA)IJdTZ
zGq<a4R>1BqqW$CiM-wS?u&D6Ki4hq6q2$SpYs^qn5NHW&9A#IR3LW`KpN8acQ`|0U
zcl*LoS;M+EJ<;2ge9$p8aNN+;hvNThTu2L2w^Ce=#pbIntIR#`i>s;o?wC~TTh!su
zy<pm5m+03ID4QB&9b&9Tj!xYx2RKvuyO}nW9LD?D>__}aDvhROwo=<`G`qzGD`x$=
zs~yZqJ&cC1YVNdyyrjeNtxOIM;G_5irYC#OsaHzAF5&EvX<vf1GhY1-iEL!eyx7%r
zhlh6@yKiG<4Im~mcn6fCy<91ija*VC%U^@JdNT_N^k?F--rjYQpMem3L}l5D#z*v!
zK}mSZN;99H6t6mZC*kjP#V#&1&B3S)*wUg3K1E7Li*j$3wNvI@57f(YvfGPn-=Pv3
zi+e!v$}}k&8Sl<m=bBXuL7f3rNHB*;J%1_7HN*(_WgVdvtj*h@DpM{VOWU;+SB4iK
z^?`#S%Pku>5Ool3S}TTbyBOs2CG1MoWiYT9pW6}A8!NWIe8_`R>pVj-cMDBoG-D0w
zfF~FBNII6$@!m>t5BTuKxUoMK!@K%0R_>2CTxE9ghd1XRd8LgDss}YBPOxuoHs=>U
zm>6}i#`krJA3gHlZ+I|ANQ#bCesb?=x^>H)t({ew5LH;oS2Pum{FKvc97p4Aklp|t
z%bq-Ev#XImo2$dzHA)3_+HCNFEB<t!v+&?&{O-b~ffk-JH0gJD+Doo)`CB9tkf_Q>
zZNeP;yPv4*o|%wVPD`>m6285gB)oA*t_huy!O=(RI=183(|*f(*XYMBu|38q&({sL
zGT8e<S%gS;qyA$OtE-{{NAomR2^~FuQ{7n*168MQNaIb*j>|%Y94g*MI<#2~e?Nrh
zk}p(sn!8K;pqfu7+e_kv)3JZzA&S&ZvdCV;IYrkyQr9xFZRJo4Y|r8pS1^y6Q<o9c
z6HyQEVNoVYVk=kb$4HM==S(E1(O*$&Q$J_Sfckd)QxXDSMqvyhVa60`F$Hv&{P`w7
zY2jWM8UV6^Nui6V2GoYPFvCpn0gJYoLYcl14Zwnc7vk*tTVoG&u#z&$lJAr_NSAls
zqbeEGlW>P$wQEfS6gH&VzH&){;GWh7$5^s%EtWrq2Yrb&1Bq>jvu=<&Mdb&^*6*0{
z963vnjH)KV+;cBj`!kM&#Uv+M9+xUu?SJ@r+uP4hpeknM9jTpRW+UHpjYxh^ZMhdL
zeh~o%Ls-Jn-$z%j4e#UuDbHx;_L3C$)<L^J_**K)!|;3x)L!moeKG7=N))+aLg?xv
z_80Mt*}{cOzO0GXLhQF21Pz#vHnO8<MdVU`4xn@-OO`w5!?#_chnut*+oE-)p5OW7
zNpCqe>*?L)q;$7j1e~C@VlstS-ml!j{-livyWYt9bOWXQp9W8;TwFbNM)yy>%l!0r
zhN7<h-L>ffu;~WT+|g7gne>kQD{bdlser(aq$k}|NN*mXkLQy(3!0`bVA^m<+^NO$
zCELn_wu(Qsh^V?kAeVfES<uwiHD$=83hu154M~Yqn9PC4+4>70%4^p;#f#6rV@mVV
zGfRGb77;XvS_&Nx#*CtB?S+AxFW2e7%&K5vp)gcy-Cf%fBu(XIrYPKD)@ZG17$U#r
zO5dFud5dI*Y0vg-RK@vk|BW3lOqe&$mMU{>MD5J)W50_^t{MH5=@s`=8pS40PQJFX
zVEmH*bvwplC(p`)CFDH$uxI0b+WVEE?mf3@Ovs5krYb$PVB-u;sQWfyCok*#Zdn^o
zZ>`QwveoUYJ2wO-#SsQ<!Yacr-`q%M6;|L(=e?#I1zjtLo%968?V3r6{Q9;t%6YW?
zn&*R(Yb8nmrLY<s>$hxydg@C@Qdu%3;~ik%-jEi%%~bBiF#aSk4m&D;*|Xc6(xLuz
zZs$PekJNc1kfUP#j8cP9QpWeNEIql0Fq#WNT>D-UH`P%CUDAi&uf>+={tfD9;O8$c
zoP2GG8ug%5E*W4Sq51CoOW<WK_)q>lx!!3VJ<xe*YXshG2)Jk?^jEPNk)S|jZO?&*
zi8i`Kqn_yZE4E@6jPLe|-gfPX6OqFQkr$_aUG8|}++SN>{#szCBOiRhnoi7nHkuK_
z5rM1H;P-lF*3oVb4myov4M`Gb+x)RwBnK;2Ng~2XILQ#xdaC(iq+WeMP|YgzjjqiQ
zh^JS)7_%{QgrptLS&625DeO$Sk?6QFw3y3!_wQz)`=oA+d+(c>3S0%BNTtc`^Fh#`
zr>ibAr7SbW;Jl~fFGnlow+MBVaR$ay4^#T6ket6!FwkM=koBI+`aa9#lya3<>KXVU
zh2(Aj<Ldb-%H2;M7fZe??576?DBg@h8oYfLW+u)Van3pPm2dC6WG~t7^gW9BU8XjL
zDgK?|o8}h(o&`{nEE>>$c<)ave4&@oYB3|)p%rxNa&25-%vWJr2X&=u3ECM>XH5S(
z8`;%g@h?NFlIvPAvHLw(5gx8vK$iX;^q=rV>|~tN?0JGvdSa4H`zLDwda%0c^{9Wq
zDV{fB_R`ZGZ?RS#Het0}LN8MhQ1W3|x3luGFj|dAJT-=}8e1Ru+0=(s=oNb{@Qfoh
z`h@y>u4^$LmwoEW*lJZaue@4%Lep-Vx;raZLA)uPa52Z^SoTy$#6jkyZ2(_n3BsK&
z%%zY_ms)xcuuoT)Ih{6qO`+!BDIn!mCf%Tgv35iLy3keKM(7NRAyNmekW#nX&^+V<
zzc7sN@lB(>@>TE(eD%r&>n#IT?j$)rYF6T{7Re;p{f}k^as>uozSVp~oAaD)daLEM
zI^|MB(XWGM10BuU@J8PJb?K(wchPNu;%V+ynsR;d^>T|PO^%G>$(Fr<#SpF15b`uT
z4#U|ogevv@##BY!+3-D{e@DB@82N$3isvcK_`1Z=c%Q<*JUZwBZ*KFFpV%y~t;;q)
zG>O|=9j_3!z5Lg}O;tgMrx^ji^kuwG##5*T1^)j3C9<5v?hKsL-FR>B`Hg~<MAEsF
zlwRCaB34i?oOC^=77Y#VU@PslJ`Pb0><hfCuo^XXr{ZCFYM!Hy!>FPpcZKI%K|3pA
zC6Ch(9mSL|Cau1qqCyhKvWb%P-r1eTaxcja0GiL(04*``C^%dX4#GQqpW8!k{8a5y
z7z*QZ`l4LeboQ6>!}-7y+>%5oV_=Qlf6zzwS%&nEVsR|CweHu>sZ%Uau&j-HtL^{N
zwwy*<RPm%F*4t_vsh&ecQxW&mYy5+KX`oFqdHe!U58g<Ly(le|tk^3+4X^u<OC4LS
z$_(kUXIY8{i!i!wOXQjqG`;Mz?dFe%q@@&mqV`lh81z$pWyMBRBjZIsvEaT*2=~VG
zN$m7O3SA4&8%f(4Qudd~DAJiY|D7b(wgtWaf=<}QdeJ6t4v+AZcyz{FwtxOxM!H<p
z-R}RYT(0c4;2-C?%FG)8Kj+4%EmC+qc~GQnKD9EjM+t^KdI*L$kU2yorYCs?&egZy
zXy~`uT3VKLwVUHW)Ul=|d%2ipx4Y@(#cH~laJj~}*CKS-_EhLoMP*!r*h7oY{<^Hx
zEWDM`exICpq1B{Qd@F*~U9Ynl$ZEf`q4;iwp>=Cq#TtX%&RMZcyhHGWyQAh%9&Ldu
zs<fu)=h~qG{zG_mGv&}f%YUKBjI|Dz5As-hmW@XzIR88uXgWf#&en+@eaY5XrU*8v
zq#|M$(@UUmC7ILQ@zJVd2W!J_Kj;1(n1~W;fix`voY`dcli;&m*qOl&8fVj1=5AB_
zfM1W>=&s#QJgk+lT#e`7Q<~ZDofo01OK?t%`*U*!@EBKz5>o(Wy@q?()<;hK`?EB4
zH{ppS+`X4z>P`O&KxhU8<Q-n&nAB*gmNXe>m6rav#o4K6A`0@yx_PPLer4s>{YER7
z(K4!+{N_;=EJalRl+#4ouY@;PI9}mdb9!=AH6UK_i3Q#3y_vsLuX$vULrO_iu>Y(s
z_5B+40LSFioEp~}LFeb2K$WjwHNy%0^EVJaC3D@fr=<jR==@3@6Nj=CH-2ByyR`I1
zTi3H;Oc5Iqtv$uePqCitCaNeYO9P6qsf6PD27qY=xvnh{@^j=O-j-Zab=Fo4qm=K~
zQ*h(4bb_spOMSTR*CfUQnLb)d|J<856gqRR8M1L9AVP2Xi8!vIw9p^aWW^wT&(=8>
z=dE%y<gEH_>qwW=o<4CNydnq@NF)}}NDY!@i50w4**ETFoM0I^?U~1u%hXKDjy&nG
zP%HXeq%r&P7BIIu4gio=J(|AZGx6Ds*Eiqol0G^?O8h*z?_CxzJp5Jg0^4%%r$1&r
zXbmUiY<c$ZZ4XP|?af~kEAtA7!&pmO>c$~2fy(-%eQ=j{yb}LbD9{W8kgsQvSgK9m
zio5ap!${R)#n8Wr;4OQEdrtaK_ift2xjKZwl`03ze>sB8kYjTw#eJ<OOAn+68R+-k
zl#3pzKzJJoV2b0q^3H*3q-GrMix1MPF!OT2)pAV&){7SfiG>K+6qMQjmr0)V{E41%
zGn&$B^D!NXQ!)!rzfZH=s5PbP_yoJ7mu*y=r9ItXU%Ohb2h2qzIZx{!K;NTSFkCw*
z+<yVd6-usdlWlSML~V<c)eBFy^iTV)1ivjL9$=kY05fl}X7pszsCZArTJTwll;}Io
z@c~UvgChC1H$9C5AK4XuzpfHZ<7Iex0#?TehEpB5nxU>~9t-`H@puNy(QIO=Fv?oL
zkMC{&nf+0z;rIPBK7r)e>PFl|1rugpa<F4N3CXfD!awGy@AA^YWvrP>m>&GC@_?QC
z+=<w~HK3@uF&MpAo12&~#^c=c@jufCxDk$#{SCU@^#Rqa02mRb5>+C8e>1y!<(t?5
zf5P)eIxeFsln0d>S*3+SM9Cu$NJ|xC4RU3K6J`(AM&w^YJ4lA&jZ+KGUZ441k%uc3
z<H)Ii{7j0bsjK<k<=?Q-s$;OT;WAUU<}xW5`d8xsE7P3bB&dEaHLwv(xomw`Td9f=
zw=YXT4J=-%8yRPsNuhF%6!ooV<@o)Rx6GTkUDOKOqGZDJ5vh%{l$u*@n*9cE2d~Or
zl0!1nesOhxv5S$PKA|lic}J&yE^$V}A1QRV6gx4eIRHmA7B~d8^L$g!7yk_;pg{km
zcWYx7K}y+~8_T}XY!l9Mnx@Uhvm{KuI+|zkQ}I8Kx(=_S%)S2Rk|y%&_?O{l)PG{e
zpdQ>0TW(IfU)?YK^vgeRGJj1}WW*uPz32kV)b#+##dGK=*t2tOQ!=E(uo|agsq!3B
zAQbXi!_{&KMz^<i#CU9fUrzTU6hDIg`8AjmcAlsDfoYrJ{AsQ*OXF*LlW43{<7=#x
zkQl(4@zC=%ERO&r>z_67(!f)iq#!#@PS)HueaZVhK+2n4%pGa{P$_eKx5Ah|@X=9a
zJReb=9Glg<eUtt9upP!hmyg>mJ6^MXR28d(B<m^B>G79J1W9XDnO6t`3O>nvET_L-
zK+T!f#9?WXWBe7$69<*AL(X=TS86>V-r1Z+luM{I@yoPzhp~I`{a$Z%N()`jCEjZ{
zbCCm8WdYtXH|{0>T_H3>59D1|;m+TvRaLp{FAP~|KBj2VIrGQJ$gU>jB8M9^r<FHN
zstns5{`%Hg5W(cfkfh{2tmX<!z?EDhke)T}Bw$+i$bYTdu$CAeQ<1m24yc#h(=m;`
ztVGf|jw~nq<hh2Cz*cx%4rd?TMM-vadP<t^+FKr>ox}zGjr^J6-c_H}5qsZhpU{7)
ztNJPP#?o>UmJ(b#X*-KgR`kX;%Zc+<`1vLeru0^+HA{^bCx|wR>2<vZHq-(x*w`OU
z6IV;rnGfdAcuv(It~WgGuiSUlOHI{J+wsZ$%A5JnQD4f5onpS>!;h=`7^X*3DD6mk
z>6Cg`tB*|j^df7$#(z-D+BGlNFlRalw~bnNUymSGmPt*UFxlK|G5i2NEk4Gk@*hCf
zeGi?nAKt(3Y}DP8mX-pbWr%f|)t~H?kqbIx%;J{Tzq^$kC;VXIUvzT4Xc*m{mgZid
zMb+`4$_z$n!n{&m3Mu?#aw>W}6e|x%Y=&YrBETc)_1RjVHuf_>dL9NX*#k_;9UQ&%
za$}4PKb#i1@YyiLZ6I=lck0!?ysJ<_W}z4;IG5?b)_o|F{ErO+(ZB(yKKAQ+eNpWL
zR!tucX(29Hix;jlsOdb{#2VhrRj>|At?F_zOTXiDa1K#f!W7Mt{x1G)`vcDf&F-C}
z)xM)(Ly$avep7+nd<KO3w0VRzdJocPjQ~%hA+xTRCU(YGH#QupRJX<Mx^A@dcdaBM
z2!iY~4aC%S2CjE8CFM}NXSTS%NM+}0r?>ia=A!q`z0X-BRveont5pHT{03Y*|58Td
z?ad^?Y;HzAA-Nv~De-~%VoRMw?Gi;d$Ouo7<C2$TzSWi~rPmYl_ustQaMHpxOEGJG
zZr4s-d+l*~(n@Lj&G^aOs1k5|Xf^*Eplr-w0$s>U?8$SMDq!jxQ3S3hD97x-F(2Kh
zlpGzYym+tNaFJkH8pzb)48kT%1X`;Fi1ZMQPcYWUBUj;QVU{blzqdnN$tC89eRnj=
zdbBKtA2~;D`xe=)Ft6r4Q2j_?$TpCA9CDhX3*qv%%W5t96OezAP=`5hXFk{Ft3FGa
zALa9%H(GPF8Q^ZC(|r4iNGR%_Ft6a>DC{|!%OAW>IbIWe>vO*J&LKmBt`KQ)r09zu
zuQ&ml0B-#a2o&^f!fJ;6Gj>fn2K^zevD#9(zFep*;DtWHnLM_p#v1=w=FLdxjPr2c
zYY!&%t@jLuKzt0E)QkEnG?x-+Yr2>3>DV1tp?_HF4BVcSd!TLdr)1%ID?D%X`bCQq
z#?%6)<dG|V$M-%q73ueoUA>u#{Lb$4b2oQD`Inp=w%7s?h%!fnv=^qg+<Wf5t@W;1
zH0ezAibm`AA0#WDAzx0p+=7xP-w#VC`x87%I-f=T7e`PR7n;}m5;L9Tmv?Gxb7@cJ
zu-j?tnxXyWmR*)@2WD9_!L3=Ag-Y?jnjNp!3o6WroUF=!6S=h<{7zxJfaU0oaKRo+
z$BFMyzp;n_P(fZoijLxB3$dq;pHu^1xXyJUETeX$r~)07*0+g%4L2sIH|+SR+@FbU
zm~dCEHk>19^k!rAV!o31YMX|yHdzmNSp8>;WG^0Oa8nmPpj7F*cA($i6F8Id!s2gF
z=&DT_w7)1Ian(8MK-1UYw)<}b1-z}9lv|#BzpLT9BBHFXNszP}Q0-C1V<R2Hw^0@@
zb)vAef9w|qtnH>6K)90~?%NTg9h^!&(9ex=S-|*Q$_;smd`CB_V+>ftQ3KzF)$YQ6
zRq0mXMgtEFIQP%1p`IjwsN`%_T4+RzBubWzl+sf7)dJ;<$C~28%Rh~aNJkX#nKxgc
z&8*5Izxpc{$-Shlqj3D<SqbAZP|zx@r^tCaFpbbA8#L_qcJ=RIfxgWoO9ZaTa$D+!
zvKU&{C;mfWX{L5`bGX_Rw>sqGfKqiO!y{Sso5U3;>;I@`DObI$GLZ1%j!}UO_VG$C
z0~WGA^JdTH5eLa~2)so<vXJFBB}%lnw*barfWbSR9<eLm{&L-Gjh906Z=xoal!r5O
zL+y_9n_aC2Hh<ZoK?yh*H5cm6U2QdI-D2Nz-UJeXBh((}mzEJaVQTmw;$^9Ch~6bM
z_~U!}s0fC;q=7_s2)RHyBw`X-Z_YpNyglA&3WXb3H0-#icAuO#47eV$CiVVdtQZgc
zij|4TU|%yC*S~CSlLqbI;#QsFPxNo_9`CY=1Jw=q(EzW+v#LtLI8<HlY~2cb97;3q
z*-|AaKu5eecua<1B5bsDfyOuB7l8r)@~r~C*<xuu=8=ikIhuphl+|MX%^_-sV(6&7
z{{z?61ghio)ydTQM>-Q*UF~+RO|Elm<mbx6Z0~AN5`}8W;i7fwZxJR-2kE!u4}_<H
zr8skk<F|?i+5}mzCe$E9s;=-P;HIqptE+##LVjkd@W|vcvi)*ajEC?@hc^2^ikgjl
zL9)o{`awI}PZpYg)=37`5f~{d*rz=saQ;tcFr3cPKsUlmAuHhe&%FD!<iPg;GC6v?
z+_>=@B~|{z->BG%BByLd?3Q%qxL&stE!>A^JKGQ<vxWJ^7EH_R9&GD|8#*9e7GZa$
z{lAO;oAChQBE=4CF*U>$TK@uxs3IWPli{6U<4VwqZ}T)5*Xo`BxJ8ElH)P!fF%9&<
zjC#kuJ-G=;a->!82ZOh0$*Hi4Va9oZ<Ei$l2;@^zw{3k$MF(Wrbr?lgr4|Sqj{VSd
zT)ouYPDj;~zdoTh6JKvN<y{a?G!7ru%{H<1;)nyMGJUDf-&Boqwpy-fXW9_kR(FoJ
zo-6r$a{n(9O<(Wy4R1vKRB9Y=)UI2GmGm2L|4Y_yDHhxZ%UHhRz%;^=T1)>D)#7~@
zed>a<msVb_Nr9cLM07qe_NA}Qry}s`!va(~dj(5L07!+u0m*bSi74oJ#kY@Br0@O?
z<9#&pZAR$E()i6=&O18jA^s^2bg^HcEl=3eVN1uea62oW&An9&%|L*M`#;1_R;|vA
z^%FW6%tQ1{B($ZJ-8j$%2(4Z-LD0CIbhPg6T<1hlPr;gdvB2g_sK<E5(J($9`470p
zgvd)aqBZx^P|I3FB?|-yM11`<ss!fakmMf1C$uy^9^fRE*T|-!B0i%87U~>!Q!uT0
z4C^*u`v4hoiTzEC*ON%cm@BIYd6fc8xR}hL)%yv1`LFD60c^2MzvW$(I_~$MC{wQy
zNq6m^M?2D!;fqOi#uktN0OA+Q%vi%fwJFX%{PT{aJh4B&fD%Yb<)ckf3qoo{R8z)e
zKwN3z(AvZxFbuqXfwey!c(g1)$U&7zq*EnV&i7wYIc{PVQ;PoW{$P0~V@y$5qNrU(
z{BfNW=t>uChoD?6v>v00)h^uGnlIJyM_n|G(!q$Y(f<W@z+HcR04y^#>RWM|XrVyp
zvdN>gxP9$Fh2o*Myzu<5<7xqsx{#WY1Bo_TwGunP1EA(WJ!LhZ+NO)@N6^wdUqyAE
z7gP>fHd|Et&?0-^FbN59kJ6+`OxEX)z<E7QdYb(>+<t=PMrxeTfa;XDVXW%Mv|Xck
zWmxx!Oljo7LXMj{57FVPjeo4zJ}?^G-yW^Yc|h5D*!dCB#+KV5c#o@aSI!i@in7M#
zH|YOY>O|}_CCknxve2@+SXO##X7fi~B3=f7B^mReL&M$MwsTGl&UuS}Ep+<&flX44
zUB9)q@@jNK=hunpoHgsBN=k<4dT)IbbbLTj`bB+}m(XBRZq><J1sNTbI~6V)^1J%3
zHe^0IeAOO=`hc!$X7^WZn+Zxuw%278w;}-sLIe&tKl*C!VH=&k{nagi&A@PRg3=Ug
z-w9MLY3i$$Q_K^inEe-?D`xXaLwTzZg8URmg|eHE?PuToykdH9pv<}q56p?;LXnP+
zv0eC({dsBm<~Wd=Vq00lX;kB1qQ9{{^(2+DaHuJ?VF8ILObd|8n6tbYF#Oe+__KZC
zDWvC0g7@CuK%^>u4rqqLhV(sIB+5@phCoD_+zdjBXm%)y`8g!JJiuK2<bK&L|GLfw
zkMK>iiuZST4d5nL=>Z!K*1}AGMfehGO=6fb-K=$3o03du^0w{z+Z<;ebcCk_wMcL^
z`+oLhnl>KM|I_qrWZp~_oQo3+EL@UB5ME@ePYiOx9duy+OEp0OtW^x)coB|A<A8Di
z&Q_*#N<^)#_Q_|{689_tB56BuH$u9#G;oaH73NzRw`2yATlB%#aqUgXpC<b-M!u?J
zRG7WU@GRpz)(ewCVGu^N_urbH28q%5$?9(=c+_Q~$9d96nbP<5n|Ae|D~Ar8Ryt>W
z)76*RissWQq6L1S{O||3u=<-&gX|nlw7jVTEbImJi(vJW;%Qrj8@^6=K;fO_{UK}`
zRf<@y2-tq_^~$4Wilo4^MfvZ{qXsMyklwa>kC=$l)mQBTV4?cikBEI1KLk2#1fm37
z{e#kv!Dlb#>F+ZpyF_kBjJVIJV;?|RmxCn0a0N1DJJT(NYOU1Y%O*yEYn?|CzSvBW
zba<^rE`h^4?C0EZoR|D>R|d8Qpm;xm>%;ra3Ue_P+Qt91_jf@Q+uI#r`$fOpJUQ0>
zq=0K>R5#P0wRHn*+KPxeMS6kes93-Z;gJ`IU$zaX5VTN_z}WC=VIt~(3B5})gh7Yv
zqvcaZ-@Rtxdxu<cm+DcY!X4GBt2&(#SDgOT9WZSgqWAtk33GtF)jS_hRI1K3msS@B
zuXzQ|4EVPMucgUHR}CCXxwbuS2@Y`kjQs)D1K($bns$O<QoS|)290%C2(3tIm;41m
z&R)UB%XucnZ7QKx$3!5aD?)d`3cdQwE349phgDU^rji1s33jb<Q>Chs&XQWf*>St}
z1clY4g0r#r0iGsA{C5v?Pz^qiJKlq>-&}Z1`OA?u3)(NBt#Eu>c3rI9?1rpqDahA?
zAPp;}NKF54@i-87zthZpKh6HWGCN~^{(r^5t{gMgJf2lpC1ig?t*GX2>130E%<Wo&
zAsV+9DiJg++%~3Z8q1N;+D`)DD~iM6S&Rvy*>Zj8XGD7~H_<Q>GaC7bP^*DBCjL$f
z<s?G{lc+J#pA4eK{ILQaaD3`4X~VaG7WLs2xAYjd4Zio4v0~*&_Hkz!DF6!nAK>x<
z+D|c{QXG5UzwCDeW=!8VvS!l;hO!{&xmA&1Hm9_LjV<G(f{kPqz<_K*prN+7x#chX
z)BIb}Y!K;fpp2p=Oi3D#TD)WYsl9SM$XHW{Q%S|U&Hg$sl2cn44jD+Anff6q7o{(L
zSOh*|S<VU*_nyA(x-NfT^B&Qe1XWD;myZObI9y?<sFjD(Vs&F|YxOLyN8HtNbov}m
zX<n|5Ppq=4{z+bdeMUfM!X+gsq`flUa0%XrH$IxX@I<TL?LUya$QI#VMPrTV7;t2F
z|J$e}S!8`mV}X&u-WDo}@{;=;3c<?S&8m}IOiBt@Jjg2LC}EOq2n%>N)(sevFi56b
znNB-B#uocp+E&<Zk(hfrfPn%pt0dj$cKJwJg`;9a%=Xx|9KznUn8Hrrod+HPAqGkR
zY2O|&-TimfwrHRgAh)I`<5&V;u3J`5rb7*{${ew2D?H?2*;BlEH-pb!?hXkV=N%W7
z(-}yG8NQenWk--Tw%<)Rzct9qObB~*r9QceeM$r(+$02HNaR#uUa|e!?C~&5_4Ner
zT4ahnUeOF-z$91cQ5c38U5GkOrWB`ZclpXwMxt<)pJlAqZ@yl}3XB9_&$~vxU^r*b
zj;FhO-?)Ng@y@1<d*V2;p+V#a&Vo{}jWr2yEvY^-MyKZ4{39+h=s<_13!Bvz)9r`T
zHj&zYzf1`}@ZI))Zgyy2Hl%Bnc=U6tgR)0moW$ySr-y;edwns18PTo0_MZaW7UzM5
z^qTyLXP+z8>=?YTu;skNqd`u*?Vu2xp6Rl3vasqf<u8@B>!OnA={9HG!u(?E{NhQ<
zBFUeZWPjAJ7MU<8DqJLD;NQ{rR}8ctjEO!!E#<0}Pdl3aZP-gqrtgUNT!NZSsx?#N
z{R&^R!<?rp^Q7eHPbxP41#!fJdO0sm2sm?RR&O{rg5a325{NrXNx>=_yf`c1cy8IH
zb)y&2cOpL3S}It=-D;5kCUl%z%p}Qiwf%AE<(VG#lbL;RGMk;t7XvnFj1pNW(AI*A
zkenu2P4OAw?<2l6e$TP0y@S1+%yJsLnl{*b$#O&hj<!fAI1Wq{|DmIS*f>M6Ak_s9
zav7L;BuMeYQ%q!^L9=QU;qXrd=!*-IYbou0JLwyDZu5fRq<8OWM*fzRAv}<+hIZAl
zFU4fII$+KmQIwoq*$edOm?yVm5p`_KZ)ahYgdQqFnm_p>;NZv)K(?c=Q<2d`Q6s?C
zhMzA1e2D?l`qmd}t(i_zw`NhU*y6~7PcDGiy<|&ahgxP0w*h;;9h3QP_F}VD{a5yX
z6f`tLi5Q9>PE`5Kg&W!F3`|sd&I~lH+kNJcIvRS_-T@X-8$RH@BA+5STm4M!B~*sw
zG}fy1zPiX!vuoCQeaC6$w;`n;D=2M5wU*p>4#H)@oBNMRTT{WwBWy|V?)du=Fn4+5
zW~_#_O$UXiYLayx7eUzp7<rM4w!BPj&04EA++`m+Xhf4`B$_l4^Baggx-NRpvLt2w
zXcU2=tT2@2dccgOz<qg*|1m7KOywsj<N-IY!nE11)_jaO19v4q4luk?X#E5((<>T$
zi<ssD;He!ZxwO_-#{%A>Ta;fSaioR`9{%A9ryIQr+B12LJ7T@wU3KSq_*9-CeXF|a
zJwJ}Fc7!VjrPRUfN`$lc@c9iTZv_^Gn;M8*wJW^wvU&bvqX;9^1cG*T?G?hB?JVdn
zb*G21%zM1c92=ss6qw}3$QhQ*0YpF^k_J^wOH!W~%yv55XJt2X2~--Cc-H0v&k?8j
zhp~^eY0xkx9Z0P_f``$#P?5F@DW!p7a+3-;v2x5{?~!Jwm@)ek|I{onl6KGDaKuB=
zB$aK$`z-OEB}QD11F>C4DRGO^i0YR7<k$G9mEAO_F77nPdT1Ctp3Ny<aNox3<B&lk
z^2<)zYJG0oYOE`TMLJ%6jvIkz+{i<;fC;xe8JF)uGpayBrprMe!@H_|=2{T_Q>*U9
z=V(<wIZlqN<oZ(<!OcDlPa$z}(S5*_h$daaL<ak`B*m%VS|fi2D&x%y%Z6nNFzoh3
z9~BJLWciuyLus+;8UU3kK=C=(CbgJSZG+n_jclGpPe$wn)llU_I_d<))EaP#8Lg7j
zr8-=rx}X#A0gR9|HAZbf6KW(xbr(p;%_4ddT!Ah!2ADDJHmQxiaAyY(-~(kiMp&T4
z*h<S&M!3)TC3>~wtyKQL)fehDTW>MvBfq3ptIsb>rKZn68FV;7O+95$!Y*1m5&68Q
zXk$Na*R~V^&Xn~88R_VP4Qmw=AFha#9~td6=b}jGMiGtdjl@=|5>>$`we(b7;gcsS
zYAQFc!W1-4eEN^Di^a|>Sz;>>+0KzIBvb}c8$ew5&V(3PY=e?n-e>~Nw~V%1>qE}B
zAZ@~n=?|ta^)qMhcs_ebATbm`eSn>=r08(kJh@*2OkDf*>8Z@1gshD^EzZDqTYRl5
zCRw-{O<hBjjZH(E(*+hg7tmiQ`8!)->T@`R7P!aatqRygQ54evkAsk1)qRh=;e8r}
zX#8%i0;rBpDX|Wxb_GAXfTX;#I8eE1aDf~7>I-$fnyTH56fis}QV$*N5UAXxyTFtA
zU1`)PO*&P0boaD<>?nh6nK<b&H-ixOZn2$XAP=$@a<%M2oPn289P?5dicD|WA<AGa
z6)LtS{TG%Ecc<Fls&pwZlH4iR#KU*wfe3E|U!Bj-g|#ju9^Wr*`sQc3ZQDtV<7jY!
z#AtHT-OV8SI?N!E(8~}4wJGP()Ur)FK_<p2D4$eMwDM-T-H@n)8W~#O;k^z|X)}tb
z*SdIw$-G_=Ax&|xYO`*SY3P{h<9zTEX+u(~SP{&|7^f>bHq<R9=cPRd$u86=Bx$@G
zak5Z`$cHQ^4K?=fB_aeGQ4hIpLru@XX%}`!M|dngep0(4e~`IwCc?;wW%5fnO1R^F
zSJ{t{sL!5|^tYGDdexZyyBiQVjc%nyov2(0OS$@TN%9p+{%QY+H=F`gaJ--2%4!Ji
zRtO-O268`Vr>bP%$Dr1#B)Zi){-ZV`sVB$08Bg!K(g<L3Z3+vCQb+GlL9=jek({<J
zV8nsxm-Ei#_w7~le3rDR`n{%23!}CNg)1g2Eh$8kqad|gjp7>88Ll=ni+?<g%-Yd3
z`o$Z`e&PGP=GHWuMuTEJOSzG-&$)e01*;DOmTd)*34t=-?k7LhYH0}ctCjJ5YxsGh
zQ`i+PdD7p0H-57+pO|q>PeC*}@2nR^cl!=$a$h%)E!_0X?==ZZEfbIb*{cLhBBZOO
zm!I5RRwq3R0#kQZ{Nh&l#IVcO#AqBZU3VTQ0#vved>}FD)f5Zqsf5?~)Xq<0Kq`L;
zz-EA(KV5CmTLquvw2Pc2Zx%Qivk%rWlu_)iJ=&>$(GyTz%U5!&T|44P8y)&soHfF~
z@w|zcV1-dWZ64n|)#mv3GehGW%k<^_q(tO-Gae~c_$vf~=j<?jGq0he=1l5VY{D8E
z=xSEiF5dEH&;>M2BYH<=N}yvDU)=lHR2wArL{eN}l=)^}7y0m+ne=2soE;l4Eqs?}
zL#eCmrpl5cLnf56n0JLv-%<*VJrweqX%BFgd>B%D!{3&w)o2ux=%{4aN|FR@#No|?
zYk*k|+X4zjzg*|DlEWl$Z-rj?r9+d1)!w<q@^^Z{Je!>kb>|D2T8pS4_aa(z`!`mq
zF1E#{{P4M1zD)b$_}AI^nz7fUl^Z3=*NxK(l4Yk}d|oO@I|JV$AMVSanM-kd#l)L;
z&RBvYQ~Fual?%$zGzF0XBAu$wpEi(}gsg%&@|GJpX7s^|&xb}%Imji2CQXfAKG%PR
z98Uhmusvh|rsIB2t@fM5TP2l_(ld#i@4r!H(w_3=YUfrlw}+_YR>Jd`{7axm)CD_R
zjmd{XkGOSQ0sQ@pxg)oZwFWIB*ixDgGs92PwquBO+!OMJv8U&LF$@>v;1hd&-BQMC
z(pAuQpf6zgbnSCqXy{Dd7RB*ht<nvFw+&ycn_3*>@J42b4LpvBvn1So{B>QmK6__+
z^j{;3Nh_Vvu&Z)xe$>47H8TUhs<O|Dz*n6)tiQX1i!STF{t8%Qxgfk}`{6X__79(4
zF^dym3CP!^ZmVTyFPp>^oV|=rbrJsvfttF&?^ga|6l-M^@wyhr;*w4Gvwm|)bhX{=
z4hYjPZ5X7OMD{|1`9#UzS<_$nB(H1uGF&Y1TN2Lj+|ye&&ns8zTB{}nJ7Pj0$!{mf
zs|}b>#wmtgh1WLSDCrMS4O*^k%zdOPJ?TWLvElzU!pK^0%G&LC+BR+{DHOUwGSoH<
zBN6&>C|sh{+D0D8b24-nKY8p_BY9*>$&HU_rvOi~eW<!Y0*1#?aLS*;DEp+B$|#{t
zW8KB7&Ssk8(;d0nU)bVazNeuP6_V&$qX`@$bO7OLHn`AsWovl!KwmoHl1bv)cPKxq
z_@je>{o+p%HV@S)uOz*e-wY4IBxB~%YQlWa5|r(3ggJU%a|cZY_GjWx94)G01;Ipm
zWNKM-Y^j)eS>W{P%VBa%H#J<}C#E9#mYkUcoAml*0mW`zT&RC)aydQP1-|FCL^G-_
zV$^6I2FBUkftsd)mQc&zs30usk^@<s(jst8fuqHxp3;;_vqj^35sr1|O$!EWv<(hY
zIwHwZ(ltZ?CC|z$>fD2~l35Up+0_DXt7B*q$T(Gg{MuD9;8~L$7~qWXFA2+psk((E
zVuddN5Z;N|#Vzgd+p}X9f46DQ$;U)mF;Du+$CVwE$gxINTcv0yhGe-aL5)Q^Wxm+{
z)=}+V$KVV-#Z01|U4{YbfaG%jsi8=}z_nj*p!mf6+)SbR=l(PHcD2aHrSxUm1U(hK
zx{dA+WoaY5R<v)B{dy)xp;@MuRK&Th>iC@LqrHkXu+xt4QjgtJY1B*L{Ku8fEQ!nY
z^<U3}y#i||buQNy<dRjZF`p=hDyg?+>X-VD@86%NwYGe-tM<)c>6hI=t8QCW*#i#y
zh%b1j0TpDB>77AScpyuiPxxWvZXdzHB`s9maqb)<CmQ#_`mXSsm8b(hkCe5tqjZ^X
zcK}c^U1)=@cs5$9xGd)p-XrY&q-iKkxpq9vDLDxfQ{X?A+}TxpzJ`i;Bmu*cyXMX*
zR^eTUgJjcZJ4KD2N>=Cv>X+nlUH9_9zdxs+P!~gf_2w&Rm=^960SyKdiXF)MY<;d>
z$Zea>TvF%`KLZb-Sg7AblF?5)zd=-=l8Qa?^SdKd6a$pCLuCvA9{j##C7kOmm(MfV
z$lg^g7Vc12#6rLudPWP^Wq)cQ+-{f_nq2uw*{^QLK;0>Aoc^g<Xshw{fVp^c=>?k!
z_)>D37}AYePnr2hkJ9NR5YfcF7exTbiHv|<4fIcj8s4G(Q;xu7fb=Z@D2Gv1lyQug
zt658!ux1sRpx%!rh4mAJGd7_qqYKepA^}=DT9GS1^30bFb?R!WbZ*Q0eoHY7`Ho}=
z?GTf7MP<tUvDQ70Q_#LDlNRR2fL*tE$-qirYW+?zH7}~1WZ9GYN_XRS%XInU*hi*{
z%qJ77hgIiig+h%poIbdR?^*`5iIA)~G~pz+>Mmv8lkMf){OC}(k?Jk%e)U%x6rUuK
zt7W1%mFZiuq8uWu$OQAT*3Z6OMb+8r-P3yz^LYBHS&tr<1u($%mdnNX;<56a`BE@}
zclGnpQ{%hb7gdAtRi>DxD?hkw=M5?!wKT9c)Jpd`5MXy)T~_G$C(av2&80`KZI^%7
zMwJXzIZjJ+eY{edmd1;GUZ-6)3KSD9NR#btclW7-+1)B{7(GagapY@4(}!$s*wut!
zWIoDT(wecyAm$7_jBKGE*C6=S)Hho%-8z4a3xzp#6#U9TY(9Ls(aHC`DCPh)8~3rA
zmFyTYAT@2>rWCPt9e$f4$Hdp-{jt^OebPs@srO6I6TG1KDm*;g_8s62OmTBz@|-g5
zW=Dp@TDHg8RV9q$)+CP3anQY;MzX5XL@#I+e{^30FpincH6)YDx9B5bVzgIrlpi^=
zQ8sq?&5oIfS(bydaoOLq!E&r&3Iv}AjKn-%ugZ)iqg#*}P+X0vcl-<l`D4;j<!czl
zVbfcf-mN<6V7_Y!2~a#9uUu2x6|BaIaMJNpOwu{`#%OHK%8mg(PM$MRm~7`K>>5AL
z^}Ljiyf`vod9GnJ7I)agX`a#D@VU?b^igGJn4X+YufMtyAWZ}Kt}RU9D-&d0c+#?0
z#2UVz!!rr%SJE@phZj25Nn_j4)dD`QPvIsOpDtKUwm1xeIOTwvcgcM{evdw4)Bl0H
z_NwJlwzd;+79g=2x`&!%4R*|%gL^k`<+y9e09r_i@Ssl+6+KzkW3WZFCx4GQONoBh
zjsagT0ApB6l`^C+mGDq0-@Tq7Zd>qOm#%^*ti13GCw_;0)q7l;hrue-{~pKWWS%W{
z9YOopeO$U)kM4K3n2=io^Al~=DRFW!cc1cpGE^ku((g{&oR;HJf@DH@4hMS!RtU5#
zBh1J259jH~MKCw}h1Jh#ji_8~l}?$90ovpM!dOTsx3eo^3dC6X)$HZvMWcq+-24id
z@WAxjO&})Lo@h=}bm&^5i#{^3qOnowOFoYv)2$9oWonn5RSue6H)ChNy#<CA+>}A%
zXr`2pdrDK!m9;)vZG&**kq`Pi${8yITO>z@Lp$k}I)0Q~1l_$}5R$(l=Yf`;3BOtF
z^7_Ynwm}Fyg=g4$PEC0=VN85h9K{S|3E3Z0l7u&prytjp8VO#rDTd<rL!%6*1;1gr
zzUV1o^AjKz7{Yg#_nH^s>*P6@LipxPasd-MnGLcTxvRx<s~TV2fj=2f3*vTe$h~No
zremB6+sVxBpCtv6Jh>AQP;%bx<IY_2hn!ad)c6y@qlzWeB{GrExOB&TRrXdVv!+?H
zq9x7m)_E1-T^<JL^FV;oeFep*`tay%EM0PIB}wO#u93sv-{|^AHnaG#5;G%pD8sh(
zt33{J12}m{Qp)3^ae7qqez&Z3vZ=Likbq90xQ==tEn0H)Y0#hmc}O<JBQdMCsQJ<|
zo;$+v^qV*CL;HkMdJhMRZ1@ecT9>fTu;7lDEiK$32&VqI2s{bVPO;MFAp+|{5Jtg_
zr@P`ubspPTN3)w>p@ait@+PYZlgP`xn#1KBzm?s)xHmDx0zu?zr)$YN^<n>Orj;qE
z^*2aZ5B+3b_{q@+_ar#*IVDZ!){hE>tsVqk87){3^<Uagp{EOwB4Q}0sV-<~k}<aO
zvchmER@t5AK#$rxYT)|fWf2T(<=TvxC4JnOO{*o&;;;(U@8i6;lUA)GAi)xG;@={O
zH9|0m4|A#<mO*h!BQjbtmbBT>y%H6TX&o?38JN1^^@cYVZfsDs8F8vAF*TTOFLe>i
zKaocDekLdC;0{Pyf|r+B?rQ|pghW;8QCn2O1|nejfSy#-o^&W3UBlxG@vwKi%a-hA
zRCPSOdyYm$n6d_J6OVj`(L86>#_C$+VToCGxS|%Qh27jqsyuZ{0=351qnj^Qx=fGd
zJI(B67RTGW0AWB6zUyeu7R1BGC_b*NZ*aug)$DZaEpKlyIMiOXHi|1cVojSIVpA4h
zo3L8JkKm1grW%rybZCD#!-hw(nf<wPj9w$<^IEl>HlNe0-RdN8d|Fxm?OOR^)7%?E
zgZnCgK^R>Zl?uf>Wl0Z+^ZOUly;im160w4Qu?rOctg|rd53YQ=MoC)Qtx0EjL8!ii
z(sA)bxpu$tsQuBRQ3Ocw$IHi*Hd>zS{FDIFa;xFgXR>PHcU?IfQbC;dc*6da>E=eX
zmmK~WuYn$BhSSR}E42VoZ7`!c=b<SZTrLkdg9RbBEE2StI~s2Af1#klu}(Fj`lmK%
zR)Xov)G+wq00A4Rvmm1zom&~L%_pXFj7E<05tF$1nElgsh`U1p#VsIA3qED`H}E$x
zlzCFdbj@)Tc|AEw<D`6H2O)*ZKdE3>z)6KWv>AN+!GO51KW$dAN4QT2RH+@oOHVw`
z5CDy1SB`??S<_+*HfmMYzy)WaK%UT?i1!f@=nsJ9R~Pr6t6Q<6sCkdnC9xa)1oRBu
z)2pa(-ks?*p}W54CCT3bW%N40Rc8g9(MnI2xwF;TK1~&hcYL@FB!^Js*Tkg@2-@P+
zCNU3m#nj^r6lm#-j>0)lg=V&jC;4;|Uh}10S?LO^X#ukzK7~{OXY4{Q<`4>Zz6L{#
z6AI4m$EhW}g=~gj#|`cpv@sY*qE8p=!frUL3`5yQ$9wB_EaHNwHg4@TCN$W&19n3L
zr;m4vKHQggNY@p9u3w4V*x5}6=$1C^bVM>6CxD5=`fvfIGw6{c2^65+Ud<!OUblzu
zI;F`T&=?LP%OU7-_egQ812dFOXFCR%FS&l)NUBq9!=Z1-72X30T(rQH?&D#Uhf*|%
zrbTD$tp~h90Q>djNImOYRe|WZZ_GVG7rQChb4$OZ8S+zUZAQ>Br-^T!BNz@UTR|VP
zrpNm+iEf^Bvg1-bJFC?Mg>mB*q&e*?XzfUFPJ$6QobjRSd*VnAGYDdlX*5*FB+&Ue
z?p6yl>;~@kLMFmdj(Be9l9p-RF4qR59pWND`iX$VPDiZmgc3%~!ILb@m)k>+Qn<uI
z?HZX$nIaFK%uOz-tq_Q*XIGKA<JAq+j}kD9?};oW=sS8z&GsM?K`Xd)L5zDi`~Wbg
zYF%dkDaWXQ6S5O^1U?NIYe>&Sp~l29B?SR%7=Jsz<jEvQ&*=q1!s8YlUoU_w<yM1L
z)n!xRW>)FOwbgpE5zsP{N(_1$v!biDHQ3HZ4jhMAuF7(TTrQJKXHW@v(<>abs%dXA
zBmQ<&=njm#KH&4?j1rIzWUEnq?sLHd(xSkRqJb41vgrl~`?5=I$GiehiL1YKKf*mk
z!g?J4p|F2sBU<<F^E<rka81pv??5kZDRL%X*-ogSt`M|T6|dqnqJtLV#U0w=X8n^+
zBfkX*sHfKi@c6&pAjMbj)zn-AEd?)2q?LfLq`jZSeiy7lnh5mJfYTK*xTZvFrha-o
z6Hj>s+~IR0o}G-xCKp5t=D+eG8m;pB`P90z0h6bu$O$wMT0&RY%nAwAIl8)^S2!8s
z-2Kvi?Zy&%xe=;KK?1zIK0<IKy<p!R*Xo1<#MqWwfi{+i?r0qCNx12+e+0Zc48Hq_
zjwKS%2YpFLC^#>Xba`>&0z^8sb%jS@!09q@%)V1PFvLP5osyH5?k9ncO<OgAtXDR}
z>5@8T{zQ6frJcYUrq<@A&8Wh4LpKlMoxk%jbY)$ow<KTeL|npWS_mab0(ZcuDe#%x
ze5n3D!T3kE_u<cRkCh*mv{BGnOrx%UJTM7hf4NZiE0JYVhvTn(l1A+3U-5h}n8i<d
zEYa~sgteqjkXMNPT7trlj9os7UcqSee;qs`H}$vI^Z)+wmM3B*Y`H^qKl%O9VujN^
z9hp|)YY9b2F})uU1e2Q7>3uZmNGS8~zU}{V4a#es`#~bA_w9kFZhX6;bmTj0FVZJj
z^Pw;i1j`<5bp6$Uz_*q%uAF};^kdfqoUbO8mbkIL{4FOhjZ6>*{n8lnAT*}IM{V>G
zUD9Ffi_2;bkFr$y`7WSUqD(?BO?LX1b$RS`uB~z&?K-r{^<`fQQN0_nhA;I#ltrw8
zMH2s{cT)wB&SIAu+n%C{5jHT7nk;7{5H{qeL!l9S2Y5%uG24j>W}Uf(<pS}z*Z(4n
z|Kvo=5n&$_r{V@%!%b6%G>X*~PJ&=Yvl~<pPTGdW{DAA0|N77Wi)4Xgo`N1vYYbny
z<a?zKL#w3otDU()Ubg9H7g2i-C>VNBfNG^TpT4JG>4$`#Pq0G=Aw`FsI!&E<^2ncG
zlhW-Vrd?5h+w?q$1kd84MeFNgwz1m*`;=KI3tGZ>sx)pmsdsCzme(U$z0FQ`WoUR#
zUlIQGX8+s9|L2ct9cHxf$eDL^EKV{v>XLn?M1hA<6vy#~>X<(GcqBLHjF4gbpVqEB
zp6c)a=XNQXQDh`#mXYigw<+0f_RiiS*{+)+l_+J8TUN4(NVrDH7P7aDl#FZ7-?_^8
z{2rh0x4yaldOz-U-{+jy>-iezbzZO6k(Z7XoprvN)}POg-C_P$a-sG@{Es$dSUD(_
z1WixIlL|W}5l&Ry-JAYZ+55xiV5|CG867e@HIK0{RTM#!tH<>it9r-h56#OV?Q7qh
zG1w4KfI><r&q2lpG9)5C?3naBArBj!P&13?u%#(AmT?cw(6>(sIl1i;XD$`%tVpkK
zCei=bc?EupQw=EX@QYw;3BS*>S~!{SniA3DWU%B!t0d%~E^PZtb&2GYj#Sl{{)U^t
zy|S3`^2zbES3;+`IKOfH%#Q4Km@3iruX@>E34+fhn4XqN{^jtVujUKzEV*N?YF^U0
zV#^<Vk`T+~q<&)Zywr}Aj6D3v-nck27E;;XrI_c>UZMQ<$HlDmUR#OwyOyR5DWh&<
zU2S~hqnEN#xAr@X{)REwpRXP^TLIIy;0>(u#bh`j)Zk27Yp;k2rh6`%v}D9(t@f~;
zT#Yj@mo}}0=+%K@<y?=cCwg<=K@XdH&Jb6I@R#RE-^c)T0Pe^liJr8uQ7$J;h^K~~
ztg;|S&b&{rv9FsYD9M(E<KL2(%+Z4f1yOIDDF0W;{K>+Atw}x7kYUI7vPx(=Lr&|t
zSok~<AN$7&(T?2b{2ZO*_fL*~FPHOGMxFn_V&`(o6~u<xKTtnRR-TnT9k^;9Rg-Bw
zK<Gz1nK5@7Bz_H2=CP|Bja)EV`k?nHT~okchH>?KR+43J`GXHCiLUz}O6$kWXr(j2
zbzW_qitla>GgnapdudxVD;YV8E6aupH80fKekY}&|AHD$6bU2FuJz;-kTl`VNp`#f
z8HtY^F%?@M3#@|I1mb7KaK)T>Bi{`3Jxm8WDuBb1zK5Kiuz{wp>uci0FF3nzB4=U+
zCZ`Sj_VJ%pTReCK*4Hp&sKB5v^5DOU#BY_}HlS+GqpbJRrbP;_3S_o$c9;ZD5n4r@
zJ6|MGG}fU6C)nqz!rPsAw7tqc7?NmGL|cx@)2Oq}B_uME>=Hg{C3bkedeELyUV0W3
z7~0*ScxAY7+;1WtQIKU$SY>(>@|9^Kw6Qpfhy43!=reH*q+Xm}r+wDRmr($**rWOX
zVWR)`&mgT$mBdUv`NZDzE^)F%Hr3Si2wJAeNn$E{Bg3pPyA$p56ORvh3iR_|lhi~W
zOI)Dsntc69HFgGMuSj<D7)#zf#qgwJ_OeQdJt04=FQ&3z%dd=5DsJL!9G-}@!FkBn
z_2|G?Wb)1W{a}A`c)^f1*L<nK@@)rf{I_c4&z8r34&}I)mP(Vrpq-HnaWzG8T}a?^
zA0Z9Tmy8cae9tdtd9>VeF}XfY7?0|hBBFnCN-uJJy>v<~^@GxWBS~HEp&pJ*J9OFd
z@WivrN+G<2#7cctPaUmZ5O9fedNjuPs^`8CWehB`4&WcGJ!*EJl^pmC-)l0ImP)Ek
z!#{odvq}CN>Ho<&45ir+$awxj{4vXgLH_FNT$0a^Nae+h`U1U0+tM_IPIeBf@nUXa
zE5>yw@>u;B6$fV9$<~_Ueax##@Uzl;S?hbmGKZQ6yD?@BWsIShPbqpI@<g2S3@jS%
zdfbvQ*#h#nJB0lgGzW%{B(QGw0^m-yeMmqa8U?mB)@3sR)U`IZ9R9%M{}J$Nq)?x|
z@l3pem*b}-!^ymirA|x^5Hn`2U%6`I{Jfo2FZ_@t44g>fA73!L{^mQ`dg&(x<P2eQ
z;*b_I6{)Lwz_(fWg=Ev?iXQK8_{GS-uWv*|N<J8>Ip0SB`HIke%r-C0>Eum)_8h7J
z5|U_67e66hP$1X5nKQUc0fA*hHP509luR;$D~9_gO){%kAp-Y03znH5Ti?LEo)_}4
z$j+^k?t_OdBeM0h`4i)7y6BKI$1USBog(koQZ2fbt#mI9I(9USe2wH^Ykly3qVbsa
zXVXL0$BJM}kG0~P(^-EAVC%e4Q;=5XGO;+@vpG{?R|9uB?_WP}IF6Jj4t!do6&>zq
zf5o>&MlC!`jo?swA%}lh+R=7`km_#;nG~UJcU>kP7CU_gr^>Y(5(goegI9VTFr39D
zpo33DDo>0kr`uU1{-Pd<{6a|iNwBX<W=LNZTb^NA?7XP|9rBe(H}tCH(~RN(9lg6G
z2Vbr&+I;m@u(~4AxLd{aOFCvQqbPx8=%|8mD^!=26lyq(n~yH@Wqjo54EmuTX0n`Y
zot}FR6v-cOKST76f4MT>L8oB_>cbK!VYT=)=kkCF{6>?Ac*{GvBNxZVz9{WIu;%u-
zVyR%DwA=**J6|(UuNSN#l;+B4$*V7-4nx{)g`{7^C|I@Mzr!M}e-rZAsh7!PfiO1t
zd?l_VU50YB21q)Z`1|xjar)P<Ke&2chs4zEVXBW%A7@Gv?(D|E-&b7L_8(Y2K3T?(
zVQJU%><t*UV8JT<noEo$^vR}cs}!B}#v&Ms(L5N5iL-k}=Svsd%n$kDz)cHSnQ|TM
zwAhz^2miwpw%4VMP>(BarY^Sk2+BvSb>-YLS73t5D^L{}6)(CnWj%&sXC`}*afG%y
zVW5?DPL@;hG4r*nsC>wLReoc7ctmu~A1RFAYsqfv(JtVlRq;+%XHQRt{YWor$(fw5
zT&SbD`Q=rManaK|*{M<L)|#LQla+@PDFbilq@1W)b9kR|KxLzQ2EQ8P$dOK#0tMz4
zE1O_mCLSdum%Z*xwVw&f9vAi$z!piz)p^OA*lMc%wPhlAZt9Tr+Y8f@LVIVr-VKfC
z39i02OkXkJDdSG58Gd6h6sO+VIn@5cLX<hv6VnuY{1=lwmUSrE*r<&1)0v4)gsEYe
zIca?vZ<;xCM@tUe7=9z9ad>2xyF;})&w3DVk$A5?r{qm!GJK$$cYmd=kM4BnftuW$
zORq$2WIreQpl?FhhTn&nAVhDy4SRPP>y_3X`Y7^VwemZqUu{I#^OXJkSNp<^96}=J
zS8|m!q<wIt#tf12WM=B$1iZ_|ImvpzO^MprH@&IWXV$Z{zb#Y6)p>1P2qDvDFP-l8
z2n_{?Io->wb5%u-Yfy~hMn51~ra%Wjsga>oN;-MIh!AiFRD?dfIFTSyAu_(Cu)LM{
zzsu>Onel_8jD`kZitW{<4|C0>mC_jt%|@&7q3UfMbS<WdzK0wFj9i>$^rkzI5}2s_
zSorj^svJUA{Hss4%LcJNa0RY8FPG>0;U_I?5qi@+a$|X!UJD6nmN4Wg6HGs!|0g@v
z-;0nAh^i!$XuZ>+5i`MvJ6(T)@fPOpnWI`+htouU$>;irx!nGUAxhkm`~)RZ@Bsaj
zI6YGylwg{u2<VzAh>YZG78#MDw3SI|$z2(eL7jt8Glz73Ss5xN7-Bw*D-k-0>>)N&
zAFoC8(hc>K`O&e-)>15JH0J9OoXStoFkcmlu#)5$Labj&S?e`jy@bkvtji9&vCh?d
zI;mJ{9lrtQ!GDEu<iIzUs5fl4WM{_23(h5<JJn6G;1=%C8JWD2s8!pDt&R9Sy?*;Y
zpa?T~Tpn&>BTY~$%;k_8lV>-aUwg&`nX25258sRDpFgId=A=Ii+CZe_*R<IobDs42
zQmB~}Cw~?41D(XspC=EqorOTdSpq#V=6+3-L{Hi^{Guq98o?P=4ZQCQXECybcqGXT
zyDA*a7kv-kRRCq6VFG)Ina;2osGmi^W1$uq=xknw20{O-Q<cn#ro;Vya@8^tP#^XT
zm#U@f1L3q!Ihv;Y*oZUTFJX^|C?Q|zY@aP?4|J^Y`ilx@8nDqO9)yN7*%|e`v5wAr
zD{^w98Xp%E2C=GY&aah4;vq;g&nLM(iKoY{HNZ{vc(S*w&)2of+eC}k$#eGJasL9-
zKMyIsQfOP}=~8}YOpOaDO4bvB7%x%19tqIeNR?9hd^~iCWwJ8TRy<u#u0<0!1ckZb
z2V2{YVd};A8g~iByBn;roHT$!(yR8IuV4w!@b?rM=L_xMubOp2izVYy)~f1U<=v)$
z>52<lpCOeXOF=&vM5!3U7R();HNJ$Gk5CZsMaIXp@2|OlB2WO`JH+>JZB>8$bJOs@
zlK03PH1A+qhTp7lO1KkCx|+}#A(8G;y)$i`dm|!62p?F{rOOshL|yD2V{YI@_OkSL
zs7ZvZ&Q1ppaqECuO76hHRi+CWQrDBC;bsy@=>y_oBjo#JdGSEFW_J_Y{CSNI8Wew-
z(0m-mU&O>Zu)Qu1h33}oVbePX*J)J^vc4X)GF5S-C5apKWn56`nEqP6oHenQbYZ;l
z5a^%5sK2L-H07e)XgGSWLy?_TD{cJQ|CL0WGx?{WAtm-7X|Q{o6Io*YBWQh1xWxEi
z2*D~)N22X6+KWbR3o2u8EAqzRWJren*Vf-E3}k$-Zk<6DhJ&^%d!hE?dV=QSf>UqH
zRY|T$9{|<0YJI(n4o#8Nk+Z#tD<CThHzu7GZ|^);ZZ7X=E!TAOF^c5VAPYwDLZ7Yl
zU>(iOmlsM2LF0WYCyNPm`M}AjC=!t{x=L|OAn?;@;4@j2EkwkpSHjv;<9cGb1tACn
z)gBUNG5_qcdbn0rK@~S-#DioX<U#dQJmn>?JK(a^>Q@^Kl0n0dPu?N+v~Ocqu3XZS
z9EyINfp`c}4}&I9FIeiXT^xY7SJX#(s-}Z{Bqt<&wwhl_HpOWLVcT!Z1kYEkDTFyI
z7TI2(G|0zRBjJLQoEm5^Ynfa5bM3@W9L(072l%s{&9fkSRWNo1np+1nCM0FUw8#py
zhX55b(7jn-*f_H4TlHhXk&f%BK*O26O*1+a0^}X`XN?=IAlB4v92J=E&Yt~?xRR0;
z1m0fSx(pVhzDOaX;5T(V5g}}BcAl?_-~^WzmwA*wE_r%ZEw=GgDHDJqfWyLk@u%s(
zOr|rXO80|$Jsrl1!OzNHgDC2+T1DB_(Sm$I()}w6b)Cf>$XjL*oInvA_dWG0F)+zI
zX`~pn&nP#R@|{V)z;li0kP;;eyKH1)%1DGszXJsavGzUCY$r4hJ(RSf<#(EyR3T<E
zMw&GiWW}4X1rAO`@tTro=XqRTZRaxPhCnr0?WCs*4IkAK9Jgt|AH<ED$?5~anW<&w
zpLHeZ)Zjy`No3A(QlIHu!1oM2bu1jIOhv5h*fQ0c-8HyRqXl$9=hy5TFq+RPKkmoW
zB&FRxYQ-XjiiL>Or9~%L2faiR9Sc*JFgO82EkoGi{N}5s=Er^rsSy3i0n;DY_f<+D
zLG-OI1cQs7R4yOssri-{pxiPlS|;eHLBq<%E#Kh0>(s+p4_ye!%?i<yjkiy;SfI*c
zh((WBd^^nVg$~5Gmo0R>-(_>^M@)sWulC&mP+Av&_H}Ug&~R&fb`m!<^+IdogNk#t
z%$gXa>#h2-Xly3-6rsDQccQqd;Adlxw5N-8aw&oli=a6>Yy_WMjwnFZJ@$l0rACx(
zCILlgEbLL#o0<~=^5UnaCd<dL8VR&|aJGN++?RXlPBD(C34P0^4=clKH7A&MQKVWm
zxZUsNW2pXJFKIBE=E_j>*RiU%D^|LQ;hPv|Y(WwnLOndS&u>B{4zbwOjA7Uh`s!7D
zAZbMHV`dPZb*_*XP&5QtP4Q@!lkOOLCWT|hELGSRgt(xonU7b=!f+-7Z(F@w)`GO3
zR(<S|2ak07ylE7TLs(RT92Z`SBg&uXV(7tW!|Zl)!|8^lXZ#E~8s{UUq$oEss^3^q
zyp_5B36H4N`r4Bx$6?^)z;VS*@ezWkqhpT?uJlul9I)aJ7|nq$nj@n@F8v}h?w^9>
z4hl>9bqRPUM`rRoPkA#m?L;D&+fq6rj`e`bA*S&wg9!uFE-S`M@kCPEi34uTfrg!z
z&3|-L5$!!aZ${T}4MKUyS>=)WM3nyOD_jvZ)XNKx#P?1#-W`UB7o^8Px-v}^T8pot
zD&o~bN;cVu!N@0-cx-bUVrDzXU{Qe^11D}MFQqk2Bj9A9jP0#Pc;N!$-H4(5!>%8n
zgAftFLf>@U&3XDn&(?R%n>`Qy=}Y_t7I-Xx!Y5S{-b<PqHXtvbA_gjd1>BLvi629l
zi$qsmZ1jrCBx;5!Bd#_x-b>`9NF16dHuXy4z?g++!0HZ;MOv<wv&#61`hwFb7|I$_
ze6>_-NZmoDlOklJ3&F0Z2sFMO6bL+h#kXfq&OIQlq*N&E30nKv|1_M#?uN3M!>Ky;
z@0rn(Y)Y6F4sTVikA|lc=<98ReOegbf0KP*T1<^dX;o9eHpK(!dO{<ilfe=K>OZd-
zz<~tWumee_3nv~5BfkCG@xYSj^>$Fn^RtCMI0m6*p9;S;Fm`E8cV_V}qV=0VYNR?#
zrt)gVM(R5g^@5s3o)&0Ag868vjQ1Bj{5LHC8^r3!QkAFYNYt)ONy>B?-ucYFRmh7~
z8-wHv=LvY-JA_XuV{_O4z&`x;e_&$JU~8%H@fu!l5ACo#(=3F6m=>eu&X;$Mh99xA
z=DDDSGjCu3?BUk#tOs1yFS(6x8UKZn@|%AGLHtgaO@9<rVEN6bmULj7!{AE4Yo5-q
z`li+JgurM|AcD0;;q8Q_bXDV44LT5pUPyhtTPPQ?N!tXdvcS=}O@y3$-4Ar>{L#1Z
zi3AlYi)B;z!5(_&J`Rb*ud90ER0;DLA<@2#Z8`XF5c!{h?|MAL>a=Ei#$^-zz+RAD
zqbbGDDe!g2%NuNw^Ir<9xJYoi;OxWdCb@j!w)_wxD$X`m7K9;x{6-@979O)H^7tLP
zIrh>-iznyTZb;SEce{9Cgb?ssp-lpT2+7kHuOP;|5H&iE9{cQKv^;YT;U&S6XH5+_
zeDp|}c+bUBv1J&P)FSDiIs~0vk%pJwBaA9P-eV8rgI~LN+`ylb0CGv+O1+uXoBf`^
zxe-l$qK2wN)nw*h+m|`t3`<vICdKFT=esb2j!zVR1US^qFE756fBt6u9o)AWb(Cu-
zk-3m`6h_X<Z!QaB!w|TTTQm>UwM@O7)`9Yh^T(hhHREUVb=E9SJB_yf2S}&=&;bJ<
zzB&7iNb-&u{VllAq!3Cm_qiK2kV{H63PhH0-+=tXojXQt&_yCD%@SE_GR!9Kv2NWo
zvP(1{$?<}fDG`z7dEO>b_?X(7C?1PP(!CLQ{z*-=JR|~BYe{L8XOqZRw9C=9f6gO=
z?BPsza=8Q{JfabmIvj8F(oCjv2OS%1kO4!zG;V}^R`VAGkK%^8sH;f7Q$pFT`hdvv
z!D6imRK&Tr3wEGpGz0A&w)&Znx2w%yZ|n~0|1DcL^vXk!YI$3LOT-8X4d@E$;H&nu
z|0uKFW(J&P+#-sMLdb9)Hfj6eYbA;!Am>3@KjdV3?4xAAKY;FXQL~uR=g51ot?9si
z)SZp5NaCE2f}_4F(@rC?8&~?FG)gGJ!&(dlgGe)6<*FP<Nc2(I>;NpP5YoxpF|{aE
zrc_GYxg03B18&>1``<bK@&Wpy4(+Fk@A&s$s0S7lJri}Gb1K+qUiXv5$Y4V4AQyS*
zK!Z<N`44~fjNgH|zhkl@91rOu;K7q^&QapS_GRfCJbJ{cPkXBkH4JqW62bQYD?({U
z2Sc$pQQ<;Sf#%?a3H-0>lkh3DvqV)Ss$~+2s%Un+T9bXUXhlo^w1E$od)8%KrGdco
zU*Mg!xIqOZh_hzsP2!`__txClF8;q(1)AKpCUnCojPg=7tiJ_se!TVl-#wt@AP|zy
z8Gg3fC;DY&(^GUwg{&UqJ5_!ym3quvfP7$oSuMkbd0Y?}J5y`&(Hw*QeBU_(y@K47
z>+8d^og}`|?I1EOYX-||(aGW|y=V%PwhZ4y5WwA`Pqr1_HiiC(0x&InC~fX+<=n{C
zwn|e>u6v!H&Em@s+fvk^io{?FJl`}Izj1`&ESH2IuKyy;`kN~`@&!B9P*F~jv3J)5
z!;U4LI-JK<P$&RYhT7ZYT3oDj10gkvFjPPB^NyPuw@DCun6B`SLOF-9%`2Ng7Zw>P
zLmj;o+ebSOnc*`a+=d$>%iz0mMOCXe?PoqR6p?h+zS1`_zvkqQm%lpP7Cf#x{ALMR
zN}PQ64Ym~}F4m0JhfsQV52xksKXfTm#w7o^qq~*~@Al3EWa_S5I8VI(0_kD7)fN7a
zaPyz#4OIq2NNi=2Eg)LIjQR`4I_Ux%Vgi(jY^{jtFnig1HP#xt>MKr}zwRabA7T41
z!y^yw-_K8vXAu-4o6+AmgK!&*my5nIu{A2xf;&TSHT6nh|DeDG+->{wT@pIs5V@H!
zi`*Lp<~BPQXiFTGqgLt6_S=0<WpF1K9zW+3;q&$twlsbBE5(xX;W+^0BMlL+jc=3a
zg?QS^b6F|(x^C-7MLy)d#`;X)U?^r6y~dRZg6Zocd(cjAGbtg2+8PlZ9A(j=9gTj^
zNu;+xqwfp}FiE<AiCAJOCHD2TVA<yTHc|e93`keN-joW5mmbuFdKyt3T>jBvr!0Ci
z2(~v`57qkotPob77bZg9I=xG6!%<Ep2!)tIp|p=a<m4o?J{+39wm34pH}z<v{`PtZ
zsN2G|6zXh;&%%3;xYIb{%EcjnSq$9fCCOOLTcLKr50oj*e+=eWDZ;l$es!2VtNYjx
z+jLq|x@tjA_g_$Uhh%QQcmG2v6mgsbd1w$!>CjM2Y_+m!o%wO0ZBNxK0qsk1-PwRo
zt9A3DrY#Ko?E|<D97;=SGg4=I@Je3)rNyN#Q;{K#Z2(zQv;`Z~0oyy$$^TRXXG^WQ
z3}ngbwYHcc5=yt`$i3F~(AI8yzlAi}FCHb>8^%~>8U87admC@Nl;wx=VAxTsRC+LK
z^y84zal?4q`PZNUfL`2u5O8l2O8Crhhh#-8g`YKDhZ8clO_oP4U$qEGN}Jl&&Pdt=
z;!mPgnLkcO)6ON}N_fEq28V%`R9*XF4U9so@faQ4&B@l4atluUSNhn#&ejt0YWJd|
zb9RPR{vDlvNP3hqaG9UkcUl#|Zj+EzE+gc)de)-Uwh<*jo+oxT1=xfSv@<V2nJ<no
zl|w}ilAJ1<)`lsp^7!FB;i4~Bo5HtJK~WzddJ48|EFbM0{N0*qceTVFvWC<ooU!=q
zZz9SThz{MSyw7y<QqsgtQZ#yNS%Xx0q9os=d*f^mnF#-oGC<&H#mEH0{rpxPl$Pej
zgaM1@V=o`Ru^ej*eq_$MIRH@Khs*~rEUs!WBql_sNol>sks$=ZWlp4@NltPnH{qd6
zH#CO}Idj}Xh6T6M>d+sdg2qEZl==&)kH_^5HYc=eq93IoH*0(D+uf{0Y2|F^su$&I
z3^#2M+I%ls9lt27yPB~q=1~q&#1_#15V$+Iy7|JNE{|ClEZrD$B=IhUFgpKq4rgqw
zf=B#aCfcoQm-P7|)F$n^o-#$cq5WoFsko9Q5K{NE39wyCH~^?D@49}?LiZoby#n=o
ztb!22^AYkla(sX@1IReZ0Ytd?#bkmXgiuiYghy|nW@Gu<>}H2|Y+ccWaXe6z3%wV#
zKAqo!`mP^jIT|A7Qi6cn7>Ev^h}V58I4|F=jk%Sxbv-JNJ5na=3-_X&a~w}u|DfjM
zfALEH$-O_sJjl+3kR&$UNIL@|On2d&ZE3z3E^%6gKf%R+i?B7SeMw!DZbP=k^doW6
zVdIdrKdKG;BkxoH2gG<G!W+hc4R8dPq{$!csKO)J%xf8qM$6GG&OnbybQFG)+hW8Y
zz4<@l8U*e=A%#mhaZHf1gI5}A1K_^#Reg2yiMgbv#>rb!bB%pcea_WwF@n3oHvSHc
z>OI>X?!hiu-bDEHoGmG6T*`j`y0p*gNb{K}nhw;jmm*ETrE}KBVt76QLfIZVxRYnB
zgEuE>NGX3j(5{TnevB_^5f1vQZmKDy1wKRNtqIwC{nnptEQK~d{wrAh1D*s2M@j61
z-1fgd$9PU8B$3J}cvV@?vP{-w6QlgsP{d(9XNzk|$xYfC*j`%WXl$hX0oj}O78fW(
z&!gDy_tqtGD7z`#@JrwFt9+O;j#o!M*;7{FlO3soBZ~~!_)-(4HtRFTq-ctSj%kN<
zu$|?WO?~B%?z$Q5;8#Rlsi%$uZL(Uc@6ZTN5?bJDPwa(eM*2xl6tckjG@$oiI6D><
z@y=S-+jppKVYZ$tgEeHu075*0_#vaSap}|6ce{Cj!NJ}|a7g-VHWh?WNL<9<T_Wct
z6^Z#~cu-Lfc`QDsiSoL$sfSiG&F+D<$uNh5qqRdO^Aw}uFo;W<Tp^D`$olw-%2<dF
zAJ66)wLUFU%Hc=zitecZZ+IzjVu}4$$L{~4DgNjySQGGc1y>2j5S$Rgk(0{QiE~%>
zV&E~fGE9P-+vJCOeP3TsBCnk;_Mel{IlC5obGJ%tdup)55K0xR>tqletUg(<an%^R
zlU8FT|5J)UAJmw-FC(nz$;!F|M<V|rnVSUs3$B9>Tu|CuD`Z|%Qfxq-T*z8_mQ*J7
z=E1W~;d*w!ovR?~8F`uSsqW7ve=)*;m}#>z3}wJ|>_I{YD;W21*jJgP_tp`$;y*`#
zeZ&7zdnb{td~!K8rr8U3!`56y2_+}%fPT9$2;rW$EIG_7KKIr<Et+6N`I{b*qCYwy
zt2T4UHiX_c0ho+Io6U<;{=-_fjLq*K{3+PWKGTC}j5JVX&)S!c!S_8%!tdNP(z!$_
z)e%l??<OCO>p5?N?)Pu~EqylqgGVsn1`3Iv>C}1Rs&u!r<CpM^=Ayf4iiyv>OYS62
zz@b+_4m>gMm-)UR<D9}~Vc2RatU2qTt+C55NV`ES`KFHnCindCx4DiZYXS6;&q>Ax
zyU_5K6QG6l9Xjs%tdO`zM@yzbub~ZTdwV?NlwpzNaUU{ALv8pb>31PSzhI$w7nXis
z?mK7(+Xo?JSTY#PyG8?hix|6KqUP}H4%3E%NUku<gfdZ8FS&@k3?bk5k7YujQS)yZ
z_(#Y?zJgYH@q=J3$swRY=3jg0j(I0d7ydeD0!)sjSuabfXL*+~DtPznriAZ)?3d?(
zEFZ3#V^l=KAf&y))@u@uiuj%FzbwW}Uv$UosUGN&9+iMwH*sjFLZGfXv@I#n4$eTv
zSUUK=#41!Hb)ssHi*EKt2`lo^0jtWcm@DHtYf&+Sp-*|r9<3ShU~gdGJ+lFnkT-~)
zmY9-)q*PADL+{@`oKH-`z?XBKuf_fxJ@<gsNBt4jyvbL&q-G#@6(@s&$%g}YXN1+u
zwL%G~uAuwR<u8^tS0SlyF#TK@&sAiq#!7Zl0BgD3AiGc&&ejWFKYRj67PspUmIgZ@
zS;6aM&T3<~n;U%sVm&t2*I<M!Xj;i9<aw7<d0`Z1L8v`Q8xSt|-hvV2LYm`K*g3<v
zg(YXBo4K2Gzk~itSjvJvNwxWlFS01EFDz(N*>Cy_+vfF;B<Sb6{+~_%zycPnJw3<L
zum=gHXLu}l`buFc-nhlj-CMIpUl_lW%UCQ}ba9>k*jC$m91P8eje)^WwjN}hd<UhE
zKH^g>cl6OOadwtRYT3Vc0i$9>(r@A_Aq`6<T6TahB$-?_bc_+$W}U_gjii7$T}|KU
znV*#Tz&Y9d9pMQfPCx2!EEjk7!VAU%wy_)rxrE3$qM5y<^)+!L@w%VZ{Ny(7%YsHb
znG&zD;`y{@Zf-enU>af6SPy6_DIyGp4_Wmpll-W9OqwfMUq)-=<wzx>uE!*G3SRyG
zu{|G`a3;hc<@z?*$gzsEoTV_ss!cZ<Lt~(>TVLxlGhs)DE#s@2f_^Xhc?qkr+mS#V
zpemahpvsNU2?z}{@>sQE@}51!6w(*ZUAsfi5EftMRpt~oOk%E4{d4{2pwTsQAqf)E
zd&*|LIs0}Vx$ah>-IN1%qcu9ug|Jzj5zlvDT;Y8D8gq_<zt-oC5GTK0AM&ByjWGv8
zp02Ky8?ygTE_X9Latv@?)z(G|lo_xGdX-JDE3w6`@y-U*^bG&(ACM7?ZgIb%GB$9B
zx+il`ItF*<5~MrxU>&3U{0DoGX9$_U*eT^oh|QWNy*IQd!(N=rsA!8kmQbjWzztwW
zIcuZhgiF|^0oV;oh(&>FPU<Tk`)$9BizGEEyUi8PoyUT!o4hUb%xM{&CzGWyHw}$&
z=pVsQ3_!fUP0<4%02Com*gI<nb6y}-kQ*2LGQ_nJBpW>F%-N~?c<E*-5rQY0>N~Dt
zksHYA1T41+nY`)+O9nQit=g+1u_tIL>S<sZqcE1}hDhFbb}D0ycc?uJK6qH*Qjtdi
zMc&pfWork4UPVHWGCU5+R-U*z9%8>C>9Y{JtRd>^tIqvP?|xo<{rAS|A3}k`0|cj=
z415i$&~hMzBHB-m){nMMTR3gx3xLd6K}ye)Ij8#XO4_czCfJb^yIU;-djM#iyU<VT
z4{lQj2+vqqAG(p$1fRH4$T);m-pC~UAN5HpNgR~g&hyP7A~-v5#?D+0OYLU1L|X{d
z;&>pc?5_EjaR6}+<$?sT^&%gAf*vMb{@g4XZv#jk%uQmeiaY0Q|4j{`)Iws4+Cfk3
zFqq`%<Q*$Ji&ySk-elN2InA=rANUb+W3QTv3AwGNW1GeP)#dmH7yp<UK1{$-5q_i!
z4h7K<p%gdsEV<ofER4s>o1Z+zdJT>gd8cc&L*9z!2$tNv6cye?gu}u2H%ozqdqm%r
z2NceOm6DPXpQEvNR<^igQNJ;IEP310OKOQ}3f)f|N-HjB`U&7trJ}k4)H_$*<)pAF
zITW|@#ABZx_cbm&lf#1r9M}NUIZU@Sb0tMkYA*EMq!!x>%HzbUm~a5n=U&H#)M2&Q
z;cYct;TCRv{Tvo8FK&T~Ab;3n<Kmd5b#&>wp6G^BHmU4qD!5#~7rG7*z)5fldx<Q#
zlp9?ZVvHJ8wjC|zu1@yegIprAl6hdP-yh!GTHOkzvZ(<d;*|T?Js=l@H!FZHj|39R
zP{dPkEJ*aNp45<|K^69b6nsJBMX{yXV=g)o=+fHQ?#3}3S~Xx(ox%EjP0g_<(63b)
zpZmI*=C#J<`Z5Gh%-fEm37B}CkR%!dok_eeGg1mDR2Q!4ZeEg$8#;gsWFRD37<Lk1
zMv+rQ%nNogH*b6)o&B~bZoAU`)e9YoUj-|5gZD;Vn`eGG=_itIg`0sl^+N*;coih>
zW}4W`!RVkAo_VIj>d~Uiv#-`H7uSYPA|&xk&e$Wl+WRY#j>WaexfY&2epg{68@E6p
z54{X-spl7#$8LgQh0vwr_o^FJG}6Bp+pMn)xX;aNl8ZW9)z*B28w>X%=JcxPjaSu5
z2@zpx+gWBfp$m@@UWvj5f*fo$-2P@Y)UkUDPj2SD)_Z_)g%!`m%y{;`b9$(%uNB<;
z)RlSGt~j@NJ;uFAauzmr4tYljv~0$SV)&`aL6QW>Me4usi2^$reg#GYzoFhFxA?iQ
zYBcxNix8d`=Zc3Fri#QR7rSg0-^p0?#C1$LxY$fPU6PQ@zF^(m@8IG&?W8b-p<H#f
zCzz<VL_{xXj3JiOC1v{h23;m_Iax48QPxR>_xM0O9wilO5BQV5B!4mOy#DR~10%DG
AEdT%j

literal 0
HcmV?d00001

diff --git a/pandora_console/include/ehorus/images/Pandora RC negro.svg b/pandora_console/include/ehorus/images/Pandora RC negro.svg
new file mode 100644
index 0000000000..f70b0cd6fa
--- /dev/null
+++ b/pandora_console/include/ehorus/images/Pandora RC negro.svg	
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg width="2586px" height="500.001408px" viewBox="0 0 2586 500.001408" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+    <title>Pandora RC negro</title>
+    <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
+        <g id="Pandora-RC-negro" fill="#181818">
+            <g id="Group-3">
+                <path d="M383.135312,354.853112 C368.253912,367.5785 348.637362,378.490503 327.50345,384.159533 C303.84882,390.511663 277.275646,392.268711 251.94523,388.906025 C204.245186,382.627838 161.368307,352.529162 132.513812,324.293167 C135.802013,316.507934 136.780729,313.662855 140.153423,306.004383 C145.821522,311.895245 155.890319,319.754422 160.364948,322.842459 C191.34234,344.395336 231.811157,362.951727 285.415177,359.849605 C312.558681,358.367207 337.737713,348.948166 355.601026,334.610097 C372.922172,320.747382 387.409269,300.838876 387.081857,273.134572 C386.743884,243.817588 372.358883,219.902028 356.667755,203.880856 C351.291862,198.373798 345.4759,192.479415 339.603609,188.137854 C330.316376,181.275159 319.990579,175.954721 309.611973,170.926538 C299.046778,165.72934 288.196418,160.528621 275.606901,157.810304 C296.371154,144.613083 352.112153,128.436982 358.71672,132.204598 C362.846335,134.549675 367.299841,138.306728 370.728864,141.10251 C382.124911,150.218733 391.852214,163.060318 400.188896,174.965282 C412.123588,192.15195 422.185344,212.035809 425.864327,234.409111 C434.817107,289.666309 412.176397,330.117127 383.135312,354.853112 M50.3193389,262.986656 L50.3193389,262.919755 C75.7729749,222.828092 105.162595,186.549821 140.051327,155.736354 C164.10026,134.436998 192.444275,115.447508 223.82301,101.655216 C229.089766,99.3030966 234.194575,96.3453418 239.883797,94.5108296 C245.509649,92.6551906 251.38194,90.8136361 257.384492,88.8206727 C280.331491,81.2572711 311.903857,77.4474013 337.220191,80.2361415 C356.153753,82.4227674 375.002822,87.8664447 387.578256,97.6411201 C391.852214,100.912256 396.967585,104.493252 399.699538,108.415798 C401.290831,110.690453 403.515823,115.919341 402.255463,119.024983 C400.692336,122.792599 394.932702,123.162319 390.165866,123.070769 C373.879764,122.736261 358.987803,121.02851 343.240346,122.926403 C320.923527,125.662326 302.444117,131.926428 286.50655,138.606024 C252.842972,152.62719 223.925107,175.729368 201.125971,199.046335 C178.136726,222.490063 156.900719,252.028879 139.998519,282.356429 C121.181135,316.127651 106.986244,351.733385 95.2663059,389.120814 C68.3621998,353.990434 51.6923566,310.567776 50.3193389,262.986656 M249.952594,0 C111.890382,0 0,111.901724 0,249.979577 C0,388.075037 111.890382,500.001408 249.952594,500.001408 C388.025367,500.001408 499.919269,388.075037 499.919269,249.979577 C499.919269,111.901724 388.025367,0 249.952594,0" id="Fill-1"></path>
+            </g>
+            <path d="M659.867032,265.066592 L707.890966,265.066592 C722.624503,265.066592 733.809316,262.587712 741.438366,257.629951 C749.070936,252.675712 752.887221,243.112305 752.887221,228.946772 C752.887221,214.777718 749.070936,205.21431 741.438366,200.260071 C733.809316,195.305832 722.624503,192.82343 707.890966,192.82343 L659.867032,192.82343 L659.867032,265.066592 Z M610.265887,331.91185 L610.265887,168.087445 C610.265887,164.6649 611.452315,161.724751 613.82165,159.270519 C616.187466,156.812766 619.081364,155.583889 622.503347,155.583889 L722.888545,155.583889 C775.953919,155.583889 802.488366,180.041704 802.488366,228.946772 C802.488366,277.851839 775.953919,302.306133 722.888545,302.306133 L659.867032,302.306133 L659.867032,331.91185 C659.867032,335.334395 658.65948,338.253418 656.251418,340.661875 C653.836315,343.077375 650.921293,344.281604 647.49931,344.281604 L622.767389,344.281604 C619.345406,344.281604 616.40574,343.077375 613.951911,340.661875 C611.494561,338.253418 610.265887,335.334395 610.265887,331.91185 L610.265887,331.91185 Z" id="Fill-4"></path>
+            <path d="M876.429595,261.512708 L960.236483,261.512708 L960.236483,192.825895 L922.739018,192.825895 C914.321363,192.825895 906.973958,195.213226 900.703844,199.99493 C894.430209,204.776633 890.198498,211.202708 888.00519,219.273153 L876.429595,261.512708 Z M807.225981,332.174879 L840.248818,206.9034 C849.194556,172.780064 878.313093,155.670861 927.60795,155.586354 L998.522554,155.586354 C1001.76851,155.586354 1004.46174,156.81523 1006.61632,159.269463 C1008.76034,161.727216 1009.83763,164.579337 1009.83763,167.822304 L1009.83763,332.174879 C1009.83763,335.597424 1008.60895,338.470672 1006.15512,340.794622 C1003.69425,343.118572 1000.75811,344.280547 997.339647,344.280547 L972.600684,344.280547 C969.006194,344.280547 966.045405,343.118572 963.721836,340.794622 C961.398268,338.470672 960.236483,335.509396 960.236483,331.914315 L960.236483,298.75225 L866.691731,298.75225 L857.876253,331.914315 C856.996113,335.509396 855.024601,338.470672 851.958194,340.794622 C848.884747,343.118572 845.642313,344.280547 842.22033,344.280547 L816.301981,344.280547 C812.879998,344.280547 810.426169,343.294629 808.933452,341.322792 C807.440735,339.347435 806.719021,337.615036 806.764788,336.122074 C806.807035,334.632633 806.96194,333.315728 807.225981,332.174879 L807.225981,332.174879 Z" id="Fill-6"></path>
+            <path d="M1047.46219,331.912907 L1047.46219,168.084981 C1047.46219,164.662436 1048.64861,161.725808 1051.01795,159.268054 C1053.38377,156.813822 1056.27766,155.584945 1059.69965,155.584945 L1098.38002,155.584945 C1101.44995,155.584945 1104.6959,156.813822 1108.11788,159.268054 C1111.53635,161.725808 1114.34223,164.662436 1116.53554,168.084981 L1196.00158,290.328283 L1196.00158,167.820895 C1196.00158,164.401872 1197.20561,161.503976 1199.62071,159.137772 C1202.02878,156.768047 1204.94732,155.584945 1208.3693,155.584945 L1230.99945,155.584945 C1234.41791,155.584945 1237.33645,156.768047 1239.74804,159.137772 C1242.15962,161.503976 1243.36717,164.4899 1243.36717,168.084981 L1243.36717,331.912907 C1243.36717,335.335452 1242.15962,338.250953 1239.74804,340.662931 C1237.33645,343.07491 1234.41791,344.28266 1230.99945,344.28266 L1187.31988,344.28266 C1183.8979,344.28266 1180.3879,343.07491 1176.79341,340.662931 C1173.1954,338.250953 1170.34375,335.335452 1168.24198,331.912907 L1095.48612,219.01118 L1095.48612,331.912907 C1095.48612,335.335452 1094.27857,338.250953 1091.86699,340.662931 C1089.45541,343.07491 1086.54038,344.28266 1083.1184,344.28266 L1059.96369,344.28266 C1056.54171,344.28266 1053.60204,343.07491 1051.14821,340.662931 C1048.69086,338.250953 1047.46219,335.335452 1047.46219,331.912907" id="Fill-8"></path>
+            <path d="M1330.72595,307.04171 L1365.7203,307.04171 C1389.3186,307.04171 1405.36883,302.745923 1413.87801,294.147307 C1422.38368,285.548692 1426.63652,270.833862 1426.63652,249.999296 C1426.63652,229.16473 1422.38368,214.425252 1413.87801,205.784382 C1405.36883,197.147034 1389.3186,192.823078 1365.7203,192.823078 L1330.72595,192.823078 L1330.72595,307.04171 Z M1281.12481,332.175584 L1281.12481,168.347657 C1281.12481,164.752577 1282.35348,161.724399 1284.81083,159.270167 C1287.26466,156.812414 1290.20432,155.583537 1293.62631,155.583537 L1367.17077,155.583537 C1405.23504,155.583537 1432.93128,163.196234 1450.25594,178.414587 C1467.57709,193.636461 1476.23766,217.495683 1476.23766,249.999296 C1476.23766,282.502908 1467.57709,306.341004 1450.25594,321.517103 C1432.93128,336.693202 1405.23504,344.281251 1367.17077,344.281251 L1293.62631,344.281251 C1290.20432,344.281251 1287.26466,343.119276 1284.81083,340.795326 C1282.35348,338.471376 1281.12481,335.598128 1281.12481,332.175584 L1281.12481,332.175584 Z" id="Fill-10"></path>
+            <path d="M1641.35677,202.956558 C1632.49201,192.428359 1618.17742,187.16426 1598.39892,187.16426 C1578.62043,187.16426 1564.27767,192.428359 1555.37418,202.956558 C1546.47421,213.484756 1542.0207,229.164378 1542.0207,249.998944 C1542.0207,270.833509 1546.47421,286.495525 1555.37418,296.974428 C1564.27767,307.460373 1578.62043,312.699825 1598.39892,312.699825 C1618.17742,312.699825 1632.49201,307.460373 1641.35677,296.974428 C1650.2145,286.495525 1654.64336,270.833509 1654.64336,249.998944 C1654.64336,229.164378 1650.2145,213.484756 1641.35677,202.956558 M1677.3404,324.738591 C1659.39963,340.488635 1633.08698,348.361897 1598.39892,348.361897 C1563.70734,348.361897 1537.37356,340.488635 1519.39055,324.738591 C1501.41106,308.995589 1492.41956,284.058899 1492.41956,249.932042 C1492.41956,215.808707 1501.41106,190.896664 1519.39055,175.192395 C1537.37356,159.488125 1563.70734,151.635991 1598.39892,151.635991 C1633.08698,151.635991 1659.39963,159.488125 1677.3404,175.192395 C1695.27412,190.896664 1704.2445,215.808707 1704.2445,249.932042 C1704.2445,284.058899 1695.27412,308.995589 1677.3404,324.738591" id="Fill-12"></path>
+            <path d="M1780.81453,238.090459 L1836.86182,238.090459 C1845.89557,238.090459 1853.85556,236.29468 1860.74177,232.696078 C1867.62446,229.097476 1871.07109,223.350981 1871.07109,215.456593 C1871.07109,207.562204 1867.62446,201.815709 1860.74177,198.217108 C1853.85556,194.622027 1845.89557,192.826247 1836.86182,192.826247 L1780.81453,192.826247 L1780.81453,238.090459 Z M1927.11837,338.622433 C1927.11837,342.397091 1924.88282,344.280899 1920.40467,344.280899 L1888.8323,344.280899 C1885.49481,344.280899 1881.83343,343.076671 1877.84816,340.661171 C1873.85585,338.252713 1870.80704,335.333691 1868.70175,331.914667 L1846.33564,296.911048 C1837.12586,282.523683 1825.98682,275.330001 1812.9185,275.330001 L1780.81453,275.330001 L1780.81453,331.914667 C1780.81453,335.333691 1779.60698,338.252713 1777.19892,340.661171 C1774.78382,343.076671 1771.8688,344.280899 1768.44681,344.280899 L1743.71489,344.280899 C1740.29291,344.280899 1737.35324,343.076671 1734.89941,340.661171 C1732.44206,338.252713 1731.21339,335.333691 1731.21339,331.914667 L1731.21339,168.086741 C1731.21339,164.664196 1732.39982,161.727568 1734.76915,159.269815 C1737.13497,156.812061 1740.02887,155.583185 1743.45085,155.583185 L1851.99318,155.583185 C1872.07797,155.583185 1888.54714,160.981087 1901.39717,171.76985 C1914.24369,182.558613 1920.67223,197.122034 1920.67223,215.456593 C1920.67223,240.984834 1904.13617,256.995442 1871.07109,263.484897 C1876.33432,265.418001 1881.20325,268.731391 1885.67436,273.421545 C1890.14899,278.11522 1895.27844,284.935662 1901.06624,293.88287 L1925.01308,331.914667 C1926.41426,334.3689 1927.11837,336.608343 1927.11837,338.622433 L1927.11837,338.622433 Z" id="Fill-14"></path>
+            <path d="M2002.63716,261.512708 L2086.44405,261.512708 L2086.44405,192.825895 L2048.94659,192.825895 C2040.52893,192.825895 2033.18153,195.213226 2026.91141,199.99493 C2020.63778,204.776633 2016.40607,211.202708 2014.21276,219.273153 L2002.63716,261.512708 Z M1933.43355,332.174879 L1966.45639,206.9034 C1975.40212,172.780064 2004.52066,155.670861 2053.81552,155.586354 L2124.73012,155.586354 C2127.97608,155.586354 2130.6693,156.81523 2132.82389,159.269463 C2134.96791,161.727216 2136.0452,164.579337 2136.0452,167.822304 L2136.0452,332.174879 C2136.0452,335.597424 2134.81652,338.470672 2132.36269,340.794622 C2129.90182,343.118572 2126.96568,344.280547 2123.54722,344.280547 L2098.80825,344.280547 C2095.21376,344.280547 2092.25297,343.118572 2089.9294,340.794622 C2087.60584,338.470672 2086.44405,335.509396 2086.44405,331.914315 L2086.44405,298.75225 L1992.8993,298.75225 L1984.08382,331.914315 C1983.20368,335.509396 1981.23217,338.470672 1978.16576,340.794622 C1975.09232,343.118572 1971.84988,344.280547 1968.4279,344.280547 L1942.50955,344.280547 C1939.08757,344.280547 1936.63374,343.294629 1935.14102,341.322792 C1933.6483,339.347435 1932.92659,337.615036 1932.97236,336.122074 C1933.0146,334.632633 1933.16951,333.315728 1933.43355,332.174879 L1933.43355,332.174879 Z" id="Fill-16"></path>
+            <path d="M2223.2702,238.090459 L2279.31748,238.090459 C2288.35124,238.090459 2296.31122,236.29468 2303.19743,232.696078 C2310.08012,229.097476 2313.52675,223.350981 2313.52675,215.456593 C2313.52675,207.562204 2310.08012,201.815709 2303.19743,198.217108 C2296.31122,194.622027 2288.35124,192.826247 2279.31748,192.826247 L2223.2702,192.826247 L2223.2702,238.090459 Z M2369.57403,338.622433 C2369.57403,342.397091 2367.33848,344.280899 2362.86033,344.280899 L2331.28796,344.280899 C2327.95047,344.280899 2324.28909,343.076671 2320.30382,340.661171 C2316.31151,338.252713 2313.26271,335.333691 2311.15741,331.914667 L2288.79131,296.911048 C2279.58152,282.523683 2268.44248,275.330001 2255.37417,275.330001 L2223.2702,275.330001 L2223.2702,331.914667 C2223.2702,335.333691 2222.06264,338.252713 2219.65458,340.661171 C2217.23948,343.076671 2214.32446,344.280899 2210.90247,344.280899 L2186.17055,344.280899 C2182.74857,344.280899 2179.8089,343.076671 2177.35508,340.661171 C2174.89773,338.252713 2173.66905,335.333691 2173.66905,331.914667 L2173.66905,168.086741 C2173.66905,164.664196 2174.85548,161.727568 2177.22481,159.269815 C2179.59063,156.812061 2182.48453,155.583185 2185.90651,155.583185 L2294.44884,155.583185 C2314.53363,155.583185 2331.0028,160.981087 2343.85284,171.76985 C2356.69935,182.558613 2363.12789,197.122034 2363.12789,215.456593 C2363.12789,240.984834 2346.59183,256.995442 2313.52675,263.484897 C2318.78998,265.418001 2323.65891,268.731391 2328.13002,273.421545 C2332.60465,278.11522 2337.73411,284.935662 2343.5219,293.88287 L2367.46874,331.914667 C2368.86992,334.3689 2369.57403,336.608343 2369.57403,338.622433 L2369.57403,338.622433 Z" id="Fill-18"></path>
+            <path d="M2405.03275,322.042456 C2388.76072,306.514244 2380.62471,282.503613 2380.62471,250 C2380.62471,217.496387 2388.76072,193.461108 2405.03275,177.890642 C2421.30124,162.316654 2445.70927,154.531421 2478.24979,154.531421 L2507.59013,154.531421 C2527.49888,154.531421 2545.1052,159.707492 2560.41258,170.059634 C2575.71645,180.411776 2583.37014,194.58083 2583.37014,212.563275 C2583.37014,217.739346 2581.83518,221.443582 2578.76877,223.679503 C2575.69533,225.918946 2572.71341,227.038668 2569.81951,227.038668 L2554.16359,227.038668 C2546.09095,227.038668 2539.82084,222.211189 2535.34973,212.563275 C2528.85782,198.70056 2518.06731,191.770963 2502.98172,191.770963 L2479.56648,191.770963 C2460.35832,191.770963 2447.33225,195.894214 2440.48829,204.140716 C2433.64784,212.387218 2430.22586,227.651345 2430.22586,249.933098 C2430.22586,272.218372 2433.64784,287.500106 2440.48829,295.792383 C2447.33225,304.081138 2460.35832,308.225516 2479.56648,308.225516 L2505.74535,308.225516 C2520.83447,308.225516 2531.57569,301.295919 2537.98311,287.436725 C2542.45422,277.697261 2548.7701,272.827529 2556.92723,272.827529 L2572.58315,272.827529 C2576.70573,272.827529 2579.96928,274.362745 2582.38439,277.436697 C2584.79597,280.507128 2586,283.838123 2586,287.436725 C2586,305.41917 2578.37095,319.563576 2563.10933,329.873464 C2547.84771,340.179831 2530.259,345.334776 2510.35024,345.334776 L2478.24979,345.334776 C2445.70927,345.334776 2421.30124,337.570669 2405.03275,322.042456" id="Fill-20"></path>
+        </g>
+    </g>
+</svg>
\ No newline at end of file
diff --git a/pandora_console/include/ehorus/images/Pandora RC negro@2x.png b/pandora_console/include/ehorus/images/Pandora RC negro@2x.png
new file mode 100644
index 0000000000000000000000000000000000000000..d8e182f6414e3584c5ffab8ebc275011e42ea44f
GIT binary patch
literal 297215
zcmZsD1z1#F+b#@9NlG`UNJ%$HiPGKO%?wBkNSA;}DV+kMbjQ#`DUEcFlyr9ub;j>|
z$MgQ@{9M<*W|+O=iM5`+*K^-%MXIaH;o(r>prD}ODagOlL_s0pM?pc`#KJ&9LA`us
zc#F7!ZYQlGje=4Y_wdHz0pfq4jlP1diV6xF;yV@!Iw}>)pI=cCmjo*H-|w=hEGTII
z`5l0Q65)V?{!bZI#OI&CkBI9}o&SCUasbE@B>XvO$nR*Ie~Qi!xa=W5u;0iVxTBzu
zG5xtv6*Qk7qM%5jD7=!^ev7)B^{|Cj&*UJ(T{XQ{1)BnEb#=5BkDp)t6U*aAg}qAe
zKG>74F&a0htA8qZK!Tmqt7VGQ@q6XCg-ZQ%N{TVy0q6VIEO@o)V=q+WHK}s=RZc|v
zZp+S<dF`^(W^1NO>uiU1T_my-S})S;?&1y%Yt|+24fyyD5{cmTz}afNll7tNtd*WP
zN$tP{x7)&igUQ97I9joDf@!nBTQ6BG%<`8g0Ky;?bOw}Q5%l#T)~z?eA#Gmlo4%S@
z<RnrOP6rFE883TfpCJmMVo4#&%7;l6gmyL0?>YCt(2JC<3a;w<@aO;A1S-~7g&eJp
zq2slIKqns`c(&#%R+wt*?+@&;U+t*{rT=!-gf2=%1Ic16eaKfLC(HAsgBjVr$&-)3
zH#2oXm4z#Hsz;7xS}k^?g8j(OgQPy7$3MisCL|#P^Ur>N%$A63^CMNTbx0Q!BP^6w
z^`o%-yT!i}y~;UTdZQiE8LXPE`%#!jy<6=+di>FOL^QYx@_d93``+&rnoOwQuS=-w
zO83-d{p7)B*dLo9RAvAH%B=C_gjt@`;2Aq|et*e`6qSSUJrxZb%MHY@Mekw2vkJGn
zo2vn@y}3GOZy6p!q*YCc-;>eAbCe3j_CB6kdBuV3yp!<#BbrAPb6`5uFSJ~aGXL0S
zDNbr+NnI!lC?0Tgd385PORHdIW#u(nV>cX=x5D!o>8_7}VDk>f*_T}NzERchqgv!&
zVj<-sER<%De<N?MAKLPol#|b>{R<oNRt(l#0(@*->N7b9E5LV6e&ByRkI=IH32H?L
zV{mTIXI8@3LHa0RkCAe=JUS#p$mz3}qG^Ht{+s>GKjR=M2oqo$(nW-WYgV$f`$Ol~
zkKY<|cag=SD)mGRf=u$h$Oihc`0??tDJa6RpnmQ+7FM$ixim=Qj53a}2%pj()`p3D
z=B$OnTD(v4&-dq>t2u1{Iv^(-{h9H6x_5h>)5#R<2R_ybzFkuWdZbUoCC)9YY^K)>
zu8aeux21BhQ8xxH658`4J5=Uur45KF8RrBo(u&m>g&B#F-5#Q6hIBpaP=1@T?zs69
zW%8W^`Ar6lJ@L=@{$r7kk5PA)DisKcsimevo>kpOQe<s)7CAwiF6F6_YIPD*)M(@`
zttn=}L6ZW(n&hEOvwjhf)Lim^dO^ja0O+Q5P1J;&;9^CE=dy1=FU`Kc<3%>`o3N0U
zrU~OY&#z4*^@(@jMg8v-lAB0}EIkc2Oi5y9W;XM#RuEl0rAXNz#{D)<uMha|Gz^lu
zz@F%*5$v-Ldzt8{o(d?@o_$C4uopRO+v$UIJ1lTIR2NKINv)qJVM^{uFL8~A7Mf+%
zbA=uJJ~4Im(Zqq6qalaJ{Ns_LCGN23RGZ2h*V!8izNgP&0(7rgD;;;y0m%9HUNwhT
zIGT1u`|Z8p1F_+v89I-IDP!p7OqEpyb-uN}lxN2S@=Vt*JfU6sXFb#B7U!2^p)^R1
z;W7+YOO-<?1*&g$EzM{fCBjpqKoX~q(U5-Gf5d`^Z}os%XLAn6Is9tBtK34gxIrJ-
z{2IbpU8tsmY)Ce<{Z;YZHC8*&zXWH-4`#KhvsF{q`t^>IX^jLqlTd<R0>aX|u%wl8
zdGg-?fxA_{=et+(4q+(N#W!cPB>3rO-+U{}2V9O?D&F1|C>hQDaepsXseaY({qgbf
zgE3+%y2PY4$+N_FF7{CGImEbZOXJ!QL&ObnfWm`_T(qh$`>YRtTFz<O%6w|&wBhkD
zs^+TAe%%Cahm(s>Z3umUeACbGd2$<x4-KU26ijht@P$72rBk1#Bc}!1*qwQV&d_gS
zRMp$GVM>~SutX#T@Fj&MB<==_ii+s*=Q8FFVyJ~;L36bZa|I>^S)OzA<<0v|2iJ)r
zEJ{{q7%`L0xXC@2WjUAFqS%3fxF#xK`+E_!>tPtv2BV4%9%Nd0@$1#OLFignK*X<$
zVvm7^`D(A%I$1L?zlDZvQF5y61Z?~a;pH)J0nC*Ro0JRM!rq1Sa}ohsL$VCeCuzo8
z_A#N-QqVJYz4DgnPfz5a;)AM-Fwl+jn4O>x(66?ts2nf8(MV8vZf3cr91tbMR{1tp
zEe%pl!d<G<erN*o<U9jQ1;pd`9)KN;rn+s76Z;NLOucTdrZQ5d$x@o2^#TOzlz0Kt
z3cs?FZWn~~>9*@t9VH4A(pj*hn{F-rvWRIQJgGq3^HFI|iExPP)$v-}S0%yw>4?DB
zyf0y9U-{VGm$T~dZi~<+Prx}oTK3{;HzfKKln>J@p(WT(Alv!@J6dsw8|ZR!(&fqc
zlxYeayyy8zd`1?!SXw>hY<RNl<ajI8I};HX%3BiPv?yNa?<K91H3Hj)XSywJ%^af9
zQYVL7PUatg;RR<)m9d|oqH<ZT3D)zukuUI47e|7wQl9bl&xO-G=Mf=*laEzMo0PZ7
zoG3&})0+9u8p-L+OVrdAl{*_Xg7-j%73H^_K2xOzHRktsx0oh#820XxS8%XiW6}9y
zkYvx=%8XRnbT+GNVRJMCQ^tU3*F`{T{ICvmh^mwqE;N7=#!|sMSPxCZcOapl%J7gq
zXMCa*SaAfhQl^7~4w_z!7l^JvC+q3?tkxP_8hdvngVn8idR17s`Dw2Xy7NC@*pC!w
zMWeJ$g-2MFSasQDP%((eY3>xT`Px2+a0_tPLIJ~iaNiZ9Ow`rqEPRtKpW1#=W}e}$
z!NM6#A$*-?Df8g&p}*TPEBk9xFfc@#R&f&S$9u|JGUs?*#tO4NP;q^@D51D;1+^hF
zl9>A@D)^#S;n+MsF5b^0r%DAXZc!P58QRscCmj%h6Z9b(uXV+q=%V@M4$E;=^&9kw
z?E8u$kM8dZA(lsr%z;NkVL_B?>ztqzh(QKtbRXwT>XFCo=~|w5?ML9uwj<`=E>`Ml
zhk;!d7-CYQrFt~E2=M`J57b|5LnD~31V=-=^n;gY?Xvx+Q?o2RuExltGy)h7{mFu_
zhv7C?UDLvq+8J(V0<6^2q_DviU;bdRm?6%XKF--~QP0Gpt9MSY()rOmxqJ5OpLR5W
z2z*-j=a_uX7@K)QU#o?B;tmU3X3GcSb4Lr{ow9n<Y%l&PuddM-%%w$8!qP<VhT0;N
zys-sv;K+>cWFdF;(RflpOsqy>3HC415{~l-|Ef_due<g^mDhpmw&G?!a0%1IB5!SC
zUH^^ocPg6@@a)dp>n|ga%jE0}jyZut!VXm;3fjzq+7%A2IkJ+$7gD;OG-D=153ROJ
z^W@Sn-HC^sb|${XQlrMSN`jqc?{(*x?_OSi&puroucS-I{^cf-wfOx@Q<LrI-*0|n
zQ(U2`5a0TPN^UI*Qp>8()b=F4dUr!8&z=yE9G!zdYdcQ~UxBjxbUd3vG%AMKVjj_`
zDl2F1V{3k+P>~gKDsb3KGx1)r?g2z7yx{sx!p9o-8{O!_od2P22SH73jsnIk<bLpy
zojcF-Q`DlUdW)ge9#dUXt-gjQRC`;Do~G$ki>?{In`L<v?U%Oa6;qdC-SgXGFMW_+
z<#uqcdCq*!hBy4mp?N;Vc=i&wbw_P<n-A@7SM2eOb9YFob3K}`BjC$|N|*q-#^=8?
z?{#Hsx1X~!T63AUT;fj~yAPFGMFP5bb(s6l7;a0>R$jf<yH^(LYCKvSCQeQYoXyvh
z^$vX1n<FY>&H03xh+-Y&zL(R23vDLiuGrxX{k8Fq_xq!QqXOFd8X^$Q@0T+}y95Q9
zUqbu&#G?ng<JO9|9kN$O3rg8CU^CAa7o2a#+gMyC?5nN&W@a~_m3#NkUXaX4j_EE|
z!fkOWGceG)EcW^#LVG)~5SiB<_a(~G<8GAp`-M1gwevuAoP8>71+--q{P!wi4Z*Xm
zj_GW2t;Jh*B+p;8=v77t*EmiVyN7F2rVZH|JJK#v8`Dg+95)twmY=A;_y3`jUqYZ`
z{1P}W;kQBPhH29TJ()|o&$*MhJ0Fs@Ixj>k2qfSMPrvjudQ-@9*@yoV7c}<0GPl!?
zZPW8kpn4JZa<j<?wDXO(uMfYZxeR!#+z1_bTMBal@8BJeioIwP(Vx0lj3A(gLJlP6
zE(->vZI_z{0<H+D#lhQ6yHCKY>7tA_({+s2;^g=IE;lmr8PP!U=9jR<bib^e+j6;#
zZjen;T)+ZEWgcFB8))=KUoTQcTrU*pk=oRh)y6lhKK|;^9defjR}`XmbI==G-;H<s
z@Pzn%UEC|rl4Q|o^QPoOeBCj9;rdWpD>rw5ngb^QTLpU)eGg5=rU9aMCQSHLIC>3;
zNx*%-&l{BJth!xpM^0~#hKi+4{3cDP?&~`7YfYWIyf4SayyUk!#~&b#o1057%vOC?
zcwL1p*}sR?m*H<`Kh2Twx#~09@^h!eTnLpZ%k@#leQJ`$-Q?&MEfMpz>zBz4TrwrA
z4xGo1tL}N7Mw;<ZsEUikvWjgYK3$GfK>dm~s-IOUD(F0en&bJ0V-KQ-zJ;PG?cI&9
z9TM$JTVdUg4mxtD)ct>Tqog#MNEU9E-sMCs);g$4NzaO<E2VMd?yR^%gq+(F=kJVC
zk}KVFWiz0JBLVIy(91C!NyE&D1+u7&?zw}so>koO6eiA=&ym(IBUoLkTYsnmEze6K
zq9tbBB{|&$T@V83^qV9$TBddi(1I(7$GG9mvcphW1#>P3{f@zgDSO@3>>JOE@MIpW
z!nn`GGHUr&>pUWL-C^~EjA%SvW(RzAkzYSgP8>^1ZQagGtUhJ4iYqhOeF*t}Grb7)
z7t`aTGRG4Sml<$b@+rvJW?Pu#1PVk*R*c6^a|bBD5u7L#D(#oVFIlo`R$_*aL`B~b
za=WM;Z4IRhIF;74D;`uFI>;zid&D>V`ayRNB6qBHNC=9}5*us)(>5z5KNqP{xt25V
znsRCS;Pv?-=FqZ>r^EC&LE;ZVfpS4qv!!UATGZHuqcdR4QpTn_w&Sh$GXg#b4o=-(
z+O7%HTcnLGf%gHtoM`5QI`1U*E6|*eYr4?=qKET)hRTfU_X)z(d%zjgCNI;LP0Hf}
zoE#IqU8S`sP3$G}Q)DDdBXifKM!x!IL8u687WniFROGhbnw-oMW%CdN!q7ESFCXG5
zwWw1*Kd3lX99ml&NRbp3$Vi_dhBx%ZaH{weH0>3(G?**fQ6x;V^w)D5*0M~UT#zLh
zb&z3sL<EuDWzW+(&2xaoFNqlD`1CM#GW|-D*!4t*x4cDI{pnA6m|#Fq)x6LQGY~tX
z#0BQH{2ZIhTUjjYEL4E61_FYupA6Ba%@}0+FY<Uy-NzW<pFE*JO{w~-gvCC9tGOs%
z4>U4pB)fCrf=$&QYoyD=cEz%mhSR&^HqA25-;I>98@C=t`ak}@iN!U33M)Lz>Z92Q
zOH-pI4s`tbks=6V5vGqkdkEqcY%=MI=VVk)nk|R=YRwAv&to^7CpCBftZ#XC5WK!l
zzZ!V4+`Qo5Ts9E!9hdX__Gc5@r1-rLaSQZMrWE=%2FcuI`g_11jWS3lZjAM6=q4FP
z*n<1|`pmSZmb=QRcsl!szHdL;EgBN6GvVvpbZjm^voR|*Y0M)%+lLK%4tYFqaI(25
zZJ(dQG|8IDS*g+C+iICBMorovq?ioiCa`>Ye|L1a+{HCWj(^ShW|302V9PTFO;IbW
z_CNx)M%XN2i<wW2gu>RWOj4k+ZLDeZBL=jmZZFvCy|=WW7{>bz3?7VJLM)}F!tUmJ
zW_9~}2>y-#Fpq`nw<lRaZ#>PEcYigymtc(VjwJ{7eU@~ZMW3jb&*@uT=hGjfe7mJI
zVY3og|K9$oc7|*FJMl**^N6L}V1v%s+9~2)-spN&f6>1$R%}qD{^C^s3+>&9S9_hM
zql||oGRAB18-!9<L*>Nf$q%^6SEVuFoIl$r<WJ>4i2IywqMH1ek%<54^=s?7{B8qv
z%#hl?h_8q8io|Qg`WwggE)J9DeJ_!^;982u$c<mQ{iYtrLvB4HMZN}^2Ogy_jZU(K
z0~HEGBx|NT<cuWNBVJ}DkUkhBAWj)xh0Xd+>qOT)T@h&l9O-6w8kjst$?!MD?pyV|
zs!?sDyyx#8^m)8-1njmqF;RJ|I9&g2V?o7w22xgYPr0ZyL^B6h^2d7ngwRU!&=weh
zzQqe8BX{3Xw&iqlKnrFA;A~4ct%p222@V;k*WN0e%WppvDuL9LWd^~4gQpo&G1(fX
zB|b`Dy*ErJbuZ@)r<t=-UyQN}8@Kv^KSr2M3;g2Z{3?xD2#aC@y0;WeA&c9G9Pve%
zV(y`es1&p}pS9G1AMP5zwz&WB`O>`%iSeYZ?{;2~I`>gSy$eqDFStDl-t#spo3*9c
z{=O=%+OgabifLePG*7TlUv60Up$F5uK-9=QLBSgGGysqB@ID-vU1Kl|-amEUUl-O^
zH|O)V8v-Bt8l8*Z7ggQBt`@=2=FN&HLS{X$Bj_e;7`XDv4pi1L$=hJZHE})}r&)Le
zdvRuvBA4yYUJKrKbC5`lMOI;43koqc0UdGY&EjpUGsyPyn<r<Ev8o(=uHVyN$VNCe
z7FgZ}9hc=bG9_KPtaQip(GY9WV5_WSx6=D4m}F~G5`g#iUW!jcAI_5t&3lZiy*zP0
zT82bQ6^%&Zf{c^=zHw)f$LjX&bqY?S?rdlL?4;kBgShPBUeDZIcaKccH)KEE;B_6Y
zg<gJ5>~t9q`$ig;Aqc8=)?##?%Et)!89$Cl2UdxRi~C!_AaP9rKSaqJxhrX!>FXyg
zSQiyrc6i%i`?|VprxiBF%WK%|>@@67M|q7k?*j?36wNzA9wdl)?!NIcv9?VeP~G+6
z?(@*~cU<(YQ!O{u)QJFXJ$gf_mL^1{M?VN9_jkMo4gX@F)77yB9*f(W+@6Buk`@JF
zB-W*4L(jxObE!>?GgOUDk3H0x?+Vfm81EX-&9IEpd$mhXc&^4?eIJ2P)x^0jlR5$$
zIMI~%H3Vh)E($|DHw|6VT`BENx)Zlia|e{QYUfW+3S&Uy1fTr^G<qcj1Wn!gm{ytw
ze_ei`PiSMDuS+gtuu8e9b|x>D?rrBz90K)$v%Cg{@%@3kq9o)rnt_7Qt@^$IyBiOD
z{G_TGCQMzyy`>hk@~o+eaL8N~y--^11Ic*Pz0DV~UqZm-7gsl#I?IM5D!<ReMRC#(
z1yWMic37zefvGbs-Zf`y>-m|{dtg6cNi4fj*SG%q{9kjwN10mFQ@pl646q@>;zepZ
zXcJGf+^TElNi!Kqbg)(R)h+xwAZ@7MdeH=y$(cdkhY)40{lnv6m4S3AP_dY;ue-sQ
zSP8sG*-<(NdUDL*57?RRKSiPlXoS^Us=jIy_eCfQYT%+W19XC4N476&HlE~xINNTH
z^U@<!-%p`#&r?med3}*GtG%r_JG#EA4qud<uJlh_w>+YxeMs+IGDven3m?_RJ5$24
zzxiwf&#`uQsDi^M#$wQ@U-a-=jorSw#j`)U=c7(x-d7&LxhY{wNj=DHxx2YIo|<2<
z<W!nCZHIyOf5XqxMT>N$q=J{@9)4hTls6|izX*S?%I{_IO)x_Z>+tY3W+8J%qu4!j
zl>}Osmi38@cq*0gyO3x(bUj|<j%>V&mod@+&g=M3pW=)#Y|ghXBA2)Y3Y2>qJxv{<
zxN}<56&jT9Lj5kqebBe}iSy*vzxJq52srqTg$OS;S(h;WcC4tlGJ%_s7TAr%6X{o3
z{s^1BC{~-U(qQ6Sg|xKBAku-M&CalvD#qOJ@$*7~maaQr=-^FJt;zXA65a6xl(}0T
z9kSWD9yBy9FX-=@a@8<JIS0Tkvn@{+bmV}wp`Jf+@X0xiDRy-)En*#+MKpDLD9QwU
zb_O6`-~0#zlIFpo8*G$UAi<`Sy~_YGRE}2xtj{|inMaeIob}nrCZ7#4{YbvzINK^P
z8wgi&GQXC@Pf?Beh;DrSbDaX@kt$adcA6Kt`xv7pq-zgWPY?W(;|zOLm^8dPM%C&<
zBBHKm2Rj1-$+IhJL0oV<;t|o3wp5e&ZZ3}Z7v5c(JE}2paY6xrmpiI&dD{mm1y5v6
z>f%L+UOJoHhMv8=5-DUpb<xXb>gh6EFE?rS3@H2XiG3@0v8;_ita?CZGR<zcDfUxt
zCoQ}7o^MTv4EdD`hUX`!#c^>aYkbPfw637bFp}MF3@?DF(u<x}@NKfFgOAGX+?f;G
zrk}y>+@0h8LaT3ocJ02x7-_uR_w<!$x-GFh4n<;OV#xz;A+ogQw!+F%Wr@XaK%;Rt
zcV;gwO2It@gyA-kA5hvP=CyyL@!Uk>v>~?3;z;omsOtRS@w`ErYA3zu;D$)YawSIE
z;m2%nPyxzY3N*f>x#QB6Ywp%i7zjiGTs*Ch2~a85sGf#M^p&fCVTJoKqDn30&bO&&
z+vj2Xoi`^<o(`G!((_H=ZA$913XOc-;GWx^O<pj+#+~PU6XP~zV2$L1>ul`YJmvgT
z+Fp;8$s?1`TN&x;a4-65rs3^K{9}<Br`^FP0nvdHH&oA_B-2^Rv6u+D$(SW)RWZ$_
ztL1TBQ%_ApA$D+&M-rzR8eyR`Oj2p6ViTCuvtS#lZ-Q<SR9m?rF?(rE>Jkkz@w2NZ
z<1KGZ3AUdP%Ck~5=q7kNRlF(P*;rj&rS^#QZYhL@L=#+!E|K=p>pp`C_CtQWKJysy
zG1c(S;w`K9b604sP};v%gm|-;k4VZz046K!f4lqSXP>@M1<>=$70Lv|mp^u&(#@U-
z%%13A5|s&#8he!C9>(92VRE_n6{5ZJzs#@pQ8^FhP3!8fQ-jJ|<+_#4=9nBW+c8~W
z+f-xjq)a~4C~x*i*@-`TsAPTc5oF{3S|I@z#dHx6e=YVpi9Z0EW7QQA1qpjzLZ!s#
zQ<2<ufNK+a-XR{}I;aC}*h}=c6RGENWMP2`<dnUe!jqx_<isg>?iB<KoOAVhauNFx
zWmwpNMR5CFmv~ve9M+eJhjp^NLqV7Q9E5G^v4luXY?h4`G{S3@vgyZAZw8(aV4@Ii
zVh48)<{k|(>NhF|_qLWa$mbi-YovmU9PJ>D=ptiY-_mvG_?2C<_EZ+7x7(Xy4eBRd
zmvxPVNg4lvHa2NdvpbeYP|6($C-_H3DG$67by^DIOo5I{wlZ4J(lX<Rr~7}BrvURP
z{^t4z8P%z1($gWqQJfsw<s4N>LOpY70JGrP9KSMx#)|&^@&TrGrfIz`pIa}?olAI`
z)R_W~cId(^*@px!jNV`*+9VDjmQc~GtjSUST+u$#D^yL=B5u}UwDo(1SFE_d&UT%8
z&iO9nj_-WOOr7>Ou|KMddITXp5)&W+B&Eq%1uLoRC04n8(u$D!R4%$VSC|J}_IVI?
zPbA}&((rvL7$2EO-zGXt7bz_mb18eisVq+M;S<MTZ+HNmc7DWPj0`SkZofX#komw|
zaDO9IAmv=J=@@)=2pc~uZ8SQu0R_Zu`L5f2_SfzH3*iwK%H-(2X>guz(z@7#c@@UC
z`(-_scX%Sj>uC)?5&UskKG0LYd3?0R<AJwrKd>P!c8P~nKnQ!Hsk8;WGu4H2D7s-G
z!GcH2zXlG2&VF^L4emgqJRadvWrG&$DiSFD{Y~(qW^ekU<}ArQ%QoK715K1m{uBr!
z>>YlP%v>xGsp=SmIVsJyNYKU>QIKANg{bZ-HX+5j!yzrwgL;7V*3`QDEs>z<iE`y1
zspy>&{5<*0n<4*rCP(KFnlm^iVPg8zZ~K_ppo{Z@4)PD!F!p$fgocV7i*S5X9?-=P
zM`iy9G4W?K2OEeSoE8;)_Hn)wT3jJ!;Eo=qiTST4!BFBi`1oG?zplhPMCQDtu&?Vm
zEnwVuNIWF=(Hm%K=GDO3TJ)<HHSzF`Ai6Gh*%vYPNTJNN|A1?FEP(F~U10-#uHJe7
z)a6!0Z$Xd1pg^_Ew2(2Uh~P8)N1!~#cB41;D32JzX=TyFEv_CT4G@e-o>I|J<)FW}
z2qz7;peUC|LP_R=s2j~mc2Oc%Q4H%(AJQ*+ob*Yj!WklQk;dI7Jfx$c`o`BWcqfXX
zUXa=T{rh*do$}T3ey7R@NCRVCGA-R!yDhXJmVM(04BAr(8hvnv^^v2rC(;n<*-Iuu
ze&Io78(K@*FAL1U7UHTCNL||{gIPLqc`{I{OgD%q{vRlnjE3rD8ktn@Y8V3*p@+@y
zOO{6b*L$a7QWHzup|WH=Ph78=gO`DHH^^pl!~tdK5oyhNbWb0V*ggsVJMuLd30E})
z!C8DApYCqu=HdQD%-O@t+`CFHzcK#{n&p_G8xGN|YsAWv9Xa9P9Asbo3y5T30`#Fr
zP$o)XMD~+F)d*?=EZ3i8BlVPG&;j&4h@dRA8AujizC2nv7z*$@(n4KM1$3>L)Y4`k
zV-bZ4pbsPBYJbyE@YC75tA!N={Pf>2W%76g@fJkDKPmMoh<j1V?;lmAa!Sxe$!XT5
zcg9Y9J+>N?>iiG@a$B?A@MnV6z2(2v2{%Q9RWT!8A0`>R$akv<aF}13G?aWh{Mi35
zrj8OUL3Bv<>KndnTDPQT{?X%EZ|Gez+a@e;aZ#P@(5fE*Wd~nZ5&ZS=yQd>1?cA$|
zucnB@X~KKMkwNVNAPWyS=@#}CxX1?!DSW>2B+=$Z*$6)R@Sk~)g6>DWsclZd`(%dX
zIpvRhbO!=tM1Y~k6X0s$V?>Fn?T~qG+9plDhOvbH(=rNxl~`Vod)H7(f1=NtD5_8$
z16i*aJst;_6!$J)3ZzP!Tw;R$zI@dl6M0t|pnx8pkdP23;<-B`XC=B2&I$M~SeW-0
zB5p!AB*49X)7QYcTS|v&DI4;C$Hn6jLv!H|sLSR(#0>b4mW7ZG0X=$8N5RJM>q$gP
z-Ij-96PWyDc#CuWUcT=c5E<Xi`LSQ&;r2aBCg81(SOd=dMRREYRy-4%987J}>iQ~F
z5|e&2I7nIF0y_A@(O;Zr$)AsWrsP0kvG%GA_U7{Hn+wwD5&OIL*#8s{q7F6>W|Yn~
zidZ!wqWM>Z3m!plso*hg3%K<Qc_}%MAty=m>2LSq08_s3roL6_o;dpZm*SHX#Y#bg
z7ABe#NJ}Gdbr(t*oB9Ps^_j2i{jhkE=XPCW$N+FdbQsSw(Hxsy?nP_1KK%SCDG`Ia
z{;RORV7DKUJq<<qR9h$}f$7FTj`rFn9+PAuh+x7<5o%<U$5{|4oi>iCGwDzrvs8&K
zK8K_^sK3r}HJ_;;$izWeEL}SA))@iTv*y8_`U?YQASMR>Azi$@iAcnE<egMrdnL2<
zvg-rGg(*Y)9oz?z7dju`{;2fnf)LZ-Kl$#76c~stj2Ui%kCR0D>s#p(n~^?rN61G0
z&1SRQ$A88M1qh%TY%v~`&#}sip{Zh!zo}((8)b@YAf2cZA2$PocW4mo*lN}>o~Fw2
zM9^(b6oKAu&Nq7nKK@cv_&3B9pnoYViyCr4fY8{_GN!_EMk-y0ZdBCN0$&IkogyhL
zBWeI$N}1_WU1bl%M7*n%>;GQcqnpBRHQhcoC9(ZiOEW+nUwApH(sK_StZb){JWk9o
z75$<>d?5!lBcyl?+@qN2{{6|6W;CIPSN@wyen?^gBHq<;GKpcZb+m44Nu_o;_BX{T
z^9uSQEl!x+KGI(4kn^bXhDj+ovk~zuzGbu)`cyQ%-1@4b%NI;csRG-MhdY|6E{<yB
z@BIx_;()B?L?EvvT<J>zMyTzBure4EHDus@E^6RTxaHpo+ecK`a%IhZ=r9idrj){|
zxXfE*5r2!fl52-s&M&xg^0R9j{)_Y4`Iwc!02wW#F@pOCHQ9nKV5k-<_%Q2@`I2xI
z6%n1sjxJ6a1|XRtEaY6_MOWkt=Lt<^qXIn;F43zX3xU;y+MJvGS^alI)7tuTMta|G
zDY4z^b;r6PjWzZ}J)H+AR;gcWKiUa`L1;h3C<}dTk=Z%rWF2pQd-Pijfg}kCrGP55
zIB5yuW4R`ZU|&@SrD`LyYLO2~20TC*LOy8=YSjPGpA0Kfu5AtKFCh+yO!vd{gT=r~
z<?Mpvxc+^!lcx`PkeZ!lO1TB+9-x$}-X}fi^jSO(7xz8)D~iQU5&es~?~Os6GX&pG
z)y4P_21$8g*?;y6F7=lQ`#~+R*z(0vECa#a!Y526rr74)xb{dp@q$%~dlG695#Ch+
zI;VTg85V>-T*Rw4S@Ln5$OK4e1_V?CeRGcUe9Bj>PK|ri9>gE$>>}0`!|z97rx#JC
z50p|>-7>p9W+gPOv-R7QOYd9kGlr|#GOW8|s+Tz-@TVtibq02@a@*Ss>**-#X&Zr^
zdP9}#Z4Ro?f@}WA-7mBSIQ`(fEK2^@DrbAcxXA@@qs;IJmp}8HPu(+kBG!M9@95tf
z+C`x8Yv140d^i22UE95O&Ci*=`Pfd?d}iwB8gGs<&Cj`sBfex6FtBge^D25xE)A4>
z%RX+TTi&<ySOtTg9Y&Ye!to5;6B05pO^--Hg>gRL-hT7RBqbvT4{XykV^k0mQwCmb
zoQUjeuW!S7?ySz><j=d*S>#N;C^0peQBkm_p;Y@~yW7to`alrcL*oVZudiw=A1wB%
zqL{f%dSz~J^@emw6lN^OSQ}IBIe8>fyVnK8+JbS<cR_lr695rScY<|w<)1BX6BeDF
zv}mb;HtT!XNB)0_VDEMxr-9&R1%V%cbkCi}BczQm0@<C2nW8>VX8__v{Yw&tB`5ke
zj7}g0r>(IB<>!!DIjV&FeC6L=#lUP*3W)ixXNP2Szf?BN?{fM_$5{7j;#r30ol@ON
z+q3JeZ9DSo$uJueNv&UcKv3~YNtrVFdMqe*;BKrZQl$UI=yRsFozrpbu7}XCt4hJ%
z^`ru4Rm#rL7fkrz8<oC=7d;&ZU_VNr*13_yy*`XA1r%psx~5kdX_p#`qYHiB^#whQ
z-1P18y9#Oh)ysH+UU_9xQT_Fmdd`}b{)kM80j$Y_+*Qw9F4<Wxf?K}fL!&y!qziCd
z(OFcL9U_%kMjQ3wbW)wDyT^T4+-qy(13qc=?gV_IBgQ)8(o*aRb7am)dpVU**={sW
z5VTx-9nC5lT_o^yyQD(mw~-#Hww{UQaY{MJVLG#YFcxO~@u~g%cs4w7;|I$-kJ$F*
zu84|bfmr@$_uo^VFER*$=J+|TA@Jmk_!cAQ#<lCF5Vuci8Jc@)*%J8-C9E6ydosK%
z)qAhZ^=o-P@_Yz9U*P(<YhY>TN0qI!c@;6boM58kQy;ly_`c<f!nKCOP97K2%5d-4
zf`p~tAx%=1-kP0OtmC~~Oy81MwB8jrFk@HDtYcZAYa8s{oIL6GJ>^!V=N*@r?CV%|
zmuXL)M*O+AkGZ35-T|`vD4H;6@yf<G$7h!e>3tG4{A&nAyeXT+KzfK(!2tGK3b6{7
z6bT=r7l$<B_7CWURvW6MtleJY;2*di{UFB_Pji87h2Or-xRS809m<V@gBoE|E(r<?
zQ-#46g}@nx!Isca*vq@A*(ERkO<mbDZ^pe>p27eLxMU_+eqR(d<!EgzKRO|;Yv68T
zUEe?~<9L9p?WR!WmU9X;#_Yq>*=Ta=Jpptc>jBk#Afq@JXBqVR8iz_0rMKV=&3?Kx
z7SV)D1}BYR#@n3{BL7V5&Xe9qWk<cu=G1R8eB<{@g0OU~#An4|{^;mPOmC7FQdTtI
zwd&>FypUX1HgN7We=cfOqe}Y_Kd%40q*%?w0eF)P8QjOVGCuF>R4*y+rYymTO_I5`
zuu86CN?ru-jeXn4-0b*iR%Fyx<^yf`K}XPp3&}yP$vgIig05#I=H^l=vVTi_s;}6;
z$X}^($acu|*MMMTYh_$E`d;k&cgtS+lt~O14G7A%J`2E`o37=;T*JFAO9)ZfzPFfE
ztZ%+_o+>D)Ch7Ze_n1PIY{5Y9GC;kyY>!uu9{la-JGRxhE9DET&F!zC4gLofB^9c-
z`GQxr1+>cp;N5*C+O7(0nT)&fS0@yD&U~JRm|^8``)ST#pfMZuMMQbBJrKVY=)@Or
z;;F2x{M?~>an(lQXJdJ_@!s$b!L9g?61h0%9V?4peiWxoLcs1E0ViD3B@ewXhVMnd
zKz$kKts~H$HyOj9yE>WEq{+Ur<>$d<iQXcQy*Y&wLzCw#T6vY7uRtTM#ip@^Xqnq)
zfv>GNO_JM>C8s2QTN=F=+$CTx+Fm-H#)C`BcdK9b$>rzg2fQ6qlw9<1xMB==`i=FQ
zv?PX?yg&SzO~O8ju?8k-;iBNcZVD{D{8jrm2&i~Ff<jWy)O(F%+jr-h6rb+JWuAGk
z1(sY?yXUgh`1futHSsgk*8y6#a#F-ATb>-9)3J4N?=HTp$|T%&sA>s0Mo?giz7e1Q
z;k(Bi2X+uDjp5`74A9T|vPZ?Py7$2v+^U@Nscq+XDE#z_b5HhL%z2yM9K86I)H1AP
zaDX3Z6E=g$EKgjhstIF1qF_^uaod9`VN&QBA=b;YI}uP@G~w=oYBGZNxtO$sl}t-+
zZwk}3JeHcChvNx~8v7;QJOp{v8cdJ2%{|-Utv*{Bc?r{oT@n>h{I;P|8EuRX=E*XE
z78d>PIRBs-+5%^;C~(vqoL1WMB?qZSnrRs&)?Egw*pSqDZRsJfet9pw0pnEgq~7kI
zRgL;9DFyz5Xwy&6vu&(IYy7g*f_d=YDi*c%6b$j$Yz4g~H}aQA+kVx)!=488-!k-{
z|8$X9KKqN*w~p&@CdSx~1A)UE?AuLLoNNrYdEtghY*bU6dm3Ptjvt6Kjh0TMG`+Rq
zBU3i1NQnm}HVdcJX(--C&R*aLER5t2i4tAPXTY2Djao7fX!g=8RCd9?F1*!U@Zsls
zu!`Z^(lZ?bvClOa2F!sQla84swNBIJC2o=l@M7Zkl1lwKkE~wWcF6Q|x<>rQ0ra2x
zw_3W#XKW9S{)b^0eKhruiT%ZS0L<%Cxx_9*cZ6t`_Nt_fEB5BoRXV7^*adTBHCLwf
z^05km*d1hUs7c0vnNP2|SFvG;-8$n855RLfniR(5Gi9cnw0Zohohe^E{~#cAo5}9p
z+`zGIht9Xf2KU>@uXEbdY$Z$#0j%XbsikWjRo-W6V?|<HnLyWTAr3t6Nps3J#t~A0
zExx+?+q|;Y^6RKFy6qI=!xw?s8s$YsMlI;!JQxid_`uc_;H}0se9=(I2OW>_B9KbD
zKFb8U8n4t1qGo5mE`Wdv34$TmsUp8T>EdkMqpjSYoB8dGMsE62pU-<P3VwT5arDg^
z!#tByXB%!&r25hot2XcTulw%>wyk?#re~`VBuu(-;W}B{ZbA3Ra_r%Z3*!g<RR`L*
zZuJ4P3?Ji$Q{n=3AmSe0I46Ze`f42uBmSCtPy#Y4U+^U9l-6RFNka$p(DwS7tKr)|
zig3Zn9&;>EUet|%)6}nyZ?vE>h8*zgHgl)Q1<%pQuv19D+7687^mxzX$&cQ}=r6>d
z>Q~dgUzR5%bw-?pk8#j1k|=u0t-1*X$cZ|RC{H(n)MKy8ZuiYT^lPy=kx;<jX=CJ7
zNar4TAsB{2NmnY3fdFVv{1mDGkG7=NPxk(N>CRu5f@WV{?5KXPfaG{;>jaqg3^ikV
z-kk-n#eIFdcofT<()ZKrXK=2I{OczwT<)eO+NzWYUbG<U5P_;t-WC4Bcz$9y7(oVd
zZu!cBr#1%Zq~SZeAf#s3E7f;RSMk@<6TO>(;GLCVr$S50E!uQ~bI*K$z8uaRnP@UX
zV9&Bs-i@7ILv?Dv4|Gi|;g`ysKNj*eL>=$oInaPx_?5)!Ot1R-b%)?t#uV5)8>p29
zf=n}YT{rDNl#8PiAIaa#D~FwCI4w?^*O$v?=@tuTv0|Wu0WWbdkBPg{Z@$!El>PWT
z4HN)MT{m$y^$8bKZNy&(m)AsEv~{0PQmyD7ycO`*{UH%P584`mH>doVD!cP;^pK?<
zM$pD$MyIa>^F+g&7pibp%}VQ*Dq@y;eh_&G7a<mX0;7R_3dAuu*qc+{C)yKV`Rc>M
znGFkbI)7Ps-(#(dFX+l8Fih&|v7M1_{u=*rpn->f_GViU&~;)NOa9<XtN#lPoQ|A<
zJKf3qyyK;P5_owry`^&vK5m_sBzJ8v6w}k*m%9G~>Y1A>UM8fLdk+SDk74>O8<O@$
zYg0>Yp8*5#4ZYfR|4Hx1Qu1Ur%TO->pZ|s7*?d&%!-LfJRbHLh*h!w)R2Uzi-{aPD
z*myfrZ16$W4lnL!#wCYcH!s&4B5;w@B5T@V*5!KmsC^a>t`&wR<462p3%l!d;n;6h
zAfe~3LsaPsKKg+kp;8p=)8!^&W`4HVUN+)N@-HQ8*LRjBhKj^K8>77&)a`bb?Oe3W
zf@Wl9w$vnB-{eH<^7SaC==@ghdk0qOQ6|pVsU^*bh#ay*;NRW4v3l4iRUF_#2|tgd
z+`9LYZlDYoAs(Ki@vB9@Y!xZY+>Jp_)|($|_b;DMhJl}*Ibz=~6f3~skEW72jAG$A
zkLRiVdnuo-l-B$d_0`Yn*lQwMLM-uk0y2(#VA5{DT}?fInsMX4#`^KMjXXPIUaSR!
zM)l6~UoiF(oQnN#zF0`-^2|jW&|>y*D*g;5;+5apP@8tua}qnyFIcD))zZ?^!!O}0
zhE0+O<|?d#^0otu1LFESbP~?ZAd{G5v}>x%G7<Rx6&&;?XO60GO%f8QViv_AO_S@Q
zFu{pzrS{W|JCS+UHkU={Qbnnjq?~VG*!fZ1Ad|K+Z@%<>)o&G7B{`d8`me>OCr>a3
zE@`ua(xfKHTU(8IB}Oe{$}wl4!vvxkW;)8zW7=2^u_m)^gB=l*_#k^tDXA0q0h_Rg
z&;8qX-pu_@uAp1_ZA~}nY)y1Tc4yEqel8^(<W)J+?WF<5JK%(GSl0Yp_nLu}{6?_8
zUhW9lzN3S29{2S01j3S)df_^QC8tf7rc7}lPjnI*iQ)1eeRJE*_Yzkn@Qi`Wkz<?`
z;s{3>Drc3)+|~s}`>)HmfP0U$>TKrci}`wc(z5ge`=H5%%^p?1!lm9{xm=&`VS<3Y
z+u@ZzdXs<Mrr~D{BQhcPH7d9A;4Ei}@fQJ3Pp{Rrq}rM6Gl**Pr84Uub5vBCI-2MG
zvdQ*rVxMJkMDb2mGZYh26B{h8*0|E}@-Lt;;8LU~4JQi-P_sHWj)Fsr@9IwPa=9!*
z-Hbiq(v+YZ!4o+>(8Z6E$a~SMD{?bW-2P7{zLSy*&umPd-Ba7V8m5>SpIo%$+aL2v
z?;)Q$ntctK&ED?yEUNLlIwtk$J>yJ)6xF$Ac`0YVv!+pm4(RjxuOp)9F7QE^s-2kx
z$X-cz_bdy+MKj3hm``r5I}87X>O{R<^u-UGjKqhxN`R+H`7J%|8|Z90DhJDy--XQs
zECTyt!<6m-t5n<?dJ#H`iNWFEkzNgT;lYW{J=S5ga-hE}2fD0<I-o?iOw?}UXVxNh
z{@1=4?rQ%SU%sjESwqMzq<v)a6K`($nonZ??b+C2MHA#eQ!MLf+NVY~;V12C)gP23
z)aIsKt=-OSVtQ^dy-E3!gJ&-@RHZvOq_g`DF8T(S@9D|-YqKfO)L4yQ<+$5iY^;Yi
zanO6SxN0A+et`uMzstkA5G{7Tl9lVk^D|OT?x=IxzUG&KW(h5wYgnRJytA8&UZX-Y
z-G>eWR;idDGyIH)-7s&J;PpQ*y=!F0#NWB{U^S?Y@c?&1@#+0ePHHW_FmV&;nY;g<
z4Pn<Uz4TsWK5bl)uAX1&*Tp>I>MJrtm8IRV>EW6#lFLd!7X;35yI!rO7)hc{>^=l{
z=f@tfV_sw=%<Z+Y_8Pm~?HV=Jy@6hRFBlKapGK9O$yaLIfirhYZpE9;h(@%Ji7=6n
z5M932V6<_^p2!kA<}jICg%JeknV(Sd-P;A`QIOaw8_y=wN)Gh%`TM~cE4@$F9VFxX
zzcs|hxJ544TMK4m;U?wZxW27p7FhK{*$U|H<ERfDz@>S90C&j(wRLtz@NsPG>h7@*
zD;9`5PXK^BHEujEr-sks)|ojJGwBj)gCi-Xt?8Y|1oN+>$T$pXwCI~;Q-XFRKE;`Y
zkGfCtC_BI3`_QFYY9v8K!FJ|dK-j<Co47ylVVklLev$J9WWq7dlo|sD)>Ha{S2YSK
zQRkl?xePrWY5E|Q@@#}n@+Ih`qbDL-{f@E`2Z!7l1}SsbQ!s9Xr><Ok`r(Q|KUhaC
zW|Jflu-9yfO&{?LVr0X9EUS@5WW62hh-@Eu9l7MUP&HplI-~Q^W_Qg5#VA6??51#q
z9n7#KWj@uiGy?Tf8O&UEUpQnPU<O*HgmlVC*mNg;L)&>`a=I4hZ&-4r1>qe$8bv(M
z)gBSH>1E%L?i&?fXC2MVJi`zCbOF^cXOSjf4->fhyeR!)m10FJ+{oI!eAh`3LSXeN
z!Dy$1(=1!3#4<?HkeeDD`4WXZ^VQsGeL@JG;G>%S6AhO_`)u(i6BIa1)1(28=M9&+
zXgdWab89gBvUTXqfi^VTbIu`a;P+gmJ8dAO$05%SvB~ZP1bk>xKX_q4>}tT2-MyuI
zE0ow*f;Kl(7?|aKo>rw7c)@kzUD<*k+9B8#uycI&(*pbwH2v=Cr+W1#m?VH_Jtwhf
zXpsD*c9;&!!7iWqYpg}JR;5L1j3CUUr+g=~V#PcWsMkJl4H4Q9X%#O}rSHa>f&5`4
zL?`@+BA4@)b4xquI&U=ywn+O}>;{uA6Pq*TR{m@att^fWi9zho#Ge10X~^_zMGzL*
znfy&oD}l&n;5lWNd-(U$4o$ti9=@60x}uCOZTMtFOB3(*6uSUq8N&vH-X7R{NA;n`
z`SbYo#Z=5Zm2ukm)-#Ko$*qFyfS%wlW7)D^Te1Yy>AlnX4HYriqWGd^aW$jMn)RG$
zlQm5uYG<wU(IT6AWR-Zy5pe$@f$3jB;WWuxUp*Fa@5c34kH^!vxZo0Y%%h?a*R0<_
zbYJzavo&<<t5puQ^vbR8LQf^XmE+~^OxB6HL@c~N#5eJ5eQLJ8(j3JhaZ1*w4!Qhs
zTy+@PP2jhLW=6O|1bFQ^$)QD`Mx7hbS_t)Qa<K7cQ?vgtcg2<fx=1V)@wyo9y)Vaq
z9JupE>7*m9>1e&`HHhh?@%5U-fQQhfmItqQb`x*L%+qj}@{$7CR%&ogcDiKXUBubK
zZ~E!NY~`eXc0u)Rth`8eq^rgO7@OOd-V}HD%S6pN-rwY$t7Q`;acc6FDEEA8mOoIk
zBmH@M#2PbekdiBaKjc#}zM(6=MlzI5Pd30s0*cbe7r7a$7V$$+*SK8$<?8+J*k{cs
z<lYaTSY9SiGfHN&Npkh3-~|vkq?}61SzU32ih=@mhBV_wmC!Tk9_Y>x33kAubDzO!
z)2YB8oo;<7$Y}*DOSYRZEaq50S4dxWv(1*nj6rUba$;CgIc?~Fw)-r#2cxNt_}L`)
zl#XS4cXg3A<z4!ta*3RivwW6jkOn{jU52QcP9qSHt+ChtS$9KjjL&Ab9Ul4hb(ef~
z$twFPdNyQJJY&}f-u;4)1f3invEbsy6yZxx*5Q1dN^C6Rzkg&B-&6(k%{qRDIs-r3
z*<df*UNh;yY51HURC1I~gV_z{&MF*#H;v8c_ZOD3#=7*=J8smONXH11g<yX*4$WdO
zZ}|QGRU$^`#%JICF(a4OGjb0D>rZ$2UpF4=-0{zoiLy-0B@+nMeL6>Gv!ls^$E5nq
z-(Z{e1BA#8bWAkz3yM{6U{hsAUfWRr>k!G_x)MLl%_qoxr_pSv*_2(H;Z2Rd16d#H
zHO<?|klA~(qVNi`vv{~p7sqgd+h!0fUnIy76ojR1i;I{09Hk~#fTFaqw{p~O8-KeN
zL|+|%dw+6XF!<Poc@bG!KB|2L)7YtOt{J2<#rGB`o5_Z~Cm)IpwZt^<+I8xB7Sd_a
z+W8j~>c_$zqDT+tMAak9+2lPg@SwaRvcY)AHtk+VR)1#9L2e2aw*KYcC-c|%c?hC|
zx&504bg^ght_~a2_Xynkwje*hbYb1nDwOxD*OXR&sN`&5stS5o7gp6@sGSWU?INL}
zzIjros1u;=JkEXxWivVk2Yg|0bcN>ZU;N4R94&Q(O7>6dsi)r0_Fqs{m^%L8Ohke-
zBeZ`opzd!Z)q(TU)YF>PVgDEUACUv-2Irzmy-8i*W?)gSP^-lHFF-r;8X$9^Navx5
zNS2D}cORT%5t2Z9=!X95y<jL&<xdJK6l=V33Jjbvf&;|6n>5vw`2*xgGhtpr>^LjH
z#)lpFREO<dppyNwT^9bTU4)yT5DOnhje{PxS0%^y-zqs3=u{8FF>pF8ZgQp7DY8YV
z{&7s66av(<XCR{Kre;GAJJQd?{;z=CjtJ61I0jXR#bvIHI>l!mDkNz^x!nj+;So(Z
zwIX`h^2}q(e<0^z81`E{+!*-~nR}V2oDoT_r$`HNrvzQJj}$TpXFi;(dzUkkM6-tk
zPAi!RpK|ld64K0h{`dt)4|7jb|BHhP13CaQR=gd#zCA=FO*MH;NbQ}`OBa)XdA83Q
zM4ZQMCw5}v;v|!D-b~1$-u(m2%`p=4TcvtM?pl17J@Nu{T5=|$>%E&to&|suj4(o~
zwtb{Q=8gUWf}`+1Az%$OnUyh-jm(-$M6i&IT``3lVquLRJb8}bJpGYA8Yg%&*a9PY
zcbT<^ge2DP#pORY5S{=L+jDRa($N1v`Sjdk>iRF9_wiBi6j~Q<Hw*fE^mhg>CrF(5
z&rW)5Ts~ocTtaNDnuWE$$af<4Q*sL1N;o0IBSPEOzQ42{6NZmK^VANlpvw$6ROC7f
zzJXx$^{fwN^vJYo9kA>okz#ZF;8nD)mLCJj9KIJvD?QnXTuRH=h?&8qqM`y)=paK*
zeuU8F=%S<)_@cAxYqp%k1m_rS$f^4uazc3MVG5VoUE<c(Rv^W57q~A1SGicIbDGvs
zSsS7I%R2a~oTC?P(Vyc#D<~pz)zcG8d#%(*eZn*@{S$)7MsFaPhu6gTAP1zA|3Z=f
z8TcQCQRBn0JwEQ2c-J8=1wcMJj|Bp#wfM7JxSpYt2#Lf0&uU9qC<-zM@*6k^w))vT
zB0JjPwNIvay4pj1hThvO1^6r7Ka=D?gO7n0@Dxw{JdCdL(mWFOTVqu|>UZv^C-b+$
zNV>znI+2P(m!}f#)C)O8bA-R`S?70u+8)|N+cAp!zqPGT$l#!lMpjQg9W-G{s{0gz
zML&rQ%l{JLG#*8vE5vz{`a^cP5Q&*?W#kupLWanhVAal7NH`QZPY{T4{4=RB_4zKv
z&aXZ8Rx9$41!do({4d31quYC*;hiaWt~{BVZeR!a7@cICLDn}=kvqHpfoK2GE+?~H
zo(WHZB$?oy#(XE+ca1&o8zff*c|-)FM$QMRgM{#>I3-QlAaB4^!V~^WB+>0(W@=|4
z-n1F}_-dJjz<~=&uK_sH=87l$UwthqpChCo^C*m##($ps3arRrI)|rK_2_>y=OyFF
z*4JgkITm`#YHA0^p#WCG!e{M!1OMV>{7VL@Kr9blhu-4OJKXkIpW_Qf28psfh?O8R
zc>LQD6pA@o3NrCwGS>+>pRg<8+`MllkPHCi(F%yB3B#n06}l$jUWZE^J6}emu+eF-
zKfdrlm*e|i>>vO1BXI1Eo7?dgV(>RVS8$|w5c~-6lt8In9ru5l{*QU33b3B0@K12`
zx)66rZj!u?4r@n2jgLT+x<tl?f2)QloWO64c<&8I93v7~rFF_p29Uw}_<{!T{+}nu
z|LEbVLeAOO<v*_-h?7IE-^6=x7bmtOj&*?k+1K9tXD^Hr`-6oXouWW4QZ>BN?x?r%
z5vJUa(f@xZ1k0lvs!$yZuFAIpi)67o>~`my>raLglwJKky{M&$)<zPZ{yk(!0cB6|
zw3OFtU$&WiyH08stuZ0~?WAV08xs?Ad-Pe{*OY$Imme96|7CBKU?21^&+riO25RZ!
z<D(}&Ubq(7KAlL@(#CAi`l!ZsC|zuKvF$z|l4&_<VYK=$>eAo&(#{PSjSpunJ*2|O
zBY-KqYCQXmfYo3B2}tjaoGx^mNN<9iA4qnY0636w4#~>+qeD<2pd%sNhy8fvRCkr&
zN{BY{@u3J4Ha!k@8~U95n}ppnScE(>%Klqv%HSM@F2VT!L)TY_Rn;y33!;L6lnByD
zhjd6C5Tv`MJEgl0Atl}2-QA6JcO#9&p&JhM+unQM_xs+fzdsJo;d#zpd-lw%S!>Vw
zd}io}t+JO~{*I9*YV(A9Ebdo>NybG_Y9PmIs`gH452#%je{i5iF`~~C;XXQN#EgFd
zSTY+(Nm+<dU1_Tz<)W73Z+<rr3?W>P8+`xZ*g>CsMHH>`y~aanjG=OpkL;yz2SdoR
zLR&L!E}7xue7$wn6__~}<!>zIKZRd}Yc6FWRWatp{;X&?O6w2=<n_MHX9)OTcFoX$
z)mTA?(_b|e{$MeNb+~3AieS$WijuzEtD-J)K5W>g<FQ(8@2q}#400I{y=f|fq~@;V
z?VeFU7xUV1FC1$gTJ;{P51N43&XImp^ROE-U^#{xqa{;h(=HYq=V^uZ7ZUZKQ-BzT
z9tazLzGl*|sZ}mWT2|Ndq+TBzyn+cKj!JgzOh$hFL&&p>_$kcqI`WE#!y!W+1>Np9
zExYWM%=WU>3p9pOk2ALkTs~)44EWwD2a6#*LHg?d6W71Mj)-;wyuwGw`T2Qo3F~Du
zOhAgf)cBy)s~ra&+obY157mMj!ICLAD-E5AHgTx(RLM$?OK=(8#hcpSmDVWUPGypB
z)WRb<>f)*l9Lj#Vp`@^JTS^20W|wJs54Cl7-HMiXo8Mk6B|jB%Zf0E*`aew3|4kPN
zM!6J@Ddy}(b>N=Bh2nWtu2NfzR?$l8nDkL#i`<G<W~+zr$&5>mIa#y*ZJfdFQ;14}
zdr9qwT<PbCfAIa|kL}bZ#><~w2jADZt@y8(4q)f#hbToqR47Ha&g7K!^z>*Jvtx4A
z*pDmMg}60Vxj{cJL8)eOb1LF(c(rkV3$*EBaK({+;O6Nn!#vF#xZ##BGY598aiE#P
z!M5qbK_iF$lfO6FkjP=d+Q<*Inf$;J$NxR!f4)j0OiAH1l13%s%sSj6<FZMZEjK$i
znsf0(X3d){r_7s1>&6)w8Lh*B*!Ea!5@o7^^(cSl+ofa5^Ofh{f#2%^eM|$lt*D7@
zc{bL+G3jTRJ^SF^;zZbg&}8kDX!$WLcr`vcD^Uz$(f4uazK(TxJH66e2h|3%8jc$D
zmeNPp*u1%nTo&_bEyc?x?&k{>sxWtPz(=l(-<90#9(r+h0h=q`U*dm0R3pz%&>PKg
zjZ21<iXSi^bNVxnWcRdis{@ffxgH8B3cE%vyuV4m+@5snqmIm|Urh=`<m_+gORHoe
zOIps?pF|w2l?ON~_~L0fmX=4<C>Lj3Q==7Il=SgkZgp^yE@(3t#EDlxt$-tT*L5iw
zb{6*sm6vp{3bUWB5$nBWbS+n3nE0wjRrLCFFD}PSoATc;fS~)RJHZS)xJcI^C~f_)
zK$PD?M(7J029641irm_iX&}Vg^B<3)I#7Oa_5NCg<r|K#W~kiT1Y2~5`5Da4R;F-n
zU$e5Xo(H}}I;eWFFhM9^*5k*qHisu~MBT_j53u3O+w*wL55H(|3i+>B>-R@81Bw5}
zHhM5*5+$s1#-teBo7J2xNCmo+?)JYDT@XR(F#$Czo~`W?d~(J@Gi^P#Fy@3!D*;!J
z2fdxN&PgR3jH7QG1*V?IOwm%CYHQfzzU_>jei3w4bEX8{EFEzL*M9BxCqm-ZG%5a>
zX0G0H+AX?j0*eAs#Ye9$EHIV0!pQIf!eMy6dB~7zgU!zd;ZVH!8If;#dL?4bYRbxF
z5I&pF7Nd@KEj5O%DETEEx&`&a))pqFmD4ew)XPZM*&|uUIv8NT&zHN6AQqHg>`t1g
zy1P?3Kz(%cgl{6)lmn$7<##6=G;<X*S8tnMwvI{<QnP=V+D?-nTrMefNI$_i5D&s%
za5nD%&Ee(I<<gFIzs6{~+9KT0bx^kXku;ojpv6fJ((3JEuQ3<Kzuy<Hlb>i<rm-un
zt9VtF$r&TsnJRF2FeoXv&yGAL&MKp&%mOd}UOZxhK?#IX*lCwjsi7Q9H;tJ!o2@H7
zdob4O5^*^lX5WoMX8aI_&eAr4>8iK5YbzyUA~jWIFFjjjZy7RN71}zM3|+{xpCeb;
zzJ>TVk?Bk4P~k*v-Tcsti4k(k8oeKQZm@IH(Gv@rGA|-bs+6Za<L+kim{yR|TD(;c
z?f`8&MhAz5l}%;2=iZ6g$K{@NaP2i8zc@sPuE>e5JQahc>TH;pOqBO>O>Nur?Ji*|
z9S~WLy*h<W8nLV@eZHs0`uQ<m5*M;_xZs}dGa3|g>}-y|0+sX6)~QdGV7=A^)_nY5
zz&-g7qqijUMufR+gpF`Kj4o^}d7vwk;0J_^PNTHzO6lGn#Xv;I>qvHfo6Kb>j!P?c
zhI`V_!cdg3N#~xn5o(F!7x!9a@*+4h8&ftVl%q2=XA$6n;Gwb8oIo8vauvif&Q$Q_
zydyq!s~)D^@pUKy<b1ZsCu9EOkX9VJpW)7q>4GiO;_!ALCXJca5V`@}NHV-SwqU{w
zGMpF1^=Iv9XmuEUm*WafJ7RaZA(Es>^1BfZ2V>TocFY6|HLwS$AAUxgl}>Gs)(i`r
zZBm5rkRqkHt{*VpJ6Bb~;nYg;_4<1--q*WaK)7lxhCE>mQ{&(2;k7-VJFc398;O5A
zs}=IIyC(#<cP<WRvh_Q|lyA>UL8L<c#28Dl=~RVzi(8f1DAaf+T<$CTj@mmTs;cX8
zvMuI*Da4~jwU`(`YpBJqgzYaj7fWdEysF`{u>+9hX#;2j99Y@hFQDgDuVxE5GdOO}
zS*uGFlcCL$))MF2JST1|+9Z(C>d_YJXuHerGWte?7aW!&v1V66549UH(}p=ZLYZ7?
z8CM*aIShIk#VcFIEK>;Ai=FYPT7}lC9vdgD{^R*Yz0wR^A}fyQ8u;q*Hwlqt23)f7
z%R<y}6Ys1prj-fDAFem%loB|!fpP|<NP6B!@vRAZJ;I!ZY+IMnp6l^#fp6QeHOyPC
zOY=119rt1wZ<)&Cj~?Kwm;8l17TK<|0!ZPJD71T;PQ@GvG$%`+-$vroFD@{<ZFfy#
zcz?Cy>a2P`*m&7w*^h6(TsQRsixU1oRoSUx7D<ytWOUE9DRuVhR?~;`C8HiqRj=%)
zXv3bK)`J(a?HT&mUfqnnN?4aQI_+}=G3|nky+#V7GBcvE^LTGgosxHramO+RgWdo~
z0`L2t5!@InHPki2w_DA;oH)BkZa%6V#<{nElOXi_fi+kxW<dD9D$EAn=Usa91j_k0
z&#Jn;G!*=OaS-K9q;<rbqJ+4d<kacZ7?!D?wjCSY!jPvQpEGskIUt>-KXUnmF9{|j
zI;FlRA7!hpo1Yb`+y6kzyyX}{!nTNEY}@?y3$Sx`fBf~PKB-*9t}*YbTIQRO)TM9T
zvS3k@P2yWb`q5H+lJRPqbE~y01hr%UKE7h|5~OChNEzF^k2oA7J+6M^xX!&TmB=>l
zj~%7@{p2<<=%Eq0%?{1cn{M5mD%K(-LuH!=OWo@GTlODToe!U(%sh!@ZCTE@FH=PB
z&6H+*N8@j`F;OaR!?8i7g;G1_#FyRFN%G$eqW9h7diEcSE35k1hMQ<ujt))VWm%eI
zENrWK&|Cqm@G|+wHz4#fi#9E%HD8Ra(7eVAfvHJr%a~AC+1{IOEG=$#;E<~B)R=O3
zI?v>RY5QXt3%8NI_DhT;af%|0v|On>*SK1$T3Oz3+TwXebEyGH-X?~>`DwwtZ%9$M
zQ?AYc9;T1wY?r%|UU)3*YtmGgZcJr34$nG!+Q6kz#z;R9*tAHC)_*Givazud24q&Q
zD5PG0f}$tN&qAm2S|pofZhug)Xn_g~@MbStKlg>j4TQB>)pX{hprc4Dt*`OWnG4i1
z*0m)}(-PYw4ZI2Z(xrQ#-7t7GcII2rKU;5mV)+^OVr3W7rsg+&)}V2JrFXHC;x<4V
ziJ4^?bl!7#ge}@x$}`E}K=?YuyRee2CzmFQZ3|vmttkF>j{J?~nA;63VI^ds?=z`A
zS#9abjZ05ND=AXVQx8`|3PXFH)+m}*TupNcw;s}v7I_*8Jq)-^RGHPLg(2^)(d52Q
zveaZ^J@MHMR~{8tMr5&vQ731INU&;T=`kpTVLYj-_SioK5R6;zrp-Lq(*$sxN>}x`
zA>A@Ty5vXzuhywnhs>d$3`z282XD2fSenOCx!}VIuQd2(bK<30z9iqhBhemjH^ZZ9
zla6;Fq;1tw;j*G^v7XYQY~;g2b=ILVdSA}~kc0|Yl$Iw$+spiVnK7%cE@zN&bL!h8
z^gcewVLO3N?vR07iWFH-+Cq|x<U*?EL|SDdZ{)ZwPLd0fN~(Qb!{|5sf!jpTWu-dH
z5%MPS9NuB@UCLBR2nRW<<2_26&-vx3Xxgb?AGBE~XEV>)koM6<B0WS;Ak6x5fR*`0
zJa7mjMBAGfD%^q%+4@|I!`7NAh}mhVXNkna%=w`FNrNOqjB#i~_ab9G?hN`w(RNm+
zQ)2%i8|7hDKphr<Ce-yTY^#TY>CDyPNA?9$oYiF<D!RLs7ug#7DhH}LB3P<1$CSV&
zFP%k-zvFibS20t1FDI!L=`j>d=r~c!zA>+fsUZ7#l8=ACr`S9<BMn>8lf6ZEw$EVs
z2*|#)?4t<J<aT})9!PBlc?)A}_KPZQ!efi*$c;9JaAi=jC8<}r7ZCo1OHD%TlN%X1
zirQ@<1h?tpC_vHP%{*wDuyy|+F!>j-|D}1+dYtx&b+L7Y!@<H$V$&NRL*Kgx3=!+r
zuo}Xg9oHo^cH3rG$0evF#2(oEw;L<=Z6|$57E`Mt=~{Rzcft{iFBZK7#1}g04;9d7
zJk|(y<`R&?$D>}NDONhh_~5|MEC35MCYX~yI)Z~)3qE1~dGoPCGFs72tRDO^;G5RI
zP1?Z2Rks)(WbWdau1akDlBTSgsfQbE2)}Z1?MWF%w@|Lr*#+QARGmNa!&~(E@ZrMA
zfwpFUW^61S?K=EqpD8&~J*v&lK&PE7h1IQQ#$WK4Vl5VV(}T@ew->L2Z*E4zcW=#o
zGzRCT3iq|mYfjm-xai^g3Tz?x{Jth%wxA9!+KGebQZQ$^W4}NTz<w-R=lfh$VE5U>
z+UOwhWZ1`d=@{b+wT5b>g#tLnC8G4+7kGi%yXQb&H7jN1)A0*T)Of-6%j*wC*29Dq
zp%<*fCJMvcdosPvGC?qwTyaA_Mrk2Pug2@?@l6TT@%3K7kH5f=<9HL)<S?^pscXB7
zm}0DcI1$RWM3H{OeEs7gi|~GDSW?s^xV5PunDd|}43r_o1F04u+ByNvSZClz8k>s|
zZGAQ~EgHQ9pEX%NT<`Bi8<@DidiWuw@u|6s{V5OZ#x{76HZsqeNA?#iOdTQF^{_!)
zV{w8G88&e;bQJFlv^}2b5k0gxLgt+&(}-i9oNE0;@e|X*P`~KV3uTH8Cw{*!&W}^C
zZex9Zv<|;6DR$O2Wz&)NfH!vIX)IumJju>w@~fG}U8loV@;^AhVCV(k-)bX?4_SZo
zAPmVs#7`kTt{qd_``UlW$*FL}We;I3$hx->j=C(UjnVRWyHNX?(a@MzF1)Pbfv}R~
zni<(1?Ifl3ewu`#6{5D4&K<HX2|y?O_%L7%btd1}{W!fRXM$9hG@*}NiN6Ul+Y=8h
z=&JKKbY^Km)Hje#DP$UElpb2xJ1bCGA_d+<a!Bk~U8AJ@(vrS!RcXMI=d1lHtK@>Q
z`dud0nBT4R{7#ngrq7q}D{umGl}J%G&i(es`xfHE#qTlc?T9eLSy;FqBc!?r_0G@9
z4v!~b;2T0bd%A2{*d7>2Uk!terX$K+u8QT$MDY(Ci;}9PYfA213ZN%s1q=Qfbr>?V
z<sUchf*9AmP!Vj%I8(FKroA2Wdd{l8(tP~hhstmg_J&RHMEO>uL|f~2d_|Da7%qB8
zgGk<Ha_}rXN(|?c%9x!?C-~_Ke6V8~9Rat~v66<YO8GB5iRLpBBv=wLzOx_fiS?zI
zSH=^qQi~vbHOTd19B1yzPz8%0uMo-x>2njiUs>h)6h3$NFz1oi?>?4(5)S4HIqaSD
z0+hP2J@o9{l{I2*BKCT~S5?)V+|FRTfsq2jbal%VU(NjB?dB$ykQQAht-VFutyy^}
zxV(cb^aYb!U86dL3BHRo{pLO-W7{$0YPJEIeG|$4*wBF+;lLaqP~}E4mz<KpLQ&or
zv%%QNbbC@9JUULE9)qSefj2+`;sha0g=s1AIzU6lBpdl`7wZzM>&$7EdC8Usr|GVn
z&A+I9JCp2IJwn9)@|M@&cGmnp$DIpK_sI6tCgQS5G^Eq_z)8K7wF{(N8uC5^Uc%Ul
zhdlZ?(T09X8_GZ2D5}g%fhUUl&6)x}zV#(*z%H`TtjGg`hMO0k8XQX-FK@L)$kiyz
z7~^ufc}Z@@<(cY0!KSY#)Jmexy=1C8K1CBw2|gh;^&vi??JYZIxR7y_RL4W!*7%X1
z-8{GF!@`%c7UEw}grD1ke$%_B4mVdU7kXns4SxfL#G~b>jG%$`HrVIt8(I^3VzoXD
z5)Tg+@D0uhcu}V;oF_aGkkPm7+7**!o_xiYyqp=e$|5Z1ygBvZAeotNrNmukjPwW2
z73=L3$K?c4q$<sW5eo23N^6IlE38=MT^6{=>HXZ}dc~nPIa!`#H@Atd+ojGF%hksX
zI^)d#&rU$4!v~v~oWw!tvV}vvB&E3rOF|pD7#+GTzuJSo2ojQ}NJf@L@>9w64m>V?
zG9>%rxtT7|0zZ(H83M)Wc3AmcC`0?WtEI_JoZ`mBUT(fn`>B{tV;sRzQNNp;<c_X@
z&_VnJs36q8^dM(o7Hr<AxD}upbK#0+haZsMsUkQ;8dU`>b?;ECq=!$y-GP|>8f0~_
zLO<zHKPwt!M-tE!*51z50>rI704iwxcE+**&sy{2(rlLeNMLmR2ljjtbb_;btOcyi
zt2ob4#WWT@){7HrE{~}dP5ABk`1S*2idLCZIb`yv;{7{brFV9%h<Yt4Rk!IAmqabM
z+NzrdTV(gH(nuIAacPiDik=?@dTL{8FE#FRLkMBXiKg2m-Ln<NIewLIB3rX8DD75)
zug4gBminbgb>;rh5ygG5h|WDt-r(t?AI4bn>*h2+HO2*2JH%6TTQ>#|RgFew7UXWG
z$qaiULf8NdCvfekiNRVHdL1jXrOBo5C=_mp8F@H~ez?=r`;pn3x;_&ArCm5f5wjZj
zK?06l76u01&c}0$w5sr!P%p6vBO9L)020U@+q9bFLLB`)p;s!Emnw|tV}Vgp>@HCB
zPP@Fg#X5z$=e&HPE$M!=>h<NP-CSz5W*mhlSX0k=2G6MEQ19N>e@w|oCCDO-DTmtm
zBAC78Bl6<lxPBK8=Y}+9`)!}v>lxyk<SM=1(7i^}whA@IC4ojW54Bq9ovtIjuUK~m
zl;DK(p}?oMu;WVp8MC}F7rW#so|@}gOz6a`Y3&0sG!z&6*-H;(i=tDYs)f?-gBm?j
z=iuDWF6!9&=61CGt*5&p?OkswpbI;@;<OvzTsIS`bg<o~F9Fm$N-eUI?f99#fMt{)
zr1#3#usAN=YEbP-AE)%aayM=mB2i;RUwm(hke`roanLKY>hyPSU=D1#YUCViK(24I
zAx@4fpJ{KijrcK63=*#&*s|qu>|XE>gpn=c5q;<n668uHxY%XR3CY&s-b|T%P4l7n
zsSrXZ=k(VZVr%r*^d0XJ;!pB}c>P)8xR&TFvn&khuIufdx6PUAVcC15t=2AS8)v=L
z#8<=}Xhs`rc8_4!fd}ZJe&}PMy23Jq&WsWHjA*`NgK43v=UUs!TRG7zln0V*zhW%B
zM7n54xHF5@c5u0q#uE+gR3l7;?^$mLBSf;E!=hr_!)_S1rrg}}y<~`gl;3$~1}{of
zH+o@Hqa)$~j^P<s?sbE9fB#M)sSg}8X^@SP>Nx$UNHh1#+9L4EvnBws;7-ZapwWPs
zG7W=U<6>V#=i*;med_F&U{eBhsxx!8x#a4~3$RZbIw3YYC6;#wFZ(A`zXdmB6%O=%
zs^!tVzi~Qw$fbLIFY%5|=Q*5<WIG;iuy;i$O5+nZj~1W9BH|1>tyZ^wpoH?3?^Hyf
zSvOOf;@z>#3)kAB(b18G2$ms{*KVeK_m!!W$Cl5MD8KSi!5k!q1zTmx7J68De=WLt
z6?=jU%LZrngjWM0LCt&tX-2Wb>hTvz0QIXUf>{+2yU$&-M3xb7bo-9yaa-@krqwac
zGj!v-R&I8M>K>aTnFs(OeQ!Kbe#@f-`R<#e#%(V1n7k&cfXbL51r$3yM@^vs(|sGq
z<gc+@?j35G@PJ?{tD{{cysrp-k9k;C@Dz^!z!sO?0&lU}M4kpEf<;ejJDL!{d+rf8
z@onR3MU{qAON}?%XT3gOf7T+Hej3p6oFia*-p#1T*1`3(M)0L@gGBg4lFu4t*b~Q<
z8e8{?mYT=d#2;y!TGZ&mKJB~-PX#A^GG1w-;Gk*NC%}6x!X{T#D0edm)2mz?zxmuf
z<{x?tCsf0GyXClYhroM!z+#*;^2lmyerYt@=xn~rD?!M<{mthPRc7M&b8TC~=v?d`
z-c`lEZAHQ2F7ths2OSNfIOf}gIx=L|otfyF)9Q~DA(rQ))b-e29OPu*6W|=-p4Gr7
zTlc(mEK!UQL&ZjeMSMdWpNt?zaMWpl-`u(?@QR5@TY#_V@qyM*Mv};Ul52M+WIC)?
zZ?d+PX6^Gs(}Hqc$_N)g(5Mq_5vOa=Zx+1;)uaUAO1vY1LfU{mMz;%^Qd%RD7N-=^
z;<jCH=cHbvZYTy6(ShACctb-g)Lx}+Pn~8*gKb`{Q$nj;n&b3NyMyOt>RY~X<|_gX
zzGyNpV2zwv^qzsT!Kh?ryZ9sQ#Ci`_t^$z<-xb`z1b_hEX;p?lg~5Vl{5m>B7Yg$>
zz`|W<zs)jFg7Td|5w`xLW{Tqvl5fW_8HPVc`NsPmr;=Swhn#1htkhYqWQ1>AHlK}f
z*=};ZdD4$QCOFZSG{5bRKHjJGs$sN0>>vY-VCG?bCf&!5C25yIyHi1_I&tiyjNq|5
z*e;4~ZIeqSds@61d}<u-{3b=%`WpldCglDpd3)c39quhNe|?@ByA~Ed9TTy(K)SE?
zLJv2jR-(PjgHew!q!&?LJ@subon*;k*QSoSx}f*lrcMy*7a@<KhkPrJc}c&~NHXzE
z@<slT#UzVHDnlmnc~EzGHG*-P8lJ1>%NjtwD!s8+1|CR@A+N{~+jQs>eP$frnPBUA
z<}|No?>!|y=i4oEBNJo0Iep*FICZXK*E&a(rvck&zNTXsI{Ij`|H8wn>6JdA*{p4~
zz$z(B$YZy<2uHu(R9lH=i%SNFMK8#KJ)|zFwr<z4Q|Rm(#cZKkQQ5&Fa6axwta@4A
zuZ%nIRy?cH4Z({oU;2yYoHuY2L}NXmJnqpwuq)vp3bWC5D!W@1Wu%eW3{WmNGL4dn
zNMU{`5aZ}+VL^)q9;qZaw`E1Sm*z7#%VA-v+?}4)yU{dE>F2#hQtcNr{BUIU-J|Ej
zS;}<k^~Y+9b(W9TNo>>O@0&cbq*}=Bb)UVKG^71e<h(JhdmdSN5PeI*U`tH4W2<$i
z7V?P@&W`^~VK~hrt)J8BSo@N7A+PLapqX{18Sb6mT4L5=a(930{*_6c88c1$NOTIQ
zTWJ7?kkEsrj!gMoV%2zXiW%PUJa&5fj@;1sM-8Hu`hsh0%WrI=JEfsi!@@LO#>(;|
z)mP%}`?i71D;W(Z=xvcfIlI?T{sTw)b8zxE4#&-{{G#lu<?hs4HELWf5=6QX6JHfZ
zP&|uUG}1LMV~DYuvW3+UlOT<4YWnxbRu$j79b}jlj70Ly&D41+!qEds|C;@8Uq|v$
zur1~_=pmT-`@zoW+ug=K!AM^5A9wor%==}BS@&Y_oDy|w2YN${UB%xlm(Cddum+M&
z@mP|dBs;L_PZ_JEJuD~`9zEu*6>8L+Vfug7s3}X~a<nM1e9y`ZYdA#d{AhO&6lY*S
z%!}!Lm;1I#vZrt>F0SjFL1Q8V(!58Xg%sa5{Z{>T@!gLlb<-N3+*|bsyDF64^N(yl
zibT>*1@<oP`Yd11V;7noe>I}yQM4HjJW&x9u<xUImR~5jVNU!!vPf3Y`+J|<@eKj;
zx2wIqTcC=It^fV))yig}x5F-)F*^5aXL+{JK#1IPFInPrB3A=rE%4D`#(|)_D%{Yu
zEW;&UN_#8W`$4FI<c?l8M@E>n+|dF}AXQsFM%|01+A>q49xLNk18C5>Ddye0>a(_%
z;t=zjUkHUSf;rAg^62!GoAG*!-nM&tcMuI~u=4nIg4&{V!1&Jv$3!*FgWf<Js?ypR
zaeYKMLyT|WV&lru;o7^+vN=%ll-p_2dN<AHV*giopuFBH2aSpG-Av?duW`UhFF#ZL
z^?Fb*yX7)BzFaTEyy6R*XO7Y%3zmzu!#^&q)XL?i$%{sf7U0|n<K^)&TJI&Alq=|1
zVG9ni3amR)FM+zomnD_!CBgHTx0zvYx<0(gvw9bEkz#SvDs?M&S#^?!?iXTkjgFc{
z51wCm#!=B*lCWX#&Ynx^esDWiGjQBVr4_!z&#R}$3AZq}y?HO3b2aNG8-KE98`*0s
z1pZhOuIFTwB;5>8Ml%Kj-I%|UNsH5RZ)hk<ukqlt`k|i7jbc<DI&b(;&2oY7y?C9%
z=2d*;rkZdpy5*kc{tgkA3OzruNWK~?X@b1nNvz4E(NN=Cd{*E`Gq7UqxjC*`=f%!Y
zvzm+4mReP$XYaYAphkljwu`t!^lq|_Ol^V<yc3yrPm*)jSLKZ94!TotD=ndW!hJ4|
z%Vde)5zz*Rs6du}xtx5r-~p>ANKS#EQQ}3=l~`})J0AP{nE@XotnajuqAGiE7KMvt
zY_ZVPC+2o2MKm6xctFko6<(02r!^x6Rz722_;3e3o<m8Uw-N5RnaZnHue0`o{b!t<
zE54D^=nw)`!Zep!*Y&G^f%gX)$zYGvD5PXlcq+{JQQ&mZ8AkO(c<QF-x6R&KHCK_b
zHMfSk9?|0B`ige0y=$4O?+bd3NDS1UpJBqMO_iDXgwPE(SR5Frf>C>3UyT2A4Poef
z7$0mpk$u&OijhW-D;d5g{>FwVoEm0H_w}7~KmjyVLkD4}zQU~2580Mr30;Y1qDg|!
zF^!uo=$ZTp39GBznp|&aa7rjM7i20=$`*D@R>sfOR`h~w>f6t_>9{Q==GsvUrHR5a
zINdPbs?l9v-ep_q`Q#G!^-KW7o)RDbS?2?!UKyHuFws88Qp}jandsokOv1b6$z!)8
z^HY(8?6n8=*?f1YTattn2_K6CF++(vCH^cOY!#cvj{Mgj#dX(a-h9E}PXQ-awQIPX
z!v5_;%yHhmd|3k39;sU!EzvE5`|3cd@EMShyH^^htu<Q|s&Ek;WD9O~Vb;{^LVIhR
z^`$?O%qWrF+t6T(ITE=9w8(ozzakvxIlo<P4B?G_szT`9kt>;$TjK#%bD=*jk!F%6
zg_0a}wrYH%mfn_MkzLl-(8v)egLHXXJU7$u*4S%+u644tq?~x{46}P|n{pihZ&QeF
zhgsX!&k?>22e~e|zuLBfwI-mE=?$H;S1QwNkwMXFW6jniJmV9&m5Vsw99@`O$!i^h
zTvgdK?zyr(EY4i?)7U*itEXe-Rlql9Qv1zXZ|NtM^L|j|je%8r)99v7`njKZ>|V)B
zsWjT{W&#Pt)7aWu5+N-+^E>K*6L>O45N45OwdysR%lVWM6Zl+IDD%O{*bvlfWvqtG
znszyJ<ZH;PXVtHU9Tc$@l{W2mdeM9+dtbV(l3KJl32dGG$oE)0FJBh7DQ94wM>3_L
zDCM37JxgkSeKUs;So)~}hr)FzNV`X4aq`ds7Kh!R)#8oM=9=EVPc?lM{+IRP^PI~9
z_XYB#5oDdXShE!mQ&Y$nV*M*g!@hg6o`+>24<G$pj0~;WfH8kC6mwvCYP(#<eeqHf
zUaH{QaPZxy`@dh~`1_<(wkU(W6e4{DH;70dQEi1HP>2U&0Zb+$&>%$%f!I~XFjc<q
zfx+dh@%h0H#FCNuYzu;VN%L@9JaR>FDDTh*I&^vT(~mmpWaFTUxPC^4P8eO67q)WI
zJm>3j*GWv+iY$qPL&o@AI^PSU{W7c4z7^#<0SWmBq3P-})$Onm2Mqp)T)S2H2X5vN
zTw9vk0E3aAZ)(~EB_0$d2xeQ!4%E`!o0OE2H#*VD)R#+r29IvTS;d%G((otT917{v
zeo+@a04VAfzj)c>4Y!hslvB`_&$b`j)}Uqyx>kYWx;(M@#rws$BQ^(slzm+NtGH&h
ziJrW&<EP|Ou6L?h_6B-Y21~QQ3dqt=pGAkN)Z)%VaJC<5x9JaYo(y};8b7ElvNnaZ
zfVN|0wiV5-k)4$TdWK9x67Zc@UJu?i=_aHN#<AXjsIf>{{7{0T;?DFh2J5EiuS`0?
zpVclKO!+}Ko2&(vkK$lg%~sl&qd@-$p_8#H`HH+y{J@-1dD?p|pu+x4K@1B^hX8V7
z^I9v4Rpkw9q=$*7|L76Uz8=nbFL;2Za)j%snc1>&H#hA%c2Uu}wO0`Hh2(4ciBBhu
zg`5TELH!i0D-|#P15)z3hI>uFq#_#AHoa2TJ5d^cE3SI~SPazu)W8&{aQP4VB}*#Z
zVPeb^qPouD*E0VkFrq$!S2&x#PaMR=i+<fKN9(~^i?4gjwCiSI)*^Y)jqNCDp3U<I
z7|jxiHX#0Cw@BBGh)-8}Rd$odyIY`yBBC6v)@a;n$w!|TuM5?Ddlp+2MfN#w-9!m*
zMcWSrS^h8-KDl-Z%al3%*7T3>X$X^~#1lYDX+~zu{B@H(;#r`I@B0UtHXcz3djX1c
zn08Oll)vS-^j=XxYQ3(0Csxx+k9tTp{vXE85@_c%F&<NQJL%p47DDIa7n4n-Lebc+
z0g<|8QWc0AccSBAr3+IRpLBXstfM1V|AI{a0|4nI1D71>m%zvv$?%IX2;@|i&d76B
zA9d#x2E&PC%<ggCg$|R!H8K&14W-FTbXdJYfB8G+2o(Uo%1(^UVUSQ|ExPgMFS^ka
zY<VE5`OU93rs#*$G&CGEa=+Sgv90uBw26GS@~08R)2%1Q;<0E%<zraJ&HEoq7b89B
zXiJ?Yirhks1ld`-aXic?w1M6%gnu`0`x__hHBPchW@234E%qatOj>u>()yd5LhGYy
z5Hw1rWb;@>?3JZ-M?Accam>NTl1iTUU#S)TzV@HW!1#sG3+ehC&{R=T!MgzTFjHfu
z*WCp|)OmwWr(eKu61#MseiXf0G|`<8x=+|CS(&%ZVcw^cSuSIC^1ljR{R5IUW(}(u
z<>%K8z$!a`wXxg9Rv#)9Ad97w*WKM^JO}8;U!Nh4%vb33+7~Re=ynGp0%URMjl#i~
z$<j*98uJAoi$9<rh5S9QvUU6{qLm*FkT{{vF%|*$f#?-l3GwmQ1MA&Ej!3O7E<iaO
zy(716uF)uutEm;$`;;<hTh8bWbVEx3mJ|sWHk;!QE){|RCys+N82y1eH!PhK2ZQek
z96B)r2;{yDWI`Tk&}<q0fROe=BS$66=q>C-BhabW40=+8_(dlZ{STu@zz27a3GkCX
zH?XsdZnv!Pu&dr?!2Jz`IHm_HtAw+4QvqR+_CCsz@YG+UyaKiUuHFf9RD&EH0x!|%
zofV2R12=yFn8tAX1ff$FV(s=<p{xJHZrX+MoyYh&e=6o2np|~VL7-H5NCnQVK@CUl
z>x6$0cZp)mbb_H%_>_U<yO9<`d1ZMSPmtC>vC;oR!+N=+i@Y<5&meP-k65juhZA{o
znL}~%yPg<S;UdLw40l8c3`wu|sbM00H4ZrbRh{D>4)g14JE{niNxVIBe`hdUng%gn
zWjPIxZ_01?1)7AQiEx_4zm@uzfQ7(~a~GKBp8dn2|MS%o(F-^wX6_aFb!Q16Z$qVW
zef`Po```62|2ZF5L-_K5h%gJRK~4KWp-1Ua_cH_l7W!EcJBqFGpTGQ%*v8&`6j6T8
zGR2@@YUP6!j-gE^lmTV_0XFH$#{|cj2IS66FV<{ppvRK)mLTF)?<Yks!7`to|G@+r
zBx6b0It0y1gzj2xaa)7eue=)JdH_DS;nm^NO0ilRP+{yJ$k+dTO}B(|NnjarM6aXY
zHaTtyZl9Z*!@b;}Kg$H(u77tUpd6X(yRqABomOTb9)p%T?&NQnTEpnP0PZc14FC&I
zBhY|#`U8~z30xpTu)+jG7#|HPVeyLEse#)OFHEZJ+#{$*;1BaQ5d(WZdyR;b3@xkx
ziNIT%^Fgf$VI_0gXY`;RH~tTliYIWH=tQDQUz3c8V?9NiKZ|yh(TF;=bq#lM|6zEd
za29|X!rCM}D$pzhe1wM~3PGRv=oxPCTiQ20gysBk{&W=sI>6gt+c8ukVe{M`Qz(LO
z%TV;$!%v*}1IGQAcYXzkB#58w3#lWnVWwT(QW~eIDAM89yrYSlo134j{lP;36Y--F
znP3O*d#W!j-@yZ)0<ZOmN9TUBxM0g4_2bPxeja}^<P+EcfF=?zB1~CujYNjIlJJeA
zb?5^VfL?u=nwnzMf{g%L<@_O%qox9^k>lW&FQ0+zP66-T8j2RtcY3+Z6RBm)X!xo3
zosSt<Va@J<4?U{O`Re{@h$mhIz^&)JrSR-@Y;0_DA_GvAZk(aq(*2;b8KWq5ZuvH>
z-K%P#C)*MG-t7gnS*XAL%lSPu__29e$c=CD=C9J7|LvX(nSin#@;82!9r+IQ=~^L;
zBAlq4_h<pYpIBx~jTcsf4(b0#75eA10g8?EgGpz@EZAK26?^5bWJ8`f5IC<%gW2{A
z4Xw@7c{~&EGX9784~VcD2Ux9*yCi4nz{0U92nQ_f5mb!pnDw2awCw>Z?AWPL{D0J}
zf0}{;kXMM{1#p_zI0@7*^T1Xy7lV{4pr7Q)Gr|9VjBSWPWbz?NI9v;eA-Bpc+M5+0
zeH^uREU5zO8*VLDVg4}DQFl;)r}Ki!)#0zuj)Pl%et>7?!8ob>6`x7IS^4}94gck5
zQvltkoUL#TvnJCjP3iT+)N$fe{>N2&RWB!#5Eq5N*rNZp1pLzHv4m%~jzGGq?6p$B
zb*G=MvF68LO(C}T=PEWD0UXI+RWSeODiP1@3=#=4#4s+loCGefG~<gk-K(wYKWi;t
z0JsOf7_+_I?MWKsazj~#CBu{m7AS0Mv_D_9%|~?d?f3Nw5ROC=xGv;ywy=Y+2#4l}
zX}M{}03r}5L*DNQ{!Q)sr+IeX18T$67<}J{X@$O+%}(zjW~uoQ(>2ubcNfclPRKD)
zfY6257^1HO6CL`R%J~|Z3}x1_OMU2%k0FW<OuoH0k-i+*OOH^FrP{l(!zQm6|GfWS
z(U%AW$e~-Rza|R~?(Gfh8G}3Th*pO9QqiN7ytw((73tD&LYyY~`fI{d30M~e0w+1~
z?Qe~et!IH``K8}_$=}@3|6Uz85rXx9QHN}P0-Gj>t&hiG7WkdmpAmRxS>sJke;@>T
z(!-L(@vSxZw)#mq{@gL3;++|kJDk!$DgUdh>wkq1A2J3e(N3VsF?bhP{MxYJP)sy^
z`m1Tk+#*?01?F!X7C^!-A_jC(0VS*+Y_X;3@9zhf4!CIl!1p0S^3tS0u4z0LDxp(H
ze~vHbDzwT^hSE01oM!dci_U+E^8szgd?I|>S879N6So3lwdw!l$v+MHALXEWRkX^E
zK{_168TQr6dd_--QveS7rA6B}VN}UKX#d=cuS^Lil6Jo{T%yPS$Ygr0q5rct@gIK4
zNA%81lN5OtXg*~O08ZJ3H~k9Hh}#baNG8VX|Df)6TG$k69Eii_D8zsQCFLh3FVSj5
z`+rcM2jRjI-~KqiL@{>kCc+mZq6pMlm@ELs!egc5(elbpjQoc`hIlb}J2n%Mj`D0_
zs#jv3i!t8of*<}jtlW8A9>Ph5WsW?4u+?Wm@JjazAClmwBgGDQ;Z*#!a{WDZW7pFY
zp>IV_8zEeKzI!D>IB?u2pU;F9)TOOtWoAf9g`NiZ#OsA(Bcb=P_TxQT_9krh580l}
zDr!vMC(M4)JR3SwP`-y~+}mB9xfV8|@wH=ktw#F&I)Z8iYWlfypO6HjzYPCCyOus_
z0Ef!=1m+)q#K^~hwk=$ooSNbt4B2QjhQ&iR@3-nFX#Vk=e_!%}6m>{KfXwtEvwR!>
zWr{HTCXLl*gfM{z0En;{WPhnD{9gnA>!Kk<IL1jUJHuJ-v!y&CxCzAlg_^yxM%SyR
ziP`o@cp}dyu>bYPGYximlx0&vhF2Lclan-^i{_EvQ3-TE#>~zC`{*5SjyVDKGwjC{
zNsQB2*Q*3{VhsF3dHm0)Phh(-kN;(;dKwKc*IIE$rBtQWhjG^5o{=)ZGwv5@iA?1-
zaDEt#?3H)Dk}>1WF6MuW35*|)dQ1o0d#tNmPIwts4A13id0^4!679dWi^@lY2UBMF
zDS`pXsGE2K3fow8nhGUz!u+QR{;l3)<@Tg(VgvyXW%PIAbPP;P6Q%Zz>^G6LUcWsJ
z{3iWsH&rw#(wP>Tgityc!b*Df{Pr7qO}8aU_9d41+QZV)(vggejJSf*tNd5=Gt=4N
zh;B=J<)8i(8lk8ErSX3a&X)??K%pywy~T02yJ%ry(VAXXb_6+R)mM|-8{UWxzl}f-
zjH;T}_b}<c;UIfOU%7(*{x{n_fi;A)k;H*CS^_MB>V(~wHFKyk9beMir4_zfRfRw$
zXE<Cqt^E5rC8wts7F=|trAJ-lFJw`EQ!SCUJW(Bh9`u`~(s2qM9+7pV_QG#GJ7O$|
zJvSyU(TX#<cS#Z^#{Z5V1I9tt{rJC*;pGC`K#CkQ#vzH2vNDAjJo^K|n0$@P9=iYH
zN6k(xS&5~i37Bifyl7gD#QO7+uhDNtYp3^8kMvXTWq6E9&&m1e+|tsrGQ^ASh-Tb!
z8?D+jrx7%*_U`|4DIv`EFAuswZZ&)jQeu8-IYJN1t2#5(d1bP-#&s6#*QJvRtq%Fk
zs3CC4<Nz;^4d>NaSzS%d`yT-P^Z6O8zgE^vug*osu4_8Kc@4ThO6hf)|L+#`WQQF=
zCr@0e5w2=lXxVl4dO9B5A#E(QhWqk|pq|Da1d_<~;Y0o6XI}*BL~duBULa=-#h~Sv
z{cQ^HwFmGO1u1cIa*n(uARyN<e%n-2a}mMA!_!v#Ln5OvZkE74pDIkH{OQxDVA(}q
z*c|5H#F2rAp+E@YMrZQHPKi&EsVo=oFI$f9rcx5%+uJ3)nD91jHajpWwKNWi4g5{{
zL^+-pz(nYbCc)5S%yRCl{Hqo~q$FcF`kV3MxrRi{CaN{vgup$!Q<xN~5s4oXfwaND
zX_Wj~F*&k5ekY7ZZ~3r(`;>hb8Y$vI*|XB9C1C>R%@d&8*f!fOPu8>Fb&y`+S(CkX
zcXJlD0;FGNdWdD-<+g`M`bw34e9N5Lfn}TWf%L8VwPN6_cmET@P=ooZN<>7laiZ`8
zB1K7&LY#X_^BWp&`sRF*U)!Z*v!F65{x)^^K0YfZMHY3BS5Xs+@>S~Tlkn*-%_%Fh
ztlJ}iL_b_LSwvm_J4*aBym+0!_DD-BO#q$fLf2|GaMvHNVUu%lRt5w`XGN`gR=V>i
zp8qzvrZ5;%S?p4@3uYU}G)Yu8x4-?YkgB4)ZlFW`Eyx+5F}Og!5cJ2qLsF2JpOhCx
z$J8MmzWB)Opk-XjX8MPS9EpG}jsqMpTNzg7QoZ+Lm8~pqYkTxJCX%5_m%l43xJ&E(
z%~?D>#bNaFD3}Ks=F1tY7!s5<b67Wy;K+{Iwx&UQqME1GLH}b~zJ_P2l6G1Mom>)A
z@_w9l)TbtiD)og(;F|f~k&%%qKR-W$cccFKDK8+7fswBA=N{4UE2S%KyN*HbmbmvV
z8iz^eA7;WJrg9xtpFQ+q@=$+M6Ojxl3<)!Gf&uoI80?8+MiSA5&n3?^je$Ku)$`}i
zEfgl`#NcD0{_}o01n!(+|0^IJYy!Z+N5T!m6-|Q*0Xa>R#a6H@3r+Z*u2ROtX8+Gb
zGH1b<IH#AtuLI@p!gqxz$ElK)GO0y!#4h)Vbv{@#G&MCP*+Y)_qOC&RV;JycsL=f|
z3SMz%UCjsL(4VmUF2A-Qk^DrMieF9dr`aE0fC|&o4+~@i7lAV|9*SYS8l{>^dnM>&
zj>ffXPlu*OB!9OGpSjo6?3}#ZK5-+O;6dWx?Z7ufEVjM6X4ovAS+fol<JcdI@A-l$
z11<|s^7g42oy!(D2l!nZl&N|#Y*D^G`ORO`Szrr{aF_<I);T98CQiqemzP(h-Ez1`
zgO{hTpGWb;?lEsdTk7rKI4$8RFuBO7zZf9?pUDOMYw}EPm}Ls75|Q<c$~?(ey>x$;
z4o`e4As$?);<Ih~X066VIog=EXI)gyKW{L{rOjmltK)Z14f{0=tua6O0mB82=yZg`
zT6o;v&Q86ylhgG;F<2(jswC2f!l=aP?o`aeL%siCHp~Nb{y3PL{tA5ejqrcW=7kD}
zPJtZ5;1<An*^SC+#MM(EpGQyyBx~_&7f(vuOP+ctN+cXQ6n|Rljiz*qI%s{bQkiXj
zemGQ{WTV6@Dqu9l;`6^gWb$l+6q$owrAYiO2D^$;JhkjKi0mc(@WxUs>m|2t>ExDI
z(!rE-O5AUne&Qto8&De2gCF&%qfzUl)8n%ka_YjLTQk+(F&=NQ@9#w!tQhfO-m=($
z`Zv{h$-$F~fnHPYMmkvWmTXRbnV`d4uu<t*ob57=1>LZ?C)PBGR<Uj0yvC^bJ&;+$
zC2lwfvPX+VYX_@YQvPHatSq5L=%lQOC2z?6G*gtRp8??Zj5W?UYDtftwGc{+$fZ{P
z!THd=<^tMTM6*e~uGMQP19F9Wa5ko?ZN;)|HndR2^WgWYBC9Q@%sRuu2vHvXu<@*X
z8O~xxgssb8{4tKanHylPN3q%-)FRNcIK8t=dPn+7fYAGS5jH)^zdekP50;a8dw*?h
z%?MI|n(*@W+9%^^0xNT6`p7X?Dg}CQu{VoCs-C+3A5pbG6Ddu|^v9%_UWs&?yJ~5?
zMQ5TyH}Y+?wG4c4tyzxM!M}K!to?7xP*${88Vsrewbf&fXsE8Uxv`^Vnk5msJz4?0
zRNc>UkomtC5g9hGdeP1ZrtdqR`Xy4g+zowTrOJJwi=z`!=;tXo%z#ePFJ6xZthNq8
zpdq^(LX%qfEEFkdixOcfD03eB%CIOTrx($<cF5M>&o8xbJ1uu5VMFWc+`~u<lAV%4
zFljDwyDF;MhG@M{T*R|LUemjOtJ9sBl%zE_J9`z<nOc1=EiBxd#VW9m6<b)RS~3%}
z(tl0y{{4I2!-IqSg6SSHrG}Xm$AL>Q$Wd+M5!0MmbKf@DS~u#V%HY1_g8`y~q0Gir
zcYhRxR-^SsPsuY#9G1qo15e@wE`Be!qQ|xinnExUuutU%@X8iA!Lls!5x}vj#0rpK
z;YpxIu+nMSc2B=Ia0Ir7Wlxb-RQg;Vlk={Iw=cNnRkAK{ai;2dM0+_N<=f(KlyS+C
zYo5ARrn?)rn(%&^O4?z<cWUk&-5L56!zAj^5b1}N6wqF#nrS&~*?MER$3?EzLTAdv
zUJzHSxK~}`!Z-0V@U!M(g{$2Ykk*UU94=HbrqqQuLWE3h(fSE|1D7UEV<t2+(YN6W
zYd+0j=3V{8@A}0B&lkS)FVG2TQQim9dTgXOq$iC*%eC;0k!vtY(O;2+2aX9OAURk2
zPcIVoFS7?@N}6X<D5;!U-1SygSzePQ-GY{FF=k=GvNvL2S?B34<-o^akZ`L&FZ>Zo
zNghtstjQ3_fa}mtw3DeNBf0^c&s5h|7m})ck2A<yc<>^@xUHt9Mtnu;JTZUJpR+o{
zDUR*+(FJjAHsek@q=+-0lXurfkh;wNR_em&V+2&cl3rE#aDo$kz>FhGgSVKjWwdPa
z_Aa?Im3D_0=j<_$QOmH=)fo>XpMJKGemn6nXc%htVIF#{Pok7m>$gWRV|H+BIajXZ
zzvkjyB(?X^PGS~Kef8q01KVw*JNAXv`y1DC(8x~F0!s78TQBJ@YV~7&RV_MYEG>;=
zi%|O`(7|me!ENu9*0OB~*+puT%27iv8{Jz&gcMm80i)OV?}v7ZgiGMo+i1MzH14O(
zMk879E`UC(s;&|A^=7sk#(UlpwTfIf6Ko-o!ck@cnZX|`H3_NlPv`I<zDdG@yztm%
z`Sw}SvzsA!5|&u{9L1)%1nj|tPX!)P3VEZDrVVOv$nr{3GIVq#5UpR<7r;zkp1c8z
zaCRzyTW70`$20qZE{Q+(T$9PylUPh9r~v%-O;kXm#LV{-aU03W#qXPF^;-OU{rIN#
z5x22tmgDD6UkLAQ!CvZ#2h9O!3SUdirwbLwk<M2=1}cYH?^_F8kLjn3w;M^XYqCDR
zkjP>)9@!n_#Cj}g6dHe_!BV(?sTQ;J5FS)(R)Yrd%kJB=%Bpx}KZJ8J*u5vHVOhQ8
z+EDAN+{AF+fK0|$DhIn6ldC&)+midRujr8*4+$%AG2={dA6*EZjx8&4scF4e+FR_@
zsM)Sec{frnvU<hR66PMB-aMVz{9^JfahV`DtZO7vLqj7B8xQX;CS{?sKyh&$yzmCM
zDHrdk;aqQJc^M=a2YPuJL=L8N`U=9jBL$CkYD`QyRLV}2AFuEweLc5U9QcxzAL2Te
z$G`P6)*2sYq7iTZ!oTvIXY6EP!eC?YjR9A_{hH7kY2)`OYl%^67LHm_^DO_h%|PX3
zo2dlv7hP8Q^_?6})@?*`2(=6TWS%sy3(z?73Ns@uc6L<zo7;y@5$05aqPNn#h|h;R
z`7RRl!qCO!d63@Qi>T5smtAB6F-kg6zFIFK`~Iq=x&Nemp8en`bMV}4(hxUeD#d>2
zrQ`Q0(x-8l^rC8|gImrr`S?rLvbWAX;oWM4VrlUPH_5T){RJ9{?>+g>HK*&W9tlj9
z?L6;W#}AMZ1jN0uhb1Z%>@!U-Bu_j@RnxV7FJNvsavMnp&m^W5&s~6qSJp>6){^DS
zD437HHTvWJG)j+|la*(eV<)E#6<>2?Bw^l41@u@0fE{yI#Al~pFRP4%!Q&_hoqRpT
z#X3TJ1@810HIGY6OT)6kfnh#tJ47L&Djo}rMF}iZ{^efPF@ELhvKW4<#LGNT@)KQb
zA?2}j!(zzmJ>2GY5_mYgmy}+s)3qcPvsvcB?#plMxPNwF9h(qttIF@WEHQsV@4>k9
z-}kv^mA#uChdOR07(HjM;tjMv=fUV={V0hf7s>e!m+T8cvi{ovC`CE=_7Vo{&@$ZC
zw=Vd)#6R%{e+edm5I7=n8r^B_E^^9>S1SI@xTz@f07sJgw127#ZCU~c(q3KuBI=nG
zwopF@y%C}yjqySZ%ZaMFwioJbM7SF=5}M*?ba(?Ex#U@Y^rD;$YWo_f)wP%0)3F=%
zXEQ*HR9>Hhuw{yu_U6QNnwGZhF~v76Jy9qLY!UcVC8MPj{>QDw*)q-a2=BKBuAPHD
z>GzI)EuC%w-B&g5Y$hx-_i|<=aG=Zc)hE93NP&~HGRve{G$yFbC_#;-T`Fmm@)lk@
z;6@-*y4y+}Y;iPl$qHJpq)$ijx2#)v`JPBdi)i7ENvx{!z1&SRPIqov)Ts$ipHi=s
z5h4@d`=ksm!B#s6(u7n6ZNeGg@yTO&M6Wqm=eF&s2ajd9vtjRwr@7js$KOadlvqvj
zL*`=NslH)Fh}Lfhzn!Jr;#*%{4SH)$v?`|!9O_(M+u%11xWA}e%127*jfMM+Mf+XO
z{2k1&++wD^wQ!~{E!I{`1Oax_xdZ6^?(GMmlij=}3TEApL_vI-M-Ahfw_hr|G`9>k
zLe-|TGuU)B-M=In@CC&)Ouc~i_Tul*I<Uostj`{m53^NHm0TF=#QxNvrx|Q(1YQ;c
zY0^<TJ<bXoGc1qXDrv=N7f?Vgl;8})kBE2&gO~krANUC*kpu`@1S)PhLtA_7MM8z)
zvoWk%EQAjt+@#r+V#K@O))k6&4u}OF*MCD0FqpQSc>%=@VgNd7$yZlGu5dw@6y+C2
zxnX`?uS@xo@dJXEZ_xdNS|^0uU=CiiVYRW4p_S8wUpY`8T^>LhOYp_(mTOffw{tXV
zAyV@6dx|)$u?V8=)0~HeDdGE7T?>7-{1fF_Sy?iZTu;TXyKufBL&_^5dA-zlN*UXN
zG-k@mv#(b=EKE&LO?zT2L0$4@UP4^xi!Gx~;Klo_2Q%1W!uh+;3&nhzdwQA&iPL9A
zY!df4VJzc2XA=r!ucSq)igyh@r%43KrIo>|&bpfS<U$=6irb3qzo<1dDXmbDBK!OM
zKUOKNjiu5XcQ7;th{zl3MUXCk|Necc_2BdE?QNL&gg^Hn^~qy1_hR0G?n~nqs00De
zWNmxV7vG;cd`ThCwnkE#(ygh)h*pK#FBpUOE`Lx$$6waE2MfefMt}GbZ{UnE2<g18
zlb8~~hlhJNrb8pu5(g@6469c3NZ6aMwFv|r4VM@)5Sx51k@+@SQ(HR%&v@v<7<bT4
z1}URoc_p+l@#9Bx{qptoX(IZgX6n{K5Q=p+#+b`Rp`CcHmg%qHqYB+QXD!!Pfdd#m
zjz%g_G2Tv8EBm2bhge@?bc<-FR^lH!0o>?g+W}tOWam0}^Uk&ZkFl!`tFl}6vH>Y+
z1f)^ATRKEQI;B&jySqd|q`SMjJ0+zXq&qha8+23m<vaJBd(MaVdCnjDz-GVeT`_Cc
zteM~ZMt%XY0k@(Sead4GQg*GBcX{Dvqg;E3%Vt)vIbsMfdmWX{tSO{dLwe7bUO}A|
zyhzW;N7~xjoCLc?o*`~huDbKp018DL{p{R6Z^;o<HaqI5Sf!E(7gNwMBI47&ml2vH
zyEqRVHA1`_)cwaHFWAE-w)D$n=M((TOn6NFsTh!V&);59eq<6lNVYe~S44-aLFb?T
zh~E+~V?I+RJ#rP|Q(Jq6gnAG=U!W@Ze9@5DvPHB%RqrXDYpSoCKhZeRi(j@)ZaA<T
ziY7)|lyJ|GOnn^HcCTNF;;2LmlQmJ5wQ(#)>tlX<sV^(MP~lMWzU-S956O5uBz?T{
zs<`^n38*+W?o>2VS|V}%31!PwY|Fuo|8k3)BfJeScbLCd0esxY6GuBh@Kz`a*>vf?
zG>+9?gR?c>`BYbm7gRVXPujj|ASsI44Znc`cX=P$bh&8c*Q5PfTMrEp{B&=(hu`@!
ztjW0Lg--bDG_UV{&FQzoiVINLa^O5Ev6j2#6D*Xsv)$8g#L*P6UypzQSVcwc@WH`>
zXUq|aZmyV%eB&=RwLVC?a(LDXjbzh%pRjO}ozraeQZ>3Xwe4{(s{q;z!xwV7&m4BY
z&a=a`#^*tCqNs|j6#3J~C{Np}jRtXF#s3%=+z#E}k?`8hzpMw>hU;<Q4jM>yRZ_#=
z^5ujHkdOT=4j?8rRrSj3mKUeu-7*>g2u!ZFdoVgJMS*_X|Bm3`sEKO$rLV%Qa`;xT
zIQ7SwyV19cB<h8>On`5z-pR!UeW41HlU~;puhlwUKMvI&6{~U}^b<vGUUc5S#aXI2
zIEM;cE5Ld4Pw@VREsd7vd=ZKjP@h!7EUClPSIfp!%SR8@GxSQolPUHb?lC+J%<g|K
zLWz1#P<*<P$?DONb`ANpqjO(=wGO_}y~zo7o}MYM9ceHvvL;l{mlH4s;J`E1bbXaW
zaChinud6tuQC{yi*zfZ8&-L4rh9UE-<IqSazRmBvm#C06__{!ag}m^>(A}$!@H+C9
z8LmwY!+XBF=8CG;PVGqrSdARGg4g*eDrF39{L9TQ$0VtroIi}59t<>kB{4_(I=?Lc
z=G<V|4t1uVm1Z%e-tMW_k5l!d%pNJ_!VZZ0kgtif`(&`#Ci?}>YmocOa_)*rh!u5q
zJG;q<W14!=j218fg_oZ5J2j|bM<jbUCi69BhmpnS0ezeW_+bO|XkM;|gm`H8y%=Mz
zw^Rhxl`Htc>a<x`>(nJG+PO-#&ncxGevjL&|2CWf-q+|DCT@td8&bWbiI5jwil9k-
zM`R%~ip;3f#8J-dHybjyR}T4X!0GID$4C85L<qrnL5+T6ztLY(G<EyLRV_5hn!1xi
z$0QBn79l%YeO);}Lu=|YBT_vcT-<B!S`#tD!z}ofA}Fz{2XjnrlXcwL270mA=;=`a
zyY_m1V(Ri3T(@7QR$kT*nfam8UO!FWXJLR?L5gaaVkyxG5asA(AA_leiL5J^bX%dd
zas+(w>I?ci`TXKx;Mwx4{cROR8ORW0E7yWjYi^PAfmfm2idJ_Rn0?@d+l6%h7gDi0
zUb!1{lEcZoc915u+_xE2;^Vfy6&h;sI-mgIu4es+_XWv3f0LJcM71~}M^0rk&9_1k
z)(vKGgVBn5E<$tw@9<i0CABCt86iWKRB*R@c3R}zh7$s1J&kA4WxIDk3vmfT7R7o%
zY<OiOJaLoNss9e~B#fOYW@npvT}4`?7BJh1J$82yc9KQ)K?^iKw6@!twqdvN-SCLP
zONDKHP9sjf+A_=-wTn1(c;1Mj2tI@Lmvilo8&jii?{SAr!6u-lKg?Ab&9n=TnZ%^$
zhqEk2jeCgn!)I3~O^S6Y38L(}Uae@`Ox6xBZdUiJTV@|;V)x!%9hQUbl<%oSU*Plj
zz9=4otPri1I7faqu-DZoUc;qCBTe$`Kae)PJ%`?AL-wEttvLZ0K;GYp&g_CH@e^&F
zPqNwgI?bHl0%t>!8Q3%lW1owYxvzlNw{*(*a&GOnHQq~!dkz{cl3Tudo(-W;$ZhP+
zc&9h@-kGt!k7>3#*{01+$C|iyszO>wS|>xZ55zS4!is$-Z!c|d@vC$=2d?4Z=JWhn
z$#B*bbDxFzd9-G3!&)|Sft@p1%qZy;^;qtkrNu@Eylz^pDmIh&lJ?x=vO(e?v?r<w
zPiLLSek}E^_ijzlTg$`%DMW44B_@&PV1O8B*nrSh<y`>Jubgc=V(>$<jqOwM{S1v0
z7MMUoQwV#`C7%s%iDBHm-L7#XwaT%kuhS0cdM3{%rcDGO))sdV04`}`d)r$zO+sp3
zHF&g8e>}3wq&R0Gr7B8dGyf4&smT)5q$-(~e_*oZ9Cx$Rn(S22siAxQ^Ed#TF|rBQ
zww3XRy?f=%mWY}l?=Wk_C?Zo|Rek-{YHgZ!sN{?Jag!Dg<gwB4hJF7*r{(wQrhTQp
zg0FLu;7$3Y4(ZXC#eN!Vjia_%&e#-Ns~z70a4uqO$XW-C-_cvX9@Rk0sbbi~bIYk@
ziByVb!-W>T<SraseUh?%$h#_A+Q%hCpkz5|$2)jYL?-yK(--hZggWeGtNW{b$ebH{
zJ#ung@7Ilm+cS0R6Q!&1UFA35e-YeRVlJ<PwY)Ne>6Q7BhP3O@g**C&7bEO4*2Wey
z-sbf$sR@(A{L=8Hj*gBhnmkxZ(WRhELP^k2b;%$s-@+}0fvGMx`sCQr8zbFR0xxXa
z+SDnurJt!S9LhiEII|oz*GX1-LtGD#H!E!_7G9aZW*nQCurJx;6)lwyN+vVWeY-q=
zFEAO~e5qB!URGgd^2v7wLMr1LMGeG5>wJqxr7K~j)D^DH!PRde8pn!?>W29w+za2S
zYPd^WcVV^WUU>Q1xnG|Q)CJ%Dgamf&GO4sBnd6?)w)Ki@uc7Qt`Hd#;e=$bpYa}#^
zynK~+FsKwhGkX=ATYkab=qvYnDb2IcQF@nqYa&P5JW+^Jhsx-;J{8u~e!6k=y+i4&
zj9~fgj1CnzyX*wMCjEDEu&yn`#+ycdE7RWjFLfTp%o^L>R-#7CVOnwa68P5)s>4d)
zUccntP)gL|*wg*S%gf6Qxy-V_eAxD42s9EhaH7ctGaJ-pIX<tYS^ZVWy4>0PQafWs
z#FN=+?5Ql7{#)UdxVFi6Vk%1NFoC4qE72f3$!|tj%rE`%D0F{R!*e9xP>sHMneq|T
z)&K2US@Sya#ob#`3dC-}u(P-g_NZlL*X58P%4Gg1_`Ke7-aZ(QnW=lYq-NAxOw&JM
zkeC~uHzsEd@3r+}!)xQd7N$I#3^@f~<}2PGpWyOsXj62qmGU`Lw`h~g?c4_5r&QEn
z@6pKF3|(x7u#cE>Dr47vrt83y$_yj2<HP!STtJLBYzs?)H{d+KO0eam&3V4F$jf|=
z1qy=a;9G#ch-gZgRaoy}V6vT*ea+Kcnb2cRRG?W`Uh}ipBfH7}9l?Ir@gTz+?ov&S
z%TPH&20KG&+<I|YQ~6|)_kI!Myhw&A2+Fnv%LJ{l-;ydvQ`f#o<f1}$baqY?IMqlK
zStSMWZgV)7&Wy=SU)7C$D0^NGUEkzwbl4tpQz*rE6|C)0EQ}wr`~LfUhx9nhO{ecb
z6Yp?L+zsv`@wekbtH5@Gp>_3=xCVGOccQFn+QrI-OU%h5or7WGJ0UxfW$8#QxTmEK
zwVZ4<*tbo_t(mzJLqZUg#KXE;w3V4jepI%Poa}6lyleS&bjs6i5e52TD{v!iT~8hk
zAhv6tk5)i@W#R`^oV6V0flHDgi}elbYL7Pm4u?{zQEjZ3vJO4CYvA5ui{r7CSPgM<
zt!+3=Nt~4wT}XA|nV=}wHYZ(<L#rz_T0ytzKl<{nuePThkt{-Hm9qbv@_enY@e|(U
zt!}|N$nMkG<@@<Cb#^}8=k=&w86NhFRc3><c0MliMgqD=lV~644~J9`>Nr>xSJkl7
z*I&R@A(@hHOt!wV9+*k)m8S2zxF?85F8{o@sA1$a49%MyRQ7SQzO3#dEZWBeclEbU
z>#b?vf#xyVI>q?h4SCG^#Pm#I{j!jDZ+~xPK?+T8HGs;bli<R=n$9m`>^VZla5b&J
zsM$HcC<n`l&@G}8afFp4nZSMJ04@_sctOkhm9=t0bU#;-h+yDKP)rFiy&^fIYBR^(
z(Nrf(Y<TrNPlUorb{8$dE~j?mI>YuJne#|z^F&OZ+O^+Hu+%1M{Ds+IT3_49)WPKj
zGqBu|^%(0pX|A~^LzG`Xgt&medNJM3ew5Ckv$}!yLR+qw3tt+L!`b7mvfGcq>SwwU
zOTP{$k@sPjgz#>xrkOUH_pOhoQjE$dB?ebbgPg|8Lb*5w4+#h%O4LAu3K)KUe7h3c
zHj6~v@36B$O~ETc{{H?h4Nrp5;({HA);dGD9(?$Opt2}D-ejw`y<ZTw@`!xCB<C!_
zcDR^><pQT!F$I4ng3Qn^ct_7`egW)T<Ga(NqyRBqSC`uJ!4}+@91z|{=CfP66>g{0
ziu`L_?9&Ga0bu9}>J;}F&H7sw=jZqBJ?khdW10yko5g7svG8eIvPO|0s(f%y)-BL@
z+!FLPTN0WQp1oVJ!fEx!>)SO90J<~yb0gx;T&ImD$2Dl$28Qz4ec9(VB&IACZ<DBC
z=k=P*D@F1V<IqX9XrmS>g8k(5a~Wr*(I)Mqo3jHGQ!8eTs*g#-3DojwH*m?2{6Z}k
z<XUeS2!~zeGk{`#rd;p%V5FrCs&e71?d?~f5!xJlBzYf&vYT-6qCZ}$t{VX3udJ9N
zc~$VWE53j&zt8vMZ7F#}iczZfN@pR$#dYrYlTQ<P3*qbR$}N5qP7*?R<rKLX1<V+&
zI~NWzw@N*pwE(!H>ci!bb@@N~SH5sqmOSs|>+&Tz&XlsS1GvB*OE<|xodNs-E!2{3
z5=QrPihLaY!Y^U0=u1a8C2=smv|^0~-r_YPzXPu`sacK7;e!CQM*V!4%B+otQ3zKF
zHLA%_!s#}?9h}D7bVlzrvJ(?t(`*IV-2m$HuUL4{4-3%i60DJ4Jf;1<K)QuhR*)bv
zgL;L&`$bx?w@z=qVI$#sUH)MwkKJG%V}7-UcdGLo8#A8H<XA8%A>nBYZ{E=D7q?p3
zX5hx=st~*5itM)tUsKxB?oZaXlYyF4L6)KMe0F#Bk{-7xO(A!trw}`B6AA7Bg=nb&
zsWe&MT7?P>wwNiIi?2nClgNk^=CDu&pZi%gVQq(g3%r0*lEX`vY+)wkrvp)vJIeh^
z<GP&*JK{kBR_m^LCj7=b-Nj29JiU(KoXotudRjAlA@gwQrjcb2nKdiZas21Bl81~O
ze&nluzRTbldDe@J<S(e?^Qz7B<yAH`2j*}4Flb7B>nwb1=iG+rl5)EB1Lso&+jInk
z?r8Jx13eFf0JUrOZKV(|G#7i!V>Q=(MdQ9I|0OTy98Ri@r*@A60tuY~_rsUz%bp_<
zYR6UZ_Yfm(rg2OSI9?UKFTUj4FP}En_Nu6yN1}U()Da=3*mfdSBRp-G%7EQpO&+uB
zjCW$W`G7|}?(Nwsn80X1j%)Q0Sww@2<2BvT$9AKBivE=CRAfw<P_0~dn397ktT28w
zgzA`z;>7YPko+uH{Y)>mVucZDP<b&@_-Gb*HAk1CUMW|$!%6zbS{S<5bQ#JNZRRy^
z=tMi%VXUI%&KPpKIu$!Bjw`5tA@~u1c;#FrL*p&^TgSw6r-B|Lu@ULMZO^KrLI5vG
z`qnJHrg(>*Uxdjev^YucV<Q!6a1GlY(GBU=>yVlh72%a1De;bp4O^V_0Z!yhxLYMi
zrpYxknp=T%m+o;5%fX{OICSA}aBbaMIy7L(%W1pAfL9PP={wwKj$(%kv~Zr^@2OK=
zhEfdG%Y`CR;3aSYIX8pY6y;wiJ+Xc;niZhx8yLHv!gS@o=e<|2vA$QkQ^bG)UBcIt
zwGVsK?`e%as|8Om4@Z$86E!5%2RGE{-IoPBo5DWCsXNkqhd*bw7ND1F^s!aiP}u#7
zx(W34@QaI!3oO%Xztg>9oXnE-TZ{^rf0AZXZCJKHgMiX@Yxl*ffjCvk_RAU_y2|X#
zjCfY(QwFDA+_A!byl$qH%#6AXQt9f3y5yZajWDAD#td{H6e46>SmMB+9AALpCE(J$
z=^U#;f{^PgXVlg@nFE~2$5wSBOTQ5}qc|9Tir<uY285|rBk#t1LaClnwE7KTMVFNi
z-O@xmVtwUg+a}&?(Jp8t+BZ@JyLs(9MujO{M)+b)kA!J)2d_r(g#(J&F9J^6b7o5L
z)5dLtD)NU~IzY7m&Z<jwtIq=t*tX6mI^$i;s{CkBa#EU4B!ZtLG9o}pA|5W}d~p@Z
z07<cpd;?++EXEk^=__Q1vG)Z@wbvwo4nh0ttl{$8-rkOHeup0>Zg$&bwI5z<QDG8o
zYzB8np0QD-8+gp~(*euWX{k)LD8A8pQrrWoe<!MEV`H7&{vbkkC^X+s`G?tB((fbZ
z!z-GbJ$`!A*F*&RhP|R{gigpE=Sxrbx$KO~&%b>Duzh7@De>};<)i2e>v;1WaIKYV
z6~xhDvb+?o8bdV1h~-W-Q_p!WjnqYrz}g9?p(fnF5<bh=5e#?{GbjcEV^)6!6x%vw
zZWvD1<aTcdPBQedA*vwDB(fQ)ZryW{HcKhYAHX_2guBI_e-+eglEdFuH?~$3*uw*b
z!ildq$c7G_y4%5}030Vy5EC(j4cNDe;%8r9#oTy#*}03#574nR$u@Nx-2?A9G@Doc
za6W7nCtVeC`C3mJ2;r|G-E1-Y{4O3W;N#;Pb)F-!`U|@;g*)bbr|d?><j7E6=<L|5
zyB30E7^4#NUii4N`OI_FC^UVm8i|`vKm(6ih+V6|o1rw(OwCTSiqud92Qfy+mzkxg
z9A<u{r2<ONuSMavyE;AXp>Jxs>ppi{>K>^|2L1E|B!Wa^W|w?<Ed2?YSF{4KjnhhQ
zwF3y$ar_QI<CUtHng!&JFw~M=FH0?@@Y`Nqh){dOVIZmrOGYu%K;yUP`~iC&@PV!r
zSg8f&h})esVf*D5$KE@SE7j;e-*fH#^5QRbqyeX?rA3;{S9M1xO`OTp4Dd7F&L4j!
z5VS*}%h<djj7hnFE4L<L5=oS<yuhI)(IGieA$Kj(+Kn)t5fH48iKr<&JD6BBsh35_
z(lT8iX1UnFI<2;nRCw!PY<|s^WYCvQv3#ZDU62HLhdLRx>K0$r5sU{?WT4x6)GlpW
zpOB*xR2t)s>G+S1$qHNdYe#-TcJ#dTBu>{TNTkF3AuoKLWD&#QspyTl>ll`ocRz7=
zRO{9&yf6*_jzHBV@#LWM3yR6ne62<2IlrIpF=+nD{o)nAS2%Mx^D}-yvRmu<(+R(h
z7iRHBJaFbnZ>#UMTP3algICwiwn(n@`|9tvpn0JcOhZ2lmF-XXTS|C}SRX5~I4qRa
zIzI7{vCwB2W+Z1bf1aP8KWYbVx$ViN0$NtzLiq?xUVSt}hj$F|Zd-QPp*Oh4JVZ~?
zrS=N(&sj_O?BkQVgxJ$wMjiYPNi-i%M;@0r*9$A*wN08DJE#Wcjx^o#E2Sk2rD@u8
zXY{XaUqQS-ZVQUN8>JMQ_R$Yj@WzIAQHt9?9BFvH3wA*M89!XB-bzI&!c=}I^=p)l
z+?;cb0BMgKEWIZEd(I#5Q7;X1&5l-*7Xj{jpOfvDWd|wMyNNn;;A-nkC{~i5V-TV^
zO_(nv&iakaR#+H;oB1T<C1i+Y6e_~~8^!b0J;v83enBAKu^Ml+qXE_CrlvfVyU~qx
zB$`Z@FNeB&(g~v+=A!w*ON#{|ezT)&3W4$OcVSOr>tOkyyV)y7&7oDZ>1tTn2S*p}
zEue9aG630S+xYTuVMTdaQFi6rRBSctS?Fy8vXx=BzVuMK(8?~nS}m)4kUTz=<(4mf
zojlGK{sQK;(;ICB(yM?4hnMIgWW2I-?^6K7wOOZDj1Q4)wZ5at34C<U*ZJY?j_A4q
zdxVhgGg)^(VMD*?^s3Lq;!Q2I*;25eDc&Er$D!C};N8ZJLLo%x<a55rUlsmUlkDci
z*!cMPri31r>*ZYH;p~d&K-t4+U*l#D3!g~Joa`!wp(?~~%rRc5hm}7mR=(v78}y_>
z>o~Yj18m^-fT#3x1&!~p#p_{&hD%+?1L&!+drX=tVaFgY9e0aw)}I>cf7~*BSgC0>
zpQto1Li&`Qel6ast?5LZQ4GNM0O00>9(jPBEURZ{-U#gFM2F2+`dbhNvgw*_r0_cJ
z*VPPG5rHT%ca_<;SHrR?yz-J^kax*;GRxWyCcoq7(;zg2Vc0wQH9G7tjiFL=srba2
zh(2dY)t|hCs8zYXO(SumMms;?vqB(0F=#zr{y?Wh=_OdS5&Al*h*?$u0M0LEZ?O#%
zy_;kj%)$Fw7p>`{q=rFB=yco1ycg0FFCNQ5pLjJnRokPjAlZLzhzlu7zzRr_+nN6Q
z6Ui8;ECB0lo~H`;jXc9YeS|?E@nKUl3|2FMB;jOy-j&VP6~h^|;=2yF`1W#6zdql7
zWv7;1*5{euJhNDngDxOotw|?OKi?+EHs2d&ZQ^jv7HMVUHq%&jrJ@(mW_BQu&wSz&
z6(87jwb<JNRgZC&4UH{Bx`_gat!2ZswRINH8Z%KpRR}%T9O{0+PbT2v-|9yc&I24V
z<)bPvD6b+Egb`+%v6-Tp8p80@+m*p?%^8pv&ow3VaO$t<t^*p3XkFe3S39tItvMCs
zHHBv-y5!!BpNdom8Gf#Dl|r_WY_?3=swu7aHkk#k3^HzTF~Xio7ip97OxU_Il-c{C
zKZg?8NmY)Wu*=OBPARb=ztjWwSm%ND@SB{_p+qeu_0+(x31*y<jD5J;v4GsX@e!W}
z3Af^m`9UJlU=68CMJ*R(_p~6{R`r<E<xUq#4Tl8>)a!A>N=HNNqn5)}o-g93z0VYl
z4qS}VCBmQIm7ek7g~#F?O;A=eY1eSh_X_b?2IpZE&}MkOxdviRXhTnmHGWK>NHthh
zsX+Y90dul-(D+tyY2LX7*#2%)<)7CgLY;w4EoT?YQG?lD%L_lEGgh*P+x#K*`hNez
zRm5_vnD1u;4e_Ri+Y~{srsz$13R7tE(t6l8z~fcFpWB)M0W|E@wa}Z>ms1{9j`<0F
z(Ur<leb0_H+C1HYQ|B#ai=_2=QmxeauyjQ_N;{G`EiSk0O3FSjECK|;O*bEA7%hL6
zYV;qXqM?=5DcSv;LC8v1^%WfZLIme{bic*Jp;axpw7bjBskaFaXO5V_kEr<awuNB$
zgaf1s57Z3Yxj+%7q%EtTCkM=JKMD|e+Ez@C&vNYH(Gdxk+YLs&KT}(cV%BE}?UAp-
zNTD#vaU<Y7KXjazL<!wH?;m7PN!E(3tM{is?L#fKI<Xr*Wd<5{G}+ZYt~082P_fn)
zo_(ib09_Rgx+o_=k3q)#N~`bgWj%H<hpM|{Gzzax47-og+CxjTocbZLJNO6LuNUt7
z{?QhrX6cPwthPwFwk=BnWJRp^EwY-F_@CsXeqLlAdBWSfk7_hyMqNfy|HPf%!7g5S
zws5L8Q_gHzvU7pPk&(K5O-H!R3Zlfa^+v^w2TsTNT<4!wVhBV{;seE<NATmXSQG(6
z6B3D?UV9!=oD-e8JE&7!Ho19F7USjR1&%VeAiQ198O&kO`~2d)T$w<=*LFW`C`$X!
z9LZ?y#m{*Y<NGD#!yGA^bNJzyC$ePW-I-;y&`~a;n(#%-?B!D@Cat=m-;~dL`}EiE
z0Y$3b7-wK)i2&HmdperGb3*%g@%dK7TdBaC`YSoc_)cc9*Cfi3=EOq7DmqjCzVtAZ
zDkKqoegVaIfQ9*hrx%9-QWcth_kW~>Pg5wDNz_I8?aICRGq@(qYOX3*K3eH+)F>U_
zBYwVSE4!n{Y%;GoM0ytIws7!Lrrzm%_%(V`*`$+K68tR-o)yVEf+o{<2!?vj<7if7
z5%In=rz@M&T!$|sRP-4%3O)}IOU8$4=>}cM_cBWJz*!<k;MW%tdM^R5*Hvrf-Uwk=
zTFF$GOek;uro3=Gs9kGRl*;3<&A{<qE!&*~x0x`O_8OcNv%cA7nOi-x@I3ZD*|lU&
z1)b&LXwcUZHc412=DIU)P91<+QGz+Oe#Z<rTMEo@ZP3^4J1dsURqJkL5t{%cR=wa!
zV$0GKrl*k)t`)xokf`Dr1++Gifhbrk=wdcZV4E4_hO$e*V>8P4bpA?Ocx5bo6Z*?$
zYaq5z{*@9|?_6kZ&8>H`UiLJ1(t|d$(H@XN3Waw;4;9&iq7atW<MklYD`F1kNqO@4
zy+u{Phw%rwj}Eh`>y#92kEZ*0mV81&Hmf^J$HI}<QCSE%-x*GxO>6o@gy-mVlf~TM
zwhiRHzcRbctF3ZP9V;OfD9?Lt>qQpLHS%omIn+J$g|<{}0oO&n7#O;1v;TrA_f2;7
z7o0IpdqMRdVdI4=Al{!O6R$5Ulo?a($*scuH4${Y$RzvSetsbDaaUj6`qj6GilB}+
zP^mONI1efl+Bll4HnBJ~ooLVU+Frhp?$dk7_V&mcjOo^Uc^@^-8d6N-c;k8Z9X)~|
zMwfC_Td!v3y&kwO+pMt53FYJ^2o=tgUw9mCLjbjNdkchYs&&US?Ca_S)2v!6U4|Y~
z^fdBJlC++Xwi#>a!#MPl2TPX`r9$ZabkVOZRXQ7m!n)x^ljbJf!0fBw;{}b`W3yDQ
z`hxEY=k{NGXVTS7LsHsy9E+g-+QTYEyXO0WZS8&gPD7CEa$SZN=Y$UL+t+&)CJcAk
zkX7B%K8a+@H`hb7Wi#cwY?K2?I;C99EOQ8iPW==EIy}i2d82W!fYK-kG-eHh;(fjQ
zQ^F}Fehpp+K6ftxkyX9RDA$XK*V0&+hGKdB7y_H9A0Cfgx&_LW-&Eh-kq@W7)<GyI
zp1*&9xL|yx#n5TEK4l$LDj@^SQ;Fg6j~>be&4=kdr!%_9wA!C4?6Z78F4}l~{op_x
z9i`~fWX*nYnU#|;SUFL+?-Qf3jXn)MfW9Pl`7$DZLy0ryQ8v8gA=fSOWu)ZF{Q|y^
z-cxR!k7Uwc)Sbnw06nw$dG~ibOa8Bd2Sv+VgiiUT?99JvPODO0z)+U!S?1-v3ftY^
z-zOq^cDF5^$BnEZkGR6?hIs!Dfwgr`gpfm#1%~)pT2EWMzQ1NJAGG2ghuGyVV?er*
zKlk<ry)0)5-^aS<7B^`e!18E59=|ruUl!8!WKm&wO;b`Wlh|9D4|vNC9**S(U#uOu
zQS(V&wgL!b)nutFJLoFCj$AKHjZL`_H8IZE05}(9()b$<_4PB#dk1^d!@^2ss28)K
zS?-|-TKS!omo=?Ep1_6teu{SgfU+lMP*8s15cajZmGjJ`567nEw~`I-acy-FST>;e
zvq5-2v;YMLZXIb?cs=`6N(tGo3tonFibR+1z7dNXGNnwtXG~SD@ad#(m#qD4Hve<x
zk?M-k#9NmiL@XM5pPKT-de6KKJ{g7JPMhTuD?Tfla_eN-|0*baS3iyxTfjy+6559T
zVQh=5np@lwA=uQX=44ffU$`Tq;~`54RTZz8&MIAqv{?Vi7f0-z^e|#I)Ao9{@QCR<
zg|usat9nvQ2;XEqvs*`^rGw)WDwRUzC!>=?gXOdCUY#I*%otzi5$dPUZNKT)qNS&N
zV8s>b_$ut;;&KjDh6$MxqeT3PHCCU$5UZYKQ0%=gu#ULUrzo`w_r0Wfnh>2s%5&ke
z^h@#8FsJ!7LF=7B&uNI}77#%~w>(y8KAttprz)0JnFWjss^a#bxXhC^(8CS1#`#dw
z#2>#^BI{~kP4R>jw1xS@K<|`okDxWc49zQ{;*;sUgLSD_Sr~P_so$>k=y=J92ju?b
zGco~xCN!H*Aw91>m=I@pYpW|NK#HS9*d^-Pohj0F$~1;0r1R7O9`ZF8BXd{Qv#>vG
zYTh-$@|CQPW?<?vCYx*sgR-_CP=@$}iJgbU=(m>{HuB*RCqi8uL+EL^p`;cX2}Ro|
zi3d7u9QY#5J*>YCNGyQy^5wNX$G_#&a4KqgsJqNO{fWU*Vf6u~J;m#A;)91iwHykS
ziFY+FifdjJ^Q`gnh4qUs2xaCm-4Vtf_a-06POy}BD~hL=-`ZjjKTO{)C?7xeBPG35
zGpzjhyV%RU`tlH=i2LB;BPBswWbQim;Qo_U8@quyChXFo>G`i{9dzlWI%}oNWO-Er
zBn!{S2JQu$85Q_Ih^8hyJ$0Yzrt{~l{h`6k7{f$#-pqRjx**N=65V@dDbJnh`qM-6
z=KF))pYDst?zi`O!0mH-2#Zm(X4lk<%Qbi4)_k$5=!_Jp>(pxNw0#e~!|mdGJeNa-
zr{_RhJMWggB<?vIQdACX3`7rbOfWZxRaIA?lT$6Ir0t_Tgb8~=&=MyWJ!kcaiqot)
z>D?zCU}e7|V&A<`E?LufqhkTiO<H{@nHWOjxXMRwAjpXTV^yrSHO3%|E909e3QwpI
z-ju!3OJD1)k?v##{n^W6;8<E0{!p6H$McQtfzQ&IQJ^59r`#5r_UnGzYw@D$)EiE$
zkNUB@PhruWUf9>PHCi%TYq{UIy|mUCAde91fV91tg}rHKI91h}aUw11QHa~=)#8&U
zfIcZDmRLU@g1|tC$Cvg!zoz2@F8kHnrcLQ-y*CJrWz4(ULK)*~K!pB?w3zG*2H>Ag
z#&UIIL_^WZ9r%P8BE&-Xu6|d%4Rp2NaQY^Yyk*KjE7x4A52%|GdBga;h_@IVdAID8
z&Uqfhr`If=FR%jFw!=oYr5zws-^ZG4HeLjgZP*+93?y)(jn{ut^|{DA(@-Te)pnb9
zIB;@lZmK5BZl12p;_8J|enwjk)iseI6fwcGliP26a2inS1e_rzV2we<tzW-aD|Nph
z4+Be0cdq?b0fO{s{YNVH3@Wn1ecvXF1#G}PwRk$k`?^|?_(ok~p)}p?yM=>h@Tf}C
zZ%41iyIsqymF@>)=MCnV$4Gx@F&#hEW)hvQ^sNGWENQB{0j?!Y24u5w14S199VHQ0
z2=hm%k5|D>-5&48Onz!dx<%~t(&14VM04wWTux31Hg@#%ryh(n0%hRR+aD{-*e^gm
z*xa`llli#iY8N!}Fgo-mI%$WK&IWMKn!MYlh&j%wRCI(-ReV8ip++#fA6!KAe%^Q-
zbUsDy6_C|1!PaQEt`d}P`zah>0P=eaDyz4!TXB%&%}gAqFS?<WjLWp-_tOOTea<mx
z+3#e`P3;Kc%(^!V-6<9<wINwZOjL;NEvB|8{iX4#rt)+UOMa`0_eo>bnGeY;g|~jO
z^lAh`OPOEgE@%^dLvO{Z5NU|3d@tK)&55hrH=@M_OS(coueXO8c@{HJLcYkl#BEJ7
zc<dME%SlzI>=|8XoYCija|Gem5lwxZ<WubP223YrMrEftRm1DXNfm{bSucfrs!^sE
zj;Eyvbkkbrpqwd=6Otq7B{iLCdh~SUsqewHnxhiz*!ycUnqfOjh(Ga@A1>pz*j`Pl
zj!)Ll2&DEteJt!mrpdgE>U0hZi+v-k_f%KmTiAqTHb~PZZ1V0(J3BV7gn{>Rd~`V`
zxH<vOl1K=orPWbeZ%jMg+TH(v4K|k;q(}VBoN+sSt9|(<x^ARmJPm4>$i#g0gwQFz
zbVPh%tw>Uo(XrC1fSAvjyZ!Q;>d&N=-H(X^T;FaS7mTM!^*Ux`E&jqv-q6ql3GczR
znKt)9Sv-Rexe5Ru4V3L<|Lig?Eg$o17)<T*4dZZCUEDZAA+6L$?{3vw__C`Jancmz
z#jBR)x_P4~&_x%C(#wZrADvp=4L7)NFIgTUC`{K;l(S0Aayq(4Xmtya&jjtbedXp8
z6?W4-43S1gxR+NOzIe(b<+_ZzEv`zAlLV8BX16Do+tk@!x7mAw%A}w+q}{HHSQ~mT
zF!kvsbw?Y&&~=2Ss?rgwU^%_iM_v2g7bdp1TM6{BZ4vGny$*^)>p1KTWY-9UWmSq!
zoPC<nGE}cMxxwIh@1bE$guz!4V)~H%>5=FSUhw2@s3iUM@%dc?n_N1HMf+81gEeP#
zK+z`eLh6K0OsW;j1{GYkJpf(j)FDWGd(xCWS_$}zn~42>+&>%<96HT2!5b?1vj{8u
z*GiMOd4hloC?f}S|9--I^6)8$S5TLb*n)=kYVfI;gAY&Bodu4?k)JDx@W&kH9P2Co
zq0Yb^cb(Adxv{4$b);IBQ_`u36qvTRY07Wz<|$4o83`d0ZV7=DI%OeS5?3BO-G?5-
zn+eWoGi=`tzwa>(B=?eBU$_7j4Me3(ndAtg%VI0NE@XEdi@fGtgR4@uP*>`*xX01q
zED?7Xy5#2z;(2c|xKF#WU4DkVMTk-b%M&zTQjf|vg#@2TsVBC$HXc{+=tT5di(V#6
zpjXL<wMJ0GXE$(G@4?A;o>DzaY?(N#G+b&c@`^s*X|noqmbGl+q1{{5y=LITGPBbj
ztz9Rt)q~B_l3s_FL$Q!u`dVq+_wZxu8H>-?Ixw`cIZJ~i4Ee{Fh1sPCFwJ67(}8o{
zNTie;HnU+HRvJVcWax72G#c{^;3}?EE1Sh<p>sZjMS<oR?<g~JMuCe(f<AehfQ+wE
zLqX_^#f>*N>kan~_p{sHlvX=2A6fP;a%=2jEE``-fIqd#p!4qKCCVa1r4cmi#arG`
zIjWH+UA{G>i!P>W**yu8jHdGXZr~uok$W|#(&tA~M?6(I#96m63%%l5uu|~x2Jxy2
zSf&mzN4YZ6_d8p(L>a_R)O`#H@3Z5f3kx9`Y+;do<^&X_ENCT{&6SK(e6tOu*qV%)
zMkC{`<v0z;3XG>+Yv4Kkw1NBe>DO3iqHmc#wPANNd8IR>NqACRQ}C~*f2;zSGkEo&
z8JJ@BI41=kDPM*!&v>Ah6%oYMQ?!%`B!-3N8`I{5m#Q1F1O*B%TMoA{b=Fhv=$_@)
zesIkDzVpz)4Y;*msu#<<KR;YtWw*h{Qv!ttA{E<J`t+)&u=lGJR~+8Syx#(%?vr{&
zK$Qw=iP=$YoQuR$js;YU+vXq6gkj+Ovf)d|l>7I|kmNG0*W0_CI{AlC?e?7*J-7Hn
z!O&?^h*gabxG#-<VMWou$*o<S$_Z~q{17{oj^(6j`lE!2iAmmqt;G&&-;_+XX$O^j
zT1$uTi}&yJf1hnJYD$n=qZm3a6}n}9)H+nMVS_1!J&$6HEV%#*Dc!|b2HD5Wh@?)#
zb?>6JD>T$ye_TtlIA)r9(!Cpkc6VjV9)zy|Pm^W!Q(hdsBpV%n5@js6Nk@UyB-Gj;
zS!hAlu-V$u5}dVplJ#N1x_GXxuI@|Sex1(oZj)JaA}nMyk$p$R5Oq%Q{iIQQFZAPe
zIrM@d*=m>j-ZL6v5wep|Vxz5d6?QF@;3F|BOMOb;ex^IivcD3fNDBGlUey1wY-4yn
z?UGR_7|O?6rcuoI5}H?e6khmQqgC8^D1p@t08d}<$4Xu&_5YI1l<*2FOUz6Rv6#Fp
z-W(LeyR@#g(zjo#d{NAW96pT(F;2GnrF#Xiu}~cYh`{naZrQdS*}iQ<uexP+F%kr?
z1*kYN|BLkgkAp+K_zT~rFFd-%SE9S`YG;oA$pv6KNPFx}$;zUkdOcEZvEr82&nsG9
z><jLcX|*{z^U}6#u(-Wzo;kk0UcM4PH6#74d-$q!M2eu@s+N^RQHYadm>@n<+zaj0
z$*U~2c(k^6^rq4%4`LoXQ_M6uvoT9K3282nH{^M5*f?mfRX;GWSBp~&F#+K9lXW&L
z-g>pOZ@flkcz?2(;rq?ayQ-oEl%getEjgx~10|?x0n(T|DHM`fT$V$<V#-OdY^k#h
z|M5Wg+mbpk3y*a}9wB42p+XG0Kq!T*PtZpXfUM_Iir6xJp+L`0x1QJ{1wSfgTwOpM
zVX~e=qgQxNgh!T5L4KI-qK$YW*lAR-u(4u?*_5wJs@-OCXn~L)eLDF>j(0C78^}^x
z``8<_CudP2ubgENyXS5-n}4OBKA&KfMf{>g{%JgrHyF>m>5%`S(!Nf$_BNv5@I?=?
zj&w=H!t4NK<H4;8aG91?5?a0|j32nH5}c_VvL_z&<gyUR9$d+H4d+sc$D7_2z_1cs
zHhhJ@V3^EhoNDw7gLq@92$CgWMa;u+rQ@cVdPoQ<9Fr6+Js5{*8YhwPABHebjQsp1
zW{G;7A>+a~3$;vC1FO8-Ad8174JNnxSrkd=BWL(aWsaXmtY;-^2cU25d$|GU$Z{zq
z0O_!ke|@92aVg=|aPQgm37#>-$tCewl=n4n)+D29Q(Ho9Tc%a>^-;54Ze{|h3%4T~
zR|fdAcP?W7tp%}=tRch`(%(CDm0EO7@6KEjY+;eL_<%$`0HB~^=GWd-`|Rp{Uq5^^
zhCP^qx%JXq@wo74mLt`(sX#3%BG>=b<rJ!_By?-wrSC4ipDUnc3lt0Qvtav9kE5EU
zyjw%uB-+QEK7E}N!9GV9C<)#G_y&>;Tl}Ygm=)KR-`kx85ui`a1Yb;anYU=4n@zXt
z4tiSyIfK1XrksT5C-9VdBQtf-lAKJl<~sr6!Nml}#*!__msNOobVf;~@PU=d<>kBF
zP^e^;_E)1?rf}lpnvY+7;^k296D}9NFHNh1`?_ibC0_r~iOalC#G7{B+Mkpcy3GO%
zKs2K=1_OAz=z#d*Wi{#&J~O+G{1i>OJN$5$XEHWJD;A;`tCjbIH)=Lv<@;p2o@!6y
zW?yV9oj{TaHi&cIJj8K;(DaG8Flm-<nc=iNcy<miUW%qgCnycw-CvmOAKB0`!ay=K
zi@j~63~S<(@$W-KMxS3VkcdXJhKIk;XClqEA-os7`yF+2Z#~yGYow=BvXOUf=y1zU
zOb_|r1b<;SI7bFSHNCsEtc}xLDJJLLQ%A_1setwP2Jv{g?m}L>&(yP+=^-M<(Iyf3
zzZgS0G2a2HqN?>D;^igB@+sb#3>cwn4H<#nt#}H`ta#q77{K7)Ng(L%>~+u;XpQ8P
zM{Gq_Ev6dJF$^|n>s57YG#&uqiF}|s!~EqJbNb{>)`y_~1M=fv|HZr|Qv?cGeCU}P
zqQ$EW)02?t5o}vNy{GrXPgNsb6ie&7GCc6{>hg@06A3Hxi5rwB0e=e$Ytmei>6Rk?
zw}$@FBu1RCi;KMyXeV9+$w{_D-njJD@L5@ud{WR=GmQbqWpU1e%S3nbIomxet`Jh!
z=BrHBcADQxf8zh?#(u{!$x<{S_JINXj1G^LYjr6@kik-+cYbi+$MN;xsJaE2SdWx_
zsj|JT-8ZpPhOB1yR89^KNB`IXVwEI_z&hF6q<^Op`HRoM&lkQ$hJfz7V?CA(`$Us_
z1P4DxlYCGr5SAc$2oaRiR+!{D$yO}NMpMfR+Dzuj-Xg`>sj7hcR5_hns-F(Ou2BNd
zI1H;vhdvs-Z->wWMZyD(1wcB;`jL>us#7+f>UdmdZr-X7uil$d_&yJA*UoP6TA{4C
z*dlU$H)>;O7tJNR-KCg$ocM@q|6;fOH-<?PzNaKjevp@CV$E@A<<{@NbAtdY$bt1P
zg(HN{G1gTwn#k_C)~lbV<rdpZpy8J5!CyPSS3-T|fSl;PA6knw#<j7>dtRr{iWwDn
z{(b5HTCo^ivguHT5x_S-GciaB2Lwcau3EfdH&FXTUpAKy3onUJBGSpyFdgpucMcmw
zC9-Lmu7dnBEPY91!lrMu;CEo0m3DB<*0o7#;1(Fg(b18JkDuQY$U_uqb#Gio$3u9|
z`u*=*GQPqQph9B;aRJ$=p~08g-J@Mq496Q)P2#J!S#bH@LYs!3Vqa;`7}Yyj+(#o>
z7&-?eN&m5B|8H#(g~^;I#@?^Q{L*-yUm6XZ5(V5_{PYfzF^dy>)uX2jW%^x_JIt>p
z_4yR|PV#5HgVg@s1khMDs8C*>1f@&ylQED-x34QPu1I9KRCiVnFx&Juv7d&Qs_33b
z#kzV`8Qb1f6f8M%R@WDJUjR<Szcm(x^fAq>0DOMSs1aQ#RiC3tSMi0T_)J3aOc|-d
z1s>PkdQH5)^GC@Kq%I(zDE`Cks1;?F!QWfKNFa-F%QH~PF4pj_HP%W6@MP!N&Diq0
zI;-+D<Q{?631_|?%?6a7lqh=T0Ov-j%8^EH?Tp80Ck4@?wrC=Rw-W;*zsMDPWuahG
zQrD|m<bOr#DoB_5mWogL5s29j#<4EQP)Xq~6T3yQlw8WK@;qupxFf_jGBH4rM)75z
z%sYrhAs2Yy{Q~5b!+DW0>77C~dis7Ir;z42aZNf-YSW<vhg^1pF8G=~weFqa<IUm=
z7ea~pN>;7Ed7yg@C|#3hwbFLm#uk=`^;M0|&(#3)y3A>h8)Bh_d5v2y9}9L{G@=Ro
z58d^b04HFuBymg?X4ivj#(Sth7Ak$}Z+hNmRVnhjwU@!I(@|o`5AuaE99rD|PMAr5
z{jo5cW-zRDMQjiK_WuOve}D3;fD55Q%`R(}THoXSHo6bM?#hZUI|)=}$*s(rG$p%H
zJj1jkJMUGaPRs=R5+p1Mngs}&3*BmDlOK;ym_nc54FCN;U1WZ@R5g}-mtyh_2d+XE
zq#94xb<Luwxj8k-$=O*@ZI<Gu0PC|(Xm$=<^)n5GzX=oIXtRN#mlUNutBW8T@Gw=b
z^(i-QynQ2mr-an2H<G}*p*HF^;&2%v&qhb<nKF=CVn1HEJHFCq)<Rm;e)AFMA?&58
zR;JApQ%QjP2Nn@FBy~vwam>aftAxTUh7ex~kW{zz_`zHw$(Oe@kA|h71Y;rD^&`65
zKysF@DOJjMGD^9!@-erNI)-VT!p?U(r*GgMg!?rZ5aJXLnSpwA0N&&AA;1&^*%?c}
z&WNCIqY*z-o$QZ+sB|BRA5ER_^kj73F1M_k%%^rl865q%wYS)5kEzi-;ZrD3vzel}
zhg>qumgHfu0=&ae6#ve%qu>lvoKLN`z7GvxE_vW=0+3jr4d!N_K>yBk<l7D!i3(_H
zTbu2!SkXg%DcX@L3{XY!yOfS&JyNIu$h|{jf(2Qcy?8$Ai-Z~6H|mVfYfX1|cd|X;
z7Xpu|XtEHwoAV4P@n>I`Os(3@!ErM-TE3F=d8BUT$>MViy5Fv|w8Vb-T8$FHGGzS@
z_0jt1>viny^~Wxm+1R8j{T2$xq-g?Jy0gMrZbcu=oPQJf3~o>(CF(;ug_?_sx3?Y5
z9ulY){vG~I-P-g2_~KvYkvzawXYe+YkM2I+8u^s)Ui~W~j05NaUdXCO$ocoV1<Z>}
zcza-2MzfAyUAng`ioc0~u6*j4DpU@i11jr=y}bA$_<vT&|NaD+NG$*d?jk@(w#*KY
z1L~5vyK6f7&CJXoTwGi%DqeU`2tDc=O`32Su#WbZS62>(F;W;L2#gtEC&8f424kY{
zPX0bYF`57ap#cZ-B16^`_=5p20EPfNwvMFZ<cT`M{pSP$<Cdac9R_Cetf_bH-PS$7
zI2jHAK-Vkyyf*tLD4zT8O9VuE%|W_=0uheoUd$JYE`lF+K>S6MVSz8GluvO#-}mz?
z(xX>kynDH7HNmp~**eTV9{6V&g{Fw>#}607a-akxXrpio{e1`kj^qTSt21fak_UW0
zCGC0=IPghf(t$@(q&mm)G0AZsP0|m#v8Y<m!XR)LJ+GD^cACnVcWXJUD<JjD0gVrP
z9JO98o8E3BJnkJ$i0>>gyL4cJ!10nUE5JL9@5c|{u;B7Xem^ewPm%;-<hCYTtVnm;
zw8EV%@?P`ee-peXFbg1Ey~zsA9myFL<u#r_(5n)Ev|6*rJYn{jh)ibqw2?LaMmn@!
z*|M^-q+?BZn;v-={s@mx0tzg|ql?XfWhX~RPj`UgN{>E$gB7R?_)cX(Ay@9vl$^XL
z+tpA8KojM<ZJv!+F20veCqeXSz;1Ds0~m4tHWhyBh;Rav754ZIB2u|e!(|b79XCCo
z*Vo4;Sxo!?wyXa6+#4)JcVJgLauCW036*(<^&#dwPXMq699RKn5OuV_wGIRK29IV)
zrfa}Yf5rf4J{sAU*ItQr;D4E${%@?p<8a9AKsWToqXl36wHV@{q(Z1WQ12<mmH1Js
z17r$65(5lj^Irt^?VZ+D-v163255}G)P8g&dHiLXe|)*{?U)XQe=o-`Ez#8#bqVty
z0O;oLG8m(pF~*KcFX8m@V~!cX_ud8crC||7fifs?ck#Gsa}*q4HjL_>TAL!rDaIkO
zqvs8tAb@nKFN%d>rD4+W(dv9<R!B+=*pO`KI&+O&zc24TMZLYfm1ppl-y?t28?p%5
zj2g)<R<5W(L#&>=!J*C%;moanS9lK=UamZWcnUxiLyd-pb~nesSo@m{z#a!Gl0ALY
z1H=b{=$@~DG_^bsrdd3fKV?w>=FSg|$l%es_~HR<&&ALDqXL<g&rZ(Y>#oy|!oS0H
z7Zm>d*k%zyjNm9?mq|@c4JRcaXsVRM)IEFa`!SOmRs{d=6HNxtOhyH;2H5RQ<VsjC
z)LEH?WZ~E`0G(##9)6^Dg=ql}aVjF?qq-D~p*N>_d3mIOS`?aoGp+I$;QwFOzJDlO
zGN5T%HCUailhUT6H3Vg*kq@+R#v>^_R)EvIS&3ob<)iKZEg(I-qoe4(N;NtHL{qwS
z)=jY0*Z8^j`)cG-c|BO^M;1OHz7)>^eruHyx!=n20!~UmP`-^<%#}947wgMHEDb-G
zxZ<}*hXL@EI=~BW3d31s4=@rQK7bVs3!yJn7xI&n9C0fRFaDrR9~Lb$8*`F&$VXB6
zoQM<eEqjupYoaku+pDkoNLY_#9)l(l;IAio>H!QI<pBpQ7?|f^r6k$85KG~yUnVlf
z{aDz1g++mRLk&8>Q?Iks7z9d$SGfb*z!a%=&}rbb=Mvrw=J9)kJ8}S8_~@jk;BRF?
z+$=1%rC34o?CPbpMI6B=UP)rEg|$x$@c;B&BJiBa)HcBc1d}v>o@xAea(H^aA`g@D
z>3ubDGwEs)b(HU#!1;p?!a!67M7Tm!Vm0&OGRB}vN+Q6|e}i!=ASOAd%u($qu769Q
z)M9~iO`5Go8S68>yzC7Is^1}izzA!9TE#!D5pWuz!cY;+_^z2fgwd*2Rb<g_@NSuu
zfA3nJZgUSRZb$f1(Jbe!#Fmzp(gP*$TDHgN|3q~B@3zT5wdliVq;LtQyInLG{w|;-
z;a_k%W+zU_2bRa5=v{;fIcZOofqVMh!2^RsT=J*oM;r71ROf&Gv?}f!6kwfV*7M5G
z4LS#q9^@kLZIOHtqX~fHz&u4S+HVEa%`8Dtl==VHuSW`lruGRos<gmO&tXg1yI-0*
zktetNYc=baQE9n2zr-CJ&b6RWXkCtWTF-yqWb8weoQpmC2LPFUIvX3CeXaYnVoBO~
zatj;>%xN}|1{S|t^!1fnk8ty!_Ua!$`$g69R&+)Dvnv&%>6^9RNeaK*T3O6Gg8{%i
zEQ~DwO;cIa@2L01s)sIPM6!Qg^Z%U8ztqa=Ltk47!t4<yr>CcR9vm@L&zYF&;abtf
zgt0N=udc52Fr`|$|D=firkDQlt1tl|S9ywti9?`j<6-wADl;#wXygSpHF0=ESBeY>
zR7zH`Wh^@a5&jR`=HDggUn>PrM#^vub@z4J!8w9ACRL71l2o`k<=lW{QrHjO2B-<a
z2!DX5^XTyZf7++<dsrQoA56^!{hwu%)PG^uy2TATo1yr1z&+K{)FfG0Sn#mWx5H-o
zgA)0}4EhQq!6%ricZ$58+X@Q{3q(anzZZAnN-l|S!k|eO1|-M?kRV;1I`2une~sz?
z>Dxcm!9CF8?mfQS^Gqt-HW_Rbq2u=oaQ?zD@JUHY-jgdU_g_KIp-hhsl0Wqh_zVt^
zoUV?iLrx7%sApnL#AnE}hZ7_ZX<ivYfj(p1U4cY*4EO(SYh?O*z$Uy5^*1-TQ2kN-
z2{}n0lP1&Gy7q>0$^3UN<pHnGW83l11Gi-WM7nRajWfUaIhUFJn(^)786(%a$P>R`
zpd{B{6o6Dq-cZu~_p-+i$X>4loeJ#|+HWUdX@lN4eH$V3?GS-kGIp!BuJ-KwPVM?f
zvHjE32|opzGwwh!8wZl7OVwIXM874f1041tzEmWF+Suqm7I|Fek1n$R&(hK)17e55
zyMDeiD&#$yCZL5fFVF;JqwT>9)&ND6>+|$dC?8)<{@mEW!-9fBT>(nW=zzdLAC(NI
zap3k>L4RT)%j=o5L{;$EsQk0`B69?W_*C#y6XjXse&;|(v&b(X!LZsFNPAVSR}<vf
zVKIGd7yh}a4pE>fcW#={H%UMOy0W;qxc68AQTc;zH-qEYJK>V$)s8aOi2JW6EDe}2
z*cX!k^k#Uz*~P|(Yz>PFgoyK2I2x^dDyIttWrDcr4-E8wRDBU|0GXv7(`L*n#^nNx
z!-MG+E;Xx(hjcmx>3<Qamq2(&|J$<&M;U05Bn%87(vB3=gZZC@Mga5T2ManpJUoBB
zkAU`Pk^koo|JPsr)=^l-$D&!&fJv)%+Um4%!$LE77(*qTqs10uQ|;NJ`WM>2Q}F&t
zTpvEe$N?tJfrLwzCB!<E|DVhEgCRqUUPz=~wT;z5Oy$3o|G$m~2Yj?8g5SgDmt8y@
zveCf71k}p9uCrcpuL%zLM-t~Bb@qSCZATl>t3yIkOA+j6fe`d<1hI!rD28WhZS8HK
zr?)cuZCM`r*y8@<F^Hq#D`^uap;j+0C|fUn7rJF!@F1ZlfPb}VV2!p7LDKV&&;3Cx
zu;G)a1$)@3;5fdYEHr(}+{S0?ANx%0^w(7#{aanoxQ&a;>+7`Dz-Y8TJpTAK!ijJV
zS($6&GZg>B*jq<c)xGV)vfT(9q)R}hyIXn#BHbySN_Xc53F+?cMnFIs1nKT>rMsJN
z@tpIX@xABwyyNH?{NaGH)?9Pm_dV~tu4K<*yXaN3qNk9NI=d|iSlV##49m@5o+Gvd
zAY3m#D8(R0C~?fcR2IbnUIxX7FQ4}7_#9ukeun?wH~4=#14JR<IrtxnfU?E*%E}56
ztMbq6f0i8xo-%1){epVmPxgN#@&ED2Cyy@C0Q-NV@3$~^X43-`j)=q~(9EKuZEL{s
z8jUl!{#)%nf&wdpywC@t(8JgG_^!IXqSXJ8V?^rcwU*n=#CzGs|1*919}4rI%VZ`2
z%;BrxWW6g68D<Y5Ak_M26+rtSByjH=eVrl&u*|=ZdUP>Z5TRo%APw5UvzCBZ=bu=m
zEv+q*@^x*4d3gN4TfYC?eNw;_s(wWKue~bolj3_CJO(W5QwowF*sIHa?w85`lGpvW
zH%O8J-xr*9u(PAV^X}bMU~qxU*JmI&WE0`JMWjao?IefKXKIhj1+Am&822CMTPrQ~
zV)|a^O&9DQo^5^833>Ztn@KPo$t3lm6cR|~O7K?yFYkJPj8`c}N{Og>+dY7p3m><e
zAEWPQMFdb|^qMKdJasu1Cjhwg@9F93Ccb(jf>glt{GE@FPeCCT)7YUP{38DFm+6L6
zESYy6(VP01fXDGyr%(#rrXnzl)^{*w0~%J_O50>*9vbq2psD`}J|VfRLA_?XI7p^J
z`__MFa{m0v&)|H>(wbf3+*M<_WxG~I<3Cdf|0?6bO!9L<0l-P)p&T}?p|SA4Z!3jS
zqF-$NXaqP$%)WCdX>vSK+zpP!VF>0(d>t;o;2D;|1}5M&ZlB^U%9i&3<d^s##LN^d
z$u%mkhT7-?BqfwgE7V{3R3Vy>uBx$D?#pQYuxc)$_e3qrkV;_WKPhiKxT)>hhGcaf
zP%jCUwZ^=z5&g>-L9^f`*+y*uwytrY(Zf?NODtxHBoYdZfn07o*OyCQ`GZ3gCJcQJ
z4h}YeKJ2y6$sR5Z-TFKzGP_r3Kwd0kqgsLBFSiegQa(5+ph4!OqN@zslVRpY!uchl
zN%o|Z44->t`N4(f^GO9!JrIx;ZV_K^C9S9k3j{iQZ&m<lne3v=|F07M|3kks!65&1
zj{-=5_0%h`I`FzU9>zOiEF@r--Adpa0Cja~16<(H`Oe2l^N7-Ox1SkAqki)nzL!x4
ze<|Z#@JPI)@-e0#Ld_LOKwgM@6S?gLyG|8?mt?QA5mlh`y=XKSQo><^mJ7*|w>*oi
zcS@!SpZ}%I_McV&Xf(6{`KOo^&ig&6|A2TJ%)W?zz|~lxXh51zKwcE#Noa)Pe{(3j
zR9U_7ssAPp{vU+r|56)&Z0Z5>5DKYyX@I%m*3<tr1&<1)4~cf!5jOC1!RnaYazmDB
zX_``-_x$0#5f^6ja?7{N`SJZ);r;*XQUAk#p)(-=M3cgjR}UZ6Som1>vWRb3kxZh;
z<JZG^4}MRUs2$Q8K5l<s1_9Sv3eIZaefXHPL$bw8>E-&@q`AVsjO?i6p(9u*9Q73v
zF)sr{ILOcPdq9JOgGAfAyN$U$p1IbY*dw_etkUhb)m8;}$p+!X&3_r=jUj`1M*+mv
zb+(R<j&G97j`8o?TA)%={p;@T?vLGGQq?dRA)L&+yAqA$?fe=KjZvcxz00ucucNeo
zWuvgQiF<mnDe9|KN2i-fFRWWBaT!N`wWpIhg$t0#)5xFgSCk9fkZXIMQN?)zgMt6U
zHve}gPF~d~lagSEvsZ3vKiXS;>Sy-y1H{B&HHV|}NcEAFj1&N7F-f^ou#8zYY0dM{
zFflWmTU=iDHWDZs|GQ-quS7tZfgR8K!zg3IJw?PrN|OVGGR^8(5iN>cE#sfT#gMJO
z0HTRg>#_?Ch4kIMJ&S+nIkL|Jz5d2@1M({Y?+XOOXPOR_Z`k{Iaq2vFr^@hnEu*^7
z5v8G6KQB#4UEKBbsgTrSLYK27x)LZfzPA6>_Q0S*;HGqwnbFbXUjP{b5#Fz4D?bwE
z8Gx_J0|4b;)c2E$1=y#U0m$@Qfb#p>(ILJJ=R!_zfYK=*73g0tfd9B_+sa@+uuvTR
zOH+WK@kP544SaZZ*R7ajzOx(Fi!=c;J;_XIwe(39+2%#(WCFRJzw~x!;hR$F74ji;
zabJEKeg<^_Ap#qx)q+dJcU)6M9}se^t$~ZC=6w4T9w7Bm#n^wcfBmbKT*-tvW1%D&
zx!72^=*dIX81^PrkQ-mBN~j>l>Oir8k{8{uj*`JwwC$Y$YX;lLZJxi9#Mt+3DM0~1
zo?BZ)L_||^O_u8oqKVzAGkg8fYXq55Fi4DEv$ph4yrz|_FLio;ue03rvVT_P7C&3&
zj5GB?+KuJ(<Ngh==&%f=j0tu9K7^8x(PrkY%wHPhA^4`me~x($IA%GXLw*!oStwSH
z&bMCwQYnAJSr49x$;op>%M_jBWjs1xveO`6RT1<NBN3*H0upr$vcLL9KdQ*vUx<rt
zr##vWAtgipKMq{5Y=Kk_-R;dy`3WU42qFxPLF9GBne-mN*aX3+-qtcBvip|OwHb9Z
z@HGMM*Ix)N95Mh6_aWvbmwEJXD(oJSp9)Tf(W8+P&x^TW!;}*p&eAZwR9-M^e_#zN
zOgYd7pJ?&w>KUfM-#i;p8K=iGdlhiYF6gqSiWQE@K`LP2gvgS$TqFScp5kAiCpdRC
zE!$2p_M{^eicgulZy`WG?0O-G`PAMSHM#I#3NI_<H!E;Kz7%5>9c<6T0L;#flehQd
zcd2oG9t}0<d^lH8o7fKS$$F<Y(mESZ9a1~LxOm{U6bB^e^Y+CMSFU#YpA#$-OUwP8
zC)7+Pkj7u;hXx?;GE92NMeM(*tt30`T;z!1)OkCU`LvDYNkuFGxT=@Rdjl^-Pu;FR
z$dJ1iP)6VPsXTl0<_#Vi8k%>XihFg8HWW*Ss5mIUbyx?B<1a1PHPX8@;H@1V2=kXy
zj^@AX8#qpIm)FS!zJvaYw@|lmisF;`kZMYKzU%CEL5A0MUmRUv)ufTvHZU-2JzAFC
zI4~_8mJeU8?H*cd-pa1c^k4mi|1ZH|gin=WH;T^c*GDNXlX5t3N4N4P#4aBGX%@Zk
zgG1urqrfj9Z8^PNY>&6q=jVKjE;shdA+95Ehc>WPs^RsYMWn5rga|v=bEzNAIe%wI
zsK3Bsf&!#j={t(CTO*Pe9G!vV4ZV_*XH|xi@#7W4S}pJA_0m>3SawvYKWJL7m~El7
zdC<ms7g0I;!tv4jVhAi<Qv9&qR!Scn9L@7Q6!tYcQ9*;2JASVCQ^1t&c%QUnzvOqt
z5}I+<LENwj#c^qh8g{nt#+Z_o)S|sYVpI6?=s3ps0r*$mXe~@bFAtmgJrC`M>N74~
zmo~KzxLg0&5Ao06FWP^>l5f1EtZ{!tW%Nn?H!jZqPD%TJxL3JBQ3wQ>Mu}Rh8in-=
zjd%}>!i~%{<RBz^3q?JkD*zMk{eVib;U>6uOX@BBYn^OZM~LTfH<e(u`$i!E!NZy1
z(T?}8B*_1bixm35UOy&8JO&kk$9IAlit@;>84H5r>5fXuGYs$c-@&D=FUKS6O1Fi5
zE-5Y!*QvFb#e!@(3Fr9=h|z7?2Vr&P_lWP8b1OHRm&--<*CGAe3yA+a<Lf`Kg&}}R
zk=cK<q`#dAXVn@p6kaau_8Vdl0e@s5&s?dApmW)uOO$apx;k1FV^FVHiAy|p%d*Pw
zyqMJo8swSWS3{{}sjqmdTBfny*TMbuTaCe_5GVP_)r_;Pp&W)&9D7pA%$0T&B*xd6
zl?1=K#q~~p_ll^MY1Alg+H3u3Xv)vu2m?6BK4Rpg6v<DHjL6TAj#iT34Dqax{|rFI
z#-#jr9^?PLv;Y4OuLy%~`2--bHpvS~Bv_5N;T=M#+iU_rF9o-ob7*YkH;;ZepnB7w
zI-kFqjo4+W5{wYR<I$nW)TR+LRqM+;5>J2jGoUvC4)<T4{V)3qP(;hW_K|;%g41Rf
z2~vMhN;Olgm(9%1Hc$q9%9LF%y+;^a<6+CKo$U;n0q!Ca{erHKKLf_DkOu~MLWii}
z;>KB&oI>I~cm|%6wBp~`joTzaK;vpjB9I6iZRow`*TCcckbzaoUX7Sz^hi7V$VJio
zqpIrU($dnB2|Fr`{67_-0OChrQmB{5AUoc6Wq?>Z$*9GP9TUlZfjLs&kW#9NU*nHN
zpIY43KC7@R<YfaYMn<E#O!*>3{5c8ysaS@;NE+YhUr2cYmT`;`02D=WWD)O7fSQGj
zUahq47oPFj<+*F#l+?7Q72}4`e^)(faj0DXg4$^tmub48z-7P3fi`oFJ0!lJ3rmef
zD&sqQfz<g6k1TjVE4P-C<g+_3X<uzLQ*4mbi-Lg$J~SZLk&IO-5mAyZ9j=bBMn()J
zd<!>0Dr)9DV_3txcNiiqTNR5wBARSiv%9rOV~fY-jx|#%(f8bKIfuul@n%w`8SNAq
zG>Sgr+lI{mW|zE)a!VP`ayykwgjp@rLql+vrDj5_CQ9T8%PuS`{rqYl<l}|@80)YA
zgZV)~&66pCDq!Icy1ct%*<49P0vTCp6OUMHq5WB-ey@~dc%m%MI6}-=#L^nXB=o9!
z$y?R+-gRpv%R8T+HvJ7vKUt<@j&sR@r>>**@(FoVqabLlQK*|yqtc)g?MABOaTHx%
z(4~0iLS|H4tk@jvz*xKG*@4QtXLIfgkE~-m=(XpV04rY&J3Kh>O5rn6PBEJL<m5a}
z=uNNYeuQv7cxXGD)79102O#A+T{Djv3s&&6gHp)1QOiDS<(<FeL`Fg>A@Z#bcTc>@
zl-u$Q<|{txC^2f1e;g$lR8v(^@pJ|{6E^bMzUgGqpP7?RW%a49<KU;xN<!h7spy_<
zIN8)m5a+M7H`z>l)p45o_}MeBsL0fQ$?vsvDhxO5G6v%mi;LX<g-JG#_$E>#sGwr+
zwxN_|@<mvY+3mxyHR74b3Ld}*wF%4&Ugdd(pK^g;6nb+xW9ekq{&}-vlib#i#P{|f
z8ewPrtx7ZR2t|rijmqht9CqCYsiJFfT^=|Fhl666O39Z)?bqYq)79Lx9asXp;5I06
z?J>5U8RsGfk1<DPj+Mq-RGKtKRlz>Hlf$V$=M*q<CB?IEmdbvAk?avxM0^F(=D};t
zv_Fxwfo8q}HOQ(J$Us}Ns)^_*`AzpIG98oT*J#&H<WIMlOyAy@)tzN^6M=R%9}1zr
z*lIQ=HzL$r3=j*ouR^EHTT8eqwIOPdG($DHMCR260D`aFPX?0PvWKb=60KHDnocOr
zn`A-B9R0?@f-(KUay-|#ijpDXJfl6F>{DcR<DuNffje(sP63XF5!-oS8jZVf&}yT3
z%*3n6TuJ|-#&3PA-wOInQ^TTx&GF(EMTXmpC!jD6F*28R%HA;I>LYg|sV>yYW)}U~
z=}uGUVvAkX5nXiM<1#3gjw+Q-W|xW#cJ$j-W#f=#<tmG7_QHu74&f+YrlZvMnJiqc
zlfCc4_koWb<pNQTY@9SSG=yvprI|bZSc$^~HT0bEYkLR?QXJfDZFFE!$)@h?_!p5Q
zzrSA@o<Q>=l^`71CxX*HR9E@<@j4!8JLX@{aCTAt3hPopD3(hrs_pC+6UDU?RO!Zf
zWfx?%!eV}{+R7gB$q>0jsz+vB`LVV9X8Cvi`F3RkK>q8r-WA4GBFDqRuj9VHO|TDh
zsq2c7n>kSUh+JdX6*?;t=TN^dYoL1!)@pj*>T-A|Q{?}XB>7kAX<LUHJHB9XS=l}Y
znuqP2|A6X_mfqJN*p4zMv;1o+L7aq$CO)?WC|ASPKXEONlG||MiCVOO26~^)Ne!p<
z541jzak+YgZyKi!Hv@<m+7_M*zP>NfR3leYJuYs&LQ}-r8T7@N!qwln6jyG3A#j&P
z`H>sBK?esfQ@!h%%1D`XjKCBKDU4VW^*kf3ugK}J(sP3Y@#rq+o!<-MipTGC>>wPf
z2woj1i?m(OAa12LDQ^DWG*J4Q-2;(M;Vd%%APl_Yv%7lYvf4g@Hq8&b>&ss7@I=(&
zP&xe}$@Ds)fENv`aZF>4*j{?AD8G6TJng2wKF_lB&Y#Q^vQQ?ldDY@gdEZzH72zq)
z4Pj!x*Dg*~$&wI}w*Xf&pZM~Grx_|GhGx5~2rj3DnpGF4wTfY{5b3I1ecibYJ1!E5
zK>@##o0Uh}t`>48_L9a6`zBX#dEs8hvIGq~_o9=E_`a+`ADRN|LN*@!lT(!-u&+|3
zVdANQhfVdqlbgYA@`cw&%T;5>n-bWHt%ixNNy`34`2|q;MyZ|k=Rd%Z=XK7S<9^%m
z$#zsGi8W8s@P1RV!pg*!hTJ;YYAd~zuz^T!36qz;XP|OGwzr8m5)p3k*$t=FGa0a_
zUS4vHhmvKt=#!Xgf@;hA3x}-a)5^|q`NC&q^}>h3xaO^L`!BX%Kl%+FXVmXKuT2nx
z?y@+W@^9S#k)RQDUJ1b}{xw{J89}`aCMOry^C!6F$C`-Pc?Pa_UsaiFK2n0Ka*GiS
zF%mP2DxD<^q<4OA*$i>e!(hy}t8(-uh`B9N%CX-Crx`lu581x14Tn)uF{L_AeQf05
z;22$^Qs*JqT+Fmx+J+><%)}69cyx$IfZ+f|=%qZoYw6)VQ)@6qrmbR1mxN;{0C}6%
z_fSCVzPqt+;O3uLRT3@}*NLUc9<TN7vZeS^ir=<Zg3BS?TW7Pbrg8TjWRfh$G5kRr
zFPDJduE<D@eVIq>w2UYrHR>h$R~T%lmuM^X&I6o{@$m)RdEWSB!b9~-3?mr`Tw3cF
zhqu<1gW6NZ7IaZ(b2+CuN`~L`?Kg-1Y`YpOe*si|8UPh}`~m#=c`D4xX-SuhcQ|5x
z5b6_PhW#LiRi)c$Nq^H$k{NJMg95vNh!H5R5i^@j6xsrOcV=NC2_ZZV7@N`zpL92~
z_ZeqPA$@|zhniYdvnraFC~s}z3I?6brO!pfidrnc1I$yBpcG2k)OWe{_4RadOWj*%
zI_~@D4Jd@1e1tiY%C5p~U6sDLEgwu)cU|Ss12+OTXt~VFPohS^`Qnl5c;XM)r)Sjj
z!BTj#DUPdWi1T~xZ<!ztC~x`dyhgJ{hh4YRL}g87U28UCGpc*YrER~o37;#iFEDfP
z(Q(vXMdf<(@CAwcLf?VeKfe>P576}^L!rq-ADNl4s5**1*;AJk7!!sXE-qTW-sKU9
z$Tx76gjUip(Q+E&$t@x;GNg42MvZ(I!3%{RLQJHuZNq51-v;LRfKaw`*Qk?^91Afr
zN<Q3$txA0`PzF1c^E1q@=R_ZtXic757ngf?sy#-Zng8SUmTT2>N)V1^YC2viPOgTG
zub9tyl8-R&bF_IqPQK+Yy!Z<9Lk}r#Y4P$<Q%k^KKlX*{fxrYWJ|rl2S;c)cR_xQB
z+`XE^@(Czc<=YGQgLTFJFp+kZByU%uRzB@Pqpdrdrg3<akV9hgql>0njBJjvh(HtF
z#6&GhZ}0+KTi9AE-)g$ZXgZ&=b0DacFI_YydR2qOTIw{7OfQ%G%qKu1;n|HgMJBXR
zt^|eC$Dzp$U4G<NZjwpn@EA{*L>|{CI5;?GZhrnzF+P$nNeY#H!f4O9cb+6d8g*8z
ztq<PnmU&h`$_eBe;sj#h?LI~dg1ul!Fdwn=5?@0n0}&iG6~Yb6wtWqUg~5SGT~l;=
z!36m~_O#Em8egkc_Uj)-kMo&@+1Uqr*!cb46Kd<S1@RJGP-l9z$YuyM`-)9mKBwwl
z1`}++6gPDDOw=i%Re{3LpICBqUk!w*+ZD;lzppF)&|-Au7ZgpjsgVY`?M=PocQV&c
zGAJFC&CIG1{i4r}sI02mQeRePDH|?whZFhCa22-F6CVS7K6m926*!nO({)vG5V;#W
z?PrHygTU2`MJVUA$h1u_BPhjzf#fWO?nT^M&I|oRc{kseQa<r|8XO~!%y^k+wFkER
z5Q9q9nxSu0gZ|jQFFTk>9mh8DYiEC`d$V~kY)2RVTpl{9W6{>>-YqNoc5L>Z5KR2c
z=MJo)p~0C{E5UnmocQIgu=dTQ!OzOs<G=^<9vedZ7ASEV7?@lhEpu8;b#RNAe)98y
zzy(&{{C%CQY*-5+;SQL^#_o{HNQsLk?zpRar$OlhkV}7N-TZ9Cs~c-dI!h8s0CK}@
z@7VB|xLf@_@$QXJjzOJfzV<k}5whIgR~QQ^2@vCeNisQIt4%XFhCdRKxAwdKK4o3!
z6$)TX$X2RVGwv2Hc2{bzYRZL*q#b#`lwz^VCd+)*(Jc+j0{Ngu$RbB~5NF0TY?6OA
zc*Po}kO-Tr3aLUVzMeRsv!+W8!S;j{rd>Chn%_JOA08nVb_lZYnTq=YaTGc#9D~z0
z&il`XhGY={BU{njp%e-k1Mb429Ogs7Gq9p0biX}f@<XX~(QO?H5Q=8v!IcfCMrmi5
znwS*sJ2L+foKVyHJhSC!->0zR#R^`E=jKYF%6VIc4ui(SHqd?~pW03oD%^g4T>s7t
z2N3#>*eFSE==j@4fk42Y7=YQA@l)}gYpFiHmkwt0O6Jz_l%`d9?xO=%zI?FU$(kaR
z-F75yi^zVClD8NB?4%cy4DNI*N*cDhYp5Jj{0!_MpxsVR^{nn|l?h&Ns}ZlWXE}*Y
zHv34Do`^M3i6TLmjZ#U+qf8xU)C*ww#C)KnH>kWFF<UL<`|LI~_)1%jS+`3oaKKjJ
zz|~-ATE7dC6tH_bkvj3roE*b1_+qAmdtkhMwEj;lbpmYZd}Q=VJw8x;@CAV84c>``
ziz-D&{PF}r^_FYX@Ku#Ze3oO92nv<<sq4gN!DAHQD`A1)i-AyH!QB+=E~XosWywiP
z?`lp@`wb6wLwUJiRQA}aO9U0+mL5oHKlqjGS1l~0KGMw2vCTn=lIc!k2&sK6*l9q3
zfOY)1l}^&QrAL*Jy&Q->#dYs0d(kF4mgkMoYM(;qEfKxl+FgwvnR9>nMVd!9HmecY
z=NWq)ff-M7dqWYKWZhJ>41WETjENKmX|OepS4R-&dNIiy^ly%bEuUPInVt~pE)r*+
z+U?3<YRsqq3FuUZz<EOwTZA{)!XDgS4SWXx231~hY9w5XF++Yo$q+z%fM~LC{biu3
z=Y@S=)z7Qd5GG?E;_o$Jhn9OflQ#^sBl7LKwNtmTgr7h!&)>$|y;N-!H13PF9Oj?y
z<!LuFWMRbf5i~*oCATeS(7`=6OJ)L5-^U0Grea;6j}qV|B}Fq#5#am8VK7{~!JNeg
zO!>4rNjBM$w3A1f1@xD|_h?ZZeVvO6)aH2G_;h&hMWO5cr-KNw2O|H41@KPFoJD8(
zuDqt*r%TSZiG()3#~-Q=R@O!1I(IzV8jWd>4tfm;xC4j>Pp<#$P2T4V=0J5mE&z02
zxm?0kJ+%%D2#_8f-1x95qf2qfJEL2}vvJ0FEjLTfbCtv8IN?k^XwOWgVW89sY91nm
z<r(-x=qm+7-<LVlegT>PgwmW;#_sOC5!f%0MyouM+lXRJO$JvsmgAE?`*XYb-Qv#W
zAB6~?Tbf=eMj<{)s{=^$@U69(8ST4nL~VNzXp+-=JQNvIK1>o3+9n7J97(@YD|7+Y
z<tG9)XK_yCw0pYkI-*P>u&*bJS^j)-r*FqZ#1_j0fT|!}jGdLFIN)q@y`c^OJU1<S
zLjSvk_7}no(~u8y7F4zWqzwRo)nw$Q-0Lx4z54ZG4#4&`v)+&W23Tq_K*m__%44~8
zj7b~;9xm@9d4lk6vCQIPvpWD_CtZP9&O>rk857RY1+RF$vAQILuuu}TscsN=9BW}%
zveKYyN+n2jSo{^K5yFX`AsW4m9v9ButKvyGIWwa^yRabL5uNYbt%mqcQm-o%f6;AX
zaRQj_9Cn)U_x)57F`rvozoJ!~NsRfApbNDPFugz_s7{$1-gLhkRQo3(i2j6TRIb8X
zueysew2W?THNax{38~fsL@9pit&w0p{<%?Lp5ueJ&@$K7_YRMpR<mY=UH7twd7(p|
z`||Na9?y(Ixy{`e5Ai+YE=C+29E9x;w_;dqpiXpgZXdv{#>263{+iBtCY~(6#k26G
z;RP3mjKDhG(?tSsn<RSrcBQ5zBdE^rwOVL>2dJ&zSk_|96U)DZW9u#f{-pyP!ucNC
zr#i34;oC>uq(xiqUWWw17&$%U@d&L#B;J^T&_{l4csV+CZ@nSr`lv;j$toxsc0hwq
zggT|Ssmpka6~Dh$k#G}LG7;fHOP^#KKRz~ArSXuW9pL(OdKKxgxrdJgglWalJKc}g
z7LXUR$?Qb{quL~))KdfwY#jxL{B6CYeF!0Y{DX-EzQoHXF?$0JND{RM#(pPwir9EH
z&*%xtV%TYVj?DQV*KbR}*w5<TFSh`W_h;=AJ?Rog$-;$!<il$>A{p0n%8|vzd)>4I
zWDY0%>088BU@PhnsaLGRr}V-{2nN2`Zc8gh;3IFv<wCZA`vmy43q-kSf4THH-%(C+
zjk3yx4m7t$qL)5Xto{8`y~)M4wQ>26=UF*^X{RBr#tHhBKfxf|$?Hw|cCbTwbsrd4
z5t9*Ne!|@L%v5HNYUYy~=7mYry0pyQHwob%);uZ&FN&;2x!jd28q|+P;jumD$r5bf
zLCuIJ&LJ@zH1*BX8Q~8jiPl_6En^C&Ec0xjWU`I4eyY{-1BcgH$b);o@ZR28#n~^V
zh;%3!7m#;P=RRbg@b+<5C8uzhTRHhzI_aZ<ebGl2>SXMHD+rxX#)<9E*^i~&bn_PP
zdD&mB2723U3?%97?G)CYpPFeh$rbC&=1zC9n8^w7Ab964XB=D;Et9NZ!SQ31$;!Rg
zJcyA4u=72_N2cF+@k;9*t^90c(x~nU-7j^s4Odrr{R&IKM~!`{`qMPD+&fUWO}sh;
zYHa)maX;BIouFc|WLb1~K-71i^+=2ltffUC5*W&_G2vP|Mmko0q3%b)i6Or@!^@lb
z!!wG(%u3^`RW-ueWnkeWehuUDpOQruWKs94gU@|;-x=k}5xsTi>uHqom5Wda3v6fK
z!TW`CSvFoJc2`NGw$p^UVmmm@7b@gD6!;%dX<g{<AGXjwKGyGv_|-0#+5Z;Ur$3AI
zl_Uz0m!r;BiBBk^Z+#ui><1;*0O5QRVDY>;Lz;JT44$&g70G0VOXx~B><)iZ-c7|(
zc*t_teD=1)>lEtwmRfGMvc<;sGDZ01t_<(Cq-Re##`$h!D?)>Vt%0C+s!Kyb2omew
z_4xK-GMf$w!hrj(Ie^!L1N63}7w|ObUbI$wG&smMXi=6|yX&(~%~gGjNh-X=a3d=F
zu`T9$PEr9}U{3dcIyDT5rfVOhZFQ58yK5iWYwrq%f*J=J2K*pc8|++M&X&9;t9YG6
z6Xwk}N&flz(fr_+f|di2`#{hV=DB_27T=QCAx#6SzSD?T<B~|u^j>Pfn+ZIvZ#T!I
zxeN(!E(@EMQmWt7ZmH?AYaZ@8FS%}}Yz}8En}%o$?I-fNo{RwV0op~Z4=(cf0>70k
z0$t|}hANGR1jEL8xOJwwQ8#$Mxj=GlvtKc-o>XryxQJo~#8LS#n38AuPr5ObCii;L
z>dw_$s-05TDf19zkDp<Xv{yr8nRp2lnSOkeM*4J9@zAV{g;C)2ads)j=E1f;+yw3n
z$^a7}K!tGSnMAFSYD1d`WOm&(_oXtk!Zxu1f4|&Z|6vS1$Nuc=NJ)F_wlDo)v-VPN
z${Q52QX|e<AB+a`DU(YjU61&#xJ~g0$B5wIu}cHvh}Yb9Gfl3iQ#dIC2M*ysK2xkK
zdN!*XcFV=4j*h?FsO;B3Yg|^kv}@q7UHe5#_*~n8(XBE^f9~dIY8?G=M)GM|p}?sd
zg~a~34AHLm+|5{vik9at69?7ZR{`yGGE2w)1gMA;`<|wh$bDJ^v_o+#j7ZR{8|c+u
z%xpREQ#`qjb?S*E;bqXOvyo90FfFZAyc-;kP&`*8awytx#VhFB78ts*llc*$3Gcl@
zpt*s}?%-9S82Qx`LRl0!L(|z}H)|F}$qHTuqJi=x6>aV2N1(8|+4#x%)deRz``!{z
z8X<l8ktW`@@g_J%X|GkS{Faq^kfZ0UI8)f+gYm-)Z6j9Rri;e!E?;*_G5?tHORO8z
z`X*DF!MXdW;82qrBC@}P7@@K}1yGo4x*7wTd7Vwl{8r<~7YWb~^j&XVh4OHkn;VQN
z>o6v!k*gD4{a$+&S)fp>6LMZP=+!-6rD*e@vY9{Y>aX?|NOB1lpPu8nM!VRX0O++f
zfWJg&X(zr(<`ck)BOY2?xF^F5oBhav(+Dw_eY73i2GIW2#8vVNnf7~+$#&GN_pSq(
zmLcq+wdDNVy1?4xWvVw!opgD*psG~g$!i!h?FaZ+7jMtG%S4t69DAI3KXMzeYHZF!
z2M;;7zEe`hNfcif57kS#5k#Ics;3b<UrPVF?13zp5r{NHSVLbsZX-DeG{xd4=3SuH
zjTJ?a5j}-PRMKfc@kzbKLE!Cp^5gfp*-<{XST!3E75uQIEN~H-f;6`7Bf30Pk}8*>
zH9=%XF_RJOkdUMsflbCj<1Uy!NyW#ZPYh?OpLg@V2?cQCJ*ySUM2E94a0s5u6@K>)
z6%O%?IMeI4aaMruwkQO&c`hCu{H>wLHp+6B-qhrW$}|D%c{p(g=@5I`w+#jB4IXGK
zArzaWD~Q~Dx_sZJT|QJA9xlzk<ZOw?{h?@|r~Pv`&WJ}E(*uo7S264lb$xP*z;{RG
z44oJFA9~Sd(ZzY;;Qc*o#Rv_$l83Jb-rKi+U%!w$<vpDcw*K;R60Mm;GZ2xLUaOHk
zeSuWACLl@2nm)B-8+&=n+;a#jLcvpOE$kI22gNC8v#;`^_ShDuPk`}+_$R^tR9^U_
z%E)w*05n`Y%;twrPEQkQxmh{eZyk@85tK^XPJj8$Fb$G2`|(~bT>uwKtOYW|(j9TJ
zF<;4YZBniqD~q{M*ro3?jGUW8aYc2v6+eyo&UzXZ41g<IowU=W!eE==fjgl?F4qIf
z1HgMQ#vC!Y#7PqHGKa?8+zH0hj0Np|O6%N<HvCeV#34#39rP;zgY3he-cI7qT(mfL
zF4W}WbzI4kz{kGJQ)2kZ2~7Z0h(D1ZVN&d&PfX15!L!e?wVLsiZP7+$zk%p_Pwn2F
zSQD>)n~jJj9C%+Iru;nXQZ>_@@m&8qgu#0+McNp<u@bokiR(*xv4A{R>)lbb`)NhO
zGA=2@{`!ENjozgLtHPBfrgQqQ`ydpKtFs%~^z<RB>qTW&m3P*38qpU0lV$cR8A+m%
z&3$pAUWnKtnLxL7c#(b1hp@TU#4~~1(cEjn6T@V*7V_0ExatSe!c06Q&wNZEPX^zZ
z%5kikRl~AZT+RDZku_OroR&92UQ<(3gV9;hoWxyFX_}p=zUxg%B{mRh39Vq%DA~K+
zZT#c@HGwBKTT8m%*()sl3Mbk-IMCtry1RNmt;KJhvuwCCc6WU`&7-4I%A(7MkktKB
z(@?%AV9Vo(Gm_Ov`K#1d*iDa;Ok@7^f}iwP$$b?CNVrt_l(7ItLV4YJVT-oKPTI~g
zi|y_QA|P&K1U;3+QZDjqYn?tX^I4D3p=My~oeP~y6m(_LF}|5Y-zv!0*}DH(=a4TH
zvC*r^m0VI(guk28iga+VDwk1<%s%l`@KU<%as-lUB&(s+E1VG826VuVuFog=NBoGT
z_&R`&D6R+8KO<6j3NNkTMBl~9Sgu+d9qr5FhgCj>k_M!ioF|T-242N9yqkPEox1?v
zn!N6ZnZU?E>@hb%$6zFgpCEe%xSLTJ@7}R_he^Zv0#TVD#Dt!CDiq<2r(X^Y;idRV
zRN3728n*5EK`%}*6QNA==q*~yR0{e182n0^hjB-<#2iMPRT|!<C<S3XI${WHqjw|9
zc}W13g<jUScT}r@j#1loN5T8XdOV}JMVp{N$KlBf2As%asU+7-E*9D+LO8PUXcgGx
zxAhUMm~e*tw<aRQo6Z8^L2AStPsQ(8?qv-S#D-X@9NHm?u;(=N9_6iCN?-1!^k(Sg
zf*yZuEsMR+Mo4;Nu=@eJy6H|Xna?X@1(g(+DsU5!iHrTD`sP|zQoGv{F*g_%5reS^
z_ilMZctW%S!J?L_&@!LV6pmy{OcGoZ=K-WUj==*>Li;=AotwlIPrk4kWD9i3kyN=6
z;bD}0QOOHwt&X?1$8^h?D018%SJrJ>v}KZX%IllrzScQa-%&iBP1o7%<gHm9IH;Wu
z@<bout}}bO_pXJ7PyN`m&P1JB<($;&Oxy)hCKFJ{Ze^~=Y+gR)Sth^}sFNlhhoTi(
zU5VCTlM_BVhiHg}o_Lp5%9dYMypj=5piQ&BRaI7QTEhFr@qw3qSL$1EZitzV<#m!H
z>-KP8Umr>Fd-^*nZFJ8wxpY3)!tK{*Gjpxy+`r@y)rFvzC!d<9Kk7^SeK3*#Zs@n>
ziR<YzJhTcV*^UU{*ziYxdtaD8*4@h>Kf9gV^V#F=`*bT=BjdQ4uw$-0BU+_AEsh3<
zXoR>mw4;(d{{SL>k}|-{RzKB}>qh!A!Rf_-7?bImYppcWRJ*|zai;R7zE}0uqq?6j
zey-cT3dq#>NBr@Zd%#eyvson=%=vcylda4;bv>IXd3oVa_M)qWS7-IE+ckD+bhkDt
zASSg~BUde5PK1^fa;J?%^Lk>hIH_m$)z3vUAR@S|l4K(QoLVB&DQ_5q+<@CM-H1Gb
z)xg`8?;aom_9Y`)8K6Zl;3SWPL>jd7s<u?C-p(?SH45H`8Yob{HP|U3{nbk3@1bdQ
zGxl??9g7#pkvt-roCvBI_UE;@<a_PA5PB-W9v>~L=?Z1sluwR}c?%E*<phAJo(4oT
z+4Qr&JA_*W=@l|uASBVXUZ>Sz#$PL+>(32a@FRP;N5OBm^IT#jssS?3oE86pcCd#Q
z-MH(TCZSRtvBWAl++dF2YVN9M=u{2-rqjr%TU5-?D9;h=+oH<JjEVH`qwSoe9zM^&
z79^P$rtu85v4(*+4b;{Zmw9qL+CQyYnF85d`>9rX@2r&L-+zOO+|OP*bH2%-z+}b|
zjfonU8~_-<ASNv95?IwZKxc^vkfvw|IpkAvrjkike$!wh1y0sOl#;gXddbk_@e|*W
z1+bUYKou+Aun*TD=o!PayI+_}Zb>AKrAwBT36=0(Ta2AC=Y_u;k;&JY!Ne<gK1ghz
zf!;O)%kFP>orH+LKC~@lX4YSiR?>tDDQF4J5Qr_|ec`PvI{Hm2Zqbyj_*;{Ei|^V-
zxik_P4)IC|IxW;R%P%R!hh}DRjw&emf(h9FWyHcTo@s;(pwf5|)Q;8}+w{tR0c`Z3
zV~=EYA@R(EG4AcaVeO(;z2$LzOUnaHYv@GR6g)vqv?>HoGiZvSXs&Sle8V?H2kQ+p
z9u~<6lMm2)ZLO^BRk{pDCF%i-@NHHgSEiKvCs=ovWBUU-mknm0^6<`n;g_prSalQm
z-k<VA2ttW4R(w;YyF<d-es78oJn(0j|0}`F-BA!d5(YRyZJwayl*f7?zc+Z`UN!gy
zX)zaX8-VJK!m}FR_?ZxdMWyPx62QfH<y0nQ80)%(jT-JE1KnkkYIYhC-kiwr>KFd*
zn_T@-C_oH6C=H0zGmrw-NYi1f!tPg*mhzYuMhpIb3J~WZY3=bTetd%z;WEHIcuTc%
zawogK?*2X95}AE(XXi%fLQdd0hRcvL63T0$m$50*QRpTX7NzWP0hj`8nDB`HP*yNy
zirXU4I+PN6vsGREW|5y~TSszfD#CsHjVz#K^B8~zm+wFPj;Mkd;i5S)Xhu?iCNkcB
z4x&i}8k@+)R%o>gHIq`^*n#vOBbJG|c?#JrzzY|cUc0+C9>eb)c(09@#fYN$N%5pQ
z=MQgkN=joi(CM)NW=A_Sy$?iTvcqG0)c63kyfx{UK3RIr@)*q|Yo?vwj;DL{9E5%p
z19JkUu6+62AW_a?A&BjFZ8yUj6IsA|aX}L#ar9EDAc!uesYbsqR3v^VY`4nIO;&z6
z{XS-R4Dlr)XQ^tO&r0H0g=o5lkNR+Jb+tvX76uY=B>Gb>2&H&aP)^*_$P5Q%*l<%S
zv&3iZD`s>IAnHdj*j%qBpN%05q_<=eLNs@8-3%z1dH2z3hcms}i))g|4<Iv5Ue8la
zyd9_h1((ef^Q-4@h`*pv^E5T7!F86xU{U|{4K@KJ(K&|WMC#v^Bubw8A&jr@XdsJQ
z19DK~@1jDPOW>8Oy7Z)0FgMVchE1Buk)48+XZxpaZg05WfX)eM-rA<fOsQl%`suz%
zKK-_qNJH*aKPRIbXf%*Ym7a+sd+(}YKPzMyfaXWds;E$PUYd^N_JZKzF5|Eh!$llN
zPtV+Zw`(mrh87j{$%o0Fh2pHtZoPu&4S@L2*6q>gQrKAC{85>@lKwdb&>Hg~oEd5a
zq=Qo_<P{W--+T@`w7lYVdz9XouCrbLAZc&RI@d8-+`Ci^kBr-dS+1NbM9cxMO}uW_
zSsFYX^Z@+OynJ$7VEYimU~`?lSr94p$n=eIOn*oN)Y%)`E+(?*Jkc{|BxGm}ks5I#
z!8OzN%COT_h8B@r1Zucx+G~QUy}O?!6)K+T%Oe{m?yzStnW2N<sEGa4#zq|ln_Fa)
z9EcA7P4N8Pxbp@bdd9}d^_|0gV%JOO#B-BtjGLiU{i@NStiYZrbGN<)pn0pU)YI*u
z_p%*4pqfK_CW2f*E}9A+fXB|jy;?I0Wc&e1Y!EaZBe$-FmKPPxj_+dzP2QXuOa`z5
zk&G><LCRWZ?Sr2l43`ZRRY-c46d+x?)S4Bh$H?qWha~@oheM1Nf^J6Dn_o8?f34uy
zB}---sGNMa2W%qH4Wm6lIcKgd5w8*(%VQj*GDIYo)Gyn>YxlcHUzQ-fW2?{!e=sY!
zl^ER*h9~r*f!ad>eRF*%$F)y)eF{HL;JiR7Cpt{)N&EFN<Qs1{D~w#JyRTDF9I(z`
zp!Ii}Cty3*{(!uj*hNZtJz2M5XP8hfAuu*wUgi_f&~sVTf^e0V0z<mgeL<-iwy_a2
z(K@Gk?}cR&7wdH<-1Y)gqV{d6(Eeu#?<3$uRS8RT7lf3k>+H3wq?Y6YAK*cnY3sO#
zSLSHjAFS8S+^53lI-vcEI0_C9V<h!41b{babU|F#+ZcQsPs=DoYyg@QwG{eAYk>8Q
zBc{JyIX~sH^=*C=xp7gdcY3au1D=>30ARAqesH<go|QggD`%?{g9JLpJTh%64QW?B
z3?I)iir70|-2S#B_nCM9Sr=eVmas-rw@|sSorr+%tDDZz>OVKVyE^8Lr|XEm12=0b
zqUR-N5v~lgRhn#+O$SO15`A#nzW+4!BFuc~Q0^1wyVckS%%ey1f3o;&-Vb*}(+{hf
zW8i_Dg8@c%q<EP*>@$%zB%oSgHAZ~=%JF@{M}2wx57d$^LcFnzG(flKQy~J{W(5jD
zINri=TiQFwYgrB!Q<&HOQ-KO_0;o4QY==nlj}#z>eLM`4BQQVA@66u({&);|%E=PJ
z!Rtl<Qy(6bx&(OPrh~uxt4`Z1EGCmX)jFc%a$jqUUwK5|jA|4308EO_oE9@j7N+%k
zQe~$s$ArUsIliJ2m?OzInkr0>>A5H*yAQTKC!`ou2XaB~<W=jq#TTxdb&lC+Pre}y
zc)%@^$+G-db9Z$*cFjAh8i<9P^W=fohV*OU?fvSy11pDf(fPY>dYEE`X*&p@4Y*c(
z6&&U}9l%RTPUggmV*eZs$PKIB`=Ok>`ZyS_=0l0E#}`sA5(5l48K^2<5A!kd1TM)>
zY(xu+OwRj`Px|loRloF$JFMCly=Z1^L{HhD6V;D(VF-~S34ZD<^%Ef;?e;4A=FuvK
zOt%av5RU`_p*@A(!HTjwi`srC;muq7>mR;`s-~s)$k)yR{a$*!KnV{G*fb_1ueWHs
z<kcqkTL=<cqMw;TA-D`~;ioLGc<qFU@q7R%bCmHIU!7wUPrZ^9f=zGAgx1=7sss1=
zPfAetDf*`-IhbqjKh;7-5CN|M349Ex3g&m4MX0$IDe~=kdIdZsv9%?LM<MAM+`iVm
zFt-_wk-F>!oF-A4Ry=r^Z5K86CuPrwJy)8YHPGenUL-PcXNW8mARG6(t4jj9+5IYw
zYDi4XJag-puXw6)ic~_MyGHrr_0ws<2Eh|faU2-5(_GtJ5kW_5dB}*mC+!$OxSj{D
zreqe)=g=_I;r`?)Z68o>2ad!8s$w{BR8Ajgl}XJmmsF@_Sh{Q6VN5<4!#L|qrhBBB
zVHjQ}38FtsM+aYL?K2Y$fb8;;U^icMcbhxG_%~fbmcLT8jwCFh*}KB}tYZxWvif}@
zxKF`}9RwKem`w2+YNF^bAr`s*E}HVqqfzUFz(xf1vvD!yD`iSJ5XvpWJGti_J`K<F
zavsTF2c^JxIyiu^OY7ASoim{}1<<!~BhQ+gT5Ar?=b}uEM(?#>AjNaDn!V|HYHme`
zgF96pd#^JGxfl<k4u=-uq6xh6QGXAZY)?cJ&y~YZVVT3r0(Yg%AwvxzapxpNl2}B<
z=p=A8J~|7Cg)1TQpcJ5^W+)Wh*&>^cmUd>AlXGsBW=sY>14T~5F1kAXPp50_Ya#Xo
zVJO@hg2}?XWmn5aSyRhU-eW%J+Hzin1nK_O@w)lM3zy?U{V;}46hG0^{wbDX%0D_e
z*JkV<900z8Npea+OTeH0Fr&aXPBU`1Q^;N-#7LmH4cibmBU$XKw78E-O5ZmD3{KT|
zyRg83lJtWdx4E?}^E$APIK-r?CFDgMrHz|iZg4h^6|R>@Qz0Q`O&7C23G$Nyz6MvL
z^Kzl`*E^VKUFT>$HeO};o><$DT3H0ZO2E<;Syme#3v4gY)jWHQF98an0nur>UO`-P
zd$=`0z`ziK%v#aVdXtnyqGJjZffjjpERJV?OsPg9ot|A0p}_60u?w9(Xijbr#ZG2E
zJKj^X7OWYnQWgrZw*UFF2GDi;pF;)~*rz{mW5U^=zP+71b0+9p$+ugxL{{xc<EcN{
z6-quyRAMAtR!IOq<zBcZ)y<ehrsDH`vaxM9*>7AWw#7ZJeu7wJdW>s@IcGbhvIfiw
zsj47^ExrZ?tfg^na3*~8>4cj0YW6<M93TA$?Ly#=z@!9B!MzzCR&BP&`H8;lwW4G~
zCN%jlHobr7^_<TqB3_0LTEr_E==x5UnN$lUQwrbdnb|puZh|)%|0%LFAfl0oCSFTf
zELxW0Yg%~U19wsNTIYd|0IP{>_4Qgjbu^zbNMc%@W6XeZ+VjVPg@R2UG;DhL2EA_k
zuiZ)n-Mp0_o;s`exh&^?ch;!eUT%C)?UsWZ2!yGD3C;k-AdiTfx`^HT8?7N4C(`L<
zoyP(%tH`-UaS!azOdu38pD*%=zlr6G9#dbrY*g@1w4U`;+Sd>wK5v&Vil>s+oS52X
z{Laa-_Xk4C1tw;OZjPEZymBk?EjqME349SQ7`YE7Xi&A80iu@o5-WYw{@oPrK>f%0
zS6)d(I`Yk()A{D7eduXyNtYoPSc@vt_Iw%$u^g^<CQEc}7ZcJi%$F)sx|TG5>$21R
z;Ey|g146e6hs}N6H9F%S!Vmw+4cQ`HJmp3^D!>9OdkIc+U(-;9cJ|0a5-T+dL2t0~
zi95=0OCESXxjJkV^Vg}HZzX&vAkpeYVzoe1Gq4-`b-(btItL%Lgn8wA)4=4itBny3
z0Cr$U(P~Q!@WkmT@HBhJwnw1=!PUz#J-&0FfP8(@o{{q6GPqysfCXeMsdxbz!n*o0
zcPB2UKZMl|Tx<YgJG#84Kpz|%a&n!?X!a%&B@(xf(@q1oQB+V+$~#-q#su;YM4jj^
zacxgovm1iQ&y0Gz_mq7EPr4!pnv=PHNN>G9;PVlDcPJG6X2f50(~5FPMQgn~;<HW+
z^2<k|OmWb7f!sG6njZOx8@_7s=~B6T+flJHF3jiubau$CaOzGkwKEb7qG`0p2k{}E
ziM3fU@np4rX?bK?Cd$#T`W8C~kMdD;qRvzFi|AW)d6<8RyJ_nloR=1$AH?#Ua5d{c
zVj0LgLD;#j!BhuK7FJdVC%^C(V6ap0K!dN&qr+0v{u`I~r>F1V+P5~-+yVam3^X%8
z|5H4QQ>^(H-`A+LY5{21lg|8GUx-Z4e<qyT-rt-r%tTH}hAtap$P;?CCIxOOjLDW=
z?kZ$FQuo`2u<p`eaj6@j<^y|(eiRPd-aLEAbPgBY9P!<HPlgX_hP)gbPIG^Z3)gKJ
zH;O$t>AjY|bwIBemSQ;Z<i|2H$*@%i!$lx&@iop1IqP^*27C!HWPP&q6^L6HX_H8?
zxAN*I(Xl!3$AX<@x<bi=w!5K{8Mx|Q|K#7ExK}lF-<1M^X{26#*^ndisY6LW!a6ZJ
zosT~<UU`s;zC&MEEZJN_fvAbJK<jJN-!kzqrp+AR@C)&H@;Q<fT)3LW;gmMyLBXZ%
z_&?8I0M|>}@8rSz*%I>sE!_h&)W@eL59*k<Orb9yQd-KTSxg67$irmU?ODOJc}{^w
z%2fG|Aq13IdcFOmppABaTpao;L?z-C4xgt|BJV;TyoAhx_x$3br_Xerul<uPLqb<?
zc02C^Nu+X@E^^66%&Tjo3y@l+DQu04`txQ-hDZY~A08lJjw3?64@&g>G*nJwYta(m
z;uublLxMa#0+UL9D(n(SA=A=%uPuFkIdWCEh^tva)(mEEJzn#Ww1%v?hJxdF=RRqN
z-UzD!&Byb?c*&t{40D4=l}5@rI8WDlE4aA0xQj`%b`Rg1KXi&MtVB0h_4ydd5rL18
zhP=2;W|nL@9U`ko*^%W{K5ruBl?z7Ki`toIJ|5sRb<BbngvoV+vBN}9iF5R$G??{z
zUS|lNAmQhvpyhGfoe;$YCx$C%><OTYh_Q0S_S5IdCls?3LR<*tV+R$}v&J}6Pf|mj
z2Alh?EjfIyfvOA2F*7&U^%|sW5hBJ1wWP}Rj)<5OAa1>`9~fZLLSvoaTeEM8O}H5*
zX}R(xdfEtjVm(d>+x-I6_hmn0*txM3^cgsqoLT(KL^<g=PnrcV&&0cvz2GX#yP9;o
zaqQUeCFpafyJ~seIw~CeP0QdL^QX)?4C)5C!Zj+q?v8`RZd`#K0?HNl7*VyUK|m&6
z9B3JLpn^OIlec4G7pJHU%eTe`JLZB}asciBnh0|;SyT>3D*NmdAF~|a1o#>3a=dHs
zKJOtW7OS1tvDEKl-Nm5xkH)i^$lB9QJqQSn<+`h1h)(qDt<v|8o)i>N-^f>R{JjU6
z(z@L-;v%&0=QTJaLBcP=NSMr22XydC-05xXiokf`(UM$3aIY5gbbm<qbp5Y4nj|AJ
zFx;-ku~V+)|K-{<f*NSng_nI_qUbY3ce~*=zT&9~v2M|zc1qab9by6QW=4=k$W@C|
z<132<l`M57{hI=y`dkUaN0Rje&chaKB>8v9pREPg&9weL-S7kEQ&m;fgID={Mnc4h
zaPSXqwgT|SX?#Fq*GkmepZ+<wukCLNrhYIw&-uLVDhW;X@^C~`yLuW-BX$BI<t{VL
zPj5>&MRZxg9+75kryp5syF^a6jI5s@O{m`wv8zsvbVb5F6+_0mkvD)@94(4WiHBEe
zmfcoQhPefE#(tO|jbojn+2bW`qri||$+vG@Z~`6c6Zl!>m+z?wM}gCO4<4|>Yblo+
zNaiS!It|*!$P%G{G9o>Qv4k`1K%7()g^!oBQeIwO$x<wW1GdAY<~rgkkbm%lk%1jh
zPQzwl$ewT4zRpsl6rJ9kQhcsr>u7dL_E&ilu|0C2?S7j7rrxI^=s|*);k>JO+I1Zg
zt}d6UNOkp{;J53K!c6!a763L`*US@=+XK~x)!7533aZ>5V=aFeGI(IU-&~s+oABv`
zu4JJ<{rmr{zXfKwFQ!x&=soCVHyw^ALPFXCl4kBnWSzDEKct;P4_B3g$_vP$iTTrU
ze>6SWEI8T4WWYU)FQqU6+|)H<JuBj=Ii1(Vq?1{WhKx2r6>~=tH!G%iQB$>Bez$f4
zW}gSAwx~()L8=()S>5m7mcB`yE3Kk6FsufqR{sfWxfk6Hl>$irx&JUn_;&k)hp%hD
z<lh>wrXXJ{Mx$OS6v6u!7;R>u&S+EzeS&M<`b8e<5B;Q;uI`Wp1~fMvb^}XZQ;NX^
zH0a4i8_84yAjh(qjpyj4@FJI97kJL$+r|2FB6Jq9(Q2!xsPH9I(bfSiZlPf8Q0HnV
z4SuN5$f<!cVLk02jT48x*OURNSQvmSDhm|~&;d(5nWm&)`Wkw$u0FB;P@<1|NR&V>
zw*R`$VSDTvZh;CJTuPaVqO;N0hQ;xqYfzJQ{L0ym&n$Z~oAv%vH9;g$dwt4YYho*3
zeT2thO{gfGsTSaxCADYnv<JnRfpM>@%!6OJMVPI4MQ$2z#JY!tg~b6Q$_L9kd)SV^
zx0-^nzuJbr_~K2=fLHX7f@NZZHZWR%*=a8Gs>=rp0eJjRt@*3pfoiv<Y-+e!_<HBT
zM)JDDmO<U@el#AiS~$2G|A_uDA4=xo=gw~RdLD}M*CZ#$Q91}$K)Uhj{R+PT_ZOz;
zOYqMNAQj)^$2$X$1<*%4?gQO)3v15L1+K7a(dMo_YNvj-<EDJ&({_K5Bn?*hN56zX
zJL_+i=to`W!V<Jcu;>FZl~1>RW9mg!^MN)-d*x!O+LIU9I7WDT3Cx*|V3ZhC)ICSC
z@_<@7VT~9)HdaMKMH)jOyFhe{fJmKaQ{@X0EOt6)WBoBL>o(Wi2Zxr;rqHOh|0eBh
zpMvh|!~e(FTR>I0b^F7z3F$6rr9ncv*@%FEv~-s=DBUfnNJ%%+NJ*EJNJw{wba(f+
zw(q^)xc43Z`yS31`;0x*y`E>yHP_7Fob#=|ZH}_nx07d77FWt4Yn1w|_P@l@Sd?(t
z>+dZ3e#ki4k29S7V$r^tC9Bj7?`#rZ918`(UMfOJVMDt=KMyTIsl{_8e1sf{$M^}@
zzRd*)jyn~)^Toshj_ay0xWIz409>yVCbMu{3cp4iN{LQ|Gf65t4Nx$^{LnwMsvH#^
zAn9xB!d;engZJvfSyZP54f%yay8W*YI6m67_NK>)8RPpw>#FHrH6SF8qFG^#V;xHb
zR-_w17|a1QKE=cprFX3)GzyN*dB;9f@U&49dUMNJa$~=j)b~|JQ+VXZDBT#+3Dr(Z
z;LSVE7OorekWC-NM}41Uc>W@A10|rmvb#AV$0}c3R5dtQA|1ZhV#mF>vio=kiymhM
z_)a#Q{Bf-L6bHK!L!kOZ-0AT05V$mY#ictBcGgW&QIDaQFA<J3db9#oXaI)*q3}xr
z>NOjjwI!aDHq8CyVWqs&3!OTfVd^_OJS+%?4Kwj}X)JUFhGt1<Zw(md!}8q!i8x9x
zdiwk<gX=9oEx$zZTa7;dm~@IuY*k|Mo@E%J?Cld}geMU%B0f5E3Qfk%qQi^P;{kTW
zhpUWIS4iMk(Gm{I8D?w^VIM2RSohzyt)sf~#Q7}^Vj3Fq(6wXR*d&c;w>sbBqzqib
zmszJfZ$kM~u((Ec>((~?7qQT4x(&OLx&8%1F-%a+PRcxrB>g4RAsH5koY#A&5^j}$
zW=`g#^E{^}Bi5>_I2zv>7WBl1)1`K^>L(7bC|WarxHRqP(867;9;5^mfOeI2!Z2w-
zjUJLkY126M?9d{Yx1?0M*+cvkLK<L&Sx~2^<2V=fs;nnIxaRIRgk{XIUj{;P#e&+E
zSZ?PNKeRHuhdJ;O&0t0nFYV|XB(B<ZYs)Bg#t$n~8JrQ=0F4;y3-N!WWu=1>wBbJ~
zK})m8n-BTrGqfibjA<^sAQRlvHi8a^_-Jks9=(z|?&{A&k*qJxrK?);ZsVh)4ZJZ3
zhkPuoCCmIhk6~gH`>n69X8*IB<T1w|u3VOnmtkpeBAKP1?}Srtk60%@hVJ4~4Gi3H
zRQ!ZTgd;Z*AZ7mCf()!X69{N~u6FiN>s+M4Bv(0F3{6Y#DSK{S=UW00Bz(zaAh|Sn
z^dmSV0GMgj2pl$RvyJ?DrPm#!A}$xJM7K~X8&DHUxe(BgitWjSE{adpCSVRinK;qS
zkz$-v(F*kxcYSmo-w`2V$m{;M!U@pNcL=}tv{Qda(PPCZw0a()`M~%tE5>)#uRZ~U
zQ((5LP!XBVfi_%5nthwvwqp|1wEdd?xVCA!*uYB}VWiYkE>ulL`En3=hS3Ut60M3S
zwUr5@*%(PsNIJcrlKl35$zA{Fd;vud5QYL<BNv)LLloV#2PY2mPn2IlZPpL!KAQNm
zYG?`aU}*>uyisxoldfZ6-a95kfHhF#&k-s@+87h#=(A?^Dp7enrFERk#(yq8Rk`x4
zzf6nzBrEp~2HCtjvtSXi;2Z$i+2hCQw+35p$Tmr1*CUTHyfAZD*Fdj@$zFEu?9fcG
z<P>tDe$y>&FFDfsv(^%i)daI2(;JHQ^ZLc_ct{^*6&VSx+KG#|%1<raJ`d&ZNB0nZ
z&XERY)>MeRHGce58y>@H=vs!pw;GkU>ZXQnGSi7@MtOSY__qiP*R5>KPN>L5ARG2e
zYPb{lf~RMKztai22Ms7-cUlnH9QV+WC1*Z4nwum}@9R4Y<xLprpj2FtgxM;j#O5CZ
zfm%<@LA{@@Wl3&9(|H0dogor%<PhLOOL0k;2n_WGr7KPkzGmPN#SL`Um(*mb<tDzV
zbRr%P@hx7O8QsEi@zL2U-uS5Pt^I}2d{>|4rasS(_-ntkJJzcqifPA?Zeq?bqTG3l
zo-2{*?U12V&}a4lv`HTcW_V0Z3Sp#5KP{KA*)T?_W5Pp9Ou2F%^svrpk{uwsdR?Mj
zy~~gHHqU^jWXiMcQ3_jAG8WhCo{`DJ6{agoOhUxR=}xbQ>2{-f3xL0_f1-a{G9W_h
z;2$`fe)K1(P_Za8Isej8_tfRo!7AO*$>}79qw@kP&hPz=tp4d1S=u13V)icfQKESz
z6$lV~2!MjzHQKv%lnn8m9%v=6SXmBje?|r0Cr~8d+kjxL@mkU6fZqef@Da?a0|AsO
zRW!lwnBjt!?^9ckNalT1i1b{TQ&9QA-`1e4dp0Pp+00l{59YQVXt&}QI&X(t=C<M|
z#6P`wS8$nvMfc{xr;sP<y5aMgy5S)*Rvu4Ac~kXpzenistHbieH$TzXbaF+OTj6w_
z1d^^r^lY{Wb(6gUF4OJ=c3wrcGk5N9Jc;`97sb$oFycLz*|_WPji=!Vb;!mu?UO5W
z`!4aO?ail+HT>ucp)JAE$80i@wy!Qf;^LZX;Ijzg<=b5NO~v$+Y#k@$MSfEl-_&VR
zTf1CyEY?rpeiLy~=6bNG-bzt^S9fIr!2n&Ln;psAaZHHetzJW^b`Tub+A1x~6r1n%
z2>AL8VR9%EC$F$jNEuD^<9uyi>BdeZ|3?GZpQGR^lGd9^NVG}eaXrQz)l!%kEo6T2
zgzPK08F`=-LXYHIb6}u_()A$2YuREpg>im<RFO{fIA4EsAIjnvARi_G0S#&QM%p@u
zdlJP?i+DJl6gr05ChxKgXP7C&KNRx-0~4H43c^VL?ANmhYf&?ilgs*)F-c=pXD=x~
zCHfbckDc?^I*Ok`-oJ@kK>qcF!w5p6aP#vs>B$s{32|xNmtWmEl$}+@);S<tKS^2a
z(^c!Gd)9(@CAZ?-B5xh|0O6V{z3K*CROn+nnw*X|NvKH{Op|oV{y{2#n?e3A=_u#Z
z9#yzUNH}*QIRAK*b)_!eS1AHcTX>8{YUH&7<&EiW{Q=bKfe>)}u;J3i9yr16r$ez(
zO{PrabWd3$ekHVu#8h(*$g;mCvP*mVxOP<92@lb)NG(p$u|1z9b()h{JaJ4ix0m&I
zPUxtc=SN+&_m*-Fc|+K+h&%`=Z*Gy4d!^{?KQS+g&lsqj5%h{z$lGRRYuBG1{@(q4
zhjwII#HNmm#^H9tyWCCURA`<MR4Ub%?CxMTQ4J*dR@G6)7V$NN?}OOu+hpI$me#uU
z_^zFH@)Cu3Amv<NK^=lfInijxUb$8%-eHADE|I`4LJ_R3|D?^7{>^viZHkJ#igSJ`
zD+~w!ReAu*!p4A0iR*ts&5x76l`&-Ly!}bW8P}e>s*xF`0hX{ON(~!roBnvAQtR-V
zR|$j;1ltJmvq|Q64ccqmwfuR-rZ0Rqgc>J0tgJT$<$tg7cKnydxUA`x6E&MN`p$qs
z_DVFjbc;U>;Ad)Xw0qU>w!2xQMDV4WMDmhZ2Qeoii!_f5YCgl4UHIAf1%b%@TFm3_
z#6rs-b2g#RC?0XRAFr2!tetn;UqC!|C-wl(Tv`P|5UYTQb%9OnMCAakAUiB)p6m-j
z59dL90(`8y4>rY?UvCwst$$L$cw7lbQCsNc(wTO~m$dYm0IwhGiBt-&#nYccw79$#
zA?>lWzcP9(1%o9l!p25BBp5~ICrPxM6o`;S@pI)JSLg=-RG<J&!DUThrB5l;nAN#M
z>uG3+Z))s-<rrCywm`M;7Z%o=cU!*^43o*L=kkv8_iFf=COcuK#ve4elXu2)qPcNI
z&-gF8B#g%?>wmOo+6!=``4p3>+<E3QSLKY#r_f{NCnqOS{$9<jLL_0;`%%*x40*le
znSkXzu`I5uI~xglA&JbkS>x$h`#~2GDniftad|U*;OWkMK2W1xUy$L$X#e7+L8#_6
zyB#9&E&p?2KMAWRv7ZFR;NhQ8gEygt3!PUOoRSI%?=xks+uh8xJ4b+12Z1%6Jc*_J
z;tB0e`O3J+J?{p`4P^(sbY8z_b?mNa;gxK!%NGS<P~yiTHiK3}e5*t2mFX>}5Uqeb
zjxFrNmLz9xb+^2tn~#?>yE+{@mkKQ#L^URCRj@1gGSRpFxq7^}e2D^$jqJ!}FG=_+
zfxO<D>V<3Ra6Mx{UiYJm7UVqZRK-5thutZj#efOg@l)8*zVPM?p;cfz8@S<i&PMs}
z8i*9s*I$)@(hiU@`$OQzUFDv68Z7u24L=Ox^P@Ji!MA`6RB9N}u!Hs+3vWur_fm{r
zYnL&FUiH2Y4*J6R1r8>J9)b$@29SXmgST_9PY)?B;3BHYIcvHG{`4YML@jcuI$7P~
z(AU$$eLhDyP(VtDDg17OJ-kwVzw_C<4e|a{1QJqGX0Lj74S*Jy+Yw%&L|&##FSU)C
z8v8UO)o|ew!QWpw*@3JsJT!45SUeRr3$yXR(4@O{RVFy4G|^f}jnr|MxW2LyQjjR3
zx4vLXI}2vvWOO63da5A9>+XQ3m=I6ZDqS01cVGuFOmfHa_O093YKa{v%L*-nppnF2
zlMc~aGyJGnkn`|O`kUpoD_F7gkuM$Pk=>rM{zwjUGHMk5@XIAXOn8rRWNTyNHHjF<
zrRLR!C|HUEi)2M3aD)tnWR64zTK6LM{Y8^Ts6nPoGX|@D=~QCfQJa6&bX9<E9p$!*
zcd9y<ivyW|BCoht8#yp_*VpBsGiNpy7Ly}a`qe%g*BbL+dPK>zo`Kg4!mDY^_Ik_y
z1`1Nk^6)jMxjQ=BMli5*VnJ%9i%JwGk1FsKMbD~wroyTjD%#7dLymd@M2}jSF<SVS
z&wKhtzP+HXpVp8S$B3_tfqH&HAi#N)%=U;sy#s}hm#R9np6Ptn@>tX^Np}K-rURv*
zXrAOi`{<LV{@SO>$2h#iOl5zWe=UzCj>!R@<_MJAp=7ylq}yKcyu8iVrhbvD?es6C
ziG4$@RxruXfRe{DFUuR2I&-D(4RaP4!hBcfwJW*<!yWcLj`4jp(&jRgT;y58>ICyE
zL_CZA^~dUsORr)-o#`&#ik=B??D+Lzt=ct2?iV0HEc;7j#jx8y<|wejg<wdF+63TC
zfJ+H&eh5kM-bE8RA4<al?i*`kpAeH;sY>r*TigTT1sB`oL48&G)4NxXw$}^ch0*s2
z%*}7dCED*!`F1zQ&uT1dFq{kgMOg*IDnUmIz)zrx7O}BqP#TL>GbDdiDL%A?Hj6s9
zD_lx8H#6@57gW3roO@SM1nXE4GMCv^K6dCPOiuR&P22cNw~YKhD1vBf)@NU5<T_oO
zD`zVq##Y~Yz!i}Qpc+)okg!I$ap1ee(%jOgUpST=l+#8<!{|It5(+p|!ml-ur^9>~
z3dgUi1pk~<PKDZjTVge6q($gS4AN8AFp{Tv6Yp%$70sv`iHxO`=by2MtVEUp6HHJj
zQ2$=@$4(-x1FVf$`B-iP1eB^29(6`m&zuwA1^EkOJ*8u@_(}bJE!Bg<Y$BNcnWi*J
zc+>aUC&#Sy+lON&y{J<4@)0--FJ<EJRo|8utlVxKlGr_t5P@j@sh?3R;ci}zY(_+t
zB0v8Ek>&#hVp&nX7NY$;AvnVGbrbxm;o@`aXt=^tc6R!nEm*L_H^dzv9z+<6N8H$D
zUwH!b>VB~A>U3OE+YV^f?{u*=dYYQYGGp88arJue+IY&SsFsW}^w=bOlkqw8YafBA
z%AX250=##-!|!ubv$Gr)F?S?+>(_idgQ5Hg747d*DNOmY$R1U#jmo`9vBZ<Fo|H$F
zXqta>_5E*kZ8rjkl_0b3>EpDWP4S#MuG190cNr(V50;l^&*J@sDY>st4h8ZmOXj6-
zcnZPzl<WGeW2vv|4nNA7uTXiy2cyfq?woh4QM<Q$_@?+<@whb5NW#B~@l%Q6!44R}
zvO;}w3D5h&#Z-SY;Sb&+R?gF|$!a6%R`3bgh%B)Ih$|CZ<${9ck5d~Ko@<VxSI6c}
zxt<5Y<>t#Fg7W8I`TI=;f*ZF3ONmkZd=W;fUVkgr&#d!)1H~~3cz_`EB;5&sdzU4b
zzDyw=Eu3@*9mI_3?5YWR2D_%MKi+0?`1-<|1%K-u#U)XJtk%P;ps|+5#jV=>i!CHj
zdqAa@#~_OcC*1WmfQ&reBHZ)j0_nn~bV_T>wklfJ!PC#SwWftAw(at3sQ)Ixa#`WT
zaaI6S3nkCXJ*EBAnt9>5vHqiYZ_mr)4FZ^-tWRtUa#_mLC+>LZYbu)NeRZ0q?4Y;S
z;z`}_g=cA=<t;>|+`O)869%#qJm$SiW63TqOuh>thRh+_sdQ_Zi(?yQBHT20IGk0|
zPPN#j<PZtm0f@d_q_nX@4&0H8vHE8EbByyTGA`065b!5Ma9qfi@VR@wv=_b=cI{r?
zoUm8K<0(q6U=#6`?pSKId3{-5JP3XAH<(TZasY4reJ?{4M#jc=7hv=RqDwNpw6s(?
zWYXsuk#(6JiXFO~--<stNkTl%7S$u0QhJDBd!j%Nx2c`8e7LVt(~~xvss%HD^eegL
z7Pyp$dV2zEVmSPJ&vRydI^Co$T?~F$Fkgx$Pecab4U=UU6}9PNXYjp%i8SOCUw=1m
z4xkpN1`xGr-onaMNl3MuWQ$RLsWcr}gbciYBjX$_9?H)XP9f~RHh_?;s3<NTz}{F#
zL4DSM&JnGz9gtQ%Jvb0uO;WUn+U(Nf5~u&^uu-egv&)on@w;y5SrdVYt0Gz501O=|
z+nghD)=2ZJWBN?g+fD%rKj~0?7w1D2@f0p;I@aWOy0A4Q@%Wb8IzhTq#dqTpmW7jk
z&I_w(IR1-*FFzbROVJxrNq0r{6G7k#zRhaKkF%1qdwZ%V8&Vrgo5DuAMpI_tQ&cZf
z!a=fNmET#tx$PddxzvXGw0=ZgzxzaXoat1_U|}rk^-LFmnU^<dzx38uLjx+vH>=>y
zYk^m5an<4LJUiPTaHyTx6|&F}7=OLm9FM&i3fj0lID7sgfB_~S0B+RAhMV`)wV^80
zdj<2vDZD@-jSS^iL||gGLMT6yWzRuo#EU7qHwI>AYiLX%Ma~x9XM5#+0$bSAF3GP*
zjJ&*V40NmA#ZGFfGBc?y9G;Aq9368?O81dt^unnoU-jm8v!yJjIZod4S&wJ^(f@X=
zvN-S_6SyFn5T5yy3^7@&GRK+0V!y%?cnud+I9WiV7ocd}-SWvNYQ=9=o*D>7IDcVR
z^l%Pe^-B=>u@31Gs0?V~bbs(k8mC!ttM86@Oz#E?H+An9ROVE(bPmW!8F6$~I6TW|
z(hP;{Ijhp8x$w-izc@KaniTjZaD8L*Q2AOyD6Es?H`1dVxZvJ36O!}XL8;!-y9JL1
zZIF~?CL#3{`F*IG-a-Xp&(c%a8M{%>qu>9FVtAc}J3_>@8O!)&2JOAS^V#If+sQ<E
z6mpqZE2r~8vB}^zUqVX1iHJ7$xL}t}e^>e3=ipz9cABgp=&;q+wUr`O{_FLblv&f-
z%-{go$dgV%jAZNQ>Y}QHqTldt-PL!(hiqf^$cCZO8Lf^+M(%lplDA5*b}SDdzi}0l
zL|zgR6<H5gLXDgah~u6<=B+3|w|m#BTnKzbDr^zB69V4%Y}_~>i>gk4e;fc9GAe8|
zxZa0!n+HdGqvTa*zcR3Cu|Guku0}9Z<LiH0M-5f_Hd?Ko)UV8W7N@smdqci>M}hFm
zt9YvV%NUP`N%&5|n9A9>!1i9&e$7NQUExcobD;}Qy)ks%2tFyRV|7!XtIK?;P`M#i
zs_?ER?~?lS&H4k`wPmD~C?VF#wdYkcybd=qOMw`hQ4K#Pn44JDr!NsNYNc=`4$9MR
ztaWh(92bQDyBC0a<^W?5XXfARFYsz`2l%#-cT$}{K$0lJloh^|jrQ9-BV99bwtqDg
z?d@cxcjVC4EtJmR|HT{c!owi>+8equk`_Fhh$obOwg)P^_eO`+2+!gMPVeMiMYrn_
zt$TSYXcKr&9+_D-7Q8BXJ*yw<#J3ly{_&3f?UgBB{dxYUTeL~Jbi=ft!@qs1Zv|@l
z=iPh~r4yyoQI8e8&__7iNh@yFo*YrK0i#C`vN|)`EdxJFD5oMCwVo2M=D*RwAooOm
zV-4E}mNMT@^rdssAF7!{qa0=1+j&pT2gC=TRC+_h%^AnkR>uyXIs-A;2XGkmh+V{n
zbd&gB9bcS@|1s!|yc_L*wskv3yzh$G^h#Ctz>VmOcdgaaJG>&en=A$Yl8@cIm)C1O
z3cX5UQTn{yf5^)u0h;fM+bK=U<2t+V_pr(uAEvex^yKaLscGhsIqyD!rJv7U_HOKI
z_ayr8Eq;p1==Ku?_;oh8WLjNPmN4vmm=*I&9JF|_3FC5Ws492fnZi6-NmESowh?+Q
zJD%a1klh$3zVW(hm7UkParg(fExSXruhEzO)$WtLh?jlC7ZX<2DZB%UAL$d|tX_8E
z;bltSO$tmlG#Qs^G%p?qrx14#Ce3Aab6fm=L51~N+;A87XsOGNQSl`j$h|BJxY#@s
z#4GfyXF26Fcv#=hr}#1+bX#}<V8r8g64d;9`E}=~Yp&cGFzcfE6rqPq%;7vVu{*fx
zYU)(${2|QncSNw(+v;4a9Gf!B-y#1cu*oB%KVBJJVs|yV6w=;Xe%$zOT-T++37}R#
zZl`D4yXU?VP&JJ`0tT&6gPK81OiYy1;MD;@l#(KRp-n$MJ+jpA5%8C*rwT@G)2Sb|
zEv?^}T08oRx+@j$kEpl37UAGyMYhlrirUxG2Et8LJdlLS6ep4b_u8b2>pDrV+4qMI
zB@^jLiY8rR&c#Y&<nSgSW2ZyKu77gf+!(Zq!Nv8F`>T&K{b8dQXWg-Ol($1QjbD&I
z0A_KvEnO>jl>lstb>s0jYC2-4tyz^XcX^xL&IBy_-Z02PB)03z(A%$(FEPc;jg5^>
zLHqU$>=)URfnA*3;Tke>Ul$obFclw8Zp26D_49|g8%7<2nDHM!0!pDG=LvrsyuOj?
zo$r_PtFHl+c6|=BCv2utPV89gqjaT4iK|t;KRZmuG1#cznK=6-*V(UhZT(`BQN8Jk
zz4Z=%_lFy@y0~f8bdCh)ft+Vs{DoU@?>x)OtAHz~>6P(SNCpiX`PJnR9VUekUxGYs
z7vwn)$ntAJEboFX3$MxHYMND$F%H>Ibv<QG^PhFRwK;Z*zFc`I(<|$aJn;&;MWmjW
z!p{~L8eo4jc_eD;cscl6Q=bdFk?TshD9vbJO%AD;vCT&{H6-q-rm`b@#Af$a@1j59
z?VR!_3YfrLz!^ySoascNMQT#>*D<1Mm0NJzZlbAd6Fr)j6@tl3P%z?fDZDrUSGh9I
zZ^D`beg=ZV7guK7F7w=o#fwjXGtLJWni-pTA~_y_?m-xE{YW3AamSBD8^xQSLClhl
zhMpxo<9(07aWaD7;&Cy=-GoLEc%U5JC*5(E5lxx7Ee8X-vPycvz;#sE{BS1@`XjqT
z)KAo-(;;})eBRft1up0#n5{m2pZV+XUc9#i##8eQ@R=gMDk-xM4A2Z2^`)#1uf#pF
zuDAB7tpZt?(U6vT*~m<LADI|>Mc*94TMC{~iyW~NXOBx|*Dr*y$`bzi!DI)Lo~I#N
z>WUXRELvdFT({U!E_d40;)cZuc@t2zj(7v194;5np`e)TUtkhnQ3Ng*{gj02t0nwY
zU?GU$OqfhDgl4v%FTWm(13e8{cyBk_`iL|cJhc>{Cr$zR)$aN>4W-1$e&}$c;|(V#
zG~s^eykf*k=egvGVPVg0aXCPv#PyXWi711Q@<3>^!Z1B-@dpVYerVM@1(Je!3YW??
z%B^uZ_IZWH#dEZtzd=IF8lkGV6~B%@GY=}xvYJesG>OAB1odzWTr47h6}A8{k*@up
z$S$um_GIONOM&6q4c1xspAo_6pcjk>L~D6kVa<ByRBHP|3cfkOze3{FHR3bv)Yrq$
zCR~4!KhQ%2$IPCqFVz{IXd?>xI*s@=V87U)4_89@)`^BANd&9~M>-8;Hb-};zAj5A
zjBd=m?^(Nk!u(1eT6_vF1a&B1*^5?@o_1v?Daq2z4Azh9CvTJcrLjMTQ|p_&mJ4_E
z<uv!rx93-ftE+D=HG|QxhXK_=-9qy7lGvY&v#-92Y-n$;70&;$1g%Ed63YfoblFlz
zmfzU4Y*Haq2yP;b&Ss1menREqlFU=Oe2Z=Tw7a|`{+aRV_nw^2-i`J33B_-?!{;%H
zxr*+y*;j#)Ns(UKUysQEIO5Zj{RsZtiq10=rF=Y@EUMOi^9Sc?fg^%NYJ#tCe_A|b
zr+^7eD2Ncc(io_1mF1^lR>;;kg&AN2j^~D}R4p0LjGo`EjN*F;Fmm!xSu*W$OlBKi
zF4U`KkC+2d)XC03;0HQJI#%Q-A#6m8NB-c!2GwCx$rfhRlQ;cHluoUyMn$<j$gPCJ
zDeKgRouy(yT@8Img5P10Dp2}ZQB_{jZcG27h@SCcbIm!#l4$<B*U-sq0mo8UNe~OE
z8#Z#3@6_jRIo;9SJOv`=>UF3%w+t^4^T?_rfEc|REe;YRnaWqmm28a9{d6g&qS>om
zg2*%e$T|Rkva3w`zKXL{+9hdfO=zT3wNlz%1+YorDRzid01OB0>i>BJ$3pVs_ro}@
zG2zjNqWj>rUOt2qmboZ-lNyO>2jUFa-{1ST%hJCY<5PACa4qKO{LXH3u&UDmAmQ(D
z*u%XzPn3wHWxchOb$Bu!Ld1~s^stoYkCLd|bUQOoqRT7j^be6}yu5~oKNjy@rG+%9
zj@>!J;KMLE5bfJ;+oWo(F!&BCc0!ZT|Eqbsa$K)Ob|}cm$!g}^$44s6H}xUC;sVIO
z#GuAmTO3CXN3x^p%J6tn547?z5u{6k)>5f1bh`0qItR}AJWjVI-d%nRv(3nF26Yod
zd`_8Y5LR6F0Pz$y+RAz93yZ184Rkcw^QH}N;9f-eov>c{?!aPq{s2)uNWoQNb1`Cf
z*Ts|c{jVZ@3`w|fn<Sz~+gRWOGFuOlcvNLF4$rMu$Js!0d8XsZ#IaL4s!+N<4<80P
z18s%b<?JSOH1co4zY$NTf;$l&?pazurE}!+8(X#t(4*#JWmY^elG2^;vyM42oWA+}
z7r7=xpMEhmhGDgwQ_ag}1Hzh`!b*D{#rWCn<7WxaoI#fb19j_mc{`LJ(<2h0k$vc!
zhSGjauxzPXrlX3YDdCDo3DQKprisFOPG^%@0O}}$Npym*`IA!CywB+uuM;}rWo+iY
zl=9_~9f~zeL8v7^=RI2sdPFw0J6~Zj%+#gX`F*yDZ`&A-2D57&5W||r;1YYXGB>m;
z#xlw|NBGBxP!<djZ-53DDiv(Ld%&W--2(iVW;6(M`Ifh(@#)FWOyXqhf*W*R;kjFu
zXL;fhGAQP|_D-wUTu0CJuwNp=9l7$U?0Gql6%K}za9iFfdyP2#l$Gf<Hg@kdvn?HD
zwf?IXh=5uk5UGCeo-uc^xuy3p#EjUTkWFtU@{tP`m+?Nk$rE_Ud*nRw^`0?7uQ_!F
zudhqAh$JM2S`&Ol5sFe_C62%PzVyB}zO*uB@+i=dqX~+a{xJ9PMO}gaUQE&UxAU_&
zbboa0{lMnqjp6FK77>65lPA(qjyO~>>rEV8@h_^H(oj`(@-3<|gaI=A@=(lOb|&nc
zKX%dYyt)d{Goc1G4SzxLNRA6&(0x$HS2S`EqD@1n$T^$dzDyPA)+;%VQhukmad3)d
zrb$xVwgTE(UDBt!A3v{>x7f9JzGLKvz%`-7A3;mjyiV+4mF!l%-fv286Hac7hNn{H
zj}la@t8uRW2KwciE8c^KqQ;qHQR&x)bUCzQH-4%~&s?2_ic342;L$+D|MGFV!I+mE
zxr(6Tu)-IpPaK)KdBu5IN-k2j0#e4CcXZqtblArMkCXV=@!r;CfBkBh8(~UBD^GBj
zGAXG>-%1qH_2LOK->dYs=lUutDo<J(#r6}bo|kNh9eyz*^>YL2&ckS$tr4aeUgG!-
zW=ic9dee-cC@7yFBj;RZIcEMPNj!p<wzfXc(E+>Z-yj=k+^khknyA|`oH&P~=aCfQ
z5M&iwIu=n=OZ(OSty0lucMuR-YKfPb?p!}5D8D~~C}9s=d{62NKgx)(33ydh=?S$u
zld!@3(|y_4b;LnBVGIvW1hjJlC0!<wdsc$0B$dvfmJfc9ipTuvVa_(0!bJ(zlK>%X
zb_7QoOZzHT#`sEFR3<+NMz3=!$7+WXF@EkVj9B{3+8wiB`J6JkmVCX`tG1t&r2tkf
zBq6=kMJk^@%{m2rzBiRvhF95+o_gfyqO<fEcVPMKiAs~M_BwzZicVBuY_Qbs3#ngF
z5~p&}Ov*!v{v_JK4h)+fZq~GkO5RIpL)quHf}&-FBF1wWi9Wr|jltE{ew8|1H&$&;
zaJRYiA^G=bN_f3O5=b+#c{sZaclDt;-!PVUT}jc}y^>bVF^m<Ri{#T<E1j$7ysBpo
zpx0RahvRPE`GT>=7CH#8*;e0dec0@d02L3;9of@#z;v^Y5}q)kgiE1Rk9TMj0cEy%
z83QDZVLmKeHYjMyZhFz*QS$o5pjHoU_-~zeOC&-Fh1Ze?!-#d1lnhrqr*J$Gd%13s
z_3oa=4-6vIH4c0`PctUx_DPy#$_+Q|*qaI+`t^Xosl1s7&QqGyk9#ud_p64%%KVN@
zB*ih`+5ulK%ca&YqM(D$H=yR%6#8ho#K}PcSYeZBVHtyZm_QgQkKLT7d#!yZ7Rbz6
zD=q1-Y(CM)wNdC<!Aq)(q?W=2ILK7qaP&}&<fTtKqQP8*=fUleU_m|fcsmrh@%~`+
zc9z5*#JaEDUySzW(8sqDre+B%>#wFX6pgH$7g?=R9y2!e>}n&l<15Uc9Obzx1Y~oC
zxVP9#Cdt;XU?n~?mShT$&7e(U+6XzxN~&I`J2q2Usm$!NOmX}$CQbC)(;<_mBpPRc
zl`wc6GEB|rP@i5;@!8OJoNsB_KkN$_(dGVRs%@%p`AZq1CIi%=D>PAMY?VXKyNRmF
zrO&A+`_7s?y#5!vjJB|O$ioS(4oA%SuMQK5Tc={1kww-4=SChBlznZt#NouxGTz)?
zU!>fSyIlB`TN$gXkK+l9JDjetUIp#6;SIR%rjYc{>U)O0Rf%ob-;jl0cF#2x<97@(
zG_4se7qW2gao7PPvDNb;<(A*|uV^ala$yg&_1q1&_2}1c77!LTeMQ_Vsj+ObakhfK
z%|}8Yntnrc`a;2Ad!n>;yhQ&_8NlNP|6CF?kubf)kZJaRW}`S<enBzB|IYmMVVX0D
zn6HYHw9XjiI=wF{YnXL95E|p#o+b(Qs%7_5KBfV`%*kbY?Bf&OH!K?Xl#}aS&(d@8
zjY_J@5Vm!%s<EfGCsTvb{BbBkT!N&Z<r20m-d1b-y${CK(5T6CqWC<fV<5c{t(NmA
zrwZYd#8Fa-%+5HTB6+?{`IcO9DAw|x5Tgi{^2#9Ud{(KeQw39m9xI&iW2^7}CdspK
z^-V{)I;@5(<8IcrtPY2C=CdOeakiFPWQ1tT_;l<xQx%^;V4uI~u{x%L`ZrNm-LSic
zYgw^&eYICTrg{RwD)1E|<zjmQ6_Uoicr9I+T(7fd)niV5D56Ws0~BIfm||LrtD^n<
zb93^(+;tFolsTLKsjEgRR@iirI29FnjLi$@1W{jqvg-D33qysn-XKugA*ryEWPkVj
z4w1gHbaQ1hdZpQ&s>f;2YeGVKDVgR<hsW@(bxF2QSZJ^Uf!`vxzPnrX#z+rcxw3x8
z(q$_|I?0iwS4rP-C5TP<iy5VG-9~;^LT&MUmD9&8*Sa#!oDdrWWz)@aJ<inedTA?H
zm#c01#ufVX^a3oV^-Xn|mF2ee>$wY$*K5T`V70g~t0VcC3;0AdvM8=<t}Q!I7jJE0
z@yt(2Rpf2nw{Ij(){|vs_7{s&7m+81|9@+$Q{J>wytk#r8v^o^r3CMyKd-L$?O3m)
zPV;rKF_I^edg?pC=av|rnZ%t6aKjSzAXnW)fEQ;+wXT_EanY!0d^gN>%6sH!rT^72
zXtU6EOd?RF@TBZz>uUoCRRg=H9JK_$xsb1l(J%Z7+K-<-7b?PpDw^>trL1@+^gh>0
zD_b&KN9Y?jSUnubrlV5axsj|qo53OGxT?T%7H{9Es5w~b7%$YVuWEfmKhh+Kw{FBK
zW!<gN9CItV*2>H6W8gA>-DYv3)SKHE=Qm$I)d>fmI;>&n(rwdYk$T>k0pDs*@#<Uw
zF)$_LPog$1PpjYwtk;0@pH)l#*l$VZ)(s0~iipGfm$uop)rtaPf>H)4PgC=&-F~ck
z^=XE;e8eN>wVipnQ|A*k=7Vf0^MecN>9`zD?l-#|?ZcdNGrutd=Mj?6qhivD4pruT
zwIx2svu7`t^5~b_Xw-!nD=1j*D8AU)IX8=@K3#x5Ug1=7vJoZc9k(p<mP_U<{Z?B$
zS*tr=(Jr8ET-RzHRM5O8fGEONJ=xAR6<hoG_hjy&Mar8Dx%#F_wO~j1&1pxxMz^lH
z$g0WMCmuZA<7ixT4je%=(NJ-fiOsyRf=rTa_ZF)~=L9-iqS`;f&g-Nl<d><=Eo#Db
zU-iOm&8sKX%DMN!;CV_V;WsXHNoZX-(<8B5c`TZXA8HYMUz6TprH~4tmQm#o;pL^G
zD|<~UyUW|3%Nq=3Nw=z%=-D`HOi^3tt4h^6h-^H6neTlfN~v~tB&$6$Uc2AliY0no
zR7=5T5)wKA3PcI36;yUf17wl8L3?nHWc+Wx0^d)vr;a>X3a;qvG=>@%q9t@Ni!#JS
z8NVhCW;*)N)mqW_j2_eU-TDB(fP~j>>yYZBU=hb<P-d%_mV3yqfR<2D$KwLZI_^?L
zeZ0-)bjSjs=m?H22X~H3r)Swr2X2<=yY1OV<?Re{@?Z`FDJv5DFGNO5;kvQ15Y{S@
z>?)TRBXy|1)hXY`jiJr!Gmv-eJV`GdY5OJ`H(@$@I>zAYHr^8|Hci=c5I%L|HL_d1
z%ojbP-#<DsLRMk&`wM~eBj34o0IcBf8x7yok?|}?t87!S#MplT0~U$s7ad(h4aOL}
z`_ksz;E#p{tEm3DXdlsq1i^3zg=*KDRiDdSQiXVQvbjecU`-?=5k}s;dhOxqKi9$B
z{aE4+^`sR-s*1;%L#VcQA^lI$tEqW!Pc)W+fj<N9AL&DANk$*s%$`1Rj;xl?@iG76
zS+iqZeyZtQ`pk+D$nf*jsZg|SE|wZqk{3GZA3I$9!T1)CMtv!wLsWkk$%gS4#sjnJ
zfXV+ic?<griWKk*oxYDnie#Jxo0i1Xlh8LG*cN@9&*MH21d$TZ+x36_;^W`08=jl_
zxu=TX7q__RInq}1g{e;{3g;^mdB--(C7Z0A3MJ>oL-o=A980cDQfUjAbZIrHcebz8
zr8Z^M)m=WKghzsBpGu@X_P2j_&O-E~CE(#+Bdq$)p1gcPl#;KW#2{19QlzB4?KjIS
zo4oqQiS$d4O31Ii)3&rm@4V1=3(x$$dYw0`k?6<GBQKujes0(Jx7Yl;M{HcU@}r#~
z4AQv_?l0Bm4WmDLjRjngr9I<~dgL=5Oy^s*@H}4<B~T1W<g^(wL1Bf)ApG$^_S=jI
z`TCH=a(pDE!e%psl~2F3{l6@ixw_{Yiz3C)YDBG(cx)It$RaXFrG<x1d2%w&*-P-{
zV9!|>90lp3HRCF`XE_Dq+X@QC{qZ09LVS6rD-M?W#rw?!1-f8tRrFMYS0NAX(!W3Z
zf4s)OeT4?WCLBo?`xl2P4~)W#D5eTHS+4XXaMs%#WEU6jW`QZL)7GW*)`Iw+N51}c
zVJO<Rpk)d34A+HYD5Tn1rVHsf_LV_M*EZK^Ym#i=##<yr;<<cxcmGz_8WZ<wigMkJ
zFD(<WN`rrU^8a9*|M3-Chw=i~+&qG*dDH6BoMT?shmnegLq5CgU?K8%+hw6aNeRQm
zR#IDz3u6jIQi_52Oc~MnU}D4sZTA%P3m87hiV8F7eJNiLLDyFlp5f<58_J!`5ux=u
zJ|O<z-1<Kr`fp$Ts1TlDq^msW4n;NKXZc`QwUQv><t_n+DzDP)$f!gZV)lV>^@Yb@
z<G}BOojTQ`n}E;UN_N130JlQ8aHC?lFi&{ZDlH_6UV#D@^Q~<DkoG_<=zvoSpsfCl
zFa9sGtl)j%8W@PrHE7jDjTQLesS*{ZsHw@H1=0)RxUnCWn%dsU-~xO<zxhDA%TxWv
zYlW&wf@)#+7Z=6f@F*kZ@J`%b&s^FJ<m$5VcAaTE+Un&yIHY3mOj-v_Me2VV54Ncq
zG@C}|IIea4+symli17bBus^(ho$weKB8b)33N0*G?*8^!{t{|!8zJWnD%ZOqD!I&c
z_~y<T6eR$&b~<IS28*<<Z*L2|t|I&9?i4R_HtZ1`XtSlJc`L;ul+_;$#*<O#m6`m`
z2(&qTeiO~8@~tAtIG3o8ZyP}@2$P5+2bKi-pCab}d`WhySg3fbW{W)ws^wJ2!__Gz
zJN=!!aojjIMjsRV!FYo7QyWBb@7i^Ann2$Ugb`aI>a%wD?F`Oh9Fz4|N`@fJf6sHd
z!Ttcm=(_r!?%_+~`EVBbo1*lpex|&gU?ozy2t)RtOli5VMf4D=kf@=>T)2wRGjv49
zv>3^Go09}8acx<o`ujc!o8djQ5P;p-5q}D0K;wC1jI!D+?lP#pWM-5p6tWT(^h?o-
z%GonBGoRU7Sy{<N^`9qVLM-XM^PCqsH}=O^*ibke3x0ejyeADG_}!xXqA)jqrDV{f
zi~8A3|LzUH(=q{K)HZQd+kX``CH;&I`2h!CF})yKIlW-`-4_({j|9!-@*JlWPo*K%
zqj0<uXI#23ms1HN;G%GGxq3~%XWmZ7rAQ!~m*xZfjKu=@dF-4k0|k<elUGtgIWsz1
zDN`F18yhtujg4F{`ts*PN04Z^A8$PHOGUs%10i6Bc-uq~+dYej?s=&&GJb1V>y@q(
zF|l}`0bA2OCUwk<0GzzMJiaPeezC<q3JtP=4XYeX0`BK^<=d>sv~-Xp&=LbDigo0E
z;ta;GeiO(vB<AKn$T;8h=>6>=k<@|1Jhbb&X6f>S5>b`&zbf@dD7Zu~e$uBmx1KTW
z@6YYiQsY2Ma1?zH1n~{7J3vM)$rudz>-^pavL&#v$^Us5{x>7zOHds^#f?pY_)34o
z`NomRv=sg$5+>P1l~LO#C9zj4k-x?A+LEMJJc7H<;14V%lI#$WpC0GF7^R!Z;90=;
z5&DUDPvH&T2;h(j{DL&2JkiRAchzVQV(#wnL#j>O_BYV|ST)^~yRJmcp0*EYpqS_W
z^mE5Q+&j70)gZ`xY7ar>@Qm|EpZv&SKg4j~y+Ns@A+(4;+YIxZFSJSwl3U)be-aO-
z$iDV*k3K9x+fa^Ju$3t<gW2Qa>Ds0~{#~~eu*VO8IAFcv&P4WClot^(2##S`qx_9?
zGE3~J_or*%%jP<$_)?O;W3fs^-=oKu2^D$j71Og}7oYcScso2BbFL?BT7xhI8!9WE
zjJx<<7j9t<ql!T#Nw{SR=HbuB$qb3me8Dk7miWMXpC+{VIYbSKghc-2<ix|p$w}Ds
zad|V{N%d8XKe}DiKokUxF7pWC_<S@?_4RAdVxTMnj{02Jef`tsnX0|Be1F0VJ7UGj
zP=D7E3v$XfeawAtxrhBW$+r?5ZDHfiajtLKU7<#)k<3^VtgCiqb+yYIpCc5%Mub<`
zMyjf#adE7=mqzo(*O<XjfJ_bqGl%uFpg)IyMt;DjL}Adl9tOPu6+DkI((Ww_eW4<d
zv4<oiOO;6)Nf6&3Q(~6?UHEg#62YNwx}?Dc>MU!Zdj;PL3QBZA!*wYxt(j;6i=nJd
zB7M&T{7TB)Ew8{NJ%dUNgdBx5y}^-@ib*8xzsZz)-lbo1%^#uS@DeRSd+O-}<nQ1=
zDX00j@^s}UGB{C@Limw|a_?62ZhHqYZ5)8Dc-jdYwD&u*FR_V)gv3%%KmaqMA=rGa
z#n|LZNx%h3+n6fo{FOlzMU2i)c>qWP-}|1S;=H9BVBbO(eDFqkABOLNfjtzVTNdsk
zH*!jwP>?46-%{ZJ7FTcmd>#CPkiI$dUKcrY3eF)mPrybrJb>(ia8{7~Y4~nryV1R0
z3?$||5vi}H^2l@MayuHvPH)oY|Ha&X_Q>W$t@WU3a4?nI-zwPq$nX6~-y=bu4W+LB
zd;`f#4L*QJhrP=I4)HUi7rmg5hTzih2fBN|9@QTtxHVwGtp4}7s&R~EFb4$o`&b-T
z`Fi4A+XT6I0380m>Gi*5Q{m(NyY1PB@j7O1Y;UVHX5}DXXJbqzV@v(NQ}H<_$77;=
zrNOCvTruz*nYNbK4;%6U`trFwp4JDs^&LHS1YAg*Q8OHR4)J%W0qJDt5RXZ>0rg~T
z#menNnwi(mX1U3SNoxsa&i%<pUVB%9W_=0#M}00#O6IPL4h9B)rogOYJgnQj$Omu`
z1Y|O4gWq3hJM3obPA;i?m-xXSVN*eU|Nh<o`wMgykxA8jLL&jp0^wiCNwU3sH>+NF
zjROAlpAV3<euf|{kwvmpn*X@Szt%rbfUcloU=@#lwmokHpXPu&kAM9R!w;WW?R3Hn
z1Mfe-3~ZgL$BGw5Aq327ud3nYlVI<!$m*Axn%YE0N_sVIFTtX9k4>E+GU=O7P*ISP
zT_5G==Z`z5X(Pav8bI{R|7<id{@&Y3`ae<SUmMB`gtEXkl&>T2CdHcj<M7WN1&lE1
zQ;>#+h7b_=x65;mEu;Qt+El2gtGy3;$fzrSksc@oHt<^QPyVB}{n?mad82<kqX&MN
zs3T<q-xunEBQZ=zN5{ICURew~+4NqBu(0qvB`ImWRZ{(+5R3=@-{<__ERe1Ssbt|2
zs)=>rU-9W)iB5Cd_X+<?WqH5P1{zn!TKwb5d9YpnNBa0>pfPmueGgK8>#B*0xu<+g
zKqmrwc1>k75O{>P(^We;+6pI>|NKI}P%wpqWKNO;F<4Z-WdWr+VOt-z5<@(!N6y2N
zy3KE;{_knY{&8o%&=s%{#haL7pq8E}oRF_tMEyN2Ss0DZKuyM#WL(`i%Rj$TI%qh7
z5nk4%@|MplT2n|4MhSB4^_`uYhQYzXyJ^2-N3s7%oqs*zEgIbWpz3D6nY7wydj-~f
zA*Y%(IeI`>zf%+wgjUht$U!A``dC_Y|C!W(7vuZl`@EHUgKV+(^V<mqzGY`*(kK`|
z%Yd6D!hsl+W@(x<_2eE4#W(o+*G?wgSbxMP+wG$aNz$1yf*t=`Vn3ZHZn~_Io|A^D
zJfQpAKhitB6;NpnIaQX)t~)zMA<>wV5Nr;*gSgt8RPA_mx+7XFjPT$em+^(RAh@Fu
zDs24xZ7MweIXrv~HBC5;QFk8#=mLd907%)w+jj5Qk%n+;LD>Jm-LO*$#%9l0c&xa}
z!AMP(8iRw`#2&}<R2ESE8(J3M)kDUSM%mG$=zDNxIx5)UbOoV`^+Z%gYd#Nmi6+=h
zv@#W9P`|w2LQ@QftJpmRnk7^Ez;}3N@3v0_NyEL5$k%0vVC<dM3`Pru&4T~!K1ZTw
z_-8sj@S{d$;1YVGV3kHjLgIeByu93@HT`W2kVH|#&t_?9iJpi@zz^piZZ7O#dtO4n
zE_{yH5>=7pCsQbJvGwZK0+Jf)f(S}`<tZOMs{K)~w4QPwCQt=5(x#m>5qz|=PXRvK
za;&z`z$5S_{$zaCb8X5%pvJt<-o{WExU5rFlC`@Sg6E~FU6LHcNx)8^!3Z4g3*?;c
z3&ogDxuo}5i4~cFYa4PoSVu-iro+X}UAbm{<dzEdGK;;wvEjBcF)?9PH&`w5k1`HW
zN`MWV-O+0K=DU@y7*d$zO&ERt2F93Mh$2a{)S?w9y_Ww{z5iKarmq7!g)|1);^<2X
zc<O=A5)0i$6nHBeyw1+|>SoJ7S8TSRt+1>3Pq#Q5ThUzO)2QPW)k7pC5g}pW8|`YJ
zc6`{mN*lPh_#=i?*-SeRCu^0m|MM;Og_;7Xsb-*>v%WveDBx+2s2m9aw8Dwk_%aP^
z>*}2A(SZAp?*tB96Z+LKa$Fv-G<$ttl~LfjfR3;d84kjY+i4o<!yzD0#}z)zEu;PI
zK3kLnXJ`#6dK!X`fgx;SZ-01Q_KR5_7zfM|89&*=LqmlD0NDIq3~C7oUr;5971e)v
zvbDA|Rk<}K)NsyT9{<W0%8i&RAR=<RYnemGd>_`5hp|?mJ=|3%ZLEHr?9-<2zF$#3
zKJcqW(P=Vh@fWm%sl8fmV~cw%1_u!(QZzT0t!V{~28iTey}D+=?^pyX-4kY9C{U7<
zdr4h9A$oS7BYXsoFxHU8iLd>$v#Xk<;Pvz1`cZN?2q!+^_=|nO@q0aQoy+ed8nEM|
zfTrO;7&TtNrx0O&A8eN|RaHi#DCCDv=*{{5y%`}J2hM#K8W98hKt5(4;-CYjk*f?X
z*K5rbt|DXeQAPax$(H+l9}apCUI%;yTL)+C`EO&5O3TrFJUqPl-n?Kmnbc4FD2@{8
z)zxRJnVFevdopVRwEuK-{wg|rpp~WI4jmmJwKIoJ+57tmy(~72kWqq8^Y`O9-}iT^
zsi|8>dzIhZhf!5=!ClO*)cm6(&%YAAWcTBsoh|o#zZely#T-G46>#f(zxn$;JGWMn
z`<T#F1CPPmk^7JJ?jV9WcCnypDJ5;O)nn#XQw2F%-asIeK*ZGAdb=SzM5p;a?}rdZ
zl|HbK%$K?u*8JzsAJMD_2mN)!^?E2hFAchZedTlXt)TdF;qxjF-aQ!Yfgdg!1J~1o
zt^$>Hn7?4SH`lP&vmP8?q%vo}Qw)`4xR%~k=*<qlE3c2dm;UgDo&nx<?$_&Q!G5`5
z*x%gT+&w(PY+o&0-CU6)=ULp;bjRP?+A5l7aXWM$Ly79G2Hbni;Ov7JlZbtwi?1;U
z?rgWp=kqViL+YoVzeLUa`av7fTeqr@cD=Q<82>D70hRM2!IdB>vd*8=G8p})8UT2Z
zP4@93<?5r7_u5C%yG=Ta=UcT+Oz#6Jng3<C{Ilj%G=OVUMbzVezSY<a1VFIz=kwzi
zLp3EE-Y+UY8*m^7Qg)gL+5uI3Va<X_^VbCZr}It^0iv${L&=sU3OXhxtBhoLLSmx(
z3ku4Ft524u6J^#pLqmv+WY;EzBH+K<hS<u&$M+IcfRTY3T*)G#8TbJ;Mrix}`!^?t
z|9lYsLP~1v7+FnPbVuV%y}hi^c-9i-D#!5jp{wcboxHyO{OZ;0p7*@q-j5@?dfaIF
z`>0%G?DY?T++plnfz2}r@}f7##%CbQOxG4npF2_VOnI?vW-s2q$uz-ve-H0)=K57q
z+}bMnb^Ss79lia0(%R|DotN88(%sogBmJ2bhmHEuvrKdz3ZGLKit6n6x6`0OjpR`^
z>3z5zC@%tVy@v_dc6L!gX`JB!_qdM39sc>O;8|LzL41eP$8XjpzbUiL4+KAYIPA`g
zti~I&&NO;m#mtV53f}J#MfeQbN-E3_<Ai=yC|sy0C5@MxQdt2~tG6HUaf)rV&D!i-
zeLmrcCb5eqbSQ*|h3RQsM@YQ9hyMZfZ59L4<RPsPuK9BV5G&}x$Fc3n2)$yI<5D`4
zIDPmhv-ZVNusq*FV7TpMS@t`AGv53011b&R2Pm^RLmPnxz{I0?obBEO;1h@lE6o+v
zM5<AjefD%!;c#<7#hw=t61pC>G@(Vi*UBsSfZly4belY=0I6|WBkXZ1Br5Tq?Imyb
z^h8XK8QXr#+}zyw+F`eT>P<%MJ<Jkt!P6fBD)i=Q<|sn~0s_KQz@;$!;;xvDTOh{q
z=wd%H>*6w7Hm;F1PIpc>AUgYAq)lG}cTG^fxYZU7L_rrBKQ5Tomh3n`y|k-se*Fn+
zK6;QrUsy!M+o@Z7oa#P|;70<C`@#j8674Q{c=)E2pXK9pdn%i;^`3j|DY7hgD!Xi?
z6cmk-5AU-W9HboB7JMF@viLew@835$rhnfbM8r~cB`54O4_05hB?2nbZtv}Q-92I#
zz`f7{1kBcTf;45rln7@|PL3X!tZK(UJC6`X6OqyC!lqNRkEpKaw&Em}*zfR9g6c2t
zZaxJ()MwT7tF}bH$$Jjqwy$zN>zo(j<~}}#pk%G@AI{uSWrBPi)DY$UKg&~Kl8++-
zP2xp>Y>)$CWYsAH-Jh#XZ|Qp+A06SCOHv^QtDDu*1Jlv#Tfz#9_<inAx(v*Atl(je
zm(8qUrzY|SACYhV8`Ak?kov33OK&?9ljWu^oMMK13APF~V98hsSB^pa@Ci<Vh)#{_
zFsn}Im%}zsfJzF?3{Fp9B{2&8$TAJJ{BW-ww}2fJdLoW8{_ykji_5Cn=XUDSEY2o8
z@5+z}p>SG>QP)%7e2SoOpUwVZ0GkbmEN`5mnk@g+mw&f#QOjmyr=UeYAmaDg{(Ky;
zOo{nD!xdBm!hmIF%S&wflXz@4h0kUjMB^8K&KI-z|0-a5>*eEf*BTrg+@v*%up)7f
zw^I}a%bjSi>2~wQN#2e+-X`D^_ibrm3(yTbhP~V>_;iqO%Jbff^`__m>)BM0h%iJz
zTB~zv_8&dGJA0Wf4~r9xn?$!>?M{>~eG*t<QNM@K^4kPXL1ACr)7Ny&YK1i_kUE+(
zzvqZ_#E@A6*WL5;^Co9rgob;>36QblQ-I=|bW6BmfQXBWho>edUr#8#IpXrGL-S-u
z3~thPLAbcjLeb)Y(fG$y7BYKQBJX(Oq;5lgK4gMI5P>TeBNfZ4TW1Sk+4X4nv5NOH
z!DnPZxS)vdno}FZh%VqYS5eA!`>qj?XP!p*x00@baL?^uE3#MR=01lBO(%vlv>}V*
zo8nGXSg6=ZvR}J@LeIske$vWOBveYMOqJ=!I#chm7ZW=EdbdfflM3-Z%PMNaQIm{0
zkM@fkl=q9&-wn-_E$5f(PvHW;STen&WN#1{_LOP89IN;869zB=%k3x@X(XAYx~)EA
zbgdJzD9YEc9D1zi>Iali2N;xdYqkJSa3ApwH3c_S&3Uv>xKz^55H-1KwXC>cZ7z`z
z9C`>;L80FcB-g!6SZy?7?{)Dx!Cg&KDrn&VEH{zN)t@K!O_@fK$?x{|_6i*f%ctnI
z7}|YSN*@6W$u?YSQC<Vfo1W8ufm&<6j1UFe{A=?F2;|Do#%iNYkKo@&>G+Am!c#P|
zH*`78`z(y?o@zH7anJme(Y7@kJugx~cZwgmBbvytNX$Ro()0oFT4)XKQ<OTak=N13
zhsCF7Sr38x&#<3zaBzTOW34~@Piw%W3O6Cle2Wp~<8!?n85zmumeZd?U}78?9(LFT
zPO$@1LUPu9Za^JOU|1c`Zk%tI_wP0x56PBD?{&D)LqKF?0M3uzB(U{J;QwRnE907g
z{&#f_Nu@zR1w}+!kj@Db(%q?aOC#k}KtZ~@1e8>|L6L?5(k(fpyT;(2`TO6#p9?Q|
zr`y>%-+Z2L^o6ls=CiCpLiX)C%dv4#wfqkD&LQbd40!{W#g}K*En5!#=R{)=s!o^r
zeRjahkGjomxIgCR-dhG?d6=sh3GqLgquAV~8ReE?WN;bmM*SHu7?PR`8NV^%+}nDu
zLqk4b3pbT}lce6j3Zbb<Z=3xJHCiJtqdArzffb8=Oi>&GoYG--)7Hn9VEJcI92XVi
zOpvV~0SKL@=GMES%lJ%L%*C6stXa+$>6Wk9qYgLE5&cWMfafTu;OEGq5zQEeL}DQI
zi)1SPJ2(`T8o6I9V3zbF9w{;Te!l+zmW~7Q@$osl1rX2AINv|OFZ>)3O;!Qf46d~|
zzdZ(Gp_d>QI(ylQACCb6`S88@vS?CY?KYlW28yS1v;iij^5D^wAE1JyabJ7>g-`;>
z&YuKO4L(iF%gb^2<k7~L5h}cU;GT%`O%9$CtjWtJ|Myt{1O%sNdwY9c7LA`7z{fah
z!&$g$X2+XFS8*@YK>(QR0)=LswFVsEJT3~sKw!`g;BOell->oVG%lJ>{oZAy%LN9c
z3p-qIs0Adtz47t!qmy|DWgr5BH{*iSd7A@3V>Zxh+T}85Isx96wW9`+9VwO|#~_yZ
zU=}ax3Ooo0l)rg*0OsLP{lOip%VhQ3m@C6AQ)K7j=dS`im$DH`jQ#tPZ<-3Buf4pC
z0AP9IUYWQ|dznLxV-B^Irx-DtmfOBnj&)PT5{fhUj4n>~>=k=<UD?CGvKXlMB9;C_
z0Yu9IuJT#T`Rjr~wR%Zr>it5p@8IDA8yXr=A)h|!zkhp)&q)`>n9qtLtpe>=#qamZ
z|BF656{pLhF^uoOL3<R8dv=-J=}Q^RA-j}C#|g-1-TQ*}Z>FmXRnV1(;r*Jl;hD>S
zLumL8hS=PXFChghkBpx+zb)7&Th~uh4rP<!{|OGzB#*TLvZS;91cdEB`tX87!FK>l
zu(l&ebNhDPJTT}(1~(-R!L3^Af~)qmVb4A-$f5a0ckxZXfn{Klg;)EZ!3a(!E^j?b
zi9R0i-*oSXzi75mwe`r2<<23#@WFrxi(^jod!;=)vN5q}b1Hko6+<;u;N12*-EK2*
z8#5ELlbff$jNM!g0w#+6TW-7K{iy@j3>%E)PG5&mO>MaYr45{zj<|UlQy_RB$TfYp
z*ye*cSy7QV*@m)r1}i~8YNkkz)<8HaQ9D%adl}mc0{@AcoHCaO@J}y}oFoIJNp@~u
zg^-haw1ZGVfxPRv;6?KM&xG9S|8^~3L^2>vfsb$lrd0!;7&Z$9%z}G27Nve)m1*5&
zuoxIFc&`f2?Cf?&R)YddXTC%X*O-9?R8=c1G<4&UOZeN%<g)yq-^el2MrQMns+sa9
z#F9}}1gNn9tENpC7dj(~@uDQTVCUzBzYJ!Fbz+_5Nkd8tNTxC{XVvHL&kqrHF2mec
zA&VsOsj0qm-`nnbO>RupiWwBOO9G*|NGiWnz7emYC_V>X(@2)H=kPypIh`^Cyf`#0
zY^G8cx8o9du(H|JI7R!}@t*9+w9NKz{^^PLVd;60!{;go<r)f#h8O-az?0&FH<PsC
zmVB})8!@Y<JD6+^1Wy?s{>gTkUp<(I?fHfGlim%%6W0B9plW(lNJcfCg{5GHF<j-O
z+Mv|;Z6TNnTxc*yatS;)8bl_ux3$#S<Gdvk`OQLmw39KPL!n(}*^m1#Rw|bYzf9Rf
zIxvaIZ!f@svRE6uZz^a<V;<xt4y*PzW8;YmyZKA85kU+<xjObE?l-TNE`R?os*{NS
zJq#qYRsg2fBixRDe(@Dwg%|)IuiBWs;RbLy2NGpd?UnLJ9uR2IqsN?_+wXq-_~Avt
z$;){Oo@E8F%Z{-&qV!aXiXe|jT6|&tuf%`~PhLU6Kp04LI2FR4_rezgy2=Z%{bVdh
zkcvGKD%FWkhygd$gCnn~n40FZ(P|!BPH>S3V|3dFi>#-o=?VR<gWHd|l7CE^-vi+p
zoC4STF=`rF@rAADQqGwPuojOTG1$SKTeso`J8e@j!U8|QIh6~#VKkkZQ!ab4M$tVc
zg*PO0t0O(x>-SV816-%CEGWK#5kv1{8gNoThIuAM{FeCI#Xl?E9*9raw^jr8W5A_=
z;0|Vi<xAfZpr>kkRF81WzYJ~)zY7hdkclvP`9MN6aETLhy9UI|tE*mH?d|Qz+TYce
zfyV(LE#v-yJneonI$_f9L#{j~(1f$&?;RXWJG;2->HU{SyvUJ`<LnJT9H4qA`1tWR
z#!_ak<czp6pyYj4a8NGgfC;t-6%X^pE*2Y@0oEr=k6<2fB7=c}0XYZGjx=CT)zfox
zEsP9%N0zp8pU+wxo}Lf1?w$HM&Ww22PKI@$kA(fiQyqlwrk#iNOcgdk@G05#x0`9t
zwxs_PJY6Ita9Nz&tQB9MaXCM~FBu@Ds$b^xFL?$Sy6y9;e_BGk40C66fsruN(tp*0
zsMvRl4!|sReChOe`o>4(29?1kJONEyO?cOgQ>pUl|E!wh<u1I~yn!pf1_a_7umhXf
z9)II($w7J}X?!2cD^0N%iQH~fYdY*Hde;9_5p?{Gy3hJkit;Oniu!+0Ld-`}@D_ia
z!1+At_%!Io;k0>)-=&=K17(zWGss=M*<%T<BXWU7=Kll>!tslIJAJsYJq0Eg&G2{I
z#-!Gn_au@YtWO+9^9%DFdT9!d-DKnw6*WZ7>jZYVN?)ingEHyE{!{=bPvROMWw9=6
z$d*l4gBV$nkpb9fuO2K{7@PX4*fpvYl(I>kANP4{>$%ydMi{43?&!Bl*f!2(Toe_2
zoPzo$VD>GYoJu&srqZhrXVN2Uz!!;u7}wj;zDK*}-nZBLE2M{;Gw0)ghmLArgQ|Y3
zX2~*}e&r^Ykc6?_7X(9pEFtBr+``8TQJdcLA$*~<H`;aqWMxR#qQAMmxj9n?_G+=%
zpBFF{Qna_{EA_VL7c14u=}x(kPjnr4ngrdT)oz(wcy{515iQ5U*70tDJ$r**2mz$L
z8@_%cwDV#3&q6;Xli6T03OB!=LQL`sSi^IUtUE<(zT7P#bQ5bc*`r$wEg{OL7yS|-
zZD3zzQJ*8IAR1WImCR)5dj(GcMFM_;AW1n3JuGOZ!Y3dg5Ej4+-0X(bKQa6w^(1F>
zD}sslR6RsBmigk#O1FcQGjq$EAX3SeSgn(C0&t_%=_GZGdTr*dKw;4gixpn^O(9gp
zh#9*6+b~X`%vt=)P^wOu<g7rC&IcF11^5LzID<KTkLjs=`Pf%2OkQe2Vkl%@%`$>|
zqf}vGVQ;%^(n1v{3_Sz3uAaz*sES(WS){mXo`dyKe4c|;J(tMwG5M`78Ffzk)*WJx
zaT9Xkryvoc)d%3yz(4Rwlxc)xAWBj2?*afgd>Iosii{2_d->^Ihv&52QQZm{M|Htf
zl}V-Vv`|VNS@#5F#;D@g`HYpA`IUj0PCnTP@vTw{?M7d8ok6V|`Z4}Z#Oql+w(x!-
zhg&o>YA!k%uFT{YUQ~K1q&{W6sI)%2-TY(M2e)B;hZZ6klcCkL-DKn*kCamvnktAO
z_`9Lt9m$vV7HC2?fEm5tGni0e&CSiFyg@+VT{m!ca*0S-T{8VQJ@ry#$AE^8$_||)
zH=K;JK`^VLehpMhH8eoR7^hjr{0fUO_(<4YDk>F6?U5U>=?i5QHUNoX<L+M85PA|c
zl#&?xoen;SFMoJ&(BJ{w6KxP}9!~HB02}i?OhuA2<tVm9j&#q}ncFX``<-0k0o0$S
zNBRdaaS1a@2KZ_FlRv-)^?n}GQtaMRQjfV`An!TKCnhu{^4L&Jx(q1PK5?Jvj{Snr
z50MMfVx&p9$g6<YALmf6ei2MYm6~wB*`X{=kq|1#{LKp#Raw|}6=v116zo98EK-wv
zmP%RDmJ3Pc3ulj-3K@^XE|MJZ)qflz^?_cQp9V0tBES9HCmY3XX`&+pm>ge6CV3~n
zeG5l6)moP>>*bkAkhYS24cv)6K3}@nLqb4;5|f=?VDZv-Au-hbkNxS@?iHvjrp!Fp
z(<Xw4Wmj!+Vttgn#Y5b_959ljjrx`N*((qL#kGWlgbqb=4Lg@8OyOoxP9VOaMpw#!
z6GV_SMZ&6ugQ>{|=-xN!2$Or7((7-*r^`j{C9Omr{rdHbfvLb{@=F(99OH$@?kj^a
z;IVQ=&YlM~iSZU1KZO`j$iQdCa@$w^+yn@wNRJXQ1rkbf#M6sBv+;^14rW0cHYJG9
z7Z-55Xs7S_2hi}^YS%d<5mR^E2JXOPaXvR~DXAGB)%?rw*(hX)51%Ej*}N+Cw_z`C
z?p<&_0y~i&(p`AlZ(vWMvPPEi;_-jqYU90Y`h=xAy7z^Q*T)Hi2EyW?PC6$J3p+n8
z+`ghhT_<K{{0?VlXM66fDobDVkicA$;6|S~MF2T(d^Rl3;OGN<W1fCaxpYKENCqop
zOw*6ydqW-THZP3@JGsyE(k|W5iv>{G75@95-<_goLEh6adb-2X2$SNdGo7k&Z3DM*
z6cG_IyJPX-T@9}3gpWp$DXso~om$;lRvz-vWg@{RknDPw61j(br8R5=&p}~wYFhuF
zyTcu#`;zG?5T>mL6ewA(oEVd?oY(*W=NSMvlWOh+o?RmTktBI!mN5%(2Lxz$5F*D_
zWrg0v14l+PJw8Qa+6+LJOhz-!*Aig#RaLRF#|(5q;8)mB)f`p~pf5pxe#wXZWls_2
z=RbmgG+|0VIK>^0U?x(o``{55>%nW1sY$5Q@n-PvpU%i(+3#`Fz=4FcgetpS;w2Gy
z(bmtJ!HhnH($#i_6o%h4aC&@jbO|Q*NsonUVYzf&NVPY5$<#%vyrf1Tsjf&Yab$nq
zA$5-95;Ew6C97c>|1<V$L7r-h{)|FCMS>qY{VmbY6bZ7CP4}QBN~xm17CPluR#$~Y
z==lu|6W%`%ztGJQS*oUU$0^>ub?ZpRN!@gGA*e!o70UH{tdcrTM$>duP>n4{4O4o@
zu=vT_Tt!Jy(U7-Ppyv`S-Iod&6W$Fak^R9%kS&DeALNA_;6jVM5zeUtaa~`hOQGNK
zB486(Qqt1rMe8Xp)$gvweb{g!tGNWo@1m7XMi13Q?<7x6LH9(j!Bga7S#|1NSBLAL
z#E-B-tr^1m&BY?bx1==${{9aG=oIR733qw>dHT7G62)va+4nj=NmfZ5NrHXSco}$q
zikh*D9a<F-T?x3i-6vl)dQG{G7>JctcL|JO4B^K*GXLX6GK!1sx3UXdoKi8_sgtQ~
z#<BT^7?WV;5i`@)Du}<%iz5@B2f>1|thrX!B*z#hi(6b0FLCN<@$|}e6=p8ho$;^c
zwt&%bkl|DbyWebGWTZnJ|E|eLt4P1v?PizWKQQF~?_QL3;Xe%p1>)q-XyWAA*WEN~
znt&Cp2LsCYv++SOA|74%NH4>f(M<i7j5410`r^mff7AQuuU3-7<}Xwe0H@&zWSZb<
zzIHnA8ZRRM=&ovf4))Z=GIOmxsBXx67>;%|8gdfU7iD_u*EO5^<PxR7${KL-(C%pQ
zP#d)>rxzOiiy8zN-d6fkXsB<^t^N;hVV+o;1=^ej)5{jL#~3FZ%+cU+z7|&oz0hgF
z(vu<nH2sc_j$0W)1YOmfF^^XGLc+ohfw}0XCbc%fDrsal{qb7pN6BVYQOdf_B{CLe
zZun1fYDEPFpBzh>xv!s^Ho%ndd@;#@-eP$vl6!q-aI(P7H7A@qo1!f-_)&-F%N}il
zm+;*#&(oFZRTg)WXoH)xYE3gH@bCfaaykqMP-*7m%t0I%^>ofi6L#mBTVtD}p>F!=
z2x|H)ibr6((*-C3CR}=`9Dn~K#=6Y_o2X#drQTdl2HZEFnz4sDTT~oa@W~6J9n^4T
z!@fOL`Thdg-$KjDQlBE3aO`u#aH}>`-E+3PsNK^W*c*J)bDL@A4XrY7wUE9&@V3?&
zEsK*Oz%<qF@TZ*X`F6?p9xC13RA^?btlN&{xizn3cD~ad>CdKrv7u}#z`|3rjPECK
zXFO>sMKl5EkG^kWqV~0mi%T1(;RPm#1%}f2bON0%&XxK0%1@ixfebfx-OVQmNu5Qe
z$Pno7X*)@|I2~6zaSuuXU_(cM8U`&8n!F^rP+XMnz{Saa7U);+tdT80;wnJ64Gqbw
zKH5L|#C5=Ea6=p!LoTDTmlZiVP?93T+v2fH_^`%drs17m?D2Nhf{T6v>9WfjD6*^P
z_2CWTocjMO>c1=|hWyd54*^V*R$UCDEVaWA-1y;XsjkC1jH&L^o>75GKU^SB$YrkX
z{RE^jWA4@lVM(`-MNRVY3S)S`8f|R9T5qw@64%85?aKYWeeq@hS&!s~Be7hs##wkl
zxoRe(xPoR;;{!FCt8{>xc9{X75~Z2n-jUz}OWQCWX!3DKdyJ2NDwDd{6;<h^ulf^9
zJ*o3FJIZH*r{y%YWg8}C<{yfW9SSpG<#8yQ%o?n+-9u^OnCiV&2ud*;52`4;M1K}&
zz1G6N@g#9}L~UW0MN)!TNdW3p{hM;hDcj+ZbXn$F1?+&&0yH%few=?g6)Jf?MD{q(
zgl8nb;KKWd3r%L&_y@26^UBZ3`RZK^%(wzVC15*qjrOQX5}D#Yy<i*1<L3h%E;bT#
z7%4J1kN=crlvZFit^i+4Y6w@k;a8Z%xqJzu(RUMGL{7a_l0Cwh@p2*}nm3;%T!p|W
z2K*UL5t#8(!ZR{5V!&WVhu(I7!X!DNScbj=Sj7)dOh5FQd0Zu+bS|>a=^r5IDIDf3
zs?^wi0&*(1YmIe2ifmwvVn3!oB$f{=qEdn`?%CN88ASuVT^g4Fn6BV<%f@*L!u0-b
z$7Gj9!+U{C#CR=~%bgzrsCpckxefl-9_2rKUrFBnD8NB+8$mncR&&0}68>WG29xHQ
zB~+0;;wPcA)l`_N*V$2N>V5$}#>k8k-reB^Asi)D!nOn9@#l~JlmK3>od@u0(ZBkq
zi+<>vCIT!$!?n2nHbm$0OQU!bZ}a@>CX5@hpJ_n1@mPfWLT~C*9Mg~aoyzt<RaHLn
zpPWg4QA)V<s%FeXE!xK{mQ9V*tn{m<b#=jRQfq4~g(fpo$Hiu}oMPD{!vxPFk-g^Y
zeqx@^4%1+@u)kpL2&>)SX(>8Me-WywO%cyi^n|cRydRCE8SYZrlb|WFn}mc$6Dv(z
zujj|8>bG|b?X|qt$(J`b8|5kjY0D}p3olVECP?4cFWyW>fHq{uJ~=~t&WS6*`|P;N
z1Xxieoq5W`Ni5ay)9A7t#H3J7SmN`Ake@#%jXdLOCl_fss{XwFn7}#^<jF<7rodE{
zJOebZpBVlZ)aXoy?tLb`P_*8_lCT7If4$^x<}L2Q<8B17JeFRi{gfVD{qtivINALf
zPJb681iDOzef(fdP1{3Jiq+dnNQyOCVQVa~fqqxaj<+km(hJivLwNhno%(NH#LJgx
zUhJcWhmuq0d{|DP>e-snC9Ti|A%=JnhZ$LOX<lrccPM+fPxEexgU5V7a&7YV*j<he
zv?mh@N)`D!MMsH=w@z#6bi8|sSE~|>E6=1Yv~&ugaekqA!CbKfHLsX(H?P<~bM9fK
zZxJyC1*Fc-c5OS0#Gt&qc`hGRe>Z|=w*<+Lg8u&JWne#b9GJFeW~A~$Q2(|?nvdIg
zcAR0&xnpmV;cfWZ%tjh|LMw<gLgqq~geeJLmdP-YVnx0Cq<wHO7HIJ?2!9RKcI>MC
z;W5}2&US|xgC;i%C3$&o-tz;BD`rYBJnW^Cz1*+9uws4>O#C|2u>R2CPl}cJH!3%T
zqzdUTeBN{g$Q`Bw71Pn2a;-UYHT|PmvYBo*Q|-AJ{@^|}+tbe0FF8zHr`{B+?Y_vz
zvjz!v8(K8}M%5f0^<|O)A*ZTeY6Xw$_8(U#>J!1qMyG4(GH~8qoapvN!zQG;yFchD
zAwKA3voBf64vPnpV~T2ift)j!Q0N^a^S$s9A0<2jnmB3E{3P6LqD|DtS$9?Sqk8++
zendlHK)_ut0Rc~6AynVNB$T?P(Ann4?+YLJ3VZ{%tbQwlGf3y~_keRhRMoVKUowD?
zjE#M}OwkxLpY6JDPNUIf9!{&eDF$*(>~(d;#SZgZTU$$GY&z4`rN#AXnKL@m1bKHn
zD>`b;p`ER(KSM75#ma*43JPlT=t69>=)&F@MaiahqR|B6`i;rZfN~uIxc*%?E5l8(
z_GP$SEwKt-b<y*Cs}7-{o@6lOEV$3&C0WO(`$8J;wSPGZ!O>&bh}tQ2(o2XG1Cgao
zMn*q@+&3&2x?f~(>e=W$MM|$3{LRFNR15FqkyY{F5g^?&P+vi1_a^`_mg4(RR&<fk
zY^-ShurN`<Bhm)MY00M&PrIw)#Gvi)q8m2WgxIlg>w^t5OrXKI_JwADe6<sV2~z79
z)YPC_{p*2C;5GVN8!}HPGT9yLc(a=8tMJjWIbCG0&*^>?u_-k1;FNK$m<JWn#8tUn
zCV`SoxAPC6Qdw;!qhos%6JV^z94=?kTYEGYd{|kg65?t=M}LdG)5gndqf3xVKB$a6
zP0a7C*ban-by4Wp>f*J)#+ZGVFfOEW`RK@h)jT{_DX&|&xBy*UFP-gwL9d2#qNZk{
zszencS#BvVpp%><w+T#fMK$bYa~LH2EFVhgrkfa`HTQZg$A~IWH3H!OW<jY@p{k-8
zf?;BpVJwy0FV>SG=)%ltP#N>ROt#gm{%r1FGc4BC6p4E#RG;m3k4vZ%&=vpfUEo3Y
z-OSma0=V~-1E?g%i`9FR+V$vMI?+=eKk@f7e5ljdX2oqUJ)*>imyn`BGE2Gd5<$8-
zgkwn`H7G~pA&G<<A{~N@aa|7_5<$0yB)0Q(wB2&dowZ_K1GC1{u?MI>;}7)zJW~rt
z2auUIervjicL^nNWP!(0QkyT7R+=u9T1@3po~s+u`9HBy<#*OtBrSaY7SybI;1P%o
zeRL^ZpBw~;UGW_uH}6VP^iXx!T3TZYdUtBoRyley#9BL==ibF_&BhM_8Ixeey9<c$
z5KW#X1K`;>g9!4!v-5#&BK{UjFClf)s()Bj$vP{*SrXP6hYw{;a^L<zIMRNPBij|-
z`0&Id@)G(_2agQ}IM7GN9N1qUtWKpz>*S+RD%G)NmH373vgz;QhS44sNz(4j9B2#$
z_PJJ-tYPn<H~#nYt69`;s(MEMhvvchvA{-Y=bvY2)QAG807#|nDw3<q<=YSlbBz-|
zs1!Q8Ce~NaiZ&RYnDEj$L5=x<L`u3AH7xqSEAgXuFgg4iYG1ew0zS9!yTg-Rsy}lI
zj!)|S7O%t-)SyeYTk;t*PaRzM-amJSuN5=yYIRAMFA6!sJ$IMbra&uI*#9$pTqM`V
z7y-bkg(=>fad;4nz4S`ud1(To8sWfjp!At;dmbc?lrh|dCjWa31lPeWE9i3srnqf=
zx*k=dvv0ptf>*~$|EfN{;72eD2?^<XusK;>x}CUgQ`&)DQhyr8dzf+j5K0!v2Os_^
z=_GzqLN>$eo3i<TB`;q-!4LvdJRN{|&0TB|J`|jK=!`&Kt8QeWzvo+{_^}Ja`Tx(0
z&g1AS5pPZwK2ogO(DW%8w>Y9<qDDPiCzrh$E{AO3XuRe7LTI49qYPi|*?yDTLB@JD
zF32IBOnfDMn<sU@@99JJMLpSH$NrzyWi@Q!`Pl`jfJoc@wJlv;iNfxgQmp)Y=3KN#
z3h12k$AEBqIuN2A{=Xgvix@**McNeCA6&(?@Yx8VO+u^AbGklaT=*_qi9Qx~e@=4p
zVm?)6y)j&6-Ccv}$Jo;EPH~Aih15ddj-}pU3kAHkB4(Y@pY{GQysqJ#Z)@0<@q?ja
z#d@ITCk2RpP34^so6>T~*h9rG-dCPBdPC##SS3d2{57p}^Bge8*$_g-_WJAw-{e;B
z@z0!Xvk*NVsN0gOpOvcBWaF!D&Ngp>IOQ4DkU>)wGx+J3HO1pC@55v|?IdBPu6e7m
zSemeqb5wq^SDX`S1w`$s@#y9lgOx_MsT`cy7J;1lhara*+3yZ`PGW4&d%He7o3S;b
z)J-jHdd`^Q0(J+XrjyZq^cJ;i`pDk1&3b`=M!MpD+TQZQ`)rL?13A-R4BVl^ixW!8
zp!~V-+=y&mM5#f<`ijNjkx@S|7Gt2Zut9HoGF$5fypFF<>!+XHhD98INKs(wh|m1~
z3_r)-bP+cF8=>1(C%sAH+uXNfC~tMGIyje{iccf`L|Ymu7yV`&G=0nCgnqQ96CVrv
zn3o)lRmay^2zwYVmC5VrZ>-@_p~Fi2JX8_al8xGz6A74+X1;tA2!U#?!Yf~%M|83e
zKl)%zKy<J#?CU%G(?6|oE{MfVlUMI!xd9z2)GH^dZIOSkN;tLu;HKQ@Q$w4X-iCcU
zd<s?%;ISrrRezG1-*M_Kh~xhS8LKjkzOlNADQF@mZl}p>@su!IC?zTGO@`X4>o{0i
z;EgHXjbC5*i4n|UeAD+`jL1KS8^e_aEeSZch8!Qt?k6!8ceN&|#tj$E<T;quu^omj
z#-F5V2qg^3APVClxoN&9-$#u6(9NYYp33)yg$`Reh^A^dzIj<%TK;XJG^%SvWpL9z
z4Yk_rsM!C!r1uCBImXw>k6My4@z;xk?j&jp2nbZOO}YF0DoB2I`bsK?x-)Ko&+TKD
z+0>Hv4@s*vQ8pW82|MC;-b#)eexj(s-O}}xG^1X>TDCh@(M@(xrwu=qirSHdv!4^f
zi!&5>3p{5XWF_Ybv{~guuGbaJYBxG~eKqcC^%%RAsvD)h`nwyp;B%hjoQ(F~ABZtg
zfl`Z|cy{Sc@ARz&BkU(hM|_+eI^2&WJH8jZS{SY46@%1d7Hsp)A&~X0u<H)&&Np8;
zd~J%oy*izW60jE2UC}*hr53BJUP`n{ji@QMV4%_}Ntvhau_@r(nVmt3EVdy>)$dU{
zbR<RJPCp&b4bQLSdCK(GD&%FQZpX(+?1eX5**EuRj{JY+m-Hl$WSqGS+=qK#J^kwa
z#>XQ#aiE(Ox+B$W`Mq>2@1!7Kvry3W{0yy^pPGA`NMf1%=dA7aOR@gJ-xT*9VRVv$
z?!8{kxl1#-OQVfs@=VZSWchi$>a*9ubeJlZ!xj$TS926m%)1s+G_^`WT@9KE?`0!p
z5F+*WGDI6KXP3~YQC!qRs33|F`MHkcw?hIC^?9N^d(^z)w!vxL=y!~%9&?_U0uqDM
z50cuZaIkB(V6@iVVZIGQ$mWzx9%?6SBr7r&);nGs;C%aZ@iumd?v&xu@5<Ddt3_-0
zMyb7~K`ye5yulGLDaPBKVYxR`<ErI2Gf7$^pe3|NUEWKm3HlzjLFCTVO!-(~iuT~q
zFM#>l&Yv?PYYa6HGRI$7#xe%gQTiGm5c<WS=sQVWztW>UMCZ}P-mSF-gF3fyd=dTu
zo)Tr;aZ?5R`?>kw?%ie%ysdt)7&34wA!4B`0L6QJe|YJ%^Gx9D;F+wzua!Gy4OO+G
zkhWpH43;s6u8(<9wZBUh@fpJT_8SvOC(m`hq(jxT;dM$Asf2I*V$p$fXFrRwH?W5v
z?bU4k#6M?6#l|sE$Nm0$#%v|{wuHQ5Xjb^?OR?nME=HbuRW^PWxOYXpa9e$=*^i*t
zDC5wMM!ms5H_5f+{aA8nMF*X8G^FWJd94f$=R9o@ejRaASwkK257&t>?(t(aE1GfO
zpnjsifj5bwO0;-!rW+N?!9DdB%YiZ6`Ef|U?)2+gMtM3%7kID5`%(+0R(`=~0blm;
z!zras)J7x1ui@IGL#gdn?<KFN3965k)f0v_U%lu-A?n90&{h?Per$^B_pSV4FVmw2
zUF!u_N17xGucS!Oc&3CboRx8%f3wBh=exZg+fR+c*wVoiYIJR3+wd0w5A(8c7oK&9
zIA<=*W%Z2AA`dMBk290WybJ<SLsP6!@2z+&O?-=<GdD!rJVij(S9YA+N8-qFc9+7g
zAe@C;sEw9jN-?k1;X*H#$Vl!)qIP6S>L=}^I^hN`_eM?opWoVpqyM7CQ>N9}^(xl1
z=>y9TW1@Byv#U<sLR*v&$f?5$tt_5G<id`zRR3Ko1sh$aBv{3e!;;osaeJ8fdA{xU
z;7SpQfc?3FuJ0=^-4W|xF!5z%^QHchy?vg5dxIbnQJkp968kWGb^Kt@+Xrl92pa=N
zl%EiSjYTcC+%Z$!>6uV_H+kthHRO03VO3r8l&MH6`p{i0<RsF%y(=>qG9WN4!iN+@
z{Cz=Clll%eeR%eC`mjM%;g+T4%}_f-7n@Ly#?<*P!tqHZxui5_6N!`tnB`Y*IE{@r
zf9KU^4lVq;&`>g6(O=#yw8k5+K6~PA>Ccl`_jbo+Z!*JJ#jE_AzzjkP5Y7xR#M+zu
z{wP*DgKl1PpZWc<VNXT=>Sk_GwP7c<#sSl&0D5mA&G!curTR`}wwVFPdXNx(8(TLA
z@l3>l98aWXt#IC?z2OAkBKqggOk{j7J>SBv%<Q~v_REGXzh@0w=PoQ0gTuX8PU2<i
zaoqB=e^1F$H&{+icBf01ZNAKJ`><(cc|6A>6dT!2bsgn_>r;Cwu!l_Y2YQH)yzSdg
zhVGorAA-Mg#Mg*K_BDRcbw6`fW|XukL}phxQyng{;Jh`n5PuTqPoSvGM*gTd3|1=Q
z%RMpwQZKQp)tV!GH<JE%(j$#b;<*3CkII0xYraDF8u(CfEKJ{XC8dX2=#$<?^unA%
zf?9^jOZuMcCmD0u44LLwPT@zE4Rx=*OS|-nydVsBBaAH+KcRIMKN*Yz#%xBF&S*)5
zz0v-toh|pc77Z~wdNc0p|N0>OP_4KZ^;OltEhE(?uS`db2NmZY$NL&it4i0lA}OHB
z7lfbY*iI#1Pykb0E|k63?x;fA{UOmk4YYN-sm$A0=pW1PqQKvo+kr}3MVBT{xHGdB
zGP!f-esO-hFYC5QO*>~$VLl{kEUlg!Rob{|O(y7&1PdKf>iS-@E&99gK1AT4j;Afv
zLgPV7MQ()iW7<xE_|~{$d+0cWqoh=}0KNY$zKZ;7>l6}nsHhQBzn#bz&**~`aTn@$
zSauCP)pAd4a?(nCLhT<)cexn+u{uWlFcvp3y1|DX-s{P->+?fWfc?gl@Q@J$#jW1M
zEACx~S89V2o0IWwIHy~Giu|oLxbTa|2JYAKbk?)fuoGfH*^Zs)?EJ^WZRA?Q%PRt$
z2Mz+9nkT|b?aCioN)>$WO$_Sz<K#SiS^z4*Z)JrInVQW!RG>X|xHdQAhU+c7xl2Y~
zCRZu3p3~&0rg*C^Q)23G&KrnlqyDnWja6UyF3Ou6?UXkiSpVdxb%vLSh%m$bGHriw
z04(|k28*WP*{Eq$46ZQ@qSiXFITu2ei?LXH&m~sF5W97PNKZq-U50KQad_}f!lp07
zr`oK0LO0!_Yd2EXb*da^zlxpC68fpTe_&oroBw*%Bd<(6shgo~LSRUXdu;s^MHlZ$
zNF7qhS?WpB$EMp@PN_Q%JN0KqJ>RK<d!N!3AIB~6oUaIQoAkfHm(TsPb;iVB_r=l#
z@fWr%q0_HvvAezSYc|+vZi_b2;YZ{Y5vKQbQvjLltac)rLxZl&@2%sc!c36hwZ)*#
zVBvSIG-bP}A?I;_f-bLg1&VO-#&K&b&zB5UoX?iaSDC0!RGHqAn=(L4ipMy?DymxB
ziHgGQvmb>}NQfN0#b5#l^8F7HS)w8$Av)y+(s2aw<m}C3Tl5?6iZdr{UjI(_h^Xv|
z(oH>$if7IRJ_gex=T^k?2%Ehyl98m~TS@Uj9N~5-Kl6z*<eW6~Pdz+SBkQtky|;t&
zo5hRhIiHn?m9>&?84jg(i+sXvdnRYn_|hg<fCuPRV~_!7`{&mTNZYsfrjBiQ7K*Ua
z=f!dVN0$~E^OtKs_&L;mm8+uTcXYOuc6GL0hkDESsg}xpeKS2}Ufm~oUW?^~I4($b
zX74`iPym_xJQ`(O|7FT}+@TT1+sSC2bt<;L`JAwjtlehI{r9wIp>63KJD$8U+F0iG
zUW&&Roq^GW2$AC}A{xif@S}|*@UiiJsee`8p+>nG+PD|1t41;fH&p<Z)n*-2W~dYU
zW|hJMFM>8!d_n2q=5);>`wTt)!tO+kw{PuQyR+-rm~Clq7q1O>V;}NK_nlyGt6+q~
zot}N|B@UUOlLpaEk;8?0WaiTFhisfvapQ@(mf%h27ILk%(-ty6GDW)LL$Quk0~5>H
zVR<B^ld=Jc#GeUtEoz%Pj6S3YiCB!K6jLSERR2@!8Rj7+>6~w>i_I=^+;dxLQ@sPq
zFjNK${qE4tdEl?W*O!CkY-p~6=prk*Qlh|QQ{e$QM10>^ZNbl{CN2a8h-aYjq%p~M
zSd*S!hnrqGdh`0yPIk=wX7ge1AF+QoH~qrzH@_{6rg|S0<xgo*kw;0z`{4Bs%fK#;
z(c{G%J1iEkm$4umZvO3ZK<s;UN_-%T$91QJapu@^*P}rf0ziy%QMuTjL=NBWU{X(|
zS0){EMc!3ZKej|e4n+kxkN!RoitDwBsm!x^E8r&l<wLba5_<i9>rhDi4%Jek{a(Hj
zM4GhyOd?{oKU`Rh6wU*7?;ZEUoq0IoJ0MGclVQ_x_Lc=nlVntGq4nV+W;7nl@R6^Z
zuj~yaf(RTcwzQB~8^az7OJ_j{_rkU@oC2NFrS}E7Q^)$1^e9m3U-~1zqi&2n=(XVz
zpEV#fboAlHX6K$$7{n}y=7j)#*CBsgZu_@aG0c(yi~9a-!Gg#?9Cmd|V;C4dmS_B#
zgo4j2*QEpt%@wXfg({5~5de^wvh(mbdMo=tE$RVv%*xoS1(CHq5u3;zj^EviyNe-{
z&UEN*j)x~%>yR;NZ#JyJG;1$uK~TRI!Z&?H`v^c`eb3=_xmAAiM~PnZszLS!WbGf<
zcytJ(0FFWF%1K}l2cs*V*q0=DvPs29##v<F65Y!-v#B|A0#bZfF4U=LX&-x9t|3Fs
zX9d{@3E|i+VK3_S>X5rB68P1XynS_Vlcsp!^n;gy!HorlbYn;obsCz6K8&2TXgqM>
zXhUe#eDB|g*T*#{i$3dGQrlNIbbk@0#4*k3el?SC<GIe?ex`2XgRkj_;PB;&4H*v~
z(Ctfpm`DH31BpnfEw%G5(qrNQ6-UHd(_@8i_9v*}VA^MLoe%1Ot<Xw=C55Ox^u;_}
zc3;s&YgE*U4n0=<%GtP{-;dAd`0(dL?WQI!=qWvEtlT4a^Ql`;OP(NJ--G=*fH)w$
zLeRd-E?)6&N??wbT4)%0Bf0&|<ivVqSEu&npzn96)0{`THZfW_v5wD3_g7U7xtj3s
z;*+lV+Mz~FJ6oR#9En8B&$nfqPtW?gQo^emYqre{&x9#(K%433KU*lz6noLh-5gT7
zJ{9<M-NQrEb9AH7cs}ALOE`L-0iZ=FE{S_$4z#?EN-lEg;aTO2!oLh^uriH6g{dXk
zu#)X~S;z5)#Gl)Cs=nb{Z6Up*)gp72yRRFDA%xbpj9_Ae(sG%&8poP#pVFF3`iV^n
zjNQM+NzcB}Mn!I&q8%IIkP}8&QJcn9o`&udndgd0L2618uNygoC^l*4%y6%ds67ep
z6^`kmiG!ZdFlsn^qx0GKjcV;*`b=YBk*Eh7aXaODD3YRgFwxRSRbQKfV(G6!8j0F{
zH@8EgCXZDYdK%-G!zyqWIvLwqyqGsQ?DQC^ixQitunn^a3w2-Y+*6i<uQi@q7)I50
z-SX0Sf$&VQ;5!KJXv0Bk=zQG)Er&7?AK;V_rU&JX8lTgHZg;_-;y&Dc_nwbjK=C`d
zoH3Zjcg-_}N6K_#)Na^6AcXYRonS?2HcIU}kL?s^roo6<zJebWI1BI0d*P%3jgzrA
z^ZJ*+hGc%=55Y`&dCsHCY)C<=@A%`HRPS-hoTO&`haK}K%HKnJg<SW+41>CJ4-L_1
zeZ9PNISShbZ=)gph?Jz4HXXw$j=0^LbjAC$-ELI70M$!hgMc3#M!o6kbe>g$R2@9p
z^+oek?{v6+>>Uyfs)@wAt!0>%*1@}nh6Fz1hPaYwPx6~DwIQYMul~_>`1CCX{U<d!
zPN4GL)V~JFa<cY@gXS@$Z((dl@BP2Gd={G0p`}H$iIRNgg<oKX7L44}YUV<(-56Dq
z_oZqqdQ;uq?mzY^Gc*QU1mudV=7LfR9dv?0?p5uyNHs>x&91fjezyC~W*rzslV*<n
z+F(t;!p_{hG?67v`OGos21gngCTTDAXThAJ1k+ok%M?z?z{o2ao$T`aIXl&W>}Xlc
zp*!V5aQ!-)y(So|L#AbHXL#7CI=S@>fRFGByt?Y`)SW>!C4=c<L+fD=dB4cRRgSMZ
z<G<~`!zwadLq;rul48rNta^y)`rgBQy?u2Iqc|L1s04Sb(jho({#`+)4!gA*29~r`
zr9(}6nVr`*cC@h6YhP#39`rCuotS4%`LZB*KYV?8(pJfi*25k=I_}!`9pb*{a#*2a
zXGilD4l~pJvs`+Kupa6zN|keAPR{Su=2n%=Q}Zt>S%mu1mYTfVG<ot;((pfzZn;pb
zQ)05ylY>LB@D<FgHZTTb<g$+E{^Clf4cwL{<#)8IZN+_OBs5-^$_NAHk)Bh2^}19Y
z0RXNnC2c1h@r!mgFiM<KU1}(V`D)i@Y-6eC(E3dvPnFVj;ADITQO;kAZQVS(z>iji
zYb|+L{mPAvoUZwPG#$_6=d=3t48#1uZ{qIpiS|~#UFjL$_K>{JFzUQZ=0|M#vB`M8
zJa+Ryv*L5P1UFZ{cyrw{k~Z^36dpUKVCbl%iydY4qnT{_D!gu4dPj0F?MgyvQ{?UV
zVgz=Z2xFS}P6~1|@w)H5aG%cSjYn;?cEqEV4l}5U-`}J#cIrK>!Q%uLn#;~G@P6ut
z<W9@fOG5qejXw{-6y`yBy0l&PJe|(pz}|yKbf==#t0AOQ)ibM_N=Ft_kXK%wzS>?L
zpUinl;W~H=w^zDKLwww0gA-Cf_a4rIhi7r}yXu-73L`Zgt;?Muhft1!mH$2q;9fP`
z7oPVE;0VfB;H{oJYf+oJZ<K4O#X}D#NSbnru4nAZ;xE+J-#NBl@m!a20`sb?A69YP
zn)psJK57nVx=hUAhVfDV9K8qMFmPxqb_zG&Xy!v6Qn<IHz6++u25IawpQn*OT49{u
zE^6k*o^hH=!JYlF8Q+%wR4o;h_rs7_PQpHJ)4AT+yCQLoZB=OLhANch@so(Fpa+Po
zN=d3v)GXBQUz4W>(UI;ntxp5qM;GS6<be~-6RtV^+@{ru-jh0B14L27s?iddXd@6W
zw6tGU47(R27_BXu%~|90HHrw+5t_&Nje))*&7i(4G_^kg3~`YURS=j|q8UXl>o3J;
z!5WfYzpSV%Mto10U=sz;4BZ}_C^r^2!2$uS+uGKa<I7u)m2dGEV6VqPl>S6#>#^J&
z!<)nS2b(iuk$3)Xs3{7xFqkh@@jBx!=6?PtWm2G*1l_@ZH)Ln6TZ&O9%|8vtk-Kx|
zltuGSo-?luc6{aUILAG?3aO-Q|1zXC>6^y{{@Iu8rm+wXO<uqVRmF}0yHj^Qo#d>0
z7~gW=oZ&GgJk0>Hu{WS3=EfcZhQomRb?zV{vU5ZPS3n3YU!Bc=b;Lr)>B5O8#L_m!
zX@>)H@Fz@t-`Dw?n*IvI#j6cqrWvi@P5qKBRuiw0VPdAk5<d#&Ln)48W)I`#XoBg~
zSA3q{{2Zsn{(bIY8Glyk*#kyvciYLT@5NOn6k;WdU2#HxM_Y%YIY_35TbFpiG(va|
zw8WvtLNwev_p856g>o`A)^XbqC|4n&b0mYW(VWdcD)mSN3R_M*TJ4P7Sfli-=f&;i
z>TgALOfK~}ahCo|7Df!*>sgw+6I8B2b?@~(I!m#XlyJ4BcYE1^S`%Diw*clLT9WQs
zijUyTSeizx2a?2M$J^WY{pnP7nTZa>nMgbJP>PMkDdkm$3GZoRqC_9XdOD0fu5PW9
zrP%gU>YSz{ysoGr{Mzy={#|p1=B|(9F-E6zl#C@3cE`%!W1vFMRKeoV>8K6|!Cz_*
z%VBgA%MyBhpD?r~D6OhpJUTX7x2$5eYi;||sG*avL)Z5j-Uf!!vf22Q{u`NWg(aH0
z`*M@XZqE+K8*JmPpH`~4su@*EVyRE{uqD7f>EFEI^g9qA0Y$@!(183&^X?)=UzWV&
ztV!@C%H(iw+7th^N~Jtm(ZEjnYf5O>ozp{rHBy72@7z+|_8l6U7W$U)H_nTN;?s)~
zDYa9(7*Kuvbw+Km-B)+pJPn32#T#FK>2V#r#q1_{NXT93Q6EQ5OY7$gB~vT2dSdBa
z-ItTYgPBTDjdv<F-BtIxC`A30rxBjktHREYpkMbPBV)0ZU9c{&im+-dC*QT_o`gKA
z8?3sdXs}xzndXcTU=!G$N&HZzY5}V3eHqhG$&E$3QgnynI1BuqFARfcIG#Obz`3tE
z(z+JPfTQsN!*Kyb8MST)AYL71$?)58(=qT|Lru_8r!EU`C8R+Lzc{ePyY*VOLp>`U
z*_$R7pPANL>@tbR8h*`8X&!%hQt^>vyeq*vZpeP*J9OG0=W+GI8cC;fztBzzGSzE?
zB}_Qb0%K1_;B|4HR-s7^E`s0iZZ@>7PE+>-9Wx_ow+M5OW-|Pa8KZCw^3K!2Qw{rs
z$(AzYFbZ`37L`9W(NYY#*5!8W|EbC8bqMZf#dIQwCtFe1s~rb?VtM$xc4WcoOV<~0
z2{LM6PR_)<EFebG8VBb&&j(xrW5un0yTm}?CF(HVuXOCJK`*8puMsmBRlR)#4VN@h
zQTNEWzk#pYf)&$9qlx!O<|&JYt~jops%!?#D(Rus?=wHp1{Ae4om5?#EP(7j^c6jf
zN=k4}MIL%v2stC3SkNiIhk1FSmhR^#8x+_aD%7yoca2>k+F*gpmM8GG;<Bq}X4pSa
z3Y~vn^Oy8XQBmsILX?tdOar6vuX{vw_vI*~3t!nP^BF*DM*SFM_y;TU<VK>zhP@0k
zytBlJ$4EaOwDpc>U1z|o<~Skk^IX{g17}yxY<4Q&^BSI22oOuqJ%k?)4h`K1wtBaM
z`B!!K(<>I0_d6CUW<DK!)~YSl`eAuJRytQHt)WuuDKP=`_Jj1*1xe~k{$Ef3N<CN=
zq^?`Hizc?<hhuiDz}0b<^*4I-U}RmcHEz9fSY%T7h|-#H*0Z`Y6LDiKztD6fWeKJm
zo<NydSi%fJ2o<y^GJEgl)jMC>c7qD|p*_Px6}s7W6_W*8?)6r@Lxi#-#ma8(q?xzD
z#vYg{1VquRAN0qff?lPa?Le=Yfc+h2B+Dx+<I3jbL6|LK?bqPz4v-Fs^!k_G&Tq{e
zZk|@eHRUKIr7qpW^{OQ7+>wCIQ=E4zmCe!*X(Li(my91aZ?!+d>;`F)g$Txl4b=Bj
z7LsWNJW^OVFlpKO&XuQ325H5$q@7Z-`=Xc0e>2ANQS(6Nt=v#zh=aYI9lDlSiT|TK
z412lFC4KtN*cI|8_tNbSNO;UEzH&CL+DO>K^YZfQ#mTZ{5}<q0D<91?Gr*?!D_7^C
zgTtPERcdm#nGd`e%-%CNg<rjjQze<MiVV-6jQpgFSx#b(14VP13!809j=XhMRf(u4
zA%mrJUln=KuUP}N0qa#rp)MibKi<=7d0U<?-40o-YbCE=e*f<+uHt%gdB`oi$!29s
zU;RCs*uI`0+bKZ-Jt0!2S<%1a5O|<-YcB07=?!Fef*SeHo042~k3F{jDA`ba$D*og
zHKT$K>KsYjNgs((@z0DUR(|>CcltXou-S8fEy_G5IW{&H$;`~WQ7Rja{i5s~9foZ}
z1cB215x83JYQAc|V3ry<#vxozC|Wcc_P6pa7Dl?nN%{m9o`5lE*A9B#b4zn#exf0<
zvR-~y{u?}KmT$AsitgizCT5DKn8#pGh#2c+d-o-o_*T{`cIgAFtl(zT{j{0H(siY(
zf5OW6XGQP61tM8Mb|kxH+JO$T7xX5yGO+80WfNizcr?Ev{j6xEv^SBS4b`vrt&zDQ
z3Tf&UcU_`(!v*nYQVa3w7$uDXn5D2HPajbP?aNJly)sIYuR{)hgSZzc{Y8o#bHY~K
zW%C7x))ez)<@LI23ukgvvQ1#2(jQ#-@h<X-F(57<5a7V*UO{430>|R3G~@`FE2?Xd
ze)X6qg@1!etr#wcnc%D41l!RA-xSeSr%j3zFz?wZ20qsOw;_kl22x{mqB%_6xew_1
z6Uwea2~V6+7_4pL#L0yq-tx<*3As*AnXx_GM;%*XvP+&uC#hRRfo}x$hgTjVzwz^a
zv0;E`xn@pjYH7KDi&<eM${y34F^3a80H+6fa~(Q(*3mQY+8T*wy!NXKh==fl^xY1}
zdd<amcLStkFn1YA_gEbLST6FhX;cU>5)r?5)sna~uplP5U)FbIr%)+W6~c=^!(DKe
zPma_DW2e65c|CHVm2!NEpH71Lk`*W-mGfn5-(dZN1=#vLl9bDz3di)RaoKn*<$G6Q
z<ID^KjQ}1g0ea|NmB`urPaZ#?n?eL}D!(+Fd7EBSFH41i9oHm0w>ByaEw4j(CRXfZ
zKWub2l~=M;c^tS6klcdS(Wf8u&Z^}qPPNrGx#73B{n(fiUoZli`}nHJ!m(>J`zvgW
z9y36&R~xGO8Gc-|0@XNoO2=+OKkjRi_SMhy?iGI1eK1G&M+}Y&Hfs%>5|;YCr%pQl
zfOy)BDmKBz=q1k4GvoQz5T#n8uvYwrqSfDb*)1jMp|V6(-+$GJ=I5Q9R!)ei?O8cE
z%-AuVo68u7h<0bj&R)lv*QJcKGwD=m^?_JFzD;YpIolk#3C5xamE=UZik<u>R@c<r
z$T01$_?@jy6Z__RYO&@R&Cl4}+Ze;iii=rO7jo()^yl-_jb>NF9EH?H#Q+B!4_Vkd
zGn;+m+3C~(X>H6)y&zUbt#Z{H%puv>*v>=E+TV7r$ejdZae0S-(<H1B%{i;qMB5F`
z4887ZHOH!$&z~~42^qdIQ1XXHn9MNWsr*DpXNKxz=i^h@q12B*5l>3Hf8oUB5q*n=
zSy&+FNsxB5^7pm`!?c#C|DK4iYX4_n)ih8-R1;MVp=}9I2`sJkm#5mtLK++cGh$_$
z)y9=HQR8%32GSc~`4u~D`<2xmBIQ7tB;Mr)^SW6EJU9psHQ9B`zOcv|tW+ta7Z$E#
zxsvcP6URH7_vWa-b103U%<xlk_gdA>@{Q(^C4zu=q=UjSt3Gx0^!!LOzc@>BYgdm7
z^y36vfhN<XUoG7h^h?d#MLMJqeUiawX#g(NAue1lH;QS{N=y%l5(wz8Ua^07^2@Ja
z;YZqS=Wb3vgKx%9-N)gU;f}EfrB4<PS?zMszYmZ#KAd@)C9@%~Ydf&@!?4gqjtOs0
zW{vW{e-ttZ&A7cTxVhE2;PgfXvtaQJFx#Sj^7pj8Xh*YpUv;(zHk}jqiA<jj<SNae
zw%cfp^n#vuXfbxR*UD;`r*J~_Vodpe#`E2dQGoIBHb3WLrAcxirykNd{p|3x<)d^8
zO>wYVT8$4bw4>W6Zi^NpfnK;S?(WzfOVd7sp0ot^yBOCRPJJ~+tX}@N;*DDY_pZPv
ziIr!%9>%@X^h3R4UsY18jYKtQX=u29IEi9@-H<iJ=-WWDwaFD>dh1sXwnbd~A^DDw
zb71Hng@>|kb^0f76G)ENq+o<E4AP-J#;r1<K!4q!zHuowrKvm=hb9Jco@OOFYaZ_~
z-z;!-3i~F1vo6K`?A27((>YRz6-nO%y`F1h90`{E%4Wk!_tF(_fIiCf&;>KFtPS-=
zqUEn5LI$q(mG<h?pJA4(CKJg5&aw!KiQ>!|eD-}IVdwrSP-sKTi@c$Pk?1+nK81t2
zBh9t%kDZsgjorrHt*g8z0h+7@smaAj9bEd)rY<ZTXa|;{l5a*6^D5=@!?Z$5E6qOx
zvVVj;rNz@CQPX!GoFv3N{#FSlXcUZm@(KCPC)}qCcBwvp9_UA1W$r7x{PZK`4k=rN
zc#|STwn=DG(X1oyxAvq~RQU%Uj0h2dC21Si3Tu_(xk2FfS8y21*YZ6~09s~5i0_mx
zJH(V|$#2#fjhoF}f*^pW@BaM6SoiE+dQ#;H*nC&~Q8iBRjKpKFU%JwACjPI(`&s${
zfwj)9Y$ky#aJlQ+z1EoT&?N5bX;;w14Pr7!pX?WMDk$H<SWj)plju)Q&qjYn|GRSu
zNLpTT@ytMWmDgVCa^zBUnZ1hBY`#|{KI0>JZ}oeTo^PX>pPSclBk83+jY>Zc>{5NP
z_(^99rIEkBV{ZYaCxhH2QHD&T?*<GpK1i`>7_zu}{vT(MilffM&Hbs2=?|M;1^3uz
zY%r8R5)*|6sU8F&YO;gU*fb(s|B~Jka57amG29}Gf!W!u`@YtFa(L&t%JH$G65m0X
z^}}4guk+i;hBiTE?-iJDipS~ebf*Fi1z1YOylk8?8%B;%ILqX^&fF{=;;87D+(#Z&
z&qhj&r6ho`U4hCId%!|Hw))8IPQkGd#9)1_K4ZTmZDu7~`rZ194z3*O4i7(d)!F=g
z_ax5T>$gP!24%Boe%=&wa+O1Krf2B-<oL>*5XpgoUP}f(M1W42$9-c`R;@U(_XBc_
z>bT|K5pc9&f2xtGdJm`qb?6u@QAW8HjW<+nhx-^_o%f0Snb|+Q*F(@)mzQVl>Fiv}
zQ<{NI2wgEmTUvR)<4(=6tBLD@DOi&R&z|5Z%z7PVrVPL4GR=QaVc@{^LHLB4%T#6^
zKp~n)PB+RInvt^^vRvMyScR6|v2P;Riqxg8H;ibzc^DGV;X3wFvzAfhcW4kZAHPH#
z=Nj{3CsjSnHapq->t(YvM`bOqq?P<6+LB`OS8Dp^@@MabCIoLvZ8Fsr_6iY~g6n)O
zF)hPL*Xqz<jUY72dUG;&#!pT4uX9D|)<PZ1ImLa(l*Wd3bi7sl^~Q+6o*Bgo*Zqz~
zpUz>o+Aevob(b`vnbp^5hxJ|o=OuNpb=5m_JY0>zDX1t;Z69^T;0d7y%1O+|U+956
zD@Q+1|H&_Qk+L04I~1+ZdtT13<5HE@G$~2(Pq7KCyc!KAP=PmP6eQ--Ttj`$r~{(D
z{cUztZW}ywk*^oRy<0TeH!*V1_vtChMtJFQi(g4m#t+ffcW<zG(~l;<qUWO_`N>9~
z{~JwT9TwI1eeDb*3?(Vu5-QzD4j|nk-6`GOh!T<#(%m7Tgmi;JcS(zMN%wo^^ZmX5
z`1mk&@44sfv-VnR@3VHUg0V`!fg&dwq-0|jpk;Y5b?!(OshipoY0i4(#P%qB#%q|V
zUhHEnKT~t>fL_f<`!vG0FR5DJ@{{-qAlf%J$)oBh5{p!l?dQJ+UbwI+SQ*XG2rZ4C
zZq7G7^8P56@7px)uDF=jAm1h`KpVi9e)&13aU27kMKC`XBf(rdJSEklIL_P()s2u{
z@C!wL`kZh6M4|E>e3S0vg~+5+wZmbE;>GWPMB!WfqPUp$%R2VVLjPw~nUhBlQ)KG7
znVLzLlDpbwsxiq1&)W7bZaYv*{mmFcxR$^E81iJnxIXEr+3EAaUtZ=~TEudpoqZK0
z4O-V%@0%KL!Y0YFopBGtI@El=ddz{&2MTRvUD-|%FlYdtc7v12VU7gH47uOEpsJgV
zD@7sS_tfX-(*DIbud_}=P)iM5k_5D~txDQ*g&9fj4D9>zj~lYL7dK=+T+5L8-DKPu
ze&j}F+G?1vmt4_dcj<fUL_jyfy`#iIpnTX``b~#{cFKw<&9!dHpz>g5ap&KK9+u&b
z^KW`mo3-tmCiy_N36joXk;SQZsKNSpo7VgyML8jk?cchs|K;Z=B_EQ0W=`2nVAjUa
zG{bgO_Z1qyW{#d@o8;wp-1O`#_doOQy;oZ}@ORvh7!I(aZkD7~f_IH^dZop58g0HQ
z{oRyP5}U0a`H;6^<O8UldfShgWTEpFmbm4c`RJEWLfwbD0{CW^bBiFF9G4=7mGbVU
zsc)zt@qK236J}`XpRMn8rv9BtEG%IiGQXZF>HwVJ4;6=I3ZDN(3$eP=gc&K_8%`hd
zIA1|24s&*vsVU-gUgx3S9I!WWp)pT5SL;{trV#GV&rQdU8^vR}RxhBBQbEZCu;)ho
z01l(T9U188WGTuX^OSa4z-~MKJ6JwZcVTcPnur4XDDgV5e_Qr3w#K#`ANQX@4E}i=
z8=JF<yYzng?nONWRwY)98LMyJxyw=@P^(i9IPtSZV2ST$Dg#o<-KqrH1QsWVxh1w8
zYGiV~8OXZR>=tdCs2-~?e*eQ)YV^0jn0mU+u!>zSbZg&5J1j^82C&b4(c1mVG6k;R
zsdrdg`e%G=)u=wQHv16+F)h%>my8x0?M!dw{_Xej@^YN*Mxy9RBgX_R&!t2`)WCeN
zuqaY)Mz3)l4o<mBQJ<$Cnz=!kjD!Je<Vyn0swSTbm6st4g#L8y>;mC05t;Pgx4WD@
z3x2(R8&uRdh3$M;tK%TnL~1D=nxbd4k@LhfEk_VWV;mHO8lg8?<g4N|{@8DF^p>`9
zaPNtOpeLp61K;OtmIEnxzlHz)%YRgUfOcIaSp8<(vWX!X7fuHKgsU1a-_A70`Y{xl
zFIhl+Nc_qxdzYp?J*w*0cib}n&b36|wr$tU+fKJn-8OXzN<Bj#3%JzSD-Q9sq*nMD
z>1)|*o<=1t^h;!YlyK+nfI*NkOr~6k72fj%R~W0zY~Q|<*Y)CX#rMZtycbbsg@1EG
znL_xK_j(F`xxeA*4<tS-y!9@)ve^IkLe&&(wOt@BSiw1^q|)Dc&FtyT(8P#^t-^d6
z5Bi8HR#MT8%}k+%_$w`u`mFsL`xDV*<_rq8$a_qvIZ4?k^%m5qR7x3FpU%{?fFzA{
zUX*N@vhE44b`>QzKjkC53v*qDluz2<dqq+|bTl5rCN4_HX;#QKP$Ecz973l{#~VdV
z-OI$0xZ@Mz(5-dOJLGiIx|+@_T615t=`M5CbOf9u-7+k-;LKx7-O4?qHED8MDd16p
z34zngFT3?8Sm9$6nE~`*4Yko*%-uOTn+=`p6w#U94@|0Dxz|1YRy#*hNF{LlHM(hR
zgvb0xobFz7)HA~1@~}}V_}q+cYpE<=6;U~LCTVKxT%H4J4aioE2lnE!+EU6FqVoJE
zn;5AK16X}+OT@OIzLSMTcF~ok;$o|vz)ifVJctRPC}abDQy8!1Sq+^RdGtQ!d<M=_
z^9P;fc9KL&wc3Xq(Umpg@u}z3r@R#8yL#J!4Wrk_{aC7sS&!3~_Xwz&Ys$)dF_q~x
zI7U_RsQ%a_R&GxXkq8^~ewTnYX}2mK7z{7a)VxpcB9^-@$@k7=?@S~QV{76D8S-Tt
zj8P@4#c_$@24sB=FA<dQ-#p~EdeMYF+vZJp0Q45+)>^)ktG!bd`}{$W(UF(=Py8%U
zt>S;wDUN{g7~f;jAk)2FWd!AKX7@c&9xEdor)MN~KL^!MTXn3ei<@S4{CtwRZ}pnk
zc=pC?#p-B<-rhQb!-2|`u02MxwWA4Zq}XiO)sJC&_u{4u)NpNa#PlzPx2{R3gJKr%
za}uQnGKIczSr9W0ZanW4=U(0~_IEcjV0O8-Buo$@ZlhVo3|_Y9X_|_LTOLndc3-0#
zC4O`ECz@CGcU>H|EU6zmOU<2}MmP*S5K4_{tb(mQLm@miJsn8pmf53{{qnMVq5mlG
z1FV+dE9I*{<lk%YyDWE1Prm^^05f<2y(HhhBCE&O`F!2`LW~5amLdF}*v!n+&CQQq
z+Pw@MtNsZW?jZ42+2LnnC%#<iuaP>(;n$P}#`=35!v)4u@(J5PP14tY4#Bx89=gwP
z)o_D4JfKZs7er5y!$$Zdr?YUW%wMN8I2iBw@#`-xZEVv!eido6YW6?RFMs*S=-Wt&
zmhqVn#@t_$#{{Lc>hH3lYt1dZN;`W04W+U9vPGk^ZR>t(E7H4Xp62mP>-nN@DbA5n
zwy3`&^(veoq!JSc^}5Ki!=FXb`xg?sK7C1(GN@%gXd;4>`}p~4|JS$N6@{d~!NEac
zKiY<;3j@)nY3q_46cX|s>qCwbgVIGc+bn3GE$&QL9q<czwZr%=<>fIv1%$S5$g3!0
znbf;hxOC;YN%xDzkI<q8dv&tlQDcaeP~nFyPo}oFw<SGp{yJX5+y(`zZgeLAXtiU=
zNsq&M$WJ%+txq#rZfneV$2R_}MOVyRuvY3}LR~B<WD=Q#B&8Sps_<T;hH|23d?sxU
z?X4Ae2g!^pl#Ikm{n{n(s;<oa{vu;z<qRAI)V7#5TQd3SMw;3=>o(tiN4$;}=a7ZP
zY$beQl8pFJkW}M)2WMZ<DjYzL5%+(_lp$5mYtp!TdDq6iXX5EeSn27_qcCXt);ymf
zb~g~{N)Lj=01cXf7?!l^OzG|$==GvQC?1^ACkB{o3c7urldib}4VbK;O)=A@hei@w
zPF2fj9?8GiN2_aUjx!c8j{*f@6ST)J?sp>TG42(8v^hgFf`jG_EHT*I5;U;jkMex_
z)Oi_NQktNz$V7P%7FvFc?uO+<?kKn?u2X!F!=JNB>;-q_4>;^s<tvevdM-d7=u||s
z1=d@&ms>eF1azJwB5<Ihcq35;jegoci|u7ua5<!mk5+s2CT2yH?FW9-hm;y!o2dIK
zT&lggP%E5jZmVSa8TT$ch5XeTbSW|7yoblk-F?s|rCcjZx0MrjIyNY#Q*66a$cTFN
zC{IQ5b~)kNUSOCAh7*W-o%hBB?-AIy&>^R{F|X!tJwN@BdmYNiE5NN5f<o>)+adLv
zSxrNOSARNJtg-mFXs_U+^2E^@^K~La-cwoq{o}1<tCCRih){pr!n5JR?OnaZG<Pf+
z#vJ-?XL&CD$AI#sRiz3ZwZU4q2@QS_iz*nyj6+a}WcDsp5d3c0BevL<S7fF8+-I%~
z^~i%J0u4sVq>3H9vL~Y*-4mN8K!VT3q*{6%HvFa%3IQYoH*BKMkH@Q_V;WMlz}FK8
zPG8^sGS9Vk|NPnSjbJi&Ywn#_uY{6f1`oDpT121u*3XVs*bvVYp^M;dDj{$d>kiuQ
z?>ftIFSVsR&I@iIc#ep!t*G>S2>(HJNJ4Fzv&*W9d`RZLEA|%1g|Kn2_ZMU@3r>uU
zeVr{(S@PfV5|ZRxJn+pB_q)Z%uCvpnf({Gxy%%(<8qh}B$HWDd8ziOll9s6~9idWN
zcyP;-apM*4E$`~#uc(6ibt*|hA0|pD4`Or^L6BL;9U;8wKP61%M)zLtAxg~Text0>
z=>GL-mF;o!*F)PM8)OTIE|i=wa(-Odkf0&8WF9^~qU~Y1Zc08dgeq_tilR@+I)_Tv
zGcswArRGa%rRi~wWiaPw)t9OG=BdTLa4Ir8mS7;i>z-ESEzkXiGk)1L_>XA1>pf=k
z+gU%q$obQkBGKdi{om}zgtBNF^Uv>Z0Et8s#|X)EHKe_cE#B&`wLgufG#h!7FK#5Q
z?@TF=Q!|5FV<eiH6=ui6oV<Rqn6;I%uhiY)=uRd)?#ji#j7_|bn<C`tu-@dp<Ats9
zV&rK$34}NN?A1SQTT|2pjz8-JG>jv*(mz}kFFMh{k6}YZq|Q=ejzy!->=Nk@+yRat
zW^jBQX@NUa;``CR|EY=^h!L-##~Z^Ni<4vaAuRA2MFdXWjVs^<llW{E5%Z$xGvRg;
z{z68P`m_H&$cMYG=F;|a5+yR#%h*VHb|%HJPgI0@3Q<A-xgtQMlri%>_QTMK@Nx8b
zK^2`$vHA7x)tub^Q>id_02y>)Zu_YpKiOyRDQ5}KHn*L8d?GV-(K2WkuJnB#M(##m
zu~OH%cPht|fh2VonJ+U1g6+3?W`vx}Nfh680ByMmpYt6a{3R2I+U)XugyF*Hw5A`1
zE1yh#C(82Qzm)XlLzAb8!+;Fl_{0h}w#R=svWq73Efk;NaA$3!w=tOC*_spj<q^G!
zL}7TUzD^C6@GC^aSmImoY^o!JEMH<<7GheC&NkVW8nsVkH8XaHizenCOz7LzS4p}B
zer4rFBY9+)yJbtqv_`wTq>MW<v*3qraPV%%i7r!#XTpETa7DtcDv^qXY9-5t5U4|K
zxFlTW@SmX;4g=s|m!)K#-m}$WK3-n;8MZMre*h7V?OBSv@>T#=SX%9tuHi*>CpwYa
zt<`u#<-TQYCiv@L!wPGZ4oWCmiR29xW?><NwY6@je|`CF&-`@RRm(y+HfRj4%H$cB
zxH0*lddSH4Q-7zMw{^={tqQ@N3y1GV^r(v<fa`fAN3b=~C9r^qKnOWi_YtbeopVhc
z$oqWPd!)PvTj^aaoNfE`j$Qd@2`n+lMS7x%Z(4mUE*ZUnk6T8M2ihHmlTGot$iL2w
zwW3BvLqKXQK%pVtA!+Qzos)?6@4ugHCcx4Y#Y3K^x#r_lGM=0Qnu94t@lxz!vfE$Z
zmr*Z!w)L3#QYa*|EtJ^auh;Kjm8<O4Nctu(h#c8F93<T+#~_rH1}FYhm^_n%%5U4K
zj8WCo;3fwtPkb+Py{d2U&@T}KSU=xjBtja=Yv}+UIG!nUup7tn;%J)yOB=O@*!wYI
zCwOTdeKWv=^*_|`k|9SN^<Yj!Nc-uR(tz)d>VdpY$4}JT6t6}DT;k;dz0V3^iAL69
zy6fa9A{5T8j+}V0*)Y(->5Jj_Wy}ES4dvHl)JJSvy4RBj?lFNgnV*AR{l^n-GiB{7
z*ext9d@mx6?Aun68*j6oPn%gqjEf%ct4!ZXbIz<j30ok*ZWYwFn>DsU1XSoy>z(A7
z5eFNqO7pX}aQPAA2h2(?v)Xj%8^>n2C9;4jCP~3hUoeo80uIzhqQ0E<^8P0L?|mNN
z-`DH=)b;dy^FGhzZI9g@XB&5L+4ye*Ebl=ua=Yu5*{ocr$FL26Qabu;Ev?u(9i!Lw
zf?|uLbq*6g|1N)(xZ8i$0@UQVrhVJ?*n^xSdL0xNPwFtPWqe}XaA^cO$s6f%IaW9!
zQ;zGk?T0E0Y$T!PicARg2E2jDi;o?vFdlL>8JJS!pHTm}UpV3Jur3mzp)r|aaDRDh
zdrsc6aDUD;7DYEIeqBu#XY})jh=T&|2+cW4XO3b7UBz3(6wINbyj+OO77z8NeKrW^
zK!1~hZ@xJP4hK+67GeK$nn-_TzpKVBsd6Zy+<uZsBl#>lw8Xs>3Ae=&8<k59xr9kz
zw~B@VC~(<w#lB>bUoVh0vGK;O9u*X<rBu%r1piofu19gt$5YKyXRNx9DdN*-JvHNO
zAbs?>kc%<rc+r4V;YXdXQrogYy7}fvE`e*S8afpew>l<h|GvfRse$u}carT`j=M^u
z%otzI*J94MmpYe2%}YRj9GufSIEzM!c)#T^%0^imR=fk<QG=J5tq~be#DoJj7MDXV
zr@VaU4m6+@QM%&UQ>a?jF`g@Cx?B7sNAV7*t?y`Z$nhKvtMd3}<|W@{Xnf57>XH#^
zgsmDtkKH^2bh6ziIgrNhyXx=hz$ADK-EO~Ws}<e*uvjhV?!fcOuB70A`rYKZ{EO4+
zmY&C-+qNd6{umvyGA^JkF6$}wtnmhaHk5he>6ARrT4m=Ri)>V^l4KBxfn-3(7?!27
zzsx0<wxas1_CzfHxv+{_j&k#4s=#@P@MmMfdfiudDnx)?teE<0EzN8Gw2a#_e2?t7
zM1?ri)otYkf9w~6nsk_;kWjX(y0_P)d`=^ipS3(H%#A7?6CLE&Vz42x`<rAR!adno
z(=URA;I0O3g2O?$ji=|3MCTP&Or}?}6Q_9tn}~hU*&P>X^PF)Z-<KD&@ya^D`U7PE
z2Ej<saye#|vxjwI%`dzxA*dkQ;=bfalbF*{w4u76ar+b0x~fNuN9paz8?vL#DJW*L
zAH`SyK9O=7sksEU#&408Zg%hc;4LYgW1PG1{{$3|NN6SRDe}Cg>)$cJ?vh^EhNsx&
zSGL%WDTcC7zF(PYais}3hg&Tz>}G8remK1f8t+anGRFy?$eIY|04R<+xUWw-t4PJW
zW>fciDA9m~w<`D}ceG#+DR>bj7|jkh7!^D#1E`Id-+;mC!z6w}{a;-WbgRQ7Y!sqA
zL>Y{S<|6DhrMa<w6-jndu%5m|jvcg#3YGg-@LrALl<i?|!7WDeN$7}=RyY^o|7;DL
zura^5-bjyfmrs@9G0ACi_#@qDZ<wsvZS}wtO7dHuCvZvqG6}iHbB9$7C_ae6#2=~1
z^xc$Rr+%pQ6&L!6V5Chi9~SP*noO!==<0fm`H@*256Sy0!%IRg%3q-KCUCfaZWSi@
z{_Mr%ay2nGN5MO^8r;KAL6)qIOY_TcETA1{2F>9Z$t^^fpos?>&#|4J5mupM_3ZFl
zb9V;_K*`>C8Gt<?ag4dI{ZHtt*MBpEVp@AeIaI~M)EyH?PESm!8xF$7(H}DHT?_)z
z6iGXT1u^>1q)M*GY<I~g)wt=b@UjfP4Vp{gw^-rF&ThqtpDtLTapdEDaFg>$+fdDN
zCDhT;F>p~rNA@kk3c5`qApJA+&HKt_ZE*wr`)SUfKi-4A+c*(?12LI<N*=d6)v)5I
z-|KPpe9hYG#X=$*34HK+XvasS_&U(gg$XvmCy<47>K%1`N=iy2MIoxw>4N<ydn7*d
zTBb0^%uQ_i?xiNQmM4<u5zSLyTwGSAIpM*C@Cw~J8+Q!L8jcrqn8loahWPoF0Ksei
zwn?JtLEc#qxV)u{K7LWWrt02@?yNq2rrwQ-Mc2)ke&{Wpc`I#gup|=-1D}8A;aIn8
zO>oHIcE=8CWVOi`J&^pIqliQst$o^dvKa=)+Ty%tmMf)%k&%&=dEWeG2bU}cSs-yZ
ze)>ymjxe&a>M`F|M7dN*w^m=Bxc`4sFEcYUwz-^Y9bCo~Y~sk@Xo@WUq{?IQI=)ux
z$0xsC4Xeh;e%YvM$8zg*eT(epgyJ2JP^!~*0pO6?*>Z|KW2vJ0eQ4E;ivgn<kwi>4
zJu)U_%-Q+KUh|->)af0|V0;kO{)y>sk!POCC*jt^&yZGHL)fYgE=Wi6<66js&+G{B
zlv80mLK}a%$_3Q))zuPk_5XhI0Zr<a*=jI)0kA$t_d0rg3ks@YYpm6+LVF|a#t76S
ziLYf9QD284_R%**FQyyA9y|bngbRW#*vjX!o}n>8lc?n%BN_I{-+G8I_jJX^G-Ozp
z{VP_mO}<mWvk+n_THs1R{W|@<)bZ<nt@U_c%1LrPduDUC;yl_JG9l`r&ACp=b>6<#
zpHA-aG>F_k^A>6(O9yweYX6#^jIkC?Q&Uq}{s*BYK7G#gz@7NtGr1A^A{yg|5cglV
z{TQ_9kt4=^tmx?{bNZg1=e8}6;+6qx8vt|5YRO%aKqGz{BWV}^c?iYPa5z8so#%WH
z5i58KmM~>4{5pPaI}2&N@3=pnL9k_S#Ihx{?w9+=KNQ#3pY7J#y)pUL*!aTBI6c+^
z=5{|}np*I~g|Pqqe+xAf?v;4*cYv9Ix3Oz7l+SV7!7c0BVq4h>+!B~>rMM{~zV++`
zk*z5hG*OHaIYmX5Hgus_WNO!c&ldOVnaF(HI!<B+XB@Hr`d8Q0O{S;&n=QZcC{XV4
zCgZWJuS$GjCdv)1Nwo8luv}Dk5e6zK<}0qfLLGyN7vH@bEzmKbz35RSoU47SwhKD>
zd~=XbrS9AA5`{Bc5e;HVy2FD1#d{v#3T~9h%h~5IF(97s&46Ru{SwyCukD9pliBe6
zKM&PWM;gvorp^7Go-c&+3c;=7L)1NQJZ{-<Pb(ce{WcGFcQbY+3k0i#T*Y#BO8M8I
zWZa_DVYgu<NXF;S$DpgJr5(xNO+@|^VFG^9;y4$)<(c(A3NH%24U5)^jH;py^y_1E
zaec-K&n8A``{W$WAfrM6h|bj_ZRrv$$Td1kt&yoW1~>;|M#C`LFL}z_!Lkh<R|NJ?
zCa1JCf@u_gahGcFHHR#}FD3d~Ck4z!67hYw$`4BuhiPHkOuq*PffuMCYRCfU{n`73
zTiB#ju%FHG+33z^r2dV<$2q7dEVPij7)u0O_bUE~p7|pFbSU;|7&iG|#k^eXmiV!p
z2<s^Z3rr#8hDD<q-*FXh`=nx`VF!)wbxq}mf5~n3nNMM-V3r;%4`R+=vD98r@2Qvj
z^v`Eml{`8%^I`wvX$74}woQ4xIY!7Mjo^Rl@8M<^;|zmz!+4xF*O=|^97vw*BL@sY
z^Bo2p43+;F{1&DS{wlEaKp^9=iAL8@>+H~*Om!_S{((65-(UjW;ccF=)6=~TN(ZK}
zz!|0WTMd;|E{oVZ1sy1)9NseioENWm(?o-bN_v9idoZ44ZDrcfWR#NbHw|1cB)iJS
z`@b8Ln%P~C0yACp)JObPG59#qgWtjuZR<shs+Q#=iEKg#0&wyih%29!#@5LebHC!T
zT~vM3^H;XSK|TeKRc1b26>X2(d9~-;b&q&eh<Cfn5iSVN;5M{XIwFe+QGWT@+(k}}
zOVhwu7;}^f<_&kU;GZiiE3qR;y5Jze6@rpAT;{Ng^8;~NQILqiWt!2Ro7s16YWmGO
zdHV|7ioBIyU+!AL-OVk-tX-b)Z)%VwcUt1c1$X#u8kS$t>Z|La@9LaUAPs&1MaORd
zbl?Vq6&ts@;KpK7s%s?WPTPuF<T|ZAKXf~ms(qer{%&u|F4Sn=fRLMPUzz^T{oHbu
z5vWi36xaLAGCU|Ai~1uo``1Hk+U{sHSR%`vBu>{1>DzevyT)Vcfd6e0v`}(PR&!u<
zi&!3beQn1IpOHmmGK$M&#8xp@{PtY(ud4m{A`J{eGrCp%bo!nqiQ&TWuvoU&SOI?H
z5|Lr>0z<6OeuK))XIyuiVlVFe-1;K^?~i<o0%0lG!U^_QO^Pi=%dfc!SY<m|7?A;x
zULLXb>oz_V-`)5}%0KtJi~?pO%Y`YD&gA$%Z$G<%uzN5I67DGFX$7|(oB7v|%UZ#@
znr&Od_-wAD2F0-oxo_Ik)ijqt)HLz_a+YKqa>fXbLbqBzY$sLd@Rx>>k&}Nj>gRTe
z)dTYn1=^(6!jJOJuxa9Sym+?%Zf{+h?kSvvF=r@2604bKRryvlyKun@#;Xi&QUTqH
zgZ1c}c!@z)!(hcBt9EtJwE3Hd?ZWMbihemBKNb2h)5mZ*WOACDuhajwte}H^7RjTa
zL)iNs%S4kUS>>4k2T?lLEE&4cf@Aw_TY9zJK%t^BQZqTpDR%$94m!4cP(HNGoJstq
zM)#NZ(CIZ@C`UX=FhJ<2?j(kvQpB;uJ2;`+IrBzUu1mw5vr_BZ&l2xho8lk)!+*Q<
zv&x+5bclh7P6cNfl#B~CZJCS9o><tN`^myns@^AV2;cM)oc*p1+{VMqiT=N<dtkvQ
z=zh%p#L~hP8MVZxy%e8n2cvdB|M<b~&`+Pk_kq8Pn3db@gJcH@By+x1mQIW7M&4}1
zRA3B7xA@yP;<Cy#C+9hG9Xx@ZEZ+`C32-gb%MQtpMbABOO{h&y`urY~*uw(M@KN*<
z$}dXZR*(7q$jbH)Ls@;S{B6I4%kr>D7ybC>yw-=!`t?IEDIStFD&!iVMkZvm#();G
zZyX@w<b1yg^{`eXXe_Oy-;s1BU<n2ZybxUY+ZtNn8lLJ#C+QK(jJh6o<$Wg=@6+I*
zd6=8<tsI{4o(JLW<W2^^U)MWy;uE88;F@^=_6jU=zFqF#>92igP_iElJz)a>aJzw_
z+FOHam0lWdE`^YD6cxD%P|&34KPvYnbi^-VW@h$&P@560f>cxqpn?ZksS##q86O7A
zDdHkt4x^VCU7?68r@1gt@lcleiHf=W`N5fH;M`H5hmYMqBM9~VJ65P5)L$Y2Z2m;7
zx-T{BAwvyLAwj5*T2p3g>gwDx$$M(FN^R9wYq-p*A7g-B`xVTsTOrTn8KMH@Bs8E=
zkx1POS_n5^TEnQcniZgdb{P(P2voe1z3kcd>=LbM*6Qtq*Xs14qR~o<X*^pwE^EcY
zurYcLP*+OplXHD*eZ^tzdvkGQ#JR;@#(wHN7^6E~?*m+NO7+$fIN%`$FT!|2cL%-Y
z&GOk#VxpIX&^h#Ol?nIn;QQB!yPhvO%5(BAg4%4yqNKl%4}%@w=8|H5V&cS<#7M&g
zL(Ou8rqh6>`dfDw8#Havv(Vw?F8+HmxVb`(+CKZRCUj8=_*<Pm$pv13i~q`$Ln@P{
zwc&XtL7|nCieb2gDYH=SH+(c0><8DDLu|~ux@BE_N?J7yAM-!aJ$2lr?1pI|V}yVl
zf^tJ<r?an}fi~dZpP$zrZf^7@805G=7=l5-O&}C-eD-U7>KnI}0rlM8Ya*q|cm@SN
zsdBl`;jpGBQ~6~7o30bYZbf|r#pKSGeLs^28k~pvp&Nux8t5Sm<fz;Z=c(?#z&NWB
zD{?lI68~7CV!~^TPlRUljRe8z<K&XjK#j+lbho*Lx^&g-thE^yvv{ggx5Vz^8Ht%t
zVM$=1vSC>)cb)p;QHEJ1Puw`~9@Wn27wz|n@QEeQz(x_%wjaT!D@vRr;b{K!<#_t^
zF*wT6@3|nl4Vc%xaI4T_$8vlB{2}7*4@u6>jjN<p=IP@+DOcpgr}?Bnzj%jmY7<~3
z7)BS|+us+}`HL^dv%9;C6<^?YVRu9up3!?q(0ffZZKmn_=VkAq#`GGZof^h7MM&TJ
z4^^N$T^%PVYp)+AN5Zqv#IFH4y>QclhQ1}ZwcYA$Vmu<8Ao)tbeV!(*qoZ@lJT7|l
zCaVL`#UcD{mRBA>I=2Z;7z-fvt&5Td+z32Pa>g7?(^ma}v1+~F;vMMF?Gm9P&~bMT
z{R_j(F<BN!@j=-S6_yj;?m$3>FvBLEbxb@%w_`D2Z}pA~*CJ!AmNbS!rQpcU@%bMr
zTztO7+wVIGKIj3Aq%^u!=yVmidrCa_DL4HmijsPB)B0B!{1vkYVXU$*gg`jEDWa4&
zEk9f*`G5^YnZ;L)U-5r668HIodFzgkr~g-?@h?TTTaUN2`5aF#)?z_J^(rr<|C@sY
zvi^Fv@aSC<O0rw|JE}(x3a`FU@tm1f(3FziB$!9CilJj^O2(wd$=m5IG_-3R<XUok
zgXObmZoR!QCki-1hiJi(EgaCbYKg{6rB_9Ir@s8>!p}l4>GrbAT4OqEgVl=B&y|i%
z3*H0f3#kcDIeR3<(({ze{rMkQqgO$kZv@INmU%~Rqlt+=t7_u&`bb|$${vtNNU)ni
zo3nPLVkum>Z}D=Q%IQHc1YROS(eh+}6Y}B3H{Feh*hU)N>2*P3x6o0N-~6G^WJr<W
zjS)CKYgCncxf%V_4hwz1pe3B;+m4~j&G%5j{1`d3(N-0+QKAUaXKoa*|1E34{8;F6
zqW*2L#)lBXXXFt$rHT{|<pOR<;XMf92DQnLw<4ijI!oI&_f}CP;L~XDVdS(54vK{V
zH+bpr^GbWFK0bqxav3iYVp`;fo=WHB&3tf4wxzLo)#z@=Qbo#sXP3{$gM3XkA!x2+
z?G$_NoM7xEA<6!fTqp2gY-VP2u)M7I`b$MUZvb+M1NGGJ!_wsyA7-ZKFbk1q)H*#`
zUy#h?4Ny~fGSb?syQL~R-$`~S6(l}`HeEK0U++>C-K?NN*$76ybPZ&)IU;J2<ql7k
zgI;#8+DUvKO~_bm$&xu|QEtJ1HW8YO3s4$|-^HN_>nCEFITYvT>cs!st-+6jA!Nf-
zUG0?|Yo1~lT({Er*IT!qI9#@Sb9pS5kaSRR`{9x)zCJ<(`A#)-EBv&C5OW`YL-NVc
zy;B}FZL+GjjH4rG*s-GJaF|Mz;urak45q*c6RJb^kW>T)lvB&i4YUWq!~5<@j`SZx
zZp#4@%F5ch!u@JZ(k>*VG=GWM@WjV9`${ayZkZDi5e#Zi5TyU(c~NA=*z!McOHD%j
z+qq5g0R3t%x7^E;xke7f-IO#o%f7!rgW{6J1<kdH?aQ?Y*mZP0A|B}uCl;bxO8>_F
zbY*=yhC_xCr0JZHbv25@os6uir7N`9ZY+sr*1`*YY89MnJEaJ0OWKiGM4XjC<I-3L
zJBhH@AzFHR`n+pQXVYPGQ&UR7@21ahY39*Eh1^kly)6Y|>HPm&IKAmPIAg_`9@o67
z+VJLh#x?^;B2>m4@#b$h`oDhS%P6PuST`m7!o!BZNuK1G+b*G1M186Kfrp|-WFO^H
zaN!~h0<Y`q7tZQL$a6$Ni!At{@dYBzxTMLE^;=uWdU8Xa4o=WiL*C=e|A;ll98xSX
z68()tnIq4wifSEO{5g<;9M{wDURX(<!#gVm{b-Eeft%5`=t+2@?Dn8?e4L42kdB|9
z%RTsaT)HtjA@nD{lOU;7P5&LE4uv){ATEnS-213@0tjcNa;A?P{<+-;#nrMO`eZ?#
zsXYL1ClPeptTktyGqFb&NO(LIe+Z}>P6#_bcJZber`h<}o#`Cy9sZNU>mC*hE358M
z>>4h&Sld|ir;UfJG+U;i`y#pflHa@Uxo7D1_qXTS3vYr8?-jvuk5PqVc|WeK6XlV@
zCk<c>EZK#%r<?9!(}G|eP6g`q%gTkb0-Fk^Yc=b<sW|rt0xubG>B;_WNg=oicPDp@
z0(21w;-8LkeX^JZG!UpVzN*>yZ07^ZWbAMKTM-PE1}my+7(nhZo+|ay8v~oqCi+l&
zpQN}w9Fe0BRS~`XLr`{%Xgt+_TIK6#c)8vcD)9uyMaKagGS^%#nI-c>LqjtWN^QSG
zY;*SSUapu9kU&~L{*1IQ4nCUsp3k`{@HH(6pUr0S)2&CG6Q18`<D5<Bv+(g3x0gsb
zSZFNhoB&D=?<7{Gxw%S?kC?b!qLFy~4a^P4C8pB3JY*-sl3hQ~b^-E2l0&w}WaIBj
z@Y8wC=>nPjiTp>fJX~YGZo`QQ+(7TDz)Ne$|M2mHEc;+WdPIi~)W$Arx5DdP7=von
z+u=}F#TUqx>J2EO)oS7ID!X7Y`9bCXi9Fw&iFW)ch*^yGliQ~sWlw&G5Bn`moJepI
zvliQABfBpx=i?Gq5_-N~`3g<yuf#vqK6Ll@T&6UK6HEf3;eNgQXtV#zpC0A4kFs@I
zOk4T^A0&LL?i^GERJ-2G;7Maz?9O~4;Q1(D`zzGex;fKv#=>Ub?Vy&6cZ~!ntS)l@
zrKRT!o=fOJnR$cWA#_TKA2fnO)|o9FxbMl3E7~3XGS4LR@c3`q%kC`J%JjLgNjNaU
zP<EVoC7J&qtg3gUKY1aJpyY^d+Ol_(V4=&$HJ0vvI#B`~;eTQfV7AuR^Rcf^-S)E@
z!X$8Uof3nx@I^H<Th0Zax0l%Uo<wPC60&w+Ajc<$K-HzY(^)buy42ZzM%Ae1bv$y~
z{`iK<9>dU`e(1)Kde>jAGQR)zn_l#U$idT0$7_+NvUyVXgS49M+D&fOZ|-?n<Pw4!
zx`mZGW`<ZHOI5Cdp091!P^TM~efV{kMEyA;i9S}ovf7xIY-eW%sHqulm95*hBNiY|
zV*sTmJ3G{fUs>78>+@-Zoit6m3(|hli~a{57X-Q;)TkIqj#=SiGP;KU(^f*kvDCRx
zs|Hzf@Bjvd`iKnIwZ)Be92WaWyceKZrh|y|xMuI`Xl-Zlrs&L-$F5!#UC9oeK7aZa
zxu^hZh~n$+Y*G?i$XAI?zAXln2M0xe3ltWf0tv)kNkl2h*-S~wUg_c6s&neT&@M;Q
zx`ic@Hn(~PCZ#mD5l|le_3_6z&$?%CIf;?g0smkvDIzT-M3s)cKM0K~!~B=D{OoUd
zk;OPNYp6%q7Ir2*;dq~sIcN+VYe=m^N^+7WlQ>gS3dPOoJu07Q5$2vYTHzB?=oEem
zm&J$j1A(jZI@LYAzNpYMJIq7`jRrI=_w2M(kmJpbwQHq^_p57{#mf8NcZJi$q6Z$Z
zlCYp_7*7uW?CsMlnH<-3-<|F4t3j&qc6tTmjv^pO;~`d!k0~4D;xhhZjt?sM$&@;_
zzV{s!JcUtJN5?zfI@|f?+0Vl?fm8dk^68ntPDT+c<WK<ux{g@rr22q=JW9!N<~P66
zb&(xEFK?^WFX8~2xa*ganHg>EHj`zOyBKG<s$8$5QTZxsWbou^meGRG&ODel=BE;#
z2OgVY7LYyUCM)_tyoOsH7BnYIT`QyH#$Xe2eOFez>C`n@Fiu0kBri_m4z($7<8@~u
z6+jj)#vv65Bya%i{`ePy^!VzJJ~;wGK`1ac7S7QilzH?BO@fP>_=Wwix+a0n#ivGp
z{^Fn7AIbCa^HY`qED;9Zq+Lp@UH9<x^mR9zWBLER06to!@G<R5=I{r%Fp)V-{@gNX
z4L%g|h02H8^cz0Jpjl=JCS{Y>(9n>|TX{gPTxD-6-3=iDeeBwBM-T(dA`uo}wgiA`
zOs;sXIJzYDY_5+7FlML_5sh1d$4lDMkF`E%+7K-;>*GZ#BbS#2Zprg}yUsj$mhj99
z?GX-4B+dbUUqN@P(y8f77R@_Un^*sb=Ub2i3`#*k*)Sg4gIq?samk(mZAU1NXbWB3
z&dY9)C?7qi>Gyck%5~`>S5~b^<U+HI4WTr9(?}F$h}}5BJ4m`|A>ECYvj)n}!j%#H
z2Z0|9g>;o#p`9SmTXC!uSrL{z1U#WQ0*50;x!Yli@06o|1MniQ3yz7Wd>vw7A7g@u
z+;k%nGt*Hukn0Q3jOR3x`k0z#1Xa#TuAHqto67|Mhj;%gPw_rOORJmyq4&`(@OxC~
z5kD!Bi!{wQ%09st1`VKp|4@d#V|n-I^78atf=luWq6h(agUYhzxg^b7C`_7AyALTJ
zazoQ}w%yy_xq&9PH@qR*%EKK@Y@n8h0$26Ei_c$d&8!4z{&@UL)Ir<yEdZtlqvcoX
z>KivAHxZ$-`V2X@abK{t_^Fy`aT7W~2O~z<ISuEax!OWH8X{@)@|xuVD9r&&l?uK|
zb{;oWbHGEg;}z28^bo=h|HCz^%2d4J?$Wdv$-1eAYhYjy>rMD57g_Ww|CiFHkmF@9
zUCxfKI}6I|{}ouJ7Pf7?8^NU`X3-v@%p;M)z#VyUzX*-g0eqvmBElc5GiP=x%7T91
z@EoU`NipT{t_Rx;7idaJ9o&@|DzEtcndQcMG_jx*v7F0lkD-<Ls@WaED#AxS<80g0
zr{h1EISkB0ERiz=_X4y~9s2y5dfu*E*aqvmn-Z466xWYjczuHH>%y1_6yjK4BK#FZ
zhc47dD)?tHqGEj+2xen(R-5Cf3`9UC=P0^(K9xw9W4lzY@Y&Nk(@<z|$6J5S*lO@G
zgfcr{82chnBs#JhPyqkXE126cc)|Y?;lk<h1_NOAo#ChC9}V8mF|$+uN`xKX`n{A-
zM9zyS0`01u-{xzEXxMb494MO&Zs~}9d~Cp#sJQtiToxP3g*v`^J$@4z6;5N!8tkZB
zj%D%@Ug8>(`uxeqe0<n%+MJh-u?_iC@`as>W`=%9Kli>A4GaRoL9Z}uZBp9%swaYF
zA6F?kkoIRSlz|bR2#A4(7_M?vkZQ?B1W^gDdnrb+TGARnfkfL=HGzYF+viGHqlzL3
znA-RiUl9Moq7*z)XWM-F1ex?F!#53&ISn?>en`~JP12KDLa4Hp34Ung<tnS*Pj>t^
z%2+hbikOaQmY`(?Cd01aph;ND?a=lhfd&OPnKXlp2wXq{v9Z5H`H@WeuYm~$gO2pg
zBL$@O11x5cv@lf-v(^u-uM5WRYXJL0T0bY~dVnkY?m>i7gmDiXRC3WA@rz2bAjNWE
zQdyETOTTxKa-_`!2Y$4E9dRK}=H=(Fa#rI{Lq-RXjP1=Cm5AB5W1WI<MeC>EEJvdi
z5h^H7x%t=fpH^L#sm(FKu^~aNFt^>oS}g-{3l(A@=kCFH4*R1*cQJ7fQ-X$O9Z#PL
zx9XmRiT0Wad?NpE0@2_Gcf`?3+B|t((<Tp;BFd@Amo$K6dJb9e^(fkYum%>&3z+N;
zYZ#FQ?ebGdwCy89P^;-9vwr@m)$t%u|Ms(a%3!693_o&Q$<a4kt~d>L7E=oOtVuo<
z2Kq^MNI|{jc{0{kQUB@G7`D3Q3O@abd+z;&AiWM;tN*O7^TT(gAHS7#m=f*L#TD;d
zR+d~o49>tEQC|`}do}@*B<j>CnTWIvAdwYS0m|2pQR#XHti5>JYUE~P(=K?eTl0#L
zQ88uYwT;LQxQcf4&EHe&p6_0wL5ksSLWM+Mz)k1?e`>2%Roq1O2YU;R+UmpKjjqhB
ziH|kL7}S_w;rs_5uJB1XO?yP;0kyeQ`1gK1#XAYf5&#m><zq@t=!HD*kJjBkp6=)4
z=*?YqFPXG-^2wp^;hPsig(EI{$#U%6WS?dPnud-DebGfL-Uju<5=V}hlTV4qDzye`
zL3`~fu582M8gPgSwzYE?8yIF5h<oCY+*BU#RMGV0B&BsU**mb%i_kgJ+pJeFLJ)Y+
zZRRyEmafoVT&K*SD<7lE>xeb|ShKJ@sYoJ!kMEAt_j7T$Yl4y|$Siln-9aZ#@gC3{
zRdvCkCmed8vB{y>%6LDd@^Z-n5;EtWzrZb@#WETYPk9Fi9J>riit$+{8wYmE<qu6B
z!}J+Ay#M`KuH&k5)o7P$V$v;O_)6&RRS~J5`T-0fBkZK?qMO?}<Lfw}*RIt)g1tew
zeg&oH(`hn^OVR?s?XP=3!MATPx21c#IImpJK`GIPr44Ln&!|k15aL1bCd^GqKz+LL
zHeXM+uxK;_?^VQud|VF24geqAce71Wp6#R30K@39hWVcdz1ko%EKo$$m}ka)jqDjH
zUy;i*K~Gzi1pgw3w;Tq}eAa9(Ykjw${Yg9d;yD=HeAnAze6)AsAc@d`mTOf7Xn)@~
zD;50tqhX&xmTw>&aLI8Dkj(M2nv+;ZIKr41LK#a>w%^ss4i`{Cd_Pf0^5R^)L}0*{
z`$I71q;Vd@W2KN0js`cT!$9Qc$+s|Ohg!mjP-*A20W_!~6It2ld4=FvtM5X_j!>4v
za|aI*)Dy`LG^n6Vz(lS9V6|Jnc)7b+i&nf3a)l*!jP7M@;=T>TB6YC{H;s5ay5r3z
zH=x}Y>SlEOIf`K!IC{bnh>-W!QYC*SlAZvJ$+Pe<*9s6-@lSF@Th)H*bOUDqZo-4_
zW{N?t!-BA36Eb4$Oh=|)uzljERDn{)XPvGyTV7Fd<E7bl1PUM!9VSpcVASK6pKeO9
zixxj`q$iteavrf@4SsH$#6UAJT^xvyNJvE=w7h6ho=Uy^&iS9MFh(lb(r=+f;YGU#
zQ;z-5sL*D~l|Z<FB4V#lNwBijkH!iZ{9{vo^K4h&W7(@D^c(>!K}eSaEMg|0`$YTG
z+M#s|U=6d5zr#p2LkIy(#0O!2qx(F)D@WX*Y|Xvh2gdlCQzd9^RM=Hmf<_MN`E+a5
zU5>1FR1?IZI=<}>d8I(5G)eUNFa3>Ehw4r82gU&{sC*}L5<UTr3JVY_=cRiDt;aib
zdB7c1LD2Q0zH_LV3OlV`9i`RxPbSI{SQYC8s%CBqmv#TtCH+!HImFV_WkncqTmEWs
zla@8s+BX!NkhSX(D;OCvoe`^?qj$YUu)(dQ$BfEa&st(Tx0_CFsn_TjK|=gAcvNco
zkFAtmTNi^aIr_-3!<wcz0g}<UerxoQo8&L;PmY{i*U4+tA_?Ft0_*WGyhC$+iy~)7
z-y+U@Q$k;!>-X|oWgdwRMra!&nZs+DyKnZ;=udn6gi9eP0BsQmgR(<`BUqateae@r
zlghRA4)?7%9ZX0&d^0#|?KEx4*pkpuY+JE?&fE!DLwwUfOk{T-0_hzO#Ecw@3bxeA
zbgj_6(47;o@$J{mbKN1GCd<5#I$JGYN}A69ae1pSH={rcz@uD4lNY%X1<<sxx90-O
z%jZVHf<tuR23uav3dwT3&Kk-O^<!L>-nc0K&%^pBJSaIL)TZRv?X!i@7u4bGFN*js
zAmHL@gLB2L*@9?Bt4}oXv)v07szE+hofH(agfWO(ryF=suVMD8X+rv5|5bh0%qX)+
ztG7t3;2Ww(1l$(j^UdfbYya{+n4^l6RRUbwsj(^Rz+YuRM+N1)-2C}Rv&a>QMWDUJ
zU9SFqe}|oSSIE_~uC6Z3oQ;kal9ZH`jdVhQkH9aamodfZTHDl5-M<FPPTSyP`_D5+
zFu6k)8OX}k?$)jx6f!9uNe}>bn0ylQ9SbctLJb%C7rr^;m;b_XRAj4V|CGgO^yiI{
z67SpWXxor0fWW<>HcxI<mzLeTuG7x<+hq*ahK|ML>A<4Yr^|V_Qzd^ul*|)0S++CF
zYSRA-bgu|Pe1c81AL{Ghe;p;8Mm+`KRXoIv#Xb}T=0~5?Hm7n*Z?L;ESD`HDfFly;
zrWAknwRUoB48Qp{t}wt48OdeigXWyhu_*=JOo!|C^XTp0m?%s$<73x6h*c>@_X7Tx
z1l=&f{r24xq9fH7RPVrj6YX~}0AM#S{6d}tM>)NGqsf&z%EA2a;yof2DR!bUldd@o
znwF>^)_+UZS(sh5DIS-OZ8$Y1#-o^|F@6>de9bXmU+c2yG!<p)fk49Y3GX@bQaBKZ
zjdJ>USVFZ4jjleT!vQKtl}b6Wuk^0zA6$Pb!3l4`@Iq`|<FuwW=4jdne->3`l?K$U
zJ%D~hFNwX%1+^Z=Q(YMAYZTYO)#sCt0qXD9rPAGyqRK~p4p0-o2&uxyMs_FpI&kqU
z3%F?V?u9IfQ^G(-f#<Z|vh`ueOYez~JwA4RO+F(m3RgAVsuCZIf64E7aADg@WHDSl
zGNUBnmVj~n>8u4%m8`GEcDzN?i~Q}t^;@Fz0ORtHwdp}0-ZhYUL_!3(OO62N+5?&+
ze4PoAm7592lQ7i)Ej{&8Q#i52X`m2F1^PYdW$DMj`Eh?+m6-AMNuz3DRkbAP^LRip
zK4({+V?0C7HUR{USI8#uX@{MXip$Ebr9Z`pL4D8uz5{zaV=}9rrk=;)>mbBS=%RUD
znOfi^P)@w-EPE(vqix6(vnzs6LdL42mB3DA1ao7f1#5>fu>Qnm3gB!VTvfeI%751y
zncaP;cc=WAq<j~<uk;qI4!0>9`a(MrMsj*G`54L=k!n{^5Cd#N{Mv+an)>TY<#?{=
zOv)Kvjq&~L3S&?I!=v<a2>X9U4QJ;03`mZHUAK1AY3m{kTX!T*54mT1j0=%osLKmn
z{{o$VJu??IzfAswV||#q9eRekP`E8$HPIq|^gFJMAPPAjszW+d+&?#K-U{N((|(V_
z=-rXJZ?0e9!Sfx%;%)hp8N?qEnwFQ8D#|jSKDjkzmkQdP08$BGb<L{4VUtoLyUk8%
zXRmjhZ!4h-1vd8NKUMPc=g*Gn5(_dDs2Hfb|1z{2gf^!S+GzIf>#$q4MwHVZ16Ne=
z0DPBq*p~Y^E8eVbmVFXSM+=-hnj^$OoC1Oz7hMi%{`YN2cvK71hUVUBU~gR!X)*Ot
z@OuG@T=s}iXU}k~ZRRh5>?&73y~tmoUgNNJ<BgoIzPSpJ`iXXaTA2$<Q}6#Z3qTyH
z9<Wl;+5Y!{m2z~<s*I-0(fQd8Tf8F2KhgvUL6q96+XHSMQs8okca&=}r9TLbb%MF6
zHL>Z-$%6o^LjaFA`#QxD7wDelkd1AZ<Kk@)IH4wU^iJN8U(}hLDTi+eay2xbFz{{b
zI<am3ZB;y$5X0YQp?Iul%$k{8%l)g&-hXk(b|OfDnO`(NxL=6dIqU1V?|x&L*3;qv
zl4IN-Z-e&xjndvP75G1w<M7BcQBdeNliT^#m4!+aJJ7{0x<)W^wAoufE-IU6a<c%z
ze1@lbKa_rQt1bWc*w{mp>MhW>!E<>;kdn9ao0vCsy7STZpc6yb#4rh9kb{Hppo;@m
zR_}<ECGbY1N+nPZe+RwKlcI&2s~|!$Y6@2mW|^N=BBJx<1iul2hV#4wBniiqG}ni*
z8hHzAv;E-}ITE~KTS9podjG^JhNRY=r!KFj{@L`ff4)7cJNj%4L59gI*hH$Yd|X9V
z8&eIH+h+<Q`gP{E^g*9Ka)6B)Aq;$(z_zVke<~fsP~<neFSD`pqTcqUks8#{PG~QL
zB36o@li7|Y$Nyv?r?s*zy4Pmj=cAJ&iWU#JGq5fwVQ!h_qn=+X-9t_gQ=DmvD~=vd
zC8b`1NiPkPsr!fix-|GEN||P@ze*k(4y=P({K8sZ*a{%$0+|e%v437}!{q#rM@pci
z?`#?cP0nZB7!oW2o4^Zn$X&N)8^0aoZK^Nag3cp1DEucmu2aE+Z*G}5Lq3tbQskGz
zhzR{;hhvVQL5B(&wa$g{X}Y?)`r-@wRp;)#m<<zfA?q&p57(<IFxZl$=mB=gO!hbD
z^b|u{V&8@DpTrR7QV9wUhw(`YV@x0mah8c7tsdv1ne9T~W2wbFz_IS>zhA}9Q9*?X
zJ1dQ&5FBO-HJpym1k*s4v`IK<CP<HL3`5|K@<ryyDk0D^SZJ1i?8Gwa1Yw~6hiO4I
zmZD|9hTcisKl4{)$Oqy9<59gd@(!dIdbs7SiFV4prSqK&Ad|G9Iqk5tvj{OH4uTlU
z=@Mcy)5K9h3^0dr@E`F$(oD`GK4*;_PuiCehatcFpA2H-U>lr;?C?5p2<IPh>ouP3
zb+o$}2A$LU4&yzi!OC#f!kW*Y?U!Ed=)4IH`nqs$*GFIoQiKAymFC+mxmo%Cm`aU-
zmUJTh-T!#Mh>kQ~+Zg4aJeJ6m*h>nr(I3)^QNl!0w{kv4vuiEdC$0G3U4d7@<G*Cc
zajw>o?@Gxwf}%*bod+>I{oe~y_^N?JI`S1uf=D~W)CWbwnfO0Srg+dhe4r`nuSj}@
zpy4o%a;#yOl9!8_vp~+lxbQ&fkEGV5S&`q2`&0rUx9dryleBGGC$p4XhVoxr1T4fA
zk6}{$mg1ld?pciD!{z@}V0qZY;-2i!TD2O``G$$K=c#iBh!JhLs`!20@?F{o3c_-|
zoM7`SE3h*GdL0-#E(X<6@Z3u8&epg!OolFv1{=EwV859-v@_}MJ;b8KLr%6;@Ugjn
z$AK1$<oV>~3EYW6wjfvtLjG@yM20RxnjEd*tXIa)+mRDg>!-rN^#cKm3N?7LT<c!V
zW4g#h$TpoU$o`iu${mQUUNA<GYj9>g6tXF&Zeb8-2$UPqv@AOLlvBgy8nY$~D^g75
zqJ1Ux99+CLE(v9ed?S$d1+mxI=JWyh+W?0r{*R-2s))GV^Hj+YIO^-Nz11o6mBPoq
zoy~Y@8q~4;>zBL{K6dNoAy@UFx^u2_>Bg)7d~8Unmp(>e0sRs3$`LgDFdk;DPd@{$
z|Df_9{XL6#Bfz925~frI>M+Kdv855XKk$$i4_809)-83Q{PRb%SFW$>x$2K&qHfpP
z6rp>2dxm!0*njWx2S%Pfg4m)1g}%}ZG~H>dU+-V7lrv#tD~G=Sk9qCzfeL;z%1Om0
z)@A1jMSu&e%VhlCfzW`zW8}El%#SrBYpPv%SUkr%Y~=pSG%zv`)3AH+e~$`_Ky~e0
z?f?2|<<LV0f4N)#gg*QH=T!Jva4!p3IKboWu|eu?^&>Stai9MW20xfgf-uqe7@ZnT
z_ZTIX7pgeZzb!QV1s4-JyuCmfO&Sqo?>n`8f4xa_1Z8Zf``RPu!~gZXvZTm-<z&%D
z^ysHn!%JjlM?(z~ZKt=ENB%w2R=h<=6--}R`w|4;-7Zj#|4asQoi3>;{o~kY6~PK>
zblA{ertPf%tJeVQEEv7S`Ji{82Sr96WGfvHp=3^jyAdy1vo>njIDpIt-tr1|vVEy{
za&k01(O3RVW2o1C+qcQ6hL37J&x1#j<^blVJlBtg3R>%2xW96?qS>aUzM4o_4W@Jj
zuB)l^<4;+|^aO$9>Jb+3L>UBkjA*WYcj@3&qSkoqSQA^!`4jv+FyFxs(ZR^vDg$5o
z3!y#M8D5P--!xnqjOP$DBW+Omi0rCk4P>$Ggvci+pJhihlJ`dg^7!cjn+gjH-D#Q^
z2PBF^LSJ?V*Lz^>@ILsLPdH$TY_x{7-qfNJ%Zp0EH}l#Hemp1o56vnW=c4LsrFk@U
zXYZqVi3~p?xdG@QgAv(LNlh6|RsZH=0$2)$e!RBG$ylHO47XdoZXylV1{;4P9G=V6
z^}~jQ4ush)AG&*!=ZH{3#lNl~E!+iW3qIx3y8n-+ua1hk{k|0#N<fg525IT;R6rV~
zySt>jL`6Ul=?*~}hDI7hy1N+~Vd$Y_=6>e={_cOQH4B)hPVBSKK460I|Ev%}s!YTQ
z_+1<h>((8M?IG<o8v#}VPBM25=gq6Z(`U^h?;(tdxM;IF6jtIYZoeF`AO49*v+L_0
zYUwzCju?h5eHeGva!@Rvcy`q|0$P6oaDC8GM&mA@j%H=V=of%W-@LXJ_=XxM23)93
z&;{cbJE5@Q7ug22@?lo>|G1%Zgh+{$)Z+&5tpCwVCwT?pMqm^LvyNH|1IJH_GT<Rw
zVEqfac$WSB5Am;W1t5X=51$Kjp(PK-gL6-&*#)Y%<wpPsLa!_N<%H2PpV0cUsG0YA
z*1h&7WPJxG+K)CEt*H9TOG~B`Ql{xWj}KX>BKiR6jjS9?vo*;j?05%Lz6!MRj-@Q_
z#8X<j>P=b5%DeyTc2G%Wy87CF8T{TkF=$c!?}k)3kgU>_Q$+>V{>GfCIYp!1gG{(f
z{UlJzCB(z&?XM-qw(mF0{^_rZJi!HZ8M0bcB0Xma?(FQWfe+VG9A+@!?CDW~8jWnf
ziY@Kxha>s-0k${pxWM_z$YhI<LH8#$hU<Nm{G*}In2K|AP=!<hv$9X{o0+=Kw$gE;
zgx}$NEzp_8aizLc<q#OX(SE)^OPBBPrRc#SZ2y&3$Eg(yO1AH@uK3xiP}wwl#5FKG
z_ojY~EjOt{nNl!g#tSwojA_ul*07_-_m>Q?vl^%e+<xViKcM;FwPrCN{Y{|H8gvTS
zOu8jM-EAWZg{f9;hl)|8r4zs7;N5higD@ELj4N!j-I($9d3sUB#v(E6D8~S?EC`xF
zgw{oj!*}e9wqyH`{q%$spz}9fSBm+2+YVMqlukgCOoj(k69A6FWD-CEu)|10L&F@E
zDcj~oubv*L|IlXzBuW>6gqeM%{C{C>Pk#iRy@cumo1?EFb5tQV%qX8+N9WjUd6{$y
z+p>h}KLZeds_X=l0$cCH3jPBEI|Zzg@8_S_Ey$U^YVRApGcX{R(68<O>Zy`#Z|+m@
zYl<-S*VW@j6lE_R5(FN`s&8zB>(00Ie1vAvw9#_;M?tLgNj;QAl|SCOYmB`e^r)(s
z5s4&Q)|%h8GO>sogM(%;wVpFx?<YDWSh(3p;!j+d3fKn%ny!a52X#rIbUaVObLOe>
zG^1yMgT?`Q;Z?WvD3VQ4kcs^KuRDkah}O=la}3+)p$p!XShf}$NF}r`c2q#&OdlN9
z_HTP7xTl2wE`2ri3|ZEqMHyY#P)XRJ!=qTuK(%lKY<{JNayULS5o2B;jhn547RMTu
zIJT?hi7FfUmay{Q7u1Ya|6uGVsJLVkSfdJ_zQ2FErcSvBH!MHT`)}+0k*rr+ldUx>
z<Gp|c=rI4f(mtKt-&CKnC9Y7IMP14GQH0drAN?<Efjn2)rN2_BkIO_Q5V{2L<s%Sl
zYdE)ffVoXVe+&oWA)s+kL~;E&z(NF`Ju)I-$qWDZOtO2B2%7GO4FX~iDIzSf%HUWH
zYHi4=pwQ;WFmBLA#@xvrVGKqrJi&`2V0|~I(8bn9BjTL{qoplLTxv)%Za_14xC0M7
zvg5BD)dp6{$@(|C=dXW-QdWJD{v`kpXj^LEyC-_L@s@ZGXlAouL!Ko9`+{*EGwPD%
zhSmjv<(*ykIO_i>f8YKWkOjJrl??F$G$TTJJCeOPN-BNxj+M+Bd+x5@yq28whs2?C
zA+jX{uLx2vTYs8RYow1GZaro9k^?-A;|-U)EDOc|+%Fd@1#7ispTX)1l_MGX3^Kra
zn<C@weR+W-)u>TxpG-%5>n{It1AKBtC^Bj4z^alEHa0ldmclmpJE-=T)b02!;dhKJ
z#4*r0@QwzcZRQjO-Z;)KX`8AwsX(a$>rBIi*N#{<@qs(>1QqSMX6WsztYy2D9-j7G
z-6e^#(8G5Y-X8+{gI~NjaT`b~A=ei?2V(}(O)L~oYsvU24lpiX%=^5Uzc_e#7C0|Z
z05HT@)nurt5nLuOTN@7iHfJS&o$ZxrRS7(u1I!9D_Ql8>^C_EmW)vS<i~cF=BA0X;
z)&<B{>6Ikj$>PiHlYJc9n3F19*5JUQi|0r6_V!lvCq7@Qx179fX5d^dItpkURom(T
zR1OIex`4?!O(hx@h0HRd!qy~a(Z75+hbZD{Xv8F)@NNK*gwC7@g^4Oe7t$@Y%8vV2
z&uSF&U%+|~dtiIotl6^VuFUecOQ0a1V39a;IIvo$sE@)lL>8!4?boW`zH6Zq&Ns$6
z6^o6{#^%}p2%0*YFq$U+#6g-`astiQ^GoD-$>gEB7;lX|(r?Ohji1s~0+vPybOi|w
zEw_EHckgu{t0p9H`d|AmE{eA%twmp=J9qNIgR{UfNhIKh!$2)9EpQQYdc~(D<2NnD
zzt+-zx)c=6VtPitixk08lZg;DduFl#|5$#M`c;kyB*5hl1^Dl;cAUzwLxpZ8YTCvy
zsFj@7Q6>tbEP+DJX?R$lX;Ue8u|jC)!D|T%%ZbZ%C=w0*!sg^ezA7GYW~<?X<94j&
zvZ|LbH4E#4TofMua#7rJ_r;LP8i>Zlc`f_H{spP-Cl6qVsj<o@M{S@uamaG25yR9m
zZRwJ(q7`wCu;D@~OvqGWfg+yZkZ~Oj=}dtBgVPC79q*~#qLSX&l)zxMfM6#^#0a2>
zg`$E52r^&<_Z4vbATsJhlE{Od8RT&RG1Gv=Cq*5XXYzln-TOfGE?gt}atX)nqP7X2
z67-B()|_V#zsQQ8{*d6AsFBdcUo_sZsKBG?d-I>%EFpcKb<g*MoQ;V$-$cy|0qGG@
zOl#8Q5=?p;u9m4vl5I87+V+e1JqY!WCB-7Qs4t4wQE{P!3_QVi7w!Ab%D60F=*&q_
z1T&T@2xs(Ebs(X)U||$IA(+_xn#>KdzM@R$xB8j~E50m|FLr)zE=TwO6rw+*ge@Ii
z|5NhgrhU=|sEiAVv|1260}8SuxzdpGMOZ4A$x`~9t)qj3gW9kUsgL0D++N*j%=jh{
zypPla{Z~d>T3S7auZ~?BXGqu=Pt8ToEHU!K&G+du$M-M&7=7?T(U(Z;Ch>A&Y3UA(
zWd2{W7AEBX%h{YvK-YKp)Rn}h<@inHKmA)>QiZB43;EdL>>2UN4@O@M6Ff|QB+(yU
zFah%yn7J|e?-T|BTJaOm%F8^ISmq|;0sw*jkkl36eaGJP>rcx)di&ZDg<|?kfE^ho
z!-%SUmqT3ob0_)2e2d4sD%-7Dbz2t5JG@joRtn5BC8L=xHS3SKm4K9F=w&q!Hen8x
znfq_-?(X^wGri<yKt1rii8t<KVYn_@tr9%q;S5#I2nsc9toiSXu%LGLXvosGTGm#5
zmvk6wDNZYe_N){hWz-hC6L7CF&#$e)O|(W%iDJXzl8JuKjx?rtb=CpxmVcag)>m~=
zGlm{{94IZzrI6g)5W<P(y%*9946l&Z>zH6d?K1e_$zqRXFQ!2So&$2t@9FbAVdC$3
zvufUXzhBL&0j&V9_hnuoBrq5?-*dNrI!@7z@;93cE%T9+&quwqi%9S$=;M4E^iHJ8
z54&mZpP%twiseiOa~?eM<RI$~V>+bnv>1By+TccQsW=YG{{Km?QbZFCTm$20Qj40r
zaP1>~78dO3hSAhW@Y*4)W;?){s|nrPnYNyPGJc-BrGvew*i5TA(7h*-hMwa!velSl
z)vi1sJCLhZhq473U2lhnRXul`88PVJrPs9t0Cl=`LX_;xP}X)zlPN0Qa<Ro6Y@-wp
z;Ka^BANANvdlt$g;a+2HlK$_5IiJx=t(3!YMkzw{AXvBD?5F{;x0@9~#T$CpX}Rh>
zTtbg8s{<|%%pA=`r@<w6iUrUk3&7HP0$0r`YI9+jv$q6U906#4ZH$zTa_OUs(_CiZ
zOE1^9`~K0_z8+$ciLJ-JkkBMmz1lq}&IgX?#5ne6ldIrJ{}ntJa)$L=qSB>ppcF5B
zh2W;6_eYLvjSyv__c9$S9uTGEf{;vK2hA%oA;n^AV$&K27=|1Y)_R4U<{hgvE342K
z5w7h0#*;SwdFYB<UO~Z@C~K0&f9b}#)1t|1wD*xql{~ZuUM3fg;`S3)b3x9cKfkHa
zy(OIAW+m%yunK$xQsB;os+yz@q+I>~0teuZ^a4(sl9YSBo1(!c^40vdA-<fu5J>Wk
zPgC8dBxx1q5d6r)Ppq-kmzkomzFvfSBn~e>&$M|<IFyL~boxz&Ilw!rPUyPb%SGU^
zf2MboK@F(Ao(G!3f!#v#LV|!A3d!i`=+Tazpy?K@PjVCBvmjCEi*2Z`Qu7R<Xw=Ze
z$ZowS5mPiTlG}`u=UZ;(t^a!p=(-Mu?WwXQgZI>K`8E{M-s5MUMtleI7xUQypbZBD
z6;7mSdC(x%1Yfy+>-`u!H2Weq@K}`lMA3Ma<{toptuXMouKdnFF6A;hE54N3Kdp7L
zG25s;WMcejegUZXomb~Fp$>m~e%Y%1FE9_=jO}irntzf<o<%{e{B?$JEXy0?Z1P;C
z|CNhWurF{m4U5%d#{!^l44B_iyGYmlucFn2?L5ozB@oEe+N(b0XY!hkZw>Xyu>i;S
z6eYV3oU}o=G12-R!#J}ICprwE`-bNg7@c=m)%<-sCBTqUgQ?~99e(`wC1+J($A+&V
z$GDRNQiL#n%cICn7XG)+53BzPN_IblQP>Ih_s~=?=<;(XlM2eaV5medbfVx-0Sz+v
zdXD5$7Tcb#LVRBgK^FfRemn4N{UbQqdjV|0*$*I6cg+b~3LYK_RGTZflQzBJn$*Nw
z=1=HNGIO%@*9j?L@xa>t7}fw@(<y+(G%uj?eypgf>X7`Osu{t8QeJKCx$~-so+D`w
znGaX}LqAd?OrPtyKhmgtBUlJLX;-9lw_Y3cf^nT;g+CB#${E;&6lgGejJA0z@}(Ts
z{Os5`Su9{SQ=Y3bfzINlch61J-HF~VMZd`e1Y7hDGm|)tj!L*6gp3;S^2!~<E-R2g
zCbEIypOj^Kf{&EA4DY<29&7V~!hFOBeZ;qQS?0*gKnB2j?FT}o?wP7E3tt%CF;W~b
zUZp{0l|p}E@><h;RKJ1@8iP=QKU9yslGGUS;wn2RnqQ&KM$db@p~$9R9vz7OsZbgo
zLkpkXN6*d8out7szOi_B0hLl~O-ppZHDq-mn}OIqorut2oC5$DF19_!<o(WC>l;9q
zpL_60xhKCj?%%gcC5RU#xX?r<O(Uaw8iR}D?pLcl4NNLeo%~<&0KHulkgeIv8;4ZO
zEIykdQ0m1`668}D1qno)=u9>Jv5j?aU@L`x1R@{{_oK85aG<gqP1{t2s(J&zs;gaM
zhmgzCMUqk|+ufZ;?wi-5hVei7RmI=Pumql%UT+YD6v}mBp-3u?l;eGi@B2@7y%p;p
z#_bqgw<h%qyTxA|Z4{Ec-tYd`$xF8`3@{tUuf*kk0$}gd%RI)~Oq=_G`a?ShJ(pEL
zj89K|xfQP6&}vqOIn^GTow*<UE2;DN_}DGg@MKernzHi)KsY+0p8#5r@*n@1T(K(4
z53Y$pa&n?~h`;&x_?TvXG(aZK1OuEXmq&gG+sLXau40-IvE$!cV`uh}RQdM^;Q-?A
zp85as6U@)Qt-@egF$@G1KDSd+;jH`H#p(*Rng7!H?c$bPo+DCZWmwV!|A$s|y+du3
zQmSBS((ooORa%_uxLRTa1p(e~2bg+*D9Qo#XbqJ+*f^ZnuGS>*{RAF|9hNpA;v&jG
znh)$Z31|l4Taz#_)+DF;=jF`)YDV>-=5Er8Utr0{IFc!}eT27aZJmeUO?|h)8Plil
zG?GiLj4Om2wXc{^#ri|c_IzpAhIEtS$C^5UsH&DkRo8M6L-rZqj&Q=;gRu+WQbi<d
zhx-5Up5rvFHV@acs%b$Wn!V#aU)lrdT(@5e|2<qL^B3@(@};7_1h_19Vw7$Fxx=Fr
zIvpDQN~z3}_B8l=lzz4&@Ld^z#wS>H<@?L+E6zs8I{DN_h)birETDb04hr|h#Qvhp
z)7gdHfc7;@%=<tJjo1Php@0-Jw+8|(9ZL6i$EYmk0QN_S!bBdT^%&Y`_YlJ<B=;--
zbtDa0zTtbFoVP>qYCcI%QkBk&)NrTfe#*{s5B3k#KU!Oa0u837%$l~{d?!-L&cAa{
zaJ@Q$|6acUROXN`{wa|rEu8;g`PO2iA%sKc=iM(^sc7~|`#|G=(Q`avvt-qxs-i=T
zD(jPqv`4CQmW^{W_>VHVZ+e_}823zAN}8DMIL%VLJkDM&3YZzi+S3z6b@~5rOfRhm
zlM5dQOjcM!JoF@ofV2;o#)0-AK1yIj&G_QrUXn;k?REhO`2~xDfYu#gk5mBO+MUP$
zUemyruse8)qxoL@qMz_qg8?mn&RrlmASs=q6!(bE)MWkhDmycQKl0ZavZLnNTv}g$
zAUEvaHH&2QXH5>eJaX-zT-E~Fy-%t7VJ#&f6MR!cFD7<m^dUn>3S8qhh7=UcS5TBp
z?`H!mT<?~*0`%&?OqO<pQJD1mYl`Ald>Z<C{hDt_)x%|>8i$F(70+mK(}TsJV${$<
za&ZgOh@HR!2v96RGdux2yjIv0we3Vq-I`YEQ@DS9d--H+08^xbs?7D^1n5L{$a>_D
z!HT(%#l+O`XB1wI#qQ5Zkq5j0^5Qg~;1-g{mFdzz)hbdgo#aq5nnn2L<vu_D_G-GY
z2oTV&Tr2%sN4w;^>!5jRJ^p7%B5Qr&@Zi8Op*cPY^banOR{8@US%(Ul>>SkBvc%vN
zDD?c}fn#%-@)s?y-Qo1V;P(#*7_`#I<UIAtvjx1MHK+%!QP#%hJ#cbjt66H+*$mCP
zf%(Xy8L3~7BN)~q$v@bv$mhT5LGRO9pLmKYmj5vQl>RF+>SW5pnB3H+{>xJ}&m79~
ze_myP8fElD!0Nyc2B&}ooIU&V6v5^QfKvke0$p`t7~yC{BYaDo>=X@o&RC%AWdN%0
zW>07fj1IZRbAJ6k@y?_zn6trl^*+K@{Te>|tMx?B0S@tWF4}*|zbr<oYr9L;Z%Q=L
zymmm2NC*R;i8(>k^HE@W%+DEw{yWt?9+dW!3(?A37vwdbZP-@Vd-*PNuJsM?nY5lu
ztl95cJmZ;COv$|i_$?8jOZv;8zXzxLu51+t9c-oD<+d0sinv#kVM%<Nt!jHq%`^#^
zArzGCJu??}?ChAJ(96%2|0V&l({EYxOo}te40NH&1ennCRG5*a{Qc4FVv8=LlK`;#
z)oI4jzw5Kp@#Og&!<DY5j|<^L(HVdI8S=vC$q%9a%LjjP!vBDh2z*Lt{srm>w|~a*
zYt(kJVYju>oVsQb!w>D_ZxipClxk3|J5?J!Cz%!R6@m9$LmQ4)(;ODhf@f@RTZ%(s
z#uTM%46LYJ#6s3eJ&*jw<{SHKUaxL~W?X-Z{kA3J?#>Xvx(PW_i69q(Daizj7vF}o
zm4Fc_*^%GtgK@y7?RN$)ILkIEl^QOw{KWH5kDR85s#HHGfa=|HnL4Cd4F*<|g)yh@
zN9{|{cJPn;>Q$O^W`ZB95I2GZC}&UC@Wy~QJAi`1Bv?_$tC}5YyHqkPq;~M+w!kH0
z0>I%4<>=nNdT8dzEu(CY&N(q(^~+72XY8RF0vhom8GE$jD8B(dMG`>uM2TJiFDV2Y
z7_@|r-JdO+V3ETLa<MVmob|tPHL5Sne_eMf$?Gsx2oNW-F*7N=%1(pV^_ShtkF9bC
zd#)J!oU#7p+!dd<(Nmt-wjCJX|0LJgXfMG>d^`Ph#3gF^_bdCM?pLG+$O%YbqpMqr
zUo-OtOOi@&PwpGdb)6dCu?is7#=G?SX#Jx?L$cJ7I{*<%9(um6roLmMXsLGpV?UGF
zLi<!Jjt`+IBYvM>4cuxE*>#*og;LlA*k#r>k!$qrtzhOw9uQ)Dl{YVN)kKtR-FXO(
zX&feNzF;K9Q2OjP1%dRQuN&Byu&ZA&7P|hAEd$UfTfVGRIgMQD8R)-yZUF4VQ_#iC
zLwYxzEHLlIicgvmoop^+Ms&PvUTWV0E;{!|`RxMGegdz2JX*z0AC4vGr372e-a9Ci
zmzBkhjVdrrj9`rb%~jt=vNGKz-t2w5&U7aki@CFD1NzrXOG_DyXa18AjK>QHEQ{pN
z`z*z}GuOUynm8kyJ}n7uS!p8)9H05M-|kxhOaqVL)mKM)#XifBq+*}SN96+cnetVm
zh^0r<>=i4%7dK^xw?_xLiN++ZhD~BZq|n{2dZP#6;Q$!YpCNhj-*`Lk_wpa*NJjkW
zB`fbUvl!@t?y)N7Mvt?v2Kfr!*7zPgka(#!LVZtt>pGmg`OoU%p@vGIG-!c&BpOJC
zg};3KnSZglmxSB)(|l1yUeW`Ezyr{#7Paxp;hxt$kxvK~vS)5&cQli%L@mH0=l<Gj
zEU-Y$$mFQq<-pTrR;aW=N$;s)M}gC5`hi=3$<xMm{?hK&`F+zfy)|@QIyyWVNlkO!
z7`k{?Ksu|hQml$=-rd{a=a(ZsQrtU;bqu4){8f{@3KeyWy3y@iu?X)w00=xy3_JFG
zcG~Wyc($5%ABDfvfi5@)qi+!HaBUqcxg%b_Z{S=5i<lh^8+|CKWo=qRhS>HG9VVA;
z+5f<igDKR`Pnjvo!o6cCVqiYRn_vj2z7qfXe<54|*2AJM;XzPn#F%{J&}*Qspb4l>
z#Udt0kDHmIw?mQvUG{N0>?afwe(kP4i9E^8u{BoxrlniVp43?XyP8DN=PJ!#lj!K<
z8BiU`X3I^88ELYX=H^lg25=(F0twmea9>CUT%aIv+?r}fa7s=UN-1ZCfwO)5#g>jW
zHby}QIMRD%ce7GXj2ZHSPE1u6sB_|d5<Z~vDt)Sx#PRP`Ia@kMoA!@&<m>8pcfCT<
z0E7qlGdWPw%_T+yLuE#Hd;HjoVJRM<$o-wm_;)q?m)M!|vQhVlC8{-MisL6G!AIB8
zo|@GVwq3Jh{V~WN(8oyAB<mOT^6d!w+y!#G?r+MgSRu2RPmx~nj6P1lY65R4!eOaj
z2*5t^QM?uO?^~3Z$P+#jS?Wz*rq7FhT7UB#@VXkPExN`>D%OB_<Ix2Z=_arvhs=2_
zf53@y<>HP<%z!0WkTu^ONiUd*^o<p}7r$IBibJscI@A`Qu>s3HQtL9~Ak_^cj<@t|
zH3q(ZEX#E3Xg0dvSN!JZIiO@>vifcP_bdx?W<k*;@9pbIq37=<>42=@E!Zr-0;bqL
z2Cl1H)24WfkO73P&cU!5PNl^^KvaoLTP_#_D>ariQm(vDw*R6TD%anANXb&YdzN4n
zasQ%0HY5*o=;>~9`ixa3_v#+?;<R)f|LvGitP*sx*?#YJ4!SQE$?2xa37`fxG9=Qq
zRzR6F;--!fKi~*hH=s*y!F6_ihz-q~=4p;lr7GQsL|XN(Ah~~-+Bd-Mnt;68MJBl9
zCujZzJgC-Z%pj#i31Y)AOcnoAQ<R~@K?UfQ-m<kR9r)<kbKSyeBpNRHF@<(-Ni&?U
z05JgnjL|!!YF?=jRK+m!Y8u)w?&E;^1e_T1$Ac(_3E4LDne*heC|(B*6iIC%4KFGx
zBJ&16@;7Ox7VGZKkFenV_`*J{rRIP{wFuruhY=QDs}7~a`gp~X7X_}@InT@)C7zeG
z<xW=nwspI?WY&F*9QxRS?NY!EDCcOOm@;c1VtUw6a8~zLbBljRnB@Dmp%dW+l6|;s
z@(IYv<ETOLe(9I@_du@vqXB^siD5S%a3x$(Gak*OE1!CEwT$YzkRG(G$*H|XuKr0l
zAC~=T&k(uq5LWn4V2`YT5OgVD7O_rJjzo8Hus~6t?sCckH^%?niw6s%12|*{P?av9
zDfVyg0EVW_`(RUEME`^=aq#&iS1*NLFIMoPyCehA&A3x;h}?Zm6PS;)SFQh2IKs-%
z<{6jHSdX`n;7vx;<7&_7Kijv;U1`vw^V2eK(_6Khsln74(bX76GLuwV<(y}v$Vy3}
z3Lquva%Y-QmFipx6@x`MlYD|zNi}ZuBwv7&8Ye#^Xa4=$@AOlyqYm{0bdJ_Em<#>-
zp)@CBIe`-8_jFTB(0WMj{Ibs^WpH?azIZfj`W7lED{pm(_wsvZ;ImH?`B3bQf?5A-
z-&vfZDr%CJm*_xZT!GCo*?bybAx{i5J8mvX%a-8S%h-kJURfaKM~`x6(w&aV7ay0M
z&dGnoCF2m^#!9^zZ<biD{5R--y(f0k!Df{3*xouOgx_BTT`obG+MN&@U9)Ihg{wJ+
zHX77kvd{R6y$LA0Y%<JfJ27thbgxd{Pa7IE`w<<d#h0u4CX%J!O#9C$P~61?&?@IR
z$FAf63a#6mG0YP$dABJs!5aaCs4sIJTq}`Vn)6vF`=;xwN^at2hx;Tx+>?iV!@*I-
znpDUp8>`-El0LIsQ9w2*9~c<m%w0IxU?Zm2uDn+!-BPqn)-IJ56X9a9C7HVbe>1gq
zc-LXcV3e8WD2{n8y{67w)Hvn=jO<(b+ZIpSaKAirOsi{eGL~97A@rbjij?tz*M8Xe
zWB!tVPfE767#Q8vv(%S6<J;zmQb^}_?dhq5P1{YpAkAHqqw|btV(`S2n%G93fRP-7
zq@E~N_i;}f5>uQy^ijqFOXRIge?^1R7qL`h{p03=ZnZG$|6a*gB^lu&J&*RU*gp<{
z0O1%Zb!M5XmMJ8e9Z2xxLv|Nd1Gd5fF~}v!x$(<Vq?sqvAP-$(;g^^u*VO<up?bb+
zG5IKIm+rh0kv7>uYG3OrR#}up7LB#0f&zxLUN_~OaZE90+6K`<o^G``wis;I{9E2^
zr<Avw95FV12}QCedp2EuAES;LD6FuXO8At%kh<U&0`J#`=!LNB%8OCfru@U`IBm_q
z0O?q2TA*@)SmH2nfwUKTCyr9^PYJ0Re+0GTOW*w~h?wDmvb;Y0*r+-o-7Iu-fKYn{
zc^>55xv&V9dy2Eoo>t*n50CqSXurHCcwDoJWS2Cq*<uNmm-z;-7XSJa=za2Y<F4QE
z6*j*|h&|6P*6*-rRiD1|%A?YX(>RjIg_@YE_D3IiEcz>*>>y>VD;Q3lpv0Gig`NYc
zfse!Egn<4h+#qVU0{Qv@g1iZL-yK2T*be?30VXf7Bv(SehqM0q11b2mSaHYFD3&IY
z8*k1M&UL94V!apo>_PK=Ps4#zr{R0p!&SC2lM%edZp5N=sn4^4x{^kQqtOYS-<WlO
zSJy;q{C$E&jb*c8m5aYj6)Lm76E+Bc6)K^%#z8r!prxt*dFdi|miPMhqm!0l32c=`
zi!avTzXNBD=mOM&gb&0{8M0F$rV4_^(XSd2Z>wj45vZLwG=+DSUO5NE#yEc+?=ce7
z(IJm$qIc3ab&m!2z0}gNk4Hz4G_8IrhtSa2W5|7p5PU|3_5=ey8Rz~PMOeLgLg~b4
z=P8%h^iP}n!LdIcF7JR+HjknVH9J^%uTnw-Z~=;`dJK?Xm&B2iV+BFe%mIK2Wk&6$
z%TWv1w4ZE#_$hK(`X3XC3uU#xler4-0Ljo8$mjx+`7CEzK%?+{=$DDOM#S9_f`}1q
zztuG2*WQVt%^vr@gsd1DW=6z(q%y+5=anE>IYNETO&X?sn#P23ln5T33SH{(hGVb2
zwY$@DShApi*SoFcd@*rG!cRQNG-j>o_3SRZMycpskOMBfp7j#wb??V|FghwWS<I8%
z#8eh=_TU(h^SEZK=h+(`<Kl;7Mkmi>UyxAnv{x+zqyXP^5g6MJIgkYy+sE>YlkVen
zre+B4YwZGL)g4d<$Y9&91%|Cv=Xu`d9%+6An&aulL1n=Fm?6)Hzt4aKP)%kqz|Fzg
zSwMPJ7Ik5U)R=`oRH-Y;jrpUV?kW}IDY_XGtYJSe7>E>p7@)s`G!U_<KO}i^K=M@#
zNtO3D3><1_!FROcf(xURznoWPL}z~mpCcR~xMR(0AzmQ?bJ`!eMJJQM^^Yag-Dr6Z
zuluBci04z-olg;^ds22{Q<<ccg!uJ_1iMC&6q0=0rH1OLNBjP*|D+zvHSx2Y=v&wP
zXf94I%&=p&J3E6G;@9sDz2!PeR@fAs939nJcg(bGLge@pIkl%IsDBOB0KE%5%I1mc
z51qmXHMn+2e&O`o+-|Q{yv--INyPYCd)J^&>h+dzYbFkX42q!d%QrFw`rYh=zYH66
zDhy-VOWXaU+81--74=IQOSuh(<yV$Cl?{#!mu>+yB+y@`@8eM$e?%+vVqg#262-To
zBvdaxhQ{FueLA$Yv)f(SZ3oY{+3t;qLQY_9;{Z@NCIOQ~4p8R738xwcj0tHS7BGGo
zOO?Lb8#<@Pma&jjtf#>nGl-lWUf!kmzT)~v3x;sw@AHDAV$#n}{OP`$dxK|)=Yx+r
zTU%S;=-F`GEzy26;(L?y`||f3?;q$qVE~oK1ar*mH$tmK?4skk-K}@6Jy1i#sMrp^
z8IxGNjW~%FN$<d)|F(Ax%!Cg|H=vckno+0Q>(j7@!G-QCwqWfm(?d71Rvq_&Do47f
z9B4y<eWBwX?_!<<)0TBnMVnxi#Mz;2CzzFw^s0`At~hrqhTXKps&Sv2cKixn7_U2E
zO775y_u*`Nnx1WCzs~7QYn<R=k&=ohQ`o}6(=xs;tLXI=3{ktH3qOn(f0W^=0V<NK
zkx(&OTdrtWlmnur2k7EO1>JF11C6g%^I$UwBF=WP$HaHldzOQYdZ725`8eSjTJtWG
zT3A;|xGr&#of+JBjuqI;gO~9z$?x_sGO)KhDJBZ4B*}~Mj&jzgP7jcpewx4$m!?&p
zz%3#+>F^&xKkm@>uP{AAI|HLpU?Fqw7|D!3$ST4z{T;)D`fdTt%r7H=ZJdBrgKl}x
zskYPph@|=blbdw=tM)13FWg*im6r|0uS4Fg&C>{~hdl|GdRkZlA4$nwCRchK1Q({A
ze7_r5@SeWSx<fO-zn_}esA69BHlv`^ERwn6l@`zmMXRaV1FF^9Pa*^)b&keQ1R%KA
zcWvohiP;Zx&dz8xfDZfLAW#{>0Q4&Ly|q5o#LT(d&QLN=t(j1g7p9XP5EOxr%zf$z
zfpZZ=9Zuyon@X|Xcvt@P|7!s#C@74%sc@YGpHrjWZeC(8|A^wiB6tA`5AxT7{@@TZ
zz|=DfzVzioP>LJ$wSgR2t3@H`55ag_goNQI*w&Q6iZt~BU#EzL9`3IRug2?9Zy#V|
z4tA%Ez)n-J#=q-`q1~*%;*KzWv>-|_YV~n(k^&2L8-05u8*m3E=Lm>81F}KCe<Lie
z+9R#**IuKEy|vKjXR!R`S6whnZx@(864kj$radnl_U0>SiS>h#Y12uSrzOB-Uew*Y
zIe1~j3ksm#A|wL--5qEAJ7qEI*j5PrXv?F^a-#`9^fTvM<i2BV$INT&@IN%&Pt-Fb
z=Z0&A7sQDjbW6HaW5n(}>}L}8#Zi2E2|}$S91wb#FyOSOM`gm<Rt)V=TCrIKl<xtx
zIpY<uI?&^CbraHH;?s&Bw2l^9ekgUR2>ksJob9s2Ts2zZi`Lv%%Np+<uU_5fDnWqw
zG;@Hr|9afo6h=_eDl<j~NrLs!W^s-6kWv&qy_+v`%3~Y1(Vq>ck#qt=wQ_M2y~Qxw
zVE?8pd)6w0GrjC9hY(ay3(<hn34FC-0`jYlTZ&$OoaLe^b*{m5d6LbDg_9l?<j4|#
z{VjEdt7H*<`&^>VvyK=AHJEfjsQ~k`8E2FTI9v8`<A#k9r>f?nWV5UtDs?A?lVe9F
zqu=hRK;-%G(1*^s9!~Otn!25Ru(N6O$*l!Kzw_K_8eaz7a!@9Iw^L{W*dT4T_;HfT
zdy6^Q9F-I<le<q5MYG2iaiT(n9lKyBva~QPFV=WiZ)D|;h;zP$DS@8Xf*YsZcxn>a
z3}1D^$0cCydUCc;^1DgXg?&EEv0UMX+~KhcHcWMxGz#h?(E#*__tB|cnA6V8S)k_`
zTb-#9e}-OUX=e5l6x7P+17zEw6B*Wwa$z!*=pp&BN`p~P!gaAE#P?V_XQEY$-dc`k
z2r_6%*zkoLJ|*6x6?R#wZ%XOLj_x8xy{$UfEA}fBOeEtrT>%fHHraR;EgRL<GRXml
z_Zn;a0me;h>EXnDwA^%3%gmUFTA8}-cYDD6_mu)_B;kO}Ck=_2i-=<C#);E)^o%=^
zUQX$mnT6KaK;W(QV%brfkV%Pmtu}j0o-6wlk==i`YI2%52R-ACpNB@C2Q2&Dh?ZwE
zbP9<w-EX4L%1?~s@ISS77i9_sjQ9(YaO0dkcTVNISk58&S0Jo<RXVdaxPg?$p@V_p
z6unH|2I?Yr<tTjLj3TGcqQ|T=B-ouKA`bk<bK%RVOrA8VTlxKMKfJJVRtRfbWqQYD
zz^aVOW9?B7sZhO9nnQcB&(`JNlSes_`y|{4XB*QnGy(U-)iZ^y4B<s|K74lWa4XT;
zid_@^qbnSB(G?+-YSsDB<)HN_T_D%f_^s;)+L5T1Y`y>8@oH=5q(g|op5%S<`!k&W
ztQR9bqI;d<u{{qUtdY0ode00^1qwvjv)DR?_WjJXEq*ub2LQ7(D&gjul=k5SbeiJf
zLMAyZECI(A)YV~tllu_XRa%_WavBy1XOan%nMIY(hEb8}Qok{H+-uvP_u#sU96r#H
z2HCQm);O1gGk0o988n+^Is~XkeYFv${&c~(>j^4c&6TO6#d%wb0gI-|E<0@_w0eu3
zfOs&S<`<-P-*>Kp+_Jm3mE+U=BHivfmk_1STZzCoEU?T};6IA0cd#uVX^aWPk&{s5
zcnq=ajn{XJji*l5W4JQ@0DLY9^rkzzDm7iV%xB6~Xhh3n>M&IdX$rBZOzBu|9YfdC
z5(%9W24zSCX+!YTB^B3Z5LO3vlCOcQHHRb7z(js^@g`J7wNN%pW)vjkyugz)4s`<?
z=>MUYF@J*2w>g8qEzysO!Ffq66ExyKEo%fF9TeUx7TWbLebFddu3D&twJl!8qIRZj
z#7vufB5StLW4$)j(<mSx20V;lQe+(|hpNeBV$b!Ji&O;BinhZOYOkCvJ4lT0y3L$2
zI<rSskQ~eNk&=mOk&P9l0`F{JOUuos0}7+g&6f3#IJPjH%8tic7M9VqY{xsR`(&^W
zHf}~2kd9KE#e97j+TN5k5^f(5rp21O`bq6VKnEO^H|p)5o6FhDDm%b1j2P49&YOwD
znn#s@MX%v}`}Qp>hgLeY@tRY(pm(#)VGOOUfP6CALlac1<~o|H{+&E2XlF4bJV-&h
zb<|+DOb%fNJ|7l+)C!o@O+K=gzG`@NKQ9cJ^daH__ht6sLvVCQ3Wve@vd)EgrW6U~
zn8GNZ4UV-q^>O_;aBQTpyE2DU>XhJ(hX{Saha2_z*FuG6`(EklyBdOzN4@HTp@8=q
z1CDG((fksCkbNL_j-$*RKwF@j6X|=aKZB{bW{#@WsK`r*kIqMU3=3Q^{-s7@_Ck*$
zYz*ly!ev4RF2bJK3bO;>DuDSk4^z^91Bj#a0_MzLQx1_ufCojVAx`!;e_V6BcAXPh
z8o4>i@oHtH3d}Md53htMx3h+dg!bkgTn!+Vza7nr{WF2**iDiq9STnnvNOZwO0m4@
zn|Wjva)!+<Jgl7iyY&f1VA_greLjzw(*0I8vt`kPUth6`DBU%kchD4Fr#bRUUmVMg
zz2aT0%Hdhw;Z!t_M?W7P&K(X{Itq<y0*FBV1{%^*15n4tX1h@1`<GLTySAdp<C5vx
z@wW}LCIx=JFr<^VZV~LyM=U^n8j!xs0d&mT;n#dnR(_mjn-d=JYELy(@_th{D~7g&
zWWK{1Jm3V&KT=Uq03G{w9@?cgEYkOq;hQx&8|Z-{L7fZpC`v;Y8t(i3Lx&n>$SBot
zy#-pe{9~L5q3ccccqo0MC461?Xxh}?xiDe3X4>NjW)J^4z;hoxxG2E4CD#Ku?qF{r
z>KT`GZIRASSKdqZob9_l^=0+5DNiwzqRd;E%FgB|`FHN{O4p?tj&NDR0qBL=?S}_F
zwSn7R0I+PpcAw+z%OVKy{=dLrh+shKbcXMaE&sc2(3e-;N@O6cnYVN-=^=#*8(5#8
zgp=ZIf4Z{sF#TW=qm||DxJYIuA|VlUTtQh)7tRGbUwSBR6T%~y_?#~f<&O6}<Sq|Q
zs{8&SDCi-x&g?GadiXk~b9(eV1-L#>!X44i{Wr558UDGQ+``x4%|F-hFPl==8aohm
z;Ec4jT1S@@RQcFB=NQ}=E<0m;{gJFVSB~S%ht%w`kIenj(+m6_TNUb{L%<acaRd&j
z-tW%_Eyin%4c5{A(+OOnpU@3Ij6{gZf1xIOuD9{d_=@j-g`w<UD_*c|=Z&4q!0Ts7
zuVNie1<8>fxE;=Z62AKsm^SFE<5@r^ih`;}@HV`k{PrBWulBW}>_w9s1b$|WS5*GI
zv@F`BGnUlP#WZu=$qVBn3lCa&mQ|?6SVPlYG@qz6BAi@PRdASBOLDRh=#fKA75eom
z1M4+?x?T5oD{#>iZ`pB0s-q-oFi=bQWL(e~PtGx|%NP7=(q)92grca9%y-#>I%Qn5
zOj<8e<c|FHQw;7LmwSV&1MM(rpT^;FpXMxyd*^qenLGWq%U^b|>J8{HX>y06I#LCg
z`iaTmueB^mSb*1uHKRz^f6!^1Yu^$BNGASnCFM{<?mNgsC&uag*2+q-9h&?kTnGm!
zzH7O|xzTC#8b!xVcT&o`olRSPjy`~wrk{oHgU;`Q{7iG*a$RZ0pW7!Q9Z`T+=DDay
zYF2LO89-eYrwL+8HE|tXM+tcnaH_k(i-H=#7(Y&EHgdM=?J_1Re`)4y7;;;MD2Da4
z)@715`5Dn`8oM;I=q3Lvnc$&(WLfS?rSIf+eodpbgXHD;`@0@%kB@)2BZD!W@Y{;G
zY1j?-wF|ffNH0t)2r2-M-e2uO>#94}-=t9gw)RV+9!1DAp3wHGCtk?p;VHUtPO)5&
z2@ub%KM4<l`;DOBKdJy9RH1vgZpkk;Wlea$Mw{ybhO00~Z;lkUdv?7~b&WzT&h}Ya
zX_M+SwM=b!soC811&^{1wstW#gtl+>1c=Ex+NXCt7k9j~xwPhQwX9*uEq%;fz&0n*
z$8WVJ+gxbr(6W_<Iy)Ms=*=RW??>@ZxJGppVlrq#LCVhucu$tH^!((&V$hO_523}a
z0ki&}kG^Ry_(EDcfY;bL5u<+2bW&Vv1&=bVpLL-0pT5_2N97DPJMc1q5!vT=MZz-d
zN0?NuzJFb+6D}jI8t*AeLK}gIAFA3S9Zev5oQskpSpy@!1CSJVq28*(lTg&n4gk}o
zzFywz-;uR^qj{1+)s|xUTf_iN**0RcVi#T>J#Y8!!|Yy&fJR;ls=r%+Hzyj@MAOr=
z1D;GRbR8<51vvzs37w`}cy5)i->Q6SMoQ&sgXZWIa;|D%sN_g-S(FSo;$=Ka98H?l
z8ctxkTmR=T<hFNvf#fneF2BN#^~w%fA&;cV%k2jY;=7%L@pa$>oxtqIL_GM&Eo?7$
zX5V9%Wr8$3sK!_J8Q&|mo1;I~?mgPRKg#6+ha!^~iR#iKF%J0du@m~(BII|8l95U@
z%Nl1~X5Tk11_D93JP~jzjN-eqJfGm(mnof+e0&~3cyiC>a6spur(tz!l4a<nZ^LEu
zP<vCsCW4xX&xraS0&)29@184_bV+E#bel?)3Jb7KRwKIpK-z)kZ1LgarV;piZ3K(W
z)%<XW$MF#+EXUiBdwGU5T#gQW&knoGO+<-vJ#2W}j~TPv<c4?)jwt!rPCU_G9vyPO
zYWI{CDE~{n|9w+MOldj+^|4!8^PV^HbvZ*Fcy{&3Z_*b8TB3`0f!m1w{&z9|CAlaE
zO*Hjv-ve)34KZpWWZ@26ECF4*)IEPIs|ab<(@H@8Nz6VW68Mt#g~0kboUGSBGRx$>
z56_xreVVpQym$EuukdsB9$&mLS)<ZX8EFyAFAvbMDZnm#+wtMfUUYT;vrIdBG`E?j
zdgE*X_KtW5)V7xNoO&xdePsTV|2f*kyfD2wFERth4X+!Qx=-V~E3N)+Cb5_0NfD?s
zO%-F@j^JOjA)z>Ekw+z$IgJu64piuTfAAZ)&vZ@K?0JOCoa%k`$K2>ior~WK-#gz#
z2NB#hh15$<3)MwDrf+?h4hh+H>)C0w%V@mC(57SA&P{TGOR6bLv(TGn_|dKura@mg
ztzAGg`+xs^13cISkg3so=@xpVyBGr*2B&9_v5o*Zg%>K@jNj`sbfqx|R`ZN!Wtii=
zx9>zlFREz-enoW?-gGYd>{bE^0L1(krxEHj&UV%zzPhwxUGAuF5c@ebBt3HYC9Hkt
z159A&meZ(lWhqI&7a5U-;2cU{1v+)!m)1U(gF9Nz1XV@VrP*`OqJN~Yl-JMrdZK%%
z?@C8|@&U^~53%Jfm+Ns}*}LQ~sa+ZyFgoEZ2lL%2{TMfRJY=Ee$;rZhX>_;Pzp=Ci
zbOEll@x+bcY_mlI5__PGSJmd-AA3dV5hrTVh&I?5rFuThOn_}Sqwk=rrifiZfBLD2
zgD~fJ7IEUV*}cSP_y6t>MRi?9qi#E__VcX5gSc8-w>}RUbh)dFjwN3tjBoVX__Xcm
z{RC^FjuH&qZt9V+)M=GiB*6*w48~}K3qFiPSd<TS_3(&U*ZN~zn3|;R&2Qx3W+?qu
z2&YLHV#%~EdprT*FH%1OON`7c#vZrJ_0=NUBxV2{7xBquyR(MT5z&DA`t4v@gS60K
z;KK7#8-LsBd1I-q)iiIxr1^{T%$%5;VG=-{|9C1Z(chT7ee58n&3Pr4i{Urn-OVE5
z9cyI_@$E(M-|oXajge<}aZ?EyKMUGqxVY56ZG+!2bg2D^8w4FcPvdBWK1@})r_y$8
zC#d*95<lH9;#lWi;nbNeC4kDF57cz)%wAOJp<a><)Ev0Y2#fs?G@<Lq@m@V~b!@4;
zDJC1}I6|2o-!MQ0VZ5W0Cx^7Z@fagROw#R|rDoNA57DgxX+4N6-=?=zBvJJKINBUs
z>vyV`Yr$fIo)4RFxK8$95%(^q?^s2qS59i2biR65;F+d$>R<WrS9O<P;}+FGczNig
zp-GZCa&oP4A#=_n2i_SlouIqKfrQyM4}MfW4nx-yU6i=`Pfk|M@I5VzJQ5T`LC3cn
zdyOv3eRtD6!A99S`5SQC4sXbAhA@-7XXWp<zrbMRXyMQAtHg7uFMa@FF=>I0HRgTo
zN_6zGo3I;{h&LQTG9c8}aO3?4q3$pix=0%&G?`M1aEKc^d^rj~{J6;JP>O*wv-wyL
z3=G-WU~e^8s|9v+;C|5R<Q5`{f~tixbNSaj&aRzSwSCDDrmAi%Ss*wF$j^lv09%ZJ
zFfcImlbHn+vThaBxek1kBpFCH_t|Ot^ZfSP+<f`kg@AqRr4Ai<7NOUsUT0!FH6JHn
zS`_v&LCR@Q5Z1GA`Ez_#d+s66IGMGd1z|{D8;8#_aYM^CciHw0b`iOJAz_9^oT@p-
zyBV`wQ3L2cDmJinQVoMS<Mv_mDc$Q!^#NsLJ3YOP?|Sj2?M!A8@NQSiW&<WepJ51H
z{LC&}{=F3^E~VpxD_>&~^5|u~_(-#2*4R6EXil5NEup*JJQwmrLd5O+GDEz}4d>z)
z4QES*Ma&2N%@9W-E3m~#@^@0B*NJnHN%IIdA<01i$1t0@p!#cu4}i#(Wr~ce@;~M;
zty-MAr-DiKA$wQ%YeDKXGv`xZ0bNN%LkA0__}O`j;N3K?OAPnnrp-*PL))h3zJP|_
z<IJTFW*)*8$NC;Vy2<D>W|74wCKljXSLfh%ar@23pe83_!)ZD5*GLh7Qe7tAo0Z2(
z@9~)AWJ{%vXNAt~^Lb}V_gk8k8L7H_V*%%G0BNm;I?$wOfBAN25fi>6+1vuom5JV1
zGwdu8i(wUQE2v`{N*C`BOHG~DG7G%j>S(MwJ9)YdTfu~BI8|zCBNm0K4l0`LNc(SY
z`R&yx^*-2%nwUD{H0ua`gjL|+)zOEx*BLvBUq?7n8eoS1GCyad9$Bk1s4M8O0@$F%
z*A?Ad6ho1RF8;iDlot6oZ(>rokX9?wI&^7Zm>n2hd=6j44EpU=pW>5-)<ae=An2gR
z5I>K|EcRd00%0iA_1DE@<b1f=352z*EnG+}QH82wbheD%>ZC6tb4%UD(9~c=E>|jT
zNpD?lpbnvH57~=g12^&=7Z)>%W7z^xv-4USfr2O$q5&Tm+}PBqP$VjQ9)X~&zM#x@
zom*UvxlCb%yA=>UfA|I@6Wc_<rb-KJea5iwWB4vnyWby#VZiDhI2yQC(J9TzJ7VD7
z;Cr$rOzqhHsHZMIqZONx;(a}(fG%O)z1#naG9$<1>7A6>78S*#sXI{N6L;lw*c#&9
z0vDElPn|I-UEL1+vZZoVy*+j=bv?8RWTarWW~Wshj(G17_nKqRK+E3z6>vG)4&(WE
z9hQk0IRDG}+jjfnG9kiHo8&V2F`&+1rjFaGuLH-tHu_er+1BOp^1>TadXG1p0((W*
zx%gJjM<v$sfHi5g)fX}~iE5jpONaU8*LPKM7nvLmHM)K+;p91k@8Zhc>g)=?k9lKu
zZQ0`I|AdZsOfGTwtho16n`D}UJl=+9;nGNM6XB(&%@2a-L}&ia517sDid6h?*K6h^
zW~s03;I88P(sI=fq>$h_!Nx4^TYVENBE5DX)`w3Zp&-sNBkR`N^v!d_%V<r3Y%FU@
zxNHp<Ob@#CRo#Q{q#eE1715#JFIwb3*PeU!PbPdcQ}`rm_86^La32u_Ia^@vUB1w-
zt5hWgmly5v%0F~|DB16I+SZ)T6ySs&4XQ=^hFPsn&aBkM&IZsGWr3v&x*G%kgCa}M
zgn5tK#<MeBmUP%NexDP1#yvvbQI%7<|9u{Fe!BFfi2jfqYuh_u13n&@j4S0^LeTn3
zK;m*n%gnDtAybHx!K3|`1263hw@pMQ8m-=0sO3$fv2wF6ONHml3zvIotPb!~qF}-_
zWjdD6A)L#*kHrBU*we6p&Pr@|A*MbmI^!uI9#{+vCx&t#2bb^Er+v)Ug>P0;Nw!mQ
z#9K9SQ%O`RefNBM!okv$QPbzaarI#PCIG_fiMo$}BHkdSMF?Ss5{-UiICHus*IEti
zt2o)*p1VJm^sc705$Iu=F`>JcVQ8BPX3`-rlS(`uZ9FU6lvsi%&T}i*bRUs?`Z+B1
zl(_$S@7<_7^x7s{xFfCbySAF+9ocoKZD_rctR6WOm@`1>|Ey?1V~@XXm|3s-j2K+w
z75Ez6<hpLSs)O>_&fKK&ajk7$bbO7;l03$4rUgh)roT(o#!9x)9$l4<W`PkNYy8JR
zByQ7~_&YUaF}DM*NVj}ZZV73btcFQmp<&ukn*|;<%<uW_6mF(5h4wZtDtvbqV}-gf
z`|nDOY5>DU^;*k|y}WsvEqcD3r9Tm{$RW~@sQE$5qX#yX1S@px*%r6AE1U%hC$-&#
z_#omg!BEmnKMZwqJ_b~d0i}G1o5yYp88<xgZ>VabXNl1vIm$5i7_{-d@;5sG4)rZ=
zg}ka6&hbh{TPX;bidVp*qKn7>lPkJzVFg!PaRN@Dwhtt+9=@x8SYTk+Bos?8k20J|
z;OXoXJoPBkV<|ph*DEdZAp;>!#46=x7iH($s4c!XcI9Qmh2|r_S~o0p%1s0v_5Q9E
z6ik*j;Bz{LjzcPuCt{bvow{qc%#$DwS%gl?o}qiq-F^%jl$KuZ?wn(I_0Eg#!|S=_
zo|t)8*U+VI58GHEg7I{E;BuzuTeQm!ww|_h)oSyvloYuYI9^$Go|84DmFCObajYKM
ztIG-Lz;MU1z(BnZEolwGsGD<4$-+ncGDH`U=Mk-PTk*d?41^20Lqz12nXe7#a`B|n
z$G<2RX3i0p?9{0<;JCJ$%o?PUZ9jexX=<z3ZR=RR;xLQq+KUcIu%rfnji%%`JQ3=x
zG*{y2EZpPXW0cq3hXg|Mzub5$><i%U7p|K@508R40WVW}1Y`CCH>@)s%^MeU@76#F
z0#;c%TA8&R;fVQ^2_3W6fdMD*C{~dh)QJUc!Oy*#C(J?RmM*+aI+*@MLqp8ogOj#s
zVJGU=<KWy7gQWy0Qr`H~Dk=F%3OKl|iqA2-IEnIJM2Nn-C=ImJgedxJ1j?^XbCtM#
zLJ*}}Rj*a%!^XtjZU9)Cjmv#z7T++C>|HbGj$n&8cyhBa$O>MI&(R@sDq6_vQ~{L{
zwiADxUf~*PjuLNmRYR*J8o14=^X%9&OIVn!RH<UZ-nqO#Xq#`VW7^lwQHay)Oxc=^
z)S(%`MIEpk)AD?_o5`Ox%MnZ}0vqAqvo#?;DPRabE`yAkC63FL7acJ6NA<ctu9W70
zmoI{@&oM<ic;5%F>W<)U4mSD(+XhbH+ExaowBaL6)*{EtCF033G;yoz?Z$Iz$j40g
zooiNUmTi(T@?j^~+upbR{u5t+E}ftUe+|uowF)asok()$Uaw`BsvJLlQxtr@kRXzi
zeRSm{7`0bzak2f$(nlorj_<>(Wai@!2hO<>_e7o_I=x?=lojt;|AA~<|IyH<j)X6B
z#-nYE!(yhb=D=p1;Qe$ila>pI`>P|T?YCOqjpIT9PV@C{Rji-2@f>u%b^&h_ZZB-3
z5kFx&IkDS)T-^x}E3W&Ci+&Y4xcEtBbtT(Ofy=9To4jfvV=QG{tC!cX5~skU;xvhh
z-Pl;`4_nVr;1Ud$qx<cXNo!}CP!(&1&sQx_(!BN=I^;y-%!{4HE|B8?vGx^ERc77a
zilC&3l!SmFof0B_2MLvwmKG^#>Bg%FiV6tQsdRUz0@5YYCEeY5zw<DT^Tzy#`+lQq
zxfXSw=bT+<$8Yb`YMPHn<4aMFvd&*Yo7HtdDL6a<e4vO!zw}-|kWJgM1nzFnOLpQ2
z){)BDJWGc2M7x3dJ)zWr+Ziub3^td+)g9%jI5UJ*A@|=NHx?eRnJpAlHZ_2Mx4HDz
zr%7`#Xi@m&+%4JyJ<?OI@D(}Ow=HS$D<6WOw5@@+a_wyyu->v=HbWb$<gYy{WN*Am
z;DWn)v1~t~2ijg@V<g~WRG6n4GHAL}5#_qxh+7IANFTknfn&lLExm){f%CUw;ZwWD
zvc7>nz0-GbX!}A+V-gVzv6h?Q(hdP?aqp~V=i`DQ(yh4u$`48%R@)vr4LQf{ljW^E
zgtnu0AwrDYExywW{pfNF{NeLtyLasQMO56baJ{C|`FyNqk3t#UKh)h4gv(MDfXgC2
z<zkM=Jvz219M#D(e~Mz74l6{&G;HfE^v+5@+2H59krl|w6*cP0MQp71?w}=)YsL(9
z-Py%Z+cGAyHP=nsP_Sl(GO8JSY1u|3oL>GQaNEgGL}X>nvLJQfn*Y)Amqmy6<cBvW
z7!8F|8|%{dTAW3N^W4j13;AAc%th9^8%F7wJYsRua^ufRODeii^xWFn!FPu2NDASa
zvlG%dH*>M6xh5P-Uq^-Dl{?)|Oc<}_NR>7K3-tB~>W}d#=_2-K^h7#~rB->~AG$kf
zRngWnRds&bjUaL;T%&AXGg)H08@#0J;9g!S|L$=`Q8Kw?1sz^x#mM~;`qCWoDz=LD
zZ_nw{A>R?os7=K-+BrMkUw4#^Lb=?$h?dKKe6;x5l#j{4y?mpA0PbqH-LG7wFB~)a
zzWrjoGG(J1HORZx%M5yt(7(DVcMBZ)ew9btgRl8xYbq_jHC~%prVO>&;q75e<gZuI
zOql#C#eNjF=&cici&AGsErML*2?c%8Xj9>X!{n?r55PN3FtYmG_VTcc%>+*XY^1|k
zPr*xExR!g0lUL`B>5{`eJE0W$FNN`b(OBv2HxZwsi`4HwuVW|sQeVH4o_tW~Ah2Y>
zG!R{Wm`L1kaA;}h%PS+I%Gkc#Y~b8xpE9YCZf6ayDAsLhT<f<h(Q&VyWI{wWn2yn}
ztMA?k`favM1O*ho$x2s0V^xJOEj>J%dpMmj?O8KYyEaQMcXL_+!@JqS1Mi5QQzs~<
zD61)Cdz5%oMf2U5)wG?H@WQcbo={cXxZS9YubE^9vs!D8(G8~d5~2F9-_1}h8g3Te
zz#=MQCq&GMZT9qY>yw~V5Hz@t!}}>lqmP_3B*#_^+Gq>x#4EAgWVB}#ec4nL$j=SS
zX!&TalMY6F4CX4d7%qJrt9qv<fSv7r_{tp-4e$2Au1<r4eO+Pv3dd5Xi|%ao8<aBI
z?Lv;u%6@^*^%hfCrDl2SN$dEEN;RW*lWer7&(X$f-6K9=PdMDNwKrqDD%;g)wk_Vp
zJ(CiEy6(O@T~7J!sGcKmuXFnb_@5b|rastuJYMrLwyJn?eZyL3uQKj&Uw<#*xu!#L
z-wG3_x)=)~7yAGa%j1k&4`Oh)M8N-*C8EO7X3(+XJR-w8oS!s$w3&KT?!P@P&RwOt
zw3Qb%)f^&1Ev{UbOt-P$?^me7XjL;%U`jmmdj2DNF^`9Ne^u|37rV+bS9|XXJ!-;O
z;ab;rb{>hKc&Ab2?K&DHTp9T+l|3nTK4OaiuR9iFQRFeAcGAtn0+)#fQ9hm74v?;@
z9*qVUnlEL^Q5r=%O%E+1+U|*^<>3hCkG?aAaj_}P%bGlHay2Z?96eGVc9)eFX36xs
zSD8c~OmjdeH!w=n%N}F(86!l?u3On*GmUboO_M6_BTG{<gOPrPAm@V7T1!Z}dz)Ea
z@AYYRBmECj7ar<=Aa@aF+!N+puRE}4Z@a2eMR$PzTcO{Y<5Hu!<?(2Q_BO%J0p(~g
z!m?#)u<qzaJ-N-JK*`i4zgU$BCV$FAVa||?tZYSF9}}nL#fSQdHNyv2W&~b(q<-{p
zqtK?RPxEW!XKMSD-ZpgGTSsr(CO&4ct3AY~KcAg<EBA3;du4?b(ahR<g6k6&W!J<=
zjfaU2h6kiV^T~0?$Ke1)@gd@tN`^X*M{lN<oQ!Z?_mYZjSC4cEt2X76LzCsI@b)Hg
z`1`7}mm8jZnaDkUeY9GWcXj8$byusutukO^Oy}|b><g}bv2~%{0P>nBl3q!J;|Zf&
z>5vUgt;m?hlEUUvv-)vxpz0Lw&mPS<5Gj+WXqO3C4~8x+<SBo-amQ`u){N(*i~W;k
z_tIhyO^fHw%f>o|RUYlfn=v+mh)(ctJYeG7T5ld<G_DRi*7umA-&m{UXTzkb1Qm8S
z!t#&u-3vyu>}?wB>PjZZ+rT%?_8YVf&s;IqOY$GMrY!kYzejO8SHesQ3!Z9?Bcv&#
z2u-H0ImhFS@W3CjbdD(?f|A%!0UAo9Ly62n41yVjoyGo*09VOXuEy5AZ&Z_!V?9G7
zF?jRGO|)%;g>}u||MK^9s6NaSBW^pxuNB^xGQ{9lxirtjJyMJ<rrN>EU3@0Zex8|`
zVy7(GwN!p3<kq%<*T+>?hvnBAYtK8chE>woQ4Mayz0R`i%YNuOAaQ=SF`DRGK>`(R
zofYog8$-eTmKS6S+pyMg_O?1B78YHs%oyXfBBB~%u7Z;s4!q)5pA`r8O}pq;j7W10
zj`c8c5c$_~Fa!Tw;O{%@$bq$`Wi~o>8yS5XUtg?i5HmkymcTr4Y;)1E1(B(i{^Zx2
znR<Kx`1U6;VAndjL~A0si?7q;v{~?*-%kh^EvA_dm-O*ylQN@BF?Hp7#r!4ihPH5^
z(*n1g*Ss)W&0U?~rNj69b+p0OXg+SWAP}Nd*?Bf;p+rDpAIF<#@Ye7a7ro8Dy#}mx
ziJ&3jfZ~R*@NsRVshen95#bJQ+T%n4{858C)-|o*mESV^Ks(bg&s$}+AB_6Ju~<tK
zAy#g|mGTWQ_L9i}6>Q?L`#6;T)E_kt=tjkB7|$?yEs@WEd^NzrZ#hyv0W7AolsU>g
zm4Bo>6C1JnL!!C4h2-a#TGVr4vUDS%VAxiV-Dn5%MRBi+fXLD)Gbu#4-hz>|khjtA
z^6^tpz!%GSeTZ|b7iMymaoZ9KDI(`^n@ak}kCTTgT^chYE%%lUia6cekJ;N|RvHm5
z)+w38b#4^IJ3E@^7xo1!ueEE5fJ(?w`|)DCb``MXucS9X;rd@+0N|1x8z?CR$&2@N
z>bwsm5L05cGK?sEAAIlTXP`6C+i3ILytyrDmmmFDnvwtTd1Sovmh=p-P9AEm$Zpai
zZgg*YvJtWQ;5K`n;w(a;KiVr-OJ=)@Ug+Ot{@-5t$FE9>XZMmF_r%9YhP{>Duoy`N
z+`-)VI(914t&nGhSSEz>xX&8d<q;fpG7&BvN(M6V#<M(i2J(vBPD(!B!uKCg@h_*q
zdZq^SDwsGI85gQ~gO}!2#J$c{k(~KgA^Z0Y|9Jb`%d>kgy~MX!N%0mm7&-Y%WKHwM
z3%&JQ4IYPR0(VE?;+}pDT_!kB##+HR>EC=*JW?Niz;!N;X`fPv76O^Q-dGrLW2`>`
zu+Ig$(bQg3%mBF-hD?n#-`j|Pm!SV3`R`UB40AJ~gClOaf~8K`L%54-UQj2B%`!|c
zR-Ey?i8$Vf?SdeUTLt|xdxS+aop6zUV*szg=9f`3y+w0BzQLhZ#$)HP?WIAH!EH_4
zHp{uM3C-ZUqNVS16gzUUS7`G*GEBq%a_9fHwhk9~C80pR@ni*iBE#fbMbb)nU8r_Y
z0!9B`z*|i{SAZ15I*B&kbyCvJrZ;bJHm^(<&U55Bm&&0qvXyhmR56HWAo`NnOh(Oo
zbYk9*_p*Nz?yyJO{al`uZmD`N7pmR-CHsF$`v6-<k!Z~ulif`4KlSFB9)rykB0|eH
z$Gkf?`d%xdZ+{|T@8}>=T-|DB+})4z^f0@vXe`#(A6*$d*lg23AVr2}Mfto%cz>#2
zQm3z;joS?!URoYQPR$+o^Bw>97mAph86DZPIpQy#=-hqMFsH~Ayefv-866>-?+2pb
zrP4bO`w9ujGLyA*-7pzK8npeT^sCsM5DJ)|WM>t5pMPD{Cm*!~_Ysw^&8KA@x5Zv}
zD;8ALFBTr`@uRR1Zr_1wc)}v$nU+iDY3ekmQUiTcCwBCO7b21%x(mU*KUxD&{xjxa
zsK@g0j_oXkLVgKvdyCL!-t!xFj*h!2Q04JZSKnoYMe&NgA?CEteO#RYqy7ET3WxT$
zF5F=+N2@@}c6215>WjFJXmx+Eh4j0zHCo$**UwSk7&=~h2^AFoURz*~Q1`X7zkR%q
zQ?GD6H$RnUkh(q-UD2$FCyp$-Pnm}G!7a2$a<WY9eIlI00m1Rz_euLHGFwoHE5`}5
zc3(qiY}@?Rr>*54@hxTNS(XOkBh0tj^H!Y2%~39&V7C8$0kP-coR~OO0ge=%zeyKF
z*^PaEQExF)zPFuw4(w&{>x?O=)wUfO*w)PG+t$3ECx4`zlW=D3#@qo~iI9l+%On*-
zNxy@uQXf=uDiJs8)MFN(3}#reg=mWi#68shx-VuL8QY0%T5jzrahj;2ldHt8fa<n^
z+3YhcwmyfxJK;BKG6`OjYuP7Da78K{?x*{SD+({XIzW$KwQ5_RYNjl+9Ieb-M?7F0
zadBN%9Wwf|PQQ4EC1l3_!Fb6bC}x!D0VsXl)aN5RM*q)USb8ScE7-1<JrEqUyH9mM
zGo1er)UZzFP!Nh6J2y*!)Q9F?#aV0hpjX?eD_{mM;iE^72A#V{#s>K2;sbpvpnQwa
zkn8h9S06|1_teq2IJv)x*oYi~#9-;#7cxIG5)wW-G@p8X{qjc}&f1~9pRM*;x3ArH
zitOev;zW$*Anc7OMsGMQ4-Kw6&Oj;rnGqc@)K-B_LYKATR_P?S>1Y%nWt9&q02BYc
z)}xb4#J(4;34Uu*%q~tt<Nai*zl-r}Ik&i`(N_AW?VGj^n4`-v)ExpK4guZD(z?LJ
z$=$g>YrqvTsOd(uJ5z2XSk&%j9DUk*047Zpu7HX28e4&5r<I^ZC_k(JeeZ6b!magJ
zoTWDXlfFUhO{Gq<^->R>!lY1h+jm_R_>ySnxP{*?`rUJhF&7Lzl>ukq1DM!Bg#94<
zca)vG&-5Y213;(_5_D(BK-M)^xQ*3^D+IvuHiM^VucCBeg4WT+mq#xeXQTz<=%w%*
zrfQ^|vKUyeUHwnD<-gy2j#*y)!`S}T!cM~M_=5R6*=vI_!T!x6K^>CJWuc*=yS6@=
z79t=!a<8n#j`<pGH#*#Gp^8UXcsX~BM?*uve$mmsRrK=3Q@8_EQdb2fLFele#7m7l
z%t8ySt%HD2^W0SH;e_ffN`=*pXH1Vec;W8o;1Vw9F%WavY7DSt7?)Ez<>$06Itcq8
zwaFFT;Qe=h?=N}voL*l1Nz=^0=Sb1&)}tm`bCCocb6oYZz`#He1p;$05M#Idd2pHQ
zAhZ9{-g8FILs`yrJ&_UZJ_>`xhHOdy@Y9bNlWX$(;I!{CCrw#-N#m<#3)0%!qYDLL
z)E_OAV9TD`MQIfW!<PE`lNfPvajMx=9b)iBGTD~Ohf?^DDBp*2g^#TycC2na56BYy
z4|o2*=?LG(QsTU<^5kw~VF!fycy!bt{_dfO5+bQ}ZEdYtF}>g*K2Vmw(4)dQ47P%%
z5bst(T{BX)T`CS-LZWVp|9;|s{6xM0M*G5xwJd&8-p9lJLkKgcxE1@Xfy+Q?7R;w$
zdK6sMQ1oSg9vEKbb^c;YrNm3O@?nKtyo;0=+iTv@HQ!3n<Ne*uwe;{nQ^$Wx*uVcI
zRuv^klfMLASez@Xad^-r=uY?2;!sJRQ7|J@Df0^}tkky0)%%Ehn7Wif)E^qpHfxmf
z5UCZK^-pl3BsIJCI$pg>uFgJ+b<tw*(Wx(c3R6ZAV)l)YK{=3|4R8Heph1Ub(wiV}
zZorOW8Ysms*knetuqO4u&nUP*sS=%>B^&rfG>T@2OGCbbyL^5N%p9DY>&YOhOPeSA
z&~TdF1mc*7pS&56Q&UqT7pc{^rNM;u8-3!f+0J2!;7)9vPII#0m<m|W1c~?uBa4vM
zN<yj2p%t+0vpSKXp~bh~jV<CZtFHr3p0IHt_%CJqUuij821}qJCF)N|Hgv!=ncflV
z3gDmJ&JAO<8Vr$VW<A6DDiv>7-?K&vj2MU>4`_O;ruFuswa1eMeA1}eGZ#d-xowrU
z2^}tSz`va?gG5+L+8y?_c#?v}GL?*xhxKe5DXvkrBpzu*a(Ij3>0Pe~;7gjNwsUJ4
z_hdN>E-_$Y+eAon_+XpnNbuuQzi2=tG-TWGO8x!O3>o=Wyku9gnrBQeG|65|_1yF}
z-@oH0a=aS{)$&aDOO_AJ$lYl!T2`)bC4Rf3OC56P{uOwt>{<7vMIXmL#lt2m{+fth
zGWgCc$+$-!2?;SrHMwuBX1qw*nRb&y>pW-J=RjXcI<v6fLOi#01mi+0tm}QR5`Pm>
z!0Qp$1p!6<;y}SdQ>~4HmfmGa2b2>1^*xf-Re)jBdyK@}D$w}ZycSgX83&wYss=J+
zhxw#}S)6pxj^=a4;BSQYjKrT9KPg!Ry4F2iphOMNG-U8U`oxu+AsyeaTFCOT!OF`*
zCRFC#L;RkAE2p!~0?mZ$<HL7%1|>F|@2KKR<2AkIdT^IfY(L@Et5+h?jpfrR8P%1V
zDtjd*>Ff2TWFM;U5jF@fna`~jB-p3seMJQ`E*#c-GBm1`!6iV{r+b@9*X03*=?%7n
zp2Vv`g?HjQrLDB@jr1d*#jl}q424i}tG}ogH|<Gx8i9@+<<1h}H2gcAt3HeM!cl`M
z-Qpi++_CftMlwol_g@_?OCJ2I!2h*d3Fk-uHgBE9I8e-1N2Zf?PC85P&e<_>E;Ffj
zW7r=^IR{HZG_4yQdk~dF+F$)cU+_u6$G`S7zCYIO+0vJwtB`#+#&V4;Ka{%Wd<M%0
zfL1%j)6l|dG0v~ZbeYSBe^g7V5jPQX@u62G5`V9VR#J6o=}1w?(pdmC_v%pCpxl)8
z0HwL4MDCp@V_AvGt5Mg_OHpM_^y<eP`+jOtFFbW~)l^vDayvNc1lVQQ+Ae^hy@_R>
z*6S6_du+yvmDXX}R4?xF;^5#^Sb?fdOoY2^dyfoNh=luN?W~nHbM0Y0d^tuG{Qej+
zcp-sF)aj~chnH;d;UPS5ylj|pGE9d!*<#|(!+u^)l%AT4-LiucR)R{ti88GI=8s%_
zF7_tQS|x_`N0;7c-_-mLswX5R`}1iY^apVpE+fU~$>_5|i~1vw?ss*WKq2Np;$*;r
z4-k<;A@c7j*VjWPMaGy-+VAyhaIaoblaO>-uC4WynxlBh*@uuzoL!ZXbN(9WZgjN2
zb#Ol7W9g#e?BO8+(Xl<XqrTn!*%B`l%64O~nH~<dYp1(GsQXOvgQ7Lm3j||Fk9}6P
z`&HoqWWel9%vcWOKVA_UPK=!kCg2`MMAt84kYBel$5hgZK<Ta$F)sBMB4A+ij&y5X
z=$dSzxS5s`j1k|E-Ln$LIuU%jTO>~dA0U>=U(5Y`fhaBiMir^~Xa*LoxHlr|^EX~2
zGG~v40A|Jygv=^}x&Zb*#mEAZ-cDwBhvyT=Pyn_H7fj_C9$Mx0lsiRifvklF!IrRa
z<oM^}AA#&sn}$)4mJIQ|oIYYs(c$m}sStNWrQ3n9Y8S_gZftm?nH(i41;ue7!Eaif
zZ~U8IbJ7qB^S=lai5hH=R~3IT)mfC0)T}skP+Le#OL@BGtCmJH(J@xL9?*=1u)}<z
z&D|9r&Y^=@6CF%lQze@&6@Dq}N(8O{c#V|J0d!%eh&!keX$_{&3i#bTc*&LbjVm|C
zQDV7$t{hG3QmFd(>ifn?(al_^s?ZtuHYWGSj_mIaug115JUN+_W3QZDlPYn$5puCo
z&)9g@CnqPz@;&J%7XIc2Pv*-TbFcOuKPYElaNT7I&q0U#qFFaiN*d&Mr15KaoW4!a
z(tyF8*kJ{l3UT{DMXHrGHv|*Tk41p?Dh|U+!)L!Rf$E9I@u+kA1b`G-4@L{QROW%p
zMay_Wf0BE#m@J5%;wq1pEMxrld<M_$j8g78iYE$jy0Nxah@jZv6|=;VL@S5r*8X-n
zzmxC9-gx1KCNIHrSTR(Q$;5I5S-0x%=*9Z$-_uRQPPcVkSlBWM+lpwJ&iXwPgQYfS
zaavM{2F4LklM+QoVdNy}wmMC<Lo;A;AYQueu-NzHn^|B1`N;=vMZz!#Msq=Xu?8-0
z%*?508E68a?kE-o!-%nQaD;5+Rs2s}=U64UfI`PHS;BTQ*XitmwW3Xb6Rc#c(a1OM
z4B42RQ*8T=aq_W_57li^0%Ql3eGgL&=}$WZKrfG4?7I{1>&oPPuC}jlP6Y8g2MP)6
z&YX8xT^AC92`4ZH?V34-zPH9-ik~a#xemH1pswgp(2O2Z|K*Et7u20_I(>~_Ra*sa
z6mRuttlXLoeMG^{$G6u<H*?J%+E}s*Roo<7=1r6e(7tfmv*wvQX7O;adfvdcUX#2s
zv2=SSe)4`hqFbN@L!mjdTZ_bclGS6^fZToey(%!Rij(4TA~Dg`9UUE6IyS95yxi>8
zct|X!3Ex=!!^2NJAPXMY{HP0RG)CvvqKX^Sj=KNEBWup-Wz4CfN7Z2oA9Ht*S2+N^
z<%6tXx_YFv$Ec1<%>D@md>Rvk9vkr1x7w3P@M|4a9XM0J1%G_UJGC6XzPkw^<)E*J
zKn;S#<4+KAou&u?36BZqQ??yg5hi9;S9)VM>vysP&>ROs#WfHr>Xf(R)17`$gBD1I
zSY;a0k-#x1oj1Hu<#Hm#psmw|kc1+3Oy}g=zvXu|HmW)w@C|psaN20@8#mTokX!+`
z+krithv|Y*qr6LfITM~|?<o5qL7Hex?4A4qQl9Oo6<4D{FtoFR=~|R_T(&3Z^F50~
zhyjr~*{8IJ6$uh`qGXiYt_zu7r%|oAMWZ%s-Tr6?S^`HX3gDlhJqK3^4-$`YfvXUc
z5(zTi6wGv?V})o6Q$z#9tE0=nQ0&17(yC%4OpY>Eeq~4YnUki6?v8!PF2L8(I8&D>
zec!%4ve^?_cz43Vzhzkm1)Oi`uED-E$Z!?fy1KgB?w1Jm9Kf3Xm<0fOiO!;!<K1~T
z=Ao}NSYJR(>GZb`{GG3<m#>71)}T19jRQ~`Q2AG>*;^-1nnDM$LJt9naBSqr<_QD-
zo`c3k)mCL)We)bBM{A%Qcx^PCTZ=9t6L=7n^Y7|{`zq@yM<`FHIq2a;J#Qjb<5JF<
zJC;DwznbnsQFcPJZLlOOs?ouLyz>U9ujreMZnDMMAUrv?q`i1em5oHs{jVpfh4=IT
zFpLr+#pb6W_xF2(4!Wo4*!sY}S}2-1iZ0V#&=-<|s*D-LS4c>l4goJL%-ud-zW%pL
za>CsAEF9S{yk6L_W$|_Fg_LK^`GOz2;Wsc8AdGBnH($Fgz-mri4H!gCbY)kx?2(_)
zcIa7cgaV)oj10BM=>330!8JTSBp5!=z>(zpThP_6+Z5~m7e;}51iFe;p<Z^Xj)LkL
zPX48?QVa2Or!NJd_Awc_hvf2H_tpbfDi4-h74JDcgZ64d>)%YP6ZQ_fJy}`)+3ATe
z^n7{Phq1HFcHo9Uzi5yx{CYO<@I(l=2#V=wNHSB6j6Wg~Hs(v|CTq>vhP3we^#wuM
zlch{TDd>!V#h_)X>h~Evgr+H+c6?pDBya3^Mq+IRDrCi!ZCngryaq|_x7**h2}syd
zB^f@R{t$F*uj*CZ`2GjMKppl60C?H5L7{!w?5@qpda6*t6u&%raWAZc?n-+kObF^l
z*4U2K4z?YsoG}jyFk{k&j-I|fOphoK`f#iu{1pL78*`R`5E4NO`Vb9x7R9UELmo2%
zqy1K!os#Trihg{xU3Ac=VRum&Imww)n1_*&CUo-a;8|4u&nXS{YhEju6*F`Zl2N>w
z0Ns{gx(i22LpGwp83}Sp)5msL@kbrCC-kjOl)PD&XNx<0PtsxmH923JeOvA5gDvUY
z^<D*u<Qb|VGkBJlb)CU`Vm3|3+lC(7*u*!;AQrYLKxdLeLW9*O7UH5S(2q{pBj_ie
z-ptN`8=G`~6c-5>>%|qz4FK8>Ljy!AHvmbUdS!6M1X3Kl#$o&NF&$_|z$-kq0A;er
zT`l8`&=NuuU|@TMByE@5^-f(87>9y!rPC@n8%p_X*4EaB7?u>*LHqbl1t%bJrxEwU
z6)?^{y@Ccbl@JSh60@$E*<us87$!4(YMclv2EtviG(R+~j!;n`Ax`tuu^rj3d2#@1
z-;@Yka9jMEjs@y0h7&j3@rr3Nn2X_9y>#X@LW9-t5Xu|(P5FQ>kLI=)Si}Ik%0&e1
zTQv+5oJ8$h0b{s0`s)F7rz$Wyx0tT%?Qt`)(APw);df%C$#M!&??Uq_fK3o7bUWDg
zgOIDp@GOy7o`APPuD%`0_a`<sHctGA->y)>-@SY1?d$7nK@s~t0qplQVKPpCDn-BJ
z*gbVQwmzw`*?A~^8qlPJ6s~FE4yUf^Ntb<fiY$UxoTK6pJi`|pJ)WsmcDx??$oE0$
zJDhf=3Y)7?gJdPj1n6=jhZ=Wxx_QOkA;CP5t^WSC@xtrP)wPe}ucL#eg-2@Wc)(~1
zxCCYkm}kXJQ^{tjzxoUbs$&;J8+>xEp+O75DJYnpo#^)^9Q1-715G*fq^{Y|qQ^Tu
zSVT>{EN^@(NZKzElqlUc^Sfjt2IHo=p>Z4%7$9b=U=#PMo6S5%LY`1bnZVv?GmGn9
z6OVH8@i`$bmwh7yd}6`}P7(<yL#nC}J@rLK4xFiV#cHBC+S1>>ncsS<DY|KCbhD@g
z;-4D45nLL3k(twMaUcKIX+i*$R2xNtyPQ~(4;Oeh;cv_wpYT=8K@M{Qrr7|{L7IC@
z_l-_B0>E`3<oNhd#|d}XQQ~H~KBz-(Ts%ro0iQHZgh`mWy``=(%oMnf#Cey9&+&20
zmY-Iz$hh;PWkQ7a`;H(sXluNXh#P=-V(_2`?u87QnDDP;rW;-LP}K#{IuA#1u=q`W
z3Va9TI`%ONNu8C0#EnRogQX&mq{lh0Lrzs0Q0+4W)QSvK9Gy`I#hcsp_4QT#JHED%
ziJ}1cvDK~;f<rEsZ;^(`h=U0eFjR)jbRh~O5&qLXEG%P?(bPt{efxGh85!9@l8emd
z>3R(I5`=O)qb2pz-Kop*8=Uw0Vt8+%eZZ&cuz;6=Z40C~WDhexus@xL@N;Nyj2&Yo
z-X4p90ae5+{dq>|64x-mK#Q})ckniKrWG35uUeg-LxP9rWnmv4wyHX@B^-8p7MD&x
z#PmA@4~8bWu#kb&-pD$4!hd3{{>s=`p`U%><qb<2j3*!yX1?K8Zt>)mH^_Z~WO_}O
z5kZZ2k%%G*5;}}7O$&}-rZ7@jopQ%DEl@MXGPx4&4`lNL6u{&9y?yJJ{vze>D<ni9
z_8eH#Ro(7~Jp^QxG<9Bxq>DK(;b0aLCRo%kBZna8PT*3DyvphHK8q5Cj%~-8=afd=
zKr5{ib^i;6n%i}1z|gk<HRP(g%_YgeX*Mwsbdn_aEBgF-^yu0{f*Ga38mta-K;HNb
ze%;hpegjHl3wHwvRY^Zz-;wT3v05Y&s#F~sV22f3EENSHjdhh*SlC^0?&^X+m_LNB
zzxjEzmBA~^QbzPL5`Ofh*_5ZEHPO~8y?x*kK7^jN^?E|Lcq|z5L&{*a1A=_N0SHcr
z^G2%y8FJBLFmSVAl)kZ00d1AK?a@L-3E!=>Nsi{8LsLlr`Be=GYOum1;0?$ahbCay
z)q-tb9kD#fot&YkqZ?6#Mq0pP`A|k7%h%Y7p&F0OvXrqHxYM0+Hggb~vU?FE!>b?M
z7DYj-jQfr*7?|fb1bRDE$p~`gky(@p6|f2CnLor_OIOPokFRjq(e7#&&X;)#h7wqZ
zO=8)EO%`nVD%c{kE<51AsP*!6O%z-6O>NllO%-hxKWN2+rc^{Ra%cvK)-*bMGxDGA
zbe;jJUa-ZDfw|jez=bJgY8B4Kl`#!C0~#{pi&w|MdFuRD^fKn@r_EE?Z8QSXo3?d!
z_}jp(@+G6B91XiUZQtc<fN?1~22w^aapjR^hK@cp5&_mF<5VDDiJ2u7wG|*^KrbgN
zd#r&Q{uT8sN;j6PD+uvtR4BdBkuk;tbR6FbJtw(r;F>C1;{<e5m}xfJA{z-Uz)@>O
z{Q|CMf()slsraqaNe{B+S30xBnezsfh*;G($MV-64HrIgf+7%qlrbTaceYNL*j2-b
zk<C99`2RNa91SR#I2W9j<leckrMTY33~h@Ze+<H`WHnuo=zj>vHJW@2dl(6;jE?;h
zkn8M&&ZxvN(HcI+TZe|h8r^fb)AZ2bHz+_I2DOrzgRW8)WMmbcTwQmzBT(k5EnG9$
zjx$8xZ5GPg)#)|Ix-`VVf>204t(G_mwcXcOn^Nz9=5L+C2wf|10NpBHsEliA=bMRq
zXF17^6*biP%#aSI+XFpqh=ADLwFgJd9|=1RrELgEx6eHB55EP$lB-r<u$wg{1j${E
zFQ2*>D-D0cuzwo>eRlQ3+~!{+^T28)z=))P8%NnFP(P*;=EayNeI%_QB9KP?A_*p6
zf{BMmP11%paZleWa2RsI@`7oH$K4gIc8wTsX%3DPBuD@pHA%(l^pNaTGP1H9%P8Ye
zWL5?v1}iJ8&YP`3gXWsO#>dC^uwF?4(GtgtYC>pYPe0jBvnw&<PAB2{|1E1j<nfy*
zIKEj`ZkIh%19#KYfG!>cO&mF!v8rM2wGMoE5in~Thtc`*c&D-ydKE1?FxzLH<jYRF
z3a72JLlVEQ<~%o{vP3yRqqA|EG=h?{fnujf$M37=mH|ua>QTEr(P|Ln!55-@9Ovc5
zZU!c8f^symufTF~5`a`ZUP&j-zJwGTNWtpTKi#_$e+kmn>PZ)I3tSQ)BK&G7j2x~`
z66}Ysk*aEgjhaINV-L^Z)ABdgeNTg~*UF*_^8#%7GBhDKibY==DRS8n1GBxu!+mBg
z1F9MWVD+IN@L1YOpV}t$QN!P8I`#rHX;TPBZS@l+&=Ml`&>e8tIkI2GO(g<%;?3>I
zNK3o2h<i7u`idh!gmVWzMrQqZl2>l4eC{+QJz>KD$g*V1nC2OjOnz-@zx!#-+eRSQ
zAmwfn9Kt(8@jJ1#NPqR}3+Yp34fr)cxiN8!WQ;y>q7kucAC7PC%rNq6${SYglbXQ^
z2;Fs$5BIYAz<II!DcB!O=QwqV0AawuO+HyL+A+lSb<9T5YPWJ|d9;JTQ_B+Wko6#M
zS{Yo|F{--4A&!g}3X3HN4$;)Dg#>`+<`<+v^Cq6&4i&ch(7%l}6!i{Er|40=uS21T
zGE%PSrCCiN!83-z$tl%fkjeB40NyNNtb~}5e$1YySq%b+)B<4B5!x~SVy7pS0rg^|
z0reJ2w8gs5!9ipx!bfwpl2t~i@<Qw5kDpLTa;)SmEQf$y9|RovuH*@3f1OUjSX;2;
zgusPtCO82_C5v0twK{L+RG;6frZD1TS3iRW@ba|*)2xcha_y~?deLbtiFE^u94wMG
z;Jyu~l?py|^ttH4Rpi}ng_qZ@sw)^G>fQ@xSB;cIh0_JHL}Wl|z`>FOl-%eEdwFm@
z+pIsg3xs1jLDL>Ld9&UM^X+`>f1|P+^LR!JGV=2516}7&-#0`XMJ$HI@PRK}sLMrQ
z@`?>`4Bgq{D1<2`c~BUc4xJB21ps<(1fb_4(q4&Xowo54YM)mH`Q-1JE@ABox*%`o
z*ZOg0sVXB9<de#>Kq?Uv!B@1E6lvWw3T{YycvzViiWK9Y!ukPGn~8dLOd+#xEg>=D
zqH@{QaJk*W{G%3Ku;}NE$K!!@tcJuV$auDhd?fM#(0bhnfE|<6l)*2S{0=4+yEcG%
z-ZAf~%kr!lr|Av$=XL~pKOc|<%p@=t9`1noIa2NX3+e2cV3d>&*2eqG$dDNh2U+b~
zm(m^t$Xq%(7M8&g@QzW;brRS%8pY%t|Jn-9BJWAW1*K3BRgn(`9IuqP(fDPBg9(?a
znHAdu3(Rk%dXb_&`g_Q!M%CAXLMT`ss?X<9GK=CdIOCz4yaldo&dPJeGl$>x*J6)e
zRPD4M9VyznWE}{K45drE5Sc&0*wh$*VybB&v?|<X*|xMV%`72MA?(}R4n}!+5m)Wj
z@n(XdV;_z1j9((5SjZ^fkH2Bis(uRT;EA)de@z}+)N$f1FWVr%U##a>2|k}8++pUV
z8WTdWx9hspZ^c=fZ!7C^W)MHWX3>1qGgN3GWI+a?F3S^o`%*glU$35*TwLJqKvD#d
zBkZMH@lVg<;5O<}Lp)cag|v`{6MgLQ9O6B;W>IRfK}YHM@uakdrn2U~d3v?jjoF8V
zF|8$|<%r|(A)N}KUkK=atl_t<(%+GMB@)Sd$SCTaJx8iij$#V}UU(taNe>c0rBJ*(
zJE=n7JHEYoR1{RQBTRtmQGkDi{k({@QiL_4VBFo&(Xp$MKIZT(xO(zUFPr*VWO9~}
zTp`7KxDP7!b!EJA3*cUZ$Q*RrvWJC+I@&$~wZFEfFY1nNhewC(V%Rcdvp=WMjxxw>
zG5y|z?YcWW2*8S#bJ<t(kn!@7U(OedD;?QS(xj^a?Ps%~QIB3D8__%IBVdjvJ|}Dt
z|Lfp{jf<Ma?W3g!3#jU>R^S5o!>sbe%!Z>WkW~n=94uT4S21GYJN-yTiasZn!?*&-
zltz^gEi`J~1&c+e()I3nW>@P(VZP^SLbOGC*`g~Kb_~~F!U$0&<~F53x{P?{cpTKf
zwN7w1Y3O1xzf_iV=}^vRhrbGN0uE{i6&zd5(fT~g;jv!!XHP9`_2Q4ejbVWSp^u>w
z+QydPk!4AhBXC$^%C^A?8DnTK_iII{5)<$&tDF?7w636m`yE<JfV&_k-7MFx`$De$
z=#e$qvYVXxby)0O6p~3Rxor%cE2O0Ry|qVkp!E%*nkaLV@j?zVNi$^S2$)oC<G%DQ
zT6KW35QEUf8!Mn^$A<G(f63jF;tX>CZwVlZMxa&(oW01-WWnyS*UYX1uGA4jlz!zz
z=CnZeZ?K;M(Yf%DwfWr{FtuGj`!gT7y37qKO4)E$_mw!g8ln{FWKIoSCV;B|*KLuF
z@jO2{1x2MXD0o+CL}g4O6@nm17m(&U-!@N@-~}FPWeg8uR%L^*b6i}yV_4P)V=Z=z
zA7;3NfL;I#BqfG`F!?)juH*RZ531acDhI?FsD7nZB};?TB&c&C6l$&3|Ni*^q<3fd
z8W+$?2+v(%GuH532l+hMHRzH#4V#_z62t*eC^u&?-J`4#$qgfA1FOFSn`5=wQ}PDm
z(yW5+)_nJdMafjKk*u`zq0;#cXW8>?g1OCftk8&B6?FX=N5#u~WkbT;puzTqV6>UI
zUI4Pj78#*|-v-*W>d!(4^x?Y)Dil1=9_|E^<geD-XnZ-r4e=8<RD0<(D|m1L$W~R!
zGMGNS1fezmY8l@VMl0IYlc@`3a4xR02&#8h_amF>9^ARpk@4(p&wg-zr-}({0kL?e
zI)Uk@N|VPG`91~11J0(V3EJxKoXyRd@j5?#FOXPM;nD732tk*!H!}R~oXMTshYp4#
zqr1<<F&^>?l-aPwxJ7S7_S@_sJgVBmglrr`XUP6PMddERCF9WAw2yQssKJ`Lwzjs$
zpkh!(@<GE$(rWDSec0p1*BlVo!20^7ok6$G<%Aq}mkMo!Sh@h8iB8%tw6YDJPhmCE
zni4Vq5k(1C&#*W1Bs#WWX@4^{xfi*h25nDG32u=*)??A|kR^nh^lim!{)kUVrK$ds
zRsSuly1${I;1Ji&fcA<2wrl_zngD={ofi8tH;Zrl0h`X<C$XXf@k^_ktS>#hqln`j
zj~!)It%8|l$v)&9b|eqMqf3{J`*7`SE>mSQpwLHJeQuhYo6F;mYRh}%)bUYTPaY!2
z9Z#4ixjP-E(*~X-`P#@;5aq~;-S_z`vHb77BJ~qk8!9U4^x`wq5SR+8gruZ5q^R`b
zA~WKSV>P*7Lxdq~`Q0ClAJ2NX^VY#LiMX|Qj>CMD?;=m{YebSK&^m1{UoyT$Pj><D
z1ok*KcA-c;W8<Um=-V?jQ%9Ng;IfEIRQ|4Tbe?h^VJ<c%qSuyh{A*rKs-}zne=5aa
zi8Z)9F!o_-W{3&Kq$s2(bs0q?&h}-)$8pAvT5RDx(ET*%EJ4-8G~ZXB-Ah;>0qBEP
zmhSjzWU3@c@(f0VhDvI<mOB3m)`aTi?cH0To<S_p-#%;0->jfgX$>g@RUOI;(Xk!|
zM9lcc3}sScVr9g*%6p_@exzjL44jtul5z3mBpq-tRML*D0SWTZ{hYCJPKfQ#0ax)P
z*Vbeq(oxLnt%}Ybc#i~>8p-{ifs0|Fb4!1llE;QGVwjDTJ3&_gxTvFEiKaa3MQ@mO
z`=m1zb`iDml2E0qiOIYV`DUv4FO-6o2jKpc$Q1HBPpdUiZ(0o9>NC69?sKLl<jY!p
z`xJToiB!Y6F$geUu-C7zOT;~S5I(O0-SP0N91CYws*dd5k6&o~x!@L0AENR{T{Vvx
zowMzkOm|y4aq8eT)I+Oj!%u6RD~{o64*vgxrk%D*Dt2HYH>?x3?#4=@0H?DKi@ki6
z5l?$}{mQy01&-;J-(`RV=;EP5j+*OTRC0G}E}6%kNZP&A-VaIW1z;N;&k#hQU)sG3
zw=Ox9%9&Em5nQL=*?s%_TZ(z%=(ozbpFKrD5}>hTpMHeQbCLX;JAvSw;?`m<xU5DE
zj;X@RZj&P!>781&A^PBkVQ%Ot{%&w|-g2SOIP8Llt2H`LYH)am-XHne{W_xv3r0f?
zGT57+e_KtC1`GkN-<cX>vFfieb&Sl@j^Q=G3mg0emNen(IuWSNc|`c;%^vMtD+y#(
z4GEF0{tC2Fli!pJ@6LOe=M@XzOEtX`FUQ*HQaS2=R|Ik_pa{(8FI>>cx0z{M;xp{v
zN8-6i3JW71a9skh5~NYE2$Q=_>Ls3zslC})R69?^AHDIrUjP>;?z?){JBuyoURFe8
z<WSLUUKny#4!LD+0PpFR9EUgloj^bUVJ1=R(Mvpji76HZKf<dE1iMf^Yr`HCOpczq
zm?HtpMOIy_FJl4f>sfW-sY$~@V<qcgo>4p2Bi{{ys5Unu8@5M3G6img#U*MimBrdw
zRdMnRw)^U@8h@SB)Q|zRVMyEgt&zAc$ed`Ub??`sbGT}%IRB1p2F@Hi+}@M4k~J7|
z*;ZN?q%Zu!42JGm$YXmtql9vFIawtwsbFx)!)LE|JMH|&4+gv<-2Gf#U0nj|C#tlC
zqAz}3DDIDO7VZ^R{3g7i6qeM*DE4xUQY<FRw^!1rLg(nmYlQHx_`Qqf;^DD#YM0<f
zsvL!!;Gr%9D>$10qxt|<ZM}g*6e9j~3@fholV@-W%kQTRl@N*u3(@PD7@Iaegdk9V
zS-E~D=t>zRUvbKbMU?_*ALwlGEl3K2WyK{XCFu~iiqM3d0T{cJmjvI_rTdJdV+T-I
zReGS6vxxndx<gbNU;%k{LUw_oC-Fkru)AAQmy-!*v+9qWf<L&ZF@JRjB-tnd&LBqC
zLxBI+nLphW;2g6B<vXDdiR&&66x1&bm+iz**REnX^e@u>pmFRd%97}Z)qOSX0b}m%
z?XoKyzfSu7&42(lRtl#!`@>2!D?Rcz*mDGhZ<{|piCWPwHDto*)m^%P^vB4`$}Trs
zMDQaqR|iS+^Iaaeq7<o-8|W>+fi55Yz2l<;ovu0CXkzaJmx$+Kw|^W#laMQPbiaG=
zt;B@gS}B?B?7z%x`^SQa(o=o`x^n6>7FM^(mY?2`h5uNtwx6Zo4}S|Lf=1n8rOMLo
zV^y=WlXvk1>;7xxzrzDAija~&3pYats&6UwbWGz>iN{U;uV_DZ_5C{vo|&UL`Pw(b
zyppBwk^?9G14w!qe=nv#<ABGFs6gO8;OXwJ<V5D{2ZsMqf$*1xXVmGfrAx%!c-OM7
zbaJ!XuX%MA;QO}vH^(sID-;x&t!-_U%%pC%(-GZNf9(4bDs|s#)K0~UTZ}_1Pw%3z
zXIIp(i;iLUfZ8QaiZbR^p#UT(GYHeS{O;Fr9caAj|KnUsxg7e|1mO%O20=w*DQ4v$
z=F{g+{5{G46dJe-A#gym#4a}E!3xyf?gO)9a0Pp^|F@MN1cp<fA98%zJxWPQ+1b`*
zxs9YoAz_z6Aqc=;i_!1h35NVF5cY+9S+CYtPCV&e1si}Fq8^v2u?UxR8oRP{UHx@_
zH|!#s58vX0X4GXmt1l!*@0o&{(we5MlZGvHSX)*t#BTnvNoU5@S;y&p3qcPV$<WO_
zXTI#5Q_c}2_Wj41rN$5c{8h$)4y6(Q<)tWZape%8cJq_UNz{MnyE`i8i_amCoJ8X~
z`@&)}?T~=MBgc2DVQ|=Vxg9BaphJ^rH44E@>t4y1V|?CLrHVgyNTeF83?g6BPhMFM
zh91B9by0V<C{Q~#rH;K6JmBj3nG_AKyrQZ(NJ=z*@x#$UwPulLAjtHcDxw)$ohRoq
zhHg3iH7c(M-c7gtl_8z@MB|_&P!ZTVzRQj18$Y+cPq$hWanqdN10;+yDwTEhe$C6F
zO}LAKpj*yrmzEhN=pNW#?dsLe_ID5F?o$5TpZ8T21_HWqz7-5bMMa%)B)Z6vWBXH>
z2W0PhM;C<%puv~AdHv<d!xkbH-Zi8?e-M}|4B&WqT^|S{DyYMzQhxsYe~|3ITn%g+
zyxR~#YE)TsFCmvMyu7??PLN@v)#NAo?YjjyV|H_BK&$mD2;?v}Y(Maavi#*E|5!3o
zORN3}#dqB5=hzD&OXuo&<yews=fPsho1Y+Je@wVxj+$Tvus5`X-An=h)ARr4k6}${
zK8#s9dwlp;$jF#gn1Zl=w>BQI(1&d!X9oUoW63pRFSoxO9DnfS=I5*!o7LM(fBfbT
zgY;8C|K~4sKcKvLaq+t=iqthLaLtK`uCw!gE(mUR6<Ulg{vqAq_y-QoPSCxCBpJxb
zl8`L@=Y;=37=Loe!7CwR;(H3qP;pTLCyfp&35DI$;hTSkF`;SITi~RB0{pA+lIZWZ
z{#e*QSN@A^RN#7I;qC3avFaJV;{Ibg+mD^Q{xCP_`bx3#3_}zdLV5jWl>%|BCP+aj
z|Ayy3e^ng-$sMN&{%}M!7;t~TtE+3}^#p~TW&OZU!GpzKK(Wl~Hkq*)EHqEN@QCE3
z&+~ug@n7fxY#B;=F9*<PjVY(8C>t3WiFD4{%HGqqWBLh5Zh%+QLrBBXa&WEb_GGLo
z>rb-$Q@NWB0}*xfeNy8}lx`Ed+n!h41%t=-q8A+hWNZZy0|DlsPu+M{&%%~g1;wD_
zPdoTezsO~v>fm^-$}=Vu)I8-asn#M%-LN|A8It;kM|}oPj#-;GZ<lj;4?1FNwhNE~
z`27W)f3o|JFLc|$5j!J2Rs8}}DXqH;IJRHamh(DtBL8H%E(U5isP_By19bj2ZD=#W
zKi%(7fl;6b8@CH#aYK{zA5$D$+7^gghi@up{mU`teH05^t4v_(eE;zAk=fQMe}iBK
zTIRu8KA!_iP~gkznk#4X+7e#K$r$^&wqR|bY0{F}V<cP7N6)21%1HijbpP@8ugk$Y
zG}kll&NKT^)u;j;f2}zB^8C*?qm!$}Dl-K|6MphqxwUGc@xQ${Zyqb~k68eJqZX65
zV?+IJ+LiR3WRyWhw?~b-Sw3`3&xP#gB#hWBlmwNut?lJJ%L4VIu1Xa>>p%73A5y`M
zfMN5Ag`yD*3L}Aok<r=IPhu>I_2*+RDt{LTeualeGQGg>qb>esJIMYDMhZ^%#I;n~
z_-S-bS7lVv%3If_7@q&34NqZJX#Dr9xj-zXb;MSCQsnw2M|&{jO(`%Knfan~3bH@L
zW^Yi_82GbD)xiu8yE0n@Uc0W1V@&?bsQjbQ9MBP-+C2{`Se1lRoo8_Jk7O03C3i0u
zXDBg6sbuwv#KeF6_RC^MFq;tt$Ava*><KVt`Lani4_I!KSSXtQ$zURJpkc1;=a1_Q
z^Y)g+!>VKd{N10*fGlT!vJm=W|2nAG$gMsOE!1Qa5u861W7(0pU19QPBG_Laj()TJ
zMzG9ViAU6pcBwzA82{XhsMZ7m)~3uPS+AVdjk9EbpxC*7&iY&7@2wrx3h1`fEsGbT
zWQ|m%3z@YYdPf&3D<^g+YYT_h_{z)5mf7m`o;ai^m6{tG8t&YeyjtJ_<?!lr+zv><
zbS`i!L~j!u4iCyuF*W$+p!BVb(?pBJ?W$e9vjKsl=HZB2FhhNzb-6H|w#)Y7U=Y`n
z&#0An9=9Xt>FF)+s%bU-DRTc%tU1`ve&E~~Z`%Hprjn5=q4qVXa|)w>S;^sqhq~G*
zWfQYxD{5b8s#m_Cuaf!se`@^n>64*n01uell;fdI!@v9VB#Y|3f{~Y(XG(MCi8<=E
z%!SM{smN@);7{kGjcMTTF>758o75-<K^iYHAI;!brST>;L0P$N^vv)!=pXSNsPaJ2
z)3D4Eke{rbDh>n|I1z8!OBeLq%r_miP-pCVdxM*&$UsNg&A`q|E^x<5m#8OamU)3X
zeSLut-)FkA1x3As`4--+Pc7)RF5Blo+lS*g2w07{y539tLs|a$aqDZ~v?LDMi;hTF
zVp@4q9h0}bhwgInYnUD|Tm25y=!*+$54N|^84f#3`^`o|`+Nv{RN-&QcrT9FcFBkc
z2nduhV)hfPMCrWTY0GhAZJI<~roOb3L(EJ1ws*)NFyxnM;AK!T<>(ACTJvEJX&$~*
z<G?n8E%AGb+MA{0C0CWJ5$s`#(*AyJtr%}{Hkt0MclAfiZzcs}=zNFwzdtM+7UrQl
z2vZZ}Voxpow8C_0r*uxuo%R`yh)eI1_OB9zOLsm#wF<tj9VDKfqL3oU;f2sd-6Ah|
z*>xrS#GVWV!f2kA3RA}1j`6Gh+>VQb<7NP6?(9cjER2E$ppLs~fC7jJ*+SQZo2zp=
zuY_B4QlRZSP9>@G`pnk{lQauk`<d7U3CJ~zoKAcA8w_;a#y+%)BztPt8DYHAJf2|h
z(XJbXC-i{7z!W>vtN$j4r$<97;cE|=%DKW~D?NjM=Q)Hi4Te(XAp=X>bN4MB_=Iun
z(ryr<tUSIMA@}OQg#H)CkyMc7x3MZ=4r)Tf(|6RqsNQ`7R0bEO(Tf%o)^St5+Vbwr
z(m}ic_eQs|9p@WT`OCt=<h*flVy(?&bbdkR=z4ehQnhz&vP#32@Zy<h{7+uQTV)r2
zT^_$U4LJN|Ci;tZCo%SnCaF0gS5LS-q)oc-(5P=Ml%ngncz|j;0<^?!yg)ZFWnX{q
zMeolH2grMM!6YHp;L+D#ByGCO4T-6<U37K7e*<$N(ug=;+Wc?++TWaSoA-d3%DRrv
zEt{b50RNhj&dY!%3??Z?NKpI*;r-}rhx)FDnxtnRAPCPs*qRJVrbgMrd+A?O1LCI`
zJdY5M%N`;0(@8c_ZK_lwG&%xcpxaIJ(aNL3e-CX=7reiXYb!uKwoj^6*stKp#FtOb
z74G8i*P7kf>NZc-Nd-r*93Y-@y&k+n;l4XYS$@2~;Nc&;{$BKH^>3)uldE_D$Mo#h
zq=O#g)k*m>YlcfZJG{IRts*TC7u1oMH}N<0`}0?KUIKP|YQB6Ce4i~uhv-qc>xYS3
zCw{I1>*{m#qEeP%DKO4USWsA4IBMR4K<;VvFse$Hw%cY)OG_T8?QZB9O<7#%^OuCn
zav#M*N#^MsC!t?uhBj3Jqdks@1zif%hdV5as;->7TJrr9_Q@Ij7_XR76pMZ7JTcVj
zVS3n-m|$gh8MKQ-l2|kGV6_C#YIj`CcW!A`LMp6!3l!c)uRJUqm3uJU^sDkRcX9yz
z2z1J=OI)A4_mJ?>kUxPGkZXPy$T@I3ckbLu6qwhffO^ILqI+=#D*B|>_uUCUk805W
zq)l?ssDAu`h_~fSy_{WD;BT>bBX#`;QVvQiE{dq^{?p11M$>|UIQ5L4dcDZ6qV?9o
zki>54P(8z}B2w1;sukWkU38%H4igmUo<W6UY+PIsp=dIlt4D%VSVD6TEl}1<){oF@
z+|)eB?4Lh5`criNp-ZU74bn-kB?b@Rk^ssF)lKHE?BP{V4!?x7BO4W^x1M}O9khE2
z)K3^;Omjg&t~-l-hKk%<|C*vNxySWn6%F|?RI*BeXVx*nb96jN_0F9V|3dHXPz5V<
zn~FJ@#Dm!YOr87SP`lL$pl<ViEWV8g=d<_`yk=U!FiT3)8_<-zWjc9qAM!|rq<Hbz
z^X0-WuXKzSg4cDD^+ugWxjmuoknu#~#i#zwK0EN<5xw7I34uTGh^E0x!?QJ=Zx(J3
z<$FMNkra<;YacZ1VL^jHM%zVOz^qI79;R6F7|D}1@tpL?l@eb$KNzZ-`%TfWlm!42
z7`CaDq40~MDtJ7AfJm<rrYbRIy`icJxn3-m05XGAAt-p5TWe~^P_Baeq#jQdh!VkT
zNl^?&8S9X=R&Wp@qWl}v$cYQ(cPl{1V@YBzr|}PM@6V4*u}~%Jzxp)8sg<FkF=|p!
zNl;J07cz161PAz<sl#_QX$QcPs#1CvbacLjVM9P~PxLpn?VyCr?rXK=O&@>VU{mG$
zKIo3IB&VcAxLbPjkp8XR|M~7yzkrQ^>>k~sPe}9B>$rHX%PPUv&=E!kM`te=3P0*q
zNZFhRr{~p@$C`2AVZ|5Vj>1dA5tTf_2O~AtZYC*FeRf8qb{fA)$ano^LBMqwFuEvg
zqD7tnIGQb+v{B;77wRAI9+WZQn&_a$m066ad<YJ996Vh|sUKj|i@$xphU?UT2d-V(
z7##mbfA#a6?A>IT>qU1<Fcsh$?}+0gt`D?KzbY$B^$ECA_*PG-TUK?br5ASa<$W$g
zl)C`848E5D1tkuk8OWRt7w2SlWCamar?P<RR7QOVTh3+^Tar}IaAHQyZtC>L^tb-1
z!koVfWID>N0Scx-CCyG5^%HqlJ*PCJhAdbuVz4e3kS8?-&Tnt-Q1S?5Yj7d7%GANm
zN)<=6QTu%T;q+n#%+=7{6pZ;I18SV)B9PnptL#TE6BPZcg4n-`Bk{OQSjG~x$e`;h
zP(2H!qgGm=R83cV(g_C2x`#IYKIF<1Q;8{P^zGLXqMfl1AU%>^f_1q6?c2908<C-R
zr%Ly~Wgh<TJvf01c5$sL=yls&RY@ygeWp!OT&oxX&3}AAu<M$l<ZJ*i{<=gFC(~)a
zGF)me^Lsfn%slS2Gt1qRHBE`-${>m(hgh@J{zY~c{nD+c;9Nf!%hHnwu>a1UWtxR*
z6J*dtCKBRVP+>vLpT7c7EbccZDomghTne#Th4a=d@QIRW`c^}~@dkFCAGdMf&m8@N
ze)CX876VL7L6RD$P}K^;ysn@n6PMAT#)H$4-EZsBkIE+ye)RjLLi?^W0AyoIM@Lr~
z=pDTUV4iRm%vzh($7|%SAl39>ksVj4&S+hPJEE0%@`I|-uc{Ta$bn4WVfnP%CTJsf
zH?+6kmcsj<>pDU&00&#&yKF3}`?c)Cg$wlnedy#?soo2Xsm*1VPf;2nY_F{fIg;fX
ze3+-iBm}U5D@|tJq`wLt6j}s$=@i&{<cV%xLM5uv7I8r03(Y88Mio{9_3<8K?#l48
zHXcwq0ObUb?DsAlTw)hrNFXnac@<3Kx;q5Uq+n_8xZh`3pL$CF-;(}=w{SEFE6Fi7
zeBotm@PW8|Gq0Z9-m;51)bW&wCal90bX=~Tg>c9u<OanCI5{+@ioC!BalAmYdoWAR
z6<@lA&ND=WXx(UlVEyr>cy+(Z;bu_-OnipnVf_?++wq<!$?<`l#TGOha-H!KTyoU6
zI<?C9W<*Hsf~+v1?TJi_uwH6!*?HCOefNWx2y0;KsK#3V@yp#eqrs`Egue=8)S(F1
zlap-T)19*3(|hQ}=Yek=18YO0?la~Lwt;5te*%$*s3*A)L(dAKVdw_0*ER??R~1np
zC(ZR{Bzc69he?P|7md6RtchLn)|8s_Jr%}Zb%<x7VOCIZ_)Xy8;!<)62pnY09-Vbs
z)M*FqzADw{WQ(^`mMacb2Nh$fX_*6oIv7z9x2iv&L$>v`e7VEbrjoY1zA!;7SA!Za
z9KXI&yR@fGlbS?9zsQ^givgyhgn>X{E<<G@7wzJNEin7>5>%qEg)i3~-_7ekv^Vil
zVSwmyT_skN%|p=VV5*iVIhzlocH`6Wt<?|FxYM;$zo-Eaz=C|j=HhYRitRROydc>=
zJMtd%s-(bB35FF|h}s3ft!L*!rwAsV(x%!&aVcjEX)q2QE{#<?)1qTg`YDpTcg{Ar
zZarhyGM;!c-oX4<88A;6{PQ82goH$}oSd8oSDU5)A}<PZdM2^NioX%&2v&6(YepTK
zD4!tb9}~a4RK6mK%iJ~My^pAZ3Ep;P`Rpe*@vFcd{%*jP*eL&kSGXQ~YsxeSyKO_s
z8wd_n4ho)NK67x+)<SQU69E6@y<$~*2w4{YyKvyJP01$Z-3V-*DoTm)_VSX2CWmG0
z(RT3t8eyk80LRbFlecNz^LZd+Ccbg2?gM!Do!n|~;Mri2zWu^;mrcR^WI3SkfScS8
zR>RZ3!tHR?e*D2BML|>7n+{Q?NDUD>{k-(YhwI7iYg$F%<*r+P#wKntJ_9No3;=j!
zFP_|C1MV{7=HTH`e)<1cd+WF;w6|Xr#!(qTQt22Plt#KnK<QQiX^@l@Dany;kZuqZ
z5D*X%X#`2>2I=nZJZsdwfA4+oz31%DdG~)RGPBmRp7=gJ|Iz?}GWdH`&;&^ZlQcV0
z^C2-g=ui&0^gEG1E9;lz`kB%6e^lH5jDiA0OmkJ2u2!C?GSt1jJ-(Sbhr?GzS5Obc
zfyCfEv+$8jA)EHqlhrW)lXdWa5I;SF=X}U}YlJAk^i4Q#QiooLN4DU9vNHc8n==P`
z#is9nJOpNWu(Pw%I-H}(__{zl8%o+0rfR{v*^`AfN%r1Q`#mUX2^DQt10jR??N8!#
z>X1+{P1~^nG#}dhcs!K&FGWtCp$v_P_83U8ejVP=a2>Wn4fcOS*Ufh8hK=w}3+?3@
zSVcXOl2!jF^R{s-0JlNUrtD{7K+#sz=9o!}7}D9KT;z2em3HA!VTazK;J*|Udxios
z=pW7Bsk+EO3#xX|DlI{&1ws{S9gIkiOL?`DYxAp)lleg|DnA-bUxW(pC0SRPE94D)
zcu4$IAa%f_>ic;S`R>Kip#~L^oO$ue((KoiC40U0TE^IFC(X&@S4wM}8<ndUU?BC^
z>_>OjZ<Yxiu9FZGFNJYa`1KWgUV=50*|TF*)iu+8WCzWwifd`RU4P0?##dECqn=FS
zX&iM64N7&oz^^aJ!Y9~k2h8q?M&!Nc`IoG2OFF<!X%#uZ=875hMR{73=mDeJ?S#aL
zPYjuN!MoVKs3FP(B8Nf#wr+S>W4j)cUHkT72?4GA=JyT3*P9#KX}As8lr!Cmv<SF6
z#8ZHWXMblerr^I+G5kS9|4g+0`+r6Xft2C|wH>Mi^kdadTVYcnP7OgbDnoHj7?56Q
zrP5H|VNz0gfSQggdE=$Tjme$ZvSi}M6ntu5oKV*xW;|7A*|Q5TNy2<42o#?d_b^y)
zMqn{8kXf4gzkk{P-4W3tyP#c^SQ|Km&7YqZY)Wo*s_gdKqZTz0-iN<-7gc5<Ow%eH
zVk9zfmH>tf<OjEtUm6P2o{K|oUx+6kdCu(nX~Zq?1b745+u9=6QB{pDsH#RVQk?z&
z_E7)ra)@5&3o5hWo689)DdUtxCLHEOQX&AoNWsOi3W<q{od-cOidIZ#H5v`+f%#G*
zg*JUF67Pw#MSt&27B}a!nyN{MgftKxxH0zm#e5q<VfjMhc=?*{KiJRmPi_FxopXZS
zMXI@HhCT;wcis&tjsW<gr@snhq>C~<ZLjR@6`(tqwj%t6=K_*!YL1C$@9lqfUT~4`
z=TH1DH~>aMAwMF<@(vn5W%QWI<NjO8UTJ@X^_82n?OWz}YrBQZU*$j0A>a}aJ*F60
zrNW`rA(I@&0w6I`NQ=^nJMTT^LGF(Ab)5%&s!iCskpRjbfl69IJNDCZ;9<=BV$Zn&
zVfr^fAF`3C#W>x-ha{ECK&(*1O_v*d>Qqq!P4r?O2uhox=B-7cmOWrUnDQY|)DRF6
zIsb~mde*^zIb<lXqugYN+Nsq`1Gv+(vd64SjCKFR|7&^t|D92aP)CkkC4Cq_odoDM
zR;6p}P5>{u2f;HuDu`cR?l9T?A;+Dmi3&&8ZEbCNYZW}<`@B^)<6>+?_^S5`>d24b
z;y1g3l^cerR*pOWEhkaK4XJ&V6vT}#v3eQVMe|6&33BV4Xq*?9@v3%5k`D^4AkYOS
z<-7rpnsMtik_=y^AhkR8!W{;f1o44=t9blEc&i&b<6D!rS9OZluiIUw20rf<d5>Ed
z9x`-yb{}TfE@5~{YgEnRaVX(c*Nb^J58^04;yj*m|6BOA{Q;a0=?6-Nb}-%^mzJmV
z`vFC0e|zbgQR7ZK03Ju$U3OqA)G;1tmC)q_eoFLLrI!tuRMBajaan!i(<i0z%Xf<}
z9{S*V7|plEOpbyig;g-mDZmXMxVgCtL$|xM^94fWKnm#U%;st7cK&{S<!14p{+|DF
zgc~#`m1Eos;b`cR4CrRxBl`)8jGjrrUzZ#-@6=-qx)}ZLX2HCz0Y<e%f+`M|7a_Yq
z$cJyOY6}~&_ODZRZhjXzSQ$Pn*SG*C^}LIg>bPZH>x-rNc*C~)h_Ikwg&`OxQ5e>G
zX~Xi-N$=xpnO!hP!Z#S?Km=S?H2>M`wEv@gBJW{56Lh18_}&0bKzYTY0yl{yLIKp$
zg1>$_f!aAPY>KK}p|4aOz=IdXL%^O!0S^<C1(I#I?LCb_mIZAR3Rk5uB{8yUcfr9l
z!IP!TTH?cjpM7JiKp;3lO^8i6C1u)zXul%-Dr7SuF;S5Fs>7Xsup;N52rP&_w_hU#
zo4Q@5P@B;mwObv^%M(fI5$TH%yf6C$hQ-b%)w;D`7QM;91m^FUk{mm^cu$9Kvb(9?
za-IB6lpF&2Iqqs2?=HNNMnwe%{j?t)9lhj|)jGRlQ98;D>VCvBFK-5mC6QpvDZw|`
z)j=4ldA`t|;$MnjykU-LMKquaJ9tS$S81e86u3qnKk!1lxk|&d7^{&=au|t2SFTtJ
zrZ;FIh3YZWC^AJkQ>kP39rr9l2@hMe8kRBvu<Ft9q^WPTZhzumy$l91*HVev?0Bq%
zW~*R~G2<Slhc~+~ayngD|65VLZZTy0)xW7;!z&%WNtKrX!<EiJ2-Vx^x~$}8hgpq$
zdKXiF5+m<bCkzE0FAXzW*3Q#vG?p8pyZk&#{u^PZGmM7E%1|O*P5}YUF16k2HHTlF
zfMBwY2<O6rZrF1chzntWYo8Qt|Cai$WxCV9V{Q=mP_El%&QkHyJm{|C__hN8E$>{V
z!CGv<GjSXQYR)N2uiyp@m;V-WAWuDwgPVI-YP-zCG1+r2BP4R#-Xyc^E^X1)xwp4>
z+&F5e+_SGklAoUxJV_(nZ1fDA-;%tQg#lqE3|RacE}1iJq&D`t_g|_d$R%o#PoJhR
z@KbNTt(kO^_ZAo!Laix3P)f!PO2cZu4ik_7VDs*m()k2dV~D&Px4yK4Hl<X3E@5=~
zf^mLg?W{d`lZ_m(`Y?*sU*vU289yKTC}O=iQ62Z)L4b#fV)aek4955K^&ku$x3QTJ
z>qq|%-N86Af)>g2X%f?9m5QCVyOjohs~ZIdr!d@>0))`(DpZ%JZi*IqC_zg)s%63q
zT7Pc$+0i85pKExg>S>UEp^a}tBi`sq4TjZuQ<b8l?Ift&IUB>6cGJ1V(OpI(FAo}x
zs1kvO5gBLA`3Fne|B;4KMD|}N1)IHYgJ})**3MmiFLfc00SJhP;BD;hgY@NO4cKdM
zqtWgXqTp3GgZXQ+25<&lWZU=N9F2KS&2+_&k<3guDzFg6$-WB)6ESNN#$+G!Qla7>
zb<Q@P9GwCNqKg8tXvhZaVAq-JK*8G-|BnsSp9sFjQ`GrUNCEaKP3tLd2_8Jc7Sx=S
zx~TY!YDa7d#z>(GIKY4!b<`5$5xbUMqg?X2ZkEl_o||l-1)6ARb-&QGT&4QF5Y<qy
z1BU68HOF#aI_0T@6+HK+C_r(qY1cHr|G$9*0Y78xNy7(z0fUAV#YJ`3X9i#}hAJCw
zhMrzfcj07UcVTOE*;_YAIcmqAf-x{f$Lo%jWQJd9lrZcrM~S-bU4p9Xi*+!1^K1)M
zySLk4tGlTQudnP1I&6NheL-BYn7Kxcm{LR@xw`21JazK6{nzRQSda({0I|pB#p)N^
z={dMS832qhpgZwrX4Nju*M$xko0>UrKoP&oDnPvDxOjC8<GGfjmjqWi^M;mQxW}cH
zt?kw%;1bdVOI0-yB9IDPrCr-K+MduH-~Dz|8tw}5<OHti(8zN+secK7&%v^|x{IC`
zT&O`S&J1?=A4_`Gslp`T!=`bpS_j|3O8MM(iG9K#?kTT7Ug01$;rP?a6F*Z}ES8pt
z_vxL^)X+QZ>|k_|4w$_*59WEUUu^i-y@n3vYpRu>AN&-f{N{)Av>Tzw5MhV>dMH{5
zFgoX~)vsLCzi<QK<M&@B1$|EHl3qWK-Q&~%kd$M?rS|K?Q{43jW&ad%qUA6cZhToC
z7$x0}nmuIggX<(#_G6b4{($lOxw#FC)(pvf0f6&uw_-l_N8doDFnEBMG0k*|$82?f
z1WKp_-}s>v?7CA)<W58IFR}UymWU6C28+^@WQ+%|jKT`z24QoLr=swl9c6)OP}NnC
zr6j~tXxseGEDd61lV*7HzIpC3?#h|L-ccA(`N629nG43EkT0SOI&*v^x_#(q&XT=v
zseA>mB?195kuQA=Jh>!T|7vRgpX!tdCS*U9bkL$y4>S@`$w#Leg1KVyNJSsw8ai<-
zy^{DS;v_VrFD(CQ=?6hzHu*T)`iz*_EI&)8iV!^3Aw~DIvEWTgQ+(zdM1u<<<Fh6Y
z>HZ=&GjD?i#E}s?3M}d>t=EB&Sn&Y+zrYv2)Vm0t^n>*2m4Q4do7(dOn}aMPZxGsi
ziA=h7?HZ*RSdrM6Mf5=w;&KbsD_1kmY9mkyOs2!0UTflgD3OO?{iDg3Gl7gXHmKOO
z=Bkp|2oV@muTu<cX840_v9xn*2WilJQwfsMoK;|wHC5*^*7bkQN0NbWBmGLBt`B1<
zB!Z4*|E^qGFv%-I7Kwp(+Jc%~Mt7e(x5_Q3^DDxQurR!926Lw5XozcYrK6`S$?$j)
z<e4^2^7+>1wEv#6&~{X*lV*Qoo#3n5l%J{C>BuTge3|>=wdenqmG{M@6YRE~Z3^|?
zf8{Pbn$K4Cm==&6fpmnD)Z~m<UPwTmtKlQHF{6LXbI)w<Qqf>p@!!Sm=`sy&oXG<)
zM(kFhkmj-+6%?C+Ls+=V8sui%_}{w~&92dcr1957&pW9?e2f1u7t9j+%W5SgB+$-K
zh3Vo=mJ1t#Vi2j-`161x_XkerYK3vlo9~ACa3@Wf8&{E6syD1xDT$h24sAa-<<;$K
zS{<Y))Y^V^&^a{jt|D<5KS<HM9(rEZ_(f#g!E*KE;rEj-LW8a|LNR4Gv9UKaL1H}>
z)WbS9qr!M7bN2tQE3jqYJxD*i_j|reD|r6>2~nub1cJ5(ZI=u*B;Ng%nb@H#GHCES
z-I%C8WuFax?s>}{$0YsGT7Sh=_FZotP2Cn5$r9+cA*93o<|j5}Q7THJr(50i`q~RF
z<Q`^~5t!k$wpW$`;!XdXbNv1h@)+a0Q%+dmtp6-k07cj)(Z`jVuuV0G%bvx@+ovgo
zmDAoH3k==o{_kqZ90`h3v3|53c^pYPjq8AlO9sQ-&EaCB%P~LuTmSn@V`OQ<i+`DS
z)@`v*m++3S7K{kcic2MUFl^KXCat?3>K*J!pq4z&{BXeu^D5zMT3ly8D38{apFAh>
zoutt7bA5pF>4>h7dV^sOpd-ef_UqnF%{2uj=)xV`G$PMlOJ4T))$Oo<5^a$V1N<Q^
zAP!Rs+7$a3zKP5a-;_uh){*jM{C-I7|3)oWc0&RF@h7WY$H!2IL)WySMkhq&>T^&U
zP)G^pqSTb_uA|nO{%>xLoWr2w>gIU;B$Ysq#o6dZ{3B2^3xPh}o_`}|eUJ3wJ(1Va
zBS<xVK;2YxQ(WzZKoi;WK>Rr=V@;i-%b1=n(3^Uz>NgkYBOd-Lul6O<b+#MBOpRzd
z8IVsWg1l2*?%6)xZq*Gj#`-4@?F$PD3;T%L4XqTWq8PZzlhUixyu-cy>iE)VQ-11m
zep}Nz2WB1(JeZ|{7basUsL7ljZ}QIMouTIWk2YVz(g!6qU$#ry>9s5+tS&`a>8<ow
zc(CpjaL}qKI}#&q-Fil1^6k>$=$cxR!9;?~q-k~P<mTDLq5H(5z@fX|qD!a8MqhP&
zwU7~Xkkjd2JIT4}>Y}#+fn|+Y5~mQ46a+uQ3rYt^he;#;zy3HEhOn}-nr{jvyIx#A
zqVE>IZ<=4Ehmnstc@B$M6ivHKDSqp5_Hl0XMUDDa_3O>s)2FFjgZ5qLU7J<p2IK`K
z*d1GD7U!1Oix>(%Rz9ZUQ?*;=F{`OC<Ydy(SY0{e*7~Q6w{K@)y!5V#la%;oaflgm
z(wTPKJ0xvmjywlAFljg|bWoL=KT?L~Qa-qTg&CQTPt0lfT{F61NLiCS{smcF<|RE?
zl8~12Lg<kmBoNMFIb8IOX@{u(NRlZFA3q=#p;o9{{bBi@CRKsPI~fE-lMbObINe{S
z_rQORV`Z$N$j<C2E7Nh3Wi(F#pXnO<L?j1pZ@p`8{bDM5B%z`|GIIP1jT_FT|NY2y
zp8_ANGwig=+T95er?5jC?n{wx=`B&9fEZ^|rwGaf4vc`vFet03l~6@tUE}5D^%MPZ
zpE~03kP)YlCcN-Q+S$Z;`J&K}u+zu=+ElA#%%MjwCL|y!^tdae&ta?1euFBt8WK<^
zj?UYnBB~GJd+u-inll}FmXEcyLMN}|zRGG({yN|uduXWU%wB(rH$kwoJl|iv`4lX{
ze*ZN_tp?gF?NyT{S|!)~<@0BG$;*s6bqVKYKfg`4C-1u7cZ+(GCs9uBwjS1^#w~do
zM-}KWf0l~Tf`w3uys}hN>wB5{W7?;ClH^2GqFm5xGcd{Cto~g%T32uIDaPR*(Z(_(
zmb?G7D?il<)}h;EpDFRl&9dFgjjpY87Xz~WnDN?jCs&NQ%A|0?m7Huae1c+T{}+oP
z17PxLqSc0AUGlg4)3<guGFy@w76SqXl(juDd^nq@_O>WTwGVgBDNi_8c8zLcWz$!o
z^?oBmdY<Qz-))JH_jVWSd^X)HC`+7V5fBQzsg$367vm)X&RuSaMRi{TcPtNI8;X{7
zE7iJk+8s^2x`2&VhpTN^>03UhT}<Zd!?V4N1H6t)fS!D;4yt3U;4a7Tld0=(O#KD8
zr=8eqHd7fJ4pXOvjy<JzO;RiU`0Ecj!kaEm<9m4v3|$7r(_DyGF?Wp*+LK(is&+do
zn~Q7q-dQYpyRH>CzmJUd$93$AqqcG?TQ6!-km!xevPh<ZRM}VleCg(Q@H2HEx3bp$
zW8|;DPrladDqUteY}lNFTR0_IgW1ALb_G@yx87BM0CziGBRGkv-A&mfm!>3ISbNft
zm3U@#$mlY<q12f@-W4b_?gGgO(fZC^#N@UCYfsbW^1L|XIBceEfZ`7be3NiOOHdY}
z4kdWWeHL$)2o-!VB}z_`N`CE|phFyy90Kxy7FUpx%6+dVm`O=YO4?q^XzArK_4F)1
zr`uaIuMlYnzB4-d%9O$DtrQ;)=VfZ-7;ZYjv)kVJMikFF6y7|~fmSHM`%AzM^_OhN
zQWWzhwpd`%FDxq!K}@dM;YvY%yMTd(R=CY@v2o9a_1m%Cm0A&$j+skEtR9UMuON)P
zIQ;_Ej1Jv!YL7P{U&h4f%h7GQ_kF_4j|4QA-KUV(2j8j;_b<mkGmmAr%25;ZYg9i3
zBW|U@=GKt}_SMoSkadD|N*-iuLY!UWvX5j(kA>dq%%ub+UUHCo0pL3Iav}TeV?x@8
z$>?c{f;x&WCvObDo08+VkfKk7E7xjv34Jo<T(p+zN}jB)i>mqVz`w57yiK>Ltsh-_
z9pOp`N4|y?ZSP3$v=QW7Nke!z3r~8hUBiLVMIwgl4A8rlsF<2<HbHlg@G1A3c=?q_
z77(MRkmXV^JurNW%?+Y?8uK)D8_>Fy8X-Wu(2x%o7T0Lm^bJ90Uz@DGoB>-}d0%u&
z{L;B_+!Z;?eu2c3-uNwUpG9}7ADcx6G5*jUg#J|rUrZ2~KK&s~oJ2^*C?8+62^MFI
zyKZF8DVXa@Bood7g-C}t?8kN2?1u>csQq3m``lrDAOWMOAefImCEtVk3Pc$O$0Doc
zuqzXpnNLTXZrfpz-KOLUIqh-#I{8=Y`}+&x7%a1zr`M-F>Z{HVCp~N2V|?}H7I*?%
znOeTKX;>CP<!9dn$`$~!U}LzY`E{1_z7$NKo5W|rLw0kdvz$YwA(DGck?}citD~;k
z*yw@HJ$^aRJHWgQn^NsWviG<gb81S%m7q)gN358^ifvIHqj%6@F99Hkq`lsI>_M=<
zHsr9OSQzUC{Uq-tC^;OxNG0EWB6akgx<SmgrHJMS@AD)mT?7T>^QBZ|IE5?~B3^&%
z#ZIxrF}ad-d%S_8*>jm#*cPRT_T$G6J8dy{<4i|7vqqb$USsyG-`L?`e8$KVc`#zi
zy+3~!TW~3zUBDxGOj5O^7dO3TUvwwiCSIzvEAGWT%R9Dr&UZa+F7I42(<5b~81{dH
zaVk!cb`P27iOZmLTjG#8PXq5M<7hksd`Ap97*1d9(H0oz&s)1?;R&n@zBB`RG9fk%
zm5}d6qgrc&?hhwEWd#$}+{b(vTb6}02S1Oh_Q&kIs)ssME7AM32&CZrX~vZ81xyER
z-<h+;!E>p?*51l%OIB|dG99TWqfh==(8J`<mblD%AO8w`gB5<fu*(a*lSUku3pbLT
zPpxw{)-xjvoJz9kR*)(_gDdGc+?{-R>vx5<WFa9Bl;D#Up|-Zaj~~GdVVxVtG3e1d
zKD&F|EHXF!t-RVF5LN=xm#tK&0ah{^%w1RGxU>~#Jr=ip67M)kCm`RUok-5h;)?d8
z!Oz%J-#*sW!8v|x5zZMLHN1RG$k8Fqc84d*3pxrf3if59GBFJ;EZa`Y2Hb*AU^c$I
z%ymsoG$^N??^cdJTT`c)KVpJAyQaoNArOzO8u~&iy`th3nox@`jFG3DTi4rO&Wmea
zb*03i{A&6%phgmucugz_`&bVb+iVx21oR{RQamF5>p8ANsEgYMcE7+A2e%}36o6S0
zMvjh-$}$jB+#jEh*~?hBQ+4L3%@d?basoe2p{^4mB7ak*>o1>@F<AQCd-k0|67RVD
zgrnh*;nqiDm``KaWNxhIt-odg5cAtkWycGD=6NV`ixv3>4<pI&9v`2-i&ArpytE^2
zjRn}Fkk)@+`W`G~Hi*_vdz(A!X6VDWs^H?*_!#aXcVU>Yj6yr~X`4LtLS6B5*=D?P
zpVf8zh`I?_Q9_;BM}8jY=#12M!trsSE8|QpzP@_;r%wu1IJNqb{RLp7VvP~l>;5g!
z+aIcW-|Jwi_49Sl*Pq<gGKypY70hXiQeW(_)fbN7t~ss2PF{{;DeD2eR1JOlv#_tl
z`=C7zmezT$VDsjKO9h5@smJ+=T<^OVf~Aeun=4xut>K>bqWXeS$_4ZhW{^4dycWF;
zEGxkUr}J;eI)RF8F;R88Fb@9$zRlf8pUiEs7g(G7c}Ekjg?z`^P%d$=MR&aSXUTR|
zX`F=%HfN5y3L)l682)}N_?Nf|8Q49BZn%JEiul9g3>PNJf#<nVhc4w%x^4vs%W$6I
zH(iQQ|8RoGE_|6k+Sea3rG1Z|te+opKiNC>78){TFz2CTfb@4YD6WV}xzUVbavCUu
zF#yVCBB>SYDFR%YYV>fVBSr`*&x)~vg2Lf;8Nt_|26N^x>2wguw)Us4J$A?77fRmL
zm+2WMjf8SZp)InBe5}1Vkyt(z<b`4hCl=`~U=6@wSxI$4V0RhC0;FJuaVCU>yKS)}
z=}>5=c8E~S(I^Coz*KY=eQ<u*M*QrqD&zqp0Cs)$06RFnk@D5a6REiG#k)Pvk8$yc
z@9oxLHLiYSA0EdAcb7$Bwf2G@VBQK?{=5iI5|N+Gi03=^9lpiRETQ`Yx)2pSjP(sr
zfS2l3Rnj6hA?coB`sh;(EfNb)!;e*LisA%sJ#i{zSOOAAT?ZLlwyfWhy7fUiMD-30
zFrz_e^Ro^8oHieGa*nnWd7e}Lh}kB+iw?WxTL&CNe=x$;UeHA*o}FN!gZxo+K&T`H
zpNSNG0j<hg0FCc9t2pheFf>IiCECf;WqZam@QKoJL&)dli~AT!&(3_RJRX0axy^_U
z`+PtB%a<?s*}Z*R=(hNtX_7hy;$(3yvJiYTdW66MbhA}yDXl8<qV@DD!A;~aMRZZ$
zP{!KczW%+1I}d;`Vxx1dG!L_`I^0$Ns6CP5T%`{FksR4wgb~bVrr~pyT#;#+yvDS(
za^b~~@Z&RP3Wjgn89)~)qoI?U8uRm3`F8bTejSsei?D!1;|UE5oFj<#vjj;V>q5q9
zx>w+|{4LnQ4#Fs8@m)b5b3aNC*W`NkISM0?l!><iuqUeoUkhk)9wCdkH9Fm_#!jOB
zDpwYu(I5q{ozwHZ#jZP!RW7077p>eRWOlu-52?^5;-oNa4AxBS9xC+bhY;v*w`Av*
z=)~G_)AEE18!%#~h8bUZTPt~ozoGu=PZFoye9A}zZXN|d;1I;HK0OP6q6EdM()r1L
zl2q+%Y`yjV9YEZ>PzI&cvBN;dROjms-iP{qc_oH%j?(Z9Xub0!tL3LxSAsKN_Zi^8
zBxTb}MVx_JH;BCPBp&!>$a)MP-jy_rNiq)ox&llhHcOT@-oiJ)NXo+VIkUSgt{tSv
zpBr<f6&Jd8-Fd$L29b-Q{IQD)C@z)Q)kbP<9UYPM;^J+a@4PkqoTS01k9>=7M)T!o
z!sK=ev)cQ!R|jh&tPeuRTfk4op$vZz#zcEKw>hKl&2RghGbPl>8T_x|pVnTztx9ld
z{~1hHTHH8V%x&JA^#SP5fhZSBeN~`dTj>#|y%gTpaXfZkU&Z`FuP(<Eh4_M@%zI7B
zkm}n9_MPfGT7!)?H;<p%Ufb5HzpOu2-(Bp&p<to}azX}u7)r`hlbdTU>bY+-YojCs
zmxFGYn&LCAnKC~peE_+NPb}tf76EWO>+DX=)rlEnl;=7_v&H|~v!y<Jb7pM1=WDd`
zN1$RvAO)B$idkJYhmw|tCD^?pSre?t?|A8#$FGt}Q{(s>Ro~-=)mzgP3UeD<<XID8
zY<1qlpJ?+*Pji}fw24HpKwB~|q$wRh)vi4}I`B2o8%FJ<D{68UG*;mfiAhNf3=JZ(
zcUoG24$8+J4xuhnV?VupytTRHITnAr;j;w9g#l5$Z?;w&QL&nI#L~r$X%&aS$58GZ
z%xvasm|^-cN|z<==m5X;WOli%E$Xfkt8C3T#&4lPnlj(L3@|8pub6ToM`8GkGq6+!
zI0N3Z^>Jl_Y{~cC=jpj3y?{2GO8D^MLl2lD@#>C!>;p60=Q`PM)H_3!v)-bF;g&bT
zR{Qcf%?a<W$VJ_uX)s={oirQ=YSJFBBI>j;M&NAodbWP5&UR9GxF8f?ng)HM!PNz)
z&?u@qX@u_HQRem%4N`-G6q}5f<&mu7%G-?z26R|-JX*r~<y84`wf#c7Ia@JPCJ?Zv
zu<q$2lRE;F)L8hkd(f7{4QjVTuPfMJA25FG*;P0E1d9;U>F{cK&^oBPPS<S(QJ?MK
znjH^o!~pEpkE@S=Xcp}reNv|QT`kJu4nTxe0d*#XBIDo7pOc*F?Y+G`V+O)4jnYGJ
z4tH*?kl4JdU8WN~{hkx{7Lb1l=9VJrhxwK$>1JRjZOcPJ$8SM8(Fxpk7_TIVHuec&
zlH%zfKYna>7}7aJbEuS{#f!J0c8Go#w?KA(sK6;hZD_<L8*mH*a=yRMqw(QgF`?77
zl1q7)uX!DL!l<v7{RK`sL)f2Lcb%#{lg@8r(gs=#3n|2GTKHaU?x1sQt`y%a9Bo(M
zV!7<d)%DU<7lpVJF_a&Q-cLQ)4+;vh`KVc9qL%nlT^%-;f@ak(15DQD6a{vY``}!P
z|A8EU#Z0wnD?iINiIY7oTcgGsKgAq#*}y+e65bV^1rJV#%ZT3Q!_$Ag7BzQcl?ZH}
zluxc;(t^lP<1VCjB=W58FA?x6;M9B>i)LUB%mi^1Z#3f(?0OswJ>!y3Qa?e{)H-fJ
zM+P+kqgZEF;N71+Kl;ESL!d44?52j_vkf2J@4;`mjpT5FdfQ|fh*GQjWj7Dk&XCXC
zy-xA6TghQ7F;!BnuNRkC<kcQh$Z6y3dNB@bDAXthaRzPKRr<EvQaCdtc@sRUDglNN
zaR=z(yt2QAd>3nch7!}abco4`D?ZQ7nkNi}cx89m+Jw-Xs^4>L>{Ih6Kg?+t!dVB*
z<Ve7OMM}QJxJLjIlAtXiw4Rw#`6G|}A$+a-{K;fm$UBRN?HQei1y8PXk`yzIm~`uT
zLeBR+<-f$X_OV&ch-+5RxFqIA0x-)1*}KoiP+Jab#usZU{%)jMqU1^!@e)G&Foalg
zd@r-ge=&2lMrKI;9Gv(yY)pwnt6BJBlE}@UNH#sDE}qlq0Q4q0zfQX?jv{}=14wk_
z&*Ih5wzf7PbWism5nA;#z_KFII?Jx@dZc=9Y-WcFa)t8dlmP3c4Vi;E^?gjy9n&bG
zBJ0#|=HcaK>!^A6lnI#b7_|9@zTt~^$Sc=9tfuRIwRYR?SMEOW5)dv-Pua7}_rUz-
z@zagIcF-gmZGMCbBaW+Zdm<!J<5r2GommTAkc8ILr<5!~S04haeJi+*jjIEvTjixr
zG0i<n0Djyd(Z00In4aHnH-GVrxulD(<0b4mixA#@{;F5e>_+aBR#<o7j*OrR8+$qY
zsx<r>WN!238U|lK#k8SUp)^cV-fL$KGurg>cCkhy%9jc7u6yd^ky;b5*`6j=%Zz<B
z8pPl5^zRQ76Z*J&9W<QgC@ql-Jcs3r;4|T)?*u#!sSIUPeOVshck^-6r;N5w+QfO0
z6!=pVuRc{(ok=IpvMg^IvPU4G(B#!y=yODYa4HRXO~LI4+2<qZ=!D@HiE{O98^9m{
z)ebMh%&4Vza|Ix~wlFUb6BR>1(%`0x3I-he5fKbrhn)xEzEc5~XBobw-k)zY>p%HU
zLZ>t&3XP2O49&D`GfeHeF>t~01KyyW`zzsIxVA+zPlDZgj&jkTV(5`o_&K?`%jLkN
zaL3;z;5~CQ))g=VE?ze$dee!L$@sjDU`_Ac16+NphRqf|z1qdHG}OU9DS91@k?vG0
zakI}!x#5say#h&eC^6Y4C#cuzb53QS9{H$H%6W$!__uy_I!CF;A=ub@0W2^4{hn1B
zV?`HCm7Mr~IFdtA7wz`jYh2AFFR^`L9VjyhgZUtnKuSZ`JAfm%n^p^Y@j&-vK-B$Y
zEZ|Ch$_SUjbGmL`bVm=;x=tmWt<Cr^g<JX1UO6wp9jYZPPn}n+%JzT_XdzJy3M*xx
z_S{skqVtj-*o0@1Xbve-u(V9EEfZ0Svo1rL=W0DLj*kw)vrqNts@^U|l4Sr!H-|)*
zX7@DPYP}C-d27e7f5O>QT@au``j{7E%$GZPXa$RrEHJ_3ZcAp3|HY<E$xZYAluvsv
z+j_P7a$Ly;XP1`v$tlM1{4I@9ZrU&=vZz(ojL4nLRNiTGUhonC7hOp&k5;v%sH#NU
z?%<0ZpnW5hAgrGwYZ`<Hy4Z9oUP_4KnK`&Z&2T6sU2X0D(x;Rd%8Gs--@|*-zH;Fl
zSY$%q!Z{q*hBHvZMDJ}5m48;qdmE991;7^AhMFaIbkwe)W+-86!XN5(&_z#Zw1;}R
zH}dd&^P~Hq`bMnW?Rcj-DnF+}Mjr>c+?TD+qFZ(39zC5lJBD=aJO!$ME)ii*{9_eV
zNWHuJBwr)V6yI2dOeu5a=d%{>%-B3(nDmq{v<1qy%~q4Dm{D83MTPSI8yV_mVoAOq
zQ`CDjhW$KxBjY9fB~ti+!I9wP4mQn2f;{VhEToaTZf-evWZ>|_%y$zOd}(ZS@&Vnt
zFbqAVu!j~X!Hz<kA5w|dJG{lMI16Y-7oiHNG;5eZj4!Hv*5iBMe{CQZ(F5yFbK=-+
zB3hbsvG1Yf69;#<fr|dn7&CU^uE;y!ikmXnnTT`T_t^Y#56Q5SU--V3&GOSMHBtj3
zLaKu?Tu_*BT7a;v(vx}9LnjRHW!uXW5%!G9-5|yBxkePZ4B?2{AAJGm*Nj(7KPRLH
z+`sxj79I(Gof!bKP(PgcCj4KE;OAz^f@{mr6oqi@&k7=yRNs8hmRr@{*P7`=w4y!*
zUrOKL!Gp$AP@rJ%Ide~q8b%k7iu$<rHM^m&_sU^h!O#Ej0enU);}*YrZNr;F6RvyD
zLN+DlYCr19K75hm3+|5v@hr&Ccbf#cWhz-eK?`c+C2d_3S0QZog&8{qH32H>PJyRS
zUYNSYxga(%)>Eo^Dy9kqu9LAC<OWKvsQ~@Y0D0z^M-nX%d*iJ4-g3c5d}%VIO6J2*
z8*A%S1@F0{&&wZc-cchiTyeS@h?YVwb<F9A^Pn@d93E#!)WGM%>=dG~3}PpV)`mbH
zKYl!`UhuRuAF4w34j5=|bi(wmEbD{y_yOfA6v_s8bNvK9?JgK3quraM90>co!F0)-
zdbyiJ`!&-o&;=FwcsONp;xie`omBbE8l+k1v16TH*k{=jS7hb$H9qwEbRtN&T!}QX
zWR9@;#(&Ms2Vq>pENLUMd0tR;m@UOFkb=K_c&0acZ&Nz^z=9R9Y%;=D-<`l^IA-oN
zd@k8{VKD@)lZJu2?4nZmvals#IT7U~Mxt3|cNZSGki)eFK-~B}%|ok4%+v^14*u`w
zFJ=25E1-y}LZI<PSJ#7gR@pP?Y0(bKc=l7ZY3#Z)U<+K3=`=Iy=<S1uPwxXShc$0o
zwkl?wr_GtHRu!wQQC)#j6{;wmLzh}t+r8!9-f*Th!}IuCJ03B&NqbR>kdv;00L8)#
ze;JQGbN+q&fM^8wtjiE;g;_6HxNI5t=ml0i%?}Pn;4?X)x*m;;CW+S`WkKnRx<us?
z_6|u2X$$fFfTbmc@bK`6fDND*#@AkmDwD#R5;-B5xi3BJR{C?r5>Sf1$+9mw8DAf5
z{)M24XoA`<kB~RCC7a6NTl+VXdkRr>5v~yVnOeHFfM{1-2;f$_A|gn?FJ+e4HVebc
z>x=W0_$}n<qea<0e&-B+H#?H;Na?`E{Ltoe72|Kn-z03qsz)|NUDe$%7GS7zE%k$m
zMD1{7FgCX)OZS1ak|oXUA2q5@T+HW3Ye|~qnC6S^87cPic81)9C@OE`W2`fuFkS{<
zv`WnmNG{_uiK4fynSXzEW&XftrrA0KB|rz}8RX}r)7<%F!))PhxapHKPgz97s0J+n
z-@%a|3DVupu3L4KjSQ{{N^HuDp*I;zaj^+u$|=g$@;pU7LjnS5JbzZb8sVduttBrs
ztBR!Zxe#o&T^rOH${7(!8(p85C+;U%D{L5Gq(6faH|NpsXok#|lW4XwkrhMf5D5pE
z$#tHn9f;3Mq-nYQ{qDW@xLOxgf}xT`7x4`8%rJa!ZDg0{m!f<oGN1r4XF!lR(QJ-}
z-jhF2Dxp}RWJgcU81TtkmOsX>#90qeCwnIc@;giUBpu^8iHwdZ8BPpgbptG5-}cOB
zRcc_ww4g7|hFRSvSO8x~psf$o_B1<R12MH1W;G0^0chvWn=>vKH>?JcBwTW8fDlju
zcvnw`0dhH0q5*Q>WrPy)t$3_>@8@{+qE8w=6A${z8^L=lJab=WhcXO)YL5!%Ni^^l
zJF7zQTdpAs;<w-3_r9i6Vmn>GH7)_krA1U8^7Cq+qPs`Ys%2N*05Bq#0YNo?(+6jD
zjANj6IAdo|YpJ_PLRJ@$Sb9nfW2_fo^AZ#`Z}&W#g~6VM)a9sTHu3TBjC*M|o3!8S
z08kQN9^voj%ZP0yNI^;%_Tw%}Ox73>X^Re)L9WzEGaI)8p%rpo4t}OwVTZ;uB!lB$
ztMpL*1QEuVCJ1bAfQtKAhv^B)iC)?p1@SD$*mFzm95;sBA`o}c?@Z&&+<LwR=9Xa(
zCS-*BLW7j_+v7P;`&5qd27T|=_SmU!lPt16OwCZa=U8ZEZ9PGmdUr*M?D$OE!C~L4
zs<?aNB|-W|@f!}WikAK5FOuu@Tja>#<p|-may<_e5Jp`U0TG}>B<-VY!2D-5C%lgU
zEkAU@<}`b81GcpmyWL)sR^*FI-hCEfFUT!#@btr{-@iBY09wD0V$U>Ld+~PnBKq%7
z!*5|gdc;5eg;vC=aO^Dzx&2N@EfYUH)}-NhwYO9(T;d7qvXYbgL9wT>(#|0V%V))x
zhN17I+Q%nVgzl6ecXlP1RkV0ev_xqxTz;e7g$@I@Z++2`HX-8aTy(hf=&9@8utQ&7
z=1#0QxR$A(3WL|DKes`Nn5?XqN7wEb>+w;9`=Q;5XgFIg2W=M}IxnqI;G(I!8F!Dr
z2f;(|<x$K9D)`b@k+Y;^WO06H0bJ|6JK6VhyI--(#*Sr7&$ULK(ul21OoMEgq{P$(
z0B&pHv>6S<GTW_Yk{~E{OkIbVPk03RQXFu}oIj{(<MBrHg`5`A(2&aU*sVKhKCHs7
zdM)Bt@4bk>5#o#H5V>n>;S8-$GE_li;4{&n@62^mFM|&U_e7l=r4hf`wbO&Flhyl_
zid2s`nLaegEWGp!%4A|)NwGG^dbYh&LW9Yy<y_HUzW`_iqJ;iTheZ8@gHH(Qd1?Ri
zuHa(mC!W}bDy>vGn0~EeNf?Vhq8X2v3g09!;x2UTT6*varvc|r+wWUpXH^d=@Mp4K
zqZu13wRIJi#il(!5@xs^ln3-Q>LJqipeJe%FFuuqoVlz%9qyHT{2D5Y@G95#-)6bw
z7VeU)joA8tAHXU5_g%nm(FNAwo``N@JLuORCQHR;Wyz$n(MpB6(Hs2;_gnPsXz>X3
zlZeWGM+)Eq2(ly`5bk6%wq`rxeN4P(uKJkNB^o?}-%YZbEBO=VKAD~P(gf(_*TzN6
zy3^fJ)ALr0f5ciTMs2LzL1qyU1MH|w%2-KO@~uH|{%Km)YQ9GTT@icNglFj!ghX@O
zpfZdC6?2k*nx~Qg_fl)9?MfCXA=-}?Gp&b*wy>h_Oa{)Cr**KR-9#mpf3u$z0kN!D
zt4M#8BPYqhn=kC!`Ovqtb@u#`qE!!kroL}kG{1jqR7m&x)`)f}wn1iX!N9;kl;NPn
z_Fqo~o|h9h9mfo9`lOptQqPz+Ev^K&QQ!w>)`N)$J8LOz++Sl{cC`$)C#rV4Jpk|<
zfiek6rB9RZ6mSsj#}P2d+ZyFOV@wzYbOOpl63Rq7d23}aI$X|7tA>uII4BaN1X0=e
z*QN)f%4J4uLsuku%eC-c0sr;)HBcw%m75aT-`_W=+WH1y(oLm85({1V-#)bKa#**C
zg|&4}+Lzk(b3+I(8+h?Y(E9hOL^fkz?HG@TUbTHOe~14l$XRZsJEGCZMsm3<M%-=|
z$o)k)8usgpVUQA;;Kxd=0UDPBuMMOrfdfg(WU5lc2Zo&*iG)UF2Hz^^kxtiup5XU1
z0{G=BeDAHxlQM!DVGzhNXvEhS2E`i4ii!%IezmaWp3LTi#(*w<I$T<$Ttf0Af=ssu
zDBlkyC2(XGK9dpG+U)|XzRB__=G@k3h3ch}yGAS@!WP4uZHH*jQX>@PN<n1%_kXX(
zOUG6o7#=>toux|~`{{52qTzpuT!afGrvIi`t9bPK9uZHk%^qxlCHiIR%Y{ITDP7oB
z$bJR|m(X6g{a9P0foL2EXTy=7@tkKDI+DsF(nMOTmW}$}SDm2TBk*0alKR3{Kctwc
z%2Y&CwP{Em-bGsDO&#ac=Rf^yrb2+1GFi}4rTOPrzs^8HQy1Tn0U}8I{c(JpvD`co
z@6BZyF*rO9*;0`dtgNg`FMiskd>xScg}_4Vl-s_D`Mbb;HfNRItM}e=D;A|s%2CtO
zB4fCAzSRgh2e9#$KUx^pWr$IF4L^pUL1WPEn~i}38sOZ(f!xow+o@EJ??W7m8fz-$
zO2cnLou9Z8i1v1O7qJP~W<+)@mJ0IAORUUGG=o9A7g=E5-g&X(15uX2HWvJJYg;wK
z^<IX*iKom0`7Eb5SuwR-_*v?Z{Yh05Es}^p|3xeGM3j;mD&?0pds%cEkD}VI+X^ru
z-1lBIJ=|y)xYqF>A;UisgT(BSx!VD!f_0DDiYA$X7=%O6&ZE@KT!lNizl1urEH?%X
zIio)2yNuVFC9Zwu#*JO2*2NkgkYozt-&gta`#az;C==DGvgk$7PH~|AxEL((jXi}p
zMW|?4p|2oW^CT?uMVRF7AKUVaJ-XS@SAJX}{*fR@A;_OMl%Z3Z^=VgXD;M#q>!uY$
z{t0y#VkX7I*uN$gunZm^Kc*+wxA1l&Amg(%Z$`{H>Fvz|fS2PBsp%ti@dn`rJml#K
znDRswh7~?7@^hl6@dAVnZawsB<!kOkjC=;ICE3iix_ZMpy7b67d^4+OX_vy+{mF9U
zJy>p1mPN@u?x>K{2Z=(h!9qQ;Sm&CaU!cJb7j7f+TCm}&UCWdAf6)^tM5MCKTalAn
z?yNYfo`P_NioEBaU|YgE@|V}_<s4aO1d`${tp*hTl7x7SD!-HZKHw#hQbxHo{$X1b
zS?NO1&ZVzlh`mcC=EcyFq>4J1g~?@p&S@yw{Wf^f>arwE$NDM{`1f#RC%!)U!g(+u
ztHs-~Gcru~>kbDVg@0c2Sp>p%PbldC!M*;Po7*gnfj$|nOK14V-Z&?-r+HfYz$ZIy
z<(C@!tzzkd(Hxeh@-MJg`h_qG<zgKz)UY5~tM}^FzGXv}MM{b7NPo$k4?&K(rKPs4
z=RCIz%TL*v?uh$8;-Xs9;<kKLL||D#2u;nAE1-as)QcdU_E$vpL$takj4m2g@J8>u
zd(+_4ohX|N>5+G|6F%=_EF99%x(*SB$EtbF>m2t_@#=HO!$*kex?Ldsrk#r)mwk$U
z_<}U;1Fy5a6&L}-TGE|&kDvT4xZfqcD*7_^%7yPw{?Lop_{qq?b1MlQA}r=m;O?w$
zps0CGz8CtJl*r1ZdxAy}k$r!sxF;dSe`_&dZbQ-BV+oc@+<YnwG2Io3vK2h{L;caZ
z+Txy`GB#XGJy2?j!jg^o<+_(2-yl2@m7)Ba57O(}Sa+BJ(nV>vh<lLv&&)Q46itq!
zFhObQrz_8tsd%?ukvJ4LyKK}qr45kWQ;GU7W`GWt1bwBy8lyH_;qXz;b14Rm`}DMk
zr=3`{HCd}^u+upC2t3porP+`k8J3tX)GjlZazTmoAYPe1?;yjeEJ7E74!K+b8hQ$>
ze;oLzQ9QGZHJk~<4@g0~x-G{X5jQY2#HY%iMo}q#2aY7h*jiJf8*8iFvc#w&D&x-a
zaK`$;#FY&NQ0Op%TH>|ZS7U((=_AbahzZS7u>1YF+J_p8zo~@$icysqSo+h<(}SJu
zYIKq!M3`IM&jT|xt?OMMq!bjG{JI<51R|z?Hk-}4n(q7;;Q^~Y!(Y0e*7rDLGtgEn
zIM$C*O`$X>xGqa3>Vq?{wfTD5nTGZ&CXmOBK!{_6SfLn9>_<~1tyB#cwO}srNl|JG
z&I@U$-%v<;!Dc*5I;g+&jO|Nw%g3prFO2=w!*#2A8Ul2cu@(t`%OrS}x4;RrzEmE1
z-&t+;Jpj-9?GPexoLX63eaQQBC3VQOom<jZ*%`h(A;DLLD2XD**n=yb;kg)bpUc{W
z-@m|=Bor}f$~lC8yWd8nf8Y-lR7%g!w^Ttne$#8FJ75TU+L{~I1b~iJ@o1rKB}`u4
z1P%VjHfzC`hh@+md9TA6=(T}G|7*e-flX)m#YWB89oz&~>>^+y6`^J3M{Y_PgX^w1
zu&ls3P5Dmu$BDO|sQ*p22wcb}Y+Z3QnVaBkxCLD_T35?ZeaY)rR7yEPAL##>PJ}E5
z$AulKL+}7_+E3p}8V~#zA0QyL?ylzNM@pXkPZkihysx%p<?)du+$Pa|eqXIXdAm^0
z^M`L<su7{S(vBcK%~;>we)l{&A;~)`<?Fsm%^$*BL!v`zHN1=8@P4=Pmhc5X@i>9`
z9545mreZ&L6(7HQPH2w&uXKL{LZ^p5v9Ym?=6&ZJ<xf8Vw=qkd#C$&mq-;vJ&eud1
z&wm{gNrcOkt+)K}Brb8g@Z}EXMc|f{ijZuBbu_VqmCwmtSx{A4l>hdv;T&+kbSqHN
z#S*i0UKzM7ghg>hW_FI@#+a%3BM+*P7?n2lSg5LO`s=1M7XU#us3s`tB_3&nE9A0%
zNP$53d4$tWl$@Jhm)rp4evP&tw5pnsgDUv=15Tj$=^e*bqlv3hAY&?wT**}pfi5*y
zvh6*v)yB;v4f>nIji5PNA!Fb?ef`{Ft?}lGw11ughych^xF=jWzrGUM;p23h&%#LV
z3i=6StsqDbnvCMw$avSR0C+DAe+W6f$|y9KlxJ(HL6J%M*N4-+MzadwgZkgdFXyMl
zyOArof}vcP_)zaVH-C5y&irY1C)(}5&Vf2OA_&&~-c_BLDof!o@m5l#`G8E?b926R
znu3Wqa|s@lxj}4WM9*HIR-a1?4@Z@vZog$^dH+`M-q>gJzJY*s^>{N>-a8e=*K4^T
z5hG!{#O(ocU;AB`U7O(77hy$r2jrNvsf_GYuY^W%3sHHaihjCiIRbC2>Qt$HE1!Ns
zdY*<AmY;T5t49xVk^P<vSR`D}^k|+AuD65$TaBCUVaIel-Hsv2EdGbuAaWj4*Zuze
z`&TQEN<LYnJKk3GTAX@xLS9ejZI4;|+k^iF4H4NG(RTafE9BO_Bg~e%AZ+pLpS_?j
zWYWp=Jc$=tyKVNDweedLda`zXsjCIp+J6V+P@#?%KB?(pTl(XrD}dSiwiV0F{y_0(
zNVMl{*6*!~pVj-o3>2$?WYgiUDEGgk%+TF8WpmVV^#5M<7i;|bN_tvca<OrlbGMq+
zMY*Q0eRzFMH8enj%pRxIjFA0SP`JdOfXiqcZF2}(aQ8xP$n=ntekvJ-3U;yu$lA@L
zDi&;?4G(8Zg%g0TK0aFz_rWo4WLu9wXhWI8JF_^(TR%Pue=DKzOBs?dbjJx!&VwGK
zF%m&^jM{*PyH0+`3!|S=sspn#C6{VE;yEs98UsWx>=Sw#1IG$T^!_2v4SEFGuJFl=
zFMZkE#oew|Y(mhca4In$&=X{Dd-uszMu}g^pkK#M?}v7pS{mI42HH6HDoO2s1Q~Gx
z>$Y*wjHi;I8Z=%mdx)tkuMgB{b7W0N)~>qVSz7Hc0GDnHnalJ?P4hNy`;oRYzMWd%
z<ARE!fme>IJ3?hG4Jg}xelkyeavQ*mY<7RaTl<WQ^0zTRZ2vj$?}H>kbJD0fPmcXK
z{Q5g`s;bGLW@@#OoK=Kxzh;s3IOqNP$j|ucZbBBImFebO;btI2_BV|mt1#tb!JY-8
zb-wCsj5O#%fo4uQNAqClTLxT)T4h@gW_ikY!WDs&k5yLFg<*5?b<E%HI<3yF-^Th-
zL*LADuUZ<KLzNQTuvij&D+M@6&!9Q>d+*Ub!H!L05UWF3AixkUFr;$fTct%jqN|H^
z-?Tci*r!iXPE_(<VQ1X@QxFLLbt41>gS?*jd~juDMF!UW;Pzj?4s4Pt!b>z?sV}Yc
z?uXWKX2ctd+o<|e_T^(`R4j&AHPyoC(XU+hYYb)G)Fx*=%=!5w{H)jye@JCWT_+q*
zrN-8o!fE7Z6{evIFBi|ft1vw>EHl1L+d81y@n61-F5)@F*Z?c=)oIrY1?p?Fc60)7
zIICWb_SZ_f^_&?r>Ic#Ma%kS59j_j?n8t+x<8Y~ZM<W_5S@Cl&lZ!0#Z60e>%<VA<
z_p>)>cHJZ?k+Y}6WkzxoM>I`Q!J?BYMG13leF2obyzhlR(Btzn=eu9Zav7eewz|4{
z^vQxJ#;)W7tSEl3a(;fEy}7$6*v}uNjHYHk2jWP7dc6W_ApYE}SKN!&SmV~&Fe={j
z{(<TKnlO6r(M_N3L7}`|C)dBd7knmc^p(`dp`oETJ!OZ1GvCcve(UgGpCkZRCS-8p
zrZQpNZ<)2%w_#AAJ7@b@<+4i{()Z1UK}{nQ7<wo!#{7I23FcF-7jrF0Shv()FI0@D
z&tkX&D!usnut_MA@NXz$AvvgmOsDU!$nMtjKQ_FjhWFQbf6+Nz0n-0-Ql7%Y`#jld
zhIys6hy*R)GZ;LCq;OSEB-w8~QWanK6-4&3;}3Ugh%Qy~Cm+~xNHC5*Zd7e?ri(C!
z7#kalr3l!Y2y|kxw|+_)WdI5P^yx!<h6)x;0!(u(L4nWxb)k9?9e7>ki2qg$%8Ygg
zcH<I4D=PJg5DRCqCnqPK2b+_gXvBl_<h~1xNr-qKSL08Q9|`?^+=x369<UB%Sp2f<
zuG+iOHb-gw-Yl8Nd&}p+n4WS>ZAXv%#jF3L^j;#oYO2{)rOHdZf1GLkt+>Hsb>ZoY
z%HQ5^DS~ZA0cA#cI!5Ioa}S9}`>-nc-p_|8?t(o*ACiI0AlGn-C&$LBBC8JbMmS~U
z{&1!aO?RAQ%Z*Vw)0fNEHf>P!6-gp4DvP^a^%)5q(zO2%{w09)Pha=<P#oly?+R><
zOp<Y3X0^Q5jkU@r$)=4&z55G!FBkSngNr?ixmx4KrtbBtMj5t<T-sm|eU^b6K{v>_
zo=MjNh}@Brm-jP<^XEM&NF-i5hual{yEkj4@K&C6x3t`qhK$o9=)ah1;1Uboat3ao
zm`Bh~(a-(v4fFYNbLt}J?HN<sYZQ+Cw)f4S;<Ki`sv&AFAlNalc=8{J{04XF{$<yB
zf3fJJH^ZU#UO@J)_FIFv4cTiw!gAZI|G^qzuqwap;B0_2<~KSiN_KAi{YG%)6G*#1
z$!C-u*>fL%8U&ko%|?m7ayn^aZhm}yxj);vm^A8_I=Ut9Rdp!d)>bs-BuPEw8v0vD
z!SkSIQDgE6M=|-M**aDP80S~BPScM2TkU@a2>+#?P+%ST2$g|P)A+d+_=qV9pPo@6
z@zDd<<;~A=)^dSuA3&;B8XgP{qh<GaKb+*^_%jmAx8bp7Rsrbc!AH)=#Kh3r*4xj4
zlC*k51<;<8jtPxdK0+6_y>_A{KFKCI%?iN73yepqo@ZzInk7%`XApw66RG3_{dBF+
z93=|9Cr=z*-Z(reb0es;TOBxNNZ<ckh|`atIY#a&$jD1pkM<^Fdi35ct`o>bSbGrD
z{2h?sNBLVoAHRHqxI{sSCbo(3*3&9bK=kJa((py-(y3sKXc1w3u7Fe||87Fuy`YyP
zK8B|BiUPNPrG9B4(J@yvw<`TS;(}j1`||$J<6M9WpBaB<9Gi=9G2uuV2>;8E89Eg)
zFVkXWuJHU7$oj2kXzND(*n8hs@|v2&eb?siMC}Jv9F;4j$J5XHb&_rph<k%c>Yh<b
zcS6#Eqg5GUct(pW^ULQ440V@u5mFHTpDq=kej}de`5;S6=J_ZK(hx5_`51q`y*cQ1
z8p<{X(t>RC*+W4}>#Q|x8Rtdda4ga*%H5X5LIQ?%5BfAMnwq4?@R0d-WL+(+$_`j(
zsllP4%lXOdv;Qbox^5i^mTIl{)odd(9Qk!??FlMYWYKdPf}8ap1N|lMYMTE|IRKhG
z5a+wkR?@gDZU^)I&D$Vb6pA1@*DvF`ZX#eW6|O(#Y&3yJ*P*)*=l1%TUQa$zcO^;&
zqM%V4RBrR*NV{qA#g2EWn<%CD<HrLh>Qythl{!;JD(MwhT^LUuJ$ZuNm^-GthiO23
z@`#{m$DO<)Y}Vd3S@4b!5%lBx$@%K&n9}@`;YiG2o<IKeRvNT3U0686E+F%Am%Zzm
zFWUYlW{#^T>)ivh|5yeT1Ayepu6ggxYz3zid($&jj$aN>SBlV~uC=rAH$E3okO7!S
zQrzqKc9~j}do<U^-SOMQtp0vXI|&<irq1zO{ufnW9aUBLMGMy}UO*%z1O(}lmK3<s
zol;77cS>GB>F!2a8l<~hx<neKyPJ0|pZ?x^|G*dwhv%HV_gZ`Hx#pZ3A4WyxkkUSI
zc^&dIhZ`#(1gf^tXgZ!tn27Jl^GDji?m5t{?3D6$_GH&(#BMnM%5due6xR!zzxQ0m
zDZY)_e!8Sj>6S4uHB}D?n>QP#m=rygWP(j`90hJxL4W)Y^@6e@k7%U`x*evo84tZJ
zDk&LymSsRSj#{awcec#M)|eh${YwklP4aJcvSA3P!{doD-|MXxo1^0x)GH{_cnY)r
z3;c)kfF2~okiR2(f_hm0<>qPND4kdkycC@S?u!y2Xi1MC|Nf@x0$k1Pzw0Te_Wm3p
z4B@`Y$9HkqNn`@Bc5ATvsIad)H0eb4G|1sYB5?jbqq0u+yNxzwYYDQUIFu$kA$1YY
zPy)MnY6aP+@5aQI<`p$IDRH{}Es#jb0jXY|0`5>2gM<BWNcQGSHt}DqYlDMdWePg_
z`Q&f@pR;KMv>PJ7FA&NxUtGB<JCI;X`NrRI`3X=h?x#aGl@;HKGCstaCeZRcH|(!9
z>#q%W;Ks6I*xvd9@uHTzkyG72=SMaOMTllMIug{1f74JY1`xpE-S9g&mk!NvKtZAJ
zeHehvSb$=RLrq*@f6Ob!X&HAPN@3&;smMhpM&cNHST!WVxyi@f-1FnTD{y84h$B=X
zn(cn&^if%nNe{&d6b6oCiQu!nySbEkthH~*f}wM>k#%yYiS2750#6;{M2J_&?b&af
zS6-7E(yTstoJaClV~Y~tNI`Ah+wNSQZtsUF=2t{XAW&~FyB+`s^VCM)9x*14R4mi*
zA7A;Lq<N}T&Eea?PjYDT0b+NymZg`GgDD}dAPZ8h_feU#gJNuqD5x>Ltxnrydw%GA
zadpSq_QkGv)X*T}9ssJlu<tK!k8Gd1zf7UHouEtvyWBJ8-JdA+O)zSH7`3*2{USY`
zv3T-7@Qeo4I*-A<iK612H^28IlW4|{B#-a9kt*<y-FOLGXmUf>kM{3rz?0(N%aw6v
zi%W|{H?M++BGd^ol6#G5S?_GzlR2i|?jDEEW_1udCc$j<u!+%7A@<jn%6EHI7TP))
zt2PchDCeKUS;s)n(H1Q_Z@>l9(I_FuZ!)eIE;KOX3XKqZ@!~~V=BrG$j)#4?j~bdL
zFOu*aHvn@lzog`4gnRKMGaX1Oo^hVppf^Id_ak1c^dIpID5yFX75wLcu>4Rm09#Nu
z0C_Pb!8@k_Pc;q#VdlP8oIT=U3-PWZ`&U*3_(5kV9G>ap=)SA{|1t-Uh_`1&$L6p_
zYu`e7YW-+%gRnPuz<#U3onGzsV3`#7yDK*8>on3qz$wJ*$6zAcK!^MO6!)S>;<*Re
zvN;bMgY0anT6rd7oR{}z4<!1m>{<F?6^S&@pzxTcU)+i~dmIA>>F{0YQUV`pwF!Vx
z!w(f1^k5oP?H>Hj*P3<HZc!rMm#mZ7>n|$D5_K!0L@oclH9WJ)vw|uS7etcxwkfeA
zU;(=Caj(2DClYm$#+0yu4gCg#bny;y=^Q`(<#XS3Du058JyJBkPmMD=^6xkVY<jC?
z9>*<$@5aMUdLmZofT=w|kctj9H#4gb_OWnqUOChPwtQ_cjaRyn&*n#<2f#+H9cOOo
z2KFJ32Jpbw8E<V>_s>XO`Rzc!_U~V$)pYf>_c6UZ&|^wKi0)z3rJkclX>LP($Zw<y
zU=zZ-)Giw_3Q5}7pZ;wHrDGfo@;DE<?7$inqh6zElzO+%=4l>|V2^>s@?^R1?C!h~
zj0IiNew$YXaM-OSy%`HI9wAbZ3K06LiR^tJPUV7fYhirGG)V<}O6#h+#r~JdrI)T_
zO!q_8jI25pkcKj?j~eIji@xpxnvc~+LV$^Xc?(=6BCxO^k|y^IaaO%&#0z&}Udh$p
zQ8XzfJ5U2V&6hd>k0;XgYcd&L8YZk!PFE=Gm`yLt2p$f-<gno}qeh1CFUD;~Ygw`e
z{ALN9dq~CV;_{Zjqy&j(IPWiX>}1hCrM9eJ`o0>{UUEkF5DMZi5U)6mS>;aZvp1jD
z@B<LUb_-yy(X(++LR7=pKa2*$UFgXxbNZFmdVD_TeD|ww--zEgJm09<e>?ed0jv2q
zvHuYv9Wvi$@<yLAQwT)g$^)`IPxu0KrhEv<M@ukj13U+0c{z5XgoIv*-V1ibJBmo{
zM?z<jBVhOXORX?5CXHGf^I1y;FXYa52x4ENf&ThF^sJ2QH@y<@Wlv$6YDcf=S{H{x
zL|%-&21(1dBqN=U&IffSQ_8;u)kFw1Rk@530Oh8<1qfhyaEw}Y)uc7YHPk=%<#Yy)
z^7$xZ89~F$-iLG4kt$g2-d$<-e04?$E!UWDDKK~u)20_$54;q2g7RCfKp})4=}g9f
zLZErd)`q6kBPs@tg`sm|cYZvs7GHZFEV`#hUk~h#{oB=IPw3Lr0V0REn*W!_K1UU5
z$Op2V6^VVzaFQ^7AsI?I(8AZ+epMa;P)>}?wnxg?Dka@s8+Hps9Eh9dWV4>J&eHuk
z*o2+^S$4bleZDt5buXB1u#a&;Or^GeH)MRF_3j`7YKDAJBru3SIp7$j*+@Z=PUE||
zc=@&wsIQeIA%1oGHAh;SeQIqtF&jlm#2CP~B3%j`;m&P-cKMYPYwRulBtKx-KcRQc
zyHDdAm$b&b#RZ0lZ%vSrVZHqtwP|KMO3b@4KkCZxdAe?z^u^QNi82URrP7l_0-s$a
zQWu<fgrT~{O5h$QZCp+jefl?u{Y&H#htrA!EO#0hklnc+TIcG6I$u`fVfVz{WzKcq
zXteM!<P+F@GEeg$eI{v!P)9qhQrg_$B=B4!^}Z5{7ENLPBOL&*u<b*R`0`Z-kBDd2
zYT(dAu7NS+&CAw(nEO^h{cqYx0mSFepO+eS;9mQEi1z&58_8s9W%bN{r@fv69oa!R
zBhcNA!1W}{oxi&)d`#|$COteA5Vf0cZ*2*>^<@cz6I%GN&XjBdxE|jrU3k)DGSEwP
z^5%@D1q}NwI*Ojl^0FJO^bop2c8PYM8kYV*ff>(ST7U5HxE1)W7Xb)#Btg0nUr+#n
znvT!$qX%if2sw1Yu4Cex(xL$1Gdc08h3Q2|ir8-i*&z~dzr^A8wIsmDj!7orLjeG`
zR$`5O)wO&1c+1YYjC8rGZ&X|cP#%S%AyrmZhU5z9NJBaWk}&wS`}gAy2ymI)#51J8
zy+THj{*5hCoNh{^kR|3-j)nCa96++wkAt`{PVLHn*O~28hQPvga`7aXIc+c|5}EzW
z`H@|%7b~pbk1XW^BCsA4wt#`gh>554LHILEO*>p7?#D`pNr2c*>R^ITu!{$&kM6VS
zX;}&pn56_J$7!_lP%PdlFHC6kZST{e$TE91K;_1KMJIOTF_;ET^<db|8!`SFzw`<g
zg}s#ct4-}_z$U7x=yy9S<AXBeva!u|=OQGzz_l3c;^q170=!!;BG~ujzk(L1lbT{C
z<Mj?<mt`O5H=SKy?_Ux}Z2)!1>ykfV$Gpz*s__7gWHKDT!_%2|g=5G8Q^#`_(d2EU
zjSHlx>ut!eFEWo1*hefG>@=!H)HSzSWqG&V*NLg)e#~{1R8&L3Xo!_1k9z8J4e@%H
z^#pRybv|cLGKnc>I!?{CvecxZ`GK}uiv~V2l0k@1fnU!GPgJ#jT%7bsF^M8eP(Lt<
z0hH#6QVEf)>&sbt|8Y5PnA|i!1>d3GSopfZ^-`O!KZ9DC&PQoF3Q-0RGU^d@J2yQX
z#YiCJt%`(UuCGS+S)2iDRCN0xSC{f!$>ny_j<Z_8pj%7C^@3__Hx(e}qqO{@XA{;@
z9ZusjckznHGgHdrZKLI4WMH=|jfSc~BFdZ7-*u_0my7YjDN9s?Br;vUIeT|{jAJrm
zfi}u-KLpnSZs5Sp=YM0w7`v<l(2@@wWTmGE@i28-mx|v$*><I3bQ#sYi-G<It6`k#
z`teAx+a00&*TKlf)KOSd+Q1Qf*PvYe%xOYC5B1S~&w(q^az^&g9R5DiR^WC3iGcI(
zCZ|vOMrgb~Fh}l%9i*)d+r9S0glUFk&2`n0jBy^DUmIx&Q>UdH9tJ2E0Q(xu9Ybef
z5bxWQrZ|4n?RS^rcE$faFa|p#b=Di1{)13n5%LfQ!Fe+D(hI^lg{AdQTYRHo0#Pqd
z{L|q}pbOfhj!+Zh`J-m6)O8^3*wZPj6^^X6Gg&ZmRoXj$a_on^4b%UQzB;o*O*{V4
zF<3am(RY<FfYHyRooofjbxe`*&ELhzLa1QieCOLyz>o(yOA;sn^N{8Jk&_#DwTk8!
ze&~h`o=$7u+Z{DeGcR1dDB=BLS0d*&?Z$r${xtH$mR{v$qN@~}4yie=tRah+I8%5E
zHtD_AV;_=8ult1Z4*&BnzV2SuUf1dWjxoq&W$-?a0=1t&Ri4UB#GeJXeLk|v&3sfp
zr}_8%Zq?3B>)&NaE7#LqRsspjkAD2DcG#a<9z1Yg2rRn{5^ILM6@Gak)oz_9ooJ`M
zeIc6+uFd^%oF+|$I9uK@!oanKzKrcwN%U89^EUpZ(fh`F2^b)wI4JsB9XMS<w<FCb
zOtxtg=+A#5AkMm{qcLKNf+9g8To;@cT-Se?{4ikCiKG%I<pHsC<&G^~5My17P%BHo
ziyJ3wwYHVZX@~BCnz;%QZ)8yXD8ijXb<tQ74weZ(w4U}XM$J~tZ>EzX{RK8D)ev<1
z6J+r*@!9r<Tb-{Ag;w%2%Sl#RuxJ?3B^H$*QqQYAg?-+*;iK%0+?R(Kq)glijlUyZ
zve#AVEK9dto(%tBg3W!nW7yY7u(5d)Y_r$*`m-P5(6uY~{yH^wi4o((s%Bj*>(+?|
z{x2DF_3XC+JX&gV>#tz!m@|VVZBGCXmrs^SF)Gs~n5}_14d;$%n$G+6(T}}*oH?T!
z=j8Zoo}ISpAL&`Q?=}V)pC|ck=YJBRU<P2VyI(cd>4GuK#7|#w3GAGFS)E&rWCEpA
zmew+8Q#mhw=)QcWlfuNsHdlIGP9QV}8Huleqz>f>7+Q@vD5V=<k}_=wY03Mmki1e`
zqoQ{W%0#<tlRom<4#HA@M)q})i~);Z;7Kmkf^gbA$>B~j?_p4Z&I&U4$u$EOAFMfz
zc?f5%XJdo;@S6(JW7{ncWc@?c=hPhfw2u+H-=G_6e9!pdA@ypJOP{igXj2va1^b2<
zE~7^68x<KGKzFw=9NCy&`0HjoIud&W@S7-8@z;qQkWGfpI&fwk6PS+kW?gB?wA}Wv
znI#*Eh?80jRsyu0XqtH0ywW9{SqC1TkO;5A%po$8OWi@9PO>!5>)_3r8a_hQ+g?8_
zO1bOBqobq!QuXg^rI8ZK@+-)Gw!HoI$MPp^?$5*<+v#Q~L5=tEY<Gv>1g-XBgoLR0
z7FvDnonB!AIG&=c&f`?d((3ONf4=2km1AU7*y4nSE|R-1s^Q4z!&8G7wpx$(ojLvp
zI<_XCov8QGhFO1Bu$@u$8dV5F=yCWc*S%f)gd#DrI07gJn}=PxHyWz-O{l{!TLgC^
z<Ng!-@WjW>4*uwaBZir5w9lBN^XWu@wiQAZ#DVMNuj&|&V7U3j)ZQbj;n2m44#Ga#
zVkZRPIFno!z{QoJ%625gFR0dEWrU0Y#NfWK55!<~MdZfhz<dG80=q3`B6zj<tcS5P
zQ>a50I{sCcS||2Sk@!Vinr#7vU+45_{68;%&wD31Dbg)}Bxvr;1oPJRa{JX{cX1GB
zL$&p#FFR7}X?yU-nYe?_H&}d7?^#cX{P;buNQVnbOYddA435P>kO6pOrv}g(ssBbZ
z7Nt>9z{D8&s<a&8XrjhdsHiPbmn+nvC^Y1HV*$D<SX)~=c9~ib{W;CM&c$l(3Fs%p
zi5^WDPqpF@a_F}Ed2m`U5OLIR#p|)X2Y~S3RbJFLoV%0S$Cnnc8dvoYfI5v&e#0RQ
zRGeruyD7le^XjZ{7YlW`)UJ!tS=Mg?UNcIj<H~=!4~PgPo62numf9ZS0UO+FF(ZG+
zPdsdcMm~$5kK2dGsjiebevB6=Vv@>nrP%Fl`(;T|cDSqprY7eoYqf*>;-A997-x>X
zHY`@(x$dVedP<UJfs<(D!;Q<^)KUqI*gwB1GyrcLc)TGt{+QtIhA!w}q{ccX3baQZ
zd|F|@CBn;W)&tA9GO*8GO_3l=y+?Y37e+|Zqkaz9waoKdg-!ouTT)H%28K3)6V3WD
z^VNC3piZRJn`J4r3U1A*d`n{pvy&}CgPPWKqFZD2HrT|NM8*wZ`D%(KT<{VYxQCQS
zMSnaVqdS^H2ROWkeYrjlhdT@=7>S}-5^*Vt<UeW|X&*RY>0a*Ybqn<4HH~2S6bGlw
zL4_}Jy4d-1i7D-QNipx{AE@7??&LNp45-&w^t*TDT7Gvhk0<JiM#bLj2Lt#R1GN`X
z5nD$Hg_*PwfP5LC4v+p4x(q^zh79N_ij<2`L7TlOgBOMv?J7m#yh1=cW@G0pV7TB$
zdwu0sQ7V_tf2~w{#lGD4o-p@_iPYOSy0mf0PXJ2@!T8I0X2{S}>}awsWxqyti(EJ5
z`@7q7R96PqUChD6%jfHkMrs-p-G32PfTB9<V4rWCBEgqsoNtYw2XPE#I;x|rk!LmH
zT2)g9dMvf9`bN8xL^r`2!rFVvZcV)cO7FaHHePb5yD0ajf9S9UINTy*l(G`DW9afz
zGRVUUhK7G$(bSUKN*2hgBI8V0tCtCNy#8375>EA4dr`T#Ne*O-nPJnEGFTP_IvuKY
z03_LC;-otVqC)!iK;uw*L|g2OskE?T9JCu5+=KgD0X<5UkNBu4B)QOam>fF4Cp2-`
zeBG$z84Jw@_j(m1zQ0}*|4b+S7c>Wm7&;gRZ<h78zFhmmA^@iwm6fFf&{klwmd#gz
z3g{BUtcP{4&nt;)U4Ta_G`b%yF{LnHFY4`nh}hots?^}%f)o$KIW)`pKW?li@(7*_
zPne0yG!UQh+9)6X1M`65!5Dc2$;<D6V0KksDEX})pc@P$Pb)OZv)-|A*GiWKO;9dM
zXdcyUPVm1d{$_k`0SHFHraYkmNUpRw7CI?L=PS>TTJ8&gR*tfyZg;8xC?*FTyBo;w
zG+Y9=@9rQ5!+N;w3#~VWoQA`!ui;p~JP`=EzT=m4(-x{<Td`&TawWAjgX~T>7CDR{
z#!IY=Mtjr}BV*SSJ5PJ6TRTmX1@UN*IRCya!aph=sYfs#u3<~WNzUH-9}XLU;22IV
zsLh>zE98;wm~x;>%lc0F7u5ryH`MyN)FKsa=xO=JmW6sOy?GLTO~X^_FAbbSqykAn
ztCKBjLEhbQDXnnPRb~h;dyM^CYin~$|9FiOkff0J<?Hc{8h3rMa=e|42#Bwc5IV9!
z7((JaAK-qlEwX&|ZIB@E9Tv?i#1tRmcAdfKof}6IJ&gn<!6{KV=`<92A7MQDt|Ink
zdn2>UOgNAVO1y8e<)(Y&?GFZe$Jw)}dYDD>{~AuS6wH93kr5G*XX>Yw3}$>qW#v=W
ztzaHw^JtYT*{C?qDS*$OD|hT*GT1)$lHo;j`e9~)gGo``V+^&njDyMuk|?GrtoBTs
zhhrRkfa=A)KaKSQV#_Z-Vso8YP^<wx(_awlx=5qWj@$B7$|R2jV|E9i32w<;^I5Fb
ze0ckl5~_KGHfU@M`#>l`bVUhI>E110st#-N#)Nd<EjD}jN0p)(rmQWT<QM0fQkDVy
zX3?~obH9ohJN6=9SB~Q9{B!<m=KHO69>*hz2eb?yaW;mXdb)`%2BteMHyf3{CYvgb
z_k~G8RpHL#l>*8i4T7n3_o(XYMDCsl%Hxl{BrVK(odI-5gG;rmAJti9KmG&X!~yW$
zwp~duxx_K#AnD{owDphVq$JkG+^pd<%j}Awr{m}O{%0e9boFVDlIXg3`Gc`LmNo#v
z3ng{yv6H=tzfw1G0CTEwT#Ab+ctp%eS&Rkm_eg{UD>YUm_B)=;&HHa;&{qxL8XMg~
ziSrYHTx&-<_K1!ihX3Fn$MA@y&=#fI+s8;gq=4oF9EDXyKB2s?Pv+UfMIsH~F{4<B
ze+im6UwAjaZ@f9GCc`GWG{Ztf@Lj_G?<XX_Dl?lb_&k9p2l2hzF~N8GmYz(oYG(qm
zY(fOc=-NYHHzO0?0!rKT4i^WCb{s`BkajwU<%h?vi)u)p*JD2<z+JcC^J^!X5n?+b
zz>;=VmGZN=?q5vA1hfV{r+;D6;uY;VxHS^qNA>#AW=|uo?GH*U)5=3kuEfs*0s(UF
ztd!$SuIRT>PbigmtF{6VE|q5-nguSWzryj|k<rsTCYT~d2GK3junu}!&%M~q>zoMP
zlpJbrr99V|XlzL)31s*qD}+cbt|UGlp~m?BiSgBkpd0kmYpAiNR_vE)s3qBu6CAq|
z?~V;%m*j3ehkCmojFzP(xR?9f9FD_*MY<&prvEF@D911%CT|R=mm)xsMsZA3!%;9%
zMQ(JQ$XDoS_+&q}pOt!oa%JI_;=nh#zX%`+ckl4WXJ1~upTXZ+yuXqGjbdeltSV^S
z7XYRN{BPr1!d2?W0JV{4Mc{=Ax0UrF4lvc7Ui%AVhXQb_>F^2frUOyuiVFRnsnpxk
z(9j2WnXy{6MtIW~hnZYoNw^LEjX`2MivWktt?ySF*#s`r2YpF0#4XP}#V0qKSdL10
zJJ==`7L_uow+2&yNEMD$BEY6Jx5A(K-Vx>Lj>SDqh!w-;&lcKTq2}FPQwlr{?E<K^
zS!B@WYGn0sp_gK{I)F(D<7@~@v)#igA&m#)%Qbn2#^S<7ENfWaqW{`|0Pt)vc7(IK
zh&R?;`gGSFoGQ|AzZr$hz9NoXcCbEw(xr+0Z3K+!+vP03KZ&fOFgg1Q+I)iVh4!ii
zC3%Q<VeA>ToS2mN`k@ysFFm{yAW<0=t3m-XjEO!EC*rPfj$C1T0sn|PGAMU#lsqqB
zhOsnvkgGwEuBT66eqj<cIqbKU{f=PyI+2-bQPiEy;zoj>tL?P&(i5W+PL~0aOoR&P
z#GIdKi`5qiZA&6qwnvUuLVT*!xIzZcJuCuzo=rhuS4!pDT{J=>{L+p~*KiL80bptX
z=>G1zeuRciE&KG?!Yi8Q&wHa%F#dP9`vu00k*~`@TlZ>w6BoC@Rh;w`Ok?4NLv<MW
zbw1&fK0BO<4*7$C{b(I-9n1Fz#!D>LsmTJwrvte6*BSLqYU7>+Rf9~JY(-Qikcbb2
zw|u?AK9n3$KwoAF36VVdFAYQcA@a_Rp`M+0J7?@sJlVcZv{C{bzc1|i-^*6k1N|%-
zv9@jO;_Uw2(AF<-j$ZFHQe^3TQw{2^+`s)h6PwEbxO?JbVPPTlb3P;T|J!LR2Ak~P
zM>ySkGc#d5kue@muM^_hq-wo55=-nj>T~!w>anY9^Ne9(`Zgitl^!UW;3Id8`zGm8
z4mDX^F&8q9uy^&9^4lz3;vaG-^=-jX!Wja=-qvzaf?E$3N0wlK<m9CAtT}5E`3qqe
z^;<+!>?VDHR(DOM@k6?h)BWOrNoNU`$idptJ*w(ty1_>7-Ww{wmNJs`ub#q$!F~J2
za@`(T){n^6GKuBpjlECd`;o1Q$B{oU$O2g6(7A`b4bW6hWTDIYvSW%KY1}Aq^2BgL
z`bR$m#%;gGKJFxtxbDPkul4drfO;Z_uiX+mhX=`AS|l+Kdp5HxI;U|#ga!JS_3u*N
zPt6s8vkVmFm$UJ-<m+gtE&L2|l8sQO58M(Xr<6dXH8&FqSPw-&k024#Xn-8&j@or`
zRXWJi^oad^mL7(VVvlX-_iB7w0)H?-w7X;VL4Hk*^Qme2AD=#g2()wdUM_tl0XPJ9
zjF{Qmu`5Lb;+MNq+%0XTGpEq|=dwD$g)gf99QMo3E{1}TB7LYc*`o#_z|ZVfUeG}i
z?eD_agUE*$m|0l32V8AZ!d=|{^^OBl5S}G9OL-ZQqy(br4P_5`lF7kVkh5R9ay$0c
zJZI{5=)&Qk_zX)f%BKH$_G<C+>22gSTXhAgVL_qQGvtFt{(<99RJR+G?$eh>L1~En
z{-!aJs(Ipu$^gxsB0?NgEXyqWRKGvw^Dk^bi~bm7IQ;f_@To$lkax8ynq&B!H5Uf@
z?Vbds^)>kPmi4NCs~#`f`Cq<(6TUNKYGSX3B14dyU!WyNf6MvsE`w<|2>ZLR-gvG|
zOJ|y{dIha{^~kXOHoTK&iEjAX@K_gpcsF{`H4)n2Nr%h%r(^5ng9K0NT-q6Y7RPs+
zcIS6okttFUK3hHt4h^U1__PTKH`65Ro42T8*%+;n(`bNmza=z%>7?($pm726^y{-5
z<}kGQQFV4Q>u%%ug{7Ppz{j$*RhHN6d)f^0_i$oIi;vU{GVlL-_5!30U_V6vBI0uL
z=F5<iGxhe<#)Og_&2w#*z@eBKK(W>IG>)V%M&T!CF6D3K-|8I%Bbq55_EkU|>>&v~
z1D&92wbgcLZjPwD{x@CXyof1*mU=_Kw>L>>P*H2gt>m;$^Pah4-`cMp8{Gq1&remA
zm4kiB^QP7Db+f@hsW+YOzJ6?4Ei`{D;q7@c`L;o*>@L$COFVBfCK8Wj`nJ-+taJ+g
z$S4ug5LzYNGm%1VN-4IgpF-Z;gvL9Ud&ZSulVne(4}p@~jEJ*&Ehdh0wua8DM}V;H
zznz>S0tpm?ydYpXTd6hSyC>t@>^c$IJXmAYWwq9<DNK0ks9sKO?i7J;p=Z@<a^)%u
z*oD~tP@2NxGCmtIc11tdEMUHlOG!+lv!`8M7)fh)b2RBC)qc(Sa%|y8T0Arg*)Pxq
zr@Beq!d*M+^gSn_Lxh@$W0*+2b#sb3QG8&XvtZ)?0tjMXcn;wd-EETSXF;zKVX=U<
z8Tst06h@VTq>eRs2yV=naPsG$LK9AVp1vS-V%_P{S<Is4Ajc~hZ*e5st&3l4pTT+|
z(J<5Zlk)e+o&3J!=KfYok>0`};+n&M(J7Au>S4vbu1uzV{y8V|-&n|#B2s<Q{<$@C
zAZ=wzd%(dYg#@br*hQ{z|3>jIJfkL~BO?dqSI$p_$z^CoNNq6ftF-G4`l4Qo1Pstn
zU=Skq_nUt@-{TAMJfqfA5^PH)gR0x2hI#orZ&5KlkhWn?$nv;p?L3WAznWSF^vI!!
z=k?0~02(L*OF?-FH(xGGk5f8UGUhnFPzH))o`|!}WXHM4`rk^r|K<!Z)_^;UP59;l
zU3e$XtfMn5j10}gH7sF5*O<ykt+0_oa=fBeL1YaHe&&EW#6py&wr%)CpQtxi0bC<y
z2TMucX6}h{^Ji$ZM8>}{;;8ac5QrntEAngQ5(47wlmN5mNK74@?H>$jrlJ{WfxY<v
zHx5f26>+QcKaMYv?u{<M8*EE%5JQ5D1T+z{@h2cEvA^O2_XFfYn@^u6l$HLy?kst$
z>=$1Ao#fVx`}o<0?&H8$2j!h6QGy~HOg9LYE98p#pZ4AxX&8{Nl9Bf%^GETnzES%d
zNc^DN4kO8ls)bno$;rQeB!#hK>+t`P!>2CIAX!#2ttR)cNB`L9a>#V7$7ydr)HSsV
zK$S_m6ilv3UF2E4swEPDN}dt6j;+@0ez|(`9ew%oZtr;bny(x{r+bc8JI(U+;6bD)
z?(L*cZ05fd`4*%Um8a<R28D2DAGl2>`DYdL$2bMAd;HUj(FY;^>w!wq|6UQ!K??(P
z|L7YNW%h$)^`EpkT2hH3i=qOMlS_ekzG<e2Bs6tK-dSl%Z+Dret|yE<mm>WJ-rC+K
z>HKD<J$sK%rQAcbJsHlrM``(UF{?Owm^V+TW4-Obd<D6ZnR|_khZG$(I0(D67)6p4
z5uAXaHlUaI`f26OQ^$Vnj3_$z>J?`|OyO#D0>X#4kF!*=D2i^17UVGI9z2v}?Fe6c
z&~wO4_ufl^{lC%yiXa5vJ3Rlk7Gc^PRwhy??_LvNvitM?G4-ti28{X88+D#NpY+3_
z77i5&3!@#vD%t6wS*F9kIpvX9@(<yh8|!oXe<*hj$q2WQc({-^rEj5S+sQx_0~zs(
zdl5Q+_&pL5tN;ndK+-LIMy@CAD;v-p+-QIhEH>q^@{%bQY6dxQPnTJ|{-~H`6ZSl3
zjw^}v=n=PQ#wL7Tf@HnxCgZ=bY-EaA_{~!?S2bX|crAlxTJI#c2s}_)I_UMu%D%!o
z@cAuX+*FrA@a+putAKOoFj8KyBDs8A!5OF%v>1%q;vh~gz4fLbN;)=>&b$l<FoS%7
z{o5vq_p+%J^3ovq$sqIA3;#AQ{yCf0>J~quyRwWKeVh~E*+#;DV`GIsJtdPC4IP8X
zmp4bgi$<a9nTutgpAZ8{P_+IIZS$jiT6RNxdnS_^wgnKx#7W!0j8y2Bxy|m9K929J
zK*%HN$L|<Zm6rZ!QNi}GxFQ=nkQwK5Hf|p_4uF)53Gwwhk$IU)8vFjwXK+8ztY5rr
zSGuF~L%>F7{8R7wS!4T6Ii^b-;?HloM+z1%X#N)!dsqo=NDhSnm*Z^PN_YVfI{wXT
zJVJm|n-yMklbpe$&G_+_&9%`~7~W!4Jge%TrHjsZEmrJ#YhlS5lP>Z$@J95F^_n?J
zyv}oF8IZ^;=;HM-EqM<{H6EoPIpEq`3MdFX#c3bI{d!4ZjhG3nhW(c@FuC79_9%W0
z%$8<F6=}ygm=~-1oj!hvOa*=Ud<qL)6CQWSDoT_8&e9Qp5#ZS`>z42NOm8~LG`<42
ziSy-FUW%c}R=oOYTPd*^2~xJtAse0`2kHdEa^Rd_T*s=RZ!hP4*f7khbz42>D~^HC
zAHcC*Ub#IIK`1L1aaTYF<3N@l;g`Vg_|1ctQ!UXOjpg#{p-;+IemI>n55>Q4_qzR0
zGnGmzKP0@R9g)YcrKwqreIV;CwUPrA|L(6p70YB=ZN+ed3@fYT22zyarX=uj?Bzzh
zqFVP^>P*oWFS@LpCxY%9Y)PlRtz$Z!3g&f9ju(^CVQUy9>Gj^>8x2xU`nLkR0K-D_
z-+<I3{Ux{E?-RWqOZWe#8u)JkHz^C!Te&OFYn%C<u#(gJ3uI<hj_;eD-QN2-RyXw*
zw1sU8kb|dblIg$K;Uy!SLq$Wb`V0W-5jcu_qcjOBb9w+?pH+W`X41oQ;{XBN9;>f=
z>pV>}iWxF(Os2<0)WNbkKv}Db$EQfnK!<pg7hWG%n=c;vKin?_Q%C9An0a$9Br(>^
z9{*9HL?L2P*M-&x$KkSt^KmL3u9HQB8Bv*NXag9(v^ntyFZ!yF=C0On5`aUUZe;MW
z{cLT-M)V`6i!9)q*D7?Yi!$4$TLD#cPy}qf6A@%<_&MR~Cx^GReV+;duW3?P3?}~A
z%uMY`>m&3=KCV!i#Jz%Fk~%{v+&=*OpK&l5j0Q4-X!(&BWuzZoQNhWY(%!`BUjE_(
zmjQKnG<%b9()q`wDlH@!8X<>9n^+DrmXr=6FWob{_{+}R@Swk2eZ62tQC;1oT*w>u
zVtP)u@PG4ywZRB5bB1;Bt~nh!U+y!#M(j>Pe`b#$MNfG(W4kv`_^bJOlL4jE7X;VN
z_iN_&MQrCT#o!944&W>o`u2KNt>!=ncc-rmt!K0}bG7&>by+U(#8GS=-2)Pu`<KC5
z6<EK>pvk5uC!6E+vsc6RUF6>1Zv)FbRS)&pbFnZIWN&ZiDFdcy{*{Lj&|HYT@fFF_
z*%aC=MT@7q+lQv_(>ca+DkBR32QU@KHT6#k=hwY(N;eiw3_`LqznX#q3vAo>o+2C{
zSzdN$I_`pl_(d2#%gP^(ln+cTmIPaMI~W-e9vQ%qqKVcdbuc~EU@{5|O9yL}5F!(h
zPyZD^3%(x!0+ILCau8YlRGj#Q9-YYo<$-+Tw0JGliMJwPSrk-O#q3hJdH%z~1&Sox
z+q)Q^Kk=xIa|2`)-sD#`Vl<4CnHyq6A&4Z>RhR@SX>Zrwb&G24g#{7F8pu3=e=rSf
zouXyXmi~P~aq(oGLrFR~^lxjR6F}dex9k8Wjq=$IwX|szH1Exb?Ul4XY;>8{mgMC8
zL7n*QmiulxWoyQVts_24Y%W^q`prks^$6!ZgU7KyY=zO50%%wDP4-R7J}6(ZqY+%q
zZM>HwF+kybXEU{a`BCa`T-I6=)K^(`)NCq;ZyFoebb_e<CP-jC=0j$3gM%EN*qN9=
zeZgs^asP}_YGP5J3!vtl{uHK-wKv2s%ui?5ZU3q}NVZPHt_^BH1~3C72>`Pf_S~3Y
z?l$&eEwS<cg2O=FonM$qIr0)_^fvqDfS>p5b9xo_O6SORz*X~}TpqBE4SUQKe!N`+
zc3wGZgRgE3L>RNJZ{Vu=Mj-(%j7tP35#e-jdvoy8G&1WA4<IXrqT?Dg-gQyKEd?Il
z8Oi}E%h)H|iZQRymB}sQdZjcKGlEZb|D{XIkP=6CLX-Lc!*y_3R&av{y8jmj$o6X;
zpgFE#o#LgXyejygZk>Rv%wcm3j(oiJzVr8IGf-KR*0t(){;mhesKZ**!VS987-riV
zcRNh882U3UXDI;Dd8=!`?c8zv(8BsDP$<sclm(MT=aRzT?UK~SoPSU{G}c!!%M|5#
zj>nbcY@W63*DY5CR~}0x;@x%1sw#kZ_7K&uObi+(rj}wFOaci72>Y8i#PTr#WI@?q
zzb>0&1}aMHf<NGQ2-pE>fyatIBwqE89~?1{2ddv=(m~7qz`j7X=*Dk9e$cyBW_=ra
zK8v`z=>j=GxDSv(h;<Q9#STZ3jD>!Jz@aSGSF1za-Q77Rd=z|1h2P*g$O1!$)D4{a
zX4}TXMU#V}KmK`#Ke`vM<1qEHVbxSObjgvW7w(PqUnv1d7#S}a9u$n3*kF@9nL@x(
z*FGW}d(_}gaaIU>=3r|+k(2#1QdDVC61ROWFI_J4?)$$66C=+-6WWFN+a3W|KPffq
z7J*w3{>`K_#7_jn0*Nc|E`YZlJN!H@rZsX9{cTe=7Fkdukh!Gb1AzxAn>nOevt-(6
zFJ2&n4FYImijOV2;Z$o3q3G=&))dTB**by(_?}P70!Bi6QAx+rpWn+LLVWUEXcIER
zf2+5t$GNtLp<_R#q^9cb?7VUSFg^dB0mVQQSr+4zG|S@?x%xy$kdf3VQujL5&nyj`
ztG_)Q_ufGOYkUl~I=erBzi2;82<Dqg0F;-M)6xG(cGm%TpJrbBb$M87?r<Y_LUkU+
z{xL(k*Aymr<SvpMj^KJh4HUbCqc?9h$F)M?>COP44Q|<Q*1A%0`Sr#b{;W2FbE+No
z279YxKg1(|tjHp~h2<arUFzQ;%<^2}wJiz-7ojy$;C{eM$jnRq$%aV}4|l^OQI^|z
zEZk?)lasqa63u%5vS|RI0?aMdNm(vQ=%oK=7641Z))`tePdxB&8)BiDavxhu>ZDW6
z(6hk#Fpy(Se_+QHoPaPqV>&2uE7hs@oEp}Ny)^IQ1PChpvo=-(RXO}oSf?g~?_vh*
zOzNrNKnD#n9JaEeT=_v6I49m9n4zs|b(9u{T(+?4Qevm2(34Nr;^WvA&w{tF8i}fs
z@ozD~aa!O;LAiBfWJ$3rMy1v4G|z)!YKZ2Z@>k6h%kCY|RJdtcs}=-c*nWELI!(if
ze4F@k6iaO?uJ+!>MEu=FeKq4r3ZQI+wteDn$a^}eWHa$QHeM98Lv=|<bzy0Y^(8oL
zJi&VlXa^f4LIsZ2M1GG>8~^Mr`q{mAWN%VC)Ssj|8%+eNY!KVtVdvibO7%A;6*2Pj
z^J_D44qq5gBg^-oM~CyxzQS-)%uc(CbGkco2m#~MyQ1z+T;VIrSN{8;LoBYi`q}Z2
zC*c9AXgU8dAh^EejXU41nOAStu0%~@bEDZ>rbdDTAMeOMD)G(!;vwb*!~VVHVW4US
zI7)`pB0*~LmVUH?@@LYT67QP1XC+{;0Oc>9HiNH)E<njYBGTH`Gn<2N`XtVAQ`CAZ
z0>MHvc=}b&1{3N1CEs=saDTG_<-e^89^$PM9^`TCh8;;KA0y*9h*!hMM^61tu!p}q
zt_<E9<~yH5H|%&(904^&9`QdgNayzuJz99H{6V7o&K-1+c6_tw)_m_TBy<OWz%O|`
zy9K@dPpu!ia7Krr4^#|A;f&l|BLUp9w-a-7?j)hU3$%)w%J6jvn8~}IaQ~hjF5^9Z
zSI7Fct6Mge=TvAyDqXxBxgZTt%%Yac)dm&(bHIUeLcr_#6VzS{p)`$Ez2JN=Vy)ja
z-*Ho;zegu#E*cbdrmjUNa+v*<{R6TBuWsLIX5Eu}5!(0a|EnrVF*2;lxZY?mgbHKT
zrd;~+VSiJ9BFW;vrgLSHTDpLkmvGno`NsxRutc>UWyA|mOn4y;iJW9;`=w%Kh-Xar
z?*W5i_z4Q|0CaS8<jb!?XOh|Jo>d18neQ`{x0e|2{CS^ttcv4Qr79u<+*RP_>U#N2
zp-%}AS^Q0EfZaCS<)EvipJ6smG<k-C`n7qiK)PtN`edThDDP(a&sgQ_N-4n6v&`aW
z#Se=)&Ir%Xyl{M`N<xQEKi9ItYT)Zv+2^wc8+{N6dn7H9%-TUeydxF@O(TPQ);~>h
zcLU_V$t-$`1!xMc4;#;`k<y$TLzc_)H<v8jO>uCk(dYV2-Z67nQl7VWFq>k8cmZ5^
z4}|T;Geo4+`LY~dgkX23(`%t%B15Chj>|h+d~6@F3Wx=jrG`y>5xWB6-xO2?R+B#`
zCu*6)D#SwhAECh+yrJsm1n@fmjZ-S`Dz+8#X$L<*h>|nB#~fCoJC(g4S9p3lC6~;x
zyW17e%S93K1XSc&OUzr^?^|s8-4?ig1`ml^!*u+k2Yk6ugth`CIss5>e^jn&*r`PD
zad0K&=pR!hF7&Ih^+QAsoQ23IAFCAphdaasL4|}m@)f%*8&j#}6%-<Y^3QzH{97=|
zyz6#j77ozKxuxCB<jx8B#YGw62ntzlihJX+ZahC!yGx#4U%^ML#Vjs{$d&{$a&W@~
z%(W>g4)~l-ipZ1_J_-_uzJ^I-;Pbm*yvHqIkJ26<^n3RL4!)5ZgL_*9B>9`&;rRaA
z;K@W{u<C_C=E;w5N*bTX1(y;kX$sQ*twx7XD8Ttmbr@pWnw?)zwg6RjA&r!-b%t=X
zR^)F7Tc(`79|X@R9L`-HuXA=4eOdXJz{Ov}2nKi6HI<aUYahK=BL8nD;O_i7ZTH6e
zvaQ=R+k9c;Me`ddRX?WWL7#JRDCjCav}(SW?_aTN>Q}C%>wkt~Cj7NGx3)S+>$CzQ
zf~bJ=E<Z-5jNx?~?ik09u{g?k@$sTv;2MwFT+6ucgGY>uZ--r@QrM20@9&L=xQ~Z;
z_Zz>Pj8dICrY)Iya;!fOc~}1W4zTtQQJFLTiCcqyxMlCDX!A&(#Ew!7+>SMJiXLB3
z)TJ9M#{CsJB#GCV@j7XQixz?iev8Z1zd9ExrHQ9YC~*1N77%`9oAdBzt&V^5W#}GY
zLEV@+Au%()r&=@n_6!k>0Yw0Q*vLY63&>NY`WO7_f&NNJi)%_)c(VahxqYPdYX$}b
zR*rQJdgLzJ3~n;dqCNxkiMz5lL!UgpNtJ|~ht-mt#P2g=zc5?Qy8alkju{{b-LI?K
zl4nw)CZ`U`LdccQ1NRRM_;0Pmcx{4KbykMm^P<QJfJe6qz>a_;mBoa?3z9=7#|BoF
zkEa7cF2R}#*u`j|ttDbD4Gs4Mv~nzR5QNkl0R%Civ~gB3|8AEL+6w1qp8yflNZ*F$
z<y&4kJyEoM{n`Hw?N(|Dr3nASzg|PhPn~#~Qlsi;okU0(X^AI)U7QWXt%rm}-{9`>
zA>qHT5BLD}ZAw=n#uL#*|C2|ZQN7%}wR-LF$(*vm!Q6b?HAqLiLP6e*1hhEu_zCK@
zOIjWVR0jj`^jivhFIi(sNb6<ad#PgJnclphdZ)eueKhCa*Mr#&<>j`P>7@q--5?$T
zC&O;~?|KHHSw>?q6|TqR@UMY?(o5tGBCH;VH4E!i>ip88A|l$7;RK;I4+?=%iUjjU
zRRjbW!{dqcv!EeZxV(19A9dWWttRmApX>m20NahPswcfc+9W^BXfNga6HGZ_%8cmq
z>1|&Dtw-}OG7Eg|Fl|Jj&K~vo#l@E2pS>*9=nH)NFyrh}3vsW{&2%nF%9vH5mXn+g
zI;S%B<P@yQk0+{Eb3q)|P(3mD%7BtSMm&Y_r?u-bU`2b+YF~G~kCmC!uv98*?gVa8
zaQn(s7ex*K6mM=&o2y%D3rX>v{A}5pMI4NbU~F>oG+>D3#La&krn2_t?_z_JVk6Gi
zULjTC-N*IS7h!+%R`!tigziD9h=wvOtW(FoxY%bPGW8At)^w(rF4;s>P|hp`U4M)|
zg_gIdukv2l7Z|%4a(NXM4wX^Q-n4-Eu=hO*Z8As~$O_P1Kl@27h}BtF_&d<2(#4{)
zQ$=4vGMs;pZk0r=az<Blizi%2{(hSFhB~I198e?hi<R!M-oIazI<g=FCDDW&JJ~{&
z{5e4{2t7_O4p&hp_YV>{CB$O#pWYYm=ii!}oBw)JpchXZq@u_A8CL1?8V9jycxqE{
zp>Ip0kt+s73r6&REGZ>*J}pAirde5H&n2TM1Po^*u6)lDZBp&oWEzY_>tjMv<Fogr
ziiFjD6BhvkT8JKZb>F<3lEZs3AEHuRf>b~ty-!CmD#-Yi44pQXoQ%^%rvB)?eDVn?
zZ{{hrB(c}REYMAC6d;JEeV7CZ&@8&8veyO+Px}3v=oPZKyT=o0*9EhV!G#3{N7vdx
zs{aK%6ajVsMnOTjQ_8VKD;1XPSAkl#3k3%U%MDhia7|6C^`6r&*xF8r5Pw7c{pU|=
z?9~`UAOgq(*+g-~x==gkYw5HLBR66y;f=6el@c59Y@HgYm{<={1Dg%~Ct|VN`QnhM
zAEIeOC;74*C}#UYI>A;5pG--Hk8%E6_rQvQCV{r_uGNzY%Ut|GTf7{139>An+=8GW
zSt01Jm34qb<@P#MSq%pf4AhB$$NR{|hQ9wZVjhWfwvuUywxV#60z)p#vc9Ljr%pf&
zsK@yilJAxAqpZ?`1+ho`uSA=;drs#9nJevpyf_W^i6(#1=<IB4Y+QWzY|o+_{b9g<
zfw0*RveXxEd+JhiCx6=7&29ZKwm6u3-#Q~Br1KD>5I=Ij!>LBgBlG@Q9=l|p3iMYd
z*DqF$585wP>tn*{>o!)Fr8N3J{})+1&qpqA%yDjcPd2JKQA^3vODv}{38|Go#lGny
z`!DLDWFYuuI>pFkOj6l)bi1lhyj+ixMZ6!MmZiV9zj|?sy|^$l!$pD&#^}|8t~L!1
zHRDJ^l%R{YdCID)`?W@NgB7%>@U*QCUHvJi;F(vKl4V)9$u)P;$7I1e={TXS`YW{W
z4DFZ6r*!R{)$yt?pGCO-`xYQj9YH*~s8_VcAMk2B5DSa1%lbAq@i%FR$z?dWMbq`h
zum9xn|B)(zbiU5mzL_#v_+Ar6BG4@Fc+a?ZWmzP*{%enWBg6N|m#{JCh1Y(xy;x2?
z*1)TX67PkS?Ke`Jo>%hP348Sn;ojCDvy=29-!7{+H*#mMosUF-2zZMJ**iH82N-{z
z<MvO;$5naHRH{tl@d=3DsncUPoB#|IT=irG*xv*REda@7*OLy2&}W?CVZS)TC`3OR
zc<09c!B$dE75WIn%EZJ(Eq3n{L-<2Jh2nr-xEzI?$z;7hJEG~&8?*t^8U09TwAOpx
z@V>~7oE-MQnP5W*8cnNRc)U)3?Gl)Wg(dH1qXOW8o`REk?{@*X#jc7pIx{=_`J&+G
z&!4r!OF7I0TP+b!b8bYgdwS-F#!7Z7y@=rVu!PS(e=`c7*gg~-JiK@spI_0TKC{l)
zGnwXtYx`$J_eM1G>gwtl%1pyHjw->jOEOKvE!dieF(H3<0LaBFc|}FLfU8c=HL+?Z
zgKzw+Yd|LuPdbc)YuLojJ+133dvhOexcbQ^4+H$>s;~BL##=1Hrk?VP(`e7~lAX+s
z)be`r9+CVgx9z{VJZ>1HHR$pCGTYZkp88xJ7xw<~2~v}U^-y_IP9@`{quMh>lE=W=
zy4wt^P}QO4cSEdK+4$-cc&=}igISw<9R#F*BTPSi-Yq8XJ%#Mx=t!)qIRgIox|=9P
z63&m~!bPDTlh~QGKT8xH`Dqg5TV_l0=fhR@hdE?koT8nxQ3^c_bTXJ-L8cHXYp3*f
zg2^K2*SeZx$)y`lkIso^lg9%8@34nK@RkCZk+UKvsS~nmuR6%Rq0iRLQZLhKquq)p
zs^9*86Q2#WDe9Toqo@Jyf1%0P=cejmvFI>MPBB#z_k-^S`1BakM)~|}hF5zG>>T3g
zkCYm2t$~Y{c21a2#TBgpPDR+lY6lr@ir{z5+K_Ws4)>zqf5X316;H*M@^u@>H}E(i
zt389$FKqM9K%VRNv)&1J_nnW^$z@&Gn#czT{_70eF|SdV;0m21{#&BFo&nJ(L<%<j
z4HDDrsdH?B%Up?bQKrgG)a)sdrmu?pp#mU6hxH-aPrhl>!`p8|5kPz(5fPDTM+b+Z
z$(H9C4;2k5DJ-$RL&NtBy<?PF47xkJxUI9}YEMRng$HJ*S;N3PB7O3A$>PhCZX7T7
zARr=9+~13il&?)2uq=4X2tt~`l`<s&J8N!koAyrlVb^ZOM?4MneAi|}ZKPk_n*k##
zl|Y*|&#*hpkgE9i;iM5?y{TH7WeS@UmbZ#<Vct|PFNMKfUsSTYKQe!PZ<4f(lg+ZQ
z_%x3~64;A(LG`WcBv;9VXckXcR?mCr=;#s>20|>~;Q+b6%)1*?dN*;ftaXXG>8T7J
zruMqw3MNG{M;py^H(juZl7SP*(M;@~y@5>ae`VLfM=16L$u}T>Z)+tEj+E61YH6j7
z_Bg!IcJk{ki^uO?Gw1p^`Gk3R`gb28q7s;0>l5sylCQ+Ak3WCB7=1PG=>{uhciGAa
zewZj9Bm82ig?A<W4Z`}cJ+!PFV(b?MASwljPz-A|>W#Sd6bn4(mfs?Kl6$wNfs%>}
zB*RrwFB(jSRb7!D7QZnp16w?Nx^8Kt$Qc%vT*5+6mRYU|-KVu;)VUU=@ceHYkT6H?
zJm*P+5A57QLaT-SgGqGs^uEF9jGSydrCDRNv2QqCUISbn`0RG0nrJ(!dU|>?zgs|B
z^`&fu>Qo}pac*gx<Sjq!@bDj*SR<{wKNVtS>IjfiCfK-zMCrxqqPknacq1O9{X8_h
zmM~sG3pthDgiBBA-I@WK6<A>35M;o}gIWRAsoQE%L_K^{{{@~1fBSKo{k1|vYTr||
zUoJ1~Pk^g{v7;&dD>WymASI7_(Y|p7Axl8_k5L8bg7p4X0*FkH9mdDC9i5#8zW#<!
zgtPZ-z1O$W(oz<NBF%OMF9c5R1rdr-ue<EP&JWn3-u;+R9dtww#`KYk&GFOTY5iXm
z{%!knb93LW((Zj;woFKRO|7PXVi>>QK6NX6DRJ*W?>!l`uFkhNy-Jtb@m58^_1EzT
z_)E?w_ZA@2QSRs*`+xvmaAFNWaPaM5OgU=AnaK~ve+FFNqqb&vMiB}P0=1p*jpay@
zOd+@E1Bbt^hnIhgGvcXN%gALRpSOa^!{yQ~1X@*`f~^zJzFbt*i4H*x^R{@tv<9lS
z;$9Jbhzn9jSk*VC{wM{M4e($Y%|Ol99YCf*|9stsQ16shw28BBIaH1?MFU=d1wUqg
zrW1Qr+_SaPy|hx7h?}<}voWjHqMUvv!P8??&nXd2^S7Akq{=v6ulZ(q@u-UXEVNjW
z?uEP#&`%^81=T#Ql?O55;^C2eI}bd+{f<0x{xOHK?BZPu(-8=MpvkyhC8_e#__p8F
zr~bUN|0}Y|$CUi`J=9_-iXiaHM3?|<oj$X$a3|*>7snkHWp8T2&{j1>87nUs4P35}
zeSYml{hn{~j6CD~0=wSkZqHL|&Gc`^0IEDh@Ix6|)g!l^U^Ryje5mLHO5)n82N%kH
zGi&nVj~Me|z^U^N3ttn_LVgYuWhS6{<h}tq2A3PMN<n=ZlZ8f?W-~h<4K3F{v71+2
zAp<NHYVn2gzFT=Ozye8qPc;|%f8&1fMq2j}kM4EKhYcHi(e+kD0tRNO89E~CRiB?9
z5R8WQbIR--3H!y7FO&vkhW!%gCn?}d>f-qPO-7<9CSJpSU)C%LN|_Rr8|-5^9%HX3
z9(&H=1|pHX&1?Hv^8y!l`M-=gQtExC`SA_olFMy#+2UuHHg?!Jd!(SgoZCp{Ou)lN
z1`ON|UTxnU&RidK_ry6l;RkTxu1{e01&c6rKl*ch>xzU>`>Utm6r7REHWKc{gd7P|
zw=$9nhhLZ+Ac!zIvtfVC=oXvS%+yr%hs8)~BYZUbshooOW<_ku#Yo3@IAt;!Sy>$y
zfx_-{@9P<TZKe6GT<rc^VhFGzuutEnqx88Qyw(icOc-RQ{~@mG`C(n}WnkqO2Gr>{
z+t(X>?5_v()c7c104GNPLs0<-zK>BbmRSl4q2X{-9Ew9)jbNO|M@P@(sW0O#WPN5Z
z13qLF6wrCCbOy>fIXmA=II;v<Of1E~OCK((436vliFd+o1Kzs@*y{o+_^C*Kf{-wX
z#cXAuzMWV#rRm?%3vUhZOk3Yfc<j*LM7~BBT2N9|<yZ~se?v#(^E0^ZXCv}MY*{=X
z@oVHX6L6|s*{^u>Bz;BYV{Pr<)3bE?5tZuSH5Q<ik&&^aIyx<g_6;R}-uSnlOj1Bc
zZ>^%EqfOmMqQSrz3}#84nKE7Xp^#ZJH<?AR`&;US=UAig*EvLu0qVWS)9j`@t)GZ_
z!ME2p_zW5L%*OacY06&#+Xv+>zI%y6pEFXm)8{v7eP?_#BiR9e*9;IUgL0q4HnnyV
zQ|`P+P;xWG!4A((2gOmImCF-TH_>;l(9rS1L>>+je>WaxF`ZvPX*A00>cjo3vp{^p
zmdhBhpUeWt59Y-vDLR+|>QHR?)FRolC7(^_ZjCpSui!O17e$5ynpaUnUdp<>q)KjP
z^}bP+ua~*u0oXFzdqIvUny}6gf&$+~5MVao%F^{A|7H0v3jJ%$DCOlLOI9g7xi^`i
z<qbsNn@R36Jy-oTha%@5hItNmL<T*bkjG(TVK%R6#VL2lfHS+Wa2qq#_yWd85DEF4
zVStrk_osgnMbC2uhSAD_82W^1RITe9l`Y_IgiBMRFB8;vu2#usbvo~T11uCBzyQ3o
z;MvuE))(2V8^GlzJ)(Ps;r}pol>t$HPuE=mNu?VJVUdt-1Xdaa>25)~loSPa0SS>%
zR2mi}r9qIA5CswGln#~d?)NT>zyIq8KP|h@bMMUDnKNh3eSv-zHk9;qu|sdf{SzS$
z{v!J_izNqv<|W~GQyc`c6)az)qN1j7P{-6T6rLH62si7OJLiED{P&VfBjA)cW$&Oe
zYM~M=J)d-bZxs_>E-x}-X=y2LZzoWtYvDw=FVp8)l)}lSYlq1))i)4`r_fQDQ2*5C
z$=JQfmn@V%f}*0{i=el5COPAK^ExCSJFv+|;$ZJ34`u!6qCD>P^Rt*5;z{afo)VK>
zr{*8Qmu|T^+L#55+}qyqH34Qtp5pVRPp87dZ@+hEb`IBZf@iI)tPIf*<1jD7P*%qg
zUQb^HV9Mx{`{?Tf)n;+7_M>XjjHv2zAo)b3CUrGcz?&wup}qh7HU_(Y&CB?^f|dy-
zls4bz0cCz@{UT6ajnYmZZOIQc6T{BFh3Z<8t9f;@WMBLpAD1bn5^;EUSSGuWavXp0
znz(dLF9!{He!hF)!a)fozee-^3RTA)V{@c&P}11%1PZnuLZ%WE(Kj<jNC=|$NnTae
zzVfZJX^%n6Uj|tI8A;X!VOcQF|5luv4EJw#_fB)%qEC@RtEa?D`Jbe_mSGR=_vu%)
zC9b)DX1laj#(ICQS!c3iwv$~Y5Cq+~jk^#Q)zqm0n=T$hBAbKfw3_cda=_ICT;UZY
zZpQE{FUkRKGdh5HmNc61ngP9-@G<COaGhStEA!}Dv&B&k6oCh$Zf%wSoZ#_u_+O|4
z?>pOi5yy+-6|n$yXb?<K7pJo?7f=666@JK(lh<*Ox9^adO^)rK<$jAdtBO0~+-;aF
z>JU6dN3VJMWq$3$@!V<~J)Fzmm6Zvsj@6q6PhM1{F{OyZ)YUehhkAsja4VXZi6tt2
zze7V(S+Q-nQG2a^G{rw(fTey1x3rv2>or0?zd@n#^!bTq<`;5MKBy49dGm%IRr;r)
zXCHA35cwDMZp-v|PY!3!W}I$g14{ILm4I7=^Xl-{%<`kBk#l5Z^R!?Xdx$hY<pst-
zz*&D8+e1}UuGJ%;n}2-J!Uey=s#r7r1|i|w7#zy^LH_Z)%e)U-^0l*7X$qCE^53A%
z_}<asM~e*{zL5>NLPq<p_6>Qp{0-C{?xdag>^9?iVl|>SFA#K4ph79<*}b1!R^1o*
z@;mh0xaA>40@ZiDjjDfs9lrfy;nVd$cR%#tyTu~y{5TjeK|~(AKj%kqNVp3!<?WJ~
zLv!a@-64q0f1Otg6W15Cw!W~iVB&8XSvS^`J#fjVQ^rW6BYKl(i8YR@!09xrkm6Xy
z8g-a^`TQ#(SYs63YIJ7$bbQpjt<f}4MYZ9~y%s`2gRl&xDF`b-`mQ4Zf1vKeS|im=
zUZfEYnMHt5JaI8_VP|OK@(iw;$0Juhq$S_90#LMWU)(ym_J{v#rAe4~4q{iI5!4?h
zAGc^ue<;G|WG3>vzSWj-1bH@7bsyFFF7#%(hL{VmU6{}%=q@g(l^KhzszU>3t5dCN
zsQSGgK6Za9Vwv{J!D(O8Lv^TsE+Rzg*WjSYcuCB&tF{%l*67kiNkKe;`$EOha)1L>
zG-(qK+$%{434F$G`H<$F{ZFpdvAoa)+<EI(_I|`<!P-D`uVM5<%qD-AXR5M7NpQ==
z0?aY?Gu+?*bghi{IVtflOe5;@MU<`LLiw}2=eh2w@4No9zsvdCC1jJJiXR@4&y$>Y
zr^<_tCD!y%U*68aV0G88npB>cBbE3Q+^w{}h2rJV>1tEeQg;1MERUk;rxHW!B~hkT
z-NJ&hgXmNa9q;jSZ*7P&{Uq+L6obbm5enW&bk^icPiLl+YqjSZ;H~bDal^d~;l<ic
z`N^6Q;$-g}VL1ZMa?-1o=%2F3o3A@duhCn`S!^9AR`npcErgub=47QNfH$}pCI00p
z*geeg^#4=*SJBSgdgRRgvPQE=(!`u&m-LZSWrXGEbGP$D2kf;G(t`U_)a<D(;MOKp
zGWMaf{{kcRmz6emqqX6&H1+y(7O9ctolc9r8(I%Vmdagnp#*ZbBEO)&;4;=@z`ZR=
zgFGS*Y=SP{ysgVHvnDDgFDu9N2x)N%b(Mu`;X$-9*|m^M=fC%iY~Ryu4?g)?gn1Gu
zhtgKOT~Z5sPQ6U2amB3-@bR~nI|Ju0d=bS9S(zKKrhja0Uc6y)3>~>Xp=Os0;U$Dd
zofV20MBW0-)1zGrf(;4Go>daqy=;0atg*#aIXA6&-0C>BEs?UvvwPE43yn8{-$xQ-
z_wN$$)XlWgLvFxG2oJyS#JgOLn0#ete0%28rC&E<!Wxg|9kP0*u{|b!hMicYHEpnh
zFK2?7#tNxLyW$MN7D}CGzD#|pZ%7@gxO-Nppa}VsjcB1vDc<7zRFz;VV7O53{vir^
zRXy9wVMQIjwsQ|mjDFhQlj!;n=ocZFr=4sT-u=rd^={QmbuV-CP`yGubTpZ<bdMLc
zm6_IU9ilgW9Jl3t;@VYZ-g9KDGUlnp2%dwu0-h@IvHg8f@Ma-JE*;?ZrB_r`&=qzd
z8cD+Lz^}Yb>lyFxXOPp?L7rzu@HD7HpA0I3@ETg$zJCsSn<fEq|HGMKigyzevp@0o
zyYN=iKb$C$d|3nZX$3YEobBC>!JHLT1d#+k`w$*wL-}|_JEu>hqo{0sYpNsFjMtir
z2m1RxsOgxHn9xp~fxvM%RrVX&^5hY&ig5D}Q_$8Cg1)aPq!lhX>@yLgA>zxzIQ&!@
z+{|o3kb%MDNqkx4Q<&4CZSMvkG(JguF!k48#WgHtN2YvB{Z#f6QVh%E{uE70e)xON
zMddqitCK)HqO+JU8QkbXA()4FY};s7J}2+mZsCXweR?S?`#it!_KTa{5|EX&`XcEA
zMgyv<0|?sgD_>14-Sb#okNf}FCz;#4$UiLr_+7NF7&hqb61YrxR7L%nprP+uSUd48
zR+X`EB?>ql<UciZn4561Y<WxBvh46()oy<A9UCv`uzlCIvVYxr5bG-gU1Ulw>|8J2
z+Y(R*ff9W?Gye?etp+GgzQ1xAQ{BLOp|n$*#l5|~n?U76SEY4E`@}(XviMm-cXv+Y
zb<H9Pdwxv?!E{UcdT{#*+N$A!P$hN)QQb8d%D=8<JoWLR`JeVFr{>C%DCQ+$yFab}
zdnb8L6x{~*AZp^3<4}=b>eh!>TA_MXm3?Q6+5U`X<u)A)=@fVGT%5F1b?6qUL<RFZ
zt{#p~cE>w`4t)#`vhj%quOiY_hl!>5a|1T*gT646W7QFNiz7up1{7$Q{V`*8@_9WX
zQ)VvkjE>|w6h<&FX&u&LA3d<<7a00re4~56ORJ({cgVeIL!;V^cT6gd?VgueQYR}_
z?b7~H!-VMC&`#2|eJ*0PzcrBgxoz?MuxyXJ9XjyINGh8eo+XSyf%x_dUq@em?)Z34
zhB4={7k&HAVXdn3+mjvKs0G+kX{(xXQc}{6kPPlJONm0O$C?JCo7;PHx`04Di35H)
z3)`GmG#kX&U;$$);BG_h8-{VRkWSp(p8o6>ueTD-=8s_<q<5I05F#G&or)o|B&s_-
z<e;g6Uhr(_L1O<phiB2dr6%VTL0wgMsS3R7b`B1UgAUd9ML%Y6mwAYjiKqWnmt$n{
z3ubqBZ89a9cq&B?w^`DJ?0Z{->QA=^A1vfze^jGRW)K$mbMF1r9OtNQV|HHT=H-=Z
z4Gz{ZSQWL6_9JFW(bW78jGUcUTE@+P2Vgvr7>;5@+HT(lV0RGNTpulg)7P&=iSP`u
z&bmBDI1<RxNgo+Ta?rXlo5^27Dq{tnSUq87)3&RDDl8N=ZsKNgp-#Kbx~qE6l)a_i
ziJHStvM%G~Im=8f)rG-bAq?dei)Z#V{_YRg<_;w3A%543(EuNw<`l`e^3o}B`}>=i
z=g1(fGHCUnQqmRs17k-|ZU5%Xv6;j2P~B5>aaq+FpZ6||Y_libpOy#}ZE6`deQ7vU
z)n6S?CC-dMOhU!)rm2t}`(IoBZbp=IMfmczo99)5gz2jkr*I2>NJ>9-MrT;)Hg_z|
z>fPpmbL+&xwUg0B-&{~ji2E&x7>K6~=Xq^6Pq3<HXyUt-BX4?gV30#37P_0v{vp!;
zF;rLk;Uv^JN@6jW>d3#X&DK^j;Vn?j*Pb&Mv-$Ltj#TP=bKgO0_||SyY&3C4SnkAQ
zdEC|>>+LP8&&;&8QPtHVLVpHWfdLOH;?_H()Ih=ME6(C%uX}v(VNn8>ayN0DBaB>P
z9KN?O5w2lvA6T8)b?S*eIJ3KY<<<Egva)LAC*eg}2{hYn3m?os$)+b$icL?+`p`Ac
zB6)+|;orW3FuP0aW8}W6TH-0t%tWWwBDQWyx2v4M&O$ys0<L1>{IbbG3j(sTJd+Z;
za)J;uiSI0@lp4eI+Q1PK@FYIj<9;WHnC9}!2}Zf<-DXcDC3}R)KuT&6_Z!nPP6o1S
zWxCFK@N$VxtUa={%aovFPL1y))jpiRqCf7(PoL73l(Gk{4`zTwc}-!sNCezdb>EPI
z?s|*@NdYYqfn#e<eW&!oEkLU%acYlugm*RHe?YW=V4@2V3i<(383dOa)@%=f7%FD%
z7I1UbKZvCKF%*%2RD6nzF9}y+%@}Q2cvs-Oakplv<Ti-iHyY=7>09~k_EcJAjPo&Z
zoM)v>R*)3NgUZfWdJSXa(bPxG1;fP%*rTqVh{;87h?%lH+>iW|<Ci#Fvb^NG|0U}{
zPF;U0LLysI*4ZR~?sty?-=RvgpSiX6h{Ncl`Y+b58c+un!8-xw6W`rEz9MO7Gg4hh
z4+tjI!pVP$YWN74rb-b!-TO$|IbJ&^x%5`T%=1QsML1$)e+ZqLx~fzShUV=ykqxrn
zfrb;fIi>Eym@Z*<QkFu4?ok;2@q^swS_XR1MS=k4d?>e(;aUUNE&QPfjh)k4rJ!=g
zJr={)7%(2R&{wD?yNRfRREXBpEgw<x!{N?9w_x{^tIkVMgc~m8;v6QV&^U5QNKb!4
z^=`z~%JcG^B@SyRwkD2KFcX%aG&nF~obOPd;{E>nck@8dwtOx>z{=eH3p45YlSO0c
zT|*ZFozXf^-?%U5btVYTJ!ZHT9sc<NC%p!IWjf-D34-eXEhC=^lUS<&7?9RXjGeO$
z2~E`UNpuR(x=T=|@f+&vDvW^yFG2BevAh|6u_Jx+dI^z^p0D5sK)zQrp5&?~lSL{5
z7DQW&B*^!Woz4HNpd^p+rfptSThD45kN}-H;ceow#Cr+I;%y~AGU$u3t9~JdlG1*k
zKZpt0O-{~3^2^p8BOfGw9pxI5D3C?E{M^+2ymvQ)BSlM);(L30?ae+<!)ur&io+H%
zo0fCPIr-EsF7a;E!_?`QmXVRfcxj#Tzu+uO+Ks*F$xNZZ&y1T}n6hsjxR}p<m6_rN
z?j87AXbtg;bX?F`g~R7?7X=I=by-03k8R_`N<L4M8*R^sbf`mwdAbVk3$!%bhjeBM
z5<NgX(=aq&l^3|mmhSx6%F5~nnTOa%H5KfOeIs61gU6ovnOTipHL3AfNGkeW<k$ta
zD><@yFj*rE3w#V$ok=N0)~cB+>a`Pbw}>m(&71K>o$L3U!{Vq(l<&f+Qqu;;$4^2Q
zb2L-?6;WpBEk(Y>7P|Rtz9o|GOmr4%!2b|AGBOhBVAb$u6Q4T_&IqMX+CzTPz6fBP
zfSIM4ySuN>O*Hwdq(bewhe&nmSCEMYB^l_}rsg;w<Q2-~q^DaZI6ore#klSxJiEp@
z`W4=sg`VsBDgCk4h>-#8l$4YRPo9&RpZ6@)E~1y4t_2`r71t&vMLq#sy#&4lCM({K
zCtGzk_ixGvBFv#jE1wvTl!8RWsg`Iz^5dcx#?9QKr#oG)b@BFh-PN4LXCVv>43j<L
zFTec0!5p{(ZK{@0gZX{iJv;apN6?F}26gC?{*W|4IMiY8TFJ4h^I)KqY;H{p`NERM
zIbw%jM~(t~489B%Z?c#jcFg+1ihWw7*tZVqibU2Rlna(BWjwgrVB%{ySz0dwd+sWq
zsu#P+`C_hP_Ya=UgKMCqDg4{sRMjF1&Z>{xkD~z*fiOdb?BzF%Yw+o!vHLq|y%X6j
zbM__`v`qEAJ7aU5DMy|RNiQEsskd(~T?h5g!*}0Qt1wId6-X$KGzi}@>kcuafBHu!
z{uQD#%RJwG@ml_gIO}_;0p5k3B$FFdxmo6rj!s!Wri8tXjTQWXC<&z@zRau)r<&kT
zr(MIsA|;KN3Gk1T4l;QY9}~bhQ0BUL`8l8*f%D@FS+{?KO7td>aHluY*H@xrx;^55
z4>X|Y^0z3dwrel(va+DMnnVGdDax)T{`S9u8{|akh>_BJ6^mGrwol{oR}53+ejCLR
zPBK~+XYbL?4K^!g-3GvwER&KZpM4-n63Zb|e~FlO%JkaceP_q*3eC$<FLZ;Ou^RMf
zL=*yoQ)q~VF(&jBckDJAFMoQwoh%(cxA0_5gCLWS5$)#D#wp3?i<(TPG1(g`lzt`l
z1zqLC0rt}vOXla-@1xy{!uQEMwzfqjRG-JZJ{gJgi?dAn+zqLqO}|BHyZGe%3WuJ)
zDxp)kUYx{P$i>0I;dO(d480s^4~fB=z|Et7(WZr}t(EM-OZotKE^lS|?x!$b#_Ct^
z3=Y9@x+1%7G$mYIE_(BcA0y6O|2_s_W5P#@R-`>if_=W((|nNRq6mq%PXMMrWM>*B
zBZ&Rd=CeMKT@jn3ioA7E$e_~%`5Ws-pqfESq)IAV4JS+IWZ+FN+=%=u^~Ni&W;cwE
zIkT_@AcGb`@F<D92|`UFx85qe9BCl}gn!0zAc`{iP?Ip9WvZ?b80eW&(0-~$Ms+9q
zy})xrn!wGKdtXvfu|w%fdY`9<txZ?0BMR589HJz`iox&qxioZigiP4I?Vr-^Q))0C
zFcK1S^~Zp)P}IM{7(^he+fl^#d2NvK>2j(5Lw$TlOaVHThG-EsDNrGroHhSDXmh&;
z2sdbw(Fv5+RwTtVV(cDQAMVHE8e+_n^^g<g{K_r>eF-aRiUz;7sQyr&f)AZ(M`Rsw
zi9F)uy*S;AlUVW5KxMR5>SImxKZ)FP_!6O+xc?xXOXb(=P#0<Aj12+v5;imQ8J)DR
z3cgM|Z04Jo;}E@ZCHnA{!6DD9e{dQ4K4+DdZcscGRFT@u>|)Noo_BQ5!PuiJjg5u{
zfry5RFP2!z%7uQallbbYVe9h?ee{SW!}6G8-ojN>R7!bD?DUw=5_InrU?>WRYACzC
z`5wP}bGeK_MJ))zrycQjIP^*EKh*zV+|~NlIVI!dKufB{+LRhQn3I@LpgU9ST8L4u
z<@2|3aaY!A35W<H+;&HndVv<T=VeS~eF?fikbAPLapz8xSmA-gp<}rsDO7^;(0m*o
zljH<Ls;6MSAAsjx5GvF7ay8PF5|y>*^6WZ7wu12_;V!!!wtX+v?vSVAmjnpeHZS3L
zE~owcMK6!86o+{<-fzr4Y?2QtioVDHL~g-gP9k=8i(e#i!1vCOpu4sOqo}m_e}IA)
z-t9cA8ovRr6jV52S|!(Z!TYReA;&Ln_}$e(oo;tC(4@CUZX~@YF-0Qiw*<46u!)N9
zDSL*QlWRR84?@I36UP<;0W_{Cyc<aH;KC~!A0p{Y@AE8-0hx3M3OW7WM;Z;Ep%Nl<
zHkWr@q*=~Mf$Js~K*prHqoYH3(VTN5`Ah${tFUlM$&7=mYlGs$Kf$`!|5)>)c2C+t
z;k&hbF9Qp6iX2nq78jf6L|kHbXgItQKvB?s?2!`ST9BJd{m}IHe-x8+yxfz)>qeI3
zZ{8v*6*8!9R8&^NB+?(~`CKh3z^mJLlBhCOY2$=Q2mN*8*;W7RM8Jaf=mPTY(!s*n
z)@a^-@s|rVF6B)>Sn2U<K$;(-CEonXBUwc*jikud%f|8bzpe_?R4QU5U*`5)vioCC
zRqr=Z3lna<&2I$mZqq-wOX6D=GZ77{{<cb(8rCzi?>!3dR1>Er^vtt=q4r!H9DIL#
z?*EPp8b08Nb@$-^HhXxrjyahWNJ5^!ZaMbHt|Sv3oo$Np_a8+iJn5YWZp8P;Fk%T%
zOxavc_)&Tt6F>0)PgTmgDG<AhGx!BoGiniuot)aO5mX+rBYpd+1=K9k7~UF6*cnBa
za(I3UBvW*=HZczEhn_taxzkFjJ^B&dnEO1EC&+Lw(&PLi0O9k5z?|-mb1t%x0UPwQ
zHX)?gp#;4kpmw+ZOSL&dfdtnWJ{kTDr&+P1<o2#Q&6iSI@H|u1h+W1d1-^S^W`sRY
zBGl2KkI(%F@`t9TruuXwxObL`yKVmzCzAh7XHZ|if_Z~;tGB@|=-Dsd+okXG)7^UM
z#DAl}I-`5PNWP017F&@};Q%-#=?O_8x!}?6A?XVz-#(-%aEU?CYRPEJeUN1cD8zZL
za1)oBO~c5j=4`CmeNyN0+RgXS8`K!vVWI4<clCPskc})+Y3|s;LqWT233~YKvD50I
zB24D|Gjr#Kp+oQbRME4h@%jUP?J0XA*0Z>T^yg%{-rjqj({JQCEb;8zcHc`VxtkmO
z(Y$)`{D1?rTiEcky<Jk{=$FXt0%Gcn2wcV<BAf<Sg^ySmjNlS99e=*g)+`rW%b*21
zLK$v$DK;&w3yYD)_4B$uxZsW~tz+Ggg9Pb;^|;S4{^5HvjWg1toOz$~mXMno%6Q1$
z?8$Oz>tFljHUrb*CvlE=BgxS%P7H<nGS==_d0L9<FS%S=oC#rL$GkFdUs)uIQ6qZG
z^LE_(*=iNqfL+vcdwJ3_6H=*AY89<_lpp-BbTSy!tl)y$7>5!UCiFXatWj~W?n6lP
z(Ll^$hA@QeCP?4sgTKW|N=iBk8@T#F2ejERuN{t$b<_ap4{NNn!Od^m<M4<WCh9eF
zvS-Ctzh3``UN8Zm5B7K81Jq{@6_D2F2HXnIxnltHSMIw4t*!~+QZxHrOSRY0z$%Zc
z#0x5a!iXtJiIH$Ct647XocrU(Cw5&58n+b`nNVImPr&$}iHWZ6TgE#Z7iH!pXb67p
z=N2_eqF*8o(QH!8KD|41Wo$oj<xc)Q6X_Txm!B?%r#Ix$#fcxW&x+td(14K*-h9>W
zHEe9`S)pl#)S|xQL3Bmi@gl|!3SrplRQw`_G#>*0sHrH<KaYvb`>^$VaIx#le)*8+
zzQ^!ZA7j7E)ZFHmJDIOiW{4I$8uJx(CV{zZ+<mr~_Y8cou;GRd{VNQA95kdX0ywP^
za1UsW!Av@kN<6+<LwoZAKIOvVNd|s}%f(W`s|*wR=$e#3&M!*GXYWXS(XG6Un;X3#
zog#L;aw%f{H3TZL*E0+}D+iJ;Pbmx9DFd%4?l&dikEKV@rnY%J97L0afg>Z4*nhjy
zCbJ%qgyt72N!nR(#+s!R5l9;YQb$e_Ie95&tr74{sOm5|hwI|=x!=E??)xpQ$LZ8c
z^&B>LeP1O7GNV6j`&QMIx8D)WkFliPaj#@PVt22^eue()Y+R?FjrQcay1EUCNg4S$
zX6Yi8UxNvx^pBP~P^HF<8b^!6Qs&bMSlEFo4|r5c{6Ac@OTh!K>!Y;u%tif=_df?&
zNl0~q>#loX0peOel9TE)zmlKGE=F6(HqR&If%2A=_`CKTLoAH-661rn4chM)f1YDa
z$>{ozb3i_Xm$Ou}lTAq$vrn14F-I+QuFnkf{diAw4Xv0Up4UHrn9WC0P77llQglBJ
zO(NRPZzjNeI-Z#ih&H)@>^e=L=^<9YhYsbGysU`G?b^Dz^CZ>U85)IC6!DeUOGvmE
z(}-!j2{Bdmc>;_#C~@k*5?kbJ?i8-gH3)+eg@>0Hj~?AFshW$=_;rGHtcwT%+U9;T
zWFiUW3bFOn91DjXzesW9GwR#Zaf0vQ;`(r*9zA?MqU4*@pc3vVSrQ;%A9TL;F)@hU
zjt*awY`TZ1S`EKc*grA|6zYvSi8$x0?qnFMkN&1jX?QA?*vmnIIW*39-4wh3)Twt?
zHd3y}>WC}R-S#N$__{pY%b8xAD3H9bedMaD9d)em0H}lNpyDIH`0Qot{-zIPH?i3Y
zBv{%dlmE^|@VwYh=2<S(_f@r-pBI7MI{)Hr?2oRuc~2?~toXo!7BV=|m?@!TAPh<F
z<;YVvpYz`PC1fzR(5vYqPusPt6?=fZGVT1zVaLH(*gj@iEsw`__OY)_XC=Q&oYmmb
zDvao*y_>kwV~o8vvLeCY>j65|&5zehAg3w?Fn~MR(Bkl-WyQmU;IaUi87B8`#71uL
zuudyqO^W^bzNjb)@BQnsOSJ=qUSeq-<Er~q$aw7C@M`G~OXf^HCst>c8~EsbfD=Lk
zdMn~XmyCWg(`uJRcdktqY#jr3&gEzEy7LlEeV)(U?cyJ5=?y}YK+UY5;>kgd&e{KY
z$r;pmyLZh))!VI$-&AF-jqu1kQvZ--ir!3y?~zR5?C9s&qFD493;Gb7I(V_LugnY&
z7#6wB%{4UmoPjWWz8v?v4D_@NmE2fP1k3%$Jp7~>i(-0;3~y?CCb3c$x@;OKAurj#
zJAXnRa3iJ+A;BmvqHY+0jmfgZl;C7EsTqFT#XD1qG#fFYdJ%`+yo7~(mkID;zxt0h
z#V*TjiLid2lh_^io^1E*3HpS?ilNEENulj=ypt&32v4(p??XRdQhp8F5ol|^R4p3J
zOoU}Q-F@n;cTpKZ=&*Jxn3WkH=rBH*Arr})EKqwyxYIPcO<%zPi@$zjgL$g#5;_<Z
zwd_ACEfP-xLKoo8bFoiz*G^m=>yFDc_2myX@azhtMK480OJ*f*iy!%_sS(XiY4<*0
z{&z%OLXu-w&eQiX_?m!pl#QdP`9U5*w^Cw_Zsxs3DQQ?Q{!Myd+RDmI@!f9PvYy(`
zIM5O16E&)@pLv6H4Y47v=cjh%r%yw6>#bt0uVI>)ukI!9Zad!k_=CZ|sAc9d?)Q)G
zh`1+sNC>t^L2Ky&LbeXW1A^a%N}b$o&~E6h-44sqa=_CCqfEB9<LgqIex=ttmhq~t
z)w=Q+eGC)v+kNu}V-0XcXwB9x4M6<;3y+gt;#*`@VJiYuL)hU#v%39pd*LJf`+gTz
zL!5#*)NlP*QGq@C`TziTetN}h3?YZVhB!kqGG|ez&QMj6A9N68Fjlr|f<R40g|JNe
zVxE^e@~>3d40_1v666Y2jVGZ;G)(Wv1<<#*uKt$8_rsm9`!eU5Ty4(CyP+csJscCZ
zOCG#N_94{)V<zZLq$km+6^Lh&jBi}$tl*84c>S);zRu;boAkGAtFfMQjy}^=G(4()
zN{rdIYxk5TmS&{9G)#yFnURqpD0K62Mg1u7-vl){dN>K)b+6Mt>d4y-cJ$Ar#cEE$
z?wC|<QOw<4qHDoXx|nqk;{m0SxYlK};z6vNDPU#S9^ZbL)7Re7aZ=Wf2Y8HW*_E@F
zJacx&F0{9|YIwq`1}m$=sW8E72umn$+LeHSAjfWUY|+T2=<j>4m0J>5k5cjvUQuEE
zP#WLE!$WnO-&NZkfG7sqy`_16sXl}%bn#jZBa^YJ;m^g;VA>qxFB#g8Jv)9?KTvMx
zXcC;s9jWwj(f$g9hemzpHNu`7>O&@}KdeI%f<{WRcW3oSh;!8W9g<Auwd=t=>_4w3
ze$hyoB2!~-b*e6bPV>P*#n45uxWNd*#)~!7^X~yWD1uTrH^}I$9^{4HMf*TJcA#Xs
zfW7R``31e4lx`d0?>0grB7@nrJnc88Vi7!ERqlXPR{rcq!Z}eCfQgE5_86J$9a~#%
zoTXLr7~8qdvwZ^OM}UFAN307jtnM!~k$hEo=f-%Z$k=F7(k~)g9{a(>MC)Umo%b@%
zdOFjJedFUD{3cbIhH=?zuOd9J+d2+nYyNu`>sx3F7zOC*(e4aeMN83q+$raYfzA+%
znUeiv6a)id_UOLwY;KGM+UkJmF-bsnUg^l|OR(i|bXR}@*r8q%_7~rR@QCb_l$ewJ
z6Ru=7;5&l2N)1TGn+F7!1u_M$-d=~BQgtMUFh9~F1dB)<*QiZ<ZS$V4S5kemcXi$?
zSbZ25&Z3F|e2$c-yP6U9;=YgMvffGGAz|m}iumb8(;fZus85ZQCtJCPfP6iSsudE+
z{k#`3Ffj1>?9UqL!Y~jqWbzwc(~FF9uV(&bp<D-ooF4w~Jh@MXlJs0bd#v*TseZe^
zl=Apn6gRDdVr>qgY;0_^H8nM6y@{?W0nUS%muz%|z=Q}NZRJ}Dt1~Dwzf;zf29nf&
zG46q0c`(O9XNg6nisKzDts8BkhEL^<+fP-B7@6Int@79WI>2i5OjENbVBuNk8~GsA
z<~X)l|J3s2@+s@tMX?Qk4Bh(MK|p)7rZJjl<ecNmMujJw!-?|WnE~@EI}&RFfv}rt
zX^Xzxp%<I=7nHEyf<r=_D0kv;$napN@5S`^qgXaNN^V_pz5>$`w9+Pi9(um&g0{5{
zA_1qzJpXWf<Tw`P0`*K3NXaBY5&mvvm-ft;n-5T%>cC*K&Qnzj>&3%5390+-${vCL
zh$UD*DSafwviq!3Ted~x89q$*{Q3L0=&vuW;Kb#_I`SkEJWX^6m<9_h22;Zw68hNt
zajW_PxD#5Rzudzvll(Ud!6Pqj6idUS;UGt^8vO=iLt#4bptqCRe)b#;!Rh?bxP`3v
zo0?NZjIl6VOqk9<&+t=cwed;koepeO!+G&71>5_vdUBFz41F{g0zYvzb49-XLfn1C
z6Myq9Bj%5Y`841s69bE9{u<6VJK5-}{0?#L!#a;-1VA3Q=9v5w+pn(k0@h}-Kq3yU
z&{+D4_1EAKUv+AdQ1K+TYGsekV7!6XvpF_h*nwSX_1C2I`EK|*6YSozal+34wh@iJ
zZ8}zTGGiq%bc%rS)HT%C*SA<*)l%1-`V(hfFB`F%GBd+X8QsX}Da|f+rS*Iu?0o+a
zN?=6FQMYDmXFmz{?Wo+v#Ar$Lurt$0L!-nOSVHG-D|eQ~8#H?85yX=lOHQ3Z!ys%U
z$FTujAwkH}`|a<uHLc65D{5+LUF?kbBuo}X2p)K~4i(D8$|YDn1oJBg(8cxr_>8)?
zW97myw@eC6(#$+`!><39oXL5>Zo${l)%}CM*5UIaqlEU#NHk}+^9sM3P1P+MDO;yy
zEXpDTPECN?$%6WG;}3>e_7CDL0y|Y~6cmI;V0-qXmyn1@ppWyHmWuqm2ExO&(`s(b
z0onk*fJGyG=)$eWg!MsH8$P;l3?{Pba{wQ49jHurWmii?{ImTp(3-FXjg>C4sKCX`
z5a&=uGS+_Y+7Gq0qrn<=(RbFu{Xj7i0Sr~|Ni^gV6bu+|i2`16UJ)b2nV|miQR%cj
zIuxlw80d=nyjSI#GM{tqxi03r;(`FWc@I8x_3F^kf}{UKXN5|}exC#{E*3WBVyyma
z!e8@)RVdF-7Ni}PS>L1aAkIT%x?Jd~Gn(D1s7;gwV<UFbj_ks}KgB;NmKWKbZ)SRp
z;-#atY_l2c7?kb11R$P7tB?_nL^+Jzq5*fCrwaq=7Yx$Cj#Aw8b4X6HHnG48#_Wh6
zbWI=dJgC2T^_5bP(S}UTKO%AUNtVpREJk-RKpfk|hy;@I{QJlTCM51e2UYSG;4N34
zwYdUwo2XI>noOx*XhRQ>ftwgKRyJ%zL_Gc2DX8h_FL*PEMiFGzy}0^3nI9gS17{AC
zCmaR^#PLNU{t+<ayk2WAULz9zI~TxxqZjg%^I6bj8-DJj$D=Zm<A4>1prJ(KEBwa|
zh|W)SrUBy-0E79;j#_JCP7G$>U*51nAa<jd;|PbZ1_OWhBABoJD0lQ}Zs$lvDz$e~
zy$FbWWQ`k=d~SpKM*HbsYq5#{^eS+vw<F?3*u|*<jt(61?nfp`lm^uFeR)!QIsosE
z9mBPU3&fc}Q)y$Ec^p{zdvIVtShtj?jLmEY4eM%=08-5RsLuB~xettOuw!XjY}6De
z@c}zI%B0q7rD5l@?gPvH;0uU09I6Y$d1$YyYG=0)BFOAC9{vtu3Uk7Ja30db)KEa0
zTooV=>5FO7swcNYu^V&`gib!UU(!iQ9;GDn8!mOG&FAbr%HD{#iW2t(;<kF<Qd~+B
zf3D*f3UZF`7+@+HwCz~rAb4_*Kf;Ks%tbqDo#)DrAAW$lISv2%Rc#<DQRf5L-$O~X
z?2j%;D2?|aYKpf_kJi#9)254AvHQIpzAEs7ipIRZxA!$Gw&xzHhU5{$AplFBCakkV
zH3{bbItzNqoY8ouyqRnOYp<xfKN=8RhemYc!M=1_I4$ww6A%O#f*I15I^6K@50Nu7
zGaHHVC%5C=Sw$}bBKpNM$N~FQ>+RVV7^N{66%i?lEaUl6c^{=n0{FHxNh?f(UzqUG
zzH}RTTP;x|2QoVSR$1j2zUq(4OM^;{x{#DGv5(c&PtrHrJ%yDvFA5VE2vPi)KGmal
zg+>)0q*rT9^VJ#Z6gE9>-P#OSno_%u|MjxkE!=HV>fR++Fg=EpK8G{?PnOK7?BI{<
z0S8<|=5hLnq?K^fl))|O`vK9~4Vz*oQeH=sO|B<0X3iN}C#fi<2ARa4ZljK)qw1pp
zd$mwrrjjJYgzJiLK)q=!jn~@lYwfc|ALlA*M)NtrnSL8KOlpiS4B#hIpYr{7s-hkS
zLK4PMu=JG}n~EWOt>$YEvOmZ?3E@|sCHin*lt9T~QdnA`^Dx)Z0<yzi&$mvxQD<aq
zT>A*{7`Z6Ae)~9NzC&VtWS9`|UaA9ecA6mfT40yyegREf?uzBt;07A@#up&C!l6(p
z=Yute<Sy?4{n}g5odM|&GDUg~E0^(t<=<Y%vzt7T%4#=IkFFHY`(GC=m<wf9lgGJ%
zlhRt7KEyw6?rGxvwnbBl(#83WO)O&KGVkJvrS|vEmJiM(&+Z?fYu#kh?|qqgY7Wml
zIP;(72$T!atZakBtk+p-xCh@(V^q8*zqc!+@OdvL?_bx3J9l$F1br(*7k{F}o9$(|
zdVBg7&l~b$#i8MNZi8(6ho)S5lE23nldPXE|9J2<03-&#C|h^KuMF_^xtffsTf3Z%
zuLag2;66}e&zap4kTD5QQ`p<69GdtkMMDMO-{AabbdA!;slU>RjegqzaHYyk@qFV)
z<3qEtLCaf$t|*Q8TH5YGUSj~C#;eG^UnJR7nlAlcS-8~NbXHa^Hgnsuzs^3P7v$pP
z#24<duARG@84XW{u0@s$EYccSfXn_=?Zo&<iqT8RftMQ@kW6{IXwRDZ;NXA?T%LMG
zlx*e-QUeQ&qh^D$AerL-jRc*afRbp!(dks_N&J1@pP*x2rP}Jz?#=y`v6Eol=q2sv
zYsp=GAy^d*Hp9g1{OBK9!2OLy;ApEI*LjzlF0av8$j5)wEBqrRzEUF##5CD0g7$%`
zja`q(4W08fSi+jHG5u<TW8z?AApZ~vPr>FVW%*Y+SiFSazu);NG0Y~MAEH36{OHk!
z&rU=tqvpm1PY<{_Kz{gXjD?!oduX}bpMS#LWs|<^9pTzPj8q??k|4pH8&jc(!_xSY
zwivZSuT_GO;IdnU-<p4G{&k8;2BR4bt;ueHA+U%2F~ItZxtvJ(t`e_cdOkB<5FbE*
z#UU$e6UE_kW`r&d`K`24HsW!tc;9$Xd;QD9Tv@XJb`n_HF?oE}?p_(7Q&Z3;$)#mq
zS-Wf+y^(Rne&qEGGn$9)jQ36qou=quRjMcJ$Nl)iO%~nQAv$@RBQ-G>8&VFco~A{V
zZQgyCN1B1Zl3vW89|+4-KKUmctZ7IbsdsFQ*d)U@QG54OA|H{Vr~bi;gVu5|;(ls?
zd@POhJNfZPL)8!4-#O~c#Z)b2N&kDiMk<J!gO4saNJxHoNAQY|rslL<9m|09e;Q4_
zvT?CWiExmHYyPlz9oj4tW=sh<%~2`MR|k=nXoP8eeB30=u6vh>{1aHG+ln+%Zj$%%
z%d7&d2mZ1cfQF*M)U6jMofa&Frq?R<qN5Fy3DVhFQFMsw*&o#J<@$d3e|1TtE%I?>
z$AM$l?~wd{5t$xa!Z>$VC#M2ke>&67p6s!a(a}j4?Ygh%B9ai+7#tFW$F^RBgPucy
zuIkvoL$@8jWveBL%%kSu<t#U7F>jenj*An$9{U__Z*Tu<<QBFedD91ff`WBPzcP%J
z2KtyJ>waFf)@vQImsR<3{GJ*h!OAdL9mkCu5}$L`(93C24_H{zQs9Ot%@-d#kL|)s
zl%@zxu|{+0SaC)p|I47^aM8bFeF#3>bS3!7ivUr=S-j?%4JmpU_QnYV{InEr{>Vqq
z>8++FCp0>zjJW-LuY%c8e$xh0{*!{$)AtgW_fYG1b6DfB`@8r?{~UiOI#0GR|J}oa
z*-s>e`bI6J4)U8OustHPS%jV``)R&=sRch_Z&FLZgg265>GWw*TY<++B&KiLf<vx4
zDQSH-fnO1__44%moDrgL`8TTsc3~=+%q6b0?PYe1P|#;@N?|&<!=w#~Y7=~GC3Rsb
z>k1Z*fL~~gmZs0;#arTeO4zyk&?@#^V+5=Yn1izG$xs7Vhx}4U9;?qZ5d$7C?L7@N
zqtDDcP)0h7!T_k?oLepnMR)v=y1WtOdCrZJhd^5`I<s81zg+~RfQwR_kNbBt{C_~n
z`lF=z|6~~wL$Jz7EY9L1&Au-!n#?vcQ>i>Uw{LquZrig^)7o=Y3+^eT8#GC6`M|xH
zfS6!xT{zkF@9Kq_{<Cth!7nK_=uTE7vW)>4cD3SH7r%r-;5{V-9#LP<3pc}*dw$-*
z-?W9mauC-xRsxRopURuNiFqaF5aIdw?h<nbGdEMfzCV?}BJ`;`mHhydl~}}IBBQmb
zzT=_lY4=W{q^1>0%U3%*yRCwm76GqItpRsl**!i!zU<Mnv~?NWBoR>)FC<nkHlF@Q
z`9G3Ui7Y&p*8e`Tvy8<ckPs_m{{H$kN7Qzt8^(_jpw1nkYEZW_Yh|N?2=7s91T0zs
zNMYr3n&7nSw;gY?8K#gkDh<iQSOai^euUCqJG;KZxEEeYc~@N*ew2>pomAU!>hirq
z<G~pe-+QDtYZI}o@~;P+Gr@ZFlolxQfr=4<C@u3veF65==SEDiRZSXptA~V=4^aA2
zNEc0zjL$t(o0E)x_m*S9-BZ@nbEop4p+FUZI<K>^D*e(aC@BS=d~xAZIn8GX(0sk4
zEech^n+NS{nBegPtsU(Pf>S+yZn>2m(9Tpg-@10gl|~@lk~-%4yY$%xPg=gw-<FG+
zn4A<mM<z>&$sBKskdP4fy@!_i?=%@Xg33*Q#sB`-{T~GKC(X5Br06dBzT#5go{+^(
zS6VT$H^MXZedB+FWK5cnm544ip-Y^T3h>d{bkkJ6-;CeR(SV3lK4}mHrTYtF!f+s;
zz?jI~mditHZ;|ED<q3azFv)qJAi2b{IV5s%(lmS5zPc~rwaHy5U`?xxxH7)&{lbkY
zRM24pgx+xc+?CS}06~ZV7DdU~>5;m!5H)9)vIQvX2`XlQc$7_63HD~dMud4C*Rm`J
znnI_1mx(vm2VFopu#^rB*bR&3!E?a~Po>-+G-d^kp}TkQhAc!C-`k$xb(b*~z>qc?
zRYAi5rxkk3M$y(^C-KcHU&X_p*WTc&kx#8o!dxgGTmTWsuh{)9^-An*>MFNm;xBhs
zCt7(rZ6M?Gvn2lW5~LZliAcF0MyCy^EanZ-OFN_iiClbs;6f2s@G^S#vfET0M6ut`
zotW6|9(?wc6C^RxzxDLIY-5v>j!@w=^DV*wu8xj^{6gkdKZbVqU%zf>(!aE+$aELd
z(JG{wR%)m@c<0vw7?_!DUMOtpJzp<=0@a>+_vbD53i?Z%e@dKuHIW&hVL>?(R6}x^
zM+3oe3(OYtpR$}q3kdOM17AagZz#SLv;0-|usExfCj!RHXU^<aFM6<25*HO7<Y;@H
zpNU)+oT@QcHXVs?kCw~3qFkMw8H!o<@UBbP>QZZM*i*gV=uR=pQ{cyn9=awrh4=%s
zzt`^8qR91zMba%xk~xWBnqvIVJq=iWku*K}cZhJ~nNhXuZ*w12=uF;e?g$IJiFqoJ
z9Ujdv``e`Y4c6p(GLGv$b=YOo42*^zF5lYacYXX{YYvCBJNy-aP{Q=y6{D8vA?oCn
z^%k~&0!$@JaOd8st0HS!XKQSWXD6vrua4;Q4vh#TBqgaF5!>HDbgiB+#}mLDTTIdr
zH5(tZXBC=#7Ep)gA}7Fna47ln+Q)S3Rl(42R)PVW{JR<ci(}gGwYcI%LzvK5Y=|xK
zcO%s2&r<u(HmqXM!&Y)Q&*g5O@4^Z0ypQE$zS8tVpE#iYwLFiWIveTAxV?fxbhakv
zZSnUps77AkPv<+bu7DDVAJ&))O6~g^A_&x%L=RtAbv*g|`}eU~>jO|kwkY0KvwZgL
zrA8Q-u+t*B$;Fl5A3sq3ad~5Ll<@D1_Jz+Af!GATXSFM?w?4JHKawex3PFqfWz`Q)
z3|wiFDxkAJeFjE1_Q2gN9^3x>DGlCmI}2#+&CDBA(`6&;SM+prSVi931m|fAL2JQ)
zS+i#1&yqW9Phf&$3LycQ%?UGyU!h8xDISQV9kBGSqf3ZUAcfLLu&3X@palV)j7FRk
z^0eh8>yVm*_RxNP-;YhBq1~822XDHD1+E<TEF8&g%H$fKU~_f-GGre!(ClFBeuMq#
zC+1h@A=7|~@5$zG75uGxl);PIVV@F{3pyhwEgwIt|CYV`IIm^h|I4SkHY(7_@hyT_
zewoZo@4IP!lokNeZC-UN3d-|DNZHKd45XgLJ*?DcKwy9|@tK%BaVVl?)|^5~s{dcS
zJKwGz{Q2W%V`C#Dk@@)5RUkzCN70xr%a*HTZ{q3XTW6XA#>7VB?P_tJkG(g+$tz2N
z+X-1bKCGrqI(%{6I7kVoLPd<Mr4+YXesF4~_fOZOceQMaA0-pMHp~DRL@Rfq4$XXx
zo~WydzN}l}!ks%<3D}Z+0uk;FOb|^|ktSt<Gtol)EdBJ@>HI0w7T)}W_80I88KslK
z!K$!iXclx`y?a9^#IZba4eGmgd#)C8@Zb3&1>FK{C9*Ny&QZpc?SvKQ&5M2-h@xQH
zT!kp@76-?#+WdUSS6>SF#B^jwIo#@Sv<ip3k_Lx|hd*xFgUO`xxPUCd@`!tKSoY-$
zVO}ygY)54|IbS~z(%g5Z74&sxeXeb%2$doWp+2c^yUDL7%X9|`l0?(=Qn+f}n<<g`
z_lu)PK2bTuVXE+1m4JM@eLq+kJ~vNQSy>r;GFGAHd%1!An}wstHP=IbIEDDf870%E
zE3u;XzCChwc24q~UXB(@{mn(9D_4qxn=5nX<h*u5i2I!QpZOq{`giNFLZq+*+gb*4
zOft9R*nB<9MqER;>ASGqGq6OPK&@qpwS8Uu2_PGpI;@$e*OS8dCKXzf1K#nN9%fhe
zTplr76J+NMxY6UaUr-j%Zw?VqYUGCO*hlw&_1EY6z-xb9j0(oBN@p;6&vnQu{LpT%
zH$Hj^&?I>@>D;<ign<xOd|cdK6^?n1DL)q&h>iRn9MaRR^#KAs%&1YkQW!@|jL-Zp
z-H1l4di5G<YX>RWKwE7qX&n!EP(iy_O$kqUPj*uRk1-`NywMeTe<w5zkVmYf1?O@2
zY;(J|iPMO_|Cjyn8Ny>{ob{evvAZ-!Pt++s`r9DfIkfR+WRQc7@lmYAgvIN34BW>U
zvxe_NY0pH}{0volUrRlVXX6IfyNddDEAjPw9O)zIPn8z=`IUo<3;EbNwrffDi@CKf
zJ{ORT5kcl@=d6APXLI`$nD0iRKu*^&!YV&oifFm%ee<LywRQHgrjCxzO9yA?l)Tv}
zZK3*2>k8&p!jHF$#d+O|qU0JfOWD}-i}$4G%6GW$_|=EzGM-7MW~qU3h4VTJEzJeG
zkk0tNPr9rc_kkK)>k@3OY3Ci|&@8Kz;?*iBuf#2s$eFh%&kUVJy^Ln7$K~BCVnmj1
zk4Hqj?IrmEN;Ep(C!u)yTAHiSCRmOfcb@~*HT`Wd=`<B4_<QEe%oUPglIiEWzMtMg
z{j6f>-qYi1t6e1`^1OklzdKUzro!d1J~m$iG@>hzIjrq(9?`EK2*}M<a^syRqQl&%
zSwtleh`c2-7o)Q*ag%73R8lzaFmK2g$-Z+yw|yUL&{pLl*9RG*4Ag<(M9*8`RyUr0
zF}on4kH>>hN%h?=>2pZ<+@~5@Aw*xql~#tM6UfO*3As^~yM;BwZ`%lPY-V&ZXK^p!
z=g*7U7dC!*MPLWUN^cai2IC9W2YMOeMln-8T0swx%JRg{5U*=l09bp7^O3Z=jq}L?
zTJOhMPZ=#2n1>eTcIg)jlySJ-WIMnvsn-yS72N}b{k2B-+9hBI-kg6*UTOob>C(yj
zB9;7ekqWW533F|BWl0ep1y#j!gqawLF%UGw*t)?vQD9Y7yDg?2{W)m1dg@hNoTyp2
zSwSm)4k;|*4tD=v-hTdZE82#w2X0pJcl0fg2G}7$yN-7dKhKE?Y2s%lEz=D}15`b@
zXa$GdwGEM#{7Q#3isUUYNaUZpBeg>z?)hWM`GmV{C<=g$lopD!r<o7@&FG@>h^$0%
zYV5Gl`9?l(<~Lv00HKk@oB!NFfY|Q41%uuz#E3`^6bYw<s#}-x<o^d^4dTzw1lpwR
zPpDH}f7UX>Dobd>{-_=`lO1fps&IjVf|r!PiSk+=cj&sWRqJIMJfPuG1+~o`A4gvV
zz&ZAS<DyhN!}92B;9a`?q#@|_2^l}j>?)AsJ?#%u#=(<av4aWGf4#XHxAWwBIbe;`
z%@)NS61%A}Raq#d<+z))x9>jd_ipxY-HlW}#$AS?#o<MTd#2U<l_Z^yf~l*kt3wyI
z{MTF}HjCdwM<(C7jC@?sU3nVt*Y1T`77%NDTTJk^;g4=F>wj8aKHS~lst3K+$3si}
z50Cg$V1+V9tsd8&{G2gfd<#ZnhI6+fCwFf>irqqA6oT{3JEx8RkUZ&7nrDN<{ILR)
zJu)?%@T>>muSH#x2`a5tnkP>-eHFLD{ECa?y%V}MBBfy3^Y=KAb02SARY4hjkY^%A
zg7966*8b1ueCEqaq47@>$eOF<<|y=;sreOSz#&~~xyJ08;xU~KWfs%=M=CO4D^ci4
z&5j`0&FhQSeWgTR5XBKPzmXF5A_qVk7s)6x468rc6g1MsD9-l6KA?tyOvNgXi@m*}
zIZ#J^_FX}n9^-KnV1mvlBOJ$N6J~jjbl}NcH7Im%i3I0+ZTo&}!`A%kT;RTQApNth
zBn%hw6wBl1!M&#$J2$jUqx-;ZP+^n%uWlK#Onrg_jsn4AzEt&)HT7DLcOz+o?pT-E
z(S*B4sZ;1ksZvc^VJ(eAV6Q7@Ey=2lvdzEXbqN}Tm#el9)YB%)0bJMW&e&)5$6{%t
zW*jOpxvvH)l)SdZYn75@-Wfx4tL&@RR(`O=t@3&9rE(?+7B`@kuFQbdk1l62(Uz-|
zKiXmg*D(KFVweKbvWwVY*$ZQ*CKnADi$(nn1DQ31q3O8u77vU-dg0jgRN`E76SHQr
zRNel*kLI8IYE1oZi)H6f!};P<QuzL^rZ>*tY^dh67SBb5qGm_Mj+F}!v+74bX~B-O
zfJ;1bPydh>V}YylzloHX=ZKL{YkJ0ef!r@F27ItXJkXQ!Ui(BFdiR_$?_R}>iio(b
z1FMae^tvG)Q4S`S%0D>2_i_CgKl-bC=fEaI#r6|VxWX-z)z5a_)|a_U>Bk?j{Q+z}
zn!0O*W(N!s*a^H06{2ZrYO<!LeQ)?7_|(o%i?urqUVr#Bt-F4|X>rjZO7}=xVEX`I
zrLSs2rUm4hZ*c$5NP@vwqc>2JXyQ-lWT!{*{beV|A5i2arYEb*tX6i3uIF^1R)we4
zDpe2;C0xUy=vz8;dUhlGLoN<l{wwy4T*aAvkNBqJXDnQCdp}z>(=zL}FB9KZdkvp%
z_b8od^Lp)=AsS-Ix>0*%uk%w9Nq{nC>|=j}tp54ZcGVBR;#Bc241qWsF_IGTg}W=R
z4Ac|qJ8b%!gy!Iv0{|Jbn4rP>?tfDNKS?!e=l0I|9QPjwj2C==9i0s%S<E$`aUCd!
z{a1>?ndl%Do(;u!`a?gw>~#8JIlhl2gjj?UDH|6MzzAmY-zH*wr347d$sem8bq6hX
ze)&8<aOPXwDareZqa2XZED8=|MZPV|6&yZeM2T!hKl}cco&;!W9<_4%`Pb9gB)p-B
zLhQa$MbTYl%VM&q0A8T|9@eyP$48<FbVtbjL~q-8%3@6dt&4AKse-om<3`FEm)#+$
zLRuD}ZoNbIVu>hnOaklqMQM(%;I{B8z?6uzSay3?myCR?2X8zHjb<>nTgai|=)Jpl
zqj0NDUfk1$r<JB<R^vy2Os_tw?a;(6_D|R|jzL$5U!_aGnpSGu7u*Im*)IQ(LtDlP
zvqj(yogi^HmP}yabukZ{Y{RvKb&<v9B^aG=2~BGL9-p^Bd+KXa%%X&uz^RM?=z;UY
zVd+>OC%+UQI*NUL`1DG{MRs)wLWK?FDh2_gL_|HdHd!Lz^qEU$f2-m<HMhCCSAKP0
z|25))p}xbjBi_k)bwg>j&}*HvU3O1=Yyl+kx3aRb`ur4`yfFr;MbeE}-SX`DDxSyP
zE>KD^M*K8#TIV~f_Ow`t>5n*&*vOE3rN0S9<U;|Q<;TG3hI-LoTX(a?w1X3H#Uia!
zCld72nVy~B%-1b`XcZLBr*jy(ZCWaQY;=?V4$`9b)UdTU8s}&pYZkRgj<pL8Y&-`g
zKep!zhUi(lf1%SEN<>7&yBNP(G8KPcCaw291+6!h$1{y?AWXc;G1zzM68w^i{2d)Y
z{9pBA=Q<Kd00WD>JHH&tc^})}NG(j-d0ZG?o)q_Wh7#Aszwksga#wt=)%26n4nuKu
z3lGue_(R#|>xc$lEK83Mhs1#4-eVj#bx77trCI^oKd=la-U73)=h<ES4b;_aU(b0S
zL3S2NmWArsc0$Pvw!3oJU_`Z>NY3EGdty=$QT#50h*$Jd(iCIz9JRe;rjlaS1=9WP
zV;wO+|GgRH49fwC5D#3HHb^)dZdfkt5NjwecQ0Kfe41WCLo9~*Q4#_>?x{A~_8-69
zNhECzj??;2O=6~N!i%yAuC8gB3y`U?)leK3)z#J>nfa~WJMw>POM+(Y08^k;wGk`b
zb3b+tLG1E>H2n!k*hoYv)FFDJxN>{=oI>s0!uXQtO=B-*_r_8w0VVf*xBPf(&SwFx
zudovPzHCPwLq0q<nTz*AC%BonP_xy>JJjdN5|>P}7o@<V01>rtf6!Xn8I1G(9A;v;
z>I5$6Fdf0smrTyk&9gTqFEFj$&C$bFE5W7aM4kLdZ|W%CsZO-93+oJKn_UE0T>4WW
z{!10F)0Es%usfJ(Q6edWYj6XFJeBEvUNu<;vw;4C{#T7&H$8=WKNFV>8Zf{Hik7A|
zRvmJqXVan=d&D$_fZKwWk71K3uQ2@g7VUb&05X|H?GAff!+ZSA8->AN{&N~EQozpJ
z2bscHEGZaH7Nn>$vtqd36VJhe`l%DMbG}hPUM}*~#(|s33ZHPi#=(6=nnRFEKH*^E
z$H3ev&G?&~#-Hn9|HssI2SWY7@$RxSBg!r-WMySvNwQb=COcHl?l=^cP$4Uvz4s=o
zfg<xzXGWRX`#65@EBgNa#<|b?^Ss~h=XpJ^*XtpJh!Tjc&3a0QK5E9Zm)#-BIgj9A
zGLqJ2KqP*X1|1U63z$@@*fPtrzVPhr8QwRIoGk)!l$&Ezi-}zdrVMq&kb;sQr?U2p
zsdTxN{tN%7gaD8oUhrAI$uj(FE<TdU?B;J4!?gu(0g#+}Ft%?fJQ!4wlOYtFHx!28
zvXgsO4PQgCvX4w~OgWqvPJ41#H6Xj^8%_6PXJd(n-9MFzY&D8kHa6nc<+#CY+9fXW
zZ?%hd<V+W1`6>l8Z`(<|x!ytm5f63KW44sINdLE+4;}zb0Jm!SM4YFyWW*PL!Q$wV
zUpwtV5RhF;cl%$fwbe*0C_9c=(EWIe#E5T!{$SYLyBk4*<k;8;5JtwAL`J_0Y|Ba*
z8Ck9W%TXV*gG8Lp?6TB#*O?jW=NV6Z2<)A^KKPld8#8NpqW{`&AiqOfQEp>%D>M}u
zo08I1qO<v5_sYKlJJb7-Q<nA~l$7m<Z-5FynWZ}ljW<Wx@2CLpL&^Bu`!BD6J3I3T
z_f>PUTfqIdO3Q(mmTAF0l81jlv!-H;LuQFqK39IiK#p>o!&asoP5857>1oX6|6=4G
zO|MjRk#u%L>1_P+l~0X>Z@xYAfCU|)*G5g+*2o>{u;F-@+B*{+HHt#<P+(4L*Y@H9
zM>#LjlV(*P7G0T=>ETC(O$-e7HCz%&v(^%(;yh2M4>$<3d(RpVe`yiCIM)klwcHAj
z8~ApLl>GSU+oslbSd#WcAKFGS_}IXLfTvrDW6(PY!;}(GiR>=62yO74guGQXGLp+p
z7VqdRzH9psjClyRS9ZAzZ%sZEcK*VJ>;Jdf+^EBy;X(Ux<s}E~X+^z=cPO32+B}_T
zy+@bU6LXL6>kz_9A=!lMV?^$##_a{XPB!b7a=gv`diLikIl7gqR%IM;kCd>pxp90n
z!X~iPaAS<}_&xZ`0AlYPtZm9#67n}V`b{BYU27JIIJ#WR9b3NeXA~8L8a@c~Sqb&1
zxJs%ci}z{TjRf!|>)7h{_SWOm9{=#{d=QoaoGR!f;9hR{4z_*_)w$k&r#O<WjcD2j
z5WlT~;X?#L)9MqUQED@P%Fqi?EHioFQq}OG+buD0!pT7w!mzb&g%48YXk^aKZys`s
z-4(97IAScrz%3?r*OdC!5fpnV&}3zBXRDc@<fLv-g9ZwV3EF<pO>%h3s%duK>Pk6r
z(7fD74FcJ3-N%N7NEfIyFYXa=gMC8eOHR6MBZVjZ4L^Lr!8XQKeq-yAU}XJ2uP)H|
zC5Kd{DxiY;XA@~CbTTiYKJ&T_UVA#CYy8IU?=5g&1I9pr(A$6CVBXo8^$2aaU-YXp
z&i(#H9&;m~sCD12CuYoFf84AJUwI%V*?)uG6|%&kfQnsK_g6A_s)2m=&^9Cc5-@tv
zZeAV(3#Ga(YQgzC;B{QCYeRW@x=qY}9%J&4dl?xV*Z!R-5C;PI;g1<B8$~X7nW)NM
za>v#}s=1l5@df6b4camoXw%RqH}Bv2IH>)|52`$u{a8W8{oI>dEtU|3MR%{~f%hK&
z%X>5Bsp#3qp`cbjV;}!pQ$p5xh30$~<wi|f5b_xmpY;#yd*n5#kGt7C`gqdtIDH0~
z9*m2vo_$x}fTXnPF&J?eUGCXXfaa0qitgAYQ~UA`{xbeI(c-o)%r%b4e0QTMMTL9<
z@2+v>vyWM>srRnU{pvGJubEG7(jYNHF>P$SNtUkb??^F2yETwW3r?y>ggL$i11IMm
z-$0rCeS8~+-Y2k~{C@X#3z2i#9HqBu3(R7>$+CqC%J>-)STlOo^2`r(s=|+EDj;<n
z)Fg8r_n!xhMTOQu7d-aTu$GKn5idbYqs0Ic5x46qY=2{o81e4F2p}G=#%gMvL=l8X
zrJtOPnEU|EU=2gGQYHa`{_7i4m+HdWJ%$(GsS4+Gvlwv0dK(F|B_$<m7QRh&jBBlX
zi$ND$aL=%2so{8QotrR8u7h-}SbU~9t?ba6Dl9d6V9U2|tRRy@&0s$&0-@<>gm)5W
zIC3<4Hy)bd`rviV=jhrpDE2H{6DZaFlGU&Eeq;Z4pkRUJ#Rgv6@d+o`at23gHZ*ZY
zHVU}%Zs?jt{`KMo>lu_uV30ROwWV%jlpWn?mV3Vcjdtq7j|D9`@yw~qe@vGDVm?<P
zRb`g_6t{K^zKOqivg}&x+{{o@U0r-euyT_==;NRB6CaoQdEBCAC3h93l-|?x<T3TW
zwSTaS2rVw-KSG~>bF{Rflp=P6Jsy5Dx=t=<qV=Zy0sCY!a{Q>3;{MU3`IHyeXgcY`
z3&Re>5*#K3g+PwCT&D;I2xPaURtx$-$CY3VVn;gdE$a5=;i{WQb3`aZWy>?-$9o!|
z$Cu_HyRY9H6dAjKm$YOw$1T?p^cZozEU*pd0lXB&aGPq0JIQeeg;lLGjI~&?;z6l!
zp=*h(P8VNRA-Ab2Hl_B=0f8G<4Rzm^O0(9^XS7u>e<|R8dvTFq_X6Iag5>cfR4aCR
zi;LCln=J4D6|pu9+7A7mWrohaPwJmedpIX)Rm)Pm*D`{o%0*VujuYKEL8B04vRNKb
zcPefXbcRvX{=V6Bo{F=*Yaf3Xl3CgPw{aH<gPC6BH_DkWt*n@)zEB_~@3Wc<!>Pon
z|5@!vw7rB>431Z<8rNBuOqZ*F6-fM)gr8>Q5vpVY;J|E^oCKy?<I!_N+(?+ysQL$V
z9x&p@>|JkRf-Lcr4DAO-N|KHw%{ho)U$*!E!1E9gGL-(fZsHo09nTJCpygLex!k6H
z>rIL+%}#uCZ^n)H&lbpD$Oo5CFw^CCqUamEC$|?qlEet#2w65+gFYtleEjkU6Hm3o
zf{I#W=<Gs#adCP1!%SoAx^o(Tkcy+)&qam5dv48MnOVT~WQK0Lt6n7mfba#2%u6fe
zbw<xS)vXZCU_4Fe{G{N+v4q%86KgWZu&esC9W3;q?t22vpQN8@XG30Sn505pBwQ*#
z(dC}WrJa}Z<i^SU5H8Gb!aI5{tpk_XL@N!tTng!j8ssnHk57>nnIJ(Hh6DE6flQ(i
z;^_0Nc@V~<b<K-yk3pShzYsswC}N<Z|6eLh1Z3ohAh&>Z`4C0UlaU1X&0w~=YGSB;
z{Vn6MNuT`U%o-!tj+Oe?UCX`zzN{`l93+gT&IVQxY$9~t0U+9wQTb7=@hch%03yx>
zw*<~1j;b70bI_nm(Y+y<y!ej4aQ!mg6y>%OY#Nq&XaAkH>$lXba@o#!UKH+N_fG?;
zY%S0J)|}>@@);u3@;%L~fAv{lpB6FzHexC|HHK-E-#GO}JL%jt+lL+=8@B+G(`g&p
zp{FntZ!3s)uyg%+PUpG_)bFTgaIb!$(!j==fSJBmsxg(nagkZGFCV?hQk6MDN)gg}
z5mPqmpnr>!xS*ji^~Zg`O#5emEHe)WgytKTtWVxNR*yekquwwiW^ZD7+9`z*X0<$8
z7nesN7JyXpAq~1txcNOv68NA0h0O6tB`2!7V+<%k2mHB(yM`yR8zC|px9+ffTIL3I
zp68aE*4i-_0DL%d7Fu9Xgf+FWu;^VmNSvkn2kVNE5lC(fSS|Z9Mq^OUJRgn3_3Z?E
zi@c_ZuUd{piVw;+DdWD?jL;Mf>&!SauiY@`+&Wis?)JD7q_KIYuW8*g;+#zP{7shI
zn)?x7_m>-10;OM)@q+)D1)8P-BEa=F|Gj&e7~%WFz#w1D&II(97_=N0gV7(r``rAO
zGg1TgjP1OG(~|dGUxF`hVM1vO^`L@fJBuVYb6CY-55D;SjClW@KtNM{cCjgI=Ws<p
zGpLsa^jq=ZNovR}dS`R5@Jt3$n9v!U+*_JMZy!q;EfZc2FOMaqs93cf{7oo!Z92ZY
zyZaNLQ|U^?Z~ly9fj+)9we)3Q962-I!FRuO@`9-S3vH8$hr;5z&y8WJ3fy8ZzQ0}g
z8}zG2R^b@d9mmN79XZ<blzpi1D9~aY_PO`kXkoz=SIVbwwd_>x`G3`TixK_;sdBDp
zR)ReIpkrHeHt26|IT?v0dKd^C#-zp=yAb&@#&xMGpa|o2mXxSVowxAM)7roCtL}4{
znQM;@gUVRuO3ag1rAyVbHx5WPL7XL5Y#vgAK5Wj;#(`@#vO6rL%CYa#Hj}*@Yx<2A
zrXb)jA2-<EP}3A0u&B{b$(@fl;^EPJ`%Mh*Swfi|2Uj)ZVmY<-uU$yO-kXYyoK5LF
zzkdVdl2y%iKI4x-R+(JlK`*3#=MG&WTM>e0L3ACN-qhXHF&1UCf{V&iu+;}<Cg*o5
zz~Bq7bC-E}6VjT#Yham~s~7nX;wq6CeIbf#A_<xu<9Sb{UsJ|lcQ9&fsL!81eOmbl
z4dNu&G+(8m=r($Ja}0eVH~&HAh}!@D<IP-vQ%Un7Ho`fIp*EHG!Yy8EW~9s2zS;D`
zkn-cOX>kcM930;b72F=pae#g>OTH$r#N&{%Y4Yji&%qk$k(b)QRrKUCXwimLO)I2J
z;G{xBl}~U7t2(5hO|1b{^7gpjlV5p03{9A)6NA3??%d5oA0v{)i+|l+k*LffU6lEC
zKRL{CKq<K0I1y^iQL6aI3Iby&pXMPgx#II$;RSu~;glpu>fPWk34k8Pg4FRvo5SW9
z{Kf0>Dg7xoE>koHQ?EJP%d%u(^4Tt9dyv6%RQrt?0s0>ihaK5636*B3&~JycO&)xl
zG~gCWvyBRobj4Ka%wD0CkkT}@9r#wQwrTtWV<aj$nOR+3jZ&Cy?jn!Mr6#e2Av7nz
z#00<VTpk;ZtG*S2I>Qq3S0^8b;%hB*<o=sNmvp2y0X+ENg*I6_H9<dhFT>uI#+_x2
zllC~MC=?0Nd45?$XC)aKQ(jp+g&uMM)fyp32*>3Df=zjBtUiSHk6RQtfa0&L<_9-u
zF71c-aSJi0Ptc0LoN91hkxXK)jVg1}{>T&SofTCV{f{q+_po&y=oy5i<S`z6e>0wV
z<saPqoA;0W4x#7maxh`g=(m=lw)z4%E;AfzxPEkxXLb0t=JYT>EJh~U9hkG2`${oV
ztx+K+WG(ddKM`{DN$EX&46W~2*(5we56^qf!BH5Ru81F!@NApmsC_)S#ZV_1!5sG+
zMnI_4aSM6bh>n5GIf${U+H=?--*e(q)?kg>VExCj`bw`psPmYTlBu`LSo%|w*!(h`
zmQxp*NJ2HBcYop782L<JH*`I;pNZ>nsQqC-^LBQxyHV7^9_-;yt(SQ5PU!b<!bY;^
z0TuE)M)RvzCX8%N5tX!@=C8bD8maOcEyT;K(&zmH%NcI{;3P1?r6WrVE}e=C7cL;~
z{DAiGWnEGxgg0JN9GC_0&_G`>@4aML6suf7p=DPcJm3m&?|<QsmYnPi4i0t|Adh;9
z|F5Ylt(Z0;ed{=BUG^un7gvK=@784wKqxed>Um#ZXBeH-LaB?VM5<Vc&|hb_hKL(Q
z4!zgnHam6ZxI+dUs5}`*Ge2e{gQ?ZPfDPRBr_tw^7_@oB<<+)JxGx>^p(KJNJbxq9
zX6Jf(zI<UU{W19ji_`T?jJGpw`B<S8#8k5@=>D(g22x2vNOF6s9DJ^~$n%O-3Tx*-
zwGnj<Qrev@D<F^`%&u+LNgd#r7DN&jQfvE{8l1kz;;bYrPmmVG{MC1G7Ll9CM@!ec
zJ>xH(;?zI8y-5&mB?3k&2}^D{r5dLt9kA}ad&sAL3uQd=c7;dpR44umxRK4-e;su0
zq13mG8W}4LD<3=8+ce`>MQh<*^X7h>JRp;({c<D<`R8qk&%atofbvK{UjfH#p5uE>
z_&V*JJutdSD73BTO~M69zCIfd%Ct-8RyQ)qtgUMZpC=|JzRB%r5e4omT40Xf7v&ay
zi0g1e!cx8bgvaK-gvFqm+}fGBce|bTd4j}ZVp_zyA>llyKe_*IJBtHD4xW!)j=xIt
z?G7v=CUv1PFR7{L==f-3kB83B&nxIQ1h@)k?C>~ymN(rbu9n%?lc@?-flV|zbkP#N
zkD;wQDaAdY&isYCPD0Mo-qAs4^aejS8qLnF<QEp2&6!2S{ES5k#wTakJ`b`ORF?ZM
zA^SmnSwO(GudHSH%goUIyEo~Ne>7PQ18h|Jg%wG?*$lX}^U}nfi6OUPmAzuJD=UKq
z!`-6xU5;K=^qptefVfD9tgL%onADvXLP73bQmr)M$XN9`byo;FL;_68GaZ}vBt7&}
zgBfi!tO&p~z2YL)?4&OY?P8*$_?u9kEVrbcD=#mPc=tS1pGT;)8AEPaps?rlnc-Z~
z+2_xnU-b-_T5z<}sQ&MJTc6c#PL391?<uqX!W&%2T;OtU1Gr~%1lKjZDewL&pXE_$
zSZe?wl(~emUFQIVwxRS5MyhiR3^`J|m!Gf$F{^w#gQK(F*6%ok3Gv#Ug6#ng`@?t%
zSxnl2K2xFTR36fIjK<N`RZfd5u3k?%>(Z(v#I-9hedR#U=Xl9s*9g$NM|Pn04}AYB
zLehBdrd^Y?@zGEcCYS3sbS7T<x72IAk1;-BgY#Os)jv{R3LX~2DY6U~G?)cnfC`{C
z3dZ1O4?-+XCo7YL1e&#X$bRI1%>O1vg1)zU_LPRLL_plppJahR1I7Xq8koF!q^<Bu
zGMHXw?PS;PLl>rjfe+42PeT!HaliS7^Xg65Y!s8IsAw3__$)GM@m1Eo1{{uRdOErn
z14vs-zAn0OMXt)Pgyma9#Ndz`W|z0!Jk^2u>hObw;DDyLDrpf|H2TCUROuC*h7Ql!
zuNyL74!eZUezfrD`-FB<brh!3GWR`;Y+j5i^SRy!-j*8Sp2dg6CaEPdCO%KkxHvl2
znz)TAzO|v&OUgLB8bu^>-{uxOE5y~`&#7KG#V-D@aylrI06lR;nymH6a3?;X*tg5q
zJs_AzJ9n$btR0>KN==p3_cfw6$r+8tAxiYT^#i|Oyv!Xslk56u3a}rv&{#iF0f8k)
z^9oTaKS1(<0r0`U5{ghyo!*2IsJ}E#@aL{d&J(5+p>WJiuDtLl2tpySyE+%{1-G`g
zJ^~%ZC-jdMNiNbkuFUPiN%T0l{vOGfcu{Rf6Y%v-tyk*u&oT#>0}R5w)zV4mm8_DH
zO(B+xGP|<O$H7SL98^--b7XWOpm2CcTw|DU1*`3#{?ME(cltw?bn)E4uNPgD3CN}-
z(ZQgp*%bZTN+i3NQ7&>b@8wQ2VrwaL@y@6Bfi*R~dwx_$HJ~7hBxev`(--`85@xFe
z@DF!_x+N1J5Ka9}UOx(pvo}X$VM#;`=dT}4x+ehVx0#t=zYt(H?=PJD#IG6@iKC3T
z_G0m^+5CL*(jSm|-&S(X&s5MR&?xt7SbkP_J6dQ<&uJZsQ9e{cloqQsajN36#CPYk
zlf3er(YP9%hC;t$V^K2Z?b+TC0t>x{ZSF0p-3UFq(5kmUV{ZW{Chx8k?h%R$u|y|3
z6-yC{2Ta{!H-Kz??;Mawf>78J+WwJ11PKzt<@13RRb~zA>#OFXD`UT)T~-;eL<}+8
zBJ&!dNoruFNDF&gCh=BE@$}D&_4JkQ)YDN`UHkKi=8Z$&`Ns4fgf^YgyW|M_0-@>M
z#)_HuG${XA@BM%*te|-Rw)Su*-XO(`JG@E<JA!@Uvt@_^o@xw-w_r=w=XyhNx5XLv
zio-k!qyLETVRVG_6fDx4@t3(%)VrN&V{<hsm9N^BUV$=^sADF*1CAReK~^M%=)L=*
zupiU)A~Vt&?Tbeleml!!YO`M&T&)*MC_9Or>TfV?r`QUAuqwPOnE@<TeL^F7i@ho+
zzeHNXfY)4mGo9M;`#S|aJmUyUvXiF#tm8k!dz5hzdVKM(sscKdRju1)pF1HIm5wF_
zlp`CS-ShB4Hoa!clBrBqWy0;Dy<guW-<%JAFGe!nEVc?g-Av$P?mQA(l9XxhlC)ig
z{kcjVd8(un^`y8Jes!zPzZRk3r_(#dGwx2<B}HQ%Cbu)<y^Ck9kfb2H*I2U;d1i@)
z9$vB#LU}Enb2e2UcB$D~S*x!@5{bUkS;=-gWEfvlgSqAfUX4$)#G+3qCf3xw$WYL%
z8c}YC4~Jb$&7DEH6b1IyO*v#FHZ%D~vB+$nVsXDyrz2rk&w=t_l-o4-=`xe-lZsTO
zAZcor5eIUNHPTAU0smZF;yA)2F+gOE1}k5)O)TnZ`D<YDw2JAG8hJ@zudKo|YkB(z
z#xR*@8{+19v7b4-%&Q}H*A_V8j~UqlqjbBEO%7lkgoy+F{o7Z-1xD(d5}BPN(U;;(
zYd-CmMn~@iVQEOPbqe@fvcX!+gQ}zrol_i-suC)X%y*mv4BLY|n+qa#VlnN5_E$rK
zIL}6E7V?yz@4TsP_4zfI;iAVkj^MnJx9j`$eG!_MB}y*ZoOly~m{z}PF<bg|z(FHS
z;N)Mh--P=5`qp9EQ?usDvtn&^U7VfCbV4)xpTG*b?N-t^3`HB_g~|hmTFwY9geK~l
znwqXeUAaMWcG!2LDRI0n;xc!VDUW*m{kl3DF@n5T!FEv43~CUQlvF5bg_8-KiMW53
zy4Q2Erc3G-0lgg!h@lqXI=r{iKe?5K(ZZQ7rIRm0IZ=XymE%o0Oowrl%-8PEf|<_)
zuN-Mb>d3*Iio28D8fFKFB^W)~Q|Ogg81Cc<BLiigdC_!`p{LpEo3l2k4Xfh851tX}
z5;8LWv)}?g*Q(x{k_+_HnEdM<Uj22ub<ds0#NGVUIbIhNR0=TVx|Eb8EqY126%HSj
zu!4kuv%;dm<V`cjWDIh<V8YNi%30?1?45*|=_n-jomsi{R}m`5+;F7(V#w+<i5m^>
zMyHzhFZHUieA6`eO0}yi6C0`tlaymF?ta<x_&=+e_fS7+oTFS;lf-+12RZT&e|Eq<
zg9D|O35`z$Q4+u}t%$Iw2`x|dy!%sDutQw=EeERCVR(9bP$|h=`XeE8^@b}~_8woR
zl6DAlw0r%>T;~*2hhBSjuG!ftw8q55L|*SGd0D6Wq@^Ex85NK^R>h`pXSOY{c$aGE
zP<G&F+D>phrHBkWs^`7)*2=e6hb-o{`3mi)>(lIIzWSODdx$EZA`ncz_FyW@BqtV2
z$(*ybZ*j_o`(`*H9Kl_YmiEJ7$uuzUdis^fnBFP6%fodqah1(4JVfmA!1wQSxd6~$
z1GddWe!wJC*~7t~gR5MVz|W<(Nt&WQARbdD1ixze^Dr|^bo6Xp=91Q~N>z@0wSxL_
zjt)K}_#(>RGMj=`)@MY&zyMMF^g@fk`2yF0%O2?Az`V%$Ho$4dX&iMNO@jdlFC(NC
z6ymQ_OnX$gx+P~U6vQtlO1NUo?U9PO_?0$KP(J<)@Xu(C%78L9bibuV+(~Va6O%HL
zc(TWVTJ&*u_e&AuO3~iDUMrfimoO{`p^)D>v!j~x^D?QU@P`kZzJ3y_QqlZ>Qz07a
zYep1DT9;ntWbl6Zy~0<TngQ&jGYQf2hg7eK*nLlmBKBZt{rSL<{>VLRT^i1HSvzy)
z{V>7oq@1*M{KT+7hbw4O)YtoUe=D=CF_4+f(B`~(_V@?tFx;Bo98o-Ou<wXoBh|^I
zA)vqINkPnV^g_6QOtxpph0rUA{%4A?r8=&Jgaj#a`|~o1-5X<qHQ_dv!BVH$wZCC7
zShszzbq!a=jnmYk7fm=(JzewIgSqvtFXEV*!~XPM5-#7May%uV*DJN*`|FxafF_ly
z0}b~(l@O~(JX~DAgx);4b?pI3F3bKqx0XW$bNFLFgR0KZJUK7j+-P#EhoIn#BNo1Q
z<DY(^kUn0<d-<VxNyngXK~526%%n8!?LLt)f9c3QPY2Ppnr{SMsL=1<zlVr>o8MCt
zHatbJZSX><Xk`{P>^rlcKD>0ATIQn3Wt4}b!l2m1qwLL%x@@^C<k2tB(%sh5Qt%v5
znr7_P=ILb9{owpP`^jqH3gPCjQ9Y)E6<<qHaZp*X@K6m}h4wt*<$3rQ5@lb2E{r}T
z(vo|6q=!2FgTE4eaZTv+SrYi=)f6|`J=BNh^^-}RV4wAp($Ui=w)d?GU+NqxjEtVY
zXY*b9BJ=TE1@!v`bY9WI2T@gokDGdv*q^)uzdwx#@rnLmt6xm9kXA1|Dm!ZHh<;$+
z50`o9Ls1Wz@r?CN$TqhTNZPx^qn+1E?!nK`KOfC9n{Ozy>+M%NY0ok>eI@k!65Zt?
ziOMhcw5kv|ZNyve8d3H1bv?WucOLu5tk|h)uW(M(qhxA+-a#F`^bXnWt**z`F$SbR
zn72a7XYsX{KLH^6b`Ng-=2&|6^!C)bUR*LmzWG(#gWa{fH9@B8J-Y`U-yV|r$vf+5
z6zAtBGHuE}Wjg_xO7&sG{E-Gpi&spiIf{!3;Q@R008Fb`luF3phlu7{8yE~xe{DyF
znp+cYtULj4te2r^g&}QN8W9+f3dpq5@w_xuNkC!dS}4y}Qh4-k?p>c=BH3tRbUA{y
z)<<nNwSS6KnIgXm+k2qH_PSu&I1&^py+jkE=l6<bvh<w45u*EMsW-%OOJ`LA{_cjG
zDzK%kiov>HO_zWDzF917tqW9x?=@02t#sRt2+*H@QyuM7HUCRjNN(Ohfw9wXZgVmg
za<Y{a72(8;F477d?>QjgLrN=KI!OoQvGtgm<eUChyLuv0JRfvXF?7@A-n}d6CN#W7
zQqqWgpt9nyxx%7C+;y`8xcGP;4Npk=r5>?UgPXuh*46D{xWk2+F<`25z^Wa%&4nG8
zZ&<V3wKO8AOvV*suO(f#t?Bo+f3{wq=FpSkoy0Wt{xyg1M?r01O!f}P*p-GoY;R)s
zAkv?dTH=W!abEq1Kl?v|aYhq83qPKnhTp?J!N5j7Hpp)53!%2EXDgis-YlBo?k|0q
z*=KvTLz6ouuS!YYJuioF5HB7qL%T~S1vUTI`{xuw*&_YL?AuN2Ep)Oa9@wvQ=>`u&
zP27nWeB55KW{VeQXSbO}P4Zla$aT0zu<AxD04Eo!uVoK|Kb0EYCm?c^v&{A15E2{S
zkk~cOo7UMl)e*PZ=%+VPASAiV)Eue}8(!Lo9h%3=zRmu8&=k8Jez7YiM&evAm|l;$
z;e8L=v=?Z0nlX{^>eZ_O&4BsLzvc3LPeGxHjJcq#uO!2-e8g}MX;@6u+PW~e5!~q{
zo5sVz>T;`luzSXCu*#TND{e8z=kNBr#D!`dh}6q@!~04V6LfdbfVY=4dYJk0^Gnpb
zsYuHAE?bC4Q-SWQ$KH(~cwlpc@OvV6X0K~eBGMsh+FE|^WUVgJo)Agd0fvKpp$<gw
znC!H)G&7d>>r(*3`I~f=f@Z8_rtE6V=?l{B{pS0X%VeGJwuMXTvq#K_C%gRRwlJm}
z_X>txH+Nhm9t}?HJ7TV{Bn=A^?++g8Rjh>|y`c*u4}yxhj`|uHKbS@{r|PjStSs&y
zdihjvigNTeX&faJ#p2BODRffj8{nOqGE19x0q%B2^#`pmuC8)iNY~zBp{jvMl-%<5
z-AW}0qJ|B<jf)XDd?g9?c@XuPxzM90*<UjdlSzJKk{|OzrK(a)yki+Vex9djIk+27
zyTo3TB;%7>gQKn0SjsQK6{I8{gEOas=1AtwTWxo|;;0!~B)4mHfnTN4%9c(Uu^7%+
z1h~%jz@$sokI!BE>hP}<FKi@qhdo#UH+x(e7C}#PcTvWU)dc>y$<WmG>bErCm*1Un
zjp`+-jww;%b3fYsaOx9{gY+LYNs>wCMzefjbJiw-VJ_H|087c`x7ZbUIb9%G0kY{s
zrx>m@<6w#voadk8@=kZ8ZvLo8W!&(c&<k4BA5lpex@{Lk-%EMK&b6A}sdCUsZtu9z
z`+3ECv%E_1%kQG=be4T9ja~Z($2%YC0hP8=Q0I{yV=eqvhZNv-n(Iw71?|WK(I?T)
zDz_igutGfE{+%EH=LUuW%D~sh-QV97xtlX5<+_-}zWM)o>-^Aj=g#rpx!;7{kj<{1
z?=jDNeB;mhP0`evBP!jZ93V4e&IQ1L$Lk9UF<Rg3y@heQct8U<ei(R@b0t<UG3op6
zgWE0S%jQN#*K$E+=i$oKg~~a&sc2<5c79_HU;u35lGo=Os*DE45|{Ol@)8}XAM*gQ
zaYJ6zUXV#nv$jE)<3d}6)(_+6wY%vntFaiZ@$)@byYOYrV-?uQb&p=tLXUTGE=N9k
z@ejjw1?%0HNsB(<JPWU0<nt{M@J6o7v-9l{UDR^bV)P7DQK7csx^;Y+!Pu`r@i3Ty
zAO~Fbeoo~4`7j<7zd=YzV;-cTc)<6I3p6oU+&Zbu{;rhi?0!i(_ho3=4HPbM*}`wE
zli)6qoR~rq<)hl=uSbWrw>nL8^KP{_%t%kx8zQRd=fBlh9F+|3+ry5qqTSbQjrUQB
zSRn;-(z%P61klM_;Au8X9=VWjC~B3K;5CH3kUkvImN|_zH%xzp-8VrT-Ev{?*JrV7
z><i1uNRU8Svb|^8{IQ=kzOqhQog~<Klzgt&@0t#WoMlPuK~@Eqp2>Ma^c+(`@<%nn
zS%aK#nrU>$XfC7YSwBnn&F-F_iLAQ1@8tL5EBeR}PUcOVJ$HF1V7urhL*&9kJOG+3
z;cAkw?oj$GH-Kcc)Blz9C5?wAKC1tc8|qRGSh7}Afyb8ecY4E*(@q0~<r6nYk(<Z6
z3Z#6}lD=;-IYM~|?0td(o_~G(7K5PYO^E$v9Se)5{-IML%yGWCpTXwyUz{n|LQ@`U
zzVx`b{gI$@yk_{Wo8UWp+*i%|;WUGzX3G^VoxqtMTK<HrxAeWIGL3;VmBNspl<`0s
zpMpkvsivW#FNE&4n%aog&W9KxVfdd^jG3WVYCLH$+gF1y$-h*WxdaI{2lDUPdqp40
z>TBGhwy$fLl??Qd!Ba0$o!assyjQpEGFWZW_)B5!-_eLfCIK_82JQCK_RJJD?Hl(+
zBW}kP*}g6C9QRW&_r@3wGal}LY`h)LnevXjWN25yvSYLCqnfn}!B8@rs4eZUxwoB;
z(`mz=R~R3=k1b*YyA;KSE&0ukSW8&W6q?mN*m<&5%p%lkNxfSFQ&s&!V;<oV*Za(M
z=~|P)k7NbPxGI1;-Fn;DUGXLNaw*jL+Dc*D_=p=f>XxrwPl}vO<D{;+IgZVf^2^{O
z8OOt@u@_;-T{V&l<aS0uMR_@qQ}Y+AP|`w23j5tidVX~)9s27iJqQc`MDIK~*r)&Y
z!3!w7yZT<yLj0bAIlHNivC-pyDZ0-kRCixguH2p6FO0HzFYz{m$A2eHr`_;da$&fP
zBjkeD?VlZNUF;W~iKz^&cVs{VgTMkNIr`JNUiVqdVp~=flX_~N!q(OdWDRr<or1K`
z{RBT78{b9^Z$1sMY#I*)NN2%d9B#!#Qkf5aAYdM75t@bjsXI6v)k@xYCr1##AHm4T
zi}JsRODu(40R(c<!e%tR<^EV;!zCdh_jZ9paZdOAM(-GmSH_LknwR@~y==dOy2718
z=_=<xSt!9B7+|yWZw5Fg4HAnz=?E*De*2(4Qd_~X7sYZZ>J=w4G9qU#NWz!T-uJcA
zUv4Lo5b8X^T;#gHVgBSbz)-RQb@L99)12yXLo-{!8Jw&>T4tqXF!Kz19T}EZV{DY%
zB4VQqc-t7$sj=A0d$Ny+0tag~rotQ><51t@<(q7VV!Q+LT7zoDwG!Gn10bF$@%dTX
zk%202U?>j=LNYGJbI91+Q=TF4gaiy$AR3S9A4&^hLxg|PZJMD4Eu#|>d|i7t*aQB(
z$_o(l@Kgoh!C}ESjl28B+W6!rr-D8bz$2X#SVIj_Uf(sI#kS}^BbnoF9rzjGcd4^n
z{Vsu5pA?Q?Ja@b@LDWH_gw3(%UA}@&tOeWfBB39PIH=Y)J90lJ<huPF)f})cuQ%4q
z%MPUw&>y`drI0@FgL8}2*t>3}23?sC&1u4T361x&`QnB9PwQdE#>OF$JY+yn?}!!%
zPHe{9FcuIHs2J3gmdcg-NG(ZqDgyGk(|EJ4!3JMmSPZF{|IK{yH(Sz~cn=EzTxqt$
zOWY0($4P^cn4uB8A6Q!CJSEwUcM|Qn#2EB~Oj$$|RmnGIp0YpbADnkpw8}kY`Jv#~
zm#fiB!0LXnasyZJ<(j~o=ke|4kfnDedKAhHrf0H<b*xq=TN@3FOt$K5dhSad>Y-mA
z2#-qxe`m(3E}x3G)x5I{zoHU#zaIUu4#Af@UxAj%-y{NoK_m@)+>Dg&J+$DVT?<zU
zPXGmn!(!X(*RQL6;%xuDms3HLWR=y`{Zb?4gE`YPXCsc9+saExPEKO#RWlUM?3a8!
zWncuK(3<QizJFqqbpBN&*7Ggn*e33)S%@u8|8!Af{^Cw*V$#=xh)_%jC~MW4rsQsw
zw8z&1g}FxajE0^t;>OH^?52Ys?ncSXP95k&ZQP1r)Mr5lDTY$9r8GX;TW@8Ydr-R0
zmihMiW_|d>QT>u6M3mS>w%`F<kPo5Y5Q5lyu7ZB$VHcjRbyE|d+dR1|8~hj^1-iPQ
zAEH-Jn}iWNny1jE#0-s{_9>T-Q~VI4*XyA(l5dh)(M%vmHT91I_?{EB{hi7)W$)52
zxPScmb0a~a`TBvS`a`(N$8|4Ra|ByJ;q-I`{EF1)wfDTh&IABs`awXb_yLYPcw)q_
z;saCE3*u|ICAlbqvM$63cIPB-Yk7Ehcn^FzLVt3;EDf0QN=gX;(|(&*Iu=m>t7zfQ
zs#Uox-?UrogBr$kj;#a<rt+_TP%cyA&cAdC>bnp*r9<81-Fkrzsoe_=QhNmwZBGK)
zU}HbdY4g0avu%%T)Jq=tki?nrUoCNu6V*+sypY}4$JF>a@X<N#hDV=`9g;nhh*s9b
zDf#|A@V&FWp1UrCsXxzctt1rJ>fU=EVRUkA1__hSjov}ry498opuL_mdKTBaln^fY
z=e*grXzMIXatK6-ZK@4gnDr7`51()P#aIjz=1&(Dfeu)87KB<xHB)Kih5Kf^`<*tj
zjr^k$^ooX`Yu}OSrhmnrd5OKnMv6s!*8I_YV*k+5_+es};eg>I7o4k0W8#Fr^Yi(f
zrlx?5y*q8Uj%F3`6SaHh&yIzNr30$TP~KHud^A1{M!M|=`b@S2t%!+><COR3S#>(3
z?nyZ}Cg)B^BY<Ymi=y*1W0hs|E3XXm)H_Adoxh(ybv$`KU?hX|Ee*rIZBCP)Wt(eO
ziC78ARe+j!Gq@Z?Bftp2-;E<|!i!q$7jyMzuW`@L&Nlasjvkct&ocza+{RB6BWZwD
zv`Jn_Tl?Mh%}(Tqb5O@Pc5v?IFq>_0#0B$n+73?_&5MxlPjjK#?yD*)hFqBJAG{8!
zqVO>$){RVAHBf|yeqrt{v24B<d!&w<B>ii|2w@<oR4|Ku^QM|M<N|kO0d1&*vs235
z=xZ0%yaZNVDD1ysw(fQPyC~SH=^>t7O;T6t9$${)pSyfEy-J1e_(+<JM`Cy0l`O6_
z!W*rdY@g^-pH$Y!7Ep}`?LXS`AB}7!KT@{&B(xCbmrvA<QErWIo!q_N!VM7>{!yJs
zMu!$m-0oW;Uf7~;WKEmT!QzY>Q&7Wtn|`6$1D*pvKl{mPuHe*56#5pe{p4<!?9UI%
zst54k<Y9VUAs3u20;pG2CrdDf+jhc=CAE3r#l7dYiWJ}Mb@hnc$te9rpZ4fE@D8ZB
zaauBd+Y%KhcD{4Z*?)#e`q?U>WwyUY_G2M|tH<U5;BPO2DNyb83g2X(+G}3B`rLwE
znut;S!PLiJe!2H7Hp{&wrU9fPZT?~8`mkY%NA+FRKT!I8BP$&*uWc{q_K)K6Y0oa^
z0j>fBf!*ATut@y6a<D6SKb{emJx!rNaxaT$4KDs7tX?JUjI}<a%7J#x0`R(U(Qbc|
zfo9j&AJasm=M2na{x&O+MNrI9V|Hjjwe&i|$>l|LdsZuXV3t?k-H~a|CfJ!S{RU56
zlqmagRg6E5YYDJBD}k>gMMFPTQHwSRXsa}gy4rj>-jYG=XDTfNh0va1VZm>S%l<K@
zBuH~zw<57i_PLhr<`SQju1t`{w>Gv%FvVqgisMGS_x^~5TNH!n#|j&3mWi*8eUQ$>
zb3{n8kiK)(#m|5Wd;5(x_xXs-elX!vK`%AhBRFw+cWqj4&~gTgYGa$K4P==by?rb?
z27mYjxlCnI<Z)L?b>>i;lkO{LIp`x4cs7^&PEsqVkj-Hi#K#)ES4wQ?xsB=mTA5zE
zg7WC?No;ihWx4^UF1-IV<D0m+k~`Ed9wj|(I@6g8`N+;FSW8rN+x(l)b&-{&hofHs
zB<dd<6H{4d)>A*_*|$WaVeDt()>JLU=BLARJpI`!sO2-}h$R;>VRFWX^e%}X^zJih
zjZvD8Nm6NHC^pi9G2V)l4u2f~$@p4mAXN}|cqTj919g~|Q>I6?Z6e(X$=#a1*E1}7
z&`VmPOX@Y#$$pruMs`yP8YDS8R28*-jTZ?Cd*48ja(8d(bn^@G)6Py~YgS8~a>jU@
z^{4u<kx_ro3cY%_p+m#MPT@a|ci1pgnzGJp$6#q<>ur~HS<4vXDck%{Yo6yZGAr*q
z60kGw13$<QT0J0Db>jfEv+Lo{{?AzsSev80WFi7&Nc)T{UPeAk8S)Vftma0YBEITA
z{;p&*`8;Ymaf09)#SMI%+~Bgp@JbUS?p{^ll0&8CJ^KBvOwxt8>`DU6Xh<Z;d~jE4
zxUB#3<@?Zj)EX*S{^L@M=h`Cb%NNxi<%Xewhc1;rn2JK3BwYyt(`4t#=eECOKl-zF
z3Iu$jSFd6n19x7s#fD{RR)sG+y0|oOU)g&ZRs}uM-QRR_$>0z^S?5!bc0#fHSl@-G
zFK2yP>EcU~#X5-e95MM<_aRsQTF2wBWc8NH<gO0{vD=a~YRT|_utp{UoYlE18{rvI
zn~J$38qN3Oi5!D4ey#1CSPsWGzU1LA*rzX%)fImO&2>3}Mm6aU{sXiK;qHS;*(G&+
zxGw|G^SVSJTQX86h_P8JHhI~RvK!`txuvDTYWils9*Wbk<sg?!enL<W5=CVGz3&?2
zd`*UzS<n<}B65PCV-4FgP%CeT&-kA)w7y;>gbVIvgEG*5VRYSeabo(<=!h0mhzCMz
zDS9cnR<iRIgyL&7zta7>8glf|E2KQTHyFQ|?w}kvi(4g&zwQseKFwJpigx&Y$^5`?
zY{{>l&yuNC!3CA`Vw*`oe$F}I@YrsXnxHaOPI<rPI*{9|g;19iiR7EZqcBR%<>K;F
zWKqbbinvf7rvFI8)N`t+%uG(Dc1B6KI9uS38M6C(O0?d^<3}SfN8zl48$Ba8l2Lg6
z<_Y3L40T<o#d(aW4=4_du%eaE36eRo9Offd<H#5a(j37%Wq%Eo?ztaaU9kuJmu-<n
zw*#QJ0b}4DoiO6-;Ox8Rg-7F^etDfzkSzsX{E(^afEA8p{=vrA;P}={kN=7aJ^044
z`nGuIorBi3n}3yIc<_e00NM6AH$~X`y+q;>&M3}Wev!Z{8O+yv4mf44LrU~5NHA?S
z3GP;BG`t!*C%Z9qDjU{;hXkz%(QGquGuRXikEP73#~c8hgwdgIF45Ub(a_m(@>pq-
z3t7C|?f$81J&z)toBDLlWT%)4ld-a=h;2IR=4SKAcp~_IDNE&tr;N@3U(yr@{omNN
zq3Jzb+z7y7?UKAauWX2FwL|^NKhruhB=@Z`9}of!&SoR7p{ZiDaEhEK>mOVlL>&)i
z5Zg(Q3nwe@mMNp|EUg><CJnoNl2QaslFTvBnp9=A&2LGzK1;lP66_#ghw`Vlh0u~B
z`YbhUJC*i)9{MP-_AL4;Wta~xW<@XXvd1725=T?)({7PWM?W#>{A;{Trd2F5(vWia
zLFb+Up_1?#NoGFV7v*}P-YtLVG^z7|uQ;r|+Hd8x#>DK=Az3a(+i4gM%r^NOTVVA$
zxwLh4`?J9mGa$_}*Ci|~b%#o)ERLhmVxYawvrB)ogKtRuU7d8#sF1k$*7>YziM#W!
zDF6QBZh<1EiJLg<!=HDpA}JglgZnA1gQHt@45py=rx?Wjnv#4-uUz1S6fIU%b-Tl5
z>|LMA>rAiQtyxsbe)P#fT5+?hyL-9FCsj53%A3E{At0?K-<LJmFZp3-XGdW%cwxv7
zE$F9GhXWjsS8@7K7eFTJsp7j7{EsA0eP16{TG}gXcj#=$pSD^{2&R0`y=AFkJoE3p
zFoD7EpET;5<W*Oy-3}NIPb}g|ZUU><j9Xj3uBl4C%F3PIPR+=pjwq~(oY3{JZ5XPn
z>wA%uo?eFed=^ZC0HnW-qQb($Wz3tD+==gz(vE66_#l*pO1ssmZBPwY*Yc+PiXUc$
zj4}8qA06T>OL@{GH~<VRvLhhvC$!!szS`_VxQPh7?OG}{WgfZr@9h)(#&a&k>jlL%
zUp)x;+B8V3cT+ms9}IsEjBv8If3AY6uHIJhC^Bf5XK1TD^@plP^6?7Fb<sJ3c2_Rh
z^r77&T4k+ELuhmiUj>g%cjSdJ`uI67!kCq2B+=4d9%HRV;o`3mp!qO55{(oH#y8S2
z_ahBCs*)%tx6!)i$^<@}{XGhNcu;MJbQLB2q{^6HmGUSy1$q6Y^uPjhxb`0$p^PjB
zxTOfb@U)*fW+C9Sh$j4`DRJo;;Sk1k+h@qgg4DjMyg=i#l-B=V0>FQ_wxYz0HiuMg
zG*Pq{|K&XFq>yBHlYGsQ{an|WtS06jP93^%B6Zl}LEm;#dNH}t++%z;wR;JLm{H&A
zo3I$^vDr#9nO38|^T&v)6xgg(r0&cQIJmfGT$sGakpRQZQd1zyU{s@{ZP~e?zS;o8
z8N17Pxoy5X^P3OUG5=qeaFt}P9xVgfm@`HwL0MxZ!Dv0tsEtBEE$Zs9Tef*GO^gfM
z7O}lX^sp}>9mpc3q4iDPLDfZaV)uXhyV)(xAw#)ud;XNt5|S+&D-x$yuB$J5n8_&X
z&{jrLL8Q(OAf3vg4Lys;MQ2R*V`5{)eRSdmJm*d=+luRY-*eARNn1ai5H=tf^Cu`L
z3t(B!D>-e451MY#y#7KAm=ji*N+&h6AcljJ_f;qk>WMwHa1V^X`S1Q@2h4`~E5){v
zYRP<258u-C`Yu|^=$-xVR3bSKp`dRx86FHrch^(l*&2VcAa)z59Ujeqv(!dOyEe0x
zjjDK`h9HRC(3$cFyn){*UH_7h9039u!bp))5nUZCQxJ7H-16s@e&f;xR<fC{o8IV@
z#*yNVr`(i5hk!C>{2EMD<&Ly7OV$s$F#g+_kdCzmiMbnCSX^w6N~-;3bOO3jmztu0
z#_<Vu>1Tf9PNkWA7|Dqjz}Ty^=E~6e39FpY(9m;?vktS7Ge2+u^pVHD*<Q1$Es+$t
z@#e;<pr>bY5h8t?PkOgEqulha$)nPw*U^ial3F=%|F54c4wI#W#yGaWCx~8#)(2Gw
z0w%GT(A40qc^=H=CsU;6n9}i_Q0M9t%Gk7bZm-!+m-?+;OsB-JPtX=rz?uK(_I~>H
zMEa7z=wV=~IE1@yYnxGbeu95Z*XV4}F2Sapyt3=(sx^U6qbIlMDd=^2FtNT~XH6zR
zgR6s^{^KFCd#Agcof6m+9_ODocu<EBhdJgsEycL=e@&h63(9mR-ld5v`$IMM{%?c4
z)QF?5qjWwi?CH7D={l?#T<_=<YyR0mDyT0o!perGI;~DXFzz#pK_r%LSmnb%QZ%bL
zun}hS1pFVH>(FR0L&wCPPRcNz`mo~<-``m|Vxj1GaD%x_v|t}9Am_jR?hDR27hk6S
z{bnsfkmL{<lVQH@^@4x}4S<tqUr3Y(2HOdrV?Xwrp6!*2D)=fci(8`85HL*)+xhcn
zO@O91#X2B#E84-9qxRuOve&7a%SB(@^`<483DCXsY4g_23pp0v1bD0_Ek^)xkFjDI
zz3Q5W5jM|@=$~jt@Gv)nbUMS>7k4W{Uyk!?QP}!H<5ib4%3gQ>l(1GA$ZhfF{s10x
z*I$8{^On@MSChri#?yoBZJJ%Jpf|Z^hlol&<3@Dz-<8HrT>=BzqT)!o?g($G8E-?F
z<X7`$H;R~lzj4zPHau|j29y>V9_gLw0@t^XUm*33Al0o4qZ){7U9iyM{KgL-e&48l
zovf;YI~`Ea^X$U6)oZcef8VK#!Gp>Kw<jY&3g}kk`hz3_*B}ggK#P}jQ~N>&h6l-S
zbxMs-2GGGLCbt;1S3OfjYroH8^8#ogEUDvnbacvWqHFg4(?r2K2+;1cDF7-;1ID$q
z<>*V%k&*M<i}7x%ch7EL(@Cxf(AKNZXDM3wY!g+GgE#VQ@q;8Q)|)PoioX0|Y_Svm
zzz(L!QQX$&G}Nig2@{70q_<l5oYj0f<c&b!#Ign^!ech~r1Vo$gDlX$3|ahCe>%G&
zzq0G);jmks5=?fVZty5I8<1?_*}Ok!ccZsO#wtrhLT1;eUm`I)LW!D;l;@O1NIvqF
z8c0^ZrCIFi`ge`8Q&R>F4H-x~m{#+7iY#fmC05+aqQ)l)c*5~xT`OQHQU9*Y%9Lxz
z{xU5m?{UmMeSz%e5$FA`hOQO~IZvsZ+FIVhsg)i{;wT)?i~W6fuA;Ien=6t|^&<En
z<QQ}Zj8?y5KGJj=q=SYS7QVi}=qRUEaY2E=h;pFNk|XPQjfGX<R??9)508UP2?sDn
z88h`{UG{8559h%`<f$a#(!_!P5J_s12$-wu(mj?lo4PkrpK#~RaXl;~5`UYs^^L<X
z&p*1X+d44Ur3F{-y)te&ylU^G$6tkirXjLQ$F63*D%aoH8}DbG8s<8`85aX$Z(CoI
z>Vk#KUIxQA1W?0eM@uO{7<yG^m1EyKQVpC>Zw=-f)V2Wjd^H7OTUcFv{Q3L+vdi?_
z*U8CarXywhk4PV@{z(g<LMTK>#S#lP;KJ_RE2>t&I$3UzHD7oCr&aj-OEFJL=KK*4
zfK#3M&3>+v0pVaHlg{nhI<N%3B?;AsegyzV-Ix5QB>!Z;Bz4H*)RhwA(-w^DVk*be
z+zD;~4)D8ZbmV+qlF`+{>^k$KovaEk5+{zN*YaxaE(;^$&6`;rH(mmNh{yU?PtMAG
z9Q~O&UkTEzH>KRF7U12$VhFk(ysTc_pWk|Z`4>yJ*`RxtJFr%=p%C@~6T{X{X$w`^
z7N|{37ua{j_c4!*cK!3{VW%d73>*%KjFD6k9#Mxrx|FC0u<$n^@OPfhtf*i>sj;s*
zyxQc_?Y@Xz-OG=$<<a_?2MlJe(Cn%{crhd)Y;JofH|ebomf!L0z~$E2eCx`t70$fC
zf+F~obVgm>-h(T_0;m;ql}TLtUd$&-0N2|we!E}iHpMclN1kF}3O3`7h#^t+3~>&Q
zjHqgdC?CdCv428~Kz~xn)1<p!{^xD!O{oU5jg1X&V=!RxYE{^JvOq#V^_&UJwKZz9
z@z8wO<0|oSyo2@VAaJ8Jmbbn=+XmcGVy$mK{!i=9PCD0$teO8@<bT<oNR*`iIfudD
z?QjXahK7>NoSfOjfWZ1Tnd?jO`ZRah?cxYA`*Fogn`-*Wg+1mOo%*_XKby(y7ABBd
zBC1w?7d>k=8H>rjhd&dPAuMbOhg2EjRoL@H`aBm=5F*O~IfNv)&dsjy1=cn;=b5Q^
z2CG{_1YMKN%{%Fr7XIB!)TLVBVa}WzY~5D6byI{a6R3V|0U48e`k?F0V`MSaM3%?c
z1#o6c)rao5omDEsyR2DNA*&zkBtFon{JK~&uV@<V=?PO5#Z;VC`1Iy(25T5mz+M{T
zHQMxLYV<+XvL?D?#L$#FPzdp6+(6a^{$Psa%+wm^V?Z0vlJ1oO{*|JaytOpEb8Q5t
zeABhK@S!D4fL=zZYISt<Hce@Jnq)_pe<;uh;j=7))GO$fIZ-lbJRtc9T;@G-j7GBA
zyYVMu-oaw{1_AzCBV17I>MSgo0iN{{FW8z<nSErKo}+zy2Eo`Tp?(h+dB9FIT}<rw
zjm){R`}f#lrxpyVa!wt!Wi`2n-N{Rxhynw<7vINT`VKr8d&U&8qjpZhrLqY6iE1f>
zKa5;pA?9DDiu<7@xv!}~49@Z^#z&GCf41{`ew6EB7&vJci^%yuB-z!9>M6Y8N0%I$
zH+p%9>c#e)hK&(uqV83V32Nb0Q76d)HOVVv<h+G}G!E`oB7f6KiSHbX%NQ^=ci@Pv
zjQZT2s$dznO8-J+w)I?_55oHz)$%kJ<qTN->L|_GXG5+dl@T%nZ4WfeSbBSfoqw8C
zh$8w$bjegzVH9s0h(LD9o_E9On+Jp<vNCFDOfki9ROQKY9=+37<THpo3Wy|RGop<Z
zcX&2F+G{Wr{795=8@(o)+s~D)r#yF->mq&)gW?G)seHcurb17$xf5+hI$g8}I@P5Y
ztc<sP-_X}e%sh#wfy@%BqMdfsX2Y{?o~-*RND?97xX!(G{Z7^|va1j5s|5a^vjNK_
z;N#~Xo=fb|uKLP-i|@hfllEZ&0h->})$ONy;OgDy7#@d&FnZH-oUNd>gCld^G9Dcs
zrOQfPamjzi3?=12BDbKJ!11E6bMWEq{2c6uqd_c^^lxkC0p2%|2oRI<8nI8OpXi|s
zq5HXkINh3Mn!(0k<;A8}xklAczk2%K9nWfv+m5#!kH?=I?eDc_4(uSpJ>A@8s%R`J
z{EIJkuiR(x9;82aZj0<e<WN@jO1B<%c~g9N4W4rF2oYvr%D@T1A1f>*j!9Lj15)-(
z*}R6c&&HRm4EV>r5HQ7PyNM=*7Q+`t{;S+iV?ZY($BHBpSy$T&_@8e+(d0N<eeg#+
zS`^GPhEKz}D)B-ZXWPJrd9<~}0aohzfQ=zv#^1OeAt;s@30OL<d3FEvNbng&+4{9f
z>MBu2^hKK-;h&0>t#sNWZq-eT<hd8R29?pr0gr^ehccSsU;^(f-xHRin4r=GmaD{)
zWZCNfURuyDAzDI4Ia!7(3g6&83DdK*y;URLgNNrw#tk#Vq#Y;Thw#u=+~wUNL|dd}
z^G-an7;%4|&epj98~t|y*szh+N`&@FnYdZs8EZn8t}i2hz61?08r{0N#G&~@`-`<&
zmA9>}Z8CO*Z2@kBH5>g2Pl$=DY$=Hr41ykKt>6pX-~t0-*!a@I6=UyIzW!`n_wbi4
z%fJ##QRPyH!R+Uie(&6N;OE}&xqRTK^yxgrtB^4rglz;NrZS@5e0tjsbkOw%K1Lkf
zTRD=w&|3=T9%T_-{6SE|m3q1;d}ZFgOHF_@Ojw$xHy4voU%UFuUS;L3MAG3M8zKp`
zUdo|?kx{&zo|VO?be5KkL~H^j8_<s_^eVmmZZW7K_vfjW&p0+TnNS>Yba`1sOR2O*
zsX?8!WHYWOTi(y}d9K86AGEo-nfg&yRP<O%h0mI9!Djp1DK)PCQ2DvO`ajm*0xHU`
z>mQbJXc3TZL<NzSQgTEDk?syr0qO1mMidYv47$5Zx<N!xx*G(fyBoeUKDY6IpYN$#
zTuaxrgqiD{v-jD(e>+Kp{wI+@uUFaTevF{YO57rY<cHVz>VGk%#}f#4Pune*ky5Lt
zDY0G$)Bf^@kIJ8LT)GI+#wr{q?A7K?elo`i4^H{SN}`Vjh)OGgVrC))hKCJj!)f?r
zh7%U9`aS;M42r<Rn!C058pJ#9JjlNMeEuHYwe1pjo#PevRi*dkvs+5r;e(y&8`m50
z5x860#}!wu$^V?_?g2}K+ODi#^f%1+egmd~>UT=e-)pp8oxk-8r3J1ri@fT54sJ!&
zl27?o9&|cw7jSjrwxw?0DFRKJGI4_!3XRb?dWsp9htnjv%yktzOaWaw;xOhJ5rU*#
zae1GH`}%e?xlKPk=dQ{7*4xpc$2Y!>tszuyY1I?KZK7ggS^pkDLr29mtSVK4;R(5!
z6MRa;HRj|P466S9jZrrut-rHRB~b@Y<%4dALhaRfuTz_`KI-hD9(&RRo{zl7vXuDQ
zEuZ_uP^jv4R6yj_{E_L$A1MN$ePcZMoKKY+uU;9=M7)_I>fqQX;cNfGo#HqV_Ok$Y
z4W<X0as6zMlX8blPq*UuGJL{3gj7wggxs7*()l%UhyAIEwCa<`kGDABD_qlQ(Hu_5
zqJh_5m-jm`02X?pdh9#}*OR9Tq0isxUM~xdmk1ICdJPT1+hbVOv?N{>O{NS$5)JOk
zeMH(|w?grgi>P9>n6?uU-&__q59J--`>N0{Oj*Ytl(&!yySW;_4_}Pwj(o%7ISq=g
zXnR9%YtkiuH+B9Y(j;J0>aGbqkJzS_@KY)i-uVU8oA+^09p|{}%+FNDv}KMbrsv*n
z%vp4tBJ460^1inX{2d&GMIlak+VR6!GK08Y+Kc+76B!$(Ak#e`#_>p|zgd+6t#<VU
zGwtDK;6%N*;USo7;XogUaHYnrlP;*>;pOemKshdoVXkm6-1j=R0OKj`j4P=v$a4)C
z^!XB=dcS90a(atQqTt!0m}S!RDl$}<PzcF&liX=<+}Z0rDSKdsZZr9gCu5n339>$a
zC@hVBTp~uRtRPC80Y)uFl$tp$jx;h4>(fyKmIp1-n{s)Qu;tCEWn{J&AXbi(@udtF
z_!=)`Hmuz5$$zgCJDR&3aI>=0%9MD_Zt;mhdBDaMZS>U9nQP9_1^q+9-3K`@T`-A}
z;?ETf4D*=xw(>n7HYmicEUX$L<eiJRk%V9H%fMd)t<a}M3vbs9;X5TfvF^uFalRyu
z3b%uST{8fUX#syYhA&B@r?nqM<z2fk#DUp?OHWU~YdERpb@-_VpfZr%*J*r|*uyH=
z7)^e?*9^tXeJ2X^Lu7&RWrd=P3c4qWMW&~sp@z3-QMaNiRXvqL`E+kyqr;N{36HeS
z-4u?fK~&bvnKGMMRxGU^A=IqJCCcvo$2CujG)P8<^BA#Cai4n(y~?yRw-iU!yyWA7
zY0U{baH!Ha)P;afubhbV$eF52T<yiMS*a2aq#jO-b}C3wu0|DY0QBHNv=>Sb_M1N9
z+U_bF9DgzYFgE6*k<nKLMa94i!wgqz_a6f|3QmQB7ff>gt&2o`9K>EBa`%m4y8ulc
zXgZ#V-u<<A&#^E&MGQ2JzSBB;u<UwKXT+^qj7~m!A`n@ugn7yc(L5>c98!sm^OniM
zbQKF>2zvXrAbLo6lW4{+#QT9`C%zHSFk&uAG6h3amiEe(sqVQaW`>{m*1weJ+4SNO
zL0%Je+-_M8K5~1Fn#XRn%w*oR-xJ7k!9NHuPX*RkINgUvl3!bhb9hysks*>*=Q9?4
zsX(Iv=7;<N1Bh{nV9F*dd@EcZ*57LDcm*G&Sav-<-TmTW*IrW?1!$Nj?BId>r+C}7
z@TFAUEuMe7PIY|p^%WUsgy4l28A#Zuac}W$xEe2Qcs0X$qHj|wXb<Fo>Fikx8GUP$
zQB1+OeAx2{44H5DNaM*Oqj}U(?O9DCbYP)Y6ws<pLh)?P<twz%Jv=S$@TmrA=~v7F
zj0@qnZDvBjELO}>&aA1Oj*(_kuRzbf#(n^<^dzX0Jxj`ZO~XToQ^(IDUdXIosJGA_
z+kG;d1;f(c0{gm9RRc$~?3&VIm`59lPNsM41r-DnCDXfSp!J`}h|rVV`4g4uJ@PcC
zvbJ!o`1I7<Y`HdDca>|EqzfG;-#j*eCNRZKCDKc~_iRTk59hA>ckoOv=lNc>wZ2Jq
zL2%+L9A!L6ii~+NtyYK}Hp3$>nUt3VEffk+e6;x`2`k@Wf(ysgvBn%rC-c)*^h+Ju
zeBP>$blq(;ccopzqh$`~MoNtMKYvw!Y4x5E-1?wbwUHoPHF9To%5>CnSL!BezUdMq
zg=Glf@u)4wJ{t(tmw}EDbzmYCZI?7w%~_Cf9yctb+Q|pK?X??jInPh~Ml;M-#*c74
zF^~qU1*)x%dAr4FqXjWWWxStlO+GR_M=J+G4h|6?iebT4>bQ)f5*;Ek+*#|doYKBb
zVE#@rTpPP-%r<8V9Yq`p{FRUloY2(v-dsw?Adv*-+Oou3{cai><Ys}lTEhSexE6tt
zyyjO%DuQF!@-sV6mieNJl(#)JQ`-H;$$C%`y0}$|-~+bfku65<@yqa7nI0vAH(U1s
zK*%KmN3H%o^oZqWDU{nL&ah!r^LJ7$H{VG<9p{LKzaYxA-v`Fb$<upRp$IUHe5jwf
zj|+A$DpHh#c_9`y@$n@AjbxJZ_U!nT*VAgBh!B0ivX}&}I<e{l;PZ%poWWq`Wf`{n
z=~k^b0*aCk$#lDxn5NX8tB>M`rEccalqqs0(*X!CYPXxRjkZ<Fk6t<yDZEvL7&n8i
ztkbVbPVc4yJlZ<j`*xQMBl@(l`}bXJaDC@bhZbb~k#iwXh#VFB&BdN-KFm2ZG%knr
z+f-jPVzqiP%92w?6{XJK8Cb+QItl<PZeXG;(*|~V#~@tZu-od(<IHg?oj+)?O~{IS
z7w^9+4*HS2Hy<~#<mLl>&(W>$z3k#p;h_!6%I}pGL9aY^?n?Gv<dbK>)sae}4Dr{c
z6&7|61t5~UMUUI}LJcsXBLp4x6CBZmx5lc-ualubP4NLLG({)qH&N__Yh5<>*3Q|K
zFF`i?Bg-fv0nX&I6Ccg)Z0kuaMGR={7P@D)IVF%AhJ}yu(xccg)x^c#;(iyVF?o$L
z`g2`$ZpWI*KF`jR<Z|&tWp~2GUZLG<%Qm<#^;f<vReLx!O(aRYjp^E6NgT=bC;vbX
zSma}0+QGNc%+-<kmn^Lcz@CGNK>P}O-VT||cHVYJW0LX-dV%Mo4V!g!o{MU~tud(}
zeXOth<~GPW+=uY#ZoWrDt1bpj9#KqF=)mo=HQ%OfHA1WV+Q@(ccaZHW>+^;qhnE9T
z!r4f-+)ZhcasWF}aZL|R#b+O(GUHl}Cc@=8yKi5UuZeeuN%in;uQB#YTCtv4hdzT2
z)D(~Ow)Nxk6@1MEwfAN|489yj{KWt)BmS859d~sR7!UQf=;L{0v|9#ij;}G$Hrn&f
zLbPZy^Ej$4bH8*y5p^Ha?t_DBp2>@GAaiBWP(_HXc9|Vnj|#E^o06zDIo0mNYWReA
zKrn9+Kv~?xjV%x0Ne*NnwbLuA>MOjR9<p*kp88A;ssWOGn`BC?#5Wvf7;oJ8VrpcR
zChz%}-@!Pqy2pZWg2Py?#uT0;ggW5X;rJ}0=1vXC9wAyU(x{5Z>%g3;F|AlGCIO`-
zyf5hD&t2<u+nn4S3Z<fq%fsZRgYe1A+3XA&;`RUpc{;|o^pMv8=&hNeNVc4A1MlSA
zyLrl5^Aja$<iK`VBV?h_D#{!UUO07o&yNJ8`fBcyth4SUur9!8TOj4sCTMHa_%oC&
zZOfUU{qCD(z~vL}q`Fx@uDv6G`OI>XtWKwc5{;{w?FR7#ePSe^DwsE~fR3Y~!Qpwz
z7L$luBzU-5g|pKm^3N7^54%=|LRtGJ1(cZY+$Fwy4#9$*wp=Ra&VlO}mB91O&-iY{
z=_Uw03t@+$T<mR&iTixPvedJELJkbByLvtDIE$<{Pt>!|HAoMi*$cGfYLk@e)<i+P
zcOeJVr=Y$p;?6ZN?(H1}S;hcRpUZWZWo%>#gzNBp4k<Ga6j^)u4B}AT`&U0KEiJ_(
zJ0^~BJcsZxiUIc<K6T+?98iby9h9Q=;@GBKM9*zskvv$k)|$vOVQxroU+`QgaDKqN
zc@r0M2Y?ue>!Aq<U-elR=P-yiaaIN~Ez*XO`mlnX)zK}%k(#2SZPRIoB>GQ-SW~|A
zscD#5${$j2TbD1uD)uvWw_h?Yh+2i2UvM?w%yVqSMd3ECR!THr5MD@W%P#I}nBtw5
zd-Xz0W4UiRko^7(fS=3Ul=URfhW8j%DcD4(ikXVd+H9(R_ga^ATe`2ysJIvkk)L3s
z9lMtfowldh>jvIE`W&O-NgEUrVi04Xj{jWkC8#2gBIr1o4;>Odt}DC5n9hV!)C_8I
zOviI(rd9zrc+fy*Fk2Vi72cm6o{L*<#2PTpL@mGUb`@8513gxwo<WbAnFG|C$-W!R
znP_esd)30NN@aK<mgA9FL6!Uv)gY~4v^~Jno1v609(|3*&j(itHLBqkJ>SWUZBH*s
za~1L7!v|(T_yJ~vt7Fh4y$a}?=N63Szp+!?XW7f+y0^A;aB#pDtbA(uM2rV`Aul|N
z>th#32C$vs4?&I3Dwrx=)a&P*4)jPAKKraEy=;u>!K`lDCBJCKU<KegNT4h~3Vm9x
zdN?fH9oi|O{zZc=?oh!kbG#K+a^!e5Zgq<g9virs#+PxY)&WHuonPfJ|B(C1KJ^6@
z+Z!DPhV4`{E#U=e-QhfYi944|7HUFG*NAJJnJi<>J!*!BZ=~ZO*078s?Q`B&FjbOi
zL=Ija3aNT*W{ZL$WtNR@YrgvJ+;j2>JUb}|(4%s~#)bJB1ELKeB5ZUH1(njZTfW2|
z6B%{iE$Sw-Xc!OvYOu_g+a*0N&S^9~cyP>KwSi~JTgOO&_=Z}ofbZ~>cBy7ArXcq%
z8|%omJ)s~B2EOG3kNLPo4k}wJ3st3wKrtNu;hwdcTSwuaLgR%3V~rlUsR7GV+Er4_
z#vI2|EeYjfu7YQ;tM_f6S2K+sS@<wL8^o!R$NMR6nEK$1`y^E^6pRch-}WV9I!T82
zwCMn>W@JlWYE*27{p|U5)<#f3gLe^yDl{_EIYybMI+h9B+o(}}PVH1a+GSE=l!{=T
z1a#uUV6tV$)d9L=?`hxNe-Q`&2oQHi2-1_lZ0$g3q4ptcxJaH_nPlF$kmb=idT${V
zKAFY%DJ~lw2cNt56k5<A2U%@h(xw#v`;5zcji-hVG*s+Jrre#uajwz|wif!t>2%1{
zwKI=TMG|G?p0p!wgvJ>GN>OUI1&3Qtj9!9xmjJO*_fFphH{Fc>uI!Sra$6vj#~mrp
z_g?n!@P;g8)>LIg#?4bopBKoA$N+8<nD%j^xNL3n=ty|$P(u!HO$64D+9I7tP?hG#
zS6r@qzF5oaJVc(b<Gd*r1qDTH*N(ws!cAO}w(>xIwo&o*J6ZY0+V<T--xOQh&u{AA
zvoWZ4e`093+HA*f$j*q0z(EB_hO(W<#k&@J)HN0K9T~@MF(WmzuX5XFwUgiE*raeh
zn3sah8nbrYjvTk+!F9h&oAn)sps=t|s@JMEFK>o)tFqAlMh}m%8)zIj0V4?vq;iJx
zgu5L!)mU!xRVRl7>pTjtW2Z!CS|F|eGkK+D2*DFE5P{`GU94Sz*R2w9yJ~Lsp0n<s
z$F}p&UVp*DYS$&K!aF5}si|{uwmYtU+Uh_{Xx6eUo>hiH%c0A#`GV!1&9yJ*yyJC-
zuY&wnBt}bj?c-Dvz4yGlPO+y4v~e;x4#v8+2wY{wYmjw}kzAP<sSO3^Ht9TIw@?em
zoz)Im(1vXcw^@7gkBz8?RVx$)l976=4Qp;>XsjIXD5fA;VJHPaW0ySWZoj=-kq)YF
zYn{OK1^1-l6~7zdi>Pgz5tnK@Z-2JpV|Z%5Hqm$oMO*S1k>gO6Mdx&o#hJsx$HRaB
zaI8OyF+c(DzD`^f!3^PY>ZfbE<kz5Tdht8SiH={BH%;UYyYdg*s!|xc_q!N@>|-V}
z>fI;iytSw4%+f2JWT6Vsr;4~#K7iWVSZI$}lj`ButJ100pVP&D0C>C~=sU9DtCA5b
z<4;qgb-n{%Xg>Q!z>FNM&4r_N{HAyt9gS&2Pc(D&U<vrSRUnufih4yqL9|vIWjlXB
z8qQ3uz;b0I`(@V@eg~~n75DuyU&j!R&4r;2@gaA1xhIvD>+PqG$cQK_sG;z6mj~fS
z(3@?0G0D65X*c&W_2SJIl30%e+L3r643fqYLK}x`9Vdfu$=K0Vdu}%OKwZ!wLjwj6
z93nHSr(Mhl*dDa7l`K)n8TUG84vE@(=b~th#JUR=nxITYjW$lmo_}Ga`7&06)VM0e
z<@#rN7$}HZ5Yj(<SuGm~@-njNIXOAlt|B2<^%^|9JkfDis+_kMP&Mk7<XHCguD^QA
z9p_yZR2%3AN$HGx-P~%FrQ%AWE!CT!P{ipd6+O`2@s>}8U&TlitE=vtoS9*6-(#^U
znV0v6k^tNwKBzdG7>{V{Kn)7K^5*^aQ{x(&C>edB1lZGAwVGl&8od_*aQj!4kaHNc
zYr-hY^~K#nOQ=<K^}HvkZ}!-X6T=Z1EqAeEq$>$Skm=1Md{Pd5(e`_O#Nm-O=!XP%
z98G$wCv5B<3q0@)Zn<a?^4QBG8dARhI3b51%FNIf@#@RSJ6EqZ76H<xx$}gDLKUiW
z1umW<Gp>)GElMBiP@9IuQTaJB#6{}tb~}YvY{O^gSI6=XH53oauAtrC)nl2foMqcS
zE>~2}XWOogyn$yaA15>1hO2zyJ)`VN<kqD3g4Gy|UBxFb5@tA2OoqQt(U;!hB!YmN
zY6;lkL<65aTx3>rrN3y+-Qp?r*xg!Ugvc=$4^MT=KCxk+PxYxJ7ghY~34hzW`-~XR
zWnulcEilKLZu{B8iDuSYWa-fxBxady(p-}#$A`MvPjaPgokE7+d+c2Hk6`UA-|r5Y
z{R*bUT1vwDC0bz8GY@?=E0o2d&2T{`rbRil=Qa+lpoD)l!3sl1X*i>HG$KL1e5byM
zJn^fZzr5Z78q)64#OvUQz8%8ZXnVoB8kGij{DypuQov^cD6X}#@#0GS>Qdd83EHZF
zJ`?Al&CB*stxJ1Sv&}K`gYA}P?bjx7e2Y>%6XxG#b?S`|(DJx#tHX3ZavWT$UbG>N
z&vx5en;?@6VNRF#)I02;pV!ytdzz=lfa8|(7A=`og<v6}mz^r*ZC+^8h9mqU=iO-L
z&zC)5*HH_Po$twh2#>?2367UykCP}8erOZ%VU|u8*8lM12lHNOq4T{dS^jEcNx*aB
zz)Dk$ankr^!EIF_^U8ptWd|{2EDq90?scH`1Br`)cOQjnmNH}0NOqBuTsB`)A7|m#
z$$0sSWds_>5!Xw7HBd)Qc}Xs{fX1X^r_^_GS?;ww(+oUX@m7Ql)>y8+AiKG$U5}d#
zH;J>Z3$2M(TKmH5gRB##piTnYBvfR|3E9!FvYad9!zJqY_B7Pol20LYpV*7{9zSQd
zwCvr8$jH;2Ir}0`kpvN14dD0aQ!gC8NU=VyHdi>z9@+BjIPDjc^fbi>INk^(>R>OA
zu-5vq(s0W8Ua|J~+$xhIwP2FA>`7!wsvUevaHpLWLovw^0-`011Pn5j>O?vV>dBWg
z?vJ0Ug1o+43z)ke>V2I>;ZCg`O2KltfYZij<GVVkjP2W4>3UVQo8)^R3MbwkbcU4<
z8_A8R7OhlAD&4`?RXYq)rYoHUF@ux0)dXhvv$SxiD~VjJr_h4US`y@T?XKQ4GMMMV
zxtRETbg9@YZUTfxG;eDKDA#OpGjSA^0~ZgPpDqYL%4uE$ti^%#it_eNIG74ZP`F(7
zfZ$QW$GMOtQ$DX!)fGc}&5O-f^q^7{`tx1MiCa`Wp22RqxsSHK9G{|j$97;E9p2WJ
zI97}Wz&<x`>P(@;pJeNspmA|Q%dKWa;Md(&Y0$YX=sFTS3q;I64vIF!pBl?O?^o_Q
zxkyB^txw(5))pfN=6;jf`8?iGeZ-~dX&UiX{WR5Vz4q}JePr8REe;BmXjY$X#h2=P
zBtk9swB495v6F0b!S-#J?|P{d635eaq<gR?o!lRO>u%3S@V&y~YKI&C3Nwy@UGPc8
z`Rkg*a+<9pO;#_8vkQs^&{vU4ua1~q_GuqSI}P_T*^-oipIgk(h=X~_sQqp*vQSQi
zi3o7G7Gx;JuA5uKhO@lvrO|9DaX?>-*-d9D+~IPSei^2O;PR@$g{W^vqehl~bR+F!
z*Q)}hVtdJk&~;NHms+=t+(40shm&6HoBbDU?NLenOC48<<3$VM&Kkq1Ooi|Ws`$ce
z8D&q3l>~VDQ*`Plc5zT|P;6pS1kdc>HA3ht5-tc-we_CPMyTS9Wvt7Pu6<llzHbWx
zQ)wP$D8^tY?V}#C)A%oYuZ!Uoi@g~x1eaR<r|B5-L=KmE-)%F2mbKHKR%tLl6!zgY
zL5EWa^^m!4-2BaJ?Vf?fN0>(4!?+9OwY_|y@&(iCjsT1fwB6aKMpEB+iuPGZ^DUVr
z8_U?uuo^`~u5G~%igEip2R_v(cS-?A%T<7<GaA=GZ=@e>H<4QW<gL(npt1JI#8&xS
zg7FD}a<#&myL{1e8!zn=+%T{|fzgVUI()E5J2KtGwLh(<Md`TB(~((i(_p;PdE3}V
zz%XFZSq<-v|79+ww3iV%{jhdFvkO6Cco+$_$VQM<*;u!*V!@fPHZ2Oh)A=P|F8HdS
zovcc5L4yK0BpRC#KpH;HiizH?qE5Ghh#9ZEHr`zp<4?5VJz4PcnD^TZFpkMFaqgaN
zk3GHJc)dEyo0X|3r`rR~sX|viw(H5amai{8s!MeZ4GchCTaAf8Iy+tPoXv@5@|U;E
zQM%*Uz4wJR{I}-YNT^yb*~MGB+woMW`L}u|Fv9wPGX$y(>0+;YVQ+E0EIAH%aZtjn
zCnHk5*~TyXRM+a;cj><b`h3?FiYP1!IQbHQT{8?Uvc;6PQI~~nxgynzotaLMe7o7f
z5o@J3N#&hpXZRi5`aN{nOe@I<Yanh65Xh=fP?D(Muy=PEUCR5FwrN2B^uUZ!>{<k+
zPCt&I#hh1+bLe6ssBN`WueBX8H#R<aow1*va?E|txZ}E6_Y9L^_ZZx1*sKJeh)gt|
zw9B4@qT!Gi-Uaoubu((x-3YAPJ+iNR4SNKZvXye#=DgBKY^7^%p38iRhi|C_gR>R)
zmyI27NAq^0+;H_tB$87Tfef*R+lZfbEN({eKk(@&c`;-m#d9dvE&j0()y5Uu%NHM5
zfy(#7(68l07D{X6z#F=D%z7?uR_t6})D2xYU363Rp0!&Au+|o3Gt-}1zV)BK24Wx2
zQMYKHX>&Vn1QrSk!iERoqIDkX_$LB;(d9zkx;MN^w$zVO+Y&23ahuolV{8x8gG%x@
zHvyI@e2a<$u6I${wPJ`kv3cD!c|*6Sc=Cl1{GjrS9ZF~sBQ=5rqfmE>v5&_{_}EFf
zYNhbSprZ)^idjhpmmp(q&4QaB8_#}$$tgE3twQw7QT#kxL9Sci0_*|Pw8e^zll1Wu
zoo<+JY?+r#9iaTnS|9u?&VBv;tEqRi`gX$^H<I)vZ*=mQ6^S@0=CT1jWet!qDJ4a&
zykdol1yF|P+&TQTpkw)+<Gt+j@28z)wVM{Dki0v^cJAn*c=ZxLqgV1KK>6bksV){=
z44n5R+KKaczTyx@RBj-6uRm?IKTd1&=%UvFz7MkaJg+7P<)UJRQ&@<)Fww#;#0<N<
zQRCv~Wj$z504J{3o<c6?_Cb2Uy_0OSsYX8P^t;zfAu3}=f_k+c?u&Pe#VytAiOQ<C
zVi%H%os8*)FJc&Zl*T@7JbHfqp1ddn<X}XmtKpmOg1)sPL&19LE!2(8O`ENraO`g`
zUd7$;Nv)_sP-KEogSJScl$cPsF;G3zpV)Aq9=+}uOjp`Aem#u}<n0Tios=4HF?_7K
z`U?*5M@|{!n|~EH{Cc{|q-Sp5<%#(zEsA3y@IbI?C7n@l&{|#S4aBd9WKJ6%kg|xD
z>fo|9$B~$j@Ie6M8O`^Y%fI|b@_Qj@zJ7!6G8f+ZPI*p2)rTROw@%u-E{86QC%NM#
z-P^HdTM-W>_MYdL)oNs4*<71yh#(GEJw9d1E-*eer~b$>UKv2fnPLwzr89L&N1~#&
zUqGvk;sr3E>9N?CC8F2cdhm#$`$y8}-Hv(=U@W+Do^?2#dX_Vofhumh%(IeQl`lZ$
zlyJXdzyksnk7+)V4%+C7^txMj{C%gmXZxbtTXm7g*$R#5Z7Y=>URWe!gmY4ujCT+y
zvUV1qs+gR=$`0it*$a#jATDCK@4)&2`TIW$Y5&brGZdgZDXdiOj$H;-Xcd`(gDY4T
z4%^Dyxwk`JJh;_{&6U~2RyYP)B^k)m*4}~&B3Y1XXpxrxfs67l==7apYS;Ca<BZAo
z%t&yKcEVp6$X}di#W}Kadx!GoGaQLJ1v25>HxhMkPUo3ULKb>9d{YQOFJ!e0@EBg*
zgLzV}JVLwOQz@)Co1di?@(|=oeO|%*iW?N)Ew_?0@B1}9rg|d^>WJO*70Oty&IgHc
zp_0D`1JAYycZfQrVnOia-|YM+M<6V*!cg!Sq$A$to;>AetdH(-w-evYcpBu^-fdD$
z?^a2qmbp;f#h2b^@<PYZMB6p}sXc(3HfWFLcPJ~Fko(z@2h4~6U!DbFI!#C)$U<J~
z^I#NTe3GI0S<zesQerGu-+W2q<|H-_Df?GtyXw6=AIVH5YVOG{REnIJ8p{dbNJ+dP
z%!)l%FwO$}&C|ZVzJe!ir6;lT*1?3Jym|-2HBs)QtIB0}91Lw(WpepI_r?+0!&-BH
zbDSCp<Kp2D0Xd6`If><Io=;*@|6+0fwCWQqLQpYeY-&29bF6h(Tv%wDYE-OP(_cMP
z1lQQD*gr%&mF-`B2oRgDR;yIc)U9vNIBaHUwJ!F9GLywI&C^{f`+<j@$aLd2?+*mX
ze@lshFALzp9CUtVBw3v1=?hkdsG7*tFJ}8TZRl}@O%N@#SS3zB6uT*4ml2+Okw-W)
zJ$;|{%{d{4=(leb<5oYdV@*M;+!|*s)2NYg#=XGeZ1=9M``X&0Hw=A~2tnbu*M4wu
zyThKc@HXAoyxPlr0ZyMMZZiHH4D??y%7461K7}6Jpy8`15#*(^LO1EEQkW%mJPEZ6
z_3ECDs}qL=Pk?DfE8U=WDkr!Ozefympd~yCLYUnE3_-<o3;kp&{ij*uf!1-;laf05
zOMxJc#}`l+V}N4D8){t626D+c4~{=p(sF`GDdNJZ?6BUDb6+ka<kj7;0yqYa4wRdm
zf1wHfw*>!>zX!VjL6CNIe2c$>qubGZnd93>W@=2MbBP7qX%mkFGq4|XBQXNNR7Ef-
zr-KI}MVoMEv0yZ<$6Z@hbr=1(nkV5xU$WrirXV)}&cmmGpo;%|!7=Qqb`bPAtQ0lG
zB=Xih#<A4nQ}GEI?ubFqTbm>m!8Olnrpq9z=#f=_Bk0W=>xv<}(C6I38$TPXf7M(4
z$<q-bMvI3RnuI6$i8x#RF*I?-AC)Vw6O+7WuG4>f+I<lf?E>jq0valx<MF8zPK<}p
z)VA+|6uj+}x^gZN-wOO0S{f|y8y*@8=s4gL8816BdMp!yQOXdvs^I^?omNor_ymZ|
zvXx%Z&pa3a|IfU8U|=t*ICjd^$D0(-QUNwxklGVKvHBQHo%yG`_#a90Z$Gh?4U0qL
zYH4m>92*+aNUl>UKIB1l+tj25=!;F|<>iLQ0ie5s``qk3-+BAtNxGPis9dydq2L-b
z07>r}<jBZ8pIlpuIFAm722-W;1@=@wdZnXSl@(i#hv89+Wi}ksyF0ZG(xIw`$TDh=
zFwD-&C`HQEiQA{R+3sl1?3&)`FJ0=GJ-mx!aBC<h&F5#~_u1Syj8NnTxwgnnQ*%L)
ze6FsGmx(fzp906&F%FH}m1RKv76}}T4T%9UcFriK*KbS-I?mnh2FX0xw4Ok-e0*6`
z$UzLTQQLX0pwRH0{?+sPns3UGXu!qlx=ah9Tk7uBx;1WWp}_frvSHKNKY$I_T-j0&
zOGvL!e4=m>LX4#(6~_M1NJ2s)@<l%WrGKRX{w<mQrQ*ONN7RBM@^9Q2lGSK_k%_w9
zcMIr6f_%`p1w=f_g-D($y?O8usYtEUdTH+rGbrO>qf2~U2PJYgT*VXbX;G!KsIXsw
zez|R+;16@qI<$Ge#-n*2##DE!e@92k6Nyuom+GF~-Umr}0EnG2qk&I!2Mo&Ov3)tz
z(XU2;hX9pjwaDz-2hgD>wwn?6_^0ChkMi)pqwy8ICV*}56*MQ*M@B>lVOw9M56n9@
z!b>I~W>#A>8rbk<h($S%2CS!8Dk7lPD98~!aP*U;c`O{`vKw6LubYTb3u(v!YUBIR
z>eWQ<<>c*ZbWdvY*S@^bL}8ijLyHDowYC<_TBVlx1r3TC15jkh2ML%)HqA|ETJ{<j
z)W2rUfw}K>$heEcn#0&HP_F-O3;*dzEahnP&XbdSMny$&khjcIp$lIBf`Wqc-ZlU*
z?Ho)V!6Xv<d2>7bNbxI#L5~;Ow@|^Ju9~Y8+J?la=e-dpb%;a&b<PI3JnxFJ6N#3~
z>u|UEYEPP8b}*n6WbeU-19rJ?&A0$7a<v~+d9O1PXW*22ps7{M#U>61iy7A{UUr4*
z6L;(saBy-K<bh#X4_mM~uAD8qdcYJQ2<ncG$1#zSE}#v6aZ`dZFK-IM$jBJl*V{Wf
z<5)*bqJ{*g1o1XuV(<G#Cs;>CpoXg^0*UMDULR+#iHe3xJyHRP!%yz9#P4f0yQ8{!
z3ON>DJ2cT874$WEjW&4DBc%}=3yP85GU`}skRuw_)7&y%`gjaAIFZA)R}Z4#yx+6v
z6j+5%X$KyXW9&5JjDP!U4Dp{Ri~skt4yYm=Fa;o8ILIrftsK&?3+kW%!Bd6CUCB2#
z{p{B1_Yj42q)PSxI+Vjre@6x886lW}(#qQ5!7o{v9X|AdKCZ6$;6|z|j!sDKv0k;1
z=Kjp-;&``7Op2}a(XA_aDh<qCT(W%y+Xu-zb~ASNAoozi46r@Glq%Y<WwjnC=iB=1
zzshEWtyat)C>g!1)xa?*tr${y67umb>7VJ2|0|SWkD($Qaq;S!<UMO@I5S+=Zkn*t
zzBH~)<tG8x)ExzrcY+<*;ub<KjmWtvV(MQduDPFlc!5nKPKFpcCc4hbDs#Be%;sVe
zS!D)B8y1r%Sx^9nKXXxsTW*NQ*HUxScue;+W4HL}X(WzkTG0(^&bY4+8cJ7skH&;p
z6r;AkG+&_8uyE@y6!p~YH5qfpVb>4_SQFC+qZibga3Ki1ruKH4E&zBF_Kb=O)D2!j
z*@gBQ^H&>!ekz6)<vX9x_CP?{Jmzx)P$LgCjev|No8XZA`^wco4>X^0kok|9kX>Hs
z=L7yUCpUZF<6V;kFAR*zbd>(K?99waGK7}IcZfJz8Ds=U2bfL{nWI*&QGPf1A@M|V
z!%t<4qJ=J+J-h1l_cX`<rQVNkQDeo+K*8}ZLJQ@;<5?+STITZYLwB4P8!)#$>qGXw
zt9l-uHXKczZ&NiM)tmrjJ`Tk>W?Pt??z<>llSCppJn2f3s8KoG0h6R=R4IFqj)pN4
zT(yyu)AW`9kMVc^*5d!~<tic#<GDHPZo%Yt5E>ooS6?1nco0Kw`FN%y{;mUXTFo#Y
zv}l8J4~_7d!J^FlJ$}e%jJb*ejpp$l5FgZR20#sO82z4ncLo9S_nq=Ug`{0$+Ipcn
zpRnurYbvniM0xU-wJR1T$vpo_kpK6~{;nJm(x@W0<KiV0&bLNqg`&5t0=S7dgm_4D
zQW9Y=aOZ{zl=WX5#l<gjH+2MmufV!`ZB5kK`5+gGsP^W@ix=Nlopq@RG!15FXPfyB
zk??C0k=D`b#n#S&tL0{-t0wxZ2>f4B{a5_tzjy-ms)fLdQBFshbxS~b7!xpNTqHE5
zg7c}k0`1XZ;Pz{Kyg0NL%4A`9M_sHF1qvJL7cRNEeK6}gZ01RF&vzU4>njg5j*$vb
zQ==2iGZKCYWY^`e3qe`=D<pb5u3ZQ+Q+<}#5qh7t2P}FUl;LiAg27*^=L==%2#f*r
zqdaIyY=^Qu#CbC)9h+%fHG{@tKZ#QXD?sC|WCHjR2VhFkwfOcBC^%|_2bPiEH_yVV
zn6zTiJ1|9BQ!q!V!y$!{lhej1*-aof3hTd%Dg5`Q5g#GOG3eLdMD~SgXq?nUyWqaf
z%36iWL@$KTlZih^@h;!Gfb)t@M)ZP}C+2n8ODd>5#zCZZ*D}Sz{plAxD?aU+-Yk8o
zK4q3@ZY!72X{deaRh>&Ep1gbyyO=ly3F$+<j7%(aj60+e^EnyEMEv#Fc<$;h*thL(
zZC1A5hA%|z9v=%?NZYjvkC#~pW<4YEqQ{H(vhb0s7pBobkyI<yVy$6=_!Kiw$Oqz)
z7S;wnsuMQiiKL;~`p|a;=5Y?;jrDQYo1`)Llx+NRfa@HS+ZC7|3dA8-r|O`T!lH6L
z1a)MQ7y`w>qXoZ>@@EeS6s&J_9eImoR#Tr^4|kS_@l!vagR>N|BWiqWi$d9!`X<Jd
zZv@9s5xJU|Dyv1;zCmRrqoHx1%Gp!jxIldsxn5LE)6sJ7vbh95ol*0WQ!Z+?ia75P
zQIFbo3_`3I?&?Lxz4`0g(*dzgov1%oYquaHbM74MoP_8drJw)#w;mAj*x%?o@|Xn4
zgm=eWR*Rx#45vG$iPkJotBamAhv){Z#qQL=A1b*8mbCAIG6fd-_V`4Fw|p4P%CsL4
z=KfX_Q#7Z0ySi2lL^hJqjW)=GUGu2z6sOS+SdFlF$y7siMRmM@M$S?!E*0W`Rf4B?
zal1+|y7%$fkN^cDNYJF+@t{aUFk#eu^_5(Gy>p6Df)3_LnQ?Ch!-#FSw7-t@K(o`A
z>5axIxQz_kEEfp^|5BK*2CFF-IZa?(eH%t^G9fs;SB0=-h5hV3x3xY}3h{Ee2K@Ws
zFjtzgnI1)1!SyalHnZd`+v!VZz&C*Htgi)C!0K04%*QI7rp-!5cM@+2@~BoszcKJ@
zm>lfx?vABOw!YG`b`4)?>$QA_1Pk<l5%03dxL<yePOkg=*u}6&z`aiid@Pq<Vl<u<
z?CGpcrU{0QCwCVcE=b41T+#QfpEJk4uKuDd^~Zev{hBnz!gB7aJxK22ebgKqQe#GQ
z9Psw4lQ=ZJ%8l@b|JQ^o8rdqG#$*&PoO@t;q!4`OEm{1r?Z#Gv&CPnX@d!X}(h!*I
z4$+O^2fUSe6#BO~viPzjY1ts_(NmKcoJY}>TbZ(di--T|7Q=>6t*ML#Mk_J6E3aN;
zyMHKVkbhzhrnSz-x_{}*)*P;1%GF}k#YYiqCpEz7qh~jUtgmiT;0qiyf|Cyo)G%AP
z4D+b9MxC@c<(vYc&al~c({0mE5Ge7r4jfsx&4d_B&VPFA-;*Y_a;VlcMgzTpK*9yq
zyOS-*s2xo}-S~KT>_xIwBHc<U4x9ub{yHQGvDKwn@)`OdR0PJYBl%YjIqC&7iNI5-
z<i!@8N1Q_(VPLSgwCgO|+M@b4OiEt4zF(iH8UN)>Bpul73;~`|sqVFBraEMGcEdAw
zt<Clz5^n@b06SU-1)C1!O_TzVm}pO}ZVl*rI=l%lmnqKeyG$xsj{Pg674A{N)mwKw
zU_4MLslg)}yVoG&GPbrQmbkvXWSc~AMs#<BzBwv%UX!^3n@Z5n-;=abo&D<IY)1-N
zwm*FTAbFz(t!xK`hsG~j3!30Jy@5R^%X#Uh(~E=368s=~#phf;)71F7O^NyFf`x1d
zk0u*bOe^j%oFG=PhC24HD%GBVZ+n`%&wE+2^{!xXT3m?3y*(@Cu!q#e8i8jb&R{C2
zSn6h`>2PTonGgd5gB<@^T<rzQn8jFFyxah?nu=l6vL5Gjs7CqX?W>SLR-gUxv3Bkj
zY1&o5!TWur?qm<&58JPffzeyuCzyD1{;(nqxNBzbK~>nYaD&=#q<X7}2P_wLlE2n&
zu`k=D3k24xb=u8@&V~Tz5OtUsTv3e&-`>jV$mjOgjL+N3gv~w)6$71=Z)QJI!!u}-
z0jtE{<mcD)D?2`%L(jX7NhwPE!QVWfeGE6i-~U({aJ^7dwhkS*ftQ0HJdt)ah$11Z
zS#^ozg(8$NT{8wvg&35Hm_q*Eefy_R>FJ;#%r@U2o%&5%?@!?e*tFd-U+=O+W%Z|h
zH@;+tnXE9+#4$Tx71Qqu#bB1E6}jlpXb7OK_1D2<l6muiG#VhyZ{Ur$#!zS1&<hci
z-!W>4x@i;%%Rr?IJE{?9-=|3~$7~=t8@+)s!baP%=H|OEOLuEl8b4x_VY6moArF;q
zZfPf&N%dqzns>Bk?jB42c&^WJbsC9HxaT><3FgO|<9Sk&Ml2HX>s_tKnx9*s7#Hs9
z0qh8q)zYbe*%FQHP5tBUM|*92ul)1q5!Bcp$5+OUxX9hdr=CiSpN#^cWfw)6V8^Zv
z465j+`?iv4#gvQch%*&(Rl<!yq_up)K=LF!DoVf<R5vhi)cIbMoxB5q0`u>(#O|lb
zSih<9kL%s*;du^54QgS)Zo)>2oLK`y!-~2WYytA>Yo6v;VYJc^hsND)2CU06-6840
z|3vJ+wUaz{6cjkN4c}vZeSK|kmum1$_XbdfCX4H^U6VVFj*Op&+l9QhO;<X2EU>#M
z>D0%GG$v}J*UK!`UEOpQvQ=s-;fFheuX9wapf_*iJ?&1p3r5trs8o!uppgi1eo_<D
z>?KBl;9l~nsT=3t?oo7~K$;tZbMF<;>R!IWz~IvQCMGsFI=$YM%e=u+f_tA9qG$j#
zMNMX}v9Map8+_}XNPM+@UO%T#RZxs1ov$HtU%ReKu!hIPoXjZH%PHo@0c(r+dT6tF
z<Gc370E|n5+yN4Sq3l#Bka>JZi-N(Us;zgK3TL(C1}w1TEVU7ucrSNCZ|u;uG;uVB
zwRj9!r$LdB$fzjF*zoW{g54bLrsI{%Fxp`VzNw?^^E~+NfLJmLio+J5bruI#)EuD1
zZ0sBy@@6H&?E&sg?Y>rGEtYeWhU-ui2pP#O-s(Vifhj@bz_a0%AQu#bm!vDUXxaql
zWM}S2y;9M76oH*?j4S+QDw*2uc}2hw6{mYOe+|8&(F7=sIV{np2`a0-Mp9kh_E5Ha
z0~3K2{l|Ds5x^K7#1o7rcBhH0KHdA6wT%=s2lSQ>M^z&uMqK6#!&vn6f9}J4H)BZ2
zP#(HA5BN?63ZHa3j5*EX(k;!-J&~H~6v7sb`%-a5Zkl_Oh2WuAyYKPgk!x<581P)~
zVHHkorX2E4n5>WVH#RobRGakY%+SqR@*}FTkxtEiExM4Uex>RvHuDnoqt3*G>O52o
zyrxRn5!I1%m5#d@C4abuiszYVPC&g~pn8_-DB_iFXj67qW}z#FC&)tZGpt?ST$PQ9
ziOHc-n;fxeXVGz*4sOM;=G&;{76+`lr5;BeD?a{`yPBZUT?1ev^x``^ipTbI!2_W5
zQ-&bK$#Ackp<%q_ym(#nZD(Ag;MzRs<mwPAKHW*%LoiL{tk``5+|Z@hF2Iqg=rx9y
zi+6{ofaMo%Fo3_~<=x_V(=JnM8A2>iG{75~mE(wFmHWj>M+0t+@zU+Bq2s%jnxqpr
zvyMV2c+CX_svkx5n3v!}3GD+JKB~Q5X;YH*fDuC{Eqbdu8x<${cLLvc1X7=sZAi>O
z+hJ*?gI?tVMC2&2u(++d<<YA;{pyL0u1aiF;9uC@t!Mps07$KtQ+q<2PSYqbiuZAG
za&x(Sg(GM6MrgDD@^DEzs{>9un=b865@_M{dH^M$CULRRI&vGIi)maM-Lz}gZMXow
zf;0=}>SZQ;vNt7LHtEYWgI4jr_pEjzb`KW!kj6d%Fwv#%>Ns4*$T!~w!`9ueZ5YWB
z0WVXpsO1))9@Sd$xt)Gq=*?WMJULi&C!dXWBV_lrF&`;iU&FW|bVI7oLHzkW`}2Mk
zv%6GNN7eo1{rZ&T^|;`=ZCqVLdPS{H#%j4|#rwicz$!45cD8<^uRpnkai?5>Uefty
zyu|loffb{c-+8&b;?wbQC7-AcfqQaXy@{@EvOKFs)yQoHcRgLbh+IgAE+RHZt861F
z(xQ6b>xA`@{aNug7m~N9SfgDxJ~J(BAC%BNo}WD|eU*;+TNH*J15xvoC$fgy=S9|?
zzon=DSr`Ug1k(8YK&o}w(H9Kv5gw0Z=HI^>p@Uuc=!5P{_WIl%XZ=n5GcwVVG-)Lq
z_UF^8JB_s7UH$whaY&5shRU_?lJ>7xT)dqmcU?;x0G7TWbLRc+6#jV+|HJ>ZFvx|i
zCYT%(03E%$WXqSkIF4oTyN;;cK&5+kOtkHM?AaXq8F`n^WXtMAct*FLM~{|TP0auw
zF!RcQr7K3W=09%EU#~zXNF(uUAV^J3wcsC+)<MSVem{`Ey%HdJd{z;Fz-1WRt~+>=
zd0fAL?Fz~LH{Ynhez$jZEk(}gm9Ve05C{(LGftn-jNS$HY?Vb$Pqk+9-%m44HcsyP
z2*Ja}nhsN*-0)Sq{=dD!|9em^NLecsjG`ME7N$lO@1-j4(L{h=SvdXs8`cIfZVFJG
z|NSU_|MCC*&i}*)h`($xn$=vT8@a|M!>h|vms0*8&O$-hzq#6;)xW4KWLfw6Y-kHS
zKz%5boK?)^+^&q2RF-*>hN>N3Gy|^QZOPx39CQ~U62G>K|JYH6lK-};Zu9Sy_!9;f
zyo6^oaHUB{R`Et~+pF8c1ohP0<VZL0$ICaEEL96n{D3r%IJz_!bw;}eFk2rsoUaXf
zJMl%!#A~s-^Q8!7;sR8fU*C^##jIp`cHz{dTBDEUjHnC~Mun2^D3*xZ$Vy2?4Hy^Y
z_<GcH3r2Kt{n{|bH&MXYJ(H)GglQgnxmb6-=lNZR|F3-Y`^wR-0=|ZIRH>zCv7X+8
zzCLneo4JYp+iwh#_^{V+Quu$mH@K?g{o9&;P~#_A{+EY(JRrL+Y(L4mefze0M0ohV
zxs<%lCobx1zxF~~55a$23h&KOPF)!)GNG?GGxq;Qir-fFzpqKJ2}ly}N)$=$YK8R5
z@=@~|!}NBSfM4H^kiseiVOEtYol^z+if+O`dfPAgS9>2A%arNMYFZrl#-%CU^RAqq
z-jeJlRs2Rx;DW@<l`=oO;C>|_I%_)xxF7$^!T!r%MsyN_Bab+IpOyil$>Hm@hWZ2T
z_db_}|J*f<9=hVo>Xtufs`K`xIoIzh`%m^CM2>>um_C>x&RPhvNHyK_QKwA~<(@xZ
zdk(>j0j$*s=c<zx=B)(uv)b<#=GA#7^#)vq4kNB&N~@3ffvkjB<1VExS`5E2*)a%&
zpT5;BHf6-(lseT}_(iN=3;Y|q4>CZAMEI#5)?-V7TYZa{*Wt;?`kZ%7Gt+MbN|Ms+
z2ezzi+4?663kmhnFTZjBAFZP)&I49|!F<6}6PWn9z$6)_c5S`=+cwe(!dQs?+M_^>
z;laWURrcS0^xOLW=Nk?)0J6-$-h{@88G?fi0s|6S`>p6Xe7~6;v^XGqt)-URUy>59
z!hJ?*9gJ_1z<&tXsZdC#95gS<^$p>jPBY8?_3igFYl*}G4{)ZYr0gUYq1c^OT=20b
zcyaNr!`KSlz*;DOblWtCN~?>f-*2aQLGf$I`ue(}eM39DUmnjH9rZbcI8c*&_eIFu
z1fSuY#*Lbvs(WenkpKL81Q#X{VYgFta&<#e5_%u}5kvh_=RvxNt2Nn+0?!mq8VO?7
zo)f(gnegNKO+t}o)Vf5p8pwxD$nDln{&o)kGdKNy0sRQCGjF(+7%J)g<?0f3j=jA(
zlu-QZ&94$_4KsTeHj6FBh4_6N(qI1m`9E1lZ5^<NsHGUZb3s-aCt7B9kt3k(;i1Ma
zLyY}8BC{`7*Zorf75@r#&$B*|$2yz0cbEWIs*1R^$rXgjpBqh^fJ^mQOrs0!7oFp=
zLB`rdUm#H@cbsoapYW_+4buw;S~3(fY`YO0Yqv&rA4y_+k@~8#`>(@1xQ2JxtK!j0
zH@W{O>0^!h%3nYFMVP-ucr+GZmvl@rY6H_Znk-qD_|d%wnsUEx4+4QL8Z@yCfH>O+
zK=T7GdUYx4Z(8&h!~UJ)*ir|#Iu=pD1BX(?kO;zWdF{&d@u&*_+?^nS4{d!FM~r%I
zf9}#?5<SS8oDIF%^&ukjVy1Vy6l9<j)k4N_O^pR*hF`=+!ECuEVJ!nCb2El5s(YQy
zOM$`P0a*N^zYqns>W$!%lHq0S_nrQ%zevce9!GG;D;I3qFI2!2{mc$JNeUeF7ami>
z=4D&H7sf>g@fbWu%ko*W(m#(HnSsCK<qrN@EF%-KXLi!QfV;)5R28%olNFp?pcFbm
zlf>_2e$r9zGGrNebHdLq2$u#$j^6$GgFk$r^#kuMD9yamp_s1Z41c#?jDP(e=CAEK
z)5~2a+-Y#U10~bxE0B;D{loYD{5Wkgc(G!+)l)|PXE^PC8mBkJI9Rwd-~QyGS^<c#
zKW%*hu=V?AoLaA)ks*cxDFc>gShE?8Yj>~lc9wm`@w!YZr_f$+_WhrW)B6k&2I&L-
zM3u~CwZDpVescYvJOs%D0ZKMHAaBO>3@5e^RI$-)3mPbyD3Sd9Rs>$@Ls!=$Rfh&#
zoHN@qbcO_&+ckcfaN_I14`g3mtENmGnN60G{k7#f2+*B}K%cxaC@3?m!!0{A{~aa+
z?64WzDe>gx2g&a*LmsgPu9wQEOHln}vwfrh%gxa&Sy=*&9u*t?RRL#qshOo=aT8r5
z0=<tA#zoGe6{9C2K#Yz|rT>=F{Q3};u4#<`|MA`jjGH67dAv@DpM3bI4+tl)`?luE
z$vmix@bOl@Np987F-RV6JnYr`nKwYRVB5aA>huUCL`-J*due}i!yi5%gh2jm=}Jy|
zD1%(Ok`8H|7maVeu@k3L#LsQjUiJnWTl0|s!?O!DpMP_N{`A$;*dTRR9Zz<^ESIf9
zGY)v2q?xk+ccu%vgTUZ85(6P4kY222@mzj-c2?3qRLIx|KcX;@C9DB;ZNfwIwlOsW
zhNC~3K1dQ#!b9%QD;D>VA#~K_*O~l0oWJ(~i$w-e$Og8K@j(z)6WHQa94`67OkqEB
z(LnkM`=6_~xze<T&6uq_`12<G>4U-*+75PZ&E$@KC<seRfUso2y2g|0e(j%5Pm?$7
zIjLK&8gmRtW2bC(=ChvJRlA@|OXh}ogEr3=0jeTaxg%Q_K&XU<;4+V{)`3(EvefZA
zQ{7JlrD-GfLr+uvxyk)gF*v2BE@u4l{Quse|M(PbE93<iNv=I)6Z2j3G_O5hw6K4F
zWzFn)>mTu&AZx&OQ7>0rX7A-~Co@{y+yB#3|7n^iu+Xlt^bV))d13-j+Z3R*9Ey%?
zCV7s|a{rL!2wMzbDw2SlyPt8<(DHnmTJV{@{yi{L*@q7^D~=(+KnHc4vu5jyq{zC)
z?^Z9UoEZtf`q>GD!r!K6Xyl*Sd#!1~d(k7a8qlFUrUP=}k&zW#A8_2~5t(g2k48-H
zs|6V5e)^t@-+n~!SrOxz-Su+_5Wbr;3(`a=q}%Gm%Q?C~r^snzdG_fCV<%o)dz+u1
zPts#t#3Yu<-21m&fS()r{ee9egf{k-w3>r!KYsjJu9CT3b7f#nz06pv;K!Nc<Ij0X
z<pR~l4M4~b#XzUR*}XpR955%aVb+pv&>O*D+>J_xY5W6d-p1zG{cx~JE5U6aBb?#|
z88-*?nsTBaXY%K?pL+r8@{?$}L(2rgPurX~C~z78lRNswWJ4b(v%!CCQcM&~vGcM3
z05FpIokmhvoRqJ%<$w8$f2w4zVG)MxMKxl46N^(wKXOg&-dB4yWz$_K_G6!dgg$un
zxebmIP|~rH`lr(Oep)<#`cNALr2Ivv^USfV2n=3V;32uOe|kNip;h#Q^mSOG9uwR7
zlYYP-?e)|iH2(8L|KUkqcmS-LxTNg2j0g-aX3^3Klf-mkzfI+EV;N9*^pD$q4NKH#
zVtIXziSFYXfn?N&M`!o?r2D{A^5v0CPh?~VF>@h+L|dG;(wnFrpYh{*920<phvTmu
zrC@Nlibpvdl)MT5L6kpV2q`z<{KVob3lc@OR*h68ZmVNeG`@1NoQk79lRsV)NE>wZ
z^P#?$TxRcz({s(LGb(}xG=PZ#+8fwDD&lqpLTBqENIm5P9@tpRlt=lCrS<k9>!UL?
zD%l#_UD_4)+@ZpeWIxX4&-Z`70tlYM)wl!2%fPT}12^BDsv$&CK9BCl=5aBOEKN<9
z?iFb)qvL8>gJPXOylX!{j<|af-)K%7rdJEWH{W|Ele#%ZDt^)NY4eZVIq_BCH0A`Z
zzjv;3n|?-ZN$~TdfBf*5^VYwWh5@uYP~a1~VuH!PoC%l^DqZbb1gQIcuaUj8?20va
zW>(#~zY?HfhnQOuaT?h%z2+q)_i7&&$x4R(s6$=DLt3<MuR=kC!>Z6X)S4e+@C+!g
zhXOoi5|3}h5Km$s%X(e2B8}BRJ6;@Tv&Fv-KAfb~xWShwcLW)N;v7#$`@su;&Tn&>
zfZwV&BBDU`04QF=<Y+FINwpc;Fy#CzzZ|59ko?rxs9OT+zYJs!`+vp8{+Q-)pxy`2
zl@u?{g~C9P!W3wD@#hrPNxCLsq5oj&rsuV$yZm?a)m*{&*9ry#s;AG+j@w^@n)h4Q
znhCTJY=VKpr`;LgbWa|F1zi4=@j`H#^&i$1Z6*X?&(URT=M%^rA#SZcE|P`+xDS6$
ze0DxSdvQZHB@sP!2q;D##Mjv(0hh1ziS)OJe=R^7qIykYV*&7=d4#VD(;pxEPo^0J
z=O5+|??FX)V*smGX?A92jGDxK@iN=qi+>#R{fb&sC~3{Ce4umB3uHF}=W=UW?AejP
z7Pyj9yC>-}wO6pBTvo~&EL^83YKG@+SzlT0T@m_<_KzdbOM-&SpK^Wf8E7eRxS|}U
z|K}(F!)Ix#0vBMU2KC%GX%O_Ev;v-0HXuM{<#vwl_qPXKLX?3*Sx^_D8QD4$^R6dL
z>L05*3&CrB9T?c&kvUHw=uo<zJftsASyOYZjhC`?<*%^S1r?B#cNG@7z!nCaY1cd^
z%^&{Gk1hPL9sZ6?k_7RiQd@r6OHEO=9F3GVJ)jNj1=#<FkvX#sj<L^oTE7aY)t3J<
zjI{E1zFYZxPtu>C85f{Hu#t<fWOBIF6b)J$1k*vL{2Jt9Y;?s8_dis-GgF7}ywIDg
zpZkF3v9U<yp*Xu+0QCZ{wdJi9m1{u{K=X|N6XfD47kGQr7c@fY?=(ic4%A*XVe|3B
z#LiM@k7f<uGu-=mq!eN|#>Q_7shv-a6|!G0>aXT1cUFW_Qb%X6*#09TOw5Ld;&n<n
z^#KT>&ke%Mm}kd=7)i3g<~!JtYJiF<#8Fr}j@tDf+k<dg{q?nh*USp?-{nP|Hw0hD
z(e4$mxW`1Q%dPD6v%7(`Aa#%MN*}!O;?n(481L7$gT>s_KyVMG<@Zx;m2;6Lv3RuX
zxwR!z3onozXPeavbZ1C^YkF`84JmT8A@!FA%I!?vn++GwHXK;Y+49L!sZjO(BVCS7
zbe#|@*3V^p$cU@DxWjPdtQsf4Ek+1{f{m7L^Tps=A55hi!KsDA%e<oM?Sb-?`5W)P
zbHMFOK5HLb=qz_9L6X;D$v2j=C`b7WnSdGOq9)$V3*1LG5Cz<x2}?9EFwh~`JekD^
z=F95ejQmFlJtdycx%yG7lN``s1lKb*UdTD$Pjz<I2rW!+0%;7HPs>1{Xw0BF_{GbY
zFFA*ocTA>^`q3&Yzt_Rh@<VJozl{6)`&VVEWWxFR&F0Ti8r35U9<|&v325`~BOWAM
zKYmUTLo=nkZshbjup%0H^{r`vKyV{8tL6`&N$+2DvFUhE{QtFf?J-T=Q5b6nWu1eL
z3aB6;5JZv3$fVL15DN?FL`1>x5-bTu9P+TGg;G<Yf?8XGV>2iqV~UFMnBi3r9B8{Z
zc|-)Jg_Z&;Y9BC=f&$&S?3FCblFi${?w_~keCKz*-#O<y7eynu6CoaU#5ZnSfw@D3
zLZg$E6SZM{lAp@i=k{Xjaz{bX;FoKzIo$)RkD{B?WL;hgPUqo>DsL1Kk$?<4G|Yy1
zVR0&p{DRI(>C3MzU(kB{gWZvMEHLJgE6$1nS;}`CT2nTmO3hYaoXvrnjCO^2Bgx^9
zpgds{(n^uk;I~CLm5{;S?hZUMp5Nh!sI}lyP-52)B<fFg^ZpN{e4qw7BdpT~JQaRl
zRsZ>?>e-zYeHNeps3bhm9zdqlEU7%4Ypb&)FQPhnUKumxnYsGLZ#nb-B;$X0<>yFx
zC_4jUlJUs6&Qq(3!mAjuSSzN~xLMLm0W4;^rR>kOSb`60RJk=PPpw<3*Y#aQt;K_&
z-Ov&8<DN$_ZD89EGMoc|$PkffwMBq^k4Q0iMQn%2-!AuHrr7LsPI&BI7jxgOu!(HZ
z$1O1vO?OzH1b5h7hRI`|3U?Hw)oOL4Vrgh%f=?J?1X@KTRFX@;>T%maxye#i7COxP
z0;9&u8jqF5^oAv));vcJ?8gXkT{J%ekD<f~Lu)zIDiRwaZ>4|R=1IS4ec!tu8mc`0
zhqS}W(k9*amM0>v?^_B@QTjjoZ+YVf*>0MFfl(;33*g`B9!~`wp@$mzD}e!zKqSqN
zpO4rT5~7d9=1^;37;d#=cwp@=M}lnuoj1o3yGkl^M$D$zjQy7~(jJyG(Dc(^VY330
zLxe7k3#dP|H*ww+vSdx&Y=vQSTRkX+M1HwM`PyNwt51^8ZKnFEn`)?ex_jYx4O+6e
zWr{FS1fYoxD$WBWXD=V7G=nE=)XbK3$61+z`t0cL$5>o~pRJGQEG<s?EU1v<+}%#1
zQe%Gdi;8?7V*U46hP4C`$^IA1k*d8*K-`$*TwYIi_fjw=D=_yP#!3@W%mYd(#25op
za&69N_-+S@>mfW?(|<(wT{Zp#v?j@rW6AFb6uGW4UlU;rfyX!ACFudu-#4a7yf?Al
zYl|u<gJA2Pz+;y0ncI#n;%*ThRIf*FK6Zl%Ad*Ls_ocLhZ{9gyf_JhlLvFuyL4^x@
zbFY*<vM!&*dkj1e+cAhWbTYN$H%i)@k4eucgeP(o-V2kRHLyrUoRqTq0D8R!1T8MW
zgq6Q6P=NOHqH$JPsyY#T@tgfB$KRxE?YWwsfazj~S}YH@xz%~;4#!ETcqIf`E;nPa
zI>vM7g$MR%8pkg#0lXws4QvzubYGf598r!knX}HIc6Sb44BOCqD~sbVIP_K=>H&LE
zXzuY|1(SImOWWi!eYA^tixh+r+1ef288oj-5Vm>XGmh#u(p+>;!#I_)Mk{7jPtyId
z9aN7qGOLO#m5_dD?i~@wee3GJ&W=x}7hNaCn$b4}6()U5o#}lI%hYDyWHayx5|Q+R
z3ZQsj;c<fCdBaUeaf1EH#3@@jQ}*RWNZ40#Wn|Y5Q!fUTszqk;N^NAR+|*>o+oG~%
zG`rSQZse<3Z-1dSt1Z2&_%kmJoI!G<WCn^=Rpc+u1p7^f)i`u5Q+a#0-c__A*u^Tr
zwaQHIC+FX7NfT6zE?jGBXanmtF<DlNGZB}q`xI-(oIH|^^-<y%!*p!;fK(z$7ETYt
zUeg=K4j--gYfcOe8^&P~xQ$%hxExZCAnNk@QmQ6ZByY*k#s?Kz!KZ37SUSr=lXJ-f
zDw`^s=bSHwGW1D=@y1WNHfOWWrp5}U4_y*5dRhj>?OI<OnLbjN=@huRx=}1`l2gmb
zDcq6zCa$7>QP*`(n>ALiX-d?m9($avXSZ_oY~34{`rz18YXWJ`jX+^Z#f;aQpX=z-
k;i+P@X48KMn{6USZxV&ks7Y-rw;RAOC}20O+CT2(uY1S~;{X5v

literal 0
HcmV?d00001

diff --git a/pandora_console/include/ehorus/images/Pandora RC.svg b/pandora_console/include/ehorus/images/Pandora RC.svg
new file mode 100644
index 0000000000..40ae2cc21b
--- /dev/null
+++ b/pandora_console/include/ehorus/images/Pandora RC.svg	
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<svg width="2586px" height="500px" viewBox="0 0 2586 500" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+    <title>Pandora RC</title>
+    <defs>
+        <polygon id="path-1" points="0 0 499.919269 0 499.919269 500 0 500"></polygon>
+    </defs>
+    <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">
+        <g id="Pandora-RC">
+            <ellipse id="Oval" fill="#FFFFFF" cx="246.439077" cy="250.000704" rx="232.356844" ry="232.395021"></ellipse>
+            <g id="Group-3">
+                <mask id="mask-2" fill="white">
+                    <use xlink:href="#path-1"></use>
+                </mask>
+                <g id="Clip-2"></g>
+                <path d="M383.135312,354.853112 C368.253912,367.5785 348.637362,378.490503 327.50345,384.159533 C303.84882,390.511663 277.275646,392.268711 251.94523,388.906025 C204.245186,382.627838 161.368307,352.529162 132.513812,324.293167 C135.802013,316.507934 136.780729,313.662855 140.153423,306.004383 C145.821522,311.895245 155.890319,319.754422 160.364948,322.842459 C191.34234,344.395336 231.811157,362.951727 285.415177,359.849605 C312.558681,358.367207 337.737713,348.948166 355.601026,334.610097 C372.922172,320.747382 387.409269,300.838876 387.081857,273.134572 C386.743884,243.817588 372.358883,219.902028 356.667755,203.880856 C351.291862,198.373798 345.4759,192.479415 339.603609,188.137854 C330.316376,181.275159 319.990579,175.954721 309.611973,170.926538 C299.046778,165.72934 288.196418,160.528621 275.606901,157.810304 C296.371154,144.613083 352.112153,128.436982 358.71672,132.204598 C362.846335,134.549675 367.299841,138.306728 370.728864,141.10251 C382.124911,150.218733 391.852214,163.060318 400.188896,174.965282 C412.123588,192.15195 422.185344,212.035809 425.864327,234.409111 C434.817107,289.666309 412.176397,330.117127 383.135312,354.853112 M50.3193389,262.986656 L50.3193389,262.919755 C75.7729749,222.828092 105.162595,186.549821 140.051327,155.736354 C164.10026,134.436998 192.444275,115.447508 223.82301,101.655216 C229.089766,99.3030966 234.194575,96.3453418 239.883797,94.5108296 C245.509649,92.6551906 251.38194,90.8136361 257.384492,88.8206727 C280.331491,81.2572711 311.903857,77.4474013 337.220191,80.2361415 C356.153753,82.4227674 375.002822,87.8664447 387.578256,97.6411201 C391.852214,100.912256 396.967585,104.493252 399.699538,108.415798 C401.290831,110.690453 403.515823,115.919341 402.255463,119.024983 C400.692336,122.792599 394.932702,123.162319 390.165866,123.070769 C373.879764,122.736261 358.987803,121.02851 343.240346,122.926403 C320.923527,125.662326 302.444117,131.926428 286.50655,138.606024 C252.842972,152.62719 223.925107,175.729368 201.125971,199.046335 C178.136726,222.490063 156.900719,252.028879 139.998519,282.356429 C121.181135,316.127651 106.986244,351.733385 95.2663059,389.120814 C68.3621998,353.990434 51.6923566,310.567776 50.3193389,262.986656 M249.952594,0 C111.890382,0 0,111.901724 0,249.979577 C0,388.075037 111.890382,500.001408 249.952594,500.001408 C388.025367,500.001408 499.919269,388.075037 499.919269,249.979577 C499.919269,111.901724 388.025367,0 249.952594,0" id="Fill-1" fill="#82B92E" mask="url(#mask-2)"></path>
+            </g>
+            <path d="M659.867032,265.066592 L707.890966,265.066592 C722.624503,265.066592 733.809316,262.587712 741.438366,257.629951 C749.070936,252.675712 752.887221,243.112305 752.887221,228.946772 C752.887221,214.777718 749.070936,205.21431 741.438366,200.260071 C733.809316,195.305832 722.624503,192.82343 707.890966,192.82343 L659.867032,192.82343 L659.867032,265.066592 Z M610.265887,331.91185 L610.265887,168.087445 C610.265887,164.6649 611.452315,161.724751 613.82165,159.270519 C616.187466,156.812766 619.081364,155.583889 622.503347,155.583889 L722.888545,155.583889 C775.953919,155.583889 802.488366,180.041704 802.488366,228.946772 C802.488366,277.851839 775.953919,302.306133 722.888545,302.306133 L659.867032,302.306133 L659.867032,331.91185 C659.867032,335.334395 658.65948,338.253418 656.251418,340.661875 C653.836315,343.077375 650.921293,344.281604 647.49931,344.281604 L622.767389,344.281604 C619.345406,344.281604 616.40574,343.077375 613.951911,340.661875 C611.494561,338.253418 610.265887,335.334395 610.265887,331.91185 L610.265887,331.91185 Z" id="Fill-4" fill="#181818"></path>
+            <path d="M876.429595,261.512708 L960.236483,261.512708 L960.236483,192.825895 L922.739018,192.825895 C914.321363,192.825895 906.973958,195.213226 900.703844,199.99493 C894.430209,204.776633 890.198498,211.202708 888.00519,219.273153 L876.429595,261.512708 Z M807.225981,332.174879 L840.248818,206.9034 C849.194556,172.780064 878.313093,155.670861 927.60795,155.586354 L998.522554,155.586354 C1001.76851,155.586354 1004.46174,156.81523 1006.61632,159.269463 C1008.76034,161.727216 1009.83763,164.579337 1009.83763,167.822304 L1009.83763,332.174879 C1009.83763,335.597424 1008.60895,338.470672 1006.15512,340.794622 C1003.69425,343.118572 1000.75811,344.280547 997.339647,344.280547 L972.600684,344.280547 C969.006194,344.280547 966.045405,343.118572 963.721836,340.794622 C961.398268,338.470672 960.236483,335.509396 960.236483,331.914315 L960.236483,298.75225 L866.691731,298.75225 L857.876253,331.914315 C856.996113,335.509396 855.024601,338.470672 851.958194,340.794622 C848.884747,343.118572 845.642313,344.280547 842.22033,344.280547 L816.301981,344.280547 C812.879998,344.280547 810.426169,343.294629 808.933452,341.322792 C807.440735,339.347435 806.719021,337.615036 806.764788,336.122074 C806.807035,334.632633 806.96194,333.315728 807.225981,332.174879 L807.225981,332.174879 Z" id="Fill-6" fill="#181818"></path>
+            <path d="M1047.46219,331.912907 L1047.46219,168.084981 C1047.46219,164.662436 1048.64861,161.725808 1051.01795,159.268054 C1053.38377,156.813822 1056.27766,155.584945 1059.69965,155.584945 L1098.38002,155.584945 C1101.44995,155.584945 1104.6959,156.813822 1108.11788,159.268054 C1111.53635,161.725808 1114.34223,164.662436 1116.53554,168.084981 L1196.00158,290.328283 L1196.00158,167.820895 C1196.00158,164.401872 1197.20561,161.503976 1199.62071,159.137772 C1202.02878,156.768047 1204.94732,155.584945 1208.3693,155.584945 L1230.99945,155.584945 C1234.41791,155.584945 1237.33645,156.768047 1239.74804,159.137772 C1242.15962,161.503976 1243.36717,164.4899 1243.36717,168.084981 L1243.36717,331.912907 C1243.36717,335.335452 1242.15962,338.250953 1239.74804,340.662931 C1237.33645,343.07491 1234.41791,344.28266 1230.99945,344.28266 L1187.31988,344.28266 C1183.8979,344.28266 1180.3879,343.07491 1176.79341,340.662931 C1173.1954,338.250953 1170.34375,335.335452 1168.24198,331.912907 L1095.48612,219.01118 L1095.48612,331.912907 C1095.48612,335.335452 1094.27857,338.250953 1091.86699,340.662931 C1089.45541,343.07491 1086.54038,344.28266 1083.1184,344.28266 L1059.96369,344.28266 C1056.54171,344.28266 1053.60204,343.07491 1051.14821,340.662931 C1048.69086,338.250953 1047.46219,335.335452 1047.46219,331.912907" id="Fill-8" fill="#181818"></path>
+            <path d="M1330.72595,307.04171 L1365.7203,307.04171 C1389.3186,307.04171 1405.36883,302.745923 1413.87801,294.147307 C1422.38368,285.548692 1426.63652,270.833862 1426.63652,249.999296 C1426.63652,229.16473 1422.38368,214.425252 1413.87801,205.784382 C1405.36883,197.147034 1389.3186,192.823078 1365.7203,192.823078 L1330.72595,192.823078 L1330.72595,307.04171 Z M1281.12481,332.175584 L1281.12481,168.347657 C1281.12481,164.752577 1282.35348,161.724399 1284.81083,159.270167 C1287.26466,156.812414 1290.20432,155.583537 1293.62631,155.583537 L1367.17077,155.583537 C1405.23504,155.583537 1432.93128,163.196234 1450.25594,178.414587 C1467.57709,193.636461 1476.23766,217.495683 1476.23766,249.999296 C1476.23766,282.502908 1467.57709,306.341004 1450.25594,321.517103 C1432.93128,336.693202 1405.23504,344.281251 1367.17077,344.281251 L1293.62631,344.281251 C1290.20432,344.281251 1287.26466,343.119276 1284.81083,340.795326 C1282.35348,338.471376 1281.12481,335.598128 1281.12481,332.175584 L1281.12481,332.175584 Z" id="Fill-10" fill="#181818"></path>
+            <path d="M1641.35677,202.956558 C1632.49201,192.428359 1618.17742,187.16426 1598.39892,187.16426 C1578.62043,187.16426 1564.27767,192.428359 1555.37418,202.956558 C1546.47421,213.484756 1542.0207,229.164378 1542.0207,249.998944 C1542.0207,270.833509 1546.47421,286.495525 1555.37418,296.974428 C1564.27767,307.460373 1578.62043,312.699825 1598.39892,312.699825 C1618.17742,312.699825 1632.49201,307.460373 1641.35677,296.974428 C1650.2145,286.495525 1654.64336,270.833509 1654.64336,249.998944 C1654.64336,229.164378 1650.2145,213.484756 1641.35677,202.956558 M1677.3404,324.738591 C1659.39963,340.488635 1633.08698,348.361897 1598.39892,348.361897 C1563.70734,348.361897 1537.37356,340.488635 1519.39055,324.738591 C1501.41106,308.995589 1492.41956,284.058899 1492.41956,249.932042 C1492.41956,215.808707 1501.41106,190.896664 1519.39055,175.192395 C1537.37356,159.488125 1563.70734,151.635991 1598.39892,151.635991 C1633.08698,151.635991 1659.39963,159.488125 1677.3404,175.192395 C1695.27412,190.896664 1704.2445,215.808707 1704.2445,249.932042 C1704.2445,284.058899 1695.27412,308.995589 1677.3404,324.738591" id="Fill-12" fill="#181818"></path>
+            <path d="M1780.81453,238.090459 L1836.86182,238.090459 C1845.89557,238.090459 1853.85556,236.29468 1860.74177,232.696078 C1867.62446,229.097476 1871.07109,223.350981 1871.07109,215.456593 C1871.07109,207.562204 1867.62446,201.815709 1860.74177,198.217108 C1853.85556,194.622027 1845.89557,192.826247 1836.86182,192.826247 L1780.81453,192.826247 L1780.81453,238.090459 Z M1927.11837,338.622433 C1927.11837,342.397091 1924.88282,344.280899 1920.40467,344.280899 L1888.8323,344.280899 C1885.49481,344.280899 1881.83343,343.076671 1877.84816,340.661171 C1873.85585,338.252713 1870.80704,335.333691 1868.70175,331.914667 L1846.33564,296.911048 C1837.12586,282.523683 1825.98682,275.330001 1812.9185,275.330001 L1780.81453,275.330001 L1780.81453,331.914667 C1780.81453,335.333691 1779.60698,338.252713 1777.19892,340.661171 C1774.78382,343.076671 1771.8688,344.280899 1768.44681,344.280899 L1743.71489,344.280899 C1740.29291,344.280899 1737.35324,343.076671 1734.89941,340.661171 C1732.44206,338.252713 1731.21339,335.333691 1731.21339,331.914667 L1731.21339,168.086741 C1731.21339,164.664196 1732.39982,161.727568 1734.76915,159.269815 C1737.13497,156.812061 1740.02887,155.583185 1743.45085,155.583185 L1851.99318,155.583185 C1872.07797,155.583185 1888.54714,160.981087 1901.39717,171.76985 C1914.24369,182.558613 1920.67223,197.122034 1920.67223,215.456593 C1920.67223,240.984834 1904.13617,256.995442 1871.07109,263.484897 C1876.33432,265.418001 1881.20325,268.731391 1885.67436,273.421545 C1890.14899,278.11522 1895.27844,284.935662 1901.06624,293.88287 L1925.01308,331.914667 C1926.41426,334.3689 1927.11837,336.608343 1927.11837,338.622433 L1927.11837,338.622433 Z" id="Fill-14" fill="#181818"></path>
+            <path d="M2002.63716,261.512708 L2086.44405,261.512708 L2086.44405,192.825895 L2048.94659,192.825895 C2040.52893,192.825895 2033.18153,195.213226 2026.91141,199.99493 C2020.63778,204.776633 2016.40607,211.202708 2014.21276,219.273153 L2002.63716,261.512708 Z M1933.43355,332.174879 L1966.45639,206.9034 C1975.40212,172.780064 2004.52066,155.670861 2053.81552,155.586354 L2124.73012,155.586354 C2127.97608,155.586354 2130.6693,156.81523 2132.82389,159.269463 C2134.96791,161.727216 2136.0452,164.579337 2136.0452,167.822304 L2136.0452,332.174879 C2136.0452,335.597424 2134.81652,338.470672 2132.36269,340.794622 C2129.90182,343.118572 2126.96568,344.280547 2123.54722,344.280547 L2098.80825,344.280547 C2095.21376,344.280547 2092.25297,343.118572 2089.9294,340.794622 C2087.60584,338.470672 2086.44405,335.509396 2086.44405,331.914315 L2086.44405,298.75225 L1992.8993,298.75225 L1984.08382,331.914315 C1983.20368,335.509396 1981.23217,338.470672 1978.16576,340.794622 C1975.09232,343.118572 1971.84988,344.280547 1968.4279,344.280547 L1942.50955,344.280547 C1939.08757,344.280547 1936.63374,343.294629 1935.14102,341.322792 C1933.6483,339.347435 1932.92659,337.615036 1932.97236,336.122074 C1933.0146,334.632633 1933.16951,333.315728 1933.43355,332.174879 L1933.43355,332.174879 Z" id="Fill-16" fill="#181818"></path>
+            <path d="M2223.2702,238.090459 L2279.31748,238.090459 C2288.35124,238.090459 2296.31122,236.29468 2303.19743,232.696078 C2310.08012,229.097476 2313.52675,223.350981 2313.52675,215.456593 C2313.52675,207.562204 2310.08012,201.815709 2303.19743,198.217108 C2296.31122,194.622027 2288.35124,192.826247 2279.31748,192.826247 L2223.2702,192.826247 L2223.2702,238.090459 Z M2369.57403,338.622433 C2369.57403,342.397091 2367.33848,344.280899 2362.86033,344.280899 L2331.28796,344.280899 C2327.95047,344.280899 2324.28909,343.076671 2320.30382,340.661171 C2316.31151,338.252713 2313.26271,335.333691 2311.15741,331.914667 L2288.79131,296.911048 C2279.58152,282.523683 2268.44248,275.330001 2255.37417,275.330001 L2223.2702,275.330001 L2223.2702,331.914667 C2223.2702,335.333691 2222.06264,338.252713 2219.65458,340.661171 C2217.23948,343.076671 2214.32446,344.280899 2210.90247,344.280899 L2186.17055,344.280899 C2182.74857,344.280899 2179.8089,343.076671 2177.35508,340.661171 C2174.89773,338.252713 2173.66905,335.333691 2173.66905,331.914667 L2173.66905,168.086741 C2173.66905,164.664196 2174.85548,161.727568 2177.22481,159.269815 C2179.59063,156.812061 2182.48453,155.583185 2185.90651,155.583185 L2294.44884,155.583185 C2314.53363,155.583185 2331.0028,160.981087 2343.85284,171.76985 C2356.69935,182.558613 2363.12789,197.122034 2363.12789,215.456593 C2363.12789,240.984834 2346.59183,256.995442 2313.52675,263.484897 C2318.78998,265.418001 2323.65891,268.731391 2328.13002,273.421545 C2332.60465,278.11522 2337.73411,284.935662 2343.5219,293.88287 L2367.46874,331.914667 C2368.86992,334.3689 2369.57403,336.608343 2369.57403,338.622433 L2369.57403,338.622433 Z" id="Fill-18" fill="#82B92E"></path>
+            <path d="M2405.03275,322.042456 C2388.76072,306.514244 2380.62471,282.503613 2380.62471,250 C2380.62471,217.496387 2388.76072,193.461108 2405.03275,177.890642 C2421.30124,162.316654 2445.70927,154.531421 2478.24979,154.531421 L2507.59013,154.531421 C2527.49888,154.531421 2545.1052,159.707492 2560.41258,170.059634 C2575.71645,180.411776 2583.37014,194.58083 2583.37014,212.563275 C2583.37014,217.739346 2581.83518,221.443582 2578.76877,223.679503 C2575.69533,225.918946 2572.71341,227.038668 2569.81951,227.038668 L2554.16359,227.038668 C2546.09095,227.038668 2539.82084,222.211189 2535.34973,212.563275 C2528.85782,198.70056 2518.06731,191.770963 2502.98172,191.770963 L2479.56648,191.770963 C2460.35832,191.770963 2447.33225,195.894214 2440.48829,204.140716 C2433.64784,212.387218 2430.22586,227.651345 2430.22586,249.933098 C2430.22586,272.218372 2433.64784,287.500106 2440.48829,295.792383 C2447.33225,304.081138 2460.35832,308.225516 2479.56648,308.225516 L2505.74535,308.225516 C2520.83447,308.225516 2531.57569,301.295919 2537.98311,287.436725 C2542.45422,277.697261 2548.7701,272.827529 2556.92723,272.827529 L2572.58315,272.827529 C2576.70573,272.827529 2579.96928,274.362745 2582.38439,277.436697 C2584.79597,280.507128 2586,283.838123 2586,287.436725 C2586,305.41917 2578.37095,319.563576 2563.10933,329.873464 C2547.84771,340.179831 2530.259,345.334776 2510.35024,345.334776 L2478.24979,345.334776 C2445.70927,345.334776 2421.30124,337.570669 2405.03275,322.042456" id="Fill-20" fill="#82B92E"></path>
+        </g>
+    </g>
+</svg>
\ No newline at end of file
diff --git a/pandora_console/include/ehorus/images/Pandora RC@2x.png b/pandora_console/include/ehorus/images/Pandora RC@2x.png
new file mode 100644
index 0000000000000000000000000000000000000000..b979f96270507f6c24ad31354d9ab169b8895308
GIT binary patch
literal 308532
zcmZ5|1y~$Qur9kS?m>f-;4Z=4-Q6L<9kNJp3GN;sxVyWD1Sb&O-Q8Utx#z&S_wmiL
z1Jl!8)m3fv|J}g~a^gtvxbP4V5J-{|B1#Yt7#|=YAh%(mAs_(PB3cj64?w1ZvVss0
zm5~VdhEUIcTN!Ien#jsRP(R<pLVy6c5P$y*c>eGK@Luo50F)4r|MPz!1Vo@Y1nA#1
za?js?f1;j0f8Y7%8<+unNrCYp1M=k_a{F)6X%yRo=Px)r3C+(C5Lje?KLAN3(qjk+
z0SHMEK@}Ikek$BI0@22+z3(iseee>*0&GCTVDH$k6~e><%=VC&qOBnz1F9o5)QO_R
z=%2_%*c5dHb<oPwe?mdEvd0R%yTj@Q0S$+~T3HzmaSd=TX-jhLaE>kH7c~_%HQn(K
zvkY_U4m95v$z9FaI;&%AL_C@d^Sgg^cD~`)$Yf5MCzN{9jh8Z}`}AvWPs)EuhwG-2
z;`3L?GG7Q-?|&`<2B5zl85O;mIe{BGlv_H}icqBjhqIRQ+y%LjF!@U|2-pT8;)%|c
z!N%}-QbD=&Cen%f7$cYkVhG?rm(3dqRXdi?i_?+S4jc0HS@V{59_i)yl?7v>a|Y=D
zWfSy9Le%aXI6wg-ZwmRXXe5YF5CSCdKi8;O$ILRLHNdd9gCSesWP!wy5*mOC@$a<-
z%Ylt=LQ1*MI?_viDdY=$eF6i=fsSv&N?Ahq85BGrQi1fZNW{x;e17_MwSfE|1sN)Y
zoX^JVxV+xB`Mv7yjR1OsfULdA_B+ebjQ%q~NQvzOd#WNehDluPC`#+AZo~?*#L>%)
zkuyImjvuXcEH1}7oL@@!A%)XGLf%0lj~v63L6#mhRCi>@km{nhakUCBzU-ubP3MkU
zfrbB0o02UvN)%)5tJ-VsCa@ZC$Y?nINQ6KUPCc_%=`$j||18^?>`mvEC~=CUH{L{#
zx641IVSjJguDy3blz*)^9byAo4v{*>$73vbf21K<YsfWeU(idz094fX2BaJ!29(hH
zHJJ1)p)o?-FVB1$Ks7Ldu!w8Ol6GF8piUhH_?NoNNc5guM)k>D>?}+OfT&D{t$QsG
zj6U+L3FA2Lht5+}V(8C;R4?ZBCIo8vK38}^&(Rf>Q@_tr5b4vr<y8eg-)(I#n>`I0
zaW`4e<E!R|ppP(tnuv%ya4U>@{Tt^_I2&z(1Zc$2ih^%nvJ}t(R{D08fC9*UI}3dN
zU{IE2LD-AL5sv%(XGU5dt{G&#y8{Frx0J%W8UoZ?z?Y^^(7|0hyc0DTA2U}I!;fAI
zB}NVOcGzSL*A!-;422vNS>h0UN6(OggVqcB$J2c7-zdN%k7407;bPq8697f{k=$Wk
z{7@pq8*KM2uY(auFw<+fyy=XiF4xkpUE-RXIp{~h2<pGCEI{llz?4;{t}1Q07Nh5n
zjCGvBXzfGN<MM~<ic<oe{8jk%U~iSpk&6;TT*x08eR;0IZ)duQlPMuz%8Mc)#>a2M
z$1x$JJcpKJ<ye0}BX-3&fqONRkboH#9=w{#XcZOpY51i%*R_z-d7J6m3BbyKDo0TO
zg_4A^s{_hR5Y~(yz_L6>D2~xz@&EOMULv35&P+?6OliTD)&Z|yhwhi+zlU(OaPCZ2
z&);q#`U$>f^&1_vsboI{n;sOvoYd)e$rJ4H@xE?ZF;8D-5sU!QJ{hshNH1~zZ+-dT
zzX=+|Z;D~%u~^Ta9%sU)VB@)}e~K9L+MG?kwS+29T}YY6bjDX!jwpj}XekLLU4QA8
zJYhM~IZH6@lJKdct<u9hE^<A!r}QzREk_x8|LYZe7=fA3id6+L`>22Oqu!|XWhZc&
z7|s0X>`2sfWd}LKRnde$_bNRx>T?$}m>B^<JGfJETHq~P&#R*s*T#rv+`qHf1z<k-
zgY{xS2oR7ZP|^g6pXrgyX(TPSBtk|dDvz78#EDkQ*-<<9;N!~ij`A#_@@}Zy-~205
zJC0YnQ1%ZGAIVa|X*eMNG8G;zTCDa4*Nfd>f){^HDuDvX_Z1%V(HN=t3T4V>4OdOl
zs~69#PAD_ucGOy0o+AfS(q5+9e3?x>AG2LO%y*|F2D79|4sJgmmG)`BqSQ4SZZ#UV
zSG2x&q~^MR5N$&t;5u*b-#Crznk||&aPS=Ex&K_Ka@${|TC9gsJr{ramc<04y#4Xk
zCiU`sZ_4&)V<54;MA@X4Ho3TbL}#J8X}+5c>Q}m6waL)a^a!Rp%!4O#-qP@}#BVBl
zW7VttFP^*yw!@|L<+Z6QLLvLQvOTvewfohYUKjJ-fD|0<a$(c&pS+ek-v#?ry$!S9
zeg~K-Scv?X&bcZ^@JU5EAc&XM|Lcb!7C|8qDeM%UV<|jg0u@MDOkF__u`nEa4O7#t
zH9<%60i*i}787Pyqx<+u$#LkI#$+oT>Q8~c>o7Fj(}AG~;QqLHQ9u_CJWg87LH=kO
za&LMj#HvYro1ur%rsy}sg^jE;`Fg$fmYjy5ThE*M?yhaxpSPYP!v(i)x`juCiE^H1
zx{i&72T7lM9+N6V;z0p2v?Dany&?_|lnhKc&7#Y<h4bS?-*`*P_#_P6@e9=Gapa;v
zG!i^;23I<=3O{V&q~1OdA)0{Q*f1@NcJLbqgvfbsf8q*7k-k`7Nh|e%=z&_a?n0ou
zS784eH#6D5^0IJ!)=va{Y6D@jc}s^Tw+Cz@wM@DcyPw~j1QZ-WskzjCv6w^sb6Ir|
zbFNEDD8a+=fdG61vtPs=X{z0{YHT@-?@WisvaZsuVZBtH%nSC|8iG*(o91y%(=(x-
zs3x|)YZ6K7pCv8QRx2xLwVw-~EzjEWhD0{gX!m@0t{muFe9<<(66&dmlj75SAwI0)
z{u-O6pMvLXzNC<(ir4Ra;tFUNf0LzWyYDe+YHvn7eG7}VpPNNQ{IZP6&ba>gThsk<
zQhL;x&rMh7%I%`QFFWz{JN7XFO{)D^DWU6AgHEE;tZS>^hgguz5CQ#EW=GU}cS@M{
zXkSSp*?u<8o-yJSn9p>d@wR@|IzEqNa*06UL-{yfUf(YGy)<-eZ!@nHpQzxl`R87z
zl~qEg<<>Tf9-)@y7n#Ky*tZFOVqmJg^53Z?a+>D9P@qr5<tT(xt5)46m3;^5E^1Uf
zr0XL|k5CtwCt3$=<XvMNP6sE&Hr6{Q*KBiF*GGNk>om`LJepk3T|t2p@p*N!Py&LN
z$*_nIt~T0S!rLoYUPSKBDG&!%N0F8!PSf0QZ$eF-ZB|m?0etD#%CpoSt$gO+V$Cc5
ztQFoC4v4qapw3jNOdy}fk}4Q_Q28~a8<qF&e=ng`J{VZoNHHDex2Vu>yI3AkGib<M
zb1W9bLlJU>%BsV;p#ZjB5u@%wO*c6`^3qCObpv+TmXP*tPI<cmkd%{C%#&lyt5h9L
zM(AjtR1Wqo_I7t&yYC|8xj~eE*S=wSA9O4Cb{FrHm+A>RGm$8)pm^)~Z*-jwe#Aa_
zYTdQb352zOPlr=8n)@{=kfRg53kY$#rK56Q2)Zfa3CD^3m{|i`3sy^+cHVYKN?5pI
zc+8L);pe?6x8{r}8OCn%-*~X^Cf##itzcSE|Da}(#C<3<R=1sSbTu@~YKPt_hx%>r
z(Bh-5EnCy1Mbs>zF<t4JhHfQFvr*M4qzmu*&TIz3C?@Hil<p~UK0DwePpLDN6bAtQ
zJ43#)A3bEa3&_Qw!;b}y>f(*H8!P67=%+jN-IgwT5M!&tC1u7^SLjbGqevkiq}?m*
z*<sikkyuhV6^$Eeg4>-O%ilFrq5OjB(SCexonM)B2~uY#sTWR!FU7;S@J|OCj826y
zXp{7vcKW#^jR|z|9*WSP2-zto9Sdh6(Jr=|ro^uD_XUN{4O9kxKU~h)mdmEFwW<{B
zs<ejDt(%sxt{H*9u#NeAWFw%YKdBSt6Fu*ZND9(h6ccg&Myr`3;+PbJw+RzIgY>~f
zAGsKt)+^<Hu2xN3bLsw6<mToM<iT$37vdh?<`M7yXdbon&Y0S%;CiqASAd+d^vpJo
z=da)|W=KDuvRP4=wzhVk2*sVcyak(e+<&y*YrNTGh(P*&7BSFYSrW9};`S7+2J9lb
zzr)x93P*@K+hP0Qs;Yvn_nNLF6pT$Z$fUr^=1hiM@4uV=5mVF;s|j^8VEGtloEb-V
z8xruPF;ueJ@wa$tmCS9)yA=1kw^xymB`u16?XwEM<Q4<xk~S)%Hhw@7PZ(7HpgxM9
zP%rk#?3lE71A_u|5{qopQne{?b@853)idtSEGg#mw2c_Pc-b_2mo9zWsGpIpmk|68
z!DO?k__K|t#@;bs;%JUQzEen<u)E{Te!VyP&TZ-Jv2TlPp~pEK9tOVVC}=kyHz?)0
zw4h(*f+Qp~nClkl$WX|pR%XIkulTflGX2*<gP;m)Y(nFw=Ar=$Yi07&%*{Nq*)0Y9
zr8?+9u=Ra)ZJ2stJ=%0jr8$|~?#A?<a!~`t1cjV8Wp07krz+uH^J3gpCDqa@KMY=u
z;JRYyy1!%Xgt6w*;r6x*-yUE8wfK?hCVN@&J-vMNpZB9`8|?4iCDt=hX^%t49;n=B
zKXlv5%>Fbko;IE(pIXO8$d%uz3a$zv)6@h9-<r+vWgVzO{w(dxEO?XT#0C_$8J0hM
z%m~vAuG77{R3dx0U%}G#0+)|@HW>-Z@c_RpnioTlodh+{rELB%b1wBWhKBoYt-vON
z@aEg(`7{w!iiK?+Zi_j4j#NhU-)>@Cimfcfe0!6DNP(Nv{-AJ60Y(u3B+if#*f8=T
zw7D^j5~B8cU%*o&BkC2`lEH;Zz!5zy7Q+FCW(ucPULhbuar^_)+GO>lXcA?vr3MsS
zE+5ARK23*QnIj<bQkvJ!Rr5op-|zhR`BYUmmWOxR{tf{X#zXUC>)cqpcgMwPfqVU8
zsp2Xw;CA6$!=)j>V=^JF*bt^j7*?g<N=!m^^%s;{i)1(KLFbB(+jq)r{X*+m$daQW
zex*KJaEQFOZ&i9v;;1sv7r%Qu;9mbc=Up9?)5q^4)G45C=W0_nUg<=2`vi~RH7eeq
zj}$3lVr=rd_nd7qa&&I3wAqs^Xn2XSV}v-TK0DL{?G@hDL%v6~<m9_!(%z=RX#2nL
z+H-I&59aFic?N#DQEX&4_*>BFrrdq6PNvv44u#+ia!8}o)fv7tcKEvKUpJT;-Z4Th
zGS-B;okYH0=H3)nGpoDzQM*n|&DRn}Rr9WTq^-5p<1^O1L_f^f=jodJoCdPedSjb4
z=J*m4I{u5&9BcN{cALxlE(#|{X@-HZt}^>BzVT0U<Iq5AWuvqA&Uf0%HJt7p0GJOY
z`t5pBgt}6=^b;ha;Z)j8G8+Qjcf@1SSv~=U_l{9C+l#-WizuN{2zi1wTP&Q<Lj^k!
zVBar^W0R!onO=1T?aHW3I65ajy)UE4C*Wc!3rc>d#=+6!^8z+oon|GsW&7{}?e+83
zt>K^odK**(R|M0fyfw(6Q-}@1yd!QTeGF;u66kfQoz<u^WlsgM;rja6E_|CvODQo!
z)?&wPrJbX(tiHbyPYNICyHD-Yyr)TAGq$Sk1@UbpdPhJy5$-5LOWzf@=&W&AO;?=L
zn$bWEgA?#knqU!qKgJFuV{JVf|30lNGbC&}SD8@pfO?`l+cI0l?E^GG9d0E2sZryr
z&c$*dgreuB611h4S2@~yG0LN{2M3*7y@PD&y1v<WcXJ)KLJ1X(my5A2n;#n9H%c(L
zCFp64v9zlcT(#le4X$n&@t5fH9ZNoux8adyRK?~x6Gg(Z1T(WOAr>Rh<l{Zfb?sKE
z(Yv7zCO_5PXG#b0Uaq8`n@ZQy@oqS9qVuh=8(Ma6PjvbH;DHMGt{45gce2Q!#-5XN
z&xd5I?eZXB<v2T%6cFDLRh;2WR1U8!+MY`Ebs|$I)q7W?&{D=@IRAlA0phgCiyL8S
zXJ=$<bRPx<-Wn?4=k9{J$wtgU&E~+<IvwTt^%z&+uerB0ktgsXe8aqtw(o{Uph0ga
z7{S{kD2kISlRuIA3IX@t1#k8h)3*wa0Gz+bH`o^Rof1_7G1&gjuUl%8WCdq&s+z@@
z>GvRYQ@=@2WGXF4Y%v!io6Uy`=s^nc2XU$C-_Yr5v~}of?A;MUy3VgE6*nq*5LN|9
z8H`ZHK(uqFJLNs?v1WCQ+)+PBa$hBlrdog%;Nr4G`UyF*jFO6!5mCics$d)hJBWSg
zlaFQ(>$8^X!OP`tM4zJKm9x-LFYzOqcJgcJa(lYm63AN|uMpTttpMW`lElA%%bHe*
zm@a2BC{p01%f=`Yg3rEmKo0O+!xOOxXG9FoH8nLo7OR!c#=R|fSPrU}LH7M=?WYU2
zAH?RnV!<BrmA!d)?1Ou_8e@ti@MtkX9BG4aU8axRmO>)%J(B%BXSz~zQxn^$YS^W_
zYr0K&D>2i8-p~59Lr(A>N@DB+Ze)v=aOYtA>25PsJ5`DUGr<S!-roE<V4m{b2x3`S
z$%mToSk}ljBKx+$TkXD4@{R2D$lgA9s6pi*>EibELFcBBN`^j;$TER@iM;fw1m6Kp
zuJW%g4rBLJ$rG05*0f`#$^B<ZFhN;OtH(JmTlTIESG@K{y_cA9o{dLxCdkIAqHd@o
zk^<`;nacWlMt_X!{HfcTP-P0H!})f|1q2s(+8BbW`7@SJxm4jXa6DydZ5QuY+3BcG
zAxz6VFCbMkgFuQ!Rjr;Mx&yx~S-XeaeyDcb*OclsbZ+blBI?D(?S#*K0}??7!K#sZ
ztFdCPXipgLk<;ym!KeT`Mue5OpfJv|w1xVW)n)cLk~x<pq7+i=b)YV>-(;||KlG!8
zvUT@Cgg`5&%{cn6!Yw*a@#VS~s(6-T;QvnZ%CYn`T})GF=SlxU6zjzJ8$fJ6r=0iX
zsp)2}yQNb8nPRnE3RQ5XlnACTukk)O<FtSo^Fi^{cUJ{GqQr|NSY?&?Ylgqz+Ip^?
zb}tm2xZkd^#{8s}`QXbO%@L<(lob))LA<XpdH{(fj_k#)+i;K#vEH5YN#2cFpYyG~
z)BR0G&am`HkMDfuGg0eO$Bdu45ltiD=p(GYKY&_^Tq_FX%LZW--Nr`bSOwzx8>qae
zt5#C$F`FbE6;BNJA~G~+-F2nVaV_5)tjV%?e%gUKHGFbPYkyBEV{^WSZxmZS8@7q#
z(~-nVyIZEXRD658SDtt{CM_W$h{!KYO0HbO<=oudtS{aD(d+_Nq2qJYmF}i8c>{F?
zuvJ6kP+qL<yHU4iwSkiU3}4H`WPW_Utoa?>TWpsvLZSs$L`F!)!I`b_J^=v%nKWu8
z3a+|2`SKeO`L2v7U@?zT^ziDPyiMt>*^J-1K<cx;vw+Qs^wuN6bd`3;q1KG10%n`o
zL(byed>ihp`-H-5H(v44E^>zc^A&5^iVcUIw!tCrO)Jrp&8ocPz0C9*@y(h-X`5^f
ziin_OkCgnn)Vw$QCwxUSLzLNSPAz3Mi+P`=XGA!YYMXdrLKZ%y*DudZKnhK6>W@Ai
z+yCwt6c5NHPiKhxLp7H$=kl9#D{h;)`j#f3j%H%LyaYjPZmczprjH?;%jjzgBBJrW
zgs?WDcOyp2O_F`H*+VMbka8lW@m-PeO}%m3XR-dy6-Q^*O55)REue8^?gt-~_Mf{;
zi+`Sn{NJ31<!>(#ZN7lE!w3fyT^NCUV>rZ3sQak(mO#5p>X5EP{g0b~k)Ofndz*tv
z?>!nh=_zd77y|LB6^sWOMQ*SXQ-p)&S#vw|j4;`hCI#RZ>lBt%&Hz*s5OH(Dwxc$%
zuzCYv+8d%GPtN(xexI7U>`~)0;-qJp=2G5UA&!!2BqTzd;86raO{y;x9xXoHDxFYv
z8VXcH0Pl|4pUUvqZ4e9K7_wMy+rLg_L4(%eM4+%pM)~A6`laXQJ+2mXc_hvsw}~Cm
zhxUfQ%-zTCdI=HfpC$gf_Y@y|RBJ*HRck8EmQ>R$g-}!@oE<>>wpe4d<P9MsB0&@_
z)*|~n?-dY_-ki|{Y|Mr>Ea+@UP>i(z50c-3ZmYjO!m!*gy>H5IvPcYQ{kp$2S}RzP
zDv>Qs&fuw$Lof?M&*(TFTE>m*CdokE|EZX`+eTedFpQrnHzv4S&C_u56ziVqL-Ia_
zVy|W<jut*9KRJeuB(Yr-)++|2@`><QhSF%$ddd+jax8mpJ`|6@phXnrZX&<Sp(Knp
zaTFbpT2Q_YcKnhYIh(`7Qai6+G}&q+t$238&yrwW!YdS+Gm1nm!+5bl@?EJaqypLu
z`Rw&UI3|8KoSw*C2(%KpKvGl^tCtL8e~8S4pP1TxAki)C_BUxRqwO<F4JBMF#5$eQ
zIN;CSfio?j7^~&!)Bq7;pNl?KB6d)n`UDBJzIw9-w;L$%{q4TZzT&kOvJRh@kQq9m
z!oyaj7ksI_w7-l2B`#0stsd`j*29Pm9zctEQ>lVcn%LIIhf+3Gr*0s|vq5BhlH&k;
z`?d!;zKzN1sWgP|{ExW6#WdyTFG+ip7sW(H!xpVEzBuQw$oyWXKZaaYp`{Vv-TODn
zdMV<s2tSZdBqkXHyOwy)XAJBpWy2sAOdY>`?0=6jhIG=cJ{74@-ddzW9X>+;As6_i
z1MU4b>_xKCWKtAfQH7X46~AS{gkEX?hu<3;OrN^PEuBUD1hkHuh5f$C1UKye6t(p8
ztsqTZzx+Bg{+>gHiJ5XlIeP7)kSr2Lli4SMg1t{((@ni~CLyPBq|^t3uA#LZnu%3(
z#MM%L+$v|p+xNGLzfEOxiC(L#suc+pmOv<td@UxeJ#UV!fKtQm?rww{QbCcGo_;Ms
zqa@$a+ZkdpGOrkJG3T8!1Z?{Km_wt?u26=y>i{U$S(UF)615n;Mku_Rih!i4?sL;Z
zg=C$9tq#W=BZ34ZPYWn-{ICKUG|fE0z`k~)Q@@fj%KC&{I4=uXU&cGfgwQmCvELKh
zQcp#Ee~dTMl`oI+qaWA1EYC5rD<KtXk+Q75@F)3I7U*zIKVm}_@|V`p{AN2z6K!Eo
zju-UlVR|0^T@`ZpThA`n;&vqV+c1-u&`!i_!?#_E`>$@3j@7%J&~JH{TIAolxeyJL
zCwb}-$>;CLE7t{g<K0)$4!0$pSLfDN%2+}{cZ(XjI^ye#zWq8wtVRFHk{E<3EDQRa
z#mtF=E*MXFoZ-Y==k_3bL(D?Lqb=ipiak6=lMiH3!cgFq2Z((vx5Kz_-X6)EQW#N!
zw~$X1d6EG12@5*1_4n4jHJU3EY@*b7P*Z4>cnf90k7$0y*!LhTky^J3`_Kwj$Z#bx
zCW@atf6r?g)q(B?r%IV&KP~jx6=~*-c;?L8H%O#ef%ur`Z3fw$EPmYxPc*l*+Id>{
zF^r+^+CB6Sqe<%grFH)g*zb;5i|az&IegbWxn!Ii?<$<g`vXyk_`>9J=wYK<eXS7Y
z)W3pf)OhwHD#hcQsh`ls3lyjyo4=f{YWwZVBq-uza3wbAB~J}(b9nht;c0C~=qek=
zd&F&w2`#zvicdWHbdo?(9el{l{Tc!-Tm={r6eh2f4{Mg2Zcib+0cxMzzFWC$!V7UI
zn4}rVZStC~qwz8P=0W)!ftSDr5Vnl?oS=iV*kkx^N+oG_&KSTB&bCcFKDEy=YeNvw
zPk2#-&5gro#AlzTN30DdO_%S;POS_aIP*rc><#!~^)a$Cap?=2Qdva*X5KGSatvcx
z%silQ8BV96?7i6w_(#0_KI8tDCq1lGUmp$jhYF-{nKz6=6<{^7*mq*@=nmG+@d05X
zkH&gn_D$YTBLfN3GxdNSQO*~T2Lcv^79```XM(a9;xSDY+qE>3M}s<w`Arq_%TB8C
z{zW(qC5(oV8#0gg0h2-dF8OR7k-i&u^M(D!-GTqUz@!2!I_@i`at&)XfbWo`yK$Tw
z4u%TQK}nndAN%ibdt9^yCYR^-KFL1q7@?V1`e2qUb>NvG^uHooqr$|@pL-Xgh6qpj
z1e17`0g6%dHh!UAmP?)?52rrzT1-fq!ZhD9LI0uz%;Ex;n~ZQ=dLuioQQI@-e$fNv
zJC!T^;D1pJ2-pJjf+WuMtThu9YiO}V8P6cBG#dqqtj2uVCEl@U)^mwv^cTcIAi-O~
z&ShYf<&IYS;v7qJMURak7$SIXcPFuy+vbkukR!m+$u@*WtdJilOlGwWdclAyQoTov
zHzJ9+^8Km;3;i}xq-0@2Jar2pq5NJo6ENTgWDaJEOK+T3O-<Df%gbML&Uqc%OPMS@
zt~<|sDt;^)pE9B_LXsWzw|aqvU;u^76&t_bBbR}lXa``D!C!(q7<Jd6EdR~6Llt=6
z`t66;P(IITjoqgYHDVbG2AG!p8L%%p5s!g#e1+wJZ>g^~g+GtI*|7%?BWS!zz6=Bu
z4)lBaRfC^0m&$8A#4FP3(EMJ2*JU=qMwqfkp<&Hjneh@AC}4)@lMC#>TGzo*!UR57
z=rxoYC3uDn=e7>5fF>Rp3gHFY1fY({3fxpxnZnXDxRF|UVzJ4k&$4yoiERU4z_nf&
zpXpALp05yp4vjiDjG9|Ak^U9@R7619uGfb|poYa76=!w@k?vm%DM}qU>nn_m3dou<
z|JpG^t1s~i4I0Q;KELu#-~&r3Do*kWeBmqX#0y8sUplWm_?r&I#I0#|qh^rOse&L0
z3wRL(l{kZ!W1XuWngyy(Pk=vJ1eG#=w_DCuYm^}iuIL|h{O@l88o)tf{KMqJaqrhh
zhVs4nWri+iCSWgCh`kWatKzMoFzCRv!UmK-?@2C$I~2muwO-rCHiZEh$GXXT0Sr7I
zP{4Df2L8oV9f$zSP7?Mf@!_`el_6|3TedZ+rrdXwGFR7~t}h+|4=C=;ghA32iTqh7
z4+`M@Vu0}SJ~1aS7!;V+`~~F=8ip$iApKSSGE~N@xbT9{JRH;*)9<qmsz=KdO1MEj
zhH7Hyo-cS`9V}@w=Xv&^C|0F{i=C_T9Fu4J3BgO|5Fnj*%QAM`f_)#OGz|RtKge5i
z51gU>R|fGiHDJqE7-hWVW{pqxkbY_3I{&1)v9MHPYKX?XhJfuA^<R(muI|kA;uuYk
z{rT|q@lV%(Q2qzBXKuna%&tX7koO3`)HU);3yV?%79t=&WN2&kJhmwnk~%QxS1R0&
z*W~p)Zr8&s{nyHf4?s!;_|ToU&udL}YMFZd0ZNwZLt>Br09^<lTC@=Y5ze8!T*rBK
zoZ|0tGu^_yBP8eT0h5~UH9tb?Wo@<YrSroB?O!X9*x;MMbEg}7^={QusEY+{^|in^
z6j8GsQHLxoY0O^wk|D%&vMlil1?I9+{OA8sJiKjyh46^7CZIK6Q86ZZ!54J)d4x#z
zKJ&>O=rkBvRwTEFGJYctHIa$<zbc)4*~;Ksoj0RdRJ15!mM`<GkEz3PVB*vb5<FEt
z137Edw5rXh#6>Z}{I3a8K;K~zO^2*`N(ZO;t+>*@(u0B|6$0g66DR_MVFEN8jA-HK
zECV6_y!VlReUu1GiiNYuL|j7X0t))ygpMduz@Crcz<i}8bxD<cj9hb0%3`ZKX{*}}
zTB4QjOB;m%-jEuwGKwTHy2p^X;rxbXeXU8SXRgJwRF?N<jf0O?J-O!=f_C2)EB!Y9
zO%VkJ?1mIJg4@W41B!ex*?tbj{xim*rhEVCKo!iqg&^TjF%3+6&CvoB1{DAcKLP!7
z386DH9r{0d$v5&0UdEP{Xt;~#mb%Yq?V`8-o?~!8qU%Lbi8KMle7Ne(2!1rdOu4Ku
zlCz>jik#P``t_M+firshm7lu$&?~T5D4ZGq3M^V5L3y!{K!A6GbRUa$k4La-KYKr=
znD!T7LkaCLBJXRD@e}SRGGcqZ!F<8*h*Jmq_#La6a!+-qOU3q2Ziv$iqdx!6A+ny?
z8PsU_-I;-HubL@7voiuTn+Lx<(+Mi`{20PMlIva#79-506W#@Y+bfV^k-K^`@L!}M
zM)uM0F~suyA(YvXC##7cn5nXqxTx7})AEF_<l&3^p5uQzkPina4zlY5jDPdxLQ1Oh
z>O9AM&AGKX0iHCnZ<ogP$lI4}GeW$T48BcfR6Muk{)csTG<<S?=!zH0kbnUmV5fu8
zTF@}P>2ZHm`Ow+3<vC)nRC(PwkVpHNe}?=+;MJ|R;Kn&^GqZe%%v*d3>aOlE+~$tD
ztCOhz24~#4HE9Tz=dMt3U)z=r1u>>V4vDtQ;Yt0Zj#BrApduV{BY(rv$cCc7^^3zG
z1Ao}^+4E9<=i2<(U2Ri4`BtW<qE}lIK(;7P7m4(rDcnI{A%*pcw%Sg;j|-yH9e&ee
z`l%2_6{=8QP~VQgyyy!7;sFXJ#^?@V6+tVeozZ(1=}BF>caj<ZZ>E$H+&ChlE+Txp
z$1Y?^+qnFs`r5&f?jw!URy99!8HJQ!W!VRd*}}-uAPYaPSN&08-$ga$$LRLI=^i?S
zLXw!Ta!_~X?kjkE+%w_#_-gl=_o#0L8sg}{WYU!Ah@NLTU#t|mQ0ofM=$wXp(dmAt
z{g@leuRE|%BvE<wRU>Z!YUTh*Q#euI&V{>3BYp0bx(=#8<(^Ze@-m^la2Uk88Z)9z
z2wbldqxCcav+j|2D?=s0m4FDx{aOEf5xJ=6Ii?Cx2xCQg>oTe(9yBrp{Hr;H;5bs4
zTEPA9OH?Y_fdlPnP2cIXzDQG6gvz(3Ur=43l$NV@LM~u0xx_sjt_)9EguIMe&kV8(
zDPqQjcyJwKFzw2~Ub<m>!_lC^b(8gO8MtcZECO~SKRZjo;K|HJ>y(6`iWu_68pL;?
z?*lly$Q>d9jQgjDGvW^k;nUVFL9jb)Jb13Z?Y#`AmaY_c+Oi0!F`b&sv}^tncYG*;
z&vcF}FXabTG;5QVXYR&Qc!4-3thWF>>^VH*GvDknGbU=K&hJNsx814WR`n-wkKY{r
zyfB0vw^uXa*847F4P`l)`_BZBqul!H`*LIMCV2lJ=9W`s5BvkJ@#9DYTworiTc!u1
za#G?f<w}hfv!P^Gb@2~yC0PanF3tiaDZv*d0)n^**;eoH^xorL#;J-kr)Tg5_Ftk~
zJz>o_lFT?}8{CPc{IPX}91@JbGd4l(c`Mkh+=1ibNL^5Bp*h~75KlE4+3my>UYdmH
z8w7~44pJ_K&{tahy-B^+!n-N4K4JX9X(_K^tv{8J^eKEbMtl1T+w(?g<R_5kKJ%H`
zpy@m0_F?bhlk6^Y6^&qKdIVj{51>jroqZd{16y2<)3o6rr36>1Z_eD0UF$fCUn1Zh
zS;5_j4Tl>bCRP@giczRTY^9(|UP$XZ4<jqg=={-ca>#{8CE`1H0*PFCXcdm&%RdL%
z1$ti1hR-ni;o+g@kiN-UbJ&sOFFZwjD<TGKrl^yF;EoYBh;9l$3sjR?G1cZQ@&<JZ
z7Lpb|E`Do5u+c%nOmJU+navRpM$v0+mbxfES#i9sMD`t9Z+}>oytuB1$3sOtje6N1
z5@`{!n8(nt$UVOCsz_!fwW@7T?ihUKVdUsa>m>Hey?6(*8Fl|J&@k@FJT|lN(2(=1
zdj*5GX-!5_3aRRo?-^^X_iY{mD$C{X6HP-;<Ow<x`ydnpJp@rhOGbFCEmBUT-36Pd
z&cIB@X=SiQp9^J-#Pcl55x6aeofP>Ur)i4@s!J#HpJlr>HlD0f{N&-k&tMTZB^)R1
z85*XHvR2HdbDG;<Ly%(cF;7Cd8Y+!1a$ieeE0PgfGWwQyl<85n--i3-G?=nI?7-!n
zr1D0Pb9g-#h8p!kf6@;NewSktYH#k1j<cc(^BMYTsZcDzw^$!7@-3una0A{Aw^`z(
z1Gm^6)+G+Ec$?Vh=hL3KMWjx&ql{{-qIN{$k%YWCCc^&EI(3$xik1Vab-_>-IuSI2
zB!NQ*aA$PUL~A3uD4$G;ZnSC8S5ChKR%@P@-wlg+yWD%~k6V+kOQMc6e$Ks1%iD>g
zSb<J92@((&??G?cL>uZG0QZfCUq1(XkI3&5b`$nuT9EMAT4dA}YRWKHc3ql&>ITvo
z0^$nx8y-Y23ThClti=s*R0^|l)Y1i!+^QG|9|E<8YR1o&OJ!z+V!fImMU)eZ%606{
z?PBq(-f8zlBpAu$vj`iRn=5TEC&f2n_Cz+|7d|<g$&ov72Nx_EEs<d0^U=-ng&%C!
zCAaTYaUXskF&5WbFX)yida!aRt+N+5FdGQ6P5ZDELam(W))lsOJ85l&Qk+1|@2a0m
zG5FrmYG=BJxe7q-j5<=$^>B!6c<sBaFoqw*$zW>6+*N=BkBq`~Hpn6^7Eemcv&mso
zs}~sdl_^Kb!x2Jt0B+{8c0H-&YHrq&KsYu;*0`(4x{d(D_14R2xGpj5=SB6-GQx}>
zjm_oHRTfcDMVH(kgWM4nzIG9t{j27@&vIfr<h=K%GW$kd3(iXmq7JS+I6GGq2urHn
zf6m-~2BBqhb91-Kx^qc&5SejWd@RtM1a>uaDiy$}VoE~!d$Kej**|PN=pO$%Qcr6u
z-f!4po;K-sS%-_QD5vJ}_uncZ8LAGh$v9njXY={+-NBF9k>qq`^P%C%3Rf>qsBms(
z5BsT+F87nzgPT;}A6u>o1_R^(!ede1KLgf(-eM$Z>^vmOdX#JqkWlJ1q(tyj{4`v-
zsbggv-w}yYwD-#)P7*Yxhf?D5?II>xiyLbCG;cp9r|Yhd|Ca4m%$UsRyoZ;ve|yz>
zM|_5Ou4k$(^uFxM8o{IXAUjHtB)rO@B9fbbE#mD^bu(<`NthNszk0b|Ys8#H8=rjo
zU7$>`NXXi?s<qvGWl4g%Wr`epS>)%_!c}gln=bQAD+(LYBFw0X)vXErYJ(qyc-&n2
z7j?R~Di_hKCBbP#_Me)j&Ao=BDu#KW{Ru-Ge2Q$GHp)(0)2zQ-uX78=6J+*?ndHmM
z<E3q0#6Ha1<bxF`i(w8Hh?j??`@21KC*CEeY-o8HZ<gz;>FO>lbF|~N)5fr9sU{RX
zcs}H{yL~Fm692^y58s}Z6^b?MsqBcaa^ASO<r|CL+6`IpG4tAfp{@wpc%E<~qhc0@
zKA-3lWbuG#omYjyyp0&7@Pd!*H)VUs3dTmRe%(6RKri#CPUoQW`o5gf^O_ZYmGv!a
z(^3aUm6hZGK5+0Q1ylEuM0b=Yg_nM<#l&9IO}tdDGI#(isTXGd;Sf4}2W5NG&-tx-
zoDkGlGS)B^7W`5)Yih(E_P}MZML7-e`CfzFZVVFm^oGtWsrSm6tKSv}0TB)35Z{-h
zbA_|#$uXbUU71{fyZf;}70D5NWAL$eqx2&h{$-BkM?wYYJ89n9AnQLz>s=q|Hnjfa
zZa_Kk*45@UW{t~>ChmD`GoLC`vyFaBD<5TG@W^AW9g4e%XRi0LJ=3Z%h&lg^NA4>$
zoNlg+^)zxve`Zd~h(BWL{1z{6t{bi)E}q&+rPgs6kd4WjrOgWH*TPrV4X{SF^YNCl
z!@)FAhQ1TiY*(?0`jbiN6%!UgI!Ap=VZ{vf{?k`HTU)bPa!t3Y#mB>lsZ=)|9kOHE
z=k<?s=3yt7SIkW;&xC+<eL3^#s9ANGS6O{-$*%`;t1vEsz@33RWNm*<9O<~fOHctR
zI7;JlnLDkLic?jt`00kP_g573W6$g_O+4<UsLA|TbLl;o(sH91Cvszg?ckPbWfKRB
z!Q5rk0h?>FV%w#*yKA;m&(iX8uSg{SFZ?7`ozr80NkTYheyS7-50s1$c4kfCMYX+L
zqf~%Q+?n*`JfZ3Vc;O0LMryoGD);Uv7&nS}11u?b)AuK?5qCi6mmlh3?6IP)t*uvI
zJ=J+U7B^o>6Ul<Ui=Crp>A~~R$ER2<t8@VdGVxL^FuTf{bjtQ8oS<3Pqf=rK%HbhI
zFITAS*0Wzp--`7y;t=7v$!f$;p3>?>Z17FPXVv}~&SY#V-y&YHp@CLx8nP22<X`p)
zyj2+a*b}LIL?}-=);GxP7%X>rPp?V#;O#9dU&pX*txN_sf0t3!GI*X>mt8b5X79mE
zz)%#LI*au@1@D|?4meu046%pMgoO_m_6070^djB_vD~DBRUmm>XRD0!G29`2z-Y^N
z5LytoteVBDUJO;PBYfYzr4(?;!+n1M3?0pBrrzMp_IeuAQN~@EK6UowSlbx?(9?q4
zmrt_$8H2v{{j;2;8s>pQe&3~_+w)2p0tHr=mq}#gEg$!DkhV1m=IgGYVJ5GRE1Shf
zeW^M$3=>F49tJ+%73dajPC}vF#Tw{ulN70DoquFZdrStuDdzd*ez5fP{?!>)28Rv5
zlp`>685<&&Hi?n~T3@?aU#m5|$Q#gw-89;4LbyyOL|44o?VOiG!o)gqI65!1zB`D^
zdkjB(auIK>pGnhV4lt25N<s?aYGVH;26F=qH{v1M(;t#wubZ<f=Bn9#e_)L4`sjI1
zEP6;JmWdv{cQ0e*o*x_E@yk_qhn&dEK*~vKebxLv4pF5xDeG!m^$KC0p3!tk4~>Sg
zCYmm;bsd)jA_7bA3(TZ;9p{Ip;g;uF?w!?aI<xNR5pgaIm0gF7LDb#F-jx8*;;hI4
zkjg<|Hhoi!G%%d&QYuJ-Mymq<`|v0ZQW#HgMLT6`-2wQ+994oFz;!*Ocp~V0T=r3T
z@fHjQ|7^>pv>jBr-$(-A@{8sjJ+r9q`f9eUC3{4xJVyAEy$>^@EQ>K{Mz21JYZsQQ
zaWamZ3N_>qEnKu6OO1Pbg8<k-WKV-AM$QY_v(54dKnkOwP%APgGc)CxM~uu}gEfV0
zj90pqPO9W(zVt<4@gvqVje(8a+-=eE%zH#cp&{Nf*RG)0J^nX_wGl$KJKW4fUzBL`
zD(I^s_ve_q9@^8<19V=qiZH?tQLa5SMAej+P1ayZ!UeA>t2sj4^rI*_%d?xE{PfLR
z=BLCd&hM8#xgL}CRNalEHALsl++#J!syCxPE4|JHWkm=NK-j@#_6XUODvk_jQECun
z!Lq!@tj63{Y}Ms2I3;7p#?drjs&nym>eO-+R=(UjMxN<S_e{u-CW#adBseNJt)k)l
z#&Ow2EXt;|EZ>BLo^uYh<*}F_;xR@rr!fC+I*YNrSXp>2ZyN4WAp)f%K;&5gHk5&s
z5k`YGBU>K&OaOS-*CbGEkBTMf&EPM5_dr9XeSOdyz*zu3B<$jW^5^`fU+5UktlN`6
zc^!sxNMOXWiag(o29W)XEsw38#u8W1sPU!rr_hSzz$UITMJm$=6F88c_j`~<>cN;?
z`+iViA(JqxWiLuaZTEXtR74!EXZLqq9TTpi-Xj#kpUntlPX;Hy=Sp9NcK+7PC2pNU
z8$HlEMf<Iyr#s@e`kL9_=ovdZU9{BqKX<Vxs>sx9I5dB*PH)!oz|M)<*-ducN)h64
zV~T-Rh8(|&v1Jg;;|i#r1Ex|RhIN&>U{fiU!DVUmSj!~iBIn+;q_lqF0muZ@9&nZ`
zKm2vM6rv8_a;=ZYR35e6Nwu^3V)>`5OP2+^^6B63AE48##S^hNs7$16dH&sL!%8?G
z1d2BNzKvY|LmpcO7e_6<`!r$lB!3DXzEPj2flkTD#T7SoFk~qE3bpxTW8;}M9lbu=
z%^xx?kg)>ng1!SM!B@}kf>TNdN_xm;=gWOpF}ReY)*F&5blP<-QE`z)uIA}>s^4RA
zliNoTPL<L(iY~L3<bXUJv>4-Q4f<0jO(*J;L*KbCOH(J4AJhuLPr53?_Os(;^}%dx
zGxX&%KjaA>Sz<Lvw4)%FPR2a^lRUJPQ2kC!ieRQoU;^VR@yzl0Fn+$v;BuDS;e!tm
zr#cr*gaCpiua#9w&L8d15(8+OLElPRB_>hw>B%hf0Y1bEDFT`%f$0|zxol<EbVe>c
zQwhj$ah2L6mgX2eZ643n#?*B_uNJLO9nVKH@XP3qa#PV&)jcvMkc$%-$9bQi6Pa2{
zReZJoyL8)@I<cIg-O{%|Sh$9S$ubod@hq7RgP@r^{UO>+xdxq7U<&*9GWVBT=gV3V
z-?9wNez<S2xU+L}?8OF5h6we3>t*VdrWd;t^#$iF^Wr-z)gG5Krm=?2#C*QqQX_S;
zIvd`wm6gR!?2b}P7R1>qY}&oXG`#VHkeqn7{L%J&;nw_|dbG>U&Nt<w+i8|;?E-?!
z+n}&pxSfY4s@6Q@^}PLy_0tTV(mFT3pATVc{HfFTtYwcCk495kxJ1^Ph)pt&%Kbse
zuw#jJ4j+}3-g0Zf=avVRQ&-&_Ns81-rTkre=8Kl87o9tnqM#tF0?8J|c`Hg}JLB9j
z^&4xYd<?DGe`&9CYP&3_Q3U&qjyMb+`{Chyewsm#<>o}f$rXuW==K$&62`ZZNrdb9
z1E5eZf5<HP(~3cikL}E{?KvGe8Pn+{PAv%Cmuusi0JrKuNm*iSVbD5o2T-kRYJdg`
zXDR}hQoPn5pAnIU%`RnoU-?7tG6)q`%5^p?Bt%t$6(IQ0<77K!rks#RI$y%n_&JR6
zJ<6I3a_cW{BrHLN3-xB1`=SFLgBmSk;H&jdl|tK?)YU;q0$Z*sOvW#sMcZe$<eYM4
zyLpJaC+9h5t+)rx%Go7@p-SP-T+Q`7@^&ID)x`w|c9`Et01NNbj8L$s{VV3sZb#cT
zEU9mc?(F!2O%NXhBc08Yy>17J!+-Z*K8I82Y05fKP!-5ClD{abeXEY(x>kev;@)Wv
zZ{<`%$Kif`oc+ugBOD1<Bg2^})E7yh*6z<(6h0M&3`@?7BFLY#`U=ep8)nYcV57M=
zHfre|qIa6RY#}1yJ=KLA91d49NUriNb^hyV7X`T=JA*`=cS2EK)}yYY={}8I;cATF
zr$D0-3UvAf8zD0+<06m@wMW*pqQO|dpXd>Pq+n)`c)Yb^#X%ne&DHKnVPHoO!sn(7
z3HZbxEVe7PHj^%FM~H|B{_NJtyC}5$F5Awog;+>wu8!cA<(xlT@Y)T}d&BJJw2)c>
z<rBykouF-KtDR~GF0-GmbjlTEGc;s!`NqRE4}^u#B=a#G9v5zJ=<Sy~e3}FPvRKa1
z6nM$|jex3-+h<BTN|_qd_DiP`9Z`#CSM>I1uG$eqPGT7Xg!pM5<F=4{qgpPj+n>M6
zT*3SnA{gnV1h`6kY*U2d#7;}-AS*N+?Gz70jD1vAn7(S<N^_gbK}N4qZQSie9v$1E
zNIs@wU=H<PHKuMeq2tK8;*+yX8?F14>qp>|3IBbG|CB7=ruC2{4Bl64pN)@2dd-Lx
zq38qL2pq^2z2Y;ZtZnP>gyRfh)?-))sr(Y+n<C?RdU*Kyf=l@(A}F&X)yhsH{L$9r
z=7Ii<{IR2i1HVgdI2lVV9=EN8Mq7GQ<VNcuWi0)}D?T-Y>BrkHPtD3Uai~BYMwFsa
zTn(hTQpNsDEm|YNE2_yOnmKWGH&><pT{`%t{Ro<#2}nDgc9}~GlgdkRa_efk6vAU1
z0}JG&nBx9kRyURV3<&EoDSj`aCiTy$UUTtB54RW6x>)J~sTL#Tv8?NtcD(3!`+5wY
zQg-SL+peb30$E4R=kHC+kT5CUpq?z-9qD#|?YArSoxAhT_GGY1fQ2+PoWt{U>(9bA
zzT38t=N`lZ_xXO`NADGiLN$$Rc)CwdyIsH$mn&^cOVc`#nQS)jlY465r#`*c6i#}K
z%dLqyV0Qe{UZyX3xY7btc6Ez@Rn`W~^-(bFuiC3U?+s8}jK<&Ot|y^h+(W|&fD5Kh
zL^3+GjnvEYA8<1e1*bgmY|3l1*!c@ton`BU>Qbbv#2LSx6M%s#IMmT~_?3qe)ATjb
zG%A{AOwH&!xEDR1WLEB{O*~uNTOOae<%i<lps}9(t10_+iF4i6F{(dwE#^;;56%eX
z2bx`uSG0ecF~#|Y{JV@xGGlFW@1D0u6x3iE+wBBLO7ebZZ#C~D#&i?8bpfPEXcJh|
z^Q|m8w=9=v7_^U*ROf{OQx0}YChDdljV1{`MN&Jf5|&K-(Pu!1=mYU*IoN7*rPAp=
zIJZj%dt%ql*{=T+!!3NO%}_Lj@_b-x8~ahVlqWslLxY=c_XF;U*EHgW477SJX<NF?
z?&?J<0iD|Ftemjro56)=Y&6#_Ih-gA<`spB*8e&#iZ$jTAG_U|f&#<(E@=sodP-AF
z-Y;EtAUg~_{%sHW$7^9lUf_XVHsnLm?d`4hPU|mQ_!{TDzOc6}AyfKZt-m*T0u(BU
zF+l|#8I7laWSUsN+tH)5;q$xk#sY9uGNExC+<ff0-fVWoRrk}M?+5m8lQ&7)mx{fP
z^1}W+o~eDjIr=MC4N5zQ7183zh+Xh5ca!#Jcx#<f*?EX~gFG1VE&*xjo~t))IF>j3
zv1<2-{2-aN{-lNZ)0FC7+zfpjd_JqZjj|RztsSvZc`Exjk^y$AgT8Evv9FN)H>;@J
ztgbQ4E9FTw`6WLZ&ta|fw(hy{+Z`o?f(a(r=g4z~-16VuU(*ftYxz_h9075WIZvwR
z9%#IZ_b|$d_@&%%{=`wAfm)01S)W^5cTbjm7VG6byeATGRn?(v?)+G^1+(-`GZfMM
z+2^kmFZ*w|-f0!6Phf^n6kLh@4{Eh7X>b?YbzjBu)I;>Vn1zM|nIJZ%S7~-V2mKB7
zxk-2|8~?=#K9Pi>d&kr0?w@`^|G0C-mF_g{JkyX#bjcRaFAG!Fi$#rs#Pu&mDL@Zr
z)`#QZP;RU97LL(Iq1XRRK#G-vcGNO6`_^XPCAHMm5^isMvDe9bIyBrpF^!lRF=QvB
zq65A@U`Oo#ut;Esa8A3co>#yWwAZ5qu>LzMYz_DMET7+QP*nLVf)!w10X-1`?QTYi
z2KCEGisaVvS-w^Q7Fj@+X*C-xiSM>#gKeNnCe8~C009z$6EQ*j!a$%Yj0cDw0AwLO
zJ-iRI`agJI(3^rJCfbTsSxmLZk^+H6n;ZJx_Uf0j0QOL-9-R2K@}&3c^o}=_ytijC
z<~ZR1u<&FCnXmh&1yF#jECDT!-%D1Wcy3iM?=97)Fc)^0f8{Us+{Qtl+f7c2y#Zuy
z;Q@vJFB}B>Omiu)u={2dwcdHX`iH$bv$?HjZv64t8nRj;TcigL#!&Al<H!OoUtu0k
zAS(me9o~RvI;(Aq754iBuZv|(-gUNdq#X9z0%N9naBEjt(^#uxHr0>vi``s8#EMrm
z6aqK_`uZ$rw$x;W7D?R@szBWcqPhgsKYRus9<(TUL{1z~;GrxE$p0`Lj`m;5h0ljK
zl>NA}mg@_&b1(-(XaWjm5p<;gLh}NPuo5r<HTZ+3r_g<dUflR~NO`XSQ%;!od9Kkg
zzmC$S1nE_<m7&9a<_ktxB_Y7cxXy@*PtHz;ib38(nEWqjL|hE|2o-=2?<;(#3@MoD
zu{rX>9{ECy%FVbQg^E9$LJbRlP#Hk}FG|*n2cYvI2@F^sxgQr)FiT_l@Ip{XgEK=w
z<P-q~Zsxu575Z#N@>2X?46@XR1Uq<H;b~k*p&*@#^c8zQ|BC^yQ={TvLYHd!W+=qt
z-@dBU`-brij>CIY{C;H7qf1zLHx@y-7ebUbC$Rf@yAiXm@P&`CLcwoj-d7xK99E+J
zjl38ViVZxJTJ%orU7i2x78=H;Cl<uZj(Ad`j%RG`2(2p66Ss2-4fX$Q(I)^-K5xQ&
zMp=&qMHT*ka2yG-QCfX4rNUCY@l2Ncu(2Epka_nBgz!?K44@L2074BT6wM^xA2B_U
z|BHYT^}**SP<Z%+2Rf+tjcaz~3(5@vc!u){aa<Xn&kA@)d@hFf-#heg?8q6<myMVN
zL<F|O>Hj+kLWg`=$6&j&U&#BJh=C{T{#u_oKHk+nnK0$Xhu4v+8dvzXa~H##d3Enf
zcf&<nb%`jaU)%Rc=wE8X(rUtFCA%th{P6XF&b1yTmb^_`l}jc<T?h1ku&4rAR8dF8
zY#%8D`x>+Tg_!}~OS}IcItPwgSNaUsp_LldQ(hC#AsZdrb=p84{g-!T`2R5}p0$KC
zqGklYt)ZVYsf}nZ(4q2*T*q|mi%V2?DN~_!KdYh&eWF^z{tpm-1?m5}(V_6p$%K4A
zKFVd|l&jSC6QCUSO@T5#?}NOjRU6t0>g&l2ucW(wZZc9KVghEPFR@%EeBWO!&Q}^+
zAK}JT2(8ra$XdJkf?ize#X0`<XK!v$)Q52ntZMC^^l{Z4y#hs}GEu`ny*eoT-(M+B
zFK2K3tt*MB=W;@hcT_#Ra?~$8lq$KKsNQt^SPNMmd0|cce;Sd(5}Q*(AVgv#2uM}H
z9ZJZc@~OPia9)An=NqG#=d1x;T-A>Ai5j`?p9C;Nl%7ve`H6w}M&{o`8D5xD|43w)
z{QSZPo`%?w9ZuXi4pOvF@4rI)XVCw|_W6$1YdvbW`Tywp3ZS@_<?ld%K#(9of)g}&
zaQ6fjC%C(_!QBHPNO1Sy?(PJ4S)9e)-SykN`+xW4Uh-A3)SRj_bEbQ`duDom-80uE
zKGcPK@R{^TSp2OABICb$`uAfS!Wy-yzliRYNRK)4fzZHiPrKzG+oghzm%)82hr@c8
zdx{|dJu373Hx$s{=!9o5Cz8aG0AaG1r#xA!w^~%Mxe^m+Z#rUO5dOBq|0sk>L&pOk
z?ZyouY&A}NZBraeoTYbIkjDA1;rhqh&!BM;GPz8h*1u$YvxJ;4eIkA35A7`r?c~P!
z8kzcUqJA$heI$+s2+t|Tm8r%tIR+LU?V8Gio8y=&bm{*rDDW6!iXhZpp=Ik2!V)l6
zmuci9vd{lJiT*B%I?-OIfc8T=9QOQ*jK(=?ObF%)04+u+4lQi^Cl*5GKo0a-k|3HT
zQTVBO)YOF$1tuS!*jWV@Ch=cX{`Htgwxj|2l@EoeLVUgD69D6*Ppbpu1A5fI%hKQF
z%y=(mK>N(;tJLX<d3)sq-8Ki*Tneu>T~;)UKT2Vyx4;UZ9gi?x_VJ{CD1@c;OE5RW
zUc)WSMP9q-&`uySHzJ*91901MdS#+UZ8AR_rB|5s^A_x%m=T8LEfVSHglEI#qb0HX
z;?+G09{=8VwZWtkOH+c~q+l^ZE_O1;zhRQU35)=-m%v+y#2`NZ*k&X5f2fw4LRM#c
zdNOpxLMOS?@lIt*ndex46Z(&W03%cZpq&OApVv*IJ3IPk_K$H0(5`{CoB{vb6(e1q
zp(4ZedBaJ_D*EYjM*<2z!oa^Lmfyw147D_drDOgp>qjAZdt3QL3cxk`=|I7wk*CXE
zBTN##MG{{XPyjj*63g^^wZF?k2skph)dP60AG0*BC30bNWhqJ*mojElF+9@dhzNWT
z$d2Ke54eyB5u^UL?Z4AOCfsTQLUqL6AsDv}xkUuqE<w3`6;h+}ra9z^v9|*v6-{Z%
z>3pr;$OEq0^?&90qky4?k?YW!`unEs$)0_FB>MK~OHkU~v4BZcCf<6H{H=C(Wamie
z??f}d+ed+CQ2PL3@zO#_%s@M|U0N=jH!s{?_Ym*HByN!`FtL@FVXg;@=Mtm9EHQD2
z3iBm%pHlRnn|cOsLHUE#)V~37eG^kl<L&T(L+Cj{Nf{9>&qTG_$50xEtnTPn6~#FJ
zL%RIUMM%L$MnD~eiXePk=PQ!NQBWF#$E{_|(D?Aob$dT&rvH#uACGIYZ0LZlu%PiP
zD`dlPzvHNXzwOC5-&D8RdOt(>{NvcBM`7_ayQD$M$@Q>C|AFPBW{C|L)=6WA&3fw>
zUggQ(NCb;W8>7qH^Mb{%npP+Cqro;>x2=JR(~UVTskSed4@j;5v2gfZU2hON#BsIw
z9=Dq68`zsN7YolMXt8#u4I{C$7SVzU2U0v?cIh3>qT(3j#PB!F8<*++V0Xv>0-UB!
z*NxUhTlBG(G9V{x`_)nXuHxEN6Bh-iit6PV$4i903eh_?m4#nnOEv5*v~zq?$l)B4
zV<tb9{y>r#15{Qf1UcBnpoDX4=rTWP?wo@0^{m>0j*;KCBiLg6K-4sR9Xq|BuVo;!
zh15Fk3|@f$4?QzT^|Aw%8ZJyTQ?K`Fmxof!wqNd@dR#1Dx-rztb(s-qvVOZi?Nu#n
z6sP`q1OCR>t<+q{5wlNk|8Zp`Yt)PGcV7KpIgA(j6QI3dlMQ92LxnB%_BB2@GeYaj
zhAGg&^VV|a&e-Dz+3C1Xb8iUVxpP)C1vhZVEmE^$i7b-3uou!St{K(ekmmmlruQ6L
zm^kjnIbE+X96?XB&0ebQdrk$yO<uRF?&%jOrqY<Hbee~y1qVDNifk|51a;`5Vn+SF
zIQ?B2JIINXSO)altklNz3tI!N-*C@+E-)_|zp7j$GhCgLt_|K_@XS;oQpPK|I!s^?
z!>?z1Tl!x>Te*Y|Bt|2ZI=0_atgl_K%xN@%)x22xe*jg16nJ=Y<kJ|&fg92u{)S7t
z>d);j^PC}b<#dg7eI)W$MT0_1C5uvBJBVblFN%Yf(?CWqd#~wo;VgvW&KmkG@qS^p
z%A5f<*a{khLNZso$>sb}E=ayjJ*#3PD^?4gtGU2Q6u~F;Q`=GjwL9hwEs6G7qqT&f
za}s?dg;c(JwS}rN{u?dr8(z!oMO%JL^~+7Z+r5g~PkEUU6-bEUZ0@NMQrJCbz5420
zF)0!rkF-V2V;ql3T{Dw>;)oP_%?U8b6K`org-lu?=_?N1X-N-o?0q(d=`xojGsMwR
zKQqO|&vQLw7K>lD!OYpHu1nZS*M;`OC6w>SWEo$mR^M#f7q-DAfOLiE_bJ(B5Bh2c
zS!JkCq8JBk%8y<JHMeQ0TzUo6^@R}Fvn9HX)O_!$rei7UZ5Jv#2-|oU%4e7uOLG%O
z8-<6!m4+)oserfcl2ySvi0sk!o-%o|yCMNP0EKJW%%3vL_>j!goI-}s#pR7>|LdHe
zJ}+LW)!S{~TwxtV>GVw|<9@o_mrXF2$sRKM;PX!R4u|}E_d5p}DfU^S&*}HNp4iA;
zma;Ai&EhSisS=ms*54qm@8Des@QSvRzJp2g@|a)dI#^|?#*x0X4Fs{x-?qb|E5FCo
ztr|hnd2j>3x@w-`m<c&jz@SSw_0;h2|IN>_CGH!|kiF-B93C5YD=1B6rkJ<A^F(4D
zHK&wxV*8o_6`Mpq>-*I{qm=dWm4v<v#d)u12T31ftE6iz`Gy>gQWpJql(zP3WJyX!
zF7t@P*COdu7Z9l810c@x6Z*!zOXhh@`k1G3S7lA?=V;lsZAgj|f|VFWv&oUTML}L>
zN5?AY;F|54$^s$&BF!Vb@1c?O*(@WSQ6X0mbKzdjqqekmgqLBAd%a4AK@t9&^61Ae
zsNI2=Kb<T|r6msBYn*ph-sInrM*6AxC9TIM);iVTw_t=XhR0>|V{=Zf#CCU(@KQU!
zhx|U!vE^cu3Ltchz4LZTRM}lqm;17z9reRm`y{5;)O$z(oD~`O-&pIlxAtR6<y_hH
zA%?zE3}YO71agN8n1j8anR2(H<U-zLoH~-PCT!n-{Z6N9k~q%MWhh!UP(u|{$5xzF
zcyTyYvbfM6%iyW{%~N&Aa%+i{CL>Lz1r0m(Zi#xvBYXC5NDC`DKb{RDUXBb9k9bwW
z1jJatpDWiu)X4`ik4)b`jXFFqPnF+-J!4<0*M*Dj-<q<WF9jvlumb~x>+x2=XL0w@
zLp~EG#1VeDx=H~ytXF&xXOx2~BomRk;)Wixm)FpHyZyD83rD=|1BSdGl+VI1-a-iD
z$)0`D9wCsdpWbi4#TJr@Xhvh#+aHc!5ZauupuJ`?=Ta-){f&9+>ZpeBE6Qh`yG}S*
zfbe^1Ky~_JQgqdMo7;fd0rh~k=DPj8xG+8MaajUjvNdyg{WNr;puu%aqW-(J;84nQ
z(F({yq5v`5q>2OxC}P~y^dLPAvZU2(alJy+&E{54scAqCXJO%o)#N0}ra4~Bp*h}6
zyyW1<wF^lupk(KAAAf(6&AELxRawO4lr7mM$HMoD(v*3h@-g-z@=yxo_kBxCMxV2%
zlHm$DfqbsUa?!D>rl!SIDJaPf_mniRTiB-QWF8mL{yNw*?Pv*tYtXk)(a0O1s;+#9
zUIc`;#K8o91?6P3@?LZ^zV`;S(;Au~etnzBM((=XWkjxu!}5Mt9C<H7ex5rfJHR;w
z{hJsr+<o9#Z15ZAY>!_Dn>XZBF-}`)-!4>ZKF`O@(v7Ak2xy^8a@`jiQ8fU$5Ppm)
zk5%`T_lvvMudcY&_xJ9&$fzt%P4C4^x71<DgO2f7K2+yuB;O9EM66dcF4#0SPKx2W
zkbzE3Z!}mWuBl@`vRcf!kRxvgGx2Az_a*H{9OqXX>;rpb8qXLmYRF@ASHyt)v0d-!
z0@_Q7+{`EieV4^>Kemo)pJTx;G;Cwz(W5~*aNvdGCR2*P!wK>XYav2k)+-M-mFC2g
zj}$i4s2(Z{WSTrn3IZj^a>?rllvS|%NCv0*zrZm@6JG{~u^<_*+DJX}ox5sToup6M
z&H5XpNhka)e+hdL3P~NqyRxkXVH}dL1R#4UEsW;A^WL}|62A7aSRPKD==}-Cp1VH1
z)EqMz3I@>^LO5d6>F3{~k=4D~zwBML=h+s5m<YMtmEJ&&CE48=&njVhsP1Lh4&-0g
zGWk7!fwFfyXFL3+jx@<_&9N>v-@T?u$}x;k$T5sBOTL6=HD`=6)-e8#&hI+-JqjtQ
zR!C+V2hEh)<mI~q$KKu`u>ExOSDt7T6gGpA<IfoD<2SDLJB<u?wnpZw>xC-}fT_zu
zazsc%K_^H;LHByNpFgTX8?Pw49<Q|{^at&S|5`WUo?)eHz6}!z+rIRiF4gU}b95Ze
zVWQN!5rATBS+!Db39fJ9MmNB7rwyJYOq4PYT|d0Ao{!8DCrsrAJQ@{9_MK-Bmi=&F
zpQ$Xl!-R6&k@`uoL8i%gi`%rdMhTEC)+^(%hG2;=r$JJ-x!u>|`ueM0%398yE?$zi
zyOgFaP5$WLM5j+QzY!+3{G@UXnAi4Sej^8zoQl7q`#7^FL@P}B*pkV4n=0qfm6vgU
zU^RPK{GF84++EXorNHoD+EP)a+;aV3kBTAZc;7xFVIYn{g)#2{f~msbJ*K|^;&AR~
zek&R}Ri`$NiK*gC?g7bGmK?Ab*zcX0N&%U#RnBo*D~&8=xc3??=0;xi5Af!I->Opa
z@c<}ZjfHX8t^XkBOFy9l&Y5nBw-Sha`*P$kTXu-2U|jzFO9x*N79Eq#Ga2fhYThBX
z2tO`&aWf5tO>0QTyrrFqg2%jB?W$B$X;VD;<cs`}fT>Uq+sDlN_1h*OIJI6Sj3_pO
zC>C6qivB7!tE2r8xbu4S!~0gkD4wG04N)}JbfACdScl$sliOT}>`QEonqp_{^>1bb
z!P=g<Ey(%ziZ`QIO@P%)`sijRcZ=`9Fy88J@JA3M&=I%Z;~`pPNHn?^IaG2Bvip=S
zxP@0#_wfkj>fbW$Hs6|lT;wvGj94$T+7Y*)%kbH822s%<wBsE-;;e=?uN<`f2uGn`
zZH#cyxB~Tt!r*=Vgjy=*1-&T8Be3>(C(;#TCf;QiH)6=$lidO02u(%sBxdG>w%csq
zuilimSrDp#hnm&)XuWMZl?mtL0&m5Ip6TU!vtjt1UCi8b(CBSyw1tHt&mUhUuxE31
zQ;TCA^T&0aRLB8kDL;C3S!S?%yl%gfDpYP%V)5vjGMYSAk3Ei<9=zb_I}--Gp)Umx
zKk!?PcoBrA){D1kwUt_Z?e0{>in^@#0@qG0xtPnOj7Ij*aD);7+R2!Ptl@kq5hEM>
zX+!oW+`*G~?&d4I(T*ua#ckEZ-kA~Kiidxy7Ol#k!v`-}WvIeKapmE)`*ekw?RVOJ
zYsI#EnN{P7GV!j&uMjo~lbj!HRw-=XhcM0OEWuf<5r3F$Fotj$3*;np<O3zHEtVP5
zY>r8LR-biF=$~GRRzJ`eH*GCOKI>#Op2igp)J8eT<4sntJlt6t@Siu_K6|D_30S&Y
zJy`6Blx4G!?Pbk7lRGw4FE6EI?T2+=_y2$g4926=<cMIN4`)$;N)kyOCcN$+AVcKj
zPuaWa#u$qfhzBGmZ4MvoAD0uYdekRz&??sxu|Yx|l1O!Ewz5S7uV!^;AGo-=mCZ4*
zNc>OJ9_8OA{Gir{aY{G3I$FMG+Q6C{74ed;wXCdKT%#zUKvBHy)k_!YaA$MwnZ=$+
z0ZVxrf2bN&G&bk4n@Pmt6!t@UV=}80sQtaOyLzKD?!Eqw>EeV=0_K`=s#g_E6pVNx
zf-piwl38DOQEMRk3?sE7KsY67=2BC1c1ce|^pj)P8^-}C*j=_tbx(tt^^UaX!q6D#
z#9`GKeDynztax#tu1>hf#;vWLomnySpQ@VJlnfRXD>?nQFI+M~ee=XoR=4crZ$o5G
z<09@oOQSh5^_ArlRO?J`BgiEz_HtgtA0@}U+R}$42O9{$pq!-BsAUYtCQ|@^0iuf0
zKw(E_mD48X&_Cc495yq6WvcHdGf50>8VtE-Erv0eQ~`a&swS2jR+AMQ!8O^XmiP3N
zc7kZ|@aVbl)$*USX#}zh9=aBx#a~Q3$~n9yU>5X3XSfH>!$u(JaN4ygt;jkMerjv5
z(C469X6yAM9OH6Y8L32}PYuzu1#WqV*rEPde_pLpTIo8J#3`NHpsw=_^9_a0Dt$XG
z8B)_b0q1hWt;L=}FFTsmNn3zS?dA5i!v-@=Z`;s;)a0Rutr02)OXjC{>Z=~hy^fSy
zrnP3`DfOl*wY|B&M$seq5WMKL8cfv18Y}Gw3GWro<WCmyP=ln7fH*;v%Kcm^6H5Vp
z@RbxFS~oN#`?`snR8P6hA7Fx2vHDFOE!^g%>;0WVK08#xbdA;<!u4i2Yho*eFrmtl
zTS0PklH|LO4kJTX$`n{g`C?5I)YDR9y=(z~Rx3Z(09_$u<&W~H#zp&*w5;w2a)-!$
z@b<ukKYCw!?0D9Euuir$lz?Gzg+g#mCUCmzW6ewXCN+R2L+KH+HtkXa%BJ!_c|^!~
zdRFTq$l!w>`7O4-geah2m6;Z7e*rZ3qnKT0iZyTmw;XHUN_#5bMrbcG1M%pEwn!yy
z@6jTR+@ypdUH9QDr~#ytGZK!_Rj3gTZtfQJLozs9!{6Ec%=Avgapep_3U5w#Y#U5s
zzd(F@vQpU#()63a&t|8KAGlwAM0URk&Mhvf(xk;4KDm)GH@j_|TIi+0R0UvF^SQIS
zT6GQ*n!8a*dQqY<B;PU8U=Gr;gY1qzuxu!$_ygi7#(i2*AQ^^TxdfdOBK)|0<8R8%
zCi1(bdi^w-V73enB<V*%0avCPuMWgO+<vNIA8l8767aOyw-NVmFEGPp_7~_t^wM}Y
z^TB~*ixbUjQ&}t_dCoN11^80n4`r<)37d{H{x2lSdQ5@+r(1INV{tfxo3_C;-e2ZW
zmqMXRcAe$}Th1CV5HI?pwN>9!y%4A8yZ))TmK}2*mMo47S^4#B{wU%G+b}Lx)pNK$
zgzrHP5>(2T#>c02NPWG%q@Z6f@#BgTo%2&kdxkfQ!3W6NlpqtaO9ZqRA&3uPTy8x3
zb^6vr5B2yk|FL|8)by>OG(!6>&ovx>C=(T4x~+iM2}bCc<vt_0*ywtQ4@?^gQf4<_
zsI{D}W%|_rvycqw{|@di)eh461fgSx6Lro;FH2I6UR_kUO3RE0L)>FPn61A1OQ{zt
zoqEUAiVJpaUhI!~ZT*0j{QzN)TfZ2ZEV=0`1dBWcF5oXHmuQu+rU(2;GTP+`-)jlC
zOt&6W{KG73$#cB4RV1i=@a)Q2?7l>!BjrMSZtC%Ubs>;~9!0M3{KZ%q)@7uHr^=*u
zrHr3I|J=udmO63WUDA8u?PyH*44&%uG6m<Px++p+$zXdHXK4x0*)YMiIopXQMg)ss
z;^#TdT;wckLAOFl^86Q<*e<g@wV|@lpesH37g@ftnom}CjmQO#D(4miV8D=cnq&q)
z3)T%MyvG&9=FlFeU=fjZbi4%GeHoM)O5&bDe*dNu4ng*0mEV;ACQ1;~;%sYFIK}hf
zT3K=@mpt*#qIiO0@O*6%+Y~=G{!I5*lEjv)l^}+=aWvuT30C(2dnEZmyDa-)nQTLG
ztb{P>2ai5q2%H5!@{VQhQM%<BggD?~js15CZ(#QM`3<KLW=qtu<)($Wx8T{^sJ=A7
zOm8Hcsu+%gon^;r4?rp%$0d9%80wW~GNk|@X0hIatfipe@Kz^L9fpdt3A6#g*vL^|
zO^sq@Is8tMP^+ED2IOMx<DZSa49%aC6Lp+^;3u%rh!$MEsx$>dW*}Qv$_&$L>oxf{
zCuV+!IB^_M*-9P9MH&OVL3ryVwrOn~BiS@0Lm)%YfYhysBW^jb6ir@?47U{<uy18&
zMd35)aa5nK&*;osFYYh-U6F**oIwYDHyVm%0fW*QLiW9t@dhA6<~0$FC4DoRwC?kf
z`FHo*29a8{{`{znA9W0(3<Bf7iB9b1g6*d?wbPx8g%wf^#agnMhD#-Hr6qFqBzpB$
z9djayGNf+5sC2RD_Dl)=Xnlx1pml4(Ql<E+FpWpiX{_i#0847VU2WEU;2YiY$mdM5
ztNln%Q!hy)*fzqVdwL?pmu<1&VlplL%(3t~8(PM0+J(g*S~W{K94vM-QZ~3n`jv0(
z$}IjFzju1a)v#$ws=k`NvhvhNP*phA5Rr}=_S$CTGtDJuzP{7vuXv8W8ukw?99>PS
zTkgxS(FT-1hoouTid)^u=pFSl&W)izLCRjc+^yC~SIGv)&~HIOVI#Z_+}qiBCqZvB
zTFscam1!-eLeSTaFpgF$nl~#B8X3p6Sw4u*o0-0byM6cqF!B|q{^gw%L;ukly{LGl
z-ut;MVGIEjr~-}Tm`yfJ;-@I!_65eoZJ7Lgb5=}1-lm*?%BO)B9skHzVJzckcf5zH
z&SJAWsdi(9)p8qsg6Bts5w#TKNa$7bC0zTrLbbuxnZ6Tq@EEd&US7{{4b(RJ_fntp
zCD@~a<Ue>3?$5S3??kNUG1d1?L(`;wQuLLAg1(b(2U8KVJupQ<Y(`1#D$e9gFl98%
zhLTyr-EN-h-u+=p46duLNi)KCi0_7~D7li$^kr1#n=Cz_V6s;={V{}?a9Tv_j=nB8
z<yXBjxfa2!Q$85Av_t7usZ_dGw?}Hcto!@>iRWUUVufzgE#(deD3DF@AAd-T7E(6B
zz=k#kq(zv0*v#|Ha9Tymlg7dY^BkyHQO3Ni-$E_m=i>hOqgBfy1;iHU;c928dhyVc
z*Iuz1?Hsz3kVD&S4LKy#j#E(7wmIzNq<&bjHo!DHxKypQL5c7?cqN~XHTx3fLsF)1
zniz8iFpT4UAa)x$!qK%@D5_;z$2ZXG3DZvXA>wDs<SvHlzUi;kUGPWU4#%+`&>5gZ
zAwJ$8_cz<uXZTt^0zxp<76wWfeh6rTzO!6-S_aEQJY-0~f!A9Q=dD$;K$35oM6dD`
zXFDHciB2ir4gthF=CHy~^`0x3-3#)?uHIoqRi^*vN`<vhfnIFxJO0_j2T>5b+XWf$
z<(ZEc8nm78Oh^OLbz)dBmG_7OT4@A}Bxd+C{cuJkuP<*Q0jhIo{*h#+78dwNeKaL&
zA#d=jMRjhWuOLSPgeQ{b=?%)UYAQm+HoU^G80XKeF=kFwEx{eeN*K#)Q_vWVcTA>k
zY&SK>^EloR*StrB6GJxQht*(HZyiX}1Tc*-=|yWK<T)YRdVAgka5z^?t`BlPkjXbJ
zIA{Q_FcxEmsm7Yn(2KJFe5D9+|5q&W=D9FvgcR*)=HW(o?=tkxSO7UtfH<l3boT(c
zMDmB<mx4qLS;Xi!Zv_w=FLQh)3p+L5>DKZIi!BAV!#LR_QVLka^_;&B>KvOYRJBb+
zb|29VeMY|hy+tx$BY#ByAd2`Je~>i;Ana;TWS(H4Mj8y6@RUPse=-Elm+H1lr=9N|
z_?zjchj=8eUNy&_L5AHVe1cWof<Rr;%16=_Mv{D*I{Hm#%w!8ixj&f<A(qPWB*ec-
z^d4{m%99`@)1*)=Ej}153I8&%Ah<2_I{!s`wA_R5F=U~N=9&T%!p6n*4&!0WRa(Eq
z((S#WQo9B={M~SRNxe=N3f>mENa{?PHv=)T=#q?G`7xl5zDa$IfSXdSRzIgkFKR93
z89yMKJ$on<o0uihPk`$|kTPOmJfP0>mZXK<yO9E}c2PB<+nJzyfq7Q47qXK*B<tmt
zZUmlE+!JJC+-fnmBj%x?Q$en^xNqTP$kXp1e_7xbx62a!x@uiC=KSbbPUbaS<T6uD
zGj)nqvb%s4hI`g&%5^iJt{?ee0y_$VaQk;n^vA_WtXcyU3n=dn1Qr$+q;<-WGa_!?
zp5!#&<rWObmvCz#&*tyh=Z&B{E)Z-F;Kn1`tGnbJKKE5CcN+G4D&C6Rj&|nfd;oWu
zI{r#mw{kZ8Nt;i!W>|jL@sYq~E3I0~H#&>Nhv6M%Yoy~{D$}KQ`Swehw}TeIBunv}
z;7qd1pHcUKo-Es<FM!l)3S=P1g}|*8+jz(1&nboug7;<bv&97-`5MeCuy?i1gb@T|
z5JvR(*j=C=12JhPcRtBDx@zW1V6Az1y@XQl#rmwSgicSLR58-Ma>aYV#1Mr4U5EH~
z>JzPJ7}~O;knzB@%chK?X*0WND!6;YBX&#+;#b3pJiS=*c|{m?DEIY}9^(gIt49^x
zsFD*nAsN#lzn2VCTYk8b!DycycrSfjL(5z7YMuB>Gq>xZkQ_PK`G*`MIv=iXw#fJk
zl=v8QiHQMx4if>-s+6s0duX?12L?b7zo}F<L*h|9;d~=xEdaTb;te!dMrR*(jHxRP
zxB}x;{?ni>ZB{TLR2-2FnA$zD^4$WwmNw?S?{HWoZxlzHxQb@v)4!fHy!6wjhypA*
z2(DRhLF|4NONnOz7WdN9C@TnVIJ>KrB44;;SU%bvyPuD`uir<C6umAGjV*F<kx*$W
zJ|O@I<6-PQTr6&vt2f}2Aytt|eQj<3mYO#xjlDT?-91mVyN)@#Bp{m(v-JU4-s$Mz
zv8K$5o0srnQ-t7~4eAlvkLwm1&%DqQcx_uro$*{bcjqrZ6(UHG=oVjnn+S;N-e*W}
zH*cRA@wij81h31KpSmRK2Xset8nuJ6B&NVg6?4?{r(P{b9|qJbp`qB}r+ap<c-I4J
zAPM|6_Zh~H=VOS#doqiweRH30Do!Y_ix`AP-{-z%+TgdP<8~O|6iHA6uIiO{Q+p**
zXJGr9oX+*KawG1+0#P<JQ0JpB3&_w$pma%Rj<D`qgd7j(w!t-)>aMQ0iGW$M^u)b~
z++RBv$i)*KWmWYI$!kLtA7d3_^}+bw`<75O7Y>HDDFWrRP-@i6r<IR)Ra2Iy8-okV
z=Bf1;%6CO&cjTySNICA~gj(nyWAC~4DZp0*IzBzp$$F%QkZ{UZD`jh9B2CoSbH^KU
zCF0LvHLyD+J+l!r%MMXWkNr$ie5H4j((gyD^eREEj6w!T&^*g*kUXNprt?*{dj8>C
zYRz5|D%e}nXTbAz(2WldLN`ISdpAZDrBkTy>14vEg`JmN3z`;EB=2zNj4uUwBmBsf
zTs+x#A7Z6QBPKCp81KYZG50Jbnv*M?M=brlhI~obM>|=$bJ*#A;*GKn620UqqGv4Z
z-4p4Q725ldNNF9wg}9zas&fm&X7BaMfN|fPLe}f?gE)K&o*~<Ws3Km;SiF^br3sqn
zsP6<B(u*~jo2@fZEWVl15ANvBP=HiEcNEv-PVCse+3yz?yXqnDoFB<==oU<TUUWht
zdTrT;G_vmd$=UScD=CnG-%0IqG2#}+yF!CDU3wYq0V}+9#VnL4bvb8={Ive6dBq-W
zhB@>u3P~UDV(3o0Jeofh@6|4u>U$~x&!?odYMZA>(FMKoxx3~klS}2QC~0-4InG!v
z(%OxHnBdVSZ%yZJ>wM~wVL|BnP3>tO@mc$M?!C-=gfSVYt<Kk8T4+io89dUhdBUE!
zhF3E5QZuO+)@9Z?Y0@9FyA^VZ(rrU7h&D$bR=Gwm=qty1d(YzPTWL)3sM4IVHJ!M6
zqX_7ON#<c&h~{Azi~FY#Fet{y2%_DJvb8p8>g{@ZMz6uAXR|o`7!Ix%1s=0UV9P}6
z=XehJvm2KTy@zZEEPMYuwMk{OA)rt3nK=UU^HJbTU;I3j(Q0vBonDm|M#+$+PEy(~
zo-;z1{2INz)uPY&Au?acP?X%I(U;_KE{Da-8IYaJmli0y{2I!V*8a`<PSTObQvIDT
zK57_=4rxzJ*$bc`@%L89k*tS^J%3vgGO6zg2aE;T^I8<;4F=wmrX-61pF&Y>ah!{3
zX`A*g6^iXt;C%Ha-D9xqNwXNhZFzHgyKSKeFgKy^O8bL>2<ECTZ7>sWN|CD6lZBn`
zI*h(;?giInvyVrtim?LrI6UWrn^4Js=IL5BnDoXhFJZ#Wu&GN{y`=GUdZa!#6TM{h
zQS|$jh>52{Eua;TJ9)A$fid&@olCNZ5Egu`*fUBi`Ves!V4Iux;dGq|XQ~X_W)#q!
zo{8NMV>;n&!@jj)#6t)tGB3G2da2}NkV}l8rJSCSdO4|N(BQpD95U7LEAJw}kDE5#
zYM$&YBblk>+)UdW`TJg4_2xCet4;O6T4hk!^SsXn&>*^?7F{6=srVW`k9WIUvpCZs
zlrbU?3zr8HH59KtfP;EO@R(t4CST23=j2Kw4^bfX0@V7g!lboH5Md19r)yWg9=ui|
z*T<Os;sx)$Pie^zQ27DxR~8n#FYiq61tmdhAG_n_#J1vyc=a0lTfLt<vX+=8!imEW
z(xd0dCbCvrd?7?F1?b$o14;nbT<-X`rSWZM1Ow<=q}^gE1-hH?+BQDwfMm74x`pOw
zt5Pk#Gx`s<q<iXtS)q>=Q5vZTvEb-HM;QA3cUhZtH%WS)Yr-P9x#PW8as3GGdYYzD
zO5aG3VDQNVLUDqvMrh-rprGxb8-^jNTwUqrBcP_1zK}pecJ%GV<hvRb-KZ|4db|#H
zNvgUcP`(#$k09qEO@nop`HU*WVH|VaKW>WBfshbUq8=G+@6xrfcMMJ|rJv%{crVu^
z2v^ceR+cb#U$%3K_9go^n{wN{0KTQs*bf>sNR%w6EY@VI&yUwpPZlVX)r*ySfBGqd
z<$K=#bFUk*?cD(Ev@QKN$`JyngvziP1v>0wy>rHTh&BSxw0uFfs2bef<?mBn(NV#m
z-d;tbPBF46@lBlRBRz<>G+0wpQ!jLEnz4tMfZ0T{CDB)v&BMnup@hxps@wSpGD$*m
zsL$%F5=pSxjnx{gKx1n8uB6I=n{&3^zMt@hhD~6&xawy6PI9^>O>$bWkh&)-;BnGM
zUZ{s_Qt<#Rr}z{Ulnp>(h-FZ`pT9_Vs80BXqJXhV>Z0c_Ivhm?MDRX9Yx8|Z0h=!g
z1~z3h9AjUSHK7<+eg&J2*?FNKi&hTi%4OVuR(2Cbzy*~O@~uTHsl|M3(EGH(oz1rg
z4T~{!>RKb6{9+-}TG`#oIYolB3Vl7BpLcTZ`)UK}w1|?EBt!FzZD;xInH;@gyOPUD
zApTyBa)VyK%x;LnW&$5TuvK|>5}?N!T)cX9C+eox1ruZ6-XDwkdnOoV+oFJbfSJch
z18~@n-^)Awhn7RBApYo!-J#vfn@{aq5)}M}b_*mCEE*Cz=S?r^bfWki*DR+Y!K{R`
z898FCx?58Z`|?COko%b)-mV|U4s$1st|=abhJfLt0?+qAy>~1Ab^HXj-AVS`<lx!k
zgYm6N_LoX2q(L7OOY@7158@OHlz2^q93~ACkZ`wA+EMD;OQ8lj5Jmz<M7Kn?l#U6j
z)Dv*^lPO`Un!+q~`z%!@B&}>Z*;TP9X4zR-_FD8h1J@}G8fckc*|tWL>5lL)_AYkt
zk@md6FtmFCE}Ng9zl;ylq#GOVU30Q(^3a@c$h1$4JHFqb!nlyXV-H<vp-3*5qUZs6
zNE<~2dm=@yje};dEL{LWclCB2FFqZ)*W7<Q=RItFoKJ5bPXGuPcXX|dT8nC<qRs<S
z^~ypt*;KDO)deZesT+)bia-)2?Q5-5ZAt0GHoHO+D%Y;+=^Vl(h<jWe_U<Lqm6$~s
zsYs?BvDY_UA+@W0B1!oYv)MaxZ;vB^5SuF3wr<X4unvHmCn^1UfV!2@zxgX6ErUjF
zsYEP~^7<AJAnn;L*UQotQ;@ReMT~eBT7hzj^h6NQ?wX#N&;9mde`;Z&Sv5OUQeAB$
z&9hEJ`mUJfO(Hp1%Nerf*5K0b`d)6(GRFqF*a?x-(`feD$it!O>|-z>aehuK`8KAI
zJX?}aQOMTl^<X^a1E+A=fbi>n{B4GyQ(gvaG7}U>)SMfR!p3G6dLRqr#0iLz%4LfW
zp!g|Sy3AyMvaPG1c7&ANKsc8%5FQ+Vit8!<>W#+)nyv3ZE)6D1vz-l?StuA24}l!H
z&O$%3%eeNSV>x+PtNTFn!8{eNN!uR0t2#B>6b_l7%NC3d_@%5-pj|z052t^HWaZmb
z(+0hGXRO=K_&37qW55P4Ro)5W&7(gZew0Y<w}S_M$MwEwnQ0IL?|<=Cj?irYVH9cz
zQeocl%||ILynv$qO&Ohan`+D28S@drz5ec@03l%J!2!0%Pb|JmdD3#Jmmk_j$TWYu
zYV2>69OQmD2(ZdV(iDI{D~WTHBO^R7-~hST?I!5Erzfx-ac}cdtzo2KF!fi$R0)@t
zW@E#!S<dbN$SPVI_E(tB|1etrEgzwU4NZ^e!^4XAywS#>7)o{pkR!Qk)Ob`?J!n-e
zl<s#=Eet(euhCA<0M9;Ds87gnUb#68G^ZjmlONkCZ}?NglOZYgra@wIeupvsRrZ31
z+Rh}wc9B>g0F_VX1oKlCL~t}hqG6|#habc`9Cv{VcV(Xq{4le5<+hNK(ftS!{s*}K
zy}h`%KcZO9zLy>6o*2qwmFcAo$*Z0+(*=;IwwQ5+z<I-fn24Z*Ur|A@gU?<D{*Ge&
zyIhIkAI-8hIW2}ySbq8XVzkTLj4O2m2JJwokh8H38N~A{Jqc1h5M}4@D!&)((EXEH
z*190oZFuDZs<e5pOshAFD4i-K?><~7AiQAZ3ZEcLBSJ&>^T7RI_QrpploPySGD+B(
zwmWnuF+^Xyitpg#JK!2S{poyd3DoNMu$yvCu8~jlhOKsX8H@0kT@yt86HlMP!=sMG
zu&mWvkfSVeZ|FI!^~mg7G3+9=6NJFI#ZR8$(3I*4NZkZIEb2dYrnsLUoN=db3A*Pw
zjgv=W^A}DN%>Pc;|H=aKUJ#!_%@=ehDagH@#pNH+39d;SAKgwG_C^&wqqm|{v$a#N
z7^>A<bceVaSAs>SrCxcCs@_JhAcc}r0*LDW2<NS&MCQ$`KHxe#Tb6(2P2z)M(C$dk
z4+-WBL0$yXk`sJ`Yiz1-(*lo3KQffspIz_VY|cb7)RZ6C<PehD(8D6MC&@gkef0;V
zGYTprgbmGAm25FIm@Y0Cj}?wYR-d9SSG!YZ8ZrXX^=MzyP>1(;<FG0T)CL8Zew1YH
z#F0qIdqDr%aJ1U`THl2^TU36HNb3E2e4H|}2U;q}7y%JTC6R57nQPBY9qYr|`Q-TI
z&3I!YzDt++T?gaT6ZeJTy@dnE)cEBWP%zXlA*sVfwK<FS`7secJ%fTlg`jtT|2IOb
zLzdQ^FFaTwb{c@KW3RiC69z@>^$Z&Rw|`;OP^8Ku#3T{<?tVW-sKRV*HjnT8QKPc|
z-I@R~Iut1lauBKEgl-vJO$Dt$Ib(mt@HE=LzFMl@>I52DjT_^7u<TPbo{<u^gWp0U
zR?Y2>R{Hn50>oV2DiMBPk5uhd!j>$tVDP)I?d65RFUlE}y8QpyQAodgvHV$0Req2<
z|9V*sRz)*zGTu<*cWQnSmnq*Gn5pX>v!*NfrNtET<+zx51N?u#WgyX-4|yx)KW_mr
zA#aVxlYai4egC2B2&PaH7c1NEuh)Jx78U<i`pIillsfjHQdExK_AfA=KuBvQy921$
z|6ug5uKA*giGWHO86&>IB0S6zFHvn?N(BQCt4Xl*{>8;#kLj<)6d-RO)fKIl^f&B~
ze!ac>(3<(I;H8w=*weN<NWywDb>F`(cooE2TO`$LU7vtAyHi;u)BbPLiM_l&KnKX+
zV$p8WCmn6O@jVW<xj(!`{R(M1LpBrn33Xx#0%j3@okzB6yQ#{>4W7qrpGlXLe{}Uq
zCC!xD<t?5>3I9{_e)S$i5!RQfdrW41Wdjix3B<MLg}K_Z6Hw?W{1d(qhY@&>Qz8fD
zd_wo%U3+Nm1lJ~OdM6~EcEyi@u?&>G!b$%nwvfkrL<4G56-g__-45pZxr5GMl{}z^
z<l-JUjeMWbEZZbt6zS)_t)|w!sj0j?icPV6Ng(Rpke7BphCl?j{D%*GgcXa3UfR&`
zC)cr9+~c@pXRl1wagFQv_Czq@r)dR1Bb$3YnDMdwnDL<}s!4hqFbkyL@E?aX9M628
zR>;)$%GAZQ9Wd*lJ`z%hPCoyc-E{#V$^QiV4;B7PDj@0#Xn&^S5m;S0`8a7m?|A!8
zA|3=?#afl4&AI=xK|FQ|?a81)s%k=$A=~#}m^v=B-E<u^-d^%0GJDqKEhpi2$0rZ-
zz&v}xrC*XkhD;a#ofDBlqfp^NO`<J;45{0i%Y4@?q)xBThvuzm*vBWP0W#d*;lo&1
z+VFvt?0j7MttS)x{FFsn2h>$El|`|i2d&4S7q4o}^EB;ufwG)n{zT(8<inACKKC8`
zmmyQ3Lzage!kjxM-HM_#$^`3N2YfcJGV2_|n(GeS#T9bZz^ImCK;1fM;3R34r+kr*
zwMN_KE`si!rJv#tobdkDJIN7|VRgH?E4Sv`M4PneyfVLijzv7~licBC_Rk)oh1MgS
zPX*J<3kxd3Pfex3ywY&lw>JVuBUhuQx;_SJ$|33Y8w!C<m$6K<alvxRHp-uf5`t7l
z)AKXk$>*kQ&Nf%S6zBAHGKssHoU%@8VS~sM&^-y}siA`>E|u`gT&91?%--xam3M3R
zd8Twh((>Z`Ew_fNyuNFbdpH`}A37@_2$3p5q1DA0*mL&&PSJ(pvY-yOWQa{4G*jW?
zFMCdG^^`lrUm=`lmD)*~JjRoE?J1*Ro_SLespyYwZkA&7#9~8++U;c+%NZn7@N^RF
z>J*^P{XQy75*DiaIw1-17!gzanDGxi^MZqLLNUEBt$Q(CIFw)2kXeC&l$d*axg7eq
zm+6BO{Qr-8B<~Fs)9}ivCxj3=@DlLAeqW2FKRhMk8I(4J3itQ>R4k5y_l1o%>d*>l
zxfI^d{igP<dygfmP5wxXw<IEjmiPB`Mdu6+#r-eYiIlQ~I6_XZv;C^gB`+mBpK6Fe
z0<0KrOuQzFAia<NjBtp}!@~HqLyVy=8p>0;!^9wD-%H~4wt2{+mjfKOUaY6Ti$q7K
z*M0lcpeaH4N}GTc@$~}^pk+H346)xi<nA~fp-;_62Z;bkc3d56+_A2&C_o>2OTNNu
zb-?s91X#48WkUFrnPSlb*^z#b>nk7E>UWCr66D~<N?LWYP-+{??!S5v8IV5hyO#ii
zw<HDf=ECvK=rsfgxJ~{uSrVRwz1r9&b+}`VN$kle_)8MoBD@|_$C+u4ob$uqG~_gJ
zPF+Ls>iL5dHT{bB8!|0wQLj6A=fY{q3xH<z+5I@c<K9~V2#i<xLlq3@cro1a`jL*}
zs5w3k1I{{I(X}Vz^Fx$)0w7#B(ko$;7P;)QWx^^2T_ruZMuSIKPb#IaNBg9Pmw<}*
zI0dq*CXPdFj{~m~fsyOO8{Q}U*h3Z51j!C*UI}wLE@w$HLhHgN;11<kC(T@!p6C5x
zP9W1HhQP^`uqoUfE2%t0i!45y@VBM=!~em;Gg5>FW-eb^rt;WncHabdjc-vgL*o}G
z#pfCQc+y{4val;iM9-IFM9r*h%;11TcoFK-%Vp9RnhtA4U{YXI*B|V25G*=m17T$l
zbXgenb%SF_N(vcxC^=J#^9P|FDG|_%^dm#MO_pIZ!&<U39BgHIDuYV!Wb~$2(O)C|
z?AN%ptA#>|ncfMkFh-6I{rJb&MR!`T{x=r@L@s-x1n2=7$qhPphGa;QEc)BuqZNy{
zlaxPxeIn&0FUgFumXl!5WvJH)Z_Kvlgow4ge~J@WIqTmd9)A=(e8L(pfivg;71LUM
zLu`cht(;V>0<`J;@l#vu@!|Yz<efk09NSBk7EqY5AaD-opBL-3dRI}Gwm+@~uJw7+
z9e6U8)}2fegm#!iRaL}!xnUOeN}`A=U1qH(iXfKbRRs`6_uHOZ2JujLTeGpVRw7HC
z;=I9oB31^%t$n{5wb*kr#m`!$s>w^^McaHSmBFts^zTKLw+T$41a1W5cOyMhaxL$T
zE{EL|_2a-1?kBC10b27h<sb~M+(k9#^yVyDU0><D`)%3(U+dHRx|G6Htc@|A8&xhA
z)oS7gXVJO2I8UF^6Pg5C&7f#d(#Uj8&iT+eY9VK0nIU-g#kdWR3hNxK-n-b;7IP0@
z%+yaQtF8hLX{PKE6EV(}hpex>l2(t-170TR{6j2$nJD5@=rT%V01kyMkz0T5j9FWc
zV+Yn9^P^_^XBC^goj%Bu&tph35j%Ue=1L0>`I82oc{{=CN#TmOSv4Se3N*r;X-WT}
zP|o4A-k~!q5quFtW7Mg?SZ`ZDTe}ZSqqmJGGVe7@S`v4%6xa-|dn(fK(^Rr}%CdBb
zJC+X75^apd2vnnoKk9iW*5wcAk8|e}`Q2~YG@%|=j}LP_`L4$_FISsKXGYI!J5bFd
z_&z_s5q&aZYw#Tr9dTf;<EuunyQfVYh+uo1ltDfR-$B>xh4bJ_ubD)*XAzFJE#wqo
zn3D!h2K9+hhv9gupyMQUGd|p}CZ8)8=%biGKteufv?>>h_KVCd@2B-2HN!df7QYrf
zsjCy}b^J@Zt|%UbDer`W7hLt+pj1GoE0~M&jzx|1lO|&LU41f}Pb$g^LgG-ve09Ih
zj2s<N%G@T-x*mxk(^0nc)*(_-P1)<e@#i_7O~eK7>Tf4W|6yQWLU%>@*{XG0Di-4^
zkPs4v2rP974=E#yY7+`dY+I(&v}n3Jk0O*IRT^2%`^V=nIJ3nJZNGjxb5W7%tnKvD
z1yMB4?+-;X(lVpT@z^Z`*mKcbo9F|xnZ`Z>KmRZ@Gm)n&+Q7cIx7^pD8R<g5jE`4<
z3w)x(iikJ>6)P2+iBpAYZ<*9G*?mr{$8tlb((=}-%cKIW=_^P~Ia=(}ogbPH2>*#%
zDbW4kg=kCZ4kz`DSB+3estGKcg{!pt?NFBqUeQPb4?<1<HL_}e`p<xGPk7Rr1o3dB
zks;Oe%fiLsNwc}URn7HGks>PQQOSEwZ)xEv_}BwML_JZwT-vY#4Kj@Y=OAew$Uck_
zsk=tKC`o?I_J9}NuVK_=MrYQ!;M1`A8~ETq7&sD`$|9Dv(lykIQ5no`>+!;EiCbr1
zse0J@6YyGJALY(Lw(@P#Vk!0u$0ySUF$EMI4MaabGAAyWv7`Hqs`!~^u^B(G_&^4B
z7!iZU{z(-`4tUtN+NRUxr4RV*hYuuu#1)e<+rs)48+dk&*~6ASX6-+iMVy}y>90n7
z5)GMi+GWCHX~}eP78vMQRr3=6v~wp@CI)4a^oCe*x4BZ@dl~3*)Q?XlG?=vAe&XhU
z^LsMplZfLVF_$M0yABzYz1AtcS|5bFb0wrV#15Vr#J@{89MWd+X(C~M{)eenCtARO
z2AN#<s!@@&f(Pf2(E!~qMkd1dvai}$A2A}jp=@;Q{lBFo9^2pGKhsty&AJic*sE4i
z>6>IOlai^McjEC(&@x3WGQ2g`@h%>#Hs>qZlnTlo4Lf@a^sE}JwV&f~nRJM%rhYu1
zFu&l?*k@PpSU)Tkd=YJGefdpN`<dY-{PdS61j2WaqV`Tis-h`6pV&wTCve{X?1Ozb
zN?KZ{pL}!v9Q&LMrb4=HBC4YK1*6BmIX{4?kjz4+tKtl*eQV>K(Fo3Jwm0^fZFJYX
z{_@6s+&W3Zkf@$5quqG=iH$(@5m5X_*-*S|1#i5qT2SyNv)O5*DGSly0!>-7YU@0o
zdof<soA`O`=1gcN51^gcB<jNx1DOw#uV&gq-4427&S8+_%*ju(*zUr(>WNTf&u_VR
z)q*CiAvI71Uey+|@$`k5_(MNY5D+~oR{?8@eVgxR_Ed+|*44<hkOWqD(<K+vLaW=r
z!~6#22eOki=PpZ^eOmjuTwB+w`zp_*!fHq0K@}aHqe0bjxak|j)xY-IzjyE!R;Yx<
zAbR;A()Aecv%-r#=d*)X1|~s{iu#Ap6mk!Zx3!1)q?g?Dj*)r11`B_AT-=0ZQJ?e?
z75*Kn*)O4hq}dEq^y}PEZJ7o{1=PR6D3;T|OjR1d+p1>Amg~aEwN3u2$v%FnXe?G4
z{A8rJU&B{{!W8{V4v<_?+=6e;-UMmQhoz~%DymbRKiS&L7j0Z5{FWD*a?+g--UbWo
zo)k<p$!IS++O8ZzCed#$3lttpNWYW#mpFV!fRW}K&}3ZpagKicS_V&du;rQkAdg%~
zU}o*>B6QnDAV0COzngD%mnqEuBb(^FE`Rn&p7YQl&l!>O`dvaC6B#lFvm(sD4X%J5
zEHovus$s2uafK6yP1U!%6o-yZvlBF;(DmL=z`ZgU&2;%Xl<(m2krbL^#>6K!^O<)(
zEOatyFb&1w(U4kOX@W0Uw_QeIQ|88cg4?VLIdhxmTX6w2<!!-v2H(FG5#B(8SoVZu
zw*X1o^Qd70uUjiTo;NeWAgw51!mP_+tb;q`v=WENOkT3%sZwpD9VN5aX-<XvN*FQ3
z^Vr^?N83Wv4M^^3p|h1;Z0H;1t$rLV^_bJ`HU_tH)T9BKg?Rq0A(^7Bjv&VV0wka&
zEB5*4t5w$_#bHY~9;*t#89;btL~h6!GJ`h1acax`?|SUFCKOP6x<GX=;nxYJ^@IxN
zoNiqAvIb@Hi5^b(?|Bs*)FXh6(~&70cG0)U@sQwC!^=;EBL6qE^3bHBAw1lv!!3#-
zvMvQ@&H}9-?ETxy540_wxJ(8;M9PIKWxP7>f&b_A66k<#R>BpxF^s%BT_jy;F0!QW
z1-x&m6~r(;`6xY@&^&H=IvI<|<pGB4AnB_fgg^dkDH*2a4Y><p{MSvRo{___$kyLK
zEqvpnK<IoY!*kq$XniJ=`WHb4Qmx7$M)PkJhc(^0I~h55?<a2C&L!xTWQrTuM{vdx
zM98giOxR1Cj|5*3REqNrd@tu4p?-eG$I*L8wAMa0Wysp)N1d4ALIkBsXR8IlqN|o)
zOPw@$rhWr9?ebmD*>Yn1>^<G9I^l7Zl-Hgg=DW2>-dilrz6fTcQBv<TlZ}(Mt($Y5
zEY`ejV6^v{eDhwfqqkgWFI8}NMpo-0`bDRcu9TG2E(8$rpernC8X$PF7_Y}YwQ<~Y
z_o$}D%%@}f-9ry!*U|r6%A+qkS2A{BkpT_`fBI}(UWPX|-CFhiYiG?%rF)k{{h^4K
z7wTwHp~PJw1nM<T$1C(i9}1{X{<~Ew&JQP3au_eF!!^DrWCkBd=v`&&rBqn8xhA_k
z7@ru~{mA3%zgXqaWaXS-v{eJ|8}^$zmFj`4{?Ci&i0rODvzGVGQ$*^`DS$>lh&q=M
zP(DR;M_6ZbhMn>9XTF0*w6d)_r5dJun2rjtR#;-ef+3b&L=?76!d%t)`9pal6u;zx
zm+@h+tQUaysP%c%tN0cqS@L%uro>OIGK+OO2UVD4y5x@C1B<Pdz@MX}>j~1oSE;dU
zp0C@F-U@9e>p>DZ@_|6bd#{q2VmeaVdKB77`mTrCY#DQ7d5lBD4USrTCi~T#XB-<d
zm$cWWdSd-3-0dF@`)AXsv`;tI=*>Q>++b)M$}5?C-u0z9{p_Iy@*|hIkr_0zcnmqH
zrD=XM48qu1VV}!InLag{-zcl{EYjFo`-+Oqwau{f*UF9YU6ADsp5P(Sv7}LYzIny9
ziJf9CMFVvmu8z3x8UaCBBJRX*8^QF-iY_?khn(~3eR|`u^e_h7T9TOFwGjZfk=Ni{
zL@|={(UWO2TziNw<W)6O41bTxkQ4}J%L;V93=l0uNGND5oLu;Iv|2(&Wki?O=TZ6*
zmoP2s_zIV``lddC#ORK5D@gj`mD@+iuU~mN3OnMy^S1TmIO<geV`K11i)Be$a_)oC
zyB4{xGn(a$>u1zE>YC^IA1ILycNQ)pCIsP-hUDrVfo2+9+&Zk<odDbegL<2r=lNZE
zr(a__gmjg#ZwQRlP}C<)*QS^(>IzHP){tu+c|{kT7RfCe<!>o|l=$x9B^s!24E64E
ziX<DL_cyYrAG`ZZ)%c~-zma+S0Fbb$mx~xv3mF+<%;{1JHk+n=Yxzlw=rCrgd+e>{
zGzhL6k`B^pEL#dpi_8Ej{dF~~Cgc_b(r`9hLH$Nggb<wbU7aKNfvK?jHS2Br@7F1-
zhwpc;V|<sBneqo3heY4|yg(|!vx2zV8Zoy59(%>xICka)X4oGgyD6e@n#vG~y9GJj
zXQlv`bM^sG-g8@fu;+l=d-na@;aqn7o3w{Ev4QGL$Ys7Bx?%&qfFF&^DE#VjEog{D
zfJ)YNd_JNW+lqUZS*6IS1Tq1Sw+LZD>47{4n+e~I6Tcf<DXfl8gh=P)rdDw2Ppq5g
zYtAeZhTZR<XWuZ-geFzk*Cti4D$>wGL*h_VL~G!vN~)-ae;zf;wGjG+ipUJgWqeE?
znV7)bgE?~%3aC<araK6mTIm^j7aN@!9s<DQ)mi+BEvcGR%aEXkC6%<{;K(qptLK_1
zw+`P&fn0HvDQ*kdEy7F_KEF^*O}4nZOA6<O1Z)==J+tw*sliWAnm&D{$n3CSrJPZd
z@mX!bslVAO@w<uH`P*$%lD@jC<vI#%xa%((IBVu?!(m1_p}k2DjDg1zD_g=595>Fd
zfmuz#kc<=iRc_ZO!KOGl8~4obMT8;lXEJOwFrjg4IrX)jYP6eZ(tENdO8^xx+7}d-
z8JfZ2G4ub}dhckuzO8>a1R**JqIaT8^xipY^iK3n^xh%}qW9i=@6nU!MDJa+qaEVt
zj>Eg%=ic%B-ur$2+r}`?UTg2Q=bCGN%4FXg4sf<OYpL3Zfp#epKuOxKQ_JvF+qaX>
zUya9|zgjQr$fa#EhGY%5;Wxr0e|?x(bvn_h?d;RXOLWQ^x*dGf!TvU&Wg-13dSK5+
zU>9*cTuwLpx(7s7()lx|<2-}|O;Rawzgls6)-BJ{0{KAuxu%@1$!(CIvW6ty=(Wt8
z*7Az?Zn8FyS1l(rb1^v_&v$TqVYo>pwf4+A++q+y6_M}ikF1cNfN09Mm^tXYJ%Gum
z%SeSi^tja6RUgNpIP}GWPm%qMDfc|np6=7y5<j~PURdpT9GI$SqPv}Lu{r@HX~Q+|
zwDB2}#_Ir}QJ(5~S8EQp)6!#OuUz+S3cljTk^3G*i<7ba@a%QiCosuzy2+s$Lpma8
zRi!W?1v}9q76)xnWlPlj1*y}k{?qfTp5a6W21|<`!lQApBK0^LaX&4xO>bkoxsrdJ
zKvJ{H$F+9%m0k3{!Q-gk#!~A6jLbb<%#`OLV$?`G@F7xmTnqg=BSqF~UiTG(RJt=#
zB9C!-dQ6Lt<^J!}=fC8q=IM8Cy+}Du?CO=%gK|W`<Q55o*WdSdRiPi>f3gt{>AOuW
z>a!KLM0}ov9j;BsVK1Q^@uR_FR3P#19nAzjn!7HOvQe$;LcIByTDppe`JoigWD6~)
zQRWx01!rg<>}OHG0jX#!Zr$!VIQrxpvA$`&f9>C_on^Y<@l-uF8*7-CWPfU(d0cL=
z52%gyp7yPG+Pps<8VrqdfO)ekSor>LZ+Jh6^ufAk_fL@yH#BlkN01+1CpE;(-0uqA
zt5&)}-XSSE-lu+eVv1+L(nhf@`%#|-Gq&#jC9MTHU3rh@zy*5Gb^$43%ges(s>~U^
z$2E)U(GL5|dQLX}<|Q=oz3Ppke6G5YfuEWr>UxP{AP^D3gt1yeI1Hm6+9<|J*NQty
zU1u?x0w|Va4bPq>LQV4cEFF(<KN?SN%UAwHGEZJ+S|T(?(^7D<$szgUUytr&rLMFB
zo{CZlKv^=EVL{cP!J$RaR1)<+8n+?q(QG?mxN`(|iz4)#&pS<jXqPiAp^ZlCEuG)6
zn!81ZLo&J)yoY;%^2Wuw^;DNi)}3}#K{;up-wf1mS1n2GM{bZGQNXY<=zX#MBhE*e
zV53N6+Islj7Hn09l0LZ0-rK){E+%b{D#4KxXkc_DW1lUnza8oS3zhN=F#!LADrQru
zsCK+xE#B-zXR<u8)>5<K+)NtB{Vtra%vkhOyx}BOVZ76_PeLwlb0C#Dx=$sY?W6M=
z{L*&PXCBGk+tp5iR5vqlWso@nqHiA?f73vNbA6<-3NN)OsaG7dAEEk@=|GGIOIB(W
zXAwZUr_C$aU(gU$?aTPW!{mLE!j;ugC!#qjh@brTtWDON84x<0hKMLIlr9!dz`Gc{
z7n560f2~QP94C^>QA<;r27lk!8CVPK%i<!ee+HB7%j42c7BhgE8NjtdExauhS#v2V
z{tW;6LY2TL)F-P7kzUMg!k-DILv-0$A<oVpijT~6YssB!>33HsuRl%U`VC$?O<~Gv
zg4ie$`GlYQFrQD~pYKXD=y)z(g6Y|nF>Y6-FHhwa>yR>tf^lhN`dn;0yb~Sf+J51^
zH+h480jLi|gv=x@zZ0ORDPyIbOqkvcN%r!%sBL48fJ;ihc`lbqf(+JYt?)f@<!XbD
zVkWuybaAhhyp>P$E8#4y%rzlB4WFie!rvUHa2?lvz-u)WxvZfLGvu*kH%Tj|aO$kJ
z_npt63Ot?_)yG$86N9duoQ?>On*p%>5cr$|Q@u7rV0$2%g!1zGshVslnO9i29bx}1
zNfnSNYczoF(&Jwx77e@|h)N(9bUww2D>AGK=Nt|{^W-2zH3#KQ|EbZ`@oSH4*QlnP
zj6d~j@1ZVNBsTiARXdxv?B+lI8#v(9H3opkc}GIk=m|~+?mTaBm}4Bj&IOG(vVJ_2
z{3PxT1fKftVfMbC8|J8K>!OMI5=qW4<qEbepTjq-^J4Q1SKnJt=Jn?Ip71jaJ+&0M
zb|VF2iwnO0@SynIe=<}C0krIGEHMD>eJs&gJeWlc=0}god}TpIj32KWmVVPhdwSur
zA$}oGJnldiXt;q0>JYsg8l5dOInawwo%>>9vf;Yc$sNvIdKP#6`F$X69Y{>XzQ<Z!
zs4oE{7}!TKm1T;g(vcBB8l8q<J_nG@j!PTG1qdtWKItBb3|1H`(tfaHl`Gu(ofSlF
zgx5qyw(C$o&)HJd^k$HB#5di^vOm?Cx~@ZP;dzG>daK3wXP-(o+gFaShRf(q4Z|*@
zn_9di*EK2LcIP&&gky@TX1gqgg3vqcJ9Slv2)4ZlXd#i(@*9pe*?-SU!iqQ84L{4`
zpfYTB9bAb_hE_s)Qto?~CjxEcsp};3Dl10?BO0&Z_)bXoFZX@MNcmlMKrWY`dQ7a}
zT5Sae)8YoQ{PgXSXUR<zec{!*eG`u~>5exc?R=q>JNzo{`W>l!`tNcY+ash^DxOeU
zCob*bRJ{!sJKM)ux4i^8<@ool%@2*<3ta<Y&MhoNJq6|U{)$v7fLF_}0osQ#e(uA2
zknri-1fqZ*&P0yY?Ed#{F3a!=dcqY|6yXSk6|jt!Re;Kc9Pvpvdg!w0R)}ibkDZVa
z?A>T^@$N{`K|P<=^NZ~T|AXRGtTbU?kM7(->Lv4GKAJaCO3_2-7L9&&VA>@D#mM0W
zWp9x#nXvo!x56u*^RHiuUk&S9<O)?T3^1L_{ra23l!<D%w$n-Q;w_wfe=W6boiQ+s
zK-6-p<(}e-K%17yhG@ayG8;R+abdItcIU|JZ=4gAn*iQwRk~pIUt@rMi>Mj7;xr$M
z>(Z_<D2EidbfzARo$k!eDb1`rmR@U}U)T75oQ?x8xDWRutm;fG?UAXit}YtQrM5X!
zq_7PC+!+2<e7&F3uZ!uh5hv2Qkwfw3nqqfg#bcfOPS&U`hVg`h8`PUVL%~9>z2&r$
zlN5=6Qz2ceO(A;8Zo5GRH(DK(vwm(HUKW#s%qr7fnD`BSh{WKOnzn;YirPu)@vW1T
zN=%gWU5||Eoq++|?!+_8Z^-BO5rEQUbQE}#AwpN{4p*$n%!<a=kaxU~vZps$`(wXR
zhz7(G8hM$hpSAEgj*8q4Fv5}-KAs-NtMVLFR_6mbm|nf9^f5Rixov$0oiD~b^rB7c
zj^YpcH;E3UzT<$lMrLQ6!By{{L+5+?&_TKB4|h<!;`)2Jgl#|XTn|Z>?3wb{h^eGK
zeS%Qa1(OnhVv{<Gzsbn_86BtZsb*QvEp}TLDKO&QR9+8pS8XONAp^BsWo=1ejdg1o
zb+KX1$Y{8GWY2s^p;V5pP@RDkLE<#=!jiA^PB-8Lm&aj&+H7UzeS`qL1i7aKcgj8i
zX(xK~Efi(-4UfGJ%Le%f$)AZsXaY7~&)l3xo5yaJf$?9(-Btz@of?+dC3c*J7iutz
zhSw&5L})L2!cJBTYoU+dXNiGEFh$2GB$@)c&%YeU!IC4%Ua|!XbEGgY%hm8y_c9ux
z<SlZ}OIQ?Tjd2Dwd<wP#02M6%4j2G~3btGI=WhS57o1+70{xmiCJc=68E}mhG|{P=
zTwU}4HCJ*+t(^PnyQq<cHgqI}LH&0fLZd-<z%PIrUprKZ-u8G_&atycw@f{&9v0nu
zR{S;+K>h%?uZ{gK{-iJ3ED8&S6sjswr}MLp!<NFm&2|d`)#eD~az#P3HsmVin@H8t
zKLqE*R0|{&C|(n<UFLL1v^8KWyxStPK)3dqbe);Br&T)nrnF*1dxx&Jw;2m}u+sm8
zkltfba$O6QJggrP#qnUCC<|pZVPMALUvk>q+Jv~x4zJ>N{-i20<n1-Z1TM=&b#r>N
zjbTE<FV-AK{b$bUYt7t4>t&%RC6j3fJ+v4~Q7a1@6Q{5|AII$m9mGs-;qEWRxd^Q+
zWsgz0E=i#7All9c`#YspKkIhdTNn9s4}}oj&jTFv;`MkH;s~eS#`^k#BOg<R4MEf$
zhnkvD`Um<%XNEuAYNoR}NK8Db{Bkpd?){Qckd|TiaZSgG9{GwGx4Zqc$_$S6d|l8K
zQc|Tvw)*d#HjHQ=4bBDU{`AG7KLFaJ|9bUGb2o11udB<N@TnTRlOcY0aMHY6vfbM7
zrn<btSe;_GO%k?}Xr#|3G*}>^GWIrlv?z5WjghcA=vaME<(>e7W380<1CV4c^!+8C
zbY&A!l8o$JBJz`n{pnT(*bgo@Bht7{Y8=yj{DkG3z1gFUgS#64C@3>=Yd^_~NS09t
zqO3tmQbI9e0l9vqS(l>6H1?d-wLSew<FK+JF(~<qgKMoOa--`=se-x3VZmRWce-VH
zE{O!bj~^$QtTMIGewBi~u--e4<(23lFYpks^L#aTJN7fG{c8@m-iNV2{SEA%=`KmV
zr1;lwe(o65=r&p|wB;y{fe7y6)gL>vK061j%@Qe|oR<tpiCQANgrJ1!A(sh`q=a5}
z)KFJ7)^=f2@XJ}j+Lw8f`R?~1_*Yj0ljmWZB#%D59}S;RPn`(Hz$0TU&1@3Cn7ADq
z8@ZXfMNi=&qP+&j_n16686C<RPUqroXtu27HhUD=t|cXfqlK1sziGJpr(XuEH@R=j
z<5uaA$xwOBbgq$Eha;hCok1sBF*QKFM0R461~<)p0A5LL!?-20+6hblnt9yXHX76E
z?%RV+`>`;~UI(`7aH#fPC^Dz$&z@3dVCu8f9Gsb^hNv$l7rut1C8ZS3HW$zHrI9Ld
zI4%)%MDArgT<(Fqi%3v5i8O_g&}^GQ0g<#Mt9S{EcRnK{1O97H(U=vqO6#&4%8L(u
zJgqLVlzMQgpGf;vlDmdvZrtPE8f_0$(KirFw2p4E7(W7>HV;UpRCcFt0-=`5^rU-o
zePA5|tIul{^<RH0AH5`N>zx?{5N0BJ-^bioyZw}1oz4nPjEVjZ%8>k+8boS&-Dv1p
z(HTDhjy8y%){tnH$EvWyiG#b>gjw3W0}{>e2LkGn@w6W5lifw*G~!2JSaQ=sk%|Wx
zDu+vxd{{;x(7>a9#+AbA9rU5c^i;)fpReE1CpFH5Cyp9c`8K(pdcm!G{D<;~b1(FH
zj&@x}B90q%0#h1<iogZV5&Xu($ulRXPNWg59;1bgnz9QiQUf_jc}fge)$Y!MJvI*Z
zNG1B4x@%-|Fp77RFAOPhB7&;EWxoMQawX^?gi!Q>zlf0%7AS8rnf}fBk<3y_SvgFo
zPk{Fa34iDXv!ja5t?2vJ9P6)02!V*)&&eRhtKe4m(^Gch;+@Hz(;HTjmQ|bQS4#c;
zRhHZ>hD7r}th#a}^YG)jvN)g)74*D6z~7JAt^h1*PSVb?MQ|ud>iX+XP1va@V4^f<
z;9im)jGOF;aJ$JX;Yk6qdu*Cfu2j<d-A7XWEc~tP5y-9_e_wIx>-T4BE)1@&E|Lor
zZCOqi2Jo&)$rL1%IjrR(-%f7jZhcP*aiII1MSVSb6mkT!hAxArYMGA+6F+wwL9GsT
zLYUJV!aa0dikF<PZpX8ozU432dw9FT2%|CYC;e48<_XED;&>4Fv%pOFW*MS^-I`81
zir>;jJP3(^Y-_2*$pRfw5DBA(rzyr@AScFYUs`LxbVsPIP&PIo+Z{jsKIlqu3kOT^
zxbC@PA1jy?9ug6-Pa}w^-)b+cd2Jm_>b+yu4jZzCjbSPT7T6s(j{EJ~)H)m`hS><j
zQicCMT+UW#jq<i3As7Ea@HC8<`leJdUPzsl%^8Pn9UYmKl^MVSPC#_QjiyNQtDATZ
z?H}2I*>Ba*A!cW1LsGs-5OJd0ueD#crAg-b0u3>C&QEeBG%-FLbUL34-oNUpaNl|p
zFrukGpvo<*jZ{;DxpH{eT^0q<knqA<ATh(=z$t?d3v!$IvfaIMqHX}zkdGunR6&sZ
z4Q=S9m|0~OpW@PD6Mb{x;|$q%1F7C?&Dou(WSO-yxvhY%6A@GEM;OYT8^(n=A?hon
z6V}yDc0^UQp~tkJs?C}Xf`*RQTed4@8a?G_`H$M=ig*;U0?s<CM#?qHuEEiaV5R$%
zXp_*$1G`5)ehpzJX_~*2hnWR7WfII*v6+VXNZ2$%Vg`sVWy`f&hnWFzG#1^4zWv+T
zow{E%_tG-uRcJ#;{Ui-Mmi#-M?u4J>yziyv_c#x>lV5+Q$Lor)NbtWa>O)c4M5W9#
z{Go8cALCL9DdRKQZ%$667yaN+C~!yt&v+}4!M(mmGXYm}INkE=9{2-u8!{R32Z-@O
zbchXGM?4A=R2b+;JI~|mH3eOC{=7sFQ$+n2av+Foj(jqR@lh%uz>GiihahI35+SM-
z(6905O$EMU{0r$2O*Ag<Ca?!Bb~ed#?j1gM-^)9Cj4mEq3;x3$vFJC9StY#*PL5y=
zLlloU?PAY@cU~%T;|Mr?#h{d(lXh@`!~;UPSlKzFHjmEUBqe&L(f(g%z^%nnkQK9e
zs8dJD2$~!Ha+G)f#Hb2R<rpG1l<mD;^1OVp%XiSGRv%D3<P(>*+)>1N+ImO<6dKY>
zzED-JRIH2AIQ;1IBW+sXj2|GCHajO!_Hum%nM6SZy(SWHE8_;+f-3TdzXR=f9o&#N
z0V&*~sG{;GiMxbt-}wV9_upxp&)u)%FRv`ffhN(EwNwC5PXkzh$P@X*0PWBXlciLa
zQrSVKt9|yRKeFcU9_4@i#lfHA=53lw-yc+=0BDK(rKA=<=sL+<LRR<MzOt#CzVvt+
zXnPT?7vm?@da!`UGtv3wfV6?#NS$SsJaT%rL&}fxANwO;57hj&vsJV?9o#t-)t&oJ
z2g&)y{ynHl#z*0=-cMWmr3MS5Vq%xY?c3xLslPX#G}gT%^t4k2a3*&su}g7sh>F+;
z7lf)rMS2W;F|~J6{HJC96z}9^MxXPbUyvpoxBIS;7S=3g>0MeFI+V5<RwjgPWBHje
zRXyJ6C@>Ag4~YBi@^pc*$#ptP{q1Aq2hk)TiF5@_$UD7tSII(}VRDy5!1V)6$(<cW
z%|O8unjIG~57=MCo_yH7cObmom-L<f1V|uruW@CmqlPLP0*O)Yt5NRcGzndPCZczl
zn|OM*UV(Kvvtrnb%t?)zPeN7z>d)UNfW~`RVg}5Sgs;gCJ(_B;{<Q*6!PIx0Pj|Qu
zt<K!_X>P#~Q3|IM{hl$Sx7c8e8?M%HaqrGY`LQtQI1@(v^@!l<kd1<%tLfb3M+9pQ
zEAg~byXvRva4>(4c!zvdF&lcExg1O2bulF?$khLH8&!jOvpORg-UjA2#M_(Wu~LVR
zI=l?i!C^%8yS+jS_wd-sy*TmQ5k$|7esHk0&pqkr?Ian#z4p7772iPAqQ$gQHr^8a
zxPtDY(*Sv2l*B7*Bd@l?uKWeHkAbrCWfO%d(Z>GtMq?{e-)z2}k*I)Heo<fw5fvip
zA`@k;oddmD;_EH<1R_!@f2^aGTKm(E;e9x5Pxooh<AWq!K%tQvfg0thUzx>EFNpEg
zaip^Hbg2PYOuMaiso4PxkVCH4%&)q)?-@UY*JR+9357<Z_2qDp8t^La?rcK2?tubs
zFUva=BpeQ^PeWAUq)q;UrNmq&*%u-^lKZtgy?ZYdze$RGtc}CAG*i5grT{*@AcWvE
zl)J?_>D7pzhQY@HG<(OxCkV(()9dTwZ@E4P_3L<8K^<F>a$4eiT+YtucNC(P*n*%_
zYO$BChR3#dE8{IU$flyDf54@yZ+aw<aH|ZgE|N%brLrLO4>x~bFQI(AC?||NM<#PP
zr=&CaKEHSKb&MQ=U-32srI7#EM`O2taS=a?iFIR4Cwz;OtU2Yt5ita$zE6}p{%k5y
z8(ct$l2#%q<)q_cqjwdd_-*@-)nkc6mh7=-WJ`+;5ke25OLv|{z^IlgTMmBF4Tg?Z
zS@w1#V?PTahqq38d2c=|1A`C%zEi$N6nG3A8X1{!ry2Hrvq6|JNrn!g*_8cwY7*ip
zC>)&YlT@!w*;4eU{zcc4QF2hcvyO{cT@oRMXI|TkPEl6EA6+&|C-WX_*RKr{5X;PM
znwB4kDkwF$4WDVT9!UY>^uIVdEVz^D99-N|-t60t5_lz_3n-A}QD^zuB2u&6PQ&o9
z8~O7Q>*+8z0**D&=#I#)0BrW8E7&&z_vXlqRnL?RVEM5^rWp|fkb%@B_J&noiQk(B
z7R_-<N9F36<}*9o66ALyxSIEjaFX+@lJ-*ookg^fBa(5D@I~E!Mbr)^m$c+zF|26B
zUXGEaOer$Sz)}csS?fCcP1>c!`gim2QQMsa&dpKhG4a6Dh>2i^=wc0Z9}qxan7aQo
zhd9@8H+djNlmC|us4S8AZu~MC=~!$F1{e~w@;{`0eRz=V%wl}?Sz4?x$P=q~BFAq+
zE81|<?Hl62x*y>HpUKY3OJ4lP)ZPSq(NK(M!Lw*Xptgll#}8B}ZcoLNm#WcBDd<B~
zXX|u`9g3lED?Pwzhfx9ldUO@|L%S{%Jn<Z>Z;G$ZTZX;X^|Mi%aVME6Pe<oJP2qP9
z@H83O34Cq+rZ5OQ-4MFroN>E&;sYnWjzb#k0Qe&!7U&i`KbIP<!0+G9{>D@n!I@9j
zLuQ;PrAKfaCw=!^27v7o=;BfzG4*QVNEvzoSNA{?tH+CIF@A)E&|SCb%e1LvAe~{k
zjYxe+uMwsyEVMBUaF>xCubZK#1SQpiK5u)L3}~vWHyWpP)7B3svSE<A`=DWv3*G!M
zBH>!+OwOC-L&|u%j~WnfSh%t|lCIyqC?!Y=rUICL3IqupRY6G&;n8%M*h|+pvy;Fg
zvn^3ugI!!6yuqLuuKF=vG_XsL07ThFHpRe%#e2UrAMwMXe7qhswVZ}wd@txQLoV-|
z%b|Fh37#bif2t=wLlQyU<N3x?I*Xfp>h$&3&Qxzb<D(9}y{{35uU5b6|4<!|qD9}%
z3B9@F_3(neh<UW}EBsam)+dK;pz0UCefl~&pE2j%wI)Vcbk;t~E@sdpoIWos2a5st
zzi}U13U;YY#`}RM?#7qbaZ-QGppX6ri+7+(UXSC&U}zwljS0Tf2$GI!S_2v;KPe5U
zmy0ar9>{(q)YLHnicXo4SOTqRs+Nd`zrr7VA};Gm@jrG)wKh!gMS-*zo06MjYJ0UJ
zBbtVNE47_c7IT<Wz@32b#2&o7yqu_2Yvf;B`|B-p6R;yH-}WRnsB)67An$Am=B9J|
zAGB_LopGK$uc^fPTIh7g!v2xgMn~k!j?jq7@NhaaP+va)B19II%T1IgLKyoZPfBTy
z57VsnhKmJQ(9oOr2R4x7$>E(k(Ti$ClMCN{eG-e~YTh@6h|wYF8a68#@wO5B(J_*%
zBnQ#5DJMn+tvYPy?ZB5hcH!yK`MCIq`N%tgW0wt+NAP@-uXzQPSsTo|Mg-#OT)6em
zK$5w6`U3MX77!=WF<zXL!$}i!!HzWk;0SlrM%)AcF~-P?jhSEb#pH;^NQ&eot4m95
z5?ddeP0EKq`cfj?#$A1neYv2J9(%(`*#4DPd_exQrS3jT+09F&sh2~(c^#eXUr;cJ
z>Q3KJ2%T?O>(|zBM?^CdYs<<xpd;@H-`%<rd=oV;UtP!~NhKCm@d>8U-o6*vke;sF
zG?_6rBb2DOnKUtNvph@Um@7*Z4?gh=H!SpUZC!bdGexT_hR5Zk;Bw!Wql}=N>=Iob
z-+xB;xx9XAq7t#;-QAY<=|LME#q>QX;uW)SSI=?<t$6qKVVB!l!k4o7FO{Wq!yCpW
z3S&7_Ko9OJF!w^vEoA}=>W(P;aIX#)dWQSnbl?F&N_`h_?y<4YEy|D8h3}DB-7!kz
zB6*++L07A_RCjFcBx*4lZ7Gq=LVlduqkbmB*=MG#ENU`N?)X0OR0U`2o`77S$w{2*
ztraG)n*@9)$8P)EYxtBgdD(94%S&9eqxy~T)GrwMjxp&6y{IIhbk^af!lcBJ`=LPE
zesVm!8@Z#9!yin^xJt7LLCs3a|21A`15<b{|Myb@GLNj^zW0h=hl|_$2?OZI1aSBw
z1UC-*`zabpbmyN9oEElAoWC@iWF^O?2Cpmt*U}cLDJ%ydC_|A`*p0h6Zwu=Jk$7ma
zERdnRkW^|3qyk)Po33)$A@cThYzeoZUcBOdyoXdm6{GF0pH)xl`E>XLWm?rAl-QK0
zTqIrvy=ceQ_tSB?Mvr1ekSQWW9@HV*)GR+iZ6!uuE%o$v)EnG5f4A~Zs;tdY`(}%s
z-faSJBaHGEvcrEdj&AV(;)T=qP#%&b-v{2hZ8)sTQjQ_&C;L2rTUE&YekS#=Obd;3
z#V8rok`7yh>QOQh_MeGdLj)ANwAv0CJ{NJ@+}tR5K5_4aon5D<#w0%XDd~L;x+bb~
z`l_cPPN|M)7xn0DZo7lQql%c&muYRw9ohM28)sJvLWZQTy!nJB8L;uyHyFGjSI7~Y
zMdR`I@6vvy{8gR$q|YSFtkemHoR!tyZsP-clzM#tB-nOIM*%z)SHGGXE6lofu-Z@!
zh&sL>dWENIH{OgX@U%3=JX)wr!ooW_cQS}q9`k)UuxsI!Cu~hkk8>;QdBujr%?fz~
z<&Dgg1>!&6A>2-KHe|%f#FG0<abK24iQxp7iPEMXt!R91Fu)KZ=nDF6SLU==7~5wM
z<?=Iv;rFFw34<<X=dz;8(t)&*vC4&!nP>O-iC(CwUeJQk%+>{As+g<f3K&pGk)3Ko
zJ<zu!dsq8avr4y!&Ghb~ZEJR{cd!G%XN@R6Y%<D@w~OcKc)TyrQ~bG|Iq{zaTR6>P
zuh7!Q$H!l*4odr?CgH~=*AHO5j>E1!-q@w5NsrZZXG0N{O!2>f2aI@I6dhaLrxdRO
zUmWrG3ieJThw@`qr(Hw(z#X_aTjVt=ApCsW$z;FAak<lM1WPvT?UT+vei9FHdkst8
zzGxPXQI$>p#zYAFxZ7Q`x~(cS-|+Dld!hB<08c?qVXAh`0YA$cP%VG3S+UmRDS_qO
zDlH9qKM^bCI>fRlP^KM6Z!TT}he+RjNWS(_RS~2={#Xz&c~~0lLp7)9T6YpvyV3{p
zFLg)g&T#YG?1ZV|t*Eye!JwhgUiRthZjH{dK8IUBep|qtv{3P)xe*&n{5_Dl6eI7*
zO^KVylC3o&R=K?uj{R*z_Slq@;@RW_$WAP?A-)bBOpgd_{(V#3v=|-k7lKxQip-(`
zp(Rpn<5=xO$RnD7|IF&u^U8qSy+52S7-(@EzbDO0-O7Mw+3yqX&u;iM*n|bAN|Z8<
zKoi!Vqs@Wy)RfU1Hl6GEloYV}9u{ZpD~^w5&>WL-poxnfex2T2e@910bPZ3Hz(-;+
zO6uVAfw9v?=OGs<%sYnx%@?Dula&HEk9gmW90)}6Z7eBI*X6EN7LG2eD#0(tOK8zo
z?@lX^Uy7CneAE_`N<<1~#1Es9`R3(>H=y|K0AHuu?^Y(UFoCw;Sn*2M7?tvamKcm`
z&%$?NGo;aKVqEt2;U{~31iOQ|CJiic11&#GHJA@C+(k1<N#;d)ej`v1CA7BYX`wF^
zVQD)RlOw*uE#G5$@1L>7hFFh&?7u&xQ`_=d5J)}n;?6DMjEB7Uw|);{V&Wf&f>DtR
z)^nM^czA>kdM~;l;19ourA!@-#uT3-eX5$-=;Sk)ak!lD-{!WlaC|~xA_`c8;3o4w
zrYq~+B66L9@Ulgk$ZEw%BP6py6$owZl5SD$-r7fYVJA0HE1qjh%dS3x0z>?+QG$Cs
zh`P9GLVITA<cAir>%^lGF6z-4(?7kPpu3&A6iNqwiL}CyZSCw-xVZh)K@95K!)l@~
zs>o*A#ReT75NKWtlz0uVNqGorqoZoEBP0nGJ#VIpRyVG$sTuE+wvHrgt|3lH4wH-&
z+~z@SLF<d>%W5qPh{OtKS2l)zi}8T9coz!x-n@N%H-OU*Pnpkb${MZXYso1xIlpKr
z*@_l$6umz-cIP6o$*g+!E$KaObhgJ0U3~xTao8ZWT~rtj2OT9^a^aTF>yNg67a>oT
z^;1cNU>8J}v&7(pS7}-`iYep@E>OYY`cfMTeSo{AryFq_H_XX-P2YSlDiholj!AC$
zuI9w?nt~n{)n5BV$0%@|aq~TQ%yi3&5NT$&V8Pf@iT%y8y2FlG{_1A<v5O&j+w{Z1
zD@Iy$x_s#O8r+eQY^NjJOb=XCYB5uxuUc0lBmF8Z>BN^drP%~`FZ&a|+*X(K?Owu0
zOYR~oa;FMqDR4FQlb7S$Hj(yU$C=ZW#A7%1n+yfO3b$aYt0~M}6tATPn}UNJgGZIy
zJwvw3!0y-TtKBudNfv0E_5JYucGjqYfa*#Ie29mqI~(UzY<*F_Ux=NlP(JKqvWc|-
z6LpZ73sQU6PQ-QPdtIH)xCQv=%huZ{u~kGD@;2tJnBWHpu<nw`9DLlT?{Ci~DP(9t
zL}r932@9v}%iQ|Og$KvS2C8iuTy*Aa-+juk<!6i+hXP2}sH6l38MLjj`~(mvxL%2i
zMTr5?Jy?&JZDzkynt}Yo-k%THWA^rev>N?E$vfQJ_qiJ)-XDJ0YQ0)Wu7e2j@mmc$
zeWSyKd5rrbZ4p@8T1N>YRl~ugU<EzFyfZ0azx+D*GD6~(#3xjN8bu)vH3>KFe8|7}
zcdt+qCjyATV>C1)C7raTlbpepf-Cz&wIy4^D?9FOMQg)CLeh`Ma{ERSi}7e_B0VOa
z*YjX%^zQFevJTAMl}A7ahfDpQ^Bdjg?#;D@h9IJ_2gG;QLXE`B;~SR<YU@K)@rsoP
ziSsDYx(eP}Z){D*Gzxi6B%w&TiRGY=b;5{HJrM;hvEQRF!w)nuRNJ9H>E)FI9lT-a
zCl6KAdh&aZrSDp>2RTK&9cp}<D-Zk^eY+PQ1nlnkSqX26@CP3fXGJU?+dk|K?Yk;t
zX$EFzX-^Hw7c=hlUx9VnI5U8j4^g3mMz7;0o@Xbll>53zt?RR*4>(!d+HWwA7y+u+
z7nyoW*U%B}m7Vi@6${lV*#gp#n3gBy{w}4F86j(;|L|He*J|L#a$%0~LYwa3kCzVJ
zO}C(Cfc*aY1WFjZh%^xErC{$r;|xXG>7Rzhy;)E(x(k$kIP0Mf*M5+FXbEkDmK<#E
zD(yU`pCmru{C&Hb{oS`>qT!W7L{KNaH-k_tL_Pv4@Q_%f<^u`_oTZMtTy{sa?MWm_
z(a=FM!X}v^kh3&pkJ0=?>?qJ2Ma3>@#A)iaVaqul1!4!99MmqT{7dFSn~=iQD(lxT
z4sqbSP*acmgX9eHv`+r$Z8{t6>AwlvsrK=dpZiF^AIF}i=htLiiEa7_FfV?WPy~C~
z_=f*jG2-QY7a6@`{I!aexItY^D_rNXIx*CRf%xmeIm%sLR1(@y_`>^bIj*8_Q+I!c
z!r{Clf=BueXc`Z(2Cp<(o+yIm&@EP@RiN3Iw{8w^=FY8I{|m_oi})|@mKr4iE9K?o
z{3}knBbNkmeQi^P%jOgZ32^rXtF`s1n+}Frsvf9zLxmc1WrdQ(Q^5eEhGeR%+0`K;
zoMz*guBkxzyEnueB13MUj)D%Ko8?otQnu^pQdBj=9s?*>a_<@k9>H%1+crqd#~0;_
z3s3w?hfns=g9DJS$Xq`4tn@nG&y&scY60gAR1GRh3Y41i0s+nUER-<iIpz=Vep`)A
zGALzeFc7|P`+)Z));nTz%QzD+%%%BGRkfg6r{2^z34&~GS7ybsev1BqVY<L&@c@+_
z#b)+CoZ-L?Xy+0b?I!ldRuK;zFM{ni+27KzC~MylIrLaa<FWP!1rhh<zx2kqJmAW=
zx^Wg4q$S;-U+R{1tiZ!l#V!JN<2G-pGRrG6F4oo(`@YebFvdT5Kx|^>RX7<};ML{1
zlxv28zdcqEdv20wmJhO`X5&=g+}xB0mKS)utC+_s^L2PfO*g{z@^_A~;B_GdoH1I`
zOz|yVoF@AbZ9SKev}A)LqhO-o@>T*;OiN3ly-tl5g?FCOmVT?#+vncv2JHUE?6Div
z&P4nhQM638Nde$tlhWc})7}0+ee=0R=Q0fB`oe55rW$y^>GhzC9GZ1ky0MaPn83zR
zqJ21gbb*YgQUvDU77lw50;c2Yo8So-Vr1v2G>{eEVzjExdSwz)h5Gwiy=uDTdEbfG
zTdo$hpM2z}nOuIcNM|d2i1p<v>?ZqgFYN_7XX}~Y8Wf{RoVjJ)@dX6-Yoaw-09Npt
zDoXBqL{R(HvK{Zwpdbih!=Xjb_XM_<6&zzXL;-vP0^05gHlc9Zl+0azcV#yhc~HS$
zrdymj*E6D95{sGqWuK>NsDx(GG+S_g6rty^NaIm=1j+P<15^m3^PT3Q|Ads^MR1Tu
zaMoR3QGGypS8g_$*Kl(gwz`MQc=%eU-7b^N?J1WYUTC4=>F=1c$I3|i3_8LTyLE5d
zMWb+r(VYjj1|xYcx3R7F@<OH_uI1(vaR|QGFZ&covC7D%?MOTmm_Hr<iO*JJY(tfb
z39>}E{lu%|O6U@aISAv4p+Ks@`>TbeIrl6Xmyw1NmO6j_=pAwTZjHoW&ggpM4;>Ed
zz9tTqD|j&}sbCo~@a;`wD(wsQ1efcpa%QCyIU-^*xrlK$`alJ@^yM*59c9dj+q1aK
z&l-*I(D2NkB{du8dHcX>6=nIKR7{L8`;7Ig^C#GH1QDuhr~R@?d%DhL?oh%0z^m;}
zhO6ao+py>H{2gJ*dZDuLJxzy$m1G0pKK&_4bfdeGYGltE9RUdubtrt74k1$g74Ws`
z@XxZNlhEMA@vbZkKNS1VxnrQEQ3|ZLEq8Z2th89c=#kK`cR#b$%DMa<RI34Zg2ah=
zHMKmU3$uLohq7#p@2AX#)*mbzM0@;)&#xtVEZ&BTaU-hM-dDa-Xw3{PQ%lc_%_Ntc
zyqVVMu5CUm%EwG|B}7s2QvnnT?z?UsHTU)*7HXzMzG9n&cuZIhy)9tol!!vHwYaXU
z=tAQ=sUP@pQFuDuY*>~rg4GaH7!2h@$2>Zad4>o{2uU!`BvD`^8rli>@Y0AKr;-mA
zbuJ>)#U+D6E<18Heh$Rh4^?<^t|x1z?<h~H$yKixc++3I!<tGv3)?(8_D3B-z3myn
z>#d*l0w2z|OsgT<wg%l($E`!V>ZgaEz9weT>I<$py?_Z0z3fLBI4?D($9e%MzJ<`j
zOgqctI<U|_w&lsaasvEFR^*q~0G;@DE*~0Ps0<1=V3Td=D8j-<0t!$Ub$RX;Z`tAA
z;ELrBN+h!oW3hyu(yK>Q{Yrpy5UK>A4yVjiBUI<t+JYj7G#@j?)Xg&E(Y0Sk`?eaW
zPnqRA&Ckzfk+#2k&HQp`Djj^u+O#5N#0hyw_D7fYf4s)_XF8<!Z@mr)>~1z+5^wfR
z_N%%<IOSMaUJcq(T5ZvxJnT*A%HKOTB#2F$#F1<LQC^xe5@9(b+&>`O>H%5a9S|(;
z<$7uVE*teNWrnf_!JX3i#`nE<V}OS)z479`(}sh<DNI;Vmmtkr)TzM_;SM3&tk?nR
z4xgh-t#<ZxI4o-Hw1v4;*iD74l<itS$K?T89zxMUhY9CR|DABeBf93a32^f2Hz374
z@-CYG0FyG+Ck>K<x-UnR(*89D)LUZpA1?q*NspxV@i4xx2ngAT=irIh`%f>j&!#=z
zA<5y;n&sF>tKmHhjPsW}3RPi>&i4PF5cfD(f8nI51iJlY>A`*3JDbgAqh^@qqq-2U
zS=AHMuCy%q15of2bq#%?#X7xstsNxMSkfA3C~|G|Chw&*Gink5p3U8<5DSc7Gd1a6
z_L8mXS2)sGKgSk@EhK1;=k8>O@GnmMr3(M_-G$>_VX-?chVgp)z&_DukNMd}M<}Vh
zcyFQK2=WfeJ$8xTR}A)DAk>9c<`nzIxMQeXWiH4eZW@p|yl|LN@ED$G$-88Htaygj
ztIevo`VPVhR%h{zOnj0{r4jM^Q{w#Vye<+36H$^4gtlFe#v}^L%dY6!H5&YyY~1Iy
zVHBKZaF_JIY~kHMF>Sqiy!mus?#5j?*ts+78v}cAgx6DvAQ%!>-<}vcMLK=B_!b05
z?3pAh@FRLc?3;285p*x1GsiJG@!`0C@yHuCI$xF4)CeT}AZ3a8U3+9J+7A&i5eQB;
z9nF)p!`92sfI{iO+r@_)fS4;&L3qFeX_}ftr#zp2uwa|Rg8cy?Q^sn`d!>_F;lZHW
z3r^D<5h2mkd$xGtW><pAn&GO75=aieGamAwY<l>Yv15dyX9I_Phkwcj6@5_`=_x6~
zn*H=`R`?<qL=X~C&XyR;tw1B$rsv(%5x+-O1R+h!wCMwHD*dS3zx@WM@tF;|Y?vB5
zdEL{2^~SCEK6tV~@0{ySM64-*tu2+eg+wK$m8D9w)If1gXpiAcQwjFA8phD$SezIZ
z<J#z$g}IV5v({g81*b>yOgefz9O)otcJ0-7zqx(unez6hqyVx|;9$f<*=N@5$L5DE
z1|>|$w)^rl4^Rq;qYB=zvaZ754ho`8O#u)=&<LDatXU`02OQYUU;hSOUNqZB1{yls
z1M~i>go3PiS{c9|Sr8&-B&u~_oyr58jy8EsUKNeGSgduz!d+suVLB6Dhqm+@E6N0i
zzFJV2M~@k6I#-fpQnSTp^q)`i@n1@n4=qi~AC6jtUJI1`bno@iA|tP32wx1B!BABl
z<i|iaF>r<L{8D-V4m_fWFUZ^`TVYGTOOj9l{zH82K51mt@#J#A<l=7cQAfx;r>YU2
zmTFFC=Zw^En*+(?+@*8_ABX9Ioqks4Oe~PzYWw!<#3)6EipW7)xa_STo1;K|>#ldp
zocZ4bzGHXfZGZ<v>d+8)C!ZU%O@HKVsITtYFswW2p5|hLF{VyoyONG!XuLSEp$!zg
zIeV54&JSfMS^<rN|E!W?yc0_f9^X90DxBxCwlsj?yODEf)CNbcWJ;7c*ZO=q$3=&{
z=JsDEUI<@tEmXaYhYqJqPb@(sRdY=)6vfu|=Bf@cz9pQH-DtJA`iu<oQNk4#oEiH*
z{R5K@=$+KT#i$y*t}FEi*pnU|Kie%aSxFeA@@C1uOD6TFppofFraI>>D66-&vJ&Q<
z1z%Zgt-2vK<*PBO4S^c%`K-Z59|-RcGuuN7;QL6nt41&lH_RiOgAp6-wZhU}Fa6}c
z#lIZG^<IVZ3msVlzb}P=8J?ogC@dA_ck;s((_}(sZ{d>5qE;1SWPk9+TH)Z8LqXiC
zunRmrfkZv=&KWI_zB*?;hn~P|eLQh`=8y?xsXXG(Nxa4?cGe!+iO`aVMMKZ;xRpT$
zXLYRe&+z8k?y*Jb-cpUexM5!;vU6~#KESTCc(cR*Nnr^QfjkKtyevxk0(G#ZfTXi%
zdVIsq9=#^R%UqGcXFGu>r?w=!X#R45T++0{xTZ8W;BGj8V(4Zd8)n7wGJ#9T$aAm(
zFx2S4?u9(+S_MKy9#OI(vTIMu!+EK-l9MY%hJ`)0vfN@{#n7v+dI(W&V?iCOU7&A5
zC?>?>JRn(dL@VbB&tT&I0NH-@K8vx<WYiCYryN4jYKOcD3-xUF=&(e+mp4WRMnfKu
zcWgn2zwiUMdnA4&tampCjJ`*(Q(bKe>bw=uu*$8}s`inxg4x*Uug}^jiS^x5Ni2{a
zkSB(@)^Hy+)HScoRcbr!n&P#LD>pe0+bv3*^0%FP>NHiaEM$B;|B+oQUTzGbckSrp
zXl)t$($}J_t@s=TgHJ+xrF~_s%?U6wD1`%6hn||rc+#o7%MVJ4+f3g;*T!#VR@|<r
zPR}P|8{omuQDS2ny4D@|Nqja`#=Ej3xM|M7$t$LMC2jQ(Ij3)uD6?GyZX5L%;4;C^
zvy(KS-_+l38x~k0?7M62dHPIhS(ds!PfQ)QO!D9JyI7azO#zS`eDkC=j7+QKXm>|~
z;r;H*;r76SRZq78J$-fGyW|=2P6aE9mR4cQ-)X@>^Pyz|_beMfSHfmhXWw>Zrkp+R
zI9KriEiE3Y?gUV3dJO;kYrC`VH~kJ|X4rVCY^C1^U-watG$d5rR{Ih8J0&^LcU8YS
zL5Gc=?@6zKrNcXpHy)GWzQ!wqMsG!KDVC@oX_{-~4`Is{W+I)=BYr#PMyv8>%3Iqm
zY(pXEw|?%-?ssp#v%Md7@**sFGpCZO=@7{zuC9rrsnvZI3^c(r23*HRMy|gm&m(nF
zgq;Gljs5nROA>gJlKdM(*vI~&{1@iHvBW~6#!IbG`Cf_)ycgqsND@^_5dItT4p9}B
zddPGLF9GBy_6wI=IMVhdD_^0}MjO2GC4&jG4+U8vO@903T&e333%g@i4f4D9A~n7n
z$=J^4yOOJI0o!l2l|8F=@379(e$Tyqr|lVDt}mU<=3G%(5YS%%?S!OASj38yFMb8e
zweIE-_W`O}>ue2NQb)f8?)D3>{Q$w)w<^8}pTF-G1{DfSK(mlTN0poqyW-f8f_+(x
zy-0EOR}M?lVK+il^`td4IS&um(zix3rXIzy8r|Il6N5X$iFT>1`UFeJEq9rzTMrdo
z!T^<jy7TCvZrP*rF5$xxBRFz}IkLsxMp6Wwci6X!Utp{Lvhk>M9u2=;^MQP~LR?^=
zx=@K<`%i8r@p5y`)#aA5`}AKDPesklR@t7z$FV`K%59mh_fT&YwE`ySPi^ZDsosHW
z^fu%>Xq|=+AiBNKYEdV$m7TG5U1&)gr_>7XFbPCZa<)*O0s+KgNShgR(Ac(RnBE$`
z+w1SHonNsS)rD-nkxhjn-sA7Sdmnnf>*pz>Vkzvn`W@kDq4u%NntV@NV?D?*_590&
z0A@IRR3xDD_gsgCq5xL%BCW%tUJm*wd|5{I<Ov_?1k^3?>1z?yCPEXEn!cTClto(5
zN_0a{ZOTUA=$~z7>f?|SdDNlqfbwH-yx(`WDQWJ^+LWDNj~X*UO77TCjJ+0z6_5PB
zSNk{u>A8cu@KNkt?}U+L`+iqi*fz;-K-#reM+R;wc<1u6vV$k-JC%QzF}XlZUoRc6
z0*txnBsP^r7f%<j+T4mjgu`WLsByRX?ss1P@X;MB5XylJtAbUu)cu!iQYHmq5g9|N
zQBCz292)snA@`*kdxQnJMOkQF)B6;zth9Ku`~GN8_-b{VBv<%0=M!Nj>WVYc<=z_4
z!FNB;1wxDa_te&GZuro4=uBZLh5NAg`2ERb^p~oAW*bIO(ka^Xpybt`%8VFEWq0~O
zw?6%#_LH3RSyz(i0A)ruhqVneY@bFSSiSa}C<U-cp&3p~fO?@>Ra3;jAme9<9;ibV
zE7+q}A*Z9Y_3UhP`JX~*eY#D<pQ-*^NsozO43dncwh3o+T72ldyCTC}wo(QEX;|st
zsi=i-Ye3BE>O+RjL~4`;?@bHy=~zwn{{W7Q?NO6&o<M2fHaD;Sj=Rz`)5Ijdmffan
z<CAdoB}`jVa9kLIXm=WWA0yww>I{MkvXcu%Oy2&FO-hhB!Um`}W&X@%v8Sguy?3Ao
zoClvPRWT-N@u~Hp#}^~)`g48wLwNA&Q1nnRR>-rmy$v3v%4=untF73fJ-7GG-=@p%
zp8h)3Fk8#ptWHgm-N}BzzhIfEut?zF!}?#-DOy#)4q=kSAVG^{ARcMD?Xb=Z3^3o{
zxdR+?ruC%#mBDBM*{<6(_I{o)zN=(Llu@Q$##c7a|KX-_hd=2IJ$bl0>w<u<{lyGF
z{i^j#J+0mRylZ^q)Oh7!1Ra*zn$(}uS)GVh5Uoz>`P6ZBCcX6YZMeUVk}y<VmFG=G
zbrC(rE_G_^7h;a&f4bNpP#^|t5&J;sOqxwrBl7&izNzK%UDk@+T)xt6xRbeT9o##x
z5i+lYL7dC(_TL7+)D^t5eR6hz-yxiC)ePU8B%8bgN0<G#p@m#zP%@|&NbhE!xJk<#
zCq*Vyf4Am>LLHppkmL0V$AFut25RT}D;%t~>&rv3?Vf@#tVI=HV-ta!J-~#c1akCC
zqq!g^i^H$`SRbs5iy{8M&-dR~VoXn_8-|`9HN}@Dj%&mw_>RWi5Tv=eE<;bR?iC8a
zVdk=JILbe@HGea(wMLDkMYxv7vr4-rQ`@^$-#cPe80EO~id;y-@zg;wE#I_`E}xX?
zCOcWjLMNKs{l8}<_9IqovnYR|EJ8A=E8rI`mV?que`r$==$AtgFH3+a&f<4C@@2JP
z$>5}GlcB&!TQQ(xVV!D`xBH(}`~MDK%qjQ-p~Rb&Pi~Ng`CY@V%q=7S;M4WXlAQ2f
zT8Yu-QL|*^8a=np!*Ne7wzMETS`2&+(3k(V&lG!!<YF@LDd)X0?9Z@~fw(p%3M+->
z@!b5G>HQs~RC5L6(jV0x;@4(HA+PZ31ONE7A4Vqi|1p|5#QcOXquP@3%B$4@3r+0l
z7L*nb$9<6H+SLuO13D}B*|FSsPJG6h*YhXmMe_=jzK{P{N<Z|1Cqa_xG(foUygjTa
z^o^=@;dy<xkl3>iB4_jc!;|?--i<}H=k$57b{W0NkC;SXSG+A+ng90b!I29WD?`tJ
zg}v4%t@>}5pDjnvj_faziJs`~6Jgg%cku##HzarVyEPQS$wv>xjyh0PQE7bLf!UFD
zsVy9?e|(TqY&eG!j9mqvvQm?dP8RI+`#hmF@#>5+r0#$B01Gx7mEyN%BKbg#sbCY+
zyiR60F?2nNha2#os#<=}*MafoA7ADcUYSpEKH>L>xiBNq;u@iQ=sb7DCwJ3Y1HFK-
zQ|GUDi*Ey!M?X=M4f;>4<`J;K^oksomx%y}l<YTK|Lu22*@YNSi>dz~!TlJQ+vcas
z^!E?-`n)!LT;8qXmrER#f2ejDk5t5$7!LPOeYA6~*k}`zDe%H{(`^R+6MO&jYJ&_B
z=O}Vmwrw)5CaHBD%KXhUTWV+4!>h@DJ7h27FQ>tkHBb3ZU@c+gbT!FGC-LX6Px##Q
z6<)OP9P$O$b94P;gwKNA(4`ut>%?9Snv7(x>Cb693YOzYlsu609%df`8+@tDZ+(Hs
z%9=KR7pB2I&kt4aE|{hH|M6}C_p8IAKRt9m>Q!GX8T*EwlUV+l+yQ#`daj83k`;=$
zOgq6Gm1p6hkGJi2J*5HJWohonz}ih^f&9brD~KXk4oij2jW!}?0cZtvlS_E|LAGn}
zo5Vu;BMbl&HJlOMx5`{+mj?ZYZBsXdFVHRl4w5dJ8R<{{m`3iHfCK!0yjFmXD%Cz+
zHwg&I@>`ed_*Av_b9><Eq@s6*hgAzkRM@uZR}X^8)v>}G6$EUL?aOtL+XM@*O-%%?
zH{G^BS^qg<SuuqxxrDGvbH2i@H+WrPuZeU7HKNz8J`)Sue<p7B>>}nr*3r~{FPCxD
zmFWd0@w1spJS-ktKb61y9hh2X#p@+oa;{$eV==7IZo+lXQ+oyL@*kn;S+FgVk5x#8
zO}UDpdL<^zZPXA6kC{?sKvO9i@`AzR8B)x@x99&Xk!OhIxPZO=#TPl!5=&7NN)#kM
zmZfL!4FBIK^&b*gR;?Np`mW13gQQk5F=9F%rAb=(fo0wQ{?z|m>9FT<+wj@>tXx+S
zQi>s&5)75E4w_*FpZp)gHA2+GR$;s7GZ_K=!2uEMvq}t4UK8|xe7Jqg0G(_fGrrHH
z6JP1n<7FI2ldI9!m;d$Nf~(N2g@xJ(9oeqCjjr25#0HS%h%EhHe7yO`7+F5D*enY9
zA2^W?9yBd}p2PthNh_=QXLYRH{txqNq*s9V{lykwx<`V;AreUwCxF1u@B^xAC34|*
zh%ylLk040NjW{rFqr)<AiwT&MXLBQ9DU2_F`=@bc0t1f1^rRWJb6RJ1=+{a@N)w$f
zD%O8K`~ZZ)a0WtbtBWB27la#N9z+}9U(>GMSo;0<%!*{6xU<OW1Wu!Ke5cCTbTs05
zO+Zm@nn&oLo=;b3eZagJEtTwGT`pNLh#3_%QUSiTEng{p`@A*Ue?4B{&q;P1J0PPm
z0+=^w348{Xfn^s#LEgat6QPUD%46Mc;^MzICt&e>A^a+AvmeS9(HlRay7CJ<Bm;Gk
zVUw?|u$#|+nE6UtM(V#O0r0lG5txC!=qn&5G$1OzH#oEYjAU!;f~kb5K%w$s=*xc_
zZvnSC#si!^_oe&#sXfNfdGS~%RVq}*vRd3sK8K6#|KkpE&Ip48XA`;{>&={OrV@Dt
zV!)!=J5UHzuO~(R$NPMS5QPl*;`<l@zR6@YNAtS&veu{<ctdjn4C4ZgkZvQAw*SjN
z^}~<lqI@g<(&h*0-F6t=WOCeldP=lj)dUWM#CntW2LA{Xa^*pQie|z<i&TV#8Ou0T
zEifz@F*x7%gmb5nVWW{7S<>WxWFr5+`G~~^U4kUp0i_<kW&7>D!5#*}3etD4*#FC-
zixMYP43IFbi`BNfZrQcBc=Y^#jC}=ElwY^EjG&}+x3r{mGk|mnNVjyCbj^sM(v5U?
zcZbql(%lWx4d286e($&L`|AC!YdNgtteG?W*=L`<_u28=XdS8MPocE1K<#pxB;mg;
z{CM*9Gr;d7{NebE3$=kE1c@L@<kg=!w!cw6%otV++>u3A-d@-U-(<lONz?%m#yX|Y
z3gX|zND=@Ji6kvNmToJKZGFwX^9sWsA(2buv0V4xSPyLlebqKs$6HVITWu*h-Z6Zf
z2mp?K^3_78yfW|~z4YJza3WIjnr}gYVnS`1UAcMA6%1uw;IXm|N$}x*Qz@6YlAge@
zfp>$BkHZy=Kp`g%fK&^HS4oKe#sdg2$`!*+zU|(sX<Yw!Y-Z8WN|Y=YfRpwI&?)o9
ze@Aze3<O)K65uGn7rX$@Kk++ATexq4;_ookz|4U7X#Wn(3d8X<hrk+pLZ~z-B=UwG
zp-ozv|94%jfhM^w-S(qh$7!>D@`LrhcbZ*F3w#s?nTEQw|Nd`ehlxSo(V!q<_AWoF
z*K_P{p21iXj>>`UhNPR{KK$4K#2U_iN<HPIlao~?n6lnuveyL6oS2&R_4vc5g~_5f
z*%^?FFH5vFruU^Vcn0+XY8?4I0F-{;a|(lRO>U;`zkO{<kBp5T<tD<e+d(h<bTKx`
zOHtYI=JYf)3jH^`{sc6RV8m&zuKzgxLh?dS6(`%n8=v^MjeJ8Nc9ogdH9g9^EIB#w
zK%=RtSs@HDN<*mtBmYJ~7(0MZF2=@L<Fw*&Y;$27z-iBx2BJj5<hB3wJN%$3fTF)=
zN}!1|p|`X#pK^ABmcW1u%(}ROMF$f2|DmQSMF1@NICBdP7VrFmpVr0!zrv`1l^NsU
zfBc5D2z>{veEK?AjTx_{OEru0idGuE4frsM@7V7TX!N*ntNDgSAIx`lESIR0i|o$o
z3U+q6$p0kak)oI2QI<8E;Ze;8xJjoLjB?&_5qM-(i>>wG{RGi>S%|;U4Jg|u08?N}
zrLnCw-Y%}cs>%MjYK6)SG}G9IsrYSvwuQ$3>4$^?Somky^vd@$&#A`+T8b+&WYI~E
z$(Oh-bb!hsZ@~biKaD*A`vS$-D7m_kKxXwgRfTwW{hIFf62mUBY5>KW!Yeup?GFS(
zQ~?4t-Sn(I2R~lZL_45*IU&^$(Oj$pIU2Q>k4+K(u@_|evA_fgyp4?YYAK0Yoh17A
zTf7rY>!qtceFj}!?F6t%e;9uO{|<}HTs>UU2TC}P&(Vi-pQBS}Q;%U0aw5R9b{TmM
zxBUmOS}>V3K%1h4_*9IGeEWFP?!!|3jvP8?K}lXBTaBB$R%G)Fv)}IxXyDc;fDy{0
z=;x0A%=376@1PNPxdETRI2%Qz$#5mJ+3<Atna-Ub-9<5z*0<-sJ5NA;AtSKYBV!W3
zq;P6?&ZP_+>g(m5k1akr{48@wOEjcn<Kveybch;bv=_>cIw=hj_D=HnOzb`^5KHW~
zdrleb`zO%(f7ihOPay+N1QLqO>@Ro_HrzkR7PylxO>8AUgOVfyH(#lygKc5D-1_a4
zu56O{THGuW7&O;_kv;#W&Hq3DwZhO(OM8UznSifki077b+7w!Ubzx-*%&<ncOOC)T
zIt(Hx9YSUPR_;nj`P*jy0Za0~<RMiL;^%)Iy#1XO%DgDJJbdt?hOT4|RSSn;`3)Ia
ztfP&igH2!I_P)=TRG#?X4(b0yFM#6Bz}|n$6ebU;L+aFvarw!=o}ac&M4o|2zr;Ow
zm<WA(Z#sd0QGz)8?CftjfYu!WFt~z!mX6S}Fa5~&!^xmR^lpgc^e~>hET|m*C|+YM
zR+q_V{+mdu)?f3r5EJ05ld=fd3vQ!wB88c6XGnXpX!i#10-XgosXH|{hguikWkU2u
z&C`Xh|C$4>)G#;%Gwg);p~eT+XA~zo2QLlq66_KEQ_x^|PL{I(to=!9O6?#2g6I5S
z=_QK-9$vIeF;5ffhD4n_UR3`;yN{e(%?MNtL_!*KbtivLd6&t(M*sb4@Si9DU&1gB
zUpib$Ah2_d@n2}<2`!>@E?-Izu|&v>LGtoC^XyG`K1!Sn{(o@X{<vlsI`GgYM(J`W
zV}OM;Hn<a6&u5c6lM;fblm~_nSvb~>l_Z`I3w#Ysg8b>U{z(#8X<9|v`sLgzpC-G^
zX0FyZ@E*phI*wG!TEZL2lI3_0^EchC;uCVT{e~m_KM1EJ1Yjf(B;xd=HKlKC9cU1$
zprd{d*lJLSqtBz)o<~IJ`=4=#|8%?lwYKEru3&QLZ1`FOb1U93eZHkQ5f}p|XJ8?5
z_nKQ;SS7q|44(aO$MM$Z`~X%kf5+<fvW`vaOW~`R<#dRzaDcp5R=`J*(TVzZfz>6|
z76s$g#Z^TrQuk31O-2jcg7JD4%K}v|Jxfc>w{Pu)#Ux)bz5<okkp)1|BKqeZ94XQm
zG)(IHcsB3-6$BC3E|O397ug&)2b+cxe|G}^8#!cX{!je;4QL5}cE!k$4{^{MiHMQK
zfI>13N@xrCxMF%De-9D;aqA)ATo4w4e{YeVDXUf*MFkF1WcT$hE-^Ye1e^`(F-qT?
zDLctAuIKOjrw{DUYy7*F3d;jXi<8!<)K(cN?bGJ+DiEU!2aK~7{Zg)Rw6W8Tl?SfR
zpN!NW7Y{1{R;%m9uhvy@>UpV_C+zPhR|`+J<O}{G6_WUt^N@oyJ{{qIJ%;}!2v9u4
zw`OMBsS0u4Zw}vCjNQa!OK1XB0tJxOIdu(H50&DAir?LzKhgyO-@?+eSDN(~SV;E)
znx~qUN=f($^a&i%dZUt}uE!gQ&hX#v0R#@%0|LP>D&uV}2l+oU{BwkXdp%lH>yO@J
zAh(U`3;(AR_NVtgV5SbgtwHZ0OU~b>(sNMW*+#}OejF%8<^fFgsnOPTGdrg*fA+gq
z@h{!--(?H}34WxDHJ@t`uTIUYZQ}wNA(jOl+=>C?7Fk=6-gw{<lPOB@Z(sR$QTVr2
zdEnogeR~SbU#czMeK#I8A>$)v@Tg+|FD(Itu-V^hUlm$;#f|!BcK^PxIvqGI&A*K|
zum03JYwkONzqsV%S`}ae#rKN^UHy89&;Ry0?||pDVC{^wlx~S}p6}v7_{;)u7a9b+
zCTCQqt?70cgkwVfmof%J0Y}Ro<T{m~FSDbQ#VbbiZ2nQ$-H<4g)}}1`HUuJFMA`q1
zG5;S1rbYwOkB;26W=<s}pEE9p{y{GG@gbK$$DQT6COms2t`Z;qb}_U7V6ik7p9Luu
zxv$#98U`fkJUYNRZwGyC*N9%-5W=#@`tXNQ8h_l7u+LA#Y~7ZO%Xik|mp^CC|15}O
z=wk(FgA{>6RvQ%+RXx5GU4{QX-0qL7=~n=x!2};<?nFF9XDcA&y2U@*g&^!)T0X{Y
zZp^VxYA}FH@i$Kj?g!50saq>>E(x_K8Bgmp;vYxa6=KrbMP!uFC0ryreGUJUEB?EL
zk?F?)WC<c~ISrv6j#tv1rJ>4=0OgouXhOhg(lXZA2QYFIgZ|PavH^7U8zyGU3RO}@
zTjUR9AgKOh`=(wl(V7a2x$S?4{M7>jbZ$|B(+pm$Dsp&D<=MQtd-I~8{GZzoSOU20
zhxgk}6=Za{68+2A{V&cB84(O3N`+l<Jm;P!S5k6f$18?^Vo+fjkX7zrY~w01p5j4^
zzhnLrkRSqZ%3+LD<a$Jl3!3A;r!)K$oI`_vjopBDHkjH`%D+36VPBv45$@B<6*DD;
zsoJRU1^)VH)4-CT5C<jf^(r`WCkd{<rAiCnz14c&+kY{P9@YLI$pkvvLn^Av3!Q6n
z+fsf0?u3&u0ouZbZB#j%R5L=FW8B6O*XJb!@*UKGb^bO9u|7B5$W-MWnUK^K(6rX?
z+8ga7UHtW6zOjW+iBQFB)xE0DT=Yc2Ys@`bnu{RO3t7Y^u_klrS1X>8bim&|4>%K`
z0P*2pQfZJ$A-oCSuC9ME=uz;!NjwkQK%9L(eaE7rJv{FkT$P}j?=sPtx}z$PrCONf
z%`*k#l&umo83Q-_yy!3O@DcVGue4?0bPnaP2Oc^?`q6*sv?g%;3KP^*$?{TAx^s`Z
zTxhmNX>MLA+3}-tDFA+SI!3ehiZYRnzH3|%!zSnS_i-M7eA+2yv{{ihsqrkCwU2pE
z_etNgzG>Bi9&|K~+xs?`_@CXxx1fw^7JyPX3KbtNhp?)C`I>5aCGxr8OgXi9cf=k%
zoNgqME|dJ-W<G&x!@gHDQ|Bl;#o*e%=f!215C%4wiWPIY_G!txBqWzWncmLz>2EWc
zBym1<nvEOAtM5^%^t;US844JYvzU2>|0f^w-;W&w?iabVWt1`TQ!`1f;wn#mDO6|>
zT*Oxqrxn~+YsZ~AMvX6!c9@p(Z}jd$G|zi>>z@<odWN{ymlqz;FFQ#p{E=C|DGZ1g
zsEn4qFrQAUp*TRS_*_7&hgJ_dDAtg#{31F1*`d8`vs_s-6jV}jS#W*RQh*#Zw-^@L
z^KsO&t66u`wxIGacd1>pb!VlaXH42VQNAEy<#m)1z6(@W=R#SJZ|&K5!z|Q3hwQ-_
z_P}jj%VK@Tbz&Ak6Qb|k!Px)xU&r_l%Jx5%JD46cfkPml&t$LF6Wf5sqMMqVT5-Mc
zYxd_t1F?lC6D3+vE1T_Nx~{f^UZwDx;f8kvx}0f^2b2HTNdCo7K*B*2*pEL^q}WSr
zx@HC>R*T>h9lDKFMmIB6NtT&lZ!y2D%6^VscbaH=eti*?O7(YQwbTNdz|xrGH2g5h
zfkImHU~6&f2XO--(Bv`Qt{7T`GTp@E@}p~!hdC$wj54Pv?52vOTyyAs2<xLu`PNg;
z@Rv8Yc9qruk+%H!(HiYZpoPO%a$y7Uly*VJ>tX9b#ji)FU+!af5w`2q{LOeJmu)p?
zi#28eZGjwj$f}J8>0kTco=o~5($cVSd6kU5nXsU<h%MzpH}lJ$Ya2+{wtsC^g_)kP
zxtpC3${ha1NyptdHF4VwbS?bJJ^j!3x>Z`I0Qz?fS{zlbZ|bNA-Qhox|Jo1td3&?R
z$r@C=^%VLR*2eq5^=x{BBkdGhg$CG(&SoxgWAT>1IuH6aknj$y$b6aF#;o}v8Hx%S
zYQ%A>jQg~Dr<t+tO9TR_6|7atGE1Cnln$TseWjJGI?msbUaHcXE7C?cCf%oOevwlB
z;+b0<&95X1lDB{={D#YoPO;?MT3M5w9~*l=@;T;%^^a+F4c%F>$*nJc$s2f?)^C6w
z<j5)j^4I7%$aiGJ@vV8EWfec4URhY8+LMCHuw2jg_406I<_w(<nmllDbX=$A#0w%R
zf6q$)yDs{_+mK2OLxG4=_s)TjqFWS-7&Ld2up=Ytjbld29s=10O$s^IT1Z=S3Isc^
z#&Y#pzUtjAwsj%@f0If6mmOxn9<Cp@>peACRm%GioOPa=l?HyPm|9FEAc~FqVUmSc
zL<Fn=z0N+{$u<ogVdEyva3C^O7SpgcB~8eDL=5>0z1j*7V~vCYczULF#g;zn0q6>t
z4Zi&EQ!3s~LxrmNq{>Cf^kJq=p3nIT4yeUUn%^wsg<^#NrZoSgDIjtnO&l4!Jfno<
z_t)zy+z4lpuZIfc;pR_~LcXA}yj{9i8&d8QbenJOc0{dXnKmCDH`LQf^gt^7&sv2)
ztq#2RjUrVija<xsgWpXypwh$M)@iy-+iy1WHHGRO+=A-^>CV^sf-_Y1TzKNm&ffBw
zf{zx-&VT7@>cCdgvEOzCQC!>FOjT;*;;pdgEdjM(xorOP7Tzz7^glrgMlE{cW5;Jn
z2UG)9g-Qe$%oa8Z$rLkrv7MF0dUW0?*9&uGarPY!<iA$2ZO40qp1H~`^Qzb4A~4<d
z`Y)qjKQM;VhwU7kda}&3ys=eBPYp}JS78M|mpvXrn-C&2azO<XO=%Wtf_Xa&HwhMI
zGk6w@A53BZPcaGSFvlbho$;?+#cwas+zj5RIBjDVJ1B6#1#zEYUhWKkwQy}I*~Y~~
zH)kyMKKZ<J<#O=$L{+d@dvcst^&^`o<h>|c=U3Xl;wYI1R1%Q0e3=+2w;{-0n@Mmj
zQled}@lN2=7EG6C$A@73qj+4Evmb=x5-E(^`cfp~t)wskD0lXm*ncI-!!l&${~Y#U
z)?jt0F43EeidMy^Ln?--wIZ8nUl}oA)Z{!Y^WELHpN5~x=fLmL4p*36*a#7^Iktsd
zocyKd+WHPEiHJg@5^I;Fq@41ayi34nXm$M3pytyY{rvW;U%(KacVi2Q`IfF)tFK;d
z6}}*}^Vc4|VXyMo^r~J+*(a3|@)i^LH3K(Y+<8m@Pl=d#k13z4lP663=|7G4{~+{h
zjA-tULhlwDcZT9Brm05!5OL-fp+5@>&Xe0=K4DS>exhpM@1>{FVzNZ;>T|vH>vL|(
zN?Ki=d(*R_hdDG&pAS(j;87{$mTIf}+gq)4xW8gBm`oG;772xpHORTt>F}<6)#BZS
ze3KJu<fSLh)Lf<T{6#O%P8&*~rwvcbM#%J`Cx`nl)aVS1D-NvInHKkE*`k66GDwX1
zs4eu3@X8hfO~22`p|d&a-x&*dWwJ^U(E#K&B2~w0pu;ruXZTH`p?vF`_?lLV6J|AA
zZ*Gc1=UX#<$wSPaQld2ZD<2QM*>T+o4@>lN58Su=hi|gl_FxgCc#q?c>v^V&I!6D>
z{6QdspfoH3C8OLS$SztBlb^uP&@TQGQQCI2($<6m(_D!S9TGccVlJP#)WZV9=Q=-+
zK0af%9}7~<Z?;eRjz2~0{;w!oLj@(@Uvaurh3wbkvs!!Y7^O_|P#h|H9CE(A!PaQQ
zgKjR?i3(f{?uU2qIUL&NGNaV-mft&Vxo+^)<Y^qv<pG41`hs)Pb)IQ+m<$FGA8h=c
znTJ5mK~Nk5Rh3xIx?VYp5-<dc@PU3oS;u>?vUMhB*$gh(>qZT@m|T1!c{3^Rky{~g
zt9!P?%YE7`w{53$ceA556q|ryW3{q3Us2lU_jzC*FX5BaA4XXI!73G^!50qODamcq
z^g6jziF~Cj$KihHZpjs#N9}bNP#xCNU+AUzsf<MJPhiwS@;SExwLux1itqDG31bpR
zCTG4Lzhe~RwtBdPv73(mVUy~U@W&9t|9+s%XwW3f+A?=W39{zwXN+aQP(&>1!0{pZ
zZ<v4uCn*LST13Y4ItCqkf3`m{Y2|<D7Ahzf^Y}EPQ+O?zMflTcOrrCZX;Ng?)Z5Jw
za?Zcn+$qJ@3z4=Sj<#Z{hHW}N=k|wvY`oV?$Y;^M#Z_G2zZswJ&9=n!kuMTUPtc$w
z<pS3=O<J#!o=wm$r%$T)nKnKV0sLF5-0x&)puc)ZBg!R9;NoeX)uuAzC6JM<(d`QD
z3r)y=^xrP|CBb=GDTD<Rwz|Z$Vn3wv14F#E&-VCPhP}=B*`PJ5LOCSKF6Jgk74OJ^
zpp;cUZNYl{5_Agyzxz)HZ&9;&-(IfmO;>c)6?>!;;nGDeKHtJI%s!I5Eugx`FTY(x
zLPSgk5aK(!;)?qm{`33aUM<<C8905ld<AQ7O8xfTu!fG)txOzaztRk%mDTMVxun;;
zzb*#_ZUs5?CzqiYqR;D)=5Bgxeg;%I)p51PyCHN7Z%brN{R(O%FfjgoFUUlo&0aU&
z$^i%7FNKKUtqh6Q@P=uQhnd$eihxd>nW@hAbN`;@$D?@5u|MpqJ<hI_mE=p*b@x$e
zQ24mc&c_g=oBeH<Mwa$jglBR>v?R5uj>nHVb%oYVt+Zvz0Aw~VM1s1x`=$_;MZ9}L
z3PYN$Avo0{57GI%V-2Xo=|OeN^@5@gN+l`*s(5OCHv2b!^D0pon(f4QudC1VUf>!*
z)d5Jp_{h=i)5tREcq1*?(PLrb_}g2#<foyH5BE3U<$2~t>01n$hjSEC&>f!WSAv7W
zNe^9cua<Gjz%Rou^Af)_)2*-^@8~X!oyY7?E19>~tfIQXMJ@IoI_=Lmb*GC3POMKN
zTW(U2%@#Bmc{q6sT3=QbH;R`;Ol}2xSK+Ggz2}vdO$p8SxgO94pQA6vq-?Y5jx~JP
zW=+~x+;C=yOKH{h*gwN|JGfIy_ISQNiD6koMb@0KR%W^AaoD6aqv?O+iyn6Iy<)xY
z4$M+CmTwM#X=u|5T{!Jd?7P@DUv0RLt<dN?!d+h+3UNnE6Eoun#aKtUSeY<8R+P~=
zOq1M-E+i<h^JL(&iR1QL+!|#$=rAdp9fPm28u)Vvv+}x#B<48{wD+x2;<NB&V2caz
zoj>%dEGqX3^r_g4MpULtwJDzUI@vJp&Fyy<NDQ1ee=r#zh<$peGEQ~I8f`#RU?iEX
zv2;3`@DtZPHq9UxjMw2uJVI2lcxBPQ6lnZfkCThoscY2@-t%<&z0(bnUS9^B>VOK^
zghRG_P@n>|iD)+B?qKHu42gO5n7%+zT}obAS)q?*(y8a1vN4-Cg5ja#S6VR4H=0$l
zaUf|go{(C$M~x&}6R>XPKP<fGlwpk{Y5>4AOl1jhl?|gmjtgY!tL(0L@LU<q2{tv#
z@2)%b9`P&d;o)~O-oPxxs@p`SPd)V6VdDgrLH79W!J{pVov`)U-X)Dgp0S1!_b)>E
z7nMif|5#KtXM6^dJJ!7Y+DL61EL@zq<qN?=JGZp3h^LhE>iWE4_EH3fhsp5g*Fhi%
z;S(d@FexD^KIxCh-Fs!KsCWdY793acV;Bp*0R`GKP8HkRvqhM<Z}F72zX5Z{B?Hm9
z#j5{XoScF4u9}`(3%Tle)Z9+}4r>c2omc?2n21f;iD^zQRR7CMdMGMaW0Cj6%4CHm
zO@QC?L;E1!rc-g1D5LU3+S}RPlfl@|0@R6?@r9TCIFCV2orS|5m``Gn<Otp0_ocUY
zHXq}Z=SYQ-E3p-smwwYq`=q-Y$XRdKKG0#+>D{-5M6Vk%b#&ZF+aD<<jh&hpghkTY
z?h+Y3DZ^KTCx8g+%k_FIX%cW5>$&A6dd_gMAg2(-Tm%bs-*mcoS%jGM<NiXl&OYCr
zwEZzx=h!sOSljUi98hZ;@$!JQi&BSh%+swqj6B0+ko~0nUDVT;hrTVb7s7FQeuSWV
z1j(c2osS<sW&lWX_aQz-qY-qVa#EF7hk2pB)g8?;V)3l-<Q;SsGip7!u8oFQnv1m<
zSrcuBR(2uMw~gtZ_iqd_zep`z4C3iDHZDg#H&*>IW*AY<VcvVcmV+=UurYI7&-Fp!
zRmsyT<z&(knyNhe=mRMXy$uj+f$9cQMJ6XmZrk1I?v$ePE6pUB7yE;vDXDYL&g|Wi
zc7nb@3amC)7PSK3&zuP}YEkG#)>Ns2e_#1GF^~h~MxF=W2?}Hu1Cl|-Sft5h9iQ1w
zkwbG?(WgvPysoVl8n2u*V){0XKqlL)Vq#(q%v#m5eSM6Q;mgZPM%-OW*FmGK*8aXh
z5dn7Obgb<56ShT23dV~kZqpY;*vqA(Rl*>LFpsR;L<Sn=raM%dXGq;1rw7L*O>dO8
zZ0ra=EkGfSx-AS9g?AOc9q;c-8&U6d7M{0YSi(l2%7JwwYkDn@1BQ7sGg{#~LrGH-
zIV>kWY@2;pN*aL<f`np*?v<TT!d{B%NOb<FB{H>MW|}{*I4UpA4w?vN6F;b`D_b_6
zZkg|j`u3HL52mjFDiYh+DaWWr^_R@1idi?I%CDzb;;3KWK<l0N=2+^}QB&Z&c?_dw
ze%20ds-9WcJm_}i+af;%>k4<!#(&<_$zRaC(+*+{;T-=YoyeEwd4D$|E_`T!gy#+t
zu%f<30uXYcH^e;Vp0-cq#xhYs4tA~Kk@^qxa!Grlj_d|;km3%j#vHHvH<6eDwtWa4
zPZ>OB{E|bgo|eQ|x2u{p{tF9W*(uFsPxP}A8owmsN8Fp?s1iA3BJR@K=4S86lHgHw
z1~?-=mtd>STI7Vz459b!Uqq%SAHdZa+U4S__K3XfaXLjt0C4pKVm+zy%;GVAUjkhm
zAt)Ta8y6h9iIf^Xyg8TWNgc;98)E5b1HmrB9zLt>&y0_d>s9HP_!0SS0TjZPQ(ky3
z+2qU4S1&c*W~6#>dN?rnaq9#q#iChra@N$fzASYZ^z(P<Sqoi@=n?Sx0;PV5u{Dtw
zTYt-a7|1mzi{a|N?6gy5jGBN|epu%1u{Lj!GXLVFNr%8n3ov<=`_J9l)nJ&?_ULoY
zgL}T`mjJJ>D%7YaMYv&+9i)1$%YIGN@`>G2vG5XFOnNRU+7_FM@S>@fqOczXQh_+|
zxdIv8*1=0L62h96*azcRWH(auMnZXd*?qf}i9vV!tmi_*bkxi^ubVVv<5VPSpk-tv
z)3I~3LeG0nyyM`u@e)2ZcKT43*jt-UzQ&n|XkF*HPQ-!_t)@&$91R=N!tL8+Y#vFD
zB%!}zBrECBTI0B)XqnAwx`kb9I(_NJ+$7MVs?PTUbbKw>y*o9|s7C#D)cVbPVg=E|
zWIr8dek&WpLhNH%Z|Q+j13E4N<{=aHc@wC}=2GvfCGMxB_ws)Jk=ZCWq|x#ZbbI>S
zL!{7TooD%^M0Y;-?Beuk@Sf%7e%Jejn4;T#?efjMAJPdH4lSwuZQk`?G#^`6y|*q>
ze4RkR(BYpQqJ3`PCwx$_Ms|TRUD87U5BqAE8yG$`$Ywfdg;<G8pmuZ6V0$Q+z}bWf
z2bxCQQa76_(Q8T0d$*He<yhwBM#tTthiE%kB``#G%+_dkhVPaXg7SkZg>$`qTb9S(
zU0cw)lnI27$i83R$8-mDAs!3+_f@EefR5viU4YlkV|MEZTb<!h*>@!dXvMnKbZDlu
zaf>Xu2R^dg0K7=<D5{u6rn%0GsmoMZcWv~Xjj%Eyd%Fi&tIbS){=y-=)|;=$;G|OC
zMNRG}?_S$$DNsLL6*UUou>kAX0_$k<>FHX!Y%VHwF|Mhasq3Wc_<48bmA^?j(0jW{
zdSyz6j8SWSF1527?1|4mOHRnK<zaD3w%}9Y)Ms?n`IFkIjji83>8pxhUw6U@)-?LJ
zFa^Rw%f}iJlOW~9j40a;LFUEbEVA!iG{O(}ch9*vIGXkiBiXS<f!tm&;b~Nm2Gm|r
zf{4Y>{~i_i)_ub0dlOK(!d2Lwa&q+aD8qO-#53g99}CwZtcHS?Wa!<J)U*N*)tH~0
zZit9zqy#f(S;Mh++)w)$_5^YL_AlsuN>g>h0o(yry@A?4uv3Rwv~ArhB*?<;nBrK9
z&uh+&))c5CEu?MLiao-GibfDY(p3L9|BV?XHsR+FI5E4Ky`@@jVMdA{KsV?7B1r-(
z@(+aB9bi~hZ_S*8xRWCAOo(NM1PZ@IumGe0?ULu7YXC26hj8+0n$miothLae52Ajp
zhls*RtS&Paq45GKZk^@gdvv5`O7D!PsGy6;#GE)pq|KTI`T8V1kV)F%>vjM0AfPO%
zh*c*-q)j$Uok<dgF4<Kpfc6D^IV$1o0_&=hv_s#uYjZHk8deZkQE?;{m|MvBBKvGh
zD{GkL`Zd|demF!##1L)ZB9PcWsoxU<JB527`K7A@9pC{WV~kiTHjD&g0YkxTPPD{(
z$H^#DaiVw&i$p@;KFN*&!}DxRT~T%SCYHXOm*uswrn%dz{d+bH7~TO*{Z^Z{@j8mb
zKH$>$MSSTTS6+qGtC})?&~Rcm_m1gp#&bO)z}hIdOw%}y-<5cGJ@}j37d+|k*P<)D
z^A!=b{5-MKzNYV@z%zAMHZFA?mDt#+5HW3%e457-FRcGqN25g-bR)_X==`-m`8!t)
z8y*iL3LCiB0bRb>1fg>Uiqs8r*pRjL>$a7Twf3pod@_}oKPo{YC@q2RSK*#*vcAcd
zwS-)n!7L|#dI`kS`_kXj+f{uL{wzdR_o9jN2kKc!#Fi{p>hN&8B83St+#1_5HQmRZ
zLPIOz4$4?=Jtpf5)O@cQu~cj5$F^5}dKX!>90ekxZlirh{&OF2rwV4FJ0CMhMg(M6
zFrmT0DY<!U;)dvDtu-$iWKibretpScskzCIS90{7<Uf8R;^p<Dw!VuUHS*Un8o+#1
ze$`-Y2>y#%5)cnLznDC{-q<+?|3|PlkSyKU#66pFKy#|Xn%Kj4BC5YoNK1R5cmw>&
zuG~ri+uI*8$;2`hU6hDbXhlr!k{bCOH<*|TpW?tb(%d9@F?MJ0z#*bo<M+63D5|Tw
zb|0_zEq*aQpEjKbbkXR$R~$k&92!rdkEI9w{a>@ty473lRaIif&-+~6p5kUs^tK9D
zu&=#gwLkw<cJdIV;0_m8%-}~E+VeeF7T2^69@gD?TH<cWj9T_9L~xhMwAnEs{_I6;
z#UKGwDmIDh{>LIlmseZ)-mDvL>)bs>7e^8|pkq1Av)O5yd<D*8Gaq4+0Zp<bRiEhS
z@@pmVL{jPF^*Su0^@kr4;rbi7j6~OCubDF<(Ev{lI+FXOe*H@?K`t>tELaF+0#qKn
zwT?Zqt<I9qLG+y*0vQLLot-5Z&C+%mCXQv|-5?Z1TGQ~nu2mxujJ@k|4s)fIg$gbR
zBI!lIM<zC-ndzjKl^y9V+)$>FYhIYwsfF};Du(nml8N~<x*QQchR9lBVJ7!?u~&Lz
zo7H6TxE@q7MF!c$5s}%V-`ADGj^>^E9yfZjEK^Fz(<WSKGTl+L>PWq?NsQSpXTU86
zD+-&gV_&~D!YlS*YLZKGOFTC5$>?UmZL*t~24Z(|$<Agc+-`<vgA&Z2#>$qPv_1P5
z$7>`OtX*;3{e|+fPw50GC|&_%q-vxN^Bqw>cQ6!~4e(U<{<gV<jep$u7}R0K{#8wQ
z%*HyluJHn(_=_)u$k*Gm?|xm*zPpA>qUVZ;+4kz8j`0F`ARSoEW=e84>%mbf>J>0q
zF=)ZVuMy`k)bieXT>uCpWSXvG<5yQ9U;L9@-(n`4J<_tG>pwXzrNX^S;d%2d5IiH-
z6u;}po}m!|)Co=WD2CY7!FKU}M|6erpF72oY>>0)tweW!F7*K)0eNOMaL4CGlR$>?
zY9m^#(z(wmecvvtd&_x?sV1@}M26-$qwEbiQs!F18UD~W5(g`&Q_cD(JN^AJ7Elqw
z7I&Z@*4%lN28Eynqwc}(Tm6ur?Qmiy><T#K#b!YYLtfPy^3~Cv`e67YqnBiCc}Yxc
zM1sjZ<<v|RaM~e_oMY6T^8H8Hw69+Ax&i>VNV1q=UV(Zt{juM0xQ<>9$3Q|-kY)oo
zx^LF2?x2+|reR*goFG0#yX`e%u}dKk3_SN>4UpSJeKzcnDkp8NQuI?b8g>RDm}02{
zvYJZ+WQFB>DyLtVvNsycd?CTYH|fP+aF`59nB@;Na1|I;u71oCjPTQwi1|<VZa3WW
zkv7#jWw!}6-pYAB4d!M=OuZw0GEJwm;Zsog*rRpHG<>^%^c9oF`4YeFBALSMtvtK}
zXCpi{h@<|^6DTKah`z_DKe7ujEN2fc6YcP|Eun^z(r5=Ka*rjtn16M!1^=<RnVGAv
zSFCFghsF-$Qqzm)FNkUj78IZ1>O5Lk+i4s{BRnED#>f2~L8v`=>M&lzm4QUoki4#a
z(7do`2Ry}Q=cqe;H|E8fl?m6Loqwhk!I*FB0WA~BnM>6y)7`%O=&wCpb%z@FbL+#t
z@VS+jc9JQW<9VO8abrKQ4W4jSG^bD4XvQ5KGfXwN=BCdhbp^#u|GZb?w}^kjMi9^W
zzC9ri2$tXh@UZ#QaZI)|4i01uitj___ky#7BL|LlxE<lx2(C|pBKJ+1r@dL(GVKU-
zTU&$t?;9!2;Go0+Ae%?(k=p!G^EbyXVwX&3*^mcQ#-#z+E8Dm;2ftfgx)wEQgPpG9
z3+gMK!@HQ9fHhOxs|NLhU237bwTFNH9g-i<UT#LNp=~q9$-dC5b6CHX^zANnoUYLq
zZ$mCp?`MDlw@V7uLiM8n4aH5|BCH)D=Gh~~tEwL}@M}x}F?F+L)PPsleeaPW>!2L9
z?{2^(1QhfsXU!cLoJ;A!!%_`5m>P@#5!tgrXqB5~&G1_jwz&rK`AeGw%M-8}C?|Fy
zw|TgMzw&;I)&u%k_o4aNq;VC;7J3ruDS5Un$i4tSYxHpXWA~?JAIZW7$$h_0tA-ko
zilw+X(@>TG+#@F<?Dxkq;1^F48Dr~iBK7vShX;q#L<1iuBxrnA|3bb17!XaN`->jD
z6jQGlVoJ$0gXdr#eg+yN(_Vz>RR{HG6|`Y#a6tKINyX~dY+6=<G$}AN*<;%eHTzz-
zcXfcJ{52@5?X&EMyFk_PO;bl+v$IIHIz=cZ#Xd-_02FAvX#BPy)a(O|pFaW0v$RVl
zvf1I)HN5_lX0Ad5Uw<F@;kQv?4v!87E(cJa;sR4wSU?}^G=3m0UCj4dQRReN?`5Bt
znTE15bR}Kh%bRy&{9+cdWL`wngv~0D5df~bxQV|8QeuyFBpOI_oHqr4r`cDb8;ZS$
zvo&o@dghyvQpwkYT#-<7Y=8FiV~S}ldtem}+2WK`w=hMVQ$hkGz=Ijqh_#UzNWYDJ
zcE8P$q*iFchZdsl1F9o$Go}7^ixR-WI1kz9jLR}gG!$^mU#3Be8?j5EVe@&3_6g$2
zsY?!r{q&<5UoNL{!#T8)_@<Aqck1r!n_<XRCooIaq62}4Zsk54i%cG6$IVcwf%hQ8
zW|yW!*o1u!=Tl1&CM^TQUJWocU1fr*T292@M|_GJ^PXJ?A|g5_5q2qu74{?h413*a
zrk_Ba!+HwNhSw|SYfO6(m>Q(h;Iw^}!Q8y2!=ay}mGHc%B*EKtC_Bo<55`6j{sZ$t
z5ffiEbwKepn<zAoO`;$eCB+C}K!=?EfazgAP+qZ7nZ?auvuzuD_{%#dZ(;t$TbCBk
z3FnKGls&jLo^@i{oyfcR!n87QgWmNp_rbo%*qzZ2=kF#*DFFBuR&P(Au)|BMuzp@v
zb$OC~<^qpcW4fO7ICbWD=`0cw7X8+ib?^ltwP<%wo3GLBgSEp8n9lpmM)BmBI6vKp
zbftY4cO!<9$g)OWFlxMbD>F3H1!Mowq21vuh}1(EeF3UN{8o8bx9ELyHr42M0(Lt*
z@;;AFxm)w9c<1f$9NB%%qSf6&@zv!1p*4-1n_zn_OS%-(_7z-R=H~3Iplw#S-RuLw
zU5%$nqXxz=?|9qQu26-+WPt|x<P1HtI%cL8Id{2ue(G$ii(B@C#g-NqS(7ifL^MLH
zYnvxe551k=3u^@j2h&rb(1&nTa}vGwX0{GC-1REAy-IJSPW~0rM`YIu<7hINI9+)r
zjPkHGS)%8|quag5NDvatM9zcYq})+kpR$9YfM-8<yQ0`IX<I17vY##CdgxeACnW6c
zf{<Ywc^#&qUN2Wn*W@CivG1nXrK6&A%|*w0Yw^>5YqX^icfgt0=`gJMIlpV?ums_U
zuk@4LHu+53<<p8a**Z?%#nw}$3;t&*MdAFK^EFmy^32=$I}uI`f#c7fj5&PqP>eWO
zJqt7qRYH*?d`t|oW7Xc)n&)ffTzcDkDX(gt_2GA!bF-TGz0=U0-0-N;h(jx)(eDfL
zx99JkA7N7uh-;?mlMR0g5+5iZRn)B$v^jQs^8ymn3p0FGw_(%f?vT2q$pdvyLaCcl
zGRs}Hl-8veSg$$`M;XGLcL>82$L*sMu^nS9PF;O{`{pGZ!Lv))5qm;B{d#F#B)zbU
z6(r-9<M-PV4KiYIaUR*$hjp9DI=eeNf_)#ZN@LkPJz_Xw`SlJXyt)pJo6@uBU1N1(
zn2S}k;&ltmQSeza-*$=Mx-n|L&M=r;c&_CYQRSH9xxuHiz;+ld_TIyLtaDRxZb8Py
zGoa67mvo(Nx$am?em=pgB5ODdAH~;$q_YgT;0)-sc)q!)+TA&fwAJ-uOgOXBtfp10
z-5u&2xMR;x%<TRps#do!9{S!XGIC7WNW2H3Oxpdkk+Dc>fsxROKk-5JeM`|eb)`mO
zt8rwTkD%wn7R^r*opYoXL-&5krB2h9Tuv@?kABt+B6Uer=syXa9ahOueUXrr3V)8B
zjkvDQa|Jr{J>Ne`WRl&<Hk1e0a$*s5+U^<mqee%{I#Ql+n&Q-`bo_ieZ_odYQA|#B
z?a6rprywpJJF?9?;LqTMrN%jon#_oJA%MMkc^)g$_CyaO`#>31?Bz|YQ1o4&9_)BC
z-98R3?qS0_oB9sR%W4L~LDTgrHxW+yc6$xCrevCuNspB<4`6s(ATFb3rAChS`k7=}
zn*39Y_YAD(y00Nz6&4I8m@z}An|-F&4Wg7UDhu$MVr_O^iyKQ8TK0*nZ-Hx6DTTSH
z*K?q|K|mtkLfXbj$4SG+GNDG*(oey_=r!QBKBYUZe7H=^NG@h5xRJ)o&ORrH`yA3=
zS|`;EGu-o&h&5O%L`F^8T4cPsug3kOvM!lIFOt#h`XwJ2>U-m<;k6$&h28v&cE@&%
zYk*sPoU8bvMo}}cs+E{IaU$`-?ek*E^&u~VDvnNodw!sVK$bUO;B=-VvFo%wkLUz&
z-&F%oh?2dB;TgWE|MYeW!(aQ}^ddVu8+GlW=peR+!L-emhs86Li1IE(s;+%Y-&ym;
zDb7$5U(HD75xFYt3MJVMq^Z#w15VYRz{x?3j16YGrBN~F)Vq2iv-Dn~eEwVgSqR>(
zqMlyMn}FI7^ibRnQd}=?A{>4gq+<PODG01Pu<t$@OE4a|IWnQIx`yrdM<Lvy8sMa<
z|Akyjjur#i6D^5pcDCMDSfB}wzUbN1ytkdTr8B$tT{99(OA8t|!Ka_~&mH%)x*s(y
zKyai1yu(*-6;)m8*thQ37uR;O0*!Xf_Y1jHINH3`6*(WOV?5g~89Cn37csHQa(`A0
zDM-Tg&qDF)HZ`z)o;B5HtaO$}5oO^%;NPg(Cw$&P-E%jKO+c-w^;VaRrpjH&<@!~a
zEY_<-)*dYU>)stL!<Hnk^oVT*I@VLUD1T?H+KXt%_!L9Hp)Fe#RekWO(Rr4O6yiR$
zL*y$j-%O4^OE=<Mo#h4l0|!9F?&xx8Z5XB}I$~nRc77ngaMA6)TOUs%>R*Ubd-|-9
zfz+S*G}+@gGP8Ra0z>fz_Dw6jbXZEb{$uWVA3<_?azJZgwdummt<U9tdf~X5pV|+*
zqDjNyLwDEt%kpGk$oNUJ78d@-y_Ka~ur$(y>M(%)-tBd&!Daz7?JTf(Ob~U^EhI*)
zfOglnd-z<qlF%f<L3`uE;e7*bzhK*eOtR0IW^$lXkj;8D)ep`rAy~9aZ7`EP-&Dex
z?IcNqI!{8$Znh8MhPuo^_fsX&aW3FnTYZXyZ3`!vSD#<DCHBzw>80%Azu5Lkt*RiD
zPgcFIu!cInVs9)qxwM~UYF+#eugzyuTyIiXC06u3)$iv{Q;BCo-Q{j%Full5xXlWa
z-9?`%htQ^~tvVKAKvO-6q8@Yb_!?q!i1myU=|z<=0Z{wT2>WPwemdAGg09~Nrh2{*
zdGVnHz)b?jM{<Wo`c4lliX&zEej$v0I<5CB+0wybeejEDng=Xex7-r;wERGiwaSFZ
z6DT(@4(UF&W_n2beTDF=XiY)aUrUmx2U^X+f+HSGjOwNOz5_!UERL8%pIqXWS#FRk
znB4@_wIuPgDZJol$PU9zJ!U!T22hG)B{g3-#pIB&My;|gBBkpP&qQs`!XCQO47IQl
zuaE-+_Da>3MkzK6PY_e<v8kLZ82ffjkqPm{<sGDsZM!{2rwvZARY^mn=MDszU-eqH
zpsS|XZ*2ypg>t$UvliWWSFa}k`7qmrG5J_COQr4YM^4@&dN!TL?xZfP-daaZc%uKS
zbZ}Khi~S>*3FOk~>V9IO77~}oi>q1FQiIte+|-qy<`G>0cc^xFis$kuRra`HzQIib
zPmvUQPs32x7hpW+6*vbfk9cTfm+Rg%laub$2v~ohq=98e=brNj{UtANj)7_b^n{Ru
z%ID1lml!Kxy%f&-ylo|?H2m<_skA!I80-c33m_=!>gS7GGOs^Xb=WDQeh2cqoHEEE
zjWt44Eeb)rBrP|wlO1Ea-zygPM@c~5h~18-EN&?05u8Q0D>*5u29;EXBUs`>1{dUq
zIVC-g!T39E{yBg+zEul~JCu8}Bsr2;vuNI7RVIhB-9?F8XJoxpBlLVhRFYT{E|ETV
zdcmBvKCC`ej*B%T_X1Ag@a&xQN}#>7-NhTD?m)idGbc5PvwTvZvvsp9tC+t*pUd20
zLrUWWe*%%1Ke1NX8*Y%YX^@S#y#JV1WmBT6L&na#VX7H2<b5xoEQA>uC8-o0Oojwg
z0(oPDRG}_*BX)DX-vHhuTc@02Pg?Ec;5@8*6K+uKUicZ(4AL!2vr@Yl<`Q`c$gU3D
z8s$Zj);Whyk!8?TJJoF0JHg$}`eH16!Ed|u^~E$P63vW5xB<wbcw}yJ-s24nPVhQ@
zGk%Rs&FpqdtxY2PQG;mR!eCwB0zQ|6M#~ok7Iguh@|VRiP$#sgcCUPfh&}z+t0XZO
zqp)KBohXDb6#7Y!{_2f^`vrZ`_pFiM(}Xw4{odCrd<%OG)uz7U0<O0G>wO=O-T5T3
zsXt$hetQ<It;V*u6~j_Z&mNTySCD;cCB?e4s21uaro(ex2Q*eZ5W^BEC&UNV-CyR1
zr&Kw2`#;RkzEx4qw{hK&BvhVd%1I%4SaE*X6v9WWJy2lNj_3eFMs_ef@NQv=a|zb2
z1X^vek+RRN??U~3Bs~o|km)zW*6L0qO1_Y7K2t}Bfvv=q%o!`lO7-8qsv@NWy#Xu0
zOiwoUk9zrivLbxY`?fQxXZY>TZzR@5O3y8XA5C2E^r#NvqG3U(7YW3=4qtb|e<Le(
zJz7y%cRbahZl6&Ma`0ST35gjwvcK{?`4nQmjy~pY+rY$S8K81ps;>e7#(?!@%F>>N
zZxMg|DSsz^2+tNeD8)<DV;sRe;E57*DwBGA=~lI{9(8BI-0Q3qa&xuLL-l1J5hZ$e
zfz(*P`b=l^B6C9n83{wzfSW4`c15W*E0U*dje1xKjqk1~!O^lctO_W&MEM#8^xQpx
zn!&EEEzt6i)iJ~`+#RYkCwT`v6m2Y~_nTZE-fE5Hz}3AwraPYFkx2OhOreGaVR0)U
zY8N&(szXfJfy$6scq<;5`!4H)^5vng22|uX;d&9xh4o5d7l~62Qj4W{+opstgn=mQ
zPVZ+qO%l*o6%t_A98WK-x+Q=NLV~bF2rj+`(e%WLSjhT#_j#j-R;Z&85MxA3Yb}Jo
zIWMwwD?uuT^bLQ!OR~e<Nen2fQrQ0><nrm2zF1k>?h7;F+2&!pt{-hNS(iyw5H)tk
z-tUo*7toK`wRe8XhK^D*`c&ouR?yg(g~i)BxrXy(K7PmAXf;d3(>x^=fjt_iGk6u4
zOdJg%+FFn(fE>e%zj$)X89M${OJ!x$y}H8+14uZS_GU$-^qUaJ0G(B<a1lyYTk?tA
z_FaYooiyT)#D+jF;NY&(f7IH!Bjv=F29z2L9dFyQBIe){2G0EmKdHf;?G)CfSv*$z
zG69GnCrsSHaPo8p(WcvU&8r&gpl+b^p8;KxJ9av(=Zp=NkL3%$5oepiM>DQH&UJ?#
z1(lG3)jmOkwwjTYqYnS#inG3GEmT2;c+QnD&g1n12G~J-H`@~ie~rQ)>E!UYo4(rv
zVw#Up{!a^AAm|cowk%=Vfv35r9r2r~W0<B8WgWh=AQsR`y|c>ovy*h{_kdB705>Ce
zX$tP{mKP`L@07?eFxq$T5fo_MS1(;GsupWseSvce1H!*+WOk2noy^jW=RAeIuYigr
zNCfjMS!P;V?$MV4nf)Q`l--_2LdWrBv#1UGz+4n8|9P6bDn@;+vb4R7pH)eWp=7C{
z5IMEzVTr0c$+f%F>+@Kaosmi`d=k@l?XW<Dav4T0ks9Anz$e17rn|w_i;`g4DEjXQ
zJ1z~1l{B$3f^-4i+ZEO@k%1^WT~{75CR#`+(X*~HeMz^2x~=pfM<%c5JZeNM^x`-`
zn0E8;9HGm4mL<rAs089<R?x?yirYr{EW#fLyua>?xeumWZ%PY&ADTn8V(_+sCdgeN
zL4W*pf^>Po6IMJ3Pm#7G)MIVTUw*f@r#sRq;Ilf=_KE?WU3)YCIs8;M2LSwOYz@Gs
z-;l%*Viyc&MCjg=d_Z8uoeoXJFuF0QW@OWh8A{|CTj(?Y^mW@%@0e#edsRr*b$Qj%
zH~S-InDx!V_bU0mB7`qjLz)eX?Kf++vZL*_UjYb=6$-og)6u6^-JD6X%*TA8sDd`y
zn=T28m6Jg5N)hXB)U*pU(BU64Gkg@`&Zwxt`GCrZes}RSzd+usE^=`iL7VM>L(E>*
z*~EastIx5kpl6Ks7P&26Fde<t=2{Yn$b237K%!rgL-Ky$=;}%I{p_jJ7^*2j_k+VP
zTu>QWnC-Zbk!ZTo6UT2%Zryu6gic?n7P;L|w?+gOIn_xYU6<<ddfTJ!ul2eMSy8Lp
z$!kGRKvziJ2*-<3^bfr)R05h?i!BdJWG};~G5P>;4&YpGvP<hX)4&v4Je_Wa1O?NJ
zrA}Zib>H{Q@0<2#0B4B{hDZDq!pPIdd4s6sK#uz8wva`u3RRIeAkh3QJ{3S!!@gNC
z=|<rVxt;_9c-F{uTJ?P*spW;mS})U@lRI9aGsoB3%|5x;GOOKhx=jiPKj_FLn7)?f
z)s}lnQ5uE=bX#R@OfPU+>0&B{e((i<009NuBe$NROrQr3!OS7GJKLWtILg}tLS@_n
zN}^Aos<06~Ys{K;v+WJNPVnx-slp!8L~y+A5w^$<EFNbGw#{{di_QQ;z9H5wWFf3q
zPgmbIy%)X0H`mf#1A1=0BXv8MQC{l)*iOsKGdDmJ=&|}b4*0!d39Ob2!iuLdDRBsr
z=(&t3Pn$lqL~2Yh_<`9$<%j%&@yT9?XXuMs$hpE-5kIG4IEdXVj=kM2w~|JI@yujl
zSr99imW1_JW$KOj*+0Ks44yyBOfMXaA3EM&H@`N->>L+3zsiatUNqe}9ivuUB2v^4
zd>FKzwPIo~bU!bBTGJHS!iQ7qJg4onu<WzvDjWl^0_MEmQE+5NtWw|=1wV&5tV?lD
z_yFG#i&u<y7sR~Zo`xQm?r+)FWsur~4z-3|Q*w5iy`7vATG#Jf=7oKj2FheoMTxxI
z$(~m<rAyfWRDOmuhBVqTE`F21tS`O}NMuRMu(WFjCMaJcb~9Lro(3}&bk}||;L~Ou
z+^jiaK{bC_x|!_ZJWd(a*amMAGt&4p0|r(Qw=}&wH5G_;U_N^%n8R-=k{H)cdzh2K
zsu5xgbag;!;i$)>WJAk+l5S!gaXNjb!Od@)q)ZLp&uXNWH#$EIG3V^fHJ)UQ%u@_y
z<>_j(I&RVPiH~TTZE<qk>vuiB^w|Y@c@WJ3>46_*??)piBH4c}JO+N9D(dmMkv|cY
zwE`_wKU)@VJlYj6$Gj%f1)>_=uExIY7u7P^N>+!yz9QGpgIH}+2$?g|)Kt<spBjGY
zi0qrYf{`MG{{rb>a#8^jzXv$)iI`}PYNN{ip2|qW!_tve<Tl~|qbOpH8wZE(*UEc@
zE-IR6XCv%4l&Te9fc?ED$H%>>Z|+nRxn;AIeEL|daYV`9!6cl=t_S984uw<<w1!M?
z*k(LLU5rhO(|~^gDyaz~t9|m#VI0Akvi>eh`($8yl9}}J*nUu7bc)1k+GRoGX@3h~
z6J)7P)d0C!EgtsphgS%u4l>9<Yp#$@!S{_7Scy7Q`^-AV^oNDRf%lToWgmeLmzIWY
zT^2jCmV&-pU}<E3q}#)mV#S5^HU%En^5r;Mr|n#yd_94Z4i%2z8p_8U9atIK9q77-
z;XcuSKvhwCl%2PYnN-@3rCx0{O@mQqIQF$OCj6H}L>#Akk5p->=D{i#Alk#p5G*}Z
z3m{*T(_}2`Dr=HctGUwHS)#sP-V^Ozg>B5IRC}I5dy{jx2OAI=crjmTK6W!*l(jf|
z>>hL*XnLK8rWgfM3i2-GXHE%ZeU@@_A3U@VH=0=6LUjN{iJddby%rev1h*ec?YqVG
zm7Km>IqXkuxVs&?(oI@1Xlgm{*I$1I6msPakWx;u)a-9>sDNM*3({V=3l%Nccpv4?
z?{Z})s*?6E4HhU|_R@r~y-xa`Uc@x2ZALpAnOr2;n=}COswd4H6gp-$Go$_m1p4yj
zf>SJTu$KW82Jn1-OP+B`ze;S7JMXpr@t0JOBVD&b;t~}aAufm3Ppi5*BqfDCK;IYx
z+LzOEJqMN>_P`f~w?95^KBXf|%>n}ETixgHi>;VnjI*{9`9`dK8&|S(4PCpKCrZ%g
z0CJ7t01KI8ti^%yEVcY&zi6$M=(6c)CXMp7r@Emgq2wdGR4gC1hKntMl!Wcb5!6I~
zdZ^_c^Y%mr`o*1=PkXJ0kWT%FZOzqmYJFfiKQPb>Ls;zac_zy0<+7{Z%ae<ZdYbE5
zeb^!%3sKmnQDaz;(DjN8>E_rzheb{Sx#_s}NmgWqCWQ%-9^1J}05S*R3DCgHsYf06
zQgq;%zg;DUdV_g%{d(PMRRCSAe)EUnAqNdc?_Db!JkplT9y}OWS>R^a<K~6d%jL8E
zQ06&1Z0yAYZ6(ZR@)aghMU;f;gqO0a^y~4GK*Ww`=nsqnOfwz~g^BnMt<&^@S6zlN
zt6QVb!+kZDxM!GDGebr!q+jHUzUgHzBf%BxXIr+Q4ICKD4h`@E>OF%{v6_)tg0B^Y
zczjr-)zg;(OlvveM6uK3L+6j<lF+)<mT=iZwhjmMr}zWYjK%yzw2Pg7)XoqdbClcP
zeZmC8WCy=pi>d+g71n6y2hNZPOZft$^xR;oT0TT504lC|XELFdz7;Qs&LXehw!zVx
za5c6z+YPhG&T~8bJ~r-aoxi8q%m)BYQxMTLmMVB{qQ-Vn=H)gwM1K7^XAwSCBOXXJ
z62q>wk2oGjo~+Y4o5|-qP&Z)~V$#U3U53eL{2#*JGAPcr=@tzH9^3-K9fCW-f+hqA
z!68_1cPBUuJP8uq-QC?iI1CnCXK=T{efG`!o^$HkwX4qlF;zefF!v?htGidP{=|lA
z$wa*@@v;ITilLl7%(m9n)~(rjo$?+cDe^pZ6=<&;B*V|&g@E0g!9(zoq^@!g3X<Pc
zz1am4kGPAc3Z4(0kSN@Rdu^{ETRQz|-w+fW$`#p01Pxtlt!sAk{SyU1Kob`y0B9go
zY9t`Cw_h+lR-a@UIq(q=Qdj344dslb;JWr--h|mQf{T&S+rjLGhXOJb!5U8n-1j82
z4VE|+#-ZL^HvFAsegXj2;f)qY)W-1O1wrnn=4Wpr?``G|4{HDQQPy;x{FvleAKv?8
z<?r`@q?G}nDIttl>zlPa-WwoBpM?4JBb(ya!fmN~86|d&aO)@P>z5dJv>ldml;zfl
zwizjWa;Dh&EOEZ+pRe#*jsumtI?ms=D{66neC0$?xM}wCyUjMxMnBI=oBKPZyE}PX
zu9XJu@^Jq2)!ho5XmJO}VP6%!Pv^P*x{2IEn?WjQFfDowNEM3l(u~U+6S&k_cn{Ib
zCIX$>$4L3bXS>el_0DbG#*Q2fwe1|yoCv~|-i25exf70*3U)W?YvQO#^vcnY6-QkO
zJF@xmP5PN%P8Z=}%h&!6K)gDeykzQ~x)m&8h)7iq(h<Fr4*YPpR@!}!TD$Iq@~Ac2
z?x_~7mkezzYfa5UA^{eo5K(o_ITZ_eA+|SN-sRdwh&lf*FzZ-qF>zGF#W4P9S^&}M
zZ8W~Do~h0`oF4u=k>pVkV&cbfcWkAtpAWziF|;oTk{w6AZy#pT_s1@|MG-axbR_hn
z(zdS_hL6}nC<Bg=+f$mi<#_V8_|C*@uZ1c)uvJTLGfar0noPwZAtp$`XpOz)g@xo%
zzsoBf$(4#b+A_b^&%Y#mkSnveZ4K4(KBzF?_;_ZK&6R$}3`KVz)v1(DE&diTL&7qz
zV!=Yjg5~~s6aKO=)K&ejJ^wOY70_sw#CUsW$u;lO{-?oiZg*h+4Ym_CK<7U$Wt^St
z=*<7;*s0#hle}hP5zvtlutowvCj!O_spCV=`z|m?n+V}o8DaPH>5NmJ^UV5DiHpRT
z82tB$gs4NKAaSY>u6r{8X|}wHI-`Pl2;m4ou3POXWKED^D&UB96Cx~1KYn~}C&m><
z$`{<A6XyACLCE9h4z@W*fsKkmw7nm!od~08dv`9k@2D(-j-8W^{~$5*q}Q%ykium`
zF*U8p^)+&SKbUD(boT&`EXO}hLp%lyf6nhkX4lWIp|NvvYbn?nGbR2OlS349q)DEx
zV_F_4A%grSk~J`hyG!<pS1Kq~6vdA-$*W*Ux$Ywk`6e=@SB6Q{01hqMOTLVjn#v1h
z;Z=?4a4b&GxTN`k7uS*4&jSa5kUgsZhJfRkHae&KUt|pah40b38QqClF(j(h#E7VU
zpC!!IDkEh}on$YloMdMPL<*|+tjNwuMLf8&Y;1|YIETouy%YdbznLxowue(XXxnA5
z*1$D$LSc#=@XG$(*nmt1CH8^yu&}FHFNkO<8c8UbCOUc%6NiiL8$53X;98Ba@@y3*
zNvJE7+$(cjjbI@lJrbSi8!$jVymd4)#2<`E2DE-a2+Z-`LvW4F>0AP<Of%WWFbg1=
zYAVZ-AK(vrxyLK|Kroeo?;#b6Mb|R=G@j##0|=B*PnM_^X@BU8allmF;u3-K+iDp=
z+A^DHqMCOM!G}(p0}(zoG?hxm=i_n`jq9_JUEG%VdX;JYg6Vyt^RK#j3EM3AH&z7L
zIWOxthX(Ls0L>3*HAl_b8!z7GLMxJhW8^oLn<tG=dazsQ_Mn0q5&6{@kyt)@@Ghi9
zFXcOu87j9C?IhdTna_p!1r@iUNM10&4(ZdE;P|UeALtCNNBD#tGXE<hn80crvuz^#
zJ}wUJ=f5u_aV4k)5K^SJ_FlLP&N@1W4cJi++jsSp6#q(6o4(971d%!?ef-g+B!&eR
zYk8ZLl;nGkd?#3KUyle3c`ev0R;rJ^jP%z=tUZ1nV&#gTpfccLbuPHSI&=@R;%<6d
zHEJ$cUNP8A^#Z%7#REP&6?LTabD>BMdI|(LXdwrrBcX3i4X>`GYw)?eTSU{u9~cwh
z^$5!=?4I2C^N#Nr33BgPxCBt2Qr^q0MT<sha&ok23d<qB$e;BPXw{jI?QlI{)N-cy
zZl+T&J5<;S(fH`v+@!f>`DA*I)+hfa3TQ?x*Q(igJ3L!c!!-eBj`?!=9bl5kIFTrw
z1Kqu4$mjPPPyPt6&%YZGX)lWFm&md8;Ta&@`Iz({GI!E_*`Yx%k45bDqq*Mo)&#h?
zMo_Yd!jGEfyyX#vHeN5fHb-wA(a}*f)46Uaym>K2>KX!WBv4Ro@t7Pbiqf1nRjfU>
zx*f`#P;`gaZ0OHm1MahSbxLzgw4XjwQz8n8dDp8XMV`**(Nn&bOnh-EWQdJ#E7<f}
zFQ52Tv9|1C-onvAbe7-D*>Am&R;S(}qMFjIjd9TeGt<}fqu4a2{Zvw%EE`6#y_;-<
z$LGbg5MP>>m++#G7f+5wR@Nl}sPUGFsOpeQn@|Gi64%jJLg4-D6OO#a=bUi_GO+m&
z;1k*W34KLDDNo4H6MkeXMN9vp$7xAT?eePyAmgK9ec~2FN^t|_!DOTTxe<}SwkW)*
zcx-%dn?>U+$)$hr`w($XW$;kxb+b9|ivC**Hzc8ZD#}3RwY#{8hEN<Ea8C_${q3ZJ
zoTDG-PzQ`0k$mqV1q%vi9V(;%evm-QUvSi1^n+`Wb}>g|(^`L1#P-uX|DbtZ_bjOT
zxz80yz|f!$VOB)kxzh3S@NLy~ava)2+EeUWIDX=73YtQDLg&@OgQI6&<3>+BgA1A+
zPhX`*mdkopK*_atpWWKOc8chnI>h})^P^9RdY?YXK!-mI9DOf%8R;A=#xJ9WTF)Bo
zsB7WdCZ}~~D5cE~*t>{4_Y%_=h)B@$JEQw`l^$+ex-5VIak*qAI*)xLfal5VB4_KO
z9d*K$wBaD3c2n!A&*KDOnUX{(%#XQF?<m%Q^?PN;B_s=IjF>=>XAcg}2Do{22+VG`
z`FUnb-abvMZeW|I>m}@q8sH8BOdw#Gc|8MlV3$UF=67(!1MZOO+FJ*6*VDm9T1lZ!
zK0Y}NJE9~Q_x<_oQqP+g1Ny03mcS>cwtXDt$Ha398qyOOE4O*Bn=&Rtblx|0?{HSH
z;-?h2KY4vao;OZR*#C=Jx(=E2F=(u8mVF}PrMXS!Rlq2+SOrMwis>Zo4xQ~kZT+~-
z63|ZHE~X?G?~jW9|3Ea6C|1bKvz{Jqpamr*!-;Z9nZ$(@z5s_(98t%-?Tn+qc2(LJ
zfb9y-Q)ds(w3pbRdP`(ru~22Gp*@Aj7=*Ub$6kVe{#gh+VmxIW<3y{*NR`f(4Di7K
z2_N|*<4$Txm~)88Ul;6Jljm{*<8mHlI^Prc(t)DHkZ50ci=%kaU|P5~N7$qI&SzV<
z{EgM+Bg_y8eE?$0-!osJ7XJ~s%sz=ir=pc84b(kY_|dceTE==EWnv-zP0LG0?9@D~
zypr;v6y_NXoNj8vpZ@9Py6-$MV`wGGrmXl-?sjh6zxz^W3vX}j2l=OBcWBo<$ox02
zam%naCQmEnIlV=nrVee7^RZ8AFWo{aNiZ<HI!2R_MAf1N$SwYz5fPqxKeRB=08N4@
z!hp}@zifMhzoL?tM|hAsA43x7^G3^Cm^5F{Np^Du+yEJzbym$vT_dd(&p_6}*5_Ew
z*Q6C}S^J%(DuTaW#H1`4qrV7hDiLdX|8xuJr_ZiGJi?FrCad;30I|f@SB^pMF880B
zTf%>Vb87E}=8^Pu2N1QnM|)pDc8L)h@{)o`M#YTR@%8n!HOGy?{~{A4RL{e^^@@2(
z{@0>~vhQ0$LT9VYY)31i09@pJVu$q6dan?IkMn^Gc58aFIU|&i@CbcwGoX_P0TJ~x
z3qW(#AdurU=zPrhLc_POdz~;S%hWYTPu?@6+MPJRS!)I+G)?&sMwi{;Kl*KNOx2_H
z2;NoZTm1*c!~9GS3Hmd9e{0P<2jzt)i-}Oe85>qu3TBL-hiQMxqj4c``kd#8+V32I
zxLqu;JvFSca(y87S<i8+S7Xaq?oDNyYFrV8wcLlT0RIHUu=)1<>qF1@gq9crU^BDB
z{N2%@-&n4)2~5)G-oz1*G(M69L&E?<9yjCYXP`r(7Vs0LoI=TZoQ%C4iySS$$wfx2
zWq(Y{H`*?U2XbS~EaIP>efs~+p#>W4E%ny==1zC?C6POAEmwX$wY=iBfyqk%6oI?;
zXV$wG^Vw2$GCFK2@QK;Z#iBF0Jb0lN>uabqYpq`J_KVWOG$4;S!;s#WFrPSPLg@PX
zA2o<`i)$^yrm0*Aa%CQ*nkI$wNWD;zvt>BwTlw(%7*3XY)M!^vs?QfB1Rdl|&qKln
zs0u(u`_Q=s<fYcpzHl4;Ccw{RL{Z^P&~HkURWh$a=fuVGj@7Qb#^Gg489O7^;rPft
zQDj`@!6+}D_E5V`A3SD4khIdM`_;2Sgz=`D*}}6cjc&PIlfH}YrJDg)!mzBHL<hcs
zLxvQ~Pmi}rJ}@Zgt|~+Ah`>y(%bc;YQXrSKObGBkgwC+pk0itn$?fF6lPAF(=(iV2
zKoNi60J-;f)V%o5Ez~j1+Xpol24iJ3WEyTWygWk7X#Dw~umP1DW#x2d3tRNOBL4>u
z&?*S=Bw(iw51<D)l)SY$tkn)Q15gNUz|DLYiOPiQVVZwld2$0-0EZM^PXfD<#CM-t
z$U~RfQm>t=s+d)?yO{{TahtHe;61?P($Il9zEoy_%^wZ@D+iGTQNvaW<>bZsotoWg
zIYN)Slwi}Cz#F1}`wMs<uBWgKz3BG6Lfk<cg5~(VxthTu<CjnH)k*k5KVrJmW3^-U
zMxoERktsEE|LuPeiyA@-!f9GW$)y0GCBek}!KX8~{G?fazQImtP*&uq)e4}>lWCo!
z$!D)IZvV*gB*U3@pmNZ)_d=iRGf-EvR^Xt2xyQ-WYt6q?82V(xH874WoZXzy7PihB
zB1J=K@qvAl*D>dv@p421*w{XR*WNk>Qv6QyBMGd)01@Rp>2_mDA(~}5#Ua0Z6|EPu
zAcQ_-)2bO+X5EnLGrU*jheW^JgkqL8efvqWrF`2=_4b)nT;7sSBp~25%89yx0hN9*
z!WDg$OeZyAH2c^+K+=9Bty*&gA3M}ift<mh+tt$UY>m@xMc`Tj90KGmg5erf-ukQ0
zvb(uG`r?$l0{nw6Uap6iXG=-~t0miOrg-0GdFlR9Pv@H7`~9)@OOg~F!NN(bJ>I~_
z`9xG@Q_EqA*nbdH(b~KGa?J7e-$v%m)OksLeh;j@zp4rWiPwqq8JzR>g;UIcHVUw4
zxJ&KKClzZI^x37@+>uvtjseE<8KNrgrR7-%U^NI(^$%q@RjHqK#Fu`zV%<&6R;Ub0
zz!x!q7Dvg&ssbo!tzJs0!8ahvlSX9pG$@7n0SNSFHheDR@28DgG3otSmKTFx&^-_|
zFsr|A1Z0hZH5i&DRg)-%ELO4IN$v~;R&VL(UNc&50*wvt?T0Qg7g!N<hm<F3XjqVV
z@E7jiC5#f{c$O@wD+R6OX|G-#q||S`s?$FB3}BOEw9o2XbSQOIwwxT4Kq(u^m2jc<
zxZZwHGgNCl>DVQ1{JIY?%oG?yHjANPOWA-m9SVzO*c(;qf}4Q&NHs&WI^=<5is#+G
z;POGZg(T$`u0sG|%LJ;{lsk1VyxQN1O?2kx=Z8JczQy>@CJ7_yZeO3HV|Qec6-MkC
z$!HK-#At|D3ks`Ff649+lfn*fr$GtBo@3(p#QkOMuHU_QmvGfyx$kA>hA?{hVzd0!
zQTs%syUhjsjx}qNfso>L%UN|x#D@VXc_5i07ch~p%rNqLq$|AOgDjoDKObT(mZ+4u
zl#qm?R;QJMY8GScrDAs^DPQT@Ul}R|?L@Numjo|?Qu;e!uKNV<GSYVP{dcEDzU3=d
z9sS0MsG)}mlGc7HkqV5<<K>%gDcsFhC@n+?NVNFTH$T@Q&z0>0?W{@pRK(iUc<ztu
z!BjkHMtvp{H!pZt84+uLph4BK*iEJMMrq`*JZ)bY(pxn0AcRkXbcK|wXMkj%!fiW`
zrLb?KJKrL4=PT0V1o_%L{sVtx7YbFW)<MUb&DzrXdqu%s{;+unRP0y7Zl*-#%Qo7)
z$Kl25Ssc|YjIkf7BN6pN-KIYr2NgzqACz(YkEs|l(7#V4mj`jNU<e`j@iKPjO%)j+
z;hw1(f^Bso-E*fV+<sWTq$?F_J37BWIQ^<5Mf!k)oq{$breXTvks_76sOr49<zU`u
zIw0qHEDDT^zUL6shfapr${;ZF)Ne00-<%|q!6&rV*29x94L=H@8PJcNaGYX^Zr>>1
zIU(*1EHLz&Ww9d%!x<mii%8SHU<cfsLP3sdYWNeu<VRWn%4)>d+G8qmYxC}TjB@2b
zF=<bEaC47u%bJ<=ICWoX#9PRpLDBzX1jr4kFF%IXE>X$p4-k=R%wj$mNi9AuH<Iu?
zzt_qxZ8goYjl;H;HS(1NCygTt+8(u{<R^G%wPT;y>?;ZV#$W;Oz>N;!O^-m4Vxh{g
zNhe9b$JQrj9VkJxeei;wo+Q)3alWkG@6)NPwbEqISpm7?9s(wgJxX);%k4aW@)ey8
z6PNdZLqpx7uikdf5~?_y|LV*INAFt7r2vjLP~LG^W?^L3lx6dE4H>K=Hud%mCLmKx
z#INdjw2pHFqDVmm&yEp+?bm|-6uLupjciF)PjYEEJ7@m3gU`&%`{Z*o4sVAyInO&U
zu%2k?a_x{!=Qi=p<~Hq4d9EEiJADTi*66TT;^z-usPAIWx0~Wa-a}2a3}N}+!w&?D
zjjgI%e#PzZ(J=auXyF9f-X_VD*b@M-d_rK%dDh^rye?wM=lA?Ryw6j%@Va&^N%nce
zJ<gb3lOy9^#Y~%h(EUBB-@F1`qbFxlIgfjopTN^@mG)5gq=M+~FEB(qsm~?pXj-4!
zXys8y$63|`lrCUy?hB@1fIrWBE2WTks?=!C#;clI&V=BxA?~1yT%Bg6k@*nE2%jhz
zxk|odgd}Vbk&%&2w&-QHpt|utZ=&i6scv3Ws|zuP_!}K~QbZ;$Mcl#-uzOC|Gdxyd
ze$Rl`?LFGi;g3*16*H<BA6W;#YnvbKLG^9rn+4%o8}f9y;hxc|rbB4a$>J#TUqOHV
zMaEK%ezH4F{s@k;<;CG;MiDno(Eef&)$3Qa<&jRMU;h#zCew2n>8_gaVCY*on0F;o
zrR?4a#W@cNYY262z9m<zWPbV%v9p@=KPr3F`pI>Uy?##;j6L3lM~bQ^VO@P<#j&=k
zYD(<&>e!X(p}y%GAZpXV2GlAR&Z(wBRgmh1OM>taD3H5(k!t+)j?1Bc)98npsrcK?
z1A74;$A5uYGt<Z?7m5TxfNxyL@H>2-9=qoyRPZ5+mSctrSkDyiu&UldJo>P_81=T_
z*aXY`N23^su=(Fgf2jeV@lTB&o~*h<ec|n-la^*_13GjX&`&XoQt(Y36FdQWgWT+D
zz76h>Qtw5=2|MNwmws~OWVxa5j{G|8%G)E$dQJrTp3Q?6hyZorSBOjK-x6md?3q8*
z7g)06AJrd<brwjl#Pv7mNu$dYS(E7!2JrE7fgK5TV>s_0=A~V)^~Ig1@4-8j&T;Hj
z7jQyShM7}ZBKlVq$N-CoKq}}v4&EP{=s5qQy`6e}VphHaf#APbzAp#{)s%^PIuF{l
zo$t?2<*_C4gh3KCVf^A?YY?Nv?k%ms!&-;t2=Q{|V=?$uF5wj9h%()(2%dVKCMwoh
z$O&NrCYs82GJh+Nbj0zbx`4v>OSq>L8>c9_WH6F0vn@w3`o&?~5t+2)2<mom?X+!;
zHb-FBgu+m@iN;U(1MEGheY`zp@^Tt=k=t_{>_V}V`u_Z3{gf(FacLaql5nxZs}R}s
z&P~TW#ddgb4jNaOpy69x$X#th__0}CJxPA~yQN^Z;SKB0J^CYlBH#DIM;s=9p-T#^
zvse@4Bw@O;ZvvXpe73XEmI{3)((4)`6vDd6`@eO5$3*%_ZP?{cKpc62{ap3E;Xrq_
zHsSS^!3;aY#*0Sjzi*=LoIYWDh!K2yz-#nwj$qWIyUe#iI)4-WZ@_Lrz|*<)=ez{7
z<wd?B$I#Hwe~=gblI_5qS0$=5*JE4{`Bm4*|6r4Au_cvw)jk!BdVae$xfI2<!p{2<
zGcx;z&~uQyol4gJFxViR^3^MeSF)c!etWlAF6S!u3F22}YXh>B^E-#Yve{drUu3y)
z<AD<0$?jW<k&hIt*3L^VUyD|u^`l;M5a(7g1`|H%`Gwlw;50Lyv~6vEpMcWT*rabu
zd?yz%J{W#SbDw%I21d(qvc}<*7VS?qaIy%`uv5SD()+RUsy^L-OFV!;Ir(fb&)))&
zNDAz1KOpTCZ@vA{_YoMIV_4B$#Ex=b(Cye7sXg-NPRj@Xn~b+HK=9l{+KP3t7?!;c
z_$!60JE5c4dV;5mQx7DqDF7?sSVMpreqbr2MwxVMwpM2V=t+z|yvgPZ<OUW9H>qKM
zmqZ^RGRtOJo=1JYHYwbKqO&isQ4i9fZz?-7EdxWfz3oRXYvTVM&PvUE4SRukM(FZP
zWgUyGg063Vp9U^E5cqob2ffG&zmbA^-s}r%j9%J1|FM9W6nnl_pDl1`uH<nmY^n$h
z%B=HI-%}Xt5XL-xx*8~&G>SChIJ*z+Di!ba@=Mm60<?{PF)8aVu=hb~4-Y`_9|~@)
zeUAH~wVrc6d7?qRG9###tdk8k^OQR1nC`RuU(n<g{k?f9FlU6MjbES|a9H9lPwj;e
z$i5N9G_W%2X@YI7-K7a%QPAO<AXF`APC@5^zAb%9d}%QvJy(??u6wjHoYUHCRS{J}
z4bWv>UH9JKJdDP626w;7NpB#g*Te!?kaW0b=-6h<so~j&Ty63mRTq9w_g9#8YT^&E
zzBdN9i<EXR2Ez%j7-$jY0AL=AtNB8@3(M>`9Uy90Dd$NrYbaXe;ZU7y97)u*9nNbR
zQf`q{7`JHq)cd)14Kpsz>bGcuz2#jT)Du-6(93&KxIMQFP{)&ya1Q`SWfa<lz`agS
zmj()D4XqS5s4;=8mBHF;A%wIARoy+d@AZ}$Xw0&BBVPFb9otF$C4jv@NbctmU1(!L
z^5efu_XSEw8!Xgy^AU{|*~4Vu&$Qh1<=h#9PR8HOl^)f!0E%H0LDV;}*iD7er4-dN
zM##fQ3?dHOm1q4rIAc{*1d!R-GR#`+CHA_6G|nzV6OLPEAA*1cDxK#loX>SlL^$3T
zg@Ze(h^Fl2gd}V?41)9>Evo{_Hy5FODOaW_rr}t58!Syxw_O&J9Q<2cFWqt^_<3QN
z9Zn0ClV?jcRr8Bnf>CqdK~@jl!TalXNhN>=DfgM*9<Z;u_)K5iQ~_n!T#W3DOe&9v
zlyA%HcaJoKLPfo1TEH7{EhQxs&&lUhwV1kYV&UF(^TaN~XWg$mm_6Hw@wozCW?3Pi
z54rgmq|oe*zG}<10%$*4-9VCi@z6G1YSRG_qe8!$5;)(^sI&7f9g_V6&c8Lwv-8|f
zkMa<wIf2g!4d@!j&7)*NodZlV%n=qd;eUjKjCh0FPm~0z_uy~R27j%*<Y>5%+l_la
ze|n;Sp_+qP`O`&?l}$L_veqe%yT+Ty1wix}2)%=z$gx_xCI-8YDP6^l>bvxEa^`c=
zP1A{_2R~lJt`By9+CuIdL2#gAsY5khFQ)Y7GxZ6gX4Y9~BNCuAsJ^`5iY8xp?5CWh
z6#@(=z9fu(dRTN8+A==P_5nwwZ>5yE&m7C#>=$K`avvH$XrH|(hplD#kK$g22nbhz
z*r$MCe}U~qJ1k#w)X?ywWMS{dh~MdO3dhl|GrxUU!L1q5X$#K_75A||w;}^s#G)mm
z^@7eEN>}$cf=Bpu?z~jDa3M`o+K=CiA%gA4-642%=szu&C-@7P?zzR6^Zq+=vw$JI
z?4jVej;wH6fm607fxBM>sE7F4dD(jf+Q(&5=v%8PGHj`;^FEq_(M81}`_z{wfo&8v
zJ%+9Xn}q{P!ry-l>fkl2g<^{9!rfS-903!tK<_vs;mg=tR%!$<%-c;RSN3koGkejE
zH)dYbQ+*0%@BhW#wQah~)Ixr4uJd_o%I{%07Q^$!(*hi9v0P29&9Tea^E$mHpzz?0
zl+R>Xs@cs2z<vhr+9e_UMZy!;QSaS?e_IBZ3FTB~ng7&N+LgV~ZHF(4XqK3cj`Z}?
zCOoSY$m-(e`%HMqR&B{#=!yWMEAe0g0Od0B_C?e6x8*)#)hbNhyz1ooqH<}qZaMif
zDF;_PV8>W;@NRNrR3_z{D_^Ol`*GK+=vkKnZa(NmQrc{tl!e)wwVo`UqG!%-j$F(8
zU}WLz`(AEdfiJbf5W5xlsn<T{kNuk2fqn|J?#x9L0upH<q{|2iCdA>-Ii%j*QJ?l%
zmlgHDdx09u`kVpI=!S`Lir`DwC-86!+Iqc)<$Qh_<+L3w_t0S`ccO#-udVE0h{zWG
z$&Yi=)};_bv^N3d$bfPd^~9C%c8lM~NQG)rL{u$$>OgdeS&WP~^RU~W2eT`M;3rn*
zQZLoU-l*R<`-H|s_RJwVY;!-^MmcBV@2`)AnKKkM7w(thC#ur&nT`%~a;LP}kbn$c
zjqIBrw(OIuJRvu-e)y(3WvfZ-?<$2FMgF=jI8^uZOp5^F{=9g?SM~{4&qPU}P2E|&
z4iZ<Cpr5YT)>Sjx&Dvf1-{}e+Xaw~g5hT2IvgQcnh4~Un%hWEY@(j<i0`q|Y$6K9J
zyox`VL92iwp!8shL9=Dpjgb4AhB@dN4Cuh<^P@33sV^zOdlp9N&y)_K0su+E1l|jV
zDxX$?crX3-ae-)usM-9;X5Bs2C~6v7dp|-%!s6P#pl-5LzURT52!K<3fGh$2Bvf*l
zJL<LZ^r(iNSoNOfq}VwAXN<{~q3O5Phb4#I@eKE?|F(1>HR46b-9zK#bTz!{l<Zst
zUKIGZ5%XlCIJBA_b8f~CH`$dMW-nb?2+u;x@^Lq@&|EFc{-lC-{qzH(d@`+~b%j&1
z6q`xD&>Yy_k$V7~)}Uplp^jmf-UIF3PdoW-8c6NOowi~6@xhVS+eTz3q(^o(KfFN8
z|9UlJH9M1^6!C9;#0JnrRrfEahOVcpWrI$e<Bf!?MsscT3y)Ik@B902H?67Wg=DI5
zmC(gGYiiFfE=aJ=VllP}kES|yXY<TKxffb{<jXH|PwLR>mOHI-0+IuA>+u?)5i1Tq
z`-Vx!Pm7Oa1zxjzpCpxb_Tjokoj#L%LUjFR{V&b$SCCeC-#fkY&(w2>Z_V!gXaeLI
zEUstb55@Ho7h?fxq6Z==<ryZYrx&`qL?~t!Rzt7<hdBING9pg>M=Oc3>6Zf3BwMxX
zzUnDia^u8hk0l+h4g#~tZRe4ie1dU--gn&mq3Z34g{L_f@9#d>YJzxQdXt&yIfR&%
z&~{p4PH|5$#ps?|=Ej{=2Ynvz^#E0^g-6=AO+IPUe!dh2aZ7o4hKh*ix(~VSo$WoV
zi$Z*c-CrSYjTRG`tAuP?)iei=+rD-!?8{s!0k?(4qWdoe(Y-HgQ%_kCHt>H&E{#`~
zijm*8IGESsQX9qSeV(J{!AGq{WePC;N2g+r@Vh{{`eEdgjh_E#yg4Grk20MG4t1M~
zud59o;tX-M1EWW&QBjAm5qcG`J#RpiJh-1?7a`84zR+RDtQ$zjZsx^<?}WDlr2WQw
zmmy&mE^VDQ|70cfr0)QFm|e~InId*<U2w)rD8;}HQQDpLvT+&|SBbqUqwIvk)Ui!^
zwLCnwA3du?SPoeg?b(aGjvo5n4a)mo{vAAt`VpvR9AhLJWV=Vas`t7`6EWlpUFTLd
zcBIL`<;i9H7&`pp@e1{sHL2?ZA&I_DR8IIue~F*S<LODO37F#Uf91%^<FeLw-LVMI
zk!}6VCGwF_-+!g<OnF+8j?g=H+Duzq)@W0D!lMQn5fBq_?l&i{be0^15fB&gLy++^
zU=0&V#zucyzdHTdc^)hlrxM=-)edoaYtL}zvJt)S?`g}(>*Kqcwp{rFdv12T?Ib<z
zrLxhbUnCLoYWG+$Z64wh{yWPN%O=iXlhlw&#*7Oe=xpA*X-i<$6nkSp)?O4d4p2zl
zn8oH#XNQPO1+PogkK{CwP;rY}Bt+D$d~6tXwJrik-%GGL3%|$dk9XScpP;8{FZn3{
zgMxp27%$;1BkKjvV^>qv(*UGDc&x&PnuLr^VFD1ti%Y~z6S*HUDPxfeBEhI*SdTB1
zhj=${j#XM}Es{(;_&HNjj`sex-FIHAqza4_)$c4=Rp@vsOX}iZxtd&n?3R`XxeZFb
zUKi&SuP8aDSE6=6)Ycz%{EJ0}b5qqS>X481TcFe9Nkj4<ekKG&Bpzy9=;(75<}Z~9
zT>J1-^tab!#j~%bP!JGji9!N7csKWV4M;VEo@B4Q=jj6O(fe=~Pb*GCbSNs`bxNlY
zfSQy_b?qCriQNdFTuV)|7p$lEI^T<RQPj*zlPr*g8Dvt0jrkEs-i2ZQQcJ?!@V)Ke
z-o3%bAyiVj8`na;Y*}BH>R16}Cvmi!>{ri|p@ib@%+@Cf?HeY}KYZjr=sCwQ3T?Ki
zhhl9W{+flkJJX0CMR@v(h&6R`?zDK*6>fwX0AmFrh?@vaq<b%{|5k~i;ZiHh1vGC!
z!zPYx#H}S!lV+XMrLXl$lu~O>Gu1M+hHGMSY@LoyD*sgZc>Fz*IvhE4ST)Z3_aubM
z`iLkfh_K&t$u<a9-zw=en0p)iM@eV7XJS0L?lEzUfAr5l;O>N%k*DO{6ZcHf+qC`-
zF!^VLI9zc)c)zBI_GHbKxJTU9Qgq=&nJn>-gUi9LV-?G0lEYIrkbCn*PMJWR1vo7T
zBjGv~g2ysX_1#7D_A-!j@f_hAmpU3PV13Y@;on925NL%K0Y}?5S(@z+7db>&|DjD|
z{e&AL5-Nc<b!Eu;pIo0cO6aIq_K?dv0Ys!)R>$28cR+t^_uI%~25n4)Dz)FxbGZtC
zg-#u@+Ufw$WE`T*z`up8ne7QMRv6zJ*aQZK!8%nJ)W0<HBf}aVEliw7Ed;DCCjOfJ
zVOVx{;eC!cC*rPh81Qc*!v-!Xwt-zMSj+S_;x^gGclsU2`Y2l8!}`pv&%<xv1?M5s
z{ec*&RMb`gyW{m^?C=wRII5cn2RKXw1^yR9_roN=UjZlTtzeza+4+J=j#9zn+L(Lg
zzTW#os@7e0xayCq()neSUG|QOy$deNiud{Ku;w_Eh{fT<`M?SL5^5(A-}#4REmN&i
z8eU<2pT9!HHUyd1ORe<{mYbzP!M1iF{cEAX^Jxof7*-ahz>4>uX@N*b8<)VZ(?v%x
zk3Z`>*AbH$t4OFbvee+HiLW*1aO_9540?1f`B*LA!dKHw$cRV-jJV?650kf%qjM^-
z-lqP=&@b-+%abRuEjfHU-JXCuCb;j+pv)C8a-sE@l}6iZ^sM!Ges~KiI~~MnvWo?S
zN(jKVCm^;rtz3lX9W@;tzTflMj4>Gp;m{Rbp9DLYL;MI!f)XJKKg&2<`0~=yQsodA
z1}{yJQGf@iJl)tM3AhgJ<svx!yTciW2|8>%KH2&vvtH>Uok7J7zn{@?hq5HLzm3#D
z9Mzv`sr33_{nsG2y~Eqyz3&2*v-lThj+?YxJONASed;V#zkv?Dw8+}4w^$}X_w^05
zpL3hCeLujn_2~kdK^Ez84c%hiO6_kw8b1w|bGTbdz6Z_2-~z@E>&AtgdS2GeyD^6{
zwp9oShz)NSY@}s8dSjr)$JF?Hq6)#~As?i>v>u`Fi?m4TB6fgtsY~7I`J9rQPb_|v
ztQoJn1z7Y><c*8JTUsKplIAIJ+eOCjJv3ZPhJeJxMEuQza=G(#7q-hvHjuWq-t~Y-
zi$SJKiP;hCM$PPMaPzd|2Er**_8q&SzjO0eXT@Sr4KbkyT4diMO)ZQF>-01TFPtp%
z9Q=3pVZ-L$Wz*)N&YGEOP_UV4;<s9nqTMKG!gs~!PT>E256G+xu)??(7JH)^<qhJ-
zoAPBTQhiqAHgMw&zu@X{hZ(s{dwg9#l4j;X+{FD7tJL?Q`o{ib2(RlS$;4IWp&BC&
zW5?D&kB^v8`cyKfgZEnL*|g2Gnf&0G(3+mnz>KJj?`T@o-N|Md`SX)XLY?$2jYKvc
z;;Ek#s4xt39;*T!gNOoxnz|B6A|7&UZ2yx;5HP$99B1Rd-T&TFZn)efkx>PrqT*7Y
z#Y;R&oKu<nRb18h=xJ>_5B!XaKj8MmLE~3$HAony!1#xqI*^Xe@*dQ6_1176%~W!Y
zA{4WZ8!vaEwHyCt`m2*W4agW_Ev1I~;m>ylqQU0I#Hab1(<{(zFO|lOlZYhXG_!XQ
zonm5fY};1rGpxmwU!xQgkon!$<~2GPqS9fnin=dueEn#u`($U?H$aLz6d)l7o>|?v
z0Go$lvaUyIS!!7kKu7QVws|JRiB?xuvJORSuOVkwtPrk3<`t_YvGwNNPAmCAOaX|?
zeU4J5hUe1OC%8SC;^Mo2AdLD%2GQr{Wxw-EtSB=%gm0N)V$RRpI!ksBgh(4r$dJ}R
zJ$`)PGfpDHbS}i1zW!U2y*nl~EJX>NF&S#Y<MMCx%ISCUXaR`m<y9gw{qrgl%!c;s
z*UJuFWw8d2HRn=zjLq3X{SSu+BTxL#aG#HA@frxo8&6mM$#W&h@^*p+`!x&I4B+a4
zX<nk8QA|K>amAc?^c}D#q4Z~&MEYK!InAfE;+vm16@HfMxsf=E^;zGkpsRe7OO0dK
z!gF5aPx!?N5|7>vzT0<O<t<4LfIdbZ%lmL-Y>;}H#Npy;ksn`EX0MrfdCqz3S&2c!
zlS4og)k9wC7Vzic=dg{Urp_~O^?fBqBvcW#HM_xQu5|93P>YkH$wY6;7JJ<ZDUz=_
z+&S^F0{rHNd2fK#fW53nm8A~>eiZey6F+F9V=n-(s15iYxsztuZghJoz;`BZh`n;7
zt)`MAN31rrzAS1F3j}r16fvW=$s!rYDC)F#vCLS--f?_Sg?V1LH+5cBuuFk$Hhoz7
zgJ2kG>g?lDMHVMek8pB>uET#ZIL^HJ2l1I)5s{<`J#rV$T4Qu}>ZDrI{fe8aHX-FQ
zpaB?>=-KT-kZcLAh4n~l(`_kZG=0Hq6T7uyNHB?d&iZD~yWzu9B4ZOTFVkb+^}jzr
zwxerU<X0>GoWvJ<Fzoj`Cek0)w3kodTP(rBM{eg|#*P^!3<(gu$M!rPof<CccO!Fu
zY^LfuEjRTfaXh6BAV+V;c<*5O@C~kGWB^aRNf_b~2{&Isu{i3!HChoO!H^XMV3<dc
zgimGaTcrY@DPFe)3IA6C_h@||q6am<+EhTJ7fG0RAR5Es!g#-bb!Q=cEtrBNJQUJW
z+=R4ar2AekZZl?D*wo$|5c+Ho@jLuJE%M1BtvLcDM?jhpezlV_={KTvxWUB0-Bh*-
z&{}hIoKn39e~+3jex8mND|2SqmW~ilbZQe$0-Y!!2g^=qMNTJ5bRchhBB82U(cJXC
zzR9ETo(T+sJ%XX+c17CuH^UgIhoTpd=SXg)!N+kk6EX90l=j*uIweAi6A`<t8p=x1
zfI^}WrQ0a+Ac*6Z0FMLgF3f<^&uLYLhsuKR^~#T;Ml0=bIr$d|8Z6=C;&TK|ERiuZ
zA*XvD_d6!W`I`<b78ZU8VE77XlY(Gm$r97(ee-f4b<dOEaCe9Azarj%dU91AwIG&t
zWk?4cTvk*06s$LcZ6~dV*R44A5{P^RAvcGrkE<75eB`+~dV@D=kT+pino93OasVyC
zbW192L9y|xciJJ6m@l6qN#bT@TRc4MYeXw{vA&bKOZwNEb)m4RrG`}BxzZ{@qK*XG
z%EZZYiw083E~EiE<*z+S@Nb5KXG$ibe)39OyuvsveND1mbw`&qAGT|sJVG&9fBWt9
zB+c+aoBGw>YicN$KW2%|KK%aCFQCPN%o3GwcagYDdp&Y7IWlNJELE<J!GkvZ&Oyj{
zzqGvn9VLLBW+bUIPj<(>!quX<H_(mXdQnb5;PEQJ8vR=+`o_dB@$_<Y`FmQ4Y%N5X
z&`#_6zpb}k`w#sil^+&AXC*RbMu9XlD6c*lenX6^y47eoU3FWw!wEk?jX>Q}rhYyV
zDrji9>Lw2oD~&d(S&ttniI<u6;EgcO*?1hY9p5e#oFClbar_7vH$y~3*l9(*ssuqB
z(@|1VP>=?+F56+QOVPiiGB|U#;b=EO$n!d%qG;}i;ZMAU&)KS%-&;7xPsx2Q7}}(L
zUE~9UiWqjW`WXx0q(4qc>^ypXyU@$#h#nlal%5azoDRk7cQTckvG33BWTM)lV3Z#B
zur80<J;#A>tSM3Rf1UaX1Z^NwgH%+WLmUxRI)ge#>A{Z&cqZ=i{sIyQ2zHo2V8G}&
z!dz6}mwi2?Yq*KZlxcj_>_onU3#_B*Cu%?HCIugyJ;@YQX<WcCORYg7LNRbSzN$8i
z(}_`uS8Wg~Ie_FV2B$z5=zU#!V(`Ary7QZ4DntdEm)6|JPUkL8=h_70UJLPu#R)2#
z$QtDu_wqs08sA6n9i9L8C?`p<F<AfZ+CzWT)p{;Memaht0oRdkwi}Hj+ptLKC%|(E
z#0(<Du08@b<1pydJt22qr5<V>$NiR6!z+~4Dx-0h(xvud6X43o=9}PLplE`)L|Wap
z7jRa#Larpss5l9}H(Smzcptc2=m8)tPAd4}xExX_b|5{RE8)I-K1hX8Ku;Am@(ev4
zN5go)0n?h<8;73mQKqIDB7X&r4hx2^>tCrT^%ii@4<aRQH>ciz1h@cCQc8^*rZc_*
z9FQW-99BJC>dAaW*z0F1Y$Booux|PiOPShRV1*W|&HDMuoI+W}5n+C=@H1bQ=i~Fp
z$Il$909Y;-!QPmlDqFU3^U~?^dzy6$?75I8Q?Y$G&9h6pa)X_w%$tfz!(JTv9OA0p
z&#K@3K@W3Y>44BvkR5B0s{O((K5?@JWKB3ItSgpYS16#8{HtLdVny5%w%>*rzh@oR
zK#P;EI%~qVh=YMU{J<$PC8hWIX+!f@6NOIsjp;w9&$742tN0uezDwl&4jiH_Jc|!X
z?M(9at0z_u0F!+-SX_P7cc0w=Bh2B}R5Xb1pMW4VdAl^qXRGl*EHY60Yn^__c4s9D
zB7-BG%vrwM<)X%BX<*rQ@D_lW&t0p@UQZpqW)-h5f;_DsLAu=hVmb=DBLpC~jz^p+
zLnZU2BvGBHxI^vTy-sHJt0sS^N=Ic<H(!~o_ZeUZQ(=7K2t9?~Cth=ffGg1Zj7w*M
z!?ofD1VfNX4YDQK>|vyhi-Wq2i+yk4H5iucHF{XJd3c9aQ|#O~5oog9MEHkV44R?y
zOJwWCO<1G$8TX3!`Ng&qZbb}a$LdTiHG*zr<s3*A9?Bc`Psn}#ILgB=uB!&1gAT-<
z$FbeXNMG%aMK2QdMGH*^76j*b!%vF<|2S>+1<Kc%SLZSV#ugGDUAh>)F{{O25Tx~V
z1w3I~SE_I%-Jsu488%#Z0kk`ig;wc|ex#(!#n{KVRKvKAibz5r2=kxrt(ovO`G;=V
z>x;YS<MLSo*hk3m@N3@k!>#IKo=vGb0@C%8O;sMh?Si8=M6JZ<LikiDM4Su}rtsvw
zdDv=UMwbec!2<$(-^b{UZrIJ*(08<>nn6lV)+Dfar8@lTK%i`*&6DGESk$r<%xPJ>
zN@(;@&?&Nu!UUeyK437|?7gx1-lZrlY$AXPc%4?{{me;~Tsyyg^py9ZyxP(IXGgd*
zQ=iyCDJvmB`ByYe!0oLrDOHh-DN}yXuQyawRpC)lr+lVoEZC{DUC5=$#=UJL7f`;u
zKg&zLOgqmLHBogk(@Jy8w(Jw-gZh`Zp=ZS4gQqf7DO2`>DY=Q%rbi1Y5czwaF0EY`
zr}7I=BRZ4f?FCqTC5XGr=8Um{JTKEX%Vqs&HF(apnVqmN{MIbMYrw4h2(_>4hVp|Y
zBtSSLb><Xoihr-%jM`PsGA#~*sME-9{AO`^o(@UqGe7ZC6)f1qPl<Ve@vR!Ijjw?0
zlSz~UW@M<v?t<%BCM1nUE$XV2{OQ7{LUuFpK8+lol+f5dbXNZ9N#}Xrgs-yOeepc-
z)d#yx(9iJitpnAJCj?WIETCPSGE-T0GcDrou|Pk~YD~Avvn#8AclB`N;^a@t&j<vm
zW#{(f$p_4c5!T91zOe(Hy!nZTP0P!a$SN}pan}z(2rXxD+e1`t$k%E0V<rnAHSw5@
za5t?ugGD83IdQ|nntu29CnU(Z4g1y8mN!c18a)*YpEPd@%$^9GKD}Mz8+G42#5A}s
z?xo-+EF6ytEJ=CT_`;_e1yZYw0I4Z1>KbsLKA1p+ZS4&*8_lk+JTftDNNf-?!z49M
zO<)(Tr~QLxtTsZRhLdGu@&-b`Qh4sny-31ewR!WCACp^ZI6@AqYC54V6*rHI4+WBk
zAhN0IMd)__@HYk>d`sqcj9GjR*$y^#)-4V_RIdoO(Tdw#vJ=PoPTT$liWO)TYct1>
zOid_z>fQELDWcoVX^x+71xs8b=`TLVI1bq}T5wjYNMDwviBWO1?}z2tRxEx&gb|$!
zIqjd{(KXa{c_0D`>8F?KWg4Q%^P{!*g<thW(?m}Y+y8o4`N$JoFK0`&fCg|@4c>~o
z!Zq|ShVL)zDX9iwKO1odahAr14t;Y~oOYl1<gr$tMZ^^0RY6Zm#fP`#&D3HjZc4@Y
zC`9_yVw?~vco!X^A*k(am|x{zB?3wf#jJV<{DM`s672q-9wHVta?jSyO~cb$@3XlW
z9rM~i&IUfi?;B77QKtovRre$x#rf@Kl*8%@^NdO7Pp36Wn-3m#!Uj|ZVM?XPxL#Ss
z5+dM<8IQy)b^PNZl|hGn*mSW6KZU@Y{kKltL@?*aCIuGJn{Xkp!{U3!CL6}H)yw$A
z!}}_zGQgafafw}7o))UM`6*rXP~G8sY|*ENnXYpafTcwgaQi%ZFuCNWb@N+O-yjJ=
zhI{B229`Gwg`eYhh~qKSz=&&HqN<Ld%Sl2?q?6nq-^YLPdrE)c*jl--Hg(-4pZ;2H
zOw+z`k|8~NR&NRfb=|(rNxwgT{-SX`uei47tB7%dJ^GMRIyJd0Ugq{?Y{BIX<?%lG
zN+pR}(uEqLC+lbkr)^SyZg_9jNH-tiEZ)$v$@=f|;0>}xMLp$=HVHkiMVARt9CA|9
zkx{ChJlPLorx21X_Zw1$W$C8hWriZST_45s{yK%5KLS~UpC|1X<7Cp)8fokpeL`KF
z<9Fja_J7H}&ue+iDYIUuZBl-Nvawd}Zo=zKxYwf&g=_!T(&L6zKJydmJ-LT7Cs9dT
z4A*AX^bMXcZXEWscm2^)s<jADXzCK)Oy>-Bf!u|Ewk=NUMq^B$^jiHfua2I#bii+k
zg<@@EvkZTUFs)o9w~k@l>An2Rw!E7=X%2ptw~gQ<j4fDa;uR+dd%}xSlfOQ8{p^VE
zga_gvMhIPI9<>=Y?^5!$gkfB-D(gS=z8||HLM6TNw_F+8R+ZbYzjH~_d{&$|ngF(j
zHKqTe8N{18_{5ho<{Tez-1&6TlNR}$rP4SqU3US34?7N1btXm_^8YrzImU_1TzuNN
z7*TKP>*?(ZFRH6bUj^d?ETN4G?{%#2?WSwAAsj4Rw1h>WN^W2MAg>V$vc4v28{-D&
zft}$`H(8H+c~O-ldWQq`p$_)Dg_8x`pQI~-B-pgH$)Gbsj{=jMn?^>D)q|zVv&onL
z04fhN&qaclUHq1}f3e$WJ7YSQEy*lO^e%nr2kPt+jY%Wl5&r66Ae{FBgag3`sH1?4
zCOe^hWq1eQY?9^1la*V$xY^-*oV?_zTjHm>g(HhR%Tn1+B+9ULATHKath&4K3FKH}
zLp^GO`nC0`-@sWrDK%$iZqZs;{g^izVD5*p1Hr28s2ko~%Y!$DJbLj2@SS#!=P^%5
z*yTl*iVwxra&kY7=a^}}aY-_?fV(NrB|3{&Zp$#Xk<hrkN|f`Y%iPAUw%TE5G{ufc
z*YV?thOf>f)Jf%$`f-7c*q%9PSQeZ~wWsSgpLo3tAr5Hf*?|tkT&N4y;i*sYTbU<n
zfR>r+<#i)isWX#<=rheYGva>xr}Bn4`&7W6J$6>3cDbKQ2}m{GM7<p^+epJvy9lXv
z8XY`-DCDw$yW6!h*UeLD`Fh_TRT-o%-tuD~Q5m!|*$Q|jMF^Okc#)2*vnF+X00iGp
zd5F^d&lw%>!~F0Hl@>)o0S+`9RZlxt>(?kr4n|dD_;?|l)L&tNpLPE(;RF<6kUJ02
zELZBb)YkT>_GZa%_|6FIW{HW~&&pC0l6P`EN5CRJU<qt+!D<|bodzjxa>p|CE&G1*
z4YdRDV%zyxbd?4D<i!Sxc#%1MV(BkDstKaOK^I9ScFM3n`rGfb)l<e*+|T>=6F9?B
z>Z9(necqR+=bkTkgpPnO@J@zQ1_t+zZizeC8tXru4(T@7t9aIVa*fLrc>J(x2gbdL
z`QF#sRJNGwRiMm?2gD$4podgNvQqo8HQL-lOX&Jj^PaYENw?Eq<A^wZq{JY0-fEv!
z-n0^N4`<DU;%0ffFIo3~I12B2?S~tNVW1tHgQ+4FaQofbuN{7=Q3FnOeH)hK?za*4
zG4DWJ?39Wi>!ylKee?ePcW%$~tzP?%tGTvA-gK1%W?U+ngr0+KSk25CC)MEY2DJa?
z6%PB9w||Fk9T2%-0DaB7t`{cn%9g$}P<Rcju-Zc&{dDS>&T`(>T`yKwwhQ_tw-^v^
zl0`C$xrq~ryZi2**(Gff3Azs-rAQvm!Oc?XIirxlG7()xJ0d)?J)yTAcO&tQ!&#p2
zbk-B*)K9bMSgc$%wJo@TZ>m6lG<zY!qvMadgB#<cgUwd{6Oi@lGk4D0rNT5`Z|}2{
ztY1`m6k#n-xWpgV0w<o@9H$WA4!<<+mj6H8{fsyv+gBmG-^?qVWRM=`7%1xxMEd}e
zrUoGGf4*4Am0+9uz(bh-sP_nOU0{kUBX!`uT{^yXdhEV9tZ_VgXdwGE@jriKD6u>C
z9b>(|u9xjiwOel`4aJfudjgBa@#4F9u$pA7{O|c9dYTM!P0e!MEOJe)a_gt1WWFg=
zJ6$r%A42ptpGYa$120eB*RRaR=DRmFHmrW@`}YqwnW&S*EMqBCf6%Frk!&)*)gY{O
z?y*^fki<UpJczD~@;a5<W_m28%lEDV{`S7A%ExJ5i5G*s<_7vJX;h@H8YyY@{;GQK
zUWtIe%a%UzQATOLTc;K;jOl+o?SCKp>TPkkPn*}(fr&8<gxl#VcLY9S^`WWEfgq2x
zqIPO;iWq9<boED$Q6bfJpB-lLO~(53|GsYM^vYMCdX+d*_%>sHY@>u4UjB*Wz_4Rq
z6ehde<@EE^x?5nEqV^LB{(oF(%lK}lOeF@i^B`kArr~D$1I`}@eQMdS>i|+AzFve4
zjR`PK&Ve1C%-Qmv<`K=}|9*?z3d$T0_{l?>QT=~B!2jHi|2~ouez8}MQNhhi$xtCU
zh)~onKOK?`ZDFI&iBH+9()&x*DR9;~+NX9balN{qe3rUsQ0&%(b$IH|N*I`>-$q@o
z4R`D{<~mydGOcmF;4F}$pzDn|)pCH4gD<4pyXOb%_=G3n9jZ9mu(JESgpFA4+n2QH
z|K+1m_mQ@eK3#HH!*}b+$17ECejGOfIInWk&aRp^oyXJW&aT~I{P`3Uu!1`g0&jQj
z53X<m-wF6Juys7O_iV)ve#Ty`U?qIZfyrJV>xtRL!VR(=h8Z<{S}4_uY>dmS{FC~0
zLScuw1cbW(`xgD5pKO3udD=J_(y48rBzad~gA_m8xS9brvE<t(<-Rg!;aMTryyCpI
zUhocHOta@WI@URXD>PruRRxoswiQ<k&9T<#H3@U2dvxy`!84+&=A%=nES@G0&ekuY
z#(mPIFqLDB@GR67|8HxOeT&Ffl^)jb)TKCm*-WdP$$cY`)9}89ro`v2Rx_}Ts<V;C
z#KLZJq$Gj0NXz~@Yxa-|GeM0PZr{J*crgM_jm_h${CxYk3TGp~N}mtXYZT39#u|vd
zjPer}$AnzP)sW}fy+tM<(ZExCDLnuGFN}m9vbDaY)^K4{*VEE_ER=b^I#R4_h!D{)
zyCt_`mD9A->%s)0U<Y>JhaGqRyE!#;U)s@??R*AJVx9Y_$_JC?%|F|K<3ZVgZ?8v1
zK?vsTJ#1|=zP0>dwnA&O13A8whZbzSycd9k|4T)rOysMJo2H_`FBd|-3F~a_3_yxR
zJA=gO|Gt5Fc*Sx#M(?5_o!5s`xY(o$%GwSW*PDI>ZcFA_t$~Z9Me>vw=RjDzxmh$s
z0p?zM!&KUB@xLg0%eX3|tZ!J4pmYjIgLF$vA3<8WTckm{o1=u%4bt7+4bmYY-5t{1
z^<FqL_jAYmhVy=qFW|oRUh!XRuh@&}>iD1~kH<ewyXXiQ)t<kJLI0@Smf%9_fH+a7
z_Rz%PHQMkkC#L8ghkgGI_^r*p$^@^4u<r`l{6jWlx9iT>?FElNSQ_?j-x0BGcxJHA
z<fH>hBTSchLrM8D>ZeS>Y^fWo{?r;;IE)X?Vxk6}*gA64HaMJlj?za7bGq?rI`nax
zj(f7&-wdpH;yJ`#?HEd^6-m7wa=aC7v$VL~r|jX-F`;GoHR1L>`hP+D|7HAS8F&ux
zBvVh$>~BbrH|eSfls(QqSR`W4doEKbp}v*!Yi$+wQ)$#8^gY<YEpJ^QytID_V?%c!
zpwdV-d(jnOgYU@-Q`B98Yp53d=;54U@Z^nEmxAc<?=&>04o=c!9UV~=*|D-e6wz)d
z^SByZi?)*1CpL_6IA9oOwD=xP9~>e|!)<dEnCidkB+B%9-6kh!0>p$K;n%82ims0@
zR;tf!xin4o+WxwTnKxL#Y1kmO&|nL$P-OmApl{jK;9RZnvwrS$#l=jU04B=hrEuk@
zW-*Kijn$Hr4qS8H=7Q*ydU+sRq+Xb=q{t`q=Z}09(5n<v5HbT>f&TBAiMv@g@A&*^
zxvxCj&g(B)5zjnMYto(m70}sRAyjpTs1V*wmD~?>sWj{HVN8lGu1Cdq-)mo01y$9=
z(Lu;-^RsO~4r+GLt3C>=UM<wHc!1V^X9WsFPR~3&jU$<jnx@Va9FX@t<nC*h?Rr<O
zOUF)AzB(r2+|{k<*%OX@?7);&RZZXuY8GoAn`6I-Th=GXgyKshuq<-MZwZFKG@aGd
z=vsT!@x17a{N;JKUSZYsRgcH;!!u(|Oo)6g`^|2FjNh#Te--8JcEu~ug7(?K!S%I=
zR-nHAVFq{@LwlId@c>80!pi3{h633WFysTEfNm@P9{Iy;iRv%6RjNG63Cd=A$g;{!
zZ=Wpzaobm=iO(<5s5`dO6^z_j2o4HxHpo88DJv~53%F6-9Gxc@nI?1hCAAdsR7$z_
zp-ZY5FtMONjxsQLbfL9^Z4xe}lLvjkzo0RxO6x|ce=3OvatjSG#84qNF)D2&hPduc
z1-ZFTPwo#)waUG_gTnlIqCJlb$NpbKk+tV`$c9JfMheot89?31f3{ALI7Iy_*|ciU
z@uw#0O{wc3dxFKl+8Dp_;Yg#vi`$>)er9`{uAL6}aiSm3%4OgaUo<k!3s7>(40H9K
zRJ|xdaG!90JA2%H%H^+~!;UT%Uhl&F;;cY?ft%t#fA~Sj^%Y6VeSF)r5wE64mbQg!
zX5Fv9wgETGvxwZt5#*%=;qv5$T?B{}EUoZ2Dx!nEH<|YJQjWD+6p(9`IXuR?%RXJ8
z;7BD`bnc~GilW3kyXSn1Q9x{b!eh1vkOK|OZZ`naFPzkuc$RY`5i7rp0$DCn_)G~4
zjd<c~xIpTX;|ljybk}?Hw{C;Y2!IzrR%My>JW6mrfB$Z31=hQI-qV0JlW~F;(ay1{
zj6!^XQKeR64hlZokcI{bw)yMtrv<BIt(~~m$`Trc7M4<f7IL1W)-V%E;Rek}&(rL1
z-40ze-yZhyWeEs;FrCWcPMpYzNxgVmd;WXDkB7L9d$!_e_`okJ#^+SX%#<z80-l#5
zl)UF^Z{R6bgG|^%Q2P-mVM_&DARzl~WEp466AkqJ^{ezHQzFT;`}YYhia!fe;61LW
z;9FQ56=PLW{|;Y)KpduGff)1$u}i^)ajAQ5dwE@oyDsu5W_vxXq9Jy;xzMbC^p$gA
zb2j(1dGJ*jaDomjv2fxOJCug98u;G8$BqOPCpbW6vGGu{>r$HagvCa*d@bwA|H|SD
zdTi~)y9gP+)du?&u5sqa><AEhe~q}>G*rUEwQ({S#~v9SgXNsI`j@PgfT)+G)!SNC
zPoEU2KtZHCSOfsgc#(l%*m*YT&KtLxe|WKzaV>$H3fajXCu^vdg+cC6Y|0RaS}|4E
zfJLBIe>_lhJc`)(?0b~J1FJtvk*E!iuv;yUt51qP%6*`=g9_4$g@+>Z+0wJCc!Z75
z;-X6O?^$Hg|7_yX@9gulet3MD93Svf00Z_(Wmh@PH7P)9h#}6m=7WKqJ-i#)a-QyF
zD0rp}X$4w6!7kT^jZDaEA;DOpt`8fb_6BnmeVUa2_JJHoiasLEXvSV(g_n3J^_^qL
zmLU`8ct9@X;s5wElx$0zkIdV&4=Z&H$U8tm;%NjnpjO~b<_Ha{WDOua;CHYROQ(Ft
z&zt3jb~1z?-%3tCSOFVP+1vHnh%hv34Sy@o{LRCGa&p1p-V64QDE!4)U;jL0z#rMo
zkUmIC0}z}+#Os-6Md`Nqe~L524dKKNnd5f9!fhZS=W(1bK&0+<`s9m!;;2bHe9}@N
z6MON1l8c+5!K8|nQO;krANxnD>!3Iqi7dlYAK!Sf&M$2*KK)z@l;WuWd%4HOH2yJN
z)uqOy?&8?lih=Uz(ZDHIAOz&<H<^v@g!sduRiAaM`yZ$=L;{f?KKgQ**jMy<=)e~W
zL&BB_%#}pXa(k!a$}Nal{}+DvLB(5}csCC2zAOljZ^f&n1Xx1%d!c5QN!-bqV`TMk
zJL6x5g@MB(?@H@!FPq15T<3tgmq(c&NRl#S1(PD>cz#wLGs0#y^Rm+%SV~bXB{MR?
zZM*@}MC+K(^BChF^oSXOIu@U7((1UTbt&CCv(2QfTI*p4V0)PGDsk3&nTDgQt&=Pq
zXx93UK+Tqr@{#^+0|hn#ztNYuw-3@M#WeI#Ka^yBBaF(%2lM3dmB5`aKq%2f5c|ab
z#4mIpU*53}(0T9(+^-$poYT?OhSV%^)wD;X`r&X1@YHMtN8X9`7Y8exNai&qy>nZ^
zz?OV4#KM8cI1`_}z^0|?dCY+USc^cLGE^dhi7%6#&^|&NV>a4o0Z2foBqT%e%5TrP
zuQ{@B5mxF^wxJoz19EL2doh1^_LB|SZ(NsJ2>3cl1c*m!+PdEHSMB2O56`KnA1Bch
zNFhM%Sy~x;$1}z~Cll_-yNtTVtsvlVYFJ_xo11t}7Ru?EIM9gYAAs7y1G!s;%d~#y
z?Mf()g)Uv(4~X;?R$U|f>p%jJmC)C=H@r}+1&(^)9K21#T*8Qe*|@B_Hpl!5Az&vU
z^l;?jH3jvy2eI_+ub)G6z%Af_1w|X)F5A2NHQZ7o8xNVOhZ4D9P$7eY1HbK_rSiD7
z*h6LCql6z-1E=aH{uE`M#VJl`?Dvn_CdQZ2Fb9x8))FEw&u!+hab&yAS9A!4TL*(j
z1_%T5UOLffLWf^9Dzf>jSEo<$9?I3QLE>+lvu&*`80yBUpdnWk>`OdDSC1s@xmIDq
zefpS@L0<E8{09&Z17n0=*VR9F$dx;<g94w>y1xVHlJH?POZV)|(Tz!JM8%?R?g11&
zyeAPCtW%i@p7~oqLOC3w_b8SFd-s1h<r7=n0F-9*02Cb+FU1T%B*<XG_1gkB_DXj*
zU);EvllgK|{{J{<C&AnoVZz4LgaP7X2ns;3TA1+FpMd^2eh4QwFKRcCe3X-b^Q8>v
zkRDc_+_mi$Dvt>@p?X4ksE>pf7#TJ^RC9Qa-Rd*4-w-=A+j<I+AKOZvGiKPan9E@J
z)N$U*legojqJOtK=n3QtLS*YUP<H2$o-!pK@VFfXr=S4FX4@;FgVg1EMj$F{X-+Lr
z3MftkIN*FS72z;>ifqfM${MCk0L?kUA63DrOC|3ybv%~C^|JWSy7lOW(W=ZoJ<rAL
zE(FU<+%>t*w|K5|JcR&S@hIW+)d3aA%Fbr~`TyXMIUPUh2_y_QeE-xA`R25Hw*rcV
z01j9K9KhtHcSCIqFl^*vh`CQc_%0C&7J*&HJXHcpa>`lplAwv~!XPjLLbiyh8E}G4
zZz{kL**0PJyBcU^fFlKJ*nl3It}>`L6bcJ$NG;YUp=-$XZs&G5^|Tq;BsTn5(OV{k
z6eJ#g;^2sK!lrNa6&l+LWE=px!+{+_WIpP8UdQyBIE`EcJG_JlBF+jp503_;{;ItR
z7Br&af(FG};i%c@e<>RBgrPFU@wsc&ErkP35`7LCX=Jhn5cy4ZpoqpZzqj$PU3%1{
zf#(2x9S@oY$0H=vUvww>_L|{jn{b<rxLaU$$AiP$S*Al1#z(jg`WreJwV~MG!!1?T
zxQ3nZ8t-+<LoJ@K>|M4ml7%cN9ZgKoMhb4T4*;S2H~#B!P?$-$nPb_qf4v2O)?Eo8
zlBSH#G0c4rMY$nwS<y{p>|tL#mDvvtO%idU4}zPgK#<yF_COWparp&4pYjgSFMJrw
z$t}3{5k@LR9LE!Hwj0~EhRU%`C8mB#;AYAsBsM=iS9^2bA6@ST4a~s>lBc{eBPYGK
zr90@LGpa6h`Y0qLk7ATTYTjf18dMw%#uz{qKWa*He%6;alBx}jfq-N415UmkYoul&
zvPgF8w_C~)SsxMF)M5H9{%P+_7I|%2WLD#G{d3Ro>Y)y(uz;iwIC?oR&nL5*meymQ
zvk!i)3tfWk&8Vbv*-KB^b)Sff`KH}EN{IKV3~p&Ucwl0PJ(Na2E>J=M1ad?!EDB?M
z%Ql@i?C3r9l#>WAvWZI~u$?IsyHsM1u?Z)~@n*XemXtgyXWd||ukv@__J?NihdM#P
zhO^}C0T8%&i1l*hWGF+^6xGB<HqP69xF-BlIOX8?7zWHuSHUjI9^#cl&u=oXs@wbG
zBjj!Dxy*4BxEvSEWTXZH=uoa6Zhem*C?yA=Qvi4Q5p86PC?mH+eP#Yc`<J#O+Yz=o
z2KcqaVe%<1_)TeRgO)_W@I3;VeO|Jnmv6Z!`DrqA<?&iqYux4CLc7d+d{uL5I4pE<
z&Wi(f$CVjZ?z=v{)1!a=LD`r5hMB0mEHaC(FLRh!GSf<OM%Je91$WFG*32c8dlY}5
z`DVLheJSXEdV=3vOLEg^jg0`ecQdt=q=Zj|jTIYleT(@Axvnt1b^|vyA4;^K>b!iM
z-65`RaZPP$9WY4%Dq_TeYH3aL441E71Fc~aq)Tz~!&m`uGQrsbd;T3xt`jy5^yh>s
zGMdE40s?^Us86e34J4GG)X{g*aXc<N59~++0Q_K+$O8RUM9Y_^HY2K@A)3RA_U!gg
zb?#kuC7q>bZ?H*y586}%FPmA<-yZm76WM65*$sF=rAKJpp@1SGN%_i_(H;E7kUB<p
zA>Pu%g=~|nn;jAL(C+XO%8VXPb)l;<*81m6Ok&Ez&{+&gz+%)UaJ-w4UmS@cth^Np
zDR5Vzr{?9$*kr6EkX+Ei{05}yIZedx%<shem~dyp)S<DmfN|6YR$hs+)zpQ-W{f*M
zvf*-fgxgGLB_E^zPToT-X>w6bNV$8E``6hw6xT?4R7W4^yhQ^T%B1PeUhkGK!n@f%
zHp7I7i06av!C!K+z+B`#MjF|X*h!aZ2IorUdhXD;#AwD3epEmAu~g)FtMIO;l60G>
z5Z;-2T16%vY&iLVix@w%`HXqp!f~sliV$>?{c#7-zAlUPZ-Iy>jNCVivP4(Lc*8M<
zyoyU>Y9#PI?j|&DB}VftD%-pjOHfI`sxsiUSY%5t;v=4%RW>s->YQ7e#7WOM)o;U8
zQHFXCb52VzWP4i85BpV(5AZ`JwEgq|Eq@pZbk%yE$0<;1d3K#92W@n?+Xj!IxkLjV
zsjs}`k?$oHLo>Og?sq66`hZ`Y{-Dw>&jSTaA%hHDx--`k0tZnwrc1f${9-~te^pMx
zr&>jXVji=3@WNXZN4Uq447f810@qjiQ9Ep=9}?C}y{G4%oEb|L9evUwwP<3k>Eblb
zO6RkX<n`Cu@1XK)a>@W@qW!vMu?({AXw3iu@;HKG_qxlCn-K6R%rfTsu8BrppNq66
zhis$v>Hn$<`1jl*nRzfvd;(HfT9!K3xF&EL97@CC{pG-5GYNC1%f*IF)HN>nQm8cN
zl{nybi3y%fD1Q8z7ThMtrA6>!sx<4_W&)T2HeCOm%tnjAgbkcKRErr$0%sNJ;XJG{
zadF74zJIY0lr3_XPiYwHLJAx1ry(@$Y&fyF=JP>D9vc0VdQd-_>_%pBrX8Lg;k7pv
z)WQ6@%;>M8z=S~9?idK$Ey#7DBSRD00;f;{L^Es68wrASx#np~$lAo`oL}dLWB~zR
z0ZN8KQOD$pldP;BwKQn9=7S+?teUg=OPXav+i9}gS2^azaOhrAV$OTPlv0p5O+%yW
z{9-dF2SPejgnJba5U$kOgzpP@e>pfNOK4L@#MqD%l7$U~OzMG<iRZ{DTsSoLr#lE(
zY4(Fs)iW(1)trhpjB3au@f*E68Vm%8Y`dxm4V&}^U_%V)Sbjs}TB12g0P>-LT@)mg
zQr*15V-lCd9V|pB=+%M=DqXa)7aI|J@Km2br?2CHA8lwZVuL0Vm!zd$^XEDy+vM%*
z7fT3X;363Hh-l1#9nG_RO;`pf5|)6X0&Wid$%!&&Erq1Caij6v?L;Q&j>=rpsfbrg
z7U;i9y5lVz<Dqb3ynwbTz|Gg-^;>a2?42^FQ?{rf^|nhU@MY2m)dGx&j&XEkytXci
zK!YkMQv|HG?s8>{f3pJXdtThkoT0lv9h~6^w76kVQ}obnIHKHq%y2k^N<ea|0JfS2
zU}rS{Gl+#vPH2Kg9SF{4=Q6z$f7VR%K@bBPbJ5)ZEc8o8&i$DtP$Ccznx%D0IA#n3
z7bur9%aL2LfNLAQz|y(G292zdyfFlfnI0wG`cokLaUbS;u>Q%AiVoEA5|G+b8k4&1
z>$>N}bcViVuc7dqy1xKBqyHuNOi#5W=e9x?MF;2*^`!)V`~nikDB9a2_?-Na69uY$
zm8b#xiZ`IS>zvmivX-s$n6vK~RP=?36D29Ky6D&&fK+qHbh1Db;K_NoRJc$Z83+DD
z$Znr`ei*TH@omKbg3n4XsVOoQHXIoRiv6{=pz+RAzCW0(->c_9w1^7(Rnqi(8p$Z|
zF#>syuekX30C7U~N$R?AC>Io#3e5fx^%G)VaX<NIERuXh7a`;cL>-R2XN@oMndn5C
znL9K#>hHw~G<fXE$feu6yS-OjV91f%Vj=-VW8~n-GY`)8oWI`l`)5IQ8AWr711Oel
z{c=MDFixJ?qz!d%aeKU<K;RMEM`-rz^tMl`2}<q8ysw9WX75L_7KlFsT0W_mJTh^2
zlZsZvsH#2;bUgb5@r8tmIW8+xtol(bXx4!MgvU0v!8xg3csX1G#2>=}23Ec_Hv2JV
zyIclQM@hAOd^b-ZHvs7Tx+n0RziYdDE#>E-_>Tx(BJA>(Z*x#SK9Tx{E;2MJx==De
zM!Dh&`hEVD&*Z2ceDMDRl~YF5xgGxczviyH|K0`opBIrhQNUl5-f&r3Rx74KjcWce
za^NH71%3{@%;X&p;Pd(5M`J-~bkH~j;NA1(5XV0N%(xD-?Qs7ykX(pRQTc0&%X+Fs
zd1mtelzjdh=YNO|Ft@gBV~E)O{A`gEsO!}FsTd@o8W4RsnF+9wMcd!L^v4bd9($1S
zpt34LhCllkK+?BpIyenLP&i(#kEU=lO~qyhrP-GDP=yJ9JQyFhs%EFP9dqRZ&EjsV
zm1A;VkT5oNR5<JUApV6_m~A9J6r$7;4TzG(RMwK~zp|Pfyl78>^wtUJFs9=f5Q*dA
zfG*>L2?X1J{mEeZW2S>Eq%a!s`w|@+Vu(c@r5^G_U_Y-fj@{E43iA*r2e7}>@Kz|m
zsPW^i>?J2IqU7JsWC;>+#=T8~w|lwBMbO+%UOoiueGRLD%Do0QWY5IZP;WuNBW6JO
zuM`jiN6A+xY-tJ_z<pMhAiyl3W|Mx73A6Hk=zW!guc(X+=GEIfq7xZYC4)xaGyxKQ
zKB#d2+_RIYQmEmn^Us_}C&NP%FJMEPoM#E&hC;C?k`Z7}_;2|TvF&f%sk3!V{#uv6
zDYw-S04@jfq>WslGNIuQO41L&Ti2S2Sjaz9nP4dxN|_mpYg7WqLo#4ILH4822J9Ib
zUDkN=$(gEt4JkHm728K+Apoy|7ZWn&FSaj%q_oO01PKb$Ng|5_fQh~C-3UozGw*VW
z-EH0W*4vC!K)r@uLC6ypM!4QqGk*ob&X0?CN*pND)FG>w0TCz@_#>xZV?gW*<m+R>
zc+y+DW;zNb1sOvB6Mg=j5*tfArNbN7op!zE8ITz{Y3D{VfCJdAFTHpn&QsO@!}h1|
zFIY+vXe2-mxQ`KFja=X}{4s0hA!?ktaJ3=_&T+&f8^_|jf63Iee0F2>`q|@afsf(e
z+S?#+02SaU9eY@~<3p+wFmS6vDGi3Z=8XY7+HoPq!q9+QNvRhWGUs^C@F|lvmuoy0
z-GqR0=AIou7sxVTe5rs^sd<eAZ+$>{9wRt)6Cg~qgVy_LZK%?H_(g>_)pcaR)z%ug
z5g)03cCxd^2#0@c5kO`pLDGqu9hX{w>%=DPs{}I!7)8Jj8%cM$p5A9Nw1LJ2dnwc6
z@2eCy@~?tsTKjB#fU0ahV3~=O1tBTsk#HbE`N)xu=u=wK5y~fK7E0-*M%0x4NZ<gP
zV9X7{z24(mJ9*~ORJDl_^U${Z@8sscSrQT|Kwqie${}9OSR$BAI{quM&G067lw;-V
zaWwxZbax_s#gxe3H8$wuU+#jj{E=*#mA;UJNmf9>Q%uA+f5LHgq7UErKw+}~%5<<T
zAk)*t(n6CK34T0(tCl#(hB$Ihy;#>Z?N<yPrl7gP50L=s5&X>KozAs7Q2Og-`w*HC
zK~rtEXxks;@;qB2V=IT|&H`j*fzZ!4!T=<{WzvXFr&!=|93U7b0ZB#Pj!7EvoD@(0
zT!i~Lt-ZiOfK3a2`W73v(+BBUIdiPZL&NzY98#uG0M6MUw*hY#x9=mIf8b|I9f)CU
zw<xwT(<H8<;owEoYaxM$Ey+?r*fO#cPU`0Nuh%&DYty8K@Ss`mBP&RGV+N_WGk*AF
zN8Zv?)Op3c=)oj{-C=rDZ)$yR3HeTO`>7ujrU$8w$1F)(T36(l9zSZm#=^B&U7`gj
zv&DcG6Om}UyzSWN*yCAPQ#P-M9|FZmNxWfNqhW#KC?2h&Xy+ZkZ~%qx;X^hOjuU0~
zh1)650WE%X86XLic@4Jobmfw|1m3BBcyo(QFeQ_M>#(5qnIs-_6*Cmslzw3Ldt3jn
z8$i5INu@M6%ljxFl*_mROvBXx#Qn-d{B+$ORW~niIpAr}>Sy7c*z;lw*7Z}y&pl{6
z1PPwJ(ER#ubOgzV{3R3%=|1>JY?VOur%Go$k3~g~5(vhIc1Ye7QDG*_ucvUNH6z-*
zHN%Ok)<8Yyv&>3!m*?{3Z(u(5rf-R1Te|M<mFV&snXdWTm9MJp4%G;VfkDBM$82wn
zj)gE|@e$Z~AUZ6Xtno!VdFSi4nU%3dgg4ppB(iTIT2*rbJ3x=)^8ME~i^F^A8D6T-
zthv_gKciaPu|jV63!F}_tgfH+wMx-3!G{#oR$J{kiy3#G<c`P)TpjrxqvgMXf*a0Q
zvc|8BiXNIDYD%VlIw!uj#_TQ!=Z@l?%>ZpOvxFfigHwm!N@g5bj}rz~O1s!G+8EC7
zDK)E?V{{)nu<Y@b*Z8yPsov-<@MR}>v<yxda*32e;l3Tw51sh<B3^NO;0kh64MtEq
zfSl1{hpXI;7j83C-9uvdnz(g|J{36xnyr}pc(H#a{;FoXYiZBVQ)PEAzOET)eaX6a
zA0Ksm((|~}$&O{b)fxy`3Zt&5uDjZ-R&J^x?}xW^;0Q}o4u(`!C&yVT;bBFRkBEuu
zxioM5irYc$$-#Fd49TRS<fOZM1oV7*e#p@1Ehe_{v|yVpw&O2cJc$)kUm%MS`>iF3
zb-L~MptF|Kd{H9iW@o7kT*3Ezq9o5Ys#YaOx8$Bzu%AkodR0Hy9KS*xfubG{{1FC{
zMbE}-bSPJkf?U{S1cMLMn@t9SuZftDnWp#6b^UT(%?*pC#;{dACQyYI?1|xl#)3SD
ziH;qnf4JF2u{}Ld1OWh-EQ^lq!$`Sg<Lv^mDN?l@{Ho02qSl6Q1j>yk0wU`h`*S`Q
zy^C=rOH|ZiwJ?Zr8G+!@67aGZYZ*c6Boy-RjA2|S*aqvqYm!7MRscZU8}lRS)Z>(M
zpN;*qa2Hhb24*--_j8%H5RVzc;R;^g^tfyjNgA%p0_SJ${Sl=fppf%QOyj(VZxDv~
zgjy)@Nb_NKXSWcIBok}j-ON9fSRelYM~KdO0$n9*)pw2&biAy$|JCoxdOit-Z$$D2
z8<IuCwzIo^VU9N})cGZy0Vv!B>hf3G=ur4LKbXulb(?S~SxhWcle;-i32-P4kWuiI
zAE%5fL>&8ym>T`9oqZ(C3Ebx5(uS;bJ-a-kM^5&uetkrRtfRfvuP!<$6S||QsQh3a
z>>bb6_d;a>x5;T!#}Cj?_S}|{k-bg4&;AScGK13$P+;OI41$i^?|P?ky5ZC#)I8BF
zD$pgy+s}i|NS<d6m#L8z>vUGXrBzcBEZ~ywP9<B(%=QwkbT0Qu)W$~G-!Lq2eM@@O
znve{=g$Ux{d06zo1I@XP_hdmU>@1K@xQC`L?}4xLI4_t^gc_J@xCrcbeMQ@{851T(
z=?EyrFPirTehLgOoxnqpy&kfH2&#|*zPJoNBmEPQJ;qy)W=}Y(o%3MsAj4Q*1fZRm
zeW?%VD-KCjp;(WW-^?`X*SIUsv&({_Hw26c|FUYR<l)UPwv0j3wAx712zYYq?^O{f
z7oJP8?%E6bKO`N~K+QFKZA<<$cSdP*t49}Fj;8Tv(PYs@y#@zgC?7YwY+@;)KE92&
zggRm)Ck)6e?DUX01mM{etR(}#8%e3IA?HI_-`?$3zd-@+$dS}#s(Nu>KCQ1lH*?kE
zaTZWS)bc20Yd!_Qy88{H=(a^EVGg51kl;R;&QUg;`Ya#<k3<4G?JY|VN!FUdFREMd
z42T>ywyCAU#^2+Q^PPS~VE>ANw``7J8yjE!=*<1?x<*nTUu_Af-og>=H1c}^B{QS4
zgiE5}5QJJ-OXqgg8pFmP$}JM=y~_IVK<)%|)q6H{51#<SKsIsM`A#g==kyR6vBefG
zX*f^T?FGtFzpwCtN{f1u!KnEY0=(mGHZx6`nUyOAwJOL^7DsK7%f<o-a!WYj&E~G1
zIEy3%<Y@f%?lzXN{E{>xn(QS$vi(0!vq>TT&H_3;Bgw_pzv)9$H4aqsks=@iH_-X`
ztj#V{{R|BdJI-5|<Ov_=7k3K%UCd7)zu{(^x2g_m1GG8fvT7|O{$ZHb`2RLKJm$Wc
zQiom(wt4QFC0B8Ki<%i{n1R?a|HNJ1S*^|&=c?UvQ@%lm*kThB^==Nmuj}q9?MVYL
zd>{da?gJEnF$Zg-V_cI`JV(Q{?NQCV_#Rf9@A_D`IWaiVm@}A4))vB~bCzdy-ZnAr
zmLP&UG(0?QJwBWN9G}qd5DNHKduiPNNj5#m<elgBa>_5O3e9PD)sHsYRZGANfg}%a
z1Uwi0<OE8`0VL`k)5HDP(;Ly^X7&$iuWnyzD)KYtomrfPjZp3GM=dxQ1;$20(OUYx
zKuyTRSq&x7XL1!(Z|*3Y^U{n$TrxsZOkfaH&2J@q(TQc*Yl}eEl|+7iW{0xFZ6m}0
zg|X|WknJ_A^G7=7w(Z9}Z{i^&1RBa(fj2UXfSJ@k&RPwx5(u@??v{KuusE8#FeOK{
zuo<_Uj7lRS2_L^00lD>B&ENk5Bs|x;U=mqZh>+ub`GLQXfZ{bI5S;Q9<j8Mlf3dYz
zY~Ip+if_}|<SNZ|>y=zwxbRH`im0o;Mhg4P5+7@wkNa+R3>GdwW@of7BEjALR6Xij
zy1e71l?{v3oniEhuU=o$>R+PcBZ&RZ`Tm`hGHz0yO)CBOD+opRmriWS&#~<oBX{AP
z%)*%1Ffdr}(N!t@5nh*gy>gkGbKP$kL>q#wnq^r_U~Rs2W84`?<l1m<Vm+U)WgSe|
zJTkDqgQrOCdiMnGf@Y|8O?=CiDo};##wag&&U^ao43+Lo;z?)l1wJiN;={lUVDip?
z{s9ch6bUlESiIg~pRdaMlpJODB_j~)ZE72}z4dRt&Q6&{IQ`cL7hjn2LmZoud(uSc
zF%?QTBs%G@)6jonkU#!`htDsTd&&9uW*P{Kcgcx#>>OXEU!uVVoAA7McOP0I6#-Ac
zdDF?ND-&2e;XhA`!QW=JSS>qu+w)z2n34H+l-+;+u?rhmYj3j|xZDgRJ;PGZ;v;XL
zI()WnxEjy(EEAApd7ttWVjEnq-FPwo4EdMA-pHYMxnSCcZP%=l*y^Js`g?*fFLc<K
zj)T;u%__Mee7!#m(YnP_?BC&>er3I<>BBoL>!B9K79`PnIwQ&+*fFX>k=_?DY_IF_
zpEv%m-?mUf2r$D_yNA3h^(_N^f@bop)8~O%?Hd&0{z$u8Bl^+b!TSzIhGntLeQ$%g
zO|}Xkzy$g7PPmuQkO$@lZK!ET*5bzvj{rut6bv3lcTbN3XGm<Z1+QyWZ_pYi8_ysa
znm8mNV6TdQ|NZNxUsvSfz?g!ENso{H$Poo^3$`T>5{wSZ4H%rZ4=TW2ytdkG5gok<
z3s8z^z;3FLNr#(!Jw#pI60Nw^pI%X5{H~Gp07}vMSn4(I<EzxOWsW@)5$6lawrl<n
z6{wx%LTK;n`x_k?H{wk}QZ37W8qD>~)o)DT_VptI|4(($MOgKja&~u@VWf-8OSoEJ
z<br9yG@dAksXIGqcA6kzAVnjEp!8qo1o5b-CR^Jp-MEXh7`msCfBVn+^snC%P^PSX
z^9^2U&*-+A)h#`u0wp1?uCM0Di#B`+OWi1Adqn}skPxAq8^#q55v5ea5PqE058Ob3
zGv;E6cxm%F>?e{&c{DI$aIx%NNN$q3%yBv5v<L|XDAS-Lto!(5xM+31rCondKtAeS
z|2<Sf?&Y-$nx5mXwHx;elYad!EOl2y``ab*-Wj{S#X_?0tEXCIUS2(*_^S45$s1V8
z4e$<h%YwNdmR0jdGRlg0a{M|p51ifrV%I&v@JCXB)#HbeN2_t%D|xwIW`^Bm9VeY6
zccN5Z_8R{&$@_<JrdT{J6k(%Jl)FI{?U9POeAl7}DL!eIIW-YzT~RhcffyssvR~UN
z;Vuv=c?(D^d-|Imtp@#zP5%)de`9>x4Bz{@pFH6-ljrYV*Dgfh0B83PTp0yTm2yZ8
zw#vmjxTjR@7RuJs-sd|g^`zUBPrEOkJC#XLL|8}JEz^>QWJFBfcMqDR9ofd`@H!LR
zG+Jw?(i)G7V69h2-)r;;-3?ln-`@*fHkx?QEtHI#>trRlnk7uv86{e}zZ$Wk=g?dJ
zW3YjT$@F*H5ELZGMKD${R#jJSkhBn0i`6Bf_iaH3O(bh&sk8B4ecSv1Zb5xo?RD_=
zen4fvPj779=Q`l|?Vqke4*U&v1*ui^fVG@0{Y-zVvs_c>8sU(eQO2Q4x%ey<<YdV(
zw_V;3(21%fOhpX<%D?W~67<7g3rTY1m5jU^zGY#r8<c59`Fh8IrFyxbGFo=(sX)ik
zFSkeS&2g*P>DW^k>Nph{zF%9AKVK)zO>@vl#tj7wJ^YE_%b`#2+j?026VQ<VOk+Gf
zcPQfwaZ>A045q*h6Nv>`<NhvoyA{aHIpC_a&~T1T9jaajmCnw}QIN&_8s`1b`Y`GX
z3e01{hI0qLW6*(0?Z@2~I6;EAhja1iH{n)0O0v*1NFXe2Rdc4c)@=qb=^lsG;wx-A
z%_2DlD}^ls!g+e_^KLw-zH);N*ZAhkZ=_r84u|Uf;7=D3=*82C<WrZgWt*0Wx5iMD
z6_a<=Hzlvx@R%X7b?(c5jt<d*H;<sQnIx}4slg92a>D%;S43a(n6%&adOq#BWBsUK
zw8^jt1es@Eu6+L5N4?P?ENC-KVG<OKM@0&R%+6d=JfR^H+JP`h1v;|l;g*S%<L+!@
zS4@HNs3~MN!OecVTi7Ofm>~a{ymkjBTw1eV)4Eu_VjXpgy?q!igBmR$*BLOMgVNRx
zhEQ@O5FM^?sKid>H;QQPdZ!qA4mQZ>v`!>(ZrfG8T@dXGey3nI<L>V4eWmF!==KX)
zniw3x97pqSb}FW#;P++Ze}~yWYB<8s;nv1`G7WA+>=Vd^eZ!`HmC3MS_e}}->srtY
zTz4A(q=m3+EGT;FXs1=}sTnD0lj~)*Wc42+d~ay{@f(vJI&Vp~9!yP!7afg7K`6TC
z)`tqBflHX(#jw|2u%`LdLobIuS+VVYx-(3StE4$umlCiw;^EDGmXn$%8vnB_Z_5MG
z&HfZ~tK*#LTklo{<6y%qrDza-t#P^i_b@c5cJN*~WlsVpS<E7t-O893J$Xann9b}*
zOFx;mveeP5o8hvtI63Y;^RT()*3+37qYAfBM0-nCvBcR^4ExsKdSzQ@sWF3`d9f_{
z`sV6yv(BUlwB|>%BD;YRv`}bQ8UvbB>e4E%uyjRF4?h;9%7<_CeBeTZwwxto4K&!u
zF5OtU<ZNF4tIxbZdiM_5UOj{^gSyIR!`h?b6!~;!qIuJ~p6ySu*X-VHP55ugh4X40
zby4Uv`wKc;#gLW6lvgoDVmt8{@gVIFST%n#a<?*qabofKtzAj}>fXL(47KQ9Y0*rG
zhN_c8vDui(T(NAas>R2pIcBpGf2w@Yc1Um;=C_VW1(rHqs(NKr=u{qUNQh)eP)LMz
zR4;Rzprc04GG|t`X@C?XUIyfvU!6;ZqgBMQf7hK&#A4|nJ5ij2-gP$=gN``zeT%q{
zDlZc&5O^n4E%tc5!)Abh(`A!Rw-dYog~0&+#0v)m!NQYf+`ea6Bllbr9;(ny23L<i
z8^ijVT*1W5Vk)~BROu;y@3Im6d;`(O_rW!?4QW=gH)kj5wouqIYYSf6nm}ZdGSN0f
z(D}F=d(^^j)HWCm2L;E0vAN2S76g)4{X^qY)YlD7)<?yPAspHI3up|l$Yc{I^OHPo
zO)GV~JS)CmjuOS>+XgpkueBdle9tWc6HujQ{UT7E82K<EM#98-eqv1)Lq9}KF8DCy
z6N--yW5Z>nW!V`XDoGEE^Ss3_(IDZZ(h0)9^qmtApCbhko4X6~9d}kot&pSsAnGIz
zIzkwA?g~*5CS*cNzb?26?66Vl`D3v4(^+ry%pJenG{EN;>l+nDu>>jv>-0Jvxe%&*
z7+4V&MC0+1tu4nw+kV6S=6CvNOu&Aw>+_^iiN(yQkUVEPVnn{|aagTU9O;C#HHI+O
z4(B_8>Rir=TZ)kmHAbMHw_!3AeuG})C0NDoVeamK^lkp}+l$wWuBl6rWy_Z2gd5dO
z?`6_O5HvadFprh*nuv5t4{gHp-d-u0_K$OpXmqdC&aiLO2p68`r6ahy%$D)@7tWU%
z-;0G^y?;;chxma&Vefilcgg*T6RK~MEJk_l`=ACI{u#?FOHb4gZOS^biJJ^VQX8cW
zwaObyFV@TeP*i36_}z!k8k2hW-+t`I6XL&jR6i-rcFC`E9C*X<iS!#8>?bZ~s>nc>
z<3zG#T?FVpozm=8?BlCogoP?Yo-lRAik7+ndboAr4;m^Q%y9iWI|qiL`>pGwoGDwP
zQUrbxDI8OIaU*YU;Ve&myFF}TqE^b7iYAH-QKeVbVsTMR$BVeYf=b-b-iWkJJg7LE
zA<qH(&{M6Z492%hMonk$R+iv*a&A=l=wW>i^_3RiwSVH;YW1kjU6xKpZLmz_X)qd4
zOT}{A+QD%6+#iQi)p&RUtI-<#^$se7{{&(O>qf`cpf|plH1@qWYV&#fjRU+U-zqMy
zZc%qpMz>+J7tfcaTc#l8vG0wLfCP_UN?Qqfo-du6DeW%~`f&0XT*qTymfe<ie!5S5
z>!QYUjY%N{je?<-NVQZ80`8KqYgBsN<Z}`JT*N@)N>xCC<#oKcg3!KEo#(z-50Z1u
ztAfR|oM|Q6^8YE5(<);AY<FUHz@zd2qtd#oo-+HR){YQ<We+jGo5gHhyBHi)^e(_Y
z$Q(M@!xi>n>6~KBUlS{mhD1y8<Zb)j)emeqw|;mkN-@T?;VEstP)|ApGa#UwhBvvk
z48E?&EnjG|uDmkt`xGzF!W|Rq&p?M;UeNqo9E}$$A$u>~5(7*a>ilF$+x4A*5}uAd
zr7va_mg)uxp%2ER`2r8{MOs_ROc!oc?N4b2b8cp{Ag3l~qA|%g-YyQCr=}fQwN+Wh
zirT?8{y_+_AE9IOQ}hFazdmpdOW@-A>DsdE*r8}h;K%i|EMChsy)6Jro<}cEH8$rD
zY&n~MycNz(UtqWkzOp(tlao+e(9|n^K^3g+(Ae}80~e}el33+<Z2-X?R)3-x+BQq#
zX=KkSMyolsdu4`ry9&Pk?$v6*=Q_Ra`1$f?ZH+^D0q^L=SdrR(_l0lNpJHq`Ve{GA
z*9Ci<)xIt5%xg)WcjLxMI#8Zf29}q}?jxI!%tQ!!kkqTwEdLIhpl?wm+c-JWJ4%j&
zxOo^oTUSOWi&JOvsuzVLcNsQ%mqZmJn7IfyHh0dZGxMjp0|RdS@a;CXO{y$5o3{My
zGUd<!CtxtMLC)G$9L|RKl1eO_1`!pRr4QFy`@V0mc%ov)n{Y7pW^;NoiJ48@i!qzt
zoee|?H&%a|NBL|A<N;gmI!P;)Nw-KI?ippk%XB8giL(B0d=xu$U~I5x{?^u3)A#pj
zGW6Knbk?WV#K9{BRQIkfjOkSgnS&wvR|uPy!qU>gt{S1YA;65w;zDzetcS_L|NSIr
z>`!F^2wwHS;f|N_TX!F=mT~3ahSx~goWZ}(yi>nZSYYMNUAf#!i?BFvB<2>A`q=yH
zX|FXkl8jVea_teKdPS}MpFWLSlSJiz!<|N$I{WQ$R-zCc5+An>NqwW<dsr9YSR1zB
zmlTX)wK}0++BfKEX|b~!$XWk)gyv(3mywSzDkH)0r<t=xq%ebn&QQ}o*>?4cL7T3U
zdF8ChS)e`h@clS<UkPq_9kQK?CC$^!G#>Zeubr%z)C_b3pWj6vy$ADqsYC|SI2I3V
zy!gM+P$H5d<cC5f#-h@_BH>&SBO2*}A@6<RdE}%nB1j(~zr5=IKj{U`4hME6Uvd<!
z32{oh)&D(kVD^kyxiN&Bbs7#^|9)1ZI<K0eVbP3IO9NF_1;wLxg5Q{z2jWyFKgYZs
zxr3*>SpY*BOmn_t`!*k}`s)8~sT-UEOr@FwhC%n2{c&6ii+_h1rurTMRj0eZztMHB
z&fb<R?2Y(;r<T_k2z3y5{IiDJHg0hG6_-R}3W0qCrtQ6>`c!0%TTH%kuUgip(o1I1
z{=ps-Ud!2T;dt|2<~dDXI;+L1p3UKS&U<^KTaC)k!@nC^zF#On3SB4i06TZEx!`d#
zOx|2uXFW*}h2M9c?mT^>`mryGeQPO(>7+&}PEv^^I)XJ-e{?uEcVN)%H^!g2ddC$$
z*RxqFs?W0#>^GC7CE`t?4RpCRA)H6Y$2wZ&hW$1?@??ndu=?-g9Bd?OKGl{KRIfT0
z+;|pz?%TWHTX5#sAd<HzW;Y%EBk$~~iY0&FWJf0qSKVziy*um_%tUxG@dq?@=Sf0_
z(YUFDQ;|>vKHr-Q$<51ic|Y$rAmupqc_Ze$d7;PX0+=y77iX@)%^(2Gs7Wvx$&$hv
zN#1%HvsT(|?Q|N(tK92Qc~5#rcYJiDT%c8dX5ME@#rG9ff5EE6+cSpO7dJuVPio)x
zy!)-pWQlIuz96da6Gb^Wxuq<rcp?mcx}_5Bk6#<^dMWyx%aR2|{XKDd7xs);1Rmyw
zXG+Fo9l5)N!qnWW2JWyD@iN*Le4rcUu(Ex2tvXNK#Mt%J@JD=WSeVQYB{y-FT%z*A
zCx5y>r1J^$kK`E;HdDaL6?fT;CUn9Z4fN~vatdqs?3AO&UM;6Udfwl>rm3hGLqL$}
z&0^4q3F;W-k?8Okp%*xd$M<ELGc-$LKR(I;t}JTz$>fRT=OTqPW>fps!ERD(Yiy<T
z`No;Y7hg)ZRucCw<4%;ac?;_*w)V}4+4dS+H1O|ofk0EkIr7LS2~ePEEQZ3W;nrm7
z3Xe_8Hw`mUi~fBXr^=gaRIb=l#~BnuVO#sSF#BYF_qhGZQoV|XeWaLgem&{QxM3Q^
zYefTzJk@FqPNka6CVL@nS$t$O;}iY;i{;&GjhEQYmJWz?7x3a>ZA>kU@9n0W{3qz;
ztBbeFxIgmB6B6d}G5n0?Bz_MGntc9dgghL|1S;!S5^u9z<+G3e>{?DsOB;PPj2`sb
zD%MMrUY2BLZuh9>t|a?nMChq=(7gu2l;!d#HdHwUV~MKm*v~7(J@;C`JAG<9I98VK
zcPdl+p6~gMHYSr9akpMCYM&ef@9u|0o~P;V2`zIg5hW$GO;Cs`tb`7(&)c96Nhqv1
zt}rI5ooG?z5;1eV_;fB!lJ%)ClX~mBgZU9r{rYN$YlGR3=nptGt|D@}neq#EpGqzJ
zjL;p+`aOIG2K#$zZEtci2aOgYJs6zIB3g}ouL@O}$Y^mJfAy^!(|v^4&qU`@9V3I6
z{`D3BjuyIDu_&j2GV-o-5cl05Imn49)ja&oQvZHl)V=#y{c{r<1HiqXCBhs~JCf@~
ze3L!~(yDjZRnpSBg^Y=ZYXSiIbkCK;V)jBX3%P^<ROIz?^JSmX!QQ|UmQ70vGOY;Q
zNyNmRXW+LAkx;#^;QmAbPmhL9ax;&p-<`f<)>E&|Fj&aZX?$H}1#eR=mU?^s6!#e`
zHcv1VDK2wa)hjdwWPCAb;k5`0=S?!7t2;ee>x<cEA<-8cRZS5MAtI!uqnitW6)`2q
z>Q6O~6wJ1?I{eX`ugd@8MYkiFNa0z`)W!H(xqW#9j&$U{{>#l*%^as<U=gYvdK?)-
zKw%Py<j{rPK}Y;=q??ZC<Q91A_*J;mjRVpZ&9qj?82Ml_4h}+SIh!+96FNk2#<o&T
zq+co+VkiHw8->ArY8%KUhfiQaf96Kdbl*imHm|B{g`Mo1WS_dkq|H~@UzAu+=6=5^
z!_II`@z2YhftoN~qNq--*sbHaUn+&W-SNukB~@h307HOa03=uer^f7TGmoW-=M*+}
zgbXsd^<6KTa79j!O|Qg@V6jOS#p-@;@g*D|_$gOQr3i}M0{M%&>=%;^TDX*p*e;Dn
zy>y&Cu9Dxq2MX<wG(6ec*b7Ufq!TK>cdaNBQ&}zet-TjIkK6vfaElol#=H<Q$ah}#
zvF?tSF1aV>51yvE_4mz~_LKXuGlG#F^w4wKbL@qX-i_`y7K}a@R~9l%fxq@v-9qx-
z(&YN3z;t$hAgn{T*`?srer$|2BE6Hh7s1!dEH{~}Q*@a(Pa(dr>)mih3mop=<-Q~O
zD8(@P&DYyy3w&zRD+FFDIZGACl9vOHT5q+C#_6638?0lWW@b3$$gkz#ONc}X;MpV2
z95K0D%Q8iM6L_60o^IaPU*WcTt>x3(Q(LCL8m^Yr;qhj^01;WT&wn8@$hzg{^UDPk
zh+$BOJZHjf8ez}-HvvIB3rfxEDHB{M)mHYa)|@#Cbz0az**{759wk{wmtYI`?nW@E
z|G>?%S@a%=M#3>-hKY1zzBJd>U2^2VSbT;%mz11?(0yJO8>o8m?DC$&*{ZV40RIcY
z(7@HTt1LOoQG(_h;-KUz^BE4K)i<6Kl{D20(SysDV(8ubH)97`_PE0J5rJu1OHyVP
zpW?he=UeuQnFvH^2;PlUOn#pretJ23S6ks0AW%4x*9Btg-9A5N8D1g^nF&&~4g7<j
zJGN_9cJ$-QWu-Gnpc!~WJgCXx{fY>D4bF*JOQwzHI!ro<YVtYk>T;sq+TL@K*&t&Z
zwcpZfIflrT9Y}DaWF%yS+&1}Z`%<qOcS>ChS7?G@C5*6jGQ$U+*`!p}cIt}oR!qJq
zlew&Yh+1*Nzuv~gQf!N_s8a~2ROrJT<MeywJdr$#QQ=mk!_e^FeD<(tTy1@IH5XAP
zHp8D=E5|-T4ylN{ROR-jLm@rZrJHL*lhyjyaF-Cump!4E-{jwkeESu)sooUHJCZGv
zoDa+oH(O(nBrAWd@Ig@|*o>B}i;t#!+dfL%|BzK<3v@I+PbK_8N<rs!0@qqbFA-O2
zntOuwRyX`TvrTLBuRacwZBJ0v+^{Ty48G)&Nz~qUh`Y?(gzVxWLoeXLC?TL4y_jbu
z^ra-J7TF`M7SVp4JXI)&_$9a;1MpLed+xfD%S_4B5RbWD{l?n&oObN#(0yrsy<cE}
zdc^0H=av;b!t(aZkz$K?065cOg-iSjF^N)IFAOJiB^;|%lU=`+tFOjb?zm95_g7lL
zT6A}F#HSU?I6ny|Kg9M=s8R%tJAQsL<A?hN2*~G_8RDl#gqUPmzhJJah*LYynwiRd
z)MynUT2aY4*V=fvrbs{Rv?pr{>pmS|=9#|>`G9SNOAMpz#v;mBzbeXK@gd?A{!N~)
zJGX-X)r&Nu&}VWYa}GcE*gt7GsB}LqSx}ErYR3$3jR)2C$7pC?M150u&*)AAvq|ei
zvTY}&DKbhgO^zXHA2c{vv#Nh@U{iLF>T!nNQ6)tO6Z&jFS?ryaYvM#y?48hZJ$U2Q
zcLqg>cSCYe%y~JFP|%kFcg)biExNVx>A8^AE{vy_JC~JiXKpj$c5X64!9Q=*f`4l6
zxQg1L89<^~wx+~^fAiF2?@1k<1!}eCWh{aOi&igwc<s<FP+s>&@W-buSR!F$E^wDJ
zq!C2fu6Z*{CRZ^qMI6`K4umo)ja_5+Zpa%&9Fv^Mz;djwad25bc#;B%X;VyUSa{I`
z)WJNxJ!AA#tv#|It*VRjY_H2?5=eD&0{HHe<xkhSkIg(@IMk{pdbYO9GHl*>f@GRK
zqSVVzrQU*GzM9UFx;t13<i{qd<<R=!0Mf#L3ldjZbf$Tmkwc=z-oG9LY7>|Lc){A=
z`a0nWtR3;#o2_IMo7N?6uBC&%C!Fy4_2Ijlyy6G2BjKON3)CV|`7cuBCu-8~xX0`p
z|KP<m6wlG^n{jU95nE?6l60UctY(Z{jK+MFeg=!(>)14c6v#6adP#s3$+MNXYcXA6
zQj98abFh*lG#T0KmZVLeoV}hLSZ<Q(9U9;^Z>XfRWYjIMf8kpp&^^d+j1Tz=IueXk
zXUTGF{n>me-~<`|aofeyvl_YRn$<-DbGFdL8|`@IEoaGyl-6u_)xGsK)c?XR=QPO?
zz`VQ>7tK`1(Dy0<Ug<z|U6mqytdiGgF9TaDSa~Ah?p`sXVSSxa_uZ<35sIQXmF_!A
z!weE0L{COsE&lO9<L|?CPigSDh5UWB&+_=D-=&Z~rIA;ksj*&JQ7+bQEKYTH)<%7L
zKHkl;^()_oq`sL59bI@5#7#W3-d-p#A8G6Ra;*XH%;A&Jy$yzCP{X-BI|I&TL8FdH
zbltnInl<(-t?%3DgnDF@x3Ky%O>$M{7GKlu^SH?cMKrj*$!I<4!*4rC<-|D>c@5qV
z7I!=5-%A?dt_!z3gY25mRPC0zT^?x>RS08}!gp_MTCUaia0+fES+HXoFEqKA9~~Xd
z#raeU5SVh>Y0{l_k$1IP#J(}zygf6@lktt{^Ed1%3>*AS_4@Up1_>1vhh1xq!E}Pm
zK+TYqjoM*iueHZA=d0aorUT&ar__wHakYTX=R|uj&{aN~9CJH4!eMXr0p(MEF{+E^
zsj;oUMXE4m(s0>w_iCO{+AP1CUnSaSB%4svT!M^cA8dM_##@<>r$ebit}@B|iT*ZH
z)o?WLi70%!@1qZF*pS0Y1TjLtI=W|unhT4~O-vPjE*A(jkN$o0Ud+PUJ#uzgeMUoL
zv=)QiwRN>sNel6d!Gdk|jw`ltRUUj7FJ#Qe$45vRn7q={FqDp2+A!})UhIe<lwRH&
z(ybVrKM=mWC@0E`z64)pxfD!4!QTp#K~&T-Qx@VRUqd?N$_<iFm=$hXX`)Ha-W^s8
zcHYGa9h`iz#(L&5$C7x~nerusQ^ic}Np3vW;RRV}a=dMCAz4h*p3HW|)jvvkOmAl-
zxEg<dD+1Fu%PoYXTY7s~kQ@uP0cjOGm1MpjI{X)$d9K?LyW-TZf84k%sf_s&?!PCW
zxzBV~1`--mjk7;-F5u-q-Ue5XSz>Er>&Jxc(Q#Ir_#Kkz*rK`|VWK~ckVz5M$5Knq
zB6#Jhgc6vj>z?+Uf|~3V3gF~SBl}pQrJkntZlBd3)wzGDe!s?Q9^B6Mp}MBkUvxsS
zyo8r!b7J+DTx+7aC+o*&A^MeOub0g_Odb2ER|}YY8MGwV;lgE1we(|`KL$OXIw#J*
zE*`1h8LU`Bx+M5K`Hc&N9!q}hUky8qnW#@blr9>ge0{d70X%zUIQj%p_}wCdGa=4q
z^q<JGJG}_$Bel8Z*GW0>?G7h|?waw%?XMPF`q-JCJ!_=$+3#|hqBQ?ON3!w4fzvu6
z-I54%{!bllP%tUh;pKW6=H)wx+294Du<r|Iq)UM%MLI|C+8iw0x_qPg-mbHayX%gL
zS7lW@aODaCm`cUzIRfye=9J;rci4(LCtrb>LJjC>?Zoa}KY%x99o0D^^w|`jJ|8(X
z3zD<&tD(jQi|fr-Sp<tidnB&0(k$VM6-7vhnDI^MU=p^cxN94bXV>8`@qMeX?<Nj`
zYnQEo)=o<In^mk--SZ>v#u4|#-ajMm>_{P@Xy4LW$j|GW8z^xN)XOUcjE7R()Ht^@
zyRGuQMZ!`Iw?)gXq=)E}ZkNdQP`V84G?~K!dQ1*2ru>~Yf2Ac0GujhlMA!ein`xxr
z7WU;|#GB3djOybWHO=lUa=246+?_LIHL|{y-HH(F(THBNSKyiJ;M3S(5~vJ9ciLF_
zv32$%kiQlPY2L#6?d1gDz>qx@0V&c)|Lzig^K^PNU<Ij^hR_Dc%A~^(g?-H(+k2;!
zo>oONnZ)N>_3~QFhU8jE+z(X~aXfc{M(mxAX!CV<hC5fwZ_0?Z&srk9SHP%P9P|E=
z1|X*cX@l{gzGe+>*uPyX*}TE^@~V;f0o-Ub>r9Ejj&`~^UM~rn$cjg7gxaV+!+gf<
z4x3oDaK3MvsA~VvFFH>gqok;)D1M{vvA{7lwp?Rt|BGQgXT>fsAT|xi)Q@Eh<91kg
z{b)bjL*jr8m)$KmA|e@Nd}GF?A9x*xZsl7))3f@cLkFIFEl_*XW^h&VD@x>D1Lno=
zDOROE%ESh<&}cUttAMS$h8@a<Yv$Z%j*6m=c3pltO<)Sbb5&Xa4}?JCOW)-F5eH;Q
zuEFi~#6`qI$P+>Wdo=qs&nCrHFf>u5mg)ba=_<pbYTND0I4B_qf*?o?-Q7J%w{&-R
zm$XQTba$6@cPZW7DcvYt180xlb^iEk>$sn|W36?sU7gusKAvf7)Rl0qxP~#Xs)azq
znZMDuR4-$M1o@Qa-*)CR$-o`2m`e2H#Iw+oZlcxw3}-U~`{wUjgRC_UYP!n?2k+D-
zffO2oF?bvHAnqx5%1UW~`XXVAb=`3tmx4q5ORWPe7A~TqgQz++7nu4<#gEZHDK*6;
zPd|*Cqg&Ag86)>g37W{yh~l?Er|yLCU{i!KJXKkBsA$AG-1%Y#lan!fAR!`72@d;}
zwF@`P384TQwg-uGwZR`@c8j%Yav405t2a|fsu|J3Mt6V3AUMOS#t+T`1x!sL9H}bl
z(SqS$g@Ds;fWR}MOZ!Tz5xioX-x3#hrn~xL@%&;(l0v=)N%Rv`@90c|*;YyXzkpEG
z0cyE**BjUEzpJ6jw}~CcmFpeW^A#sk!Xu6H77JPcC@>apyH9A1Ma}{qc}wjg#Kz}-
zIwEO;P|+wAN4Ycbuwlo;$i~oRcYp%Ga-sSDaV}3;*uo59Cg+yq3}n!!dRomBbm?d}
zG<Ez{=F)Od<h0fEelXj;A5|#!^qOSj$-<2aM!;mq4G1nUdB?tKr?xhHKfPI~OMFaR
zt<bT5I~`zJep<3p=KHky<FI1Uyx8Y2VWMe~1h3C>l!`5?*FI)=ui}99)BEq!WE@}&
zW>M(ccdgb}Ex;CzF&OjfnL9zeD$*CUw;XHPL;eHZqg*D=!v^nzB}@QN*S``J)$|bG
z{`qRN#QaT4uS*)R1c!!k?C*pT7K87JsO_vi{JfOHLpT8ga0`m3ocs(UGwO@Cd$IjQ
zUb5ofolxjyqvGM@r~o2?c@_2twIe*8CPg_f<4*zF5K1zr9=09%rCkWrDYb2m_Hm5j
z<fBOQn_FBMdf0V4ZqrUWVu_TV^Vx?&F@5lm+Ddt0`{!yV+vPP2Q}3h}uj@~)d&ko=
zYcR3r26F-%-*vt%`=4&_C)X&)8BcL1XQVzLfZ4H%%gS_^)Mx#~YOBIu?{$@*Y;!j_
zH^d-gu!E3H=pmI4^K5#_h;XPG73_Al2CK%_?X(f5%>h10CzC|l$SnKC0?!KKVwd2L
z%>`2z*XbNB$(MYI;EZS&H!dUYeeMYRR_Uc(HYn&OJpB&`cSYuw&(!|ZPpBgFf)>Dc
zYJn7b_GE+7NwN{(zvbejZ|y#YH`N<BXJt!T{;~Vjx=^KKc{#J9bpV{2#NTl;jGUwU
zA?|Q9{-HqcVc(sj@Q*bmNcFG4VJ46H8S##T`#X2Pk)Emw(+VMLaa{$LRk8q$`ioal
zskwLnPX@6@;Q4#$=LAXA9yB4Lp*rnw*qC$EtoxOV1Tm=b#}1}v=kYaya{x8(qH~Yf
zR!Dg~Uyn7EQ!_HzVQu}rt)bqPAA3R_2tC3w{ou9yoVkyH04O=5$A^D9z21!r-rc&p
z1g}gctimwvEMwPVNB(KtHtM??PP`h|1+BY~^%||Uya07zX-0mkiPlPwbtKeucC8+O
zQJ%Y^LZ@ljSDp+JsoujhPz4)20gVnVQwYqA_?v*u(xPAKcE$sz=K`giD%Ev~{s>{k
zsmEXJ`qJ35Jv|#thE$hNVi}B=xim|~BG6ze>XI!QN;vDCgESDZa5jLjh?wJI=TWqI
z&Bfz*lm6QhLlD?wCgyzYMmvF8`(PaSN!&uj8GM=~*s4WhMxf!=Bwc0M)bZcNJSoX)
z<802*6;&6sJfeW~8$`y=8z<-~rhJId&^wK+u(5k78VO|C1u6^$^2DUEW1*3b5&SVp
zyM*-4XSKn|>Gt2vDK7#5osraD5<pVv4_73RCCQfpa@g0ty)kmkV(I}|nYEw7UgLdL
zn!i$Js{nXT$r!`u)VSMKV*vSA0)p27tWm|yzH&st4W!TQ7#7xRw8-&m>I&u2dpFze
zYOE^`IAG8}prRqEvEHBV)^<@&%wDac&z{a~5GOFkAEoS)603rwlSv$akuj+1VqR2m
z3JVKEK^r59o-loGRYH;Hws;@PnGp)jd{{aLnsaA%;J~;9czX&cJ*MqgVTjyp1{c-Z
z1o!@<Uc50JVh4GY&98`eM5dQGc|6@5g_>1aaj`5~gO6X2D2~wp#k4^CK5&dh_%u&O
z4ynlW6z`hlPGrYw%JlRvUS0he4oAnGv2wNl;XQxMHuK^_oKAuw@NjO(*ADMzmzr<I
z!lB8P{i97*13WFsg15={pgfWfYLvs`ws<$-jO`UtE6+G45Yh}2<P6QP)DJxqE(**g
zs{){R-Sdvy=6#cNy~5L{{6}_adzxKwh*!YLa^u<lQoVK2v34#Z7-K-Gi{UB4d{Nv4
z7q=BH_OWUJ6wM7^AAcxm41KH5TvyJ^uc@w~%0pqD#U&YywRWK|F$P4t9G8YqS_J5v
z<eDcOhQc?IQ+kG3f1<AN8+BNv&(q&V9<bO36zO+L!yZ=oru8BbYj78;&x|<=Z2UiO
z)>oRZYlvz)d{24h{-7mVdn07~LmuzIkLeOlmYI+{<Pwy@%*AEIO-OF?9YmEV<iHq`
z`WqJ+eC~E>Pe$}`RfPuKpSJL&oACNY)98hKsW_*FtdajB#rWS9S5#C)8+Bs|*v9t(
zyN4B^bC<pnJNQLWPkcl$=8;cy(SHTLeahg?Z?|nUOz8V|(rqa{G>Cd}agi5EvWcd6
z;I_BXsCcW(Zd7d+OgkS%sCH$qb48Z^sBiRl@0Cz`zE0n)tl=tO7ceh|chmOxc?ti-
zh7^tEjB0)~&r*H1qMkpUAD-g1sUMmUxX1G2g^GM$2NuG2aS1$@6xg6_<wbfp%}qma
z#o+&lX`um$k$i0Y-JJXao(LoT367syjzv^OskU0!PT&j=kT6E#UOc<r{9;4Or-bwd
z+YjD!NQN`Vr6M_#U_|<R%Qqy>Z}R=Vw9~6JsuvrHWMy(96^EY%y6A8!H6b2z4Xh6U
z&UNXhC72{_GZK*=jy*t=p_qOZx=4e|%pDnqH;A2+ZU6o{mv+FOFeiLeZkEAjS-rh`
z1xz3Aeb<NgfQpV=e%Btfc$fCJ@zeEqqsyGW{Y9m#7W`Lgu%emzw|EXNQ*u0ds97IJ
z0@pF1*+9PleA)hq#{&ocR_Rcx#l{uf<}z#Y<5PvxrFy!lmmJ);s#pk%jC-z!Ge4pz
ze`CA^#k`B2H`2dLZzHSukA{+Qz1A)C9hJ25r4c6(y`fYA^{U#}huBfL)v}CqzB7u0
z!|fK|IWhi7cPYwO%+Q?-6}HEtpcRcB3el#?Ys~ot5TpADb6EEv@;=F!&v&mKo;-YC
ztg#L%fMF;9J=J}fpBx*K^K~;;U4Cv2I#(|rl1ej)9Ru4MkzfG7myLsPldlYX;2nSV
zTxFYb5aAg>St$*HYa_lf#HicCK3a&72)}YRSkXSieM%6FMIYL0D%<7UlR>H!*^cE>
z^~&pO6H!W}WEx0ToY2WivvYOI<O6ZNcVtUrvfZhl!oM>Q*+_y~YQ}K5BgBw)dnIh?
z93{OwA&rjkKUT*X;%p(E=2W6(mnDyjGF?I#zGHH@ieCSrCdc;xwB9BZRc^~~UB}aF
zYpeo;0<oH&3ltAy)CGxkLV|Bx?AEoLgKB;sMgRF1K@d6Z*K|@2Y8vRNsCsH!?uT(+
zodaj`61@5McI-0Izz&`v--2QYD0qhu6Jr)i7$ltlu8-I`<|`syEOt1qBmka8DEtZm
z=MVhRclwnc^V+AXKnni1BoUg2t(K=!#M}`Vi->*XQWRY>u<_RRC6?>H`J00xomb*(
za`jE8^rVA=hZF_aEYnRNac`ae3Y0hx$332f64ku*ILR}gQT|>rQi6tqu4iy@8g(6I
zcRMvC5qP%JMP!dJINnu!^`;rnmm<OP$Ug#Ss>PpR!iTKnW$Xi8te2t61(iLpHPR6E
zHIYKISr95b`6Z%A{?0JAw35iD$U;mrH98KZO7{0R13AU?5RHB$B><BGI}@`^n&Lqy
zHGHyKnMm60eB_Zj_^((AM&_1sy*R0rx3tz+$O`7W>J@%rn*8)iFr$kJ$$~!GWu~z(
z@#-wgE))$1e=LQKo@rG)Md*D%O#f<jq)=+B)~mb>Pp0v9*HT(-M}=LqDwBQCg_>YP
z=Z3@4nrlvfuJeC#=UT-T<x@`tQ#=&9My=XO&`@{~D3*bu@1w^q-=u5JUo^-k1wIHR
zt|&Be2%UfY58)YcTfk%mh<f<^oLhe6|Blc;734w75te(-NlL@&EiZ_=<grX!PO_2Z
z-^Pd+vnZseB@R&yNIbv$NiCI2fxfzPecCDYF7ghZ^uZ&5`sW(Y6Lp7AUog*;RIh#E
zwP~*Ch93x-s+nB(`^z_G<CSY#v37YQXPsSLjQUDNS4~sTk^3Zc0s2gjC7-RkQ8nv-
z{<=rvXMgs-+Rh!mLYC~7tl;0VM9X94Bggw?n7xRHApk-W6@%KX*FtEUTRew;9&hak
zRZxDLlBQAzd%sQQw8f`7_Ngh*1nO`-h<aG68(x+eA+n^MalybJR9F5{6R^uW3(EB%
zvqO9WM-q&82zQT7T(r$|2}SRFwyRqz_EO*_2*jWPxJ!Sr3Qa#Xd+ni58&T?kbpil6
zdSemUq(P41h~n0?Wwa*@cYpDk9T?*hy67bPJRrS+>l{)F$gKx~!#Ag3u-X889gl0J
z?&t;V%QSf|)4SClQsiI%>G?3~{L>x6MrJ=dF+T_iKTHt=We*MHj0(}IwUT%tg-{c&
z`OrkgmKN6YoGZ7Og97m*RZ4Q)3J2#mBs$jrxHUZf%on$aosEse-`^f|e%JJ~u@B8c
zqeDc~i{%T#<5&1_%Pk}1AzfYI_Q^BC=WHMkoigd2{Z%ndsxSnMP}Ccb2kT6->IY68
z@6e!JJ<INeezwnr@vLbe(f?k@;IK^C%6&GmY{|f|9TDCce7?Uby+mit-@kX|R^Qp(
z4w-4qSd~xF9QkI>r_P{BVvynQeMjsu!qQJ*t7{ZOVX`%N+O4#$0LDPlfZE+$4g0s|
z^8q)#i##AMKiMEw3V{pzXm>OXZ?u7gJab+P+VKF>Bw{HKB<BVn<L*zCYd2<I7kQcl
zD;;~cx4n8taQ9mI-(j<PyYTe;K1yytBJ8!_4}ziu<m$I%AXj8^)$`vinS9=#+k=AL
zM-JAv{vh7+@&9A5=F_kD{(!Rg;=v~G^%G?Klv9&ZMsPH0uSQ{cAJqDq9Zvsn+yTOT
z0>N*cwLn=mcA`l?22}L^&}@(w5WwDBgdn(6QZ=t?FJ)mnG`aw-941C|oM{?qG$jpO
z+JT2GDSSQN;&NcrE10ZP$4W&8#^Kd5P^QOmeghStdtRq{UQdsUyLjR0txS|Ov{lM_
zBJFwFdfuc+<UX*~$a*5?=}`Jsc;H&1<HN~t16rcQe?YNYQc|L3Hvh#_rd4e0ylK5{
z;M+g_2{4}K*=g_DpB~UYt;;xYchkSe{rWu?Ij_$hC9|ivqI9FpXerYdkA#-;jy+FC
z?f^iOb{Jf{Y7BYYr`;&dPgUZC&i@G=mI!Dy%gPx$h3UGgja&O1_m&l2IN_IWExl1b
zvrV;D+ej5ZqMp^6o<Kr{M-<g;=e;pp0CIV(oufj_qNZvlbM~_6R)6=K%pl#LfZvwt
zENgH0Veg_3QK1XIcK?C?daSeu)l8BVODWz#JUfYT{!2pBJ&ym?B_#cG<2l3k{(wmi
z_>lE)cO|6}E%N0>v8glDn#{<HR-x%-+&pn5o7+G4S4W-ppBa0ifRQDoF5k7jhz|hm
zf_~7$c*Yn07>)k^0>1vis4D8c>q*#kFd`3#V0QvCaexBi{hB~tF$~aR9JNC_)-cfu
z91hPF(zcQ&z(&;sSJTco!E-`{T=W<Ur+EWahLojy9tVLEvw;`m^}PKqajp5!FAf-g
zJzgR4ABB&W?^$L7krQ0^7D!>w6SR=1FTWE9iG-(K1JyHdd$ZJVEay|072s-JOBBhR
zwNrN7Nh>#+k<TKf{_H4ygtp8~OqCj8rbe%b7&vVf93rqc#?f;JCJHnf?R1+j1vKwZ
zoS7rPeEFiLbnKDV)2L3yX!|h+wYq}}F;%V}ITVT!TG)lED5V|tx-xED$u5N;;hlUY
zu*_Wu0C({sY93Prm<+6mbi~90Eg~I%?^WZf^9F7L8pFuNPbAs*_2kKs`xImWtE$>F
zgtfsYb@Zr<6jeTF!LUXpH-dGhD$bX78upA9*H)(G)Lv)2l}ovV@VtzKz=Lcv`>E6C
z{?bt*seaSVN4U)I9!UBli222f?Mi9Hz*B$=CU|8N<eAl0n^;trMegX_nkq6s)vwgW
zb!Z@*g?*#@8|R*oSLW8QT&v!yHGF|fYLm{vcyx61gjOu1_E(f_7Si^|Z?^ZMBIHP-
z%21R)FU3imY3$5g0;$U^oJ4_zN5_hGK3noppoa6;JKW|3IJADG25tTX?v}i+bJ2N6
zGWla4yIXf(pMF~Z!jBsc1=QR>T|}AikdGG{6=6oFf5H<@NxTpNm3cAe+1<bzczVFb
zV*D(hg{yXs4#T-`{()Zsew0#?2a;kWI8bRy9UAP{^<q?C(1!!@G@o%oJ52FqkszNl
z{HYkMTd797Rjsu6s{jv)Wb9gnYBd?h-^nj}g9!8e$D6(g;2An*U=yA)Mbp#M^J|5n
ztKXWK%GRE*R>mB+>KMv)fy4ZRKuZ2MsX>;6v9WFA{Eh?QCwMZ27w}u#0{rG0Y#DFe
zHfM?VvENifHVUAm)%L1BCp)uOCZ?{lUt2PbKQn{2#2u+34D#8IOuu8t3Ot_gv1un4
zl;L`aHbhjz&Qt-Is!nh|`0eAN|Et-oMCSMUBJyYgXWS*WA{T$)0@&;{|CNu{$>Gwh
z>WxiP5fb7r_bFeUtYV_w!G-r<-fEB&_I^1G_k~B^X?Q^5lo@f=6Rp%1e6=~tP}a2>
zW7L+Sq{1!!<PJJw_m6~=B~mR1M{X2kE$g(1?v1Y|$}4pFDFOt_tsQ!TpkVNMUnF7L
zhnezSk@Gg%eBT3jaSw&Q2w<4i-jjL%f*nb0kRk3YVe+*rlGyrtqw1#j?L@=h7_dvY
zoSkO9f_SQL?A~{%q)kqoCHt8j-LB~t^{SkImwMMKxhWv6Kaox5jI#Yu?j2MK<MYl4
z3YO+sN99$ye~{e>t~LL$qVZ&obt^{~5anL+DT?VfOpOII+!r*R^rVq7dxY=mR%y|h
zL9~2oLqYuUd~pOl$yb{OlO(#`zpcZ(IgiI=J=T}u@^H2kw$|?DHT<B?G+5h+o!YE#
zG@dAd3d@~k%k|(F)Fx%y1v}`5)tnx+e=e=qvB_er{9Yfs#l}iIT6+EfqM=>Q^%`RZ
zf%wQ<D#<q=RG<y>L9Cn8KeFUEaKRW3h<35_z3r5rUVq@EKWo2PJ0gF;?3Zj4*uFS_
ze+Top8#!irNa|0C4%}tw%dfId_r{&<sFGpSx+^Jrki>}^zJB_kDY5R<NO7loAxGQ#
zhkTqbKZwu7N1yiS;byVkY<H^Wj8$eWulaDPf0n8;Z+)o2EhtLYV%{Z+NI*+fUHv9O
z+vQF4qr{+jachJli2;N4;ZBnNQ;6)74ub-o(4dbWiy*S!+XaS)WCfY&i|uM?*!}$N
zbcB1klTII>jJ9?vcj3xuMqjsDx_3n{aN{PluM?xxtGAhVsBdadd%DfG6fiN8o|d58
zV-ZU|Z=E3LUsh?B&y?jOKRay}o63Adrz$_SC%ivb)7%Jp5oJ%T<1rMTi<*&qpAgSE
z<Mpr+c(Hu%2Mi^icI+V5?<A=&i@K*~iyg|fF@`V~>hu1=oGo)~Wo{`P#|HnK#PmKn
z$KEx;0dFs_4p~}FkKLHMbU%=e{)MqU{~${B^UX(Vlk^=bdrFdf-^?ESs<i!29vXP+
z9XB&?5Z}k%Qdb5#s+g71&mAODbf!dM!jWIYn#G;6oyP$&Ad8r|DZdyBrSoX$+&cA6
z{uo_N`8tH^js8s|6)><A@B$>Vt(GP*5BM=uv!#JSFHuG^__!DiTdBNO`(@AyAP)p0
zCRtlXDQ7b0`?C{|{GHFD(<+YeQSY#^r}sav>OWoMDSS6rlkRwU6h40n#8!$Qc#b18
zbBOfTkFG?kkNS+sf;x32X>fHods@te`i7sVe6b9hgfj-yxRYXe)%M&%`J$QniSgy0
zX8H{e&R(LE)%nw*-XG6EY=Y;`cw8fKFvf(|MwjpO!`u9a+lSvj*8rf=@|&nrdS1HL
zcOUeu_3O@}c(mK4uahz#VZIc3c#Q7ff8^eiiJ52vW0(?H5(&?9YJtecL#v=xbUWXI
z+At=E*u%=2v7@r`+F4<zirOZ!qK14zbEWcW>$D`xHI($ZEtJ`#VzxHh_&I(ojaFM^
zvEWQg@uD1eu2HpV9B&?8<oQ_3qe5MkIB!Pw@*v7`slj|_A1zd7Hh68jfip4qv)%Gk
ziruqkMM6(cFX@Fk*27vSGT}hLDJ#}y8J#%K?`JLDaWTUdg5%FjTwIN%t+vArzJ-qp
zF^1S`{5)1<5Gr|fE3DT6|A2T_)<4$gJP%l&mu^DttNr!!dTDf7y-CAca{7E+O^!6X
zT9wYXufj%M&?k=;(kbOq>k?16V#R_vSbDQ(d<ci@-dM{w!rYrDY=TaBVzUH6N?)54
zB8U0O*HxEWD!F)Yl&L3SQdvlWQKI4xCq&+rPuJ8u?VI**mKr;>BZt$s?6zvk-Q!+~
z1us>yf<(Lc0^kEs)OfYWAKmjMZerrnE?n<?o90`IMyv)M-zo&-{as}XLn*jD{K{;M
zlxKgZRI9YpFYnU$GnQq?)`pRlf2Gl6yT(tRpq;+c(eMI?Rko9lSt{SRa138VMf+Dh
z4z@ha!?0@o=m@(XB5xzVR0Mydq8dzftnCV}Y%IdjP4Rp|k7tSCuF?&Rbwt+vd;>`A
zr|!IB+qPa`=M&-s`9U9Xo7^#oV83HZ;6INI=*^pg?g70`%AnvrJ+Wzk0vTAN)JE43
zaNdBpWdTU3Ye$EL1pxy1@Le=%0$GJcr8`0<klL-mz;edN#|@4T7=McJ86F?rW6v7R
zD&L7zT5y>$_p`cLHaQ_Zr-3Xo5=Wn~?{)1P3tk!N)f!DHGm3vO(%ViEqhEiHbd{(d
zx3Nt82;oDxG5X{=>N5%(p{J&{peRo;pU;hvdF~x3K0?-7Q<tyYvrNnS?6p6U<5?rX
z6}QD&YbzhW0@OOL2sahx6nRPSnh^ERos|z|mRO3?O)Lq_C?8agyO|%}w47<s@4b2z
zhU%q2P;KKm0Xv#mXE5)mQAR<JVzh`qTTA8qp={&Z7c1Liz1mn-Kk<o{#c$i3xy~ow
zpKoe@R>aqR8%uWbW44i3^Jk~Yckrp!U6kX6o9dRc0?b{?Xwz-E3+<A&l}|U%H6#9T
zoH$?vyi$6!lWh>`m96c&vTPxCDiLNPXl^tGC`Uif_B7Rg(`=aZYhEtFX4lD-<D>un
zA1D(=r`QuSqG)jH{XcB?A@MnS`~a4RHasA=x>M_=36oiPF2jbX>?aq5cU__qZk>}A
zK0ZE<)#y6O=b-B}zqgHPjbczZt1!kXr5rx_1pojg99CwmrE29%jFqjMFZzw_xY)j5
z<|U5z1RO9GoV|78Kk&L2-_thvu){Vh5a}^>c`%LDarLnq=%?EN9(U~sCxF9lrmj?}
zTA+_A-UxJBZljz&JH1%g&Qc7uGd#gb(R_}JOLFde0(DQy5H|=evSYPb-fljJ$=S*F
zlCpeB$G*8Pi71}?D6)ttP~DJ{vYXX4+O2<G>8Ld(oo)1>efVv@BS!TDeR!8JAO}mE
z1x7S@Z_T%#o}chu_r;z_XYty9>bF@o@B}(i1t>bUp4$e*oxI~KL3|?CMxmbK^qB#A
z!!y&7h5d4a?T2AbD-*@ylcSJFjA*RutZbm>Ln2^=h=o{h*S2=H`q4DbI4d-W?v~uA
z;yBT_Dkd@NhFQr^|91a&^pbG%58KPdkTRFX&U%2+ys0JDUcxCgGvZuN^gbNS3$%H*
zGo%1S=OmD<gss&ZTAGRHZ#W2d1U+zRfX^xEz%H5U283*bh-%qN;;t<E;{FldSNuR;
zVSTK3#p<W0vx$#em+qbEm`P;ysQBva_kPl^je;m>@^$Af&U<-obIa|Q29oY+vD&HY
z^NliDlHpY@d&B1JLMugcAG^EFH|_lp^OsiE(Jcgw;WOd@YFKIB#*a$+DXj~DI02?}
zlHjCMEDoKP%52&(a%rxrb2|26bN*rZ1uzE*#Q-@)KM3AH8ZWOtVZee`L()yG2;E*E
zTr-hPgv+?&Deon{Sa2WU)T{!OM6}Az5Ib-#1d`{;j~T>2h=~AZ#fsKG6ab2tW+hQY
zY6hEuvUko&Vf|ZLga!#dgZ62qDO%e#Z|*9NML4Bw?RI&oA!g>^R&N9SmhU^m`$h&(
z8Y*-GFJeKk);9#-J(oAw@n6Fd)b&ypHe_FpOu#YImtPO0LeHE31h?7_AvK+OO+g}n
zhLjx9m)Gj=^|!p?w4tP5pTr+gQQ9jo=N^ys#o0#GBaKh?l;{iBoKRoy{G}2iw6%Vq
zgB7Yb+nwj_=;E}USFF??g--sAqGmVAC$DT$w%#lJ%~Zfi=8VW#WjZbajLml9dvv<I
zM++FbwS#k~xiQCvn!bCN2O)C5$LqiZdwiCo<0C-LUGGmI`uIB_aOFci`b^-)w#iX5
z5j&O!mJ$IEN7dNJ<6?l`F5fXRHwmK^$uG19w_!9%iyvDZiiy+#2+}o*BxWzsV(0Np
zv-6&~Q<c~E_7tKNO`sd8!;8?mrXUt#{peNLgos)5#<NWT4>9fA!YZTKPc_`UA?uAx
z1JwhxfEmPX=W}vTv`Bd$<l5c%$q7FjwVry3RzRm9Rxe~cui~y9KOXec%~XsN34&4B
zb*m_o<^Da(#HCx;u+LC=J*`1yyp|>_wRzwKQ#>J@asCt?fx~zP=8mUP@qMMkJMz@g
z3}0WCXI;p9kqiYbF5z40o2+l0FwCa&_#zc$yq}50FtD4Nozk1mM^6}tjI<P7vgu`F
z(#=*jM3Z2$^zK^Plymoo2()5`#ZIM)SILkS2xJ)1fh&YNU7PJ3l#91VFAB*4{l|7B
z*yKT>UVFO*kn-9#P)YkDEs#UV+)nCfh~X-gXD|+vo(=<5`SOsUnMv4Bpo2-grAqxg
ztb{E{e$_mhb^(ncLB!Oo;H5!%s%LjJO&qmoZwj}1|3f>|s+|?-6bZo-Z7d%3%%(lG
zKg<|kscHol`p$e2e6y+Gu3bmZFa`XG92i)cT~?)4)YPwAmhS;7R`=L45RHA8`*7x^
z8O!;B*(fTiv^ZmmsmY&IM21EtViFRV93Y-TmT2(1IkgFSBv7>2=axc2dqZ-*7iHMq
zS=rKnzoD>Imzv=3rM>*1kDmY!Y|s)=!e3p0s1{MqSWUgF;N7vbb|S%qgKBgLJXIdb
zc6N5el}pp*ggj91bUT*WcjHu9-sh6K<BQC?^61a%VXr?dMx*jTFoXki@JQUG!55UK
z0OI`#dd;%#%ETB=OsBw1*cZDF=&&X#4-<18(iCPSVYGRSgbk~vk40^qS&8$zFg&j8
zyDzLIOE>IqV*ZdaLU7kkj+PtkeS7fgWY@2AeQ-0r3)Qb&BB3B0flcyTE=>KLD{Q~<
z3@$_n@2K$B?wbo=y)zLyEl%Rf>@cv8_E}m>O4iFas-CwQpB_C6{V1|ioT(_uKSJPD
zhgTMSy*-v>SP|HAUm<^-kXu=M_&N0e@FuEi{2bEae#)%BG*>^#Sbl$mpNi?YDrgVo
zBLh)L0)(G-c5d!wds`d7G0ORroC7cq<axk|)%U1`?dka*_Ht%VoQG#*PZGM|66jA1
zIw#`roywPzAR7Oh$F}sZD%rkx_HHijy)VtYIa$7`cu7~D@{;8i^P^H2Dev8+L;Q05
z{4Sc)`HibKnu&^tHB(`&Ylav@C2%SGcDQ8&Y(3NTijySCGplSfW=8rMSj+CXI^m3h
zFUo+eZpd)jn6%IXQj4twPtmK{qBxbfFNbu+zSrwoe8pp=bK^ae!}19+qCyP}C(Gt&
z{3hG<=(4Zcf>A%zE3R`dw$p)xT9CPEfA~J-CgiOhip%lWBOU)(Dml%<EstRjx!TR$
z)#40_r=+-Mxp$EMH1gFy2Xr)7?xk<%=sqCdn)8DI^E&Juo$u!!QA#jPl?=L>`|BE!
zdjR6{0|UcSeGKuioB~yF8BX+ftwcSqllo>gsvk3xhP(4QA|bE3kJraL3Ls;l--937
z|CHKR3y3Yr-_H6bp9~cTU;H}G>cEr~gGP2ACwy7AR!*6Z_ssuvMpxLQrJe5NIE!2_
z*Jy|@7R*^D<^=8H4*)9G_R;UWkD*0lA52!OFVzJ2xRCYdP5~-+61~ARS(0+RG-a9u
z7%uGa)7wf_IB#tPor{UBa@#~UMoguegOrELI*XUt=<v@a4E8$Y4y)BW_Z7DA8+hyX
zIPk?y#U&$^)YC9&6iNM|g&?Qztx2Zqe>-H8<~^Fb>@1^y1gro8?84#0j&y<%y9%%H
z9su6`fjsc75rjvw|L|jUR0j^TnS)qKOZaFr_`>ARYk#=GC?A~Nza~$<5jkFNtT3&s
zG`jO84I#VzD+AR_YQS-7xET(2!~CNJMe!|?@>*`UVcTv9XJC&%<B<rm+0(vpGIY$b
zkC<i#FqjE{C_Ph_QTNMmbU)ta%Flhjr)8h`aE5uFTa2GoEuGK{d)68hKMarca=YT<
z+iB}Mexsr5>*1yf*RnENhzV`3E8~9a8JqtE0-R(DGC#wlVK1(ze_f9*6pe;XIhM7T
zTZt3VfAuc_()KdLQ0*bO3cIgv&c{_Myr88&S;`ypeLFQ4PNHy^1p@HKB)~_sJb)TW
z6&jXWM!5Ltdha8in6@~Z4ep`zRprGZ>ymo2-{|zYFaiy<d4J=K6UHPaqK31vR2Mn0
z;|D@SL|nD4jvoKTSh!1C{X8_YaP(b!ZR^!gP_NfvTF4$8NfJVo9@9Kt6KozD7yM%L
z5P4^Q?_2THaYjmbciUW_m2!y>sKPro%!%t@DP1=q<E!tKc^Z8<dym&mp3D43U!&tq
zGAD*dl;4qedQrirl+P<zw9ZvFA~gdAY@_-x2Gk5r<|q!Cb{b8V!!d{TIkxf0Hpzjg
z0EN&80NsW|f%Bi+QzRiZSQ8cf>g4w_=`a%vC@?D;zEqEl0)I?7;04(SvzDg0VJSo9
z#_SjIn9olbE?L5tRLg@r!j~e%(ozUR>n40!)@eaH1dg4yJTXxjp#Rm!KW*L2%;nXb
zNS9l3trsiI2D~2MI?sV(Nd5iGK@lG~PE2L&{tjiB-=@e|YCezOE&5K_4xe}{AhnDa
z->9>i9gr`+DsGtk9sN;6f=8`g!$s3D?_s4(i}N5~hPy{m<R8`KF_roYhM)4c^Z+!>
z^`y<9_fU3V$^PCiZ{^F&J;RsqcNhWzrO+CczUY%}TmW`&dV#edAb}vtv9?L+qgWpI
zTfs_9VH|e?3X(?u^sm-bXS#bwgcOqisWb+Pz~`{abM{W@qdbcW(7$5vi5y|q(@h!%
z5ZgR!n}$9LvgKEL<RAQZNcM6-`%#P-0~%1qnO5$tAWe(_UhsB1Y=t+|2*}zHjN&ea
zZhdWBix6M8L>2S<#kLuF*xLAYppEtzrp^Zwzssu>sA27w#4MQUxP6G<PrgTcFIF^~
zxJZUbb&(c7f&8_D2El;!Hn)@|-THzKO%L>dPl$RR<|SI4TPL54k#aAXaM!U!x#q4|
zJo~zY=P1NJ0=mjle}ZuS$~mf$43CtG9ICh9mR%zlrkhM24w4RP=z$w<hBV+cFEkn&
zPmKwMN(69N&)Fozp(h=^*XCrAn$*wE<8V2c>h1e7`UV(WTpKnMsIoBwDeYqqopiE&
z=d3T-{=z12S18`ALxMW+uy!0R66$h8$m>#NmzD3h)fX;`bx@wVjX9yz7506KumHU|
zp>%I5a(d{3Q^cyu<g&(+#Fg;Q&Ys`rr(Uz|75_4Xn*P!;0zL<1pK(t`?3H~Wi<tR5
zZfgZ|dq8bsy)xwS0sGeeVXbHCP|ouA4&A=Zlen9(!cLX-=0VYnB?BQnDnR9*w4A-(
z@f>*l=sR)^?W-;zOij;j6Fdph0KnXE>}V{fvk!RO!hru94#>&y7u(x`el75pA;$UI
zdyVQGY@g?`?umK}X}c8fGMoTWW+c3rNBQNc#It}mi-}lw8Vu2OynO9(t#W67rXo*I
zq6F_PM3!W#;iTzC9#mehg0MfFaA(;zyQqWPB0H)SGEulg@KY?nP10NfX~4F0T+k@@
zH<lm+ySLL=6=m>VuI}xY1mhedB}mEY;C^o=?dS=F2<k&x5m=s&$*OnQpIb_W)pzk5
z58-{#Fn9S1NYPMroJTpRLWsV)Bd}jo&}fwaFa1eSWBr03*itp*%fv6KKh;b{S>fl-
zA3MPnsjl0A*NZdRE<To&wp5%X2{j`Vbtux;3O5?-i?Nko-@=dPK5_Yt7_8_UD4jfH
z@FvjhWknm&%RU|Rff_$or3{60F#Ht9c71hD^u|`2&vg5seE44BL)oMTs~*fGLMY<N
z^;dC$TDXDbrF8U$vr%=C?0AmZV-^m+8hL|n&MwwtW=7YQ`RG6eLgKZUL3iYHv0odE
zO@FCS5&VeVwAHKpXd`&p(8=r18|tF|<u&r@asux`->*ktRXe)?mcA)<&D^XxVV=wT
zlyqWur)QuSzM{aj4eTN%`~m^)I<q?Tn%It=>t2iOO#MiOl9L*er{i1wGbQ<_IzqEW
z@yI;-M++T07Cr2bjV|AyOQ3Vl{m4t}$EfYe(R}iJ3w<l`vilTURZeoa)ZKz|gSx*F
zRdbu5jPRkndckB=P1~e9h57TMDksIWWlm0<N`o#5?$T%8#xsTzF{}?vAoPftxJbI4
z>)KAeTMmV#Tuks6oKPy-SwM|})Uw=lZ=F8RU)8Y>H~U~#g`#5!8CV@t_AtDvvu7h2
zQ!$Q@>sAZzini()0e0~jD_T)TuNwqBJD>u**Xgi}rf$*^;GjU)X?!&EBTkj-b<a_j
zZ`!1<6^OOu_nvavba?YN&elybkmJR5p?Y3wD;2Vl&hK3%kni~0XA5l=#M$`!3%&nY
zSA~Z8Z^_=*1rJ@O0~Q&5NILlCJ;_6!DtQhyC_A;d-}1&rODJ&Gm?nOh3UM?o7g$(O
zJE(*0gi1;HNIa<lv5eBybssLjjbde?{HfbFJp@cN;Cy7K_=j6K2AYwW5=0X4pT_<D
z^~B&2?kD$Z?YyVUD<7~}nGoBEw*zKwXDHrp0x9qUoZqzh`XaZ2Z*yp9sP)iyF3mhY
zy8A}3?HhZ&T0ZmUubEvF#!kd-z73(rQ?h~UoqAT<fv0`c09nMj3f)%0X;TjEichs3
z_$cPyB5cX$Z94QihSFs{|4h&vio0e~##deTvDu!(ek@R#iQC!FP#7orjwc=i_b)z2
zjBhDcMZ<F&9&ga^L^M{X?FB%}X4jQ_nwcNF2m(42*8$fJT4#_v+0@0omg`R={1kJ+
zquSwq&LMBhM4&*P25&<O!WZmE$0ajZW3cpCGByV}ad>!iQf)ubNBsxdMNv^zEobNY
zObUSDRfzdj2eVbie`@>|#~&J!PG;v4FCA5Er{&Vc4Zr$Y%gqg{z;a1R!N)jN`?uc#
zo7r<uErZEK)7hX8IOVuX!f+hjiMj1<_!44lq;W5`KkMhUB<u0$ABHFczJ>4h?0~m=
zjWwOv(H~W3#O|uC)?ehg0_fE#^gjv0()2NybvLdx1LYKQB5%t}{uYx-*i&_OKKWFD
zZxZ9@FqnnA!b%V0fO!C3!(pWFLbEiP^v2aj9|orY3@)?{pvdmdVkG_pf+#Ca^o#X9
z(>8}5oOt6%HNp{#m8QRgnA$;0MRbkqS=m0(mSE}!>bB1O-@Ro>CS;I2Z2NJuJ4n*W
zVy*cw<l&-~$rG^tIuo=YhM#Y7C@mGfd2QS3@RH)Kpy5cYr&}czTP+<hWggb52sDM0
z*Ee~!=AUQYj(X7i0cKQ60A#D(Cbj`%;^W3&MC1C<?jy)cx8{W-%5poV-`smz8IVB|
zf50fxY3e42j1r$)_?&u<#)e1OX7t2!TlCjE-o>}5z@Px7Lk_m0Hrp>Xi!hgPs3_w0
z_HC!FbUQFqZhn`b0L+wDo|m35FX;l}^gibMg7JIA?T6`>`#t78&B2|Q&bbs*#V8so
zmu4djSU`8=-pa6?);2C+F2lGD*SLtv87zGWJU<!WY3PpRKOQ0NR2*X|G^Kpt^80~z
z@$^x|OOKgD8TIt$B9gc$mCFtgn_b4ocBLH^ma3-V=Cd=gkr<?Q_4BPOTQ@9mg&poi
zHWrSNMa$9da)$#FTlNe{b`%ttDDJ)&jq@Z|T5$K?m3gSiS8T)r@`0T@cPXHIK!*!i
zA$k4y&PFV})<LqE%o0#^QXvcZx+@9VhfJXgzsQlSgqx)gZ2DT26s8&LmFl9R&YvJ$
zTsMz_ooP><ZA3hYruWj}&_`8O)m2+b<+b^UJ3&ZR(R%IAl~G~F|6qv>&C##m$$=w4
zp`piV%-Q?@y#P8bMaBS)0ojN1Dvl8C5GGxQ=20%1PK_<`5F6zOR5UJoXL$}9<P4*e
zm2+}er+FC{ly4fM2If1ISC4*$1_6LY2rz6}?|Rp3)I7JdZT^w9&XZVZxyTlXBMKXV
zZv;1_*`w6Ii;=yf=K1#NfaT372?id5C+u;w&t&KNYiBhJlhZ$;mx)UE5$uejib(Lx
zSOMm3!#7cAn!z@ulfC)Fy#WYE=QDd|^1wk<0~Dkhj#HI@@V5{6a9`_~i&jT&?w94V
zgSwBQfa71;yJ%z2<#u`bu~y&pBhGG%N|Tuys_y+HL1o-z?!w114cS3T^S<$~wfg$n
zY*VnH;BO|Im#J8H0vrgQ7fR}H?sTo#*wnK@H=R8}F#%tuH7!6l?d+s=9k9bDnNrfu
z)IwdLW(96oB*sFm`S=WQc6o(6vK~h!CXhb_OdtZ$GIt{I50!suD^QosWEENhPF<vs
z=ul{6eyBetsHU>BClsoTR0H@Jlq)4iXks8KZ+tLxJ5^nGsxHCAB^&Bhr1D5`UN{->
zx+0<a-5nVMx7-5sw3)7bS}cd(RV-9z67@N!O)gKcYBe)WF(oCkO<eAtKDWChA{*-=
zpNFC<-n?RD`o;DOY2Z?@Kf=5F61yzi?{FkQZC6YQX@;_@)T#Ef*H)*M*U*Ax7N75z
z>S`>w7TVuG2BfA_us<}cdf|@O{1OQtK#aC=)LT~PR<Tk%_&cWKf-S(n+fYHMhW!j=
zreOD1*1N8ZN&~Blz*1W&%w53@ujD#`o|O0A%*y#tNZr(QXZBt~>Z>A7G-+Uk;+W9a
zl{2Iq1^t$I+r9n{cG*1muZDo=%sTwaLq>xZXO5Zq=9|vkIU*w_(6Oj3;@3~Bq_kjo
z%GEtzS$5tK5zPRX5-%nO6YWis<;I!JOa5XfBTuxE-f3Y}S+6Uj1ec}-UJLhoRP~L@
z9U(NX|DwEvT6o-FTqnox0_c-qfbMmHsJI@|z@UV2@X`&b{t~pyIsh;+YJIh7)5c+F
z*B?nJ(|(;R0LG}&hl+doj3m+nfaRg*WInc&-zZKN+c^IPrM6Qw$D2ikYBNz0O^LZS
zH=EV9+;rT$fRLJNA!6xDL6;VwvOW-Gmw_ww0q3U3IR0FVfoXJ*6@4O>*W_@;Y1;I9
zm|~-`^y*dts_h+}!}OotXIq_xwxG^-leN!-$)@!<y)b)G5sCWIwu60!MY#2Plbg8&
zljA5`X5%?az2*F?R0$~$q+7B-`*aO!2cyJHX<Dx7QV&AIwnN`^07<Ve0u7~C0ia6e
zR7Id^tG2wXX;d0b19Xspg)t9{iq1{#t{@qiwQMr`H<-BdJR}AH%o{+1Cg)Q&%iP|c
zi%d6dqumckhi3=VMb0~JpB5Ic05os&Gd<vHL3M<QtO#+)2ek9IS24;dU*M&+zrQL-
zEnVGaCVyi3V|T{v;V@^}4%>%%&!u4g-1u%d|5R&o$$FxfM3L92vS&M2k2?1iZTFC*
zlZ|9VviElIGy(1xCQfS}E0$f@<>&5K+;DtXyi1<vC)B)5A>L1H@<-Vm28)M0<S_y9
z<)c9}j^YAl&xu=pPW;Mwf}(|uX392Zi+@|Dco5OoHwdz6oDqOBeM349Nff$)EaSvK
zc*LKtVdXz>8$7dC5`AB=%#LV6+?%@my)cEhmJB1=zpYVQQIxUwk2OeSI5$r|gIDun
zRc7Ql5fSk_Tul>zB%7)DxCiA$$;N8r9v-&aW~?%9w_z%42!50G;Z3Ri{iqJ~nk@aB
z@sKgCgg~q(-5NdK_a8#7)jdXWv99%!IflBduCl~JR*r<@%sljPH#p-;ZyLam3>U!`
zOys+m%J;h1u)U))qVzg|``gn}zob7<Ue|ZwRDKAz@^S+GOeG1}QL{2t)Q#GX@Sg{r
ze@>;a^*wfNHEg6h^F#z1yIZ{l#|a@2QZmIvo#nKnnV4+d0gB|`rCXOI!zTx@7BB?E
zk)C<*F2Djwa#DMr%1t2tDIvu6ZZ6(iqPozZmy0V273#CBWC3XS+OQlLuPYc@wPMHf
zC*4d%IVn+O2~?k89lH1IiAJ4VUn2GGTHEVYhYJ~G#FMx*Tx4<#@vY5mp7o2<HOd>a
z<@4T|U1=Fer!e5Y@nR71Qp8SfJY=DpvP)f`3giDGNs8ypPn<v!+H?SDfmv~*nc9Gu
zKGq)#944qV$O&}^oo3WxP4-P1E-NN*Jd;7hzPCB9LGy;64;LD-7oMg1n?esH0|0jz
zbwZxm5gNdyMqqMe;M<Z~fN<c;9jds&v!z&lfPg$@Bf;hA;~4nLt^Caq@VX+-XC=OX
zb5(}O@nh6Adp@){%Q%U7bFe<_yjkn^FG{GVa85<4dfmWX<tIVHR^(V6OFac!+A!hI
zKl=@L5z>9}jm@Vs^KSW5D5}mss0aB8wbQfj8-%EOn^PF5177V#AeYeH3wI#}Bnf(`
zWXxV@kr`1)+JlYc%LdXCEr3)diy4h6(J=JWUisH7r##*dgM5Za)?k=@eGnxx_%%-S
z&2s6E&n9x9axuqcBq5*OQk9{|gI1OaDR9>es-ZybqflC0tg#^$224(zX=rL5h$+_v
z0OZl;-zKk`ofAn)g()qRfxT`)h8M%k#qfD}JjNlT6l8K%?eGF1hXojb3rFZ%G~{V6
zQ3|=9y<)b0-`uW$_Y~++v1##C#B%fjVfE3wN~{Q)%$)Ez2k$UQ9uIoV6jCBKk3|$Q
z4Ol_r+J0QTbd^0WuV8Y^#0mfq0SN+jERVmi2f&=P1Lw>tkp++fr*;AD)hG4La~CT%
zYyNq_AW-GZ`*^KBGV3My{bUsaBvZWWV?bHQe;WHSiqf2`nMDAvBs7Q=5CjA(Jp{bp
z2U0XcUK(pmsdIdJh6>VxC;1DzAfA+ah3=13I&hY>%crvm(stT@z!M`G9-GKd!(LWW
zQnM50BLCW>))R4Y=vm4<3A~s?>@)Z@fMj`tAhc8{2k2%1YCTZ<a)@waDrnfrxB0(I
zT5ZPv-i1xk^JoD4KgJ)xl};wGmGVaQX|WOLOq+a;bjZX{(NZb7sP^oIZ>0QwqP`{;
z<YH{ML+{ud|2(3Y;3)p_ek5;hy)WW(-rRxgYXyT4?Drk_zm<O@LdO9qJ-jbVa9J70
zt@R6bd2U%m24lAqB#+*P1^Iu>2R!KiXh6|_vATr4Dm;Jkta&wRF$r#DpE2UV_*wum
z&-65N{-7LZl;*dPjLQSyUqT?(Uq?(ZOP&Qa(;3w9uotHKQ?(6WRJn5-%_Eb4fy)uM
zuWqf&U&sn@YwL;pFds?RLXnL5UHVo-h#_#8nfk7+Rj6C+g|4ii4ArZpoTv;mAb^BL
zjZOnok&x)>E&=D4gcM@I)~t5WX~aq%&%Z=WB56vTU183MTjGp=w}0_6*;)?E2M|c`
zgnv~TZ)tD3Wd!`(D$UU|QA9Qn0P*KbJ|BGYKO2u1ufrOyKeaaCe|o_B=jaabF|Wdx
zMbrH+t&s+<Hx7go@Z~P(KuDooa7O-|H_eJHI9&zS)z>zF3<M(FXiUA~HhYd+oPun_
zV)gbR^T2mvO3ls9et(9(x_!Znp5H1n_<Y`;^l{xQ`vn*uBO3M_jdj=(ZNzM4`drX4
z4_SD4&j}Z6Q<g&f#><%Yg5?eHiWvFOgR)K3YZX<$w<Z8+`tCc;xCFAZ%K0(GsOSyY
z26I3$^3Yg@Rc~)H$CDWDHr-~IcwK|t<P~Y&53UXW+KV}%4u|q-Ggpf2{Y8V}c`&;A
zzo1~eX`hzt71qlkg=gmHq`$jG(3eR241m{LF!I}+Jok7!v3VK!3iL4xDIB<5cLY1s
z^IZeBgv(V)IrH+5;$jb$k*5P-auowf1bQ8?JlMV3d4?hW?0ZAgA5r&w%4#`9Zf&Q^
zuy*#)E^i5M(InLk0RJCU`CrxNb~ty{kKd=SEG&HQHuzg}JUxgIz=Bu<Qnaok=6>he
zasl>P*EXX<ce*bE{5ritmekut0s(_l1Q;SwvU|mo@LLk#HT<EJpm2-iZ(0$i+t<@`
zE141~+2KtTN@%{mVqKB}fC6|<{N<X%#CQD6AfA5}@&Ep)63GU-Gka;uwBv!@0s8#?
zlRXLfS^FU%8TB3Ds+wVbyOT>{7*v863^yS7SRpX-AG0!}lHzyN%Ig6z-_<vbU)-qK
z%L3B|kpOdEvibVU;;WQU1p=<~t5DSaq^G%d>)9jgr+j?_(Xal6Ai&ABq@>4AE>DJ`
z3=oCO*oyDM*OZhTl2`P}B6;V&!4#ZIj|acfQy3ccR<mwA0hj&kI4ovrc%wTU#$PBt
z0qd;nPv_S?Q)CZDf4AVepY<5@9|#S3K=6!sRq^$XIaK5#^|4JS+@qA_ueP)M%VyQ9
zbu<<#S)fkT*to_M6OkSci~S~AGqTB^K#+FvL!-yiFd!|QrT-1+C(<@|wZ@G>3u{pl
zypMEp#!ta=5GD1octXS+jAzIE1HgLfjOP{A7+SQ49>1T>&t$vuO2)W+&qm0<`e2Rp
zkuqjmeA%d=E(Vv&lrt>(%~~A=>(;sAB9s0suduZZYEdb7!)%;O@b}LqweT0s&Gkok
zt0p`bZEAM<+|B}hYnIiT?tIEO&NetAu;;!002^y}KRsV{*7+lyL=FX!L-+%9e!oMZ
z|5Sb8DfsR^M?s9g6WC$;)O-l>$_LtibuhhWAZBc=0X&O?*@Z?}V6UP1Rf?0X4U<AU
zisMMt)Qf=I!N6Rq)xU;<<kP256PRT08ErBt?}}mv<R#3+cq1}wzJDF3r-Du5B1iv+
zTr6#H9{y`Rne6>bjuYeV2^ZC^6)bf}#k=Q|yOHN|<oy=2$fXfnWbTiUY&`KUOodqP
zgXl#$zQXa|*y5|mkymCJ`xyp!G{_o~1`-)7wNQe&BNbH33G9FWxbT0t#tLd=Z{2gd
zF8OQtSBY^k<`Ct_v69}>Mf=x-ftgUQ?2ZoKf_k;p#<_)sCIZ^{PRNO%B`pNu2XgYa
zV4)aZQ0Q5d`a8Xve#4ljMV!SPygg*ukYUseckA+gLOwU_uFa4+tpbj>6YS);YXKKK
zUR-wZ4@(|3K0JUAh9O{ys?d<Kb@l4?`-%F7hB?PhP9E<;%2sw65U_%Z$g-&{$JDD9
zk8j?hzIhW8QGBIB*VWA_qw;-l$iqcW->N`hi8Me1>|Kr0uHiNvdei>CVS=So(KBfd
zLuEH##9|J+h%x|oxKH}Sdx<2uvLm7lfqZQv4$bdiNhl_Wz?HT=QpM~u(F$~9Q0DUy
zNIMQX1y(E9x<bQekZs8UqcKmR7CpvhXHmz1S4g8{V*bWxca&c)PfQq4au!?xW?BLe
zh8JJh`yyHpzewhUlOx}H3sT%O5}+5g3s8QGoP9?Tot2dpV!YUyMuwYe&o=mJ@>5=L
zkk7rl^X|w`f3?j{_yoQGEiIOEDC{r8w^<X0w-AK4l2KjxctM@?DSAzF1nr+txzv)S
zf)6y~E3atqR-+OW>Yc-4obC&p*Y*dGz}%^Z-#IqIwlZ!1Mi7fZsx0SGY^6qzNF{S#
zzKu@o8XCPQn3ezi4RZnSawmItuE(kt2fq0pY5&=A*WGX;h%11|qZtv%?}+Tzx@6}g
z{ZGc(;>-a+@}b;+iTWE@vda|CI#u*^jGMkYXzj1gPFaXoGvbKliI<H0NFYr)R@9jo
zYM)bBSf~?pqL^SS^~fR45X7x_66kaH24gnic0Jw!<F#~*zPYu;<^CiY+(EVBzG{g3
z{zR+PrrGw@o_y)*9P}C3aVt!Z!S`GGYAwg?;qva^a;%dKvr;CpNyHgd{(e;X)gBU(
zFCH0BmLvE(nZ6>_*qRbwYb1U*7t0{mkS#5pF~r)Zg^(}<TSkY3c}L{H+}|PSLq;rA
z8|17mJ1H-qu@-~2+}C{uT$>Jun>m@=2(Y9-SQ7FUA)#>ZXHXy&S?_=;@V^+t=o)xO
zWsFU<Q+O{Tn+A<mrsk`~pF~BD_D2Of<ee6~tp4f~K3KxY5fJ}jlAD7>_}dmu+C~Q5
z{kNwiD}(z&(ex?rPeZEo3%9-}x6W6Hj%|l^M85$?Nb7`z1hikMs<M!#xaR-k>8qon
z>b}2W9F?IvrH7X8M!LJDL%I}@W>C7jySt<WfuUO^q`Q$81eAL3`24=_TKwUH>pkc0
z-k-hqITrq-uKiT%T%8gJYl2X;H<{gT`7vw4MQF10jvg4hV^h{D<dey|`v>E_vxi&3
zg}?9&**98Sz~~d#I!o4fsvu7s#CI=Lsou02N89nsfUqXScn4A)WkJyIsqkBt+<3mp
zdbu#M#neS!C#lVALU45aU`5jFvvoOyl!eP8O<yci)+o2^v~l`nIc8R*fwgI12`plx
zBO?YeS$Y0Ckz>(M-9$qs)oV3b*#@N$N=c8rJTs=222M2kHPuWld8<>UJHmOHf>K}J
zLkJRx9c><{@0INt_nV)`!+Jrh8{#{)_}%r0Z6cf;m^Tq@Y-pG?L}D}O;~X$%`&{}O
zS3MKy>OnD@f}$$vhKwjmHJEGVy+?3KDr>vV?)mdj$qv>}d#MGrIo$Tkzf`(cY1c1I
zhHvHWZl~XzbjK?h(bb#%5N}$ESu*+|u?Nj34Kl{aDnYL>y|yf#IWD$c*^5DoR^=*T
z$Hh)TDn<EQP`;Qr(@Z_`H&uH`=7n|W^}uDwngJ+87LWr?dKj6{y{7X^SE(bGy76z{
z)?6-uo8h!b5!wQkqB@4Yf)a8FGLvjpD}gjn%w8+{`bJx1Mk&C#!FK_VBwSCUpnbPi
zQ)Egkr44~px`JZ};evsu7+@O|hYa|v-pu|=oG*h9-&rIpYPsJ-&{~veQzc6n*8fQN
zeOSI|Qa$!jSW94jijB%|TQWwW$pjsg1W96hd2SF$?#t^+o3!>?WqH+h;p~Qo<{r8~
zJ2C*tKitHi_H2bFPHCA5e3$!TyN+blP8B4LVuretN3W^YBGhB%8upK~z)o<fVOs}H
zcv;o;3E{f4)W|;|X0Lx1_(Vs?fgS13C=yrREFAUOU+ft=eP{J;YZ)--U-_Wc4e&gd
zT3w`_X6(ug!#F}(YDsVs8PY_xejqJHE+uh)Hax=WdRBx2KJh&jz_C()0%4RhQ#!V1
zvK&1vy<<GEyN-IeZ(_1rDnJIL?i{i%JD#ywr7Ul5Aldw~dZyK7t%or4-O|jlGg^Ki
zE>+Me1lauJ`n2j(?;Fm@6X??|3wdA<P;7Z3WI1!CG^(W}Bm_(JC8(ML?tOG>aSUL6
zZg@)M*YaVA=hk^aBoEZ8!7pYdUo@;jzF!vLBdalx#tL8Hl?Z8tn3blim2W(2M=juZ
zh6~gHr+&MjRj{O%n~-D0>Wp(?bGXOa4if|c4uTCtjO<uC9Z5z?nw*jQoF6aOHIwo_
z0SO|_0Aot-kY-P5g}%TfQp*;YoSuu>J{DzWK*p_4LaH_XC7YZBv&;I=y09T<f3)ha
zf$E23XJ>x`CnYz&5OH^XHyX1L|Gx*0Y)sQ#|5^b4e~LHOmbg_)KM1^teRlM8Yx1M>
z4?mwptooLok-7uy8|Q1%<1viW63Y)x3NY{{wwL9Bv73FpzAPxzxhYM9pBJDFR1S$&
zDJRbe&CMateM;f9BmYE%$Zv`cFkjD6(zV`fh^h{#m#OBAG9~LA=?_YSD)3NBSG99e
z=l9-gF_6mAupn25VKmy80XMY<U7|F(tcfj&JXiP@$x@Tzjf5YOJ8euYU-pmG$e{L8
zR%SNl?(quszV_KMCeuqPP$l-6RiXK9G~1$^Kf6W=R!YRyx%VD39@-OXWDN+o@5?hL
z`?caCB`k+2(Vk4zFOEte6FOKzNv<B<6#!O;Xh#ej2)J@@NR|0dQ9|M+{6KA!R;xT{
zLv>7g7}1MAsD*`Zg+6O*u>v0y1Lj+>eN8$&&)<?H`!b|b8Mah3+Br5aPlbwXgeS0>
z<<hl)U827~aC7f&g{oXYt^NWbJMj{Zp!Sw_FZY4^`IMJzyiG5oSf^e<7}elO5uyBX
z*=2r1qlD{Ql-aadRzK;G?I3<FCn|Q$T3%M5Hh8~u->_|4GFY4TyG}DKJM#JTMYQK=
z+DZV&F;CfE0~yzGl0+o9-rrNTp<;jHfw^7cCoM9rYc%}LkjNwsu(k+jZLkXd7SM(r
zlxX-9RZ~Wy6f5Kn!#i<klJaK+VX2-XADOnQFjnsGHR&toj7v+E6-?({f<@A7Z!RqJ
z61%3g(bl6dxSLPyt8~z!&f{VA;MMYM#%exPr5L2#XA{abbguzP9hO9jc*{RrsH2`U
zs{Bn$OY5Q`Kbk2DETU$1yx82_#`w1>lIl#jUn5ETpCl;Y!o_OEM(C?mK~OV1WFxfA
zD_gwRnRLiFkemAlY9L$-G?jLWutgjr%9Y^5HDfndyHdloUo4AoDDe?UUwOL+-A7i8
zCacMmdEB3h0L#L)B0@WbFuwow5ZB#((A2yg+u>&-A^J!I2t#mhOrc^?tv19}x=(wg
z0T}I;LgG)LNRoB*EBLgj*U<9phTN$}#t@(%RnRb)qjy**L2270@_rxL+uM6@l>F%r
zK;ZQyU=b>W62%bQ`VUBWfi?N^WKgQ-L6|^>-X|5d^R_&un(GB-nlxL2i=B?n51&8U
zTAT<eKv9;MGnGo*Fh5}eytwbtfq^b4SCQw1@03I1RZ?U7DPYj7EiKKUR9rz5%~jH=
zt$8hgkv?gSM!Uj+$C$?2wqZRNM`QqJGuLW5sHj>|UFDi0m_xtX`X2UUfym-1h=hd1
zn~4XnOMwyJN6IS!UmhSV3v#wE-~3P5AfUpD)bRc_E87M(h`b^a7S|udw4I9PA6DzV
zraPKL8>shbs*bP+!s5Zg!5lz{hZi}@?yi+(zJI)OskR0*#v*@%l9~h@adTb8O=S{Q
z`@BL6^%9jnP<`Xti<{nX^vb+h26vW@MR>}B&4E6DOFo+ea0N4Tu(Gbl5>5AvjEqNj
zE()mq!<0gx=ii@;&4&WQ$J2bkdc0uZ5YJD9{Q1Q>vo8rlj*gCY8b%F(;3A(7`Dp2b
zz1;A=yaY3dx?)E2B_P$B;Iph->Qco)@fG>X0$9pWG|3i`x^89SiE=ab5+IBK#hd71
zM_o^%<kG|!eJWViK($^aTDbA)Fb2NN+T(XkT`OS<%PRJY>?toN6(&r~v`y&FewTV{
zhOBZX(UK1S<PdS{`%`a;Yyk{sD<eV3A5-)Lqz}?9O4%%eRM2!Xb8QwHt%V(Xr9S~m
zM2H6;rlqaNN_!|Z1HXK}x3@>BXKdWbAxT06Y^Gc-Kj$ws7vd~QBw6B}D@Hjz4LS%^
z1!*LtY|~G&7VU<!Fq_|H^@eyrlc2y<T0T4>l4KweVLD!ehy|?;&i5l<Ii+>{CKtT#
zz#ynw|NJyLK=c(HkCxO#{LWa-y;S*?7{{S>#<nI4K+7?(5a%Sv8!R(vDSFaDXg{!S
z65<qqaXag;X<D7?mG43{lM0EKZRfKswD=I_A_A#2lJaMw!|Ro2AA6p*2<5v0DrOGh
zXi%81E#Pp$H7hLOzs=ELQAXOkU&|~au1vPF^(5MCm)dZ)v_;qu36KKzcmKa}GKySx
zChaHta1@1g3mshSRM@YGP$J5EIr9x)o%zC_Y0aT#HF|wE%TOxxpdV`~kRrO=_}F8C
zLUU!=&{gbD*&)EIG;z!8>P%Tm&gKhEBaI!MDio(L)_d=2W~T~xfqivAfV2BOIa^lh
zj<2>t{iA1xt)%$j(+rR{Wu)6C<utnQq5$EzksafddA1iNK&UuyK7VvvbYCX?sa17t
zZ*^q<CR-QvyMNn;#^WO&N!h3n8y678F$eNigsN)up##Oko(!>Mntb;{^RV%gMe|Ns
z#vkU);EUNkI_BUWVtEN45Snf$l?r;ckf5sG!819Y=#Sw8P%1KHsB5s*bawb^bTqmg
z7MN4?TTaA&VgV*@YHq?S23~-tfLLaQgf*KKj<;_8y*zkV&o#+`4OpCD6e^AUcaj7K
zh%5*KTBgX!SEhuTaU(-bl$|IB)N?hE6U`Fy^44f0eoE^7zP;y%u*Pp9!afNJ&`plR
zQN}{iJ0Mvn0gXB&7CXF{RG;Z8U~_|j`%_Z88na}_71mH#^%d897W!D5<tza@SK!^e
z-Kw4;6JF+8-;!Evh$ka0Q;i)6vj)B+2#6ny+ajvApS*GaH1nrb;JW0XK)w4Eoj*dm
z-~nKckY91V8)pu;1oB<^4GnIBlHcjDKK??O8QT19d8H9*+e-3&(~`QXGI+2`HUs>4
z(tGz(9;A!w^#l^S_u5Wf`gMW&egKX~Nnu5MyN@dK@q8#END)z_s=fuu5ylx_hU}k*
z`4dlaylhtl+*$()qxX|(X}^brq<$I|-bI_k)tR59tw~^nwnJ6mr(3^o1-=V-ynP|@
zk{+1^C4KtN0xGpVKtgWyJ?n$)klI|2W{UFf1*Wq%cz_(eLNSw`noGF3%b|MvG9_rO
z=Fz}Deh}DzG{bip_aMxJDvx2Tm3RqlkigslVRQUbfMmV6aPOYL2^{p!ct8U{S2}uV
zOC<P!nF55#?0JwY75A2_a?(*6^~iT{KG|PPVTtebkaA^-5$V2hiRU#O*I~@pS;-BZ
z4;ftCa|$DQg$h7I*cWg4Mzx!rHqj3-nlN*#7My2*7B7Q2A~#%>FC1c{3y;u<rcXV%
z+PeI2J>O5|<#ch7k^<fzkHaYm_5|QWBbQcabB~9Kv-1hEQ|dWj1dt$%Do8`k4k?)N
zJ^z_QeO08r-*gjNP*bzdZlp~)NCCHbEh`Xm;L&*44EVBA!Z*-`yT^5TxRHGaRmPMd
z&7_hJ`5M9~C_Up;_U(P%OM)hvv$JfRnyw2(c1jHH`s-QCS3f7u+260eF_&RW{3K4$
zbY)h5=OtiMu+xxok7g6B^glidZdNwQk|a7t)-)ui6DS{4j9-cnV>r24Xduu5*f7}j
z-Ou;)YvS~cgW65zhWjeELrlq9K|_51YyrG$S()brw8Sft9ud>yx+cQ;pv1YbcRnMy
zY}K!l)6(?9E0StBcN+=1*8;1?aQAZ&QWOk@IT&N%6Q!)N6}N$9NZK1zxpAw<?SXfy
zfRo84>uuL3jtqNH{63$H*0j7DF(?Gnst7{kMS|G*zohxm5*gmOccYo?xRK0e*fOfQ
zXfQ#JXkp+!qI147JYBI7SJRoV{=FFM4%rv7Y6$jY=ON+NK872{oI8x_J?XYl8!gL>
z1hnCcJQ9CzOEDQgP=R&$cntjJEcrw2DgAR?^#r6uG#95_iqBbkN$3*+15XsLE2g@C
z{P<x<DPG?D!R;SwY7Z#?EZJ;ZTuK^WL8U(NKWWdSC4JjW9|VOkrq~jnS=$d?cf3>p
zS3C0u*(o_UEj>L3Jb1A@Tp66Y@dJC)V@UtL9|yy7(wqbmE@QUYA0Y;{9H035RhA<A
zoV#IWq3judJVnE|_Qli@;3h?D_f^{O6<TFqnPp?vnyP?HT$ZYc$t-D*an+-cuJm-F
z5JPh**81pBuqGAkIAJ=z3?8ErOy{ci?rlNrcJK2Lor8Q1$1NM-{jaKe!bd!+O9<jn
zJwaX$GfGZ45H4r>?CSn!<bAGTsq$MB`MDGU`W#W;;KWZ0qxJq?8bz8cOUE{TM+0K`
zLc0|gfiz8Gk+jHlc(y3Bib46D&@k0Gvrr7xoFh^{A^M<x6siVSblkz*JT7ZRT?^Kk
z%8;lde%gSc50Z^auQ-U^$MbSxIYhsC{a=*v37pDqY7(~=EZ%qMlJncKoB!zj1evR%
zu}xzhsVG2h0YGVr?bf8ZoT$8e?G93J$++J{2Lh*q+mGAX36hh#e?V%Xqdyix&J=T`
zhW)-qyCYl<-tK+x=q6Friw#Ffd5=OHDv2=4aB5InavV3seUJ0=9o4pn@9%$-zdel1
zS~YI=Ami)UT+}S13~k-%S!Y&?nIeWrQ|FIAUEg?8JE(q}ZOE-C-qGmwdPT@-E4I$~
zTm_K;+2hy(2+TMpub<FfS)4+62y`72IoimJN#qfSDAzX~RlAKOgJy(^4KD1%z=w~@
z#4U=2``$hwIhn=>;pDLskep>r;*JeJOH0*X?d|Ta#%%xUklt2RK`_V+7tZ<Tm%9R7
z)}x(I+E(0U^-IC`^9U5f@}5uNbld%f+BB{+4|xIK%S?w_Z{kln!NBO}t4V>iKS3W)
z96dsq@+sv+;+B2}BjQYX2_#Tk=wo7m!?hZ*PM23+_Ah@*f_wL4PV45RQX+ZE9OvNY
zR4DYMifc)4!THLC8{tv`w9nnJD(<G2KZ)S8O3@*bTM4OnEry}ZCARoxrvDI*BL)t~
z`TFS0%*@BWksFM*bKBMWi?<f$uh+#LJK!g$`%kRdY?me?uYgS$(S9e(<!|3zp&x34
z@FUY&scfPc@FABP;JPLt$wr?P^oCCgn5f;VlE`M8RD#f|Rfjewq@{>jtF(=28y=DF
zc1stHiaqlpprMBH`E<y4CSRhji@d^ji&DoDtmc2Qh|4kLk3Y$ul(K>#?Cr3!MBSAC
zB5h~K^HQqGT8&-#@_S#9c^`4G+NY6^;B2b(cfAmQuQ+&g9mSQ&_vmymln$G(KhN;(
z`z=0&10mYmSsa@((cekjiU%R!Z3dVID%Ozi%Ur7m{?)@XzH$CUbTaIfcfN_}J8?7Z
zC>(F+mSzo#=ny7R{Ug#<OqT1G=7`-a;*yMasMcM84C2$mic2lEQ6LH*>=;OO_4HUc
zL(pV*g;Ya;0ciAjij;lf>W|7imz$_B6~^1TF7Up%Bum$ZbL~))DoR(*NF%&jDh|ir
zt@kHbYtGZLjpI;^&x&vkckan}c3jtB7#A(6kYto9F8!I?j|<40wG6PC_mJwPhmh1c
zoujScV~@j?5NO+b<2`rs5APFx{!*1KTtSWaI8)Fmx=Nn4#!1=VGt$~$AjD3tz@sL7
zOmMihpn6*@j`$||5IAs|Sb!OQRoRs8Hs4K+qYM2GZ5I>GVKE;NEo}pue{i{N7;Yep
zjiMc1G48E1ZyM*i$|7ngEfLYxCp3IKSxE5V%@H-s<8o;CT&UJ5d1GETBG}hgev%o%
zuXtE87@d^`-|;1P83yLfJwuG}yK_ILt^9p@00S71ma0XI#X;H6>>BwVZ4&EUOuGXS
z5%6vM#mOass~!PwKh8tTvu&$!&QTmDL4z>Lz?JENb4Zd=BYX5^k%)jJ8priNgt|Ui
z7pqQ#%)UVcuDGsgNLL1OW_iCqcQ999$EN4PbO2B}E|pLL&I_71jnUm8t^y_uzw(BE
z5R?tP!c)fGfvTFhZ|V%xL@?RuMODR)%9~LlAF+q=GQ3b7@Q7`=RlH%sMHX>)k3k(m
zPq5hH`X>%45*+w{Q6OO$Z41*|sgnf29co%TZD&hkVKmw&W<3@cB<;F%>7~irJi%?<
zN|5Y<n97!yh*0XaW6CZdI7iTWXWx>XUDk%qPUnwwp0>gNz$3T@h*J1x%>s#PIoisZ
zQXax?#G@iFm*0VoQ%k3GFZtSf+7#SlX5@h13n0I+#8CLc=KzGf^U5%-#6|S<T|~5V
zM`+?e|6+G%XGe~CukjQD(}EZv*ntF*SD<>=T6zprB5pn;|72=^juQ{l0{an5ei~)6
z@%+1>@mQ0yYbX2)^mudm6YS6kfTb`-aLY_Bj*Ox<c?W5WG^-`@f2>Uh&(@g+7N(Du
zM<TY~PXoK((Xe1@l*Mr7pnzr7?-^Rg=pxMY|NoId2NkH>Vo+3OFo%*->s%6Q63F})
zI6<Y6J{6c~Y8qna{ynIV4kl$(hX`sBpa%C~%fmTAVqS&^>HK8m$JKiufAMXq3|~fB
zzu*+3R<D)@eZVPqx>4njN&bgsLxHmelxwbI$vD>~#q)gJo{0DZ#3@#R?_Cg-I7v%9
zX@lH`!Wt1}5CF-ghi$F=ZHhrLTL&68-*AN^-Ah0KivPlaOYzQ`x%WB!Vrtbp567Ve
z0he)mAoxy&%z#21TIw>tJnwosUeK3ww%3Jq?|;p!jtm)=f|uQ1e%nqUGd@rSU_bKM
zCv?Aiau$J#4f&Zg5%6MNymBW1nfRe>7l&B?iz<><&;uOfS$6Ia#?MOyz(qU_0>;t5
z!g6AC=W!>VIm6kARPcTSe1pp61Ggu99%;t@#FzM_idCC$N%D1VMrBP+XFu<rdp2&+
z!~LyI*-U&4@ZKY;?*rM2-e>DQ8J@&xle>DR{yHy<obCS$?!uL+h*7`h@D#1HCn)_e
zsJsPIvC8S3=ze5Sy3j(Ibm2y<4_)1ma6PL2)@IKFg~FTGXGAseFm<p!Sqo}On8kk#
z-KK|Wd{#7yUY8*9pXNn~M6nE#7GqUAmau@h_+wksdOZNjz^cF>de+&E3Ct4Si6nDP
z(`b=8cG{${rX3soYz%ByOO!A+&cXE$?O#(%M9=x5AfXS+;&-VP-_QT3Et;wp=_>%7
zFJJMjTKQl2PbC&qe^sSW^7LIlQD%E@wL~axL}=2QaJ%VG{P{#MF2lO;W%NfDygD}L
ziJA_FeuA>L#&7(}Lj%qAn;Kjq2nJ%O!qa-0i#ULPtKq`SjqsLHvZpWFUgd}Z{;V3v
z8&Br+owUHd@|uQJA296^Rx$&Q!PJUhPJPvoO80zoBNM1Eq&DJ1l`&O5bCR`7A|0N)
z7`r)kYK^tX9hOYeK%i=7z=3p!oSU|f+pn4DXrw-e6J!6UGo>Vpc68HdX_b+iy9w57
zmDpK0sCgxlFQQ-hfr6qg?Ftm8(fajB<u*deO$RD^EILrWXa-anm)fQMQzI%&WFs?O
z3#&~5^Tu=_1i%HgZTwusdzYST^97pDn1pz!5Enjkp$1GT-9aKK4K!F33}JRVgl02?
zTXZRE3($2t&^!ZqJ_rW%RXu#G6gYF8pgEeW=8_YJ#&ZDqygy#;OIH~dyuhcJNmC-S
zNVKs5AC3AxR-XOR-&fh#eBY2pwDo2jVV2ejK%sBY`I0aI_=oZ!C7mw%g2pzNxxiUb
zHC|$5y!Tymyl(ZuU_)rZ0faBgRAugCd%?XNmThZ{c#+5nV_??};ZAvj+uqz;6dmOq
zhrE?qeQESC;H!8*hb=6eXSGiH=S8OGS#G2Vxdpt@cn`+hj}hL6T0ZACHy?^a*C|{;
zz@os<Fkj3s$Xt82i`4=;@_gw4)`AF-s0b0=aV~K>CqKB3vfg!)3U7JF!FlJ5iu%j*
zPjHHDG$83Cp--Nn?=x45WqGW)eDco(0DpuJ$$(`zmjC4$WusLc6Fo`D&P_$;BTR&4
z7=`yd!MJb=j^?i?r?9b0EFft%2b*0dx_&R`yI0N?+)mWz05zamGgmn*Qzsc&H?bLC
z$8t3wum@yLh_=%oX=U@m@?UP!QX1_agyi9eU=GC}^86(0P@!p+$4eE2kn7^4bK9t5
z7m=>U-Dkd4yW-{JV|&hUnA_5fDs&8JnKT{jezIhqQijzg=nl-$c@LF#OSwxZr+j5%
zvO28JSS+27$DoSNf)jr6O1ozVw6}8dJG_VSH`|Tze$eCd4RN{prKmS+VT+54HTpyM
z6h_|yKgWT@5q4O@9_+62sAkW~>hJ@THstqr^v<#jZJP|86!eT~#xz1P9V6}989^|c
zZcR^y3uQ`sWW%t^`sx%l!}FN4=kjdsBJr+_cfG|2A%R&O?O!aRd!tZNS=89EBf7Kw
zTbubq*errENI<Yl?8`fhZq?@P#@Ql}3Rq~bPzfsR{ew64Kws1I;Jz<vJ8vkz^8@T{
zMt~sX={`q%`Z{b(SZ<v`+m{#Bbg~WrsrYc)zR51dX2?n^fBf;)>_Qm2;NH4eJAH-S
zmvUAyqas;GBD9005PB`J6BW=8h24KOdck1ARw$%QvRu>E^}u(e<s2l|9Zs4v!(%;)
z&&{I$+0vVVWD4lifbm1j3|I3aN&kp)hi2pPMUULnkkM4imbqu_VH5v$+zp;2c=Q}C
zI}Y&sJ7ze4(|H`Q4;196U{<TlP?9U9{K^=eXw2RH&;c2uzaE{xKU#>9bxt+)g1eTC
zYmTcQbvIB*NFiQfFg2pvcC{bxUrch$E_xjftIZBE+mIlP#XQ1i-M0X!P1H(&#llbs
z2GGcXhK(pf7DIvCbe<n1=@r7n=ajMIGzSL&YJ9+fyXkhBC2FQ{v;GL3T%_LEGo2i5
z%LY5rxE88-lJiD6*?cO(JQ&9T0n-w%C&H}HBovTbR!*<8uu{Ezn7KsEK277?fCPHZ
z@70m5)ItAtp}784Lus{_F+h&?v+C*0XUpd=ru742%^i?t$sYAaeETq4R;z^x@7vWP
z9(d$>-i1+h8oolBGrKHhO2p{ff%f@NCMS2buhsumi3s&7elyu+e<uw(hlq%sX5Xaf
ze+2X$6_gPaD|v_>`ZHu!&h4LRu?DrJH+lgjjkt~pxZj5<CyYy=s{!Fa^*_Je;hWdq
zq_KI;M;zj*^{;RarJ_Jqo~~3(EC>y=%xwv(=ZXm3Kjd~?mr5eU<!})&u>Go|6)uzE
zG^7*%LAb7>!W$0~W;|Xj_2q%3&8TDBV|-*J!y(Nr;mD$+OAjhKBZ*kd6R+*O_)kZI
zyH`Snd-<)$x37z4V6wETx7k7`;{zARCNA0alvB}b0vlms)eL9w=M3)$<wGS^S9mL$
z>Km>5Cum83QnnZke}iI2!OI*T@T$_Sf!8MD?5`YPkKk*u{pS-<fEI*&iXwuu2oD^g
zkE8&9lj&e&pNJ|*UpTivsQj2GCW4epB271ml_|cI_sVecc<Hsi`=rXL-5LwB?g_PM
zCx}f9NI>^#Wezeg?jX{M2yuhTBF$m4ao}NU+}89PmTRGn5cRn&`_>5I$i#x(Vq=YZ
zOAvI<7Yo|t9$VwV!}QO5<oR8+BHlZ~je1RX?D%MCw26;=M~^0a-=>9b^;@gkVaU_G
znQRaz$p&52Jg%!$T1tvrZ1I!C?xQ&^<0n76rtXWUl*);vpBR$?J^0>nQ2?2-AV8Q?
z;Kx=4i66Dmklk&M%()H2ZHT)Q(D`^6H<*i?J0&Bul#bKr<_oD-wTJEJ=sdti1k<{<
zyGAk&69Uc(jhi)z6`9!#e<XhZHFy#qgc~TXOGh}E@B$f1mK*i%M!9J*#YpM1gC(W#
z(`m-*L}Ap*|Ll0UoY~#}z`HD2fte=X%^x}y%N#tN#ZBw)2rQ;}a}<)8-HU@c&DyOt
z<~m&k+TPE613t=BSC~$gr+U?pZG)LMZ99;yU6rjz8)#p`PJ;*K^sDexFE(=22C(bF
zZ7p)!8TWR&-W)-xNP~70P=ez_$egbs)WI|W59Q(Xh%OtGh^;O)C$7^<gQLCyf6X}^
zE_YSX3EuFxZ{n-|1gT8(wizXSq2n4|OD_|zsx183oW#`yAmyt0)z#HFbNE8$inmqT
zam^}zE%$`Y=UX>=A|l%hOj6`wDu~*+CN?95F(<_|^DRem9oHV}Ih=Ok%r)AP@jkh8
z|I^;)0JD_$NVVm&(flORZU&$;#Y|9)_nYiXzLdm_r#2a=S^cr%$4R^vV=Brk{I3b2
zx(UsiG-k2HpEqCAJ?mCx3gDwb)`47}_@&nu__ut0_sI@AM-=+z&y3m##LNj`EITeS
zkF7dzuc@UKtQ3zdfky*?Er9}_3R2N9g+sH-tD`?|mTwEG3>g7M&wm<Z#vxENpjRPI
zld)q?_T(liriGk0rlN7pb%r{JP8n&sRxHug`kbYfz?6nS=oQlRH*rzVBYkndkeoAy
z4_J<4Su)?vo1cjx+4E{F0(gsh5E6wvSG;R_$>AcUPB=pXaj*H-x9bVv5?>k*nHsz+
zySS)IRuW^``d1kjGgh0a4JVz`XtDe}Dwzw8(eYQYBL<Px!_s=;E_~dR92&Y6GrmXn
z8WlX2WWcxeK&;*qUKfN$dbpsfezW#&f2bWpMF5|0OYnFW643Ak@p<VO`meK15?i8h
z+?6_5|0Rf@{*)8|w7iot*nyY4LQw|V3BJ5pHoz9N8{1#)ytT9=i?D#7Ub7@2g+BN4
zk%1&d8PmhM{&bGvR=d}Y^I6j2*Ddw}cUKmXWex=?b;6OB-eQSZaVzxbKW8DvlLAme
zDr6-Td?KAY)v+_IhW>Q0EU81QOM=83?Fc;C6!us{My;TN93cK+cNmyxiL;J2t&r~f
z>69(BP@7WUVjk6k=7NAOW@xd`tRZCD0^>%h`Z;*RXDV?zU;iby^@&Kb)4wwKk*k|B
zYHPlH`SNbMx#tRDFsRUwqyPRw&JC|im2u$`62DphNIo)SV+?G`7owaaq*F0@!NS5q
zc0{9VY;0_q=EQ$w(Nr_yd{gpmAN=>~SeVME!jI0tz~F_kOqcT~W6ng3xDR-Ave=Q&
z(XbZqZES3~8-ytsQ~%XRCBgLBU2T5q4{%S^5PWWY<tMk+<ESs)gW+p7aoGIGzzF50
zaE7)ahn!!^Ez6g(%YE)EdQyvd-RNP)Yc#bdBjhmnPs*&<(0U<7Kv<}dU2xkhw+nYx
zqq8-D1q77M$k_hUw#pEln2}9)tn6{1wf}oe4?=a&5myCrd>eZxc$~2Ownk;wE)@tU
z6+rX!YATHp!#}E|2^li^F7I;+?S8fA4h{~6Fmsjzu!0s7#h?W_veEk+)@oz(9GL=E
zCwxO=+|76%Z)4ma1}TUDT|{ZUuxFZ-KDri8=lSQ|+f5G|XBzZuBOxp0FFu8-hnb|G
zMs)ZCuCvRdE2=VJ1v&JzQT2rFjxL1-=KJrg&_84zGt>tRr5Q3V+XCmBBMfX1Ay`1s
z361y;s76bG*l^$}adEB<-C0T}cy7K{G%5N(SPet;g85&RFb{lUAcVFmFI;3i0+x0e
z0I=4uRxX@7ZH~BI8dvQdqS6;1B4(AgA3`<y<VMMZgnmxgji2AnYo&zOi#j7LuQ?X7
zQJ@#*?F{9DrSZ$En@(eBYT?X`Sx0WNp;F5~0d>KJYmbVtL&-v8&XfdVe^?(`n^NWX
z_vx(%CPd$L7Je>nQeU)u75(^rdsSNM=)1suq2BBwbj$DU!+=7I86wv<K)F2Nlh&`G
z47iA{Uu29%e8LwAB%&zx{$T?KUuxaKe_zXm1Mm7Hv%kWWv@6}b8G2YMeb`6=_?F+`
zzt^XEAz3&K1}+PtQS&xk_N~`I3&FB;D;C4C<;<CZ>ffTeeK1Fix51_6A4S(#?<~K{
zig`N_a2}jL`Qd0>&edU)_}wZ+PF|jPuU)t9t<;O>`c6q#z&_+9JU}K2eAz~ZZLbHr
zzFb6e+2O$#f93KV?)SEg-K_Y7LMJaJ7A8+v6f}ZrF;=r|ZTEv(wRmW?KeexW7F-Uq
z?E>8%R#-uQ0Tx(bGY*UL%T{#Am^x)|)gtwDTJE33uj4WSAc2Gh2+)>eH?1q)1gUlW
zEShV~W*}6bS1~)9Z!kW-+6eW(khKPCQr^xtrD_1xRI2Lg)+8}U@btU<KEEX@=BzAe
zQ!AxklbLFPpB8G~!@!MYCCBKf?~`E}(AWfwQ`eaaw68#p?ntz3xce4?8KjaFQ3G$n
zJtIcuUQquX&l&PoIC{~u`==W!xv8aB?f1VT%(Yg74tXOl+B1sk-#_Ow*Up&fIXVbW
z$r4|^NO)wWI(z$Pf>6Hz0=z~8f<EyWQ9f19f{BbS@X#%wqyI0NufX<trbTc7grXi5
zJf3Y6R$=#(<Ot`1B88;I6iWT(1ILG#__&y1-q{Y+YMC@a(hw^f8`Ie0(yNHsv;qp*
zer8Wa20#D3WOjx-Gwr?s)tiF2eejvtkF-f814+<NJPC`R_w%h?g+9eM_r?qk(XU$^
zHGcU?&pzY>jZnycP|!yy=T*gij4%xf?mB6Slh0Cr);*aUyqkUhxvm%Wscf3KzkkcG
z!wiDr?8YD`$vN~bl(M^pjpv+4^8i1?p71*cbal;Ov?~6+J0lY_E4LcrV#KwTk#PB~
zlFYtzI2%PHV?^Hm(Ac(F4hXM=B*;A4VxC+fRByD9oPj$#S1$Eyp(?PG*C=Lr#-P48
zy#;UCmtBo(jnvV@!C?CD?gg)>a|!e<6sI_7QZ2DcsYrHzB}=0&qeM8TL0+oa*#YPH
zkT)1(YQG$QWF*AubAusWZS89Psx)Q%IvBo6Bn+E=OEj<MCgeU=F+~NaL>h__kC)-c
z+yp`S-|76$cFRn!qqm|)8AeJ4GgoU^=GbC%2Y0^WrHfb&bM18+9%;<AvZUFzIc~j-
zV)C9_uC9CBURfs*gm}SVYS(CFJL7c}1iD#_y??>&oy?JhKLMGE&w{O;K0Zy<xg#EM
zt$LY&I3QVyux19pwt#>dcORJ7A`(9Cu)Q_=hZ=dsBH@mbiV!soAX{$N@W13cXh+ls
zPuo%AQ0Lp+iZp4hGFQUwTmug#PpszcaN)lrvw2id)?U#1JihiyNO<~;hJ9BPA*?`?
zBm_V2;ecypk1WsDpX87vv{Wrq<BW);xvF46V7uqwDfy3ZnG?qESe<UU{^iRWwxppA
zmCh-);SB8EsiNieIEkWQ>dVKvsfG-h;P5mWd3Y2!^!I1^`FfVQZkB33jo^EW?H44a
zyaZ2)JP?UE70mK6aPvc_3DAb+7;I5Mv?0q@wujRm#t5_u!I?k=1Oy%HhX!SLlUM-p
zeZU+a_CeAmMukYR9;faFt;J*&v=p?^f&kn)%&{7}__Vb5PhT=$n-P57u&<$$aWJ7l
z)Cgbx*cv!Jf0ki!wALNiqU=-g&xc6UtBcr=hz>6sFf|S~HHS2tivF66IG%3V%11W7
zV7ge>$*EQH$lfsH7yfDAT3YjNra<K@y2|Yrox*|wl4-|ZGM^H080-GzSw%7d&=Qpa
z$cEyo!z!y@?7y4@1k6DECg<+K*1|TXaS-tOdFW}-tOexb|6;q_OVj_egI``DDOhP?
zAGk5gMp>@-=ER~6EsUz<MQ@#0a+H+)n*J=<S=;}M2sPw^qRMEH%aN>Zq&zEgfEsb?
zq))Y+IFVcetD=u(pl>c~suRcJ_wTOV7;o$n|8tXOk{ThuxP_0F8<Z-ae|knp{#Qvy
zS3Y~r<7I}1R{`_+F!9j#l;pd!Xx%^FT!ZHJve+p#Parp@iM;8l?PQXE0=0B;R^s9v
z>Yp7fMrh3ZanHa(FtzdLuhIgAzu}3vw$%UcEP%Udh~}I-=2{k}L<=2q9N@cj)OZ+(
zA0&{$qcQD85_udzN`p)U0fU14h*l72CoC8oZ{_vena_x&;Ib_-AzBl!H4%d#e)*;n
z<Bc(Y1e0jDt8uU#*i8BpIdkY@i4xJOt9pYac`W31KG5uu?Y`Qvq24@@Wdb-`Z1h-2
z*QW8Ge*>-;vOPV`k>t+EyrEAaTxE?~2T(!9l_=icL6*jPJ(azq1zMos75`=>ZfvcN
z)jq{mVB>ON$Bj%uz2NP=J48E@#cg7iZZon75y>f`Y`Y6C;|hBcdw<f*Su+s6;aR$C
zjcKvV1niM0C@l*TnqK)+k2%=$`>W^V<p2%|^vMD+C{!JY-aeAm`B@ApmN&_OQ1K)Z
zH?-ur-2M8+%i>!c=1%a-{AA89RD!Li*d;;PEF)P{AC+j3qOGp5E8i;?M)2sQvA!;~
z0+sNP=f|r<$tX(I1#qN#9z5;(L2OV&EQYI|3vbgRa_N<zWoITY2Tt4nT+XHxP5fo!
zy3tledarm2G`>2PHVqcDU7lKRQWL%hU_(FiDrqU<96`H|xA(%T?OLOAYrBuq6<);X
z0C;5u+IwLh`;}$aLGGTOGXzpH>Ltr4h!2znsDMl{>q|~rTACd_@#g&(SI{(e6L4wB
z?Ue1;Qbbsr{}OrGOH^lJotPM4tu??}{RlE)J;OKZ5>h%|pXpd=Y5OLia>9LI2ih-!
zb1=U+3Ih-~V>G5`QX#st1`k{44lXj#8Ih<|oAXwf_%>K7=WS{v<sHR~Bt_vC>VMxG
zu9olR{-@;JVZ``}*06Ib-G}p{R1x~9*<g24LtO<sYD#TYlvLgnxNm~F?G$v5p46jQ
zy3e&RMyBR^V)tpGBA&@yD7j*s2)jriDipa4!P;IXJ%v9DnjJzFe@$wPMA|J<^(=wD
zFA2~jgzEFzJ&;3Y?;a$4V`5=(h&FlsGtpGOCU+A7!NFxgH>~R_;$(lOcz~*Ee&FMS
z0Wlrq({Ex66YP4-+A0MVL`#x`F{6b+Z#y?((Mb%hQp%nExDz)qy6!Ng!ZwO)fPL)D
zFcCywHovs=jaW2m>v%pav|jB-QNn<g?i~4hD$h*@LYiLEf3J8qluMX}Kbl=&x1#ih
zFq<y9eBPqcl4wjP@}gafK8;X>Da~H+hiazS_Ny~7L)G66I;Uy2;T!s81J1pgI*>c3
z2Vxy5OC#XRSW&_=t!x$V)}}TI75^k47LW(fAM}++SD*#DF*6BG&g?Ap_xWOd_P@VL
z7=ws^)T2+<sPjw80!>6fF%23fs;{SKqnc2>taa(+9UeauT<l_9Rx()bTS6>o{HH=`
zsaDT3z-5*1*nK0@$q~)3aGv+Cz3^a{$v)0wb$*=2lf2g6SaLqszB^^%qbd4-HWPjg
zb{4UFAXJ%K)659NnJUgGY?68t`ZmJCT&kne%4frYxz5sgi0`vIN@86ve@9K<+sF2<
zA5A3l-|A~ci%1p+Zdvz0I}pct>c3K&qwkTQK#}E8jJO;lX#+If8s8iyYG*cJAeQn9
zfd!HAs+kM5+yVeY=M>AU)@VGU#juSJo?|jo0fX*p{v5a;HPxg>zmpJ;D8vxRKbxP~
zCq;;O@L{{d%|SXim<ASHPYo2~I1~GVr>xV6U$CHYGCxV|I_(ee$~JaucOp8R;fn5k
zAD^YA4M1?rkCl%mTgx%Dtgo9Jzkdw?yQ=zgUdcT!)JY^foeyB^>$)O6ayZ0?D7107
zF1yzK$zsjs7<gLouvF%C%_;I6qRhxF{(kBbR8nWD%FJpME)e$)+d;9`nZn?T^)F3H
z3k^RP&lX7eu%of9+z&P^WIe;@y&JF8TX2TPWgl0y@I4b(<%(<)n?=)Zc@S6o#(w$*
zVC!hlN8&PGGpo9&Lm=}?`TnwczU0NW{_l<}@n8GYWQg@S;BcGZo-rbGSDX>_2gC{*
znqMr1q2<qc@s8Aci>d>oV)P_F?qhG}q3hVlccFLl)Ozj+gFzK^cjw2w(bl8Pg|D9L
zlsIl_y%f!0M|`{SS%EL1Qb=~=wiKu}$SKkpQZ>j^O^L?a;tYBp(FfIQMOpyFxyO}U
zEYR1l>Fw$A^sRad^6Oz7Awr?*!-W7dblFxB)TIB6LKeym?=fSRa+LWjN36fu)%hQb
z@Q518>k982j6J&N8IYR5zc)8*4Ul>s4Uqim7nKF5l*HN7rXdx=TRKvDRQXFEG`&YH
z_Xx>@*WLF@1()i8A%uy7RmJwxu83RUKLZI(U4jUHtLz6HtNoN4K|##6cy2!1Mpq8>
z<In9E@05`&$k4Z?CwKrqu3e$WfI$Nhr{&<v5p_D~M|pd|Qpcwu1xT3;xF}C+6aJEY
zwF9W&2rhj8n>b%m8jv;2*=8j;`eqzj<}u7PsR5Z2IW_k;=_Y<YzJSo*$G@b1HhvWY
zna!dtRsQOWeg+D{yOx<ygPLIlHCPULei~}z(B-cG)}~6#i~Zq{Yg7cO9T6BL%xnIG
zk(%gS_x2-8^h@1w<^20jc%8Ng&wbC!f9c80Sf`ZMEP1-HWQc9o=`LJU<|Iyi_#>d(
zZn|?bl&4{0IoSF*GooMa;DaJ%O`~AAI>(<yG|aMUzN6-UrxhkT1!Nkq*I-rg%V(`d
zL%%z`^>mhns`KpzY*M=wFrie$LCtLy*Rf`qFOojaleuo1nWR_u*<3t2f8n?AX~($f
zLRJVSQx!TW_LweJv9!pr?4;?UttJ~aN+-(WBS?h3hfpolcVxJ38-t>=!CzjP!C}b8
z?@w1nC;X_MxVV7HsTGed*rMy_n`H!6x#N{}KZ=dKQwipd%^Pr;h&zYP{Q26Jw1g%L
z5~kdXd`uCJ?4Qxo(_>ezrgun?_z9+0%_bi7^x$u)>d<VZ@l(1eeZ(s)?>}9n(r79!
zdeS|eHEs8;1z;6)9X|+C#Db~kk7^x_bS?14_&!EUS?l-K#X&blSd4htqRFLaC}9`o
z;iAV)%!``Qmu;$?d597`Mi$wjtAgx8(1UWSK0oO-M@%}9!!9Oe7R0P*MLhnXuXnyB
zvVRV=jKjd0C@*F%yv!9|E(s{<J0V&%v9pjcUy2W@bXHl+{qkf=MDN6a7w)@VtcSIE
zn*o;~P5^U*Mc}2F4x0TOz#FlEon`Z}yy^4@6+kAyP*Y)-02>z`*4K)fn%|1^8e9E>
z5%ILofJ23L&YYH7ApFPH+VK@c*<n_Fve7SRzbgM#SczU_P4H?bUOL8ZF1iyFa!g9|
zp;jGae1;rNC5&^M4^c0QDj4=5m=CP(<qZy)eSOt5AS^;I`Vl~i<0D}w*Z0FHAt9ta
zD~d3Ai^tzUloi1Lb~`&i#j~b`H$eN(mVCb!-=r%R`{j^(e?`Wj@p*=l$=avvM_Rme
zZ9^}hacII)W5=|;_Be*yLe`p!_Dqg|F}N3lIoR9*9gw-emc=qe!?zoXk<gLLX1HC^
z_Riaj2L{t~ly&<IK|@m0f80_4sxO^-DR2No^DZn@wBf?U#m+{OP4^+j4e3&65s)0E
zMW#kUe<4uMorr!SMI-ZM^;u$y?yGr0$#6Uga3XuKGNFEp;{qnssD=<J0S_0XRjLdz
z7bSSljKRPteU^}y7a0C|WpgJ2DusvKGD1X~zfOZ&A0q+y&g5K4lH0hh`EJZl7-k<r
z&-450@T!^pc#q0*@lBvl5r93=@y)$}wnwm}{p{DPt@oND`6aiPhdL)=sSOz;HM_Q%
zKyBNUBRT@-V$^W<dU0>$lz_tK*Ce{7%decD=<$vn*VNy_S^C=&tQE(9o9IqVT5i^i
zAGQQi)S-?6VF^Cfce+D~f+7^MYz>|S%wDK|uX0jCxCt=Y29S;gvfld_M|bhv7$F;~
z)7vrrdqmwZ3Ca13=dU;0(V4*Axj+t;=0fkV(K)QF%C)vz?j=CjPL5+eOp@YXc^~lj
z`N}|T?H6!yh_Cuz-R%b0?@P|=Pdz~61WV3kl5HGJMuvm<PH6Hk^UTE`KZYvo=a%tN
z@LxM)ty@O7)}OT*$_Q`g)RG*`{he$X8&;WF5hMXxGbGLK%IQ|{Di|Ed?*^OlMBWY4
z6&|uv=+xeYhdSLNWw@sS6);kJMWJksn_;CCORlBa^Qr5^DQa;JgW!*YAohWnN%Vx$
z`cneVNmtW`<vhab&5!RIe9jJ@jvQC{cfnFg_OZvHh{_+B&h`H6Jy@sIu1<HExteb>
z_z&n|NP1dY6d^u<X~uz1U{T90E3l!?0#$QhfXDgE>{e;F-~cm1z(Cj>c#w0k=MlkM
zX8~lV#=f|y6OTX?5R*|Iay<zeCNS=e1seZar3vj+>7uu~<D_S8Kk@|{8?U_A&+G2-
zsXo#!ZD=#^2pC<?)z~Z7|Be3=&64zWUCk+~XHhn_d2l=DTV^#Q-YXUtdXuHUne$~V
z3ELmmc4TI!3lNQKxb;AHmT{=s^@?2`(fgV(sSToKo%r<kd1{oo`YONeNzAvdO?BC;
z`0<X<O!&QhdVaH$Sl<1VSrjVt-J@7RqZRJ59CRW!FQ|Lfr0cxGFLhx&J!P1`la`v-
z@W~LQsEM`L?eSh^EdJ&*Mo{xoYKsBx?IFRCSk;b)sN!v3byCyc_1gIq14Y2aqX#_^
zrYt>ZZ|go!IV?l#Q*@`^`lj!w8aME7P#-`h*h(K2Q}W%mj_q_T%wGWH`-Khf+M8oO
zR@$LfE8)X#BZG*vE|~EXBnj2#yjdr;r+>&&yJT?RjFIlu_G?f9gZjd-PQ{!uZ@3q!
z{_Je;7Jov~VC*axZ<*t;s6z#V<h1qlPIZM0!C_u`Ll5g*Uv#i|E&ROdd$ef1WP{-$
zwYc!EU5;p)zbRETM;-xRVaQL~fpMa#^8;=y!R>fY;rAy^{6b;XTk{hy=rY+61dfk|
z-xSha(@c)MFxFk@=?9WXwk&mRG4<`QJ(mrX$;pH#gPeiB2_8cEtisiHfp?AW3zQ8e
z0jH{Sy7rk5rE6u~-ih5yM+vlhVDj(gpQ8W_%(KIZWzIa)af>i|f1af+YtD@x7=Ep!
z+b@p@&8$r^JL}Uk)ZMl5KoRLU`&Imr6X>&^t0@aC7UcnkPCMLur}*X(DTg;`E}QX0
z=K5(>v6sNWAJw9NL(5b_x?oqFw*D&qL&KnTBE&byf0O{uBEwn+I-x>&l<S#*oAvT(
zV<AG3R911%D2k4#H;w{dP(DBuLZ^(5<v_FK8?HBEHcXJM8gbk}`vg~FP#7ikpL-1R
zWCN;V)9wJl-@kwFG6vjtei4WB{h|Bo+5A-A?gL^zIC!_Np{@cJwA-=5l!e=3?&Ng*
z9(&L01LP|$Jt`WVg897OgnT2U>R&m61MKtWYQO!n`52}-*nqX41Cu3#^YUy{BdV)@
zu_@)s=Njcjz4<#@xm|m-AK#x*37-B{A8rdUv5jisM{bZ2MfZLrrx;s=Re14RH2hf&
z2|7D$01hy;$6&2oyux|#$a~|?$<xV#3-R4@D0oA>awV|bp7><(*xdYK=(CC4*y-*b
zK=5?ayC3r8YqPNZH6oqvLX3&WhJ7ybxmF-QDE5mL+2*hLxhC>9_i7I7+Z^BN=DJ}G
z{0t3(B5P)Lit~ZVp0&(<;bRTa*=u0pV%<m3o*E62KuNfP+RW#qLa^N=uPRX8fI(U+
z;7-A6{RRtKS;Nd&|DU#kwE6Z3-pngeg=>IZ=5JL#V9DFJQI4=*OERD2d0p+uHSRpZ
zd%)@umRp?ras@6_vWHCXtk|I|A~9<-O7T|2HJN3pMeJDD+HiDTeGo8u$lf0yyJIfn
z@nSk|h>w3^L>2yULioRfG7$NEH-(^$&B*14z|F7|n*@j9?irNl;&S+sdHlw{$_A{m
zrhaH6c6-BW%L^#=C!S$LC&b`@?_%HNuerMgyue|T#IFV1zq=)wetw9iY~HTk<jX4F
zQtK3mIl3nZbXzPrdsr?1!eSRwhTi7W&DSmTC(!VbV(6qb8$pwPYS+nl@krXzn8Zw{
z-M$h(Iz>3j4SA<mayi@VzcNt=B%S~K=xQU`KYG3Qz&rbcia1~+a3JfU+XgsjZU2UW
zp)?#o{gNpT>pmcmJ%VG2)q^8ZSByU?=xjB#IK$!CGriV-Uj##FOnD+*tm&&Vm-1XG
z^Kk+Xv)^MyZziIQf4IF6@gw;Y;g$GqQ-*5yovLtCALVR}-f_KB7O)(29U8PbNia$o
zW?{b>C^*7HV4A-9XIXm@NEL^rk)BZdhi;YKb8&7#Nq>%6qjDwA=KRj0Wxcv=q~on)
zAb8AWN}}a$KT0oa!n-x4s0c?m86$evk$MIrUF@a%PiS@F#z7@DD9Qr<Zr)W-@BTGL
zP*B4XBohM_W!3q3d3jGE%rT9?e-n|W;^w}P#|jx!NBDADm{n&KgKGB8{rZ!{fl$j=
z7m~jnN34XYThS8Vl%_-ccF9Kkn!UtRfsiB{?<?&e*y)$$<>l7}TUDa%>Moe>m@(RG
zV`Hw<706gzcN1gi#2sGXdeyEd53Pf&kMrXGhxp#_^7fP2JMPy7K48HXF*2@zbze}&
zZ@9d#r;Rmw`(f)OPxani|9RRn!_jQok6M@B6oUjX6v`2x?QITSXu!kpuN5J{Q(#Cl
zkX|pUv`K7n|I^U0l<hqqv#1vK0KiO+0ENvcgMhgrCy8%KNAKcGcmA%cvN{F>tvtI3
z@=JhBs9;g3t%zXrUpYz@N59j@gU&DGUyW5>f)A8OZE#ArAl*6>#U!fc@+T+nngO=;
zc;&T*jsA@2Na2^m!&-QMCdtj+^Sf^R2zI%Rm4HCBhBPXTA9IxKP~2QB;jQ!B(Cfj}
zuJsPmX%TTG^02{{K}}_}Tp3g-6%Eh?K|xi>R>fofIK$1(eu`doG|-5L8gde)!=`26
z;qiNp>!3szp}XO->#^M81`(e_h-6sw%>RV4_Ba&|aXvJu&6>#?V6sv9$Z41=0xe+t
zl&cFaJW|v8<I;VQBIaDRks`Ag!rA~04w;h?@6)R7QjH%TdArxvg9Lv2$Yu8Y*+Qbu
zqPoBmuAy+i^6y6%;dd(MJSG8I_$QKpe!-HD{2jT7nya6hM9P7;$(yi$?H`Qb`2AiD
z44DITMCm|2SpxgE_JcG_lu;d!NE%DeGSs&q;W~T`?s|RpNGboU8s5=j{lSbTuS_`u
zx3a40_E|*mV@M9}m%tDFWzDJuTW*~{877@YO3Y$a<l%2Y`r<B)%jFW!5|9L@A%gRA
zCcD9u&;6voXq>=I+kplDRbEhc%v*>F2g=RC^lI#FCisGr?#hgn9N#pGUwDWcDjTVS
z=m7=Wv5}+20a^qMX%|wvyCshfq;fVtJ8o4M8ykykHv})akBrVnMhSef>4objAR4Z&
zHnz^rg4;T-)!SYzwfN?!Ojg<Pt&e??nHVM}KtzrG^xw<W@|Nd$x0x`&AfOnOds3(g
zAk+wyW(+TgOCH!B9SYS5hg5_Fc7LPwnCJSMab<s>fQXWrplr17z^6%WS0)rQa(}So
zN6l~*4JdB4xMD-aUgpN#p2oMQ6EHv-k{Q<L?%yP4HL_cs((y;8DnTQo*tB>3e$WNG
zvydVi$NkAySXRb2p4*Ki)N1tkNjl-c@7LM1eXSrR&@^YK(8`&FA>4eJ;V#UFU{Icf
zuB^>*x)@QJ%djk3+yramWP4`m1oihH(a{?J8VDUh#0AnB2i}N5V;aw<m%xk(6|xOv
zeelqI*>P#RTF(bzI)k<$?nm?I@a@+TE1-y^r2Kd_^T-tyZK97zvl~*D_@BbT!PKy@
z2W?83tNwudzdQ3!{~u#-0abO^^bG@oQc8y)(%sU11nKVX?(RHZl(dr4pmYe*9Y<Ok
z>F!SH`u@lJxt{O6?)!dUSj)vausnOu-ZS%?*)y|ezfv9}wokOp+dJF-W&M6saO+P2
z^)8iz`S9{NyY7NT4KdfAJRM`P<ETGbv#YO>#`&cfl~SUs1jq%h8)KF~EB_`)gLj3B
z;OhC_xW-cx+8MnXJ=}uo&Dl!&%j;xulV~Z;z61G`oaa3aBx`3jfHKDrfVIW^Vzfj;
zwD#;~3x9F?Y{YPJ%x)&XRwBm~d;7=V#sV5G3CTCd$1rjWM90htD*}ih!MQ7o3<U?0
zH?SFlTs9qHI8yW6BH0OVzPN`szEDg#h4(t!of_~es+52`L(eZQoqygpIBBelS_F71
z)_Y3XBTq7+$)nxncMZ^S7O7w<;Azhd)acWLKk|8Y4q<6AVjW5!<x@Hzf)0e><HRI^
zJGS8E?64=x9HA)|+;%P<?>)p!X#97=F<+WY=N|Q3;!)dPcOjrr&gGi^b@FtfMAvV3
zL7QpW9N-Tjl8$S8i*2P{q-B&@62CYkkCrW2{dl+n0V=5ZZ(+E)iGik4&=qIWfc0q!
z@E|~rKPID<2dbtNz{_Uj_<}wjBwn=A5<oA6T2C(-Q&ZEwJbLp(;j@7(?0NjK^e>v8
zo}O}REdy0C^XXDCc{XHVV$4vP){Rkr!n${nIZF->&8Qy@)(10olB;E&mW)ZjeMG$Q
z0b`Lf+BY!RWgE^s{qCpVEV--Lyt}GJJew8N9w}Lecv0d>Q*M8rHJ$dQ_tSBIFR)!b
zSlo0QuNd?CmU_5c$~qFJRkc`D4l>0#bciMe4CL~D{O#Z8Zt%!uWgaNe;06O`EfXJ5
zJzqG<C;STP#riK_Aa%>ZT<4Te3N<l$zdHIYpTgOn+F{_(=*2({RQ24zejz<EY9UE`
z`?3e)@cP#GlQpTj?N7v`23F(Fi#4UaR4slO-gzGT-+!+73}E3472Y_eiclt^FE{?I
z<d;j<(@0K$4I#jbF2(=4rIjYKzZneAKpsFFd(YuFmK}}7nxv2oy#MqHOpcNKe*AJL
zL`X(!YB1W9cZ+kF;No{c@UCr%d6(aCp#u+aFeiY2^Mt4pC90n5Im!ULtf~HL#GCRa
z9dDV>Bh*igM)P=q?dC$tXBR*dTP|>orSyfmv;ec7JbST=4dfpIu#jkd3zta#*|PAj
zI~~`cz}~@+FpkYdWSgn*%UB*ycD8MgiprlNg-Qb9{#=4{ULj27G>$^xb@-Zo0_g?q
zHkuE3T9$*d+O<q4=3KX<e{zM~Z!>q^)}^H#uB4+GkC79nO+p0jKX|7rs0<4pO&3c7
zm2f~}$xP<+O~t!-iZ}}oDY5ezEDjo{raJoEP=-M&+u-U7Kj)F^lls^3E-4<*{alal
zD=W~5@xBp2N&ZCPFtfEBjoW0lWAt2JmFnfoBJ27)Bw9dhV*)~uQcERv6ZAIK1Cbzr
zu%Sn^rt&zymvHiwV9|u$7Fm1?hwr#8L%}9+P&M=s=IH4eq~%C!HbVUcoWuYf#I46f
zgQq^6&KMnpdELVrrb@G&1mtKx27zbIvlx^Al(}G*eQrGsX;zND4wIt(0c0xaFMr^r
z)QPhR8M+{tDXxdZe<eW|`?LhxLnBKw?6BI+(`FJ8rscjbm2+N%Q7%+*xPg(_rRAZs
z5QwE}{P}~1n@mP{)y#mxRaSYZqcbVeq^QB{XQ$OHfrdlm26P(Ri379<RbJ3j;Q9{;
z?lnmOVW+zniA*qnR+%uc6m_%NAbeD4uNxycFenp-T&{`Q5z$hz%kP3&V$+L)k=#ZG
z+DC!6j-W@gOT#8%T>`ij#Vsz>!Ljjz`$drOeR=Qmr!TmF(rMdGxB2Zl|1TpYfn@BZ
ztK5|{Wa8^cd&AseN|-zqVXknbZ7Nm3=~zbbU?Ar6l!)!CkRAfOl4d;d(ZVUMk1kvh
zuT2h65kKEW$tu%sxbTo!+Cp8bvglS<>XzI~-_O^$h*w)xgK_xS6FBwm>5A3eI9)El
z@f@gP`U9;_n(s~b`w2V$u1P8T3{q25b5GG7;)jCMJBlHo0jwNwoi{_2;rEa*h09!E
zVCb~~_8SqLlvbzW*xMfo60Q_6uV7QZ_=n!w$U2p*7Digr#XHeft217uaMA3F%IpBM
zy~jAL8SKW9`BdeEY7BSm_w^-XOi%E*n^1|SbY^Wn|50iiZYh@CDi<oHnCg{}h-LWU
zue+pPm0{iQFI-T2RjF^J8;&pVUY&@GQ)FU-Poh)55)C;99Fhh_W>&k*@wM+@D`l4c
zLMjN)h90<DUjin->*c`jKmK$HBJd7_ZAWD7gcjrKpCfQtVk?tOPocVs%I^1xNdEDU
zldjLsI;3>M6GM38#YoCvX4bPX5}YxRB;;YPr+l{l3dMl=#2f{bmC9RR18=rB2?nDS
zgvIDw1*^QL1xnX|yG|4i8wI92?7H4UvTVX!%%53J!iV5yLfK-UA1(9P6EfXwGr_X;
zpzq{-3=0dydVcUqx11g4S$5Us!N^gz<agOYp#PY}^qGA0o%4w8h-J*oX@2hT^9FZ?
zt41cGcR<gdYYgtw#d0mfeYA7Hu)G)g$*cKJQ^{h)bx({oP>BM{u1TPLtK-?U!T9r7
zsZ^0V*eK|w8=wM>@EczJMp`=XOXE8jyh?Mjj|H)bMsn<GyWx3Pw|CB1C4*iR29&Ti
zDfb=Kp6}y1EyLm80azLL4Occc-V4Y>sBcZ8gg_{_D$TW_h6Q>@5^&@2mrCJMnh3>e
zymN_ttNZmBIHJFn%1OZJS{5i0kb|+2*a0a7`fSw8a1WPBW|aD;WXl;QBZ!=~Ta+tH
z^jD9W5nRsPgjX_F746314xib}c}h3zCQ*|oIFbSl8U*1G>NYI%h<xUn5#ao_svQ%?
z@s~4w3fvTr^21guI+R^I-2mAF{#B#5_8ZC#8lz|uK(F1VfW*W)N!_k9eE~}Cu|V&;
z6eva`k2!-ThbP9y8gUTeM+iRBRX<Dk1bPQoV=&W5VuXbEDL@#WrFTwQqEPi}nIl)h
zPcV{c=aZPWVRCl#0<IWp&>z%;!27`7dW7imZZmxi`a07^4*T0c_ax`!dY8tSS2-Fc
zD$-4pHO*b=Lva0Itqek(^mucrFg~lX$9}B-4~A&fi$t`6iE-O+5vm;t-|qyXtO@4I
zoYm~LcSmUei@3P>L~h*AW7Wj6-NUlyAZJ)A>t738Mh6_B794R|FR7m?kS$FEYbYBW
zLRynKtko9Vl|S>%ZvmAnAXB)>8XL|$DY5rmM)50^bk*D2+iO76)KhKKXgA=>4y;Xv
zxWTm#jT%wH#{j86S9>&bJf=I}PmwY002MH5Giyi9#?xzON88;>1J6LFTeRCima6Qp
z)(f^?yyc65ON`uIM5?fU$($gRFW5*8wI07e^*yOSz&1osN~(u<@qIhmos9b~NhRCx
z=rhiN*5arumc4K3S?Gcxc|PD%SUUP`uVh%#a}CP(i4{iryKkfJeKLI2O|R-_1N5E*
zH;G#b5nicVzQ4W}raT_eUD-R?a<5%ajrwCjO`&SN_9D|8x_S$$fZ>QJQdH<?prqE$
zNjJ>54_0mZ_xq9$Sk%G&t1>_8=TVN{h`A%860p-enc2YG_sCO+?i$okUD$e!5giP8
zloS=sq!&}mH1M-dab}N;xBFR*wtOH!cm3mWe}a!u858QEa#H1rFs5$tw;`^3XFXk;
zO-cNEl8s!Mb8d{D8TQplRGNZ{-+NUIig=63Rh0=ht+iQ3z9okt#)+tl+w1l|#-kIX
zDUA}RCce6yCtm4e?Dd9ni4evQKqozr8JzffYKboUDyyY1i}<^ec`edNJ&d3zVpYGE
z(E9v8S1DhS4gDe&a%=D$wR=|i=c<MqR;y_K=<eCuYd}KMNy^4#;zTe<!_z~@b4l7*
zp5;<co1~jHNoTgt3ib!mACMWW>QMzO<PzdU3y}j2!RjfD8+m%JppC2k$CEabJr2!e
z4c^&SN1<cPEw+xPwYEuaSDVP|D()7>l!yg|{EX0(;7w1?{jAonEWtkZ&BpZY2y;g9
zUEbH;l|H=&Tgw|Mq;Zd`Wlr0y@ZwV5rG;txke0MeEj4o3Q$*Aq=Z|M!zO450u!+B0
z0~(3~Fby;jB+VT8%?~tHs>y2)u!a5&L;+WO#EaJx%t2<EjSKL$4zbdD!VczBQq(8u
zs#>eI<9!gxkg`sY3KbUM{-2W<D+j%?%vA$q6s9^z&utQ?+w8kCC8hs?MyA2J#M>4s
z!t-?C&2#8Fr7)6M3YR@)N3G+L3uRd-bAqC4G%5PkBi^_Jy={0T2->jep2O;l>e^6M
z%=3TW)h-gH_ATQ!RJoK^3wMCb|2Fk^fRyYBF6bNHI-dMyCLWr<Gy1+a{e@?9T=1Kv
z3#7gA<csQ(6Q;ta*1Er_t%SI5<O+<uf8UPgjL>Im{0wr5{+pqxBmrBV`%dlASb}Qb
z^mMlZiLd_PY6FnjWLdByhB7(xHFzDK%J)~H>OwwVS_6h5K{w+%qKiV?7RBry^5-V5
z7sP`6Wo~=Z6Q(cTPfNDa!A;^ecSLIBh+{!JQpO{G0|GwHAI4&{Uc82h-&qesRVV-|
zIzU=*e}%o+AuG9n4<rme+L@{lhsVsPGl^dw71AANug}Wu$5SE^l@xE?KuHZ%L=Bmy
z<llM+ISAUE*~46o)7`a6by~~MsH0~fI&%7U_MKz2azp5LZT`T{huh!bgWE>_8%DOF
zw&&--joT>9i;kl~Yw?ZSZpDl(UTvL|WT?kkZ^pmS40Mz87!)Ca0eH-eRol_m#^wf9
zW#FxZk<nempJ^i!AYM3$F?@TfHdb)YT`8M*wutb?(wTSmvkt`B2v=%nps59E$FdPO
zMGP)1zmBt-)>C-<2=8p)k2c&4=`v#t%z8wcy})(!>fY>l-ai0h2Zy&cD$K3!-D)Rf
zH+`RZ#JA;~6l3G@iKoA$)Y^)Qt*-99M@LPmzY$eQ6miw2F`tMWEl?J5hR-L;V|pFg
z+W@RRG-KO#t@=u{Do5t}q_M*G6l1Vf9?haAO;Eq#X0oNLsMiVFNj8$)%<@uqExGE)
zQ2TUBJXVe=Q<%eR?ywQ8v5yq6dX>_c_(fe5F(a3fGT}_v%h{1{@YZ!(#S<M77dz#R
zQ|at*PT-QXSBVb80|Ph8?N{uZpA>Jshc}@N2&^Ie2`@rn<q+rhj1L1TO+R_|$gAsZ
zjSD3y?1}rVj{2dWhVW%vV>C>3*I9YlP3(5h40qxU`)l^GOU*{!H*v-pT^JZ9n>1FH
zaWI`4%l3ge?|!ib5BJ+maOh5j$Q}}o-=)6{`eJ&(<D5LRoQ+I;wJkPfoaJYZR5^O<
znG|--P2HI5LXO6lr9}N>YR?$xpX=7(Fm~shF)6gXI6h}xb-lpXHe5@_voqssG3wGQ
za>5*;@)PLFL<yUE!&x#x#O5uPcR&BRODa$ET^qN>P5d9lFv4i<(H1Rs0*n(L(&E!=
zZsyMZq%_h1V==|^hE%56&#J8)%#$^)?)^MOzzGXc+F%g7N5bPewv0@G1oe88`1kHq
z1zQx>Ha|L(h|DLL@o?o!zH|!qw?$u=_lRtThicP4nNrz9CJ5y&ogrwsV$HqJTjZ{P
zR3G~TO&eN%AZFT+Q>ZD=YK3NLy>qP})F8`dvce2+ZOw*Ef5_?9;>apHDy_nut5D;w
zzfp8H;ceXgJTlfav^ix2Cvnx#rlW30uhlqiG^*I26K64LB0HfbRz;`SR@2b@QNq@x
zfE3jV<HfTt>SbkLSu3^aX>p7ztDK{1i+EUzLV_?xu#vdsGp(;*+1}9b48rQsG<25V
zMxO|*6n7not|_OUO4!4p$N2rGZdqv2fQgFBgaPmF+L)El4@IN4`N2sX;vQ#W;5A)%
z8~C3$?8737ik60FLe*;m$spt26}SLu85Pw@`$_j8stJycp5C48bFsj{u-tS*3^Bhf
z%*?ilGhc@n>)<HK7_wfsGi*G%aS9LdQJ`vAfhhx!1nNmxP`!;<iG5kvnG4bx5&BBA
z>-v(hb>|JT4T)Qbfm~Mc)|IK-wd3gBS55KokKINX@ThQH)jUfIAKDff+J)Ij0#2Iz
zxnyJc>)Vf>2`S65kDa#G(fyu3$<Qkh#-9#1H71IN$Z(<tcX&vgbz)Rh5z5hbbjBUi
z?Qsk7Qh<TNo0kspZnq9R#AO#g5SP7_ew4Go_Ipe8*0$DC_T-9!ukb?$9iOBY=o@l#
z*ZZ6FFTn64Bmt}OA|n<|GRig+UC`DxWEe@fmRT}=4lB~#1sF3`*6u|zue7Z?+~_+$
z*h(wD_v5sm1ShWGeS`17P{h6P!7m3z1QGs-d5iNMv-L`MHnq}41Bm<LYOW~gat#cx
zr`!f|+basFb>e-7ss81jQlq-{jptnyOH~f{h7Va)!g6JM`6QX+Sbh=wOtk*oCVPqf
zLbFt~N|f*7DBXF+Zut^8^ci;O5(b7bzL3>$7umLy7?#=XmGhfZO)d_&B&}0~c+H)*
zA@72Z7!5d>FT_(MO(jB?GC7Rg<M*~%B-gvv>jPZdt1wcP2YTsVS8bxqAn`03sNb4B
zYn(hV`jsHR=Z@J1@nwsi;M~9A75;D%USG+FPTtNq&Lj~0rHfZS<Fzu7_%1lGAV<5j
zE$r8|RR;n<O-f9Aw<hXSqE7pxRm9?21EyA3t@&{0`9!2&$iY957A+Tde^`fWV&PQ~
zmgy#bD2OVQfve5*C6}BO$t*0iY7$5wD!=j;Z=_j<zpf)h5Btr<vb+5v;&}ZgHWTUT
zU-02YSjD|o6hO{;JY^#ojrg^NoK|vUO#pEqb%3CE_bwM=lcq;GwgnPwYINghV@bO0
zhqoOOE}KJd&x{34#iy_wRUxeQz31|x5qUYe!NI|jj4cP3KHa1tG^}Y<R|8n1A_rSs
zQ+F$d@jTxx?TYZwTz}d%$N&+kdo|RbLJ?ghFG^&R63)FSiksGA_{8V%gU3e|LtgNS
zWN*5feflgvVed4_F;@q4P7HQ#k!LC99yX=b@_N==f0sN1tFd$sq%?|IR+1xoPxqq&
zIZwZ2SY(u5Mq3}%xcVqWV<qP*3!bn{eIu-lj95@5i-{kuvlQ4%j;FWP@K16LtDF|a
z_S?um-Xh!1rn*L26bq=77a%bd|A0}tcVOxz5eRrQ@|XqGPHC?Nyj*ZKiK{FLn4YTl
z{e+$AIe0gY=Bp&A7*43DwC(1s3&Mna*gUASvqJxM4jc#)!U~^%A!#Bl<lM##hp9fm
z<8$2}`z52%?&aK3X_=%K&TNU4NleUnjmex9P5u>uA;97H9=#dyO49l>AegJx4%B4q
zv=z!}fE@!#ftyLdl@c3L*kbzNI$cc*B?{%1FpADuF*3$P%a>PsDxZIQY3%T78h7zh
zoq=Rt-erCN9<(1E{#4#NMx(`L<YSo|)2HV=)<G@;=S_<MjzuR)n)~@*+w7(^e`H7P
zl?#Bma<_7RzhsG|;{H`i>se2Qc{Jir>&cPLP^FYK0}aU(fl2fE)OL-)3BxA2Q6@pH
z#)WJyI%*4Pt2=r)GAj}=6;NI8_QlQUzAq>DC`6Om8t4k5)J2kX;mHkJ6h&|2?V#m>
z1V8TsEr-WZ4<YM2xE5Y-<voXj=a+sm%Vx5pGYXr&lN^j)!z|!_JYFEgkd`<(*06<s
z$<2qYR&aMomaJrGc)>peOh57_TfsQO%mYqrQ-j1wV)B{Z2j4|yGV8CL8%T@Uu21G`
zND34hQM?CM6y}Zf^z=y2o}jQ~*J6^Z(=Hg6Ke^$EGQJ~dK$h0V+ystWHTCuN2U<+A
zOBHn)Vq~;6nu)w9U5$i`^)=G_wvL2*vr6qJbqPM{Z*|nGby^3FF!A|49M*xLV2+GU
zWc6O?I|9!qRonyC%%5`KRl0Ql+;lzZ{%(&|(8oKDN%L9LApv7#zI?o}VH|Gnwy7(v
z-XpewF7;fnuF}C~lI0F=aO*kuMx%>Y1PJJ?;?LP^anwSFUDr%gf@1@O(%w#xmr1k^
zJmvAPX%FVsJ^Yn>Ue&c8^*vv_n9X^9QBsz?3uiUmJWWxH42+Gq_&$cyZY*zv`lTFw
z%SXvz+TZ@gR03??haXNf0<f8ZiYqqa=_C^EB#%$cUw{tV>OOE6C8@N{y|*~R=NeQm
z_XkDCC?&Ezh<vM6ReXnCNIzG}SHAg}@Yfy&+17`g4jnXy*Z|4ka*__(CoTG!y*!SE
zp4s?2qejC(Jw#Ni;Gw0(-0}xG!<cf!!1CAp$?@^O<{CAvsJ^lEu;4OP^*YRIMF|dW
z18-3B6+dGe3md>1wt3e=WN6pm!Pdjl!}P7Na2nZ9Io4*~>r`0|NU80R@iV~8OoI{i
z>#f}jTwYd3qbOTagHon8si|Hf4`F<e$S*EtC$7&(kkI|Oz36pe|84|Jw(mkw`fGz-
z^i1Bp(I>;o*H!+W&~xxv&#oa=Uhv-edPGQRR%t`p5k&%CgcCQylbMVD;RB!g1G(}s
zMOiX<2L{ffnSe%y3N%q!pk!CV`klyV>(?!j(l$ZydMq|&?>_ZBH-V~!49=o8GFrj=
zmC>TALPnIJk-{B8+nf9jVM{C8_0z#l%Zw6l;D7j0!OkG1PTnKS25mKNs0-xv-)v*d
zczX7OJ<ArWl3pI%!8<uQ3AV-tQy=J)&0|tDq=u#_6Nl$TgsG5_%mDrFU$5%!m}pHn
zfR`93;AIknIQ>RTJM5DWM=?^kHcbub>Ia|^`HlV*^LYlT9kAN)N<=Q&j0I7(Vu4sh
ztKd*0xYd?KE3dG|hi81WWmy0RDX3~Ys4H}YGGJIvzKtft9wN8lVq4xM0AF@HAG(k%
zzE{34P{gfw`>Lxbqz|2EfalpV!B6!!7OJ|&C&d)&2Ns}X4fREx%@_;TMebq#(!o$Q
zrfDY%e}RaVloZiXQGp{Q1KpVbt)`U;mzJk~A^M#Mhxq656uFD(br2`v2Eqv{wV63B
z1MR;)Q=iPKzCG|pl%Zq1sW8J=qWHBx{Ax?+prJZf>5X$Yf*3wI5rLT94yGU0UjceJ
zht~ry-Pe}~JBG0IgDCN^sb!gC+`=jnLQPTyHRCK}wVh^9E`ycxtaZPCKlj1ezlU~R
zVbskVqiJnt%_T{Vyq>YHNjt*WpYQf>>6fwMj7_=xo)B>Pt_NCFq-7mH4mkHHbAwC5
z=Yyi-(c$h8ha<a>-2?@)c5wY%JR6eeqU2)Wt+5;IYIrAFR!mr(u@{DQL(i;g7rh9W
z%myRB>aUt!$X;Xkjq2ejk|#+eVpEZINhFuae&)J(9ifuD{iay{*Q8huzGI~=u>s%h
ziy6zB>b^@|J2(w$p|>r~aln%ugTOoB5{}M_cFWrZUCm1b#Ujz<Z!AB_jO_$9VceQt
z94>JI&)@a)o2~U3!D&n^wAVBJW*`TH78N3r8fTY>ESY5ClHT9VD$x8EOE%N7j<WX7
zTb!N`8HSI*XC*saOVm$hD?_|*cO1mv#=RHz$il{thZ!L4_nmE1q(@W;INen&Hs?Yn
zp`=AZlVjeDB%S+dBIl^j?fw}Ev82|*H5H(CiF@@#w67&+J&*YqP`Z@`B#^%gVH*%$
zi3{?U-<A?J*pIrbsQs=|LF=D>+JOMMu)PGGJS(LU{9+S?vOnr(30%|iMCYQh<zOPj
zPZiK=C|g8hDw3GJ-5|`h{uZ~8?C}K8D&6&BZ@S#~ZV+McLqlrQ&EWJi`V6T?SnE%q
z_wY;%9w5S0U$ysD9i`Pk1GTffI;$UK1eSuT<XX|S-=5*si?1x+>7K{$=8=RJ{NgoE
z&Z@tas)gRxAh{Ct)`@E&!doLQ<F-k5{s42<U^;p5!nMbjq2?_`g<BlYXPgg^X9g}`
zWy{~Y)T81#N;&>zP&w+?w2n5TN?To|_&W5O8UMN1HubHe@qy*<QD%W5b*Z3G-_M^Z
zc(Lxy&CJXOppOx8Ng;F_0GZx}<M1PGyM5}fDevX+LnV>h+<b|nR68lBB7P}T1i0Sh
zX>{Gk8#&J;8w%t@Tzb-yOsoivq)}J6x2f>Gx-pFhUTTJ~Of-7z12=vbN=i%j8$3>R
z82qsuQ#Z2x>#Jj6&N|SH^chz3<2*bzX!si|#@Zc-xPoB6a6&B6x`?_QH%}~UB8XK<
zX9U^hRIG4>4%>Rt2(8@xz|MoUErevE^Q3HF@bZ@B8pZYAbY3LJGc~jioffe!FCBfT
zG3hr!Bw;<^`)Mv<c$4pRk|nsMpFlw{&vg*DA6Ye1BO(6;wwt|hY4xQ@SxLB1l8N5L
zmrDKD_wNsj#MiFetJLZ3u=J=A!sHi2cggm;5Vld5F;FM0&-+)Oh`JSfUSQ}c0&g{J
zv*Wm3e3kV?Tr@Ie9h1WZIU<h!PHivvgs_PeE!pZ=8if*Bbl4J2k`+?Uctczrln6g8
z@)8#_iQ6&TetWDyy1bdlE^8`IW+~U`iOZ|V6si%Kcy#8Wb&4x@g~3nO=tnoAwBK4~
zuSpl_?<8H~U`%u(n(v9mH^ejN`kQNB5sj0tVX8UqT1NFcm#&pru;9QEmPf^BWnJo-
z_;o&cQKZcJgA*E}-=+34^z}i!cFhuBs(E7;V#C<_mkd`2f$mRIqI5TMsZS`?<xeT9
zP=RNQU32pI-hE%ZKHW(i9U3}JN8E@lA2Pi4g57wR*ikrIjoNkcjl7h&T6cfk{YR^b
zP0b?TB3>84ItQ0xE_L&(3Db0U5*u-yBxTx=o%d$#8tUS&IvtGm!(*a9jy2N+^WgHl
zGf=W@6Tn|m*bFgr(Pi^8`Mr6(^U>LjH&9fQOSUKEz}Gh&_l16dv=?4z*+I;6PO)(x
zyb~G$P5wfi?w9@}YnD?%daAkdf(P9VRit&3dhq^0KF4h^!tj03EcM_)-%w}T<rXyf
zKV9iucedIk^h?-~RxB7V>FfDdSDOjthNH@J^jgyfHByo=e$fW>fD!bzJgbp_jq=>u
zMFDK;MFj37Ax!&*5T6Ak;x&nUI&tA&>aRum9S|soe1`AdbrXiV+f$nurOX7JE6x7a
z{$cqnjf5#G8hA|2)ZpG76Z?55uS5P^Z`t77`_o;v8~unB!J^%>jcVW7eBM_&C>Zvz
zl`dt{XuIEFCyt-I;5P6R742YZxEZorhG(IZ;uI5o8Ro}>d>b3<A$@Lbl%@;YzlN{5
zDZ(7V5NJFYi*cYxVt=<^==$CovK@Fzj;MF)!L{i8L}x7JKBdJTvSEKTZ*q4qlG9i7
zCR)Y%iC}VE63EZ*PBDphEY)sD=>x<;hxZJDc=?tD6XkxV)|po(6edbN`YrM234^C!
zz|2`<v}*4&_70V!Xg~Ei&exHNve{7K!=CWI7Bgpy&iUyq#g&)!t>a2{4!AF(t_D;j
zvJ%OJymFFgNaJ%)kMj6AwRe?kOg~(`eg+#QedJF&5a0j#^x_yD_LcdokUOq(h`513
z^|jZ9U9ow_lGla#_h`MOZn|U8)^J^<7^37;FGCGBFRBr$G+seneKWlbsQJ9ynl#jQ
zMD)q1CE(Q>MLoHat4`_lskbM>tnb}t(6X7&+~|V^-sXAj*1E5-iOpz}`aZ8t{;l7J
zBR*k&>_pU0%lha27l`DQcZ0-;jecF-qJ2c0aHKjK<4crm!8*2q5PvMPLUz$^mck_z
z(+P_O8@(8_uLE2yjz1VmjC1$87!u%dfj46Y{k`JVnyO|oz1g#wz^MKSXAPrf7MftD
zUW6VB5$}e$QL34~#6K;y{=};P6|w%;&s5TYz~kbptE-F^vlW~}3qgw2OT16GYAd&|
z#PYBC^0?1$wm~re%H90W&qZ3e^`EtE_0u*PuX{P$n{6P7<gBU(g<E2{n5swP_Zdxm
zuoV@>Xu<vq=2Z03?F2EIN^Ws7m>~Em;ZL8#vVS2@*W*}stl{Wm7sY&zW5xoFAx}$*
z7F|rK3(;3<;c&!)CeInzLU+6SUZZ0s08g|H+zL>apv0I`IVWtSo}}y~?=TED-Q2fa
zn@|PbpZa&2Ay^xKf8Q~(BZU`lKQGwPR!qO1Y=mfCG1FVxAEuEZ#VU~AapfWP<+VV)
zYXhJ8&sr;klW_LIU*B;E61oX;ik2+9Zr;e?Ul;25BX8GTn0Gd3po;IEF6mr1^VjA?
z>ku&A_unM8?77CG{Lnzm;NCVj3~`JlRLV~G9~gsxv4xkg(un$)3qv$IBm!Vy;ouR`
zNkISeVUhq`%r`r%d9<Ycy)I{_B9Rx1V_CgGd2&rtacR(f*0C#NM`t=zoPqiuU!y^a
zs~TdVm#X8u7XRzZc3O3nsSLOCI%A#e$^Z@u#I(tLm9seuzWR1ja!I-CH>#;cX=gE!
z2b0gn`gus6x=>P4ExfWWcw{g%x@C*Hj#=XMhcGh8$Ia)qrFOw0&Tqp0jZ6y}u)z83
z$?20PPsB~`<(DEgKk98AwWgX~y~ACI%sF6aCahTQNl9eT9LX5f2onA0GU=!k#)Too
zIk8&%+jR}3)1r5`M-xG;B{Qn1eiSH!`rM2=<DWV9Yy!Rwnhh8`Z#PoTn?~Q6kFPoC
zx#4QEsq4#<viSXevE*+`1n5ykmQF}!cbU$o6m4pz)S2O#<~od0jQ`!yzdzj6w66BV
zy1#n$Ds^mR<V}GFgIw?Y9LKf$)W{0w)cNG@Wl}M^!_N$UW|P4Q(}QpH*vQt>(NjAk
zE7QA21va~3yGK2{(_!P|<2ZS#PQ76jgMtmLcf$hGKk@#_!u&vxCdzYZSTh7VW|RAJ
zy{qW!`a1$4FQbc}j_Mn4Ld59du1=l^;=S-b)!!KL%74q)xIqk&Mf0=IheQ^!fp6W@
zFyzv`fIcrxu1lQLgNY@|`8UO-XY;~mXw!vp^zydP{=xgd7x@1R5eX<06|TfoV}(+>
z61)93xXs~QdcGKf$6Tt9^Hka2;=>mwoLlDo)QlpJUW}jL_IZV7kB89OsiUquc@m0x
z2rAC6WoUfSuqT40y@jy$y|?R=e;AG)BR8&Pma_OBH}p1GM5!yAXyiaXIL4Df=rm`7
z|4lyrlO~#Q&=em*LUwYEfs}}g<+S0=>MmzNVj@DlPB^<4>Cje}E=Dy`lXG3IRlVH(
zV)E{I@7&T^*U9P2LRu*zo4aYE1@t?sE1{5a;Vn7({v!?z9pV997Y%2Ml)o6n@x+?e
zPbw1m<Ni_z{9Bd&lZOBO3;rjNDDv|LJh|Hj6$U?N35-=A1vl@$*>|;Gx1&q+>O>hS
z9&|X}zk3c)?Rhqd>8gDC$D6M1!rM8{^>r$4Z5u7Yj$fz(-K%_g;=)i<_I55^<%3ba
zrO(+|POvZ35&7a=&S{TkT?D)Q-3#EW4G{79r=0vRHGh9#uLO035kUdwHP(w4#Jo56
ztIHyX{e%lRYW)88OhyGR=t08P+}7hIq`|^DHHAG_?xh;|rH$v-OP}#LIEs2;O;Vz)
zUgFI=9@ZJ&>k_tjxGQ%?7i+y{s$2UjrGEDo84=rPX?5UiEm6(DQX2E`dH+wr`6rQp
zqLvFo_S0$ca<K(f%e#we9rWr6IInDDx!k_`f5drD)OfAU=~j?6-*CEg&#dFRFaepq
z+aRR-)<{{=SM42A^O~JYCY_tZK1)>~Jtz7`+|ByHQ+1(cifgRDY)T0BnED}Zozg-{
zz!d-D!jW1z*Sth7uA?@J)x1$q)ZW5u9a`US$R~&2pv}FPgaAob|AzH6d<Sxh=0`ny
zHG~EU-%%g8Ca4SL>%@QI-+$d+?(NSXVfQj4Jn0zyhyU+148M~f?fiiwDy$|MU4!O9
zI~!c8BcCWAq6wZrIP-f@uz;=5bK0~?L?vf4W~87=tqK)DAT972&L(W``E72%kUNe>
zvk=HJy3{XYkDEF^ND10K$!~$Pirr|H!mGQ}?}i0sWqYdjC|$d^!z_loMcb6Sg`Jnt
z>O?6xWu=AN>73X0uyd%snE!`;`0qRed*S3;WEmpmDAp6$ak)(ZE_;FQvof<r+vCnV
z1zG$WZ|=QKecN57(WdjE-khZYYP=vmbq3VIZ@%BRj+rSNug{(ZZ^bUe``(+L6)p=6
zY){vY(VonT_G{*+ME@1O0KlrZm7oy@!UG}<h?0Q^9L~3&J;<wegS=%;ejbKv&c8Rz
z=40mkTvH04xpy?-1rqvQ&lMh|Y&>6JyUl2C<|B^XK)1%7SsA>gq8HS`-uF8WJ8bxc
zHqH>`WT!*-n=$PiHZ}^)``~x36Vn{FwLqhl=EXjv|0s6dI)~&O>WSBzWwHl(7EGpa
zBn*igU~)OX*;rI~-*cTbT(Sb$h-xX{HrzI=bv(B1+QpU=I_r(p|GiIz@Y;KSV(Fu5
z)6$Y^ALPs6{OfexlMAXYwVif1V>cvknN&<Fc?*=-iY@`FS30BG@#^#kR=X$Rd>bK@
zX!=@_CA;OcV0?f6nx^wKK=*tfgzNy&JOZ7bg$7)=U51bOnFDB^H5hXtFKQ2ICi*jb
zT$bs}3cJOi!wz~^hnZLFe7UK3dMz_ZDTK?@i11g>CIUI03<iyuJKnZ#m$@xo?mEg!
z7_ykmNmX>kmFQhXX?6`d8jb}YloP)0s<tD9BCQ2&#Ot^4xppP3c;EQn@YVd%=9_DL
zgS2U;K_$`mf5(Ksg^>d*Un<Lx+?9jjM*@ra*+?PLq`Up)V(@^o>P(p&mlbUUvcLb0
zYgQFYwHzBdC-@jCj#t$W@HgV^-_qMwfg+ajboYGi7q$^(C>~@U;wmUpArjw+zX9L4
zv4+4~)hpVF0QLNS|4PdKB;-`OrslND6x?Ry&uu@vw6u_zR=w6HhHha1_HWpOgrPdS
zG(&&j3zI%LQ?*tmT~Kh&=2=G50$7{Kbb#v4V5_SLbNE0_NFm;rz%tf5y`I<QyfSD(
z&{>&0hY}A?8yladbmnl%|M0VR4flA!HloQKs=s1d+OF_F;q>pV`#&AN{9=%*UE0kx
zcD;A*4OPw%IzmXu{^kDR`jf#cUn?BXn=4o9U~@g6d@^e;NVc(74N^v$qiyKaUa2pJ
zg$dZ2xRx7$UD3!?Bi(h*nlIl9Ta0%wC5QgcDgG;FfOHX6O1>CMk~ajczIDxd6G&q3
zeX$V2Vr3$N{W9vO{aoudi~rJZ2h9U>vFey9cqh6cp<1fz2zh0bB*@8!tiz^P!ITsa
zOLeOnl1kN38Ma}>QEy2Ydq`}v-<&o*?k^GgL=~GoGwq83oN&%rrL*<>Yy19$dLKfK
zMe3RioMwj(LJ_Hsrvu;ply|l@?%J**^;RET6bv{KS*2;Htf<L-U0Ni6L4C0C!a)Og
zvnPzgp@7N9)P1k+x{na~1+n+p+4pa@Z{dDndbsVa5DIqH2>E$dRaXu=AQ*AG*D6Om
zXqVs-S2Z)YgMuj|#OiZa5!BUl?T$N6=}&Iz3U(%&eNV32J;Pt1>^#-W-{FT}@PS*X
zTf1Gdp1AQmq0}>fIcR&3qHIozlK7BMfKF1T2~Nf);2dG3l&)daJwA-)4CkK>cNeI$
z0LUcHZ3Q{{UM$DkBjf4bpV^oZtlL14RMZ#ipEXxyg)e<6x+-iap9^M0H@?{{qyGG$
z_#>is*MW*vedYvgGbCw!>(s6jy%%;9hD^1O8|mlKpFW+4w-rFK)ifA!yAF<i<v5k_
zjNol%7+kc#`Oe{9%Di?5ku8T37;u3&uA6vACi@?;kv3A9xd<31xH6VWYED>PO>{oT
zoBDRWo*D<{qDc?}dxuMSw}rb_AOd?==7Xa3p;ZkL74S`&nFX1Cqm@pDP34YBW#;5m
z*$x!vOv{aL!|X~wsCOzdnN&4$cfOoK!aEo({(1+|MdSRq=^l5b7<uKtF?3JGBDmip
zy!PK8cwUp=w3=`pZGfYUWYg4IWAA4V1(`6^n)EU%whC>kZ)zqQSY9a)yHl#@`Ih1k
zCBHe8+~WRef~W%FQq?J=uQdwkEe=`|1sd@hw%<*`>IW<WK8Iz})%-(<aOBuDI5mRb
zrGS^g-;CQ_eN7Xyb>7aB)+^S8;iP()nJNmIxkS&UJtOHNl2zJn3Y&lD^vM$sr-z}6
z|4={cK`YUz&w?x=s1p;9{}$3dJ7tu}R58$~*R3amT-`DND3(b7rg-55i|0YJUuFtU
zc4ub@N^<4U`Q*xx+PvnlWBg;od>&h@DuU3hY~ucGW~tY^g>%=FN=2TeQ<!`0`2vc!
z40o+p%5(uKf(wgHs&U%PaANpEP9!-U)`P%8Vh>kG8<hl{Ce*Aa@%1&`i-vf-FUw+S
zT{%uvh2ZRY^4VlEe3WkC8Ag&(iivfInmt!~4A;V=$M|t!<HSj>J?}4pGu267MY8ID
z!{vVi%}Z>H9%&6Wp|Y71%^X8<z2%pduLetf8FpKCjv!j=$=5Bc#Yayk)E4LSN|AEd
zypJ!v+jrdPeO;WDYqYiT8(M@H!Fl$m`Ym@q9Oj-Zys*B`@a}N6ANvLx?{{#!6=QaK
zaK!<wL-0<jFMmnsK9{}$q7u9jgdC0%)Q&R{A=H+}lSa}=4w?+Oph?VmfxRNbjI`(h
z^MLHa`c|BCJ#@Q^J@=yKZ_kU!Sqe>m&YKU^pMtk{&F~(c6to9SYQcRUX8Dcw1*)J1
zU)1qI>YS3ZM0k3IgBMM18+6)xxa&P98*b0(AkAoq@ZDcHhMEZJ+Sl(c?mj6)0K=&<
z?#h_J2F8D#JTrfuoGMEB>Jbx*LMPVfEo(6EwO2xZrbaPCz)*j{)D?IxbDhVyKRY*C
z-NE{FECVQ0Ijo)-L{WAVD!+S=cf<m(bkVct+`bpBFBriSJYE5E>sy_@y(>1CFUR^f
zw*IF@xy0=@&3gA`PWZCY*bj#)V$L@<Be1#4ANOwOY(Q4eJ&P3{kZ6>HBqzN||HPM(
zA7dEW8PR-&7;1OIDUxL}(O1lQXS`cROf01z26qc1unsQ4z=5T=KWokb$4H&cK5p-Z
z?olucOKs`Lk@!Ab_|E8b{5z-K#CB_U9|*2keJU3ih=p+991l3R8<Y##XMM=yh3hCz
zF_d<#{*LmXo`Oh-;p!OJ8HQb$lfH8Xu}~4qkVhMB*q$L1dymR<*2m0H*~jHr&d>Vo
zesySnn`XF>7HyfFx<fl0_Y|^x-Tb=rey?VS)}~xd!eBYj5lhZ{rGHS>!n5yT_yclx
zL&<&l-!soL8t>2C1)SU=m6z9Z+Y7<^LPz0;S95Y6NS6Zgx~HEe^w=|6ovqaaiJ5L!
zgMS!DEF}qDTX1_FL<iy{_lJCpjX3Z-?sYi5#S6k2Tu6xx4g81##%ESHNeYiehktMn
z6imUhZtM&^z!rEZB6mcqPJPXu>HpkBfxS$;!`D)Iu~}BF?_3;~J#n<m7m@MGY|q_`
z+h9V|HC6OZgn918C16}})Ji<r@7u!4%;2UNW1VmLD$H0Ofye}UB<G@7fT`=*&z#lJ
z*WGLKm*}>Qy$3Dzpu@XOuX8NrH{CJGc>ekzf^Xa12|xaVpEyC#X)0Ko^xK}lpRq`z
zIPgHm7qOas@AZhB^QPtZT#o=RS(2D*VF)t=ze)R*(S4y9Z}{Ivru|;m)B0k*gxK!u
z*s78#c%&o&ZT^;VsZ3x2OOIn|k?tV<eh+FDht4PEMeNT?@>%XT;wKO*gv_{HtIml&
zPF(!>x8UA?qbI)-v=4;DU^FLM{H1A|zK!7j(z(A4@uR<4op5eHvCb%7uRgQF1Piz)
z;R2_cj1XTpL0*|xHR2HS+Y4v+;AiR0q}R=?{1-n<o@ac6FQQ*e==pV8P52<IV}!u<
zH0%uJ9LtPxC+CjnieFITcuDrF=fH;1#n(&02Opk=q;<A%o?8mloP8);4)Sid&uI1(
zVO>&Yp3S&ULYTydV`MC`bv9$%vyQMadHbMafj-F#uBT<^KbZdFw&{OVXI{-DTY-p<
z9|bBPalB@YZ9g-1zlNL#I^Li7{IoM{pOiFo+2PEhtPaN4uC8?fB439_ZqI(>O_(p-
z4%&F=R4kqLmU-RwD$r5*90z$<bm3_0^ufTXV%M_nn0c7soLAsHxC<bXL^xMv3yqOJ
zyR4g_UEJP`zMQX_P)22D!Oy;_%ZgHd^PfogZ+~e;ghwV%(mpK!gf;_>v{~ac5~y4U
z{8w4ZvboLn7qanXCP)t-8&fdyi-aLcubuh4YNlianf?T7!5BzCG`J6bzwA?ww7`gc
z#4yh(6x;#l`x@U^{7D*E1-cdzYPhL`#9z95eS^J{-0cq{J>bC$ldO}4l^|w&x5dq4
zx5t$vSt0+~%*p)L*{J6F+osy#z(&c3c~0{eNEbkqwYguz6KcUXjQ<i7PQ)Jx2~#xx
zO(FiBI6Yd08sOBaqNUZjch(!%DDr2{U}|)c-M!>0o8d#Vm$DC&VetZ7&%~a}wzH0t
zh0bIZ_2m;KbU7+gnMGgRt#ZbznI0CE%z1?E`k}HwA$PY0>hB?^r+(<mP#+#VjTnJq
zsATI_P5+2N1mU-vhsu8N*L<;;@pTCQ1U=>)Qz+2<U=x}dJ~v4>!hDRWvWI)FXrUoY
z^y`h;LE}<b$e&T@(M4(-oZSxajtR56AF;QW=oU%B5H|C<D-da?fA_PZKMWx`fYT-N
zeYPqfcJ!aAg8z`>W0D~jK-zu|oXvY`h7?|(z|cR1dNAGJT4DFDYu34VKR#v@${__{
zl<8uTUxJrpxX+>cxGI@BM1Us5qsN<+m-OQi@q+FO5Cq6Wl~M1pTe+kUcZfm7q6&j1
z@FH#Cb5qTjnR~+{O!2mICMn8uc>xzme`|(Usu|*BR?zhTsf&oEt%0cdmXaUS<Btf-
zuzv@M;1VRf*eyO=o9M#7mnSDqpM^5TU=t3A?(m`cR(||99Dy?NKiJlSXE6z&!g~N)
z4x&kmZ+wAf>%b_PJP1^B_*_{$Y>6EI?Q8!W$Y2%jxvquA^49j|jN__|8dS-E$Y^N!
z+FoAM(fY<Vho9ra4j{Z0<Io|%ro|`I=k_HWmA8Kgxq@R2{^nN2d~JE^UQPZmEt!t+
z$=O4Ps~%ehSsZe9sm8HL&@b62l5}b}Okdxf<95A#`26<g^q&hDFeI0OU0?R<KrVYV
zh$wXbEKtGt>ixC{z9PmH<S74TNB_As0U%q1<Xk`_XE}-v)LA=EtflSTq2B^5vzke*
zNX~hg;3F2L32#(Eah2!k#%$3b804~=(Y*2JXviK6#mn5AxpDkF>W8TziH4K?HGFvf
zZ0OhUbuK<+w8ek#BUCO3L<|~+5z<fzS7=NhHnpn~nY4gcaR(JN^NwIzadT2^=$i1s
zpe&BpepeA|MPg-v1^>1a|5g47F)XHqA)iFmY$nGp?N?708G(VuazI%M+)d7A2aK*S
z8#5nam3Z(hu7n#{XKZSG2L>fPpfi`f1mmydq*Wy9*M27bm$iFfqa#2hQ3iGp83FU*
zrP!y>CisV0kR$^EvSrC)a9-+7{hH^ikQ|ApdSDo+`cT0kKfe!Yx(*XLlY4S|{%aN6
zMhc1-5ZvxC)I?L!;L#9)Vfcro2L^12M8kfARqBZ{lN)5DbwzFO`DY*=>~25LxrJZD
zHS#Y+urMD%(h@v2LG!M}pyn8-u>*_l<@cH<D9(UW5r5#Txm2C+CB!-eKFoV`3lFd`
z#GLyl{Kn61-B%)gl8{t0Zs`0fq9lTO-DPw`oDT<k5pUjtvX+Qx?k>I-8Bdv(qYK`3
zx$~1l>Cr+lVf2{j-`h-6*x}xle}wVngbfN#;XW#z^1a6tS-PM4VQLRW8;~nP7+`9Q
ziyCs~{sZ^^i)>24Y5ql{pMtfyZ+R^ywKdis=@<!>Svq=_nlFO~MZK8XY5!G*|1nmX
zBrMT$F3FPxy!vTxAp)bDPTb%+8R#l-&_h`%M1yexswf_2mjON?K_LMgKo-MTvwW$M
z6qN%iiSWIY=qn&~?~DcIwd2Ycj~Is@VK&SO-(e0V&xZjAA__?|qJe(PCI}SaC_Ap`
zcB3Z45%ln~K$$<G1R+f~8B8}Q;WxS@jiUbXPDqhWT9VY<Tz~Iz|5yrsgfT``(EwPl
z2IJ10<m7|A6!y38XQQ|H5r|%T+xdkS{bNV}FKGP>Tfw3>e)<HrS{9|F(uF=R<&Q=F
zhFwcf|AzlC-roC<+wuVCGZWx~wCwZ-y$93g8W^ghrt{LB(fNQKaw11x=?8Kb&IE9e
z5a-5sAaO{d1L}PT9v*S^%=GEbYvMZ@Ht6J;6zC#1s_NngDVD%*4~p}uGB6TGdf&oe
z?dgXPSe>%?OK)-kan6)PSmwfc$+<Nwo$?^N@(BSU?DJ5W6HpGLHSMqSf%2s_0Rj1F
zZpwDkzj6&M_83~mlt79)pHDX!la5`gSEEez#+?ApSkQnKzi6KeICqX*6VTE2JYpmQ
z6;PHT!V6A%&PG!0vruFPTS+L)H?{r{nlawByuNeNouejuSegSsv4}M6#Y1lgwOLN3
zNwEj>hmI3~tTE^o=?6DUO_RIIEdrC#!>|f+MgfLdymUX85g^T3Uc;Gf9|2aDj|UcC
zcl*7k$=nte``{*%fEJ^nFmIvw(R_nh(C4`R)cSR4_cAV&AOXZ5hkbQ>zSLtP`9_cM
z=g>WJ0)!#z$#J)79pTZ|O>Vbrx2F1&?*XcSyZ|Y#;KWq(O*jvl@*mswkQk+40J`xq
z)k!~jVzm0rSN8JR9j$0!L3P+PKen9B&zbs6ZQehexdklxcYrEV<#=-g_rW;guh@5m
z{6(5jxVXd$W&JuZbzl>Dv}<&ijfL?D=CwK?U=zGhFGgJ%)MdZj1h;{$d&}Y|0VRo{
z2jedj=@K=48&p+z{|J3U$NvZrhH+$jyBcoKXEGL+cRgW$i);pX;3WERLHI(WQ}fsH
zKBANa4+{ef_#-k6`>TRQ#0~fJN`V-qY3sngB%o>poQ#aEwXzC$_tE3*h$)ZoU=dZ`
z0fH{75mK|+7-Tz_mBbsu)n@^aunHmxu5zBa?p!0mBz=U!AgV|J0|gm`G}yQgj`=Fn
z&9lvVc0yr54UV-l9f+StY3<qTKW1^;P>qQ?iE;0-%V`vBh(FFJm1l_oSjd4+gN^Jz
z3<U4}e;HV7KjQF$sG<o_72g)}eXbF~7B3`5@J(EKC$OB%WH?Pc$Q>XL_=GD{9aj6+
z%#R^$8t`q3({9b&1vipK+=z8X?<dWk)d8^$FdedqXz;>-UHr`wot-89V+MN#tn+6Z
zsSQ)$K7wtF9BGrCv#}1~QGjv~kV_n$Hh#{F(>Fz*KEj!VKc>zcV(~XW4hscx!|5?f
zN5|?qhfe_sr(-}juB|9)I><z}H}-rKRRGZZJX&hxuk;j99uLIsY`*dR2GF2@1QtfL
z-`U-~)}$P-euPU2U>uZ@85Ps$mgnu&-@Y30HVw4n0)d573UtVH=~UB-aYR9SJMJT*
z1OXsZz!_BQtjaF(^E@KuYpHF%F9@?Ua)g6VR$XidtZ>-pl+)j9kBEFsh5~vRnK{;{
zJ%=*wmn7`v-t>cB4v0Ab(SldAW(`L(zE|CZ6RTWOk2$C#jtK(-#yHkjyP<B!ZPbOA
zu7B(DGO-dH7OtNP9a0Bq&^o*J^zp-mLI89n1C(X)toe=Iq|+|Y<sL50KBEKuG3>^>
z3$9(`wsO!@xZQh9#7AHkXdl?I^?iwI!AxmfVy?5L(?R}}5*Du=b=FuIuo*hdkBf33
zNCC82EOmMe+~a=+sQY-i=Hzz%p4LA__+momDK!loycIn<<jIunr}I)<bhk&OaMAOr
z0q^(JMGF#9)sVNB9yikbFMs?w-4JGbn=|i~-(2RFWcVYjS*9>x&FJA%5={rST_!V5
z(MlVHn2$pLf&p)%{J>}4w>r4Bc-$F007MSRs!gEsE8!O>c-6km8ZsNt4f9Fi5!s_!
zu{6O;Mc;)XyLQ{n4>)K4a+Yk;fUPQVE}GE<+?gvNAvIwO2S*Jukbo;6@=}=C&2fKW
zS@!lZE+afAdFGG<8+WAF7CqOi@|A5oJs+|h_CiJHI6SZ!PIo<?pWu#>hhN1yv;AX~
z`xsDeh8D}YVs8JoO5-rY!|i$`jZDC~)*|Wb+o(Qob{&19^B8MJQsxTmea%2gmRbM7
zXD>BYoI%U{uM{Ggz`5V2*!qm`ECMjI6<-<TA4AqQV9tt5-Amnf^oGtL*dq<jL|+#X
z(I-h_ZV&Y)-jtdSRzzu@VPigGELgaBz|Gc>oa5DP0K{uLZbZ?Qpt%f*y%DstsrW3N
z!?;KHc}70`V^GzJ6hKwHu9y}QfcukkY^UkyBZ8OVa_``il{0fFUkjP59W1Z^)Ej>c
zE2}U8vgj{)r_PsWUc9VY-U2JNEm`kSm>6POaD(x+=jVSl@8&&EObUFAjBP_<NB5QT
z-d{S67q#O%<3i5r$c6{g;^c5}KtD_+nnu@w-L*t6@#^o7QSR;{Kw=xyW#m?_6nP8Q
z_R|{<x{+U;4_bz{lPR3Tl~Xp>S*tC4+ZM!l%)TMA2Li(db9YWt3<IfGlAJNUl({{r
z%r<zVSBT}VSF=;ncJ^gIzy2$9{r_IB!UiB`J2x;V=y#3j)&5AdzU*k_p<oaZGC!N&
z@BG`rr1DjFSNw*U#}Jkb0(K4Sl~a|{?*8Yi4{>4lIwiNeBAKNKMva%7ihQp)j5}4I
zxTb|HK4vrmJzz8lvEwNgzj<5S1X`zqwS=L~se27M*ayI$!2<w)e44*t6Fma0VZcIw
z4%~bRGB?Goy{HxuEAcQ}yxOhq4T<-(?8C?h+|7#bGs4_if7n3h(DoST2fZ6G0ay4c
zqM6=?Gt|ngz9n=iQ-L5k`0x8c6MHRPer)o7b2&TCn4ehw-%R))?;TYeI0u*Y$l!ly
zt(%aUF?Fy#T8|siBiHQGf%C)-4Qdy!H)Fn6OE<=TINb&e3C@Cgv4wGtrg%eZWxHQ-
zi?cxEO^3a<)kOE>^2DAi$ppcM){oM8Q#?Sq+>}sWs4t4Ur?Ow|iyz!MN-YI04REA`
z7!kfNw{rw3a68Iff2X&48PfC^?jouv0qmu8EfKH*JA38I5y^C9m|{_*d4ETOFQkZ>
zBdB9*;5g<{ogUzPjQYb{(Pa*m<=${Eq_*B5D9bSfUqH}DF8U*#BSEV0MmJ(=Iu}R(
zA8TJ37S-Cetq3Y5ASsQgNQ;0pj3OZ|jYvo%E#1ymLK>xWknWOBl~RPEyAhD?9OAnN
z<9Xg6@80u%n;#s<I$)S}udA=~ik0L4EbFTWDrgkQKnQ^w<>R~j%v@X7Lw*?HPv_2=
za>rqlUhAfUFq8~yJXX+UDl;97q*&~$mY{&Q0frnPZIsU3%^?}x<4>7Z>}gx0Azcq?
z(Z8~W*s~lS9D{EEo-gZNA7A8K2%*H6?c3m?spVzAdE)cV`H7~HUP7?TF;X7*@Ceb}
z!GY!!6o@Q_?N{UljbVFpv?-wUowC3s7MKQAt`i;&)mTv%FO&tl^DWx#)sc&6UJH6i
z+hpx(&gk~Rc6Nh8yeOywCFaBcaPJvs+>3X!KOJM?USrPM+S;v~Av-6R4McwQd6AtY
z+3swx8&Tm9lA&}=bZ<7`x__vO_f<f4KV^DGDi(59$*yEC3KCD^-KS-~U0tp~hQPBm
z8m-p5{23P|rwh>~1lEw}{Pc1YDd=bV>RQC+sHM^T`4zdy@J0BYCTPf%*KpvKxj13{
z{j7^{RTq>VJ_{+CStIvai|hIP)8rq$dIbiX;@>K+8PhlW5bKw-l3<ZKv_CmMqV!?p
zLh0FY>0nV=bU}}=hF|@m-LuoDj6?IalDalo(N*1X6Ag?f#SiW}Hdz(7ISRXf4}_b0
zd_W06L%$pbEYPzGvE2SOv^mxomjMV<LYUur3VxRvh4AF_n^B|3ya?!4cUV`dMDW;p
z(KXII@{GQ|9TbV%jU=wcG!}rc<7^x0y1VP^F&Vvsa@1Ecp2=FKedG`%Qan_l^VV4|
z(qDw1mc%$y+0{@Y$@VQk<S{v!YJ0|x8r`qjj7>a^M8P;odugDWTq$F4`+oDD!M&w}
z2QoZFdac`tZzFRN@1|2<iAF!iLB)R{0S*O|s5(x9$M3M7x((AMd+eI?^5Wu9$LaC&
z>JKod;FcMUF*D1IB&o7+G$}TJyrhJM*AzniO?x~X%d7SQnL8p*gC{>j<>?M8$qGoJ
z`2o4Ir_E10!!qchij%8Z#(q^euRoains(_*zSAqb!^nIv%H8xqRMkm<!_`x-g}PWL
zWpHyzpz#f3N(8@Dv3XJi)?3cl@WH>b^{}$<2CJmbMJvs(M?av;yY0PZAnnKefcz;3
zzpIBhLco)BdT?+UwFn#)z~b~Xpy=1pQJ^g^H-c1^wX0A?!cPo|D~X^?kdSn9IeOID
z4XzxJe}&GK`cr~N@yD*|Aol3*Vk;PW4y`*ZEeyr0KBB&OhI1M&ZoG|a)^r~PiLhSb
z!TFA<g3W@W5XnTes4)*EMZL@gUU2A*>y)7gkT8f4w%d$1eN#=rLE{B1j-^P&5r#Cd
zNx#!FF(-F)Ohf6@=pr9aVgExInSS3njueER?`~t%3O3`I&TXQVF;l(CF(o{$E}eH7
zKMOsmod5;Gl0zV(pD*%0WCWk3g`-8X2wN^CAHi#dQ?@FVZ`ZP!DLN_aw9dhR(kfwj
z;LYr>#c-FBT`Gbvy3;iX=;748@v@enlyRiwb7`(J0{#o8q46Ds#2y8x`uFLz*<hhP
ztzy;4zE~(7X52XEvdRSxS?R_l0dLd66jR338gH&aS~T42_@aFacf70gv096E;#!Nu
zeOsS2Th%RnOU~CEq-B(Pg+iA4j{y4bQ(ZP!1eBBQDo37bmPm4b>A~*%#2Pm5k33C!
zF8WxLYeZepXz?UIF#}mpz~*Q=UV?XRn5V{KdpRljvGUlrJ$-S~qE?D_mLi9r5f5ap
zq_~U|eCzY;)*kQ=YPr&{ni~{&Z#CMPe~TebBRUk$_+mN`R-bseffrv%J?6-!It|~i
z-<-43dU>8RBLCnWK>|wgDyl4mKE*WA4bPs&N18@)whs43I@k1%AFpX7f6`ZyY<^9o
zEwrJM3v`4UT@T062p2D(?e!<_!aE0F`HC&ILw(8{enqr@NdK=c+8AL;&ukN_axn2T
z^r5Hlu97@y@NE*m;$kDOVtp(hqd;uU1>T!UgtQ75p-b%ci;6h?jrgQS!9rTa5$wSn
z2+T=T01wnf381l}pRqnZi2wphPq2p!lr|4v1yk`vebOvW^RmLFt8uuo7!A7Lp=6(z
z>4-e2H9x`UC{IXv8l4<Mf3`NE%8h>#H?lWCg6KOrkxj1j_>zo`w)ui~PYMS-r#yLB
zaePvU4xds(GePkkM~Aj)AhE6T9)fRc6Mq_BH5556aH#U_tPX<w9;gvf2XFQ@d98L(
z|5cfI+t?iFZl|jv(O195UK}_cAtaaa{M<c&!q)d;HSDS1+ZHKK^EoLz$#KsY0<AaY
zCDPFnsI%dp#VU{i$j)?pW&kMWgw|vDr^`JZO_XDaASZ3=AW$UJOja;QGU+Q;Lpf90
zUUvvLf1Kd+2XIEtyeFE2xVis4D*Dey_+$B<i8?y&1gBrW1u#d}wPXP~a(6hrqhkvG
zc<cjSj@Mkm{pYcR025WN`f><TJ*dt}?btZtG-j({Yl=FG+Crhb6Ln4oG6A|IC*)LL
z#=q@f4{8(L4>*qPFE{QQV9T+!z9#`89i$kuVJ|kPViNB`;ohsfpxW_!ng=K$ttcJ?
zl8j|yGLXT*3~B@3H-8Z%dAGKP%rCuxXjn;-_4AW@U1a!276Iv-u$GmaZ%#^`dD|W>
zo!_FJ{)|=k&Ohk}iYGaBGd)j%PRGzd&jC>>t*`JOD^RkrUUpUTrTI!uTB_pei8w8q
zHeu*}dqSD!1OioQhrz;a5r7(h@u#4f*Fq^!{UZ&3f6?*^D77;$1_!7Na6s8vqly+Q
z9~>$alF0$nQmRLx5rsT6(=B}crxD!zhfU=QhsVYO2dZl3^w_A>rBD^y`T}$=E=rQf
zkH{&j32bb<=nk5T!Xb)#CX(|o!Dgm=r|gM_^nG8eRQDYpIOeX>aTuztd&*PP`wfM;
z7*x-34w_2<-X3q(^NkJyn?)0;oKER<6mo%o;Yg7;#KpnOb%vmw+MgJ#h9%MmScMEE
zU0(5=uA~OIcuKMtivD?S26dMOU@p<mw|EU0ubQAkow4!wc+;TrsUc$&ie$r=`My9;
zIl~-sB<5)7x31~Mk$h6IIiN|Cw`8e`3V@HI%tAIXf%do=v+1K%knSB!O_#bG>CP}_
zlF4DyEx$v&#5ipUwx`Dzt-jgx$*XEfy?m)hG;*t7b^;Bx3<M=R47q~A#r176>GB(3
zFXGCa4umfpy)u3sc6`h0PTJr`Bs)??d*o;lt!rP+cm1C<mAGx^=tl^tR7ozKcES9;
z9-v4JfUOXMMB}(!rU89Hdm=8ul=G6(x-DJGpnYP%=^a3SwVv-Qx-=Tk4tlrWy8u%A
zA~xr!>vGDH-o8UI4Mgd<Us-^4jlRz+@v>eTgM?i;Z+qxiW!0Z9K3s8VH&w0XXQh3g
z)R$vKS(0^g){X^Xc$`d3cZTLH3+ec_bCw^%7}42kmqQ-Q3y+>a@u%Z*pp)9Np&xD_
zK{{9_deKFnvPPm=dxx!~oXo3{EN6HG?OU*<$yP}94df(x>P2tn1Zu&XO?Ijv7U2FI
zYr%DTs|-)jl~<(TyUB0NhR9!X&N>M&KwTC85m$vK0WIO>Vo1J>zefWFGv@$#kU!2+
zXKBY~JiPV`YML-a;}{#die=nxs^ieun&*T<qdCfg>3tOl=4oF)6TP)1{Dc0bt_kPC
z1qo%NOWCJUJM<!n?|O5t*Mm8Y;)tU(XmJ?%*)c)(HV^|s>dG)o^G6dSVipKolFx_u
zT~&%$9&+ZG-|SC))*U<OHb;X$Hmg278riZgnrMVVM;c1z0ci_C_588Mar?uE=vi!Q
z;S@n+yHlI&9%*FVa}ThFRfWz`{3OFHvD0+~wzIJ@LV*1ZsBUfEZHYT|%qaVazabmc
z1q5HGP$~LX+Kw9Q1)C)G!)CCO<t~dc=1<2BqeSC4y!)XE-Y!(T8}x$3829JzQGU+9
z6Gnh`i++|`coGW<LT}gF@{Yggx7gnP;J`#OlUpJQ^H;;&fG=c+bbC&p#qHT)=``Ek
zRwz&2U<<w#DqVCaQVEuZMo!)rHa-j57_HmimtJf9xF*k-(y!vcko_xg2q*RR|D3V*
zrJ{Lv?D2lh(pjn_E4GPAxgkCM<(|O${uTGlC}SG8!vJL&W3P~=|ME;=-eUS4hd102
z;G&~s`s8B<$tV>SP$Pl@^?6*})@c)BG;Ts(tMx7SiwBo#V-$IljP4Jd##JB!OobHU
ze|BsNBDbHt#u;&#7Xcmk=QcZ(jlwL_C{(m-mf~LT813$(R;;}3Rp9t4<;E|WgUNs{
z_gE~iKBc*DPlnXeZnC0M%tMh;&_ED(mp>-4y4n&6kz#ZJQ=C;~emX5NWGf;0KOX+N
z(|0vmVKV*0hiZroo$oy2D0OR~NdA1J2rhnkQ#FZE`{Fafv}#>J8uM#A@xBgg<<AT(
z_kZc*C$#knkbY>y7oSY&fQ1w4lWi<0wEv>W1PI|}5I>>&urwYJl<Thdyvas%V>E^x
zr+K_5Vf<-H6s*uR^gkaHeR96ER5;GZP`A>xy-iZ*batZH;se6`ecnrtxe8A+j_!$x
zp?pJGuj9%$*HV5ZpFNVa-n?XbdmG;$3&gp94an~6yNxq^c7Tt950V{|NthMK7_}dC
zzvh`esJ{JrD{?zA5a*{!gI>IP+o;0LqDwA$HqPb8TT+VK?3t+X8WoXLI1kj3`Q`IR
zXcUCJyD_F!IC)fu{b8Sm?>UUR{))Gtf|w0tMRlbO`BqiSdvzyB%lJjfTo1L<11csQ
zjN_7%&rVZ5?1cRURX-mw!{G<#-HUn%GVXVWk^Gd2jtR6u9lgFrGI$K9>psSy{_{1v
z)U$&u>hUqS)G4lqJwx|q3Q_diB$X3jO_|!)C`;rJjW?$J<>6pR;7#7=!Q^LvZ=Ix2
zPZ6Uq2!jd{ke>-hM$#`zRW0vA_p#IBq8=PNV3|hVlGdvH$qPs^R)dqgB&(-Tng0A+
zqnjZ-zfOhf4gS{<8fruWZXGSJvqDc2RaRi}<aQd30XEg0sYaIHas&WCvS}5YZ$I$t
zs9hI7+sAo#oSin3c>`_yTz@wV@<{iX*upjC<62Ev*ZRXhj$NA(Uw_Y2B6xh|U82Ck
z!JLkBufYHMH2-I+aQT7T2flc_k&#i~PfAm^{B@hT?g`GkDDh~^)UVq>#jpC>!0;dJ
zdKB*p%pr%G=u>Z@usi_OK<Yt9M@Rb0dL#5oQkf%jzxk06#YH3Uiif{>TObDAdy3;#
zx4fY4Fi7G<{+ll-8r{D+23Uh*Vxmske52(#mYt6CkK<>$N5M*9+kox(>1xV%*(`*O
zCkYEHORg<a_h_+cQwT5I7U*QLoaPNGZ`+`$2@070w!M%seeMhGc`AGHnuWvsMSDjg
zajMABqzmXiV(4g(Zs61AKyTm|h17J9+OMcV*Unx2A(vHUw%@xMC!D_EHisD7b<C3M
zf3d)-|2yVd5Tk7^GCSbmu3i3Y8!7Ubov#&@R`A~h`&$A*Sg~%KsQbIB$Z3(3vxt;E
zlWi4>eE6Maaii(pABytcfNtrfaKo`Yi=96D<<lr$x`#@q_MiX%+Y6W)1`*eiipQ(n
z()ydM#qvzz&B64+k7}s=*MIBPHcN=1jhRy4Rx?d(-QlE*LkMyl;*U=Jn+xdks|p<j
zF*_0Jt=HGQTy=&WhmRKP@I&j$Sg00G$6Ju!4l_s7FrW%;#PBD{IaD6x??t7z{BI=f
zzyCCP9R_<=R<Q8lDh69kma}Ccy+@dYaMsmnLc-q<S-*;zW4hG6B{2urs-4~KD?bHz
z{>@|m{^oN~ZBp?3{f^Lcl}Zyjk@1`+(!&u}v(DA20?nO&%qoNj+h8y~I9}xFu*@jZ
z(QZ?+^6YRV*gG^Va)+x@#S2%<Q&RVX{hZyHuhS@Mh593F8>eiZXhiSAj<OHL^%6Pu
zab~u3E_CSotsVcK3>`<v1Jo4~xJXVgm$jR^xJeK9ZwMaOQImJw`6FgEH$n_UB~;Zv
zm>l~_yE3AGKC}2I!}UA{?&2|<!qK_Nr$VkT3X}J;TQ;Y&MJTTQ332SSXf^rGP3p=H
z;cCYYuKi^tD6HQ@$pQcx`!K;^lSy9(^ZGF&K78}gPar*Ey-w4y`0?_eZ-Dh<6t&zV
zBBvO){+Jy(-uK^s`}3jy&kG3EWnhCY2~<QVe%tiNiex$ZV!SCRtRU_D<<A%x%ndEG
z;F*NM;3X1P_4WLjMHTr!ocY%mf;y1<pXdC`wL{S&wYU8^s2XePd<8`+u3sPmZQeh>
z9xMqp(AaqgeRc70-bW762KFW?DE#X?|K@L&IyeE-nDaLNL8=-zeED{hydvG_XWJq9
zl)sH2dgUWpe?)PUaK7eNmgee88iCzEueSRA{r{jOFwjcQl~bjqO@+x`@uE-6ndqdD
z|2^^P#sK73K!`Dyn7N3?+$XDv$MfGud7Tb?p2gF{t^@0z(=w`<c;DS}Fz1=T&Wy;L
zmbt$4m!Q`A%Wt?S0{>?fMBV8$=FGrqwfMy*@XRVvFjeG}hYM*mI=f{V?(FqdPcMXh
zDpdLJs4h!|);}9Dx9&ruQT|-5B#qYcjGWJTv>G~K{H-!5Z0qXZn#sk4mMvE?X+^*M
z<9J>|FfOxLng1wTJ9Or;%6qB)`ft7YZ+nS~BEqJSl;6`*c0KR0k)^><=17$Pjo!Oo
z+u`mX=bqsJWoccp_)0$KZhpMslPyHLerBbeA9BFzRVk^B!wJ;8x~gg6)9D2JFXwWs
z|L8n;cr1fZi<Vfu<0-Y=r&`cS%s2m+C;U4qK=QF~n+z;g!FDc`JI&`fiYIsq$Oe`q
z=HmPjyXUe%>==r@m+VPvT^a*RB4XYCL5=?IhX3>6ltC~5^7ctK9wsGL@4CBqfuIpS
z<6NFtlMxpFN2^rmLK??%LgK4T#=h#PidFxGN}u=NhFZVR*U^TC)n?CWE#%<29^RH1
z&?2H5T+tf+`-rd|VC(reSX|*#7|gXQh{3PO*{nb3`ZpK#AA!&bmIrcc;kO`7ed*zr
zS!2uis8<`;e=0%>y=Y!JYrCXu>g)4aau3%2%?<y@!LK|9R#x<N@t_i#bAoXsOZ;{q
zmnZ3e?U&nT0&7Vm*y8FI5*N8WozF_vd(r{7w=2e5-)=Xm-SfPA{X|`Zzx#9v#Ho#g
zGLg0vNzT+xvy;Gew&R)P#rDqZnfY%53zHtj<x*PzHbR4@WpipS(LL7izu1{@wWTPB
z^}1{Kdkkie#{Za}|3SL{yW~SyfrhEKx|V&b(5klU6G&D+v|K1vn9Z~Q4^{!&K`$B@
zR5ww#KCT}2RC4|D#rI#{_0PXUUjOC2g2B#Mkdo?rKVhy;5*JZzppW}s&*78@i4Y1k
z#5HD(@f_BIYfYY6(F3|b0)pzwU7a%VlP}pu@grl8tNDY;MshFA|EHb+q8<=XDD;)V
zqe&CoTPyh`)%?zi>-MyO=~PSK^U}({$GkIoh^W<>a}JnaC>{DG(w9gj8^67`nw}u*
z;Nm*q!Sz3O_fDIcG_ByGA#snrD3<6A&1`#_K6jy8kX2;Sh0aWH@0?IUT2xu{*bY_a
zP%Y<9>9Wiw6}<9zYk9tO6j9pH?jEbJwm8e>d41=D&^2e57n2WOLLTxH9a>JnpmT0N
zK8%}BqOi&VCHn=2JCVL?wnlAsK&1DstDBkKQ&MM2tv|Arr3$l}t|uGvbi-NZVe?*2
z3?3Ju>9Uf+S#W(ABQ7S|r(CkHqBybK*f&r)7dlW`#g*&N>PqclwEv}s;(hXf>Z3_N
zF9;uc9tCI7JojAu2RBDP{_aa>WCYJa6Oi(e-pFiS4QGwzHaFI+Wr1&M5R)Z@oXThY
zGi(D5648U8Hv|_Lntji|)BpbR5h79|ZRXigaKM8;rvd#RuwC@h6%Eqh<#GYp-K9h;
znO6Cg!4B8+*P<c)7#<Eri3C>B0=q*yc~;N=c?rvJ$M8?VMGXUxtJOiZh8F3(xb0;@
zKTmCfkC*>CRXV%-Fy$0$r;|4vMr#3FvYtl5AI8hsw%(fxVG?cb43r<`IXMkmtgrPA
z>y4HY7rKs@x?B%2^TJM<9%=?L{eC7Eij(9hDM<o>LdV)Qzk?^hyMGf2)^n?>Es9`8
zGEn(d{e(xd{$a>;BBO#jle#+7(;p9D4CoFYglp>tCY3Poto)lD^8y9ou6ic=_)b!^
z{xyM*qa2U_BIcnzGq6`-9^{;=2h>cqZqgC8hvkB+<s2%r*Hr(Au(l#hImh}_$86Lc
zbEB9T{gH|3_emXdH_N)g`0!=(0S~niL__}cnCuA^Md^6vz_Zk)DDnXM)*@F5EO&V!
z&#|^xvpYhJXO$)Q_yQNkT|}?L6qrB4Z(OghIg~G};wa~lS=x7MQ=p>6WI)4YuGzeh
zq4rRek=vX+VxWAkR!Xm+f=1=6DfnTg@5t-Qs{0gJO1&bH#pLl(H4j2E7|iyxV2UcU
z{+V{gW50ku=KJ4Wz_gL};gwKbis9@WGL^iPDRsJ3s8WNLxW~^%G$>eKJb|Q{(#A!G
zjGwb8Cn;8<R|xu?q-FXeYgt3qcAak(bsf`A$!gxLLBp6onnu#vnAoP8TP~^Sou6F;
zs2QriRV?T@ArR7C$>($40Qee@nxhhty+-_;fjRm#=aRo1K*`Hz6p#>`rnb!fglv*g
zRKA=d*#jx5)OEvaiR)F{bpb$Ba}yg3UDVO$C99J=I-Hs?HZ3*n)u{%5)e-;wK_SuT
z$_z||1~=_(zw{O}kPZu2N^u0{rj-BOQ5Jqv;Wk%O*d#-9p}sb8w?sVQD@0IU&N(qr
zSUdWVe{SK6BluJqo;&-!RhNwRqDV_M^dc5bj`yZ}(W{BB%k6pQ>8FbMJKg&)7yW-e
zJM;xI=&<b6URpgxa?GWNi9?&ST{&<>kx~lr!sO!K@;~K$U_4EC5HIt=y(?J-m%T(^
z)_+9r6WOoYYZD!R!yT+e)mS~P+cu(|kEXFR(}=BFo3Gs+`3DgDcjEaHvWm<;5C|9x
z0gI`rcG%p0qv5;^1Jbf7grgnBTx{NYYz)Xb+t?GDE+LvEuQE#qb~apLD=2f9V9{~Z
z7};2>YYgg>y<}w~I|||mCgTL2YWvPl!zVSCZzE3E>6`&MA&p32hNEh#15M*a+au16
z($ZM^4LYB`SGh<g!G_Q;Zc|<36tCkClJ>$*#}Q!!nlz+{4?3<4ubQxzrcHT^1W-`#
zi7%PD7Rl5sq%mO>m3vw%J!`)-mp7mqzK$L9FA4ek-(gHhh5tIbque3=B!<0p^KgVo
z?*0!XLD#OM(O;Aa&~FaIB5e;|7nO4gjZg(<ae@)51>%+>*E)RWz7vU*xi{(y3bg*8
znn_uo+B~L8WBczI8Tq(>tIK~A8bG!2fww2^z;kSo&VQbux#XMb{2kY4IC2@8YQlCg
zny&EO3!)HWCuWZ$mB10q+P!e~JlKUnUjP(mI>uFmMnIFNUq<fg{A);rMJqYE{FAMP
znO*z$CAUy=g{YkUiUu+>N?Y8=W!H4KOymw8+Z+#_%m1<88F<>n=fix*t^Rcs-!a~M
z=R*p8le%@E;dtcvJ8nYlhb@D3a%yh_^)8SeHho$Hu<~)857sk@s#X`TpA}A=VF%y>
zW_LUxs`0m}ZL44X_fK-)T6=*$DQG20OA$+20I#9v<frMTZ~jdW>MD0a1VJ5<q2L)}
zVQ-MiU$46z!Nkr>5UxUdB>!CcBtqMM@-VzVvP3`rtUM&XB+{erjZP4%#osMT9;g(A
zZ+;=B&RPTXS13b!g$N8%x>dtDE8`@+WkLD0?8;RJFkywU;$m(J7B~ktkCjsOM!(Du
zU<fhf3AonDyIcJ(qRig%!l|nL|H|I~5X<Thz=yM2^q8>%l=t8vKzWn;(e9jfFjvFs
zJLz?<rOWO6^SXS`WG^2J1hSPO4i#MWHS6=B^VpmyqbKgpYa(hGxdvrH6a$Osk<Tex
za%KV1nj#=yZI}Xk&PjtxTlcWQRD`daBs-3kBr;WXihx8APnC1z2XO{@SOr|;I?^y>
z0RTMA0V83gO8D4)MndoConw#X+wC|Fl3hGYrf>TbBgDfC(f3!*N=ba!0ZKke5mDlE
zleH~!#@WMCL!kE>lEQXRU`ZWBoXscq<2-t*^g#?9KPD#%{?L<EuNBN1sFQQtY+^C4
zlFis>p{+qATx&Av=f6M#nL4whv4W#LBaBFYCH=%GF-&5;N%>nrrl8QmDVD}he+LFH
z;C1d2m<oHe8sHHq%3u5jIn$gW4J{24LSR$mjX4==&FU0CG9DzvJt8;Ow(i@&<&I5m
zK*e^T@|j9mU|%egm))9yd9F*qx^^7gZk2S3FH>gK|M=KF75?r-P>yo9^0q;s&rskp
zQfd0p@GL9%JgOIxLAKCW>5!57y|_jAgURGqc(0<|i?b5FA09{`a(oX)|MZ3ZW@zJ%
zo67S$Q?S4sq{)Yhl9=4)YHV#{8_}t^{x)&VXCxRGX}2f5F!=otQzENRuQK<a9C}fd
zmsFw`Ew#Uq{XAD~wo>An&1~IyRwbgX2%xz&H$1;|Mbog6Omo(7RX+oVP<V$XiU<r;
zx^?oX+U*mK1jyRCqmxsRw97<uG(S{1JPc~=d~BZGgWuTu2+G1-?a}!caovJ}Z5t{~
zL*+9I$ifBn*nVQode3o{!^)F{Ih&_=cow`!>5r>_{jANVsdM#>sYINLZN(!by3@;4
zaQtPw5zi8_IM7{M^F#^X@eyt7vF-X_;Z`rt3?Tp&Ln1CWj`+LznlDr~DK>%*Nex$2
z9g#wh4KQuJgACgp(mRwQ-(Od@XuL)K+6XFJwc>9zewe2`u=eG-Tym{GT+d2B=~?^!
zre$4mEuFzxb$(gj0Ro42OQ~siQxMK(8oiw@xX~Y0sHp{95qSFvIhJgv;BlbM(Bsu0
zkVEy@<-JAjjAF$esoUpS|2%whkKfOtB+kfUF2XQTt6Fzvyw~Av5%|dOVCY|6@Dd>p
zCzgvn{M2RU8zFyD`OS?V{Xg+p$S9_P1|87S171YbZezi*M4#62RWM@#$;Ccg3c}X!
zJ<#cKiQ$gbAsO`c_O4|}5LumV<Bm-^J3GPx0Eoyh{B<ASMnosVH}@cOWgW<k(%U!h
zSoCPvwD;^b4}5IyQ=2LRcrqj&%Y3BpR;^99Kys90PbP#lMGJIWej?V%^^*C1Mg*g^
z-UFVCx^{APdkx+?OIZk-2v)oN3hT<caFKGQ55@c(qrcKq_lA*PE>j;P6C@(AT8t;d
zjt!*wu3Af`!`kEcz41pI9Q3hrLaQk=7QOM_KaeKoU-9wRzh6-U`uUmIZEPnJRCXme
zR`)(`S~`RSirF*XdEU`!v%|3(41%WY*29~pBe?7=9oi!li6`4`Vz@d{=}eYw*B4uo
zCyD(@$4aZ2&`8dzEgMpX%q_(Ge*4mERXxb%^;uH7l64$5vz>E|OZ4MJ8hr{Xh1jQk
z04}P!u8aEXjf>i(je4%|E9M`HunZpW?Y;M6W@9o-=RYe2$RGy_&{~i!>^hxE@31^#
zZ=BE^b=NK(iJ~b7LQc}?keccDj-i%5hWtQHcI0%H1^N|#Z`50-$@6gKudkQIiF{Z>
zw3Wvk#1jefqXc%J^fKaUbb14EI0LRi7l;6CaA$Y;ZFbCfh~xJ<-fx!3H%daY2zY0G
zyY)W?1UC>|2+oR$!Z<C{hBL3#%&Z1px_46g;sTLII%uV6?Yqs@uFZ8)TE$-i6+fF}
zfs6$dGbf)dHA&~0AB%HrIMRrd-a~3(BleaRIk_>-rkYJxLz!3vx3XI`8nT!LUAU@V
zwhW4{ZJv*{?)&e+&@>|4ojU&tKY7t{QS~fng^bR6!hrMiDG;cuSc>xqUK)NOL2dJm
z&fF4N_ff8{?|E$8@Ygk(H=!5Ol-+WEor`quTM?(8)o{>){KJd#*ap(1>`yDsofQBK
zSw^P+jqZnUvW;lQAG74OY*uIb$390g(T|v{!&p7e{To8B{k1K9D>>6WIVdtmfmmR<
z9i=%ocrQEl8NJw!QHc;5>+xJGJh7hL)?5sSjGYY|p)Sa5729=xDneuRP4!+0oB4ZW
zGcuE^?odXt-f;k4bIbX6%=g599?Jc)+j?bxQ>oD6BK;u$*SoFPt$aU4&#|l9h*G7p
zssIw70UIG&n1EhiMr*!*on4&?J$b|sYX&y!Lj4GT(MqQ|?#-MyiI<<hJOp`1g+#P$
zo@2E`gWmCe;|=?__AZ^y$M3zeg*6!FrOv2#PC*Tsur#b3&lcGp<PMi@I}+^oM4CKD
zE~jUb(;W$!p4x6^2Uw%Fs!bv0&$?F5)05)8eJcO^Jy1x5AuH%6d#e5$n*8^K`gx+3
z73~+>ar*CTEbOT}cg12fK(7SU?`jmsL7Y>Y&0KRxtv(YI+s9M3Krf&n3kb){rMt~Y
zG|BRA{v{}jrbv<LUcfHA#=%%9g<0Z^cqjzyy;Dd{b&6r%;zspe;w6n`BcuifATzt~
zk5+vvlum9PaN%S`m81WB_dx<{!OojSy}=rtfWXYCBxx<|B{TCDIYG~{udWME?r)rl
zY@LIWBTEGs4&UE08y|~OufHKxp8@mHmz7^b5}VE=u*o8@t{FYf@Qp$T!6|fw==SXL
z`u8#1LjBdWfr`~P1HA_iW2}PW5p$`F@~o>vWjFntB^<rGnB9#vNCLe)GOaC6OrHOU
zOuMj|9+6mCW2YH|b(Cni+f&U^B2rMx1)4iz513@#-_yxniokoi`uwllWdS{j#k3<O
zQyQVt=>%lu<Y=>RCthn=4#7_V7NlBLS|9r*_CBiYI-`z&o*ZBy;lm|J!~KkUe>lOh
z7`d+Jhdq?;sHwp$2;mdO@!T@M`T99P7s^UV0v4fV0BaSET(_uvo1;)kwLLr;q!|KR
zc@~deLR2t`ik4{DpB8LPWnn!jI2$gVM}s5TWE#}EVN0>1?XtV<OwAxH(LxMPwDrEe
zoUXZfF<6Ik+MBZ9|1lX7R%E{!(mbmSTPvh8)0^JmS}u1z*=X-;V=qbC20oz%vNPR?
ztyY`5a_!t1SSV!Zouv#ytq;>b<A#+Hcb)J11x%yCpKd{5-sk|vr^pvtIV2l#w8J&L
z367nmqASg$Ty8n+=VUOvY+8F4;AeM$?3AR@gZ?5W07aT_2Viu^j>l-NOejJT5|U>_
zNhm2{2I4Po02Ijjx2VlIk8SBGAe$*+0vKsQ{Pf2Yd;WR~<Bv!A0%}1Jx<(1DSsqqO
z`V<Z-cZ!9dhV_qjdOOED5903S0lI;@SrH5MBB$=!hdPmIZz>^<1de}i$bLq?U+ES4
zF>paY+Kxu!k3D<m+uOh_K=Uw>C8p~2*ZxQpQfpWNxj)WM5tgej&!p<4Ia0RY<fOYP
zyS~?65<jBIi4>1&U~65AYTb>VI_<D7x_H>ppH*H?=?57l;i@iA-Iu3_*SX#{DFvWJ
zeG--o**(tVwb#;m4KKg=40$2Z3_!@`+~CHeSWm)Tk@Z+7-Bwv-4RkKY5sA_CBAZK%
zJFUNZVO!Rf#7v>IG8ZXy|3GX|2wNzEO@i`LJNs;-^rC%wYb+=~6O-|LFFz8)k-&`^
zD!xDw2=+=70D$V6Sz@{Hiig|avGaT-@})e_HE7LlA9lWXW<E}iunj|L=^qM*B0*os
zgH67Tm}Q@H_RwZs666Cey8<owB2{sn?<CM=HOr9e^bpt-I`w$Py_H8|*!_YYvY_T^
z+}OxKi)3jEgl_5rDcjR+uLR0&^?#xQs)>{qVMaF4j9*r;QalCe%lR4Z=+!p>Vlm*v
z_EzA2xDJ6?Vo<wpI2O806Wh!+MGSOSW?E9Y++Fv6poFs`!0)|9L5PH9&bxa{oTNSD
zpp`{-RM43Pcyp!B`GMvMW?2FK#RQ3|b*kM4`e9XZR~sF9Z!;D&^aPUI27@Bn<+?MC
zkbht-s*i-uqy)3XBG(?dyQ!8b+-AmX%j4^J4*Hz<HgV&@D?+xQWbx|v0D}RQt<l>B
z_VCJb{m;aiPLrOEY4N-E(~{f$_Tx=ZWJw<>GGsy~PXed~S;cV$Z-L~;k)o+x+3m%=
z&`FVJqQfvP|1HSGE-(m)NHG8p@9nCdS))2=KVEnbn`~rl>z7DK99tX$s}^9l(8;mg
zK}1^T|L#_8&8>}4@VY-A_JVwUHKr#{hKH7)*{3IS%Tm*+_9q>mqzk2dGPG%^PuBZX
zpked9gK$?K$Qz*s5tCF3upLj`SLdet>_v*|n4iNhr>SCeVfW{=J}F<QDTzr0D@x8F
zZ$m;~3f&mEN*qZ`pcSiZE|f=Yv8PsW`}Zz@D^~#*!s$Bz__IDV-5#9geH>00CJ7v|
z4b;MwIxu|ElRCTWg9ZG6nx<~((o#1s?X5IDuXo<?H(yMdh*?<-0#)Ms#&(w1Hw8!<
zM}u`Vdz~*QKvJ;{LXS*3KZP?%sT~AerTJ$CMM1bgtjVp}VLe!6OP&v6-#lNp=UU5;
zzg(qNP=$i>x<3#6P&t6?PDReqLIB9~@R51mQ6u*1h?C)m($%aWm@D5`7Ul+k)ifas
z4-%=ST?K=k3O~AAA8(JWA%jwnqJ`x3hP+FzmJ0L)84OUCJoReb-o*t*!-_L9-%J{?
zTiE0tGktur!B(bqJaAj$7N-3%hI?qlOdWNmCZ|pY0EJ9k51tXwc2J?EPI<NVYf(E2
zm2wUFBP#WMW9ExJyF-)<);{na_$p0j5ajzN9X0jJSkA~8G$xA#GOrxGMkw(;-WH?9
zOd%~)0|ND280R0YHVX7dX3t}!85Mtdw?@QwJGl?{xhisePIgIDLkFR&KQg8cNFFBy
zNq4RCjdTUpXZ~O(xG2#;!BM;Vam$QNvp4hmTzxp*j^c3awgqK*o%$q5gd2P4<$^!D
zOY}Q@8jTuVao3z`&K4#ID10h~L?<`c9tt`I4MBd6y~u1fcvf7HhoxbWNBCXS?k}BL
zX_@}<HJJpA*M#4`v+c_{g(qKq<02Pse#2VB!<Ue2=%vffT$Ubth{CDPL@_f&``s;d
z0WBh|Kn~M^*6D#xTYZqE>Z_m7n=w>iwS5l?RBK>Y(+R^eUCHgZ>?H>C0}%aJWHmp{
z?>Y(7nP>u727~@Q4fZTEYH}M<n)8J|D6^vG1|4`W4imCw>a_VyzHyI^A*@6Plo~q_
z$X=L{!b!jK{iM~#CMw5W4+!zqkM+XzdM-@ry!6Cuf}s8e6hVnDwAYHPYS-dTtJ<-a
zVD)zCfmjG1^u=WZo5m@OY;ComysfiB%RB6$F(5h9@UZ+G6XDwT@Vio#oG!q-7Vguw
zVy$PHdQzmzIy;``g7)+UHq9~0)oTcw<|bxjs~nFr4NK?aS3z&4o7sHzCE)&@uLN27
zqm)udJr*lzn!+7DZ}~OuNMXwgqGyTz2KqCCbj8kS#YF}yG>hFNYL1kc&2;}uymLdq
z&=7YK*wI6Yrhf_UYisPz=DjUaL^(PS*2ZfSwQL3*d0|^QO;8k?&K=c|JzB+cZ>VR?
zw4VIL>+$U`vQ+D5tE(Y*#nyo7ner(+ku@JZl8kog!G%^{-5Z?p${tfzyC(f-G6^+R
z{oe#l0j%26>9GD1-d5K}FOrJJ;stOXuggez_B`+b)jCf_Is!~^Zczf0#R0-rnhF+6
zm$j<GWc%(UyT{wZz``;Tg9fTPr^%@M-Pyu4n09io<Z^b8S{ECnkhNRD0H}(<z|z>s
z#U{;hBfWA~wkLrwW8p7v(lV|SweS0%5~lBh{lnobcRYSzuJ>sq`U4xH_99A;9x_3T
zCa^11Sm*RC(|59VXY`V(N-Pf#=)sv!Zhu4ATqm3sBq#*BM(z=Yt3+a`TI`7(zSwR~
zP9Er+v9N%^s4<Ej>{NixD~}9n+eqYw!ZUEiFdp=*($o0U6Eun}*FcSAK*A+~tl{SK
z?W|7E5Vq&W!5)JC)pT@+<>9OSB5T{_7Nawr+9Um$7SEG92R?G{kg^FrTUtbBN+lt0
zDP17Ctt&oLuB~u?hF$X?&`zBDuu2Tj=2UI+@$1drc(1bp^n2+P!ZC0opYko9z?1iC
z7idX95p|UAj?LZ@Z`r<%o^E33XlIQuCjO6$P<N`TsWhKj3Lc@oQ4rk^;?gUtMtVKa
zml2o>h_e44y9+PQNh(4kl2yT48rgm5w%WJb1fo6_!^6LBbts{EJ=iHDZP(dPO(2K!
zo(0{3%W@&ks6>j*w`#5p-a2i^sA|lfVu-%zxYMW&srcp|Pao&25ljHHb65q>1V5$j
zA3xb17(95`+u(j1dXIZ6c)Gbgco4*=4bO`4Qn82ef4qg5A%gafEj+1$Ej4>nm$_~!
z$fJ3Ae@fKmwQAg5WHdgjXu;(PEDMVqS*|-4WcSES4-Jq2eOy=|8<na~-RJDAGgV)`
zsAq?UuC1uMOxWM7vg>y5-g5Qo&0$ruSG9q!-tV`F1VpA!c_m+z&F$lA(4t3MZmh8x
z^uud%mmg85zxL=A#2JH}yhu&!j@3-j#!eQ`nMgaJ`UNx<rH-|()M9M_HXm<5CT0Nw
zQVOzSVB2YYyVI((O9{iNz!bv3U?pQj?vWzEDK{m>e6j^&$MNcbS~LfFsKjxtFLRjg
zwR+Y;H7_gsA~}TgOe33nCB#=l?;wFZ4m0zZ+8@2GW@TNLjSARjGfI#l0nGx=X`Q=`
z-M{oO$YtdIi(6nV#;b#%fU>sZ2LUuM9@M0=>7c1x4{7$3IHAweLgW|H6LaR2w0<W5
zMP7D6%dKpHqd#XA+6S<!W^=;c*v4)XNW6OQmnz=q;Dc_xcWmxRI%4=aS~*wR;fF$I
zjf&xi6{8XBbgcbu2x5b89>>c{2>|Rzej*A)T4h|GNW?Rzc0x=B)`U^I<Z(N%8qr<o
z(7nwaK3}g4+5Y~<%Ab#LocuzJcfYdbTe<?*@rb=X)>Xf@Dr)d%L<k7TmY~>kC!IYk
zRT-DhhTtHxazi85>R9{LL5X-3Iyc=KS(E^ZnM9z8py6<y#!pS=xL6AF5heO%L00R2
zed*+x6?nr=O>l3(mxjsW>8<23D$re-ZS>;pWoYEpfl6a7x5e2y-}qelYGtKG%$`~Z
zNu4%`=lMz!GyXGj^*6@dMN0Q;7~|2<(9lH^|Hk{y33%q_<|88V(|9udm%?Y^nk$ic
zJSp~p^Ah|NT`#7wStBi(OQbENHto2r<Xe|bE2igXf<BCR=vI7SYgBmNy>3@EYI@Xe
zH=NfcII0@6DzzCe4|gQS@`{(0m94rZ8}ngt$Sj|Ad-)&V!+Yfs>^(Nfu)Exp4t^XF
z`-DXY0!pbvKOTuU4;y=OG+hxc)zc>;gSrq7^cM;oBWl^3+we|kK^0#m(IZoL0W_D$
zVBm}sCSQ`xJ#f1LnXty_v#O)7wQY4p#^{p{hOTHTtO_kfR$2fWsLJBU{P=5(<8Q69
zordnG*O>HO;)FxP!wf0!JqV>+Gsz}ib0tRQ(WtW#)7Z_&K@wstq#PEz4nqz0C7D9X
z^SIb$-4C`jBGV-L^R$MCDpmmA@wcK5nx-=bkf2H2e(x6Mu8t~a-T)@PQ(pZCkWSFR
z5A8t1t>+3>KgeQ<p~$}alP8;RoJ?9bw6E30y&~xfCQ9U8**<L&A-HfWve?X>AcGOA
z*?)8=uYB<xclbMl%XTWX@w`VLvFGyl+|<gt6Hw4j&{dfx6Mgp{@lC<f<YavprZk=!
zbrw11HYEdz^an2PE+P*I>{Mx&%UDelN8iovrdX`V&TWUy?s9Q+=Q^)_ytM03N`r*$
z{_f$yO_%_<26FjT_~ulkOQHnGy(se_nJojK^hL-SWZe*_yaW5btjA|5rqmp@$%l6Y
zpLmbCl=+(`w+DcV$Gs+;gw84`Sv;f{^ZWWLv&dDDU4B@&PI?FW0+Wl&Aiq*~?5p9-
zg1pGz^7_|7ec0BDB5TY$`f@d6mGFucp;a2G&M|V5tw&dC)HM5G_1?;d)?#1HX1X_t
zgM|-FGHLa+UsXu`?^Bf^&DW{0m+O8ffJMJsN-9D8-rXc&=GFV;X9}j;w^=1{zWSRc
zh&^e)D3*}7s?&bS(77)xg5o-yqPT@zX_#w9zO6VtFC9)zF*QHq0&P?5`jRCyGn_y<
zEVX%|znj54b+PL0a1hG|)%*_C7dzwUWyv9i0)CC=(o7WFPNE$5>>mmWXE5G#w_fqH
z*w$l!ixOs(|K%OYVj-NY{w-hNgPpk;avTC@g@=D^eZw=5<CT<%(*lUxtgw(iOx<Ny
zq&cCK!Id-MGqvm9OU(5J(-Y<(3eJ-PL>K6>C8!!MZQ}7n7#AAu@>8NO$kE0(jP#Xd
z!c&6VYYg>AZ?ZoFc^umvkHfu4QvXIZA}p`M`I^x})0Z5n&is8iYzSTc8w&Jj^Bjr?
z4<1Xn#HGORcKOgbk7+;ga5?U|bi-NuiOzw7fn$tAnyFf)cFd}dTyT}KrF3u|LwBWY
zU|^uU;9C8KR6`wgDFrsb;S2+4rc(M9Q!6W)LaXsw0><{xRK_D3vY4Pr_b!fFc~d~<
zL>hHDi-d~hd3$%AiBiSbG`lKnXdYHrf?1Ayx3?Y5P)LG~;9LH3CiiQVT#lJ{p@sU*
zK~e~7Z7f&Cp+tDKs&s#_q*Bt?uK8u_&8_kQMVF^x)HJEhkND+8LK0kcHe2X}&F7aV
z0_0)j7+tQ9E_CUeT1rSX7cw4m%sX-O3pF)`MRZro6VEEUxF4&3oiDtw`N3^b=XgeE
z%&k+5lsNki4V?(<9p{bj$-rE<KiX|wH)X0B*Kk=a-tx3}dXiUedu6$NflzWcb*@gr
zY2xV9g;m0cF##4}v)OBmopkr>UA<FxaUIjQK~-(WShlKbGyDj=HnK`uiGM}ddB`-~
zqUvy?Rr;tBDfbXO>^R$YzCg!ucgIY~<ox`A`xE|qk+Tvz)@0t<G|(>N;MDg%JSqK8
zdD3Pmx)5Z&C(IMu#U}<s{%G?hZj;$MM+=#ZuLtLOkCtq8rCKkzaBu-RbB1n339KEI
zZIPF64ei$Nb6J>bX&!h+)XK!wD#sZPcO$k^_m5}Nt;WN&cZDO4SA`OUhlk=UZO3HV
z#`SMVzJ!!urRW{IJ1h@zU#Du7NZXx|NYQtgkBjcw_AqrmalUI>VP(okb)vIS9c?_6
zA}rOKx@l7Fsgvs%r0pj#+Ap;l9VxuX9M5h$Q5{V@7w<TRE4;Xv8vlaqGn=M^+;kw7
zCj6Vg2H|E-h<0<Ttx;E40#(o>2G70Dkk17rjKJ+mV!*oAx!lwCl^<v9v~28bePXF8
z9X{ckt5ueKF2R%#p62HI9iao(4T#qYF_V<?7!)$bU<Ge44$rOQCAduY*~#q0tfbcG
zf==c4=o^RcKc)5`+C8OXmthjOQFMtkQ)KeyVWgs9NS)T57aZdX?sB~NbU})CI6)hh
z_h=W&MckiqVr90G^Q`U1<lxYz+!Jk=lkQY+45o#)H=f$}=6pvHLsB#(YSWmN+-^Lf
z<j{6(Wa(r~7$FVfX_GmguD9o)MOZ2DqG=vHcL5Lg@yO(w<dPisT?6C!N2XlCp8C};
z2bc6A-D?SyL+a=YQWK#T%u`im$A%wBcY9UF-rfum&hm8XJmjGXH>_2d9|Phthc2a4
zq)}|t=Gwj4<KIOwpUhttt_o1I^7<X3@ye}oHex0wm4jLl+1(U&f$`Cfj)I+!muN;}
z^QwTj!B#L7JLBoQHWL|B8K22K(s|9dQ2%1y<;f04X=Pnx4{m*M*XHZG&6&BcL*vs;
zfwAwdA4J-*@K+UG&(1gLvR!ahYD&DuYdzuEm#3v!LnGJQZ~4vw?{doAW6rL~_K1|E
zvA1b{{1Vxhx;%}1?E-ES6C=jm5j#hAF1gG7(TSm%abC(ed#t7+?$?h*;#K(`zj+Or
zxt!80F~8r|v_;0ZX4rn@mC(J6sGEo$lO752+p&_2WazS})m7%JlDh$lCk6GP64ZQj
zRLrC)bM@F=>(<&&*oY0S=@j0erP5fdhp!~F&Y$dsA0c+@#t_%S%VQgQM$wegWaj&a
zh7LY%sqd+in@Ktbr+Xr^X4)efmUz5P-Ix`r?gcw{`vV-O?T#eTRqYy=62h;9e#kPC
z6k6(>^t=y0L;9Swl9ZZscX33pRKK){`pg5cM~qqqPApvDadeQ_FIv?5b~-&z#NB#v
zg(|h*mPQJrhln{Rf{H;7%@AKQf6^hf`RG+9@03<3X_r~0Wd3|nZ~8r)8sn7_Gik96
zE#R=N)sY^n{bk#*UmKNkbIxs}=G1qzL9&gQ!Lr76sc^Jz9a4}mhor7<%?vJU7}Qyq
zwB#l7TP|#r)h@kQRdMjK$J^52xa7AbE>~(`x;eD<ef|e^%P>B8H;smFU#OKI4`m%M
zv5(blTX-d?QE{GTac!VSA(rO&{&(j>&RAvh*ktkA>tk+HB8@MFv2xXx<gTjAVm-Bo
z8v`-+sJdnQjtKe+Glgf#v&7_MRzHn-%`hmn-g)-vHNkv;wr9v#*%L|RizhCjcRe~6
zoHqSwc^*A?Sb9@AWO4`me7vyOhV1_Rf|i-l-e5;*CZ_{*c`7bENWab0Lnel4mh-dJ
z4j~1|`{r%zj1z_3$JRPT@r0}=?rkOzN{Zo#goq>3?Qm=#IKT@X?Nb=KH)lL!gxwEB
zbX;=@4Xgap-R-ec<}^>}sS<0yli9BwMI8r6cqmV_Wv=z-Ua~Tjb;PP(GGwRt;Ji6&
zl>!#m#!vqMWyLwHl<DzVyVj$5&xRu~N<12wCeV%WcO3IPIg%GHD=|YlI2ow&2WtcV
zpc;;vy1iLDoY=$&gsM@>`|H*}(B^B8tcMO5Opm8`Yj<mSwCzG^q=oEcHC1CEnS18^
zc(cunc}h&I_twF~7os(8iP*@xj5*r+t<3_BXxf_A$?meiI#63;BP0X${~LE~XTL$`
z-PZ{d-D_p|Bidw|c|@l6ALv@rTjN8w${CN&b(}~gZo2Q&%8rZ#qDklRnTn5%?Y!H<
zn3}G#A=3iyau7w!ysa!DH5cT2I4j6J5@+Z|LDE*2t2{F1bq>l;q+Yrd*A&ZN+6Hjz
zt*s|NX6D=C`R1J)3*Wp~@S#-9y9-suqaC%FF5Rljx#_-{YS^@A%ERQOULjDZR~z>M
zY&$BlgY%WW$b2aNvVIez3o1-Pjp*cco)So?`wBMWx<HU<9>~c1%jc6;mE8$Gw_8(j
zSWC%}3mczs88&?3C|~{2Zk~pF9!(2>V7QhZ+3Kp_y3)lL&4#`p`e&NS-GEsdR5F=E
zYMnfuxFjwZoASRe9yS4k_|Q4bFu9RhdSaUj;kI4*`F>NOP7mt0p#39ELbpARPj>!B
z=eus(NTsev$(Q_ys1x&c8R3^*=pYliAnH+LlH4H2h`w@5xpr9EE3(vla3k5y+*NDe
zrB?|LGpu%LFO`5^{Aq#9_CmZ6SK717TN#jf2@a5tuuH$Ht(3Tw7x+>5NX>Iw?F0sq
zgfD$lE}!ZFKk23)ID|OgKfa95D+BFv4Zuq^wU3cn<<67pW?e)Ew+T9olr~Z2_ZT1(
zjTl|Qm@;y#V^3qc%+|ZRMo6Qz<Gu~?<4c}+mZda*hAYyg)9kK}pJbJo^+)*emg8q&
zLAPAiaObxt@RSNJWM9|456V^+XcXNiU(C9;TDM;5s-=vhkE&W=`bL7<6|vL7_G0ur
zncak2bk|5lU2m1Nn6?&L;#j%O^thT@OYgPiMrq??XQF8{Mwht@s&i~a+|aKiEmM=q
zdut2Ilnasc<UVE9o+~Bot657zxA@U65$`PprtgfG==W#N>(>-tZ-vX@>V#_3Y>WH=
zeUAXq<|Y{QBqE<qC#`<o$U5(iHrKl~b)4&a8u}i`>T#UtvGap27bx3hFiS*a6??QF
zC3yIq%{&#f>doLITa*?N$MPe4^*qT@ksf3pQ*VF~khLg>hG-6CoAg$TQnFnfn4p;G
zz*rgFS}ZqjytEUUC9<V${s`uRPG02gOv+Mzw6O3-Jq2`EMAkRFA(S^UGpl0UUPWJ7
zdC&(Y{4SyMclpq#PPci6rztO4SKvus>4+kvU2}sfkEE{k=6jUz#Vgz?<4WB&PBm@W
z9IlXi3CYJ29LU$H8?1$?9D|s?V(#8k&!cTMU^WgncJrFG@qb8)Ik8E?Jw<x4^(o#$
z1~Jm);)fhTDyo*Q-!pHxTHVeslmA8}6boHP!Ps<Hy%L1BLVVXw94qs877Op=f*O%L
zc8+}TW^6Ys^<9ybT)w<z#mO-uacQ0wiPvpohG{$MIF8z5D}MJ34WjXkN?_m0tz~&A
z11iib@&s<oLf*CSwEM&S2&(Wi$e>&FICCj9&(vekp65itKwlbYMNByfc1)X#5_xWJ
zepn_!?fiYLQcAlBD2&)dMsg5&_t21w9DhVudn98#4`&Sv)#7Uq!(gV^o;$t~e_`!a
zk$pz8F*=(D|7Ng%<KC{ZWdX95M@<5pnWcQ=70-bv?!z_x%}9}v&z~uR&Ou4>_rB)Z
z#!!!sI2a`u=EFA*w=?yI14vC~L6=$riR4N1z0^jUdk>F~Hc9giSfdgMeryAXRfn^R
zZ-`%YOQupBu-O`2{7M|<s@wj_8?Zt^FwPRZa|A+)Ati>BUw5)-GkQVCU$3ynU$ftF
zbIa(F4EgZ}@3SSd>2i+EWY6w`gNva;P&TYXr(U1w_P|uz!KX<0@W8V$ozaXka!h?U
zHDPG1w}{?a0h*3&aL5$@L;0X62<iD<G<98FJT{8Cw1jo*Uq%28EZuQ{G=X>$fzd_!
z^}x~2uKHf!Rs>g@G+bKT{v<;jL|7we^C!EAuE>bGrz;+dC3Wl5&2`D@Ed28|;;ZN8
z*I%f`9N%^?oLnK7ef)%*?T+P0Id->g=}qngqu{j2Ak5r(Y<XK6_pQ$HtsnK=f&<<8
zoF4Hj*&c--ymyOxki9}%7nsY^=ZCf^T?b+JU**ZK3RtdwFO4Cf1*sgTaXV$XX?L2)
zBRK9@xT1?;V9HHgv~VVcgX+~HFw~HrIwhO>{xci8i}J*L|0|vp{o^HSssUZ#+kV7B
z=D8P&xQ@mrKl_|GZ7=j9_{*X}WC_N=K*Ti|H&)EgGqdZxb!cc5vwN^RX4d;e8@*DR
z_DDxZSg*mi`%s5Hc#R=nK;H?mvRsyeCe|F5E>VLFI^EFbqsB>`pGFfG<;y4XEJs?k
zv8~?LS#`M%nRr=$8Ziy8#9J|m9|vt+HTC#jL6gh(QeO^+gO-WYCL3y~LnTzbE^)fZ
z;#y@-V==nRc3^y~YT~eQTk@`8%#}C^LFQZjAO?;)oddLr-`)pJi#pFjF?}Ew*oQkw
zt4+PT$E!bXm-afmuL;r8Pm-6RvNwtY&<%%s&*1vWKo#NM?FGci^!Q-g{c~cF8Od@Y
zjMQ6@HFTzyna+dFb3IwxIbAL#eSViZB+udXsOG8&E<85NCR&6)XFY$OxP&^+59<Xc
zX8LU=<F}*xbv`tE%~xA2?^X#ko6!V6`@HgP7qKsB?3fq7FVmn$!*-z<%I1E3t+(&R
z=748A_i$G2_M?W^Zy;0{EQ_O$FU;9|@}Sy}!Z|O3P3iI@>5|o0wR7eRlkanazEtPY
zAJ7%3Y6z!dCsM1~_=qL7MBN~`46AR)ZjtN791xIeQ1vr^g>EhUPO%)r?$a1O({m@o
za^i)=8Z0lNY{OK!hA9HO^X|q>+;PdDyxA`bscm2fy^MIQ^dVq@CN7{l{EZ*EcDmuG
zqcOj)o}DJ+(-{j3&*yG^CO8q3Z@5ewa{l~WlhwNttsQw*AD!OyX54GOP&NWcz2SL_
zvSS5V?R1O&lTO>7nOV~-=h5F1b-0v1cqf=)zf7NF_O3yHD+T?-p~!>QV?1tx*5j1#
zWY^B4-(}G?)8Z535FE)?%a6PzmqIJ<J$Gr8KIH0oVz#BqV(UqKi+sw6w{j*#;KPh-
z7IJcORm9AyZsA{O565<+7{zL)Y!I?_bN3G~)8ez8Z&l|Q9$=TC?-MQCO4Lj{66iIU
zfu2Kq^Z$st%77;OukFT=l8_XTMv(5VAyQHz2+|-@(w&113279iV@RrWHz*<?H9AI$
zQX{4Nz31~h|M!a@VBWjW@6>g!bIuQZSy$4iV1qh8%h~9hq8SsrwZ3W#)=?o6Fn)so
z@^BjM^DWyAdVaB5Cbv1hwS7#MO)X-Ka`Q48?lVSaQ!}~<D|c9c!%IV)w0Ar*qJR7`
zscT=kJA7tjxpcO^@*DS_t;TN^g`y?&6k2r4w&{0{L%fqvB5PS&RtzMY8}TtF*lynF
z>cyw@A~T3Ai=}e^$s3%Ng|#S4d@u+y!ir34K!40rmKNgX<YO2i0OK<+wslN4t*sl0
z1-3`a1#JZH*Sx*~_NKbe&p$YE{Kw1LE;En9Q+w32v#GAj3;4JO0&k+k$g@;{?HG#U
zGpP$QvT|cY;H@a9E4_BilG4OgWYY3%_lksm1>d`O?+pP3NB=~fneJB#q333}k81c^
zOUo!CVNC!+!8|CEq>&E4d<DJ2Z{V!ZL_1uM#Ti_=pZ-p1&pou7Z7p;l06}KS?a_74
zdQ>89+UOe!h8cLx<NRC9aOe+Q^U(mGmiS0bZGRmvGD1)mo?gi^HB%U?(c6bN5FJGJ
z42|Y}HF#B3RgAm>0@uR31WC+b5IIWzWy+^dpY{(Kd|ZyEg`gkb5Q6c?SdoXvhH-Ra
zFWde0e!9M-eP8cLc1NZW%_T%}Zb<C9M~*!yRfI<=O>oX=#U5K{VC!Ki69uy^WR|*O
z>upaemq50Y=EWmx%o*5PuczDj#f(yiGN`n>Zln3^h3L!ctK_SF>c%Or#f%@%6g!1%
z%v@v9donlznxXh7kCBrsDH&}H<$G4Y!eZeHxCSBnQT}_K8T~XFDd!>xxN6qIult@(
z%|!aY+-~5S<H(n*m-`^J-dm)qF3`RdcV2jW-V=*}>)^6}&y;_Tx(GQF4f?8b1Hlf7
zxJ65zCFQvyoh3NV8`XP<3IrkBZGi_1rj;&bcakbxoYIQe>IceOf*&$7gSqdF=+O{a
zlzI(LBr+t{sNsMh8=Qjr;i()G<x#s@r9>_}!@)C$OMRKKz7%fTC>Y5?&fLS3Q4#RW
z%K7pjSSUM+s|QgGzXmQt%pw1ESMN=RCk0KZMoQ5K=b48$KoB1qlu%E&@x1KkujC<5
zt)hl}LK50<Lzxf3r>Ca_wax*pZIOe$ZRZ7TssYd&2vLHT&)!Z^gm<rGv@VCW;E<Vm
z*N~1nXY>S5LCK8*Wo~?Cc!w|8Sk+}XWP50Eu+6b6n#uxpd@}?v5EWdn>ZVr*mltWF
zCyhtCM8b5pve@8oPDqWWpV@gWO!jtcLTCeQV>nX3t4?4~w<j$61{j~6)6$5(Hol?R
zXaaO>Htzeq@E3=z6Xb$Ru&~606#dP0jNpwO9eSmqRKbo-mu*)LRND8Wq}Ut%I@ojJ
zYM%aLH4se8WiJ_ET+gaUm2uvxc0vlqf1%$|#kw-a<{~ynbkk0hL|T=Z7rfwNQN$Wi
zpZ?pTjVAdWPLiFrfs)?TS@+6R-D-v{F&dXcfLxK87Ezxp=TZps2@y^b<Og5fuIR7B
zIT~_w-*VpxUd};A0r6^s6-gA>z47a#$%ZiBC^P&9Sf1ipfnWF9&+px~1L;qHS5Fbp
zfOH7gLMx7%m^W$8g#HLS>pZ?Yo#YvXB<pE`C*S7r3KhqDlaxxeHB*bJ0LYXAb<MBE
zAZnEFT8zDDKuh#8FNs@v{t6ptOOLASc_!xFpi$xPjt8Y0GDX!x%m)QAsul)}MYt?9
z9?%;g3&L+yhwY-WqE1s4At~?PNnWo4!I2+d68BcE+!?)?_xp(N{G#d<fK!ozR@s-y
z=T4TMhJ<OnOQS@^-O1LkM8^oz;=tGdN!BS*d!2`LD#x4C`?*mRoZm;LC15OM28ehD
znH3ixXB7{=cXv7Q*L=p%Ll1(yq(Qk}Dtsy~_A59NqP0$euK)UA=xm+Sg1MH(K8}U#
zenM)`YZJUdf8%qXPsiVJKp{j^KI$(v-_Z=kqxY76<WDV3lgR;=z>V~t5~Y&7tB&a0
zi79AB=8_l~73f7L)1zxHgYRFE0(pWZk!nEfRm`?{B*RIkrk73*e%K>sTf;Oiq8;&_
z@)MKdKO{<3d`B|<cSpCup8B6hHOGFCDE;{L8a{1sS?Yg~<=Owel**o&OcKNZy-zRY
zHjnJMr}6-wc{dB1!f!_BI#scR-Z5V!g^)p+AA)BljPjT2rHwYF<o1_CUa!b~oG^pZ
zzz-*POzIuibdL>E$w82>_mSRP)7;+<9^COP*BIpPI55=mbulZnNrw_?>Ir3nC_4!b
zWRH|Rj8!hx5#~Q*EO99FCkkHG@@G*Z-#tl>CS*9&%gy`9wH5aLHsFN6a5FPXB+r#e
zKi(O|^y&;!;)fYRyYJ~t3ia;Mk&u>y)7ao0E?}W8Ho1ukt4>{wWL~3sH0B}-K76&f
zG{a<yj|&7(GFwn7XV&uT_KCf3L!Fz@ZTto<fCG!9HmP@E$laNwnvocAuXdh!fDPR(
zh09+qadHYY2;wtlT7A7s&WKae^JsxX0K7f9U_<G9fH1j(+kWZgf*Gb6f-m_FJX&<z
zn{ISCZgX~UWuP2o5>AfDzYSeH2PZ!*rD1eT%<@FX!4@p`FC{t;+iPe<@0uALBvx)&
zEj{NjfwXWYrp$fIw75ugs12dn!Bu^T57Asqs@3aPpm~?NHJ$-Zrd{9EVy5dgaPQRf
zrId0SPTf~OUipUkLgr_8s%N|LA@J3kTSm+k8E~q~G6pHjd7S3fZ#jV2%pkK1&(Q5h
z*9Pz>tW<ym$TF~dmfM*<J9*<%ToQ?~+S`Rn%=Tbz1JC?6dTVdtBU;72xFA5?Ti`se
zP#=exz(a?~QsdgQXMOW*L3Hv~MFz-6=#p;WM=yO|Hs^Xnj`)!_W4wHMO*^n#^XlR7
zw)6V+W{bDcb+4uh;{!=1-G^jCQ|YBx;Lr+)*Q`yR@Y$=0(qqRQ2UtZF8$D!$e~~hJ
zs?OQuV;g<S$M<S;CeI&1$nc{&o|Njj=Hmyct@!XcY}A*s(EUC&R#|q&nxZC{2*|7a
zJOTnC5}N8sJm5pB`}gnnj0&wd)>=rLDvh4ibsqrIzeLnZAEAZEfJ@yKY#$Ae?==h@
zYN)3Qaf9(8CLO{Pfw!$Kd@#sUCR`c4s{IVWS-&PZ^))GpRmUHhY<`OY+@A)u<40xi
z?IPgewf|5-`*HtK>O^RSb&;1GA9X@|=JdOD280`tr~_)m)bC)q(7{}>fu)BLK}i%;
zTRW?n?)%E<a)6U-J8I>U6;<dUG1}ZY)SruYbfD4mEegOWCfx0!6!Wyt#htHNmmKcg
z1}WgbQ1v8jZM;6$xFq8dVueFJz)d$`soHe`_ZvUn0YVHJej7ZPH|_J1Fku%Y#5`%~
z7}sZB_sRfvRX!#T_I-CPPkOBc{H-$r*&>RXp;8NqrPQW|21yg#<a!=-O?D?4$=u?L
zkKTt6v-}}q(N`iGu=i1fIQra+P8PTfaLdEiocx{3#T)r=lPSGs_i49AGjoy$*C4<b
zyBT(HSzeYTTlv0h9O^aLo*7B+#?|NjAV?h}S2h$vnh^QO4+yDNpe-4x?(y%%J*Qa!
zhyUr1TX9%2D`<;U8rNMlzt}%r8A!z!{1u{fapq+UxrOI)w|}a3ID?!Oo&jli6_`S^
zuZ0z(w?-Mk_+ci{uJDY{4ZA5z25P*4RH^~r#8>R1;s%}pxfj|1;q41brHV53@w{%_
ziRAIDIt=YF8%=O&Z2jcXB6M_GH_%vWp33<R4tK@n{cK#h5Yll)?9zPH;M>0E%t&xE
zyDkRwU5DSPW}s?fgV`_-Vr?x7$f=7o>J(r3%9xOL`4p9i2gc7=!G_hU@Z|wKo(G1^
zQesGu>*3;e2CX3_ei1X{>=L<WF2xMH(+uecg#y7H{ibKn?El;wUL;zBA9J$d4Jrtq
zq`hSUFHxY>FFL)!6AV}kgN<(AaJ`mBP0bz#Rcfzgr<~}=M!`cMURIOSX9F9G%Clb;
zbSb#N_$OL$R?Vm(A+!6Vrnq+-tRMY+k;|aB@cEBQ9G$mOi=X?V&Kkj%=8^qRZu??K
zHNO|oMKLP8?HoifY`Wmc)7D;L^`XU09TXO?gb+xc>q*P|$HeRKpOx322!PvYP}0ry
zZ~gQ!TiR_p5!f&n0~RV(-5C{pA|ZtS*>xkT7Y1UeZ?GseUk>iW0(5+c1{BjRH8Uxj
z0voU#FsxG7hPL-nulY_#ij6z;YV}TG)#Cy7_xI;Z0Z_Vl<HxU3J`P61p3(-AqM6f4
zVn9qzY=D;?2C;F<>|89t7Wj06xW7MSmO>0CHPd|Fp6cYb>>22Jn`i9=Ayd;{4Dl>o
z6Nn(qtmba)y%6%50p^jl`Ok`+H<?afh2Ou8AK#%EM>?(BQ=zN9zsRo4f$yhjxkn>1
zpdjBe?ezI)6Ia3jokjTQLtMLr9k<H$<dEdv=wD~tKB3B%zKHVrQt^Zqk#{yfx9?wU
zIf8hee^0n8c&%c=skn>JToHK#m-v`@2^TmS%N($D?)l~H>}+n|;neEumMC~Pu9wiH
z&Y}NRmiCq7%HCrFATxtmkv4<*<DU&lNz|mdv|fcqaQ!BJzN~H4*v9Q~6hM~5#_3A<
z7$s=EA08T^j?zO367Z@3ZqZKQ^rXXA!gc;48<&V$GGrf{ab|Y5is;MaK3XT?wh?8+
zfjV>&EUj`{9AWWf7ByL2IkCuP|BUB08y0wp5y&p&t0(mVi#I3ETCRWSz>4JdqlE*x
zPoF+b;4W%Y{1Iac=oby96x9s60^Y!#=lfq|Ot6-^8pgq3Y~j0QRqnEINH>H(_S90-
zsDA&a&!)N7LRFcwAOoPZ$9AB;mSl$B)}Jd^I|8Mi^o$vTe7MBjnp*+EveY5pts5yw
zzzAyl#t=JC#XU$;3Ji+eXP1Hq->YanGua2`b<>qGjoRFL`^;;XD>f2B-8JV?QiWTm
zg^ClwiaIG5;QPBjx(jT5P8V=eX}Q9mFhBQZ60@Aoe7vGPf)CLL)*wMymHFX7XeM(b
z?4BKO_T4ez)Xu!4p&EIBfWjbN?iB^0jGbfOv*;u{o-k<^Dg$i*0<5IsgmfG(U8xHc
zC$E6=f4|ibfW}<pz-<-LmX5B;p%Jz8Fo~PE#O--lyo28WKdPm6XfO^>D}=~C9ocV$
zHv4QzJ1w+b8Wp%_4(YK30Uv_HC$i9Dv&h3$CU7DN*F_3oDc3|{*Q|gldI^FUq8{>(
zN&m^|)%re#?`Hx<<Ee6gRdA4;K))de4ioYekS1!#=%4q(IwvDIxt9OAYDDZE(bYJ)
z`DI+l5sRSDqsh^qJ{Rt2alRuVI#(7fDy6C@33;LH5#pn9eJq||Z|xhX;jh@amqbMG
zTwQY5WY0S^hjJhW@F;nY0uq(EaLJOCG2T#E?+^TJgR8<4m}bUei%(M%0d?Pg0cA&G
z#(2-&xg%Lm)8?E{&zzI~mL0<E6=xX<0~9-#W8Z#0rHzKW+;-Di9Myfb!n9=UC>nMH
zOiKft-*-C@2yk~n$izn2cD2`oWAqobNZwG^it5)(<=(pU_Q4s1KTPkDLN0iaHp742
z;>h*pdQ4_$#CkP}r4G}^zMib(1TV=$Jhznqu6u-ZwoWd9#s~s{lR<P91DX5|Xv-H?
z@FD^u`P=#o-N-^j3K8ah{OsA3{almxG0$ra5juRJyt)BCCqqeBKWNX*ET>m?GdzY#
zp04u|(w#ZD+~xt}`x!woJ=bz;$XA0o3L#gv0^RCP_?ueL)$cwr-OD-~mtR}sIx*PL
z)dab3pV}abOH5J!Todc}7T}qpz@Lk@Muz6oul9S6ep9X-e{V7Hie(TPT01$hvhrc}
z1!~(ixD74(*~+$dsZ89R8Jp(?$81-@VO#?C#aYGeFRg;NkDGso06DS_+H5P=?>~2C
zS(P_N;*Cx|BAYTjEl3l+zPW#zQr!XV5CKaW5o;xgD-G;z@e31sru%d7gB2}xKxo;^
zFE+eN$6-rUIRp=RG4*UW2kEz}D}WLUa>NQOxVCoe3S&K00%Q_S>^gzl={w=<QTU*P
z0aUsmgE=my5%cmWQZ`luvhaoglHwO2DKi@&Y1s1`I@|-Z&;5gg+ilOgqH)FIJ7Vw~
zn4yYFG-Q|w2rhAwTOQJi{8=nesVY(xkJK&A4cph$w6tV4kKgp>4-^$BjT{=O>@A`)
zXG@4s!=~ttdC1i?5Rmq<0cmSqWzl<w=rIa)zW*8@h-1EB4FJb!54ZicYm3Q*D{-QV
zbaF~`6fO_U?*(hEz2&q5j<g2wDT*99AYjc#3t@BSLkO?+Kwl+m5ebu|-BZ?O5$y`x
z?^<$&{@y`oPj2D~fvL2&f4vLZMLem(W~Ah@t^iPHzfwm4;Ko67CF#<y5&VT&8**{q
zO>KX9pmA<nVpuJnsgu(dBFiV}I<B!|!IYA|(Xc~E9XRuT@d;ZZgR^Bc`j!x9P5U>|
z9}d~++V)h40DRtO`>y+6FP0AN5$d;lTA)7K6IK$(S*?=$Z^%FZt78bb_aW7b0Kk5b
zwjeX!i=E5kg^>F+vg4bbpSOwDz*ZW#6~UjI`x2gDxGo3!F4r7x0|gXt;GN%Ah5y=K
ze=E_NjBnq@_-EIJ^E)lCpmVsuoh-i10ov+{o$NQb>{B7sc>qYf1Nr2|maJ=N>fU7r
z@LtmI)9}E+H%N3x0GZ-l#Fy=Q?HH_G2jF^{+Ps>`QsU<3E-b3I3-D9|Uee|M$W6dv
zDvIC}2_`kcvZ|Qwl;fZjL$aO{csw2rPiTmJPK}l=TP|SYSWyV+CN`gpeg^JyR1cpd
z15|QGwD#>!dC6<<v)7<~+lh8D<K2voHLh@lr?)!^=;%)Pe12j<-w_8{WeMkgb;i}j
z+cuH9E$6!eE!kBu%^X3GGh1Dh#*NXbh30DS?vUZ91OCyq!Z~+sU&ZRAfa^T}R>u~%
z&d_y6*UfQ{W;4UqM;jFg!>#(zSQvOUT?i0ZdW#ipshT_KP#dS}wA~}JYInzQN9PeT
zumcb)k5!2?eKn2G^F;tK5d|2O-q%NYSo8G#FP$U$QUn%G=3*`o@EEXhith-)w7|=?
z&F9skK&ruS;75A@WT!IBD^>(o0hV|pN|&4}wa#{cZo4qEn0omhFQBuqkF$(#fOP))
z$-n6w@tDAVVUy?Hg~(Qp7U9#M>>0u!hMdih86_=95)y4APSIH4*)JYL!!sDAFLpc2
zvxKZwyl-|QG3?mz^H;L~8A{<c5w*I09N9kkj~gR^Ie-`ID%HnpL1~V24sQ&w8W{VV
z;!OURN}zL)5<XoXkF!#o)fR*L^|T)XU|%hTrr$@OenidKZTwD2jiLZBeQ^f7R#GNi
zWbJP{M<0C5;<mvhuH8SVp#Ec6C>~_2${Ym7#iLB$kKs(swC~)#r}G^@|FPwC%1*la
zzKfvA=QedK0ns?<3gk~!#^!w&Kd%f=Ez!40jnFk(5W&Uys7(Jk&s8)oxQ+7l9nZPf
ziu*gqHoK6x8{h@tm3L(buK>aZ@`M{n6u#=P*8Xz*lfaXi+i{U9P|WVa+JhyT_ijIe
z7YK<tq5v~D#-59$$Um+T25B1{9F+I?{p0;-a=MH+WNJ{rmI;^(Y$<_bSb79FNClR0
ze87XetO=(ZL<#ljD8)d3dQ+qJdOv#w{Q-$}?Db0X2(thPTOEq&C)J<b{S_S@O&lC8
z6I%&rG1fCH6QBo`05nW5FeZPG^Q)cx&9GXNtpsU_E8bC*c*)IQfFM^CKob199}6UN
z6Cn<4=oJ9<ImK-Fel@}C&oC|bNuBZpFBkgkm@y=@zHmCfF@&oM#d;$*E^oCurtXWm
zNqxbuu;@w~v*z!cCz<*IBjR8y3j5mY+t?x`eYWKCYqInyYoais!OYqG@<mCS+4d|i
z;NnZ<k`=mmqsJAFnyatQ!+G4R4r4o_%Wcz&6dE+UBb|o6J!HmbzyCN5ZQqU)c^rU2
zL%QvN3TGDy_<)?G9zMWuhw|?-WufMDIK5m60zUjop#zmRYk1}Ey6TNemtuj;$G_s$
z{S$zb$Q%3y(#3S{iQ%%bRnP#TU>ld?PymZyt^do`aJY~=Lv@RKH*fbV1k@P}R2%j2
zI#*3~dwxvV`n95?Dl;?lipQYj8QtPtSQZ^FF--0ppAiHJx{qAAQUCHzG3-a0{H>fs
z7(1#^D}zb@>C@K2MA9SOslO!YCK>j;nIQi&b~q1!n}lAXTU{AMuh|S|^4`P}#B%Y_
zQP*$bQ9;?Q6;VQfRu+j7e&4G28HL>Db6Ux?4Y)&5;E)I0GX+`zX@z>;-l^ZSE0mO?
zCA20u7~-KF*8$MqY3&1zGeNZlvSJJ<Zm>L=TN@t5s`<59ek7w`sMLA|MzilyI^>ux
zggNmMqE0JjU^i)A2q@_L|46<^)npMOGC%QUY#Vl_<bQDgOF;v^3X})jZkhZ?vn50h
z*^d>|G;q?{915V&oHUv7&A79Re57|e7L#M$nham|<4<!1U{vdHk?hx_XuxWKkb(WD
zm*AmS|2jWINRviVYf4rYY~{y$9>aT+5NkXmq(%zA6ur2UpNbU8(#ea&RnbO(ehCFL
zaP#n_tV#Bz4BH>P`}60|F?nYE@ZUEg!_S91qy6dT$C@f1gcIvLw(6upXuiuA=0JWu
zn>(b<`0zYpK$sfBfW=t<z66;*2rbWS+aFnwL`0*KM;tIea@|U-s3rE=fBGLrljEDS
zXX8r~Tp?wT2Y^5utYpK&d+Q^;$~sfGF-3Vd`(btbaSdW|n5VWHMU-aG>Cf-fgYy|6
zU%A~Z^GH_C<VOdny05dIM_65wCDvoW`v$EqzH4n+F$Q36McXx&X}k)idG@CZy)x`O
zDAbgfKr2%_b%99|vi1C(608$*BFCS|Fd$-h9MFY@wh5{LJrQI9l{utI$T0QWJhs3>
zvH#>Dz&HIs6y}_TlH*0V)86|AK8u}Q4KjG>X8oF04d_VzJtk8!RF}D(Bl@{bcRa(f
zZ?052R-ONzU}1+4H`(LdW!(&YK})Eh9{cBqxY!2BxcoOFZrcX4(Oc?X(%+SU|L~O=
zxy(E8>GS7>ap`@>q8{x#9vrIwJm%;g(%ZU?5E)VidmZxr-Ma>$G2V8z(rQUaNlAJ4
zvvX<OndyK>U2ACCJtJ%-@UH-i#GtI=`H#|dTQMWOW;uUU9zLuT0Bx}ueM0O$bC@O)
zDoR~y`~F)F_!8z4@TXH6vAq)u{i%v3ub0CK!oMvWr}y@WB7OxKSGv8b)UuX97w|#8
zvZHFO5RGeVoc+O#c#&Mr9?HzXA3<;a(Q+`Xwm-aKs5gN}%tq#gct!6k%E{!O<S==#
zhAes%OiOuk@tL$gN1<VM4f*6|9?}s)PE!#p=K2fiZ$^<53ZS?S4X|`&aD(<qQ>TW|
zZ6ZJnvImIT>FMb?!!pxG?y$zBKjsjxx7Uy@8uQAOdVipWO17H?w=qgGC^wgz@<rG&
zFJ4?+tW-YRjJf5dm9li(jYR&~44|7ZOX_KwbCgp?Zs-9H2Oc5B<U#9J&Qx)10qhg)
zOp)|$0_;H}0*JnieJwD?lQY{%w(l?mQvQ`WW&{&NCHe&$^JoFuf9O430G8%d1~RfE
z!CFJtWq`W9N8*2X0W{sb_4i5rgb(wEJpnwGJ>*1ru&oN(N;sOhT5G42nY1}~zez3v
zAi?{IDJhd4(^WQ(jzLK@?VQM;nnMn9f(L;Df0+J0q=s<KSoc!ip7gGi{Z&nkkER^~
zL9yWECHF|z-cVT09UxAVO=)#hO&Ha|GACU7d;-OOhcpGOrs(ic#}%bo{aB@Cfao&|
z1cr!ghN-V?n3q597ewx-){OA%{!XS^`I4p}zFc^KOtlJFU+05^G2(pUI_)8i!(ZGz
zS8J9BO!^ol+?%E0X>Xr!;LeC`Sw-X=#Jfk!00aanSo(&sXkm$cD%10OD%iKhT6{+y
zm=EY<a(g}4?qrNhs2I7A9QtC^gyJqs`g7klRmHan>+yiKy#NmqE7)zeG|0U8n8g2|
zy~3ey!MbtR@AOd5x=U5qrTFsBA4B&~rR{<-ib6_Eg9;CT{$W3XedDx>MAC(6-|%$g
zT@SUSe&q*4|5&`A5>#R*K>M6JM#g)iCP#vmm9U&h68(54`RpP3sq1}%Xxac+#BHYk
z|3XV#uTpz`-#%EWm&a1cD$T840;do18k*k3+jry|QH80wL$-I9SmAJAh|{@c=|b`+
z!A+Cn5T8dbO<>Pbq}6&2V^*xQMMhc2IvxUv|B!8ZC6tk(pBT0viYK;x=Uq(?4kDHS
zTN8-5yi8!|x|Q`ILKZkEGsKS#KHC|)<BUqZXkSXnpx|w9+vN#DUzyxm6yXcieIH8S
zZF4stdt$X&pvsJDm&lUYy&7RL{_m)ng+N(}fd$(Ab0baO7~uNaFV7UoB@cjk(TR&|
z)0|i8Kl-?YzX8qCe^jGZ+acDJ>K5$o?(XwR<^$}%$J_v26RkBoT_5}!QE)XBaqG&2
zSwW#aXT`O4Wq;@TT<$6X8%+RGE;(-w7!$10Z9ly*3)v6U`RNrKh5Z$oCPJzG>I~!R
z#n|8YMKhsfmK;?#+Bzuyt}aK??gyX#47Q~F*FKQh;3o5$^RLn2=<mti7{j5$)D}iC
zw)}b)e#?5sg3dg_HWla{0;P2koUk*y!rh^(ZiGuYB_F4&HZ-EJ=}(y#M3V_0qQ0nV
z7VPM<evMd1Z8k6$DD&gLcxVZ9JbWn)1Ff#yC}Iq4*l$WJGsl97CI<vbTl_cTcNTD5
zv!7F!Wl*c!^zboStYK44WAf#4Z+x1r)B#YLWCP~`)1T0@u4&XjLHYNc5pD#M=%;&r
z7Zh2=eac^0(hr*+pF|C0NR*FXxYB>9QOCBfv7c>WaU1*e^s{)aGrBHD;wuZ`e-hsS
zl@qPqnZRclivG;3Y^=R~)D*d}j2Zhl8l0ZP)b+gb<BxkA$3d^L5NJ0VK9ORFIc`gx
zNV#5qpZfYA?IAP?)?`!LU$&mCB(f+?t@ey*?%KD{7;JnT`tIW_bNM5Wg`E0-7JUPp
zOI_h?-L*M22Bg$$e6fc&-?n?6RpRFLMRWiB-jcsP_c`)C!gLMj%8~7UfHTxzi#C<G
z_3jk<$}zv+YxFp-7Sf9j=vqF?_;~AG-EI809Rv*gLYE}xHi=JIX&}O^k7?1*IR-D^
z8#OH{(5~lb--cT5fTxFLJx8o2Q>|yN9<nu7^)?<4`f*l(9VPgL6IwmXqR^EcD{9ZL
zXexNES8eQ=f|M4FEKU^Yg`v!{U}+Yo2JJg7Y_haT0Ikiu$b;y@V+wMcJl$V)J$gC@
z$*6$yQ_3r|wU;20Zjl>UKLlR<^Z%lL`CgI8Ha6;Wvwzup@AYAHk_4f~?ol00?-2_h
zQYr<{#E)xD`2*~Ct(fD)!4R~)ZSx7umqC<r1?QQtU#JS8z94oato0Fbk%P<#S44NG
z9oX0+SsIrcMlBAw{ta+2<+Hc%-+OEN`=6!+-<o$7!T@1E`joD{OREJ4JWw@=xFb_l
zOt8p>Ec@x(6>|t75fOc<Mf(-sRuc7=4W&8uJHYq;7w&Q1>qo!k;^PU>#zf|Fz09`#
zYi}DYmb8wryh}QtwyQ8-$w4F1?imi)JR|v~*N?9ubZE&*+TFi)srCxa-C-*4fx76{
z8-CA269ZgfVfGO}Ui>zGddC|+ywo>1t55m`?M0G<M)>~*dQuS`5#Kf+*{)loWjc}g
z>>Q7&&@VYc0#dm6FfUzl0&4sNPjkHPDjq*vL_o>Gd~{4M!JZ?U)fU@|>Y4!6mT%b6
zxI9?*V?$;X&C~ingn^)5YjBxsawQ}rj3@9)X3;FeLd>Sr4W)uB0phX?d8!90Pq4CM
zeIy0ftMe7QHttV)-@wS-|Jf@Pj_YOR5MReuR4h18gKhMaE$ZXEPbXaW9hXIG3UxvU
z4Bi4E#Fgl-v6)$`V&D8ipp51REMNli$Zv354O5lrIXflSBdJ<n8I<_2w=~nsBzYoA
zk%Mg~R^k8mL&y<XMH~!O=qllQKWn6Rh|%>=C=b~BNA%!DjgysF*DbT9{M*=PT7l-4
z&MSv)!u7mc9@P@h!N$%*h3tMK6XSg)c#V~qpZ%?TGtMr%GtK<!$vrOv@AC3iDOxgt
zHQN08W~H|L_80q^GRo`T?O1Eh0|`%nK);)3z%gc9#QH~5n!8?LYFZzop5M&3-v}re
zEHxallESGi#*ogG(J>Vp3blp&{N7gMWt^a$ww`7Fzfc4veCUN3Z7wybZ<9`(4j1Ig
zN;PY->Wmn8bcx5Jne*=74|be`IX@OJeHVA0sW}QReu(YM`~znfsX$p{b3x}vTN>V*
zzzUG|?$M)c#n(#cbDeL`E2YwPh+id=N?|`6OpdBLmM-OyShKY~4UW!u_Rq83OrYoN
zLk?LdGWF;JIaeadZX(fz1(b+#cB|ay*TB%*zft}M0!BEscX9y45to@&wU)GZ9atC{
zn{9fcI9q3-_VR(sU!!o-=@7sCuDO2Zy#DKfq3ep#PH2QXdiJ+@a!nY}7ETxE6>NV3
z%GQWKt?rFq!R3*vQe=(;R~yK?){u)14PJ$RESZ1%J$s!H7|5c2-SxTuV2Dw$z{YIg
zWWBXt)zRF$nP`TnxC6H<A=Nz6lo7S5#)A*`@g6^6{-sFr@1elqDUhFgCpgj{k7)(E
z9`g1Q*)t|@eA^@ywK4dkCxV?4_=~3##St7pw}gt@%R_f2AfN63WrgCeO-&j}-=rRO
zGhiksd`#ZtpiMuJBJh5s3-l;PAA2SX1omdrni3*BlkO?>K{T?Uf9j>h5Acbo_OY{F
zDVmIYE>famq^IguipxmQ&eoD30l>-scb*^!Ipyo_EwlzF&0NmnT5KID0vOhc3^HzW
zYgXZ!@3wEj(oxKbH$e=|FJI7C*VL5QBTeRv4jq7s?t_NbY;cRbvmhT>k<vb~wH?6j
z3TdzCnW(=V^bjCw2sF*S%Kd?X0S8P%JYfEwV7y<o;&yk%25Y2{CM%&xI}7}vx-0Mf
zda21XR)f%6IZy-9fUkU)t1T35{k?ZU*92?ql}p@jy(6z#IiF)aC=;A)(^?BG5123Y
z&$k=-u8-Wa>x>}QX6ekk$iRJrmHv<dCGGTf!s-=f@{wfW;LwmOV@y{YzG~fzb#D;N
z_quFno2<NBJ!qW@rCca&7o&O;Vs27xt95<r0Mp0+w89}mTTpg5<qL%<AUN4wgbh%<
zu3=f4FY3KHX=}$F83%!jTUW8!#W0S?1%8J179Jn7Q#Sn5>Us^<{YyoD{rXk1KAhK0
zL&2#XYa=WG<D|2-v#Wos+ejTfL~G2QT}LOqwxdLeVF{4GpCmNmD+xI;I)8}y@e`<!
zOP6{i<%~8O!aZ3I#n#v3%>OECg9mxIlyS!JGxE?ma=n!YxwYe1s}qpp%f^lkL%=-Q
z{~Di%a;NQhR3!e|-8K<t3KYWFu>O_RQj1Q^o^dsN!pcVh7}(_JH94qr-n8BjluG(*
zg!#{a>4ZZzyn%BwSaa_uLmYRJD)UhhAux#IwMx~1)ZDg6r1%bPMZX#z;(*}W*310_
zQdeQ7^0c>Y+Ur2AAk1Ikj^W<_6-cx5I&T@#>O(2f-{<mnuK~X!5FE+i^`Y_8q{d2a
z{gCjUU+poN{ljA-{ch_)`9B|XRha$%vqolIu(a;yBL1&w62Ksp3&1PyQF<vR@dIS<
z<~FzONm+X7!p>v<Ze`E^Tnx$zp1HbP^1+gaUhL(V&EC(h1$JTL<$oOOuXk1GAz$g0
zn4yylKS_4673W(Zf&GBS3<=llqOZ5JMiyk`ZmKQPQ>FPEcA|ec)DeP$8%#+r+qJ_7
zz4wB@I~V{3nX;lJf}KHAQBg5F+1cz}NbXTu!nj+@%=!nG4+uQ4I>Fk$XBeTQ%W%`5
z7o|L$oMJ+3|9Bx88K{&r(9uj%5A(ofn>NwEiHCT=L}RtTA0^L)%j287i{)egeOc%t
zWV8Bdtj|afVt<gt^d*<3{p{F>PKB&0x9leS#IG*)bXd1VGJ?4!19#SX!<~Vv8m~VG
zh+3C4Y0Ea1tbwi3A!V2Y%}6K;qAlZ*zitj?*+LE&{!!2AINER>u&}dmHgL(z_(x;1
ze2bKX@{RjiB^GjWDZ(_f$v*@JaDZg~etfX8PL^!<Ez}@E_m%C?pC=E$h28)M60U_+
zE=gN$#>*`%VF!C|fD(v!2Zn}rfKFNocS1Mq#;(`M<)O6VdG=$rL|H(t3Oy)|zs^Xw
z+66qdgYyCAWJP;80it3<2^ry9r2Mqj49x0Hj!tvI{Pm#96Inwz2?xL^)Q;u#fiGr=
zu~tD`>D-$0OeEj~Hl&AgB4J;r&$Koq<LwGv=U*=Tal5=JX@TjSJve-%6HJLZ9+g_^
znV!rjX}>Og9zt}P8kzFkWuXoB>c@{COdIDCYVKJjt8A^5OqG6m(1mt)>EM9R5_$WE
z`qD1$?W}FzEp#dPu*!f>geTSV%hCcP#A|mt5Hp-+pPY_}R8(F76Mgt&I?MtB<pnN(
zD(Zqu!>nIYbp>d5KZ%H7GpWKdXrXMDX+5KW8@1k-q%Gi264GnBdUCGOu3<)6^H<f2
zg}}g6u!KiP3kEY|3)_yCs4B}6W&oPzl5LmDD&y5$b(HyOkN6#^rfOiV{%fTo{br*9
zy8VKsf4m~#$GFe;xc7l>wF=(v0g>u5LA3tKJ3MeRgl<JtWHLu`U^68URhHtX(!mBE
z-{c8=p-qNuvta!I@?<d)h+#UB06#?h!Uv@Gh|_MNkOFhx_72=%o$y~HtWfG`R9}nD
zq6t$1RQ^B9d;*r%o-pecssGqxzL3xH;+Hf*amCIl_q+DT+ms?DNtS|~PY|hxbd2#T
zd7Q-b;=G@pPbZ5M+iS8B7rksqcpkCcfBw5K#Wl$$O*5o4w~ya(Rf;_7ZvLsDrkvI&
znP-uzF+nIidAeRQeEL-)(O;kdklHk$QX;%{iPx(bV9L`^1G?H*Gk(Eqs1M+;i4qpN
z|DpzP?oT)@Gfs3=Q>f$;t4P4Wa&A%y0J21|!lhw_BjX0ixLiNNG)P;}uVe;g9asa&
zE0@DXA>|-U6Apz#;_ZhQGR;Kii#>ecRlwZZ2xkS*&N<!3OUZ~cF)S$83jn~@0+DFX
z{KBoRGnvsc2hxSr2jFe|HDnIZ{IRSK9wqms%cp{vl0Ej$%5%Ze!Zhh00P08W4P2X%
zzKls}TTORg6qxV=lIe4h*})NlKSD;jYYr9k7TmPBc`UuY*u>6h?FC51i~<|mX^lub
zx*?OixTL5~?90AVSTu~?9bir*M35dz@nwrS8a(BuE7IB_TKn(>eXe^``0J$pje-zn
z5e>yB+AL&SDOstZg$~$442rx0>)2=cI9z7rhNnYnNP?bWI(Qrd5+)zqtI!YMXB-$9
zfIY`jMN01*b&|$|C!(Z-SAu+pMtoDB=gVg$xP+AseF>mq+%h#czbc^L3a^aI0xtgK
zh;2*)s3vAIGKB7o9WSvOf3AkoYM#%;Y4M={@+?x!%QGhoDBvvq<|ZkXYJuGAYxBP&
zIpV?x*X>^|{@ND+2=@l8fRUw)#iG>F+ZYDD=nVa?&kEIXu*cG8d89z^wack5sNliN
z4DSyMwoy*=hxPj<*RGR~ooQvLC6cqVGTf%e>k6xR(e)C)s+KuSyvse_8<w@X62H?a
ztK5wEvBPYgL0x5^+u|v@3uSfyl`gxWr1{ssMi{9d=M(UvV}J3^HT4K-kwJ{NLc*~0
zqo$9j0RDO+4%mU_S-XFf|H><#{=zNOq-38U>4(fWz`$yW5I|<7RhGP#`u#dX%N^9c
zfg=dqxF4!#8Zbp5kP37|#)7VXmju*yeZz0KM^<0*<|XEC{Y)MMR=ta0M=wiH;||XQ
zuK;NfhsHj$>d<tv0?(Qg@gOO6^L*d9q}Ji}cRD}jL|qV!I&cj<Zm7?^Q4@Rf!Ri9R
z8tX?+Q49X7ZQLs;G9GM9<2-EF+c@PHb2a~Ib?0Vl+tczr3Y+J3%73JVD|Km!uqME)
zh{(fcvX20VFlSiutdjYQ!=1k<kU1Yb<C~T@ra<6ucK!%G()LJSevlz7Z*XC-`l@}|
ze>HGWNPYENi|l3lQd#@q=7m|&zL^*UDWrwjEh^rD@iQx)8Q0sb`Aw9^*SG6<0o&W=
zpKE?mAR2yV=6m;Kot45VB7%fRuVgf-w*1Y?r8?tPfhvLC30=2Eez__^Cw;N-`GWo?
zh_9RUQ(4*71I!QWgRCp&TT)5ZNZe$uW?!5vtB$16Bjvhe4XFU1!6f(WtV{i(-LmSO
z8PlP`j;oJkehu7$#^>Vu2QuF@%IY3jbJ3tqg;hVNE(LP!ye9d|ytuhqHXg7_FXuWg
zZ8v!;Y?676IouFrZb-CNn!ZdR+Co8qxj(~2JwDIX2npD=oeNr9mvgJrsOjc|@GSiv
zhwekN<bnk{XAIP4O0!(=^~`nkj2^B1`SOx`64C0su)TbDn9pF^NL5+n)9G=d1DI!-
z#!p0tJZ{Z)sc>EESY3%S-JS?vH;po@t*$}M7dwd~DVz5;?<LPQWS_9RtsYnteR_@#
z_>^z0L*+MS2~5;#-mW9f7?<AOu1so%1!0g<<s1}kZQZ?c-!=I!D%;lY-qnhatHfc(
z4$+u;^(Pf7FL&Z35_2&p1|!B7cm+e!#QL3{3JEg;E(Xs4&k+rZ7cojb=)RNX$mkbl
zv>1LWk&f%g5t#;`m1DQGvGKh-?K(kD8vgJ;khL@5+E?^tNj=+BTlcQ|6XC&Lsh^0*
zZ@wrFY|?rKkA{iHbv@tmy3yP!Qrzc5m$}MzaNT*(AJIbQH>L&cON^|&b?QG?Xv<v>
zj7Cipoyq5{8wA!+@Pc4E?Wk4j0CsYBeyA5=K>x7vo!Kppu4<!&K6j6HDQqYNgU?7b
zN19%`f%77Q-(i`T8J8EQWM?{|3O8!Zn~g9c@jNHiK8@4`{EzZ0svOhR#SYS=GY@oL
zMw2C!Y<1AikjM&sgP1?Myb1G3YLlr=A;*8htL@JId$bB5j|=Lghz@+u&0f__%d7=1
z->r7a2k;wUFLo}DK0ZgJ`s{%YKV*pf@VdIXrm3i?wD+czaI(4Aw*Yjp8X`8Ee_5%c
zND$cpaAhBWrN9<_%m(_M`)9WoTFKJe!qA2Nk813k$Yttd$7sj58PSz`EJ*M1(KEBf
z5BfD)8CT?}QwQzb*g?7`nOB2PF@<)k5icl}D8UJIxIbqsoT`Dw@>8+4zL;zZ)K12w
zS4q?s_0RzA5QK8n=SzraOWtc+$5hWQDnnjwu3R!z?$yM$6x=iOGEEz%nydz>xw(0t
zO<!`UR#5bAypgfNL1ui&E#h*xuka*aBQRcwB%<^WGq>Cvvo^U?z18DqdhS)XZp+);
z9DUD+{MMv=*wtvI#0^J{>`KzB0pw}MvAD`J^T_~b<b<Q?8bdOzxkmO3=NZ6^r*ZSj
zh-BN$-<|f|?hc6C-+k%6{{vlTM&5W?do3qUogfpwEP(QrS>UO>t!j+>ll$?M`!D2a
zANiKp`m4o_C22lhKOiF`M)lc027XC={9CgMh>;aPKTofedzJ|U_!H=xVnNF`Q9pmq
zi_Bc-(e0I4m*WheEj_yvMh#<eGgvY!)ZIp`v<_YWjPWB7o&x)noTdCoOnUfAE~ED^
zUBC<inY}xGui_aIwr%i{;)oS{xsmE+&r)U&>_hgs!y*YA!LvwrN|<=WI{P<Y@8OLk
ztNsNdDa_B}kAuf!M3rPpD!4zTD=pJm{kSD0j(=kTOuxOT7m)KMtg(&-G^)u_;YIb1
zGWKx7r<DxvxL?d*hfV+rUKzAi<f7-<=S!kqyGf~}&+<*%_?oGJAV%x}RY|rwbq|*;
z>FtYOX5h1nUr!AT_=nvGJiSc!PtD5rGc%!9R#t4MQWAH@aKmN6ycGuF1Hm7^+J+Fh
z#peU%Id&)H;3!W9Zxp*u0PKo2oAiwk0m~n*r>0P}ncg#<vmg#~c`*Ja8A?3XlcFe1
zCX()HrsoS_E%{BE@ljU(f{D(E8s|&7$%^l9{Dp3TZ!^3~&3~9cs#Fy`q$`mkrJ+2U
zdD_MH3v3)*PWENgIQaT$J40}b014mm@uB$6zZ@Mr65_ITU8a{fPFuLcSF*arGOVnZ
za@TqDMBP2_QW|~mgf@G&HEsx_NK--YBKEzp;xra%*HnJ-2<W_8cRR1H@W?)3M_ztN
zaI$WHXTy5EA-Py_eXG{zqD?Qa<G!|g`Eb`~0pp4I4;R|G!FCM}hMCq2_g$zK%)P@I
zBqld%ZJW(kr7FO;Vcr(HK7+)8<N@s7LVZ)c;R>kouS^_c!fY&LHxO*b2NJ->iUEf@
z>?t@=ii`Pi2;x2cYO0;xb?AeL!=ij(%2w^kBD^KY(<(tVZoi)`6D*P}Yd>%LM@=$`
z({TuYjoI|6qR;51z`9IlBQzSA&i2!U`gSmuQ7G>0K6{pXOSP}>W0S}w{4s~lh&MH`
z7$B+1873XBG&m6jhaKK6^|aQ!gAd}<h##x^l>}v9&SUrTID)|N%6EY!tc`eh>CUVM
z-FFOYX8o+gTZ36@)Ujt~TaHBY9RJom0p!jP_R_qYoC-E4g(&481GRChrnB8RAO(V;
zET9Sh3)_T0<+6WXngNe~=5apRG(7J6Y0?X1d3`2Mp1fYmAgP2#a7Ns-NLclMCEtAP
zC#&++Q+F{@iNv7_2p8EeM@~tkU+G;4uG7am(lIWP-zl(Bc4&A~7E*VXwFA8zT%{D5
zZNDlV4xNN}@&4B9@(PbHYFV$HdfjaTHl`LGt3p21y?lg&F?AhaH2g69$1*h;m%`M6
z7ZSGyuo!Q4#aPtF_qjHz&uiqHY5e6MgAZEZdX^SlD7=kl3Hvfhp24@mN#qnJX9*rF
zw?<;>Pnu^P;tZa!AQ!}94w`KrNE~Y^U)QARB5XEbLHjEM*DaP`LbYh)!Ui3Iuv`sY
z7<w<()*ItM)6>`I*yuDZTy*D7f-&S#Uv&29(L4%R;n)(ze|B3W_!s<CqA-`I3BRG^
zq&GaSPNifN*e|T8+!}RO%I$;?{n;6bN$u%kyEy>cXr_5^pt}C6ti4hz^KzPb$g|I0
zp(lWYTudi+O=72&x#*EgFM;L>vSF!-c-)ZAI$=z@+`&Unq|Oz>E8;TNaazwo?)pSw
zekQqba4o452Z1D##7*RvJE9%EANim{F=z7EY8&))a=*X2I@kr6GxKS8H^x?w<YZF~
zwO?g-S3cUd&%WvpS5>f0mvGAI(2pf&N61H-+kCQqzmoM^=O!1Q$6gvdShK&Z_-uoQ
z@Z3BnT)W|)ip|d)+0t?$g1df;bceBof5x>a24`?M;6#?#%oo@{#1Yt40hX=)cz>|B
zSrj=`3vGJ5%WZaFO-L!BKY=n*w}6O)aiF)Cw%s&=@>qHQpJ$$EA=LqrGMxWTyIQz?
z_L0dhc3b7|@3ske&6*AzYmdsaIvI&&Xqqt3ek6F!{t<2U&%C)^(GvOOzQvu=<(Yw}
zyDKTV{cR-bn1&bhu!PJ7JP!;&K>6uI+qZ&ptrKYs_4QkR4wDh|y#jOpsaCd<qDfhp
z0<J2%#15!e?9=DsDc#GLCbSQhFZmrzK`1?bJFyptw#VQzhl$3tBMq6zob5+y5+J#{
zrlzw;&PrLIZEWVtCjCj`;qgqfA5Sl6vY4LU&MXN{QZLfZIyyhYl-u3pWD}lF0q!AS
zvcFS$Ii7NOG57xP%*@RqX%AQj`G=da3>L9((|fUWn$_vcTA<f-q>Jd}sa5bzHt#>(
zCceUth0cCs(pBth-?_L2;V7RW&rP**esC3JajrPZdRt^=;%dL}Tm<KXc1p*4Ia{fA
z^rg$H<@Yv&SvhmFOStnU#RwJ7WxisEczta4>}5EXb@^0UA4WtsFIBx7jFt!qbZ{pA
zBM%Oy#*%S5P1nOUu0F9jqs%_op4r}E<cdIbS$?9G%E3C&;e1Jc;&UFb-<@`C4e$bD
zGzWg)YV3pjwDR_hp}1#ES3G(Q3%2tXd-ZTzHRE8i*YxMoUFwQT3jMs#|4sqnhr#*J
zE=;2&eZ4#*7)V!ts$9C4Y9C#uWoP^a>!JYH@4gs8OwVz@Tq86&gJyqNc|u{#cZ1YC
zHZFDcHmVmdXC3_0!W~p8lU?(dM<63a6xGBXSZ^iWB2cbl|J&UK@~1kHJyT#dhet$Z
zvrdWgYXC^*tes5Y2Dr4J2VO9cfCkPnKGb3@f_G^r<@%1c&`cFT{gN;a?z)8;T>Hr7
zefQ51PkD>SLv?laSv|z<*c}M9fcZsS=v9=+S|N_=#%T^6$#6&KDp*^Q^K$;YAev5o
zWnUj3+Yoirf+}y%KeZmLSf(3NB9Y4P1va$HC$2-*Gi8>HRYl+Ff~ZQp_-`<!4>PZ|
zsDP+Mf=paR%l5R)4_e_zdOWqfm#`!bt?#_14ZCPFg7rhQkU#$;^TsqRf596?#^55G
zezAdhXvIqBqw*SJkM}}HS3uI5o&-ywc`@2Hi<_S#e+t<?S|XNCKA#hl%~g{wRyUq7
zc~jgN{IK1B2Ukq_&!dEn(o5R`10A`n`S05N7l`0nS25e<k5jYf*YDMWW#Ub)D(d9P
z<=+YymSFhYWv*J2KE8C!Jifh~1T9zMmw?HbFBc_7QGs;uOP;WF+SwB8v2<!>zm8-E
zC_F?f0YGUCVaN4Hn|gHv>BA>+?(hETu1}NtEdUV|dGaR)P8F9aRdqc}b4f1X&PqlN
z%G#ATRY;z_ogCDfS)_fC{wb6cr{ykNC9VciCr92WhMMoJG5A1W7{&W+`b``}dz_)d
zLYdVY%pmP$pBoclxOU!Yrl{AQ`6jtm+b3AG4T|}#BTRlHtBD)=0Dt*Fu624`#i2wS
zeCDDxa{SUQi-TnPA$D8Zx^jw!MI*xthXc72<e#S!*R;u-Pgb$1rm8IDrOl9V3%{lC
zvgL|)Z8F8|rHord9gfa{&F&YXGoTdMAuu<7@s0!mT)gK!)do8kbT%<9-0|A?I#6dy
zqd{E+KRr(<vXv)yRY3vaW>zahoX^mUua%ZX_Z~}ywuGLPURQ4>E3+(_S{imw)x&50
z7Ut(W?+2X@6ey47TYM5%63z@~6>Qj@B`Z&%SiF_2I!yM2&zv$NemL0!ZY1o7!Ta~`
zmunULgVhMYNp%w;a?>tH6PsgulXi!5(nBV?x3yqEy*U5rbmQ*Or8Nxw{H&j7t>qOs
z%eO)p81F`~{jbG4Tx^D{DOr=^i@9%WD)aP5cLl5MMGt7-RnuS93*KQ4dBjQMQ^ALk
zw?-?>_uX&VqyX{oG%xoAS0|sa&q_z0hIHK;IFXj<2&1J!T|IseZphPJj;OZ?`6^=~
z0xXS3KCtW``{23R;Qs*K=AWx3iBwmKm4bako(>YP9G#&gqvZ7a6PfDC^PcnO5Y#x#
z49p5I;zZM)Iknw(S;3ufHg?)ha|iw?{2UQ5m~%R<2mvTBct_nQS6|-h?M$B*qrLZ@
zaq<a*_!nzE3+Z{r?t>wBR%#7BYpjoI&Ew)4{^?EO=XJ!=ihS~}+QDgpBOA3J)OdJ!
z1S6T23d4q3UrRXxTokZnDD%3}pQY&S+qbWyY1=+Ck#gCth134jzSZY_`=P6yfAR0<
zl{celo0cE({Eg)-R4AV(i0Be0-uw60D4u{v{%axAK;*A4_HAYinaVB?aI#=WH;L(f
zIb2`9WH|r%z?3GabtbIto{lcd2Uzy**7%ejLyD)V2Y^QQ$4R?x>BVKu9Ibx75k$l{
zY5e%zy;@YwRS1}fnzwjtb&K52?9*YfC&Mk}4cNsJikQb@ERIKK*PSpd9!Q}1TF~=%
zGg+oEL^a9gY@=u0(LL4TeZLtnl5G-Fb48CawieZQ1;S5@(K(iDt<Sfkd+l&4Y0$Of
zQPb~KY{SuYOHRZQAG<CI__G^P>|N22>0-pbHj|ir+c-y&QFfitHbMRCgzEA#k_-7c
zpmDJJeHoxo(M4mz2K~=$O;<y;8v*{UZ&)z;c|>qV%vGE(cK38$WU@k0+l2>4y|C}f
zu@rBLm$CCni#azm0_cNg5i)1uKgr<OIe)|~&>Z!*yYn+IM^rb)(G(`Ok1w7Frmr_h
zJ)gg0&(Q*_n|{(Llvjz80ut(D8tiz|%Ew~?Azv+-FZw}SnLGV#Yhb&(-p%W?A1qL#
z><UAKQ!v+@`Px>yPBuZTT)<2<e+70!M4HPT>B;Kr;^N|Xxpr;aqaKvirhV7NSXbA*
zygX^wZ5O!WVK+wDWp#;+fX^L)7jV3t1ze?yXC^Bvve$bDJAjUT8aY`7Fbr9Q`C4~Q
zekVouAA<vq&lopZz@km-e1~*H($-{Eve0E@M6+9HXEJQOR=XcRnBwG3w3ys_JyMUM
zJYJ)%VEJuiQ4`aQP8>Yh&{Yh$bto#?LK(Xdo|0}3Y;3@Y?B&kzU^m&$WX+3(tj`%U
zd|SDZAGAekvp0W@pS;F$bHJR8=cvw>M*Mhy;HN{&K;r7wJDfsWPmu`|u(_i%epkRk
z+D~td1g|&Lc&n*$0RhKNSCnom|M&Cc<ODYCbqDXO2JP?sD;ZgFQO7-)os-^h5q;**
z2%}+pnmp&U0P)^m4wS%*!eExooN-ZQUyY9#_I?NNlgS#NM|Owgs4G;annBHFkK%rn
z3UOu#2E|XogBfS0V0%o8pg(VGSIOzJrr((?&LyP3YG%|Da<GL+C-7nFhQ2ZoP>GI#
z>NP|t6k1sm=@24Bt`ZUluuf6Op4ya;w+qLa37yI=MlSYBuZ4hNsZXc2=o#ihHEn=7
z7DfQO<^wtNt*F?Xd34FuN>ZW?Q=3;L<(#85;}}m+R8l1;<kSB#^_5{!c3s;yBcp^!
zgCGrpG}6r=Ac)f4NP~2D2`HV?-3Zd%iU>$|htiF7^X)-=-tUL}@E9)U+I#gn*SQKO
z@{YfUkRkoOIy1}(m$-A%4L`9fW#g1DgDnMySaZj@t)tsVdqyVLp`fpkmb2!yHUIFV
zW_J~H&OnFS57S!5-`@i@E4w-XDGXdqa8TCxliq1moAb2P*2Xu`=ME&~{skf+WqDf;
z?SEpbZI-?`ne6jye#kWDDdd!c*7-rWJ&|dstkw+@CEYX}(XMZ{RO`wmde0Ppz;>O@
z!L>A2r3r)|J-dKE`kuXNw6|b*zsYO@ZlGwu_@Q8li+1af>;9~-uP=YUxTH6*M&1vg
zl_Zy%B7Xpj0Jy4tR~FG1pM_y99GW_9-HkCX5qj^vZo@X+iYk_;+)KAxlwo|pw{BF2
z1Cb1Uev6X_&w!yo!LZTlBA_>N*w7rHjr%4;>*rXvE{To4Bse=!&{6$yx~xWXC9_Tu
zS#_+9@<A%DlF!Hv<$3QJztZdg6T|_t79fJEKbQWZZL&)=EVSOGcQAc#%1Vh*u_!dJ
z(q9F3+38E#V0V|NppH6|Ex7q)j^#c1V$zGQp1N_NDe<3=J+gVpoB_#2f8EL)fk$sZ
zZ};#h;}tw`HpQM$KI#oyo)KV^X5ZxGSsmI(`rPU=OTxaLi2Hy;V1K{*KQ83G<4bbh
zzju3#G0+vvyylxrt)`|1<&8`t-9E<HKSrIdv1%Eg#yqF5Cl?72#r;Eh9h7L|gslok
zp~u9&>#fps^Qaj=`={OV%>Rd&d%e++`QY!<F^~$qk5AHuJiQbIH0TEG>%xpJ(F(<6
z_Z?A`^CRYag}d^KT{;(x%WI2@huO4#AU2O#(Tk}w5f?8Horj1CcOY$vz%DkN*4Z{R
z#SdycLVjq>;h10rw^O^Zv1h{3r<dfi^72^Yu6vg&y-BNPH-D78M2Y8~Rms?U!t)K(
z64(lx)olHds@NbM@ae)@i1tNWoU8E(0flvcjI|IG?%!!~BQ;B9_jk#>J%xj0qYJgz
zv+(iXl&J!U0j4c|b;4S@B>l{fqp*W5QVRWSA<>F3?6NmY)nH0egD&9QuA46K0lU-?
z%179IGu!7QwJW){<gNFL6A@1^PxYFojKkp(sT*n)pcNRUb_}#gf_<Sn3HZAC6&F6+
zagY>klsN1qOE^Q-^$;Md^c+9A7>(hs6q^e4ZdeK0)Hx)=0aA@Lr8%})@Ya{z?j}tF
zGbi(bwzud~P^*7?c;Xcy(UznJyDuyg!n>EOqpr-(GWdr8j49t5+D1xQP^-+quA3Im
z8ng`Bc(*J1lIj9$;CMWNH=}m7`NyxO?@%K^G^w523kPotP?W0E7&(o-nq*Wi);x<8
z*Q2-vLIbBjlfIpw4Enp_l^(qO_Fd5|cNtr@77Ut5GXAG0fR1`h)1UU)ar80Ig7$~0
zFrqw*PP^H6gF1}30N?)8JE`dOUG@4D*1PO5agy|T<&_Ht`)_C&-hw67f+ef#+^!l|
zQh%gKJ?>X}u6=P>awheE1I9xEtqv5AK~=WkszV`VKBkIk=64qv@=wgt=Bwjra#@3y
zu!~&cs%^~kCyxwXws<y~O*%$bpD+^B(--Kxegh_WZi5jdXN85&&1{^ZMBF#04EkZi
zU(d{}UcOSCN;6@%G^<f~PxZ&NJu@ywrkiXTr%|)$6<mFZc}y%{?b%XhrK8RaIE~@c
znNQGm2OSPQ@BW;=x_NS`H@zq{rSS;pZRPf9j$2avIObkGfYpp^x^A(ptP1F`qm|c^
zM~<)J|8Wst_!Mr%24LDO-JFe^Dd`{KQG`Tv>&o_%9ucdQx7REO><8P&4yGHQEQg-z
zs>#`%*?4h8eta~(4<k!~RKK0)O_@8q1qgY2cSAtM+%6?}PjO;^XQFSmOY>Mt%#Igf
zAy%>SNj2wmrRl*vwQD+amka*+_==(-)<WP?wbu?bZ}Tx=lv|O$FaF_E2S%BZ1vwJw
z-x;aH+P^m|z72{_L9IzatrZ|<_`0nGn~vz;IGxFGBPLI`ssyy?!VGvxm;;B9gjgo(
zvr3!AA5xVw1lXO3ujmFKykX7qX<Dm0wOok2gWgZ`9G1{PFN~K@*EAB)l#xYXBCK*5
zenEXwaNuP`^&jsSCD^L@!!Hh0FC_xKkEL#6q5@3W4IxuPSMvZ9Cst+Nz-E{-@K4mp
z7RY@x?)Q4t9C)`qQT^dME%FxgrzON@TF|)W=KQ?>xdMt6OSM4f_$x%dQ)WAg$?cbD
ziCh!qlC>+e69>F|le4VWI~up~m*@3?kIYy<^3+O9lYdLUZ$K7}6LYnN-N+pEiUVRJ
z!@%yIP9mUKGTu+x!#v)1r{J_gzFa-Xdt<5=nV@y;TLYnlH^s^BL3Au=xmvtDyj`}0
zRuh4bWyL_y%9TvF>GN6n_FG(jlz*E-w!+&Gomi-DfM-1zlr(P(9jB@=e>9!0pFhot
zNX78ZxI<<Aim~fuM*ZK2`%z5dP^)Qa^>$6t9y&CbGA4PJynw3pmH*tXHvOmBnwV>a
znE_8wQBd}^OhaG(FRVgDOh&DB!sFzZ$?Cw0_mgX+)CIMq-mT$0nf#rJT9DMoIk?vp
zI2qlG9HFp&kFr2i_Lr6{yascx(tGUF$<p$2)rigUQR<_Zg=Xx5`rj_N*A`c^sF!e1
z27LVO3#yEY@a6QzC=zy_C~UJ)7=Rfq<D-6<+Lyq&w(z@~Pqf7s&}5KJ_&mkl-$zq7
zy*Uht!a{L!He11Xc=!I<n!5QM&pB-e8dGBf`D6C`*2rAI$PwjPU?W%iM0v5+q7B=e
zTO?*AWx7WuAAsM?U*;lID3kfZA`lfv_LB2)*K_-wl_K_0B$=wqHkAhk%JoEiePJZO
zFmL$@>~2nakhhtUWrhrbU;<FQ;xx-2((9JF42?CZjL+fGF$O>A-?{7UB#sSV8ji7G
z*A%{w)0JQ|o35NlcK!Z^yf?LyjXXUGsyZ!YU`>6VD|6@CtW`kC&%IFEb1NIWZr8EK
zQ2n(}Yl*^ukx8OrS&Giu(pHv8bZI#DD0<}+Me{0HcdpJEH`)tvV99~NFhHaf+3Pi@
z)rHVre_Q%joteV`Ls=~aFtOM$$~}=fE~8hOa+R93*1ui{hHahvv5!uqj}Z}SS;Y)E
ztzwvb9QtyaTWsN51T#;7h%OvX;E;T!>(NY#F8-srpEXmT!RyEaj|zkZNX`<li_oVi
z9R$wKGU<6IFHkH+{r&wz0ao(;*IpLY1k;PF@u@JY8uzn(j;}vM%>O4xOMtR8@d7o7
zklHvltjt3H_z7Q?+gsjqNhMM^A5u`#X^X<B;P%*SGLo*KL&d?Gq>WJ&Y|4eVK7ju!
z#m%~+=;hQ++U75oHiAS8!njxmfuh_cN{*)5O%A0O+3CNS9;ON~W0Ymy4nd|7pCkjy
z4p%{Kh-fP+<VGcX6Y=0OS?99^KG(wWH-7T_Ab2ls9YWj9KYdr`vRyIn!X-iRS~9)1
zS9UmSo9C5OTPM<pIGJTxxE84pV1<Amb?Z9_Z{!6RomnSxn|9LkhW0Ey_qb}S`D^c4
z?ce=~(DTFf=p4D-H`ewqyVJd6MbOv3Z{1TeucCPWb^uOc0zW<~=DiqD$x6F4cylZL
z@c$c;fpuX1xP{(CH|cx<P9}v3fq0c)Y&tA!XjCWnybHh}i#2H<M-~u7XtoSjGMIv#
zNiKE9ASBdV2=VZ&S+irV|4_X0SD5@}C@C-38cGdh5{_cqLCM!WvgorK*r}F$2e^f8
zGtd$xWOV@xf|D6v)?42!HuV+6v1Pb^9$z#ip!%fVp@jji8hPuPnTZ;+Gd*2qnZAwA
z?r?9><;E*OD-j<(hgHf@QSBmKK@DP2k7<oaOf=B%)11^-{)FP>IPAid1D_y2!ulA`
z#39u(4hHFU=yxp5?IfhI{}4j7vAI8wny!o?R7hPIbvQG!{}yhIhG=|lW<~G2jQnTy
z1PCaF;ms;-TxYk*Xy7Pk8Psp;RYa(YsSu^t-Gi&i!=?35UW%pfKw`^eQuc(O)6|Zn
zM9}_yfxTq!Aj0M^q@tc{b*)Gyao$R5YA#=kZ}yUFTfc#Ifx{D_@aTk%On37|l(zaK
zn+)yyd+WD|8-Peh45&04HTyfYS0Ir1zd;o&tY@^eV1xaxLe`*(3i13*;(%yKjH%DG
zV(EJ4n+K6UuNT3f+(@%s7A^@1-oW#&K|0&v{x)(fLP#+{178HIi&u}Awtu>BO7#hX
zeoJJUSAK5_UdH%FJy2oX|E}_pCTVqJQ*uerX3E0ysV~lS-*!-;Z;S$l-5~1*^Awjw
znfYXSm2gjZ^8Xa;9BGN&+`X)<r~16|Yvm5g1ohnTEZ*?=)I_=EmAQUeS~JNyEheZ!
zTxJh@OP{G6rIgV|{vm*mCFSS;%9j}7<$898NRCc#X~rLJSOP^`ESp#$qmq8~70)Do
zctrD}%`1s5j1YfI6f|e!5G&jCuQ^u<?fMS|SGpPLwah*lfv@7T2Y{vVE|z^&D|6#A
zte}42hfbzTpd-uwb!*()j_@9*hCo8tj;Q{ZoAPsWnfv0hfAs-Q5u<f_kxMOD)rZFN
zRuXED$sm+YL#qkcIwWY?Zm7Gu9t$)<bT*j|zSs*dYpid_&fUE^oCL}V*L<qdR3D%_
zNo%Ha;RB1enwrk(1MqS#yv>uci&8}vnsfb)-b`cYTkd8cfX|uYB#Ch`q?m~F7JP5K
z9=~LD!trRA9D@qs3#E`1;0sk)uH=_+fwIJPf=nO{O;<Y`aF-w%ywL@D=yQt;n}g1f
zULQg}!J;23E`ts}fUzjVsY#B|UJ2Hnw^{Y2kM*aL65-!Lg#UcVkRR?Ijn!c4Yhh+5
zU#10*4wmqIf3qdy87fd}qcPS1=X<gRjtg&s=+#3X52TPaq1`&TFOvIx@i??*h$_7v
z8Oq^M1+<9wxdG6iJ)l9Dk4Ic;&m7VSa$mhy)<zEG2E-SwPhOL9!UqZZ$69`^b0fnW
z>3e^}K``HB29P&)i#Vanzhn@)gA#+oJ%`f1Vpr`VR%Yw!Ogq_y0;VAN(dBEwoZLN?
z^vhC9Qs}Vti2zl1!=r??i4u=ujhdZD?Wx=2ry>|9mvc>ST&qk6<nhDVx03`I)Ch(3
z^{%dk%3pR+6^54J^ptReH-`xjVi}PVOJ0rGn2{q?=?C@UK!Obyg1QQ7ol<Qt^rd(X
z5}gn$L)LP9F>m&yMMZsKu86nsdH*#zT_P)&fWXjeV(9sLEsB`M#>Wl=@LZS_gw8-K
z_h{ajqp9QFI{tv5LIa%VAg5*3`Y2!TBE|4(*xGQr!TiGH;?k)(IPvc7fSj_UhCJrp
z?VrlK;O(6qnw>*rxEN?^T3#Lp0L0l`)YWNMo*x74Mrx#h)9K`NU|H%L(q&vL;6>=`
z?d#ewU?@Cqnfu*hieGwCQqWC^N*KntIW_utx<<+Kon*|oFXe#Q4P_7G)jU^6<<%?e
zC<<&u`Ddj|!8JV-1??+G?dUnB_=&d)&j|ltC!EkL>m&MK0ed#b50;jbhQo-K7at<c
zazUy+rkbos(^iw5k#7gzz~x}!4T!aPjicY3P=ir{T&eW(@~HP+$Yz_qYwy`Nl#s*v
zOib~tnc_zRC$(s#m%@TfbMyHAsstd@4PGi9J)Zag&@ni1(!ty*x9$j#TI>Kizd!Pz
zB(J{4!DKl_{KL&FE?;*Ta}Kp|2NMjUl}+LGeQ`s5lc47lA4EWsVfbBxcIU$i<{n`C
z=$+=}oR>n7J}{3!G^%7GK)(mSb?*j<diC|>ES~8XK}ed%@g(_CLaOOIfYiA@p6bvG
zd4tUDf9&8nx0$e!=J`K|(}Fzlqf}-!GQns%_Y4jsbf!x7`&R4WI)2Q%_7ggeY?@<C
zb)_sf$k$*Rd5|RL>Y9y@*vM#YH$NHt#YEXSh|tJUa5DB)V|qrccAgQZrmMKF44C-p
zzC2v(=w0r(>J_EraSLk&wd6ekpHL0@o~DvC1E3bD*x?GQr*7Pr4}knjM79Q#&gt#A
z>8DR>){%<|44BhF>+zE<!pwQdK4}ebLc(AM-MNf3BLCd?SDXQ;2iMwzZ~MANtD8ml
z&w0<;@0Ub-r35z>u{*v}2}E_zHhkkG{X&8$1kOkUSIdG{^vb^Z5kL;hBp8}jdUpn`
z9T0f=alFoM^`67!FMZNH%+moS-Cuvwsnld;BTC#oabw(l<HePgm7TV;+zG$WfH@5V
zs3Lz(TCNMt<oaVF3rM|;X!nz$u_wfE-}wt89w&_5BihhzUUZ`kR^{ayaxBxo_jc_q
za$Web6m2DGY@Jl<ogrQbg0bsqTj!7y+K8po={>T~$zbP@*TQXKmeLxOf&ee8r)=5x
z$K#?e-Q*2KI|PfwC-TaOvCRC!I%QEFH?^qgQvs7;;h&XHk%`|zrfq`gM-bcI5nw+v
z^Qf<@x?upY+whQfSO?On7@4I?lChE2TN393#R?ZbXw@a_{6|m#@}=DCtp*N+fF?mj
zkO@s%p8V%hPu30#;4=z%rZ3;?=WR*B@(lZGh~_Su%GPeBWzYT9IC3J2-i5U0w>U@4
z=UDVdJj!4S`Mefn5j!~H9n2`Msh&MD-Jfv5tjS_nkY_U3DST_5V8n=(SBVO0YG;wv
z{Q=`|ZK?m~>NlRU=>G@-Ogbt~gMU629GQI#RG_tPMBzk}Hhi#d)&P3cJN8FnLS3j}
zo*VmTclRod&{G963{Buf+~^v@eUma;*oKc^7X)E0pYfq)!h`ij%7I3g1Khd50ExqC
zVM-i%n)IvTX@zlK#&K~Nm$86Wd%I4F%#%0&dh<wra%7f<WiqQ71f+ik1!uPv8b~ar
zSM1UMU`mc8KmYyxL<It*&<zFNHc$%-tmKNFtX^$sjB-V2_>rmXhQpq`Cu}1E9p*bi
z7`z9mLS_GHVOh*q){}gF4+Sz>-2NEp@xk%FPy!e=?kz{#{dOzT5pR7am%X^0r1|E|
zC-z+eC^Ie$5Gj;n2{gZ-?RUjLw@g8-4TPmk#3KPo2IB06v}QTLhPzIBiD_YySqbLL
z?Bz|$zvyT3o~1-rY?{RV?$Yb?Z@ZlbIT5)-B#<pUN5D;L7V$UBbzxxmc6aPP5lF!D
z{D%uoB#N^4h|68+6=+61Z-H2jepV{e<~?cAUTGo095CM60^Z$;AM4RuvIPPJ53Vf$
zHrzom`C{x#5wVMSsG)L?SmxKa=v~oM_@r!pTB|P<m9xOVWOE!vq2bxUM0>S~85hE=
z?&p^4ZWpnJ1m|TLTsDT$I_H~1N&fHu6dTaIq$_lbJo8-1ATT1h!6_&So7U$S#Xpy2
zz;-b)xN%|rKmz#>&bj8kkgSAOQ8AsLpJB%zEzS!yuc*x3IeunRd)>Vu%n{o84yic1
zR`eeiK(@w045cOKE#^OMnqpRKm=w~Ct$GBY0Ab@{93_nP{Z3`r@EQe%!EL`KoK1$S
z#GRkF)AT-5jiZ!X{BKT?dvW;4F5)nn{%ZP^v8-q(3JR>d=*L=vjGlh;QO$IA(>d}Q
zgl%<6pTrGQHiKyP)u5mqv(<s^eJH>%C4jIWm*AmK@tyS{tAKb^eW@->PbU+qcssy%
zr(%9`FflZlF`KG#mX)2OWCw<lFDMZ0)g$hAfmY^>y9bUdh%eVKZeFa^=NSWY%mSY$
zA#M<QDfgq1*pxd<LAY%bz}%+)(Ks$Ndmkg$Ax(IU@mA$u!3w3ZS>?V!%9rn_SJCBo
zAu@Vhf6)ub8k%PlfDhQ-nx?N9x7=ve1)qH*LvJcRYFtm`J>jZyv)ZOaJ8W@gVI6R)
z)%)JcR{ZECr-2X53~IT?w;4=C-vE0s&@5>oQ+X}mV`Bf~<htcR2<Sv*Xh!;5Dfz}&
zPM<L;PhCrbJ)iZ#fF~unXenXt^k9hD9NzSTH$dMgnI~BtkXeIsC0m13bkij8<q=yo
z&+NMlD4@OZl(yM^$<qsoMh|qBO|L&UKz}JF@z0h<c`LZT5h7_`lec4E^!4^s-Q9V?
zCT!^&UD3qjM7kt>FqiyX^l$AAmIzH$R8fg5)a~^*-HF?|3t|65$kNA_mTU8ub(YuF
z1Oy^>0t9M|!UZNLk-SFTXB$=AhHKla;~-j1%xGT6LzqW0xvG7!*)i;nZCwkgvL{+r
z`6ZcP4ldVc1SuvaMznHvj+f)huvs}|>R2^xi#<fA!Q0b~=XKfvNmY2)V?bTK>hYSL
zP=G$gV+jB5^2spReaaNVEix=-x6(n3<h~XEr(IBsL0jNQ$q%29>2jvhq9|uFJ4#wa
zc{1x^Z#A88BKDSqAVO&=;RE)%yw=3XtJM*cCUIdAsn>G;0thZ(_r{<^b=_$^O|N0c
zb-O5Ib?7im8eb6qbeu-NH>D&+7qp<a4&L0>6_Gx`43F@@)a-C?jM#}E<=Zr4(}a&a
z6%no^f@z_tkLEdTnELh(i72@Liv9*OMxf}m?2WR?S4M=CHT5NB4dHh*aNYu2+xsMQ
zSf}a-0jN8T95NsO*6MviP}Zmx^OR1P&qD4CuijlA1}_4!N(DOaTDqQq)kCd)5*gL$
z4`?;!lfSzc#n1WASS`c7sAiC?q;}_;yneqFsq_JaYH*?vHJ3Tu0L`mdeSVUbKH6`~
zHMN0&We;O7v6V8MKdL0&{)!nr9O*Rk)L*<P3Rz#1m6FZU716$D5x+iTZ|v~!CG*`k
z@P@HKx10@=bd6T}iwJLoj&~3RgZ9DFO16e1zt@(}@i8!<p;#PB^g+Iw>f0q%xEf!M
zPb%WB#?6}0i{<y4KVOX&wv1`37fzVH(^!6qiH<=ojKlK6ThrT*9u_v6a^oZ%L5Z9+
z%afXLwzY{XvErP%dvdk41GxO$X+&;(0~B)8l+6=2G_6oBn9bT`nWc!T>{D-8DJc=R
z@FOw<vR;rc@?N;1IHKFmE?qGq6CFOC)vA!$rhnjeUR}vDj9L16VWjc(NNwb9;hdIC
zRUzt>SSuG~vxZ6Tq~|<Jy)pHjk~>>I6@VA{U^&-Z%4~S8dWmuTaD>uXF;h>MT*N88
z<vf~e;&x2^ILY33AexN$udYRls;I2o7aPo~l0EYuy*eG)yoY^vZ}0N=5F^FqOs3Cu
zT#LVtsp^I=!$CW5X33H0@Rq0o*peya5CDu*69Ri{`liHQ!v3kMhR@K@P>OBQf%`o5
z+OO|RwX0Ivs4ZSM*IHCNyKam-WZ&sa4ubQflJHPp6azAJB?t!xN6l-E?jo~rM+WS*
z%fn%riZ5j$(E-3rv_eE6$qkML-Oz8q(l{$FQOn;jrpY`|pJC|Dp(RU`nvb~J63U%?
zSon9y5PUBme3sBtH6QT-Xe&!5*CU<JSG|i5DILEs83>1q1Q8^v5vbwlqn=~?Tn=N!
zvwU6}55VNr-Wh)(99~JKp*qQe_vUfc;UM11=l3XtKNeRe85uk65w|c*(gww@wi*dG
zet+w7WS2=oI+Y~Dvr=sFII%tY;D3{)XH%?yG`bK4%BP6Zx|=(a4mVpBBcG+L5Sg4x
zp1S`+cA`6L-KZ)J9LI(jeP}RFwhf|r@l@i@$4H1TEZZv^X}yCk`HfS&(>U~eC;xC2
zi-+gJe%JVS!^0H`ImI25#fG;}$-!^HbPy(G%py>KolE%f9fn4A9wT>NYj|pD&5i-j
z{q`dFkI+AZqgw-0QX0itU&L#;$hfLT?ri=wXdANox%$iU&Jf^Ktrw<XnF;lsOTvs-
z1Y`fT3F~hF3p*uJ=krg&;iX6wvzWDmDVFQEt0Tg_XNU$B(l{<D=gq0hK*%s<w94|_
z5aG<zT=FM<MWzLWm1%rpj2rELcY%P#BGqopEA?ZV<<l{AgEWn=DB6AZbUrZxD)>-=
zAbg(FT~2C&{683(luuw*oF}X4n^zqXn1pFY3PqmY-b4)rTT{$V-w~o8T^yzVBnmLK
zT}^KL7_S@Gss_EuvLv|9-AHx_(b59F+h$B>r)|<vfeLAr(P^Q5DQUPiAd#hypuR3v
z8J4v4eWCAjOrSMdiZG)px=6lnZ(@^ETi~519<lJ(VRM&zYqnM{biOY0Q-JJ0brZ@v
z-<K6Saeg+|>PPtKgVm!q<y5y>czUQePQDs*JAHj;AoW(885`Y~`+6X1t&?xeZRbm_
zuIFUC3jsiH9ns9pj3oA|oq)FJC*3iM^M+~^|A*q5xc6fU7^;jVy9KmG9dt-!WDwgo
zhAEd^1P_}Km)yQ$+uGTQujAql{!RJUKyQF6@R(v(bZb{)*-r5{^*w$DoQNyGO#?4-
zn+j$ULgY@ntD17JCi$!gB<SBb5*W(tRsp-<2eg*XCA|{~0q3wJU3Dab*OkW|teffQ
z3XBXt4IUs)B~i~$^DMl<|B4yU;<_&Ie*b|{m(7P7-{>lV1j2yx+Se^J`Xxd;RRLqJ
z-1hHZJog`~j5iL1U4-;)7_UmJP=>GOI>mYqeJla{*^6b-dx<|A6}x{QcZq^?Pk?|6
z_lZ%V_#C&+sJIhig7D@{|N6<j(K=$W+A0#NlKaL#>I%G7I>KuI9+`wZ871X=J(gGM
zJY}l<B>hgAq$P)uDJfT4JUng@D!<VrllPyl+X494>-SO2F1Inw+EcP=a)ltmR7(H4
z-4S}$Ow(7e<5f@U3y1EY;9xd&^?>z%e!%+^Bq1T;hH^VWx%!pHI&!DrTRCm*xsQkH
zHbxe-ogO~lr)Lx9)}E??Ja_-fAkL5n5yM0q7UX;VBCN2;%9BZ97As=+eu;IV)j7O|
z-N-aBF>x9*Znvj!xzA%(owjeohyRCt$+&#lX5i*6#HJ2mZTo|iA>^Mrdc%^SdQyWl
z(~Vg46V$r#k{A8<`_I?&su2dPpFl(AXLxh%^`EHd*&t$Y`?ebT4-?XaF%e8LvC)e+
z4==i=P&#vPO(PX_VT;G5I%n$z1Uj7Hv%8;P{eEOiwiB~LXg~;2Ms}}TXxNDTb&x~$
zrdmmA=n<qDuw@>;JlZ_NFPN2@_DG@(yd7KE!kw5bbpf2V4jPp$gD-VIn1BDng~;iI
zRU_BR0(2v^k^OIX*833z1h*Q?!C~PJAN?Q4M3r^6{X#|f6TjcCbD10Lt;z46#8ifH
z+c|?-L&0#-PV`oPM4GBKF8`;qSFA=39_NR&hl(SJ|5CA39MuL#iz=Mf=C<gs7u+Va
z6Nduf*-mxhzaPGdw@p4hgO?k9Ud4-Imde43+v|S(STW^=BDjP%nC~xjU6dq9W*{rW
zvm6L5nSUp9<acINgZ)Hm#<aF7X3q>-t%|qHD=T5q9$Z1&T!o8sqAscPz-_#n4fg)O
zio6%nn-n?w(5>A^2jZO9o!@$pdIx!;8;sIeMN`>49KxQ<mKpk`A}Kag1$(zaYS45P
zDFHVhaf}el>t^xu!nRqray}7)l83!psn2Z`*O{ZFbZ_G9p49yKK-GZNO+KLP<4BM)
zdbHY{`;yqpPD91e1rb71YCEjyFy5mu5)`WL#fdyq8v)NtbZfkc_T;=Y?W+=7&P^K{
zGOutDrGH)rZA_Nwpu8(bfiR*{Jvy8dS{#{)jnjqqY2m^Aspx`5+S0Exc7vN>-+;96
z%;e-N1!?|)U0OyOW1&W{F_!L%f|3I6VtmL@Mn*;$qAV1QyF45)4o=kj%B|uif$(N*
zt;!KizI!hYXV?J`b(Vz%(F&2#IF=mgt~H~n9Y5&6!^byXOI`rr^ENC}F*)`p*+oS~
zHi`bC+(^#Ku&|s)>gf(>s#NO-pYG$bwqd{^%t4y_QW8AR+X6oCdNy==Q0)L~D?s|5
z)49~BsBDnZ1_jhTY=#@BZL2KphCamm{AnAu5AFZO7D&$8x<7k<M}J~XJ9MWIlx$@g
zS$Va}OgqSv<IFCoym|`3o93$*(t&W2WN+&Gbfe^PNWN|BrU|9x_(pe$D^hSIC|%QA
z5ZHld_*mtsJ9QXsox$mz%V0Hoc}sc*CRe{ncMwA`tQ=x|d=*yjaOysqL+rpC#i3uP
zi!vhal;1Ib{@K;03r$iw9f=yEcI(gbT?}RNg<5XzQL*DZ_MDO72nmV+`k(#V*j3=c
z@4wAM;5ku7h-{GYtVLl=6r0Nu;)zZa9VBRH2}LgPKBzLOX-D$xW_k-)aBgLg>wke}
z%l0zWJ-$($l)g$E^TC?&^l|3*^m26Mbn2UC{`N0`)s6GsqLfGMWtth8>dh}MZf37i
zN>O`veR&qwY18G{2SVL0Br3tpPu-LWhH4-fkHU^P;R#x#5?`K>XQhtg8zZ<aV3FWU
z;IPH$_oV%FGmh<0_@i`MJ};;bh$5t#C4aUXa9YjrE2S=OYk@2_3BUIJs>=b(o4>s}
zplVULwQggk@6jp>L?sm^&?tb{xqO|as*WPIx%*fHWh#7Fgzm7C^nii}(H{S?kWtq=
z?2ee@S2(-Dew3?{<Sk0|9p>WhwnXLf#ir-ya})tNvoxVhE}WyD$N20q_iWxPSoj@b
zm`JB<{gB(J&$yAxdN4OOW1dUy-HHI%Xs+Z1xL1jk8s5z!D4gB$fsy4ymaBqC^sT~_
z2c11+kt=)LWJ@CH8V<-9^(mjppmwH&-;U0~1+gD$=8>9aJhbSy)FkpLDakEQ^>DAJ
z6-p&b5RDA58V&cNm`rco37BU>$-0zyu_E0wM^N)ie#H8nr>AGC(+g_(yI^fE(Hp1b
zI{5o##`y1JyGD8EC6ttd=;(RcXE~Gq85$Z&4KYxC6K*|#*y?}eqC&Q0Pal`?)Nl1h
zz*!l3_XeITvExJ>Al>)W?qN}A+k+5CX^LLzrXw)C(LP4zeQn33F+nAzMk&j5F({)t
zjPvDIFX2DF;?x?C6&SZK4(8ynjaXgwe#|&Bu6N5t7gQM8KZ-`x77fVg$#V0{gEHH(
zzJxLR*iZ_^Gy7lOrw%%Q>iHsaVA8g@Em(eu<+Dn5tf<1<XN$Qc3A5o-3g4~mUtRmj
zy}o%X)*a~)8Xv%`mT+<X+Y50Bn>(u?*Q_Ufdib4R6($nc5PBRwN{W9KZWbh0O7~xz
zR1i2_SQ29OxE0*@=N1dBrfuXGX<Mkr`EO%$H_V@m%u7C-ut>AsQx8iDN<u}nngCoj
z;3Ua(A^Yv^c(jUmrA1XzH7V7RJUFUg+Rw<sV%zyceOA&EbZKTQ@k6vu^3%V;fweZQ
zT8a5+XO^#|pkSSHy(#zrb3p$Iv>pUsL4ebCS5o+=P>qci-kmZ6k;RJ0L^+ZC8oU~%
z9`B!wQOhltoKaL{-hiD_m4nXn(o(`F26ejpQTG(no*uANq1#OZ2oMCEi0wuFau0qX
z?}E)lTW8R-$$DC=;(!)$i^i^jE^*ubu9zjZ>=3^BfZE9;P6~1;d4@CV#F*Sp!LJ_W
zdfYjm)VeqkfY&k5SiI$#zP&?4nC?bMrg3K3#3+Kqs2eTeM%Am;IEHbaz4*5wN}8LQ
z?HCC^PscfQ)Ei$1-!APt2K(O24lT|o|JV&IrmBf`bi7&QcR?3WD1O`%n;?KTyk$!G
z61_lXs(qWHO+KH6`niST&m!f3&yk6~uR|jKod2N=_gZDuSJzAZ5-tEmTkRvpb15u1
zMr10e9OcCbH5TJ7AWc2;-55)y=<#`M9rZ@7m0f>BX7>j6WqM!ur$s3R+}U{FKoj*E
zM&X(^FLc23X}E6S2HB0Q4Lh75%g8_=-;v#XA6DtNhV1jb7y3V)n}?cRrKYRwM`P<w
zyFFEI_&o#4wK%2?@3ppvEzKbNGmTHHIMi-u^8Z6HhK`l!=sfk8sPAeI4Gdll;F;!Y
z%Ap`zJj&bJ+6vAgTdt8;OLO>F&G8vS1YyQC#YI5)Pr;7CFN_`htB8&}GiN$O(-nP3
z@tQK=I*q#ysP;OHqlayc3aq&=^VtLjQ6XQk!R-neUeqejot)oib`xNWEqhEJDK{Y7
z|BIaNcK-}0*)?Qj{1R|U+gj9nY(E?1o&0(aMqiOIdfx{OOssSsT-{W?#l>@g!BQ8k
zx<l)<9n<OSZ(9-YAMP|P4vv4yj4Dkt+;cZ~8kXFnWVsFa^WEs=^@E;7nX*cd=Kwki
zl(#^0upo;sV~e8Nv4n2ozW*j<l>aTku%Ak8NS0Kcy5wjmE?%C4tpRNwS=HF6KERjl
z8BjJPJb4eBG(H%etq1}D{|{fO;E>K%1O%S+e9wy=+>I=>VdAw=rYKDAie05Hh99i(
zy>^KmHyhEY6;T@TId?}0*36X4$Owyg+-DlV?|Jl?CB5Py)c@enMQ|rjRJu=_0>lt`
zYN~$kZ_9=-@ab*V9PT;mvzrw>e7yimNZc!O|DgVp2M)oZ&i|fy0SR{zg5DUAU93|&
z^iY$8)1bWiGaw2}r3t2|r=K6BBKihvjf3o8E!>>5J`bmUy7<+xGfQ6_Y^>1@huvIX
zHFQ2-Y(F|W8r>&(^<2a)e%Mm!czRqiV+nuA^5gwuBz8_tGaU)4k0Q7z{@mfTAMeTZ
z0r`Y~#faF}dv-GYsk~VxpK#b1q65IZMQpAI{ga=n+@1zqnisATEz2KP@J<wSUG&Zw
z2YqoNYPqj45$MTGK~=jFV?tqIKyjr@T~q`k6{j=EUQvknoY~=5x=m_GS~{k+B$?&Q
z(OrD)oYb3zymBk%qn|E+|L(wjpO#NExpO-GJjfPg6&8cT7w#JVA_Ub{GHqY6Cz^8u
z`j@^wab$%zDKU^@VI8_Tg;v$JZ;IvS*S5mVfpIyJWPW?$mieI?$=cRYqf!+QZXRJY
z2(+CSAI&?YqvJDq+r=1qQ9GNhwg2V#z06+~@7xiLjKim=r^i@cBf4q}BjQSs5tZ{5
z`6I@~a{Y(=Ln{>|fzd3Wy9fhR6D}$19IiCPZd+wdhbVz2@LOAj!p8!VK#CQX%vY);
z$VU~ndoZ91Ykq%L{o|JlT_xxP<NUO{=1WE4{qO6~GT#<CbD{t4-P(QlvFj$ZHrdHM
zVR3LB{BRVC7Wn(HLv4%&ZIS{5*;w21bsHY1I;jP3|F;zrIy3~4f+3BL7|S<V$jb1r
zq7rLDV_+aXJwrL`cZP0|n@+AJ-;KrS7Y{3RF{ykcZsyx)`J_irsjO<`tZyCcX8@AU
z1u5}x4_B|<;hA4r92KR=VBp|BDbz+wtL4C93FU^OaS-9ZfFqE>XXy}l&Z788!5$e;
zzJ_6|Z%K>*=xWfh_$SSo&GqIb<1TthSJ$N7WfFP9ZAx^imHzp&*(*>O35&9rqVen>
zr8y%QG_kjomhQ_E?E1idC+M(yK44d~^6SS3>|mw|1be#O{k^@!`PeUk2h07=p_mu%
zOA;LNfQA%$^$K=fjasBuVf5bq+aIs#oakNMlbzXBnilrg@POkQD?<O9Q1pucsr~$z
zp60ERt;>W^95#1}zNgOPX_Gu@O8WZxzwf8>vtvgj8O(fElekk!aQY@RWE}^gv}{41
z&mDd&I4kHMVk;#0PeEV7J|O$O*cjszXHxf=c-Tw*T}nURh#bmA)D}-Lv(!Zd;Mvbg
z^U^a|m4t+-#ifst4a9gqzw1BCJO7EixV`BYi@E0mn+f?m-{j;E4}=9f18{C%-5w*p
z`8UFm^ckrG($j(G5BoszKRxX~Wtx6t+d{E_;Ky08DImY=qeMoEtJDh{{t&Pi`T_B7
z%%kvUWHf}cw%`3#Z?ES+gkC6U^=%dw7KX<KZ>A3LD}KAsgdGcG;g>McgC(^8{jZi$
z`T`c#aMd2<XwpWAP*>K4^iI7z_Y;7MB-1l)3+T)yQky<SLvU&8`&>{k8S@gm2$X7G
zp>&pERfofC3Gqbe1UsTahwxt18X1er{!#?dz3V_6)}l{0%ZvkWW|pWkMa;iP#I%~#
zW#IVFMP>5tzqs`v^2w)O26TCG&YG4{Wk1%X*Z<)=G4_00gS$J7q(Ktda5>T?qq$?m
z(Z&Ahm;Xed9BrHIuJmK2^9X!~hlZ)E{@m{|vKm|Q5y@q2!G78Wq%EGujC?FtzR|1+
zx%AfR*Ic7wG}4ka1Y_c0fS1%NzCfGqm#gADIy*94M3|6z)Q>(&;`9oDcuH$6g$Wzt
zQJ<1qU)e7=?Wl6k*BciCRc3$j<jxYN=Yfn|5?J;CqZ+{sZu~&abn8s;FUL+`NFfT+
z-|62*`m~NA_*UY{(wn?BHJvOhEq5MH-gt;z=pwU_TStYcX{8BzNCVvHtgXbI(1Y;?
z#H9%ZJ<>g{^~$gHW5^O;>qWm(TcCt>8~aggmS^SILzm9}nAKa90>%Zf)#%fwqmtQ%
zduOAHwy;OcPcP`r!-+WI5DLKHC?s@KtIEJBJhxlyx>1mKj8h*mpMvH)$AI}!lp;=b
z2qSb0GonBH<V8jbtP;?jI{oBfn}YtY%<S#00deZ*wXkL&Nn&V6Wmc0b8~Vbs#wCRy
zLhzijh)Jq~KwP=S%E%_}hx2e(nEgu{aXh3#e{t=PPvLK~i?l^+@=VDSmHXv(im)C1
zP>40((R=0_rK2s0tJgI@ygi%9F@m{18{=u`m{phTy=)b|t(Y&o^5IFll-wD6n@<j%
zKQOrTL~^y>Q5n6IsiST~*Dnx$<lZ@?i-Cjyw?6+NG$0zZH1W{{PUlQlI~o#IS6QIV
zGXT`^Ia&?@iofMJGXuq6Lq#TlKpSxq4pMf*@$qplstawLW9jhW<0``t)+bM%2*tdJ
zsp*~&&~^J@f9vePk7nEm)B&#Lr6q>Qt6&9>r0g23;m^9!M3kfq{b*Lm=X_J^*V5sD
z_d;A3tc-YKaG^@E>!aSpyh*uaP8GNvSs^g=1a7}eym46g*$6|!qP3gpgaR%ttv*!l
zeDpRiVJgbcf98-~@t-}#yjKWV(X|RCQ<BMf)_>4NuTnhos~{cu)>FY%xm0ywM@_6v
z-^Q+yb@Zd?aM|Oubp~q3oH|)5+aITx!Sq_|jiD(&dM934X!^HXU`4!$AH{wd<NVu2
z9~+?;(0-#sDZ=}S$4u??Ezn6<UP|Jj5KSMLJG7fl&6JLQ>oGw=cn1|Ma*=A%bp22j
zIz$MMO8<i}BK2q=#c#y8R7&EEE&ghRy*-BFu-m83#tHlk?1nbK3CX^bUET2i@M+f%
zL?f{E?wyEPfudg=n4$GrXG0N<!iZS?-6YSx#&&1j_p)HW^*p)?KWLT;i5&ZjpFJ0E
zS*F52m`wvCHo^`LM@W-08ABoS_v79FKHXXZc6?<dp#uJNXG4{x0Yg~yZ|dzFq#rwD
zv3AxZ&}^dbmS5;6=XK~io~l$=KRf`QNgcsOMj8h*Cq1L8h_;Gae^9$R{2sWZSowQJ
zaCltpGqU*${H}`$4qJv3KCG9kqR((x>}_D?8|ug7B~goqCDSABWJ#aK(YXE_HD6kG
z(RS<Q7@y&D**EB=pd`8#Kez`J^l30kJvKD_Q5=}G!J5<aC@@v;xpaS-%uGsb+phr=
zTBB1RzNVU{@%#dm>1Mol6I7)WxsImro3)lAE9a@tN_*Ed3`Wm>r0$mzj=amJ(F0wJ
z8LW>#o{X^VdWc(0{0Y<`A7F-G2n+_j{__iQl(sN$V}7y78>Kexc#t?;No#5~-=d*#
z7S%WPiX!4BlZVqi;W^_<oL}cZ-t=RX&cL#One7XPGg2%xL<1s-%7APTfvs)z{r)DA
z7x|lWO&82dFZ@KP5ALukz-?O0noQz1OEZ;TerjPou;6UVL0ZPED{YZw+Crc4tgsUQ
z^!@IBWXW()dLunrrisA-nK~$fV7iwaiEX7Nald4`NT8XV#}=TXBwKvWm9VS|(sKsf
zc$zP>MyA2+vE|<GR<RR;U>%L2urgo-Xn-#LV55;Fjq|*=+i$*Jx_UQXa=EL3K)dgl
z<zBL1Br|OHl+i^%i!RMa+AhbA*Fp}Kx>@t;d7E=ED$BpO#n>xtovjF#32skprmYcZ
zQA}9*b0Httk#*s@?3IS%7qW-DD9)6yo^uGC$9G&N*O2&v5L{Q$7dYUMy&WKtvW*4a
zl&~?M^Mah>?Sl~xk=%kFYjGhsJ-aHCtoqSsNu224e{mPUPWCfimu=NFWxG1?_I<&C
zOz+wV^egR_c#)T$Mb|n&3XQ+?MURcCjZ-lG^$6ae-YeglqbeQNJ4BABCo9SH`H|vV
zJeTXxsNl{I&yQV^I}i5y00j`&#$AizHhKqrrW;A0MwdYob{qU(58Yfdlu)7dovKO_
zUlR&zt%qJHCEgi3GDxI^ft)_&2Y!2koqkl#I_-f{Ft!rt%Ydn+`B8-N8!#!!xBz;B
z*X6{~=O}5#h$4ZIA}ZY0Qd9dM8~je6Kmp|f9xXjRpIq42RJ!R8Y|ENa2g}Ckp;|+g
z;)n(p?9yRfLK~6RO*qtW{is~3YktwpcbQ`J7V}^Elni)#xC8f;uQ;bVyIy9eMLaQ7
zqy3XmJnuu_ktvmS^D3eCo|gNKTjwdfIFfpznHoT+$gfoOm{X*k)+E1O0t1kxsnTKu
z7RrXnyT3Af`k8c!H}3|0WDjBdj2zb%*2?LVJ7Ia$a8fLrw4po=-`H_$z9WiSt>&9F
zwS*2iMrk+K3{>9opd#KU@^}PAW3<jj&e0<uRUmq1(iwf{M{balw_9QwlOmJ3<$ukt
zO_S6ub$3l#7*{x;fxbuzsQbRt;L89_18_8m?AZDF`KrnQ@LNz_?O3ptmYlBU>^B_Z
z9WtC&QBl#NuAp%6#mI;azSRQ$c?=U}ID%cnfRw_9LhHr|UpF%gq=qU>CLb8>sqv3-
zt674(n2<XEbon#czm7vfREITVpT4OMU-p&7FhP=virc1~ek%3Dmjyn*+xX#eliSG-
z_07qfONmDpUfIqTR+Hnr%DGPk(Q!L3i$v@+%YFyH8>V%1%a^vkiCyi5%J*2iT0^(G
zG%f!-7jQ{IE6sCImr{bwJ+YE@&>Fh~{vsd_;j;90Wqep|n$oiD9c3d4J!VJC$|Fz_
z5D9Sq5&Xm><}Jy)#Lq2n^P9`(Z6~BOR1}M5NFf{x#|ns7__RYfJo-cV=vZ9mM>8U+
z9W*XXCTaJHIA7=xvG1FP!B<*-#r`N!HAb?<4z*g)_{ojcCogolucOo-maH%qg*l8V
zf#lx!HrBPkZ*h(P$?eG<Vt#B-0#;C~pjha{0r}?u4NIE1t$8>(oq?ayOvo9(!cc`4
z8Q!ju8|nYtwk6U-yDWusb8TRf7~gq@-Q=z;Ex9X5=hGhR7|r#41c(*^Ptn^#ctm~c
z{&M%SyRJj#Ru(_qbX!`^9M(JDXVwWJ<C6fG$6p37Wxc-|!u{(F!IDeeNWcEBJi?F+
zoc4iC>-RVjox|SmF^*Bb7uT&MqEpMHhJYpwH*>^<ARhNTqW~vm#B>ikHMwqqH_^>y
zF%IihaZcz^JRZchv2v8#U`r#V{|(|JoQQt&hNWHXocLc;_wo)JI3WA3$$C<+EA=v3
zHR~eByco>GbN`A`sTd4pW|r6Rd_lv)H2I|#ZanYe?uWyc6E;ovey{!hRnqlS6DK5W
zFHUCN$7v25BX1X^MCJ-CJQ14m1g|`8KA<Hfxvmo%T4x4-=-pp1c%2J+h&Vp7nXdM-
zQBV8FpywytuV;Dm$lD)k80#@XHYVGJGULhn@7;<rBeZ&SJl_;&#=+kF#Y<6Kd!e>L
z!S$XrNG|5)Mt@HyATS4C(`Ny`&Bve{xm*Xm*xNCo1JJ<kXE@4D;tw<(b4Yd5qBPRb
z7`Mdyt}hCJXSm+p%!o_h8lO-_mYh-~{6|HeX1u?#u~EIUx{8hptN)AF25OCm)QKjh
ztUmBiN|h{PBCaAmp)x6gf*2=EQe!ajz5&C}?D)4ciDM=pr<tN4D-o&=w?L?HQe&(R
zKhBldyp3l_FrGyxAv@&7X9!R}Z5Ov1SY|5|AaJcv;xV!h=AxuAyVF>>+CIW#i7B)G
zouAXxsNTa8+55xd^HBpQQ8KI7<TKsJKZ(4qhv=R(q?>|YX~p%4XlyyM&N1d4m0TFg
z{4nAalr}_1?JEr9@(FcF%Xc$QDIPQTl&Kl`2nX$gGrEG%bM`1(#oc(`%wOuYz&yt(
zF8DGY%%gT{H9j+0yO5(6zWrP}GCMoFCVpiyNB>Ei>2Pj4d-!0~9%x^e#70+yS7bjY
zEPDf!?rWYb|6y_ma70Iy@R=VsXmGC7?72z!FpMO>_L7}2g&zOEYgP&PKJnY5K+2{j
z>&X5IFKQIwMO;}hqHxNIe%pwYY7!s_mXX&<;sCqhh!M2C*4NY;ibJ6Oj$fYUaNK?;
zPL$3Q%9e=TS7D&$^v-1QGefGMH;xT@m!6P}o*bTyEG$fpUq?yl$mhM*|8xf)PF5p5
zCO?V})R*jw@z5NOeMDr&-eV*GAv=5~v>?Q+L?|sR`RQvA=3qcy{A7P-^7wn?4gYHK
zw%w@3DzhvN5gT1AN_JRlB-E(L9VT#foI^)w#lQcJ;m#3vLn>4RK95<dE!pCHU2o=s
zqP=IEa5OS|43I6uan*M<ZdDjl!1L_xH0~M3*(wS$ox|8l)@hZBr8BN}734EA0+;J1
zP?=-i6Q;|)btT^3Pa)-6mqqpUymBLZLb2=;l+~!6f-7iXozrdq+k7|V(O>0+wN^mN
zy-o^@-=C;0l;4ao0wh<{eN#DZ$@jt%eq<#wD1>ILcz&4tKGxhln=)x{`y&>gh;L#)
zioC6KAxfmzdt4k(?q78-{kOd3{8>ieXvF!9zvpZsth;6|V+(zL>Kv=*fBhm*!?N=E
z?!=%*9KOL18l=&#;)$B}a%{2DGf@o7-msi|9s_XR|AktZ1c8xEhg*&aBVxc|gSr;i
zA;%}&^=vVIL?7=kNJCO}f%yF6f;o+g<gj0u*nj1N5#@6E{W~RnbCuwOgtsX$K`7dn
zwujcQ<@Y~gn?U%lv*CmyWD7z*U|TdjkFauy%_nT+xe<B_x6H1tuCoOGll^Ve6lDcm
zkZ#sw*E4PYjeQo35opbvBe(LdgoIYtDrTgkf*ChKh0G(Wf1d(QSPOTUr4leES>~F2
z+Qc##?6^vcnfh4=-2sDyKQ#l$B}D3=y>J%QY%;QW%$U4V!omqEvJ3iRD^d%|P@~&x
zX2*^2_=5~^Pjvv^Ihk(yu^Fi_Jv}`|HT*=3RZ#N9kEO_<AQTk)Q<FEZ{#OD)O7_M)
z|Mh+FX~(>0pD(dz*DMPf3gHG@eAT(%3#z}7A-Uma%P|h|*V-5#{VGPn`>z`aZD!E4
zk>VbM-NCx1%iS9pb*rC=(ULTSeZuY_7fNJ=?_^6Dp2Tfz6pi2a0fD50eV+bw>HS~|
z>soJ26|F~UKXLBfd@mEUvF?>GQS^2+J#I+TkA0r7zIurTQ1ARaF{jLb_|QENmzK8j
zKrR2KKoAoX`R`@9B1_1%<r%oSWL~nb;Svn8(~w<^CP+z1b!UIP_|n^Je3#E5A!?+n
zlxQcL<P9p25r%HazKKB1JamyZAECja5C$7TuFjA2FY*T?Iu>oJr3gbGWWXg;5dWD4
zD5G+nkt|uJtrm#6hK7bJEc1mhF#3{z6o3ToUT4Q2B68m;0sI0%obooGi;sA;tSx)+
zwby3*sYdwZ(qq$2SXeK|o2t>WzBRb9vX&*wen>g|^?L26p^v9PpQ2NkYJS*`#8=$7
z557Abcr3l~u13F<Hb$4DIl`g_{{8{(^46cBcBADRUZgI<u@V|&CEZ=7HNyA4;<2E8
z!Zb%H|J$8v6@u_N?Ywa}^@#Ce-4~-awDmnz*D)B9#DZ_&<>ujOct;=1((U4-3hK7I
z*3BBOw|r!<Rt-pb$#EG@=j$yI<^$!Wuc69J*Is0Nd~RV|UW8wj$n5T}id#_^-q>Ze
zn9dkJn<n;=eKs<gl8U}jbtUZe=fgXQyo9f>S@HU?%>WdPW#NAsC&PcbaUiNYo!zgB
z0l&9}*9en4DnDg}!9B^jxbR&3_b9{`6ou-$PVl&R25_}1g<;wcu<7aO9BV)`<p0zA
zRtE$gOf$o5kJ|C?gE_0S>`TNtJN=0PT~$oQLc_=Rb@ylMsVRjYgS4RvCNZ~Ad+>4e
zb7J*L=+~1%`e3gtQ+q#uZxYC-X~|nW*C&nFM@S!^{XJd@g#{h?^cr&YI3xNZPb!~O
z;tNt!%oWOk&)!5^x#@2UU-aA^)Dt-N0RNS6IDHeQg>_~Owt?}Pz%<|-ag17YZdqOb
zdYN0K-INFx6>?kq{UxMtgk_$FYR+(}1{L!!x$hpvXSVKv#v&sans%Wr?l=4EnaCDo
zeEKgFVo%D0+VzU@%;}hzq}?Bo?58FRQN}JV;jkaB4n%!&LgaL%QS=h0+x-x@J95_)
z)BVu;XtK}!mF4dkQokh2DTH{lByhYZUG?tQZ*T`vk2paqaX%$Zpt|zk#1}ZE58iLh
z*+T~YfPVTTLZ=-p9j`pBAiI!}usm5w3&Nl$<k^TF0B(`q0Q(Ko%H0vh(s6}oO&JzW
z_vxggR4_}FkdM7=U4@h|rDdnO?9$<K=?nJ99NwO%FBL{8*JqX3P*nM!#Y<Ba`abkm
zLj@&>r{+6_zo-aq{V5sB(#ncsM1zOWlkYPQ{c6&WZyI)<=RVQ#@VLUE&FzA!uD?*P
zZRX#teniZBXo(7zto)Th2)V41l0zX52NCW^gR4k`I1_eta(^`1t)1{cRH%PHGlUnR
zPr)~2>35$2GosA;$oUsQw`(%yn;>U~69$S>OnbyUDj-`BL#Pfv4<VeU@%Z6;TaRo(
z+KSlac-bwL#QU1Ot=;q0PkNWmUgLvh_XJXxr*rAwX*;MaBT3nwokjhdZUK>;6ZD~>
zIf_^a8$cfL82w($Npt3kUZUi}9VenHF+7M0FsrP4kO<dMP0WwaqJ0C3JNZV|0od@%
zOA@bWk)}a3$Q;hZV5uD3y_-1=b6QcuM*d0#k+AM)E*HS{RE(x;Q-+mNRVd)D4VLMA
zE-WX3Tp+R@UwymzCqDu{-@bk8nVOpVWb13LvMaW``*C?`LP{RTI5({V&c;OtMYB4#
z3nS^>J_bRR%?VNXBa*kbxnnIo*@aaF7>yooDl7Y=AGq|`DJ$c|0CA~e0G{13$D(q!
zr1b1F{B7HT_5yCi6@;mNz}Q)fae}HJs)9<l!S>Kq6i~G|TWmbX5yg~+AML}&ne?#j
zXu&q&TTe0$jRmKQy37}Pq%HHk`%kxV%7Z4N7E=8<yDG`-S{g3s@!~?%oht^Wg4xH3
z*TCp<oUskxYo(+zs*~DAfj#<s@s-46vqYz&RJGHK2XGIC3c(afP%}5vjHs!5-G)?9
z*nb-RbJMoGS74AIGKc4EwVgH^@(JCA4>|L%nIuE@NhoiEFFu#0Wg2P{A;m=zQ{*R+
zDuXJc)_W7(0~$Y&hPZT_FD<C~0K&R})&8^=O{~rnbFAw}mpop1d5R(;Z5~njox3is
zv_c?X{si*nC(P|{ivC{58g(gHuEmI@;0T&L^GpAasjCc&vg^7sf|SzI0tymJcQbT1
z(jnblN{50-H%KEA(kVy^QqmzE(%mWfoe_B6&+F1(!pwc2bM`)a?X}m+ytZA%CEa6v
zxl2b-?8xo1`Nlv)WBk}8{`J3BIJi}u>O#YUSv#(hb`B1O{Fre;2$-m}jL%1ST+b*b
z*G7#{N0_`B-hcu9!w9GA9~fE9?z<IjdFTX-F{i>%eoMYlP$KWp=`|#0&e5ZrdwE^`
zF=PD|8mCPXC|nyq+Cdj6w_tl4#$gwZ3QWcjJy~Ms&d>lRt|D2PFvMorPGTzC4B@}J
zDSiQTV~oI|vyKi!Dd5+k3yO$$F7yPg{`V8|nT&+F491JlCP7H{SxfVEcEX$><&8?j
zA5-7L+Wg^6XYW17k3}mZ^`5q)hGh59QFq6uTKvUV|GgSP+z1AYM=*pC{~=PD|8mXw
z_w<b9<P@sD7E4xA|EBlto#Vbl4p{$Mn}DeI5#E~x2j#M<joxfR2yUFC2Q+pjU!3Q)
z&|1aa7KpI?g<~~nTBl7nw&)@#>KPyyF7e%E>zAc+cm~-=ACwOFXT^fDZK+$)l=op7
z!pEl_z&WL_gh;fMl?^*iaMhH$6~f_S3<6G8F_9HFu_H!*Z2$p{^5e^%yYmIR7@Iv)
zz(xxclP6TRkRjCBFMo~4q9R4_Yk$NeBAbe>`A+{G4shDWNA?3RI3Gbsia;@+=nLNo
ze8cd$*7}6w)t6^a)ocsaN$&BHN4#r_n|{3BFm9T6q!mwD${PIdK1}w9)OQ>-16pNW
zuD1vW!Zi3cEk3#2Cwran0@sHXbe8|EpdK=;*j!m&_M()0bo|QTO3EZ7S>mdpQHh%~
zNuBoi&kyC(E^9cz^p*vGUwvCh_r6*A3ktHyky+7akqgE=T01#)9?8K^@i2P<=l<`P
za7T)Nr4INAGeIZ{vAAYJt5G0=5v_LpJxX%&&jWKYYekQJQ+QnWC#+fnHIO*TFkI5n
zze|8F8bhh4RCAE%zvzFA^m8#lS~&pi31Ot8{C5CT#@h{uLwm=$wK8iY(ms5kcuLj|
zu@Ssc3cGnAS$M)Fmg!KyKz#>PR(nq)rA;lc;y3j1ABY}mlfLV_A2A>0;hNs{8pa1z
ze?f-u=&@dhhSa*Q;Vg}plFplE&J#$wDLgOP?$uf2SG~SQ3AR=jcQQ?(+qA9e`}5e=
zX1uu2I%eb;)#(?IqVRg?WnSy^!}Or)bLp*z%Qmuvepvqc#zy{<U;p;Ds9>Ks7E)jf
zI;lAULm&7fppohy@6LrN&_-|A+&S(=tp3jg8N*H|Ju`DY+V?&p$#c9E275kyh=dgM
zIM}A6w^vtHTRS;&7=;#wzr&We0d&(VW%MZK{V9yRySM!Q*qrS6D^}1WaOw714spwA
z3XwhbEl^Q4c%lVA#y@`JYVYF>zv#F%%fiA^D-GB3Vajf8Whh&AAz+CRt=MC^Uah6X
zk7SS(2&{hNT}8SHT>lEWKSiJn>Z?%u8jZu${fW_H?ejiCpA*NkC+@D7JR(mNwSy#6
zQ<BwIKJuo3e#tZhlk3eWS&CCdE&0SZ`9HY@pMQt<d1+Jz6C3MMRfPDU!>8(8kXM=<
zxbt_s!@0dX>HL}A7szuw*Za)e?4TYN_yzKW#>_0w^ba9RO}Xr!wq)Q@0^$wtOEU0?
zu?y>X?(Duk@bpxqD&Shuu)5;(d0>^#tGDlSO+6VN8|}W?=DS;l@G%7FKL$%h<VgDN
z)f%TI*Ya5i7`Q`tCFxHKHl}M`_s)(s1P;YIZrW(zfz44AN@!%E`Ksveg^Fg5G{OeH
zPc*&?^D;LD&G9<+OXh^dIY~IKupgERX_1EKcbC%iV5l~K<AvBqpYZskm%rDsaO^8+
z$yRK1sL$1ewRHWs=#eNs{+wDCYIM3AaRCUD9o%2u(X59D1KW|?%0*B3i|PLmOJ>`4
z$m-=DBv8Z^2DgGrY63-O0i?1|P!Ts9r$Se5Ijuig$*8}dQ_aS^@UZ&$q#;ysSSiTU
zod#HZ*eCeew;*HlZ<ll;|LjT7thg$+kofVtv#?1?64j}DJ@T-O_Cu3C<Uv{wI*a}-
z0sIrP#6S#bS7(X51upJf1?{dvS9zTP6$gi_1TRTWNw$eF4PMaf|62S$3<yA)v3+G_
zr7s53=SU&g5-)j1P4kyHc6@laLgrZCHhMk){fwGT>2BiF1fF_q_~A$Q=tTnxHBzu&
zE%v`V)3?)4uHj<ukpWGHnp}42sz^a8jY(}|;xT@69&UIT%Ed`VHo4rh?-)2mec-w;
zKxDqMO1CE2wyAquNSjenfJqR2zIa|M8^<Og{O_S}{;7CIcAge1CNa&cZ`6reNZVEr
z2QPy{SS7M>=p;-)Aa^3^4gRAKHUx8Aox|>4ADFE_KW+PS{tEQzMmS`GkxnIEoBw{f
z{u|wU`*VoIO{wd9hyY4`T7*YKro093j|o!HliJ_``!vEaE-6YUZs}$(Lz^_<XpG+Y
z5({7FT<jWWlpoTZ#BoXr%0+q7E<NBa$>b&7If5qmq9~@ihD-XU9{EarGP=cB6hRCy
z(1o#$U_O}S$mFA~3ai|bfN*mO1=bhu%ZmAhj)98=t0V{R4gB2X4*`<wX@ZkmCe(lm
ze^hq8VuEz&2}V?u<?7f4xL#v5f<svj;Y-;Ho6*Fyb3PxF((eA(?kLd%1<R^?lt*!+
zk)E1Efg7x0gb7#kcJSNcdBC&qcSJFat}Z(>o@E}_*fAcRcfx%DwtMSa?cwFll#Kbe
zwR$dCjdQlX(T(*nhv$H?h%s&0;B(x0*l8`m`5<8!s>&{*b&OgOEktv@vl;&?N2X!4
zN-v3|j&`>>YU4MULwdu7U~pS{;`)9M=o=O%%FYJ_K11nqL2K6T9!5Xz!?;Dd6%ob$
zek@7Cn+?^(4SUH!+J8<E|7JK;Iv0dhP*BlM0i9ub=l!>lJ&ro-sWwTN5i8mY1LCB7
zsnO+0KlHI~q9;2FD6ia-SktIPm9Ab~dv~=JnN4u}&Xoz&vVrcu2#u76xlVb-U9crY
zCN5N@^+gj6v#!-Gkqk@vEls=y;lubu!LZOT9j$<L-xrFqOE_#g_9fy~JwH%JhkcAs
z59B)L<Wf%pt_9r+$S6F)i7*J5x;HGiWAr_0bi5jLsT@PynAQKg4+ElD0qA(EFuY@7
z&Q@q*)F@-8HO+NvEi{|FXEK}Vko3OjxKgeQ_N(0?L4E-|(;KO&lP~P7`kt<T97?s?
zu%Hcxro+3i+o;OZSBq@fNNG1V-!=9=VS^iNIS#888fB<?hQj>9V{~{WY)09ZqhLv;
z;N;4it-Bi!6%-V70k=}UrOeEO#df_;1PY=Ws7qvW$dzB;(9)t+&ja;T*Jvqe>AwxK
z<@QhiwQ~V&1aSC0v_2AEi8Egr+LawUWv2k)ocB2FbxJ5g0xN4WNF+Bo8XgTRVj*8=
zV`Jm*`~}(LldA|rRifz)Puo6+<a$-FE@vLJvsrRzsbVS;QZ+?Cn9idIl&4>IdG6o&
zv|k_0MJN0lp89j&H^Jk9n<z^DG|>C08AkjYA;bdNuWv?Qax`f)F=6U_4)=DtF#e#z
zYf0(E>2A0K1W{67vGH#nf}+gZsc){%UtUJXr6#_UsiY|~HS-OYDpFs^s?L%GG+@Y6
z45rvlJO>hj_2Ohs-N!3>%aLZt*l@1!aieubSGsPsJSjuBh%gCO?wICR_8rZ9H>cH&
zjNBtMHY>ZCyczN=SEr}K)&o33nYV|v5dtK%QY<Vj+dGkqzd4i^p0sljqg@Z5Yg8l)
zg4Vw=Fs_dQgA`#y5C=#PWewRp+~3)?qW`EpXc%B9(|djL+s;K>TN}FZY(ooN`ROZV
zID#D0FBnT|*a$Rik0MKM15tV?q>LeMy6u(vl$b9NW>=dS^H7rQVk(y!-vNb-lIAfz
z#X^LkEqVojB<YYlPQtB7wVLhqzt@qf*7Vcq{9~P~Gcc-s@^I)+7i8#5;$X1wJgCV1
z>|@oQvx=`4VHm|!!`1OO`fi3CK+sYUd#<IkqX<klgQ<?<Micz#yux@a!}XVvp?T}W
zqb9P_2r}jQU$zGD!6``(g8pO-?KATKEXnz9AQ>uFo$}qJL;9=M`Akob3BcYw=y$&j
zYW)^xW7&m86!2ia6bPzT3151*PcA9qO-jj;-w8*O(=~g*YvMBg9*Hw$zUdQy=z|-P
zX$L6jd+m!^zlJz$ms15)&%giHrN(iq22nOc>yl@n7>A{9G{|d}{4LyD(wbNF-OIsM
zi=FDX@=%lTBR~|#WOJ-EW!7z@&=u?atjbxWMHR&Z*hj7;hdtp*RaaH5n*J4Fe#;ex
zPsWQdq`05F6HB6n@xki>78B*Yd(eB5B7!PsYdJ((2`h_>B8sBNJt;W0HN^{>sjc7u
z0RzUW@Vcu_cpJmXc2aMTSl)?h+~Av<ns&D+8GWB8XpUi@q+z2;eKCLw@v3u&A2(tL
z%O+~aiyEhJ6rUkx^bc#j(6j&Nwbuim^(JF48<W{<vc|SodX)4;v&DBWR81QFB6{`-
z7E+$wE16c}^-vp4JjUv$8XHg;Iv$Q9(j8Hwp;)dyIoGwpt?s!KA|UAzP{o9W53xZV
z7XOw{h3BF3o6T;oX3|jbrly&}QZKb<2i;-fvg%GjUR198qbj_hA>Q<e8~NWOaK4BD
z4k*>HneD|_rI)B^MdygO(t5#karBds&Y+ENW3$ojd;rF|f}+?TyD~uBY{dQugMuTx
zN5=FvUV})$2+WLs_FfT`?XYSbr+95E;X6$}fUCL3R9sYK1I8e({wk$==n|<KE8bS8
z{W8$wMi|#Gp<{1Q<f-5&DVBKb=1vU>A{_Pe1*jm~zW_rvDX!~HKh80<)%NyaSu`oJ
zm*U^g^TA6kvHU~@YDVvmHb%X_ic5%O_%{Is;AbyY3la*1X@Bm%_o>tM^h_PWOWcRC
zmHyq7eW1*c0A^gm05?HnW4R=|narcWV&T2!7Fq321_{4E7Vl^`3sh^p?OA-n`@Ru&
zO1+Up9uAFJl~oQnum+O4rf}!X0uRd2bc}w{bb}40qd?K?XwGq|_=sC8c(^_!6>F^`
z*nKahJZw*<n;UTgf3nc=&Cl!_D5s6p0Ix{%ZLDE|+<)+Jm9~|!ft*TqrUSt(m7uEP
z{-gIovr@H~Jwy?xGudV&27j8PS9CHJUZCH-H!x+TBOjL;z+y~l(eSSQ2?ZPRXJH}c
z%z@P@066NYs;SL7b?{!@)I?y<fcCpO4D46c#9@tDd53Gi%0jy>`fN5)L7|7w%MGm>
zI)BvucH4~?*@$+GehuI{pz8#O8*wuKV4S|;`D~?peDnKj4M6AHzvmd?76k#qQlH3z
zNn#i0X_rHq1eVT|f4bW7!d}+RSA;x&y~+I0F;yvpATp%CafkRyP$PZtM7k`az@oLX
zUo#||nB3fZ=fd&(G}j?r5#5M^2ofk03$P;m0+vl<;L1M^eR2`X_;B_k(Oa>dn63ZQ
z19JqpG?Y4>D|a^c-=Fz=!YXb)%}(rfYryz=2)`QVP-36E`NwUbl9FYb<AbTHwPlrd
z+ZY3+EPH!<F<IFjGa3bl8jr{mw$4)JXYw>A)l@q44<}kMK6o#RobbSC=0}cYN@LFz
z(^=a4xZIdH2%^=Dt?KZ(nE<ymHAz1$N5T#4B&ZSu%=Y|f^1WYc1)Nc9>Nt+&ES}>!
zyn?o^wSkcX0C~U7q0_Ca?)?3F6%c0sec1_GviCF}jofFJkJNv-!4U+aY-m}#2Rm$5
zy}%8w^b{Q_0Uv?Q2M7=;wXpfSE}|SkP@}(s>U#TY>G&juA$O?nlB_1MgK;cq1j1tZ
z9PZn`lvrv_YBZKb^~*Cd_Xu}4h{M5Gw0)27EcL4DlMj50JN`01Vy}>nM#_3l)}B#4
zprh$ma3i?mgM{BE)}q4lNLZFbXv-vo^zY0A?ThCT_(OR^!3Np$+J;ZW*k?*!+Ut@d
zJaWc=XaJVC3;x*);)wzS`!2$)j6--gm(83ag8e8Ig2+Qc18aDY3T`iqr@YdGx0~F{
zS6)C1DkvPBKveTGNHpq)6{QIw4(r3^{^)-~j7^yE`v(WLU6Lj(i$*J$4i4*o_gTzl
zUnn)%fZHzVYq+;Ib<e08XID)9ZV@_xaj-OO9B<`+9a?PuyeT4~3h+SFxJKAviyZIO
zr3Nr(eDK^BI5kCWE{sZ+#v0I6?Ps(*KJ~a+3O~x-FX_(<EE^oAoD$JWJNe%vqS<4#
z=)(PNSaSNiMG6piA4kYOznKJP>QBq?zz2{rPovtbADkGV7<;1yoslLoKCe=_@)q}+
ziJhIzD=O06*edv-YYO)^Z2GxCa#F@DnW&NWVerQf|2q{Rj;qwG&}tXRETkw<U)cl@
zc&!`{NLM3EY*<_+TPBdwD5q@pE!M@x5`?42e2}hx%r*ea?}ex$LiVrZxLQUclanVa
zg-Kc;roiVg^dYlKW~5W$ddONA=OomwJP5xLR;$3tow<sPvwzE!+crke5Fp$A3CW1s
z-~akk2m+WIfz@l|3JMDSl?@FI5^^^DqH;F8&-WS+J?1m0(#1Xx@WI(bvRD@8D|Hv&
zD%<yRt!Q&wPp}rhpUHj$NF4AQ8IDP+2Ku+L2qb%d_(i{8`B^?q-avO$5AD+rQcV;J
zej;`@HoC6f-iFHT?B%C){uI==Kfx&h{fL=HF}dS{D7%P03P{0uxOnwWtNj@jMMb@A
zh}`_@(BtyH2pSw#-UJYVOI|^3X4p^rcLc1rBHFYbM{Iq@Mex>o6qN|OW}86vXA-GZ
zPrZT8dE-mqC_F&R+q_o;^YBBb>GtyP8>0A6h!8|4D{RIXO`5a~ub~X(K!GXN#T3m+
z?o54j6#TAOX28n&(UJIzI7<-!9qcu!zrY9z>~W|(`J^CClwCRuzfQ<6Z7n(?M0O8C
zw62;r+i+kF+97ZqaX7cNq1bCv!$KUCBE^(RW1gXmaQE?nl7aT|$WJMd{iUWb9x=KZ
z6I0R(uww&}JEX$_##KQH<CFK3UhM|Ta6RP`rf2Vd_+Ch3-`ItNhH*@GWP`rZHC~8p
zdg;XG+)Ms~!TTg4*ukyqx_&XIH4ukoibXz-Z}l2i?ezmlAX3Lcp<rrSjx>|79w}{1
zCeM>aXJ(sO%O#8l|K$P@PyAt`4hLo4l~De!4&=nI%CMAt0#6c?8K4*G7el_t(lmn}
zvE3@vcbhW%Kl%{!@aM;lcRQ#<!>Hmor;N*|!4$o9ACT~Pxp!#o0!PXHf^1>eSez$|
z1s+4e;i2DXidf%$0(3f*D+>`JYVeDiFcJ7?;~S-W4{Crz!?uQQ*zX3K#wqf4>m1Tj
zI9w>%Be-#wS%!SaB2&Tu7y<wG!!fMjxCTtpJ&N3`ZQ6SSb7V;C5L*=5HUMtGr?1kf
z^<xD2&2hk9#@U5ts*iMaT0`E0@1*dUuzfy)B0?ELotMo0Iaks}gt@@_(})sguH{$^
zP-XV_*+JmXO~}5w9MEa#i-x~lK;d+^b8$eaxaT!#W5a6!XQ+^*jy?RdlL!tEq59s8
z=*9ioIKwFNB_p-A1t^ZJmp6=kE>c#!n?AMmy|u%L_@sOC#5)+3`99nRybPD%Rm}dr
z!|cwxt__Q?7e<=m;?lQ|<pV82$jY7Lruj3ow3d^W%5bhB>{mFKxEUyonOq23hE%F5
zDk^T27Lc3PDA^l`p<jGi6@hJh^D|55Ai3jO?AFg`>sazl3;67>n|x?#SjRE!5C_GZ
zBz*_uT*UMWQJvO@K@D1n%>)y^fdQ3!eX$6AeCbVd8w3Od-wL$8(c7~;B|%bu)}JGv
zb_E*Wv)=&c<`xb5m$U$tC!3jpabex>5&`Xzp(aJl+x8T4yuz7AjK)*FCIydxQRA3L
zj<%JGI`dD_zzJ`H`1Y?@$7uEA0wR;bXo-gA9H9*=wRy8R1h53enS@D0sq+2>p;an{
z$`nI+)sSDuZnL9GrG7!|pRgHK-a1An-Y}<NTcE!VN{z#<hB8oK=2hgKy$sNk2vj(m
zLwPZye?=zjn65qrF!6%YpCv1rC_cgP4<DW(`}Pi)RS2OFc~J!!Yry||63~>xh*(g^
zv2yrPUqf#!@GYxm%|<r*4K>LU?$z97002?=)^|H)z|#Zb{kg;sy;{4;u_CK*RmJ|w
zP%~N>BZPv6Y_b+LYj-LzC~4xCeCS1ptivl@;dD{Bw{p{y^D-v4SImE#*T)#LpJ-#H
zTrdZ;>dfR4bt{&)6Ge%KDrD4V1D?(G2cC)H6?Dibr(B%Zv`iqpv@8QF-G~YsEwHs)
z@{%8x{<~#1w)n*kI8IH%8<<498T=R>2F!r}F+qKNl-PJY^bmhW>d&a^ZAl0?%?rRO
z6D(bIeGK_8?YP5dCCqsPbpG3>xlXYv5XJSxip)?`5xHyfA)SgtKN8M72@>gz37Nm@
z{56}{AvxUltF@%>oJYFsHjBGMYHDhPDb_#N;njdnwV&+HT1+DG5TKxo-3RT!Y7E8C
zdt^A?s2#_9#GNId8_N$>T&%)**|cG@4J5dnVg}w!ic<<U3d%19W_RuA-)%?vOx-)g
zSvzBn|DL1uUpfJ0J?(4UpYzKbLGuC1Ie4$8`4)yT;o5ec*Im)B(`D$D$F?^p_+qr3
zt<Kj-P~sK9$pwS+;I)}imtTC4F7q*jI6q3`8o_(=G(8{mUN(N;FAvP^;puXI6nSfi
zv>V#g8_?6x*;**Fo<;qZc4kra<Z#2@H$uN)?+wbk|AYiMpON9sr&6^()N{^aiRW1Z
z?im6!Bm4K`ThiU{zAzZM0TbY;?nmptHL&PTJj<>mcPAY%ty%%q1#6-04%}hIh#+#*
zE&`clx5kH9ExC}OZSqqq_Msg$3f7_Ny}vw^WIOGKPc}lrqA=AXx`l2ar`IVyR;aa|
zeY5-wHm8v|=TD4uHYyfP;kbJ3iqj6rIqtp$$ZU0FuV1iGnY5Wa|41a4s93Svkl5;3
zhrz*ACD^23TcK}`TL}aV#jrVymtmB$Q?b{!g2FB8b4ei{5fYjBDCqEhv?X=R&M={m
ze6u>Hj)#l?NKiiDeby3w;~a_C<M}#XI#`?+8Gj#eB3D>y?)N&~u+#2AQgInu=63Ub
z|Nd?3#vRNKKil8m1USaK26wd{pxgbEb^^4e%dF7ZoFTLgZYnaoAIsoJtb4k;h_<zh
z5AV=CfOCXO6q%Wm3_Zd7;JP_xU$jtPHK-4!<KOd&t5%jFl_x)5eSSVbp1c(`gMn0V
zZ&ExoK)1m%`LiPDJ6K$RmxG3_rILxR^T*8xFxBYyoHoHl*bPGVFF4gw8Sp6TA*la=
zliTy^1ESnpH^VyftziPuP}d&nv(n2agZ|i%fXws^?B32pOpegVPTF>65WIcV;E!=w
zS%ou{is6ahak{d4;J#z+#Pl^m(ABaJKXYH(>ghGSYxa(jmz0ALy!Oi`Jzf9%J6~Nr
z`WbaxvwKlDSSnaHP0R?-F99JTAq$I{qhAVXm-96on9L(74(arsi^4wdCYB(=gJf|+
z(OpV{6pL|!f?uj`6{bCPibQt%KmMfpSOvFBWcY$^7PJo$rDJdS8*uX=L`%+Y*})pM
zdNNNIP!B01y?jCoVze%d*QQwJxoK|8P?1{TV-?7spPT#VQ=ZWeb(m6di5eNjWJhgQ
zNd}ETIU*YIo0$6Pf$xY2)o{6ph@lZTxe`|F`8_2|TVbBh{<|2n=HEjz6s&vpn+nea
zf!xvC#Qf9T+pF$wcMVDV&I4J;{nRtPnc&n9u;bc-a9o%1UWKw18||CDwUkZ^<>*<q
zA^a51=|X1y@AC~^I~Mq}e|=#nSp;N2-QVKl7Mjtv>hpU2_80k|GE;nzJASm$ff*o`
z2ej6M|B;8H9;>Is#{PB&M6Wc;T0hdb;P!>&<gGy8e^buj`vO%X9~?Fh8myp2>D@`b
zMCd*LxacpoF{pa+k8yEL9x!?;-Fz${A&uket+-*pm*_#;3`ed6SkFY~!EO*+c$%RN
z1YrB+iX(s+gEw-AE1$rjn%GQlz*fY!_V86qXwxWU#TMo!Ogww3ax9PPkwVk?{5cuN
zy?XVkNnx0lz<;qBmN1Rs4wAIg)JEh}_^TIxtoggw5I>yGA!9V}MhspuVdPO(k9|dp
z8`0NHaMJDdmp3@+3(ysUHnI6iWUlOy&rZUIXDO8v#cOeqpX}g`Rg_y@?_BsnG2k=z
z9vuDjE6xMMGyW0uTsIp&{Yz7Co96FI&(yfmw@-5)@u<FeDq}FL(8P-4dOc#NjdVxs
zpTdh^Xx9UUO~cPiiR4f+z-rF*c<Px^UjJ|M>t<gz`ND!<Y?=HB8)!qNUU+Z&9-QiE
z`9=fy)b((Cx>g+}(>vEX=3kcxoSi;crH2R<7lJ+F;&O(N16x>}WuP|NEVT^{y6ydb
zgvtRS?Uhj%ErJMSw(y%c5pFW$`-DW6;LbeF4)=G)UT$*aHH?&e4=xbltgFf~G?}4P
zm7nL~%lN>S%b^rXNU3@Vkq?ZBdKa0%0Rd7i*-HMdFJp7nD(X_0`x>2P*4m6ljk!(`
zj4qZXaXe->t`u_L$UHAfNz50dhTZ*fk?YLD9u=pQmWg{(50YEurtZBdFr8v8r?qJ4
z>3JvgwNpVXMW4|5g^>;S%PH%l-MNEIYa8mI#~?Py(3%pO<bg>xiV=OxBn0-&)1S*E
zW+ZT)@IdK6CA{%S?<)-@>8m@X1CSkY#-=M?c~+HA`A1>{zE2x7-#i)0U2KPvg0|Z#
zB_L8rdp>hu#gglFiAn0c+d{s}2u5ity`w5Cl8P;ppa8q<VQ5uJfzLWMGEr6@Dg#)A
zmL*UT8>C@3xb4amLzKFAA2cp6x7Hbvx>y?<FV%9l(H}`vN!drWmi4I?7<veXNTxCf
zMAy*(n(_}S(@6wELPD%!m{gdNkx};`HL=jY-v#Ic{0xV(IP5Wob!jl~g-tfg5i2u&
zMapvpXhV37c0)K<XJB6B9YzR?X1*AVu^QDmC37K}&vm%J5xHE(&rXtj_{o==rJviF
zND1Rrh_%$o%vb9MtHVH{D69nLoZS8oc{|ee4Ra1wjwJ;++;**xSyZ<#Sx8=0sXXE>
zDW~uXZ^uS`E*Bb?mY{TCSZVR=P-M)Vv`jWa*6-8jhYKA34&mNQWzFWH=gXBx*9>Gb
zqL}Zi*2gO@OlShISdy$PQcN)W#nTP6g4_;66@fsCsl-1IADD_D!Q3%iFMs`TmnGhp
z(R-GNT1{E$`Xy=ijP5Q9fk;-U?}a@50hOMCVdvRjtc^`!nbZH*ixc$)dJ~97q-=^#
zqH?oybC|w}OMatVWwzFDD0G`|xeL({K#=Z<Y$`r7+P!*o#+9NR4RK>wCD!XVh`wB!
zQDR*Dn7$<2fHX$O2)pmE`TI4x2!G4)9KWh-1RSK_*6Qy?|Apo$JWdzT2WL~lxeSFd
z7PkY1;pLDdm|AL6Rs;F(b`I=T+ynrRtGVIANf+BB?)udwyq;2hclXanP6*7Cu5L8b
z?CP_GaCy&Mx^;%+`9^QX4+?NkVKH7dMZ;-2W=%9r0u#!z_xV#ddQbJ+&sOJhkyj15
zbEeKKXq8ku!b*b*p$hf~?;k&YNp!r(_1SE0m`jgvYy{)kxhhg#|6uimvXuQS#g(h#
z>xHmaFLE3+f-!+T$1zHb%BAq-L5t+Ei_pz<18BWfK*8>auHtt3!B&Zip7L`RiGnTy
zQ&l=jHv!?loaBuvlb@F-IrWOZBwU@=#rAbH)$M2#pp+W|e)g##fT9&aeW21zoNk}{
z?)ZI^UCo$te#m4HESBlXEZ<$LN~F^B@`4OCRP{B7<;29=^k^-9#hGL&oa$vkTklt~
z%6+Cm_RwV%*;tX43M$2d(4)Y7C;hZ5MCP93wWlW*rP-PgMq`x7LO+^aN!t85nXPjE
zGZ%mg#H*G(nZK2mGRY6FlJCS*b;?I3Jc_$^cjsgi`X&iY#akH}9o>l|8oMY?mUpO^
zo$fDq0CC{GCM4MLB77%=ber@6Gl4vdB$@N;VU-UHYtq%u3Yw)F_GBVau;@W7=8h%d
za;HOD=Z}EAtWV*I)yTN$u+H8}>!@0{IzbBeK@2jsINcYYzk=Ln7xw2|s4g;zimW<`
z%lMv|D0UQL7Z#mYJ@-%}xFMRzy!@`}ITLMkCmrlt6NULN`SeN{pKA~CP6IOD)7D4E
zNBzRs;tVyiVQWd^7M9+EEp{emf_0I80pbuxi>n7HgxsRC0$>pR?;=y>>mC;RLz(#7
zXXuZDiX|LSYn5>g9##Ux2MhB+3)ig9@MqM?PD~Q+?*AZV+I|YWvQ!39gBg?(-(NjF
zmsQ%lZVnNTI-bCGGAz0GYd}BFZ^fO4MF+2^Mg^}I4REO%OfvLqd{j{FXgGFVJa{0g
zd0f7WdV?*jp-M0XVK1rUifRt#RFu6Rblw=D`&K5HKPiRtDeiLZZ<zq!@OqUwgRw7!
zAevNa;LEji4FZ_s1V!<EL^NItkmFr9)0!B7E~1HvQollQB(PSD(QE*ox|}iISLNw!
z(Qx-4IL!dD2gbis_Ceajf1SqzHzy|cyASG{ocFm7HMzbmZa5U2yqYy7DuG`*vhJ|I
z$b$pcy#H<IK4fh^58ZnB`m=*H)rCgW5duDg((E~<)7>Pcd#eV<U*!smnq>4)6ZTGZ
zlylHi@!5sQ+d_3G*7xq|37e%P??ox$uny~gkWtn-Iy`S3)jjyqTI=*75FY~=2oA61
zOuaZ~I<d7WSen1~Pleyp%I>B9E{ZaDWihxKmG*>nBSHY^Yt=cPA{v8Q%sMKi`7^pk
zfPfChn8HaAYW?7I$T4bN_2Gj`hXw6(p8xy-B{a#fdZUd0%EYpc!J*m|7b~W1(F(jq
zX?)iI08Y3*x;q7FqW@X&e|PXytO(BxfzJ0)+NZRiDe(;KRwU*5-2a;p_j^HhUMvvj
zM>@0wscl63-DLT;tKrzup>#tH<Tm;f&COd2b)O=LgZ55%nLw818{ZIV6nEa0_dl23
zMpM5K6%?+2u;B}A$1c5Q>fS2WH-lCju-*e97m;H9a&+Yl!+kw5UR%KF_}$PQl7+Eb
z0|m@Y7s<V}v}^5phG~(#F)%gfp$2@iW7DvYWmm4DNbeTacLbJBFU|mU*<%f8*G=Pp
zD7YVC1iHj@`)<o_%lAUqXl@@8Y6ssIs$H#777H<V_d2G!>X<Zjo~?9TImyaCk~bnP
znY|*on0JT!tIG7!qHQ+HO{|NB$Ax?2*b#Sg*K?3Wig5@@-ja1;>O#t&DcVhMF0`_g
zREj#>90Tns83wg4UVM0uwnoi9y2Fd^rR<N=DWlLYvsFg22W}wbMMt2du<0L0og`^-
zIdzD<AS8v%kE9W~7C7Wvo{2W$`u-$39@^2CViMMJGQV-S@I8e8UeP62?0c{HaxWke
zt~Ygf=rN<p>Xy^wYtOs836KGD_;Iid%%G1xC(O+ZL}PDzQ#2l(%&TLu{0HEPz>SA{
zY8;z78a28|1NA_&-r2az?T@gdacp*R#{px9;R^z>!QBnOrWHO4;{!O2TgVIw9bQhE
z=}*x^;TMmloLfIW4mZQW${_nA3HP`A@AJ2Omt+4VAh}#xT-w_gq%D5nsMk0wg@JV2
zzJ$LO<ZvIGd=F4L<s(PW1^j5R>I#hAC*4<iQ;3Wv&y9A=PW0M<2M2*t?*7VESIGZB
z6ZlWq)#e>MmDpmj{H*p)lGl=kQlUTPsj;{x6)aR8yI6X>AxZ^>CHgC2TT1Y2cvoG$
zwFJ{l7JKYmRr{H)EW2up``k4>dIXV=Aa1A>C<JmTOsAo+EQr<m@F-06^QsIB7KdT5
zQIeOpqv8`KAY_vu<S0ciGpT-eu7Kl}Yp(e6BQ+w|-MT9A1l60EAR(Wwma{NqN!DcP
z4SKlu!oAM&0w1=@A`F^lA>6LZZk*3lwv-Mf9^N5seBd{sZ&aFG<1-OydB+uU`L}@=
zT*X|FJGQMtH%DFKk4-0kBW`H|cKGyLXJ==vgZ=#gtx4v>o3SPgVz}|JW$6sxcE9LS
z4rb7vln36vb-kzqzq}4rgQCHd4N<|y;*sY^FMUi*;4%}@m)v+DSMlS63Vo9`Xw5H>
z`bW}fJj1Z^1vM!am+JYECjy%B^_!SF!~&$MkJsh#);r;Ve@<j9a7=q`x-t9k3v`X5
zv*@!o3kATFZ*zbzIWkPoYzvIoiElC3nc>ey^f_6ESCAa=(ZBu_o!yOJXSm)yB)9v9
zvH^LPQ8@gZlAxH%;8P8Vi&qV!Lu6h6Bw=(uqxt5g+p(+7@H5{yB>QbrooQhLkE{A(
z(<#~uGcytDY&){Bq{bbKsjpR|qtyfuPx9A6O{P3*`GG5sl!I1S|Lejkr;jS$KYS>2
zkh@MOp!`@%nl(IX*9jM?a^t5gf)fdu!3}bD4^A3kaWTq$3F23BAyZzVAI=dM9qm}2
z)!(&XjsdhzZfblCb-3}yCp72ZIS_E0+=GZ<75-+Rz-E1a(5)l!2?7A}WP;|?55lIy
zKO#Mg{E%~OO)(>m&vpq8hir!AWx)FnywAwenA)Xt{rRwLBAPuif!O9#31rw@<mTfD
zh<SNd(;RXTByi5I`kTxp6??<uj);YN+pelN%Zr`Se+$-2_33G8H!0rJ?Ch$Kz55?2
z=XH70yMgBn^29ny5!7}Gkpx_Fy`71sj`6HJaXxw6iF>Q!%BDDcJE};B=kJ@|F-gy`
zKCIjfrny-D>Z32?RO!tv4u(jSmy<OqCeyf;TS<4{ehteqeZjU{*f!CM=;G4<V`8CC
zV4Kevf8ajeAJ-H3kzsnLVn;VIfGEqe*Jq?^+Xa1Wf2&pM6HR%uBT8idB*?W-j#Q-)
zUA+;W*L*|*8~a3jBhcWus->l*m2}IP0^4T?sUwKOn~2p+AwZjvv6n}Y2iqJpgaZx_
z9ZlUn<NdeAV9>ALNxV|b7l{emvV8Q3N>wO*R2>Z%kV@2MOf<Lds<^?XeY_E}pg*I_
z9z9u{eORBENbG&t{@r;))t%-Hh|iu-%(&L!IAR#Yj-J?;g<muZcEl26mM8%ZN$dVu
zP1i4W^DaWTaWN(6D4~?5VABu;bW<KHjqO?j%o8-SE|==(=;WzHc6(4ds@^Or%kw>s
zy&NxQt-Xg`iIZDcD7z^vTJbO}{qAJI6v(P!Ia+DT?oDR3zItBtBjXq|OngB=p-x+C
z-~%Jo0WhV<p}_!iS_HU-Jseeo$3*ap&I2b!1fo+$;}5hxiM(F#&J<Tsw#uvP1ud}@
z0F)5(8oLc7d(x4p^zQ;0z-|SL>uyify+$4&of+il0!)l$eML9Y)Vy^Z>N))H28<z;
z{TtLMgxSoC(l4%3VZD|n61X9ip^X3Tau>8@co1F=(DVC%<67ec^6}JOR^kubq@O7V
z+-xktlK+cQB-jy|v|m!Vow=os{ng&k9+CyR4}y`ie`A$O5tz5PKVKvGEcKyK2j-LT
zXpJ~yV!StFdnAQx5zmxII5nq#$%BAKU-n&bLb$0IV%Q$`sOxx7&#R}e>uu*=Vj~y;
zC_HgM`w8&Q5!3>mT9;4{aRF8UR%<p&%)G49oJFPkP91?i>fN<6%7Hy;hPRNuK>;7e
zcRZ$BM%pSGD5+k0=dlX<T)Mt{hEf8_oY{*pBK9o`oK9bq+UTu3o=4E&5!LYku%@fw
z*Du4)<miDd*Ix=pB*2q-u1)q}rhNr%K@)p6j4_CdZg+maG*Q_EhmK=mIaKcCN%B?q
z95`OnsU0WjegW?HWRBeI$PRm*dQ1SVgHK3gG^!~njsJ`8^=U(#3CrDum=$YvkYC){
zGObuqWCrPr#Uyhjz|U;qrDHTvItnuY^Jb|71LrmXWxXV$y1Z7Uhah$K#RATG@R!L{
zJ)ki}y9r!-c6Kej7H=FfVCbr1ItVL*$NusWQ{GR0UhsW#6uZS5lK2P(ZbpsBUe`i_
zEY#?ij(e>uR`GIq{@$HeD;F^%PH&&nJUfUYmd@^v>00R5J^_3>(*5r{(^I@KwbmaH
z+xjEb%mn@8AIg8F5#h$$N_H|^pcwZdgs2@?tKLR>-?fT$>$yAK+h*C&V*4kk$<p)!
zd(#9O6;YhgZNa?uc6w893J*5k6UvVY`~U4Z3}|`}1Y3;W(`GOsDl8>zeN32tsK?y#
zenEPnPhNL141T-XCdf(7w2t6MvjT#@ioygZr<|h2U*a?-E0&Op5oGI-R;d|{d-FtJ
zzEt~7GsLUdetLluZPi6}?X_Lv68M<)VW2S1tA3*_S5_;fv@Pw=lC1B1p$?GZ;%fQ&
zy|w60x^AW0t^MbFQ@ZX-Er~zgeRb`<D7+R*6CL=6<Zg1+=d?P_|5|CVk_OgK%T}O1
z^yFHbjflSTrltx^z^z!@pacM0j+7rkgIv_&T@>&I^Dka|&U1FB^FG--zbi<iG6Ni!
z4Akh;57&{fIAH7SLkF{PZCT7FW|$o049%t^J5SbS_|=V|XfA+iWllz0d@kysoGPQG
znWG5r@r>-f0BKBL1l}pd6TL4_XO$Z?z}$OPanv&~+E*f*UQywclf1Co^RotRAKz3<
zoOQDTDuLn*y271*zYRSZnvFzQRBy2_8~!b>8}&~)>o(Au>HNulx-%?CtivqiCG?R<
zyCQ5Uqs9SKNVPkJp~g~dV22N<%2sIWH=jcqG5Ppf(mUSN4<6|Dv30ogdv6Heh5O_~
zluc8(mDpP2er*7PS~5Pea-|mOH1k!7U%-MG{a=aR-ld{=xrahno-w2JG6pobf>3nd
z`1t7z+(LKV@Yf&ihEk%i@P{o$l)6g$@gSvdKEEiGn|hsu2+2e4Fx}<~;u*=RVz;~%
zwz&s6L+XhCy}``PEEgAj&a%{;Zh9Cbvm=qE@M~b-c&zU*ENb;`F@WL-W^Td7_2x9P
z2hP%E`<|(bqy0;2h@glloFZhtkeZsJawPwwruD`vt^A{04haJ(49&`;Q#Az3-y>QD
zl@k`o)MRhc4J2rP<q;#NPj$o^x?as@yv7t7lRZvYC~p|iaajQpu{(T8iR0smvnpIv
zQdOhu2Vb)fg(qWB9`+*_SvoTt+enEUGv2&)?HB1nvi?AOg0hCSt|{=#R(I*da`J{T
z(&I3K&!>2AxDZL(8)m=0%AeV@_sR-@M#EQx)hWFfur*hrVwL;k<K=HSLm?X<hPnIA
zr%GO&=lvsRrgp~|^TNjRM`A9TR33Wg9vo{kEcgWO<kF9mh_^x|f^JEguzmaza@O;c
z{ue`IO>TNK^V1EfF6OU6?L8Y1#mR;OBafZm<g>pPI8$+YyY-0KK97uz*eY>S2yY3J
zStOZmKbfs<C81of2L4gv=|%=K=$jHoLVUJ+O3VmWwX^gHk5cw3BH8&97Y1E7A$mor
zB<DY6f}n&5sppG?2WiH(*-Vgt8({yQ?;C_q##QV($J=<e<xTR}bMq@QtWtE}o4heT
zL0%_$b9~{lzN@}{olsYs!UYaj2gsEX4@pamI-{<$cu3I0uC-bVxJRe{x7Zi7>Ct*>
zW=U^Jtp&;j`gvHsSE6vd`pVhbI)j`D5Hi?VmZ<X?dB2jYfQ{%(mCCNjC-#ZW(#1WK
zTiR6M1+MTwo>Q++Ks&!G-b&)wE=651bQk{6l}TiyquoEg#+2Dh^4ySrU#0>cP$P<P
z`df*w=d_0v&z-$<@6lMT{;I)oS9oDDCUeqPfp)F4S(w1A0eL|`E`P94XLKar_`igT
zg!72rJCm{TnNdOiD;)O2s};dmnv<}R@!02I-g3AL5bYQ-@?Iy;Zioc3%><3@L{9W@
zXpLxj^+jD^NK`a+AlLVmlOJycZO307)4m>G-gQGITxaD*%bqFMlgd7Ic#QB!8PY>0
zi*<T%DBbNByThJ`PWX>y3V`@^1h-8N>LdTN*FRkwJ(>|UB80dRn&&X^FeO$VzP7px
z4>3MyBWb{EVO$n*TkFLyhXZgo&D)<w>I8A!Rk{2n;Xn-K|DK5CasTnb+KXX_6!8{x
zqp=rqdj)a@9`q5N(X6nT2mOPfvX~*U(cFkg(%gD)Ld|^?PtT*YxAkco@u!cibzeQQ
zTc>=GmFet0RR!zG9;Jr_`e-3kgz@T>)-R5ne(1tSS=y%oT`Lh3v&QY&l;(i-gF%sF
zX+3l7YT3!EU~ugl;kL$PEFotk1V+aHB^;%v3NZo)_Bkc`)J8V4t#3jiwc#F%HOh-V
z67V!1!B}zU{zieSu4=C$Du^1*`*6CQ{PkpeSVI5#+?!8~bPz#Ye5QsI(Sh8zTpbVA
zx~HoO!j5oRc`KApM(GSi2MLG`uhr7O+xTl#U9oUt*nRP_7VjqCNwtnEIuC!jKz_%z
zGE@JPKp)S_3%9fVY*%uLv%F>mZv|m9iijagqN!{djYy>}z7EHp<<7X9RTfGWML!Tp
zj4=5T|5&HYsM9a|NMb{RqWQ<T$HTj)^Sy_XtI$On>%w4dI110`DW6^7pW&T_t^E?_
z)Wn`D<CA`~=gr>vps-yE_jnC`$YzyHfxbt{pGx^Y7bT#?N!;-K?`K9KLxc()kE*I*
zX`;zg7hp#S^+sHI5zlcE6;684&mSLHacvw#>PSun&QGyVSo~?eWB0pEyW>5FgAyOm
zW3w77(bvh5OX)qdBTRk72f9${%RgTCQ9}RxZ-b=b;PY3{H#A@DM_8=Xt#-mAooT^&
zrg3`6EltUOrab1mn#6k>#p>I9k%(@YW~njwAbsH!A#?dt)E;R55H=FiK`0p=3})U-
z{r&6nWvj@^+TF7r;Ss|sTTxq8x8?Rn_UeIdtvxxrXe!51lwr|t35c^ajQQ;JPSzo}
zov(Y4T0G7-Y1p#oanmjWaKLF~cROBw_?(;J8AiU3@#KO*O5ECiZ<iIB_II_Z)k}jh
zQK~DuOaniYcW564ln|AZ)6%zBZ|t)ET@DN(6Kz)o!1cWl=a@G9J;|6|<z;Fu82V=G
z4T|#>CHseb`$Cb-8h>BCFsWAUOnv;}9ba-5J=D=Ru%(#e5Y*#q+)vln+-4U=)sQ$v
z#Z|fsWy0m2lG?y}=xNt_s|VLof3Qwen~7A&PS9-M%T#~?4K}!~*?M{^s+`36tA5K;
z>>XDGz&*A+Lz7{O-YKKF)cbyKH8%^r`QHE50BM*!eU@yq*>69%OeoRaoa!XmjdJdJ
zIMP@f+NkKWo!F2*_YU%>?%Xmw<W4m?*t`0>RY5Z>1|Df?=ZtJhLS#=N<kII4gTyxR
zum%ZIST&)Oy0gPT0C<hbNC-#6jMdtJs8{pK#DFJ@1O5|rNsUWNjrT9I1KFdGl*b}>
zvKA8YO~^V7(xd&UPh6J=)p{m+<gD>*kXUt_dLJI>)b4py+;XOU7m+>ENgsx}e8gW*
z%|9pVBzjTJw_)^c;73nt_g#8`gD3U{%DlhL+|TW-y=TKen8MShnEkCX&3vwK6A0#U
z6e6>eRJ!#`KUD^m(?sW}LnkBNf4>*XAYWlQklFfbUOUY|DIi!Fdj9P^_jD}^v`l$K
zCu*Kz;KLPCiLV_9P%<LBa}0F7B6BTwZJ}}i9qf-yz%%=s+4Xkmi%d7asy@p)EDrmT
zmv+7*2QSficbhKPJ>&7PU!?C~^&;SeNt@+3{f|!N15JjwK1?kwDoM`_d|cJ5GGvzA
zlQ<;`d13WNN78(zIgsj+*;;0a2cFbGp7BzgG0CBhL8?48Hz1p*rUg+%!23pGyUk)%
zer9-{Vfj5ot%=>zRja?`$oGkEX~^TCZ}QplbwI%cwMT9CbRR$Kr{RF%Ai{{Ph7E}V
zQwv??EQKfSgWCw{yNKjuH9Z6llZ*rRiFI++TTA+t_%oN|Y+5GEhH`Qa;}#~2J9MPP
z-Ix1`_B9mDiJlDpIF`d~S%|08I^Nr+T1m-9aoV1G>m&E3%hp1m;y-2u#%`cbRiiD+
zdm)6YjsQS=xVcXU!*IqF9;ema*kg^$nczJ{#%1}+M_hx&Z~H(Ip*h(ef5s-zxcFsB
zbQ>1hbMZSPy*h(<G0Y^OqG8#qjsg`K=5H7-!FA@q_;Td0!x{Ng2+-z^g0U*kC;0nD
z*f&25{+hI{vEZAv0pGXlX!_KnacQ~A!>9)VI?b+ptC9r{Fj5J0E`8q{_p!>mSGl2{
zQY2TztL|-Z`Ic(Mq^~AUaL{w+&iZT7x4p{!w71Tn_wimkS#_TBxB5yay~7*}g?66K
zgo}P&o|&%e>B_@PsGsx;7$w~|shoeycf`bG;0Y;@yRL1BfBVQc2Blz(ah8|$$VnM*
zNyvcaz3J_(5R2As|A!h?wfME`35ZAuvTT-@Y19OiuYg};nDqKRryCLwsQOsR(yb#K
zO^uD8G!**iXQLHeAHniykuPOkEY$b=_wS0xn_)$FF$@UVla)BF4Gscoi;L8fC25v0
z%560GgXudzKOcd@8X7F}Od7|*J^bC1Lq_rm8{X+1qzQhnSLdZ^C+?~I9Sp>wVy3_q
z{fNKgJq|{$8Z>Rkv!X~l1KU8p$Q7dN6zVfVlyoxfI@_g<jo}N+^zapr++{h5w~Kyq
zz|+6=e$Femab<cD8|7XWxfNci<DB6BKW9$Zez<z6kf6sz!9vU}cAj9tw3qE;O_bjo
zCPSYXae`=T^5-g-p`=Z;`RRtii8x^$k~MaHeirMF?T@bH5X{rGrm^sI<Mo~NZuaG`
z*Y&^3D^S%<Mr=?CxqoQr2Y($jPm{iW<l`4WpNI*EX4pBw%(7g65MnKUzW};^^D5rx
z{fY2APZB<P^5;@SDM8TMs64UECpb4dV(Odlc$}=D@NBOR)-3_g8KU?^d+#e+vVgu8
zoUk;)L+|Q0d-EDa!L0Y-)_#6tiCx}<lZd@#BEueT9w)b;K)cZT_;NS|HLT6Neerey
zFdBV6BE^Iduux_SK~~ylKjE%nA-xw`v8XM5p|g<VpuIKJptN8uvy>3>n-lIan}<SI
z3<2QObXjSmR|qwwK+a@Wq&yo^3<A!pS%fkt6rqiQx*Cd#Kimw(aZ<^Bpub=)PRkag
zwlC?TuRiVnAYjyoXrAZ|W(Ws<^+)5*m2Kw!@_7s5YU|xhes{tF9&Lk-&uz9W-h$ZI
zT@`X<`>j=sw-j|u@qG08mwEwrvzfK=(r*U8)DgCcwfSdI65S0`QrBR%y#xZZ1Zm$6
zuOvN>rKWR3-udvrgULaoonp07>)}~JQdbcXoJj=QuB(C{egVMbz)KQ))XKKW@C<&$
zM%Uu&i07w<d-z=a5Jxo`CV9^{8tIQDZbu;-k&^AzBlVOdHAucVZnH#E<4s5sRO=y@
z74&_45Fh`Sjc@-(mGqu(1**pv{{>X%vK9VG6#Rf!O}pApIIq1X$jR@0#-0^x0nc}r
z4WYu2i7)}_$wM^`)<--4RhOZU6%+&9oks1aj(6LR1#1tH%!uq42fs+)SH94EPsEY$
zv%s}BU^4s$p+bgBsZrQUQNJa6!Mf`Zsap1RN5oV8!k4o{w%p;hbnNqadeDvFMzbe>
zJuY|lUw}`JaD#jD**-5$mdbq5Y+c;+Cp@y#M1}bf;bTsICc#UD1|n-cozFXubRg((
z|NEvs`3Q$vAv)>`UfhlH)o$!tOq`SKe4}29l?_JCk$fkdOxQo^6gaEr*)I$2Y^<gn
zI&EJQ)h=+b4X}|*onO%Y{mcY`Y-8Xnembd@$STr4PpLjl<uU1W%`}_IY|VOrN_aJ&
zOHldLknbQx^@7|Q1gyrys!{^ZYDk(l+mAYR7f(C5j@$VeQsiWh-QU@-T--^GV=h$U
zzUH1%#WGNNlZoxt`xtj)H^@ib(zu~yuONEn>F&<`BH`ApsC0Y)UEU*ip8xYz1>py0
zDe|gFuQaQ1@mRJAu<W=?M`WmGNnQmXV_Zjnq-ptWLbq?1D+1paOd?kfH{><)ynpz6
zp)hDIR#%B8eXCi?njAOVL53sb%e)G9EKe)PG$V^a@Y5`8(QLD~2R4mfmz??(>@3+1
zi9R23bvS`wCHH&hx-KE|<Y^=`J|?Y=;4YT~b_Q5+WRBfmwl)o7Wt^s5kE|BP!zmTe
zHVDfxKabm?kd2|Gr$<|}&BzLx?!Ox*0^i#=2KgZ=?*VCIkJh)!kV;x(e`bYDgtASu
zY18M}XWFr=VQYN}#FJO4rL?Ac+#DPzV*>)A_-P!rhr`jwE{1P@zJor47nA2bBYVuE
zZD@5~C2}ZE8id#HG91W}vU{}-mWR8=qVK6F9@frmE{Q1}=`1j75lSzGEzUrlwwJVF
z(h!U<2z!Ov6#Xx9>baKw=zXVtX8Ue`qTrb=yi`mPp4mXz-{>OrsC&29rY36;$i{d?
z-=liRMn@0Xx6i+K^GZT{m$p#l6O^OtTf5;Ii}$}P7O424qQ6!EJ-a@(0X1e6ys-aH
zj606Pz<bA6KkY67Y|)??S?YK^=7X#a*5=2H$75%{Fa4zj6<#c^ZmN0mAqX>x_`z4y
zaS6_vS{&BYGYjerK7vT%tqy+an$a}vRU62}i{i(>Pob2q+LauQJ^s`a_BlbYAUajB
zHNMR~vd{o4`|=+5f6o?~M7I6nqT(HTJZ2a^P1#;`_3NY6-Btqr2=t5<*A;B<5tdR8
zd3uI`6GY$N@qtxCP-6F;bG17yx>yRfj>bJXQ{-+l=~hSBw5d!QDJB60Up~XQaC2#u
z0XO^<eY&SiT)B2}s0stPJk?K;*p@7m&p7SR8Va`P|7Dqd6{}tJaM4e`D_}j=WZ+Y{
z4hHg5c){1lqjF3wN&XQpZW(_VNWRix9;_H|DVaM@@UB`5#&$)Y)n*m@psap`6mzTL
zAeo(I-ONw{`*MtaIP@ge&PJz3lbq)F`cD@5q3=;ib*t^>_W7JzCh2kde{3}lqnjdD
zGqMWZ#y+qE>`I$JjlOZHlO8Tq*WRj+b*IT!EkVY?aq{Ldb8_LO;=~i<#>{@r8fspl
zAidW*8zY78y$MX8*{`y%%m=_6xnpdP(zOvzh>QyUwmn^N!@%Y0Ya^LBT^wq#|IO?F
zO3BKGI@0$2(CvQO!L;%1H;eP$x5t9)WUk;^9N-gnRLw?=mbM&f7UaMI$+1Y%|MJmg
zr#$K8?OP5A&?xR2xeCgJU6t<QFo<*2y6KFK7daUv&XF7UpEpgTtnze<lDDmRavd*t
z^|<n2+Jg9|u5est++9*lG)VRvV%kTaqMQS<^G;zkhl+hgH06cIqES$qSb5+X_qo@B
zFY<Cw%>kadOsJ2Ouf5{W0Ll{bWWp>Z6^>h|_@9O63<>v-`Cp_`$^=8FAmxo-T_H(;
znqNI<c9S1`q!AiM575eOyKLw~dsFlai?4pwvF&)dJ`h()#V!fCe7E99`T90!NmTea
z4lc2#yk=26@!n`UdLBgLb2armowSSg$uPfC_%=$2nJ!4|+CPK)e0LBkHo0U^uszeL
z|Jg$D<MjiSHlK5#kvy_vl3zad@OJyAV?thhwJT~kpU%%lv~<tF<m>+#3YqZM1|!1L
zhP}yLv(-!uDs8MbQ`Hjj^g3txf5v!2iKLdsLVg?h#;wl@)8*jiedr4UEv;9w+mUD(
z5)nRLwFFEi-3iU`&f*+-c-7K)zWD#g)K$hs**;xaK}t$Mq!E!0=`QI;x>LGyX;>ws
zQ@R`J?odh^q?Z<@yPNl39`*lz&@cWLm;0V;u9-9EoXNN{#D}>YnWw@E=Q(J;O|cDh
zWU|vId^<o5*nfS#=h{?0+IA(JoMD&8`kX1e)nT=VypjD_X%Oy{3nU`Jo#T;vj8O;h
zYgv?Dhr^kXJ+KlW@IX#fx%>H@Mxq_BwCrwhre}74XvhiVI$f?dUE17SGcpEV8%f=4
zJkTYuHx%yPh+aKz5)1bZkP)FMu>nCj?)oN@Ck5X*j7TwPvkTtmV=sakPrA_H6o8Ux
z-?ObUdt}y?Z5$g8JNKRUw_p)OAC{%8PeqxATvR8b3u{OSXu1b0m)4i?$E_sAvY{oe
zjGqEAZ>Zm_Z`Z319#9JAi_8BPfAC6~>pmX`$FA?GqZ&D1ZzlBHzJY3v$1$3RcK9OD
zTm3$`IhtPib34K51LZ}m>_D7h5{cmGtuAp_OaC-}>^upA^P6j%EBP_kNNg72e)yAm
zZf&Z@Lj-P<pHJiD;nL{$ZtN9=JDrE&dtmtIGm6ap=dpleR?~SrgSLQj0x|Xk!@@t3
zIf9B`QRo>bHv$}^`o&A1k+Wsld8hC1aPc-;?N`42_DpAcp-ivWauEvPa2bl~>gU35
zSkBaeD~mYOUA@R#RYqmzfDM<!IYik}gp2{C6}gBPE^ar)&#=mBJ`O-?UMhIugkvY^
z8!%^b$x^>Mi)r&N^d|1!=sU9799FGtc;}apU}za}o-z8KtV)K@ZUL}Eq?FTo#=cqq
z_}EhKO5XMJaZ0TEDwQp~5$-6nXIkxGex_lGfou@0XsM8ZtQ2_Fbk&8<g{2<!H}g!M
zH1Km6fX<O;T*bR)OkVY#w;8$#cZ=+yj;3ItF;TZWidyV{RNXnou`|W2DIE8Dneyn5
z7r-urux++MIslC`pk#C;a6N&alnw6aG@|1Zvb%a>;Vspi=v%EG`{O7-To&WHAVOsz
zDN`ksQqv51iXlF~vG)`q8K*h`(B;7n+vz-}N8)Ft9jUmngEFkXyK^^^Pam#LNG5X4
zcU!aJZEuCqAGVHd`}8l2<4eJef&FNZd{m7({<_W9(Z_!Z$6O7Ak0=>K<97$#Jj|wL
zJ?S~?PQc^gm#DW>B0}wSSA@BrY8I=PGadoUH_<hHr@<FI!ZCkY2umo1nL}Eyr=_T5
zBF4e7$KEN_|7~&wW|m<1CZJa<1{~iLr|$8#!rveywso#f`w|uW1Pu#V*zzJ3A}u<n
zh21>{{)`aotrZ2q*AUI=2cWHQ@ea}M7Vv8$^evt$Uifbr!r_khEjBo;u3kO8OFS(M
zGRu8CUA1b$z*~0c`dk#C%nIXaw0T`7(N=htPD%MbZ3<97p62L&V>6CE%CkvPn!=Ul
z!O5!B{d9jydj*!REigydYXQqP3qP~J8?O(-{Y-Fq)up)gPF=+}JcYCDo}p@xCkJE1
z$DIk3zG?rt<Cm9S<Lvo#&j-4L?9`_CwUSYa&_4p3-heX_8oe$awtt)2M#sof=Pd^0
zfH`Cm|2@o4+RIt)1!m>fj++@Z>9@fl_&p2hPs%V8`MvDBm+B;*DGQ6384aNG7jAvV
zVVh@6=;@7o-Yz8E$#!+^ve8IKnUc`oaPdihoyq;7LV;HxBkE^UCqDmxzP9S-=eBlt
zWM`T}gGv%!fILn<nkm$vdGYlL)w0~*bnfq0N;;lO2Q7EryMi;`&N<dWK&}^<hFj4$
zdH<f?VQ(%3(#2m^Rz(6PB!E}$pfN2RF+4Uf-G`P4j!Gfi+uJz*LmQF0$TIgSM4Z2E
z<6ik3ufL!)d-mslIfxPh=ub|y5%-OIg32>#siOdejxP=_i{l+xw)bq1)&1lS<=N`o
z8g0t~6E1s;ju=|TiA@Zgr0n(3+@?UOND#Vw-MNnU>7+<#Xni^of!~f4^JmcYe*66j
zEy_(($fmR0?}o6?L~yt0eBHBDF{z6W3&3H={gPDe@TyNs!8?05yJR9_*gP0>)QeYG
z3~idoz5|XQk3p*oBFdZ9pJxp0Nhx>rNb=3s6q-}kdBiq!?6>l_ek272T>cizp(Npc
z`K&a>Xs+i-LhWn++vD95tUPyB&)VTl_gjbYX+*l~E;COEJ7YHa`=GL0$D$AdsJ8E_
z{0;R<B0b#hDwmLVd*08$FCqqNMfn<IS(ia!E^Ag*J-PbuuFqd^x9#`6!*+Mw#ZyfK
z`$YPB%5<P;*YCY>7(_q|!i#Io`7*{@tGHEdjL4_ZD&(^8M7iyRJ$8DtWCCOOQyWfV
zvr&k9<<1lRHSs?aUwGB!e&Y=G(yBQ`_FM7a#I@UlP8s$u*Tq-H3iaS_Sq|qbVh7YF
zt|^%w2!qzRqhB4dU5>sQJXjC6BRK=rQmuSc^8(Z51vLix@Y&cP1@3?E^aFh+wqAy!
zVIU2_-OAXyNHZ0#gVjW^yQ76V^IO1B4aq&^Ec{;b&{u!^*qREXb*<a^6E_^_iryMM
zs51!gXH$Ef$*T{}$_`X0!dw)PKGM^tB1rvZOUP<EXp>xkddg{Exwe1(RVqz3_GRXh
zSrw=4yj$c{>2$HA3QJ(-$O+QmkG3d?mVUmOvp7tT6GK)3Lnm52PA&6LU-PV+pUHm1
zbWZYuaL_{QRm7%8CR}#}V+B*e;-lU8KHF*LkFhsppy{-zvUUG0N{7`$6q*JznF{%L
zu5a60tz;L>aO`DRT&tSYS6XYgIm+?5SH5EhVch-t_#O>A&Zk`P*N`PHJKv}5z{T`c
z+OyeVj<F!Kgkg6#ZAd4^TUWQPGz1en4_?-6aE?%)|0_=d-lLMU@H16r5zatKSqGF2
zvlcK4;%8qoK?~p|r&ZF=d311`DLX_A{F1`FFh6txq#YluFq>2BYZF&ag=N!H|BJ|j
z(vEHk0i!dk$%XpM*L0N$rgu>561~qQdz+koAhp0#gGb|(CV!5f5ZNe*)|5->k;CoT
zGxG`@it^a`yV9SH%1Uo=ME+dFk3ck78nDUBOOe2uWDXlBB2VFVVcgUHziKbcY9V0c
zk!<DL<q$1Np&vdxdV8=NUXRB(!Q*u;!}ml(C?j?fuy99Y(rK`_@x%Wq?R|Ol``l$`
zhWSf-)>7|eRPX}*sOrGLxysCFu!AEt&Q(!}4ZVX?N7ou7Tq(FbOgsl;>pbcCUPzev
zGcrYo(@FL7$*UN&0(gTTfa`jLjKNfiCVR-no6=sAF^`>uy^siV;68TU*}n2Q@{5qT
za4E65;Y$-3;XiS|E6Q*>F|q|{O(Lx?IGO*90s*w=d4usmm`ex~xa*=NA-r<L$*H8P
zP8*`grgeVz9obzZ2!pZU&9!Zkk>|(kz)Eg+3tHk~dz~)PMf(uKyK_^9rvZaAimn?Y
zo$`#@D|tGfCW%3>s7?f!EK>wu%sE%)=p2j_JH2*z_ujvXX{oWkLH<iKYx_<)&>Hh)
zT8??{&STxnmv&U0W~B7H{LXhuX_-JDG;e#BSbs!({1(6asW-c_)WfWW>;PExOv{0|
z?_{)0{1d_Ld_XY8oo+F>9)JARXjI2_rvlx5MHaH#zvXU19r_@EMzmXDG7!Ig^ZE06
z^%!ym*i8_X<!?C$-$wVwcAje;*f+ENzAu_~&2b&P^jrTg<UkJr1RW;D21<6gQ=0|M
zsn_qc@JO?I56+lfj_%G1_{f3(_AM^!PLWZdHbL^Ib5~r&$|ym=p{GpkFp3K7ouJOg
z_(o`8v|HXmguzU3s%@bdK;%q4_^7@qR0sjU1dHm)(Q_B=To-%v?FIP9&AGe`kMk|v
zeH|SfDrLyYp90ZJ#tqUc(9I#YU#%7JWaoZ0YE^|$!|#}LHlE@2LyC&H+NRyRD#+R9
zzUsv;bQwgDSXV@%-QsqL2Pc<N^S6J8<f7u>#$}X4dDUV4uM}w*Tnss8I5bB!@knJz
zX8o<pd@|WGAjxz5;rB6NqD(W>LnSSF6jx4{#sEBNh?$d<^6Dz((k@zLKx4q#xcx<c
zMfy6QrTTD9&6B(jl~hG<Ota4LY;@ZkU&v{hNhl#s-xX*FqF<RO+$uQWvZ+v=efrT7
zgk$keDJSnZ5ne#+re)I$9s$kxn^Cqd{91XcrQU_VlNA`U@`pRiM{nO_D3-6V*GMu<
z#-GKcbzJH0nSRV3L<kDTMhYlJ#GWSP{|7)Ixd~_H=LgcUHQ9-`0!esa0q;51zkdzJ
z8tuF7bgBB~Mts38#;*kfj{a-1kRm$1B9hLx0jPQLR36VGL5~WS{VY#~+vWli?LGP|
z;I-=ixaMu|ZpZqhDb#CpFE{6~-V02r!C0dL?FA|qCbf6A_mu-FEz78I3}%r^WBpY&
z-Dv7`MbQjeHE!>L-QJUJl2H^t0R~u}Ou0?_*Bc?<dxu&RBL$R}{L^2v>0zm`2`xk%
z3BcC{oe#Sru57Ow>mX;AqIhgl)qZPp(aHt#x&_{+tu^S{aclNJSX%1lBI7%`E$~x?
z!BhrT_mA<qplRsk|IRb=GioBfV}%^bHMwBX9h6&-#I#J?P0Bpb*>cRGyMDd-WJ|9c
zRm=Vj$=A|oPy$A3OLtx9IjQDVzr>X%S5@@F=-?|LHO{=tT6|GjZ8xv?%id}ue%8SH
zIG#C+lYT&!b})l`<P{B;=_>?rd2SEjO5Xk4BU(PXbayAuN&8~%`=a?84cvf7J<!pg
zpLP?e3yTzdR7;w=U7DEbJY`eS4{C|$f!x!3j;DHjN6VLss7_rE6xsnDtIM+j>t%{(
z2-%GK^@!Wdd}gk}rT|`lJWn;9nA{{6z7g=3ZU78xs~26S+UI{_YqXm*y05Kf^iF>&
z!kYQ$hyJLDK%nrZn_sqP?tch_z_Zc5>IIjhojd{QKD?q|zkWSE6(gtkr%nW>D%cbS
zuG>>K<>7>!!#|KerV%E_)&CbJ_O&qEqK%@0^!^_L@upe@?8+6x#!l;%Wo2baJ|CU*
ztg?DJl1=US_wvrqp@;AG>nFVhTle_(Drd^4GLpjxK}A5!zU3@5Kvvh0ebh*#ulzMC
z_VoNt9@LbBiic{goqsPZW^%ub!!@z1e9LfqHY$SQZE^Ig&xH{^ZIpl}b4jPkyltsu
zO?|U6DFmORiYnP%PRMu8ckJkvrMw#;!~s(mWrXL9It}x)Yhyh2F(e8WmcBI#p+cxb
z%>lrq4e!gNV;PHJveu6g^7{v2dXXKi&@wH}k?oehVs8MOHh>s@>|c+#ZO|_UF#F+A
z_OS>_`*Y_65FD=Q9JrH{Q2n#)2CJeNEmeVm<Py4}X7{_-(+Xnb`cc~fZE|s4u1p4Y
zt@gQ$S~&c3jq<<1A;e!kN9@m(B+xm(>6N{$9z;p0S{q9C{qi9@1-wMF-ym!-k?X@x
z&K}JgZjzCAYd}SvU+S`+t=&M9M!2TXZwxFIzpfqnzO>NbfX8-o+L2@>Bkg&g@tlZr
zr%YK-A+6)rB}Pg$25C|g9Dd(12vx1E*eGzCl09<1)x(a#bmM8&y`J~bZb6$JFkP@r
zPjjd(D!blS{Sr&?DDA%kgZTy$8gV1&^j&}ok$yYBKpT7ZeNPKGJs29D4;IHj@>0+I
z)qMZ!?~MRdLq2$;7>-1#yH!agq|Ln>U6BEdsG;_MK$}O9T%^GaLEl!MMSTR_^zpjQ
z$QTwR!0Q*NqPkw$XP_`H;3+)LX9qwSW;7Oa;`-BDetwP_WIOUG0Z8GQI&qE>i1i2F
zhkJ3?5Kk~5=jZ^4Vk0%y_95wxsDT|=wAR-<JG0dpE+|A>c2)s<ksEgnA-yV3K6VId
zZrM#Mtz>*nE|{h%W_7MVnHNNkks1VD5t5Xh{#sz>G<XZ#CLLxVEp#4z4@7g)eZ^8z
ziA(y{j$G_uQN0O1KGh}FGIZ%5(0E=s_l)OpUae6D@l=xlMSTXf^4Y%u(J~$c#tc(y
zJW(S~M=b1IU1+qF$cYt?TMMTKXk`P<nhmdxVEh7U>0@B_B$35SPL5KKWPL4nuCa^6
zI~CkFl{cWG=$!B^h_{PyG7>USyI!J{P*bAPEIm+1tBQGO#cN%Tk}~>5azbx5+oW2x
zU7*ciw=O%Gmu-D>51u3$>~VILM>m&}ELj#T-YgNmAX3K9rtSfacd4k{-Ji%UE_P6J
zY2x-|ZbZ=Ps7h6UxP;aDa_pl2<RwjCkgGY~9%5mYuq`WX)gx5)Z27P|Y;y@VLZFRr
zv%MlcaT>34Pv~-$wQIxCsHz*}JMUwc8Y)$l_jH;aQ`ln>w@rC9Xj9N;1sE&ZrQiNa
zSW98h-)BK%`cpFs-GCBEZv8i_!0i`=Pg(+OvQ2k9*Ojfgmoq-*=GtlM<E<q`%1JLd
z|Ib-xSsIQw%qPxAgMa$-R|L+&LiFJ_)`rbk?mu_~ys8kDlwQg1IA@Lbm9rw+cftqE
z0{F{5tK$Zy`AK89danLa{@b7fqvels{dNx85A4cwUxQv7A~iWT`mJ5JH7(`6*>^-C
z;^D+SDE!eG>v4Mtn5z2Lor>KhxWeI*4HXp?U8b)M<Tc$3!I^CET0>XK{Z3E;mGM)6
zVw{?KC;16zCNL%2{mu>}rZ|Q~#f~6*Stk;r@P{boyz6+$K~zPf`b+q%b<f#@>roZt
z%8e#;9!+>V?QlZtpgV09pZ@HP0ubVMAw!?;aB$>4uYeJ`-G!ibhN<}+0QR1f6dsEx
z%(@=JWl$#H)V$YVtE$;wf5&^Ib0lF5Pm1cVqER0ErNBiAxz;$9Z@2V*Q>rVGXWh4n
zTMSD^THm7Z&CjXLi=}(`DW8>_)T@P*)O*i4*RNx{_rI_p#0V+|Cp#+$tn0fM(BTon
zTI1_@2&)<a@5I4xdoW3`FO{4@{|AYfDNf>R34`A~OhfttO?*Yj0U}9j>%Fb!Z>RRG
z^7iJcQW_6`A+N2$#me?h@y8Ni{7ECrX28mwh{n5LoHV90-;-`8f)bKzQ^2=X3*Yz5
z13T(LO;sJ=?e4!~|7|}WK{Ao-?dt~CYS76VB@oTZUH@%q2U10@s1Q|)K+bMf8G*I2
z^pp3P|NGbiih1*nJgzdYzfoZGYw7QV^3j+!i04XX&3fUyFJFxYPs6K-QmUV?gm}h>
z^v&?j3#!7k#>l7fq_F{N<pt86omzk0=jAQupO0TR3FfSC*InDqR+&_zEZ*oIuMq`=
zwGXUm^L!iga18IUQDE+L-e9E!It@*srI!MhfW@8_0~KB)x4e;+VrD`}S^55a<MB&0
z`QL|}wXNW?y4{E~H-a`4{ekdWsx;>x{B6=9@BgMoxJcxAO~o@)@oIa|G~<ST<1FmG
zd-$tJ`XOzX^Dg7_>m?aJtFVrPo2qpYd^Iy~b<OF-vziBiyM2NX_4{E`J;lST^lVEN
zpr9D1AIO&MOm|j3x$}*0wNSIYAs5SG4#PueE4qX7o!w#LlHApi*ed;KxJhhJT+_5M
z-kM9=GwW?N2t>P^A(}F@m$ga!8<Tf*qh;N2Yg5VvNgUj1WETD%OSHDkpRE9bV+<t{
z8@&O3wdqBs6RE8m?czU^3(SL97_q(xy3g}nf!m!QkNBYCH81Zqr{2iNi+^=@K2l-g
zKz4C?TT|`TMJCPd=)Y~dLYWRAc{tccAF(-;9D?b`r39}szcHzQzwPg-$&)jHN1qnB
zU7`KL>2kI+TRVrk%N<GEQ>78fv~l=^pJV|z=7SxDT}g!~Z})Ppld1?xuir0l?wJ?u
zwZ$K^HtA=t4}+C$ktV1P+EDmw$E!TWyzP!)(;!S|2q29KzY-WzU1CT_dw~7w6y<@P
z^g1?Fx?7V(MxRnp{d)Z3`lU`92{~Zn1=`;C^#6-MU4+0iojQQJYD8*Wg52CTK&OYP
zs2bn;Dtc&OpJeIWnW<}g?L|<Anx1N+ep^Ci$)RmT?94+H5IjfH%t8&sD7(<^RK7i5
z5C=4^{O#5j-!&AvSdhjk^bL+~Bw_@SUb!j3IF;@v3r=zrS}7A3BLZHzn={bH4jZrf
ziq94RP@6F(UU=y<!YlV3rFR-m`QL4xevQU4oqCb%FqJj`6OTI0sr=HK`x>&EkRv7w
zig&3u!Idyhjt~A9l<;0JF@r_9xaLfpl&G9>V4ZsCz&G-LyLZWcg8*gXJ6r@Vy~lV3
zUiMG^x_QEXU^s|FiQFkAmy`K06qUa7`_5lkR_PjfI+qG0e)`1^#doKChG}B;vBymX
ztn2F~_nu3aIN?%2xX~NCwZ%PcR>Bh?m{F|<;03p{M;ox|HcYr~_uDDr=&F{4bZQl6
zL4DfTpqT6z%7T9EBym$lwx?71F!-l@N(Tef%;7`)Bo9;KgQY6KWw^3EG-hD(g^sed
ztb0HTYIIN4rzP;s{GjqJDszy9RqLK#QaGbkM!|KJByvA7o&U}nfsiN=dME7ORyS@N
zT#X;wEJ+6B<**k^>w0(rzh)Ifjt1JzWH<2A<pA?IpjUZ>s$sZ2xN^zb+btc1we5c@
zmyq<?N!?{=jc&^`a$1S*;8GoXP@Qls`BsZ084AH4ngn4rPw^e?&Gyh(CJxRaBkI|D
zfO)F>L{8@JL96o#rT6nKif44ySso^_*SY_#frP)Ic(XB@GI*$a>lNMeYq%8S`R$~v
z{)wz3V%GUGipCUl?<2;f@b2%g?Eki936U9qhJ(F%4EGZOe(097%jn2f#{JFu`4_jy
z;#CT+zcEbq8N}nh%Sl_otk>PJG}#c|c3?qkZ2B+80XZ#{vzC^QZhJ#4^ttzD_r)#F
zah*|&jjF+_)Nhxh498aqHK<%mMNLKaGMxPB#l59)o7eG4JT70x%owL0ZPyH5h-3Ta
z2u$%tUY$STFCQ~byVEULuN`*c=NacI-~8G?+Ro}SGIQrOXB<JIZI!I%QT~}EZJoh6
za<k5I^2@$#fk4}_-5o?I8~%h_ml!?BQyqp4eo?rB<--qTnE*gY3ShP4mX?-xIj3v^
z{`_3y>`Ok`Hr=aEj*bxr0|*4QdhIE@;$ZI=><YGEb<zL%jFBxP;j95mA-nur>cedW
z*r4^HA$SPc^<mUQym|HqjlG&`4ilmH4X@X-KO{xomeuSF7R%Mh`eN)ZJi~K%D0C*6
zGH>N-R|dltJD&_E>fYm=wnK9tf3_p#YE=>p7gX_`Zb`O;^c|DRpGJkPTf)upoh@EU
zF`>-ZEX5951kEQZ21k^7ChKP$#W$|jV8}+E6;RgL@%*7!g@Te+OxK{XdIgDw*rs}#
zlXRxvQkOWh5R=JAD*%cKF`mXMIhsOu^Z)ugpJ$_x*__+BNCijye4{`j>YuSmQUrf-
z94?se2L`m>Zb=Ifk3stXSzH0bDqUcS>#eky_!+Qh#}y0A_od<dH*Km*OSVJER|k;}
zIgq^Jw^o<^>`e6OTQ`2vl3vymx4OOc%}X(ln@SR<@zoLMb|pN`CY4CM?ON263laYG
zqTcaSF2%@OXF-(_-YpU*W)ZmoG>8f^UzUprZwP*VNQwhcirayP!Qrv;Jbkmh*Og0-
zsEPs$b=I?0KKHlh;JSN0?{Nen-#nWU9R;eD_GLPi`Fr>KJTdXVzq6kpJdFEPYdzai
zJ1nTP92o{m46q^9Wm);`(w^dMz5d8FV>Hfggh^W~PQNX~QZ-!Cy!Ss2YLo`tz*Upn
zcB=PJph<!s%l!~2kGRWn-Zoy8zrnX2uLo(=SKv_Hru{((pVKV9+=t<7sb;H_IN=6m
z+cx)^IFFPf?4(&_%N@Cu|LyKHjFlrRPEBWFJjVQA$!d$sRk+}w9ePt|vq#k4U&;&`
z$K$uT<KE^Bw~!`;H^QzM#Dkg=6V7$X{u8s2Eh9nz`TmUxqS^U@2%|v1VV1nVar3+c
zYn;lTWKC8Hb2%ccZJkgB1Yhix{Nw-Jq%n2iY_#PDhK7ce#vYYP?)`{_D9<<h-rsR2
ztM50liGG7oByJcL6QZLXQbPvyHqS--U@)O%T?a5CBZu~S*3{YfrtDO12wH%WYHMpV
zwi09YDQ)~Iz<lq&M^!{5&`2G<aVBl=AU@>Gf-SuKk0&5Ri(t#Mayt}&fV*&#w%4Z;
zF`$8rQz197l{_RPP5Fx(kLc%=D8Suop(C=L5?-LUGg4=JpvFqJbO@&Ytez(2^!7Gx
zvUL>hv_h0$G?)$SuMZznc$?zu-BTh7Dqe5$%G%*kZscg}X6Ve4b^2X7(l1`StZdJl
zy^3$Tkr_D{ULgA>4eEAhq(XyfjP#J=1d&p`yCj{Y1TC4_O!V5S4Z>*Bob;8OG8sUg
zI7pgnb^P*O@PB^=U_;Kc(XSNXYucBj6xb*Mz*UHN9F6n$nO}l<R!)^{cy;4$qF?;k
zWDOMY<$h-vWuqLb3O3rO8O+8{@B+Y>C5vhozbOhb<JWX+2RdK#0pF#A6Qs2!Q1&)3
z37{d2d&lAg!yX(X=ID7;79fyQ!2?`W!tva40WIh%!4jW0LxEh1YcmSL-sd)?7w%?o
zHcqWMHf5Y(pETcp02fk&GK?$|qB!%jffziTo|s*gbG8I@n|Ck9yJROaJJLSp`>Lua
zjxoOv*t52OyZCTpOD6eMr)8TQbIajZ^Z{dquNXsu&NY=KwQ|V*b-`E{TPg0QJuwN-
z#_?O-l$LAnagqUOS;}JvkM#1BMf4=&=IRcgQ1Q;0HY&~5Kr(mhy5cI1+OIz<<R$ns
z%XlkWewXCUg+tl)y!anpl!LdeNma{ZaS?q6a5xnuo1KX2Hw=DBu`GXs2U7zAl;yg`
zAFFv0pLYZVZ!hm8$s{m(j|F65{c~ypnnSZWDXNye^5r%M6F>NW=cPeK=sJsI+b0C&
zQ_VETq;*1|ltwd_J&L8p;%{@3#r6~_H(;L_03XAFw1(9<fEA@5;~Uk1=~B}J_6_K_
zzI?G%0xlKp)>Bn}yW<!{c<1@POIpi@LSTH&z>m2%g$Y3C$vIR3dcmC34vui6nS&Nb
zf2$wC2YQDQHC1zHw*zl_TIrQM*hb1?KSV0_$$K{rWIO}`KHs%MlC)+s!U0)_cN+c=
zet>eBRqkqQZNNHsWo!jW;ZD>N2P_x1nxe0x0?eR1r+wDi=%L`vFg?E4%Q(9<`d3;%
zjEDDqLN}pjiMf&01#l72dvaFm(cZNlWy-{P4v8HL$Ho7c<{j7|Ga`<8o#}hD*x0dt
z?87GZ@4nt=gvVdMwKuWz{XB{m`i{P^mgD?qK@IHL7+}C^yO+d%ZyYgV4_&tq_9Snk
z!al($46x%3_)Al@sC}srBE-c{T-%lX^mj1_rev^?3IfO{ceh}ziRwONoJNYK;Un<W
zYf3K$ZkB1IV6A%;5!|lXMP+>TweRKc1e_UZbmmqV4zz><P&eF$fTiHP8v)bp-qBR)
z&qfcabk$0=YSjYJuH9cAFlg7|(3ut#zT`YdYRO;nTm&m{iT?9hCBrQ4I8YYQV&S_F
z^3;sKB%9)pU1x-w<B*Uo)~)tA>B_-yRDZu1w)R19)iUIW?#cVWYK*$D+HWbEm@uR7
zWjQ#y_qzHjik0^akIhPCMW1{TNlcsrXfDiO9`RE#w~omu!*7vK<~tAb%WZzBBf)`9
zS_*Q_74!<K2P+Y8x>Vl+<I@zn2=5-Cj!1EecwxfQIi!P2`t`r8h#A_^#(=>APCbKg
zR~<)bP?{w_f!8Z)81hoOlzyyy@EnBvtfHhHgNb_e{bzUwfd2O<7cC>ecK<DweXKq|
zdRqb);!q_YMo60JC4~!nTMqz4qF>0<8EE`gc`q;a6b<n|jQ{Rgh3fYM9$aK(Cf%kJ
z1mC>pJJxl$zTBcHk8Ai_Ue6Fbn1r$E3Jv@)tBHJ>dtEKJA5QY{Lw{n8o`0@BY5lE!
zSYxQAj_mJ3)Za^M=@wg@4W&tB)NR@+O|V_qG`UMMg|qqS05{4u@;LCnpaZ^AGP!|f
z_t>|akkxRLaC2$F8o3O=wh{JXfGr54+peC7t&~Rxp<iu;0+`qt<$K-24;gjsRj&wP
z+0g_Pf0{(=TuV=+bLSfzMsJ9KR{sPSMK|sH@<#C?&>kk3Yzta>A=aG4bpRaOl=^l4
zxRXTQnmxl|o)(JDRW=j9S3K#JwJ#=i3tG+4x8F3-=#Kr@VFIMo)C6#3<CVWUb$`mE
z!}WnO_Ud@$UUIlN=SoC4Gc$8}(<ye(#IX9my(%CTpct*SQeUS%7JC560rUreD45nL
zr2gJ^JP0b*266HpyjsknKkyNa|K(&`tkJr6wJ0A_i@%Y*#AUh3(f&yu(S>SGqA+%5
z&pPC^F3Kt&BF)Fl4=h+3L8!S&jR7d9vI9RdHn<1gWsKPU04l$8lnu{;&XBT%_-^*S
z@R;ue&lIu3mcSdMD;a2VvBT#861q2a5zLRrorZjAV13(quR3RtaZQG+^lzF6Vp5FL
z_fe;Qzxg5eMt)@$<D-qBu2S;3zu79-a9Ql*fWFe#ktmY@TW3Qze;DxXrX_U!nZwM#
zlggYhce)e-mk>Km_AQwFIeI$xEX!1AFnY`#0o6hI$h@vwnS<t-r5R*aUxBSCahf}+
zbkIaXu=e<%>=vxn5Wro2?w$XpeO|}qCN$sXn6WJUbH_t?eW0^<>m9EzD@LCyCu=}L
z?w{v)cYJ|}mvl*&|GH43NjTFG&ikC9&1P9*fG|A-{J+<6L!qdv>z#m31`Z)`bPD$K
z5%sLCs&Z_S`Subv7=)b%A;7bOXLHvWH`F$d;<+0S)`$NECK*toTYXzOID~TazY~s9
zPXWex{FIsQcO}XlN*Rz964W$%SU*>TWbV$b-R*lmdF1q<Y07<#^yC5NxQOtpGZVA|
z{I%#9a%k+&i18I}SD)gt>*S-_?)}a$baHaymB<;>Z=#_zVis@TeA@l5Ko9~}BX=Su
zC|Hd*&Fb}3#a~es8<=DtKV>9+m&~~i<M$xa9se@bP82-;n*9MqMojP$Jx<5cL*fy{
z52<iw8SP8=q}NPl)p_h^$F~6gSvatBcKS=jV|8nVDWcGvCE#4Jny8j{jeU@6rL1ti
z^&M<T;w+%p8HjX;z7I^vdtV}o@gqwW!)aHl+>YUei)p!0?B_AQF_BTy|FVq(^3Ejv
z^gN$^75Dk4rJl)%;BCAa#p)mP*RH<R*8IIo6M!)dGJy3z2BW7-Azb=*{&@K>PwBy}
z8#oZZw@>kW_0;q|57uggfvNn|--=4e5nhGfqgvi$H-EQ8kjf0+;~!|GL#G%Gn9gK|
zu+)}*`Eu1!`|g>>4}=r^25s=<1`2=j$=4UK*LslYcZRR>#ceoCOYKbMaOpFNEabuN
zRUdUQnY~ziV575!|N2uo_9@tr7}hg10aHS%rq^<~tVFx<8lP6%K~PFh^S+qZI87^$
z{|&h=WS6g2^UIm~nMT-qu2M#nP~~~*yf>gsU#1ddxvI?UW8~%XX|FD|3o5c~Q>Rl1
z9L0flvmIGu>IE*#Q#7VRH|p7<*DaYV6~d%tRc`}}l_@=kyJzk%X3rCwsPS4tqX(2@
zZAvsv(ytDx;<~(qGp>gO7|><=H2O$#fl=<-neq}R@Hh?Sc{a=_-v`9<Q{4WSLJmrW
zsN)P7H#vJ?7x*}z)4rYly3{H{n-2fNyx=99vTl9WVcO_32p0l9_Eny%7u12n7*OH;
zJ^2`@z*epK(gW<fl#n2)dCV(io_DqpgrJxIl)yl@1r)MoP(+XPr6Y3EzaKTAf?MZY
zGAeLO3*lL3n6N20zcdp<NL_`i**_%kW~9gcu#!y+cS{t-0XX-N9~6b$yH0pG`RZaC
zE;8;PfnX8gR}5dn?^#-BGUBSL2#+1<mq-3#99TJ<c;@5`=-ccQ86RD(x_vN%=Aus2
znvZ3_+01$Kx5NO(c2M{bl>U)v3>-lP?MHy#07B2Jb*|axFQCp|`wF^Gn`xvYCU4jo
zg{*5zUu-)~<Myy%&p-lhAW@Jz;HfGbw@EEljN?(7@~oO_2HsvG(a88KMZ#HYz1x%F
zlc&RlQrMrME^C$NOmCviZGQC3EFN}<l(8<%Wi;Jpw7Eak#5Xml-v$_?*sRW@L2C_V
zf@5cvO3#Dam|tPRo)RP<`4_l-a-Q2fkh^f<P;UFv)Dnv9^-qPhq{vyOYX&3*rB?<?
zoT$eGdNM->VgD;rmY+ZXe(L&`(4o~lCMxrdf)LdZ+U-)i+y8WsQRZ;C)NTN3+8i6w
zSR&`Vbn?I-g%w}9ng)jA;^OHclfW<OyNXjT<HYxL-v|!(!{tKVw?I6)!C#~`+eWBw
zMIJ#qP+As%?Ne%6&(G9$mwrQ39|X6+x<6>V_YjTvfPfyxaEr~$;wXb)6qL5lYfr@s
z+`R&qq=dSqC5C`$-K{*+vBKYocm$V$jDwzjSrAq+xu9Vh3Y-#I9#^(24M3N943XmM
z4n}86yu`y@?;m^`6j2#gOWxhdN(2PLvJWK6y^H3(hKAzdu?i_(Y|WPLN=4(h+oP|a
z4vxzylNAzf>0b0bp%^F-Xc@FF)Jux79w^ph->##V>C@OGpm-H$^MuqR6kniWaNYrm
zxK_xB_oX4ra?tTVSOlo#dz~9+%#D|bJRjjv%061J*M-4mtQL2q?YEo?n34g099X;7
z*ms(=Jx2d-2;gEx5+%n%A9fwtnIQ;1TN3Dya$-!O@&D^P4-C3$%%ism80WP6<c>@}
zQ2gyNAXuY!xdg90i|cGs$paCAUO^3>(*2p-C%=%deB~qZ@d7dh8*Mx<(|$Z`nzw~e
zd7f-U7nv+sRGSV#m-iHdA4DkzV9@aX7Bt?b_?&9rmOu~O+ED~p`030RDHnJv5nBKt
zx&y&+iAv;v8ybrB#Jb`8kIDzY%;8Vb;b#XQh(?>ytUot6#Zz#oyhMRpA*xb%myNZ0
z+(vZm(7pyI!*8;QPRw?k11qss?5oiUoW=W}n34gnv?Cl8uWD8@`dbVES8Z%L#LC55
zM2qntspdl<7@al)r)qH3wg$sUwtS>%z`E#~@>9_@<GQ*aF(60F+vDxsl9L$}+4mZm
z7yPYqd>VM!c0A9WHE7T3<Pm8|Ys)o0?*sMBw_7LO<3qmx&)9;D60*08Xz6_vOtazO
zDLc;k&Kd+XHBb(kH^*wS;iYiOFQbIubc=q+&m9lMQ&z|{{Xg|aqaQkGujnzd&(EVb
zAD`<1f^r+wkMV4m5A$Q#^Vq~uJp7<6k~M0x83w8RTPi?$kT#ZgDxnb;S#JYpq4|wW
zx`<Ysl&;VQWuc5bu(RECmB|3d6<_PhFm*5raKD(>ba>SAiEPWtoYPS%r0Yy?q?<pq
zJ<9}e>z+~Z+mBDV2HAzNBy~VMwt2d21iD$Ej|JV66~Wj}aHEtU%B;q_2voDd#CIwF
zWt;!cT_g|G&SfcXW9TDh2j~??^IkriB0<<G(=RR427@g!1UysYkO>&<*E2Wui~OeF
z$zw4M0NC68YO`_<y9MwK^sq-=zo{p!j53Q|{!S9RWX+HU-$>D!Z&1|P%?(<GnUu<b
zW5VoYDYUHgik4>_%YC2c)4NT0HPQ3;3fdIvne?=Q(;L@!v4>)6P4o)FXzohvQI9`%
z?y&$|)rSGkVww-8GB4%BLr1FXczK;}4Vwt*jIP7kpagvkk6zwUFKjsCkCkTu4yJ<r
zh;vX!I>L#`-RjEaZ{L~YIN5*KDcLeBWK3Y77h`jtALy^qd?fve{@qAS$n-!XvS`mW
zug<JI*dfCjq4D4ALdx`$m&b?MYHZ^eE3GsZ*AiFL_&v={eGj=jUN4_sx3U^zLUSn+
z08dJh#O%Q;wD%}2Y0=SR^4r54O$F=k1KyiTEIk|#z#rpwi|F1yY!6Gag(eg95!=OZ
zxLFy?8=xf~u@C#Hgmu4Q1{4eJtJlWq$;f}>1*r620|+u_pxniEn>4LtAB>hC5&t>v
ztnsC!MFHJ3%z>d;Tvn|?)0ApJV?U1$z2|{U%76)+7f<52l$>3EbP>d%8|vBBZm6#k
zP@qkwi^RKVmVAAq>xl5Y#B0P$iJP(U<EZBkcmdrrh2!B5%u?HeQxV169Eq^>7nbf;
zlhkbFSTe*Xs4Fi{=XACLwqvm6avpVd@|u>B`$Vpqo>5K#y9p?imMhRd4yAoGOANib
z%Rtsn3f@U>qj+-~T4@><LMM@vO4Wx*t_#Wv9cO0&#@2uD)?A59r}g39E!uOl0)P#>
z5Z=Mb?{Om8_w}+FKO^Dqvw#Sps;H_C4fgd}<QXwIJw_8g`jdH<IpDPCsC)ry2FvEs
zPb=r~^qN%@Hp0&$eGyI?uZu&Ze-*yaF!O%CbZD3V9=Ov02>QrUnHs0*hbDN-M+@-t
zwiNs=!T9jgPEpO1?%!PlizPP}0!|ga7Te;DI?#9W0P^>AlG67*U+x+onX^C$$Li}A
z0y(nr<^IJH(3IJm3D2hB4}IHZ7$`Y<rv;JjuFJuQi#xlM$c&LUt^%j?8EYB}Uj_py
z?y4FY;~n)5qQdHpfjIzgM){dApqcpBG0p|9tLwPjzO-xF`x%OlEbUUi@Ss@)lyFQI
zRBH&$X`eWiC=Ytpa|W|^5tHLJuXC+spI9~tO*Ww%Zxw(!T65sf6!A)#fhCy+^mOls
zxk|pD4DoY9TAQ1T!xSU%oj2sP_v?a_H$&4oV%G&NEnlT95Oa+^H0Ts!ncxD}A<dx3
zH}O)Ir3blPdjay>+1i7~`}*c;HaZ&t_Q7KXAm}d!Mj}3^bcOL(4F7Ip$O6*D<fMcB
znXUDY(<=Egx>P=Qmd|_R?2li-*6BPHfKd-^%SM)GZv-*vWTlY$$A48wE@0^p%&{%-
zc8;PQz$wLTc#I5W0b;o#a|LayYshhvK+5guL26wRFYo;ttT1U16AG{=d55)}Qt#ak
zmeJ^XIPOtzABLs`dqOtV0;Ri?qy_fofzqiRhsnNH=v>Qw>7maVwBj3V@8@DsDAUVF
zdZJ;*JOoUc-egWNan}1)&&=2VyVCUGVI$PHjXQv`hF%f#nL+z6++05Exm5OSwsOnz
zDQ^C9LEEb<vft^$I;g1qdQ%s}3&0C+RPz-)-)gq2cJAq#0pbcE%{3_|nb?w~>kCkx
zacriryjE3*n(le$(YA0QvN_3A`_XcwB$zFxu2H`bAc3H<)4^yB<mr?&X;YW7w@zx6
z9DoTjufCg6V}c@Sf!m}5qK@Sr*Y0EGM19-gU4CfIcgvJf=8XrH3?Mjv+@#y=GV6P`
z@`}bZF;|n#_qPhG$InU}R@oS)g&yk6$3iFo%1PN%l=Ppj=AlES0s*#xj_3z3He#J`
zVtQB>NKRx}e*Md$Zn{EqrtK<N{?#q%h=+d=1wSyn^U<9r^p48{U`)r?i6w7~-YqE&
zj`AKe0ksM%kLvkt+DNfLefy8~gw>6YXD`Y00qJX|$tW8`XcN}}MX6wUUSd|LDS8&{
z+O)tKJ=;>KiMWs=5HZ-uN3MY_ic3yOx&D~%Qf+1B%_zQmMO&V$xg5b3Idbsl`~#n3
z#HOaD9+|GYW`J?LjBqP<<*lY|^jICgMfY|?{WqUcDFO|w;bfr2qF}L2{#}GLy|LJ{
zY2F8BDl+yb0_>)8iS@l%t^N7~z|@!OIu3`e#dY}?T0F5SBKVtto!qv0A2ez0Hb8;B
z6kDr6l+0*4xp%R>Lo|D_!S5jMGSZg8nyc)FvRfzi*{gaqN4KE;l$0m3P_5-HDv8@Z
zz`SJA=H)XCSY!!d!?Sd9uYGI7u+bep7u;Bv+X&A0eCB4c7QS|=;8R=B=SB+oh59~`
zl+qVd{BPp~kcd+JfE}4o8)mFX{1CYR#b`6U3jE3`5Y{^dk9pOb=~%KKs2IQpGmz-V
zU3-|W&i6Aafy5XLy>pwUYK#{5gFk8X*621$E*h1L7Z?v{Qb(lrRuX#zVM8|8Jaz!8
z`NcXHb6<wg_*@#Cz=xjLzS6HwIRh}N<5qlW>+F!|KjkMx@yxvym<OD5zLC<g+XQ7M
zY$qm({Iu-q>U(~n=v(Zoa7K3W*YO{yy7}R7-(P#rpq#SDtFE_h1Z#k@%xm^;qp^>u
z4bt-?J3AnN9u};kqM?|c)f-i&w1$Je%+<g)gaP{oIjT*n#h!h>p)b_@Ls3i@J%r00
z(&?5z$9xDJM$E6s+%Xwo@m=X$MTZ1C?Q?#nwf;V|08)^@FPhb8?Oza{!d}=ZUt|F^
zFr`Le>nUi!7W5?Y7fdcTo?(q^UB1=~9;e&Nl*zAnd<0(v$HEf8vIvA@h$mS;{o)HS
z_}p9@^;S4E4BV5l7+RA)Zmy5ybZSfgm7e*Dq5=ec?Cv>M^t&2_D)jSjND2udIA@-_
z^Kdom3yp(KpjX0sPHFbNcCuxuy#HncfUv8=;OjI`bXi*6tn^1);k#hG(e-|Lukw@s
ziaa$qhI92Ty+mL~%M?vpt|yg^86S-3@k!g5k`ewVRw9rnO9jSXxr~hQ=gzrUw!cgl
zNQA+PGaozVfWl>=4wsp)sj8~V2xI&hXpAW|{JimzpX4>iA<<9B1^k-ZIKFlOXiHK4
zs2eX52wh4B!T^qge+tx{jevM^Lclyj0}i*SjlYur|LrjG%Yfeln8np518b$KAd9w)
zBNQdZu|j^2t_!}1X6a*D@YyyltS`&{5aQZYT$eSe&t4@U=cMrz2nIOJim*${_nMsN
z-}m=$)Q22VN<At+twdBybLZ`y#qd+`nSD#8o#VL9vsDp?rU|KuJ2{Qh*rg2GS1-tY
z+qS@Q%lqldYIWH@{zCX?ply0>LSx}RsT@G|dp2DZ<XI&*F{p7Alf-s!Se@tE8pQh2
z8P;3egCv~!I#XwhXZ%Gp?-ZsG@a1oRGP7!KOV}bch#Gux<xAg*(Le%rPd%g0EJn&G
zeY~$HXJ79;%>@Z^Vd*X>n2u9}om@wFSRqj7L6QiFv}&0_JeB9)^JEg@+4C7}Fp;wT
z>cHirXL}hR6PxE8r{Lr<iiEzR*@h039&U&h<MOOnlGgXEA2-mREYOdvbI0hRz}KKR
zX>4bjDFa#-cnLpm35P+eQkjggrjr=1<To@x7)GhVd7EA743sYYURx7b$MKM{dh;|w
zC>f!Kq+Qe(<D51u!U8=2ka~4^f|yLq%$6De;KF1PHSH7j>&zw2@^|_~UP;uWlqWeh
z^M+Tt2F}<`nKU2^Kzgz{31#$VD;0j@rVRi5WYh*mVh-OF-Htt;wAC?&{-6Zp4CQ=f
zr~RsZn`wGj2L*mpCfYTO17~Kg>HYnU6%uvv#yTzZfwLUhZ2O!&b)iOyaZ)k#ncwIH
z>F5iW8=5J2$Gwl>r72I^1|pJw{t6cwk;1Jgi3C_Gky2YPoENDfOY$4j`BM?|WxKM(
z7}lJ2DpYK+a^Drx9wlGP^+LT9wSRGT#bk*OEsrG@Hh~)G=c4*-%rdoyV7bMSWM+C}
zbdG%>4~3^>a+~4oeoEX0xbX~OkNaBhrO%ASF?loCl-c6Xu)K7dxWh}*MwDm&5@zM&
zI`4$z={zv_;2A0ek{??~y%MN!!S@En<J6{!9~8RRptWmRMN2t}hA1WY<Q#Cf=2|IO
z!`z&8MM*$Y)<PWxD7E*x8*X1z$2Sh53Jz;HzU}A)@o;(S2PiO$;0=kC(uuzt92H~r
zSLAz{NuF8Fhh_fg!vu@9>7yUA??c>PE3rnjUD!THd>+d|ow-}LUbB=}Dxj>2CjUJJ
zsf)Vfh(^57CU&#KVk+-2ni&`c<thpdoG>&AmhP8OeMzkQJ@4{%+tA|%wfm_u*Q*!(
zwV*3cH#J|3wA6OA+ccs~A$@zB3YfHU^SQ=z^dP2b$5+4TS)JRXi~={)UvHA?Z=*-F
zO5R(~5J1{eSebNKn2>TDKw9l#?*`7AnCt-48tLkeuhnKF>FPQ<^My`<r>(c&*m_3}
zc#+I~N_G}oubIGZ!36*xDdkb`VAopQL{ZICx@o}QhMCr?d&tg<S?jeY%K*x88sqHu
zlMEHex39SE?+k}OhE+~cxsdTFMEKc|mXg<#QWiLQ*o1Tte>5wh15!#!VP=ciJK=!O
zSanTS+GeRJF_o?3I2urLOnL}`u_gxlNdNq_W(3Zf`pKCUvxr%pr6<K{Jr?$nwCn^)
z`c*W3r2u5LS<mzd@zwU#;?G((q#Lu#l(l_aaIWF633T@zxP-);y?V>h8u~z`6l<a!
z)oGhI`#zWcNo^PS%6LT)Ij>_M+7dR^OshHLLHAZ)vt+Yc8%y<?ND+gd^VdVys2L$S
z2(jc*Ac*2dO!imS44JQzPk|E20!Q)dmra6nI`upU67!8u@-;K%z}!~VqtgJEftGzi
zO>dnb@+_C<_j)Uu$q0*6!EOb4+)n}}I-EcvflrYYQaEh#;>|qW8Qn4vQUNPR8vqnW
z^@>;f@ndtMXnX|li_3`NctpIfCPc-Tk@wcQeBTwcC<K@fK<n;mr^I~CMU|5Qjtr1Q
z=3X0l0sORMW<cFI?4w`{%Un$eTh5@~V(2iDvZm%G2US_Vr|X-x1cVwno6YN^*Zqby
z>EJU*Mwq3u+%q@f?a8^?dsBy4kF3gagc>GO<n54}k)JL=TQ*|`OB5E7{*N#v{rn=z
zoluJSWBkfC$WK8`TN<IEKZ(_jz1pBeM0ULS3L!$Gcv1a;$cZ^%Hs+g5fzR{Ns-61&
zeOJNtjez+Yg$oSYIIn6vBNve{j3Hir&)o!7I@M=Id4xZaEuUV^`)DTWm%X*02b{?O
z0pcQf_MP%hq%|l$07Vb?cft~8MG1denWgz@ZMJs3@JM|)@tHFVJaEYX#12Y8gl^M$
zJRl%%P>{YsYxB7a;2rdz7;BO$P$Q6i2Tr^}(?0K;M@db*-Kr_ilO*!fe(#ZC6X_Ok
zv<?P%ld>>WpGnz|+->X?qd5&}JCVKtGz;62{@-Cfxb{gx)q_)OsjtM7Y_Ctin(yy0
z%(??F*Mc#8jex{-DX7VE66e=OA*imQxRUy`0}bfo88c%&J-2`9m1QRMT$W%n25$MI
zu6MkIy&OL)cxR)HTH4$biD`J8Wg%z#nPZ;9!=I0^fn73kK(o3d%`ie@2e``Ge(BhE
z&W^e-H=0t(OM@zV`A|jS+$e9)bJh&=zk)foJVFQw4HW^ZGH=aZ#5BT=6RE~v&<?L9
zQ6`E8Us-!29pQBH!&R08-=<caP&4nNcYU*DrGf!uUPvNB%}7Dx*(FziiS2l+_aIsl
zCLBE9>&#nryRDyozzH@$iTAV|&g0bB)#lg5YKdN?{=naK=j!{#yHr7-#}@go7XYF*
zWapL|7;Bwd`HqMC3=XYx>t-&|_I4-dR15k7k_vg@shTu9BC8Ug4EgQYA?R~H(YX(*
zJ|mw2&(y#Ny`4+e>Eu?*H~YRv5m^chy;IJBpACONn{fx!FeZBST8DsrtiTmWLNw1u
z&FX~^&}5YP=sRCVsla(BREx)-xoaUzajCNu{RrOY>qNnL5wFkj`jCIzm=@-Awc``L
zv9^7Rdri>Uy{Rlb`~s;#q@!waGNKmCS~=eVakUV9wMRJntn`PtVm_|`?$-$N_W?s_
z1#wC$jNzmoKj~VLB(ls{f6<KXq5i??>?)4xq_^)m^z}M5v5k!H%~8R?odxC4eU4_m
zdlF*yYf)GU(h8E;_00mH#uQ{t{5`ZE_0h9y0ae?BEx5|wDKCTFwKA*T+y@~7{-zV-
znwWfm3WYxNBg6hwTah842>B+8qO#%F*COgF2~)TLHbl-W8{ItkC$pj_Vx-}CqsRyC
z)5r()Y;A~Iz~uH-W-MMBXt8xnGPFZoUEkY<D(#|EAdu@))vGNfWW=}3bf+bJyo@=P
zmr4{U8c1tkZWZAc3IOE`s0_{opopyRz-I_uAwAAO?EEql+Wujxl~AU5{5*W;gDLC_
zw1S|n^VyttdDq9#z?+1+mubFE0Km_N%7uVlo911+ClBeo{XvA@3AmfRLa0f1L3#1K
z*nBAH;q!o2dmp5*)n{U#t0&~!d#}bUQcy_23GYP%ThtZC?X<>Mv^z|C%_8heiF+=f
zMy${%e(c8N>*z*V{2Sn0><IYY-JGTeCkkQNXZgjO2~Hnbm!OKEN=rK6PNJbm)4NAd
z@7@MhqAk%GeU(07i#NGbO4N7I{Lq}o3$OF)Am}{8uFkMC-+{KIN6b!_Rs9U-6MI%+
zCZDf@@?je%e2tA|c(VPkB3iv0R57oJJGnFlyFs38QG<FA)JLV&U|Zji&Y2X!9Bd-J
zjjJpkvG1KfyzFK(UE%hc7__TJWKhN(JsXYgX*O6Oc$cKvaFyeXw*SQ;l6(1?^60Hv
zcifa%T(RsHs;SI^2kU8Q@1R7eK5XXW9eeO#1Jr>ILagEMPxZc#9H%T;MK3>M`}|<G
z#x&F-e9gbBf<B-D#79)pXNT{jkc`2|MmTKXtuw(p$BdlP>YQdW#T-gL<N0(=Ox)!i
zBJu6DEMT3O=;st*iu>bQYe}0+h?oD^CrSR(e!ck^dD%t`iLdx6;JLLK&;yv<DO(V)
zR8Q!nMbv@UH$BD6@mWm|R^?u;Pe2e!8kT@n0%_iC41}`?Lq?dRW-hf;&4|UAL(m7u
zglFUcFJU?rcttIR!^6^&LC!yA;21LU&6ma==~E_T=XwBJUmYjEs2;QF1mU3dy#e~H
zS8xnLg5zzKzFUVGFe!rPYEO9R1vS5tFt90h_%5@T#B)dX_Rc*ghIskfUkVcr1I3)U
zS?#>Hw(T~j?VA3`0L6dD5n%4!q`h@US#Xqz_Pfi^m|i;WrXh$h#FT9I^FeHu+^(c@
z8IkgQ0}t3p01(ibHmvbNldtJa(F&T+@#Ud9agd4ZsBMxwd9{h3{0{3N!!O=qnz}gX
zHX&)7l}BWtic^O)FZ3}z&F*cSd~@?e_sc8h8pIG3TA$tCuJ6c@D|l(?Yn@_jFH#lU
ze0%Tx<76xN?0`$b!5VtTFT2UyG0Q?V`rQQVl?pyx9P-hftf$~Uu?}o&SulW`3L!jg
zS3)ZZN-;6z^BCyBr^BADC%u;TtgVPaZr!iU+1YR&2-^M>vBbGf#0+Ivfv1dswYmFD
zUbJs6dy>tAruYZNyzfV9`fW+AVucjyO^=_kx_mWW8#lRUd6%*(`S{k5%pD%{LM_v~
zSY)sfT4%9z6lJHsDz$}RNuDx@J<h~T$Ke%y^%WlrqJaRL!T^YVh>K%BFwycw-XN1%
z&rSEGF0R?9J5Jaso82JWGjqY@RNq?s9H<T?H!+~PIqtiHxP^qiMG>XelDN^?{v?P%
zt{Edr)(z4s^Dg`i9it)Pi0ZV^6o<=)A9D9ruqxZPz}?zghIf(T<VD)3=8>SP{0$8G
z+C732+(U%=;Zq;8oPq&YCJ}b(YvccG?XBaYTG#hs9YIQ31O*ADyF+RO0cjKvk(Tc6
zauh+4mTm;;?gr@wLAtv;1{mU9v-dX6@BN;$J!g-9%}3VE^E`K4_jSiw>nZj21*F)`
zMSL2=WA5VdBw3PTml5!$oP?Ea#@_R<ctFcP<vDrgVvgdOM<FRqnaQBZUM!z&t)%sh
z8$hd)?q(m_8O)?S%l`87mO2{u+oKzA0hBy6&nWFA>vN3rT<22(E$Ig1T|H;s!EoPd
zNzr4yULk?3X5n)cLXN%y;?~H@%F-IzOVt8i$RyGOybin-=(2ebnPx{vgbz_HM#p0;
zHT#A~uBMimjqcs_D3iWHT|=Iq48QY4Klt%N`(3Sh=YFJnFSbcC4g+jsQOc;%LqnGc
zOlkx^0S~DYxDE-@pA-<NJHuv^>7YbCmYdnyt-)5|^0k)A_Sp{EmlR3zvl^aF3uD@o
ze2{{hT;Eo<XS4ah7D8S3_^m|X`-0maDPDm=$V$~#VdmL&&u>Qs62zbG#v(b~jm%ZI
zR@eb<>&8}MIvS}@uM+tB5xaIQ)+XP!3%yJUwd=)&<-QbhoffxVT-aCj=5!BJtVw97
zH}!l?9MUt(7ka54yOAfog*<dt<sUIGfx$vgjE%|aBEBM(0zPfap05s#vCMI{fl;+9
zsytpIH&8d8fl)Ao0q*9}Y(X=F31E-kE36jR7s3~cW-NTRZqC3P$_-Y5`>aC-1pk<{
zdk;Lj!>@H!y9J6r&QP<-m}tH$TY33--DlVVc#;SZL0%#k=cpx`PkLsk<YvY^AKR>P
z2i{QyQ&CptqdB&cPJD$PkNH%mk!O%fB|+BDG_E!#F4um$smV@)1(j0+-d(5|JMz$6
z&$xgOlL;{9tFQMbmoVoXSYhSf&{*&PcmU;k0yR^){#XG>xo<$;9hLFY_{)8r*Nb~}
z+B4VuVVF{v{1iC(Ho6h9j;A@<nG&=!RE%faKx6^6Tq^O|`V^0y=N@n~@cA(Ov2N-F
zcfTOX0kQ1rZF=={@9@Jn*CO1|@rI^PCxG{h>JkFC|8gTYvLS(T3H#V?Igj<iRFKEU
z55HWe1rxNJCf{>jpO;mwWAe;CM0ra;|Mr9DDdAX&spD$4YLUsDr4$Ad&O2o=3><A5
zb(Fj1{?feBZWnEZ$ZL9?$V+X`wE3GW9ud6Xs+E@;_i}tGT~M|Y<`1ytz@y#?*g_{T
zzTE$Ai1T5+BPdx47W>?AT>iH1zAHp+DObPr=AsHvkLGO(_JD-+3;CqCjoo(Obn(uO
zwJW^WA?2y`=+!GIa&g{t1^EhxD)qtH=83*^O+qj~yOr3(#y=DKT(#7@plpT7-3nGi
zGPeGMEvHoJPrH^xSv*YKfz__zYtA+W&Ci$jaPQVxdL-UczD*HO6fkH8v&)JF`Czm}
zUZ%fGHJ2!>18#2z;sXW*xB<aJL)gx!xfwjcE_zvXCJQt=L`Qq9J8w_~Tt~`25kp?|
z;bgsP33xy~lHE*)5PkTr{O9gw9z53V62)OUCHn#_r4tF@9_|m9hTC#8DVaTwAPH)d
zvPJh}aKOlfRv44z*Zncj{l}{x`A6%qKTz$a-1qw^`BI7Xx&jT`X<<)#uir<#kX_@U
zC%VsX`omr`wrD)GdI$#VZKhUj@i!ZN!o{u3$}~NRs9Vp;blrBW-S+eyt6XCMA)($>
z)&|~(AQ;Y~6%X5kZi(G3N5B3d5Hqk9n?0T+CQLvBd67OCEQ!{{lAum-$!zZ+Nu@m1
zzEB%_7Nw%;yhyXCA--xzW?4npG`>|FX)Nj1l625K6{X|05r?N0<31m!rY@Rjhcp+V
z+1d=%zu>xXg`y<%M}@yO*lTf>h>j&xI`Mqn3Ki^qe_2~g%;L<*^ty}!^`^qiqSN$=
zg5RZr#oZVJp%hh}t0ix#74$)t)ifR^jIiu-lDiQy>anOeBfela5=~sKs*Ac~k52pD
z^KgmM!Vg)%)7|QKoJ=e%Y6oFVCs85C+n&nmLN_lrr{fadeZol>fE@G0so$?=m_L`>
z>O7Q-qr^!_J5#I9I~8&DAro-g5!)THEQLC?nrn~?d2_ZdW?5T!<R1#EOTPjqA<a!o
zVtLND-gG4}@uT;1RU6LLkoT3X<?>>fS<qs4Ke#ZLET>A*83th~awW~r??^|<bfXal
zcv3<~wP`>|rT19PPb2RaC2e+;OMcwXIlj4`Nr}%KFQ5Y%)@uf_>|3XHnGt>TTJSp7
z?AqNGedyC<uMrhN=?-!xe24jv%%3a<W}cdQR7Ob3-#UG?$9#75ifaFAv$O%1pQ)*|
zrKhV4vwdnk4feS)(NJ0vhhq9lL6NcP@m3su!)drOfrep{@A}uzTD&E*d--Zw!pvVa
z=fjBOv7t<-fjcYxY9gjXfqW&yU#*c)?c(c6uVG=+Z1K|_tUgHD4`JQoM+(nzeQ>t$
zr4GA0XMMV$n*d2lmb_MSIQ*OUB=ueX%g;|cWrdJXL%qRg3YuHP_v#1;wT4D_>6}?F
z@Xmb*Sv0HdTCwesu7Z%Hq{+FJ`RF_%cU5+=t2~->uPNdSqaHmzt3OM7iQjl~7j<3%
zgtSMAQ}@_Ty;`eE$b0=`TF~IFrHc{Xh5IbE$Dg1#eFgR#y)j)qO-<K5TXlR0omXt`
zZiP9iom*As2r1+uw^g|yJB*u`K}(8@-S~wx-9Nby&{yuE%n`;4k<`r`NQtSazHZ(u
z>|}N|o2owHVJm?~XuCYUr(h4-JrD6OSfQEQdoEC?|Gsyc^aC`ox3$xQs$$Io7oA!m
z8dSAaX*zv8apu{)A?FX3#h<f1$o(9Zk&Sxu5jiySY`y%9{=$7;D6kiq?N;$)5b%U;
z>!r-B+)73)XvsZH)hCTjo|gkv_UjHUz*FFdm6UXRDHOCJ6YjlS!|Jxr+_3nlm>bar
zVs|`o%jqu2)wcNDeB=sfw&V)vwz_y7YpaK^wjUD}QjmIl88u8ee{*bkZych4MFl3u
z2JLd7oX;6zS-eXM=oT$ExlthGaearQfX#G^LqbmMX8CNvK&8N8|3C#9%9$OmPfldg
z-2CpLpo_!hw+QSi7O3NGxTPx2todMPtJPK>?o$v`r%~K3kMkMLc>{`~ROiny{$j{a
z)G~`yin<UlDgf)}Kq>n?dS92LtUSf175kpi-saJhV9+k#^juIXM+hZHQL0+6>N1%%
zbj_Es_=Ycil(#oumN5r$ufG=hnXvxMGXgpT_LAAy`xclrYmT|TE*~@&JbO;mpBMK-
z#rI~Xcn?Hpz1(Shq8}x%1UOk(j1w)@9>na_&n3Ja=B}LxRtTU1zXCr*S~IEiE@<pU
z_X#{!O7A{aH+vYwk7K8}zCK%t(sLs(SL+*u7K=(j9df(`w1Z^#4R1OsCF7DS1b|RT
zowO%`*e^^tT^3EUPo@;Wb@TqRQ(ZLdUMuphD7`#^u7EBMIXH0yRH0=YKz1GGp^im+
zG@}1t>eKOT^EMU{>r5-gEyljXS{a%rV__^f+XEpZ6Rc4EgNcZDM;T|n;~F~Lcg{bh
zrY^-4uuT+g2F%r0qc^eKA;GIN+F@Z^DX+fHysy1m`hZ60dIDjco~K$=#65SACH}kK
zR%n3A+4k{8SCsYSzB#c5Ee6Et@*vCU((Ylkr%NRxUhZp3UE9X<d0pcz=b3h8g<L$e
zn^NTdP)mmSy5!H+aj^QqPvx3KEG%6)y8A;T+m9MQip+ih5N#QKqiotkL(_G$q;cN%
zAT_eR$!U6+Xqf77(yNDn-Q_k~H7Qw{W#EZiURG920r29SxB8(~N@&H><h8y1f>V~B
zbj-`mS3Hi5)_q5v4&~>jk(qtB^{dMdH2}b@4?u5%#Zg|Q>*Y!wjas*JO=L}eB|4f;
ztuF+|;z@`TdId_mYaFcRx2m?M3;|~znA1rJ{J`gmU3WZDNHtaKNxD4e>(<-sdc&OK
zDu|yJ$FoTXdVF7ju+_83lNh^uV`f&l$hBI_mHonhn|ODhou_5r<6Rn(!G)Fq>4>52
zn1g2ZrUxB2)tV-VE=(PLx3rQkWi~U~A}WKBgwIi|or;zMq)%@p>hhvnu}pBECyA*x
z6~lPT@*1h|K5xWst?3hur>+OXG+nA8t@$FjPV$h^qQKmmEc;C%3Uhu|p)y`pZm$pP
zDPQ*epeaS71;`=!tdbm#t%OuiugZh?_W32jEiS178XZ^*Lj^XbOw3m+4Q|;>4_JSh
zN)mFV<0^5FppAHXyB*zuf-=EnsbMYgmWG{%@}RokOV=T6)HE)2T<^_Lm`tdm5K_F>
zp?10Du6#og!&Z+3FB>Wjd4414jqCPZ>VO9<8)GVY@9wrR^j|eTa}Lw$fi3SW>`fRx
zh(iqx1mm%5#RynWEiQg6kU_(trGgx{UQ&9L!(NpO(bcXxzf@oLfRryx88U>bW;@&a
zxtpp_tE;KOe2$Z<CiDR~KvfE>k9XZt1s*wdnymX(cGsF53h_J7LZ8`e79u3WHxTm~
zpCfd!2-I3pJvr)T27Jl_RDo?)R$MIO=S)Tzp*#0fSvGmjeQfTz?bgXw4)DI-n)8BI
zQZ+&r{xC@WJKX!%xp;UIf?RWMMWC@Q`d$!>IuV-(a82P3^R%)&nmlt82>Ze*84T7$
zzK%^Q!0O?=6nShZR7OJlW;=NJDw1ggxLT{DM&-b#ytds{V)Ncc@tdjRmo{5$2gl_L
z@fcXE#d<en66ZnYY)#%g5l#uk)I!g)J?4c>l(*d6ZaCZ4JkXr75#nYWvpN4H_F<^W
z-JPvyexDq46{O6F<N0ppyuf*{$;s2jtUBQ?G2N*Wn@>N#D)|&v!h5=j+m;_V=3ul%
zXZ}?mX_|JZXsmXd2@P{AmZA%Gryp-|u+lUmO>5am-r`QuXFFrst({u}<k)@S2x)lv
zK~CEgWO?Slyy8U0$!tMJIDEgXG+}*;8E3mJylK&U<#2l!B__cMHq@Zeaen0q2?z8-
zXKSBbqIrLC?6I-N!KE%|B!Mss2Lt!1OR?43J$!P78<4Nb5>WUHbjwRiOL>GjiVWFW
zn8Mfq@wY^FZj{$@P329VHej#_sL)rm>yCp|gx$0!v+_zj@|lR`q-^rmMTkl^@6(%_
zp5e7(6r_!H?~ar3U}uf59?1t(=_=|gr{4j6W?|jzdE<!I%_PwZOPDaNoG`7z{hVM=
zrxz&@LpfXba=(0?T3$Ur{U&?JHOMCJ@zKT`6rM7RDSn~t5q@qSf9Vi@VFBRnu)EWq
zWt;DH$Uv63Mv@|XGJrPNr)YY5DckRt7_&pGfpNq-eKNyN8FC>BmYRWYw=n~o_%ql(
zN2uBxaF!3J?~E4kC>ib|r=RZXb2Q{Fd6rxWe(RQ152=d16)+B4r}%h0n^sn7cW_p@
zL@*1X62`XGI<p@scb1iC<cq&@6|{}B@?x05Z*nu+YQ-V})t*bUsP<ZVQ*OEGEZ1y+
zp{LSIRY{+ESBxee9uFbsxik4{X#5d5_!aO~B)|v%{fD-)`kmQElvXloUV#=t0T0WW
z{PLdjIp8s8t+;vgNa3vp7|@pSuYv_SyET(ljtTo4MZHTNs15J`{VyjzLb7n$C}#ek
z>EZykH7APHYpgHMF$af8Uiao~qPmR}vQa-WVxf(?TZwbM$vc6+***eKQtOT<6%H{@
zi*WDT!2;(=UtY_Ky5XF6`$V2#TA0YwkE(cO%(<8)(hg*GFzGZJo+XdSZy8cZQiVyg
zivtqS5u%V0I*v^Zs(pn${Vfh7x8ui+1XKxz88qcC^B-m<921HcNh`kD=7gTPz(LFJ
z;@L>f_QSBJPum9zfOo^_^kDFK3p3SFahBz>RGd*hdIdJd_@=ieGT-;HF}TW;`5?Qu
zrqqre1p<q|l#Dz)2wM!wBtfedC9kE}O9SF`)+S-f^z01!-^d$K1(*&)-EFry$~3RW
zA#iADsO8u>uqDz|_w1RBg<wkPez=+@5_c=De3Nqm;qd;;<OXLhF0Os}Xx;;sugDbt
zUYBq+L#i=C^+X%h!y;tJYCO$yPK>4)ZskvcP_|FMT1`wXm%)xrgjr)sy|*t4=&~&}
zRX1<OJ-hsaM%P{T_vJ7TdyQrUfmm`>^FO!G>UO633~>wFym)L{fEF49rdA|AB6D-&
zb!$p%d_{V{gXui87kbewjK-1B-<H2-iK>4CM|h#SR(?BIwCAM$T3&?p?WZ*VdB=ZP
z=rIFC{aO?73=x-z<CCCZ>w&hBGpoFb2h8{9PIRm%Ihf^|2_DZ|b<V|B;|%w<91d7B
z$G`6!04&neWwzn1sc%fc*Z*ke04-7gQH}Sps_cAQ)fEcyE+xiLt}f?iwi<aS@2v}c
z;Mj_7_vrW}wy3co4EmAwDny+lNB2m8#_z7jGc-L#K{|oDwJ)s8&BToZo!h86qv30G
z>YtG^)e~z=C3vkO1{zTu_&E+%`tv%tI?B#qgqNJ$?A4##FoO6XJjiPy=PVBlE_5w5
zi>ZG@8ss~v@K82dRZ-!rZB{;9S5jgRuJ!<%H4F=vdFYPX2$h{PMXb-ANb%-;5Uakk
z?#`8~vedIYR4_DgIv5=t%`{w7;og_{uyeU9s)*0R_TJwunv_C(XKBfBtm~^*yFugP
zQl=eJz|{VS*>{t|Di6@Y9#TUYPp!+(qqZX+rVd8T$xV8DDH1bdi@I!Uxi?3EoAWGP
zs01nx!kIdK?R&$(;!gp2CxiH*V+<tKovjTk6g1vrGQ$Dhwr(^S0{O>=IxULRs|$=b
z<jI9Wk|BK7HUrhu%QVrn{~4_Q1CISaf8v9LSQ<r2+pPI{leK6a!Cr1vD;lG6`kzYi
z+LhHY`0Ggte25rgM7_MYl7*L$%Cx%4VI*>_1@q*v%UFGawff8~z_`s@jDc*Ve_^M6
zvFvU55GH|IRs(8i6}YT&D#?0<Zgxha7uCHIiw<hDaCr-Ya_iF2OfNm{SnY8vlPyH1
z&CR;M$@%idlK$g_e~*=a570jkreFio|Juiz#;q^j*i9iT&&c<MUT&qyodq4`27ie!
z@>JD9shw^4UVv^xYIj~8wC9NSHe^gD!fK<<wvnRh!n}QfG8l)uI2&D_IpJ=+CY!5t
zW8;t+#w`$%FKu5*uF8nz&aO@ufOjyLZMCLgOl1KG=h?-3>Bd+>3)-n5@p}q4AzhBl
z(Y)JPVz)cU5u+;zJw9!Ww|9ke)PtH?dE>{>tU^BeRU3IychwQk9W<&qT|;We^9j!z
zz1ihi9Ez+CC;%rNrHd`z=4nWe3tZKv^dXcYmmP1|&mzN;UyQ!nqTijWg3c9Mj+7~$
z=s5f^NoU1JWIhPnC$17RC%Q7Lq;F}cWcIXT*^4TREaMr-UL_wK;-w{L@xtl_azr}k
z-vjvXs1uxq9;z(b$gq8P+<dYUQ(7b%Yek9cO`YtFAKNs>eH7C3(sgyzSpYjRIT9*C
zV#sI*+XZUJJ1`bZxKlk;R(7DvGj}tVPHs$lHbJWST#!XicV86Xxfk~ow8lBO&F&H&
z5xc36)Lf#7P-mQXiZ9b^&I}%6G_ow6y%EnR5FSug*A5Y|dopk)n)w{OiXd&h#(*Cy
zw&imX*6MV)xn^vtap3E9BJC<<A?rRaokw+|Wv-V})4O3M^4^!O)3?Jk4U~t=q^H?t
z7e*%X<%cPhHx+uC>uOiS@{I<s>3r=#0Tf4i!!$-E)RxbNCSMk^rE%(AbDaeD=#G=p
zh;99BQf}%vH?*vv5IJ7cTH^Td^?t)rsce`=`dX$sxwC`KKznk?!kk%{C@rG=OaW48
zY7{vT>9G8zDy5sLw>j0@9(fSg%?GK6X#bp*om(pNNRitdbGpV><oR@A<``XO>c#oA
zqZ_YI0*0u&d0u8lML&kDC^w_V{&O>@<C*YOAC_uvmf}(_6_?R923tt9jK)aG_Ej~~
z4-!}c4>rD;8%3#5p1Wb3?N($p#Py!5)i(M{B;G{U95sd}HTI6KKf|8-%*$`{w>bV=
zTBesuWCY;eK)YiT6GoM@nrwWhqtx5ClB(uOS9>xG1`Jy$2~T=_E7~IVa&c#&aJ<yj
zlmA%&I7F|3qRNAjq-dBgiF=^L23@iJ8M5a1@lz+`?qp9*O<<rt)kiJNMqdc|)Pd}l
z_yIqs--@RZ(bRTOUrny1P~!(>2&e*<NxT$C9G>G|3CdE$gXEx5<~g>1+d4f&vmG)s
z&szVRF#g+!xyPU|)P02|?yHlNX><*L9pxu`rI{vonzz@y<A%Pn>N}q`vZ#|;xX%?9
zc4_pV5Ihdi>#TdTd;gLS2m$faGoQlz!P4WWJA2Ws7ZV3Ni(H=Qa4VI)z+=h<yPF5H
zru1IujL2c?JWnX!;Cx`0v#Bvb>GzBcgw1^79C`AMfFh<;Sw<F}Vn-9S+iY&@9&tLW
zMGWm@*e=Q2{4G8Gh9pjKY1e^5)$5F+J91Lv{V{uu6jHTFErDk?MEqyjZf_Yr@G=Yu
z6XsSfhZeRehcpusaU3kL>U>iXaX0Us!?tKD#4)naAk@^TW6gdJRaa+0uYiTB3^Uy@
z<z~V(jt&>Y44J3|2cBN&DD(#FDC9k{K1n#NC%rEc^3Cl0$}pZ$TK(A4;;gsxvW0QV
zSPu@?eT5#-C}sPGV1@A%$D+E|1loVfK7IzbzauD%)CxzKn6@(m23)bh=F)jAJZDn9
z&^EyyEQ!tCw^A&&((XXO-ku!2ImDfp?(0G@$_Du=Du<2_6=DHYGg$x*$aR7E#|(Q7
z^VICM6f$xPyUn}VTGW_z_J>cZAIhD89*0l@{EY?fjVsgcPAkLi!+m+J7Q1H_YCXe)
zcAditb2uXu5DCpQ{o}@umw0Ec(-hqNDna0CS2>QTu@;P0;ljk%9Z%8!F6a8aQztSa
z(SJ(Pk#p%d_)6xVbxDtLNH4Y5Hz|Z0E$&`2$8gb|tcC6Q!o{?CIHUdyV}r-(C9g%o
zz9_V^_5_>x9%S?8<AKur40{cAP3#!%*3b6lBav#Bny?o8@fUea@2O3qQm7a1pgUx2
zl2$GZaZO&jRhXLR_2pQkl^?vn96I%~(3m?J11R|J>4g2EH5m<Pkuo2iOYvaTl4`!#
zH{$!uqyiNENBX;1^{~qGji;)sQ3!*6CpiAbH8X<9^r=ZYx&3q;#KNS7qX~6}gATNr
z^^rPhULTLn#h<h?E@|6po!Xb56j<J}eXOgTUcckv<Ar}z!+NkSR4u}wbPKKryGMzi
z&E1dB=Oer%BBuI-Sp%pPR6$V-uRc(BC8(*2WqAL_W_|;66ofzogMF;6LI63V5sALY
zc1ulsz&>d^gVNaAa+W^l>ux?TJ&WQPr(kVQm%fkeu*OX(GXbk+wVC-Em*95;?(2#8
z$o*EmpFFW01)zBamX4-0OFBlN&$J4zePZ}zQHs7%?f)U|{*6uka54oZ5W#RCE049J
zL4Xj4UZZ@bK3?bNo~wf5UcF>TSwWOsiy?ciOU~WyWN4j3Li_QsQ3zP#kJ>eMz_ARk
zSrd&Yb;jmn+EzTkn88t~0wrfhRs*_(K7faXO1AV<0tIZDr?xvOsTJ6Se-yBPto@HZ
zoRxsZxH-EB_{?4ARY!x)1M8Sa7JCSQ;t2oQJc=dO<l3p7#XV=D^MGZKn_Dhh(E^X~
zUe^bpZSWkI_i?T<BpII9-{tR{g5$43Kd5s^@UBPEOm+Ut$%c>~MPNu>Eisqcw(Vqo
zS@7GaGZBIq1(@8+*W4&FW+H=wSWdENHBZLQ7)>uEdZ(g*#|t6|Wz1=EAdmT+Cwwcn
z=5n6j%1Z<7rnt63UhwR(J2Pt424^bkwRci*1tSx{W9{rxD>GK-u%KF>H4=>i1!z<u
z!moBE@+46Cv0%sVq08S|OK1&PjEA$UyXTv#ZcCcEIY*~QDt-Q|fmSyjzdO9Sj0~_T
zvY3YTnD8+Dt&m)GIHln=ir{Dnc8$GTIdqgeA)+h}lq1*)owf#D8<^x}Fip9cnf9ep
z<P+0DO!gY=$vtE|+b5p_Ojr@axUWFW(UshQ(#K(h9GSb3DJs-bv7to{mq>Uop<!g!
zbDB=K%&~7;*jh4jzX5YoaKakNm%1+x#ylHY(}M}SaYw6|4f7FPE^36w0}OT80|{pi
zBYlM~>-^>6S0IjXg5XX)U>^wJd}8u(75(TxvgDs(afJkuX=D_c9B1R&=%Hg<Ngm&A
zhgI@qT2>pLi%G&X&Mac2*G`u;YiQ2qf>}b9<U%O&Ye2BN?c<S|o!Gv#^`K3`CJ(qt
z_gO%I_qH$8HEi}?kQWzQ7&+cV!Ap059KW`=?`4jfyfmJu9?qN;IY$itfIPjK9u3fs
zvrYpZtm%mmcl!9vr@kMbbn{`38`~W(Pzd`YeRln5)>-Psuth`|tv0N@uar?Ef&}j>
z1dPq^&(`aty`{{^2+9n72pCHb!SmrglgRTfXyaMLC4Y+XSVcQg92gmul0vo8_Hs<H
zSI8(JH<5rfK?*TePOq3~SJg_;2J2V#Ik4>J7ACIh+E7ZQ@G?&WC|>W*TkH$wgAMk?
zI9zns5te1(Ex!e320AFXabOy>jS1UcD?Kx-^4>(WxKM}=Ky(!1L4h@UK33x#(|=fd
zFGx=|Q3*L@VYi0HkHp=@MprE(m6ioj_KuU8o1|mWZwW89%GVxz!>7Qks=^J8uW!XV
z)&Wu{T&l2<WNAyRI`@NykPb<9By>8~a_H1-y5I$cABmG4g%55FVD9=f`K8Xz@Z!!}
zAVlK9bkp=B>b%fG-+<kMADHenAy+a+Gy-o9K}euXcY$P@867WW%SQ>FPC0pO#6;vs
zOK5NG6g3<NYcap~;<nJl&#m5%4C*coe<Tz_-gg@$db&XtFg1^%6L{6fv1O-)5(qhI
z=nK(=OVLENwZ^JxOFCAdLGmEV_COk*?n@c2Z<*qVkujJGRmonoaRNy$ZpzC2PCo~|
z4m(4RxB9gbd9u@lg6y7}sEdPHd7tJi(p*l>L!6bMdS>@lGh-{>>S>C*zVq6^HbOtu
z0~JMY{sdUr&YUTR6q_I)Zu)bGOo*HA(}6QO0=2}3-yr(G<FEv@eHC$YQb=}dU0<i=
zie|H@LIOCa;N^n*XN|LU@V>Q2XGt?ZtbXqD21k5lwbQjb@4->%H#RC<fwCA!BT%M$
z8=aCXlNH2$6*Nen2+=9&sjifkB5!xw`;_W@`Q#~|B!c)77$A6@oNjN7Iu2TT-v-s3
z3N~-_(SZ#8PBe-5c2+(G)WE5xk7L~PZ)}+2iBI9&<84b4nXfF?CG){1clOhcrzlrJ
z1owbVzLiN~rx#BwO+9MEXc4wiX}+0)gCPAApcxq*hqu?-4Mi51kCwXjb6Ponkj{t|
zG#ch;*mc!XD7FJacCyauy8KOZfor(wb`Xuz05n~n1Ojn$W4Sep(*9*NcO)qZa!mQW
zW8HGYuO+k1!?!}^Ua(Vu$(vL(*4IS4)Ays7YW?0I#J>O*DS&JjdYa`7gEzA*O^luC
zy^5h)<~9XLNT+spNqU4fRFY~-4IdU&c<#zKcBSRgt`NP(2Z98=@bboi?>-6d#(g+X
zGFes-z6x^2dtRbr?PS&N`Syh6k{JjpZHh`ds5os^;1GctXkYNQuzMY`+8(JI7%?)x
z0{H|8y_{ezi%clr;v}<se}HqND6Bh|{wjo{#Z4GME~SU;s>9Xy+@OK@B6lpW$N{5b
zDv9!C(6?-&@@W2|!Xz$(+v*cv{Ka2^N70H6c-|tjOy49Xy11A9yexlXFM<_f0z~tj
z>5nnD+|pmHtMDKwV+%pz<eX?RlZ%?#>BQ+*EGzgR8%LYJJ(Fs+w$iyD|D~7oLdMBs
zP}Dh)f&40H6MtpE-pYu?VJ}?VCz_<Rx9<rOy_k0Un#9Zfh6JCq@LsIZ;vBf0Lo)FI
z^0Bs%dP1nI{M8p2Bte9&DCNKM_TFZzP&DM$j5H`3n9}8m;g?KQ(@5AkY4p77;&3}C
z;s!9pvTn7nJKZJC_z)F`HWs{{`v&NVsef$zD7rne)A#-gqyukcqLfXb*397f&YrB!
z?wXHCbZVG#q6w-}2AEn>F6tZSC6Drp+Cl`C0to05lV%-c)`1cv?<b~l7sHLuji&t7
z4|F5yMz`mfy1O5+JJ_y|SvB9C7g2Mtm1y7v=$jl~dbb^#E0(}Lc%lqIOu9nM>X>8{
z5%9OWxX%l=M)S2-WoN&BuERFvVVVvW-2_HYqEIO%3u~D(CZX&2ON?|MLqAI*MDoB;
zL>%bOfjP~$FlfMLna8F#%|H;=M33mkGd;-cITo6yW8bAYG@Yjl_SDJb<nE@>6a)w)
zsc=q`5AA7f68C9+i+hfZ8I@AXi62G)K_@gaRwIj7wN^1xcanCpSgfIlG0)lY4U>2U
zmLuoph~+V9XnP|kZ((*{1VJZIa0cDEvo#Yd7x&dlEjqPzV@Ah;B?N3P>wbKYRENqB
zov`&0cXJ!{+sQi7noQE&ka-1m#yH5{COf+Q?dDOSKbFttx93yMZSi0<wCvGhPHxm%
zL4k_1(tN$ciJ;U`ybd{f_y{Puq=yqw!@ksj#{op`UFj+&=J*#ubMZ#8QO<J%ek}XP
z!AN&}Jb2H#J;r&&%tym_;`js5nR1AIL*oFjqt%C0M(650y2SPZO4GN+u>{x;vdNxz
ztakW=(@?X`HA&;$594>#)o<livj83B^-zHuQm??P=#)uI#qIdZ7ln2lp|=r(GOxfw
z0L+-B&3)!*AsM_iW{_sAJtEgALiP-Z^KMJmhJ8FH9VeF*>R<yY`7?_#r4@nx0DEXd
zv&&h(3)EyOH%N&|16G8&fhc<82E_NKQ;oCg^TN~M@~+WB&4R58-)zMvNT>^1<dPwW
zlClPMlC3=&v6n0N;Hf?$a3?hSm4Vyc$Y9G!cc;8?%ym-P0lP9RFKZ(RGS=v(Wn<G5
zt?@P5-kfThvzI-DrIp=b!1hOQA(ZW24+Wv<RY!uX%qV86E_SPR_bE1{6CZ<&pO+r3
z<}Z}gaWbk8R~J6kCHB4o_(Zv>&A?gmOU1_GhIJ)U1WCW17_j@L*;H0@m&U*%igP7W
z5ws`d5DR<vhEbn$_JhpnlivF&6vVmJ^O5;U`iBX5ws6Yy_U6i<{W5DYFd6eWfhT+l
z=6yP*`IhAA20i}sqSeKnj<K|c!r=tpbsF9IhO`D#Vy#?u<V8F<{f(kLS(cRD&)e`T
z@JAH>^ufJ%soi5O+xugG=|QT%Tl`coNMd8R!s>ujYXa{aTVC@P=?fcoh&Wz2u>DQ^
zHcGA}EvQCgqUQa^9_!oRZ1c*e7~o^K?pN<BAAw?C47ap+$$P83{MexWra?WqL1mZ)
z-F&oLUn>R#IFKihgBJ4XnY7Bp@3i4BYWbrhi1Z>kD1k*A?-Go+T&PU(mrkGBuan6S
zuo@9pjectf)vTd-&qHfifhorcxt^vSz>-$V!RD#bE934FOtLsI=m=A;kI%)VBL=@c
zF&=z01i;k!H}8T7Atl|Njcb@J-h;$i@7BxB+}N@^a^?%I_oJ)*C{O`w@?~UQe#d++
z1iW4GZjKn~u+{Hy^xwIL>Rw`!&Q<D{YX{!z13~dmUiFFm;d{Vr$G7358#Ps1aDqcJ
z{AQ|ji+}|R)U1L3M%6HJS#aNYidCLrZw_>&*n!~=g5e6Pc+d69lkUze5!?03r_5p&
zzy<*7MlD&(mSKDmT8(lGQ5D<7Yyg%R`|M=nMxE@UyQgk78lrQ0<^OTu#Ft1RlxUJ}
zZ89O{3m4KRb9=+X=lZVH7QJ!YW#;HHMKL0#YPQYKX}thj`^<==1<uXM$*>ggJQKx`
z=990$MG*AdlmKi6^g!!;2V&o;Vo@uMIr|EPb)WNBY(Qtm8SlEN15n$uc;?z|gg_p=
zxN8O%PlJ+d)YNeWPN52+4z1|V8W1^{d>S-5ma-Iy5xq1OwOv1ls3V7#0W41}x^BBm
z$f~|2d<fb2@w7?`1*YgP2ZLatQA#>FEqmDe#JTsycHc!`fM>41Zts_?e-+l>UIWCJ
zzP|jnfd}>mjbX;z=V|w_O?iL)?Ttuq$jOG7?0)WK!J7@)|8<@JXHyEY0KPdin8{bv
z=+yN^3z78qmEe2xQ2u(^lm@w^W^VVlz*_CIHw@G6G-`i)nqR;EpDy+S9GGSbJ++JI
z95(W8=U7hWOW&{ZJT3x<P^!pSL|=vpYt7#H-JktCg+R<vfy@ar_N7^+p27Tk^U;m&
zW};4_UsoQ92Ak=X7f^rXTY0@}OEx{`FpMZm!x@PNOifLZZqFW$#N(Cr#H3ipm6pLi
z+$6u8aF98OvP>Pw2~tc9;R)uiyZfKrygmQ}IQhH*GXKjpzZRBM<0BtrV(`Bh@tGKT
z%(rhcu>u}j*>&oRzi#OtZ2_`L*w<$T%keE-hO_xnfX&1DgSc<%gWvq3F9mmy<X%iW
z{!&~trQ{3u=B&v7n@T0cD9~NG!r?9X=%Lbovanx%`X?(R*MdiNY4%?0)E*-N3a^cB
z<2zkX;?3XQ|8b2%2}ts}N=ydd0bKogFRs1C|DT2auP0cL1s7FUKUor1h)!+)7Uj?L
zmQ#@J@~aq7t^0mqVl+~SOu5^h7qV7XYV_bA9gTk^`#-Hm;W<F(G1g-uRwB9{Xxpi&
zjk{B%Ozz_;{8|Odl$>cEv*1Eew_2DW7*r~LfuL*@37rLS_F4aZ?uO9Yn9~@>E^<>K
z^gsFte;y6|7DKP6)@ZKUl)n1$BBGqlE(GwkIHc(*ojO6-%$IH^roa>mcP&?4-hl7Y
z1`6uFgpozk5gue`3+4RW%5I<0e^JH{t^6+^RyYBX^ZVE8UXza*-3c5uJAD%%X8mg%
zC7=$<$!I5WoIQ5tV8~`({67u$e^@#+5jZ#%FWq=d{~$Kmi2F&$kn2DYx7jw^(N8M}
zC$b}l1f4lN9jI0ep_F7O5>ZB!;DPML+xs*3{mnK*0BP_=+NNStzqpk)_EP+`<c=5Q
zXzL~%Tt1qt9$WMJ8a@k%GPVvm@U`l~m_kQ+Ct$QOtDjR4HVMst`-{q@@Y=j~K1<>g
zy48i4JjFl|zJgDH$nspswnQW9!szI$po+PsyNa3FNVx{e$S*x<h|SI8$%Rx!ImwU@
zMT?Quv4}c1y(mE3IwD&gm8{#duZbIuzu1-&T{#T!&;13x5@nD>mQ776J!Tqqu^AZ#
zKq&~L6AuAkeb%REkrPTcKrBosa<rCXZhQ9^;Vx1D?S~~9YME-Qv$N5~-~vWO9X<0Q
zaCG{}MNZj|!0l*xf$IZViRx58lks#~2&G;vpYvSx2Zl`AW<>d!k{4j-1Z@7}Dou_C
zWW3s<((3@Kx>`)*9{n<fmRJN3`wHD}eZlzh)7vfKJsn@lfBM0H9l-t-4@#+kLLV@5
zZ#Vv#;|{i^bWz!7if<}L?>l~OK%o>Qi5EUNq%UN3QSRIuVUCOUJLBfR7|p*f`OA*e
z(E*6ddKq1&xlkO1snu&R&{<kLSn|v1ZmI%|LQgJEz+=ktgFx==FJJzh1^)dt#nOPv
z9SW3t9u^srX}Cg{2Frk6s1l!Y20TCdE37!9QBs_IS$MzSOP80eFa2-N@$Z-Uzf478
z6K?4+rWya!ylO|Yy2JIM>EP7a^T)p&jy41wGQpm%wb^b+#%X99EY68I23rl({v&xh
zI#4;`ckW2WsBK9B)uE2`#{@qGFZFb$)`CLjc&!O}U7DR=5>e2OGlB)EyzE-W9ml8#
z`>)*li#G!)WKooK&rN<#?JM9wD4nZaH8!7U-R4;yeBDGC`a>uG@B<hZXo)f2bKt|W
zU(IIIRVy;*5V_+Lu6tqg%kt=;-M7OSlIGpG9|Pj5%5UxkU;Azn|8V&$5H|qiBe9$5
z-?7<?&!bVK)X5GM=c0Eg-}|uw#0@Pw6KysfgNFH7u@>a}YZm$AqW|SXq7pnk4vV7w
zD3IDk;%*S)effA`rc{yImRk0EiU8@sdCaZHt}~Z{w!gjQ_Z4B)FmNIfD7v3Ov;x!`
z$!&X}QaEbmj2xay`F&xa{zdpWWQY>*^$AXB-8flO@K0;}#WDUnSNoF}cfcdtUSwKG
zH~eOW?G)qFUaFYHrk}rh^C7vU$el~r#=?6H4|T8E8^EN*|03c4|F;q;;WB@3OuJ3_
zQnXQTtjl}7pEFi@Dy$8D%h{hN1QIJs$-P712B*4`d5H(FfBfMeegJv_0HK)LSFstD
zkNdh42TZagNHepc{q*IwJTNz9R1u3ww4=F4qc5Ur|KLP7_^A^r=(A+fx=GH%%(&Gx
zpGiu?tDJuw*%hOhk}HaXIxqn`4xJh#MVPMX)!-~9ep)WiqND4pA@%6O^gz&%oeTTV
zXinZI2RUvqHperOi{`Z6A{)Qmpo6&e<$(2lWBU6US3;uvX-YqjYI$?oF?HY27yDry
z+6*Ac!fI+oj@gFYK*o`dXDUBc^1s;kPeaB@H-Se~m(vegXP=8&{LDKIECGO#-<9C`
z1z>=&)rN-3%C3Utz!>P61E~(rPcQt3f>5RbGPOZjXXBeB#Kc?UL*a2@-UsfVgM%4=
zZqh5rOV2~Ltjh}{Ahzl?Fk$cy*ZlGI@moNZU|gv5)^qK#IF#)W?y`yS)KyJnQYojO
zYiu(IdGW)B5BXO=%x^u1Zt;&Is$B<uRj&pgxXAL}kE6C)%@#c^D>aWM#plf*2w`RY
zeoXKnPzc;xe<CX3v2k#2VU|%jM<DaVH2&d-#5eGo98TZt2|=VFY-Oy9C$E-Xc0hia
zr_kt!n2;_c;BY5ma{+X_r(YuO_+S`te6zZ^`xuO@<}HzdpN+@u3&v&KAwGCN&@S-~
zQpm!fjO<<#(DSM)yVIe3|GQ*<pu_+80U`p&J0qQ4envq0-ofVPtJ}J|je-wIWUhSI
zKV%L6afqu4$01oIyds&E=R|<0;tbHa2k89UA_Bf%&~Ud<<@$#hm2*bfMu|O=7eC6e
z5cHdmLl)FNQg`tS=jvLT!EdVnzc}L0g3fPS#2ypidbMKB48HZnw=oj}{V_cwy^B+6
zuig2<Xn}e6IgHqnC>fivxA;r)EFZk65Y_DhC;Gve)qML$7u1L@BQrCMRVE5qpPe6g
zmaYk*lw6|XnoR)|@0sC3pd|O(NBbKQC6)tLe`|Q$2pRAA;@sy*bN@7zc!1NKz7MD2
z2keI?0##Y3!*sO!bx!apL9|pFDufB204{qmc}x3SJocw6`=WTvk^{${Ka>mUz<=D3
zD$^Frmtj2RAEpxP`!^^0eaVCdzVfzQ<WOOsd<f|@Aj>ygUmDVCZSmfo{vx{hL&6Ha
zAW8Nb!`>~j%RL=v4t?{%!Y}2s|Iy$6^4r8QAlPS@-p=cHN$WNf;E73%@ZrqKc?#11
z?pYm5<j#U0C3|8yb*8pEimw=d|HD6)LOQ%G$>3l@P|5|d>?Yz!q3WKB^ghVXF?ak?
zIRG02BPKSY!<^^eRA`u=Yu&lsjxdUK1yTpZoSi%|_1rrUIu411sFZeP<7kJh=uZUS
zORvCS1Ene{@$Gmv=Z0#2DLz?*wc2pVcZ31UucT6{ssBFZl8{Crn7hVy<vXZ65G9w)
z9dli2V~MMs_GgM?t7bz~)dUsCC;>pcO<P-~x9Bo4LZ_DflqagusqXZ}kMzGY8YvNA
z#-TYXdQ6d7z@g_pRd5jHKi2vWOc~Ju)bAMCb#;*3>g3?7AU9QeNkPG^L{^d}*LTPF
z1*%3AvZCc?dtQpvH0{l!Fa3;fAk6WR(BXt<)=VrH2O@33zw^p$eMzfni9eY>g;M{!
z4t(ixh;LsMFlWH3^5i3nQqr#x`~5SY`vo5$uhD_1r=a<TK~{ULs|8zs;9x8$^%{K+
z_u=>T_vnDa8HZ$>o7>ZY37`GjDvXFbzZAUP+aHAy6&ef%ni9pg{g=IiG{e0Ww8S%{
z!~Qy@!efZCB=yP00@}W(M%%-tpSkw`5a<5Id=fd~nTEe}kl1YubspGCE{mC_yYu4#
zPsVxnl<)9oln0ik#%G3?4H-fx-`B*){mXCsBFz7uilpCy6K?&~LDid(&a}WOXGOeR
z=>aQ|C)YXQ0}Swm5<en^1f7(T)>NMF1CQ3S)TQ~X{Ty)`c%TYsKra4Dqe^Z)!1*@-
z(tR#=r{B9H=c)dm<O0kEuVab2M=&Rxjg|XoW~5dktT6<T-XS3HPgH&|MO#pw2~qXO
zFEn43e`(tYUF6Ew{)^o}K=2edjWgr?SPXwj;KfXm7ouv2fPA~)Hc*82(c%O{CT7q|
zoSWE#sNW8JqLK{yO9Obwz~kf$Lnz%$`n^sZRbINA{H$;OQxgOpuK;ueTc6wnZQ@08
zC(kaJMPHZ-I9XMJc;EeH|3NJ9f)=-|u>F@NWb6fo6yCq&^55Ir5A6H?L8%nL;4s0u
zOosaqX#?(fq8MV$xYX4?b}6;Yztn#lgOVaDAtUGf+uPP2=M=xrpa;Ld@XqCU1?;)t
zdJ)#l@S#8&Q)oa5Z@oFIeK;*+aCk&E#S1!xJM~2Esn$IaK~(I`i55|QrOed?k0_d$
z#I03hIi7riq;sf^y%uAoo76_BWV`?AS}Ef_GgdwKq~(c-x?4qcL$`P>dpnmYX?oqa
zU{D*4glXG70Z;e82~*k-B&0jcIMwE8B$C>lrGtcWDo{h*lD)_C0^gfd)mI^L=kK(p
zi*=wXQ}ybKi1T{#9l@&*@9AW#huW;j784#rtAnzWqnWUbFWCype@eYR5kqfDL;4oe
z#pJXawE2?s;KiWCKZ2U?8i&Jr{SGQBCrNzKQ#wfb31pB)ZhPG#FH`Hw_reu#EEt1T
zK!Ko)#dV;cSjcXwr^bhPS?KrG{<mIXaF4vtirQrf?>QI}c-cxNt$8-a!(%YWMNpu3
zRl0!d&!t$2K+^#$8Za24yhkDOozgrM4+Ls~wG0HpTpk);Lt2v6?i?D7up2$MR*vJg
zj2ZjO^`096Ch%UYu4J`AqPDp2?Fgc7Hv~GryZAUpydH+R^K3ZftF;`{ngiBq7(8dq
zY(^>{{;&aUGbHwXu$bG+ligNz&%<a97Ju3KI|v#r2dqGw92w~j)<OZTZ~X?^nfbZf
z<@C1u98YrAy4sa~-%+(uslQCo4Ye4jF^yxrF=lwX)>Y`J2!TZxB+aZ>;KpHkeG&*R
zZn^b%<^cWLP<o}?qZj?x|F8ifCP-IC+v)y$s`GX3+&DLj;^+ZP#2I2TC18i4a*8ZS
znrUF=MWC5hBb;TC`%Y17*{<<V41uWPwY9anjKX$OKhSK)e5PVTSWO);13p5)43?X?
z$yo(JYFqBmc8#*_(_0qDko0Jx_zvYi(*SQ7^7+NC^36zQ3s{@?<n-ObwJ=2WlK@wR
zhyspKgNus8n_UmQA@`ZAgrlvJy3NQ#(!V&M1VLNdYTI$wr`YnX<aILVrF8rozv9V1
zq@(pXa5#D``t%;;A?`?_`=GvtiW>b|*TW3SyMMZZ6|#*hiz_jYmcYr*%uqTz;`k40
zwKagnmJ>ZPAYG<>-PRNQ%Lj*Z1W!sbGChp4**N9@0NrS?fn4eII!~VG0okj+gz~3%
z{IjELlK^2TppkApxLyF21fADyalG!?ZQ|s)xc&UkOn+cq{cCi+mPS?U#wE-u;i|;9
zBeDN%$$tqV7;y84%$Q4Se?!K)P9o$q)2tPcDT`ZT^9?pg26r<*2zV*i<1iNpgM0hB
zeL1)OCb0g?&;N~xtds!JOHi=`7C4HNUYT3AIOWQ`O`m5>;j`S+5<T>%iP_Qx-A?FS
zo33<jT)1Xi5m<u29k6BtmhW@8@J&`53CUu_V`*(;E_$fLl_66Y#AFPCOWIqBoCEr-
zDeV?h$9SFwbVX5g%o|ZR%E0Brng@?UVdDl!sBkJ$vn^Dyest*ogaZHc7al1E@qgsP
zkSNq*mM>a?ZTxc2tLHwd<WyZQMrG?WBMu3XT9m<wv*q#CwP-gW02FpZb8Cy&E2lHw
zeeh1y`(vD;o*Z3IPQQ8bJe{B0Vx-0tM_LIVfgA9C0&IXaJ~|rBub|$XzsI9<Dr1!)
zIV+2PEk{=-$sX?XynbMVGc|FKvnG6MA=^d1zzx1G)-nWI1X$Y}(1#(a5kPV=Sgaa{
zih8ydzo9VfxhvaGG^nKfkrPC+KyIlYtLvXNf0~-(&#PJaaLJ_w8}mV+XCmE0y5m9!
zm`4bR$6TYP)aLY!@^1Xl%v`Y9Q$;`!MEnppI*yA>>N$B~hcCK;ff}$oh)axL)xSam
zAUXfq6RfKs+xrUk8r!L`tqR`CV=xBa*=Xs9pvH=%QhGr729o4jCK!{0G4JHfYj+A*
zy81tb|IHH+|0|P$sNMtu<cG-cdtmKjq*61r5|amOzJ4yA7!S@Mv+LkyxGX#%U2YHP
zg#`<Eh1@qQB@*sj1lav81^s;{3E9N~_CUIvEe%4_^r_Doe^$2%cBp%yyvZZyc~=n=
z&dDIj7#n6+y*(>vX|_&RP9<t>4`#&?7%5)WC!zxy`S$S%;Z@Kzs=fxy{qRl0oVd)b
zh<j@_Ipz4*Gr{oDBJDmT_W1X0RWCn5hsmn6_X-{|$P2=822t{0wFN+%gQpmHsI4yJ
z4h?^g)=|zimNRwnnmlC39Lq00A6g<s*MY#13~uRE-3|QOTgPX7(lo@->%36U%f1qY
zKqr}}1;Q7Jyhbk)YF9;lQetBUA+tG!)^<j^bn?s5SWA;@0A_S0fyIRgpLkBMFHTyj
zvhDW1##qJ~??<3ai0}ZBh}tN0P=d8Nk+$59H^h29v#QcRtadW&7pA+68`-5|fRMz+
z$@kwMA@3HA_PTOwuvTysi4~n9(pRp6rX>Ifg+8?Y00<d_V#kNS=lsig-bNkcJx^-(
zA(cUEj3+*VXgEaIAYIEvd$v)#@~vcbdh3Ix4mF(DHB1rn1cARy%|I2{3*(y?@NrjL
z3aj~}BDr1*6L+!PyzG5IJL(&{z}$$q1o{00)7f;Wa?24FeydrP!DOzbpPb_ZM9Ky7
z5bnRIX^Ge2<^Y}vNAa|2KB$dgPB+o<d9toHGRtq6ADe-MdgDFV0A`tYY@=skNoC1z
zG1`wJ3{QSVpVqP?G{zvoX<t2s37la_;FasQW|9f94(4pypA2X;jlFx}oU#kVeO6YG
zhPX$C@;>-zP0L046x&Rl|74<GDec#>>3{6nM6Q7K>R#Tu0@MY{F(%IH*YK;(?KOu7
zqr09fK3RU$Txjk1RTxNA+T3b43$omAj}NXdigv;}9W_g~E+UrQw1^RhE^s7O#RIe@
z9Rv>}^|TmgUyh2V-N>tKZ7bCVO8Ody)+?Ua_tQeNc|aVvZCz>OXDr1mFR;ag$y{75
zPa<-kJ6_gCWg8=s837T76OhpxhkI-AJ>g(X6zC4_2@aH0RzBCj%}O4#YzkCS@_aY`
z^Z`T#nf<7QMNZ3jd%b<7S+AvO;XQ*5G;CR*5C!+Y3VeTeF_8qYrFo|{7a;1_UqL<l
zI+Va`;dvy#ZFB0E?xylA_KB)tF?K3h26}@0H7oICO%Vgqcj+{034vv06Ds3XTe}`A
zT7sLQWUh0BQ-_XuelC}%-%DSJ(I*E14iT5)!+p5tXip(wd6RExeA60@iPyY62>Y68
zp^x!NE$Rt_8qp-(Yn<gx+UustT^Z?4neG|Rg*Dh0MaTp~qYZ2c8&H~fb%zc~t*X=F
z-fgn%*UAXYzX2(Wivl=h6r0Qp_oNvvRFWHyCWd32B)%PFJh3+suPy21t#BubSARlN
zqELNV7eJ7w!zXG$-6yuR-+kd3eO{!xYgV$Z$&#@7sW$4XE49mcUfs!E8h26h*{;NH
z1adMsj#2>uFIO+;kK|vMN<sPLy@u&j@v>)HxV#}#Z|*a@%@Sl9(&^Wy;idUapQD`3
zl*>3>DvId?x;s7xZ*Ct|%L;QB`oDj`>tJ2Q^CbBE$gz$chH@!n=f0y^;=0N8X{^R<
zc(C^<f6`QK_#kOGd~9S%rlewE^J^A#tmxJ~-ofjnm4v~tu?a!*X~CTE8XwL3N5wD3
z?5n18$1^u8p=*)cx&D`O7-Vh*>#Z0yN0oY+nrHBug}LrIV$AAC;MS$y@!Y-s=(ON^
SHvSdhpQM=Fqg)Z~*Z&__mg<85

literal 0
HcmV?d00001


From 295654d26b431060768ac34a4debe96fc36b0824 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Tue, 10 Oct 2023 12:38:56 +0200
Subject: [PATCH 113/116] revert changes

---
 pandora_console/extensions/quick_shell.php | 375 ++++++++++-----------
 1 file changed, 180 insertions(+), 195 deletions(-)

diff --git a/pandora_console/extensions/quick_shell.php b/pandora_console/extensions/quick_shell.php
index cd35c15e8e..391263f1fd 100644
--- a/pandora_console/extensions/quick_shell.php
+++ b/pandora_console/extensions/quick_shell.php
@@ -79,6 +79,8 @@ function quickShell()
         return;
     }
 
+    $method = get_parameter('method', null);
+
     $setup_anchor = html_print_anchor(
         [
             'href'    => 'index.php?sec=gsetup&sec2=godmode/setup/setup&section=quickshell',
@@ -87,15 +89,6 @@ function quickShell()
         true
     );
 
-    $fetch_result = get_parameter('fetch-result', null);
-
-    if (isset($fetch_result) === true && $fetch_result === '0') {
-        ui_print_error_message(__('Connection error. Please check your settings at %s', $setup_anchor));
-        return;
-    }
-
-    $method = get_parameter('method', null);
-
     if ((bool) $config['gotty_ssh_enabled'] === false
         && (bool) $config['gotty_telnet_enabled'] === false
     ) {
@@ -125,9 +118,6 @@ function quickShell()
     $connectionURL = buildConnectionURL($method);
     $gotty_addr = $connectionURL.$args;
 
-    $connectionURLSSH = buildConnectionURL('ssh');
-    $connectionURLTelnet = buildConnectionURL('telnet');
-
     // Username. Retrieve from form.
     if (empty($username) === true) {
         // No username provided, ask for it.
@@ -170,7 +160,6 @@ function quickShell()
                         'label'     => __('Username'),
                         'arguments' => [
                             'type'     => 'text',
-                            'id'       => 'username',
                             'name'     => 'username',
                             'required' => true,
                         ],
@@ -202,7 +191,7 @@ function quickShell()
         html_print_action_buttons(
             html_print_submit_button(
                 __('Connect'),
-                'submit-btn',
+                'submit',
                 false,
                 [
                     'icon' => 'cog',
@@ -211,57 +200,30 @@ function quickShell()
                 true
             )
         );
-
-        echo "<script>
-            $(document).ready(function() {            
-                // Intercept form submission.
-                var connectForm = document.getElementById('connect_form');
-                connectForm.addEventListener('submit', function (event) {
-                    var username = $('#text-username').val();
-                    var port = $('#text-port').val();
-                    var method = $('#method').val();
-
-                    var connectionURL = '';
-                    if (method == 'ssh') {
-                        connectionURL = '".$connectionURLSSH."'+'&arg=".$agent_address."&arg='+port+'&arg='+username;
-                    } else if (method == 'telnet') {
-                        connectionURL = '&arg=".$agent_address."&arg='+port;
-                    }
-
-                    // Prevent the default form submission behavior.
-                    event.preventDefault();
-
-                    var xhr = new XMLHttpRequest();
-
-                    var input = document.createElement('input');
-                    input.type = 'hidden';
-                    input.name = 'fetch-result';
-
-                    // Handle response.
-                    xhr.onreadystatechange = function () {
-                        if (xhr.readyState === 4) {
-                            input.value = (xhr.status === 200) ? 1 : 0;
-                            connectForm.appendChild(input);
-                            connectForm.submit();
-                        }
-                    };
-            
-                    // Open and send the request.
-                    try {
-                        xhr.open('GET', connectionURL, true);
-                    } catch (error) {
-                        input.value = 0;
-                        connectForm.appendChild(input);
-                        connectForm.submit();
-                    }
-                    xhr.send();
-                });
-            });
-        </script>";
-
         return;
     }
 
+    // Check gotty connection before trying to load iframe.
+    $ch = curl_init($gotty_addr);
+    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+    // Maximum time for the entire request.
+    curl_setopt($ch, CURLOPT_TIMEOUT, 3);
+    // Maximum time to establish a connection.
+    curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 2);
+    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
+    curl_setopt($ch, CURLOPT_MAXREDIRS, 10);
+
+    $response = curl_exec($ch);
+    $responseCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    $finalUrl = curl_getinfo($ch, CURLINFO_EFFECTIVE_URL);
+
+    curl_close($ch);
+
+    if ($responseCode !== 200) {
+        ui_print_error_message(__('Connection error. Please check your settings at %s', $setup_anchor));
+        exit;
+    }
+
     ?>
     <style>#terminal {
         width: 100%;
@@ -318,6 +280,7 @@ function quickShellSettings()
     ui_require_css_file('discovery');
 
     // Gotty settings. Internal communication (WS).
+
     if (isset($config['gotty_ssh_enabled']) === false) {
         config_update_value('gotty_ssh_enabled', 1);
     }
@@ -548,151 +511,41 @@ function quickShellSettings()
     html_print_input_hidden('update_config', 1);
 
     echo '</fieldset>';
+}
 
-    echo '<script>';
 
-    echo 'var server_addr = "'.$_SERVER['SERVER_ADDR'].'";';
-    echo "
-        function isValidIP(ip) {
-            // Regular expression for IPv4 address pattern
-            const ipv4Pattern = /^(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/;
-            
-            return ipv4Pattern.test(ip);
-        }
+if (is_ajax() === true) {
+    $method = (string) get_parameter('method', '');
 
-        function checkAddressReachability(method, callback) {
-            var connectionURL = (method == 'ssh') ? '".buildConnectionURL('ssh')."' : '".buildConnectionURL('telnet')."';
+    if (empty($method) === false) {
+        $address = buildConnectionURL($method);
 
-            if (isValidIP('".$gotty_addr."') === false) {
-                callback(false);
-            }
+        $ch = curl_init($address);
 
-            var xhr = new XMLHttpRequest();
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 
-            // Initialize the request with a 'HEAD' method, which is faster for checking
-            xhr.open('HEAD', connectionURL, false); // Synchronous request
+        // Maximum time for the entire request.
+        curl_setopt($ch, CURLOPT_TIMEOUT, 2);
 
-            try {
-                // Send the request
-                xhr.send();
-        
-                // Check if the request was successful (status code 200)
-                if (xhr.status === 200) {
-                    callback(true);
-                } else {
-                    callback(false);
-                }
-            } catch (error) {
-                // An error occurred.
-                callback(false);
-            }
-        }";
+        // Maximum time to establish a connection.
+        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 1);
 
-    $handle_test_telnet = "var handleTestTelnet = function (event) {
-        var gotty_addr = $('input#text-gotty_addr').val();
-        var gotty_port = $('input#text-gotty_port').val();
-        var gotty_telnet_use_ssl = $('input#checkbox-gotty_telnet_use_ssl').is(':checked');
-    
-        if (gotty_addr === '') {
-            url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
+        curl_exec($ch);
+        $response_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        curl_close($ch);
+
+        if ($response_code === 200) {
+            $result = ['status' => 'success'];
         } else {
-            url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
+            $result = ['status' => 'error'];
         }
-    
-        var showLoadingImage = function () {
-            $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon cog rotation secondary mini');
-        }
-    
-        var showSuccessImage = function () {
-            $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon tick secondary mini');
-        }
-    
-        var showFailureImage = function () {
-            $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon fail secondary mini');
-        }
-    
-        var hideMessage = function () {
-            $('span#test-gotty-message-telnet').hide();
-        }
-        var showMessage = function () {
-            $('span#test-gotty-message-telnet').show();
-        }
-        var changeTestMessage = function (message) {
-            $('span#test-gotty-message-telnet').text(message);
-        }
-    
-        var errorMessage = '".__('Unable to connect.')."';
-    
-        hideMessage();
-        showLoadingImage();
-    
-        checkAddressReachability('telnet', function(isReachable) {
-            if (isReachable) {
-                showSuccessImage();
-                hideMessage();
-            } else {
-                showFailureImage();
-                changeTestMessage(errorMessage);
-                showMessage();
-            }
-        });
-    
-    };";
 
-    $handle_test_ssh = "var handleTestSSH = function (event) {
-        var gotty_addr = $('input#text-gotty_addr').val();
-        var gotty_port = $('input#text-gotty_port').val();
-        var gotty_ssh_use_ssl = $('input#checkbox-gotty_ssh_use_ssl').is(':checked');
-    
-        if (gotty_addr === '') {
-            url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
-        } else {
-            url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
-        }
-    
-        var showLoadingImage = function () {
-            $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon cog rotation secondary mini');
-        }
-    
-        var showSuccessImage = function () {
-            $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon tick secondary mini');
-        }
-    
-        var showFailureImage = function () {
-            $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon fail secondary mini');
-        }
-    
-        var hideMessage = function () {
-            $('span#test-gotty-message-ssh').hide();
-        }
-        var showMessage = function () {
-            $('span#test-gotty-message-ssh').show();
-        }
-        var changeTestMessage = function (message) {
-            $('span#test-gotty-message-ssh').text(message);
-        }
-    
-        var errorMessage = '".__('Unable to connect.')."';
-    
-    
-        hideMessage();
-        showLoadingImage();
-    
-        checkAddressReachability('ssh', function(isReachable) {
-            if (isReachable) {
-                showSuccessImage();
-                hideMessage();
-            } else {
-                showFailureImage();
-                changeTestMessage(errorMessage);
-                showMessage();
-            }
-        });
-    };";
+        echo json_encode($result);
+        return;
+    }
 
-    echo $handle_test_ssh;
-    echo $handle_test_telnet;
-    echo '</script>';
+    $result = ['status' => 'error'];
+    return;
 }
 
 // This extension is useful only if the agent has associated IP.
@@ -720,4 +573,136 @@ if (empty($agent_id) === false
     }
 }
 
+echo '<script>';
+
+echo 'var server_addr = "'.$_SERVER['SERVER_ADDR'].'";';
+echo "function checkAddressReachability(method, callback) {
+    $.ajax({
+        url: 'ajax.php',
+        data: {
+            page: 'extensions/quick_shell',
+            method
+        },
+        type: 'GET',
+        async: false,
+        dataType: 'json',
+        success: function (data) {
+            if (data.status === 'success') {
+                callback(true);
+            } else {
+                callback(false);
+            }
+        },
+        error: function () {
+            callback(false);
+        }
+    });
+}";
+
+$handle_test_telnet = "var handleTestTelnet = function (event) {
+    var gotty_addr = $('input#text-gotty_addr').val();
+    var gotty_port = $('input#text-gotty_port').val();
+    var gotty_telnet_use_ssl = $('input#checkbox-gotty_telnet_use_ssl').is(':checked');
+
+    if (gotty_addr === '') {
+        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
+    } else {
+        url = (gotty_telnet_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
+    }
+
+    var showLoadingImage = function () {
+        $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon cog rotation secondary mini');
+    }
+
+    var showSuccessImage = function () {
+        $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon tick secondary mini');
+    }
+
+    var showFailureImage = function () {
+        $('#button-test-gotty-telnet').children('div').attr('class', 'subIcon fail secondary mini');
+    }
+
+    var hideMessage = function () {
+        $('span#test-gotty-message-telnet').hide();
+    }
+    var showMessage = function () {
+        $('span#test-gotty-message-telnet').show();
+    }
+    var changeTestMessage = function (message) {
+        $('span#test-gotty-message-telnet').text(message);
+    }
+
+    var errorMessage = '".__('Unable to connect.')."';
+
+    hideMessage();
+    showLoadingImage();
+
+    checkAddressReachability('telnet', function(isReachable) {
+        if (isReachable) {
+            showSuccessImage();
+            hideMessage();
+        } else {
+            showFailureImage();
+            changeTestMessage(errorMessage);
+            showMessage();
+        }
+    });
+
+};";
+
+$handle_test_ssh = "var handleTestSSH = function (event) {
+    var gotty_addr = $('input#text-gotty_addr').val();
+    var gotty_port = $('input#text-gotty_port').val();
+    var gotty_ssh_use_ssl = $('input#checkbox-gotty_ssh_use_ssl').is(':checked');
+
+    if (gotty_addr === '') {
+        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + server_addr + ':' + gotty_port;    
+    } else {
+        url = (gotty_ssh_use_ssl ? 'https://' : 'http://') + gotty_addr + ':' + gotty_port;
+    }
+
+    var showLoadingImage = function () {
+        $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon cog rotation secondary mini');
+    }
+
+    var showSuccessImage = function () {
+        $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon tick secondary mini');
+    }
+
+    var showFailureImage = function () {
+        $('#button-test-gotty-ssh').children('div').attr('class', 'subIcon fail secondary mini');
+    }
+
+    var hideMessage = function () {
+        $('span#test-gotty-message-ssh').hide();
+    }
+    var showMessage = function () {
+        $('span#test-gotty-message-ssh').show();
+    }
+    var changeTestMessage = function (message) {
+        $('span#test-gotty-message-ssh').text(message);
+    }
+
+    var errorMessage = '".__('Unable to connect.')."';
+
+
+    hideMessage();
+    showLoadingImage();
+
+    checkAddressReachability('ssh', function(isReachable) {
+        if (isReachable) {
+            showSuccessImage();
+            hideMessage();
+        } else {
+            showFailureImage();
+            changeTestMessage(errorMessage);
+            showMessage();
+        }
+    });
+};";
+
+echo $handle_test_ssh;
+echo $handle_test_telnet;
+echo '</script>';
+
 extensions_add_godmode_function('quickShellSettings');

From 8cc34d2199e6836fb33e158331cb96630cf2c3e3 Mon Sep 17 00:00:00 2001
From: "alejandro.campos@artica.es" <alejandro.campos@artica.es>
Date: Tue, 10 Oct 2023 13:24:27 +0200
Subject: [PATCH 114/116] visual change

---
 pandora_console/extensions/quick_shell.php | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/pandora_console/extensions/quick_shell.php b/pandora_console/extensions/quick_shell.php
index 391263f1fd..ac3d1d22c5 100644
--- a/pandora_console/extensions/quick_shell.php
+++ b/pandora_console/extensions/quick_shell.php
@@ -79,6 +79,7 @@ function quickShell()
         return;
     }
 
+    $form_sent = get_parameter('form-sent', false);
     $method = get_parameter('method', null);
 
     $setup_anchor = html_print_anchor(
@@ -119,7 +120,7 @@ function quickShell()
     $gotty_addr = $connectionURL.$args;
 
     // Username. Retrieve from form.
-    if (empty($username) === true) {
+    if ($form_sent === false) {
         // No username provided, ask for it.
         $wiz = new Wizard();
 
@@ -144,6 +145,9 @@ function quickShell()
                 p=23;
                 wizard.querySelector('ul > li').classList.remove('visible');
                 wizard.querySelector('ul > li').classList.add('invisible_important');
+                $('#text-username').prop('required', false);
+            } else {
+                $('#text-username').prop('required', true);
             }
             $('#text-port').val(p);";
 
@@ -182,6 +186,13 @@ function quickShell()
                             'script' => $method_script,
                         ],
                     ],
+                    [
+                        'arguments' => [
+                            'type'  => 'hidden',
+                            'name'  => 'form-sent',
+                            'value' => true,
+                        ],
+                    ]
                 ],
             ],
             false,
@@ -238,6 +249,7 @@ function quickShell()
         height:100%;
         position: relative!important;
         flex-grow: 1;
+        border: 0px;
       }
     </style>
 

From f22fd106599782c9d88eb723e7bfbe3e9fea183c Mon Sep 17 00:00:00 2001
From: miguel angel rasteu <miguelangel.rasteu@pandorafms.com>
Date: Tue, 10 Oct 2023 13:44:57 +0200
Subject: [PATCH 115/116] #12205 Fix url

---
 pandora_console/godmode/setup/setup_ehorus.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pandora_console/godmode/setup/setup_ehorus.php b/pandora_console/godmode/setup/setup_ehorus.php
index 3382a08113..6f4879a4ac 100644
--- a/pandora_console/godmode/setup/setup_ehorus.php
+++ b/pandora_console/godmode/setup/setup_ehorus.php
@@ -154,7 +154,7 @@ $table_remote->data['ehorus_test'] = $row;
 
 // Print.
 echo '<div class="center pdd_b_10px mrgn_btn_20px white_box max_floating_element_size">';
-echo '<a target="_blank" rel="noopener noreferrer" href="http://ehorus.com">';
+echo '<a target="_blank" rel="noopener noreferrer" href="https://pandorafms.com/es/control-remoto/">';
 if ($config['style'] === 'pandora_black' || is_metaconsole() === true) {
     html_print_image(
         'include/ehorus/images/Pandora RC blanco@2x.png',
@@ -174,8 +174,8 @@ echo '<br />';
 echo '<div class="ehorus_title">';
 echo __('Remote Management System');
 echo '</div>';
-echo '<a target="_blank" rel="noopener noreferrer" href="https://ehorus.com">';
-echo 'https://ehorus.com';
+echo '<a target="_blank" rel="noopener noreferrer" href="https://pandorafms.com/es/control-remoto/">';
+echo 'https://pandorafms.com/es/control-remoto/';
 echo '</a>';
 echo '</div>';
 

From f4487dee5adf4a247fe706f0ddb747951a68f50f Mon Sep 17 00:00:00 2001
From: artica <artica.devel@gmail.com>
Date: Wed, 11 Oct 2023 01:00:28 +0200
Subject: [PATCH 116/116] Auto-updated build strings.

---
 pandora_agents/unix/DEBIAN/control                | 2 +-
 pandora_agents/unix/DEBIAN/make_deb_package.sh    | 2 +-
 pandora_agents/unix/pandora_agent                 | 2 +-
 pandora_agents/unix/pandora_agent.redhat.spec     | 2 +-
 pandora_agents/unix/pandora_agent.redhat_bin.spec | 2 +-
 pandora_agents/unix/pandora_agent.spec            | 2 +-
 pandora_agents/unix/pandora_agent_installer       | 2 +-
 pandora_agents/win32/installer/pandora.mpi        | 2 +-
 pandora_agents/win32/pandora.cc                   | 2 +-
 pandora_agents/win32/versioninfo.rc               | 2 +-
 pandora_console/DEBIAN/control                    | 2 +-
 pandora_console/DEBIAN/make_deb_package.sh        | 2 +-
 pandora_console/include/config_process.php        | 2 +-
 pandora_console/install.php                       | 2 +-
 pandora_console/pandora_console.redhat.spec       | 2 +-
 pandora_console/pandora_console.rhel7.spec        | 2 +-
 pandora_console/pandora_console.spec              | 2 +-
 pandora_server/DEBIAN/control                     | 2 +-
 pandora_server/DEBIAN/make_deb_package.sh         | 2 +-
 pandora_server/lib/PandoraFMS/Config.pm           | 2 +-
 pandora_server/lib/PandoraFMS/PluginTools.pm      | 2 +-
 pandora_server/pandora_server.redhat.spec         | 2 +-
 pandora_server/pandora_server.spec                | 2 +-
 pandora_server/pandora_server_installer           | 2 +-
 pandora_server/util/pandora_db.pl                 | 2 +-
 pandora_server/util/pandora_manage.pl             | 2 +-
 26 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/pandora_agents/unix/DEBIAN/control b/pandora_agents/unix/DEBIAN/control
index 81808209d5..1e5d17a506 100644
--- a/pandora_agents/unix/DEBIAN/control
+++ b/pandora_agents/unix/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-agent-unix
-Version: 7.0NG.773.3-231010
+Version: 7.0NG.773.3-231011
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_agents/unix/DEBIAN/make_deb_package.sh b/pandora_agents/unix/DEBIAN/make_deb_package.sh
index 7c985eda83..6d71887328 100644
--- a/pandora_agents/unix/DEBIAN/make_deb_package.sh
+++ b/pandora_agents/unix/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231010"
+pandora_version="7.0NG.773.3-231011"
 
 echo "Test if you has the tools for to make the packages."
 whereis dpkg-deb | cut -d":" -f2 | grep dpkg-deb > /dev/null
diff --git a/pandora_agents/unix/pandora_agent b/pandora_agents/unix/pandora_agent
index c19a2cec78..6712d85707 100755
--- a/pandora_agents/unix/pandora_agent
+++ b/pandora_agents/unix/pandora_agent
@@ -1031,7 +1031,7 @@ my $Sem = undef;
 my $ThreadSem = undef;
 
 use constant AGENT_VERSION => '7.0NG.773.3';
-use constant AGENT_BUILD => '231010';
+use constant AGENT_BUILD => '231011';
 
 # Agent log default file size maximum and instances
 use constant DEFAULT_MAX_LOG_SIZE => 600000;
diff --git a/pandora_agents/unix/pandora_agent.redhat.spec b/pandora_agents/unix/pandora_agent.redhat.spec
index 06c801ffd1..2651e76f6b 100644
--- a/pandora_agents/unix/pandora_agent.redhat.spec
+++ b/pandora_agents/unix/pandora_agent.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231010
+%define release     231011
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.redhat_bin.spec b/pandora_agents/unix/pandora_agent.redhat_bin.spec
index 991cbe0877..934a423b89 100644
--- a/pandora_agents/unix/pandora_agent.redhat_bin.spec
+++ b/pandora_agents/unix/pandora_agent.redhat_bin.spec
@@ -5,7 +5,7 @@
 %define name        pandorafms_agent_linux_bin
 %define source_name pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231010
+%define release     231011
 
 Summary:            Pandora FMS Linux agent, binary version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent.spec b/pandora_agents/unix/pandora_agent.spec
index 777b6fc28c..0fdd28b09f 100644
--- a/pandora_agents/unix/pandora_agent.spec
+++ b/pandora_agents/unix/pandora_agent.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_agent_linux
 %define version     7.0NG.773.3
-%define release     231010
+%define release     231011
 
 Summary:            Pandora FMS Linux agent, PERL version
 Name:               %{name}
diff --git a/pandora_agents/unix/pandora_agent_installer b/pandora_agents/unix/pandora_agent_installer
index 9a2d9ad307..ae5854da47 100755
--- a/pandora_agents/unix/pandora_agent_installer
+++ b/pandora_agents/unix/pandora_agent_installer
@@ -10,7 +10,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231010"
+PI_BUILD="231011"
 OS_NAME=`uname -s`
 
 FORCE=0
diff --git a/pandora_agents/win32/installer/pandora.mpi b/pandora_agents/win32/installer/pandora.mpi
index e3920cfc95..a3543a5145 100644
--- a/pandora_agents/win32/installer/pandora.mpi
+++ b/pandora_agents/win32/installer/pandora.mpi
@@ -186,7 +186,7 @@ UpgradeApplicationID
 {}
 
 Version
-{231010}
+{231011}
 
 ViewReadme
 {Yes}
diff --git a/pandora_agents/win32/pandora.cc b/pandora_agents/win32/pandora.cc
index bb12ef0f09..23a04f98fa 100644
--- a/pandora_agents/win32/pandora.cc
+++ b/pandora_agents/win32/pandora.cc
@@ -30,7 +30,7 @@ using namespace Pandora;
 using namespace Pandora_Strutils;
 
 #define PATH_SIZE    _MAX_PATH+1
-#define PANDORA_VERSION ("7.0NG.773.3 Build 231010")
+#define PANDORA_VERSION ("7.0NG.773.3 Build 231011")
 
 string pandora_path;
 string pandora_dir;
diff --git a/pandora_agents/win32/versioninfo.rc b/pandora_agents/win32/versioninfo.rc
index 260c1b3308..d4cd471aed 100644
--- a/pandora_agents/win32/versioninfo.rc
+++ b/pandora_agents/win32/versioninfo.rc
@@ -11,7 +11,7 @@ BEGIN
       VALUE "LegalCopyright", "Pandora FMS"
       VALUE "OriginalFilename", "PandoraAgent.exe"
       VALUE "ProductName", "Pandora FMS Windows Agent"
-      VALUE "ProductVersion", "(7.0NG.773.3(Build 231010))"
+      VALUE "ProductVersion", "(7.0NG.773.3(Build 231011))"
       VALUE "FileVersion", "1.0.0.0"
     END
   END
diff --git a/pandora_console/DEBIAN/control b/pandora_console/DEBIAN/control
index 6a74fdef53..4c917cbe13 100644
--- a/pandora_console/DEBIAN/control
+++ b/pandora_console/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-console
-Version: 7.0NG.773.3-231010
+Version: 7.0NG.773.3-231011
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_console/DEBIAN/make_deb_package.sh b/pandora_console/DEBIAN/make_deb_package.sh
index 1eb6207148..c540258156 100644
--- a/pandora_console/DEBIAN/make_deb_package.sh
+++ b/pandora_console/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231010"
+pandora_version="7.0NG.773.3-231011"
 
 package_pear=0
 package_pandora=1
diff --git a/pandora_console/include/config_process.php b/pandora_console/include/config_process.php
index 467b9356c5..256b6399ee 100644
--- a/pandora_console/include/config_process.php
+++ b/pandora_console/include/config_process.php
@@ -20,7 +20,7 @@
 /**
  * Pandora build version and version
  */
-$build_version = 'PC231010';
+$build_version = 'PC231011';
 $pandora_version = 'v7.0NG.773.3';
 
 // Do not overwrite default timezone set if defined.
diff --git a/pandora_console/install.php b/pandora_console/install.php
index ef32094185..9ab3666405 100644
--- a/pandora_console/install.php
+++ b/pandora_console/install.php
@@ -131,7 +131,7 @@
         <div style='padding-bottom: 50px'>
             <?php
             $version = '7.0NG.773.3';
-            $build = '231010';
+            $build = '231011';
             $banner = "v$version Build $build";
             error_reporting(0);
 
diff --git a/pandora_console/pandora_console.redhat.spec b/pandora_console/pandora_console.redhat.spec
index e1d0fb1004..bf360c321e 100644
--- a/pandora_console/pandora_console.redhat.spec
+++ b/pandora_console/pandora_console.redhat.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231010
+%define release     231011
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.rhel7.spec b/pandora_console/pandora_console.rhel7.spec
index 337cd1269b..c78f5b2532 100644
--- a/pandora_console/pandora_console.rhel7.spec
+++ b/pandora_console/pandora_console.rhel7.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231010
+%define release     231011
 
 # User and Group under which Apache is running
 %define httpd_name  httpd
diff --git a/pandora_console/pandora_console.spec b/pandora_console/pandora_console.spec
index f5abec9d74..8389808c10 100644
--- a/pandora_console/pandora_console.spec
+++ b/pandora_console/pandora_console.spec
@@ -3,7 +3,7 @@
 #
 %define name        pandorafms_console
 %define version     7.0NG.773.3
-%define release     231010
+%define release     231011
 %define httpd_name      httpd
 # User and Group under which Apache is running
 %define httpd_name  apache2
diff --git a/pandora_server/DEBIAN/control b/pandora_server/DEBIAN/control
index 611291d7a8..3b708ba708 100644
--- a/pandora_server/DEBIAN/control
+++ b/pandora_server/DEBIAN/control
@@ -1,5 +1,5 @@
 package: pandorafms-server
-Version: 7.0NG.773.3-231010
+Version: 7.0NG.773.3-231011
 Architecture: all
 Priority: optional
 Section: admin
diff --git a/pandora_server/DEBIAN/make_deb_package.sh b/pandora_server/DEBIAN/make_deb_package.sh
index 32c8f21a50..62955a603f 100644
--- a/pandora_server/DEBIAN/make_deb_package.sh
+++ b/pandora_server/DEBIAN/make_deb_package.sh
@@ -14,7 +14,7 @@
 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 # GNU General Public License for more details.
 
-pandora_version="7.0NG.773.3-231010"
+pandora_version="7.0NG.773.3-231011"
 
 package_cpan=0
 package_pandora=1
diff --git a/pandora_server/lib/PandoraFMS/Config.pm b/pandora_server/lib/PandoraFMS/Config.pm
index fed3a729d1..983c907cb0 100644
--- a/pandora_server/lib/PandoraFMS/Config.pm
+++ b/pandora_server/lib/PandoraFMS/Config.pm
@@ -46,7 +46,7 @@ our @EXPORT = qw(
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231010";
+my $pandora_build = "231011";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 # Setup hash
diff --git a/pandora_server/lib/PandoraFMS/PluginTools.pm b/pandora_server/lib/PandoraFMS/PluginTools.pm
index b7c99eac51..09dd84336c 100644
--- a/pandora_server/lib/PandoraFMS/PluginTools.pm
+++ b/pandora_server/lib/PandoraFMS/PluginTools.pm
@@ -34,7 +34,7 @@ our @ISA = qw(Exporter);
 
 # version: Defines actual version of Pandora Server for this module only
 my $pandora_version = "7.0NG.773.3";
-my $pandora_build = "231010";
+my $pandora_build = "231011";
 our $VERSION = $pandora_version." ".$pandora_build;
 
 our %EXPORT_TAGS = ( 'all' => [ qw() ] );
diff --git a/pandora_server/pandora_server.redhat.spec b/pandora_server/pandora_server.redhat.spec
index 715a34aa34..f47d0d9558 100644
--- a/pandora_server/pandora_server.redhat.spec
+++ b/pandora_server/pandora_server.redhat.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231010
+%define release     231011
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server.spec b/pandora_server/pandora_server.spec
index f058ecacf8..b683278589 100644
--- a/pandora_server/pandora_server.spec
+++ b/pandora_server/pandora_server.spec
@@ -4,7 +4,7 @@
 %global __os_install_post %{nil}
 %define name        pandorafms_server
 %define version     7.0NG.773.3
-%define release     231010
+%define release     231011
 
 Summary:            Pandora FMS Server
 Name:               %{name}
diff --git a/pandora_server/pandora_server_installer b/pandora_server/pandora_server_installer
index f0d1ef8097..c6a7657f13 100755
--- a/pandora_server/pandora_server_installer
+++ b/pandora_server/pandora_server_installer
@@ -9,7 +9,7 @@
 # **********************************************************************
 
 PI_VERSION="7.0NG.773.3"
-PI_BUILD="231010"
+PI_BUILD="231011"
 
 MODE=$1
 if [ $# -gt 1 ]; then
diff --git a/pandora_server/util/pandora_db.pl b/pandora_server/util/pandora_db.pl
index dc2b07c47b..f9ed7d40c7 100755
--- a/pandora_server/util/pandora_db.pl
+++ b/pandora_server/util/pandora_db.pl
@@ -35,7 +35,7 @@ use PandoraFMS::Config;
 use PandoraFMS::DB;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231010";
+my $version = "7.0NG.773.3 Build 231011";
 
 # Pandora server configuration
 my %conf;
diff --git a/pandora_server/util/pandora_manage.pl b/pandora_server/util/pandora_manage.pl
index 586345bcd3..9fe363175c 100755
--- a/pandora_server/util/pandora_manage.pl
+++ b/pandora_server/util/pandora_manage.pl
@@ -36,7 +36,7 @@ use Encode::Locale;
 Encode::Locale::decode_argv;
 
 # version: define current version
-my $version = "7.0NG.773.3 Build 231010";
+my $version = "7.0NG.773.3 Build 231011";
 
 # save program name for logging
 my $progname = basename($0);